Project Ideas

Support for PQC algorithms in Kryoptic via leancrypto

Kryoptic uses a modular (build time) system to select what crypto-implementation to use for the PKCS#11 mechanisms it offers. With PKCS#11 version 3.2 of the standard the new PQC mechanisms standardized by NIST will have mechanism definitions and can be offered by cryptographic modules. It would be interesting to offer an implementation alternative from the default which is based on OpenSSL. The Leancrypto project already offers all algorithms we care for including ACVP testing.

• Difficulty: Medium
• Project Length: 160 hours
• Language(s): Rust and C. Kryoptioc is written in Rust and it uses FFI to link to cryptolibraries written in C
• Possible Mentors: Simo Sorce
• References:
  • https://docs.oasis-open.org/pkcs11/pkcs11-spec/v3.1/pkcs11-spec-v3.1.html (To be upgraded to the 3.2 doc once public)

UPDATE: 2026/06/03: See https://github.com/latchset/kryoptic/pull/456