Score:3

Is Ntru-Encrypt still secure in 2022

ke flag

I'm going to use NTRU as post-quantum public-key encryption algo in my project.
I've googled attacks on NTRU and found a lot of them
but since I'm new to NTRU and don't understand the math used, and could not conclude whether NTRU is still secure, if yes which parameter sets are secure?

For 256bit security, I found EES743EP1 and NIST NTRU-HRSS and NTRU-HPS Wikipedia article says the latter one is secure against MOST attacks and says nothing about others.

My current library supports EES1087EP2 ,EES1171EP1,EES1499EP1 ,EES743EP1 are they secure? or I should switch to NTRU-HRSS or I'm better not to use NTRU?
(i don't care about speed and prefer security over performance )

Thanks in advance

kelalaka avatar
in flag
Wait for the finalization of the NIST PQC?
Maarten Bodewes avatar
in flag
Normally I would say that if it is a final candidate for the NIST PQC that it would be considered secure, however with the current state I might get hammered into submission by Bernstein, as he certainly expressed doubts about the security of the CRYSTALS submissions (Kyber and Dilithium)
morthy avatar
ke flag
@MaartenBodewes my question only concerns attacks published/known till now,as far as I know NTRU is in the market for decades so current research doe it should be more reliable than new algo proposed
morthy avatar
ke flag
@kelalaka ok thanks, do you know if EES743EP1 is secure from attacks published till now? (as said in question Wikipedia only talks about NIST NTRU-HRSS)
forest avatar
vn flag
How do you define "secure from attacks"? Bringing the security below the minimum security level decided by NIST? Bringing the security low enough that attacks are practical? An improvement in any attack at all? None of the supported algorithms you mentioned are _fatally_ broken, at least.
morthy avatar
ke flag
@forest sorry i should have told clearly , I mean security blow minimum level (~112/128bit)
forest avatar
vn flag
@morthy I'm not writing an answer right now because I'm not completely sure, but I'm _pretty_ sure that no serious attacks exist against the listed parameters. Relevant: https://crypto.stackexchange.com/q/88567/54184
mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.