Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
34 changes: 34 additions & 0 deletions docs/features/pqc.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,34 @@
# 在铜锁中使用 PQC 建立 TLS 1.3 连接

目前铜锁提供了 SM2DH-MLKEM768-hybrid 混合抗量子密码密钥交换算法。本文描述如何在编译选项中引入该算法参数以及如何在建立 TLS 1.3 连接时使用该参数。

## 编译(默认开启)

在 ./config 后加上对应的命令行选项:

```
./config enable-kyber enable-sm2dh-mlkem768-hybrid
```

通过下面的命令行选项禁用:

```
./config no-kyber no-sm2dh-mlkem768-hybrid
```

当 tls-1.3、ec、sm2 等相关特性被关闭时,sm2dh-mlkem768-hybrid 也会被关闭。

## 使用

可以通过 OpenSSL 命令行使用:

```
-groups SM2DH_MLKEM768_HYBRID
```

也可以通过下面的 API 使用:

```
SSL_CTX_set1_groups_list(ctx, "SM2DH_MLKEM768_HYBRID");
```