Algorithm Support Overview

Support Overview

This section of the wiki outlines the Key Encapsulation Mechanisms (KEMs) and digital signature algorithms supported by this project, based on its upstream cryptographic dependencies: Liboqs, OQS-Provider, and OpenSSL. While the PQC-LEO project integrates nearly all algorithms from these libraries, there are a few exceptions.

It contains comprehensive lists of all supported PQC algorithms, along with any exclusions and the rationale behind them.

Notice: If you use the --latest-dependency-versions flag with the main setup script to pull the most recent versions of the OQS libraries, the supported algorithms may differ from what is documented here. This documentation reflects support based on the last tested versions of the dependencies and may not be accurate for upstream updates.

Supported Algorithms by Library

The following pages provide detailed information on the algorithms supported by each cryptographic library, including any exclusions specific to this project:

• Liboqs Algorithms
• OpenSSL Algorithms
• OQS-Provider Algorithms

Dependency Usage by Testing Category

Different testing categories within this project rely on distinct combinations of upstream cryptographic dependencies. The table below summarises which libraries are used in each context:

Testing Category	Dependencies Used
Computational Performance Testing	Liboqs
TLS Handshake Testing	OpenSSL 3.5.0, OQS-Provider
OpenSSL speed Benchmarking	OpenSSL 3.5.0, OQS-Provider

Although the OQS-Provider depends on Liboqs for algorithm implementations, it exposes a different set of algorithms. As such, its supported algorithms are documented separately in this guide.

External Documentation

For additional reference, the upstream dependency documentation can be found here:

• Liboqs Supported Algorithms
• OpenSSL Supported PQC Algorithms
• OQS-Provider Supported Algorithms