CRYSTALS-KYBER is a post-quantum key exchange protocol.
This protocol is used to securely establish symmetric keys between two parties.
This JavaScript implementation is intended for client-side web browser applications but can be used for any JavaScript based application.
Most of this code was translated from a Go implementation of Kyber which can be found here.
Original code (written in C) can be found here.
Kyber comes in 512, 768, 1024 security strengths. This implementation only supports the security strength of 768 at the moment. In the future these strengths will be implemented as well as any updates if changes are made to the design.
This code is the most up to date version based off the NIST PQC Round 3 Submissions.
KYBER-768 will securely distribute a 256 bit symmetric key between two parties. To safely transmit data over a channel using the key, AES-256 along with an authentication tag are recommended.
The exchange can be visualised below:
Using Node.js or React:
npm install crystals-kyberImport the functions at the top of your js file.
import {K768_KeyGen, K768_Encrypt, K768_Decrypt} from 'crystals-kyber';To use in your code:
// To generate a public and private key pair (pk, sk)
let pk_sk = K768_KeyGen();
let pk = pk_sk[0];
let sk = pk_sk[1];
// To generate a random 256 bit symmetric key (ss) and its encapsulation (c)
let c_ss = K768_Encrypt(pk);
let c = c_ss[0];
let ss1 = c_ss[1];
// To decapsulate and obtain the same symmetric key
let ss2 = K768_Decrypt(c,sk);Test output:
ss1 [
97, 32, 209, 176, 112, 188, 129,
160, 229, 52, 55, 64, 109, 33,
115, 178, 32, 216, 149, 143, 116,
45, 205, 242, 18, 30, 115, 177,
233, 141, 245, 137
]
ss2 [
97, 32, 209, 176, 112, 188, 129,
160, 229, 52, 55, 64, 109, 33,
115, 178, 32, 216, 149, 143, 116,
45, 205, 242, 18, 30, 115, 177,
233, 141, 245, 137
]
1Output from function TestK768() that tests compatibility with the C implementation based on run cases in PQCkemKAT_2400.rsp.
Test run [ 0 ] success
Test run [ 1 ] success
Test run [ 2 ] success
Test run [ 3 ] success
Test run [ 4 ] success
Test run [ 5 ] success
.
.
.
Test run [ 95 ] success
Test run [ 96 ] success
Test run [ 97 ] success
Test run [ 98 ] success
Test run [ 99 ] successMore details about CRYSTALS-KYBER, lattice-based cryptography and a real-life use of this algorithm can be read here Active Implementation of Post-Quantum End-to-End Encryption [20 Apr 2021].