mirror of
https://github.com/open-quantum-safe/liboqs.git
synced 2025-10-29 00:04:48 -04:00
30 lines
2.2 KiB
Markdown
30 lines
2.2 KiB
Markdown
CRYSTALS-Kyber
|
|
==============
|
|
|
|
- **Algorithm type**: key encapsulation mechanism
|
|
- **Main cryptographic assumption**: module learning with errors (MLWE)
|
|
- **Scheme authors**: Roberto Avanzi, Joppe Bos, Léo Ducas, Eike Kiltz, Tancrède Lepoint, Vadim Lyubashevsky, John M. Schanck, Peter Schwabe, Gregor Seiler, Damien Stehle
|
|
- **Authors' website**: https://pq-crystals.org/kyber
|
|
- **Version**: NIST Round 3 submission
|
|
|
|
Implementation
|
|
--------------
|
|
|
|
- **Source of implementation**: https://github.com/pq-crystals/kyber
|
|
- **Implementation version**: https://github.com/pq-crystals/kyber/commit/8e9308bd0f25fa698e4f37aba216249261f8b352
|
|
- **License**: Public domain
|
|
- **Constant-time**: Yes
|
|
- **Optimizations**: Portable C with AES, AVX2, POPCNT, SSE2 and SSSE3 instructions (if available at run-time)
|
|
|
|
Parameter sets
|
|
--------------
|
|
|
|
| Parameter set | Security model | Claimed NIST security level | Public key size (bytes) | Secret key size (bytes) | Ciphertext size (bytes) | Shared secret size (bytes) |
|
|
|---------------|----------------|-----------------------------|-------------------------|-------------------------|-------------------------|----------------------------|
|
|
| Kyber512 | IND-CCA | 1 | 800 | 1632 | 768 | 32 |
|
|
| Kyber512-90s | IND-CCA | 1 | 800 | 1632 | 768 | 32 |
|
|
| Kyber768 | IND-CCA | 3 | 1184 | 2400 | 1088 | 32 |
|
|
| Kyber768-90s | IND-CCA | 3 | 1184 | 2400 | 1088 | 32 |
|
|
| Kyber1024 | IND-CCA | 5 | 1568 | 3168 | 1568 | 32 |
|
|
| Kyber1024-90s | IND-CCA | 5 | 1568 | 3168 | 1568 | 32 |
|