4
votes
Why is the public key included in the private key in Kyber KEM?
@DannyNiu is correct in noting that the public key is a necessary part of the ML-KEM.Decaps_internal, but the reason why this should be protected in the same way as ...
- 25.3k
4
votes
Accepted
Kyber prime modulus p and base generator g
This is curious.
The prime p=0xfca682ce8e12caba26efccf7110e526db078b05edecbcd1eb4a208f3ae1617ae01f35b91a47e6df63413c5e12ed0899bcd132acd50d99151bdc43ee737592e17 is a ...
- 25.3k
3
votes
Accepted
Attacks exploiting decryption failures in KYBER
A1: The author is trying to show that the total work to exhibit a failure will always be greater than $2^{160}$. They tune failure to occur only when $\langle\mathbf z,\mathbf v\rangle$ is greater ...
- 25.3k
3
votes
Accepted
Compare Saber and Kyber, about their techniques of message bit layout in encryption
The rationale for the Kyber design is to view the "add error then round" process as adding security from the addition of $e_2$ and then providing bandwidth efficiency via the rounding in a ...
- 25.3k
2
votes
Why is the public key included in the private key in Kyber KEM?
Kyber/ML-KEM re-encrypts the decrypted ciphertext to confirm that it's not a corrupt ciphertext aimed at attacking the user of the private key (through decryption failure amplification or other mean). ...
- 9,662
Only top scored, non community-wiki answers of a minimum length are eligible