boring2/boring-sys/patches
0x676e67 bed5243775
feat: Add `kDHE` && `ffdhe2048`/`ffdhe3072` curves working implement (#36)
* RTG-3333 Support X25519MLKEM768 by default, but don't sent it as client

X25519MLKEM768 is the standardised successor of the preliminary
X25519Kyber768Draft00. Latest browsers have switched to X25519MLKEM768.
Cloudflare supports both on the edge.

We've had support for X25519MLKEM768 in this crate for a while, but
didn't enable by default. We're now enabling serverside support by
default. We also let clients advertise support when set
to kx-client-pq-supported.

We don't enable support by default yet for clients set to
kx-client-pq-preferred, as that would cause an extra round-trip due to
HelloRetryRequest if the server doesn't support X25519MLKEM768 yet.

BoringSSL against which we build must support X25519MLKEM768, otherwise
this will fail.

* feat: Add kDHE && ffdhe2048/ffdhe3072 curves working implement

* Update

---------

Co-authored-by: Bas Westerbaan <bas@cloudflare.com>
2025-01-22 13:08:20 +08:00
..
boring-pq.patch boring-pq.patch Fix by not updating crypto_test_data.cc 2024-09-19 00:17:37 +02:00
boringssl-44b3df6f03d85c901767250329c571db405122d5.patch feat: Add `kDHE` && `ffdhe2048`/`ffdhe3072` curves working implement (#36) 2025-01-22 13:08:20 +08:00
rpk.patch Fix building with non bazel commits of boringssl 2024-02-02 14:56:55 +00:00
underscore-wildcards.patch Introduce X509CheckFlags::UNDERSCORE_WILDCARDS 2024-01-02 15:37:36 +01:00