A post quantum option for the LINE Login id token verification
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 18/100
- Issue type
- Feature
- Clarity
- Mostly clear
- Activity status
- Active
- Domain
- authentication, security
Research direction
Start with IdTokenParser and the jjwt key resolver that builds EC and RSA keys from the JWKS, then check the JWKS parsing code that feeds it. Confirm whether the jjwt version in use can verify ML-DSA at all before writing anything. Done would mean an ML-DSA key in a JWKS verifies a token in the existing ID token tests, using the external test vectors the issue links. The issue depends on a service that does not yet issue such tokens, and it is an unsolicited vendor offer, so get maintainer direction first.
Written by the indexing model from the issue text.
Description
On Android the id token check runs through IdTokenParser with jjwt and a key resolver that only builds EC and RSA keys from the JWKS. Same classical story as everywhere else.
ML DSA from FIPS 204 sits in JOSE under RFC 9964. Teach the key resolver and the JWKS parsing to handle an ML DSA key and the Android SDK verifies a post quantum id token once the service issues one.
Vectors to check it against are at https://github.com/quantova-inc/pq-sign-vectors. Happy to draft it under your agreement.
- Dominant language
- Java
- Stars
- 149
- Forks
- 55
- PR merge metrics
- No merged PRs in 30d
Getting set up
- No Dockerfile or Docker Compose file
- No pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from line/line-sdk-android
-
Difficulty 5/5 Over a week Newbie friendliness 25/100
line/line-sdk-android#193 ·
-
Difficulty 5/5 Over a week Newbie friendliness 25/100
line/line-sdk-android#192 ·
-
Difficulty 3/5 1-2 days Newbie friendliness 45/100
line/line-sdk-android#185 · 1 comment · 1 reaction ·
-
Difficulty 4/5 3-5 days Newbie friendliness 38/100
line/line-sdk-android#179 · 1 comment ·
-
Difficulty 5/5 Over a week Newbie friendliness 20/100
line/line-sdk-android#176 ·
All issues in line/line-sdk-android
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 66/100
wultra/powerauth-tests#980 ·
-
account bug communication lecture
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
line/centraldogma#1397 ·
Maintainers usually reply within 2 days
-
[Bug]: Fixed/recurring deposit accounts are treated as savings in ownership and listingsPossibly taken @Aana123 claimed this today. Openbug Triage
Difficulty 2/5 1-3 hours Newbie friendliness 76/100
apache/fineract-consumer-facing#252 ·
Maintainers usually reply within 1 day
-
Difficulty 1/5 Under an hour Newbie friendliness 78/100
cryptomator/hub#515 ·