v6 Feature Support

[falko-strenzke]

This issues lists a number of features of the crypto-refresh / v6 to indicate whether they are supported in the current implementation of the branch cr_pqc. The list is not complete. Checked features are implemented

• [ ] parse signature salt in OPS (salt value in OPS cannot be understood without this)
• [ ] generate signature salt in OPS
• [ ] parse v6 SKESK
• [ ] generate v6 SKESK
• [x] Generate mandatory Direct Key Signature (for v6)
• [X] parse and generate v6 keys
• [X] standalone x25519 and ed25519 algorithms
• [X] parse and generate v6 signatures
• [X] parse and generate PKESKv6 including PQC and X25519 (protocol logic does not yet include the recipients' feature subpacket for SEIPDv2)
• [X] SEIPDv2

PQC-related features

• [ ] Any cominations with Curve448
  • (not implemented, since Curve448 not in Botan)
• [x] Dilithium Hash Binding SHA3-256/SHA3-512

Test coverage of new features

• [ ] src/tests/ffi-enc.cpp
  • [x] test_ffi_decrypt_v6_pkesk_test_vector
  • [x] test_ffi_encrypt_pk_with_v6_key
• [ ] src/tests/ffi-key.cpp
  • [x] test_ffi_v6_sig_subpackets
  • [x] test_ffi_v6_cert_import
  • [x] test_ffi_v6_seckey_import
• [ ] CLI tests
  • missing ...

[falko-strenzke]

@TJ-91 I think the state of some of the points above could be updated now?

[TJ-91]

• I updated Generate mandatory Direct Key Signature (for v6).
• v6 SKESK is still not supported.
• about the signature salt I'm unsure at the moment: We do implement the v6 salt, I'm not sure if there is anything specific to OPS.