Introduction
HARE is a code-based key encapsulation mechanism with an optimized HQC-like construction. It uses distance-informed erasure decoding to reduce public-key and ciphertext sizes while retaining the original HQC security assumptions and decoding failure requirements.
Specification & software
Parameters
Security levels are given in bits. The sizes of the encapsulation key (ekKEM), decapsulation key (dkKEM), ciphertext (cKEM), and shared key (K) are given in bytes. Bandwidth is the combined size of the encapsulation key and ciphertext.
| Instance | Classical Security | Quantum Security | |ekKEM| | |dkKEM| | |cKEM| | |K| | bandwidth |
|---|---|---|---|---|---|---|---|
| HARE-1 | 128 | 64 | 2025 | 2073 | 3608 | 16 | 5633 |
| HARE-2 | 128 | 80 | 2629 | 2677 | 4688 | 16 | 7317 |
| HARE-3 | 192 | 96 | 4106 | 4178 | 7386 | 24 | 11492 |
| HARE-5 | 256 | 128 | 6580 | 6676 | 11790 | 32 | 18370 |
| HARE-7 | 384 | 192 | 13157 | 13301 | 23693 | 48 | 36850 |
| HARE-9 | 512 | 256 | 21812 | 22004 | 39294 | 64 | 61106 |