Skip to content

Releases: open-quantum-safe/openssl

OQS-OpenSSL_1_0_2-stable-snapshot-2018-11

13 Nov 16:44
Compare
Choose a tag to compare

OQS-OpenSSL_1_0_2-stable snapshot 2018-11

About

The Open Quantum Safe (OQS) project has the goal of developing and prototyping quantum-resistant cryptography. More information on OQS can be found on our website: https://openquantumsafe.org/ and on Github at https://github.com/open-quantum-safe/.

liboqs is an open source C library for quantum-resistant cryptographic algorithms.

open-quantum-safe/openssl is an integration of liboqs into (a fork of) OpenSSL. The goal of this integration is to provide easy prototyping of quantum-resistant cryptography. The integration should not be considered "production quality".

This branch of our fork of OpenSSL aims to provide integration of post-quantum algorithms from liboqs into TLS 1.2 in OpenSSL 1.0.2.

This branch of our fork of OpenSSL can be used with the following versions of liboqs:

  • liboqs master branch 0.1.0
  • liboqs nist-branch 2018-11 snapshot

Release notes

This snapshot of the OQS fork of OpenSSL 1.0.2 (OQS-OpenSSL_1_0_2-stable) was released on November 13, 2018. Its release page on Github is https://github.com/open-quantum-safe/openssl/releases/tag/OQS-OpenSSL_1_0_2-stable-snapshot-2018-11.

What's New

This is the third snapshot release of OQS-OpenSSL_1_0_2-stable.

It syncs the fork with the upstream OpenSSL 1.0.2p release.

There are no algorithmic changes since the last release. However, since the last snapshot release, OQS-OpenSSL_1_0_2-stable now builds against the liboqs master branch, and Windows builds have been fixed.

Future work

Snapshot releases of OQS-OpenSSL_1_0_2-stable will be made approximately bi-monthly. These will include syncing the branch with upstream releases of OpenSSL, and changes required to sync with new releases of liboqs.

OQS-OpenSSL-1_0_2-stable-snapshot-2018-05

31 May 02:15
Compare
Choose a tag to compare

OQS-OpenSSL-1_0_2-stable snapshot 2018-05

About

The Open Quantum Safe (OQS) project has the goal of developing and prototyping quantum-resistant cryptography. More information on OQS can be found on our website: https://openquantumsafe.org/ and on Github at https://github.com/open-quantum-safe/.

liboqs is an open source C library for quantum-resistant cryptographic algorithms.

open-quantum-safe/openssl is an integration of liboqs into (a fork of) OpenSSL. The goal of this integration is to provide easy prototyping of quantum-resistant cryptography. The integration should not be considered "production quality".

This branch of our fork of OpenSSL aims to provide integration of post-quantum algorithms from liboqs into OpenSSL 1.0.2.

Release notes

This snapshot of the OQS fork of OpenSSL 1.0.2 (OQS-OpenSSL-1_0_2-stable) was released on May 30, 2018. Its release page on Github is https://github.com/open-quantum-safe/openssl/releases/tag/OQS-OpenSSL-1_0_2-stable-snapshot-2018-05.

What's New

This is the second snapshot release of OQS-OpenSSL-1_0_2-stable.

It includes all upstream changes to OpenSSL-1_0_2-stable since the last snapshot release of OQS-OpenSSL-1_0_2-stable. There are no additional changes.

Comparison to OQS' other OpenSSL branches

Modifications to OpenSSL also exist on our fork's OpenSSL-1_0_2-stable branch. This snapshot release of OQS-OpenSSL-1_0_2-stable ("OQS-102") contains the following differences compared to our OpenSSL-1_0_2-stable ("102") branch:

  • "OQS-102" uses the new key encapsulation mechanism API available in the liboqs nist-branch, and which will be coming to liboqs master branch by May 2018. "102" uses the key exchange API available in earlier liboqs development.
  • "102" includes support for liboqs-based signature schemes. "OQS-102" does not at present, since the current release of liboqs nist-branch does not contain signatures. We aim to change this by June 2018.

Future work

Snapshot releases of OQS-OpenSSL-1_0_2-stable will be made bi-monthly. These will include syncing the branch with upstream modifications made in the original OpenSSL repository, and syncing with new releases of liboqs. snapshot releases in intermittent months may be made when merited.

By June 2018, we intend to have OQS-OpenSSL-1_0_2-stable building against both liboqs nist-branch and liboqs master branch, and including support for liboqs-based signature schemes.

OQS-OpenSSL-1_0_2-stable-snapshot-2018-04

11 Apr 00:29
Compare
Choose a tag to compare

OQS-OpenSSL-1_0_2-stable snapshot 2018-04

About

The Open Quantum Safe (OQS) project has the goal of developing and prototyping quantum-resistant cryptography. More information on OQS can be found on our website: https://openquantumsafe.org/ and on Github at https://github.com/open-quantum-safe/.

liboqs is an open source C library for quantum-resistant cryptographic algorithms.

open-quantum-safe/openssl is an integration of liboqs into (a fork of) OpenSSL. The goal of this integration is to provide easy prototyping of quantum-resistant cryptography. The integration should not be considered "production quality".

This branch of our fork of OpenSSL aims to provide integration of post-quantum algorithms from liboqs into OpenSSL 1.0.2.

Release notes

This snapshot of the OQS fork of OpenSSL 1.0.2 (OQS-OpenSSL-1_0_2-stable) was released on April 10, 2018. Its release page on Github is https://github.com/open-quantum-safe/openssl/releases/tag/OQS-OpenSSL-1_0_2-stable-snapshot-2018-04.

What's New

This is the first snapshot release of OQS-OpenSSL-1_0_2-stable.

This release uses the new key encapsulation mechanism (KEM) API in liboqs nist-branch, which will soon also be present on liboqs master branch.

openssl speed

  • The openssl speed command can do performance testing of all enabled key encapsulation mechanisms provided by liboqs.

Key exchange in TLS 1.2

  • DEFAULT: The "default" KEM from liboqs is available for use in post-quantum and hybrid ciphersuites in TLS 1.2. See README.md for a list of ciphersuites.

Note that our integration strategy is that key encapsulation mechanisms from liboqs nist-branch will only be surfaced in OpenSSL via the "default" KEM (which can be changed at compile time in liboqs). Key encapsulations from our updated liboqs master branch (coming in May 2018) will all be surfaced in OpenSSL via their own names.

Algorithm datasheets for all supported algorithms are available in the liboqs documentation.

Comparison to OQS' other OpenSSL branches

Modifications to OpenSSL also exist on our fork's OpenSSL-1_0_2-stable branch. This snapshot release of OQS-OpenSSL-1_0_2-stable ("OQS-102") contains the following differences compared to our OpenSSL-1_0_2-stable ("102") branch:

  • "OQS-102" uses the new key encapsulation mechanism API available in the liboqs nist-branch, and which will be coming to liboqs master branch by May 2018. "102" uses the key exchange API available in earlier liboqs development.
  • "102" includes support for liboqs-based signature schemes. "OQS-102" does not at present, since the current release of liboqs nist-branch does not contain signatures. We aim to change this by June 2018.

Future work

Snapshot releases of OQS-OpenSSL-1_0_2-stable will be made bi-monthly. These will include syncing the branch with upstream modifications made in the original OpenSSL repository, and syncing with new releases of liboqs. snapshot releases in intermittent months may be made when merited.

By June 2018, we intend to have OQS-OpenSSL-1_0_2-stable building against both liboqs nist-branch and liboqs master branch, and including support for liboqs-based signature schemes.