Hello Sequoia Developers,
I was just wondering if adding support for post-quantum cryptography is
planned in the near future. Algorithms such as Classic McEliece, ML-KEM,
ML-DSA, etc.
If so please let me know the schedule.
If not how come.
I thank the developers in advance for any responses!
Best,
Tanveer Salim
Tanveer Salim fosres@posteo.de writes:
I was just wondering if adding support for post-quantum cryptography is planned in the near future. Algorithms such as Classic McEliece, ML-KEM, ML-DSA, etc.
If so please let me know the schedule.
Post-quantum cryptography for OpenPGP is being standardized by the IETF. The document in question is in the late stage of the process, but it has not been published to this day. You can view it, and follow its progress, here:
https://datatracker.ietf.org/doc/draft-ietf-openpgp-pqc/
We have a complete implementation of this draft waiting for the document to be published. You can find it here:
https://gitlab.com/sequoia-pgp/sequoia/-/tree/justus/pqc?ref_type=heads
You can observe pre-releases of Sequoia, OpenPGP.js, and GopenPGP that support PQC demonstrating interoperability on the PQC artifacts and algorithms here:
https://sequoia-pgp.gitlab.io/openpgp-interoperability-test-suite/results.ht...
As soon as the spec is published, you can expect major releases adding PQC support from all these projects.
Best, Justus
Hi Justus,
First thanks for responding to my question.
I do not see Classic McEliece supported.
How come?
Please let me know.
Best,
Tanveer Salim
On 8/25/25 08:45, Justus Winter wrote:
Tanveer Salim fosres@posteo.de writes:
I was just wondering if adding support for post-quantum cryptography is planned in the near future. Algorithms such as Classic McEliece, ML-KEM, ML-DSA, etc.
If so please let me know the schedule.
Post-quantum cryptography for OpenPGP is being standardized by the IETF. The document in question is in the late stage of the process, but it has not been published to this day. You can view it, and follow its progress, here:
https://datatracker.ietf.org/doc/draft-ietf-openpgp-pqc/
We have a complete implementation of this draft waiting for the document to be published. You can find it here:
https://gitlab.com/sequoia-pgp/sequoia/-/tree/justus/pqc?ref_type=heads
You can observe pre-releases of Sequoia, OpenPGP.js, and GopenPGP that support PQC demonstrating interoperability on the PQC artifacts and algorithms here:
https://sequoia-pgp.gitlab.io/openpgp-interoperability-test-suite/results.ht...
As soon as the spec is published, you can expect major releases adding PQC support from all these projects.
Best, Justus
On Tue, 09 Sep 2025 03:02:16 +0200, Tanveer Salim wrote:
I do not see Classic McEliece supported.
How come?
The algorithms are determined by the working group based on rough consensus.
The currernt PQC draft is here:
https://datatracker.ietf.org/doc/draft-ietf-openpgp-pqc/
It's unlikely to be changed at this point, but a separate proposal could define a new algorithm.
Neal
On 8/25/25 08:45, Justus Winter wrote:
Tanveer Salim fosres@posteo.de writes:
I was just wondering if adding support for post-quantum cryptography is planned in the near future. Algorithms such as Classic McEliece, ML-KEM, ML-DSA, etc.
If so please let me know the schedule.
Post-quantum cryptography for OpenPGP is being standardized by the IETF. The document in question is in the late stage of the process, but it has not been published to this day. You can view it, and follow its progress, here:
https://datatracker.ietf.org/doc/draft-ietf-openpgp-pqc/
We have a complete implementation of this draft waiting for the document to be published. You can find it here:
https://gitlab.com/sequoia-pgp/sequoia/-/tree/justus/pqc?ref_type=heads
You can observe pre-releases of Sequoia, OpenPGP.js, and GopenPGP that support PQC demonstrating interoperability on the PQC artifacts and algorithms here:
https://sequoia-pgp.gitlab.io/openpgp-interoperability-test-suite/results.ht...
As soon as the spec is published, you can expect major releases adding PQC support from all these projects.
Best, Justus