NewHope
NewHope is a key-exchange protocol based on the Ring-Learning-with-Errors (Ring-LWE) problem. It was submitted to the NIST post-quantum crypto project. NewHope made it into Round 2 of the standardization process but was not included in Round 3. A summary of NIST's view on the 26 second-round candidates and a rationale for the selection can be found in NIST Internal Report NISTIR 8309. The NewHope submission proposes four different instantiations:
- NewHope512-CPA-KEM and NewHope1024-CPA-KEM, which are IND-CPA-secure key encapsulation mechanisms which target level 1 and level 5, respectively, in the NIST call for proposals (matching or exceeding the brute-force security of AES-128 and AES-256, respectively)
- NewHope512-CCA-KEM and NewHope1024-CCA-KEM, which are IND-CCA-secure key encapsulation mechanisms which target level 1 and level 5, respectively, in the NIST call for proposals (matching or exceeding the brute-force security of AES-128 and AES-256, respectively)
News
- 2020-07-22: NewHope was not selected by NIST for inclusion into Round 3 of the standardization process. We congratulate all teams that made it into round 3. Well done!
- 2020-04-10: Version 1.1 of the NewHope specification is online. We added explicit domain separators as response to Eprint 2020/241. The changes are small but break compatibility with previous versions.
- 2019-07-10: Version 1.03 of the NewHope specification is online (fixes typos identified by Bernstein in Eprint 2019/691)
- 2019-04-10: Version 1.02 of the NewHope specification was posted by NIST as part of Round 2 submissions
- 2019-01-30: NewHope was selected as 2nd round candidate by NIST
- 2018-12-02: Version 1.01 of the NewHope specification (with minor fixes) is online
- 2017-12-10: NewHope website is online
- 2017-11-30: NewHope proposal submitted to the NIST PQC project
NewHope Team
- Erdem Alkim (TR)
- Roberto Avanzi, ARM (UK)
- Joppe Bos, NXP (BE)
- Léo Ducas, CWI Amsterdam (NL)
- Antonio de la Piedra, Compumatica secure networks B.V. (NL)
- Thomas Pöppelmann, Infineon Technologies (DE)
- Peter Schwabe, Radboud University (NL)
- Douglas Stebila, McMaster University (CA)
Additional Round Two Contributors
- Martin R. Albrecht
- Emmanuela Orsini
- Valery Osheter
- Kenneth G. Paterson
- Guy Peer
- Nigel P. Smart