"Tight bound on NewHope failure probability" by Thomas Plantard, Arnaud Sipasseuth et al.
NewHope Key Encapsulation Mechanism (KEM) has been presented at USENIX 2016 by Alkim et al. and was one of the lattice-based candidates to the post-quantum standardization initiated by the NIST. However, despite the relative simplicity of the protocol, the bound on the decapsulation failure probability resulting from the original analysis is not tight. In this work we refine this analysis to get a tight upper-bound on this probability which happens to be much lower than what was originally evaluated. As a consequence, we propose a set of alternative parameters, increasing the security and the ...
Source: uow.edu.au