Comments (1)
The sscep code base compiles against upstream OpenSSL and hence does not support the unofficial PQC OpenSSL variant published by Open Quantum Safe.
First of all, the PQC standardization is by far not finished yet. Although we now have the finalists which will very likely be adopted in the upcoming standards, it is not clear yet how these algorithms will be included in all the standards which deal with cryptographic algorithms. We even do not know yet if PQC algorithms will simply replace traditional algorithms in certificates and other primitives (this is what Open Quantum Safe's OpenSSL is doing) or the IETF will propose a hybrid approach to allow for a smooth transition between traditional and PQC algorithms. I believe the latter will be the way to go, but for that, as mentioned, we first need standardization to define how hybrid algorithms shall be encoded/transported and how they shall be used in existing standards. In my opinion it does not make much sense to prepare for the native replacement of traditional algorithms with PQC ones before standardization has finished.
That said, even if sscep already supported PQC algorithms via the OQS OpenSSL fork, it is very likely that this will not be the final word on it, and it is even more likely that all the other infrastructure involved (software used by the Issuing CA, Relying Parties and End Entities) will not support these PQC algorithms right now.
For the sscep project, the sensible way to deal with this is to wait for standardization to finish (algorithm choice, updates of the X.509, PKCS#7 and SCEP RFCs) and only then implement the necessary modifications.
from sscep.
Related Issues (20)
- sscep: error verifying signature with Red Hat 9 HOT 3
- Dogtag 10.12 Seemingly Returning Incorrect pkiStatus to sscep 0.9.1 When Certificate Request is Awaiting Approval HOT 1
- CAIdentifier will send with GETCA even it is not defined in the call HOT 1
- getca option -> "cannot parse response"
- I want to add 'I' option on making enrollment on sscep-0.9.0 version to use specific ip address on multi ethernet port.
- Building sscep client in Rockey Linux8 Failed HOT 1
- sscep for FreeRTOS
- sscep enroll server response status code: 500, MIME header: missing HOT 1
- sscep.exe not writing certificate to disk
- Private key requirement for certificate enrollent? HOT 1
- OpenSSL Engines are no longer available, is there support for OpenSSL Provider tpm2? HOT 7
- How to contribute with the project HOT 2
- Pppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppp
- HTTP username and password support HOT 2
- how to get the certificates chain in the sscep enroll request HOT 1
- PKCS7_RECIP_INFO_set:encryption not supported for this key type HOT 1
- Can't decipher errors
- Documentation Discrepeancy HOT 1
- Cannot Enroll with a CSR Signed By a Key Stored in TPM 2.0 HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from sscep.