[tor-dev] [proposal] Post-Quantum Secure Hybrid Handshake Based on NewHope

[bancfc at openmailbox.org]

Some great developments in lattice-based crypto. DJB just released a 
paper on NTRU Prime:


1. Competitively fast compared to the leading lattice-based 
cryptosystems including New Hope.

2. Safer implementation of NTRU that avoids vulnerable ring structures 
and runs in constant-time.

3. The only implemntation that mitigates decryption failures completely, 
killing information leaks to adversaries.

4. Includes some handy advice for "transitional cryptography" - mixing 
and matching classical signature schemes with PQ public-keys.


https://ntruprime.cr.yp.to/ntruprime-20160511.pdf