Keyfactor / ejbca-vault-pki-engine

EJBCA PKI Engine and Backend for HashiCorp Vault. Used to issue, sign, and revoke certificates using the EJBCA CA.
Apache License 2.0
6 stars 2 forks source link

Post Quantum Readiness #12

Open m8rmclaren opened 6 months ago

m8rmclaren commented 6 months ago

Creating an issue to begin discussing post-quantum (PQ) readiness for the EJBCA Vault PKI Engine

m8rmclaren commented 6 months ago

This issue is likely relevant to the discussion.

svenska-primekey commented 6 months ago

EJBCA has PQC support today from Bouncy Castle. Applications that use Bouncy Castle can issue test PQC certificates. Once NIST finalizes the standards then EJBCA would support due to having the OID's finalized by NIST. Once Golang has support for PQC it should be trival to add this key type as option to use for enrollment with EJBCA. EJBCA REST integration already supports PQC.