Questions tagged [dilithium]
Dilithium is a digital signature algorithm based which uses the FIat-Shamir with aborts technique based on the Decisional Compact Knapsack (DCK) and Short Integer Solution (SIS) problems in module lattices. It is an example of lattice-based cryptography and is part of the Crystals family together with the KEM scheme Kyber. It was selected for standardisation as part of the NIST post-quantum cryptography process in 2022. The standard is in progress.
15
questions
2
votes
1
answer
75
views
Where does the 8 come from? Generic Search Problem with Bounded Probabilities
I am working with lossy ID-schemes and their security in the QROM. Following the article of Kiltz et al. , I am at a loss of the number 8 appearing in most reductions throughout the article. I know it ...
- 313
1
vote
0
answers
24
views
Proving the minimal entropy of Dilithium-QROM?
I am working with the securit yof CRYSTAL's Dilithium signature in the QROM. I am working with Kiltz et al.'s approach through lossy ID-schemes and looking at the proof of minimal entropy for the $DFS[...
- 313
5
votes
1
answer
133
views
Do we need the quantum random oracle model (QROM)?
I am currently studying the proof of the Dilithium signature in the quantum random oracle model (QROM). I am curious to hear if anyone have any thoughts on the importance of having proofs in the QROM ...
- 313
3
votes
1
answer
226
views
CRYSTALS-Dilithium - How do the supporting algorithms work?
I am studying the Dilithium signature from Ducas et al's CRYSTALS-Dilithium: A Lattice-Based Digital Signature Scheme.
Wanting to understand how the supporting algorithms work together, I am trying ...
- 313
6
votes
1
answer
158
views
Are rejected Dilithium commitments secret?
On 6 March, Yi Lee sent over the NIST mailing list an announcement of their submitted paper that found a flaw in the original security proof for Dilithium. In their manuscript, they fix the proof on ...
- 1,155
13
votes
4
answers
5k
views
Kyber and Dilithium explained to primary school students?
Kyber and Dilithium are post-quantum cryptographic designs, but the resources are hard to understand. Is it possible to explain those ciphers to children?
- 331
2
votes
1
answer
278
views
What is the effect of solving short integer solution problem in Dilithium or any other post quantum signature scheme?
I am trying to understand the post quantum based signature scheme Dilithium. I know what the hard problems are in the scheme, but I am having trouble in understanding the utilization of short integer ...
12
votes
1
answer
2k
views
Why did NIST select Kyber and Dilithium?
NIST selected Kyber for key agreement and Dilithium for digital signature applications some days ago. But IDF's MATZOV group, in their paper, broke Kyber and Dilithium and brought the security levels ...
- 121
2
votes
1
answer
205
views
Is it possible to create a Dilithium Prime or Falcon Prime?
In the NTRU Prime submission, principle author, the well-known DJB is adamant that
[the] primary objective [of NTRU Prime] is to
eliminate unnecessary complications in security review
So much so, to ...
- 8,263
4
votes
1
answer
215
views
Basic explanation of Falcon and Dilithium
I've been trying to search for toy examples of the round 3 digital signatures Rainbow, Falcon and Dilithium. Not a lot of actual implementation examples are out there. What I'm searching for are ...
- 41
4
votes
0
answers
277
views
Which parts of CRYSTALS-Kyber and CRYSTALS-Dilithium are compatible?
The papers CRYSTALS-Kyber and CRYSTALS-Dilithium both have been written by quite different authors. It seems that at least the key generation is very different from each other. CRYSTALS mainly seems ...
- 90.2k
1
vote
1
answer
175
views
Meaning of Dilithium-1024x768 or Dilithium2
Can someone explain me the meaning of 1024 and 768 in Dilithium-1024x768 in the algorithm? And the meaning of 2 in Dilithium2 in the algorithm?
- 95
1
vote
0
answers
267
views
Dilithium signature scheme - Public key derivation
I was looking at post quantum signature schemes, and I came across Dilithium(https://github.com/pq-crystals/dilithium), and our system currently runs on Ed25519 which based on my question can easily ...
5
votes
0
answers
198
views
Why is it safe to generate the secret key and masking vectors using rejection sampling in CRYSTALS-Dilithium?
In CRYSTALS-Dilithium module lattice-based digital signatures, the secret key vectors $s_1, s_2$ with coefficients in $[-\eta, \eta]$ and the signature masking vector $y$ with coefficients in $(-\...
- 436
4
votes
1
answer
511
views
Dilithium signature scheme and timing attacks – Does the running time actually depend on the secret key?
The paper “CRYSTALS – Dilithium: Digital Signatures from Module Lattices” (by Léo Ducas, Tancrède Lepoint, Vadim Lyubashevsky, Peter Schwabe, Gregor Seiler, and Damien Stehlé) introduces a digital ...
- 4,763