1
$\begingroup$

Seemingly, Niederreiter cryptosystem is faster than McEliece, and it can also be used to implement digital signature. Why isn't this scheme appear in NIST post quantum competition?

$\endgroup$

1 Answer 1

1
$\begingroup$

Classic McEliece is using the Niederreiter T-OWF:

The KEM is built conservatively from a PKE designed for OW-CPA security, namely Niederreiter’s dual version of McEliece’s PKE using binary Goppa codes.

https://classic.mceliece.org/nist/mceliece-20201010.pdf

$\endgroup$
1
  • 1
    $\begingroup$ You might want to add that there's no Niederreiter signature scheme in the NIST competition because no one submitted such a scheme $\endgroup$
    – poncho
    Jan 13, 2021 at 12:56

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.