pqcrypto/crypto_kem/frodokem640shake/META.yml

name: FrodoKEM-640-SHAKE
type: kem
claimed-nist-level: 1
claimed-security: IND-CCA2
length-public-key: 9616
length-secret-key: 19888
length-ciphertext: 9720
length-shared-secret: 16
nistkat-sha256: df2b77b8e108c61d16c78a99e79f3351ab15840a690f25c1f87a8e89295e9219
principal-submitters:
  - Michael Naehrig, Microsoft Research
auxiliary-submitters:
- Erdem Alkim
- Joppe W. Bos, NXP Semiconductors
- Léo Ducas, CWI
- Patrick Longa, Microsoft Research
- Ilya Mironov, Google
- Valeria Nikolaenko
- Chris Peikert, University of Michigan
- Ananth Raghunathan, Google
- Douglas Stebila, University of Waterloo
- Karen Easterbrook, Microsoft Research
- Brian LaMacchia, Microsoft Research
implementations:
- name: clean
  version: https://github.com/Microsoft/PQCrypto-LWEKE/commit/d5bbd0417ba111b08a959c0042a1dcc65fb14a89
- name: opt
  version: https://github.com/Microsoft/PQCrypto-LWEKE/commit/d5bbd0417ba111b08a959c0042a1dcc65fb14a89
Initial FrodoKEM-640-SHAKE implementation 2019-03-22 02:56:45 +00:00			`name: FrodoKEM-640-SHAKE`
			`type: kem`
			`claimed-nist-level: 1`
Add IND-CPA/IND-CCA2 security field to METADATA. add test for it as well (#165) 2019-05-13 16:20:33 +01:00			`claimed-security: IND-CCA2`
Initial FrodoKEM-640-SHAKE implementation 2019-03-22 02:56:45 +00:00			`length-public-key: 9616`
Move secret key length back to scheme-level META 2019-04-17 09:55:10 +01:00			`length-secret-key: 19888`
Initial FrodoKEM-640-SHAKE implementation 2019-03-22 02:56:45 +00:00			`length-ciphertext: 9720`
Add missing metadata to META 2019-04-05 15:38:11 +01:00			`length-shared-secret: 16`
Add NIST KAT check for KEMs 2019-04-14 22:17:11 +01:00			`nistkat-sha256: df2b77b8e108c61d16c78a99e79f3351ab15840a690f25c1f87a8e89295e9219`
Convert `principal-submitter` into a list There are schemes, like SABER (#192) that have more than one principal submitter. Consistency warrants that we turn it into a list for all schemes and don't do something with allowing either a str or a list: that would just be very annoying to parse. Closes #194 2019-06-20 08:55:02 +01:00			`principal-submitters:`
			`- Michael Naehrig, Microsoft Research`
Initial FrodoKEM-640-SHAKE implementation 2019-03-22 02:56:45 +00:00			`auxiliary-submitters:`
Minor reformatting 2019-04-04 17:05:20 +01:00			`- Erdem Alkim`
			`- Joppe W. Bos, NXP Semiconductors`
			`- Léo Ducas, CWI`
			`- Patrick Longa, Microsoft Research`
			`- Ilya Mironov, Google`
			`- Valeria Nikolaenko`
			`- Chris Peikert, University of Michigan`
			`- Ananth Raghunathan, Google`
Correct FrodoKEM submitter list 2019-04-14 22:38:53 +01:00			`- Douglas Stebila, University of Waterloo`
Minor reformatting 2019-04-04 17:05:20 +01:00			`- Karen Easterbrook, Microsoft Research`
			`- Brian LaMacchia, Microsoft Research`
Initial FrodoKEM-640-SHAKE implementation 2019-03-22 02:56:45 +00:00			`implementations:`
Minor reformatting 2019-04-04 17:05:20 +01:00			`- name: clean`
Update to latest changes from upstream, fix correctness on MS Visual Studio (#163) 2019-05-05 23:33:34 +01:00			`version: https://github.com/Microsoft/PQCrypto-LWEKE/commit/d5bbd0417ba111b08a959c0042a1dcc65fb14a89`
use optimized matrix_shake.c for frodokem640shake 2019-05-20 14:12:51 +01:00			`- name: opt`
			`version: https://github.com/Microsoft/PQCrypto-LWEKE/commit/d5bbd0417ba111b08a959c0042a1dcc65fb14a89`