BAT: Small and Fast KEM over NTRU Lattices
نویسندگان
چکیده
We present BAT – an IND-CCA secure key encapsulation mechanism (KEM) that is based on NTRU but follows encryption/decryption paradigm distinct from classical KEMs. It demonstrates a new approach of decrypting ciphertext since its introduction 25 years ago. Instead introducing artificial masking parameter p to decrypt the ciphertext, we use 2 linear equations in unknowns recover message and error. The encryption process therefore close GGH scheme. However, secret now short basis (not vector), need modify decryption algorithm decoder. Thanks improved decoder, our scheme works with smaller modulus yields shorter ciphertexts, than RSA-4096 for 128-bit security comparable public-key size much faster RSA or even ECC. Meanwhile, are still simple fast spite complicated generation. Overall, KEM has more compact parameters all current lattice-based schemes practical efficiency. Moreover, due similar pair structure, can be special interest some applications using Falcon signature also most round 3 NIST post-quantum cryptography standardization. different Falcon, does not rely floating-point arithmetic fully implemented over integers.
منابع مشابه
Efficient Identity-Based Encryption over NTRU Lattices
Efficient implementations of lattice-based cryptographic schemes have been limited to only the most basic primitives like encryption and digital signatures. The main reason for this limitation is that at the core of many advanced lattice primitives is a trapdoor sampling algorithm (Gentry, Peikert, Vaikuntanathan, STOC 2008) that produced outputs that were too long for practical applications. I...
متن کاملILTRU: An NTRU-Like Public Key Cryptosystem Over Ideal Lattices
In this paper we present a new NTRU-Like public key cryptosystem with security provably based on the worst case hardness of the approximate both Shortest Vector Problem (SVP) and Closest Vector Problem (CVP) in some structured lattices, called ideal lattices. We show how to modify the ETRU cryptosystem, an NTRU-Like public key cryptosystem based on the Eisenstein integers 3 [ ] where 3 is a...
متن کاملA Practical Implementation of Identity-Based Encryption over NTRU Lattices
An identity-based encryption scheme enables the efficient distribution of keys in a multi-user system. Such schemes are particularly attractive in resource constrained environments where critical resources such as processing power, memory and bandwidth are severely limited. This research examines the first pragmatic lattice-based IBE scheme presented by Ducas, Lyubashevsky and Prest in 2014 and...
متن کاملTitle: Estimated Breaking times for Ntru Lattices
In this note we report on experiments with the lattices underlying the NTRU Public Key Cryptosystem. We present data for the time needed to nd a small vector and use this data to extrapolate expected breaking times for the NTRU PKCS for various parameter values. In particular, we nd that NTRU 167, NTRU 263, and NTRU 503 are at least as secure as RSA 512, RSA 1024, and RSA 2048 respectively. In ...
متن کاملذخیره در منابع من
با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید
ژورنال
عنوان ژورنال: IACR transactions on cryptographic hardware and embedded systems
سال: 2022
ISSN: ['2569-2925']
DOI: https://doi.org/10.46586/tches.v2022.i2.240-265