Polar-KEM

Lattices · Polar-LIP · niccs.org.cn(opens in a new tab)

Programmes
NGCC R1
Status
NGCC round 1
Security flags
Broken (all sets) · Implementation findings (all sets)

Third-party findings: full report on ngcc.dev(opens in a new tab).

Parameter sets

Parameter sets of Polar-KEM
Parameter setLevelpk (B)ct (B)pk+ct (B)KeygenEncapsDecaps
PolarKEM-128 BrokenImplementation findings128-bit1,0247681,79246.8 µs141.6 µs173.1 µs
PolarKEM-256 BrokenImplementation findings256-bit2,0481,2803,32890.7 µs176.2 µs239.9 µs
PolarKEM-512 BrokenImplementation findings512-bit4,0962,3046,400178.1 µs344.9 µs473.2 µs

Wall-clock times vary between runs and machines (CPU frequency scaling, other tenants on cloud VMs); cycle counts are the steadier basis for comparison.

Security flags

  • Broken (all parameter sets): The specified basis exposes the secret transformation, so the key can be recovered from the public key in polynomial time (Xiao et al.).
  • Implementation findings (all parameter sets): The submitted code includes functions that derive the shared secret from public data alone (Saarinen). Full findings report(opens in a new tab)

History

No events recorded for this scheme yet.

Full timeline →