{
  "ok": true,
  "selfcheck_ok": true,
  "third_party_ran": true,
  "kem": "ML-KEM (FIPS 203), all three parameter sets",
  "param_sets": [
    "ML-KEM-512",
    "ML-KEM-768",
    "ML-KEM-1024"
  ],
  "contract": {
    "ML-KEM-512": [
      800,
      768,
      32
    ],
    "ML-KEM-768": [
      1184,
      1088,
      32
    ],
    "ML-KEM-1024": [
      1568,
      1568,
      32
    ]
  },
  "vendors": [
    "OpenSSL (OpenSSL 3.6.4 25 Aug 2026 (Library: OpenSSL 3.6.4 25 Aug 2026))",
    "liboqs/oqs-python"
  ],
  "openssl_version": "OpenSSL 3.6.4 25 Aug 2026 (Library: OpenSSL 3.6.4 25 Aug 2026)",
  "liboqs_version": "0.16.0",
  "checks": {
    "ML-KEM-512:openssl_pk_len": true,
    "ML-KEM-512:ct_len": true,
    "ML-KEM-512:ss_len": true,
    "ML-KEM-512:cross_vendor_A_to_B_secret_match": true,
    "ML-KEM-512:liboqs_pk_len": true,
    "ML-KEM-512:ct_len_reverse": true,
    "ML-KEM-512:cross_vendor_B_to_A_secret_match": true,
    "ML-KEM-512:envelope_ptk_wellformed": true,
    "ML-KEM-768:openssl_pk_len": true,
    "ML-KEM-768:ct_len": true,
    "ML-KEM-768:ss_len": true,
    "ML-KEM-768:cross_vendor_A_to_B_secret_match": true,
    "ML-KEM-768:liboqs_pk_len": true,
    "ML-KEM-768:ct_len_reverse": true,
    "ML-KEM-768:cross_vendor_B_to_A_secret_match": true,
    "ML-KEM-768:envelope_ptk_wellformed": true,
    "ML-KEM-1024:openssl_pk_len": true,
    "ML-KEM-1024:ct_len": true,
    "ML-KEM-1024:ss_len": true,
    "ML-KEM-1024:cross_vendor_A_to_B_secret_match": true,
    "ML-KEM-1024:liboqs_pk_len": true,
    "ML-KEM-1024:ct_len_reverse": true,
    "ML-KEM-1024:cross_vendor_B_to_A_secret_match": true,
    "ML-KEM-1024:envelope_ptk_wellformed": true
  },
  "n_checks": 24,
  "n_checks_passed": 24,
  "controls": {
    "ML-KEM-512:tampered_ct_secret_differs": true,
    "ML-KEM-768:tampered_ct_secret_differs": true,
    "ML-KEM-1024:tampered_ct_secret_differs": true
  },
  "n_controls_passed": 3,
  "what": "Drives OpenSSL 3.5+ native ML-KEM-512/768/1024 and liboqs (oqs-python) \u2014 two mainstream stacks sharing no code with the lab \u2014 and proves cross-vendor KEM interop in BOTH directions (encap by A / decap by B, secrets match), then runs a live third-party shared secret through the interop-kit PTK oracle. Any mismatch FAILS. Honest-SKIP when openssl-ML-KEM or oqs is absent (selfcheck floor still runs; real_when checks third_party_ran)."
}