Skip to content

OpenSSL: Expose Post-Quantum Cryptography (PQC) functionality #23421

Description

@timo-poppinga

Description

OpenSSL: Add support for PQC functionality

Description

Modern OpenSSL versions provide support for Post-Quantum Cryptography (PQC), including algorithms such as ML-KEM and ML-DSA.

PHP's ext/openssl should expose this functionality where supported by the underlying OpenSSL version.

Currently, PHP applications cannot easily use these newer OpenSSL capabilities through the standard OpenSSL extension.

Proposal

Add support for OpenSSL's PQC algorithms to ext/openssl.

Where possible, existing PHP OpenSSL functions and APIs should support PQC algorithms instead of introducing separate algorithm-specific functions.

Support should depend on the capabilities of the OpenSSL version PHP is compiled against.

Motivation

This would allow PHP applications and libraries to use post-quantum cryptography directly through PHP's standard OpenSSL extension.

It would also keep PHP aligned with new cryptographic functionality provided by OpenSSL and avoid the need for FFI or custom PHP extensions.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions