SAFEcrypto’s libsafecrypto, which provides a suite of software routines to implement lattice-based cryptographic schemes, is now available at: The related wiki describes the current status of libsafecrypto and provides an ongoing description of its current capabilities.

The following schemes are currently supported:

Signatures: BLISS-B; Dilithium / Dilithium-G; ENS; DLP; Ring-TESLA

KEM: ENS; Kyber

Encryption: RLWE; Kyber



BLISS-B, the Bimodal Lattice Signature Scheme
Markku-Juhani O. Saarinen (
Centre for Secure Information Technologies (CSIT), Queen’s University Belfast, UK

Based on BLISS originally published in Crypto ’13: Léo Ducas, Alain Durmus, Tancrède Lepoint, Vadim Lyubashevsky: Lattice Signatures and Bimodal Gaussians

Extended version of this paper is available as IACR ePrint 2013/383. This code implements the BLISS-B variant by Léo Ducas, which is available as IACR ePrint 2014/874.