Skip to content

CCAKEM IND-CCA2 vs CPAPEK in the KEM schemes. #1255

Answered by dstebila
yerracs86 asked this question in Q&A
Discussion options

You must be logged in to vote

Most submissions did not consider the CPA PKE version to be an official submission, only an intermediate building block for the CCA KEM version. Note that our SIKE implementation does include CPA version, SIDH. Generally it is risky to use the CPA versions except in very controlled scenarios where one can be certain there will be no reuse; it is safer to make only the CCA version available.

Replies: 1 comment

Comment options

You must be logged in to vote
0 replies
Answer selected by dstebila
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Category
Q&A
Labels
None yet
2 participants