search

bwesterb / draft-schwabe-cfrg-kyber

CFRG I-D for the Post-Quantum KEM Kyber
Other
7 stars 4 forks source link

[DNM] Apply proposed tweak to FO transform #36

Closed bwesterb closed 1 year ago

bwesterb commented 1 year ago

This change is expected to be included in NIST's standard. See

https://groups.google.com/a/list.nist.gov/g/pqc-forum/c/WFRDl8DqYQ4/m/54var7dfAQAJ

cryptojedi commented 1 year ago

The "rejection key" on ciphertext mismatch should be KDF(z + ct) instead of KDF(z + H(ct)).

bwesterb commented 1 year ago

The "rejection key" on ciphertext mismatch should be KDF(z + ct) instead of KDF(z + H(ct)).

Fixed.