sntrup761.h File Reference

Streamlined NTRU Prime sntrup761 KEM - responder (encapsulation) only. More...

#include "protocore_config.h"

Go to the source code of this file.

Detailed Description

Streamlined NTRU Prime sntrup761 KEM - responder (encapsulation) only.

The second post-quantum KEM OpenSSH ships (alongside ML-KEM-768), used by the sntru.nosp@m.p761.nosp@m.x2551.nosp@m.9-sh.nosp@m.a512@.nosp@m.open.nosp@m.ssh.c.nosp@m.om hybrid key exchange. Both KEM roles are provided:

• Encapsulation (SSH server / responder): given the peer's public key, produce a ciphertext and a shared secret.
• KeyGen + Decapsulation (the reverse-SSH client / initiator): generate a keypair, send the public key, then recover the shared secret from the server's ciphertext.

Streamlined NTRU Prime, parameter set sntrup761 (p=761, q=4591, w=286): a lattice KEM over the ring Z_q[x]/(x^761 - x - 1). The algorithm and the byte encodings match OpenSSH's embedded sntrup761 reference (public domain; D. J. Bernstein et al.) so the ciphertext this produces decapsulates byte-for-byte on a real OpenSSH peer. Zero heap; SHA-512 via the SSH sha512 seam, randomness via ssh_rng_fill.

Definition in file sntrup761.h.