FrodoKEM, at level 3 and 5, is one of two post-quantum algorithms recommended by the German Federal Office for Information Security (BSI) as cryptographically suitable for long-term …

For FrodoKEM-640-SHAKE, we can see that the size of Alice's public key is 9,616 bytes long, and her private key is 19,888 bytes long. The ciphertext passed is 9,270 bytes long.

FrodoKEM Algorithm type: Key encapsulation mechanism. Main cryptographic assumption: learning with errors (LWE). Principal submitters: Michael Naehrig, Erdem Alkim, Joppe Bos, …

Concretely, we reduce the stack consumption of FrodoKEM by a factor 2–3× compared to the smallest known implementations with almost no impact on performance. We also present …

Concretely, this library includes the following KEM schemes using AES128 for the generation of the public matrix "A": FrodoKEM-640-AES and eFrodoKEM-640-AES: matching the post …

FrodoKEM, at levels 3 and 5, is recommended by the German Federal Office for Information Security (BSI) as cryptographically suitable for long-term confidentiality protection.

Sep 30, 2020 · Size (in bytes) of inputs and outputs of FrodoKEM. This submission defines a family of key-encapsulation mechanisms (KEMs), collectively called FrodoKEM.

Mar 17, 2025 · As a key encapsulation mechanism, FrodoKEM is a three-tuple of algorithms (KeyGen, Encapsulate, Decapsulate): ¶. These algorithms are assembled as a two-pass …

Jun 4, 2021 · In particular, in work published in 2011, Lindner and Peikert [84] gave a more e cient LWE-based public-key encryption scheme that uses a square public matrix A 2 Zn n …

FrodoCCS [BCDMNNRS’16] instantiated and implemented [LP’11], using pseudorandom public matrix A to reduce public key size. Lineage of [Ajtai’96,AjtaiDwork’97]: worst-case/average …