Merge pull request #792 from anhu/mlkem

Replace Kyber 512 with ML-KEM 768.

Author: SparkiDev

.github/workflows/kyber.yml

@@ -1,4 +1,4 @@
-name: Kyber Tests
+name: ML-KEM Tests
 
 on:
   push:
@@ -22,7 +22,7 @@ jobs:
         id: cache-liboqs
         with:
           path: build-dir/
-          key: wolfssh-kyber-liboqs-${{ env.LIBOQS_REF }}-${{ env.OS_REF }}
+          key: wolfssh-mlkem-liboqs-${{ env.LIBOQS_REF }}-${{ env.OS_REF }}
           lookup-only: true
 
       - name: Checkout liboqs
@@ -53,7 +53,7 @@ jobs:
         id: cache-wolfssl
         with:
           path: build-dir/
-          key: wolfssh-kyber-wolfssl-${{ env.WOLFSSL_REF }}-${{ env.OS_REF }}
+          key: wolfssh-mlkem-wolfssl-${{ env.WOLFSSL_REF }}-${{ env.OS_REF }}
           lookup-only: true
 
       - name: Checkout, build, and install wolfssl
@@ -77,14 +77,14 @@ jobs:
         uses: actions/cache@v4
         with:
           path: build-dir/
-          key: wolfssh-kyber-liboqs-${{ env.LIBOQS_REF }}-${{ env.OS_REF }}
+          key: wolfssh-mlkem-liboqs-${{ env.LIBOQS_REF }}-${{ env.OS_REF }}
           fail-on-cache-miss: true
 
       - name: Checking cache for wolfssl
         uses: actions/cache@v4
         with:
           path: build-dir/
-          key: wolfssh-kyber-wolfssl-${{ env.WOLFSSL_REF }}-${{ env.OS_REF }}
+          key: wolfssh-mlkem-wolfssl-${{ env.WOLFSSL_REF }}-${{ env.OS_REF }}
           fail-on-cache-miss: true
 
       - name: Checkout, build, and test wolfssh

README.md

@@ -450,21 +450,21 @@ The wolfSSH client and server will automatically negotiate using Curve25519.
 POST-QUANTUM
 ============
 
-wolfSSH now supports the post-quantum algorithm ML-KEM (also known as Kyber).
-It uses the KYBER512 parameter set and is hybridized with ECDHE over the P-256
-ECC curve.
+wolfSSH now supports the post-quantum algorithm ML-KEM (formerly known as
+Kyber). It uses the ML-KEM-768 parameter set and is hybridized with ECDHE over
+the P-256 ECC curve.
 
 In order to use this key exchange you must build and install wolfSSL on your
 system. Here is an example of an effective configuration:
 
-    $ ./configure --enable-wolfssh --enable-experimental --enable-kyber
+    $ ./configure --enable-wolfssh --enable-mlkem
 
 After that, simply configure and build wolfssh as usual:
 
     $ ./configure
     $ make all
 
-The wolfSSH client and server will automatically negotiate using KYBER512
+The wolfSSH client and server will automatically negotiate using ML-KEM-768
 hybridized with ECDHE over the P-256 ECC curve.
 
     $ ./examples/echoserver/echoserver -f
@@ -487,7 +487,7 @@ The following is sufficient for build and execution:
     $ cd openssh-OQS-OpenSSH-snapshot-2021-08/
     $ ./configure --with-liboqs-dir=/usr/local
     $ make all
-    $ ./ssh -o"KexAlgorithms=ecdh-nistp256-kyber-512r3-sha256[email protected]" \
+    $ ./ssh -o"KexAlgorithms=mlkem768nistp256-sha256" \
       -o"PubkeyAcceptedAlgorithms +ssh-rsa" \
       -o"HostkeyAlgorithms +ssh-rsa" \
       jill@localhost -p 22222