Skip to content

Support for storing private keys as seeds#89

Open
tomato42 wants to merge 3 commits into
GiacomoPope:mainfrom
tomato42:seeds-as-keys
Open

Support for storing private keys as seeds#89
tomato42 wants to merge 3 commits into
GiacomoPope:mainfrom
tomato42:seeds-as-keys

Conversation

@tomato42

@tomato42 tomato42 commented Jan 6, 2025

Copy link
Copy Markdown
Collaborator

The new draft-ietf-lamps-kyber-certificates-06 mandates storing the private key as the un-expanded seed instead of expanded value. Add a public API that allows expanding keys from the seed and update the example scripts with support for that.

Builds on top of #80

Not interoperable with oqsprovider: open-quantum-safe/oqs-provider#613 or openssl: openssl/openssl#25885

@GiacomoPope

Copy link
Copy Markdown
Owner

im ok with adding the seed check, but this should be included in some tests somewhere? Also, we don't need the interopt code to be included in this PR?

@tomato42

tomato42 commented Jan 7, 2025

Copy link
Copy Markdown
Collaborator Author

but this should be included in some tests somewhere?

you mean you'd like unit tests or you'd like interoperability tests?

Also, we don't need the interopt code to be included in this PR?

yes, I should probably add the test vectors from the draft

@GiacomoPope

Copy link
Copy Markdown
Owner

i mean i dont think this PR should be about interoperability and rather just adding this new keygen from seed function, which should be tested in the unit tests for ML-KEM

@tomato42

tomato42 commented Jan 8, 2025

Copy link
Copy Markdown
Collaborator Author

i mean i dont think this PR should be about interoperability and rather just adding this new keygen from seed function, which should be tested in the unit tests for ML-KEM

aah, split up the addition of the API, sure, can do a separate PR for that alone

@tomato42

tomato42 commented Jan 8, 2025

Copy link
Copy Markdown
Collaborator Author

The PR adding API alone, together with test coverage: #90

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants