Hacktoberfest 2026: le issue che i maintainer hanno segnato per ottobre, aperte e adatte ai principianti. Sfoglia le issue Hacktoberfest

[FEATURE] Vendor PQCP and Ed448-Goldilocks for Post-Quantum WAMP

Aperta
  • Qualcosa non va?
#1,847 4 commenti 0 reazioni 0 assegnatari Vedi su GitHub

I maintainer di solito rispondono entro 1 giorno

Nessuno ha ancora preso questa issue.

Valutazione

Difficoltà
5/5
Tempo stimato
Più di una settimana
Idoneità per principianti
30/100
Tipo di issue
Funzionalità
Chiarezza
Abbastanza chiara
Stato di attività
Tranquilla
Stack tecnologico
c, python
Ambito
build-system, cryptography, security

Direzione di ricerca

Inizia esaminando le sorgenti proposte per src/autobahn/vendor/ e i punti di integrazione CFFI esistenti nel repository. Poi esamina le pipeline cibuildwheel e la discussione collegata wamp-proto/wamp-proto#564. Il lavoro è completo quando le sorgenti vendored PQCP e libdecaf, i wrapper CFFI e le build delle wheel manylinux e musllinux richieste sono integrati in modo coerente con la proposta.

Scritto dal modello di indicizzazione a partire dal testo della issue.

Descrizione

enhancement wamp XBR
Description

Following the discussion in wamp-proto/wamp-proto#564, this issue proposes the vendoring of the PQ Code Package (PQCP) and Mike Hamburg’s libdecaf (Ed448-Goldilocks) into autobahn-python.

The goal is to provide a "Defense-Grade," zero-dependency, and high-performance implementation of Post-Quantum Cryptography (PQC) and High-Strength Classical ECC for the WAMP ecosystem, specifically targeting ML-KEM (FIPS 203) and ML-DSA (FIPS 204).

Motivation

As we move toward a Quantum-Resistant WAMP (WAMP-PQC), the protocol requires hybrid cryptographic schemes that combine classical security (Ed25519/Ed448) with lattice-based security (ML-KEM/ML-DSA).

While libraries like libsodium provide excellent support for Ed25519, they lack Ed448 and NIST-finalized PQC algorithms. To maintain Autobahn's standard of "Zero-Config" installation and high portability, we must internalize these primitives.

Proposed Implementation Strategy
1. Direct Upstream Vendoring

We will vendor the following sources directly into src/autobahn/vendor/:

  • PQCP (PQ Code Package): Utilizing mlkem-native and mldsa-native. This is the Linux Foundation-backed successor to PQClean, providing C90-compliant, formally verified, and SIMD-optimized PQC.
  • libdecaf (Ed448-Goldilocks): Sourced from Mike Hamburg’s upstream (SourceForge) - using git://git.code.sf.net/p/ed448goldilocks/code - and verified against Debian's security patches. This fills the gap for 256-bit security level signatures that libsodium does not address.
2. CFFI Wrapping

Consistent with our performance goals:

  • We will wrap these C libraries using CFFI rather than CPyExt.
  • This ensures optimal performance on PyPy via JIT-inlining while remaining highly efficient on CPython.
  • It avoids the maintenance burden of the CPython C API and the performance penalties of ctypes.
3. High-Performance Multi-Arch Wheels

We will update our cibuildwheel pipelines to publish manylinux and musllinux wheels for:

  • x86-64: Leveraging AVX2 optimizations for NTT (Number Theoretic Transform).
  • ARM64 (aarch64): Leveraging Neon instructions for high-speed PQC on ARM-based servers and high-end IoT (like Cortex-A).
Proposed Security Tiers
Tier Hybrid Combination Use Case
Standard Ed25519 + ML-DSA-65 General Purpose WAMP-Cryptosign
High-Strength Ed448 + ML-DSA-87 Defense / U.S. DoD CUI / Critical Infrastructure
Key Exchange X25519 + ML-KEM-768 Encrypted Payloads / Session Keys
Benefits
  • Zero Dependencies: No requirement for users to install liboqs, openssl-dev, or cmake.
  • Defense-Grade: Aligns with NIST FIPS 203/204 and NSA CNSA 2.0 requirements.
  • Embedded-Ready: By vendoring the native C source, we pave the way for cross-compilation to restricted environments (e.g., Cortex-M33).
Reference

Checklist

  • I have searched existing issues to avoid duplicates
  • I have described the problem clearly
  • I have provided use cases
  • I have considered alternatives
  • I have assessed impact and breaking changes
Lingua principale
Python
Stelle
2.5k
Fork
769
Merge medio
1g 12h
PR unite (30g)
15

Preparare l'ambiente

Come iniziare

  1. Leggi tutta la issue e poi la guida ai contributi del progetto.
  2. Commenta sulla issue per dire che te ne occupi tu — evita che due persone facciano lo stesso lavoro.
  3. Fai un fork del repository e lavora su un branch.
  4. Apri una pull request che faccia riferimento al numero della issue.

Altre issue di crossbario/autobahn-python

Tutte le issue di crossbario/autobahn-python

Issue simili

Altre issue su Python

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.