Specification Document

We list below the eventual refinements made to the BIKE specification document.

Date Description Download
  • We have updated our spec, reference & optimized implementations and KATs with the following changes: refined CCA flows; BIKE-3 transmitting a seed instead of g; BIKE-3 error vectors (e0, e1, e) are now generated from a single seed; fixed mismatch between implementation and spec regarding the decoding threshold computation; fixed a memory leak in the CCA implementations; faster polynomial multiplication using GF2X-enabled NTL library that accelerates the reference & optimized implementations by a factor ~2x up to ~5x.
Spec v3.1
  • As submitted to the 2nd Round of the NIST standardization process. See this document that describes the summary of changes introduced in round 2 submission.
Spec v3
  • Tables 4-11 were erroneously reporting larger private key, public key and message sizes for some security levels, which have been calculated considering slightly larger values of r than the ones suggested in Table 3. All of the typos have been corrected, and Tables 4-11 currently report accurate (i.e., smaller) sizes.
Spec v2.1
  • The BIKE Team has made refinements on the security proof of the BIKE variants in order to clarify questions raised in the NIST mail list. We stress that these changes do not impact on the practical security of the scheme, the parameters, nor the algorithmic specification of our schemes.
Spec v2.0
  • As submitted to the NIST standardization process.
Spec v1.0


The BIKE team can be contacted through the following email: team@bikesuite.org.

Postal Address:
    Rafael Misoczki
    Intel Corporation
    2111 NE 25th Ave., Hillsboro, OR, 97124, USA.