Module tech.kwik.agent15.pqc

module tech.kwik.agent15.pqc
Post-quantum cryptography for Agent15:
  • the PQ/T hybrid key exchange groups of RFC 10024 (X25519MLKEM768, SecP256r1MLKEM768, SecP384r1MLKEM1024), each combining a classical (EC or XDH) key exchange with ML-KEM (FIPS 203);
  • the ML-DSA (FIPS 204) signature schemes (mldsa44, mldsa65, mldsa87).

These use java.security.KEM and the ML-KEM/ML-DSA key pair generators of the JDK, which is why this module requires Java 25, where core Agent15 needs no more than Java 11.

Both are registered as services (KeyExchangeFactory and SignatureAlgorithmFactory), so core Agent15 uses them automatically when this module is present; there is no need to call anything in this module directly. Only place this module on the class/module path when you trust it; see the security notes on those factory interfaces in tech.kwik.agent15.