Hybrid PQC: x25519-mlkem fails in openssl 3.5.5 with default provider
murugesh pitchaiah <[email protected]> Fri, 27 Mar 2026 20:55:06 +0530
| Newsgroups | gmane.comp.encryption.openssl.user,gmane.comp.encryption.openssl.devel |
|---|---|
| Message-ID | <CAOu9RAdFHfB4_RtCsD79tNTCuE3PiUtOn31Ora82dE_LYgPzcw@mail.gmail.com> |
--000000000000c7d11e064e031b18
Content-Type: text/plain; charset="UTF-8"
Hi All,
I have downloaded the openssl 3.5.5 code base and built the library. While
trying to generate the hybrid ml-kem keypair see below error:
(snip)
$ openssl genpkey -algorithm *X25519MLKEM768* -out x25519_mlkem_768_key.pem
Error writing key(s)
80CB0C248B760000:error:1D800065:ENCODER
routines:OSSL_ENCODER_to_bio:reason(101):crypto/encode_decode/encoder_lib.c:78:No
encoders were found. For standard encoders you need at least one of the
default or base providers available. Did you forget to load them?
80CB0C248B760000:error:04800073:PEM routines:do_pk8pkey:error converting
private key:crypto/pem/pem_pk8.c:132:
$ openssl list -providers
Providers:
default
name: OpenSSL Default Provider
version: 3.5.5
status: active
$
$ openssl list -kem-algorithms | grep -i mlkem
{ 2.16.840.1.101.3.4.4.1, id-alg-ml-kem-512, ML-KEM-512, *MLKEM*512 } @
default
{ 2.16.840.1.101.3.4.4.2, id-alg-ml-kem-768, ML-KEM-768, *MLKEM*768 } @
default
{ 2.16.840.1.101.3.4.4.3, id-alg-ml-kem-1024, ML-KEM-1024, *MLKEM*1024 }
@ default
*X25519**MLKEM**768* @ default
X448*MLKEM*1024 @ default
SecP256r1*MLKEM*768 @ default
SecP384r1*MLKEM*1024 @ default
$
(snip)
I assume the support is added by default and no provider load is needed.
Can anyone please share what am i missing ? Thanks in advance.
Regards,
Murugesh
--
You received this message because you are subscribed to the Google Groups "openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/CAOu9RAdFHfB4_RtCsD79tNTCuE3PiUtOn31Ora82dE_LYgPzcw%40mail.gmail.com.
--000000000000c7d11e064e031b18
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
<div dir=3D"ltr">Hi All,<div><br></div><div>I have downloaded the openssl 3=
.5.5 code base and built the library. While trying to generate the hybrid m=
l-kem keypair see below error:</div><div><br></div><div>(snip)</div><div><b=
r></div><div><p style=3D"margin:0px;font-size:18px;line-height:normal;font-=
family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternate=
s:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-var=
iant-east-asian:normal;font-feature-settings:normal;color:rgb(0,0,0)"><span=
style=3D"font-variant-ligatures:no-common-ligatures">$ openssl genpkey -al=
gorithm <b>X25519MLKEM768</b> -out x25519_mlkem_768_key.pem</span></p>
<p style=3D"margin:0px;font-size:18px;line-height:normal;font-family:Menlo;=
font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font=
-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asi=
an:normal;font-feature-settings:normal;color:rgb(0,0,0)"><span style=3D"fon=
t-variant-ligatures:no-common-ligatures">Error writing key(s)</span></p>
<p style=3D"margin:0px;font-size:18px;line-height:normal;font-family:Menlo;=
font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font=
-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asi=
an:normal;font-feature-settings:normal;color:rgb(0,0,0)"><span style=3D"fon=
t-variant-ligatures:no-common-ligatures">80CB0C248B760000:error:1D800065:EN=
CODER routines:OSSL_ENCODER_to_bio:reason(101):crypto/encode_decode/encoder=
_lib.c:78:No encoders were found. For standard encoders you need at least o=
ne of the default or base providers available. Did you forget to load them?=
</span></p>
<p style=3D"margin:0px;font-size:18px;line-height:normal;font-family:Menlo;=
font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font=
-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asi=
an:normal;font-feature-settings:normal;color:rgb(0,0,0)"><span style=3D"fon=
t-variant-ligatures:no-common-ligatures">80CB0C248B760000:error:04800073:PE=
M routines:do_pk8pkey:error converting private key:crypto/pem/pem_pk8.c:132=
:</span></p><p style=3D"margin:0px;font-size:18px;line-height:normal;font-f=
amily:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alternates=
:normal;font-variant-ligatures:normal;font-variant-numeric:normal;font-vari=
ant-east-asian:normal;font-feature-settings:normal;color:rgb(0,0,0)"><span =
style=3D"font-variant-ligatures:no-common-ligatures"><br></span></p>
<p style=3D"margin:0px;font-size:18px;line-height:normal;font-family:Menlo;=
font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font=
-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asi=
an:normal;font-feature-settings:normal;color:rgb(64,11,217)"><span style=3D=
"color:rgb(0,0,0)">$ openssl list -providers</span><br></p>
<p style=3D"margin:0px;font-size:18px;line-height:normal;font-family:Menlo;=
font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font=
-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asi=
an:normal;font-feature-settings:normal;color:rgb(0,0,0)"><span style=3D"fon=
t-variant-ligatures:no-common-ligatures">Providers:</span></p>
<p style=3D"margin:0px;font-size:18px;line-height:normal;font-family:Menlo;=
font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font=
-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asi=
an:normal;font-feature-settings:normal;color:rgb(0,0,0)"><span style=3D"fon=
t-variant-ligatures:no-common-ligatures"><span class=3D"gmail-Apple-convert=
ed-space">=C2=A0 </span>default</span></p>
<p style=3D"margin:0px;font-size:18px;line-height:normal;font-family:Menlo;=
font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font=
-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asi=
an:normal;font-feature-settings:normal;color:rgb(0,0,0)"><span style=3D"fon=
t-variant-ligatures:no-common-ligatures"><span class=3D"gmail-Apple-convert=
ed-space">=C2=A0 =C2=A0 </span>name: OpenSSL Default Provider</span></p>
<p style=3D"margin:0px;font-size:18px;line-height:normal;font-family:Menlo;=
font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font=
-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asi=
an:normal;font-feature-settings:normal;color:rgb(0,0,0)"><span style=3D"fon=
t-variant-ligatures:no-common-ligatures"><span class=3D"gmail-Apple-convert=
ed-space">=C2=A0 =C2=A0 </span>version: 3.5.5</span></p>
<p style=3D"margin:0px;font-size:18px;line-height:normal;font-family:Menlo;=
font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font=
-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asi=
an:normal;font-feature-settings:normal;color:rgb(0,0,0)"><span style=3D"fon=
t-variant-ligatures:no-common-ligatures"><span class=3D"gmail-Apple-convert=
ed-space">=C2=A0 =C2=A0 </span>status: active</span></p>
<p style=3D"margin:0px;font-size:18px;line-height:normal;font-family:Menlo;=
font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font=
-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asi=
an:normal;font-feature-settings:normal;color:rgb(64,11,217)"><span style=3D=
"font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">$<span class=
=3D"gmail-Apple-converted-space">=C2=A0</span></span></p><p style=3D"margin=
:0px;font-size:18px;line-height:normal;font-family:Menlo;font-size-adjust:n=
one;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures=
:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-fea=
ture-settings:normal;color:rgb(64,11,217)"><span style=3D"font-variant-liga=
tures:no-common-ligatures;color:rgb(0,0,0)"><span class=3D"gmail-Apple-conv=
erted-space"><br></span></span></p><p style=3D"margin:0px;font-size:18px;li=
ne-height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;=
font-variant-alternates:normal;font-variant-ligatures:normal;font-variant-n=
umeric:normal;font-variant-east-asian:normal;font-feature-settings:normal;c=
olor:rgb(0,0,0)"><span style=3D"font-variant-ligatures:no-common-ligatures"=
>$ openssl list -kem-algorithms | grep -i mlkem</span></p><p style=3D"margi=
n:0px;font-size:18px;line-height:normal;font-family:Menlo;font-size-adjust:=
none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligature=
s:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-fe=
ature-settings:normal;color:rgb(0,0,0)"><span style=3D"font-variant-ligatur=
es:no-common-ligatures"><span class=3D"gmail-Apple-converted-space">=C2=A0 =
</span>{ 2.16.840.1.101.3.4.4.1, id-alg-ml-kem-512, ML-KEM-512, </span><spa=
n style=3D"font-variant-ligatures:no-common-ligatures;color:rgb(180,36,25)"=
><b>MLKEM</b></span><span style=3D"font-variant-ligatures:no-common-ligatur=
es">512 } @ default</span></p><p style=3D"margin:0px;font-size:18px;line-he=
ight:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-=
variant-alternates:normal;font-variant-ligatures:normal;font-variant-numeri=
c:normal;font-variant-east-asian:normal;font-feature-settings:normal;color:=
rgb(0,0,0)"><span style=3D"font-variant-ligatures:no-common-ligatures"><spa=
n class=3D"gmail-Apple-converted-space">=C2=A0 </span>{ 2.16.840.1.101.3.4.=
4.2, id-alg-ml-kem-768, ML-KEM-768, </span><span style=3D"font-variant-liga=
tures:no-common-ligatures;color:rgb(180,36,25)"><b>MLKEM</b></span><span st=
yle=3D"font-variant-ligatures:no-common-ligatures">768 } @ default</span></=
p><p style=3D"margin:0px;font-size:18px;line-height:normal;font-family:Menl=
o;font-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;fo=
nt-variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-a=
sian:normal;font-feature-settings:normal;color:rgb(0,0,0)"><span style=3D"f=
ont-variant-ligatures:no-common-ligatures"><span class=3D"gmail-Apple-conve=
rted-space">=C2=A0 </span>{ 2.16.840.1.101.3.4.4.3, id-alg-ml-kem-1024, ML-=
KEM-1024, </span><span style=3D"font-variant-ligatures:no-common-ligatures;=
color:rgb(180,36,25)"><b>MLKEM</b></span><span style=3D"font-variant-ligatu=
res:no-common-ligatures">1024 } @ default</span></p><p style=3D"margin:0px;=
font-size:18px;line-height:normal;font-family:Menlo;font-size-adjust:none;f=
ont-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:norm=
al;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-=
settings:normal;color:rgb(0,0,0)"><span style=3D"font-variant-ligatures:no-=
common-ligatures"><span class=3D"gmail-Apple-converted-space">=C2=A0 </span=
><b>X25519</b></span><span style=3D"font-variant-ligatures:no-common-ligatu=
res;color:rgb(180,36,25)"><b>MLKEM</b></span><span style=3D"font-variant-li=
gatures:no-common-ligatures"><b>768</b> @ default</span></p><p style=3D"mar=
gin:0px;font-size:18px;line-height:normal;font-family:Menlo;font-size-adjus=
t:none;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatu=
res:normal;font-variant-numeric:normal;font-variant-east-asian:normal;font-=
feature-settings:normal;color:rgb(0,0,0)"><span style=3D"font-variant-ligat=
ures:no-common-ligatures"><span class=3D"gmail-Apple-converted-space">=C2=
=A0 </span>X448</span><span style=3D"font-variant-ligatures:no-common-ligat=
ures;color:rgb(180,36,25)"><b>MLKEM</b></span><span style=3D"font-variant-l=
igatures:no-common-ligatures">1024 @ default</span></p><p style=3D"margin:0=
px;font-size:18px;line-height:normal;font-family:Menlo;font-size-adjust:non=
e;font-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:n=
ormal;font-variant-numeric:normal;font-variant-east-asian:normal;font-featu=
re-settings:normal;color:rgb(0,0,0)"><span style=3D"font-variant-ligatures:=
no-common-ligatures"><span class=3D"gmail-Apple-converted-space">=C2=A0 </s=
pan>SecP256r1</span><span style=3D"font-variant-ligatures:no-common-ligatur=
es;color:rgb(180,36,25)"><b>MLKEM</b></span><span style=3D"font-variant-lig=
atures:no-common-ligatures">768 @ default</span></p><p style=3D"margin:0px;=
font-size:18px;line-height:normal;font-family:Menlo;font-size-adjust:none;f=
ont-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:norm=
al;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-=
settings:normal;color:rgb(0,0,0)"><span style=3D"font-variant-ligatures:no-=
common-ligatures"><span class=3D"gmail-Apple-converted-space">=C2=A0 </span=
>SecP384r1</span><span style=3D"font-variant-ligatures:no-common-ligatures;=
color:rgb(180,36,25)"><b>MLKEM</b></span><span style=3D"font-variant-ligatu=
res:no-common-ligatures">1024 @ default</span></p><p style=3D"margin:0px;fo=
nt-size:18px;line-height:normal;font-family:Menlo;font-size-adjust:none;fon=
t-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:normal=
;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-se=
ttings:normal;color:rgb(64,11,217)"><span style=3D"font-variant-ligatures:n=
o-common-ligatures;color:rgb(0,0,0)"><span class=3D"gmail-Apple-converted-s=
pace">
</span></span></p><p style=3D"margin:0px;font-size:18px;line-height:normal;=
font-family:Menlo;font-size-adjust:none;font-kerning:auto;font-variant-alte=
rnates:normal;font-variant-ligatures:normal;font-variant-numeric:normal;fon=
t-variant-east-asian:normal;font-feature-settings:normal;color:rgb(64,11,21=
7)"><span style=3D"font-variant-ligatures:no-common-ligatures;color:rgb(0,0=
,0)">$<span class=3D"gmail-Apple-converted-space">=C2=A0</span></span></p><=
p style=3D"margin:0px;font-size:18px;line-height:normal;font-family:Menlo;f=
ont-size-adjust:none;font-kerning:auto;font-variant-alternates:normal;font-=
variant-ligatures:normal;font-variant-numeric:normal;font-variant-east-asia=
n:normal;font-feature-settings:normal;color:rgb(64,11,217)"><span style=3D"=
font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class=3D=
"gmail-Apple-converted-space"><br></span></span></p><p style=3D"margin:0px;=
font-size:18px;line-height:normal;font-family:Menlo;font-size-adjust:none;f=
ont-kerning:auto;font-variant-alternates:normal;font-variant-ligatures:norm=
al;font-variant-numeric:normal;font-variant-east-asian:normal;font-feature-=
settings:normal;color:rgb(64,11,217)"><span style=3D"font-variant-ligatures=
:no-common-ligatures;color:rgb(0,0,0)"><span class=3D"gmail-Apple-converted=
-space">(snip)</span></span></p><p style=3D"margin:0px;font-size:18px;line-=
height:normal;font-family:Menlo;font-size-adjust:none;font-kerning:auto;fon=
t-variant-alternates:normal;font-variant-ligatures:normal;font-variant-nume=
ric:normal;font-variant-east-asian:normal;font-feature-settings:normal;colo=
r:rgb(64,11,217)"><span style=3D"font-variant-ligatures:no-common-ligatures=
;color:rgb(0,0,0)"><span class=3D"gmail-Apple-converted-space"><br></span><=
/span></p></div><div>I assume the support is added by default and no provid=
er load is needed. Can anyone please share what am i missing ? Thanks in ad=
vance.</div><div><br></div><div>Regards,</div><div>Murugesh</div></div>
<p></p>
-- <br />
You received this message because you are subscribed to the Google Groups &=
quot;openssl-users" group.<br />
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to <a href=3D"mailto:openssl-users+unsubscribe-MCmKBN63+BlAfugRpC6u6w@public.gmane.org">openssl-us=
[email protected]</a>.<br />
To view this discussion visit <a href=3D"https://groups.google.com/a/openss=
l.org/d/msgid/openssl-users/CAOu9RAdFHfB4_RtCsD79tNTCuE3PiUtOn31Ora82dE_LYg=
Pzcw%40mail.gmail.com?utm_medium=3Demail&utm_source=3Dfooter">https://group=
s.google.com/a/openssl.org/d/msgid/openssl-users/CAOu9RAdFHfB4_RtCsD79tNTCu=
E3PiUtOn31Ora82dE_LYgPzcw%40mail.gmail.com</a>.<br />
--000000000000c7d11e064e031b18--