Domain Separation for ML-KEM Intermediate Values
Open
- Dominant language
- Go
- Stars
- 107
- Forks
- 16
- PR merge metrics
- No merged PRs in 30d
Description
In ML-KEM-*.txt inside intermediate, it seems like ρ and σ values are generated from `d` by `G(d)` (probably!), but in the current [FIPS 203 ](https://csrc.nist.gov/pubs/fips/203/final) Algorithm 13 specifies that it should be generated by `G(d||k)`
Contributor guide
No contributing guide indexed for this repository
Research direction
Start with the ML-KEM-*.txt files in intermediate and compare their ρ and σ generation against FIPS 203 Algorithm 13. Verify whether the vectors use G(d) or G(d||k), then update the affected intermediate values and confirm the files reflect the specification.
Written by the indexing model from the issue text.
Assessment
- Domain
- cryptography
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Active
- Clarity
- Mostly clear
- Newbie friendliness
- 65/100