Skip to content

[do not merge] PQC support via new pysequoia version - #8011

Draft
dralley wants to merge 1 commit into
pulp:mainfrom
dralley:update-pysequoia
Draft

[do not merge] PQC support via new pysequoia version#8011
dralley wants to merge 1 commit into
pulp:mainfrom
dralley:update-pysequoia

Conversation

@dralley

@dralley dralley commented Aug 25, 2026

Copy link
Copy Markdown
Contributor

Rebase the minimum bound of pysequoia to one which adds support for post-quantum cryptography / RFC 9980.

Add tests for gpg_verify function and PQC signing services

Assisted-By: Claude Sonnet 4.5

Comment thread pyproject.toml
"psycopg[binary]>=3.3.4,<3.4", # SemVer, not explicitely stated, but mentioned on multiple changes.
"pyparsing>=3.1.0,<3.4", # Looks like only bugfixes in z-Stream.
"pysequoia>=0.1.33,<0.2",
"pysequoia @ git+https://github.com/wiktor-k/pysequoia.git",

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It's not released yet, just testing the rest of the changes.

@dralley
dralley force-pushed the update-pysequoia branch 2 times, most recently from 7bda8fc to 0d00aee Compare August 25, 2026 16:37
@dralley

dralley commented Aug 25, 2026

Copy link
Copy Markdown
Contributor Author

Using ephemeral keys turns out to be much faster than downloading keys from fixtures, 0.09s vs 5.38s. The exception is RSA which is slower (keygen is expensive by comparison to other algos) but I'm not adding any tests using RSA here.

Rebase the minimum bound of pysequoia to one which adds support for
post-quantum cryptography / RFC 9980.

Add tests for gpg_verify function and PQC signing services

Assisted-By: Claude Sonnet 4.5

from pulpcore.pytest_plugin import (
KEY_V4_RSA4K_PRIVATE,
KEY_V6_MLDSA65_ED25519_PRIVATE,

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Well, OK, we still download the fixture keys here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant