Add experimental hybrid post-quantum handshake using Kyber-1024 and Dilithium - #133

Open

Mateusvff wants to merge 35 commits into

WireGuard:masterfrom

Mateusvff:master

Commits on Nov 30, 2025

tun: use add-with-carry in checksumNoFold()

dinhngtu
authored and
Mateusvff
committed
f8872a0
tun: darwin: fetch flags and mtu from if_msghdr directly

ruokeqx
authored and
Mateusvff
committed
a193cf4
global: replaced unused function params with _

tomholford
authored and
Mateusvff
committed
7784c5a
device: use rand.NewSource instead of rand.Seed

tomholford
authored and
Mateusvff
committed
8916471
rwcancel: fix wrong poll event flag on ReadyWrite

win-t
authored and
Mateusvff
committed
e5a7e5f
device: reduce RoutineHandshake allocations

AlexanderYastrebov
authored and
Mateusvff
committed
e49aab5
device: make unmarshall length checks exact

zx2c4
authored and
Mateusvff
committed
8f357d8
version: bump snapshot

zx2c4
authored and
Mateusvff
committed
ae5a1c6
device: add support for removing allowedips individually

zx2c4
authored and
Mateusvff
committed
87b78d5
device: optimize message encoding

AlexanderYastrebov
authored and
Mateusvff
committed
3d12258
conn: don't enable GRO on Linux < 5.12

zx2c4
authored and
Mateusvff
committed
56a3506
version: bump snapshot

zx2c4
authored and
Mateusvff
committed
853ff70
chore: add indirect dependency for cloudflare/circl v1.6.1
Mateusvff
committed
4882a13
feat: add ML-KEM post-quantum key types
Mateusvff
committed
d506965
feat: (device) add ML-KEM public key to peer handshake struct
Mateusvff
committed
8851ccd
feat(device): Add ML-KEM key pair fields to staticIdentity
Mateusvff
committed
e66ed2c
feat(device): Update MessageInitiation to include ML-KEM ciphertext size
Mateusvff
committed
9e84b95
feat(device): Add post-quantum encapsulation in CreateMessageInitiation
Mateusvff
committed
a04398a
feat(device): Implement post-quantum decapsulation in ConsumeMessageInitiation
Mateusvff
committed
aadc8a4
feat(device): Add function for quantum key generation
Mateusvff
committed
68be555
feat(device): Enhance UAPI handling for ML-KEM keys
Mateusvff
committed
87626c1
feat(device): Update KDF2 calls to include dummy parameter for combined secret derivation
Mateusvff
committed
0f31fc3
fix old tests and add new ones

Eruel6
authored and
Mateusvff
committed
a05eabe
feat: add benchmark test file

Eruel6
authored and
Mateusvff
committed
2f51762
fix: add new tests to utlize hybrid handshake

Eruel6
authored and
Mateusvff
committed
92c9c80
feat(device): Add MLDSA key and signature types with appropriate sizes

Mateus Franco
authored and
Mateusvff
committed
d80d6d9
feat(device): Add MLDSA public key to Handshake struct and include private keys in Device struct

Mateus Franco
authored and
Mateusvff
committed
26943f4
feat(device): Update handshake message sizes to include MLDSA signature
Mateusvff
committed
cada0b9
feat(device): Update MessageInitiation struct to include Signature in marshaling and unmarshaling
Mateusvff
committed
10896e6
feat(device): Implement MLDSA signature generation in CreateMessageInitiation
Mateusvff
committed
fabb5d7
feat(device): Add MLDSA signature verification in ConsumeMessageInitiation
Mateusvff
committed
4193bcc
feat(device): Add MLDSA key pair generation function
Mateusvff
committed
5a1d36e
feat: add tests for MLDSA

Eruel6
authored and
Mateusvff
committed
e4017b2
fix: add MLDSA to benchmark

Eruel6
authored and
Mateusvff
committed
b2e63c1
Merge branch 'master' into master
Mateusvff
authored
4deaf38

Navigation Menu

Uh oh!

Add experimental hybrid post-quantum handshake using Kyber-1024 and Dilithium - #133

Add experimental hybrid post-quantum handshake using Kyber-1024 and Dilithium#133
Mateusvff wants to merge 35 commits into
WireGuard:masterfrom
Mateusvff:master

Commits on Nov 30, 2025

tun: use add-with-carry in checksumNoFold()

tun: darwin: fetch flags and mtu from if_msghdr directly

global: replaced unused function params with _

device: use rand.NewSource instead of rand.Seed

rwcancel: fix wrong poll event flag on ReadyWrite

device: reduce RoutineHandshake allocations

device: make unmarshall length checks exact

version: bump snapshot

device: add support for removing allowedips individually

device: optimize message encoding

conn: don't enable GRO on Linux < 5.12

version: bump snapshot

chore: add indirect dependency for cloudflare/circl v1.6.1

feat: add ML-KEM post-quantum key types

feat: (device) add ML-KEM public key to peer handshake struct

feat(device): Add ML-KEM key pair fields to staticIdentity

feat(device): Update MessageInitiation to include ML-KEM ciphertext size

feat(device): Add post-quantum encapsulation in CreateMessageInitiation

feat(device): Implement post-quantum decapsulation in ConsumeMessageInitiation

feat(device): Add function for quantum key generation

feat(device): Enhance UAPI handling for ML-KEM keys

feat(device): Update KDF2 calls to include dummy parameter for combined secret derivation

fix old tests and add new ones

feat: add benchmark test file

fix: add new tests to utlize hybrid handshake

feat(device): Add MLDSA key and signature types with appropriate sizes

feat(device): Add MLDSA public key to Handshake struct and include private keys in Device struct

feat(device): Update handshake message sizes to include MLDSA signature

feat(device): Update MessageInitiation struct to include Signature in marshaling and unmarshaling

feat(device): Implement MLDSA signature generation in CreateMessageInitiation

feat(device): Add MLDSA signature verification in ConsumeMessageInitiation

feat(device): Add MLDSA key pair generation function

feat: add tests for MLDSA

fix: add MLDSA to benchmark

Merge branch 'master' into master