frodoKem

A pure rust implementation of FrodoKEM Learning with Errors Key Encapsulation.

It's submission was included in NIST's PQ Round 3 competition.

⚠️ Security Warning

The implementation contained in this crate has never been independently audited!

USE AT YOUR OWN RISK!

Minimum Supported Rust Version

This crate requires Rust 1.81 at a minimum.

We may change the MSRV in the future, but it will be accompanied by a minor version bump.

Details

This code implements

• FrodoKEM-640 with AES and SHAKE.
• FrodoKEM-976 with AES and SHAKE.
• FrodoKEM-1344 with AES and SHAKE.

Future work

• Experimental FrodoKEM ZKP of Well-Encryptedness.
• Speed up AES implementation.

License

Licensed under

• Apache License, Version 2.0
• MIT license

at your option.

Contribution

Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in the work by you, as defined in the Apache-2.0 license, shall be dual licensed as above, without any additional terms or conditions.