NIST PQE STANARDS

By American Binary


Thumb

American Binary has been using and supporting Falcon and Crystals-Kyber. For the last two years, we have been leading in this space. Today NIST has published that we are using the correct and approved signatures.

After careful consideration during the 3rd Round of the NIST PQC Standardization Process, NIST has identified four candidate algorithms for standardization. The primary algorithms NIST recommends be implemented for most use cases are CRYSTALS-KYBER (key-establishment) and CRYSTALS-Dilithium (digital signatures). In addition, the signature schemes Falcon and SPHINCS+ will also be standardized.

Algorithms to be Standardized:

  • Public-Key Encryption/KEMs
  • CRYSTALS-KYBER
  • Digital Signatures
  • CRYSTALS-Dilithium
  • Falcon
  • SPHINCS+

CRYSTALS-KYBER (key-establishment) and CRYSTALS-Dilithium (digital signatures) were both selected for their strong security and excellent performance, and NIST expects them to work well in most applications. Falcon will also be standardized by NIST since there may be use cases for which CRYSTALS-Dilithium signatures are too large. Additionally, SPHINCS+ will be standardized to avoid only relying on the security of lattices for signatures. NIST asks for public feedback on a version of SPHINCS+ with a lower number of maximum signatures.

Notes on PQC for TLS:

Notes on PQC for DNSSEC: