Skip to content

[SSL] Add node-24.5.0, tor-browser-15.0-alpha to pqc-support.mdx #24157

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: production
Choose a base branch
from

Conversation

sgvictorino
Copy link
Contributor

No description provided.

@bwesterb
Copy link
Member

bwesterb commented Aug 6, 2025

Do you have a pointer to the release notes for node where it mentions adding PQ?

@sgvictorino
Copy link
Contributor Author

sgvictorino commented Aug 6, 2025

They now vendor OpenSSL 3.5 and benefit from the new default groups:

openssl genpkey -algorithm ed25519 -out key.pem
openssl req -new -x509 -key key.pem -out cert.pem -subj "/"
// server.js
import { createServer } from "tls";
import { readFileSync } from "fs";

createServer({
  key: readFileSync("key.pem"),
  cert: readFileSync("cert.pem"),
  // You can also configure the new groups by name
  // Node passes this to SSL_CTX_set1_curves_list
  // ecdhCurve: "SecP384r1MLKEM1024:X25519MLKEM768",
}, (socket) => {
  socket.on("error", console.error);
}).listen(16173, () => {
  console.log("listening");
});
node server.js &
# listening

openssl -version # OpenSSL 3.5.1 1 Jul 2025...

openssl s_client -connect localhost:16173 -brief -no-interactive
# ...
# Negotiated TLS1.3 group: X25519MLKEM768

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants