22
33<!-- YAML
44changes:
5+ - version: REPLACEME
6+ pr-url: https://github.com/nodejs/node/pull/65759
7+ description: Hybrid KEM algorithms are now supported.
58 - version: v25.9.0
69 pr-url: https://github.com/nodejs/node/pull/62183
710 description: TurboSHAKE and KangarooTwelve algorithms
@@ -134,6 +137,9 @@ Algorithms:
134137* ` 'ML-KEM-512' ` [ ^ openssl35 ]
135138* ` 'ML-KEM-768' ` [ ^ openssl35 ]
136139* ` 'ML-KEM-1024' ` [ ^ openssl35 ]
140+ * ` 'MLKEM768-P256' ` [ ^ openssl35 ]
141+ * ` 'MLKEM768-X25519' ` [ ^ openssl35 ]
142+ * ` 'MLKEM1024-P384' ` [ ^ openssl35 ]
137143* ` 'SHA3-256' `
138144* ` 'SHA3-384' `
139145* ` 'SHA3-512' `
@@ -529,9 +535,10 @@ Crypto API implementation and the APIs supported for each:
529535 ` ' ECDSA' ` , ` ' Ed25519' ` , ` ' Ed448' ` [^secure-curves],
530536 ` ' ML-DSA-44' ` [^modern-algos], ` ' ML-DSA-65' ` [^modern-algos],
531537 ` ' ML-DSA-87' ` [^modern-algos], ` ' ML-KEM-512' ` [^modern-algos],
532- ` ' ML-KEM-768' ` [^modern-algos], ` ' ML-KEM-1024' ` [^modern-algos], ` ' RSA-OAEP' ` ,
533- ` ' RSA-PSS' ` , ` ' RSASSA-PKCS1-v1_5' ` , ` ' X25519' ` , and
534- ` ' X448' ` [^secure-curves].
538+ ` ' ML-KEM-768' ` [^modern-algos], ` ' ML-KEM-1024' ` [^modern-algos],
539+ ` ' MLKEM768-P256' ` [^modern-algos], ` ' MLKEM768-X25519' ` [^modern-algos],
540+ ` ' MLKEM1024-P384' ` [^modern-algos], ` ' RSA-OAEP' ` , ` ' RSA-PSS' ` ,
541+ ` ' RSASSA-PKCS1-v1_5' ` , ` ' X25519' ` , and ` ' X448' ` [^secure-curves].
535542
536543### Crypto Operation APIs
537544
@@ -551,8 +558,10 @@ Crypto API implementation and the APIs supported for each:
551558 ` ' ChaCha20-Poly1305' ` [^modern-algos], and ` ' RSA-OAEP' ` .
552559* [` subtle .encapsulateBits ()` ][], [` subtle .decapsulateBits ()` ][],
553560 [` subtle .encapsulateKey ()` ][], and [` subtle .decapsulateKey ()` ][] support
554- ` ' ML-KEM-512' ` [^modern-algos], ` ' ML-KEM-768' ` [^modern-algos], and
555- ` ' ML-KEM-1024' ` [^modern-algos].
561+ ` ' ML-KEM-512' ` [^modern-algos], ` ' ML-KEM-768' ` [^modern-algos],
562+ ` ' ML-KEM-1024' ` [^modern-algos], ` ' MLKEM768-P256' ` [^modern-algos],
563+ ` ' MLKEM768-X25519' ` [^modern-algos], and
564+ ` ' MLKEM1024-P384' ` [^modern-algos].
556565* [` subtle .digest ()` ][] supports ` ' cSHAKE128' ` [^modern-algos],
557566 ` ' cSHAKE256' ` [^modern-algos], ` ' KT128' ` [^modern-algos],
558567 ` ' KT256' ` [^modern-algos], ` ' SHA-1' ` , ` ' SHA-256' ` , ` ' SHA-384' ` , ` ' SHA-512' ` ,
@@ -584,6 +593,10 @@ and [`subtle.exportKey()`][].
584593 ` ' ML-KEM-768' ` [^modern-algos], and ` ' ML-KEM-1024' ` [^modern-algos]** can be
585594 imported and exported using ` ' spki' ` , ` ' pkcs8' ` , ` ' jwk' ` ,
586595 ` ' raw-public' ` [^modern-algos], and ` ' raw-seed' ` [^modern-algos].
596+ * **` ' MLKEM768-P256' ` [^modern-algos],
597+ ` ' MLKEM768-X25519' ` [^modern-algos], and
598+ ` ' MLKEM1024-P384' ` [^modern-algos]** can be imported and exported using
599+ ` ' jwk' ` , ` ' raw-public' ` [^modern-algos], and ` ' raw-seed' ` [^modern-algos].
587600* **` ' RSA-OAEP' ` , ` ' RSA-PSS' ` , and ` ' RSASSA-PKCS1-v1_5' ` ** can be imported
588601 and exported using ` ' spki' ` , ` ' pkcs8' ` , and ` ' jwk' ` .
589602
@@ -788,6 +801,9 @@ The algorithms currently supported include:
788801* ` ' ML-KEM-512' ` [^modern-algos]
789802* ` ' ML-KEM-768' ` [^modern-algos]
790803* ` ' ML-KEM-1024' ` [^modern-algos]
804+ * ` ' MLKEM768-P256' ` [^modern-algos]
805+ * ` ' MLKEM768-X25519' ` [^modern-algos]
806+ * ` ' MLKEM1024-P384' ` [^modern-algos]
791807
792808### ` subtle .decapsulateKey (decapsulationAlgorithm, decapsulationKey, ciphertext, sharedKeyAlgorithm, extractable, keyUsages)`
793809
@@ -814,6 +830,9 @@ The algorithms currently supported include:
814830* ` ' ML-KEM-512' ` [^modern-algos]
815831* ` ' ML-KEM-768' ` [^modern-algos]
816832* ` ' ML-KEM-1024' ` [^modern-algos]
833+ * ` ' MLKEM768-P256' ` [^modern-algos]
834+ * ` ' MLKEM768-X25519' ` [^modern-algos]
835+ * ` ' MLKEM1024-P384' ` [^modern-algos]
817836
818837### ` subtle .decrypt (algorithm, key, data)`
819838
@@ -1010,6 +1029,9 @@ The algorithms currently supported include:
10101029* ` ' ML-KEM-512' ` [^modern-algos]
10111030* ` ' ML-KEM-768' ` [^modern-algos]
10121031* ` ' ML-KEM-1024' ` [^modern-algos]
1032+ * ` ' MLKEM768-P256' ` [^modern-algos]
1033+ * ` ' MLKEM768-X25519' ` [^modern-algos]
1034+ * ` ' MLKEM1024-P384' ` [^modern-algos]
10131035
10141036### ` subtle .encapsulateKey (encapsulationAlgorithm, encapsulationKey, sharedKeyAlgorithm, extractable, keyUsages)`
10151037
@@ -1034,6 +1056,9 @@ The algorithms currently supported include:
10341056* ` ' ML-KEM-512' ` [^modern-algos]
10351057* ` ' ML-KEM-768' ` [^modern-algos]
10361058* ` ' ML-KEM-1024' ` [^modern-algos]
1059+ * ` ' MLKEM768-P256' ` [^modern-algos]
1060+ * ` ' MLKEM768-X25519' ` [^modern-algos]
1061+ * ` ' MLKEM1024-P384' ` [^modern-algos]
10371062
10381063### ` subtle .encrypt (algorithm, key, data)`
10391064
@@ -1072,6 +1097,9 @@ The algorithms currently supported include:
10721097<!-- YAML
10731098added: v15.0.0
10741099changes:
1100+ - version: REPLACEME
1101+ pr-url: https://github.com/nodejs/node/pull/65759
1102+ description: Hybrid KEM algorithms are now supported.
10751103 - version: v26.1.0
10761104 pr-url: https://github.com/nodejs/node/pull/62706
10771105 description: Added JWK format support for ML-KEM key types.
@@ -1136,6 +1164,9 @@ Derives the public key from a given private key.
11361164<!-- YAML
11371165added: v15.0.0
11381166changes:
1167+ - version: REPLACEME
1168+ pr-url: https://github.com/nodejs/node/pull/65759
1169+ description: Hybrid KEM algorithms are now supported.
11391170 - version: v24.8.0
11401171 pr-url: https://github.com/nodejs/node/pull/59647
11411172 description: KMAC algorithms are now supported.
@@ -1177,6 +1208,9 @@ include:
11771208* ` ' ML-KEM-512' ` [^modern-algos]
11781209* ` ' ML-KEM-768' ` [^modern-algos]
11791210* ` ' ML-KEM-1024' ` [^modern-algos]
1211+ * ` ' MLKEM768-P256' ` [^modern-algos]
1212+ * ` ' MLKEM768-X25519' ` [^modern-algos]
1213+ * ` ' MLKEM1024-P384' ` [^modern-algos]
11801214* ` ' RSA-OAEP' `
11811215* ` ' RSA-PSS' `
11821216* ` ' RSASSA-PKCS1-v1_5' `
@@ -1200,6 +1234,9 @@ The {CryptoKey} (secret key) generating algorithms supported include:
12001234<!-- YAML
12011235added: v15.0.0
12021236changes:
1237+ - version: REPLACEME
1238+ pr-url: https://github.com/nodejs/node/pull/65759
1239+ description: Hybrid KEM algorithms are now supported.
12031240 - version: v26.1.0
12041241 pr-url: https://github.com/nodejs/node/pull/62706
12051242 description: Added JWK format support for ML-KEM key types.
@@ -1369,6 +1406,9 @@ The unwrapped key algorithms supported include:
13691406* ` ' ML-KEM-512' ` [^modern-algos]
13701407* ` ' ML-KEM-768' ` [^modern-algos]
13711408* ` ' ML-KEM-1024' ` [^modern-algos]
1409+ * ` ' MLKEM768-P256' ` [^modern-algos]
1410+ * ` ' MLKEM768-X25519' ` [^modern-algos]
1411+ * ` ' MLKEM1024-P384' ` [^modern-algos]
13721412* ` ' RSA-OAEP' `
13731413* ` ' RSA-PSS' `
13741414* ` ' RSASSA-PKCS1-v1_5' `
0 commit comments