Douglas Stebila

Security Considerations for FrodoKEM

Abstract

ISO standardized FrodoKEM in June 2026. This document provides security guidance for FrodoKEM for use in protocols. It explains what security claims protocol designers may rely on, what assumptions and conditions are required, what parameter sets are in scope, and what implementors need to do to use FrodoKEM safely. The scope follows the current FrodoKEM Internet-Draft.

Keywords: FrodoKEM, learning with errors, key encapsulation mechanism

Reference

Patrick Longa, Joppe W. Bos, Stephan Ehlen, Douglas Stebila. Security Considerations for FrodoKEM. Internet-Draft. Internet Engineering Task Force, June 2026. Draft-00. © IETF Trust and the authors.

Download

BibTeX

@misc{draft-longa-cfrg-frodokem-security-considerations-00,
 	Author = {Patrick Longa and Joppe W. Bos and Stephan Ehlen and Douglas Stebila},
 	Howpublished = {\url{https://datatracker.ietf.org/doc/html/draft-longa-cfrg-frodokem-security-considerations-00/}},
 	Month = jun,
 	Note = {Internet-Draft},
 	Title = {Security Considerations for {FrodoKEM}},
 	Year = {2026}
 }