FrodoKEM

Information

Authors

• Erdem Alkim
• Joppe W. Bos, NXP Semiconductors
• Léo Ducas, CWI
• Patrick Longa, Microsoft Research
• Ilya Mironov, Google
• Michael Naehrig, Microsoft Research
• Valeria Nikolaenko
• Chris Peikert, University of Michigan
• Ananth Raghunathan, Google
• Douglas Stebila, University of Waterloo

Official Links

• Official Website
• Official Comments

Related Articles

NTRU-LPR IND-CPA: A New Ideal Lattices-based Scheme
Soda Diop and Bernard Ousmane Sané and Nafissatou Diarra and Michel Seck.
Cryptology ePrint Archive: Report 2018/109, Mar 2018.

Summary Table

FALCON
	ROUND 1	ROUND 2
Description	lattice LWE
Assumption	LWE
Functionality	KEM
Public Key (bytes)	level 1: 9616 level 3: 15632	level 1: 9616 level 2: 15632 level 3: 21520
Secret Key (bytes)	level 1: 19872 level 3: 31272	level 1: 19888 level 2: 31296 level 3: 43088
CIPH/SIG (bytes)	level 1: 9736 level 3: 15768	level 1: 9720 level 2: 15744 level 3: 21632
Security Type	IND-CCA