FO's KEM-style implicit rejection is uninstantiable in general; the paper salvages the hybrid variant with a new hash property.
trending11
01 02 Paper: NFC OOB BLE pairing for implants, doing PQ key encapsulation over NFC so the shared secret never has to ride the channel.03 How much can RISC-V co-design actually improve HQC on FPGA, and which Pareto points survive?04 Cloudflare Workers adds opt-in Web Crypto for ML-KEM and ML-DSA behind a flag, plus JWK and HPKE hooks.05 Decryption Failures in NGCC Lattice KEMs: Correlated Blocks, Omitted Compression Noise, and Failure Boosting under a Query Cap eprint.iacr.orgePrint on revised NGCC lattice-KEM failure estimates and capped-query boosting, because the tail was doing the work.06 Natural Barriers to Quantum Extraction: On the Post-Quantum (In)security of (O)EKE and Masny-Rindal OT arxiv.orgPaper on PQ insecurity of EKE/OEKE and Masny-Rindal OT under QPT, with a tight one-way-to-hiding lemma. Simulators still lose.07 How did NIST turn PQC papers into FIPS, and why did lattices win the bake-off?08 MLWR KEM whose keys and ciphertexts are meant to look uniform as bytes, with a verified Rust impl for the trouble.09 Threshold Key Encapsulation Mechanisms via MPC: ML-KEM Compatibility and Optimization eprint.iacr.orgMPC threshold ML-KEM, one scheme keeps NIST formats intact, the other cuts rounds and compatibility, because tradeoffs still exist.10 Dance with Noise: Safely Trade Minor Decryption Failures for More Compact KEMs with Applications to IKEv2 eprint.iacr.orgLets lattice KEMs fail a little on purpose, shrinking IKEv2 handshakes enough to dodge UDP fragmentation.11 It starts with bugs and ends with faster PQ crypto on Cortex-M4, plus timing-leak checks and wireless energy math.