v6 Feature Support

[falko-strenzke]

This issues lists a number of features of the crypto-refresh / v6 to indicate whether they are supported in the current implementation of the branch cr_pqc. The list is not complete. Checked features are implemented

• parse signature salt in OPS (salt value in OPS cannot be understood without this)
• generate signature salt in OPS
• parse v6 SKESK
• generate v6 SKESK
• Generate mandatory Direct Key Signature (for v6)
• parse and generate v6 keys
• standalone x25519 and ed25519 algorithms
• parse and generate v6 signatures
• parse and generate PKESKv6 including PQC and X25519 (protocol logic does not yet include the recipients' feature subpacket for SEIPDv2)
• SEIPDv2

PQC-related features

• Any cominations with Curve448
  • (not implemented, since Curve448 not in Botan)
• Dilithium Hash Binding SHA3-256/SHA3-512

Test coverage of new features

• src/tests/ffi-enc.cpp
  • test_ffi_decrypt_v6_pkesk_test_vector
  • test_ffi_encrypt_pk_with_v6_key
• src/tests/ffi-key.cpp
  • test_ffi_v6_sig_subpackets
  • test_ffi_v6_cert_import
  • test_ffi_v6_seckey_import
• CLI tests
  • missing ...

[falko-strenzke]

@TJ-91 I think the state of some of the points above could be updated now?

[TJ-91]

• I updated Generate mandatory Direct Key Signature (for v6).
• v6 SKESK is still not supported.
• about the signature salt I'm unsure at the moment: We do implement the v6 salt, I'm not sure if there is anything specific to OPS.