pqc-forum

1–30 of 682

0 selected

Nov 23

Post-Quantum and networks workshop (PQNet)

Dear colleagues, We are organising the third instantiation of the Post-Quantum and networks workshop

unread,

Post-Quantum and networks workshop (PQNet)

Dear colleagues, We are organising the third instantiation of the Post-Quantum and networks workshop

Nov 23

Rainer Urian, Tung Chou2

Nov 22

Classic McEliece Key Generation on RAM constrained devices

Hi Rainer, We (code by Ming-Shing Chen and me, ideas with Daniel J. Bernstein and Tanja Lange)

unread,

Classic McEliece Key Generation on RAM constrained devices

Hi Rainer, We (code by Ming-Shing Chen and me, ideas with Daniel J. Bernstein and Tanja Lange)

Nov 22

D. J. Bernstein

Nov 15

Procedures for input regarding parameter sets?

One of NIST's July announcements was "As part of the drafting process, NIST will seek input

unread,

Procedures for input regarding parameter sets?

One of NIST's July announcements was "As part of the drafting process, NIST will seek input

Nov 15

Moody, Dustin (Fed)

Nov 8

The 4th NIST PQC Standardization Conference

Everyone, The 4 th NIST PQC Standardization Conference will be held virtually November 29 – December

unread,

The 4th NIST PQC Standardization Conference

Everyone, The 4 th NIST PQC Standardization Conference will be held virtually November 29 – December

Nov 8

Nov 2

[pqc-forum] KaLi: A Crystal for Post-Quantum Security using Kyber and Dilithium

Dear PQC Community, We introduce KaLi, a compact unified cryptoprocessor for performing both lattice-

unread,

[pqc-forum] KaLi: A Crystal for Post-Quantum Security using Kyber and Dilithium

Dear PQC Community, We introduce KaLi, a compact unified cryptoprocessor for performing both lattice-

Nov 2

Marcio Barbado, Jr.

Oct 31

central limit theorem convergence acceleration for DGS efficiency

Hi. This is to share some results of my MSc work, still in progress, which is about discrete Gaussian

unread,

central limit theorem convergence acceleration for DGS efficiency

Hi. This is to share some results of my MSc work, still in progress, which is about discrete Gaussian

Oct 31

Moody, Dustin (Fed), Brent Kimberley2

Oct 31

Round 4 submissions have been posted

Hi. Is the lifecycle diagram for CNSA 1.0 and/or 2.0 publicly available? To the best of my knowledge,

unread,

Round 4 submissions have been posted

Hi. Is the lifecycle diagram for CNSA 1.0 and/or 2.0 publicly available? To the best of my knowledge,

Oct 31

Philip Lafrance, … Blumenthal, Uri - 0553 - MITLL18

Oct 28

ISARA Dedicates Four Hybrid Certificate Patents to the Public

FWIW, I concur with Michael M. His points and refutations appears quite clear and correct to me. -- V

unread,

ISARA Dedicates Four Hybrid Certificate Patents to the Public

FWIW, I concur with Michael M. His points and refutations appears quite clear and correct to me. -- V

Oct 28

Christopher J Peikert, … Peralta, Rene C. (Fed)47

Oct 26

Is there enough cryptanalysis of "small rounding"?

Multiplicative group not cyclic? René. From: pqc-forum@list.nist.gov <pqc-forum@list.nist.gov>

unread,

Is there enough cryptanalysis of "small rounding"?

Multiplicative group not cyclic? René. From: pqc-forum@list.nist.gov <pqc-forum@list.nist.gov>

Oct 26

Manoj Kumar, D. J. Bernstein2

Oct 25

Re: [pqc-forum] Digest for pqc-forum@list.nist.gov - 2 updates in 1 topic

Manoj Kumar writes: > Looks like some (header) files are missing from the tar file [ ... ] > #

unread,

Re: [pqc-forum] Digest for pqc-forum@list.nist.gov - 2 updates in 1 topic

Manoj Kumar writes: > Looks like some (header) files are missing from the tar file [ ... ] > #

Oct 25

D. J. Bernstein, Wrenna Robson2

Oct 25

ROUND 4 OFFICIAL COMMENT: Classic McEliece

Thanks for this, Dan. Obviously I've just had a quick glance, and will read in detail in the

unread,

ROUND 4 OFFICIAL COMMENT: Classic McEliece

Thanks for this, Dan. Obviously I've just had a quick glance, and will read in detail in the

Oct 25

Moody, Dustin (Fed)

Oct 19

Update for Call for Additional Signatures - digital signatures accepted

All, We have updated a portion of the text in the Call for Additional Signatures regarding the signed

unread,

Update for Call for Additional Signatures - digital signatures accepted

All, We have updated a portion of the text in the Call for Additional Signatures regarding the signed

Oct 19

Tanja Lange, … Moody, Dustin (Fed)4

Oct 3

ROUND 4 OFFICIAL COMMENT: Classic McEliece

Thanks Tanja (and team), When do you think you can send us the updated specs and software? Dustin

unread,

ROUND 4 OFFICIAL COMMENT: Classic McEliece

Thanks Tanja (and team), When do you think you can send us the updated specs and software? Dustin

Oct 3

Mike Ounsworth, … Phillip Hallam-Baker26

Sep 30

Design rationale for keyed message digests in SPHINCS+, Dilithium, FALCON?

My top level point is that this particular concern is something we should address once in standards

unread,

Design rationale for keyed message digests in SPHINCS+, Dilithium, FALCON?

My top level point is that this particular concern is something we should address once in standards

Sep 30

Moody, Dustin (Fed)

Sep 29

3rd Round Report correction

Everybody, We wanted to apologize for omitting an important paper from our report. In Section 3.2.3,

unread,

3rd Round Report correction

Everybody, We wanted to apologize for omitting an important paper from our report. In Section 3.2.3,

Sep 29

Fatima ASEBRIY, … Peter Schwabe5

Sep 24

Decryption Failure Attacks,( LWE/RLWE)

Fatima ASEBRIY <fatima.asebriy@gmail.com> wrote: Dear Fatima, > In Kyber round 3

unread,

Decryption Failure Attacks,( LWE/RLWE)

Fatima ASEBRIY <fatima.asebriy@gmail.com> wrote: Dear Fatima, > In Kyber round 3

Sep 24

Sep 20

Registration for PQCrypto 2022 is open

Registration for PQCrypto 2022 (Sep 28 - 30) is now open at https://2022.pqcrypto.org/index.html#

unread,

Registration for PQCrypto 2022 is open

Registration for PQCrypto 2022 (Sep 28 - 30) is now open at https://2022.pqcrypto.org/index.html#

Sep 20

Moody, Dustin (Fed), … Blumenthal, Uri - 0553 - MITLL23

Sep 12

Call for Additional Signatures is released

Note that there are much more constrained networks than Uri's use case. Please note that I've

unread,

Call for Additional Signatures is released

Note that there are much more constrained networks than Uri's use case. Please note that I've

Sep 12

Sep 10

Numero más grande más pequeño mod 6 mod 5 , 49 , 51

[10/9 22:47] Fx FRT: Es computación post cuántica que creo es lattide por ataques a la GPS y drones

unread,

Numero más grande más pequeño mod 6 mod 5 , 49 , 51

[10/9 22:47] Fx FRT: Es computación post cuántica que creo es lattide por ataques a la GPS y drones

Sep 10

Stern, Morgan B

Sep 7

Release of CNSA 2.0

With NIST's announcement of their first PQC algorithms to be standardized, NSA has updated our

unread,

Release of CNSA 2.0

With NIST's announcement of their first PQC algorithms to be standardized, NSA has updated our

Sep 7

D. J. Bernstein

Aug 30

ROUND 3 OFFICIAL COMMENT: NTRU

The NISTPQC evaluation criteria state the following: Schemes should ideally not fail catastrophically

unread,

ROUND 3 OFFICIAL COMMENT: NTRU

The NISTPQC evaluation criteria state the following: Schemes should ideally not fail catastrophically

Aug 30

Moody, Dustin (Fed)

Aug 29

A few reminders

We wanted to remind everybody of a few dates coming up: The deadline for submissions to the 4 th NIST

unread,

A few reminders

We wanted to remind everybody of a few dates coming up: The deadline for submissions to the 4 th NIST

Aug 29

Mike Ounsworth, … D. J. Bernstein8

Aug 20

Whether to hash-then-sign with Dilithium and Falcon?

Phillip Hallam-Baker writes: > If this is a useful approach, then move it out of the signature

unread,

Whether to hash-then-sign with Dilithium and Falcon?

Phillip Hallam-Baker writes: > If this is a useful approach, then move it out of the signature

Aug 20

Robin Larrieu, … Scott Fluhrer (sfluhrer)10

Aug 20

Integration of Post-Quantum signatures

Le 20/08/2022 à 16:11, Scott Fluhrer (sfluhrer) a écrit : > No, they are not equivalent. With H(m,

unread,

Integration of Post-Quantum signatures

Le 20/08/2022 à 16:11, Scott Fluhrer (sfluhrer) a écrit : > No, they are not equivalent. With H(m,

Aug 20

Aug 19

PQCifris School & Workshop on Post-Quantum Cryptography - deadline extension

Dear Friends and Colleagues, we would like to inform you that, following several requests, the

unread,

PQCifris School & Workshop on Post-Quantum Cryptography - deadline extension

Dear Friends and Colleagues, we would like to inform you that, following several requests, the

Aug 19

Sydney Antonov, … Blumenthal, Uri - 0553 - MITLL25

Aug 12

Survey: conservative KEMs for long-term secrecy

> I think it's clearer to look at what NSA posts online (and > which was the basis for the

unread,

Survey: conservative KEMs for long-term secrecy

> I think it's clearer to look at what NSA posts online (and > which was the basis for the

Aug 12

Doge Protocol, … Jacob Alperin-Sheriff16

Aug 12

Key recovery attack on SIDH

Is this true even now that the one markedly different scheme is totally broken? HQC and RQC still

unread,

Key recovery attack on SIDH

Is this true even now that the one markedly different scheme is totally broken? HQC and RQC still

Aug 12

Moody, Dustin (Fed), … Blumenthal, Uri - 0553 - MITLL55

Aug 11

Announcement: The End of the 3rd Round - the First PQC Algorithms to be Standardized

> > I don't fully understand this part. It seems perfectly natural to me > > for an

unread,

Announcement: The End of the 3rd Round - the First PQC Algorithms to be Standardized

> > I don't fully understand this part. It seems perfectly natural to me > > for an

Aug 11

Sheehe, Charles J. (GRC-LCN0)

Aug 4

?Post-quantum encryption contender is taken out by single-core PC and 1 hour?

Hi I monitor this forum but this is not my field. Is this article correct? https://gcc02.safelinks.

unread,

?Post-quantum encryption contender is taken out by single-core PC and 1 hour?

Hi I monitor this forum but this is not my field. Is this article correct? https://gcc02.safelinks.

Aug 4

Aug 3

Concrete hardness estimates of the MQ problem

Hello everyone, We are happy to share with you the MQ-estimator (https://github.com/Crypto-TII/

unread,

Concrete hardness estimates of the MQ problem

Hello everyone, We are happy to share with you the MQ-estimator (https://github.com/Crypto-TII/

Aug 3

Search

Clear search

Close search

Google apps

Main menu