DataTerminology.comNEW
A code-based public-key KEM scheme using binary Goppa codes, designed to resist quantum attacks.
DESCRIPTION
Classic McEliece is a post-quantum cryptosystem based on error-correcting codes, notably binary Goppa codes. It provides long-studied security against quantum adversaries, with very large public keys but efficient decryption. The scheme is often considered for KEM use cases and secure key exchange. Its code-based foundation contrasts with lattice-based alternatives like Kyber. Adoption focuses on environments prioritizing long-term confidentiality.
ALTERNATIVE DEFINITIONS
Classic McEliece Project
Classic McEliece is a code-based public-key cryptosystem that uses binary Goppa codes.
Stresses code-based construction and the use of binary Goppa codes.
Wikipedia
The McEliece cryptosystem is a public-key cryptosystem based on error-correcting codes.
Generalizes code-based nature; Classic McEliece is a modern variant.
RELATED TERMS
Post-Quantum Cryptography Key Encapsulation Mechanism Asymmetric Encryption Goppa Codes Code-based Cryptography NIST PQC Lattice-Based Cryptography
COMPETING TERMS
RELATIONS
KNOWLEDGE AREAS
TARGET AUDIENCE
Security Architect Cybersecurity Engineer Chief Information Security Officer Software Developer Cloud Architect
EXTERNAL SOURCES
- Wikipedia - McEliece cryptosystem
- NIST PQC Project - NIST PQC standardization
- PQWiki - Technical overview and parameters
TOP QUESTIONS
Why is Classic McEliece considered post-quantum secure?
It relies on code-based problems not known to be efficiently solvable by quantum algorithms, unlike RSA or ECC.
Category: Relevancy
What is the trade-off of using Classic McEliece?
Public keys are large, which impacts storage and transmission, but decryption is fast and security is robust.
Category: Risks
How does Classic McEliece compare to Kyber?
Kyber is lattice-based with smaller keys and widespread selection, while McEliece offers long-studied code-based security with larger key sizes.
Category: Alternatives
What use cases suit Classic McEliece?
Long-term confidentiality, archival encryption, and key exchange in environments where key size overhead is acceptable.
Category: HowTo
Is Classic McEliece standardized?
It has been under NIST evaluation; consult NIST PQC project updates for current standardization status.
Category: Overview
What are binary Goppa codes?
Error-correcting codes used in McEliece to construct hard decoding problems underlying its security.
Category: Definition
Can Classic McEliece be used on constrained devices?
Key sizes pose challenges for constrained devices; careful engineering and compression may be needed.
Category: Requirements
How to implement Classic McEliece securely?
Use vetted libraries, constant-time code, and follow parameter recommendations from authoritative sources.
Category: BestPractices
What is the origin of McEliece?
Proposed by Robert McEliece in 1978; Classic McEliece updates parameters and practices for contemporary security.
Category: Origin