v0.4.0

oqs-provider 0.4.0

About

The Open Quantum Safe (OQS) project has the goal of developing and prototyping quantum-resistant cryptography. More information on OQS can be found on our website: https://openquantumsafe.org/ and on Github at https://github.com/open-quantum-safe/.

oqs-provider is a standalone prototype OpenSSL 3 provider enabling liboqs-based quantum-safe and hybrid key exchange for TLS 1.3, as well as quantum-safe and hybrid X.509 certificate generation, CMS ond dgst operations.

When deployed, the oqs-provider binary (shared library) thus adds support for quantum-safe cryptographic operations to any standard OpenSSL(v3) installation.

In general, the oqs-provider main branch is meant to be useable in conjunction with the main branch of liboqs and the master branch of OpenSSL.

Further details on building, testing and use can be found in README.md. See in particular limitations on intended use.

Release notes

This is version 0.4.0 of oqs-provider.

Security considerations

This release removes Rainbow level 1 and all variants of SIDH and SIKE due to cryptanalytic breaks of those algorithms. Users are advised to move away from use of those algorithms immediately.

What's New

This release continues from the 0.3.0 release of oqs-provider and is fully tested to be used in conjunction with version 0.7.2 of liboqs.

oqs-provider has been integrated as an external test component for OpenSSL3 testing and will thus remain in line with any possibly required provider API enhancements.

Algorithm updates

• Removal of SIKE/SIDH and Rainbow level I due to cryptographic breaks

Functional updates

• Addition of quantum-safe CMS operations via the OpenSSL interface
• Addition of quantum-safe dgst operations via the OpenSSL interface

Misc updates

• Additional testing
• Integration with and of OpenSSL test harness

---

Full Changelog: 0.3.0...0.4.0.

v0.3.0

0.3.0 - January 2022

About

This is the first official release of oqsprovider, a plugin/shared library making available quantum safe cryptography (QSC) to OpenSSL (3) installations via the provider API.

This project is part of the Open Quantum Safe (OQS) project: More information on OQS can be found on our website: https://openquantumsafe.org/ and on Github at https://github.com/open-quantum-safe/.

Release Notes

The current feature set of oqsprovider comprises

• support of all QSC KEM algorithms contained in liboqs (v.0.7.1) including hybrid classic/QSC algorithm pairs
• integration of all QSC KEM algorithms into TLS 1.3 using the groups interface
• support of all QSC signature algorithms contained in liboqs (v.0.7.1) including hybrid classic/QSC algorithm pairs
• integration for persistent data structures (X.509) of all QSC signature algorithms using the standard OpenSSL toolset

Limitations

• This code is not meant to be used in productive deployments
• Currently, only Linux is supported and only Ubuntu 20/x64 is tested
• Full TLS1.3 support for QSC signatures is missing (see openssl/openssl#10512)