Post-Quantum Encryption / Key Encapsulation Algorithms (KEMs)
NIST Selected Standards (2022-2024):
- CRYSTALS-Kyber
- Type: Lattice-based (Module-LWE)
- Use: Key encapsulation mechanism (KEM)
- Status: Selected by NIST for standardization
- Classic McEliece
- Type: Code-based
- Use: KEM
- Status: Considered by NIST for inclusion due to long-term security confidence
Additional Candidates (NIST Round 4 ongoing):
- BIKE (Bit Flipping Key Encapsulation) – Code-based
- NTRU – Lattice-based
- SIKE – Superseded due to security vulnerability in 2022
Post-Quantum Digital Signature Algorithms
NIST Selected Standards (2022):
- CRYSTALS-Dilithium
- Type: Lattice-based
- Use: Digital signatures
- Status: NIST standard (primary recommendation)
- FALCON
- Type: Lattice-based (NTRU)
- Use: Digital signatures
- Status: NIST standard for constrained environments
- SPHINCS+
- Type: Hash-based
- Use: Stateless signature scheme
- Status: NIST standard (fallback alternative)
Quantum-Resistant Hash Functions
- SHA-3 (Keccak) – NIST standard, still quantum-resistant with increased output size
- BLAKE3 – Fast and secure, though not formally standardized for post-quantum use yet
- SPHINCS+ uses hash-based constructions, making it inherently post-quantum
Security is always a cat and mouse game. 矛盾
