Total: 1
In this work, we propose a joint design of encoding and encryption processes for KEMs like Kyber, without assuming the independence of the decoding noise entries. Our design features two techniques: ciphertext packing and lattice packing. First, we extend the Peikert-Vaikuntanathan-Waters (PVW) method to the Kyber: ℓ plaintexts are packed into a single ciphertext. This scheme is referred to as Pℓ-Kyber. We prove that the Pℓ-Kyber is IND-CCA secure under the M-LWE hardness assumption. We show that the decryption decoding noise entries across the ℓ plaintexts (also known as layers) are mutually independent. Second, we propose a cross-layer lattice encoding scheme for the Pℓ-Kyber, where every ℓ cross-layer information symbols are encoded to a lattice point. This way we obtain a \emph{coded} Pℓ-Kyber, where the decoding noise entries for each lattice point are mutually independent. Therefore, the decryption failure rate (DFR) analysis does not require the assumption of independence among the decryption decoding noise entries. Both DFR and communication cost (CER) are greatly decreased thanks to ciphertext packing and lattice packing. Finally, we demonstrate that with ℓ=24 and Leech lattice encoder, the proposed coded Pℓ-KYBER1024 achieves DFR <2−281 and CER =4.6, i.e., a decrease of CER by 90% compared to KYBER1024.