Open wangxueli1993 opened 5 years ago
I want to know how to realize the random oracle. Which hash function have you chosen?
I used shake128 and shake256, which is mentioned in section 6.1 of dilithium paper.
It is worth noting that kyber originally used cSHAKE and shake{128,256}, but later changed to sha3-{256,512}.
I want to know how to realize the random oracle. Which hash function have you chosen?