Image — click to view
Portable C wrapper around modules with separate tests and optimizations. Covers all parameter sets. Also has round1 option.
Searching…
Portable C wrapper around modules with separate tests and optimizations. Covers all parameter sets. Also has round1 option.
Our security analysis indicates that Stream-lined NTRU Prime 4591761 actually provides a large security margin beyond our target security level, compensating for potential progress in estimating the actual cost of lat...
NTRU is a post-quantum key encapsulation mechanism (KEM) based on lattices over polynomial rings. Introduced in 1996 by Jeffrey Hoffstein, Jill Pipher, and Joseph H. Silverman, it has evolved through significant devel...
NIST requested any “tweaks” to specifications or implementations to be completed by October 1, 2020 for the remaining candidates and expects to hold a 3rd NIST PQC Standardization Conference in 2021, subject to the cu...
NTRU Prime team: Complaint that NIST has not specified a metric for estimating costs of attacks, leading to incorrect estimates of security strength for Kyber, NTRU Prime, etc.
Main cryptographic assumption: NTRU. Principal submitters: Daniel J. Bernstein, Billy Bob Brumley, Ming-Shing Chen, Chitchanok Chuengsatiansup, Tanja Lange, Adrian Marotzke, Bo-Yuan Peng, Nicola Tuveri, Christine van ...
There are many different ideal-lattice-based public-key encryption schemes in the literature, including many versions of NTRU, many Ring-LWE-based cryptosystems, and now Streamlined NTRU Prime.
The following table shows pre-quantum Core-SVP for a selection of sizes for Streamlined NTRU Prime and NTRU LPRime. Post-quantum Core-SVP is about 10% below pre-quantum Core-SVP.
This beats cycle counts of New Hope, Kyber and Curve25519 It does not outperform NTRU KEM (HRSS '17) (48646 cycles enc, 67338 cycles dec) NTRU KEM ciphertexts are longer (1281 bytes vs. 1047 bytes)
NTRU is a asymmetric encryption and has been benchmarked as twice as fast as RSA to encrypt, and three times faster to decrypt. It is the public key method which is not based on factorization (RSA) or discrete logs (E...