BAT: Small and Fast KEM over NTRU Lattices - Archive ouverte HAL Accéder directement au contenu
Article Dans Une Revue IACR Transactions on Cryptographic Hardware and Embedded Systems Année : 2022

BAT: Small and Fast KEM over NTRU Lattices

Paul Kirchner
  • Fonction : Auteur
  • PersonId : 1125333
Thomas Pornin
  • Fonction : Auteur
  • PersonId : 1084962
Yang Yu

Résumé

We present BAT-an IND-CCA secure key encapsulation mechanism (KEM) that is based on NTRU but follows an encryption/decryption paradigm distinct from classical NTRU KEMs. It demonstrates a new approach of decrypting NTRU ciphertext since its introduction 25 years ago. Instead of introducing an artificial masking parameter p to decrypt the ciphertext, we use 2 linear equations in 2 unknowns to recover the message and the error. The encryption process is therefore close to the GGH scheme. However, since the secret key is now a short basis (not a vector), we need to modify the decryption algorithm and we present a new NTRU decoder. Thanks to the improved decoder, our scheme works with a smaller modulus and yields shorter ciphertexts, smaller than RSA-4096 for 128-bit security with comparable public-key size and much faster than RSA or even ECC. Meanwhile, the encryption and decryption are still simple and fast in spite of the complicated key generation. Overall, our KEM has more compact parameters than all current lattice-based schemes and a practical efficiency. Moreover, due to the similar key pair structure, BAT can be of special interest in some applications using Falcon signature that is also the most compact signature in the round 3 of the NIST post-quantum cryptography standardization. But different from Falcon, our KEM does not rely on floating-point arithmetic and can be fully implemented over the integers.
Fichier principal
Vignette du fichier
main.pdf (709.21 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03626330 , version 1 (31-03-2022)

Identifiants

Citer

Pierre-Alain Fouque, Paul Kirchner, Thomas Pornin, Yang Yu. BAT: Small and Fast KEM over NTRU Lattices. IACR Transactions on Cryptographic Hardware and Embedded Systems, 2022, 2022 (2), pp.240-265. ⟨10.46586/tches.v2022.i2.240-265⟩. ⟨hal-03626330⟩
28 Consultations
114 Téléchargements

Altmetric

Partager

Gmail Mastodon Facebook X LinkedIn More