1
$\begingroup$

I downloaded the 1st-round NTRUEncrypt submission from NIST website, the spec mentions the mask generation function MGF1 in ASN.1 definition but not in algorithm description.

Does the EESS#1 NTRUEncrypt use the MGF1 specified in PKCS#1 at all?

Improve this question
$\endgroup$
1
  • $\begingroup$ The more I read it, the more I get convinced that it is a copy / paste issue, as XOF either SHAKE or AES in counter mode is used. $\endgroup$
    – Maarten Bodewes ♦
    Jul 30, 2021 at 22:21

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Browse other questions tagged or ask your own question.