BIKE

• Algorithm type: Key encapsulation mechanism.
• Main cryptographic assumption: QC-MDPC (Quasi-Cyclic Moderate Density Parity-Check).
• Principal submitters: Nicolas Aragon, Paulo Barreto, Slim Bettaieb, Loic Bidoux, Olivier Blazy, Jean-Christophe Deneuville, Phillipe Gaborit, Santosh Gosh, Shay Gueron, Tim Güneysu, Carlos Aguilar Melchor, Rafael Misoczki, Edoardo Persichetti, Nicolas Sendrier, Jean-Pierre Tillich, Valentin Vasseur, Gilles Zémor.
• Authors' website: http://bikesuite.org/
• Specification version: 5.1.
• Primary Source:
  • Source: https://github.com/awslabs/bike-kem
  • Implementation license (SPDX-Identifier): Apache-2.0
• Ancestors of primary source:
  • https://bikesuite.org/files/v5.0/Reference_Implementation.2022.10.04.1.zip

Parameter set summary

Parameter set	Parameter set alias	Security model	Claimed NIST Level	Public key size (bytes)	Secret key size (bytes)	Ciphertext size (bytes)	Shared secret size (bytes)
BIKE-L1	NA	IND-CPA	1	1541	5223	1573	32
BIKE-L3	NA	IND-CPA	3	3083	10105	3115	32
BIKE-L5	NA	IND-CPA	5	5122	16494	5154	32

BIKE-L1 implementation characteristics

Implementation source	Identifier in upstream	Supported architecture(s)	Supported operating system(s)	CPU extension(s) used	No branching-on-secrets claimed?	No branching-on-secrets checked by valgrind?	Large stack usage?‡
Primary Source	master	64-bit little-endian	Linux,Darwin	None	True	True	False
Primary Source	master	x86_64	Linux,Darwin	AVX2,AVX512,PCLMUL,SSE2	True	True	False

Are implementations chosen based on runtime CPU feature detection? Yes.

‡For an explanation of what this denotes, consult the Explanation of Terms section at the end of this file.

BIKE-L3 implementation characteristics

Implementation source	Identifier in upstream	Supported architecture(s)	Supported operating system(s)	CPU extension(s) used	No branching-on-secrets claimed?	No branching-on-secrets checked by valgrind?	Large stack usage?
Primary Source	master	64-bit little-endian	Linux,Darwin	None	True	True	False
Primary Source	master	x86_64	Linux,Darwin	AVX2,AVX512,PCLMUL,SSE2	True	True	False

Are implementations chosen based on runtime CPU feature detection? Yes.

BIKE-L5 implementation characteristics

Implementation source	Identifier in upstream	Supported architecture(s)	Supported operating system(s)	CPU extension(s) used	No branching-on-secrets claimed?	No branching-on-secrets checked by valgrind?	Large stack usage?
Primary Source	master	64-bit little-endian	Linux,Darwin	None	True	True	False
Primary Source	master	x86_64	Linux,Darwin	AVX2,AVX512,PCLMUL,SSE2	True	True	False

Are implementations chosen based on runtime CPU feature detection? Yes.

Explanation of Terms

• Large Stack Usage: Implementations identified as having such may cause failures when running in threads or in constrained environments.