Home

Jump to bottom

Gaëtan Cassiers edited this page Oct 16, 2024 · 6 revisions

What's this mess with all the implementations ?

Kyber:

K1: Straightforward adaptation of Coron et al for Cortex-M4. Available here
K2/K3: Our new implementations. K2 is C-only masked gadgets (hence broken by lower-order leakage), K3 has ASM masked gadgets to prevent transitions. In this repository, integrated in the PQM4 framework.

Saber:

S1: Straightforward adaptation of Coron et al for Cortex-M4. Available here.
S2/S3: Our new implementations. S2 is C-only masked gadgets (hence broken by lower-order leakage), S3 has ASM masked gadgets to prevent transitions. In this repository, integrated in the PQM4 framework.