PQ TLS curves in system boringssl?

boring

Seems like the android-15 tags of boringssl have X25519Kyber768 and HEAD supports MLKEM768X25519, but I can't seem to take advantage of either; apps throw a handshake failure when connecting to a server that only offers those post-quantum hybrids. You can find test endpoints for MLKEM and Kyber on test.openquantumsafe.org.

Does anyone have this working or is it missing somewhere in the Android source?

boring

Strangely, X25519MLKEM768 is also unsupported by Android 16 (2025070100)?

AtmosphericIgnition

Hi, has the support for X25519MLKEM768 at all changed in the recent QPR1 release of Android 16?

filter

Any updates to this? It connects fine on the browser app but not on any other apps. For example, here's the error from Komelia:

SSLHandshakeException: Read error: ssl=0x800da5b8c5b0108: Failure in SSL library, usually a protocol error error:10000410:SSL routines:OPENSSL_internal:SSLV3_ALERT_HANDSHAKE_FAILURE (external/boringssl/src/ssl/tls_record.cc:486 0xd00da12ed554a00:0x00000003) error:1000009a:SSL routines:OPENSSL_internal:HANDSHAKE_FAILURE_ON_CLIENT_HELLO (external/boringssl/src/ssl/handshake.cc:560 0xd9bb1604a093:0x00000000); Read error: ssl=0x800da5b8c5b0108: Failure in SSL library, usually a protocol error error:10000410:SSL routines:OPENSSL_internal:SSLV3_ALERT_HANDSHAKE_FAILURE (external/boringssl/src/ssl/tls_record.cc:486 Oxd00da12ed554a00:0x00000003) error:1000009a:SSL routines:OPENSSL_internal:HANDSHAKE_FAILURE_ON_CLIENT_HELLO (external/boringssl/src/ssl/handshake.cc:560 0xd9bb1604a093:0x00000000);