search

refraction-networking / utls

Fork of the Go standard TLS library, providing low-level access to the ClientHello for mimicry purposes.
BSD 3-Clause "New" or "Revised" License
1.62k stars 235 forks source link

X25519Kyber768 Support? #234

Closed VeNoMouS closed 1 year ago

VeNoMouS commented 1 year ago

Google has announced plans to add support for quantum-resistant encryption algorithms in its Chrome browser, starting with version 116.

"Chrome will begin supporting X25519Kyber768 for establishing symmetric secrets in TLS, starting in Chrome 116, and available behind a flag in Chrome 115," Devon O'Brien said in a post published Thursday.

Kyber was chosen by the U.S. Department of Commerce's National Institute of Standards and Technology (NIST) as the candidate for general encryption in a bid to tackle future cyber attacks posed by the advent of quantum computing. Kyber-768 is roughly the security equivalent of AES-192.

The encryption algorithm has already been adopted by Cloudflare, Amazon Web Services, and IBM.

X25519Kyber768 is a hybrid algorithm that combines the output of X25519, an elliptic curve algorithm widely used for key agreement in TLS, and Kyber-768 to create a strong session key to encrypt TLS connections.

VeNoMouS commented 1 year ago

nm see its mentioned in #223

gaukas commented 1 year ago

Actually, do you see this feature being shipped with 116 and enabled by default? I just updated and didn't see it as expected. My Chrome 116 seemed to be using the same ClientHello message(s) from previous versions.