openca / libpki

Easy-to-use high-level library for PKI-enabled applications
Other
50 stars 34 forks source link

Add Support For OQS Provider and OpenSSL 3.x #80

Closed opencrypto closed 1 year ago

opencrypto commented 1 year ago

Currently, support for Quantum-Safe algorithms is provided via the modified (requires patching) OpenSSL-1.1.1 from the OQS project. Since the branch is at the end of life, we need to support OQS via a different mechanism, the OQS provider.

The main drawback of this solution is the inability of providing the modified version of the code (the implementation for OQS sigs) that provides support for hash-n-sign with quantum-safe algorithms.