Add experimental hybrid post-quantum handshake using Kyber-1024 and Dilithium#133

Open

Mateusvff wants to merge 35 commits intoWireGuard:masterfrom

Mateusvff:master

Commits on Nov 30, 2025

tun: use add-with-carry in checksumNoFold()

dinhngtu
authored and
Mateusvff
committed
tun: darwin: fetch flags and mtu from if_msghdr directly

ruokeqx
authored and
Mateusvff
committed
global: replaced unused function params with _

tomholford
authored and
Mateusvff
committed
device: use rand.NewSource instead of rand.Seed

tomholford
authored and
Mateusvff
committed
rwcancel: fix wrong poll event flag on ReadyWrite

win-t
authored and
Mateusvff
committed
device: reduce RoutineHandshake allocations

AlexanderYastrebov
authored and
Mateusvff
committed
device: make unmarshall length checks exact

zx2c4
authored and
Mateusvff
committed
version: bump snapshot

zx2c4
authored and
Mateusvff
committed
device: add support for removing allowedips individually

zx2c4
authored and
Mateusvff
committed
device: optimize message encoding

AlexanderYastrebov
authored and
Mateusvff
committed
conn: don't enable GRO on Linux < 5.12

zx2c4
authored and
Mateusvff
committed
version: bump snapshot

zx2c4
authored and
Mateusvff
committed
chore: add indirect dependency for cloudflare/circl v1.6.1
Mateusvff
committed
feat: add ML-KEM post-quantum key types
Mateusvff
committed
feat: (device) add ML-KEM public key to peer handshake struct
Mateusvff
committed
feat(device): Add ML-KEM key pair fields to staticIdentity
Mateusvff
committed
feat(device): Update MessageInitiation to include ML-KEM ciphertext size
Mateusvff
committed
feat(device): Add post-quantum encapsulation in CreateMessageInitiation
Mateusvff
committed
feat(device): Implement post-quantum decapsulation in ConsumeMessageInitiation
Mateusvff
committed
feat(device): Add function for quantum key generation
Mateusvff
committed
feat(device): Enhance UAPI handling for ML-KEM keys
Mateusvff
committed
feat(device): Update KDF2 calls to include dummy parameter for combined secret derivation
Mateusvff
committed
fix old tests and add new ones

Eruel6
authored and
Mateusvff
committed
feat: add benchmark test file

Eruel6
authored and
Mateusvff
committed
fix: add new tests to utlize hybrid handshake

Eruel6
authored and
Mateusvff
committed
feat(device): Add MLDSA key and signature types with appropriate sizes

Mateus Franco
authored and
Mateusvff
committed
feat(device): Add MLDSA public key to Handshake struct and include private keys in Device struct

Mateus Franco
authored and
Mateusvff
committed
feat(device): Update handshake message sizes to include MLDSA signature
Mateusvff
committed
feat(device): Update MessageInitiation struct to include Signature in marshaling and unmarshaling
Mateusvff
committed
feat(device): Implement MLDSA signature generation in CreateMessageInitiation
Mateusvff
committed
feat(device): Add MLDSA signature verification in ConsumeMessageInitiation
Mateusvff
committed
feat(device): Add MLDSA key pair generation function
Mateusvff
committed
feat: add tests for MLDSA

Eruel6
authored and
Mateusvff
committed
fix: add MLDSA to benchmark

Eruel6
authored and
Mateusvff
committed
Merge branch 'master' into master
Mateusvff
authored