Paper 2021/741

NTRU leads to Anonymous, Robust Public-Key Encryption

Keita Xagawa

Abstract

This short note shows that NTRU in NIST PQC Round~3 finalist is anonymous in the QROM if the underlying NTRU PKE is strongly disjoint-simulatable and a hybrid PKE scheme constructed from NTRU as KEM and appropriate DEM is anonymous and robust. This solves the open problem to investigate anonymity and robustness of NTRU posed by Grubbs, Maram, and Paterson (Cryptography ePrint Archive 2021/708).

Note: This note is superseded by https://eprint.iacr.org/2021/1323.