Algorithm-Specific Threat Models

Threat analysis per algorithm. The release catalog, documents/public-release/catalog.json, records 49 profiles in 16 families (listed on docs/FINAL_ALGORITHM_LIST.md, which is generated from it); the pages below also cover algorithms of the source tree that the catalog does not list, including its six deferred families.

Categories

Post-Quantum Algorithms

Post-quantum algorithms: NIST standardized, KpqC, and stateful signatures.

• NIST standardized: ML-KEM, ML-DSA, SLH-DSA, Falcon
• Korean PQC (KpqC): SMAUG-T, HAETAE, AIMer, NTRU+
• Deferred families (in the source tree, no catalog profile, neither exported nor packaged): Classic McEliece and HQC (code-based), FrodoKEM and NTRU Prime (lattice-based), XMSS and LMS (stateful signatures)

Classical Algorithms

Classical algorithms, by primitive.

• Hash Functions: SHA family, Blake family, Keccak, SHAKE
• Symmetric Encryption: AES, ChaCha20, ARIA, Camellia, Ascon, Deoxys-II
• Message Authentication: HMAC, Poly1305, CMAC
• Key Derivation: HKDF, PBKDF2, Argon2id, Blake3-KDF
• Digital Signatures: Ed25519, Sr25519
• Key Exchange: X25519
• Random Generation: HMAC-DRBG
• Utilities: BIP39, FlatHash, SipHash

Risk Assessment Overview

Category	Quantum Risk	Classical Risk	Implementation Risk
Post-Quantum	Very Low	Very Low	Medium
Classical Symmetric	Low*	Very Low	Low
Classical Hash	Low*	Very Low	Low
Classical Asymmetric	High**	Very Low	Medium
Key Derivation	Low*	Very Low	Low
MAC/Authentication	Low*	Very Low	Low

*Grover’s algorithm provides quadratic speedup
**Vulnerable to Shor’s algorithm - migration required

Selection Criteria

When choosing algorithms, consider:

1. Security Requirements
   • Data sensitivity and classification
   • Protection lifetime requirements
   • Regulatory compliance needs
2. Threat Environment
   • Quantum threat timeline
   • Adversary capabilities
   • Attack surface
3. Performance Constraints
   • Computational resources
   • Network bandwidth
   • Latency requirements
4. Implementation Maturity
   • Algorithm standardization status
   • Library availability
   • Deployment experience

Quick Navigation

By Security Level

• 128-bit Security
• 192-bit Security
• 256-bit Security

By Use Case

• Long-term Storage
• Network Security
• Digital Signatures
• Key Management

---

Back to Threat Models