Questions tagged [dilithium]
Dilithium is a digital signature algorithm based which uses the FIat-Shamir with aborts technique based on the Decisional Compact Knapsack (DCK) and Short Integer Solution (SIS) problems in module lattices. It is an example of lattice-based cryptography and is part of the Crystals family together with the KEM scheme Kyber. It was selected for standardisation as part of the NIST post-quantum cryptography process in 2022. The standard is in progress.
20
questions
1
vote
0
answers
20
views
How to convert Lattice based signature to R1CS statements?
How can we convert a lattice-based signature (like based on Fiat Shmair with abort e.g. Dilithium) to R1CS?
0
votes
0
answers
71
views
Kyber and Dilithium usage limits?
What are the theoretical usage limits of Kyber and Dilithium? Are there any sources to back this up? Maximum number of encryptions/signatures allowed per key, etc.?
- 73
1
vote
1
answer
61
views
Can someone explain in simple terms how coding part and the algorithm itself, of dilithium pqc signature algorithm resemble here?
I am stuck here and can't map the coding part to the algorithm.
$$\underline{\text{Power2Round}_q(r, d)}\\
r := r \bmod^+ q\\
r_0 := r mod^\pm 2^d\\
\textbf{return}\big((r-r_0) / 2^d, r_0\big)
$$
What ...
1
vote
1
answer
48
views
How have the authors performed uniform random sampling for the secret values s1 and s2 in dilithium?
I am currently trying to understand and implement the design of post quantum algorithm signature algorithm Dilithium. I have read the document several times and they have just used uniform random ...
- 35
2
votes
1
answer
139
views
In dilithium (post quantum signature algorithm), how have the authors precomputed the table of zetas for NTT?
I am trying to understand the design rationale of in place NTT in Dilithium. I know that how the splitting of polynomials is done but I cant seem to map this approach to the precomputed table of zetas ...
- 35
3
votes
1
answer
85
views
Where does the 8 come from? Generic Search Problem with Bounded Probabilities
I am working with lossy ID-schemes and their security in the QROM. Following the article of Kiltz et al. , I am at a loss of the number 8 appearing in most reductions throughout the article. I know it ...
- 335
2
votes
0
answers
36
views
Proving the minimal entropy of Dilithium-QROM?
I am working with the securit yof CRYSTAL's Dilithium signature in the QROM. I am working with Kiltz et al.'s approach through lossy ID-schemes and looking at the proof of minimal entropy for the $DFS[...
- 335
5
votes
1
answer
303
views
Do we need the quantum random oracle model (QROM)?
I am currently studying the proof of the Dilithium signature in the quantum random oracle model (QROM). I am curious to hear if anyone have any thoughts on the importance of having proofs in the QROM ...
- 335
3
votes
1
answer
504
views
CRYSTALS-Dilithium - How do the supporting algorithms work?
I am studying the Dilithium signature from Ducas et al's CRYSTALS-Dilithium: A Lattice-Based Digital Signature Scheme.
Wanting to understand how the supporting algorithms work together, I am trying ...
- 335
7
votes
1
answer
193
views
Are rejected Dilithium commitments secret?
On 6 March, Yi Lee sent over the NIST mailing list an announcement of their submitted paper that found a flaw in the original security proof for Dilithium. In their manuscript, they fix the proof on ...
- 1,175
15
votes
4
answers
6k
views
Kyber and Dilithium explained to primary school students?
Kyber and Dilithium are post-quantum cryptographic designs, but the resources are hard to understand. Is it possible to explain those ciphers to children?
- 351
2
votes
1
answer
327
views
What is the effect of solving short integer solution problem in Dilithium or any other post quantum signature scheme?
I am trying to understand the post quantum based signature scheme Dilithium. I know what the hard problems are in the scheme, but I am having trouble in understanding the utilization of short integer ...
12
votes
1
answer
3k
views
Why did NIST select Kyber and Dilithium?
NIST selected Kyber for key agreement and Dilithium for digital signature applications some days ago. But IDF's MATZOV group, in their paper, broke Kyber and Dilithium and brought the security levels ...
- 121
2
votes
1
answer
231
views
Is it possible to create a Dilithium Prime or Falcon Prime?
In the NTRU Prime submission, principle author, the well-known DJB is adamant that
[the] primary objective [of NTRU Prime] is to
eliminate unnecessary complications in security review
So much so, to ...
- 9,001
4
votes
1
answer
266
views
Basic explanation of Falcon and Dilithium
I've been trying to search for toy examples of the round 3 digital signatures Rainbow, Falcon and Dilithium. Not a lot of actual implementation examples are out there. What I'm searching for are ...
- 41
4
votes
0
answers
334
views
Which parts of CRYSTALS-Kyber and CRYSTALS-Dilithium are compatible?
The papers CRYSTALS-Kyber and CRYSTALS-Dilithium both have been written by quite different authors. It seems that at least the key generation is very different from each other. CRYSTALS mainly seems ...
- 91.9k
1
vote
1
answer
207
views
Meaning of Dilithium-1024x768 or Dilithium2
Can someone explain me the meaning of 1024 and 768 in Dilithium-1024x768 in the algorithm? And the meaning of 2 in Dilithium2 in the algorithm?
- 95
1
vote
0
answers
362
views
Dilithium signature scheme - Public key derivation
I was looking at post quantum signature schemes, and I came across Dilithium(https://github.com/pq-crystals/dilithium), and our system currently runs on Ed25519 which based on my question can easily ...
5
votes
0
answers
235
views
Why is it safe to generate the secret key and masking vectors using rejection sampling in CRYSTALS-Dilithium?
In CRYSTALS-Dilithium module lattice-based digital signatures, the secret key vectors $s_1, s_2$ with coefficients in $[-\eta, \eta]$ and the signature masking vector $y$ with coefficients in $(-\...
- 436
4
votes
1
answer
547
views
Dilithium signature scheme and timing attacks – Does the running time actually depend on the secret key?
The paper “CRYSTALS – Dilithium: Digital Signatures from Module Lattices” (by Léo Ducas, Tancrède Lepoint, Vadim Lyubashevsky, Peter Schwabe, Gregor Seiler, and Damien Stehlé) introduces a digital ...
- 4,763