Verification of the (1–δ)-Correctness Proof of CRYSTALS-KYBER with Number Theoretic Transform

ePrint Report: Verification of the (1–δ)-Correctness Proof of CRYSTALS-KYBER with Number Theoretic Transform

Katharina Kreuzer

This paper describes a formalization of the specification and the algorithm of the cryptographic scheme CRYSTALS-KYBER as well as the verification of its (1 − δ)-correctness proof. During the formalization, a problem in the correctness proof was uncovered. In order to amend this
issue, a necessary property on the modulus parameter of the CRYSTALS-KYBER algorithm was introduced. This property is already implicitly fulfilled by the …

algorithm correctness crystals-kyber eprint report issue order parameter problem report verification