Skip to content

Conversation

@Frauschi
Copy link

This PR adds initial work to ultimately support PQC via PKCS#11. For that to work, the PKCS#11 interface has to be upgraded to Version 3.2.

Actually in this PR:

  • Support for PKCS#11 versions 3.0 and 3.2 (adding new functions and, most importantly, adding support for the new C_GetInterface functionality to load the library.
  • Various other PKCS#11 bug fixes and minor feature improvements.

All the new functions from version 3.0 and 3.2 are not filled with logic currently and return CKR_FUNCTION_NOT_SUPPORTED. Adding actual support for all the new C_EncryptMessage() etc. functions similarly to the existing C_Encrypt() etc. would be pretty thorough work, which is not the focus of the current endeavor.

Once this work is merged, follow up PRs add the actual functionality for the PQC algorithms (initially ML-KEM and ML-DSA, LMS and XMSS later).

@Frauschi Frauschi force-pushed the pkcs11_pqc_prep branch 2 times, most recently from 101c0e2 to 588625d Compare January 30, 2026 09:48
@Frauschi Frauschi marked this pull request as ready for review January 30, 2026 13:51
@Frauschi Frauschi requested a review from dgarske January 30, 2026 13:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants