NTRU

This is a merge of NTRUEncrypt and NTRU-HRSS-KEM.

Information

Authors

• Cong Chen, OnBoard Security
• Oussama Danba
• Andreas Hulsing
• Jeffrey Hoffstein, Brown University
• Joost Rijneveld
• John M. Schanck
• Peter Schwabe
• William Whyte, OnBoard Security
• Zhenfei Zhang, OnBoard Security
• Tsunekazu Saito
• Takashi Yamakawa
• Keita Xagawa

Official Links

• Website: link
• Submission details: Round 2
• Official Comments: Round 2

Related Articles

Cryptanalysis

A Comparison of NTRU Variants
John M. Schanck.
Cryptology ePrint Archive: Report 2018/1174, 30 Nov 2018.

General

High-speed key encapsulation from NTRU
Andreas Hülsing, Joost Rijneveld, John M. Schanck, and Peter Schwabe.
CHES 2017, 2017.

NTRU: A new high-speed public key cryptosystem
Jeffrey Hoffstein, Jill Pipher, Joseph H. Silverman.
Manuscript circulated at CRYPTO 1996 rump session,, 1996-08-13.

Summary Table

ROUND 1
	NTRUEncrypt	NTRU-HRSS-KEM
Description	lattice NTRU
Assumption	NTRU
Functionality	KEM
Public Key (bytes)	level 1: 611 level 4: 1023 level 5: 4097	level 1: 1138 - -
Secret Key (bytes)	level 1: 701 level 4: 1173 level 5: 8194	level 1: 1418 - -
CIPH/SIG (bytes)	level 1: 611 level 4: 1023 level 5: 4097	level 1: 1278 - -
Security Type	IND-CCA

ROUND 2
	NTRUEncrypt	NTRU-HRSS-KEM
Description	lattice
Assumption	NTRU
Functionality	KEM
Public Key (bytes)	level 1: 699 level 3: 931 level 5: 1230	level 3: 1138 - -
Secret Key (bytes)	level 1: 935 level 3: 1235 level 5: 1592	level 3: 1452 - -
CIPH/SIG (bytes)	level 1: 699 level 3: 931 level 5: 1230	level 3: 1138 - -
Security Type	IND-CCA