mirror of
https://github.com/espressif/mbedtls.git
synced 2026-09-05 09:59:55 +00:00
Aditya Patwardhan
3deef6a6ef
Add hybrid post-quantum TLS 1.3 support, baselined on 582ff4820:
- X25519MLKEM768 hybrid key exchange (IANA group 0x11EC)
- pure ML-DSA-65 authentication via liboqs (TLS sig scheme 0x0905,
X.509 id-ml-dsa-65, RFC 9881) — new library/mldsa65_oqs.{c,h}
- hybrid KEM glue: library/ssl_hybrid_tls.c, ssl_tls13_hybrid_kem.h
- OID / PK / TLS 1.3 wiring across ssl_tls13_*, x509_crt, pk, oid,
tf-psa-crypto builtin drivers
ML-DSA-65 verify is guarded on MBEDTLS_SSL_TLS1_3_SIG_MLDSA65 so the tree
also builds with liboqs disabled (classical X25519+ECDSA baseline).