International Association for Cryptologic Research

International Association
for Cryptologic Research


Paper: High-Speed Key Encapsulation from NTRU

Andreas Hülsing
Joost Rijneveld
John M. Schanck
Peter Schwabe
DOI: 10.1007/978-3-319-66787-4_12
Search ePrint
Search Google
Conference: CHES 2017
Abstract: This paper presents software demonstrating that the 20-year-old NTRU cryptosystem is competitive with more recent lattice-based cryptosystems in terms of speed, key size, and ciphertext size. We present a slightly simplified version of textbook NTRU, select parameters for this encryption scheme that target the 128-bit post-quantum security level, construct a KEM that is CCA2-secure in the quantum random oracle model, and present highly optimized software targeting Intel CPUs with the AVX2 vector instruction set. This software takes only 307 914 cycles for the generation of a keypair, 48 646 for encapsulation, and 67 338 for decapsulation. It is, to the best of our knowledge, the first NTRU software with full protection against timing attacks.
  title={High-Speed Key Encapsulation from NTRU},
  booktitle={Cryptographic Hardware and Embedded Systems – CHES 2017},
  series={Lecture Notes in Computer Science},
  author={Andreas Hülsing and Joost Rijneveld and John M. Schanck and Peter Schwabe},