Add experimental post-quantum hybrid key exchange method
authortobhe <tobhe@openbsd.org>
Fri, 28 May 2021 18:01:39 +0000 (18:01 +0000)
committertobhe <tobhe@openbsd.org>
Fri, 28 May 2021 18:01:39 +0000 (18:01 +0000)
commit9b50bc253d6cf270fe0a001333c163c7cd5422e5
treebd9906c43e99d9535626c5f8c23a75aebc69ce4e
parent164d41fd51b544f8097dbab3141d56a587d6b312
Add experimental post-quantum hybrid key exchange method
based on Streamlined NTRU Prime (coupled with X25519).

The sntrup761 implementation is imported from OpenSSH.
It is public domain code originally distributed as part
of the SUPERCOP cryptography benchmark suite
(https://bench.cr.yp.to/supercop.html).

The method is not part of the default proposal, but can
be enabled with 'ikesa group sntrup761x25519'.

ok markus@ patrick@
sbin/iked/Makefile
sbin/iked/crypto_api.h [new file with mode: 0644]
sbin/iked/crypto_hash.c [new file with mode: 0644]
sbin/iked/dh.c
sbin/iked/dh.h
sbin/iked/ikev2.h
sbin/iked/parse.y
sbin/iked/sntrup761.c [new file with mode: 0644]
sbin/iked/sntrup761.sh [new file with mode: 0644]