wolfssl/tests/test-tls13-pq.conf

# server TLSv1.3 with post-quantum group
-v 4
-l TLS13-AES256-GCM-SHA384
--pqc ML_KEM_512

# client TLSv1.3 with post-quantum group
-v 4
-l TLS13-AES256-GCM-SHA384
--pqc ML_KEM_512

# server TLSv1.3 with post-quantum group
-v 4
-l TLS13-AES256-GCM-SHA384
--pqc ML_KEM_768

# client TLSv1.3 with post-quantum group
-v 4
-l TLS13-AES256-GCM-SHA384
--pqc ML_KEM_768

# server TLSv1.3 with post-quantum group
-v 4
-l TLS13-AES256-GCM-SHA384
--pqc ML_KEM_1024

# client TLSv1.3 with post-quantum group
-v 4
-l TLS13-AES256-GCM-SHA384
--pqc ML_KEM_1024

# server TLSv1.3 with post-quantum group
-v 4
-l TLS13-AES256-GCM-SHA384
--pqc KYBER_LEVEL1

# client TLSv1.3 with post-quantum group
-v 4
-l TLS13-AES256-GCM-SHA384
--pqc KYBER_LEVEL1

# server TLSv1.3 with post-quantum group
-v 4
-l TLS13-AES256-GCM-SHA384
--pqc KYBER_LEVEL3

# client TLSv1.3 with post-quantum group
-v 4
-l TLS13-AES256-GCM-SHA384
--pqc KYBER_LEVEL3

# server TLSv1.3 with post-quantum group
-v 4
-l TLS13-AES256-GCM-SHA384
--pqc KYBER_LEVEL5

# client TLSv1.3 with post-quantum group
-v 4
-l TLS13-AES256-GCM-SHA384
--pqc KYBER_LEVEL5
Kyber/ML-KEM: make both available Make Kyber and ML-KEM individually available as well as at the same time. Modified TLS layer to support both Kyber and ML-KEM. Added new identifiers in TLS layer for ML-KEM. 2024-11-04 16:31:18 +10:00			`# server TLSv1.3 with post-quantum group`
			`-v 4`
			`-l TLS13-AES256-GCM-SHA384`
			`--pqc ML_KEM_512`

			`# client TLSv1.3 with post-quantum group`
			`-v 4`
			`-l TLS13-AES256-GCM-SHA384`
			`--pqc ML_KEM_512`

			`# server TLSv1.3 with post-quantum group`
			`-v 4`
			`-l TLS13-AES256-GCM-SHA384`
			`--pqc ML_KEM_768`

			`# client TLSv1.3 with post-quantum group`
			`-v 4`
			`-l TLS13-AES256-GCM-SHA384`
			`--pqc ML_KEM_768`

			`# server TLSv1.3 with post-quantum group`
			`-v 4`
			`-l TLS13-AES256-GCM-SHA384`
			`--pqc ML_KEM_1024`

			`# client TLSv1.3 with post-quantum group`
			`-v 4`
			`-l TLS13-AES256-GCM-SHA384`
			`--pqc ML_KEM_1024`

Unit tests for post-quantum groups. Also, fixes for the things they caught such as: - ssl->arrays->preMasterSecret is pre-allocated so copy into it instead of moving ownership of buffer. - server does not need to save the public key. - in TLSX_KeyShare_Parse() don't call TLSX_KeyShare_Use() because its done in TLSX_PopulateExtensions(). - in TLSX_KeyShare_Use(), the server generates the ciphertext while the client generates the public key. - in TLSX_PopulateExtensions(), prevent client from calling TLSX_KeyShare_Use() because its already been done. - Support longer curve/group names. 2021-09-27 10:29:41 -04:00			`# server TLSv1.3 with post-quantum group`
			`-v 4`
			`-l TLS13-AES256-GCM-SHA384`
--with-liboqs now defines HAVE_LIBOQS and HAVE_PQC AKA: The Great Rename of December 2021 2021-12-20 11:26:25 -05:00			`--pqc KYBER_LEVEL1`
Unit tests for post-quantum groups. Also, fixes for the things they caught such as: - ssl->arrays->preMasterSecret is pre-allocated so copy into it instead of moving ownership of buffer. - server does not need to save the public key. - in TLSX_KeyShare_Parse() don't call TLSX_KeyShare_Use() because its done in TLSX_PopulateExtensions(). - in TLSX_KeyShare_Use(), the server generates the ciphertext while the client generates the public key. - in TLSX_PopulateExtensions(), prevent client from calling TLSX_KeyShare_Use() because its already been done. - Support longer curve/group names. 2021-09-27 10:29:41 -04:00
			`# client TLSv1.3 with post-quantum group`
			`-v 4`
			`-l TLS13-AES256-GCM-SHA384`
--with-liboqs now defines HAVE_LIBOQS and HAVE_PQC AKA: The Great Rename of December 2021 2021-12-20 11:26:25 -05:00			`--pqc KYBER_LEVEL1`
Unit tests for post-quantum groups. Also, fixes for the things they caught such as: - ssl->arrays->preMasterSecret is pre-allocated so copy into it instead of moving ownership of buffer. - server does not need to save the public key. - in TLSX_KeyShare_Parse() don't call TLSX_KeyShare_Use() because its done in TLSX_PopulateExtensions(). - in TLSX_KeyShare_Use(), the server generates the ciphertext while the client generates the public key. - in TLSX_PopulateExtensions(), prevent client from calling TLSX_KeyShare_Use() because its already been done. - Support longer curve/group names. 2021-09-27 10:29:41 -04:00
			`# server TLSv1.3 with post-quantum group`
			`-v 4`
			`-l TLS13-AES256-GCM-SHA384`
--with-liboqs now defines HAVE_LIBOQS and HAVE_PQC AKA: The Great Rename of December 2021 2021-12-20 11:26:25 -05:00			`--pqc KYBER_LEVEL3`
Unit tests for post-quantum groups. Also, fixes for the things they caught such as: - ssl->arrays->preMasterSecret is pre-allocated so copy into it instead of moving ownership of buffer. - server does not need to save the public key. - in TLSX_KeyShare_Parse() don't call TLSX_KeyShare_Use() because its done in TLSX_PopulateExtensions(). - in TLSX_KeyShare_Use(), the server generates the ciphertext while the client generates the public key. - in TLSX_PopulateExtensions(), prevent client from calling TLSX_KeyShare_Use() because its already been done. - Support longer curve/group names. 2021-09-27 10:29:41 -04:00
			`# client TLSv1.3 with post-quantum group`
			`-v 4`
			`-l TLS13-AES256-GCM-SHA384`
--with-liboqs now defines HAVE_LIBOQS and HAVE_PQC AKA: The Great Rename of December 2021 2021-12-20 11:26:25 -05:00			`--pqc KYBER_LEVEL3`
Unit tests for post-quantum groups. Also, fixes for the things they caught such as: - ssl->arrays->preMasterSecret is pre-allocated so copy into it instead of moving ownership of buffer. - server does not need to save the public key. - in TLSX_KeyShare_Parse() don't call TLSX_KeyShare_Use() because its done in TLSX_PopulateExtensions(). - in TLSX_KeyShare_Use(), the server generates the ciphertext while the client generates the public key. - in TLSX_PopulateExtensions(), prevent client from calling TLSX_KeyShare_Use() because its already been done. - Support longer curve/group names. 2021-09-27 10:29:41 -04:00
			`# server TLSv1.3 with post-quantum group`
			`-v 4`
			`-l TLS13-AES256-GCM-SHA384`
--with-liboqs now defines HAVE_LIBOQS and HAVE_PQC AKA: The Great Rename of December 2021 2021-12-20 11:26:25 -05:00			`--pqc KYBER_LEVEL5`
Unit tests for post-quantum groups. Also, fixes for the things they caught such as: - ssl->arrays->preMasterSecret is pre-allocated so copy into it instead of moving ownership of buffer. - server does not need to save the public key. - in TLSX_KeyShare_Parse() don't call TLSX_KeyShare_Use() because its done in TLSX_PopulateExtensions(). - in TLSX_KeyShare_Use(), the server generates the ciphertext while the client generates the public key. - in TLSX_PopulateExtensions(), prevent client from calling TLSX_KeyShare_Use() because its already been done. - Support longer curve/group names. 2021-09-27 10:29:41 -04:00
			`# client TLSv1.3 with post-quantum group`
			`-v 4`
			`-l TLS13-AES256-GCM-SHA384`
--with-liboqs now defines HAVE_LIBOQS and HAVE_PQC AKA: The Great Rename of December 2021 2021-12-20 11:26:25 -05:00			`--pqc KYBER_LEVEL5`
Unit tests for post-quantum groups. Also, fixes for the things they caught such as: - ssl->arrays->preMasterSecret is pre-allocated so copy into it instead of moving ownership of buffer. - server does not need to save the public key. - in TLSX_KeyShare_Parse() don't call TLSX_KeyShare_Use() because its done in TLSX_PopulateExtensions(). - in TLSX_KeyShare_Use(), the server generates the ciphertext while the client generates the public key. - in TLSX_PopulateExtensions(), prevent client from calling TLSX_KeyShare_Use() because its already been done. - Support longer curve/group names. 2021-09-27 10:29:41 -04:00