Freeman Yue Fang created CXF-9228:
-------------------------------------

             Summary: Post-Quantum Cryptography (PQC) Readiness
                 Key: CXF-9228
                 URL: https://issues.apache.org/jira/browse/CXF-9228
             Project: CXF
          Issue Type: New Feature
            Reporter: Freeman Yue Fang


This is the umbrella ticket to support Post-Quantum Cryptography (PQC) in CXF.

We can add sub tickets under this one to support PQC in CXF.

What in my mind after investigation is

1. TLS / Transport layer
2. WS-Security (WSS4J + Santuario)
- New XML-DSig algorithm URIs for ML-DSA, SLH-DSA (signatures)
- New XML-Enc algorithm URIs for ML-KEM (key encapsulation)
3. JOSE / JAX-RS security
- PQC JWS signature algorithms (ML-DSA based, being standardized in IETF)
4. Key/Certificate management
- KeyManagerUtils, TrustManagerUtils need to handle PQC key types




--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to