Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Enable the post-quantum x25519+ML-KEM-768 TLS 1.3 ciphersuite by default #4305

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Enable the post-quantum x25519+ML-KEM-768 TLS 1.3 ciphersuite by default #4305

wants to merge 1 commit into from
+226 −77

Commits on Nov 1, 2024

  1. Enable PQC ciphersuite in TLS 1.3 by default 

    This enables the Cloudflare X25519+Kyber-r3 ciphersuite by default.
It also rearranges the default list, and removes some of the most
expensive FFDHE groups.

Expose which group was used for key exchange in the Session_Summary.

Fix a bug in TLS_Text_Policy; it printed reuse_session_tickets as an
integer rather than a bool. This was caught by the need to update some
of the policy text files.
    @randombit
    randombit committed Nov 1, 2024
    Configuration menu
    Copy the full SHA
    2ea7092 View commit details
    Browse the repository at this point in the history