IETF Logo Mail Archive

[Ssh] Re: SSH PQ/T GSSAPI KEX draft - draft-kario-gss-keyex-pqc

Dmitry Belyavsky <beldmit@gmail.com> Wed, 22 April 2026 14:53 UTC

Return-Path: <beldmit@gmail.com>
X-Original-To: ssh@mail2.ietf.org
Delivered-To: ssh@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 57317E0DE5E3 for <ssh@mail2.ietf.org>; Wed, 22 Apr 2026 07:53:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1776869638; bh=UoxNgNo1v9/JQn3Uaq8ptm5QShscpvOq+iTlDV8QBmM=; h=References:In-Reply-To:From:Date:Subject:To:Cc; b=um9CkqFmQ4YLV7dS10K5rEf/s02vDP2fpq4pjOd//J1NMeJNnrD/Mgmr9bgh4ZQA4 A6yVcxZ+bPPUh2TKZvtNSdMAmU6o1flpZtV3zRgTbSDWKeKF8pvZwQhvV6owZLCk25 SjcEvBkDsXo8Vj6No++Zt15m7xHhCyJANtBDcMR0=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rUuYAJ6yH-qG for <ssh@mail2.ietf.org>; Wed, 22 Apr 2026 07:53:57 -0700 (PDT)
Received: from mail-ed1-x52b.google.com (mail-ed1-x52b.google.com [IPv6:2a00:1450:4864:20::52b]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id CC576E0DE13A for <ssh@ietf.org>; Wed, 22 Apr 2026 07:51:29 -0700 (PDT)
Received: by mail-ed1-x52b.google.com with SMTP id 4fb4d7f45d1cf-66d65646c65so1822962a12.1 for <ssh@ietf.org>; Wed, 22 Apr 2026 07:51:29 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1776869483; cv=none; d=google.com; s=arc-20240605; b=GJMQho3Tw1hhe+w481MUaWpf1WjnNGgamvEvtDwFCrWdGlw54YmfGcl4Zu+p81DZVu tD1COdMrrfnNts4QeYWbyyXZrtpjzbQdfiULgKq0PlGHQQyhtXvwnmwqVRqHuAj2ltwD lvfVDKnMNLwF5x4e6RWHT5kf3/eTzNvHM9LTyjan2NaULVdNUEdVew4IAi3qWxzayVnt SQbaonT050RT1wKga1pWmJ/l0gpg+LIgm7utT4kpbX+cTOuljZhgXgXTorTFLWVYM5Vo UUxalJyERNCSsUD+cuPRjuzEFYe6WjRXazkxZYE1pTed6+4Y2QDA6pkXXp+yBM8oGS5W NrIg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:dkim-signature; bh=UoxNgNo1v9/JQn3Uaq8ptm5QShscpvOq+iTlDV8QBmM=; fh=JI0Rgp+VYqhkDTRqKXqcF/WfEkcoCjQcrQcFKaBIdIc=; b=lC/jQpDtgd54XshncXkH3wsRDhjJYwaYU9Hn0x/0+juPGIme4Ov68vnUDa6LVdpBhS ud4iO76ShujnXT8hn782cj2D0OAz8fkfBu1TOz3c/sYR3xuw265ehBVWH0ZDMPAGwuM+ cHXJBUJCcLdJ2HJ55/d+uhqAs+FGhC94Cffcceqjmso83eFykQBXptDC2fPr0rjdMNou xhz9EO7tMb6jhx7Fe96VED1nPoKKuR4F91dUOEu4QhtwfV/Y9QuHvvpp36J/z/iCb2tm 9iFX9EQZGNUzIDKOlpyiEIfHJNMFBhlwtq1ByudB7wP9KRTHcsK3YcD4a8KLsI2KXsT0 7gYg==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1776869483; x=1777474283; darn=ietf.org; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=UoxNgNo1v9/JQn3Uaq8ptm5QShscpvOq+iTlDV8QBmM=; b=jCwZeeWjvKSb07Bwp8bXpQeE/g2mST2OxzV3ic2AE7N9I/tubY6wmrYzQDijqnJGrw 4SEaJIIClrCtg7ZgjpgzbSPYtYb6U26AyP5KKMJWULjBy4vlX4JWShoBMF1vyBUiqSCL HkIy2/BZEUsNs7jm1ELOKqKSkk6stGGWpCme540ElJBseWdGTu/wCjGMjgBDwyurTgXF 9BXvQ5W/SPCUqDzNzfsFvNHvyh1i7ebJCRo266CTTTfu07r8Vx+87Xg+vKoITe8i4haQ o5E/krR9NRhBH/2F9jZapJ1mTqTKKo+GAnRB9WVLZbVpexxHF2IMCqPKXOb+N6PlNMpr EKfg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1776869483; x=1777474283; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=UoxNgNo1v9/JQn3Uaq8ptm5QShscpvOq+iTlDV8QBmM=; b=WTAyDHyCbkzRH1LAclMtYePo5XR2ECUiWNzS+470XB4OBbAmQq8f2d8LnXlMpByfAU iGS5RamABfZcilA0ud2Buo32ZFmNoknsFPqzi//K+cXclBdLTqQ2sNodC2pbFOPNGkL0 2iki9FUpUjbbvnOrTo4U+aTkOfUvAAqni64KIDqaWRJhbZ2iQL3Vfx5qzhTPnzOddOLP Wpm80cPM/QSp40NIsDPVE8quPseROLq11sM7wGrwKr/wVcYcuTtFbxtl/MRogJfQYG5s M3X0YQi0MsVeYNJJ70kzENlabpnTd0I3okIhsGWlnbwU4lSRmwyHqFuwV1ROA0eraf6Q nAQQ==
X-Gm-Message-State: AOJu0YyPQ+YqM7gkPAm+DNd00kg+T+2rX0ZT1dEAYXknDagyMzHjEgn5 HaP4oEQ01osr38EOq4zYWjkBXo8oxmsVYTMS+soLh0MrMOKEkYwniqHDlplG3BBNDU2dk+wqtFA BiM60fDPCjuWKNeGxdeKBUSvYBYCxXRWZTF5M
X-Gm-Gg: AeBDiesLIePZS/CzCqTNRRUksj1p4EUs1httxGwB0yqHyMW0BlUOV5p7x6pi0tacfNT wyuXFBDgAPMfz1sDtiDTgqrt5aworx/Z24A4wtLl3AZu1jDSRZWhrDFGH28Xocry5FcWT6dokQN fqZp4ZZnelL9Z7GFiuDv3EHeZn535PFuyoQ592ruLN0NEX29PFsWiArEOSnU7LGzGzv3c0ZEoOz UyVZ9b+9F8mFdx/HjmUo1J6N1E7IG615dIGVuxGgCJRxVpSuHlG/7InqU41o4cDjXgHwLtPVWoS rwjtwj0MxEJuZvJluA==
X-Received: by 2002:a05:6402:46d6:b0:671:d016:df0f with SMTP id 4fb4d7f45d1cf-672c128176dmr9020365a12.4.1776869482648; Wed, 22 Apr 2026 07:51:22 -0700 (PDT)
MIME-Version: 1.0
References: <f0dabd52-4cdf-45b8-92b8-dc790d798c8e@redhat.com>
In-Reply-To: <f0dabd52-4cdf-45b8-92b8-dc790d798c8e@redhat.com>
From: Dmitry Belyavsky <beldmit@gmail.com>
Date: Wed, 22 Apr 2026 16:51:11 +0200
X-Gm-Features: AQROBzAK3PMxLod7Yv2E6nEVtPCq8tlSUsY_iD_UkUvh_qD0S9N5b1q3s0v6YNA
Message-ID: <CADqLbzLFmxL8RxH_aX0Do-PuRjRn1fFV5Y1GWdioDSuxtcD9ng@mail.gmail.com>
To: Alicja Kario <hkario=40redhat.com@dmarc.ietf.org>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Message-ID-Hash: VFEWJSI22ZHE7GK7TMN4UNDWAYBCJICQ
X-Message-ID-Hash: VFEWJSI22ZHE7GK7TMN4UNDWAYBCJICQ
X-MailFrom: beldmit@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: ssh@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Ssh] Re: SSH PQ/T GSSAPI KEX draft - draft-kario-gss-keyex-pqc
List-Id: "The SSH mail list will allow discussions on improving aspects of the Secure Shell (SSH) protocol." <ssh.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/ssh/paWaENviJpwzcS9R1CbPn4Yq4X0>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ssh>
List-Help: <mailto:ssh-request@ietf.org?subject=help>
List-Owner: <mailto:ssh-owner@ietf.org>
List-Post: <mailto:ssh@ietf.org>
List-Subscribe: <mailto:ssh-join@ietf.org>
List-Unsubscribe: <mailto:ssh-leave@ietf.org>

Hello,

For the record - a draft implementation of this spec is available at
https://github.com/beldmit/openssh-portable/tree/beldmit-f45-103p1-gsshybrids

On Wed, Apr 22, 2026 at 4:47 PM Alicja Kario
<hkario=40redhat.com@dmarc.ietf.org> wrote:
>
> Hello WG!
>
> I've wrote an I-D that documents how the groups proposed in
> https://datatracker.ietf.org/doc/html/draft-ietf-sshm-mlkem-hybrid-kex-10
> can be used with Kerberos/GSS-API.
>
> Our team is planning to implement it in OpenSSH and libssh.
>
> The draft is available at:
> https://datatracker.ietf.org/doc/draft-kario-gss-keyex-pqc/
> source code for it is at:
> https://github.com/tomato42/ietf-gss-keyex-pqc
>
> --
> Regards,
> Alicja Kario
> Principal Quality Engineer, RHEL Crypto team
> Web: www.cz.redhat.com
> Red Hat Czech s.r.o., Purkyňova 115, 612 00, Brno, Czech Republic
>
> _______________________________________________
> Ssh mailing list -- ssh@ietf.org
> To unsubscribe send an email to ssh-leave@ietf.org



-- 
SY, Dmitry Belyavsky

v2.46.0 | Report a Bug | By Email | System Status