ngcc.dev
Performance measurements › system: x86_1 · arm_1
Performance — AArch64, system arm_1
Independent measurements of the NGCC Round 1 implementations on one Qualcomm Oryon core (fixed 2.71 GHz (governor performance, minimum = maximum), boost off, SMT none).
- Cycles are the mean of all timed calls in five trials, normally with each trial in a fresh process.
- Symmetric % is the cycle share in ICCS placeholder hashes, excluding the DRNG and candidates' own hashes.
(??%)means no ICCS-facing backend was measured. See the symmetric survey. - Each instance links to its performance report with KAT status, all measured implementations, sizes, memory proxies, primitive profiles, and raw-evidence references.
- See method and limitations. These are independent measurements, not submitter self-assessments or NICCS results.
- Notation:
–means not measured,n=marks fewer than 100 timed calls, and ⚠ marks an instance whose submitted KAT vectors are not reproduced by the submitted code. - Sizes use a separate catalog, not timing-record buffer sizes.
≈marks a nominal variable-length signature; other variable signatures use their maximum. - KEX bandwidth counts protocol messages plus required public keys once. KEM public-key size is listed separately from ciphertext size. Certificates and transport framing are excluded; see the size audit for discrepancies and AFS-KEX's API mapping.
- Hash rows show three message sizes. Parentheses give cycles relative to the same-width, same-length ICCS
pseudoXOF(helper timings), not a production replacement estimate. - Scope: reference sets are shown. When both ICCS and non-ICCS backends were measured, the non-ICCS one stays on the candidate report; notes flag caveats.
Ordered measurements
Compare candidates at a common claimed security target. Each table orders the measured metrics and summarizes their mean ordinal position; see the individual performance reports for measurement details and caveats.
Digital signatures
| id | algorithm | instance performance report | keygen cycles (sym %) | sign cycles (sym %) | verify cycles (sym %) | public key (B) | signature (B) | notes |
|---|---|---|---|---|---|---|---|---|
sign-01 |
Aigis-Sig+ PDF | Aigis-sig1 |
564.0 k (7.6%) | 9.75 M (65%) | 494.1 k (11%) | 928 | 2015 | – |
sign-01 |
Aigis-Sig+ PDF | Aigis-sig2 |
1.78 M (4.4%) | 7.50 M (57%) | 1.68 M (5.8%) | 1824 | 4533 | – |
sign-01 |
Aigis-Sig+ PDF | Aigis-sig3 |
5.90 M (5.0%) | 8.31 M (29%) | 5.80 M (6.0%) | 4672 | 9134 | – |
sign-02 |
BIT: Bimodal Triangular distribution based lattice signatures PDF | BiT-128 |
405.1 k (78%) | 1.76 M (69%) | 395.0 k (75%) | 1048 | 1504 | – |
sign-02 |
BIT: Bimodal Triangular distribution based lattice signatures PDF | BiT-256 |
1.12 M (84%) | 2.47 M (65%) | 1.15 M (83%) | 2144 | 3456 | – |
sign-02 |
BIT: Bimodal Triangular distribution based lattice signatures PDF | BiT-512 |
3.34 M (89%) | 10.51 M (69%) | 3.27 M (87%) | 5056 | 6695 | – |
sign-03 |
CEDRUS+C PDF | CEDRUSC-160f |
13.62 M (97%) | 488.05 M (97%) | 14.58 M (97%) | 40 | 19812 | – |
sign-03 |
CEDRUS+C PDF | CEDRUSC-160s |
560.03 M (97%) | 8.23 G (97%) | 19.88 M (97%) | 40 | 9460 | – |
sign-03 |
CEDRUS+C PDF | CEDRUSC-256f |
43.98 M (97%) | 1.19 G (97%) | 20.06 M (97%) | 64 | 43548 | – |
sign-03 |
CEDRUS+C PDF | CEDRUSC-256s |
909.66 M (97%) | 12.03 G (97%, n=80) | 33.22 M (97%) | 64 | 24104 | – |
sign-03 |
CEDRUS+C PDF | CEDRUSC-384f |
624.24 M (99%) | 11.81 G (99%, n=85) | 119.41 M (99%) | 96 | 75988 | – |
sign-03 |
CEDRUS+C PDF | CEDRUSC-384s |
3.11 G (99%) | 46.73 G (99%, n=20) | 50.58 M (99%) | 96 | 61572 | – |
sign-03 |
CEDRUS+C PDF | CEDRUSC-512f |
1.67 G (99%) | 23.46 G (99%, n=40) | 150.81 M (99%) | 128 | 121520 | – |
sign-03 |
CEDRUS+C PDF | CEDRUSC-512s |
6.64 G (99%) | 83.37 G (99%, n=10) | 109.23 M (99%) | 128 | 98212 | – |
sign-04 |
CEDRUSɑ PDF | CEDRUSALPHA-160f |
15.29 M (97%) | 539.58 M (97%) | 16.75 M (97%) | 40 | 19420 | – |
sign-04 |
CEDRUSɑ PDF | CEDRUSALPHA-160s |
494.89 M (97%) | 7.35 G (97%) | 18.11 M (97%) | 40 | 10300 | – |
sign-04 |
CEDRUSɑ PDF | CEDRUSALPHA-256f |
49.08 M (97%) | 1.27 G (97%) | 22.63 M (96%) | 64 | 43296 | – |
sign-04 |
CEDRUSɑ PDF | CEDRUSALPHA-256s |
743.45 M (97%) | 11.33 G (97%, n=90) | 27.40 M (96%) | 64 | 25568 | – |
sign-04 |
CEDRUSɑ PDF | CEDRUSALPHA-384f |
607.42 M (99%) | 11.81 G (99%, n=85) | 117.06 M (99%) | 96 | 76176 | – |
sign-04 |
CEDRUSɑ PDF | CEDRUSALPHA-384s |
3.88 G (99%) | 42.44 G (99%, n=20) | 65.29 M (98%) | 96 | 60672 | – |
sign-04 |
CEDRUSɑ PDF | CEDRUSALPHA-512f |
1.51 G (99%) | 19.86 G (99%, n=50) | 137.72 M (98%) | 128 | 127488 | – |
sign-04 |
CEDRUSɑ PDF | CEDRUSALPHA-512s |
7.30 G (99%) | 84.16 G (99%, n=10) | 121.91 M (98%) | 128 | 98048 | – |
sign-05 |
Chinith PDF | sm4th_d3_128f_loose |
11.2 k (0.0%) | 95.61 M (3.6%) | 63.93 M (3.7%) | 32 | 6724 | mixed own/ICCS primitives |
sign-05 |
Chinith PDF | sm4th_d3_128f_tight |
11.0 k (0.0%) | 228.82 M (4.7%) | 135.98 M (7.1%) | 32 | 11864 | mixed own/ICCS primitives |
sign-05 |
Chinith PDF | sm4th_d3_128s_loose |
11.0 k (0.0%) | 275.70 M (12%) | 227.64 M (6.3%) | 32 | 5056 | mixed own/ICCS primitives |
sign-05 |
Chinith PDF | sm4th_d3_128s_tight |
11.1 k (0.0%) | 398.34 M (20%) | 296.32 M (24%) | 32 | 9176 | mixed own/ICCS primitives |
sign-05 |
Chinith PDF | sm4th_em_d2_128f_loose |
11.0 k (0.0%) | 24.05 M (13%) | 22.86 M (10%) | 32 | 4932 | mixed own/ICCS primitives |
sign-05 |
Chinith PDF | sm4th_em_d2_128f_tight |
11.0 k (0.0%) | 29.55 M (34%) | 28.23 M (33%) | 32 | 9450 | mixed own/ICCS primitives |
sign-05 |
Chinith PDF | sm4th_em_d2_128s_loose |
11.0 k (0.0%) | 160.24 M (15%) | 149.64 M (10%) | 32 | 3818 | mixed own/ICCS primitives |
sign-05 |
Chinith PDF | sm4th_em_d2_128s_tight |
11.0 k (0.0%) | 178.73 M (45%) | 169.37 M (42%) | 32 | 7556 | mixed own/ICCS primitives |
sign-05 |
Chinith PDF | ublockith_d3_256f |
14.1 k (0.0%) | 469.86 M (4.8%) | 572.71 M (3.9%) | 64 | 31556 | mixed own/ICCS primitives |
sign-05 |
Chinith PDF | ublockith_d3_256s |
14.1 k (0.0%) | 1.01 G (16%) | 1.11 G (14%) | 64 | 24144 | mixed own/ICCS primitives |
sign-05 |
Chinith PDF | ublockith_em_d3_256f |
14.2 k (0.0%) | 351.83 M (6.4%) | 429.75 M (4.9%) | 64 | 25028 | mixed own/ICCS primitives |
sign-05 |
Chinith PDF | ublockith_em_d3_256s |
14.1 k (0.0%) | 825.61 M (22%) | 883.88 M (18%) | 64 | 19056 | mixed own/ICCS primitives |
sign-05 |
Chinith PDF | vistrutith_d3_512f |
14.5 k (0.0%) | 6.02 G (1.7%) | 4.95 G (2.0%) | 128 | 106788 | mixed own/ICCS primitives |
sign-05 |
Chinith PDF | vistrutith_d3_512s |
14.5 k (0.0%) | 10.40 G (6.9%, n=95) | 9.37 G (7.7%) | 128 | 83004 | mixed own/ICCS primitives |
sign-06 |
COMPASS-SIG PDF | COMPASS-SIG-128 |
1.31 M (93%) | 1.69 M (88%) | 1.27 M (93%) | 1664 | 2080 | – |
sign-06 |
COMPASS-SIG PDF | COMPASS-SIG-256 |
4.92 M (96%) | 6.33 M (90%) | 4.75 M (95%) | 3616 | 4080 | – |
sign-06 |
COMPASS-SIG PDF | COMPASS-SIG-384 |
3.56 M (91%) | 5.02 M (81%) | 3.21 M (90%) | 5792 | 7344 | – |
sign-06 |
COMPASS-SIG PDF | COMPASS-SIG-512 |
5.56 M (92%) | 7.60 M (82%) | 5.15 M (91%) | 7648 | 9024 | – |
sign-07 |
CS PDF | CS-128 |
487.3 k (4.7%) | 3.72 M (62%) | 522.9 k (6.9%) | 976 | 1548 | – |
sign-07 |
CS PDF | CS-256 |
797.0 k (10%) | 10.86 M (57%) | 997.6 k (12%) | 1760 | 3164 | – |
sign-07 |
CS PDF | CS-512 |
2.60 M (15%) | 41.58 M (69%) | 3.29 M (16%) | 4288 | 5975 | – |
sign-08 |
DARTS PDF | DARTS128 |
792.1 k (53%) | 42.56 M (90%) | 316.0 k (68%) | 1120 | 1449 | – |
sign-08 |
DARTS PDF | DARTS256 |
1.07 M (70%) | 31.33 M (89%) | 798.8 k (75%) | 2208 | 2489 | – |
sign-08 |
DARTS PDF | DARTS512 |
1.84 M (66%) | 9.97 M (88%) | 1.54 M (78%) | 4672 | 5851 | – |
sign-09 |
DOVE PDF | dove_classic_128 |
96.51 M (19%) | 2.22 M (0.7%) | 1.18 M (0.5%) | 191646 | 136 | – |
sign-09 |
DOVE PDF | dove_classic_256 |
1.98 G (10%) | 21.95 M (0.2%) | 4.93 M (0.2%) | 2050352 | 296 | – |
sign-09 |
DOVE PDF | dove_classic_512 |
45.42 G (4.9%, n=20) | 242.40 M (0.0%) | 59.19 M (0.0%) | 22833052 | 648 | – |
sign-09 |
DOVE PDF | dove_pkc_skc_128 |
85.06 M (7.8%) | 24.15 M (27%) | 7.57 M (84%) | 43576 | 136 | – |
sign-09 |
DOVE PDF | dove_pkc_skc_256 |
1.86 G (3.7%) | 355.93 M (20%) | 74.47 M (93%) | 446992 | 296 | – |
sign-09 |
DOVE PDF | dove_pkc_skc_512 |
43.98 G (1.7%, n=20) | 5.50 G (14%) | 822.09 M (93%) | 5062192 | 648 | – |
sign-10 |
Facto-DSA PDF | Facto-DSA-128 |
6.14 M (13%) | 1.91 M (0.6%) | 909.9 k (88%) | 40040 | 40 | – |
sign-10 |
Facto-DSA PDF | Facto-DSA-256 |
115.14 M (7.9%) | 10.61 M (0.1%) | 10.20 M (89%) | 456960 | 68 | – |
sign-10 |
Facto-DSA PDF | Facto-DSA-512 ⚠ KAT NOKAT |
2.03 G (5.6%) | 132.53 M (0.0%) | 127.13 M (89%) | 5674240 | 128 | KAT/output caveat; see candidate page |
sign-11 |
FlexTree PDF | Flextree-160f |
13.81 M (97%) | 532.03 M (91%) | 14.81 M (97%) | 40 | 18672 | – |
sign-11 |
FlexTree PDF | Flextree-160s |
565.27 M (97%) | 7.88 G (97%) | 20.31 M (97%) | 40 | 9580 | – |
sign-11 |
FlexTree PDF | Flextree-256f |
44.08 M (97%) | 918.11 M (97%) | 24.21 M (97%) | 64 | 46856 | – |
sign-11 |
FlexTree PDF | Flextree-256s |
460.08 M (97%) | 8.79 G (97%) | 37.08 M (97%) | 64 | 25420 | – |
sign-11 |
FlexTree PDF | Flextree-384f |
623.94 M (99%) | 11.73 G (99%, n=85) | 118.76 M (99%) | 96 | 73396 | – |
sign-11 |
FlexTree PDF | Flextree-384s |
3.10 G (99%) | 42.86 G (99%, n=20) | 51.41 M (98%) | 96 | 60180 | – |
sign-11 |
FlexTree PDF | Flextree-512f |
1.67 G (99%) | 23.54 G (99%, n=40) | 152.42 M (98%) | 128 | 117296 | – |
sign-11 |
FlexTree PDF | Flextree-512s |
6.65 G (99%) | 80.79 G (99%, n=10) | 111.38 M (97%) | 128 | 94948 | – |
sign-12 |
Galas Signature Scheme PDF | Galas-160F ⚠ KAT MISMATCH |
17.40 M (0.0%) | 1.58 G (4.7%) | 968.28 M (7.5%) | 40 | 5964 | KAT/output caveat; see candidate page |
sign-12 |
Galas Signature Scheme PDF | Galas-160S ⚠ KAT MISMATCH |
17.39 M (0.0%) | 2.04 G (25%) | 1.40 G (34%) | 40 | 4812 | KAT/output caveat; see candidate page |
sign-12 |
Galas Signature Scheme PDF | Galas-256F ⚠ KAT MISMATCH |
45.48 M (0.0%) | 6.53 G (3.6%) | 3.90 G (5.7%) | 64 | 15950 | KAT/output caveat; see candidate page |
sign-12 |
Galas Signature Scheme PDF | Galas-256S ⚠ KAT MISMATCH |
45.24 M (0.0%) | 10.48 G (38%, n=80) | 7.81 G (50%) | 64 | 12114 | KAT/output caveat; see candidate page |
sign-12 |
Galas Signature Scheme PDF | Galas-384F ⚠ KAT MISMATCH |
106.98 M (0.0%) | 24.98 G (3.2%, n=30) | 14.31 G (5.8%, n=65) | 96 | 33384 | KAT/output caveat; see candidate page |
sign-12 |
Galas Signature Scheme PDF | Galas-384S ⚠ KAT MISMATCH |
107.01 M (0.0%) | 33.17 G (25%, n=25) | 22.25 G (39%, n=40) | 96 | 27784 | KAT/output caveat; see candidate page |
sign-12 |
Galas Signature Scheme PDF | Galas-512F ⚠ KAT MISMATCH |
195.39 M (0.0%) | 66.84 G (2.3%, n=10) | 35.30 G (4.4%, n=30) | 128 | 59416 | KAT/output caveat; see candidate page |
sign-12 |
Galas Signature Scheme PDF | Galas-512S ⚠ KAT MISMATCH |
196.94 M (0.0%) | 83.19 G (21%, n=10) | 50.62 G (34%, n=15) | 128 | 49516 | KAT/output caveat; see candidate page |
sign-13 |
GreatWall Signature Algorithm PDF | GreatWall128f |
4.31 M (??%) | 87.08 M (??%) | 64.29 M (??%) | 36 | 3396 | own symmetric primitives; placeholder share unavailable |
sign-13 |
GreatWall Signature Algorithm PDF | GreatWall128s |
4.32 M (??%) | 406.20 M (??%) | 339.58 M (??%) | 36 | 2758 | own symmetric primitives; placeholder share unavailable |
sign-13 |
GreatWall Signature Algorithm PDF | GreatWall192f |
10.12 M (??%) | 273.62 M (??%) | 187.41 M (??%) | 50 | 8012 | own symmetric primitives; placeholder share unavailable |
sign-13 |
GreatWall Signature Algorithm PDF | GreatWall192s |
10.11 M (??%) | 1.15 G (??%) | 1.06 G (??%) | 50 | 6804 | own symmetric primitives; placeholder share unavailable |
sign-13 |
GreatWall Signature Algorithm PDF | GreatWall256f |
18.58 M (??%) | 644.86 M (??%) | 420.43 M (??%) | 66 | 14260 | own symmetric primitives; placeholder share unavailable |
sign-13 |
GreatWall Signature Algorithm PDF | GreatWall256s |
18.75 M (??%) | 2.09 G (??%) | 1.86 G (??%) | 66 | 12236 | own symmetric primitives; placeholder share unavailable |
sign-13 |
GreatWall Signature Algorithm PDF | GreatWall512f |
81.63 M (??%) | 6.88 G (??%) | 4.29 G (??%) | 132 | 57812 | own symmetric primitives; placeholder share unavailable |
sign-13 |
GreatWall Signature Algorithm PDF | GreatWall512s |
77.00 M (??%) | 19.50 G (??%, n=50) | 16.98 G (??%, n=55) | 132 | 50012 | own symmetric primitives; placeholder share unavailable |
sign-14 |
Lynxer PDF | Lynxer-160f |
22.72 M (95%) | 403.20 M (18%) | 352.92 M (7.8%) | 40 | 5801 | mixed own/ICCS primitives |
sign-14 |
Lynxer PDF | Lynxer-160s |
22.74 M (95%) | 2.92 G (4.2%) | 2.85 G (2.4%) | 40 | 4607 | mixed own/ICCS primitives |
sign-14 |
Lynxer PDF | Lynxer-256f |
167.67 M (99%) | 1.29 G (40%) | 941.25 M (19%) | 64 | 15097 | mixed own/ICCS primitives |
sign-14 |
Lynxer PDF | Lynxer-256s |
167.06 M (99%) | 8.36 G (8.2%) | 7.97 G (3.7%) | 64 | 12191 | mixed own/ICCS primitives |
sign-14 |
Lynxer PDF | Lynxer-384f |
695.57 M (99%) | 4.48 G (48%) | 3.04 G (24%) | 96 | 34109 | mixed own/ICCS primitives |
sign-14 |
Lynxer PDF | Lynxer-384s |
709.99 M (99%) | 24.71 G (11%, n=40) | 23.00 G (4.8%, n=40) | 96 | 27495 | mixed own/ICCS primitives |
sign-14 |
Lynxer PDF | Lynxer-512f |
2.01 G (100%) | 6.34 G (96%) | 2.32 G (91%) | 128 | 61091 | mixed own/ICCS primitives |
sign-14 |
Lynxer PDF | Lynxer-512s |
2.01 G (100%) | 8.82 G (82%) | 4.55 G (66%) | 128 | 48879 | mixed own/ICCS primitives |
sign-15 |
MORNING-ATLAS PDF | lwrdsa128 ⚠ KAT OVERFLOW |
2.49 M (86%) | 3.39 M (74%) | 2.57 M (84%) | 1328 | 2081 | KAT/output caveat; see candidate page |
sign-15 |
MORNING-ATLAS PDF | lwrdsa192 ⚠ KAT OVERFLOW |
5.93 M (86%) | 7.75 M (75%) | 6.10 M (85%) | 2112 | 3365 | KAT/output caveat; see candidate page |
sign-15 |
MORNING-ATLAS PDF | lwrdsa256 ⚠ KAT OVERFLOW |
3.48 M (67%) | 9.43 M (42%) | 3.62 M (65%) | 2848 | 4656 | KAT/output caveat; see candidate page |
sign-15 |
MORNING-ATLAS PDF | lwrdsa512 ⚠ KAT OVERFLOW |
10.35 M (65%) | 35.69 M (52%) | 10.83 M (62%) | 6688 | 10081 | KAT/output caveat; see candidate page |
sign-16 |
Octarine PDF | Octarine-128 |
684.0 k (64%) | 1.84 M (56%) | 767.8 k (55%) | 1344 | 2564 | – |
sign-16 |
Octarine PDF | Octarine-256 |
1.32 M (61%) | 4.01 M (57%) | 1.50 M (54%) | 2368 | 5449 | – |
sign-16 |
Octarine PDF | Octarine-512 |
3.40 M (56%) | 15.20 M (58%) | 3.85 M (50%) | 5184 | 14713 | – |
sign-17 |
OPS Digital Signature Algorithm PDF | OPSsig-128 |
2.22 M (92%) | 2.52 M (90%) | 2.05 M (87%) | 2560 | 4349 | – |
sign-17 |
OPS Digital Signature Algorithm PDF | OPSsig-256 |
3.73 M (93%) | 4.91 M (89%) | 3.47 M (90%) | 3392 | 5540 | – |
sign-17 |
OPS Digital Signature Algorithm PDF | OPSsig-512 |
7.34 M (92%) | 10.06 M (87%) | 6.89 M (89%) | 6720 | 12021 | – |
sign-18 |
Origami PDF | Origami-128 |
2.36 M (97%) | 816.33 M (86%, n=80) | 23.04 M (88%) | 2996 | 116 | signing time includes retries after API failures |
sign-18 |
Origami PDF | Origami-256 |
85.41 M (99%) | 1.38 G (85%) | 1.25 G (87%) | 14968 | 516 | signing time includes retries after API failures |
sign-18 |
Origami PDF | Origami-384 |
291.60 M (100%) | 12.12 G (85%) | 5.82 G (86%) | 27940 | 948 | signing time includes retries after API failures |
sign-18 |
Origami PDF | Origami-512 |
469.27 M (100%) | 11.43 G (84%, n=90) | 10.54 G (86%, n=95) | 35924 | 1220 | signing time includes retries after API failures |
sign-19 |
Phoenix PDF | Phoenix-SM3-128f ⚠ KAT MISMATCH |
9.87 M (0.0%) | 200.57 M (4.2%) | 5.54 M (1.3%) | 32 | 13670 | hash backend varies by instance; KAT/output caveat; see candidate page |
sign-19 |
Phoenix PDF | Phoenix-SM3-128s ⚠ KAT MISMATCH |
316.92 M (0.0%) | 3.58 G (5.3%) | 12.97 M (0.5%) | 32 | 6258 | hash backend varies by instance; KAT/output caveat; see candidate page |
sign-19 |
Phoenix PDF | Phoenix-SM3-192f ⚠ KAT MISMATCH |
26.66 M (0.0%) | 525.98 M (0.3%) | 14.07 M (0.7%) | 48 | 30766 | hash backend varies by instance; KAT/output caveat; see candidate page |
sign-19 |
Phoenix PDF | Phoenix-SM3-192s ⚠ KAT MISMATCH |
999.40 M (0.0%) | 10.42 G (0.6%, n=90) | 35.63 M (0.2%) | 48 | 13332 | hash backend varies by instance; KAT/output caveat; see candidate page |
sign-19 |
Phoenix PDF | Phoenix-SM3-256f ⚠ KAT MISMATCH |
53.48 M (0.0%) | 1.03 G (1.6%) | 27.29 M (0.5%) | 64 | 44906 | hash backend varies by instance; KAT/output caveat; see candidate page |
sign-19 |
Phoenix PDF | Phoenix-SM3-256s ⚠ KAT MISMATCH |
707.90 M (0.0%) | 9.55 G (12%) | 61.25 M (0.2%) | 64 | 24618 | hash backend varies by instance; KAT/output caveat; see candidate page |
sign-19 |
Phoenix PDF | Phoenix-SM3-384f ⚠ KAT MISMATCH |
113.88 M (0.0%) | 3.29 G (0.0%) | 61.33 M (0.3%) | 96 | 88442 | hash backend varies by instance; KAT/output caveat; see candidate page |
sign-19 |
Phoenix PDF | Phoenix-SM3-384s ⚠ KAT MISMATCH |
1.11 G (0.0%) | 15.18 G (1.5%, n=65) | 98.14 M (0.2%) | 96 | 54726 | hash backend varies by instance; KAT/output caveat; see candidate page |
sign-19 |
Phoenix PDF | Phoenix-SM3-512f ⚠ KAT MISMATCH |
225.35 M (0.0%) | 5.54 G (4.9%) | 122.27 M (0.2%) | 128 | 138454 | hash backend varies by instance; KAT/output caveat; see candidate page |
sign-19 |
Phoenix PDF | Phoenix-SM3-512s ⚠ KAT MISMATCH |
2.35 G (0.0%) | 24.49 G (8.3%, n=40) | 39.41 M (0.5%) | 128 | 98476 | hash backend varies by instance; KAT/output caveat; see candidate page |
sign-20 |
Qing Luan PDF | QingLuan-128 |
259.4 k (68%) | 14.93 M (63%) | 6.83 M (64%) | 77 | 18720 | – |
sign-20 |
Qing Luan PDF | QingLuan-256 |
1.60 M (81%) | 93.84 M (76%) | 43.03 M (77%) | 153 | 74248 | – |
sign-20 |
Qing Luan PDF | QingLuan-384 |
3.44 M (82%) | 227.75 M (77%) | 108.13 M (80%) | 227 | 164940 | – |
sign-20 |
Qing Luan PDF | QingLuan-512 |
8.44 M (86%) | 538.64 M (82%) | 255.28 M (84%) | 302 | 292816 | – |
sign-21 |
ReSolveD-ɑ PDF | ReSolveD-alpha-160f |
11.70 M (39%) | 454.96 M (3.6%) | 429.40 M (2.5%) | 121 | 6851 | own symmetric primitives; placeholder share unavailable |
sign-21 |
ReSolveD-ɑ PDF | ReSolveD-alpha-160s |
11.75 M (39%) | 3.50 G (1.8%) | 3.47 G (1.5%) | 121 | 5307 | own symmetric primitives; placeholder share unavailable |
sign-21 |
ReSolveD-ɑ PDF | ReSolveD-alpha-256f |
27.35 M (44%) | 1.07 G (3.7%) | 1.02 G (2.6%) | 194 | 17932 | own symmetric primitives; placeholder share unavailable |
sign-21 |
ReSolveD-ɑ PDF | ReSolveD-alpha-256s |
27.42 M (44%) | 9.99 G (1.8%) | 9.90 G (1.5%) | 194 | 13973 | own symmetric primitives; placeholder share unavailable |
sign-21 |
ReSolveD-ɑ PDF | ReSolveD-alpha-384f |
68.50 M (39%) | 3.05 G (3.5%) | 2.91 G (2.6%) | 288 | 40469 | own symmetric primitives; placeholder share unavailable |
sign-21 |
ReSolveD-ɑ PDF | ReSolveD-alpha-384s |
68.54 M (39%) | 27.07 G (2.0%, n=35) | 26.86 G (1.7%, n=35) | 288 | 31575 | own symmetric primitives; placeholder share unavailable |
sign-21 |
ReSolveD-ɑ PDF | ReSolveD-alpha-512f |
120.91 M (76%) | 721.69 M (41%) | 577.76 M (34%) | 385 | 72611 | own symmetric primitives; placeholder share unavailable |
sign-21 |
ReSolveD-ɑ PDF | ReSolveD-alpha-512s |
120.91 M (76%) | 3.67 G (39%) | 3.16 G (34%) | 385 | 56239 | own symmetric primitives; placeholder share unavailable |
sign-22 |
Rhyme PDF | Rhyme-SM3-128 |
420.26 M (0.7%) | 3.80 M (81%) | 274.1 k (64%) | 800 | ≈1483 | hash backend varies by instance |
sign-22 |
Rhyme PDF | Rhyme-SM3-256 |
1.10 G (0.9%) | 14.01 M (82%) | 785.3 k (66%) | 1824 | ≈3258 | hash backend varies by instance |
sign-22 |
Rhyme PDF | Rhyme-SM3-384 |
2.96 G (0.5%) | 20.72 M (80%) | 1.40 M (65%) | 2720 | ≈4743 | hash backend varies by instance |
sign-22 |
Rhyme PDF | Rhyme-SM3-512 |
3.28 G (0.6%) | 29.31 M (81%) | 1.89 M (62%) | 3872 | ≈7002 | hash backend varies by instance |
sign-23 |
Shuttle PDF | SHUTTLE-128 |
8.29 M (??%) | 4.31 M (??%) | 1.05 M (??%) | 1264 | 1183 | ICCS DRNG is used as the XOF and accounted separately |
sign-23 |
Shuttle PDF | SHUTTLE-256 |
8.84 M (??%) | 6.85 M (??%) | 1.43 M (??%) | 1952 | 2417 | ICCS DRNG is used as the XOF and accounted separately |
sign-23 |
Shuttle PDF | SHUTTLE-512 |
18.80 M (??%) | 14.10 M (??%) | 2.60 M (??%) | 3648 | 5001 | ICCS DRNG is used as the XOF and accounted separately |
sign-24 |
Sigurd PDF | Sigurd-128 |
15.95 M (26%) | 30.42 M (36%) | 13.81 M (45%) | 112 | ≈25108 | – |
sign-24 |
Sigurd PDF | Sigurd-256 |
86.23 M (39%) | 282.20 M (62%) | 100.85 M (51%) | 212 | ≈74756 | – |
sign-24 |
Sigurd PDF | Sigurd-512 |
461.63 M (46%) | 2.78 G (63%) | 922.08 M (34%) | 435 | ≈282692 | – |
sign-25 |
SQIsign2D2 PDF | SQISign2Dsquare-Level1-eff_compressed |
46.24 M (0.0%) | 152.62 M (0.4%) | 32.94 M (1.2%) | 65 | 168 | – |
sign-25 |
SQIsign2D2 PDF | SQISign2Dsquare-Level1-eff_uncompressed |
25.48 M (0.0%) | 137.80 M (0.4%) | 29.13 M (1.3%) | 64 | 200 | – |
sign-25 |
SQIsign2D2 PDF | SQISign2Dsquare-Level1-sec_compressed |
66.74 M (0.0%) | 218.62 M (0.0%) | 46.54 M (0.0%) | 69 | 178 | – |
sign-25 |
SQIsign2D2 PDF | SQISign2Dsquare-Level1-sec_uncompressed |
35.06 M (0.0%) | 197.49 M (0.0%) | 41.53 M (0.0%) | 68 | 212 | – |
sign-25 |
SQIsign2D2 PDF | SQISign2Dsquare-Level2-eff_compressed |
43.05 M (0.0%) | 140.46 M (3.2%) | 33.54 M (18%) | 81 | 208 | – |
sign-25 |
SQIsign2D2 PDF | SQISign2Dsquare-Level2-eff_uncompressed ⚠ KAT CRYPTOFAIL |
23.15 M (0.0%) | 132.36 M (3.1%) | 30.45 M (20%) | 80 | 248 | KAT/output caveat; see candidate page |
sign-25 |
SQIsign2D2 PDF | SQISign2Dsquare-Level2-sec_compressed |
104.76 M (0.0%) | 330.48 M (0.0%) | 81.97 M (0.0%) | 85 | 218 | – |
sign-25 |
SQIsign2D2 PDF | SQISign2Dsquare-Level2-sec_uncompressed |
55.03 M (0.0%) | 296.46 M (0.0%) | 64.82 M (0.0%) | 84 | 260 | – |
sign-25 |
SQIsign2D2 PDF | SQISign2Dsquare-Level3-eff_compressed |
226.27 M (0.0%) | 763.78 M (1.1%) | 174.05 M (7.1%) | 129 | 326 | – |
sign-25 |
SQIsign2D2 PDF | SQISign2Dsquare-Level3-eff_uncompressed |
116.22 M (0.0%) | 694.01 M (1.2%) | 156.24 M (7.9%) | 128 | 392 | – |
sign-25 |
SQIsign2D2 PDF | SQISign2Dsquare-Level3-sec_compressed |
286.29 M (0.0%) | 930.37 M (0.0%) | 202.27 M (0.0%) | 133 | 338 | – |
sign-25 |
SQIsign2D2 PDF | SQISign2Dsquare-Level3-sec_uncompressed |
152.02 M (0.0%) | 846.47 M (0.0%) | 182.01 M (0.0%) | 132 | 404 | – |
sign-25 |
SQIsign2D2 PDF | SQISign2Dsquare-Level5-eff_compressed |
1.70 G (0.0%) | 5.52 G (0.1%) | 1.20 G (0.8%) | 257 | 648 | – |
sign-25 |
SQIsign2D2 PDF | SQISign2Dsquare-Level5-eff_uncompressed |
886.76 M (0.0%) | 5.02 G (0.1%) | 1.05 G (0.9%) | 256 | 776 | – |
sign-25 |
SQIsign2D2 PDF | SQISign2Dsquare-Level5-sec_compressed |
2.04 G (0.0%) | 6.53 G (0.0%) | 1.44 G (0.0%) | 269 | 678 | – |
sign-25 |
SQIsign2D2 PDF | SQISign2Dsquare-Level5-sec_uncompressed |
1.10 G (0.0%) | 5.94 G (0.0%) | 1.24 G (0.0%) | 268 | 812 | – |
sign-26 |
SQIsign2D-push1/2 PDF | SQIsign2D-lvl1 |
524.97 M (0.0%) | 559.85 M (0.0%) | 131.84 M (0.0%) | 64 | 150 | – |
sign-26 |
SQIsign2D-push1/2 PDF | SQIsign2D-lvl2 |
1.69 G (0.0%) | 2.89 G (0.0%) | 400.18 M (0.0%) | 96 | 218 | – |
sign-26 |
SQIsign2D-push1/2 PDF | SQIsign2D-lvl3 ⚠ KAT MISMATCH |
3.96 G (0.0%) | 3.87 G (0.0%) | 941.11 M (0.0%) | 128 | 293 | KAT/output caveat; see candidate page |
sign-26 |
SQIsign2D-push1/2 PDF | SQIsign2D-lvl4 |
45.65 G (0.0%, n=20) | 40.22 G (0.0%, n=20) | 10.17 G (0.0%, n=95) | 262 | 593 | – |
sign-27 |
SQIsignTriangle PDF | SQIsignTriangle_lvl1 |
96.61 M (0.0%) | 185.52 M (3.0%) | 16.49 M (4.0%) | 65 | 204 | – |
sign-27 |
SQIsignTriangle PDF | SQIsignTriangle_lvl2 |
148.83 M (0.0%) | 343.83 M (6.1%) | 25.75 M (0.4%) | 81 | 255 | – |
sign-27 |
SQIsignTriangle PDF | SQIsignTriangle_lvl5 |
477.10 M (0.0%) | 913.34 M (4.4%) | 134.00 M (42%) | 129 | 408 | – |
sign-27 |
SQIsignTriangle PDF | SQIsignTriangle_lvl6 |
3.51 G (0.0%) | 9.03 G (2.1%) | 3.06 G (84%) | 257 | 816 | – |
sign-28 |
SYDO PDF | sydo_160f |
784.4 k (1.5%) | 265.41 M (3.3%) | 246.41 M (3.6%) | 80 | 6724 | mixed own/ICCS primitives |
sign-28 |
SYDO PDF | sydo_160s |
782.9 k (1.5%) | 684.75 M (8.6%) | 649.73 M (7.1%) | 80 | 5428 | mixed own/ICCS primitives |
sign-28 |
SYDO PDF | sydo_256f |
1.37 M (1.3%) | 564.11 M (4.1%) | 534.40 M (4.3%) | 128 | 17604 | mixed own/ICCS primitives |
sign-28 |
SYDO PDF | sydo_256s |
1.37 M (1.3%) | 1.48 G (8.4%) | 1.45 G (8.5%) | 128 | 14444 | mixed own/ICCS primitives |
sign-28 |
SYDO PDF | sydo_512f |
665.9 k (10%) | 1.60 G (11%) | 1.52 G (12%) | 246 | 67716 | mixed own/ICCS primitives |
sign-28 |
SYDO PDF | sydo_512s |
669.9 k (10%) | 3.71 G (28%) | 3.53 G (28%) | 246 | 56672 | mixed own/ICCS primitives |
sign-29 |
Tins PDF | Tins128 ⚠ KAT CRYPTOFAIL |
1.45 M (0.0%) | 1.18 G (21%) | 1.09 G (22%) | 51 | 3284 | KAT/output caveat; see candidate page |
sign-29 |
Tins PDF | Tins256 |
8.17 M (0.0%) | 4.26 G (39%) | 4.19 G (41%) | 98 | 13012 | – |
sign-29 |
Tins PDF | Tins512 |
52.77 M (0.0%) | 18.40 G (57%, n=55) | 18.24 G (57%, n=55) | 195 | 51187 | – |
sign-30 |
TRINE PDF | TRINE-128-Balanced |
8.49 M (68%) | 31.87 G (19%, n=30) | 20.38 G (19%, n=50) | 16004 | 3156 | – |
sign-30 |
TRINE PDF | TRINE-128-ShortSig |
16.64 M (40%) | 14.43 G (20%, n=60) | 7.05 G (19%) | 63920 | 1652 | – |
sign-30 |
TRINE PDF | TRINE-256-Balanced |
45.79 M (53%) | 330.30 G (10%, n=2) | 213.24 G (10%, n=3) | 96064 | 11712 | – |
sign-30 |
TRINE PDF | TRINE-256-ShortSig |
111.66 M (27%) | 134.44 G (10%, n=5) | 50.92 G (10%, n=15) | 384064 | 5968 | – |
sign-30 |
TRINE PDF | TRINE-512-Balanced ⚠ KAT TIMEOUT |
862.57 M (61%) | 6234.95 G (3.0%, n=1) | 4120.90 G (3.0%, n=1) | 797290 | 46565 | KAT/output caveat; see candidate page |
sign-30 |
TRINE PDF | TRINE-512-ShortSig |
1.85 G (30%) | 2508.52 G (3.1%, n=1) | 1150.27 G (3.1%, n=1) | 3188776 | 23672 | – |
sign-31 |
TSUOV PDF | TSUOV_128 |
9.63 M (78%) | 11.95 M (64%) | 10.50 M (71%) | 779 | 896 | – |
sign-31 |
TSUOV PDF | TSUOV_256 |
62.40 M (77%) | 78.30 M (61%) | 70.79 M (68%) | 2170 | 2412 | – |
sign-31 |
TSUOV PDF | TSUOV_512 |
801.46 M (81%) | 798.30 M (81%) | 785.82 M (83%) | 21319 | 2939 | – |
sign-32 |
UVW signature PDF | UVW-128 ⚠ KAT CRYPTOFAIL |
61.26 G (0.0%, n=15) | 21.01 G (0.0%, n=65) | 225.85 M (2.1%) | 5897612 | 1244 | KAT/output caveat; see candidate page |
sign-32 |
UVW signature PDF | UVW-256 ⚠ KAT CRYPTOFAIL |
837.91 G (0.0%, n=1) | 185.89 G (0.0%, n=3) | 927.11 M (0.6%) | 23040012 | 2444 | KAT/output caveat; see candidate page |
sign-32 |
UVW signature PDF | UVW-512 ⚠ KAT CRYPTOFAIL |
10404.84 G (0.0%, n=1) | 1564.34 G (0.0%, n=1) | 4.17 G (0.2%) | 95160012 | 4956 | KAT/output caveat; see candidate page |
sign-33 |
VDOO: Vinegar-Diagonal-Oil-Oil PDF | vdoo_128 |
962.71 M (0.0%) | 180.66 M (0.0%) | 1.80 M (0.3%) | 330855 | 85 | – |
sign-33 |
VDOO: Vinegar-Diagonal-Oil-Oil PDF | vdoo_256 |
19.99 G (0.0%, n=50) | 194.82 M (0.0%) | 1.99 M (0.4%) | 4289250 | 316 | – |
sign-33 |
VDOO: Vinegar-Diagonal-Oil-Oil PDF | vdoo_512 |
128.85 G (0.0%, n=5) | 1.33 G (0.0%) | 4.17 M (0.3%) | 20229300 | 471 | – |
sign-34 |
YuanYang.DSA PDF | yuanyang-512 |
13.52 M (0.0%) | 6.71 M (2.4%) | 182.2 k (65%) | 738 | 561 | – |
sign-34 |
YuanYang.DSA PDF | yuanyang-1024 |
16.58 M (0.0%) | 10.83 M (2.3%) | 400.8 k (59%) | 1570 | 1150 | – |
sign-34 |
YuanYang.DSA PDF | yuanyang-2048 |
71.05 M (0.0%) | 35.17 M (2.1%) | 835.6 k (57%) | 3330 | 2364 | – |
Key encapsulation
| id | algorithm | instance performance report | keygen cycles (sym %) | enc cycles (sym %) | dec cycles (sym %) | public key (B) | ciphertext (B) | notes |
|---|---|---|---|---|---|---|---|---|
kem-01 |
Aigis-Enc+ PDF | Aigis-enc1 ⚠ KAT BUILDFAIL |
– | – | – | 656 | 896 | KAT/output caveat; see candidate page |
kem-01 |
Aigis-Enc+ PDF | Aigis-enc2 ⚠ KAT BUILDFAIL |
– | – | – | 1312 | 1664 | KAT/output caveat; see candidate page |
kem-01 |
Aigis-Enc+ PDF | Aigis-enc3 ⚠ KAT BUILDFAIL |
– | – | – | 2624 | 3584 | KAT/output caveat; see candidate page |
kem-02 |
Amoeba PDF | Amoeba128 |
329.5 k (81%) | 448.5 k (79%) | 492.2 k (73%) | 784 | 1047 | – |
kem-02 |
Amoeba PDF | Amoeba192 |
448.4 k (80%) | 622.2 k (79%) | 689.0 k (71%) | 1144 | 1581 | – |
kem-02 |
Amoeba PDF | Amoeba256 |
541.3 k (79%) | 721.2 k (76%) | 808.7 k (68%) | 1648 | 1833 | – |
kem-02 |
Amoeba PDF | Amoeba384 |
799.6 k (79%) | 1.07 M (76%) | 1.21 M (67%) | 2440 | 2769 | – |
kem-02 |
Amoeba PDF | Amoeba512 |
1.05 M (78%) | 1.40 M (75%) | 1.59 M (66%) | 3520 | 3914 | – |
kem-03 |
BAG-Loong PDF | BAG-Loong-128 |
48.72 M (78%) | 49.37 M (82%) | 88.21 M (75%) | 2500 | 3071 | – |
kem-03 |
BAG-Loong PDF | BAG-Loong-256 |
125.94 M (55%) | 111.06 M (66%) | 214.51 M (60%) | 6597 | 8400 | – |
kem-03 |
BAG-Loong PDF | BAG-Loong-384 |
279.28 M (52%) | 228.43 M (63%) | 438.21 M (61%) | 12152 | 15112 | – |
kem-03 |
BAG-Loong PDF | BAG-Loong-512 |
468.28 M (42%) | 337.55 M (58%) | 637.67 M (58%) | 19043 | 21660 | – |
kem-04 |
BAG-Piglet PDF | bag_piglet_128 |
1.47 M (54%) | 3.12 M (18%) | 10.84 M (15%) | 522 | 1027 | – |
kem-04 |
BAG-Piglet PDF | bag_piglet_256 |
7.00 M (23%) | 22.44 M (5.2%) | 78.47 M (4.2%) | 1573 | 3097 | – |
kem-04 |
BAG-Piglet PDF | bag_piglet_384 |
19.41 M (33%) | 53.70 M (8.7%) | 207.37 M (6.4%) | 2778 | 5475 | – |
kem-04 |
BAG-Piglet PDF | bag_piglet_512 |
92.55 M (53%) | 205.64 M (16%) | 690.75 M (14%) | 4158 | 8204 | – |
kem-05 |
BIKE-MLThre PDF | BIKE_v2_128 |
1.04 G (0.0%) | 9.17 M (1.3%) | 51.48 M (0.2%) | 1541 | 1573 | mixed own/ICCS primitives |
kem-05 |
BIKE-MLThre PDF | BIKE_v2_256 |
11.94 G (0.0%, n=85) | 65.07 M (0.6%) | 361.68 M (0.1%) | 5122 | 5154 | mixed own/ICCS primitives |
kem-05 |
BIKE-MLThre PDF | BIKE_v2_512 |
160.30 G (0.0%, n=5) | 476.64 M (0.5%) | 2.58 G (0.1%) | 18751 | 18815 | mixed own/ICCS primitives |
kem-06 |
BRA PDF | BRA-128 ⚠ KAT BUILDFAIL |
– | – | – | 1078 | 2092 | KAT/output caveat; see candidate page |
kem-06 |
BRA PDF | BRA-256 ⚠ KAT BUILDFAIL |
– | – | – | 1735 | 3406 | KAT/output caveat; see candidate page |
kem-06 |
BRA PDF | BRA-512 ⚠ KAT BUILDFAIL |
– | – | – | 3573 | 7082 | KAT/output caveat; see candidate page |
kem-07 |
BRQC PDF | BRQC-128 ⚠ KAT BUILDFAIL |
– | – | – | 1954 | 3844 | KAT/output caveat; see candidate page |
kem-07 |
BRQC PDF | BRQC-256 ⚠ KAT BUILDFAIL |
– | – | – | 3345 | 6626 | KAT/output caveat; see candidate page |
kem-07 |
BRQC PDF | BRQC-512 ⚠ KAT BUILDFAIL |
– | – | – | 6562 | 13060 | KAT/output caveat; see candidate page |
kem-08 |
BW-KEM PDF | BW_KEM_C128 |
219.7 k (72%) | 248.0 k (69%) | 286.9 k (66%) | 784 | 768 | – |
kem-08 |
BW-KEM PDF | BW_KEM_C256 |
559.9 k (78%) | 570.2 k (78%) | 654.4 k (72%) | 1568 | 1440 | – |
kem-08 |
BW-KEM PDF | BW_KEM_C512 |
1.94 M (83%) | 1.97 M (83%) | 2.23 M (78%) | 3136 | 2944 | – |
kem-09 |
CheetahKEM PDF | Cheetah128 |
243.4 k (70%) | 318.8 k (66%) | 350.7 k (60%) | 832 | 864 | – |
kem-09 |
CheetahKEM PDF | Cheetah256 |
650.6 k (74%) | 749.3 k (70%) | 820.0 k (64%) | 1648 | 1728 | – |
kem-09 |
CheetahKEM PDF | Cheetah384 |
2.03 M (85%) | 2.16 M (83%) | 2.34 M (80%) | 2704 | 2832 | – |
kem-09 |
CheetahKEM PDF | Cheetah512 |
3.26 M (86%) | 3.41 M (84%) | 3.64 M (82%) | 3600 | 4032 | – |
kem-10 |
C-Multi-UR-AG PDF | CMultiURAG-128 ⚠ KAT BUILDFAIL |
– | – | – | 3866 | 7332 | KAT/output caveat; see candidate page |
kem-10 |
C-Multi-UR-AG PDF | CMultiURAG-256 ⚠ KAT BUILDFAIL |
– | – | – | 10780 | 15304 | KAT/output caveat; see candidate page |
kem-10 |
C-Multi-UR-AG PDF | CMultiURAG-512 ⚠ KAT BUILDFAIL |
– | – | – | 28866 | 40926 | KAT/output caveat; see candidate page |
kem-11 |
COMPASS-KEM PDF | COMPASS-KEM-128 |
1.51 M (97%) | 1.53 M (96%) | 1.55 M (94%) | 672 | 768 | – |
kem-11 |
COMPASS-KEM PDF | COMPASS-KEM-256 |
5.88 M (98%) | 5.90 M (97%) | 5.94 M (97%) | 1312 | 1472 | – |
kem-11 |
COMPASS-KEM PDF | COMPASS-KEM-384 |
3.53 M (93%) | 3.67 M (91%) | 3.75 M (88%) | 2144 | 2432 | – |
kem-11 |
COMPASS-KEM PDF | COMPASS-KEM-512 |
6.21 M (94%) | 6.37 M (93%) | 6.46 M (91%) | 2848 | 3264 | – |
kem-12 |
CTL Algorithm PDF | CTL-257-512 |
14.17 M (10%) | 49.2 k (14%) | 265.8 k (7.6%) | 521 | 473 | – |
kem-12 |
CTL Algorithm PDF | CTL-769-1024 |
70.49 M (2.9%) | 87.0 k (13%) | 539.7 k (6.4%) | 1230 | 1006 | – |
kem-12 |
CTL Algorithm PDF | CTL-3329-2048 |
2.82 G (0.1%) | 9.01 M (0.4%) | 75.43 M (0.3%) | 3009 | 2353 | – |
kem-13 |
DKEM (Ding Key Encapsulation) PDF | DKEM-128 |
173.4 k (70%) | 198.4 k (68%) | 220.3 k (62%) | 800 | 800 | – |
kem-13 |
DKEM (Ding Key Encapsulation) PDF | DKEM-256 |
531.5 k (74%) | 543.1 k (73%) | 589.8 k (69%) | 1568 | 1600 | – |
kem-13 |
DKEM (Ding Key Encapsulation) PDF | DKEM-512 |
1.86 M (85%) | 1.95 M (84%) | 2.05 M (81%) | 3392 | 3136 | – |
kem-14 |
DTRU PDF | DTRU-648 |
241.9 k (0.0%) | 129.9 k (30%) | 257.4 k (31%) | 972 | 729 | – |
kem-14 |
DTRU PDF | DTRU-648-PACK_PK |
245.3 k (0.0%) | 140.5 k (28%) | 268.2 k (29%) | 954 | 729 | – |
kem-14 |
DTRU PDF | DTRU-768 |
211.9 k (0.0%) | 150.1 k (41%) | 282.4 k (39%) | 1152 | 960 | – |
kem-14 |
DTRU PDF | DTRU-768-PACK_PK |
216.5 k (0.0%) | 162.9 k (38%) | 294.4 k (37%) | 1130 | 960 | – |
kem-14 |
DTRU PDF | DTRU-1024 |
256.9 k (0.0%) | 175.8 k (40%) | 341.4 k (37%) | 1536 | 1280 | – |
kem-14 |
DTRU PDF | DTRU-1024-PACK_PK |
261.5 k (0.0%) | 192.5 k (35%) | 358.2 k (36%) | 1506 | 1280 | – |
kem-14 |
DTRU PDF | DTRU-1536 |
341.5 k (0.0%) | 297.4 k (40%) | 564.2 k (37%) | 2304 | 1920 | – |
kem-14 |
DTRU PDF | DTRU-1536-PACK_PK |
349.6 k (0.0%) | 322.1 k (37%) | 589.7 k (35%) | 2259 | 1920 | – |
kem-14 |
DTRU PDF | DTRU-2048 |
583.0 k (0.0%) | 405.7 k (39%) | 775.2 k (35%) | 3072 | 2560 | – |
kem-14 |
DTRU PDF | DTRU-2048-PACK_PK |
595.0 k (0.0%) | 439.3 k (36%) | 806.2 k (33%) | 3012 | 2560 | – |
kem-14 |
DTRU PDF | DTRU-Light |
91.1 k (0.0%) | 75.3 k (35%) | 149.5 k (38%) | 640 | 512 | – |
kem-14 |
DTRU PDF | DTRU-Prime |
92.29 M (0.0%) | 264.6 k (18%) | 546.7 k (20%) | 1495 | 1359 | – |
kem-15 |
FLIT PDF | FLIT128_REF |
107.1 k (38%) | 100.3 k (60%) | 122.4 k (38%) | 615 | 512 | – |
kem-15 |
FLIT PDF | FLIT256_REF |
260.5 k (36%) | 203.9 k (50%) | 272.4 k (28%) | 1229 | 1024 | – |
kem-15 |
FLIT PDF | FLIT512_REF |
1.07 M (37%) | 766.5 k (61%) | 928.3 k (34%) | 3072 | 2304 | – |
kem-16 |
HARE PDF | HARE-128-kr |
4.13 M (4.5%) | 9.54 M (3.2%) | 14.16 M (3.0%) | 2629 | 4688 | – |
kem-16 |
HARE PDF | HARE-256-kr |
15.89 M (2.4%) | 34.95 M (1.7%) | 53.12 M (1.6%) | 6580 | 11790 | – |
kem-16 |
HARE PDF | HARE-384-kr |
47.23 M (1.7%) | 100.50 M (1.4%) | 150.39 M (1.6%) | 13157 | 23693 | – |
kem-16 |
HARE PDF | HARE-512-kr |
100.69 M (2.4%) | 210.06 M (1.6%) | 316.46 M (1.6%) | 21812 | 39294 | – |
kem-17 |
Hybrid Equivalent Punctured and Quasi-Cyclic PDF | hep-qc-1 |
213.62 M (90%) | 11.24 M (55%) | 227.93 M (90%) | 285889 | 4433 | – |
kem-17 |
Hybrid Equivalent Punctured and Quasi-Cyclic PDF | hep-qc-3 |
454.79 M (85%) | 33.33 M (54%) | 443.20 M (90%) | 866210 | 8978 | – |
kem-17 |
Hybrid Equivalent Punctured and Quasi-Cyclic PDF | hep-qc-5 |
775.55 M (80%) | 75.81 M (50%) | 751.25 M (87%) | 1852485 | 14421 | – |
kem-17 |
Hybrid Equivalent Punctured and Quasi-Cyclic PDF | hep-qc-7 |
3.57 G (55%) | 501.64 M (51%) | 3.04 G (77%) | 12644449 | 49297 | – |
kem-18 |
LoongKEM PDF | Loong128 |
5.81 M (83%) | 5.56 M (83%) | 5.64 M (82%) | 1472 | 1512 | – |
kem-18 |
LoongKEM PDF | Loong256 |
13.73 M (73%) | 13.82 M (84%) | 14.08 M (83%) | 3248 | 3520 | – |
kem-18 |
LoongKEM PDF | Loong384 |
43.04 M (89%) | 43.53 M (88%) | 43.73 M (88%) | 6444 | 6680 | – |
kem-18 |
LoongKEM PDF | Loong512 |
71.33 M (88%) | 71.52 M (87%) | 72.30 M (86%) | 10640 | 10848 | – |
kem-19 |
Lore PDF | Lore-SM3-L1 |
218.6 k (76%) | 324.1 k (72%) | 364.8 k (64%) | 610 | 706 | hash backend varies by instance |
kem-19 |
Lore PDF | Lore-SM3-L2 |
882.2 k (68%) | 1.09 M (62%) | 1.25 M (54%) | 1186 | 1282 | hash backend varies by instance |
kem-19 |
Lore PDF | Lore-SM3-L3 |
1.94 M (68%) | 2.23 M (63%) | 2.43 M (59%) | 1954 | 2114 | hash backend varies by instance |
kem-19 |
Lore PDF | Lore-SM3-L4 |
4.42 M (71%) | 4.95 M (66%) | 5.40 M (61%) | 2914 | 3170 | hash backend varies by instance |
kem-20 |
MAMBA-Frost PDF | MAMBA-Frost-128 |
29.13 M (2.8%) | 34.64 M (3.7%) | 35.07 M (4.4%) | 5152 | 5192 | mixed own/ICCS primitives; default parameter set, used in ordered measurements |
kem-20 |
MAMBA-Frost PDF | MAMBA-Frost-192 |
85.02 M (1.7%) | 88.78 M (2.5%) | 89.54 M (3.0%) | 9712 | 9760 | mixed own/ICCS primitives; default parameter set, used in ordered measurements |
kem-20 |
MAMBA-Frost PDF | MAMBA-Frost-256 |
182.50 M (1.6%) | 195.71 M (2.1%) | 196.76 M (2.4%) | 16776 | 15552 | mixed own/ICCS primitives; default parameter set, used in ordered measurements |
kem-20 |
MAMBA-Frost PDF | MAMBA-Frost-384 |
407.04 M (1.1%) | 485.86 M (2.0%) | 488.43 M (2.2%) | 25096 | 37736 | mixed own/ICCS primitives; default parameter set, used in ordered measurements |
kem-20 |
MAMBA-Frost PDF | MAMBA-Frost-512 |
742.05 M (1.0%) | 741.58 M (2.6%) | 745.51 M (3.0%) | 36432 | 72944 | mixed own/ICCS primitives; default parameter set, used in ordered measurements |
kem-20 |
MAMBA-Frost PDF | MAMBA-Frost-CC-128 |
29.07 M (2.8%) | 34.67 M (3.7%) | 35.10 M (4.4%) | 5152 | 5192 | mixed own/ICCS primitives; compact-ciphertext variant, detailed measurement only |
kem-20 |
MAMBA-Frost PDF | MAMBA-Frost-CC-192 |
85.03 M (1.7%) | 88.88 M (2.5%) | 89.58 M (3.0%) | 9712 | 9760 | mixed own/ICCS primitives; compact-ciphertext variant, detailed measurement only |
kem-20 |
MAMBA-Frost PDF | MAMBA-Frost-CC-256 |
182.58 M (1.7%) | 195.74 M (2.1%) | 196.85 M (2.4%) | 16776 | 15552 | mixed own/ICCS primitives; compact-ciphertext variant, detailed measurement only |
kem-20 |
MAMBA-Frost PDF | MAMBA-Frost-CC-384 |
414.77 M (1.6%) | 454.92 M (1.7%) | 456.61 M (1.8%) | 37628 | 25204 | mixed own/ICCS primitives; compact-ciphertext variant, detailed measurement only |
kem-20 |
MAMBA-Frost PDF | MAMBA-Frost-CC-512 |
767.15 M (2.0%) | 729.13 M (1.9%) | 730.34 M (1.9%) | 72832 | 36544 | mixed own/ICCS primitives; compact-ciphertext variant, detailed measurement only |
kem-21 |
MAMBA-Viper PDF | MAMBA-Viper-128 |
174.9 k (55%) | 271.4 k (59%) | 319.1 k (57%) | 608 | 736 | – |
kem-21 |
MAMBA-Viper PDF | MAMBA-Viper-192 |
375.1 k (57%) | 506.2 k (57%) | 568.6 k (54%) | 992 | 1088 | – |
kem-21 |
MAMBA-Viper PDF | MAMBA-Viper-256 |
625.2 k (56%) | 781.4 k (55%) | 862.3 k (52%) | 1312 | 1472 | – |
kem-21 |
MAMBA-Viper PDF | MAMBA-Viper-384 |
1.83 M (57%) | 2.10 M (56%) | 2.23 M (53%) | 2496 | 2656 | – |
kem-21 |
MAMBA-Viper PDF | MAMBA-Viper-512 |
2.94 M (56%) | 3.29 M (55%) | 3.43 M (53%) | 3200 | 3456 | – |
kem-22 |
Mithril PDF | Mithril-128 |
271.6 k (48%) | 294.6 k (47%) | 317.1 k (43%) | 944 | 928 | – |
kem-22 |
Mithril PDF | Mithril-256 |
647.1 k (36%) | 736.9 k (32%) | 828.5 k (29%) | 1648 | 1680 | – |
kem-22 |
Mithril PDF | Mithril-512 |
1.95 M (26%) | 2.28 M (22%) | 2.66 M (20%) | 3056 | 3504 | – |
kem-23 |
Mito PDF | Mito-1-128 |
7.89 M (0.4%) | 12.99 M (1.5%) | 18.38 M (2.4%) | 3908 | 5796 | – |
kem-23 |
Mito PDF | Mito-1-256 |
22.94 M (0.1%) | 38.08 M (1.0%) | 53.97 M (1.7%) | 8522 | 12714 | – |
kem-23 |
Mito PDF | Mito-1-512 |
139.20 M (0.0%) | 231.64 M (0.5%) | 326.19 M (0.8%) | 26630 | 39878 | – |
kem-23 |
Mito PDF | Mito-1-E-128 |
7.30 M (0.5%) | 12.02 M (1.6%) | 16.99 M (2.5%) | 3720 | 5512 | – |
kem-23 |
Mito PDF | Mito-1-E-256 |
24.34 M (0.1%) | 40.39 M (0.9%) | 57.10 M (1.5%) | 8130 | 12130 | – |
kem-23 |
Mito PDF | Mito-1-E-512 |
133.45 M (0.0%) | 222.03 M (0.5%) | 312.57 M (0.8%) | 25674 | 38442 | – |
kem-23 |
Mito PDF | Mito-2-E-128 |
10.44 M (0.3%) | 14.94 M (1.7%) | 19.93 M (2.6%) | 5192 | 6440 | – |
kem-23 |
Mito PDF | Mito-2-E-256 |
32.59 M (0.1%) | 47.04 M (1.0%) | 62.44 M (1.7%) | 10828 | 13484 | – |
kem-23 |
Mito PDF | Mito-2-E-512 |
208.48 M (0.0%) | 301.12 M (0.5%) | 396.73 M (0.8%) | 32712 | 40840 | – |
kem-24 |
MORNING-Scabbard PDF | scabbard128 |
702.7 k (68%) | 736.4 k (67%) | 741.5 k (65%) | 736 | 760 | – |
kem-24 |
MORNING-Scabbard PDF | scabbard256 |
1.69 M (50%) | 1.81 M (49%) | 1.87 M (46%) | 1616 | 1648 | – |
kem-24 |
MORNING-Scabbard PDF | scabbard512 |
5.05 M (49%) | 5.50 M (47%) | 5.70 M (44%) | 2880 | 3072 | – |
kem-25 |
NEV PDF | NEV_512_769_C_ICCS |
68.3 k (45%) | 51.0 k (49%) | 55.3 k (23%) | 615 | 512 | alternative parameter set, detailed measurement only |
kem-25 |
NEV PDF | NEV_512_769_ICCS |
68.0 k (45%) | 57.1 k (56%) | 58.0 k (33%) | 615 | 615 | alternative parameter set, detailed measurement only |
kem-25 |
NEV PDF | NEV_512_1409_ICCS |
95.8 k (51%) | 71.5 k (68%) | 67.5 k (51%) | 672 | 672 | recommended R set, used in ordered measurements |
kem-25 |
NEV PDF | NEV_512_3329_ICCS |
136.6 k (70%) | 121.4 k (78%) | 114.3 k (69%) | 768 | 768 | alternative parameter set, detailed measurement only |
kem-25 |
NEV PDF | NEV_1024_769_C_ICCS |
147.5 k (38%) | 109.1 k (54%) | 125.3 k (26%) | 1229 | 1024 | alternative parameter set, detailed measurement only |
kem-25 |
NEV PDF | NEV_1024_769_ICCS |
148.1 k (37%) | 118.6 k (58%) | 128.1 k (34%) | 1229 | 1229 | alternative parameter set, detailed measurement only |
kem-25 |
NEV PDF | NEV_1024_1409_ICCS |
189.6 k (40%) | 130.1 k (64%) | 133.5 k (42%) | 1344 | 1344 | recommended R set, used in ordered measurements |
kem-25 |
NEV PDF | NEV_1024_3329_ICCS |
220.0 k (56%) | 178.7 k (74%) | 174.2 k (58%) | 1536 | 1536 | alternative parameter set, detailed measurement only |
kem-25 |
NEV PDF | NEV_2048_769_C_ICCS |
486.2 k (51%) | 293.0 k (62%) | 287.7 k (26%) | 2458 | 2048 | alternative parameter set, detailed measurement only |
kem-25 |
NEV PDF | NEV_2048_769_ICCS |
487.9 k (51%) | 326.1 k (66%) | 306.4 k (36%) | 2458 | 2458 | alternative parameter set, detailed measurement only |
kem-25 |
NEV PDF | NEV_2048_1409_ICCS |
526.7 k (39%) | 387.4 k (70%) | 357.8 k (43%) | 2688 | 2688 | recommended R set, used in ordered measurements |
kem-25 |
NEV PDF | NEV_2048_3329_ICCS |
597.8 k (60%) | 476.6 k (80%) | 415.5 k (59%) | 3072 | 3072 | alternative parameter set, detailed measurement only |
kem-26 |
NSS-HQC PDF | HQC-128 |
26.00 M (??%) | 46.47 M (??%) | 92.01 M (??%) | 3713 | 5185 | own symmetric primitives; placeholder share unavailable |
kem-26 |
NSS-HQC PDF | HQC-256 |
76.97 M (??%) | 139.39 M (??%) | 246.34 M (??%) | 6844 | 9084 | own symmetric primitives; placeholder share unavailable |
kem-26 |
NSS-HQC PDF | HQC-384 |
258.98 M (??%) | 469.63 M (??%) | 775.08 M (??%) | 15371 | 18571 | own symmetric primitives; placeholder share unavailable |
kem-26 |
NSS-HQC PDF | HQC-512 |
614.26 M (??%) | 1.12 G (??%) | 1.80 G (??%) | 27302 | 31462 | own symmetric primitives; placeholder share unavailable |
kem-27 |
NTRE Key Encapsulation Mechanism PDF | NTRE-128 |
109.4 k (34%) | 82.1 k (65%) | 73.4 k (44%) | 972 | 972 | – |
kem-27 |
NTRE Key Encapsulation Mechanism PDF | NTRE-256 |
188.4 k (37%) | 150.4 k (67%) | 136.9 k (45%) | 1944 | 1944 | – |
kem-27 |
NTRE Key Encapsulation Mechanism PDF | NTRE-512 |
374.5 k (32%) | 339.0 k (66%) | 326.6 k (47%) | 3456 | 3456 | – |
kem-28 |
OAEP-NTRU PDF | OAEP-NTRU-648 |
138.5 k (16%) | 96.2 k (63%) | 74.9 k (52%) | 1053 | 1085 | – |
kem-28 |
OAEP-NTRU PDF | OAEP-NTRU-1296 |
359.4 k (30%) | 321.7 k (74%) | 216.0 k (61%) | 2430 | 2494 | – |
kem-28 |
OAEP-NTRU PDF | OAEP-NTRU-2592 |
872.7 k (26%) | 873.4 k (80%) | 661.7 k (71%) | 4860 | 4988 | – |
kem-29 |
Polar-KEM PDF | PolarKEM-128 |
158.4 k (94%) | 495.7 k (94%) | 985.7 k (96%) | 1024 | 768 | – |
kem-29 |
Polar-KEM PDF | PolarKEM-256 |
309.4 k (97%) | 619.8 k (92%) | 1.25 M (94%) | 2048 | 1280 | – |
kem-29 |
Polar-KEM PDF | PolarKEM-512 |
612.2 k (98%) | 1.23 M (92%) | 2.46 M (94%) | 4096 | 2304 | – |
kem-30 |
PolarLAC PDF | POLARLAC-128 |
134.8 k (71%) | 176.6 k (76%) | 213.3 k (69%) | 530 | 640 | – |
kem-30 |
PolarLAC PDF | POLARLAC-256 |
236.6 k (70%) | 327.6 k (73%) | 407.6 k (65%) | 1060 | 1280 | – |
kem-30 |
PolarLAC PDF | POLARLAC-512 |
826.9 k (81%) | 1.12 M (81%) | 1.34 M (75%) | 2116 | 2560 | bounded-query alternative, detailed measurement only |
kem-30 |
PolarLAC PDF | POLARLAC-512-Star |
809.2 k (82%) | 1.10 M (83%) | 1.31 M (78%) | 2522 | 2970 | recommended for unrestricted queries, used in ordered measurements |
kem-30 |
PolarLAC PDF | POLARLAC-Light |
124.4 k (69%) | 162.8 k (74%) | 197.7 k (67%) | 530 | 608 | – |
kem-31 |
QIMEN-PIKE PDF | NGCC-1 |
348.67 M (??%) | 112.40 M (??%) | 173.12 M (??%) | 389 | 602 | own symmetric primitives; placeholder share unavailable |
kem-31 |
QIMEN-PIKE PDF | NGCC-2 |
1.13 G (??%) | 354.46 M (??%) | 551.85 M (??%) | 592 | 882 | own symmetric primitives; placeholder share unavailable |
kem-31 |
QIMEN-PIKE PDF | NGCC-3 |
7.20 G (??%) | 2.69 G (??%) | 4.12 G (??%) | 1198 | 1746 | own symmetric primitives; placeholder share unavailable |
kem-32 |
Quasi-Cyclic Twisted McEliece Key Encapsulation Mechanism PDF | QCTM128 |
55.69 G (??%, n=40) | 13.43 M (??%) | 4.98 G (??%) | 167987 | 640 | own symmetric primitives; placeholder share unavailable |
kem-32 |
Quasi-Cyclic Twisted McEliece Key Encapsulation Mechanism PDF | QCTM256 |
119.50 G (??%, n=5) | 43.27 M (??%) | 29.85 G (??%, n=30) | 595662 | 1153 | own symmetric primitives; placeholder share unavailable |
kem-32 |
Quasi-Cyclic Twisted McEliece Key Encapsulation Mechanism PDF | QCTM512 |
697.86 G (??%, n=1) | 163.01 M (??%) | 201.48 G (??%, n=4) | 2374727 | 2264 | own symmetric primitives; placeholder share unavailable |
kem-33 |
QUBE PDF | qube-128 ⚠ KAT MISMATCH |
551.6 k (57%) | 600.8 k (62%) | 1.03 M (52%) | 3294 | 3287 | KAT/output caveat; see candidate page |
kem-33 |
QUBE PDF | qube-192 ⚠ KAT NOKAT |
1.25 M (50%) | 1.32 M (57%) | 2.36 M (45%) | 6364 | 6362 | KAT/output caveat; see candidate page |
kem-33 |
QUBE PDF | qube-256 ⚠ KAT MISMATCH |
2.55 M (49%) | 2.60 M (55%) | 4.78 M (40%) | 10446 | 10423 | KAT/output caveat; see candidate page |
kem-33 |
QUBE PDF | qube-384 ⚠ KAT MISMATCH |
6.15 M (41%) | 6.26 M (51%) | 11.10 M (44%) | 20738 | 20633 | KAT/output caveat; see candidate page |
kem-33 |
QUBE PDF | qube-512 ⚠ KAT MISMATCH |
16.78 M (54%) | 16.76 M (63%) | 25.27 M (53%) | 34028 | 33846 | KAT/output caveat; see candidate page |
kem-34 |
Rudraksh2 PDF | lwekem128 |
2.89 M (94%) | 2.87 M (94%) | 2.92 M (93%) | 880 | 912 | – |
kem-34 |
Rudraksh2 PDF | lwekem256 |
5.84 M (94%) | 5.82 M (94%) | 5.94 M (93%) | 1760 | 1728 | – |
kem-34 |
Rudraksh2 PDF | lwekem512 |
18.83 M (97%) | 18.80 M (98%) | 18.94 M (97%) | 3392 | 3552 | – |
kem-35 |
Scloud+ PDF | Scloudplus-128-SM3-packed10 |
21.87 M (93%) | 22.02 M (94%) | 21.80 M (93%) | 6096 | 6160 | hash backend varies by instance |
kem-35 |
Scloud+ PDF | Scloudplus-192-SM3-packed10 |
41.42 M (92%) | 41.56 M (93%) | 41.12 M (93%) | 11456 | 12645 | hash backend varies by instance |
kem-35 |
Scloud+ PDF | Scloudplus-256-SM3-packed10 |
85.24 M (91%) | 84.50 M (92%) | 84.26 M (92%) | 16296 | 17925 | hash backend varies by instance |
kem-35 |
Scloud+ PDF | Scloudplus-384-SM3-packed10 |
169.39 M (89%) | 167.48 M (91%) | 166.27 M (90%) | 33296 | 33600 | hash backend varies by instance |
kem-35 |
Scloud+ PDF | Scloudplus-512-SM3-packed10 |
358.53 M (87%) | 347.69 M (91%) | 346.63 M (90%) | 48016 | 48320 | hash backend varies by instance |
kem-36 |
TRIKE PDF | TRIKE-2 |
63.90 M (0.0%) | 6.65 M (6.3%) | 35.18 M (1.2%) | 1980 | 3928 | – |
kem-36 |
TRIKE PDF | TRIKE-5 |
474.51 M (0.0%) | 45.93 M (2.0%) | 133.26 M (0.7%) | 4453 | 8874 | – |
kem-36 |
TRIKE PDF | TRIKE-7 |
1.54 G (0.0%) | 133.31 M (1.3%) | 405.06 M (0.4%) | 8776 | 17488 | – |
kem-36 |
TRIKE PDF | TRIKE-9 |
1.94 G (0.0%) | 136.51 M (2.1%) | 796.85 M (0.4%) | 14320 | 28576 | – |
kem-37 |
TriQ-KEM PDF | TriQ-KEM-128 |
2.51 M (17%) | 4.59 M (9.3%) | 6.85 M (7.0%) | 2054 | 4086 | – |
kem-37 |
TriQ-KEM PDF | TriQ-KEM-256 |
13.68 M (6.1%) | 26.90 M (4.3%) | 39.89 M (3.5%) | 6328 | 12472 | – |
kem-37 |
TriQ-KEM PDF | TriQ-KEM-384 |
36.83 M (4.2%) | 72.73 M (2.9%) | 108.65 M (2.8%) | 12255 | 24335 | – |
kem-37 |
TriQ-KEM PDF | TriQ-KEM-512 |
80.05 M (5.4%) | 157.68 M (3.8%) | 233.75 M (3.3%) | 19768 | 39320 | – |
kem-38 |
UVW Key Encapsulation Mechanism PDF | UVW-KEM-128 |
677.81 M (0.0%) | 534.0 k (25%) | 1.47 G (0.0%) | 208013 | 1032 | – |
kem-38 |
UVW Key Encapsulation Mechanism PDF | UVW-KEM-256 |
5.22 G (0.0%) | 1.27 M (19%) | 9.49 G (0.0%) | 911645 | 2199 | – |
kem-38 |
UVW Key Encapsulation Mechanism PDF | UVW-KEM-512 |
41.20 G (0.0%, n=20) | 19.79 M (3.5%) | 66.64 G (0.0%, n=15) | 4001850 | 4820 | – |
kem-39 |
Weaver PDF | WeaverKEM-128 |
496.5 k (85%) | 533.0 k (84%) | 548.2 k (82%) | 752 | 816 | – |
kem-39 |
Weaver PDF | WeaverKEM-256 |
756.7 k (80%) | 837.3 k (77%) | 838.4 k (74%) | 1312 | 1536 | – |
kem-39 |
Weaver PDF | WeaverKEM-512 |
2.53 M (86%) | 2.90 M (82%) | 2.95 M (79%) | 2880 | 3392 | – |
kem-40 |
YuanYang.KEM PDF | yuanyang-512 |
405.7 k (9.2%) | 239.7 k (47%) | 325.0 k (26%) | 736 | 656 | – |
kem-40 |
YuanYang.KEM PDF | yuanyang-1024 |
867.0 k (8.2%) | 411.7 k (43%) | 603.2 k (19%) | 1568 | 1344 | – |
kem-40 |
YuanYang.KEM PDF | yuanyang-2048 |
1.63 M (8.6%) | 805.3 k (39%) | 1.23 M (15%) | 3328 | 2880 | – |
kem-41 |
ZEN PDF | ZEN_128 |
153.2 k (41%) | 122.1 k (74%) | 145.3 k (62%) | 615 | 512 | – |
kem-41 |
ZEN PDF | ZEN_256 |
263.3 k (50%) | 152.4 k (58%) | 211.2 k (40%) | 1229 | 1024 | – |
kem-41 |
ZEN PDF | ZEN_512 |
735.6 k (58%) | 425.3 k (64%) | 569.0 k (45%) | 2458 | 2048 | – |
Key exchange
| id | algorithm | instance performance report | exchange cycles (sym %) | bandwidth (bytes) | notes |
|---|---|---|---|---|---|
kex-01 |
ADKEX (Authenticated Ding Key Exchange) PDF | ADKEX-128 |
1.33 M (69%) | 3200 | – |
kex-01 |
ADKEX (Authenticated Ding Key Exchange) PDF | ADKEX-256 |
3.64 M (73%) | 6336 | – |
kex-01 |
ADKEX (Authenticated Ding Key Exchange) PDF | ADKEX-512 |
12.84 M (84%) | 13056 | – |
kex-02 |
AFS-KEX PDF | AFS_KEX_C128 |
2.38 M (69%) | 4704 | – |
kex-02 |
AFS-KEX PDF | AFS_KEX_C256 |
5.84 M (76%) | 9216 | – |
kex-02 |
AFS-KEX PDF | AFS_KEX_C512 |
20.05 M (81%) | 18560 | – |
kex-03 |
CreTAKE PDF | CreTAKE-K2K-PLAC128 |
1.69 M (74%) | 3510 | – |
kex-03 |
CreTAKE PDF | CreTAKE-K2K-PLAC256 |
3.39 M (74%) | 7020 | – |
kex-03 |
CreTAKE PDF | CreTAKE-K2K-PLAC512 |
12.12 M (82%) | 13516 | – |
kex-03 |
CreTAKE PDF | CreTAKE-K2K-PLAC512Star |
12.13 M (84%) | 15964 | – |
kex-03 |
CreTAKE PDF | CreTAKE-K2K-ZEN128 |
1.43 M (59%) | 3381 | – |
kex-03 |
CreTAKE PDF | CreTAKE-K2K-ZEN256 |
2.54 M (60%) | 6759 | – |
kex-03 |
CreTAKE PDF | CreTAKE-K2K-ZEN512 |
7.65 M (68%) | 13518 | – |
kex-03 |
CreTAKE PDF | CreTAKE-K2S-PLAC128-BiT128 |
3.62 M (72%) | 4892 | – |
kex-03 |
CreTAKE PDF | CreTAKE-K2S-PLAC256-BiT256 |
7.19 M (75%) | 10280 | – |
kex-03 |
CreTAKE PDF | CreTAKE-K2S-PLAC512-BiT512 |
25.06 M (79%) | 21103 | – |
kex-03 |
CreTAKE PDF | CreTAKE-K2S-ZEN128-BiT128 |
3.40 M (69%) | 4806 | – |
kex-03 |
CreTAKE PDF | CreTAKE-K2S-ZEN256-BiT256 |
6.80 M (72%) | 10106 | – |
kex-03 |
CreTAKE PDF | CreTAKE-K2S-ZEN512-BiT512 |
22.34 M (76%) | 20763 | – |
kex-03 |
CreTAKE PDF | CreTAKE-S2K-BiT128-PLAC128 |
3.66 M (72%) | 4892 | – |
kex-03 |
CreTAKE PDF | CreTAKE-S2K-BiT128-ZEN128 |
3.56 M (68%) | 4806 | – |
kex-03 |
CreTAKE PDF | CreTAKE-S2K-BiT256-PLAC256 |
7.41 M (74%) | 10280 | – |
kex-03 |
CreTAKE PDF | CreTAKE-S2K-BiT256-ZEN256 |
6.95 M (71%) | 10106 | – |
kex-03 |
CreTAKE PDF | CreTAKE-S2K-BiT512-PLAC512 |
27.37 M (78%) | 21103 | – |
kex-03 |
CreTAKE PDF | CreTAKE-S2K-BiT512-ZEN512 |
23.45 M (75%) | 20763 | – |
kex-03 |
CreTAKE PDF | CreTAKE-S2S-BiT128-ePLAC128 |
5.73 M (72%) | 6274 | – |
kex-03 |
CreTAKE PDF | CreTAKE-S2S-BiT128-eZEN128 |
5.67 M (70%) | 6231 | – |
kex-03 |
CreTAKE PDF | CreTAKE-S2S-BiT256-ePLAC256 |
11.34 M (74%) | 13540 | – |
kex-03 |
CreTAKE PDF | CreTAKE-S2S-BiT256-eZEN256 |
11.27 M (73%) | 13453 | – |
kex-03 |
CreTAKE PDF | CreTAKE-S2S-BiT512-ePLAC512 |
38.72 M (78%) | 28178 | – |
kex-03 |
CreTAKE PDF | CreTAKE-S2S-BiT512-eZEN512 |
41.77 M (77%) | 28008 | – |
kex-04 |
DKEX (Ding Key Exchange) PDF | DKEX-128 |
3.17 M (14%) | 9032 | mixed own/ICCS primitives |
kex-04 |
DKEX (Ding Key Exchange) PDF | DKEX-256 |
7.27 M (16%) | 17574 | mixed own/ICCS primitives |
kex-04 |
DKEX (Ding Key Exchange) PDF | DKEX-512 |
10.57 M (40%) | 20902 | mixed own/ICCS primitives |
kex-05 |
Loom PDF | LoomKEX-128 |
29.95 M (3.2%) | 6566 | – |
kex-05 |
Loom PDF | LoomKEX-256 |
37.19 M (3.6%) | 11610 | – |
kex-05 |
Loom PDF | LoomKEX-512 |
79.08 M (6.1%) | 23466 | – |
kex-06 |
MAMBA-NIKE PDF | MAMBA-NIKE-128 |
6.83 M (??%) | 2752 | own symmetric primitives; placeholder share unavailable |
kex-06 |
MAMBA-NIKE PDF | MAMBA-NIKE-192 |
6.85 M (??%) | 2880 | own symmetric primitives; placeholder share unavailable |
kex-06 |
MAMBA-NIKE PDF | MAMBA-NIKE-256 |
6.90 M (??%) | 2880 | own symmetric primitives; placeholder share unavailable |
kex-06 |
MAMBA-NIKE PDF | MAMBA-NIKE-384 |
14.48 M (??%) | 6208 | own symmetric primitives; placeholder share unavailable |
kex-06 |
MAMBA-NIKE PDF | MAMBA-NIKE-512 |
14.56 M (??%) | 6208 | own symmetric primitives; placeholder share unavailable |
kex-07 |
NEV-AKE PDF | NEV_AKE_512_769 |
668.8 k (56%) | 3690 | alternative parameter set, detailed measurement only |
kex-07 |
NEV-AKE PDF | NEV_AKE_512_769_C |
629.5 k (53%) | 3484 | alternative parameter set, detailed measurement only |
kex-07 |
NEV-AKE PDF | NEV_AKE_512_1409 |
825.0 k (64%) | 4032 | recommended R set, used in ordered measurements |
kex-07 |
NEV-AKE PDF | NEV_AKE_1024_769 |
1.35 M (53%) | 7374 | alternative parameter set, detailed measurement only |
kex-07 |
NEV-AKE PDF | NEV_AKE_1024_769_C |
1.29 M (49%) | 6964 | alternative parameter set, detailed measurement only |
kex-07 |
NEV-AKE PDF | NEV_AKE_1024_1409 |
1.55 M (56%) | 8064 | recommended R set, used in ordered measurements |
kex-07 |
NEV-AKE PDF | NEV_AKE_2048_769 |
4.18 M (63%) | 14748 | alternative parameter set, detailed measurement only |
kex-07 |
NEV-AKE PDF | NEV_AKE_2048_769_C |
3.91 M (60%) | 13928 | alternative parameter set, detailed measurement only |
kex-07 |
NEV-AKE PDF | NEV_AKE_2048_1409 |
4.69 M (61%) | 16128 | recommended R set, used in ordered measurements |
kex-08 |
NIIKE PDF | NIIKE-lv128 |
53.18 G (??%, n=15) | 8320 | own symmetric primitives; placeholder share unavailable |
kex-08 |
NIIKE PDF | NIIKE-lv256 |
848.72 G (??%, n=1) | 17920 | own symmetric primitives; placeholder share unavailable |
kex-09 |
TriQ-KEX PDF | TriQ-KEX-128 |
37.66 M (11%) | 18436 | – |
kex-09 |
TriQ-KEX PDF | TriQ-KEX-256 |
217.58 M (5.3%) | 56416 | – |
kex-09 |
TriQ-KEX PDF | TriQ-KEX-384 |
602.41 M (6.3%) | 109786 | – |
kex-09 |
TriQ-KEX PDF | TriQ-KEX-512 |
1.28 G (5.6%) | 177280 | – |
ICCS hash helpers
The ICCS placeholder functions from api/auxfunc.c, built with the reference flags and timed as hash instances at the guide's S1–S8 message lengths (mean cycles per call). pseudohash exists only with 512-, 768- and 1024-bit output; pseudoXOF is given at every digest width of a hash candidate.
| ICCS helper | output bits | 32 B | 128 B | 512 B | 1 KiB | 4 KiB | 8 KiB | 16 KiB | 64 KiB | cycles/byte (64 KiB) |
|---|---|---|---|---|---|---|---|---|---|---|
sm3hash |
256 | 1382 | 3976 | 11.6 k | 21.9 k | 82.4 k | 167.0 k | 325.3 k | 1.30 M | 19.8 |
pseudohash |
512 | 9510 | 14.6 k | 30.0 k | 50.2 k | 174.1 k | 334.8 k | 663.6 k | 2.63 M | 40.1 |
pseudohash |
768 | 17.5 k | 22.7 k | 38.1 k | 58.6 k | 181.4 k | 343.1 k | 672.0 k | 2.64 M | 40.3 |
pseudohash |
1024 | 31.1 k | 36.2 k | 51.2 k | 71.5 k | 193.8 k | 358.2 k | 681.6 k | 2.64 M | 40.2 |
pseudoXOF |
256 | 1427 | 4063 | 11.6 k | 21.7 k | 83.5 k | 165.6 k | 326.0 k | 1.32 M | 20.1 |
pseudoXOF |
384 | 2854 | 7910 | 23.1 k | 43.4 k | 167.0 k | 327.4 k | 665.9 k | 2.60 M | 39.7 |
pseudoXOF |
512 | 2810 | 7972 | 23.1 k | 43.5 k | 165.2 k | 329.4 k | 651.9 k | 2.64 M | 40.3 |
pseudoXOF |
768 | 4199 | 12.0 k | 35.0 k | 66.1 k | 247.7 k | 491.1 k | 977.8 k | 3.93 M | 60.0 |
pseudoXOF |
1024 | 5618 | 15.7 k | 46.2 k | 87.2 k | 330.2 k | 654.7 k | 1.30 M | 5.20 M | 79.4 |
pseudoXOF |
1152 | 6940 | 19.6 k | 58.0 k | 108.5 k | 412.7 k | 818.4 k | 1.63 M | 6.50 M | 99.2 |
pseudoXOF |
1280 | 6939 | 19.6 k | 58.2 k | 108.6 k | 412.7 k | 818.5 k | 1.63 M | 6.57 M | 100.3 |
pseudoXOF |
2048 | 11.1 k | 31.4 k | 92.3 k | 175.3 k | 660.3 k | 1.32 M | 2.61 M | 10.52 M | 160.6 |
Hash functions
| id | algorithm | instance performance report | 32 B cycles (× pseudoXOF) | 1 KiB cycles (× pseudoXOF) | 64 KiB cycles (× pseudoXOF) | notes |
|---|---|---|---|---|---|---|
hash-01 |
AFS-TrEDM PDF | AFS-TrEDM-512 |
14.0 k (4.97×) | 125.0 k (2.88×) | 7.01 M (2.65×) | – |
hash-01 |
AFS-TrEDM PDF | AFS-TrEDM-768 |
23.0 k (5.48×) | 249.3 k (3.77×) | 15.48 M (3.93×) | – |
hash-01 |
AFS-TrEDM PDF | AFS-TrEDM-1024 |
27.8 k (4.95×) | 463.5 k (5.32×) | 27.94 M (5.37×) | – |
hash-02 |
AXIS: Advanced eXpandable Iterative Stream-based Hash PDF | AXIS-512 |
50.7 k (18.03×) | 72.9 k (1.68×) | 1.51 M (0.57×) | – |
hash-02 |
AXIS: Advanced eXpandable Iterative Stream-based Hash PDF | AXIS-768 |
64.3 k (15.32×) | 131.5 k (1.99×) | 4.51 M (1.15×) | – |
hash-02 |
AXIS: Advanced eXpandable Iterative Stream-based Hash PDF | AXIS-1024 |
84.8 k (15.09×) | 120.9 k (1.39×) | 2.46 M (0.47×) | – |
hash-03 |
C Hash PDF | CHash_512 |
210.0 k (74.75×) | 1.47 M (33.94×) | 75.29 M (28.51×) | 16-byte secret-indexed S-box (lead) |
hash-03 |
C Hash PDF | CHash_1024 |
209.9 k (37.37×) | 1.48 M (16.92×) | 75.33 M (14.48×) | 16-byte secret-indexed S-box (lead) |
hash-04 |
CHAMP PDF | CHAMP-512 |
87.8 k (31.23×) | 687.1 k (15.81×) | 37.40 M (14.16×) | secret-indexed matrix table |
hash-04 |
CHAMP PDF | CHAMP-1024 |
324.1 k (57.69×) | 1.52 M (17.43×) | 85.04 M (16.34×) | secret-indexed matrix table |
hash-05 |
Cryptographic Hash Algorithm uHash PDF | uHash-512 |
61.6 k (21.91×) | 671.7 k (15.46×) | 41.79 M (15.82×) | secret-indexed S-box |
hash-05 |
Cryptographic Hash Algorithm uHash PDF | uHash-768 |
92.5 k (22.04×) | 1.55 M (23.48×) | 93.75 M (23.84×) | secret-indexed S-box |
hash-05 |
Cryptographic Hash Algorithm uHash PDF | uHash-1024 |
244.5 k (43.52×) | 4.07 M (46.64×) | 253.45 M (48.71×) | secret-indexed S-box |
hash-06 |
Cuishen PDF | Cuishen-512 |
1358 (0.48×) | 12.0 k (0.28×) | 679.2 k (0.26×) | – |
hash-06 |
Cuishen PDF | Cuishen-768 |
1780 (0.42×) | 15.9 k (0.24×) | 909.9 k (0.23×) | – |
hash-06 |
Cuishen PDF | Cuishen-1024 |
1823 (0.32×) | 15.9 k (0.18×) | 904.2 k (0.17×) | – |
hash-07 |
Dragon Hash Family PDF | Dragon-512 |
3862 (1.37×) | 34.3 k (0.79×) | 1.97 M (0.74×) | – |
hash-07 |
Dragon Hash Family PDF | Dragon-768 |
3896 (0.93×) | 42.1 k (0.64×) | 2.60 M (0.66×) | – |
hash-07 |
Dragon Hash Family PDF | Dragon-1024 |
3927 (0.70×) | 65.2 k (0.75×) | 3.94 M (0.76×) | – |
hash-07 |
Dragon Hash Family PDF | Dragon-XOF-256 |
14.1 k (2.04×) | 44.6 k (0.41×) | 1.96 M (0.30×) | – |
hash-07 |
Dragon Hash Family PDF | Dragon-XOF-384 |
13.1 k (1.89×) | 51.6 k (0.48×) | 2.61 M (0.40×) | – |
hash-07 |
Dragon Hash Family PDF | Dragon-XOF-512 |
12.1 k (2.16×) | 73.3 k (0.84×) | 3.96 M (0.76×) | – |
hash-08 |
Duet PDF | Duet-512 |
4034 (1.44×) | 87.4 k (2.01×) | 5.43 M (2.05×) | – |
hash-08 |
Duet PDF | Duet-768 |
14.3 k (3.40×) | 113.6 k (1.72×) | 6.88 M (1.75×) | – |
hash-08 |
Duet PDF | Duet-1024 |
14.4 k (2.56×) | 156.8 k (1.80×) | 9.68 M (1.86×) | – |
hash-09 |
Eijen Hash Function PDF | Eijen-256 |
1419 (0.99×) | 6864 (0.32×) | 412.0 k (0.31×) | – |
hash-09 |
Eijen Hash Function PDF | Eijen-384 |
1422 (0.50×) | 8221 (0.19×) | 444.7 k (0.17×) | – |
hash-09 |
Eijen Hash Function PDF | Eijen-512 |
1424 (0.51×) | 8234 (0.19×) | 484.4 k (0.18×) | – |
hash-09 |
Eijen Hash Function PDF | Eijen-768 |
1431 (0.34×) | 9623 (0.15×) | 587.8 k (0.15×) | – |
hash-09 |
Eijen Hash Function PDF | Eijen-1024 |
1433 (0.26×) | 12.4 k (0.14×) | 745.3 k (0.14×) | – |
hash-10 |
FEILIAN PDF | FEILIAN512 |
2323 (0.83×) | 17.9 k (0.41×) | 1.13 M (0.43×) | – |
hash-10 |
FEILIAN PDF | FEILIAN768 |
2362 (0.56×) | 17.9 k (0.27×) | 1.14 M (0.29×) | – |
hash-10 |
FEILIAN PDF | FEILIAN1024 |
2384 (0.42×) | 18.0 k (0.21×) | 1.13 M (0.22×) | – |
hash-11 |
Garnet PDF | Garnet_512_Cap512 |
8870 (3.16×) | 50.2 k (1.16×) | 2.65 M (1.00×) | secret-indexed AES T-tables |
hash-11 |
Garnet PDF | Garnet_512_Cap640 |
8878 (3.16×) | 39.9 k (0.92×) | 2.13 M (0.81×) | secret-indexed AES T-tables |
hash-11 |
Garnet PDF | Garnet_512_Cap768 |
8879 (3.16×) | 34.8 k (0.80×) | 1.77 M (0.67×) | secret-indexed AES T-tables |
hash-11 |
Garnet PDF | Garnet_512_Cap896 |
8879 (3.16×) | 32.2 k (0.74×) | 1.52 M (0.58×) | secret-indexed AES T-tables |
hash-11 |
Garnet PDF | Garnet_512_Cap1024 |
8609 (3.06×) | 28.7 k (0.66×) | 1.29 M (0.49×) | secret-indexed AES T-tables |
hash-11 |
Garnet PDF | Garnet_768 |
10.7 k (2.55×) | 50.9 k (0.77×) | 2.69 M (0.68×) | secret-indexed AES T-tables |
hash-11 |
Garnet PDF | Garnet_1024 |
43.1 k (7.67×) | 159.6 k (1.83×) | 7.62 M (1.46×) | secret-indexed AES T-tables |
hash-11 |
Garnet PDF | Garnet_1024_DM4x4 ⚠ KAT MISMATCH |
– | – | – | KAT/output caveat; see candidate page; secret-indexed AES T-tables |
hash-12 |
Iphe PDF | Iphe-512 |
13.1 k (4.65×) | 66.1 k (1.52×) | 3.77 M (1.43×) | – |
hash-12 |
Iphe PDF | Iphe-768 |
12.6 k (3.00×) | 75.3 k (1.14×) | 4.50 M (1.14×) | – |
hash-12 |
Iphe PDF | Iphe-1024 |
12.1 k (2.16×) | 94.5 k (1.08×) | 5.62 M (1.08×) | – |
hash-13 |
JuziHash PDF | JuziHash-512 |
133.3 k (47.44×) | 445.3 k (10.25×) | 22.74 M (8.61×) | 16-entry secret-indexed S-box (lead) |
hash-13 |
JuziHash PDF | JuziHash-1024 |
132.8 k (23.63×) | 443.9 k (5.09×) | 22.77 M (4.38×) | 16-entry secret-indexed S-box (lead) |
hash-14 |
Laurus PDF | Laurus-512 |
3059 (1.09×) | 27.2 k (0.63×) | 1.56 M (0.59×) | – |
hash-14 |
Laurus PDF | Laurus-768 |
3086 (0.73×) | 33.8 k (0.51×) | 2.09 M (0.53×) | – |
hash-14 |
Laurus PDF | Laurus-1024 |
3186 (0.57×) | 48.7 k (0.56×) | 3.11 M (0.60×) | – |
hash-14 |
Laurus PDF | Laurus-XOF |
6000 (0.54×) | 30.7 k (0.17×) | 1.58 M (0.15×) | – |
hash-15 |
Litchi PDF | litchi_512 |
3061 (1.09×) | 27.3 k (0.63×) | 1.55 M (0.59×) | – |
hash-15 |
Litchi PDF | litchi_768 |
3067 (0.73×) | 33.3 k (0.50×) | 2.06 M (0.52×) | – |
hash-15 |
Litchi PDF | litchi_1024 |
3042 (0.54×) | 50.5 k (0.58×) | 3.06 M (0.59×) | – |
hash-15 |
Litchi PDF | litchi_xof |
3054 (0.54×) | 45.2 k (0.52×) | 2.75 M (0.53×) | – |
hash-16 |
LLH PDF | LLH-256 |
1204 (0.84×) | 22.9 k (1.05×) | 1.44 M (1.09×) | – |
hash-16 |
LLH PDF | LLH-512 |
1692 (0.60×) | 19.4 k (0.45×) | 1.19 M (0.45×) | – |
hash-16 |
LLH PDF | LLH-768 |
5436 (1.29×) | 38.4 k (0.58×) | 2.24 M (0.57×) | – |
hash-16 |
LLH PDF | LLH-1024 |
5170 (0.92×) | 29.5 k (0.34×) | 1.73 M (0.33×) | – |
hash-17 |
MasterCube PDF | MasterCube-512 |
14.8 k (5.27×) | 73.4 k (1.69×) | 4.00 M (1.51×) | – |
hash-17 |
MasterCube PDF | MasterCube-768 |
22.1 k (5.27×) | 102.7 k (1.55×) | 5.45 M (1.39×) | – |
hash-17 |
MasterCube PDF | MasterCube-1024 |
29.5 k (5.25×) | 161.2 k (1.85×) | 8.57 M (1.65×) | – |
hash-18 |
Megascon Hash Function PDF | MEGASCON-384 |
2084 (0.73×) | 13.8 k (0.32×) | 801.9 k (0.31×) | – |
hash-18 |
Megascon Hash Function PDF | MEGASCON-384-XOF-256 |
2200 (1.54×) | 13.8 k (0.63×) | 798.0 k (0.61×) | – |
hash-18 |
Megascon Hash Function PDF | MEGASCON-384-XOF-1024 |
2354 (0.42×) | 14.0 k (0.16×) | 810.1 k (0.16×) | – |
hash-18 |
Megascon Hash Function PDF | MEGASCON-384-XOF-2048 |
4512 (0.41×) | 16.2 k (0.09×) | 801.9 k (0.08×) | – |
hash-18 |
Megascon Hash Function PDF | MEGASCON-512 |
2169 (0.77×) | 17.7 k (0.41×) | 1.03 M (0.39×) | – |
hash-18 |
Megascon Hash Function PDF | MEGASCON-512-XOF-256 |
2204 (1.54×) | 17.9 k (0.82×) | 1.01 M (0.77×) | – |
hash-18 |
Megascon Hash Function PDF | MEGASCON-512-XOF-1024 |
2382 (0.42×) | 18.1 k (0.21×) | 1.01 M (0.19×) | – |
hash-18 |
Megascon Hash Function PDF | MEGASCON-512-XOF-2048 |
4523 (0.41×) | 20.4 k (0.12×) | 1.01 M (0.10×) | – |
hash-18 |
Megascon Hash Function PDF | MEGASCON-768 |
2355 (0.56×) | 15.9 k (0.24×) | 978.2 k (0.25×) | – |
hash-18 |
Megascon Hash Function PDF | MEGASCON-1024 |
2313 (0.41×) | 20.1 k (0.23×) | 1.23 M (0.24×) | – |
hash-19 |
MoFang Hash Function PDF | MoFang-256 |
1665 (1.17×) | 12.9 k (0.59×) | 735.9 k (0.56×) | – |
hash-19 |
MoFang Hash Function PDF | MoFang-256-XOF |
1775 (1.24×) | 12.9 k (0.59×) | 861.0 k (0.65×) | – |
hash-19 |
MoFang Hash Function PDF | MoFang-512 |
1706 (0.61×) | 12.9 k (0.30×) | 733.3 k (0.28×) | – |
hash-19 |
MoFang Hash Function PDF | MoFang-768 |
3485 (0.83×) | 26.8 k (0.40×) | 1.55 M (0.39×) | – |
hash-19 |
MoFang Hash Function PDF | MoFang-768-XOF |
3828 (0.91×) | 28.6 k (0.43×) | 1.52 M (0.39×) | – |
hash-19 |
MoFang Hash Function PDF | MoFang-1024 |
3534 (0.63×) | 28.5 k (0.33×) | 1.59 M (0.31×) | – |
hash-20 |
Mozi Hash Function PDF | MOZI-384 |
2350 (0.82×) | 16.0 k (0.37×) | 956.5 k (0.37×) | – |
hash-20 |
Mozi Hash Function PDF | MOZI-384-XOF-256 |
2485 (1.74×) | 16.7 k (0.77×) | 990.7 k (0.75×) | – |
hash-20 |
Mozi Hash Function PDF | MOZI-384-XOF-1024 |
2707 (0.48×) | 16.9 k (0.19×) | 969.2 k (0.19×) | – |
hash-20 |
Mozi Hash Function PDF | MOZI-384-XOF-2048 |
5286 (0.48×) | 19.5 k (0.11×) | 971.9 k (0.09×) | – |
hash-20 |
Mozi Hash Function PDF | MOZI-512 |
2331 (0.83×) | 21.6 k (0.50×) | 1.16 M (0.44×) | – |
hash-20 |
Mozi Hash Function PDF | MOZI-512-XOF-256 |
2478 (1.74×) | 21.3 k (0.98×) | 1.26 M (0.96×) | – |
hash-20 |
Mozi Hash Function PDF | MOZI-512-XOF-1024 |
2707 (0.48×) | 21.6 k (0.25×) | 1.21 M (0.23×) | – |
hash-20 |
Mozi Hash Function PDF | MOZI-512-XOF-2048 |
5399 (0.49×) | 24.7 k (0.14×) | 1.21 M (0.12×) | – |
hash-20 |
Mozi Hash Function PDF | MOZI-768 |
2747 (0.65×) | 18.8 k (0.28×) | 1.15 M (0.29×) | – |
hash-20 |
Mozi Hash Function PDF | MOZI-1024 |
2742 (0.49×) | 24.1 k (0.28×) | 1.46 M (0.28×) | – |
hash-21 |
Neulaser PDF | Neulaser-512 |
8781 (3.13×) | 68.5 k (1.58×) | 4.09 M (1.55×) | secret-indexed S-box, state-dependent remainder |
hash-21 |
Neulaser PDF | Neulaser-768 |
11.2 k (2.66×) | 71.7 k (1.08×) | 4.23 M (1.08×) | secret-indexed S-box, state-dependent remainder |
hash-21 |
Neulaser PDF | Neulaser-1024 |
14.3 k (2.55×) | 75.4 k (0.86×) | 4.14 M (0.80×) | secret-indexed S-box, state-dependent remainder |
hash-22 |
Pavelor: A Highly Secure Hash Algorithm for Software Implementation PDF | Pavelor-512 |
36.9 k (13.12×) | 217.9 k (5.01×) | 12.29 M (4.65×) | secret-indexed AES S-box |
hash-22 |
Pavelor: A Highly Secure Hash Algorithm for Software Implementation PDF | Pavelor-768 |
36.7 k (8.75×) | 323.6 k (4.89×) | 18.39 M (4.68×) | secret-indexed AES S-box |
hash-22 |
Pavelor: A Highly Secure Hash Algorithm for Software Implementation PDF | Pavelor-1024 |
72.6 k (12.92×) | 643.8 k (7.38×) | 36.92 M (7.09×) | secret-indexed AES S-box |
hash-23 |
QILIN PDF | QILIN-512 |
13.0 k (4.63×) | 51.9 k (1.19×) | 3.23 M (1.22×) | – |
hash-23 |
QILIN PDF | QILIN-768 |
15.1 k (3.61×) | 90.7 k (1.37×) | 4.95 M (1.26×) | – |
hash-23 |
QILIN PDF | QILIN-1024 |
17.2 k (3.06×) | 137.3 k (1.57×) | 8.28 M (1.59×) | – |
hash-24 |
QuantaSylva Hash PDF | QSH-512 |
66.8 k (23.78×) | 245.0 k (5.64×) | 12.84 M (4.86×) | – |
hash-24 |
QuantaSylva Hash PDF | QSH-768 |
131.0 k (31.20×) | 319.3 k (4.83×) | 12.63 M (3.21×) | – |
hash-24 |
QuantaSylva Hash PDF | QSH-1024 |
131.2 k (23.35×) | 305.5 k (3.50×) | 12.64 M (2.43×) | – |
hash-25 |
TaiChi PDF | TaiChi-512 |
26.8 k (9.52×) | 141.6 k (3.26×) | 8.76 M (3.32×) | – |
hash-25 |
TaiChi PDF | TaiChi-768 |
25.7 k (6.13×) | 190.5 k (2.88×) | 10.74 M (2.73×) | – |
hash-25 |
TaiChi PDF | TaiChi-1024 |
48.4 k (8.62×) | 261.0 k (2.99×) | 13.83 M (2.66×) | – |
hash-26 |
The Hash Function CHIME PDF | CHIME-512 |
1690 (0.60×) | 32.1 k (0.74×) | 1.96 M (0.74×) | – |
hash-26 |
The Hash Function CHIME PDF | CHIME-1024 |
2237 (0.40×) | 44.7 k (0.51×) | 2.67 M (0.51×) | – |
hash-27 |
The Vedak Hash Function Family PDF | Vedak-512 |
16.9 k (6.01×) | 154.7 k (3.56×) | 9.34 M (3.54×) | secret-indexed S-box |
hash-27 |
The Vedak Hash Function Family PDF | Vedak-768 |
16.9 k (4.02×) | 198.4 k (3.00×) | 11.86 M (3.02×) | secret-indexed S-box |
hash-27 |
The Vedak Hash Function Family PDF | Vedak-1024 |
31.6 k (5.62×) | 330.9 k (3.79×) | 19.41 M (3.73×) | secret-indexed S-box |
hash-28 |
The XRH-1 Hash Function PDF | XRH-1-512 |
1308 (0.47×) | 15.4 k (0.36×) | 953.0 k (0.36×) | – |
hash-28 |
The XRH-1 Hash Function PDF | XRH-1-768 |
2555 (0.61×) | 25.8 k (0.39×) | 1.51 M (0.38×) | – |
hash-28 |
The XRH-1 Hash Function PDF | XRH-1-1024 |
8857 (1.58×) | 62.1 k (0.71×) | 3.56 M (0.68×) | – |
hash-29 |
The XRH-2 Hash Function PDF | XRH-2-512 |
1310 (0.47×) | 15.4 k (0.35×) | 951.7 k (0.36×) | – |
hash-29 |
The XRH-2 Hash Function PDF | XRH-2-768 |
2556 (0.61×) | 25.7 k (0.39×) | 1.60 M (0.41×) | – |
hash-29 |
The XRH-2 Hash Function PDF | XRH-2-1024 |
8842 (1.57×) | 61.2 k (0.70×) | 3.50 M (0.67×) | – |
hash-30 |
The ZC-DM Hash Function PDF | ZC-DM-1280-512 |
497 (0.18×) | 5284 (0.12×) | 323.0 k (0.12×) | – |
hash-30 |
The ZC-DM Hash Function PDF | ZC-DM-1280-768 |
906 (0.22×) | 8594 (0.13×) | 499.2 k (0.13×) | – |
hash-30 |
The ZC-DM Hash Function PDF | ZC-DM-1280-1024 |
2909 (0.52×) | 20.6 k (0.24×) | 1.18 M (0.23×) | – |
hash-30 |
The ZC-DM Hash Function PDF | ZC-DM-1536-512 |
919 (0.33×) | 7708 (0.18×) | 464.2 k (0.18×) | – |
hash-30 |
The ZC-DM Hash Function PDF | ZC-DM-1536-768 |
1885 (0.45×) | 11.0 k (0.17×) | 632.1 k (0.16×) | – |
hash-30 |
The ZC-DM Hash Function PDF | ZC-DM-1536-1024 |
2558 (0.46×) | 17.8 k (0.20×) | 989.4 k (0.19×) | – |
hash-31 |
The ZC-DMC Hash Function PDF | ZC-DMC-1280-512 |
3303 (1.18×) | 10.9 k (0.25×) | 328.8 k (0.12×) | – |
hash-31 |
The ZC-DMC Hash Function PDF | ZC-DMC-1280-768 |
4886 (1.16×) | 17.3 k (0.26×) | 515.3 k (0.13×) | – |
hash-31 |
The ZC-DMC Hash Function PDF | ZC-DMC-1280-1024 |
6892 (1.23×) | 24.8 k (0.28×) | 1.20 M (0.23×) | – |
hash-31 |
The ZC-DMC Hash Function PDF | ZC-DMC-1536-512 |
6910 (2.46×) | 22.8 k (0.53×) | 823.4 k (0.31×) | – |
hash-31 |
The ZC-DMC Hash Function PDF | ZC-DMC-1536-768 |
10.3 k (2.46×) | 19.7 k (0.30×) | 663.3 k (0.17×) | – |
hash-31 |
The ZC-DMC Hash Function PDF | ZC-DMC-1536-1024 |
13.7 k (2.44×) | 29.6 k (0.34×) | 1.37 M (0.26×) | – |
hash-32 |
The ZC-EDMC Hash Function PDF | ZC-EDMC-1280-512 |
513 (0.18×) | 5535 (0.13×) | 340.4 k (0.13×) | – |
hash-32 |
The ZC-EDMC Hash Function PDF | ZC-EDMC-1280-768 |
913 (0.22×) | 9203 (0.14×) | 539.7 k (0.14×) | – |
hash-32 |
The ZC-EDMC Hash Function PDF | ZC-EDMC-1280-1024 |
3891 (0.69×) | 21.9 k (0.25×) | 1.26 M (0.24×) | – |
hash-32 |
The ZC-EDMC Hash Function PDF | ZC-EDMC-1536-512 |
946 (0.34×) | 7811 (0.18×) | 474.1 k (0.18×) | – |
hash-32 |
The ZC-EDMC Hash Function PDF | ZC-EDMC-1536-768 |
2379 (0.57×) | 19.1 k (0.29×) | 1.10 M (0.28×) | – |
hash-32 |
The ZC-EDMC Hash Function PDF | ZC-EDMC-1536-1024 |
2662 (0.47×) | 18.0 k (0.21×) | 1.76 M (0.34×) | – |
hash-33 |
Thunder Hash Family PDF | Thunder-512 |
2695 (0.96×) | 23.9 k (0.55×) | 1.36 M (0.52×) | – |
hash-33 |
Thunder Hash Family PDF | Thunder-768 |
2689 (0.64×) | 29.2 k (0.44×) | 1.81 M (0.46×) | – |
hash-33 |
Thunder Hash Family PDF | Thunder-1024 |
2724 (0.48×) | 45.0 k (0.52×) | 2.71 M (0.52×) | – |
hash-33 |
Thunder Hash Family PDF | Thunder-XOF-256 |
13.0 k (1.87×) | 34.3 k (0.32×) | 1.37 M (0.21×) | – |
hash-33 |
Thunder Hash Family PDF | Thunder-XOF-384 |
12.0 k (1.73×) | 38.5 k (0.36×) | 1.82 M (0.28×) | – |
hash-33 |
Thunder Hash Family PDF | Thunder-XOF-512 |
11.1 k (1.98×) | 56.5 k (0.65×) | 2.72 M (0.52×) | – |
hash-34 |
WChain Hash Function PDF | WChain-V1-512 |
1379 (0.49×) | 5967 (0.14×) | 300.5 k (0.11×) | – |
hash-34 |
WChain Hash Function PDF | WChain-V2-1024 |
5991 (1.07×) | 14.9 k (0.17×) | 677.0 k (0.13×) | – |
hash-35 |
Wish Hash Function PDF | Wish512 |
208.6 k (74.23×) | 4.10 M (94.34×) | 247.65 M (93.76×) | secret-indexed S-box, variable-time GF multiply |
hash-35 |
Wish Hash Function PDF | Wish1024 |
608.8 k (108.37×) | 5.76 M (66.05×) | 329.38 M (63.30×) | secret-indexed S-box, variable-time GF multiply |