Repository navigation
OpenSSH-compatible post-quantum key exchange #757
Description
as of version 9.9, OpenSSH now supports two post-quantum key exchange methods:
mlkem768x25519-sha256sntrup761x25519-sha512/sntrup761x25519@openssh.com
it would be nice to have support for at least one of these in wolfSSH.
Activity
anhu commentedon Nov 11, 2025
Hello @lilyanatia ,
so sorry it has taken so long for me to reply.
mlkem768x25519-sha256is already on our roadmap. We maintain a list of feature requests and this is already in that list as well.Warm regards, Anthony
anhu commentedon Nov 17, 2025
Hi @lilyanatia ,
Please follow our blog. When we add support for
mlk768x25519-sha256I'm sure there will be an announcement there. I will now close this issue.Warm regards, Anthony
lilyanatia commentedon Nov 17, 2025
this doesn't seem to actually be completed.
anhu commentedon Nov 18, 2025
Hi @lilyanatia ,
I did not realize you would want me to keep this open until the feature was implemented. I've re-opened this issue.
Warm regards, Anthony
anhu commentedon Dec 23, 2025
Hello @lilyanatia ,
Please have a look at https://github.com/wolfSSL/wolfssh/tree/draft-ietf-sshm-mlkem-hybrid-kex . I'm guessing you will find it interesting.
Warm regards, Anthony
ejohnstown commentedon Jan 14, 2026
I currently have PR #869 which adds the algorithm
mlkem768x25519-sha256. We cannot addsntrup761x25519-sha512orsntrup761x25519@openssh.comat this time as wolfCrypt does not implement the sntrup at this time.ejohnstown commentedon Jan 21, 2026
PR #869 is merged. I consider this complete.