[feature] PQC KEM
[email protected] Mon, 29 Jun 2026 18:27:41 +0200 (CEST)
| Newsgroups | dev.linux.lists.cryptsetup |
|---|---|
| Message-ID | <[email protected]> |
Interested in introducing a new LUKS2 "xwing" keyslot type unlocked by an X= -Wing post-quantum hybrid KEM (ML-KEM-768 + X25519, draft-connolly-cfrg-xwing-kem= ) instead of a passphrase to encrypt the kek (volume key)? 1) asymmetric model won't shine in single user case but will be attractive = in multiple user/image enrollment cases. 2) if per-device fresh wrapping key is desired I've implemented such keyslot type and tested.=C2=A0 But don't know if the = aforementioned two cases is worth discussion. Kind regards, Alan