Skip to content

ROX-33133: Enable post-quantum crypto-policies for upstream fact#364

Merged
vladbologa merged 1 commit intomainfrom
vb/enable-pqc-upstream
Mar 6, 2026
Merged

ROX-33133: Enable post-quantum crypto-policies for upstream fact#364
vladbologa merged 1 commit intomainfrom
vb/enable-pqc-upstream

Conversation

@vladbologa
Copy link
Contributor

@vladbologa vladbologa commented Mar 6, 2026

Description

Similar to #349 but for the upstream image.

Enable PQC algorithms on the image for feature parity with the downstream build.

Checklist

  • Investigated and inspected CI test results
  • Updated documentation accordingly

Automated testing

  • Added unit tests
  • Added integration tests
  • Added regression tests

If any of these don't apply, please comment below.

Testing Performed

Checked that the image built by CI supports PQ algos:

[root@31e7cddcd493 /]# cat /etc/crypto-policies/config
DEFAULT:PQ
[root@31e7cddcd493 /]# cat /etc/crypto-policies/back-ends/opensslcnf.config | grep Groups
Groups = *?X25519MLKEM768:?x25519_mlkem768:?SecP256r1MLKEM768:?p256_mlkem768:?SecP384r1MLKEM1024:?p384_mlkem1024/*X25519:secp256r1:X448:secp521r1:secp384r1:ffdhe2048:ffdhe3072:ffdhe4096:ffdhe6144:ffdhe8192

@vladbologa vladbologa requested a review from a team as a code owner March 6, 2026 09:51
Copy link
Contributor

@Molter73 Molter73 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

@vladbologa vladbologa merged commit 085c92a into main Mar 6, 2026
24 checks passed
@vladbologa vladbologa deleted the vb/enable-pqc-upstream branch March 6, 2026 10:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants