0.7.0 release candidate 1 #533
Conversation
Signed-off-by: Pravek Sharma <[email protected]>
Signed-off-by: Pravek Sharma <[email protected]>
Signed-off-by: Pravek Sharma <[email protected]>
Signed-off-by: Pravek Sharma <[email protected]>
There was a problem hiding this comment.
LGTM. Thanks very much for putting this together @praveksharma ! Only question pertains to rationale for fixing certain openssl version references (why move from 3.1 to 3.2; why not to latest in respective branch?)
RELEASE.md
Outdated
| * Adds support for CROSS from Round 1 of [NIST’s Post-Quantum Signature On-Ramp process](https://csrc.nist.gov/projects/pqc-dig-sig/round-1-additional-signatures). | ||
| * Updates ML-KEM's code points in line with internet draft [draft-kwiatkowski-tls-ecdhe-mlkem-02](https://www.ietf.org/archive/id/draft-kwiatkowski-tls-ecdhe-mlkem-02.html). | ||
| * Updates the `fullbuild.sh` build script to build against liboqs with formally verified Kyber-512 and Kyber-768 from [libjade](https://github.com/formosa-crypto/libjade) turned on by default; see `OQS_LIBJADE_BUILD` under `CONFIGURE.md` for more information. | ||
| * Reverses keyshares for X25519MLKEM768, SecP256r1MLKEM768, and X448-ML-KEM-768 TLS hybrids in line with [draft-kwiatkowski-tls-ecdhe-mlkem-02](https://www.ietf.org/archive/id/draft-kwiatkowski-tls-ecdhe-mlkem-02.html). |
There was a problem hiding this comment.
Only the X25519 and X448 hybrids have been reversed ?
There was a problem hiding this comment.
I'd hope so. Thanks for the catch @ghen2 . @praveksharma please remove P256 from the list.
There was a problem hiding this comment.
This has been fixed, thank you @ghen2.
Signed-off-by: Pravek Sharma <[email protected]>
Signed-off-by: Pravek Sharma <[email protected]>
This was an oversight, thank you for pointing this out @baentsch. I have changed this to openssl 3.3.2 which is the latest release. The draft pre-release has been published. The PR for the release, #534, is up for review and includes the change suggested here. |
Please see the relevant pre-release (currently in draft): https://github.com/open-quantum-safe/oqs-provider/releases/tag/untagged-af15abfacccde382a3d8
This updates the version string, the release notes, and points CI to liboqs 0.11.0.
Checks done:
generate.py.release-tests.shwith liboqs 0.11.0 and openssl 3.3.2.This PR will not land; once approved, a new 0.7.0-release will be created which will be merged.