Formally verifying Kyber Episode V: Machine-checked IND-CCA security and correctness of ML-KEM in EasyCrypt
by José Bacelar Almeida and
Santiago Arranz Olmos and
Manuel Barbosa and
Gilles Barthe and
François Dupressoir and
Benjamin Grégoire and
Vincent Laporte and
Jean-Christophe Léchenet and
Cameron Low and
Tiago Oliveira and
Hugo Pacheco and
Miguel Quaresma and
Peter Schwabe and
Pierre-Yves Strub