liboqs/docs/algorithms/sig/rainbow.md
Michael Baentsch a822f0e62d
PQClean / NTRU Prime update (#1039)
* updating upstream algorithms

* update Kyber upstream ref

* adding compat.h

* add SPDX

* move to PQClean shims

* alpine-breaking gcc feature check changed

* remove error case as per PR review comment
2021-06-29 15:05:34 -04:00

2.7 KiB

Rainbow

  • Algorithm type: signature
  • Main cryptographic assumption: multivariable polynomials, unbalanced oil and vinegar
  • Scheme authors: Jintai Ding, Ming-Shing Chen, Albrecht Petzoldt, Dieter Schmidt, Bo-Yin Yang
  • Version: NIST Round 3 submission

Implementation

Parameter sets

Parameter set Security model Claimed NIST security level Public key size (bytes) Secret key size (bytes) Signature size (bytes)
Rainbow-I-Classic EUF-CMA 1 161600 103648 66
Rainbow-I-Circumzenithal EUF-CMA 1 60192 103648 66
Rainbow-I-Compressed EUF-CMA 1 60192 64 66
Rainbow-III-Classic EUF-CMA 3 882080 626048 164
Rainbow-III-Circumzenithal EUF-CMA 3 264608 626048 164
Rainbow-III-Compressed EUF-CMA 3 264608 64 164
Rainbow-V-Classic EUF-CMA 5 1930600 1408736 212
Rainbow-V-Circumzenithal EUF-CMA 5 536136 1408736 212
Rainbow-V-Compressed EUF-CMA 5 536136 64 212

Security considerations

In October 2020, Beullens announced improved cryptanalysis of Rainbow that somewhat reduces the security of the Round 2 and Round 3 parameters. As of October 28, 2020, the scheme authors have acknowledged the attack and are preparing a response.