Experimental support for X25519Kyber768Draft00 about rustls

[ctz]

aws-lc-rs has an API that we are looking to get merged into our main branch relatively soon

Thanks! Using that I have some prototype-level code that successfully talks to pq.cloudflareresearch.com:

$ cargo run --example client
(...)
          <div id="connInfo"><p>You are using <em>X25519Kyber768Draft00</em> which
              is <strong class="ok">post-quantum secure</strong>.</p></div>
(...)

[skmcgrail]

aws-lc-rs has an API that we are looking to get merged into our main branch relatively soon, which will provide the necessary functionality needed to use Kyber round-3 768. aws/aws-lc-rs#260 I have time scheduled with our team to review if there are any remaining blockers preventing us from moving forward with the APIs.

Additionally, once NIST finalizes the specification for ML-KEM we will incorporate it as a separate algorithm that may be selected and used with the API.