1
$\begingroup$

Seemingly, Niederreiter cryptosystem is faster than McEliece, and it can also be used to implement digital signature. Why isn't this scheme appear in NIST post quantum competition?

$\endgroup$
1
$\begingroup$

Classic McEliece is using the Niederreiter T-OWF:

The KEM is built conservatively from a PKE designed for OW-CPA security, namely Niederreiter’s dual version of McEliece’s PKE using binary Goppa codes.

https://classic.mceliece.org/nist/mceliece-20201010.pdf

$\endgroup$
1
  • 1
    $\begingroup$ You might want to add that there's no Niederreiter signature scheme in the NIST competition because no one submitted such a scheme $\endgroup$ – poncho Jan 13 at 12:56

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.