Add NEWHOPE KEM scheme

Provides conjectured 200-bit security against a quantum attacker.

Based on the public domain reference implementation at
https://github.com/tpoeppelmann/newhope and bit-for-bit
compatible with that version.

Test vectors generated by the reference testvector.c

1 files changed, 1 insertions, 1 deletions

diff --git a/src/lib/stream/chacha/chacha.h b/src/lib/stream/chacha/chacha.h
index f8f42e41d..7ba37012f 100644
--- a/src/lib/stream/chacha/chacha.h
+++ b/src/lib/stream/chacha/chacha.h
@@ -24,7 +24,7 @@ class BOTAN_DLL ChaCha final : public StreamCipher
       * Currently only 8, 12 or 20 rounds are supported, all others
       * will throw an exception
       */
-      ChaCha(size_t rounds);
+      ChaCha(size_t rounds = 20);
 
       void cipher(const byte in[], byte out[], size_t length) override;