====== 5.2 TLS 1.3 mit PQ-Algorithmen ======

Konfiguration der Transport-Verschlüsselung.

===== Unterstützte Algorithmen =====

^ Funktion ^ Algorithmus ^ NIST Standard ^
| Key Exchange | ML-KEM-768((FIPS 203 (ML-KEM): https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.203.pdf)) | FIPS 203 |
| Signatur | ML-DSA-65((FIPS 204 (ML-DSA): https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.204.pdf)) | FIPS 204 |
| Backup Signatur | SLH-DSA((FIPS 205 (SLH-DSA): https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.205.pdf)) | FIPS 205 |

===== TLS 1.3 =====

Transport Layer Security 1.3((IETF RFC 8446 (TLS 1.3): https://datatracker.ietf.org/doc/html/rfc8446)) ist die aktuelle Version des Verschlüsselungsprotokolls für sichere Netzwerkkommunikation.

===== Hybrid-Modus =====

Für Übergangszeit: Klassisch + PQ kombiniert((IETF Hybrid Key Exchange: https://datatracker.ietf.org/doc/draft-ietf-tls-hybrid-design/)).

<code>
Key Exchange: X25519((Curve25519: https://cr.yp.to/ecdh.html)) + ML-KEM-768
Signatur: ECDSA + ML-DSA-65
</code>

===== .NET Konfiguration =====

<code csharp>
builder.WebHost.ConfigureKestrel(options =>
{
    options.ConfigureHttpsDefaults(https =>
    {
        https.SslProtocols = SslProtocols.Tls13;
        https.ClientCertificateMode = ClientCertificateMode.RequireCertificate;
    });
});
</code>

===== Cipher Suites =====

Empfohlene TLS 1.3 Cipher Suites((IANA TLS Cipher Suites: https://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml#tls-parameters-4)) mit PQ:

<code>
TLS_AES_256_GCM_SHA384
TLS_CHACHA20_POLY1305_SHA256
</code>

===== Validierung =====

<code bash>
# TLS-Verbindung testen
openssl s_client -connect gateway.intern:443 -tls1_3
</code>

===== PQ-Crypto Bibliothek =====

Für die programmatische Implementierung von PQ Key Exchange siehe:

  * [[de:int:pqcrypt:api:wvds-system-security-cryptography:keyexchange:start|KeyExchange Namespace (ML-KEM)]]
  * [[de:int:pqcrypt:api:wvds-system-security-cryptography:keyderivation:keyderivationextensions|TLS 1.3 Key Derivation]]
  * [[de:int:pqcrypt:konzepte:algorithmen|Algorithmen (ML-KEM, ML-DSA)]]

===== Quellen =====

  * [[https://datatracker.ietf.org/doc/html/rfc8446|RFC 8446: TLS 1.3]]
  * [[https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.203.pdf|FIPS 203 (ML-KEM)]]
  * [[https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.204.pdf|FIPS 204 (ML-DSA)]]
  * [[https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.205.pdf|FIPS 205 (SLH-DSA)]]
  * [[https://www.openssl.org/docs/man3.0/man1/openssl-s_client.html|OpenSSL s_client Dokumentation]]