FrodoKEM, although not selected during NIST PQC standardization process, is still actively promoted and used by several institutions, particularly in Europe (e.g., ANSSI, BSI, ETSI).
CSRC Presentations | CSRC
Sep 25, 2025 · Masking FrodoKEM: Presented by Elie Eid, IDEMIA.
FrodoKEM, at levels 3 and 5, is recommended by the German Federal Office for Information Security (BSI) as cryptographically suitable for long-term confidentiality protection.
The cryptographic scheme, named FrodoKEM, is one of many candidates for NIST's call for post-quantum standardisation. This research proposes optimised designs for FrodoKEM, concentrating on …
ISO approved FrodoKEM for progression toward ISO/IEC 18033-2 standard. Included in European approved algorithms (ACM v2.0 / EUCC). Key Encapsulation Mechanism based on the plain LWE …
It looks like the FrodoKEM team also fixed the timing oracle [GJN20] badly and caused a more serious security problem while trying to do that. This seems to affect FrodoKEM-976 and FrodoKEM-1344, …
CSRC Presentations | CSRC
Jun 8, 2021 · 3rd Round update on the FrodoKEM candidate algorithm
Chris Peikert Ananth Raghunathan Douglas Stebila FrodoKEM’s security derives from plain Learning With Errors on algebraically unstructured lattices, parameterized cautiously to avoid known risk …
Summary: The "FrodoKEM" submission claims that various theorems support the security of the submission. This claim is incorrect for at least two of the stated theorems: these two theorems do …
Post-Quantum Cryptography | CSRC
Jan 3, 2017 · Official comments on the Third Round Candidate Algorithms should be submitted using the 'Submit Comment' link for the appropriate algorithm. Comments from the pqc-forum Google …