Hi MbedTLS team,
I have been following up the MbedTLS roadmap from here - https://mbed-tls.readthedocs.io/en/latest/project/roadmap/ . It talks about Post Quantum Cryptography support in future.
And in the section of Long Term Plans for MbedTLS, I see the note related to PQC as "Regarding post-quantum cryptography (PQC) in particular, we do plan to wait until there are official standards: as of 2023, apart from stateful hash-based signatures, there are too many open questions about selected algorithms (choice of parameters, data formats, hybrid combinations…).
This note seems to be pretty old as it refers to 2023.. So, are there any latest update on the roadmap? Is there any plan to support latest NIST standardized algorithms (ML-DSA, ML-KEM, SLH-DSA) in this year or next year.
Thanks & Regards,
* Nayna
Hi all,
FYI, mlkem-native (https://github.com/pq-code-package/mlkem-native) might be a fit for Mbed TLS. It is a portable, secure and fast C90 implementation of ML-KEM, developed as part of the Post-Quantum Cryptography Alliance (a Linux Foundation project).
mlkem-native comes in a simple “C-only” variant which is close to the ML-KEM reference implementation, but with all C code verified to be memory-safe using CBMC. There are also fast x86_64 and AArch64 ‘backends’ using intrinsics and assembly; the NTT/invNTT of the AArch64 backend are formally verified using HOL-Light. Our focus has so far been on server/desktop/mobile targets, but the C-variant remains compact, and there is no reason one couldn’t write a backend for embedded targets as well.
Best, Hanno
From: NAYNA JAIN via mbed-tls mbed-tls@lists.trustedfirmware.org Reply-To: NAYNA JAIN naynjain@ibm.com Date: Thursday 30 January 2025 at 19:38 To: "mbed-tls@lists.trustedfirmware.org" mbed-tls@lists.trustedfirmware.org Cc: Eric Richter erichte@us.ibm.com Subject: [EXTERNAL] [mbed-tls] Support for Quantum Safe Algorithms
CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you can confirm the sender and know the content is safe.
Hi MbedTLS team,
I have been following up the MbedTLS roadmap from here - https://mbed-tls.readthedocs.io/en/latest/project/roadmap/ . It talks about Post Quantum Cryptography support in future.
And in the section of Long Term Plans for MbedTLS, I see the note related to PQC as "Regarding post-quantum cryptography (PQC) in particular, we do plan to wait until there are official standards: as of 2023, apart from stateful hash-based signatures, there are too many open questions about selected algorithms (choice of parameters, data formats, hybrid combinations…).
This note seems to be pretty old as it refers to 2023.. So, are there any latest update on the roadmap? Is there any plan to support latest NIST standardized algorithms (ML-DSA, ML-KEM, SLH-DSA) in this year or next year.
Thanks & Regards,
* Nayna
Hello,
We still haven't set a date for integrating PQC algorithms. We're currently defining the API in the PSA Crypto API working group — there is a draft specification (https://github.com/ARM-software/psa-api/pull/223) which is still evolving (https://github.com/ARM-software/psa-api/pull/233). In Mbed TLS, we have no bandwidth for integrating new features until we complete the work on the TF-PSA-Crypto 1.0 and Mbed TLS 4.0 releases, so until 2025Q3. After that, PQC will compete with other desired features, so we can't make any commitments yet.
Best regards,
mbed-tls@lists.trustedfirmware.org
-
Becker, Hanno -
Gilles Peskine -
NAYNA JAIN