[PATCH 09/10] kyber: use strong random for encapsulation coins

[Werner Koch]

On Sun,  2 Aug 2026 12:55, Jussi Kivilinna said:
> 'randombytes' used GCRY_VERY_STRONG_RANDOM for both key generation and
> encapsulation. Encapsulation coins are per message ephemeral value, same
> as ECDH ephemeral secret in 'ecc-ecdh.c' and as coins for sntrup761 and

That is a good idea.

BTW, we also need to do some internal changes to the Kyber
implementation so that we can get the seed value back using the
gcry_pk_genkey inteface.  Although not yet NSA^WNIST approved, using the
seed as private key is what IETF and other specifications prefer.


Salam-Shalom,

   Werner

-- 
The pioneers of a warless world are the youth that
refuse military service.             - A. Einstein
-------------- next part --------------
A non-text attachment was scrubbed...
Name: openpgp-digital-signature.asc
Type: application/pgp-signature
Size: 284 bytes
Desc: not available
URL: <https://lists.gnupg.org/pipermail/gcrypt-devel/attachments/20260803/95bcc307/attachment-0003.sig>