FrodoKEM, at level 3 and 5, is one of two post-quantum algorithms recommended by the German Federal Office for Information Security (BSI) as cryptographically suitable for long-term …

For FrodoKEM-640-SHAKE, we can see that the size of Alice's public key is 9,616 bytes long, and her private key is 19,888 bytes long. The ciphertext passed is 9,270 bytes long.

Algorithm type: Key encapsulation mechanism. Main cryptographic assumption: learning with errors (LWE). Principal submitters: Michael Naehrig, Erdem Alkim, Joppe Bos, Léo Ducas, …

This implementation passes all KAT tests from the reference specification for all defined key sizes (640 / 976 / 1344) and variants (AES / SHAKE).

FrodoKEM-640: targets Level 1 security (≥ AES-128). FrodoKEM-976: targets Level 3 security (≥ AES-192). Other parameterizations are easy, by changing compile-time constants. breaking …

Sep 30, 2020 · Size (in bytes) of inputs and outputs of FrodoKEM. This submission defines a family of key-encapsulation mechanisms (KEMs), collectively called FrodoKEM.

He pastes Alice's public key into the text box or uploads the public key file. Then, he enters the data to encapsulate - either by pasting text (up to 1KB) or uploading a file (up to 5MB, such as …

Sep 30, 2020 · Concretely, FrodoKEM is designed for IND-CCA security at three levels: FrodoKEM-640, which targets Level 1 in the NIST call for proposals (matching or exceeding …

Concretely, this library includes the following KEM schemes using AES128 for the generation of the public matrix "A": FrodoKEM-640-AES and eFrodoKEM-640-AES: matching the post …

FrodoKEM achieves chosen-ciphertext (IND-CCA) security by applying a transformation to the IND-CPA-secure FrodoPKE scheme. Complete details about the design and performance of …