sntrup761 (NTRU Prime)

Streamlined NTRU Prime key encapsulation mechanism designed to eliminate algebraic structure an attacker might exploit.

Core Principles & Analysis

• Default key exchange in OpenSSH since version 9.0 (2022), hybridized with X25519.
• Chooses prime-degree fields and prime moduli to strip away worrying symmetries.
• Designed by the Bernstein–Chuengsatiansup–Lange–van Vredendaal team.

Specifications & Metrics

• FAMILY: Lattice (NTRU Prime)
• STATUS: Deployed
• YEAR: 2016