liboqs algorithm datasheet: `kem_bike`
======================================

Summary
-------

- **Name**: BIKE
- **Algorithm type**: Key Encapsulation Mechanism
- **Main cryptographic assumption**: Quasi-cyclic syndrome decoding (QCSD)
- **NIST submission URL**: https://csrc.nist.gov/CSRC/media/Projects/Post-Quantum-Cryptography/documents/round-1/submissions/BIKE.zip
- **Submitters (to NIST competition)**: Nicolas Aragon, Paulo Barreto, Slim Bettaieb, Loic Bidoux, Olivier Blazy, Jean-Christophe Deneuville, Phillipe Gaborit, Shay Gueron, Tim Guneysu, Carlos Aguilar Melchor, Rafael Misoczki, Edoardo Persichetti, Nicolas Sendrier, Jean-Pierre Tillich, Gilles Zemor
- **Submitters' website**: http://bikesuite.org/
- **Added to liboqs by**: Shay Gueron and Nir Drucker.

Parameter sets
--------------

| Parameter set       | Security model | Claimed NIST security level | Public key size (bytes) | Secret key size (bytes) | Ciphertext size (bytes) | Shared secret size (bytes) |
|---------------------|:--------------:|:---------------------------:|:-----------------------:|:-----------------------:|:-----------------------:|:--------------------------:|
| BIKE1-L1            |     IND-CPA    |              1              |           2542          |          2542          |           2542          |             32             |
| BIKE1-L3            |     IND-CPA    |              3              |           4964          |          4964          |           4964          |             32             |
| BIKE1-L5            |     IND-CPA    |              5              |           8188          |          8188          |           8188          |             32             |
| BIKE2-L1            |     IND-CPA    |              1              |           2542          |          2542          |           2542          |             32             |
| BIKE2-L3            |     IND-CPA    |              3              |           4964          |          4964          |           4964          |             32             |
| BIKE2-L5            |     IND-CPA    |              5              |           8188          |          8188          |           8188          |             32             |
| BIKE3-L1            |     IND-CPA    |              1              |           2758          |          2758          |           2758          |             32             |
| BIKE3-L3            |     IND-CPA    |              3              |           5422          |          5422          |           5422          |             32             |
| BIKE3-L5            |     IND-CPA    |              5              |           9034          |          9034          |           9034          |             32             |

Implementation
--------------

- **Source of implementation:** http://bikesuite.org/#implementation
- **Implementation version:** Additional implementation: 05/23/2018; reference implementation: 06/29/2018 (with NTL calls replaced by OpenSSL calls and the decoder of the additional implementation)
- **License:** MIT License
- **Language:** C
- **Constant-time:** No
- **Architectures supported in liboqs nist-branch**: x86, x64

Additional comments
-------------------
- LibOQS includes both the reference implementation and the additional implementation of BIKE from http://bikesuite.org/#implementation. The additional implementation is automatically being chosen once compiling LibOQS on a x64 Linux OS with AVX2/512 support.
- The reference code has been modified to use OpenSSL instead of NTL.
- The secret key size might vary between the two implementations.