Commit Graph
5 Commits
Author SHA1 Message Date
riccardom 1dc48bcc06 Addresses CI fixes 2026-09-11 14:48:54 +02:00
riccardom 8c8abfb2b1 pqkem: derive PSK with HKDF-SHA256
Replace the raw SHA-256 concat combiner with HKDF-SHA256 (crypto/hkdf, Go 1.24):
IKM = ML-KEM_ss || X25519_ss (draft-ietf-tls-ecdhe-mlkem order), salt = the
domain-separation label, info = full transcript (offer || answer) || canonicalised
peer identities. Keeps the transcript + identity binding while using a proper KDF.
2026-09-11 14:48:54 +02:00
riccardom 902daf61e6 Invert order of keys as per draft 2026-09-11 14:48:54 +02:00
riccardom f8bb816dea Epurate wg refs 2026-09-11 14:48:54 +02:00
riccardom c796597df5 ML-KEM encapsulate/decapsulate module 2026-09-11 14:48:54 +02:00