Hello,
I created a draft patch to support ML-KEM (a post-quantum key encapsulation mechanism, formerly known as Kyber)[1], based on the explanation in the corresponding IETF draft[2]. There are probably a lot of rooms for improvements (performance, side-channel safety), but I'm sharing the code at: https://git.lysator.liu.se/nettle/nettle/-/merge_requests/62
Any comments or suggestions would be appreciated.
Footnotes: [1] https://csrc.nist.gov/pubs/fips/203/ipd
[2] https://datatracker.ietf.org/doc/draft-cfrg-schwabe-kyber/
Regards,