Skip to content

PQ key material + provider polish#5

Merged
pdb0102 merged 16 commits into
mainfrom
feature/scep-test-client-phase-4
Jun 20, 2026
Merged

PQ key material + provider polish#5
pdb0102 merged 16 commits into
mainfrom
feature/scep-test-client-phase-4

Conversation

@pdb0102

@pdb0102 pdb0102 commented Jun 20, 2026

Copy link
Copy Markdown
Owner

No description provided.

pdb0102 and others added 16 commits June 20, 2026 13:09
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DBF7SxuRaJgFEMv5TdznH1
…Capabilities

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DBF7SxuRaJgFEMv5TdznH1
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DBF7SxuRaJgFEMv5TdznH1
…ature

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DBF7SxuRaJgFEMv5TdznH1
…t-key-spec

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DBF7SxuRaJgFEMv5TdznH1
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DBF7SxuRaJgFEMv5TdznH1
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DBF7SxuRaJgFEMv5TdznH1
…load sites

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DBF7SxuRaJgFEMv5TdznH1
…ed-contract proof)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DBF7SxuRaJgFEMv5TdznH1
…PQ CSRs by OID

BouncyCastle 2.5.0 DOES support the SLH-DSA fast (f) variants. Restore the six
SHA2 sets (128s/128f/192s/192f/256s/256f) in KeySpec/registry/provider, and fix
the 192s/256s registry OIDs (were .21/.22; the NIST CSOR arc .20-.25 is sequential
across s/f, so correct values are .22/.24). Sign PQ CSRs via the algorithm OID
(Asn1SignatureFactory does not recognize the SLH-DSA friendly names) — also closes
a latent gap: no SLH-DSA CSR was previously exercised.
@pdb0102
pdb0102 merged commit 625c4fb into main Jun 20, 2026
1 check passed
@pdb0102
pdb0102 deleted the feature/scep-test-client-phase-4 branch June 20, 2026 23:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant