Skip to content

Latest commit

 

History

History
354 lines (286 loc) · 13.6 KB

2024-08-27 - OQS status meeting - agenda.md

File metadata and controls

354 lines (286 loc) · 13.6 KB
Raw

2024-08-27 - OQS status meeting - agenda

Tuesday August 27 at 12:30 PM US Eastern Time / 6:30 PM Central European / 9:30 AM US Pacific Time on Zoom (https://zoom-lfx.platform.linuxfoundation.org/meetings/pqca?view=month)

Agenda

  1. liboqs 0.11.0 release planning
  2. TSC meeting: Tuesday September 10, 4pm Central European / 10am US Eastern / 7am US Pacific
  3. Status updates
  4. Checking in on CI status and stability

OQS subprojects

  1. OQS Technical Steering Committee
  2. liboqs
  3. OQS-OpenSSL 3 provider
  4. OQS-BoringSSL
  5. OQS-OpenSSH
  6. OQS-libssh
  7. oqs-demos
  8. profiling
  9. ci-containers
  10. liboqs language wrappers: liboqs-C++, liboqs-.NET, liboqs-Go, liboqs-Java, liboqs-Python, liboqs-Rust
  11. www.openquantumsafe.org

Pre-meeting project reviews

See project dashboard at: https://openquantumsafe.org/dashboard.html

  1. OQS Technical Steering Committee

    • Merges in the last 7 days:
      • PR 68: Add agenda for 2024-08-20 OQS status meeting
    • Open PRs:
      • PR 69: Add minutes for 2024-08-20 OQS status meeting
    • Open Issues:
      • Issue 60: Decide security (issue) report handling team and procedure
      • Issue 49: Switch open-quantum-safe/openssl to read-only
      • Issue 45: Roles of maintainers & contributors
      • Issue 28: Automated dependency management
      • Issue 27: Rollout scorecards across more repos
      • Issue 24: Decide procedure(s) to handle CI failures
      • Issue 12: Create a voting procedure for the OQS TSC
      • Issue 11: Confirm mailing list openness and retention
      • Issue 10: Update config.yaml
      • Issue 5: CI in OQS: guidelines for responsible use
      • Issue 2: OQS sub projects: Which ones to drop for good
      • Issue 1: OQS goal: non-committal research or production use?

  2. liboqs

    • Merges in the last 7 days:
      • PR 1872: Use explicit_memset if available. NetBSD has support for it:
      • PR 1898: Update OpenSSH downstream branch to OQS-v9
      • PR 1901: Disable erroring TravisCI build
      • PR 1902: Fix incorrect formatting in unix.yml
    • Open PRs:
      • PR 1700: change from ninja and custom cmake target run\_test to using cmake & ctest.
      • PR 1816: CMakeLists: add ppc case to known archs
      • PR 1834: Update CBOM format to upstream v1.6
      • PR 1839: Decode FORS indices similarly to WOTS
      • PR 1876: CPU extension detection for arm64 on NetBSD.
      • PR 1877: Add DeriveKeyPair API
      • PR 1880: Add CI workflow checking
      • PR 1881: Add CROSS
      • PR 1890: #1830 update scorecard to v5 (gh action 2.4.0)
      • PR 1899: Add ML-KEM / FIPS203 final
    • Open Issues:
      • Issue 1904: Explicitly testing generic and non-generic code variants
      • Issue 1897: Current "main" fails to gen_docs
      • Issue 1896: unused variable
      • Issue 1894: SLH-DSA: integrate final standard
      • Issue 1891: ML-DSA & ML-KEM: integrate final standards
      • Issue 1888: Re-activate Travis CI for Tier-3 IBM platforms
      • Issue 1885: Cannot open tmp file for reading when running test_kem_mem and test_sig_mem
      • Issue 1882: CMAKE_POSITION_INDEPENDENT_CODE should be optional
      • Issue 1868: Add CodeQL query to check for memset calls
      • Issue 1867: Add CodeQL query to enforce OpenSSL return code handling
      • Issue 1866: Add CI workflow analysis tooling
      • Issue 1864: memset used instead of OQS_MEM_CLEANSE
      • Issue 1856: Add GitHub Actions to automate project board management
      • Issue 1851: Add diagrams for minimal examples in wiki and liboqs documentation
      • Issue 1843: Update CODEOWNERS
      • Issue 1842: Use OQS_*_set_callbacks instead of C_OR_NI_OR_ARM macros
      • Issue 1841: Document public / internal API split
      • Issue 1840: Define threat model for liboqs
      • Issue 1838: Decode FORS indices similarly to WOTS
      • Issue 1831: Update CBOM to CycloneDX 1.6 format
      • Issue 1830: scorecard: update to version 5
      • Issue 1829: scorecard: publish results & run weekly
      • Issue 1827: Update CI status report
      • Issue 1824: huge stack usage
      • Issue 1823: Replace malloc/free with OPENSSL_malloc/OpenSSL_free
      • Issue 1811: The library always links against libpthreads
      • Issue 1807: Extend constant-time testing
      • Issue 1804: CI: macOS build failures
      • Issue 1802: Recreate public key from private
      • Issue 1788: Enable data independent timing on Apple Silicon
      • Issue 1786: Enhance test output
      • Issue 1785: Add documentation Markdown linter to CI
      • Issue 1783: Remove unnecessary downstream CI
      • Issue 1780: Update Ubuntu support to more current LTS version(s)
      • Issue 1770: Add C++ test to ci
      • Issue 1768: dlfcn required for windows build
      • Issue 1766: Overhauling OQS_MEM functions
      • Issue 1765: Automated dependency checks/updates
      • Issue 1761: Valgrind Massif Tool Breaks During Verify Operation of Falcon Algorithms on Raspberry Pi
      • Issue 1760: Document DCO utility and HOWTO
      • Issue 1750: Return value from OQS_randombytes
      • Issue 1740: Add more test vectors for ML-KEM
      • Issue 1719: Improve algorithm versioning
      • Issue 1705: Handle out-of-memory errors gracefully
      • Issue 1691: Align platforms supported with OpenSSL
      • Issue 1678: Investigate BIKE failures on x86
      • Issue 1674: Expand weekly test runs to platforms other than x86_64 / Linux
      • Issue 1673: Clearly document KAT sources
      • Issue 1639: CI tooling for variable-time operations on some platforms
      • Issue 1623: Update PR approval requirements
      • Issue 1619: Introduce constant time build variable
      • Issue 1596: Update HQC AVX2 implementation
      • Issue 1540: Environment-specific Classic McEliece constant-time leaks
      • Issue 1514: Review & automate license management
      • Issue 1494: Use modern CMake syntax
      • Issue 1474: Multithreading tests
      • Issue 1466: Integrate Kyber implementation from libjade
      • Issue 1456: Add telltale error handling in void functions
      • Issue 1437: CC0 license is an obstacle
      • Issue 1426: OQS_USE_SHA3_OPENSSL=ON makes running tests significantly slower
      • Issue 1416: RISC-V support
      • Issue 1408: Test all scripts
      • Issue 1366: Run clang's MemorySanitizer in CI
      • Issue 1233: Common code for s390x / ppc64le, Windows
      • Issue 1215: Add fuzzing testing
      • Issue 1206: Adding a DeriveKeyPair functionality
      • Issue 1199: WASM compatibillity
      • Issue 1185: Adding a build variable to specify armv8 version
      • Issue 1138: Correct OQS_MINIMAL_BUILD logic when introducing new optimizations
      • Issue 1083: Enabling more compiler warnings
      • Issue 910: Establish interop with Circl
      • Issue 167: Code coverage

  3. OQS-OpenSSL 3 provider

    • Merges in the last 7 days:
      • PR 493: Force liboqs as a debian package dependency requirement only if it is not a static linked library.
      • PR 499: openssl and contribution documentation updates [skip ci]
    • Open PRs:
      • PR 367: improve static build testing
      • PR 412: MSVC C2059 error when no signature is enabled
      • PR 461: Add CROSS
      • PR 498: Adds note on supported openssl versions for tls certificates.
    • Open Issues:
      • Issue 503: Implement new ML-KEM hybrid key exchange in TLS
      • Issue 502: Change default signature algorithms enabled
      • Issue 494: Unknown certificate type
      • Issue 492: Cannot use dilithium certificates with s_server
      • Issue 490: Add code coverage testing
      • Issue 488: Testing in openssl 3.1/3.0
      • Issue 485: Document & test the new/3.4.0 encap/decap feature
      • Issue 483: Reliability
      • Issue 482: Windows: Build fails when using OQS_MINIMAL_BUILD
      • Issue 481: Handshake Failures with Post-Quantum Certificates on SCTP & DTLS 1.2
      • Issue 475: Missing Composite documentation
      • Issue 473: CI upgrade breaks clang formatting and asan testing
      • Issue 472: TLS sig tests failing when OQS_KEM_ENCODERS=ON
      • Issue 466: The privateKey encoding for pure ml-dsa differs from the privateKey encoding for the ml-dsa part in composite ml-dsa-xxxx
      • Issue 464: tlssig test takes huge amount of time
      • Issue 451: Do project self-assessment
      • Issue 447: Support deterministic key generation
      • Issue 430: Too many agruments to function 'mkdir' on Windows
      • Issue 399: Too many advertised sig algs cause TLS server hang-up
      • Issue 375: Refactor code
      • Issue 372: How to separate the post-quantum algorithmic key and the classical key in the generated pkey
      • Issue 354: Adapt oqsprovider to liboqs version during build
      • Issue 353: Make CI using downstream integrations optional
      • Issue 351: Document & curate (O)IDs
      • Issue 331: Supporting Stateful Signatures
      • Issue 293: Document platforms supported
      • Issue 289: Enable CI runs for specific upstream tags
      • Issue 272: Race condition with c\_obj\_create.
      • Issue 251: Using PKCS#7 OpenSSL API
      • Issue 248: Move off CircleCI
      • Issue 239: Missing support for hash-n-sign
      • Issue 228: Eliminate use of jinja2
      • Issue 227: Create PR for brew when oqsprovider is notable enough
      • Issue 162: Improve use of IDs in ERR_raise()
      • Issue 155: Improve (heap) memory consumption
      • Issue 94: Make available binaries
      • Issue 81: Faster error-exit
      • Issue 17: Hybrid KEM: more combiners, more abstraction

  4. OQS-BoringSSL

    • Merges in the last 7 days:
      • PR 118: Add support for hybrid signature algorithms
      • PR 120: Drop CircleCI and switch to GitHub Actions
    • Open PRs: None
    • Open Issues:
      • Issue 96: Add OpenSSL interop testing
      • Issue 81: Introduce TLS_DEFAULT_GROUPS env var
      • Issue 77: Automate hybrid strength assignment
      • Issue 60: Add some OQS tests to x509/x509_test.cc and evp/evp_test.cc

  5. OQS-OpenSSH

    • Merges in the last 7 days:
      • PR 165: Update PQ Algorithms
      • PR 168: Migrate CI to Github Actions
      • PR 169: Add support for hybrid-PQ key exchange with x25519
    • Open PRs: None
    • Open Issues:
      • Issue 170: Add liboqs-backed implementation of sntrup761x25519-sha512@openssh.com
      • Issue 164: Add support for XMSS SSH Keys and Certificates
      • Issue 163: Update supported algorithms
      • Issue 150: Memory leaks in oqs ecdh path
      • Issue 90: OpenSSH 8.4: Figure out if the regression suite can be augmented
      • Issue 89: Figure out why certain tests are failing.
      • Issue 24: Enable PQ certs

  6. OQS-libssh

    • Merges in the last 7 days: None.
    • Open PRs: None
    • Open Issues:
      • Issue 21: pkd_hello test suite breaks on Ubuntu 22.04 host

  7. oqs-demos

    • Merges in the last 7 days:
      • PR 291: Bring QUIC Back
      • PR 295: Add QUIC Workflow
    • Open PRs: None
    • Open Issues:
      • Issue 294: Switch off CircleCI
      • Issue 284: Automate and streamline docker image generation
      • Issue 273: HAProxy
      • Issue 270: Dont get Server Temp Key in openssl s_client when testing
      • Issue 266: oqs-epiphany not working
      • Issue 255: Wireshark Docker Build Fails with WolfSSL Due to Undeclared 'QSC_SIG_CPS' Variable
      • Issue 230: Fix integrations to specific commits?
      • Issue 229: Cannot switch off OQS_HAVE_GETENTROPY, OQS_HAVE_EXPLICIT_BZERO
      • Issue 226: haproxy build failed on MacOS
      • Issue 216: add into edk2 openssllib
      • Issue 213: Create cross-platform docker images in github
      • Issue 200: Path to a NodeJS demo
      • Issue 182: replace oqs-openssl111
      • Issue 171: Create CI/docker push for unbound
      • Issue 92: Add OQS to libnss (enabling loading quantum safe certificate into Chromium)

  8. profiling

    • Merges in the last 7 days: None.
    • Open PRs: None
    • Open Issues:
      • Issue 110: liboqs benchmarking still running 0.9.0-rc1

  9. ci-containers

    • Merges in the last 7 days: None.
    • Open PRs:
      • PR 85: Build Ubuntu CI containers on GitHub Actions
    • Open Issues:
      • Issue 81: Update Container build CI
      • Issue 78: Track container usage
      • Issue 74: Refresh ci-debian-buster container image used for build

  10. liboqs-C++

    • Merges in the last 7 days: None.
    • Open PRs: None
    • Open Issues:
      • Issue 20: Compile error

  11. liboqs-.NET

    • Merges in the last 7 days: None.
    • Open PRs: None
    • Open Issues:
      • Issue 28: fix Classic McEliece stackoverflow issue by running unit tests with larger stack

  12. liboqs-Go

    • Merges in the last 7 days: None.
    • Open PRs: None
    • Open Issues:
      • Issue 40: A pipeline to release container image on github?

  13. liboqs-Java

    • Merges in the last 7 days:
      • PR 25: Optimize pom.xml & Some fixes
    • Open PRs: None
    • Open Issues:
      • Issue 20: Tag 0.1.1
      • Issue 1: Enable build on Windows

  14. liboqs-Python

    • Merges in the last 7 days: None.
    • Open PRs: None
    • Open Issues:
      • Issue 86: Building for MacOS M1 (Arm)
      • Issue 78: Importing OpenSSL keys and certificates
      • Issue 74: Kat-Vector-Falcon

  15. liboqs-Rust

    • Merges in the last 7 days: None.
    • Open PRs:
      • PR 259: feat: update liboqs, add ml-kem / ml-dsa
      • PR 260: feat: Auto-allocate stack in runtime
      • PR 261: chore(ci): bump KyleMayes/install-llvm-action from 1.9.0 to 2.0.3 in the actions group
      • PR 264: build: Update build script to enable cross compiling for Android
    • Open Issues:
      • Issue 265: Cross compilation results in size mismatch of ssize\_t and pointer size
      • Issue 263: MacOS build fails (as linking against OpenSSL1 instead of 3)
      • Issue 262: Please document how to build against the system copy of liboqs
      • Issue 216: Don't recompile oqs everytime cargo build is invoked
      • Issue 202: expose OQS\_PERMIT\_UNSUPPORTED\_ARCHITECTURE, for example as cargo feature
      • Issue 137: Support RustCrypto KEM and Signature traits
      • Issue 131: WASM compatibility
      • Issue 127: ARMv8 compatibility: CI and cross-compiling?

  16. www.openquantumsafe.org : No updates