BIKE: Bit-flipping Key Encapsulation
BIKE can use different decoders without affecting interoperability. The decoder must be implementable in constant-time to avoid side-channel attacks, and its DFR must be low enough to match the security requirement.