open-quantum-safe / boringssl

Fork of BoringSSL that includes prototype quantum-resistant key exchange and authentication in the TLS handshake based on liboqs
https://openquantumsafe.org/
Other
35 stars 18 forks source link

Automate hybrid strength assignment #77

Open baentsch opened 3 years ago

baentsch commented 3 years ago

Hybrid algorithms' (EC curves/)strengths are assigned dependent on the underlying algorithm's NIST strength. This currently is a manual process in oqs-boringssl (by suitably setting values in oqs_template/generate.yml). In oqs-openssl this is automated and therefore leads to interoperability problems if the manually assigned values in oqs-boringssl don't match the ones in oqs-openssl, e.g., if an algorithm changes its NIST strength.