Does Strongswan Android 2.5.1 Support Post Quantum Configuration?

[oDinZu]

I am setting up a Roadwarrior configuration with post quantum configuration and was wondering if Strongswan Android 2.5.1 supports post quantum configuration?

I am new to the VPN stuff, but on launch of the app I see VPN types that use IKEv2; when I expand advance settings, I don't see any other options for using OQS algorithms..scrolling to the bottom of the advance settings, I do see an option that is for inputting custom IKEv2 algo's; I suppose I would manually add: aes256-sha256-x25519-ke1_kyber3 there as an example.

I was reading through an article online and seen that their local Strongswan via Linux configuration also added proposals config with the OQS algorithm.

Edit:

navigating through the https://docs.strongswan.org/docs/6.0/config/IKEv2CipherSuites.html has many options and configurations, however there isn't a list of options for post quantum algo's; would there be a page that lists these algo's for the configuration or how would I discover the formatting of these config options?

These are the algo's I compiled with 0.9.2, however their nomenclature is different from the nomenclature shared earlier.

./swanctl --list-algs

[tobiasbrunner]

was wondering if Strongswan Android 2.5.1 supports post quantum configuration?

No.

however there isn't a list of options for post quantum algo's;

There are no standardized algorithms for IKEv2 yet.

[oDinZu]

Alrighty, thank you for your reply @tobiasbrunner.

Would it be possible to compile my own Android strongSwan with the OQS algorithms or is there a Android client that I am able to test?

The article I read detailed a site to site configuration that made use of a Linux client machine on Ubuntu. I assume that strongSwan Android application isn't much different from strongSwan Linux.

Edit:

Upon further investigation, I should be able to do exactly the same thing on Arch Linux compile with OQS, but also for Android.

https://docs.strongswan.org/docs/6.0/os/androidVpnClientBuild.html

I would need to include: https://docs.strongswan.org/docs/5.9/plugins/kernel-libipsec.html plugin and add the OQS libraries, plus, maybe add another GUI option to the Android app for OQS or maybe just keep the GUI as it is and add it into the IKEv2 algo section as stated in previous conversation.

Edit:

Also, they do have a script for building liboqs on Android, but I haven't tested it.
https://github.com/open-quantum-safe/liboqs/blob/main/scripts/build-android.sh

I don't know if this would matter, but if we needed the cpp and java wrappers, they also have java-liboqs and cpp-liboqs.
https://github.com/orgs/open-quantum-safe/repositories?type=all

[oDinZu]

I integrated OQS 0.10.0 into Android 2.5.1, but I haven't tested anything yet..

[geedo0]

I don't have experience with the Android client, but you can find the names to use for your proposal here. For example, I used aes256gcm128-prfsha256-kyber3 for my own testing. If you can get liboqs to build for your target Android platform and load the oqs plugin into your strongSwan client it should work (assuming you have a similar responder on the other end that will accept your proposal).