NIST Standard version of Kyber

[thomwiggers]

This is mostly a notification: I just pushed version 0.8.0 of pqcrypto-kyber, which updates the underlying Kyber implementation to the version that matches the https://github.com/pq-crystals/kyber/tree/standard branch of Kyber's reference implementation. This should pretty much be the version that gets standardized as FIPS 203 (but NIST do what they want).

Note that pqcrypto-kyber version 0.7.6 as used by libsignal is incompatible with pqcrypto-kyber 0.8.0.

[jrose-signal]

Thanks for the heads-up, and thanks for making this update an incompatible version bump according to Cargo-SemVer, so that we can continue using the pre-standardization version more easily at this time (to be compatible with existing clients running PQXDH).

[jrose-signal]

(Marking this "acknowledged", but will not likely see any changes until the NIST standard is finalized.)

[thomwiggers]

The final version of FIPS 203 has been published, and there are some breaking changes. PQClean and pqcrypto-kyber will need to be updated, see PQClean/PQClean#560 and rustpq/pqcrypto#62.

[thomwiggers]

FYI, I released pqcrypto-mlkem.