[Pkg-swan-devel] Bug#1121988: strongswan: Please enable the ML-KEM plugin

Tobias Brunner tobias at strongswan.org
Fri Dec 5 16:28:49 GMT 2025


Hi Tobias,

> According to the upstream documentation, strongSwan's
> OpenSSL plugin does not support ML-KEM (yet), even if the OpenSSL
> library present would do so.

Which documentation are you referring to?  The plugin supports ML-KEM
via OpenSSL 3.5+ since 6.0.2.  Obviously, doesn't help if you use Debian
stable as that ships 6.0.1, but it's definitely supported upstream and
in Debian testing.

Regards,
Tobias



More information about the Pkg-swan-devel mailing list