SMAUG-T: Post-Quantum Key Encapsulation Mechanism
SMAUG-T: Post-Quantum Key Encapsulation Mechanism
SMAUG-T is an efficient post-quantum key encapsulation mechanism (KEM) whose security is based on the hardness of the lattice problems, Module-Learning-with-Errors (MLWE) and Module Learning-with-Roundings (MLWR). SMAUG-T enjoys a conservative secret key security relying on the MLWE problem and an efficient ephemeral key generation relying its security on the MLWR problem. SMAUG-T follows the recent approaches in designing the post-quantum-secure KEMs in the Quantum Random Oracle Model (QROM) while maintaining efficiency. An additional parameter set, TiMER (Tiny sMaug using Error Reconciliation), is a newly proposed targetting security level 1, which exploits D2 encoding for lower decryption failure probability (DFP).
Design rationale
SMAUG-T achieves its quantum security based on the Fujisaki-Okamoto (FO) transform applied to the IND-CPA secure PKE SMAUG-T.PKE. SMAUG-T follows an efficient FO transform with decryption failures, recently introduced [HHM22].
SMAUG-T conservatively bases its secret key security on the MLWE problem for its long-term security, while the ephemeral key is delivered via a more efficient MLWR-based method. This can be viewed as an adaptation of (R)Lizard to modules.
By using the module structure (as in Kyber and Saber) and sparse secret (as in homomorphic encryptions), SMAUG-T simultaneously achieves faster running time with a smaller ciphertext size.
Resources
The most up-to-date resource files can be found here, the public GitHub repository for SMAUG-T.
Papers
SMAUG (-T), Revisited: Timing-Secure, More Compact, Less Failure
Jung Hee Cheon, Hyeongmin Choe, Jungjoo Seo, and Hyoeun Seong, in IEEE Access, vol. 12, 2024. [doi]
SMAUG: Pushing Lattice-based Key Encapsulation Mechanisms to the Limits
Jung Hee Cheon, Hyeongmin Choe, Dongyeon Hong, MinJune Yi, in Selected Areas in Cryptography – SAC 2023, 2023. [doi] [eprint]
TiGER: Tiny bandwidth key encapsulation mechanism for easy miGration based on RLWE(R)
Seunghwan Park, Chi-Gon Jung, Aesun Park, Joongeun Choi, Honggoo Kang, in Cryptology ePrint Archive, 2022. [eprint]
Team SMAUG-T
Team SMAUG-T consists of the members of Team SMAUG and Team TiGER from KpqC Round 1, and some new members.
Jung Hee Cheon (Seoul National University (SNU) & CryptoLab Inc.)
Hyeongmin Choe (SNU)
Joongeun Choi (Defense Counter-intelligence Command (DCC))
Dongyeon Hong (Samsung Electronics)
Jeongdae Hong (Ministry of National Defense)
Chi-Gon Jung (DCC)
Honggoo Kang (DCC)
Janghyun Lee (DCC) **
Seonghyuck Lim (DCC) **
Aesun Park (DCC)
Seunghwan Park (DCC)
Jungjoo Seo (CryptoLab Inc.) ***
Hyoeun Seong (CryptoLab Inc.)
Junbum Shin (CryptoLab Inc.)
*In KpqC round 1, MineJune Yi (SNU, CryptoLab Inc.) was also in Team SMAUG.
**From KpqC round 2, Janghyun Lee and Seonghyuck Lim joined Team SMAUG-T.
***During KpqC round 2, Jungjoo Seo also joined Team SMAUG-T.