Adding post-quantum cryptography (PQC) support
Nobody has claimed this yet.
- Dominant language
- Ruby
- Stars
- 226
- Forks
- 28
- Avg merge
- 7m
- Merged PRs (30d)
- 1
Description
This ticket is a sub task of the https://bugs.ruby-lang.org/issues/22068.
For the common topics which is not RubyGems specific, you can check this Ruby issue ticket. I write drb related things on this ticket.
DRb::DRbSSLSocket::SSLConfig already works with pre-generated PQC-supported ML-DSA cert/key by :SSLCertificate and :SSLPrivateKey config options.
However, drbssl server's dual/multiple certificate support are missing. An SSL server that accepts clients with either ML-DSA-NN or RSA certificates is useful in the use case of PQC migration from RSA (non-PQC) to ML-DSA (PQC). I also want DRb::DRbSSLSocket::SSLConfig#setup_certificate's option to generate ML-DSA-44, ML-DSA-65, ML-DSA-87 certificates and keys. I prepared the PR. I am going to send the PR soon.
Files to modify
Below is a list of the files that we may modify to support PQC at least.
lib/drb/ssl.rb
PQC related pull-requests
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start in lib/drb/ssl.rb, focusing on DRb::DRbSSLSocket::SSLConfig and its setup_certificate option. Review the related Ruby issue and pull request #53 for the PQC context. Done means drbssl supports dual or multiple RSA and ML-DSA certificates and can generate ML-DSA-44, ML-DSA-65, and ML-DSA-87 certificates and keys.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- ruby
- Domain
- cryptography
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100