CRYSTALS-KYBER

KEM lattice-based ML-KEM Kyber NIST.

Définition

Kyber parameter sets : Kyber512 (Security Level 1 ~AES-128), Kyber768 (Level 3 ~AES-192, recommande most uses), Kyber1024 (Level 5 ~AES-256). Tailles : Kyber768 public key 1184 bytes, ciphertext 1088 bytes, shared secret 32 bytes. Performance : ~10000x faster than RSA-3072 KeyGen, ~100x faster KEM. Open-source implementations : pqcrystals/kyber (reference C), liboqs (Open Quantum Safe project), Cloudflare CIRCL Go, BoringSSL, OpenSSL 3.5 (planned).

Origine

CRYSTALS-Kyber submitted to NIST PQC Round 1 novembre 2017 ; survived Round 2, 3 ; selected NIST PQC standard juillet 2022 ; standardise FIPS 203 13 aout 2024.

Exemple en contexte

Signal Protocol (Whisper Systems) integre Kyber768 hybride avec X25519 dans son extension PQXDH (Post-Quantum Extended Diffie-Hellman) deploye depuis fevrier 2024 pour 1 milliard utilisateurs Signal+WhatsApp.

Termes liés

• CRYSTALS Dilithium — signature partenaire.