LOTUS-KEM

From PQC WIKI
Revision as of 00:34, 13 May 2021 by Admin (talk | contribs) (1 revision imported)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)


LOTUS-KEM - round 1

Variant
Description Learning with errors
Assumption LWE
Functionality PKE
Public Key
(bytes) 		L1 ; 658950, L3; 1025000, L5; 1471000
Secret Key
(bytes) 		L1; 700420, L3; 1101000, L5; 1590800
CIPH/SIG
(bytes) 		L1; 1144, L3; 1456, L5; 1768
Attacks - Comment It is shown that KEM LOTUS 128 fails to achieve CCA security. The claim is confirmed by the designers and the proposal is revised. It is claimed by the designers that previously proposed attack does not apply anymore.
Security Discussions IND-CCA2
Challenges
Notes
Updated [
Retrieved from "http://pqc-wiki.fau.edu/index.php?title=LOTUS-KEM&oldid=75"
GNU Free Documentation License 1.3 or later
Powered by MediaWiki