[feature] PQC KEM

[email protected] Mon, 29 Jun 2026 18:27:41 +0200 (CEST)
Newsgroups dev.linux.lists.cryptsetup
Message-ID <[email protected]>
Interested in introducing a new LUKS2 "xwing" keyslot type unlocked by an X=
-Wing
post-quantum hybrid KEM (ML-KEM-768 + X25519, draft-connolly-cfrg-xwing-kem=
)
instead of a passphrase to encrypt the kek (volume key)?

1) asymmetric model won't shine in single user case but will be attractive =
in multiple user/image enrollment cases.
2) if per-device fresh wrapping key is desired


I've implemented such keyslot type and tested.=C2=A0 But don't know if the =
aforementioned two cases is worth discussion.

Kind regards,
Alan