API for OW-CPA only KEMs

92 views
Skip to first unread message

Demi Marie Obenour

unread,
Jul 9, 2026, 12:18:49 PM (4 days ago) Jul 9
to pqc-...@list.nist.gov
IND-CPA only KEMs have advantages when UDP must be used as a transport,
as they are more compact and avoid fragmentation. The main concern
is that they are very easy to misuse.

Can be solved with good APIs that prevent reusing the secret key?
It's possible to have the secret key be a pointer to an opaque struct
that gets invalidated after use.
--
Sincerely,
Demi Marie Obenour (she/her/hers)

OpenPGP_signature.asc
Reply all
Reply to author
Forward
0 new messages