Tag
ml-kem
- Jan 23, 2025 Hybrid Key Exchange with X25519 and ML-KEM-768 What happens to a TLS or SSH handshake when a lattice KEM is concatenated with an elliptic curve exchange, and which composition rules the transcript must obey. cryptography
- Mar 26, 2024 All-or-Nothing Transforms and the Extra Tightness in ML-KEM Why the Fujisaki-Okamoto transform alone leaves a small gap in decapsulation security, and how an all-or-nothing transform closes it for lattice schemes. cryptography
- May 30, 2022 Inside ML-KEM: Noise Growth from Keygen to Decapsulation A concrete walk through KeyGen, Encaps and Decaps in FIPS 203, tracking the error term as powers of two so the compression parameters and failure bounds make sense. cryptography