{"id":"W2866028610","doi":"10.1109/eurosp.2018.00032","title":"CRYSTALS - Kyber: A CCA-Secure Module-Lattice-Based KEM","year":2018,"lang":"en","type":"preprint","venue":"","topic":"Cryptography and Data Security","field":"Computer Science","cited_by":1000,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Waterloo","funders":"Natural Sciences and Engineering Research Council of Canada; Horizon 2020 Framework Programme; Nederlandse Organisatie voor Wetenschappelijk Onderzoek; Government of Canada; Schweizerischer Nationalfonds zur Förderung der Wissenschaftlichen Forschung; Bpifrance","keywords":"Key encapsulation; Computer science; Random oracle; NIST; Key exchange; Learning with errors; Cryptographic primitive; Cryptography; Ciphertext; Encryption; Theoretical computer science; Public-key cryptography; Cryptographic protocol; Computer security","routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow"],"consensus_categories":[],"category_scores_codex":[0.0006799307,0.0005672887,0.0005519422,0.0003742715,0.000209416,0.0009266721,0.003831273,0.0005917681,0.0005161539],"category_scores_gemma":[0.00007064579,0.0005130511,0.0004761967,0.0005591215,0.0002116536,0.0004796757,0.003673566,0.0008202309,0.0002691231],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00005990169,"about_ca_system_score_gemma":0.0003912818,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.000248377,"about_ca_topic_score_gemma":0.0001176427,"domain_scores_codex":[0.9962755,0.0001752612,0.0005486843,0.001655144,0.0007040405,0.0006413878],"domain_scores_gemma":[0.9951068,0.0001722315,0.0003026105,0.003811208,0.0002871259,0.0003200435],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"theoretical_or_conceptual","study_design_scores_codex":[0.00007040959,0.001157257,0.001121387,0.0009626672,0.0003471853,0.0001465295,0.001745469,0.0006668756,0.0001749981,0.8214496,0.1628242,0.009333318],"study_design_scores_gemma":[0.001446828,0.0002975363,0.002071235,0.0004935599,0.0001058344,0.0000234813,0.0000311204,0.2852329,0.003054894,0.5323022,0.1724874,0.002452974],"study_design_candidate":"theoretical_or_conceptual","study_design_consensus":"theoretical_or_conceptual","genre_codex":"methods","genre_gemma":"methods","genre_scores_codex":[0.009986727,0.0004072627,0.9694169,0.001376355,0.001739273,0.0005924541,0.000277761,0.001007848,0.01519544],"genre_scores_gemma":[0.4503685,0.00007015633,0.5456425,0.002465205,0.0008063181,0.0001267474,0.0003491393,0.00004978168,0.000121709],"genre_candidate":"methods","genre_consensus":"methods","teacher_disagreement_score":0.4403817,"threshold_uncertainty_score":0.9997321,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.02456623467212205,"score_gpt":0.2615881485768737,"score_spread":0.2370219139047516,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}