11:58
In re this question: crypto.stackexchange.com/questions/114381/… , do people think that Algorithms 16 and 19 in FIPS203 should also provide the information in $d$ so that the keys can be audited for legitimate construction? The standard stipulates "The seed (𝑑,𝑧) generated in steps 1 and 2 of ML-KEM.KeyGen can be stored for later expansion", but the Algorithms make no allowance.
4 hours later…
16:01
2

Given that public key security is very important in the Kyber KEM algorithm and if this is not observed, various attacks can be applied to the discovery of the Kyber key. The question is how to identify weak Kyber public keys (structurally, or In terms of implementation, or library and so on) and...
« first day (4970 days earlier) ← previous day last day (2 days later) »
Transcript for
Feb18
Feb19
Feb21
The Side Channel
Mostly randomly generated noise. – crypto.stackexchange.com