Extending the the initial work by Igor Barshteyn this image integrates quantum safe cryptography (QSC) into the msquic software package to allow exercising all QSC algorithm combinations currently supported by the OpenQuantumSafe project.
To limit the size of the docker image (and the amount of functionality to be tested :) this image only contains a QSC-enabled QUIC reachability test.
In order to interact with the companion QSC-QUIC nginx image the client shall be started within the same docker network:
docker run --network oqs-quic -it openquantumsafe/msquic-reach bash
Within the resulting shell, tests for QUIC functionality can be performed.
As a baseline, to ascertain proper QUIC interoperability, it is recommended to contact the nginx QUIC test server via quicreach quic.nginx.org --stats
. This should output correct reachability (completion of TLS handshake) and some connection (quality) statistics.
The latter information also is output for each of the QSC signature and KEM algorithms when running the full matrix test via the command
/root/fulltest.sh [<OQS-QUIC test server FQDN>]
To perform this test, the image downloads from the server optionally passed as an argument ('nginx' being the default) the server's root CA certificate and list of OQS-algorithm port assignments.
Output is a CSV structure comprising QSC signature name, QSC KEM name, and connection establishment statistics as defined by quicreach (if successful).