Published January 16, 2019 | Version v1
Conference paper Open

NTTRU: Truly Fast NTRU Using NTT

Description

We present NTTRU -- an IND-CCA2 secure NTRU-based key encapsulation scheme that uses the number theoretic transform (NTT) over the cyclotomic ring Z7681[X]/(X768−X384+1)Z7681[X]/(X768−X384+1) and produces public keys and ciphertexts of approximately 1.251.25 KB at the 128128-bit security level. The number of cycles on a Skylake CPU of our constant-time AVX2 implementation of the scheme for key generation, encapsulation and decapsulation is approximately 6.46.4K, 6.16.1K, and 7.97.9K, which is more than 30X, 5X, and 8X faster than these respective procedures in the NTRU schemes that were submitted to the NIST post-quantum standardization process. These running times are also, by a large margin, smaller than those for all the other schemes in the NIST process. We also give a simple transformation that allows one to provably deal with small decryption errors in OW-CPA encryption schemes (such as NTRU) when using them to construct an IND-CCA2 key encapsulation.

Files

14-NTTRU-Truly-Fast-NTRU-Using-NTT.pdf

Files (654.2 kB)

Name Size Download all
md5:188bdb5dc2a4f47942f3cb633648da49
654.2 kB Preview Download

Additional details

Funding

FutureTPM – Future Proofing the Connected World: A Quantum-Resistant Trusted Platform Module 779391
European Commission