Seemingly, Niederreiter cryptosystem is faster than McEliece, and it can also be used to implement digital signature. Why isn't this scheme appear in NIST post quantum competition?
$\begingroup$
$\endgroup$
Add a comment
|
1 Answer
$\begingroup$
$\endgroup$
1
Classic McEliece is using the Niederreiter T-OWF:
The KEM is built conservatively from a PKE designed for OW-CPA security, namely Niederreiter’s dual version of McEliece’s PKE using binary Goppa codes.
-
1$\begingroup$ You might want to add that there's no Niederreiter signature scheme in the NIST competition because no one submitted such a scheme $\endgroup$– ponchoJan 13, 2021 at 12:56