Formally verifying Kyber

In this paper we present the first formally verified implementations of Kyber and, to best our knowledge, such any post-quantum cryptosystem. We give a (readable) formal specification in EasyCrypt proof assistant, which is syntactically very close pseudocode description scheme as given most recent version NIST submission. high-assurance open-source written Jasmin language, along with machine-checked proofs that they are functionally correct respect specification. describe number improvements and frameworks were needed for implementation verification effort, detailed benchmarks implementations, showing code achieves performance existing hand-optimized C assembly.