a94abf08a1
Oussama Danba caught a bug in how we were handing a test related to
ciphertext encoding. Not a security issue as far as we can tell, but
certainly not the correct behavior.
More detail here: e0ab9525f1
This commit also switches ntruhrss701/avx2/poly_S3_inv to the
Bernstein--Yang code, also slightly simplifies the poly_Rq_to_S3
routine.
37 lines
961 B
YAML
37 lines
961 B
YAML
name: ntruhrss701
|
|
type: kem
|
|
claimed-nist-level: 3
|
|
claimed-security: IND-CCA2
|
|
length-public-key: 1138
|
|
length-secret-key: 1450
|
|
length-ciphertext: 1138
|
|
length-shared-secret: 32
|
|
nistkat-sha256: 501e000c3eb374ffbfb81b0f16673a6282116465936608d7d164b05635e769e8
|
|
principal-submitters:
|
|
- John M. Schanck
|
|
auxiliary-submitters:
|
|
- Cong Chen
|
|
- Oussama Danba
|
|
- Jeffrey Hoffstein
|
|
- Andreas Hülsing
|
|
- Joost Rijneveld
|
|
- Tsunekazu Saito
|
|
- Peter Schwabe
|
|
- William Whyte
|
|
- Keita Xagawa
|
|
- Takashi Yamakawa
|
|
- Zhenfei Zhang
|
|
implementations:
|
|
- name: clean
|
|
version: https://github.com/jschanck/ntru/tree/b38a346a reference implementation
|
|
- name: avx2
|
|
version: https://github.com/jschanck/ntru/tree/b38a346a avx2 implementation
|
|
supported_platforms:
|
|
- architecture: x86_64
|
|
operating_systems:
|
|
- Linux
|
|
- Darwin
|
|
required_flags:
|
|
- avx2
|
|
- bmi2
|