Problem Enabling Kyber KEM Algorithm in oqsprovider with OpenSSL 3.x

[rayiskander2406]

Hello,
I'm encountering a problem while trying to enable and use the Kyber KEM algorithm with the oqsprovider in conjunction with OpenSSL 3.x.
I have followed the build instructions in the documentation but have been unable to make it work.

Environment:

• Operating System (in Docker Container): Ubuntu latest and Debian latest (I have tried both with the same result)
• OpenSSL Version: 3.0.2 (or greater)
• liboqs Version: (latest, built from the main branch)
• oqsprovider Version: (latest, built from the main branch)
• Build Method: Using CMake with Ninja generator

Steps Taken: (with simplified commands):

• 1. Built liboqs from source:

cmake -S . -B build -GNinja -DOQS_ENABLE_KEM_KYBER=ON
cmake --build build
cmake --install build

Have verified that liboqs has been installed successfully in /usr/local.

-2. Cloned and Built oqsprovider:

git clone https://github.com/open-quantum-safe/oqsprovider.git
cd oqsprovider
cmake -S . -B build -GNinja -DCMAKE_PREFIX_PATH=/usr/local -DOQS_KEM_ENCODERS=ON
cmake --build build
cmake --install build

Have verified that oqsprovider has been built and installed successfully to /usr/lib/aarch64-linux-gnu/ossl-modules/oqsprovider.so

-3. Checked for Kyber Algorithm:

 OPENSSL_MODULES=/usr/lib/aarch64-linux-gnu/ossl-modules openssl list -kem-algorithms -provider oqsprovider

The output does not include the kyber512 algorithm, or any other kyber algorithm.

Problem:
Despite correctly building both liboqs with Kyber enabled and building and installing oqsprovider with -DOQS_KEM_ENCODERS=ON, the kyber512 KEM algorithm is not listed when using the OpenSSL command openssl list -kem-algorithms -provider oqsprovider.

I have tried many different combinations of CMake flags, including -DOQS_PROVIDER_ENABLE_KEM_KYBER=ON (which is not recognized) and I have also tried to load the liboqs.so library as an engine, with no success. I have also tried using the pre-built library, also without success. I have tried this in both Ubuntu and Debian with similar results. I have carefully followed the documentation and tried all the recommended steps, but the Kyber algorithm is still not showing up.

I have also read in a previous post in this project that you are no longer supporting the engine approach, and that the provider is the preferred method, so I have focused on that.

Questions:

• Is there a specific CMake flag, or any other step, required to enable Kyber algorithms in oqsprovider that I am missing?
• Is there a specific OpenSSL version that is known to be compatible or incompatible with the Kyber algorithm in oqsprovider?
• Is there a known bug or issue related to the OQS_KEM_ENCODERS flag, or any other issue that is preventing the correct building of the kyber algorithms in the provider?
• Is there any other step I have to do to make Kyber algorithms available?

Looking for any suggestions or guidance at this point?
Thank you!
Ray

[baentsch]

Sure: Kyber has been removed from oqsprovider "main" default build as per latest release guidance. Please switch to its standardized variant ML-KEM.