From 2f9fdfa5ae2749f10d9ebc805e388ab9962d9faa Mon Sep 17 00:00:00 2001 From: Dimitri Staessens Date: Thu, 2 Jul 2026 00:57:58 +0200 Subject: build: Fix OpenSSL version check for PQC ML-KEM, ML-DSA and SLH-DSA all landed in OpenSSL 3.5.0, not 3.4.0. ML-KEM+ML-DSA and SLH-DSA can be disabled by DISABLE_ML / DISABLE_SLH. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders --- src/lib/crypt.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'src/lib/crypt.c') diff --git a/src/lib/crypt.c b/src/lib/crypt.c index 5da9d392..e4cf7885 100644 --- a/src/lib/crypt.c +++ b/src/lib/crypt.c @@ -96,7 +96,7 @@ const uint16_t kex_supported_nids[] = { NID_secp384r1, /* ECDH P-384, 192-bit */ NID_X448, /* ECDH X448, 224-bit */ NID_secp521r1, /* ECDH P-521, 256-bit */ -#ifdef HAVE_OPENSSL_ML_KEM +#ifdef HAVE_ML NID_MLKEM512, /* ML-KEM-512, PQC L1 (~AES-128) */ NID_MLKEM768, /* ML-KEM-768, PQC L3 (~AES-192) */ NID_MLKEM1024, /* ML-KEM-1024, PQC L5 (~AES-256) */ -- cgit v1.2.3