C2SP / C2SP/CCTV

Domain Separation for ML-KEM Intermediate Values

Open
#29 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
107
Forks
16
PR merge metrics
No merged PRs in 30d

Description

In ML-KEM-*.txt inside intermediate, it seems like ρ and σ values are generated from `d` by `G(d)` (probably!), but in the current [FIPS 203 ](https://csrc.nist.gov/pubs/fips/203/final) Algorithm 13 specifies that it should be generated by `G(d||k)`

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with the ML-KEM-*.txt files in intermediate and compare their ρ and σ generation against FIPS 203 Algorithm 13. Verify whether the vectors use G(d) or G(d||k), then update the affected intermediate values and confirm the files reflect the specification.

Written by the indexing model from the issue text.

Assessment

Domain
cryptography
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
65/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.