markschultz

6 ms·

1. 1.▲
   by markschultz 4y ago

   Thanks for the feedback! Roughly speaking, that all has to do with making e vanish later, so perhaps I need to revisit that section. Quickly (cause I probably won't for a few days), (q//2) m can be seen as a form of error cor
2. 2.▲
   by markschultz 4y ago

   Yes, many. I believe he's on the SPHINCS+ team (was standardized), Classic McCliece (round 3, not standardized), and NTRU_PRIME (round 3, passed over for Kyber). Perhaps more, but he has significant skin in the game.
3. 3.▲
   by markschultz 4y ago

   LWE's hardness is based on SVP (ignoring issues of tightness, which isn't unique to FrodoKEM). The difference between FrodoKEM + Kyber/Saber isn't relying on SVP/not (they all essentially do), but is on relying on L
4. 4.▲
   by markschultz 4y ago

   Cyclotomic polynomials are incredibly standard in the field. The only researcher I know of who has issues with them is DJB, and there has not been significant advances in cryptanalysis due to usage of cyclotomics (with the exception of prob
5. 5.▲
   by markschultz 4y ago

   I wrote up an introduction to a (severely unoptimized for pedagogical purposes) version of FrodoKEM https://mark-schultz.github.io/nist-standard-out/ It's the same base scheme as Saber/Kyber, although as Sabe