Kleptographic Attacks against Implicit Rejection

ePrint Report: Kleptographic Attacks against Implicit Rejection

Antoine Joux, Julian Loss, Benedikt Wagner

Given its integral role in modern encryption systems such as CRYSTALS-Kyber, the Fujisaki-Okamoto (FO) transform will soon be at the center of our secure communications infrastructure. An enduring debate surrounding the FO transform is whether to use explicit or implicit rejection when decapsulation fails. Presently, implicit rejection, as implemented in CRYSTALS-Kyber, is supported by a strong set of arguments. Therefore, understanding its security implications in different attacker …

attacks center communications crystals-kyber encryption eprint report explicit infrastructure loss report role secure communications systems transform wagner