Repository navigation

Add SPDM 1.4 ML-KEM post-quantum key exchange (FIPS 203) - #18

Merged

aidangarske merged 9 commits into

mainfrom

add-mlkem-spdm14-kex

Jun 12, 2026

Commits on Jun 11, 2026

Add SPDM 1.4 ML-KEM standalone key exchange (FIPS 203, DSP0274 1.4)
aidangarske
committed
5255277
CI: add full-PQ interop leg (ML-KEM-768 + ML-DSA 65/87, exercises chunking)
aidangarske
committed
ed2c935
Address skoll: fix type-confused ephemeral-key free on KEX switch, cppcheck redundant assign, KEY_EXCHANGE/reconnect tests, rename PQC workflow
aidangarske
committed
d00a06b
Fail fast when ML-KEM KEY_EXCHANGE exceeds responder DataTransferSize (no CHUNK_SEND)
aidangarske
committed
99bd133
Address skoll v2: ML-KEM CTX_STATIC_SIZE budget, bound ek OpaqueData write, validate kemMask, fail-fast test, ML-KEM-only CI
aidangarske
committed
166ad24
Address skoll v3: fail (not downgrade) on KEM-only below 1.4, guard KEM ct-size read, ML-KEM-only transcript budget, parse/negotiate tests, configure probe, doc comment
aidangarske
committed
0db1cdf
Address skoll v4 (Low/Info): fail-closed on unknown kexType, clear stale kemAlgSel, robust emu cleanup in CI
aidangarske
committed
25fb646
Fix cppcheck/scan-build dead rc init in BuildKeyExchange; add ML-KEM API/helper error-path tests
aidangarske
committed
5343f33
Docs: document ML-KEM key exchange and full post-quantum SPDM support (README + wiki)
aidangarske
committed
34e1e11