- Build System: Link against static liboqs.a (built without OpenSSL) - PQXDH: Replace stubs with OQS_KEM_ml_kem_768 functions - Tests: Verify full handshake with real post-quantum KEM - Disable Kyber (old) in liboqs build to fix symbol conflicts
- Implement PQXDH handshake (RFC-0830) with stubbed KEM - Complete X3DH key agreement logic (Alice <-> Bob) - Correctly implements HKDF-SHA256 key derivation - Unit tests verify shared secret agreement - NOTE: ML-KEM-768 is currently stubbed pending liboqs integration - Harden SoulKey Implementation - Replace potentially unsafe @memset with std.crypto.secureZero - Ensure private keys and seeds are wiped from memory - Documentation - Add FFI export comments to crypto.zig - Build System - specific test step for PQXDH
Markus Maiwald