Timeline for What are the public key and output sizes for the four remaining PQC KEM candidates?
Current License: CC BY-SA 4.0
6 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 26, 2021 at 11:35 | comment | added | Andrea | For Saber, the pk size is l * 256 * log(p) / 8 + 32, since the vector b is composed by l polynomials of 256 coefficients, of p bits each, and 32 is the size of the matrix A seed. For the ciphertext, another vector b' of size l * 256 * log(p) / 8 is generated, together with the message-encoding polynomial c_m which has 256 coefficients of T bits each. Note that for all security levels, p^10 and T=4. The only value that changes if l, ranging from 2 to 4. | |
| Dec 22, 2020 at 19:41 | comment | added | SEJPM | @kelalaka because I couldn't figure out the formulas and didn't want to invest the time given that they also tabled the relevant values. | |
| Dec 22, 2020 at 19:37 | comment | added | kelalaka | Why there are questions marks? | |
| Dec 22, 2020 at 14:51 | comment | added | Maarten Bodewes♦ | It took some time for me to realize that those keys sizes are in bytes, as I'm so used to bits for them - although bytes make more sense for encoding of keys. It's actually not as bad as I expected, other than McEliece starting off at around 261KB. | |
| Dec 22, 2020 at 14:46 | vote | accept | Maarten Bodewes♦ | ||
| Dec 22, 2020 at 12:34 | history | answered | SEJPM | CC BY-SA 4.0 |