A rust implementation of Streamlined NTRU Prime 4591761
NTRU Prime is a lattice based cryptosystem aiming to improve the security of lattice schemes at minimal cost. It is thought to be resistant to quantum computing advances, in particular Shor's algorithm and is an entrant in NIST's Post Quantum Cryptography competition[1].
Please read the warnings before use.
The algorithm was authored by Daniel J. Bernstein, Chitchanok Chuengsatiansup, Tanja Lange & Christine van Vredendaal.
Contributions welcome. SIMD or WASM development especially.
| Type | Bytes | |---------------|----------:| | Public Key | 1218 | | Private Key | 1600 | | Ciphertext | 1047 | | Shared Key | 32 |
Add as a dependency to cargo.toml
rust
[dependencies]
streamlined_ntru_prime = "0.1.0"
```rust use streamlinedntruprime::*;
// Key Generation let (publickey, privatekey) = generate_key();
// Encapsulation let (ciphertext, sharedsecret) = encapsulate(public_key);
// Decapsulation let sharedsecret = decapsulate(ciphertext, private_key).expect("Decapsulation failure") ```
To reduce compile time and size, testing is an optional feature. ```shell
cargo test --features testing
cargo bench --features testing ```
Full output of generated and expected values can be shown optionally.
shell
cargo test --features testing -- --nocapture
A json file of 100 KATs was generated from the sage implementation found here.
Tested on an Intel i7-7500U @ 2.7GHz
shell
running 3 tests
test decapsulate_bench ... bench: 8,785,535 ns/iter (+/- 27,291)
test encapsulate_bench ... bench: 3,215,100 ns/iter (+/- 30,317)
test key_gen_bench ... bench: 16,914,970 ns/iter (+/- 278,949)
This implementation has not undergone any security auditing and while care has been taken no guarantees can be made for either correctness or the constant time running of the underlying functions at compile time. Please use at your own risk.
Streamlined NTRU Prime was first published in 2016, the C implementation upon which this is based was published in August 2017. The algorithm still requires careful security review. Please see here for further warnings from the authors regarding NTRU Prime and lattice based encryption schemes.