1989986 - Enable mlkem768x25519 in beta and release on Android

Status: RESOLVED FIXED

(Core :: Security: PSM, enhancement, P2)

Comment 1

[John Schanck [:jschanck]]

Attachment: Bug 1989986 - enable mlkem768x25519 in beta and release on Android. r=nkulatova

Comment 2

[Anna Weine]

postQuantumKeyExchangeEnabled nimbus feature for enabling/disabling PQ for Android (see https://phabricator.services.mozilla.com/D235514)

Comment 3

[Anna Weine]

https://glam.telemetry.mozilla.org/fenix/probe/ssl_handshake_result/table?aggregationLevel=version&ping_type=metrics
https://glam.telemetry.mozilla.org/fenix/probe/network_tls_handshake/explore?ping_type=metrics

Comment 4

[Pulsebot]

Pushed by [e-mail]:
https://github.com/mozilla-firefox/firefox/commit/4b9821a48253
https://hg.mozilla.org/integration/autoland/rev/ef49596c0190
enable mlkem768x25519 in beta and release on Android. r=nkulatova

Comment 5

[Serban Stanca [:SerbanS]]

https://hg.mozilla.org/mozilla-central/rev/ef49596c0190

Comment 6

[Anna Weine]

Release Note Request (optional, but appreciated)
[Why is this notable]: This feature secures our users' communications against advanced / long-term threats.
[Affects Firefox for Android]: yes
[Suggested wording]:Added support for a post-quantum key exchange mechanism (mlkem768x25519) in TLS 1.3 and HTTP/3 on Android.
[Links (documentation, blog post, etc)]:

Comment 7

[Pascal Chevrel:pascalc]

Added to our final 145 release notes.