Hello,
I created a draft patch to support ML-KEM (a post-quantum key encapsulation mechanism, formerly known as Kyber)[1], based on the explanation in the corresponding IETF draft[2]. There are probably a lot of rooms for improvements (performance, side-channel safety), but I'm sharing the code at: https://git.lysator.liu.se/nettle/nettle/-/merge_requests/62
Any comments or suggestions would be appreciated.
Footnotes: [1] https://csrc.nist.gov/pubs/fips/203/ipd
[2] https://datatracker.ietf.org/doc/draft-cfrg-schwabe-kyber/
Regards,
Daiki Ueno ueno@gnu.org writes:
I created a draft patch to support ML-KEM (a post-quantum key encapsulation mechanism, formerly known as Kyber)[1], based on the explanation in the corresponding IETF draft[2].
Interesting. I'll have to read up a bit on it before trying to read the code. I'm particularly interested in the kind of arithmetic that is used. Thanks for the references.
Regards, /Niels
nettle-bugs@lists.lysator.liu.se
-
Daiki Ueno -
Niels Möller