NewHope

Information

Authors

• Erdem Alkim (TR)
• Roberto Avanzi, ARM (UK)
• Joppe Bos, NXP (BE)
• Léo Ducas, CWI Amsterdam (NL)
• Antonio de la Piedra, Compumatica secure networks B.V. (NL)
• Thomas Pöppelmann, Infineon Technologies (DE)
• Peter Schwabe, Radboud University (NL)
• Douglas Stebila, University of Waterloo (CA)

Official Links

• Official Website
• Official Comments - round 2

Related Articles

Implementation

ISA Extensions for Finite Field Arithmetic - Accelerating Kyber and NewHope on RISC-V
Erdem Alkim and Hülya Evkan and Norman Lahr and Ruben Niederhagen and Richard Petri.
Cryptology ePrint Archive: Report 2020/049, 16 Jan 2020.

Cortex-M4 Optimizations for \{R,M\}LWE Schemes
Erdem Alkim and Yusuf Alper Bilgin and Murat Cenk and François Gérard.
Cryptology ePrint Archive: Report 2020/012, 5 Jan 2020.

SPQCop: Side-channel protected Post-Quantum Cryptoprocessor
Arpan Jati and Naina Gupta and Anupam Chattopadhyay and Somitra Kumar Sanadhya.
Cryptology ePrint Archive: Report 2019/765, Jun 2019.

Preprocess-then-NTT Technique and Its Applications to KYBER and NEWHOPE
Shuai Zhou and Haiyang Xue and Daode Zhang and Kunpeng Wang and Xianhui Lu and Bao Li and Jingnan He.
Cryptology ePrint Archive: Report 2018/995, Oct 2018.

Cryptanalysis

Number "Not Used" Once - Practical fault attack on pqm4 implementations of NIST candidates
Prasanna Ravi and Debapriya Basu Roy and Shivam Bhasin and Anupam Chattopadhyay and Debdeep Mukhopadhyay.
Cryptology ePrint Archive: Report 2018/211, Mar 2019.

Analysis of Error-Correcting Codes for Lattice-Based Key Exchange
Tim Fritzmann and Thomas Pöppelmann and Johanna Sepulveda.
International Conference on Selected Areas in Cryptography.

General

Breakdown Resilience of Key Exchange Protocols: NewHope, TLS 1.3, and Hybrids
Jacqueline Brendel and Marc Fischlin and Felix Günther.
ESORICS 2019.

Post-Quantum Key Exchange on ARMv8-A -- A New Hope for NEON made Simple
Silvan Streit and Fabrizio De Santis.
Cryptology ePrint Archive: Report 2017/388, 4 May 2017.

NewHope without reconciliation
Erdem Alkim and Léo Ducas and Thomas Pöppelmann and Peter Schwabe.
Cryptology ePrint Archive: Report 2016/1157.

Summary Table

NewHope - round 2
	NewHope-CPA-KEM	NewHope-CCA-KEM
Description	Lattice RLWE
Assumption	RLWE
Functionality	KEM
Public Key (bytes)	level 1: 928 level 5: 1824	level 1: 1088 level 5: 2176
Secret Key (bytes)	level 1: 869 level 5: 1792	level 1: 1888 level 5: 3680
CIPH/SIG (bytes)	level 1: 1088 level 5: 2176	level 1: 1120 level 5: 2208
Security Type	IND-CCA