ngcc.dev
Performance measurements › system: x86_1 · arm_1
Performance — x86-64, system x86_1
Independent measurements of the NGCC Round 1 implementations on one 12th Gen Intel(R) Core(TM) i7-12700 core (max 2.10 GHz, governor performance, turbo off, SMT off).
- Cycles are the mean of all timed calls in five trials, normally with each trial in a fresh process.
- Symmetric % is the cycle share in ICCS placeholder hashes, excluding the DRNG and candidates' own hashes.
(??%)means no ICCS-facing backend was measured. See the symmetric survey. - Each instance links to its performance report with KAT status, all measured implementations, sizes, memory proxies, primitive profiles, and raw-evidence references.
- See method and limitations. These are independent measurements, not submitter self-assessments or NICCS results.
- Notation:
–means not measured,n=marks fewer than 100 timed calls, and ⚠ marks an instance whose submitted KAT vectors are not reproduced by the submitted code. - Sizes use a separate catalog, not timing-record buffer sizes.
≈marks a nominal variable-length signature; other variable signatures use their maximum. - KEX bandwidth counts protocol messages plus required public keys once. KEM public-key size is listed separately from ciphertext size. Certificates and transport framing are excluded; see the size audit for discrepancies and AFS-KEX's API mapping.
- Hash rows show three message sizes. Parentheses give cycles relative to the same-width, same-length ICCS
pseudoXOF(helper timings), not a production replacement estimate. - Scope: reference sets are shown. When both ICCS and non-ICCS backends were measured, the non-ICCS one stays on the candidate report; notes flag caveats.
Ordered measurements
Compare candidates at a common claimed security target. Each table orders the measured metrics and summarizes their mean ordinal position; see the individual performance reports for measurement details and caveats.
Digital signatures
| id | algorithm | instance performance report | keygen cycles (sym %) | sign cycles (sym %) | verify cycles (sym %) | public key (B) | signature (B) | notes |
|---|---|---|---|---|---|---|---|---|
sign-01 |
Aigis-Sig+ PDF | Aigis-sig1 |
610.8 k (7.4%) | 10.50 M (64%) | 531.0 k (11%) | 928 | 2015 | – |
sign-01 |
Aigis-Sig+ PDF | Aigis-sig2 |
1.91 M (4.4%) | 7.97 M (55%) | 1.79 M (5.7%) | 1824 | 4533 | – |
sign-01 |
Aigis-Sig+ PDF | Aigis-sig3 |
6.37 M (5.0%) | 8.89 M (28%) | 6.22 M (5.9%) | 4672 | 9134 | – |
sign-02 |
BIT: Bimodal Triangular distribution based lattice signatures PDF | BiT-128 |
460.7 k (74%) | 2.25 M (58%) | 443.8 k (72%) | 1048 | 1504 | – |
sign-02 |
BIT: Bimodal Triangular distribution based lattice signatures PDF | BiT-256 |
1.24 M (81%) | 2.71 M (65%) | 1.28 M (79%) | 2144 | 3456 | – |
sign-02 |
BIT: Bimodal Triangular distribution based lattice signatures PDF | BiT-512 |
3.59 M (88%) | 10.97 M (70%) | 3.54 M (85%) | 5056 | 6695 | – |
sign-03 |
CEDRUS+C PDF | CEDRUSC-160f |
14.36 M (98%) | 513.49 M (98%) | 15.34 M (98%) | 40 | 19812 | – |
sign-03 |
CEDRUS+C PDF | CEDRUSC-160s |
583.25 M (98%) | 8.65 G (98%) | 20.99 M (98%) | 40 | 9460 | – |
sign-03 |
CEDRUS+C PDF | CEDRUSC-256f |
46.43 M (98%) | 1.24 G (98%) | 21.30 M (98%) | 64 | 43548 | – |
sign-03 |
CEDRUS+C PDF | CEDRUSC-256s |
964.78 M (98%) | 12.74 G (98%) | 35.11 M (98%) | 64 | 24104 | – |
sign-03 |
CEDRUS+C PDF | CEDRUSC-384f |
656.21 M (99%) | 12.48 G (99%) | 125.86 M (99%) | 96 | 75988 | – |
sign-03 |
CEDRUS+C PDF | CEDRUSC-384s |
3.27 G (99%) | 48.20 G (99%, n=35) | 53.33 M (99%) | 96 | 61572 | – |
sign-03 |
CEDRUS+C PDF | CEDRUSC-512f |
1.76 G (99%) | 24.73 G (99%, n=75) | 157.20 M (99%) | 128 | 121520 | – |
sign-03 |
CEDRUS+C PDF | CEDRUSC-512s |
7.00 G (99%) | 86.78 G (99%, n=20) | 115.31 M (99%) | 128 | 98212 | – |
sign-04 |
CEDRUSɑ PDF | CEDRUSALPHA-160f |
16.05 M (98%) | 570.59 M (98%) | 17.73 M (98%) | 40 | 19420 | – |
sign-04 |
CEDRUSɑ PDF | CEDRUSALPHA-160s |
523.56 M (98%) | 7.78 G (98%) | 19.14 M (98%) | 40 | 10300 | – |
sign-04 |
CEDRUSɑ PDF | CEDRUSALPHA-256f |
52.40 M (98%) | 1.35 G (98%) | 24.20 M (97%) | 64 | 43296 | – |
sign-04 |
CEDRUSɑ PDF | CEDRUSALPHA-256s |
793.87 M (98%) | 12.06 G (98%) | 29.24 M (98%) | 64 | 25568 | – |
sign-04 |
CEDRUSɑ PDF | CEDRUSALPHA-384f |
637.31 M (99%) | 12.46 G (99%) | 123.74 M (99%) | 96 | 76176 | – |
sign-04 |
CEDRUSɑ PDF | CEDRUSALPHA-384s |
4.10 G (99%) | 44.24 G (99%, n=40) | 68.37 M (99%) | 96 | 60672 | – |
sign-04 |
CEDRUSɑ PDF | CEDRUSALPHA-512f |
1.60 G (99%) | 21.00 G (99%, n=85) | 145.58 M (99%) | 128 | 127488 | – |
sign-04 |
CEDRUSɑ PDF | CEDRUSALPHA-512s |
7.68 G (99%) | 88.57 G (99%, n=20) | 128.14 M (99%) | 128 | 98048 | – |
sign-05 |
Chinith PDF | sm4th_d3_128f_loose |
12.0 k (0.0%) | 125.86 M (2.7%) | 83.72 M (3.0%) | 32 | 6724 | mixed own/ICCS primitives |
sign-05 |
Chinith PDF | sm4th_d3_128f_tight |
11.9 k (0.0%) | 194.81 M (5.9%) | 120.51 M (8.3%) | 32 | 11864 | mixed own/ICCS primitives |
sign-05 |
Chinith PDF | sm4th_d3_128s_loose |
12.0 k (0.0%) | 354.25 M (11%) | 296.38 M (5.3%) | 32 | 5056 | mixed own/ICCS primitives |
sign-05 |
Chinith PDF | sm4th_d3_128s_tight |
11.9 k (0.0%) | 422.51 M (21%) | 338.39 M (22%) | 32 | 9176 | mixed own/ICCS primitives |
sign-05 |
Chinith PDF | sm4th_em_d2_128f_loose |
11.9 k (0.0%) | 29.92 M (11%) | 28.37 M (8.4%) | 32 | 4932 | mixed own/ICCS primitives |
sign-05 |
Chinith PDF | sm4th_em_d2_128f_tight |
11.9 k (0.0%) | 34.15 M (31%) | 32.63 M (30%) | 32 | 9450 | mixed own/ICCS primitives |
sign-05 |
Chinith PDF | sm4th_em_d2_128s_loose |
11.9 k (0.0%) | 196.83 M (14%) | 186.07 M (8.3%) | 32 | 3818 | mixed own/ICCS primitives |
sign-05 |
Chinith PDF | sm4th_em_d2_128s_tight |
11.9 k (0.0%) | 232.02 M (36%) | 220.22 M (34%) | 32 | 7556 | mixed own/ICCS primitives |
sign-05 |
Chinith PDF | ublockith_d3_256f |
14.6 k (0.0%) | 351.34 M (6.7%) | 407.09 M (5.7%) | 64 | 31556 | mixed own/ICCS primitives |
sign-05 |
Chinith PDF | ublockith_d3_256s |
14.6 k (0.0%) | 1.08 G (16%) | 1.14 G (15%) | 64 | 24144 | mixed own/ICCS primitives |
sign-05 |
Chinith PDF | ublockith_em_d3_256f |
14.7 k (0.0%) | 267.51 M (8.8%) | 310.14 M (7.2%) | 64 | 25028 | mixed own/ICCS primitives |
sign-05 |
Chinith PDF | ublockith_em_d3_256s |
14.7 k (0.0%) | 897.43 M (21%) | 923.48 M (18%) | 64 | 19056 | mixed own/ICCS primitives |
sign-05 |
Chinith PDF | vistrutith_d3_512f |
15.9 k (0.0%) | 6.37 G (1.7%) | 5.27 G (2.0%) | 128 | 106788 | mixed own/ICCS primitives |
sign-05 |
Chinith PDF | vistrutith_d3_512s |
15.9 k (0.0%) | 11.79 G (6.6%) | 10.70 G (7.2%) | 128 | 83004 | mixed own/ICCS primitives |
sign-06 |
COMPASS-SIG PDF | COMPASS-SIG-128 |
1.41 M (93%) | 1.81 M (88%) | 1.37 M (93%) | 1664 | 2080 | – |
sign-06 |
COMPASS-SIG PDF | COMPASS-SIG-256 |
5.22 M (95%) | 6.81 M (89%) | 5.10 M (95%) | 3616 | 4080 | – |
sign-06 |
COMPASS-SIG PDF | COMPASS-SIG-384 |
3.87 M (90%) | 5.58 M (77%) | 3.51 M (88%) | 5792 | 7344 | – |
sign-06 |
COMPASS-SIG PDF | COMPASS-SIG-512 |
5.97 M (91%) | 8.24 M (79%) | 5.54 M (90%) | 7648 | 9024 | – |
sign-07 |
CS PDF | CS-128 |
546.7 k (4.7%) | 4.42 M (56%) | 593.9 k (6.3%) | 976 | 1548 | – |
sign-07 |
CS PDF | CS-256 |
896.1 k (10%) | 13.25 M (49%) | 1.13 M (11%) | 1760 | 3164 | – |
sign-07 |
CS PDF | CS-512 |
2.88 M (14%) | 52.45 M (62%) | 3.62 M (16%) | 4288 | 5975 | – |
sign-08 |
DARTS PDF | DARTS128 |
953.3 k (46%) | 45.51 M (88%) | 353.5 k (64%) | 1120 | 1449 | – |
sign-08 |
DARTS PDF | DARTS256 |
1.24 M (64%) | 33.85 M (87%) | 875.1 k (72%) | 2208 | 2489 | – |
sign-08 |
DARTS PDF | DARTS512 |
2.08 M (62%) | 10.74 M (87%) | 1.64 M (77%) | 4672 | 5851 | – |
sign-09 |
DOVE PDF | dove_classic_128 |
101.87 M (19%) | 4.72 M (0.4%) | 4.36 M (0.1%) | 191646 | 136 | – |
sign-09 |
DOVE PDF | dove_classic_256 |
2.16 G (10%) | 49.56 M (0.1%) | 43.98 M (0.0%) | 2050352 | 296 | – |
sign-09 |
DOVE PDF | dove_classic_512 |
48.53 G (5.0%, n=35) | 529.87 M (0.0%) | 478.61 M (0.0%) | 22833052 | 648 | – |
sign-09 |
DOVE PDF | dove_pkc_skc_128 |
89.58 M (7.8%) | 27.89 M (25%) | 11.21 M (61%) | 43576 | 136 | – |
sign-09 |
DOVE PDF | dove_pkc_skc_256 |
2.02 G (3.7%) | 409.22 M (18%) | 118.08 M (63%) | 446992 | 296 | – |
sign-09 |
DOVE PDF | dove_pkc_skc_512 |
46.96 G (1.8%, n=35) | 6.12 G (14%) | 1.30 G (63%) | 5062192 | 648 | – |
sign-10 |
Facto-DSA PDF | Facto-DSA-128 |
7.34 M (11%) | 2.10 M (0.5%) | 983.9 k (87%) | 40040 | 40 | – |
sign-10 |
Facto-DSA PDF | Facto-DSA-256 |
107.58 M (9.2%) | 11.72 M (0.1%) | 11.19 M (87%) | 456960 | 68 | – |
sign-10 |
Facto-DSA PDF | Facto-DSA-512 ⚠ KAT NOKAT |
2.24 G (5.5%) | 124.35 M (0.0%) | 140.34 M (88%) | 5674240 | 128 | KAT/output caveat; see candidate page |
sign-11 |
FlexTree PDF | Flextree-160f |
14.52 M (98%) | 563.57 M (92%) | 15.46 M (98%) | 40 | 18672 | – |
sign-11 |
FlexTree PDF | Flextree-160s |
593.29 M (98%) | 8.29 G (98%) | 21.34 M (98%) | 40 | 9580 | – |
sign-11 |
FlexTree PDF | Flextree-256f |
46.80 M (98%) | 975.63 M (98%) | 25.49 M (98%) | 64 | 46856 | – |
sign-11 |
FlexTree PDF | Flextree-256s |
488.82 M (98%) | 9.24 G (98%) | 39.41 M (98%) | 64 | 25420 | – |
sign-11 |
FlexTree PDF | Flextree-384f |
652.08 M (99%) | 12.33 G (99%) | 125.64 M (99%) | 96 | 73396 | – |
sign-11 |
FlexTree PDF | Flextree-384s |
3.27 G (99%) | 44.66 G (99%, n=40) | 53.95 M (98%) | 96 | 60180 | – |
sign-11 |
FlexTree PDF | Flextree-512f |
1.76 G (99%) | 24.80 G (99%, n=75) | 158.24 M (98%) | 128 | 117296 | – |
sign-11 |
FlexTree PDF | Flextree-512s |
6.99 G (99%) | 84.54 G (99%, n=20) | 117.82 M (97%) | 128 | 94948 | – |
sign-12 |
Galas Signature Scheme PDF | Galas-160F ⚠ KAT MISMATCH |
22.14 M (0.0%) | 1.88 G (4.1%) | 1.20 G (6.3%) | 40 | 5964 | KAT/output caveat; see candidate page |
sign-12 |
Galas Signature Scheme PDF | Galas-160S ⚠ KAT MISMATCH |
22.13 M (0.0%) | 2.39 G (23%) | 1.68 G (30%) | 40 | 4812 | KAT/output caveat; see candidate page |
sign-12 |
Galas Signature Scheme PDF | Galas-256F ⚠ KAT MISMATCH |
57.79 M (0.0%) | 7.73 G (3.1%) | 4.89 G (4.7%) | 64 | 15950 | KAT/output caveat; see candidate page |
sign-12 |
Galas Signature Scheme PDF | Galas-256S ⚠ KAT MISMATCH |
57.82 M (0.0%) | 12.12 G (33%) | 9.06 G (46%) | 64 | 12114 | KAT/output caveat; see candidate page |
sign-12 |
Galas Signature Scheme PDF | Galas-384F ⚠ KAT MISMATCH |
136.91 M (0.0%) | 29.61 G (2.8%, n=60) | 17.90 G (4.9%) | 96 | 33384 | KAT/output caveat; see candidate page |
sign-12 |
Galas Signature Scheme PDF | Galas-384S ⚠ KAT MISMATCH |
137.02 M (0.0%) | 38.44 G (23%, n=50) | 26.58 G (34%, n=70) | 96 | 27784 | KAT/output caveat; see candidate page |
sign-12 |
Galas Signature Scheme PDF | Galas-512F ⚠ KAT MISMATCH |
254.11 M (0.0%) | 75.51 G (2.0%, n=25) | 44.76 G (3.5%, n=40) | 128 | 59416 | KAT/output caveat; see candidate page |
sign-12 |
Galas Signature Scheme PDF | Galas-512S ⚠ KAT TIMEOUT |
254.15 M (0.0%) | 92.54 G (18%, n=20) | 61.40 G (28%, n=30) | 128 | 49516 | KAT/output caveat; see candidate page |
sign-13 |
GreatWall Signature Algorithm PDF | GreatWall128f |
5.88 M (??%) | 137.40 M (??%) | 101.83 M (??%) | 36 | 3396 | own symmetric primitives; placeholder share unavailable |
sign-13 |
GreatWall Signature Algorithm PDF | GreatWall128s |
5.89 M (??%) | 632.05 M (??%) | 538.77 M (??%) | 36 | 2758 | own symmetric primitives; placeholder share unavailable |
sign-13 |
GreatWall Signature Algorithm PDF | GreatWall192f |
13.49 M (??%) | 450.19 M (??%) | 311.50 M (??%) | 50 | 8012 | own symmetric primitives; placeholder share unavailable |
sign-13 |
GreatWall Signature Algorithm PDF | GreatWall192s |
13.54 M (??%) | 1.95 G (??%) | 1.81 G (??%) | 50 | 6804 | own symmetric primitives; placeholder share unavailable |
sign-13 |
GreatWall Signature Algorithm PDF | GreatWall256f |
27.35 M (??%) | 1.04 G (??%) | 699.87 M (??%) | 66 | 14260 | own symmetric primitives; placeholder share unavailable |
sign-13 |
GreatWall Signature Algorithm PDF | GreatWall256s |
27.36 M (??%) | 3.65 G (??%) | 3.30 G (??%) | 66 | 12236 | own symmetric primitives; placeholder share unavailable |
sign-13 |
GreatWall Signature Algorithm PDF | GreatWall512f |
121.94 M (??%) | 9.92 G (??%) | 5.91 G (??%) | 132 | 57812 | own symmetric primitives; placeholder share unavailable |
sign-13 |
GreatWall Signature Algorithm PDF | GreatWall512s |
121.91 M (??%) | 24.65 G (??%, n=75) | 20.69 G (??%, n=90) | 132 | 50012 | own symmetric primitives; placeholder share unavailable |
sign-14 |
Lynxer PDF | Lynxer-160f |
28.80 M (80%) | 533.63 M (14%) | 470.80 M (6.2%) | 40 | 5801 | mixed own/ICCS primitives |
sign-14 |
Lynxer PDF | Lynxer-160s |
28.78 M (80%) | 3.82 G (3.4%) | 3.73 G (1.9%) | 40 | 4607 | mixed own/ICCS primitives |
sign-14 |
Lynxer PDF | Lynxer-256f |
174.01 M (99%) | 1.55 G (35%) | 1.18 G (16%) | 64 | 15097 | mixed own/ICCS primitives |
sign-14 |
Lynxer PDF | Lynxer-256s |
174.00 M (99%) | 10.78 G (6.3%) | 10.37 G (3.0%) | 64 | 12191 | mixed own/ICCS primitives |
sign-14 |
Lynxer PDF | Lynxer-384f |
741.32 M (99%) | 5.16 G (44%) | 3.64 G (22%) | 96 | 34109 | mixed own/ICCS primitives |
sign-14 |
Lynxer PDF | Lynxer-384s |
740.93 M (99%) | 30.11 G (10%, n=60) | 28.34 G (4.1%, n=65) | 96 | 27495 | mixed own/ICCS primitives |
sign-14 |
Lynxer PDF | Lynxer-512f |
2.15 G (99%) | 6.77 G (96%) | 2.48 G (91%) | 128 | 61091 | mixed own/ICCS primitives |
sign-14 |
Lynxer PDF | Lynxer-512s |
2.15 G (99%) | 9.33 G (83%) | 4.74 G (67%) | 128 | 48879 | mixed own/ICCS primitives |
sign-15 |
MORNING-ATLAS PDF | lwrdsa128 ⚠ KAT OVERFLOW |
2.78 M (83%) | 3.89 M (70%) | 2.88 M (81%) | 1328 | 2081 | KAT/output caveat; see candidate page |
sign-15 |
MORNING-ATLAS PDF | lwrdsa192 ⚠ KAT OVERFLOW |
6.61 M (83%) | 8.80 M (71%) | 6.81 M (82%) | 2112 | 3365 | KAT/output caveat; see candidate page |
sign-15 |
MORNING-ATLAS PDF | lwrdsa256 ⚠ KAT OVERFLOW |
4.23 M (61%) | 12.39 M (35%) | 4.44 M (58%) | 2848 | 4656 | KAT/output caveat; see candidate page |
sign-15 |
MORNING-ATLAS PDF | lwrdsa512 ⚠ KAT OVERFLOW |
12.34 M (58%) | 43.40 M (46%) | 12.96 M (55%) | 6688 | 10081 | KAT/output caveat; see candidate page |
sign-16 |
Octarine PDF | Octarine-128 |
767.9 k (60%) | 2.09 M (52%) | 879.7 k (51%) | 1344 | 2564 | – |
sign-16 |
Octarine PDF | Octarine-256 |
1.48 M (57%) | 4.58 M (53%) | 1.71 M (50%) | 2368 | 5449 | – |
sign-16 |
Octarine PDF | Octarine-512 |
3.79 M (53%) | 17.20 M (55%) | 4.35 M (47%) | 5184 | 14713 | – |
sign-17 |
OPS Digital Signature Algorithm PDF | OPSsig-128 |
2.31 M (91%) | 2.63 M (89%) | 2.16 M (86%) | 2560 | 4349 | – |
sign-17 |
OPS Digital Signature Algorithm PDF | OPSsig-256 |
3.90 M (92%) | 5.14 M (88%) | 3.64 M (89%) | 3392 | 5540 | – |
sign-17 |
OPS Digital Signature Algorithm PDF | OPSsig-512 |
7.56 M (92%) | 10.68 M (87%) | 7.14 M (89%) | 6720 | 12021 | – |
sign-18 |
Origami PDF | Origami-128 |
2.53 M (98%) | 405.85 M (91%) | 25.87 M (83%) | 2996 | 116 | signing time includes retries after API failures |
sign-18 |
Origami PDF | Origami-256 |
88.77 M (100%) | 1.51 G (81%) | 1.38 G (82%) | 14968 | 516 | signing time includes retries after API failures |
sign-18 |
Origami PDF | Origami-384 |
306.15 M (100%) | 19.85 G (81%, n=25) | 6.48 G (81%) | 27940 | 948 | signing time includes retries after API failures |
sign-18 |
Origami PDF | Origami-512 |
499.54 M (100%) | 13.08 G (79%) | 11.92 G (81%) | 35924 | 1220 | signing time includes retries after API failures |
sign-19 |
Phoenix PDF | Phoenix-SM3-128f ⚠ KAT MISMATCH |
10.80 M (0.0%) | 219.91 M (4.1%) | 6.08 M (1.3%) | 32 | 13670 | hash backend varies by instance; KAT/output caveat; see candidate page |
sign-19 |
Phoenix PDF | Phoenix-SM3-128s ⚠ KAT MISMATCH |
343.22 M (0.0%) | 3.90 G (5.3%) | 13.88 M (0.5%) | 32 | 6258 | hash backend varies by instance; KAT/output caveat; see candidate page |
sign-19 |
Phoenix PDF | Phoenix-SM3-192f ⚠ KAT MISMATCH |
29.84 M (0.0%) | 587.62 M (0.3%) | 15.70 M (0.7%) | 48 | 30766 | hash backend varies by instance; KAT/output caveat; see candidate page |
sign-19 |
Phoenix PDF | Phoenix-SM3-192s ⚠ KAT MISMATCH |
1.11 G (0.0%) | 11.52 G (0.9%) | 39.76 M (0.2%) | 48 | 13332 | hash backend varies by instance; KAT/output caveat; see candidate page |
sign-19 |
Phoenix PDF | Phoenix-SM3-256f ⚠ KAT MISMATCH |
59.14 M (0.0%) | 1.12 G (2.0%) | 30.04 M (0.5%) | 64 | 44906 | hash backend varies by instance; KAT/output caveat; see candidate page |
sign-19 |
Phoenix PDF | Phoenix-SM3-256s ⚠ KAT MISMATCH |
777.96 M (0.0%) | 10.54 G (12%) | 67.56 M (0.2%) | 64 | 24618 | hash backend varies by instance; KAT/output caveat; see candidate page |
sign-19 |
Phoenix PDF | Phoenix-SM3-384f ⚠ KAT MISMATCH |
124.61 M (0.0%) | 3.55 G (0.0%) | 67.63 M (0.3%) | 96 | 88442 | hash backend varies by instance; KAT/output caveat; see candidate page |
sign-19 |
Phoenix PDF | Phoenix-SM3-384s ⚠ KAT MISMATCH |
1.22 G (0.0%) | 16.64 G (2.0%) | 106.66 M (0.2%) | 96 | 54726 | hash backend varies by instance; KAT/output caveat; see candidate page |
sign-19 |
Phoenix PDF | Phoenix-SM3-512f ⚠ KAT MISMATCH |
248.00 M (0.0%) | 6.03 G (4.8%) | 133.86 M (0.2%) | 128 | 138454 | hash backend varies by instance; KAT/output caveat; see candidate page |
sign-19 |
Phoenix PDF | Phoenix-SM3-512s ⚠ KAT MISMATCH |
2.58 G (0.0%) | 25.75 G (8.1%, n=70) | 43.19 M (0.5%) | 128 | 98476 | hash backend varies by instance; KAT/output caveat; see candidate page |
sign-20 |
Qing Luan PDF | QingLuan-128 |
272.2 k (69%) | 16.41 M (62%) | 7.15 M (66%) | 77 | 18720 | – |
sign-20 |
Qing Luan PDF | QingLuan-256 |
1.67 M (82%) | 103.95 M (72%) | 45.53 M (77%) | 153 | 74248 | – |
sign-20 |
Qing Luan PDF | QingLuan-384 |
3.58 M (82%) | 257.81 M (72%) | 115.85 M (79%) | 227 | 164940 | – |
sign-20 |
Qing Luan PDF | QingLuan-512 |
8.80 M (88%) | 612.04 M (77%) | 274.42 M (83%) | 302 | 292816 | – |
sign-21 |
ReSolveD-ɑ PDF | ReSolveD-alpha-160f |
14.25 M (34%) | 677.96 M (2.5%) | 639.43 M (1.8%) | 121 | 6851 | own symmetric primitives; placeholder share unavailable |
sign-21 |
ReSolveD-ɑ PDF | ReSolveD-alpha-160s |
14.26 M (34%) | 4.66 G (1.4%) | 4.61 G (1.2%) | 121 | 5307 | own symmetric primitives; placeholder share unavailable |
sign-21 |
ReSolveD-ɑ PDF | ReSolveD-alpha-256f |
32.73 M (39%) | 1.39 G (3.0%) | 1.33 G (2.1%) | 194 | 17932 | own symmetric primitives; placeholder share unavailable |
sign-21 |
ReSolveD-ɑ PDF | ReSolveD-alpha-256s |
32.74 M (39%) | 13.08 G (1.4%) | 12.98 G (1.1%) | 194 | 13973 | own symmetric primitives; placeholder share unavailable |
sign-21 |
ReSolveD-ɑ PDF | ReSolveD-alpha-384f |
80.53 M (36%) | 3.77 G (3.0%) | 3.61 G (2.2%) | 288 | 40469 | own symmetric primitives; placeholder share unavailable |
sign-21 |
ReSolveD-ɑ PDF | ReSolveD-alpha-384s |
80.50 M (36%) | 33.60 G (1.7%, n=55) | 33.31 G (1.4%, n=55) | 288 | 31575 | own symmetric primitives; placeholder share unavailable |
sign-21 |
ReSolveD-ɑ PDF | ReSolveD-alpha-512f |
133.32 M (72%) | 802.75 M (38%) | 640.49 M (33%) | 385 | 72611 | own symmetric primitives; placeholder share unavailable |
sign-21 |
ReSolveD-ɑ PDF | ReSolveD-alpha-512s |
133.37 M (72%) | 3.82 G (39%) | 3.28 G (35%) | 385 | 56239 | own symmetric primitives; placeholder share unavailable |
sign-22 |
Rhyme PDF | Rhyme-SM3-128 |
867.63 M (0.3%) | 4.27 M (75%) | 338.8 k (55%) | 800 | ≈1483 | hash backend varies by instance |
sign-22 |
Rhyme PDF | Rhyme-SM3-256 |
2.32 G (0.4%) | 15.55 M (77%) | 870.9 k (59%) | 1824 | ≈3258 | hash backend varies by instance |
sign-22 |
Rhyme PDF | Rhyme-SM3-384 |
6.54 G (0.2%) | 23.32 M (74%) | 1.60 M (59%) | 2720 | ≈4743 | hash backend varies by instance |
sign-22 |
Rhyme PDF | Rhyme-SM3-512 |
6.87 G (0.3%) | 32.58 M (76%) | 2.22 M (55%) | 3872 | ≈7002 | hash backend varies by instance |
sign-23 |
Shuttle PDF | SHUTTLE-128 |
8.65 M (??%) | 4.51 M (??%) | 1.11 M (??%) | 1264 | 1183 | ICCS DRNG is used as the XOF and accounted separately |
sign-23 |
Shuttle PDF | SHUTTLE-256 |
9.11 M (??%) | 7.15 M (??%) | 1.51 M (??%) | 1952 | 2417 | ICCS DRNG is used as the XOF and accounted separately |
sign-23 |
Shuttle PDF | SHUTTLE-512 |
20.92 M (??%) | 14.60 M (??%) | 2.83 M (??%) | 3648 | 5001 | ICCS DRNG is used as the XOF and accounted separately |
sign-24 |
Sigurd PDF | Sigurd-128 |
21.21 M (21%) | 37.45 M (31%) | 15.26 M (43%) | 112 | ≈25108 | – |
sign-24 |
Sigurd PDF | Sigurd-256 |
113.63 M (32%) | 325.62 M (57%) | 110.82 M (49%) | 212 | ≈74756 | – |
sign-24 |
Sigurd PDF | Sigurd-512 |
564.66 M (40%) | 2.97 G (62%) | 931.31 M (34%) | 435 | ≈282692 | – |
sign-25 |
SQIsign2D2 PDF | SQISign2Dsquare-Level1-eff_compressed |
48.79 M (0.0%) | 162.12 M (0.5%) | 34.65 M (1.2%) | 65 | 168 | – |
sign-25 |
SQIsign2D2 PDF | SQISign2Dsquare-Level1-eff_uncompressed |
25.31 M (0.0%) | 139.10 M (0.4%) | 28.48 M (1.4%) | 64 | 200 | – |
sign-25 |
SQIsign2D2 PDF | SQISign2Dsquare-Level1-sec_compressed |
67.27 M (0.0%) | 223.10 M (0.0%) | 46.29 M (0.0%) | 69 | 178 | – |
sign-25 |
SQIsign2D2 PDF | SQISign2Dsquare-Level1-sec_uncompressed |
38.91 M (0.0%) | 217.06 M (0.0%) | 45.58 M (0.0%) | 68 | 212 | – |
sign-25 |
SQIsign2D2 PDF | SQISign2Dsquare-Level2-eff_compressed |
53.82 M (0.0%) | 177.99 M (2.6%) | 41.99 M (15%) | 81 | 208 | – |
sign-25 |
SQIsign2D2 PDF | SQISign2Dsquare-Level2-eff_uncompressed ⚠ KAT CRYPTOFAIL |
28.88 M (0.0%) | 168.46 M (2.4%) | 38.76 M (17%) | 80 | 248 | KAT/output caveat; see candidate page |
sign-25 |
SQIsign2D2 PDF | SQISign2Dsquare-Level2-sec_compressed |
122.46 M (0.0%) | 394.31 M (0.0%) | 98.08 M (0.0%) | 85 | 218 | – |
sign-25 |
SQIsign2D2 PDF | SQISign2Dsquare-Level2-sec_uncompressed |
60.07 M (0.0%) | 330.40 M (0.0%) | 71.94 M (0.0%) | 84 | 260 | – |
sign-25 |
SQIsign2D2 PDF | SQISign2Dsquare-Level3-eff_compressed |
263.66 M (0.0%) | 899.01 M (1.0%) | 202.48 M (6.4%) | 129 | 326 | – |
sign-25 |
SQIsign2D2 PDF | SQISign2Dsquare-Level3-eff_uncompressed |
141.90 M (0.0%) | 844.61 M (1.0%) | 189.07 M (6.9%) | 128 | 392 | – |
sign-25 |
SQIsign2D2 PDF | SQISign2Dsquare-Level3-sec_compressed |
371.43 M (0.0%) | 1.19 G (0.0%) | 264.35 M (0.0%) | 133 | 338 | – |
sign-25 |
SQIsign2D2 PDF | SQISign2Dsquare-Level3-sec_uncompressed |
198.03 M (0.0%) | 1.13 G (0.0%) | 246.60 M (0.0%) | 132 | 404 | – |
sign-25 |
SQIsign2D2 PDF | SQISign2Dsquare-Level5-eff_compressed |
1.92 G (0.0%) | 6.25 G (0.1%) | 1.37 G (0.7%) | 257 | 648 | – |
sign-25 |
SQIsign2D2 PDF | SQISign2Dsquare-Level5-eff_uncompressed |
1.01 G (0.0%) | 5.67 G (0.1%) | 1.20 G (0.8%) | 256 | 776 | – |
sign-25 |
SQIsign2D2 PDF | SQISign2Dsquare-Level5-sec_compressed |
2.50 G (0.0%) | 7.95 G (0.0%) | 1.77 G (0.0%) | 269 | 678 | – |
sign-25 |
SQIsign2D2 PDF | SQISign2Dsquare-Level5-sec_uncompressed |
1.32 G (0.0%) | 7.23 G (0.0%) | 1.52 G (0.0%) | 268 | 812 | – |
sign-26 |
SQIsign2D-push1/2 PDF | SQIsign2D-lvl1 |
558.85 M (0.0%) | 619.25 M (0.0%) | 135.94 M (0.0%) | 64 | 150 | – |
sign-26 |
SQIsign2D-push1/2 PDF | SQIsign2D-lvl2 |
1.85 G (0.0%) | 3.29 G (0.0%) | 438.06 M (0.0%) | 96 | 218 | – |
sign-26 |
SQIsign2D-push1/2 PDF | SQIsign2D-lvl3 ⚠ KAT MISMATCH |
5.57 G (0.0%) | 5.32 G (0.0%) | 1.33 G (0.0%) | 128 | 293 | KAT/output caveat; see candidate page |
sign-26 |
SQIsign2D-push1/2 PDF | SQIsign2D-lvl4 |
44.58 G (0.0%, n=40) | 39.28 G (0.0%, n=45) | 9.78 G (0.0%) | 262 | 593 | – |
sign-27 |
SQIsignTriangle PDF | SQIsignTriangle_lvl1 |
108.98 M (0.0%) | 203.28 M (1.6%) | 19.98 M (3.4%) | 65 | 204 | – |
sign-27 |
SQIsignTriangle PDF | SQIsignTriangle_lvl2 |
164.50 M (0.0%) | 373.20 M (3.4%) | 32.79 M (0.4%) | 81 | 255 | – |
sign-27 |
SQIsignTriangle PDF | SQIsignTriangle_lvl5 |
533.79 M (0.0%) | 1.06 G (4.7%) | 155.70 M (39%) | 129 | 408 | – |
sign-27 |
SQIsignTriangle PDF | SQIsignTriangle_lvl6 |
4.16 G (0.0%) | 10.05 G (1.7%) | 3.31 G (83%) | 257 | 816 | – |
sign-28 |
SYDO PDF | sydo_160f |
901.2 k (1.3%) | 443.76 M (2.1%) | 449.76 M (2.1%) | 80 | 6724 | mixed own/ICCS primitives |
sign-28 |
SYDO PDF | sydo_160s |
901.6 k (1.3%) | 1.12 G (5.3%) | 1.11 G (4.5%) | 80 | 5428 | mixed own/ICCS primitives |
sign-28 |
SYDO PDF | sydo_256f |
1.60 M (1.1%) | 967.48 M (2.5%) | 1.00 G (2.5%) | 128 | 17604 | mixed own/ICCS primitives |
sign-28 |
SYDO PDF | sydo_256s |
1.60 M (1.1%) | 2.40 G (5.5%) | 2.43 G (5.4%) | 128 | 14444 | mixed own/ICCS primitives |
sign-28 |
SYDO PDF | sydo_512f |
577.0 k (12%) | 2.49 G (7.8%) | 2.65 G (7.4%) | 246 | 67716 | mixed own/ICCS primitives |
sign-28 |
SYDO PDF | sydo_512s |
570.3 k (11%) | 4.30 G (26%) | 4.36 G (24%) | 246 | 56672 | mixed own/ICCS primitives |
sign-29 |
Tins PDF | Tins128 ⚠ KAT CRYPTOFAIL |
1.71 M (0.0%) | 1.35 G (20%) | 1.25 G (20%) | 51 | 3284 | KAT/output caveat; see candidate page |
sign-29 |
Tins PDF | Tins256 |
9.67 M (0.0%) | 4.77 G (37%) | 4.64 G (39%) | 98 | 13012 | – |
sign-29 |
Tins PDF | Tins512 |
62.90 M (0.0%) | 20.33 G (54%, n=90) | 20.14 G (55%, n=90) | 195 | 51187 | – |
sign-30 |
TRINE PDF | TRINE-128-Balanced |
9.54 M (64%) | 39.46 G (16%, n=45) | 25.46 G (16%, n=70) | 16004 | 3156 | – |
sign-30 |
TRINE PDF | TRINE-128-ShortSig |
19.87 M (35%) | 18.23 G (16%, n=95) | 8.77 G (16%) | 63920 | 1652 | – |
sign-30 |
TRINE PDF | TRINE-256-Balanced ⚠ KAT TIMEOUT |
56.62 M (46%) | 534.99 G (7.1%, n=3) | 329.94 G (6.8%, n=5) | 96064 | 11712 | KAT/output caveat; see candidate page |
sign-30 |
TRINE PDF | TRINE-256-ShortSig |
125.49 M (25%) | 158.21 G (9.2%, n=10) | 58.42 G (8.8%, n=30) | 384064 | 5968 | – |
sign-30 |
TRINE PDF | TRINE-512-Balanced ⚠ KAT TIMEOUT |
991.87 M (57%) | 8385.08 G (2.5%, n=1) | 5525.78 G (2.5%, n=1) | 797290 | 46565 | KAT/output caveat; see candidate page |
sign-30 |
TRINE PDF | TRINE-512-ShortSig ⚠ KAT TIMEOUT |
2.25 G (27%) | 3367.79 G (2.5%, n=1) | 1560.87 G (2.5%, n=1) | 3188776 | 23672 | KAT/output caveat; see candidate page |
sign-31 |
TSUOV PDF | TSUOV_128 |
10.52 M (77%) | 14.54 M (56%) | 11.83 M (69%) | 779 | 896 | – |
sign-31 |
TSUOV PDF | TSUOV_256 |
67.40 M (75%) | 94.37 M (54%) | 79.44 M (64%) | 2170 | 2412 | – |
sign-31 |
TSUOV PDF | TSUOV_512 |
918.12 M (74%) | 862.97 M (79%) | 898.63 M (75%) | 21319 | 2939 | – |
sign-32 |
UVW signature PDF | UVW-128 ⚠ KAT CRYPTOFAIL |
78.68 G (0.0%, n=20) | 30.29 G (0.0%, n=95) | 340.31 M (1.0%) | 5897612 | 1244 | KAT/output caveat; see candidate page |
sign-32 |
UVW signature PDF | UVW-256 ⚠ KAT CRYPTOFAIL |
1048.15 G (0.0%, n=1) | 253.22 G (0.0%, n=5) | 1.96 G (0.2%) | 23040012 | 2444 | KAT/output caveat; see candidate page |
sign-32 |
UVW signature PDF | UVW-512 ⚠ KAT CRYPTOFAIL |
11676.24 G (0.0%, n=1) | 1935.27 G (0.0%, n=1) | 23.49 G (0.0%, n=80) | 95160012 | 4956 | KAT/output caveat; see candidate page |
sign-33 |
VDOO: Vinegar-Diagonal-Oil-Oil PDF | vdoo_128 |
1.20 G (0.0%) | 219.78 M (0.0%) | 2.36 M (0.3%) | 330855 | 85 | – |
sign-33 |
VDOO: Vinegar-Diagonal-Oil-Oil PDF | vdoo_256 |
39.28 G (0.0%, n=45) | 271.44 M (0.0%) | 7.77 M (0.1%) | 4289250 | 316 | – |
sign-33 |
VDOO: Vinegar-Diagonal-Oil-Oil PDF | vdoo_512 ⚠ KAT TIMEOUT |
308.01 G (0.0%, n=5) | 1.69 G (0.0%) | 28.78 M (0.1%) | 20229300 | 471 | KAT/output caveat; see candidate page |
sign-34 |
YuanYang.DSA PDF | yuanyang-512 |
17.05 M (0.0%) | 9.00 M (1.9%) | 210.7 k (59%) | 738 | 561 | – |
sign-34 |
YuanYang.DSA PDF | yuanyang-1024 |
19.76 M (0.0%) | 14.65 M (1.8%) | 461.1 k (54%) | 1570 | 1150 | – |
sign-34 |
YuanYang.DSA PDF | yuanyang-2048 |
88.03 M (0.0%) | 46.36 M (1.7%) | 1.02 M (49%) | 3330 | 2364 | – |
Key encapsulation
| id | algorithm | instance performance report | keygen cycles (sym %) | enc cycles (sym %) | dec cycles (sym %) | public key (B) | ciphertext (B) | notes |
|---|---|---|---|---|---|---|---|---|
kem-01 |
Aigis-Enc+ PDF | Aigis-enc1 |
269.2 k (30%) | 331.4 k (35%) | 373.2 k (33%) | 656 | 896 | – |
kem-01 |
Aigis-Enc+ PDF | Aigis-enc2 |
448.1 k (30%) | 602.4 k (35%) | 705.1 k (31%) | 1312 | 1664 | – |
kem-01 |
Aigis-Enc+ PDF | Aigis-enc3 |
1.01 M (38%) | 1.35 M (39%) | 1.61 M (35%) | 2624 | 3584 | – |
kem-02 |
Amoeba PDF | Amoeba128 |
379.2 k (74%) | 525.7 k (71%) | 590.4 k (63%) | 784 | 1047 | – |
kem-02 |
Amoeba PDF | Amoeba192 |
516.8 k (73%) | 732.8 k (70%) | 832.4 k (61%) | 1144 | 1581 | – |
kem-02 |
Amoeba PDF | Amoeba256 |
622.2 k (71%) | 858.4 k (67%) | 993.2 k (58%) | 1648 | 1833 | – |
kem-02 |
Amoeba PDF | Amoeba384 |
923.9 k (71%) | 1.28 M (67%) | 1.49 M (57%) | 2440 | 2769 | – |
kem-02 |
Amoeba PDF | Amoeba512 |
1.21 M (71%) | 1.66 M (67%) | 1.94 M (57%) | 3520 | 3914 | – |
kem-03 |
BAG-Loong PDF | BAG-Loong-128 |
57.12 M (69%) | 54.70 M (79%) | 99.48 M (69%) | 2500 | 3071 | – |
kem-03 |
BAG-Loong PDF | BAG-Loong-256 |
149.90 M (49%) | 128.42 M (61%) | 251.28 M (54%) | 6597 | 8400 | – |
kem-03 |
BAG-Loong PDF | BAG-Loong-384 |
347.64 M (45%) | 264.60 M (59%) | 514.28 M (56%) | 12152 | 15112 | – |
kem-03 |
BAG-Loong PDF | BAG-Loong-512 |
589.88 M (36%) | 391.51 M (54%) | 749.64 M (53%) | 19043 | 21660 | – |
kem-04 |
BAG-Piglet PDF | bag_piglet_128 |
1.61 M (53%) | 3.45 M (17%) | 12.12 M (14%) | 522 | 1027 | – |
kem-04 |
BAG-Piglet PDF | bag_piglet_256 |
7.19 M (24%) | 22.75 M (5.6%) | 81.52 M (4.4%) | 1573 | 3097 | – |
kem-04 |
BAG-Piglet PDF | bag_piglet_384 |
20.60 M (33%) | 55.27 M (8.9%) | 221.57 M (6.3%) | 2778 | 5475 | – |
kem-04 |
BAG-Piglet PDF | bag_piglet_512 |
92.32 M (56%) | 193.81 M (18%) | 725.11 M (14%) | 4158 | 8204 | – |
kem-05 |
BIKE-MLThre PDF | BIKE_v2_128 |
1.45 G (0.0%) | 13.48 M (1.2%) | 88.85 M (0.2%) | 1541 | 1573 | mixed own/ICCS primitives |
kem-05 |
BIKE-MLThre PDF | BIKE_v2_256 |
15.62 G (0.0%) | 88.31 M (0.5%) | 454.96 M (0.1%) | 5122 | 5154 | mixed own/ICCS primitives |
kem-05 |
BIKE-MLThre PDF | BIKE_v2_512 |
211.25 G (0.0%, n=5) | 660.20 M (0.4%) | 3.27 G (0.1%) | 18751 | 18815 | mixed own/ICCS primitives |
kem-06 |
BRA PDF | BRA-128 |
2.04 M (0.0%) | 4.52 M (4.5%) | 50.59 M (0.4%) | 1078 | 2092 | – |
kem-06 |
BRA PDF | BRA-256 |
4.37 M (0.0%) | 9.38 M (3.4%) | 102.18 M (0.3%) | 1735 | 3406 | – |
kem-06 |
BRA PDF | BRA-512 |
8.37 M (0.0%) | 18.55 M (3.4%) | 262.02 M (0.2%) | 3573 | 7082 | – |
kem-07 |
BRQC PDF | BRQC-128 |
3.03 M (0.0%) | 6.65 M (5.3%) | 94.14 M (0.4%) | 1954 | 3844 | – |
kem-07 |
BRQC PDF | BRQC-256 |
9.07 M (0.0%) | 18.72 M (3.1%) | 256.46 M (0.2%) | 3345 | 6626 | – |
kem-07 |
BRQC PDF | BRQC-512 |
26.53 M (0.0%) | 55.45 M (2.1%) | 1.07 G (0.1%) | 6562 | 13060 | – |
kem-08 |
BW-KEM PDF | BW_KEM_C128 |
256.8 k (65%) | 288.5 k (63%) | 338.7 k (59%) | 784 | 768 | – |
kem-08 |
BW-KEM PDF | BW_KEM_C256 |
645.6 k (72%) | 664.0 k (71%) | 793.0 k (64%) | 1568 | 1440 | – |
kem-08 |
BW-KEM PDF | BW_KEM_C512 |
2.14 M (77%) | 2.16 M (78%) | 2.51 M (72%) | 3136 | 2944 | – |
kem-09 |
CheetahKEM PDF | Cheetah128 |
283.6 k (64%) | 367.7 k (61%) | 425.3 k (54%) | 832 | 864 | – |
kem-09 |
CheetahKEM PDF | Cheetah256 |
748.1 k (68%) | 859.1 k (65%) | 973.5 k (57%) | 1648 | 1728 | – |
kem-09 |
CheetahKEM PDF | Cheetah384 |
2.25 M (82%) | 2.39 M (79%) | 2.63 M (74%) | 2704 | 2832 | – |
kem-09 |
CheetahKEM PDF | Cheetah512 |
3.60 M (83%) | 3.77 M (81%) | 4.09 M (76%) | 3600 | 4032 | – |
kem-10 |
C-Multi-UR-AG PDF | CMultiURAG-128 |
12.19 M (0.0%) | 23.60 M (2.8%) | 128.36 M (0.5%) | 3866 | 7332 | – |
kem-10 |
C-Multi-UR-AG PDF | CMultiURAG-256 |
37.54 M (0.0%) | 55.27 M (2.9%) | 339.59 M (0.5%) | 10780 | 15304 | – |
kem-10 |
C-Multi-UR-AG PDF | CMultiURAG-512 |
165.29 M (0.0%) | 240.27 M (1.8%) | 1.45 G (0.3%) | 28866 | 40926 | – |
kem-11 |
COMPASS-KEM PDF | COMPASS-KEM-128 |
1.61 M (96%) | 1.64 M (95%) | 1.66 M (93%) | 672 | 768 | – |
kem-11 |
COMPASS-KEM PDF | COMPASS-KEM-256 |
6.24 M (97%) | 6.25 M (97%) | 6.30 M (96%) | 1312 | 1472 | – |
kem-11 |
COMPASS-KEM PDF | COMPASS-KEM-384 |
3.81 M (91%) | 3.97 M (88%) | 4.15 M (84%) | 2144 | 2432 | – |
kem-11 |
COMPASS-KEM PDF | COMPASS-KEM-512 |
6.63 M (93%) | 6.83 M (90%) | 7.07 M (87%) | 2848 | 3264 | – |
kem-12 |
CTL Algorithm PDF | CTL-257-512 |
17.76 M (8.4%) | 61.0 k (12%) | 349.0 k (6.2%) | 521 | 473 | – |
kem-12 |
CTL Algorithm PDF | CTL-769-1024 |
79.80 M (2.5%) | 113.7 k (10%) | 711.3 k (5.1%) | 1230 | 1006 | – |
kem-12 |
CTL Algorithm PDF | CTL-3329-2048 |
2.15 G (0.1%) | 11.91 M (0.4%) | 79.73 M (0.3%) | 3009 | 2353 | – |
kem-13 |
DKEM (Ding Key Encapsulation) PDF | DKEM-128 |
199.1 k (65%) | 226.9 k (62%) | 254.3 k (56%) | 800 | 800 | – |
kem-13 |
DKEM (Ding Key Encapsulation) PDF | DKEM-256 |
594.4 k (70%) | 606.5 k (69%) | 653.3 k (64%) | 1568 | 1600 | – |
kem-13 |
DKEM (Ding Key Encapsulation) PDF | DKEM-512 |
2.04 M (82%) | 2.12 M (82%) | 2.23 M (77%) | 3392 | 3136 | – |
kem-14 |
DTRU PDF | DTRU-648 |
334.5 k (0.0%) | 164.8 k (25%) | 323.2 k (26%) | 972 | 729 | – |
kem-14 |
DTRU PDF | DTRU-648-PACK_PK |
336.0 k (0.0%) | 179.1 k (23%) | 337.5 k (25%) | 954 | 729 | – |
kem-14 |
DTRU PDF | DTRU-768 |
293.7 k (0.0%) | 196.9 k (33%) | 367.9 k (32%) | 1152 | 960 | – |
kem-14 |
DTRU PDF | DTRU-768-PACK_PK |
298.4 k (0.0%) | 213.9 k (31%) | 385.9 k (30%) | 1130 | 960 | – |
kem-14 |
DTRU PDF | DTRU-1024 |
346.4 k (0.0%) | 233.8 k (31%) | 451.0 k (31%) | 1536 | 1280 | – |
kem-14 |
DTRU PDF | DTRU-1024-PACK_PK |
351.1 k (0.0%) | 254.5 k (28%) | 473.5 k (29%) | 1506 | 1280 | – |
kem-14 |
DTRU PDF | DTRU-1536 |
460.0 k (0.0%) | 385.8 k (33%) | 731.8 k (30%) | 2304 | 1920 | – |
kem-14 |
DTRU PDF | DTRU-1536-PACK_PK |
479.3 k (0.0%) | 424.7 k (30%) | 776.0 k (29%) | 2259 | 1920 | – |
kem-14 |
DTRU PDF | DTRU-2048 |
804.6 k (0.0%) | 533.0 k (31%) | 1.02 M (28%) | 3072 | 2560 | – |
kem-14 |
DTRU PDF | DTRU-2048-PACK_PK |
813.9 k (0.0%) | 579.0 k (28%) | 1.07 M (27%) | 3012 | 2560 | – |
kem-14 |
DTRU PDF | DTRU-Light |
119.3 k (0.0%) | 97.8 k (28%) | 192.0 k (31%) | 640 | 512 | – |
kem-14 |
DTRU PDF | DTRU-Prime |
113.74 M (0.0%) | 335.8 k (15%) | 679.9 k (18%) | 1495 | 1359 | – |
kem-15 |
FLIT PDF | FLIT128_REF |
140.0 k (31%) | 121.3 k (52%) | 156.9 k (31%) | 615 | 512 | – |
kem-15 |
FLIT PDF | FLIT256_REF |
348.2 k (28%) | 255.5 k (42%) | 362.5 k (22%) | 1229 | 1024 | – |
kem-15 |
FLIT PDF | FLIT512_REF |
1.41 M (29%) | 943.2 k (52%) | 1.26 M (27%) | 3072 | 2304 | – |
kem-16 |
HARE PDF | HARE-128-kr |
5.89 M (3.0%) | 12.93 M (2.3%) | 19.48 M (2.1%) | 2629 | 4688 | – |
kem-16 |
HARE PDF | HARE-256-kr |
26.13 M (1.5%) | 55.20 M (1.1%) | 84.79 M (1.1%) | 6580 | 11790 | – |
kem-16 |
HARE PDF | HARE-384-kr |
78.03 M (1.1%) | 161.95 M (0.9%) | 244.38 M (1.0%) | 13157 | 23693 | – |
kem-16 |
HARE PDF | HARE-512-kr |
166.96 M (1.5%) | 342.73 M (1.0%) | 519.62 M (1.0%) | 21812 | 39294 | – |
kem-17 |
Hybrid Equivalent Punctured and Quasi-Cyclic PDF | hep-qc-1 |
232.07 M (87%) | 15.14 M (43%) | 246.18 M (89%) | 285889 | 4433 | – |
kem-17 |
Hybrid Equivalent Punctured and Quasi-Cyclic PDF | hep-qc-3 |
504.91 M (81%) | 45.13 M (42%) | 482.18 M (88%) | 866210 | 8978 | – |
kem-17 |
Hybrid Equivalent Punctured and Quasi-Cyclic PDF | hep-qc-5 |
883.58 M (74%) | 103.32 M (39%) | 814.49 M (84%) | 1852485 | 14421 | – |
kem-17 |
Hybrid Equivalent Punctured and Quasi-Cyclic PDF | hep-qc-7 |
4.22 G (55%) | 684.81 M (39%) | 3.39 G (73%) | 12644449 | 49297 | – |
kem-18 |
LoongKEM PDF | Loong128 |
6.26 M (79%) | 6.34 M (78%) | 6.42 M (77%) | 1472 | 1512 | – |
kem-18 |
LoongKEM PDF | Loong256 |
15.94 M (79%) | 15.84 M (78%) | 16.15 M (77%) | 3248 | 3520 | – |
kem-18 |
LoongKEM PDF | Loong384 |
46.99 M (86%) | 47.40 M (85%) | 47.89 M (85%) | 6444 | 6680 | – |
kem-18 |
LoongKEM PDF | Loong512 |
75.46 M (87%) | 75.94 M (87%) | 77.37 M (86%) | 10640 | 10848 | – |
kem-19 |
Lore PDF | Lore-SM3-L1 |
240.3 k (73%) | 363.5 k (68%) | 416.7 k (60%) | 610 | 706 | hash backend varies by instance |
kem-19 |
Lore PDF | Lore-SM3-L2 |
1.06 M (60%) | 1.35 M (53%) | 1.62 M (44%) | 1186 | 1282 | hash backend varies by instance |
kem-19 |
Lore PDF | Lore-SM3-L3 |
2.38 M (58%) | 2.78 M (53%) | 3.05 M (48%) | 1954 | 2114 | hash backend varies by instance |
kem-19 |
Lore PDF | Lore-SM3-L4 |
5.19 M (64%) | 5.95 M (59%) | 6.65 M (52%) | 2914 | 3170 | hash backend varies by instance |
kem-20 |
MAMBA-Frost PDF | MAMBA-Frost-128 |
38.49 M (2.2%) | 43.04 M (3.2%) | 43.47 M (3.8%) | 5152 | 5192 | mixed own/ICCS primitives; default parameter set, used in ordered measurements |
kem-20 |
MAMBA-Frost PDF | MAMBA-Frost-192 |
112.69 M (1.3%) | 119.72 M (2.0%) | 120.24 M (2.4%) | 9712 | 9760 | mixed own/ICCS primitives; default parameter set, used in ordered measurements |
kem-20 |
MAMBA-Frost PDF | MAMBA-Frost-256 |
241.73 M (1.3%) | 257.78 M (1.7%) | 258.75 M (2.0%) | 16776 | 15552 | mixed own/ICCS primitives; default parameter set, used in ordered measurements |
kem-20 |
MAMBA-Frost PDF | MAMBA-Frost-384 |
538.40 M (0.9%) | 593.01 M (1.6%) | 595.55 M (1.9%) | 25096 | 37736 | mixed own/ICCS primitives; default parameter set, used in ordered measurements |
kem-20 |
MAMBA-Frost PDF | MAMBA-Frost-512 |
972.04 M (0.9%) | 990.48 M (2.1%) | 992.50 M (2.4%) | 36432 | 72944 | mixed own/ICCS primitives; default parameter set, used in ordered measurements |
kem-20 |
MAMBA-Frost PDF | MAMBA-Frost-CC-128 |
38.45 M (2.2%) | 43.00 M (3.2%) | 43.36 M (3.8%) | 5152 | 5192 | mixed own/ICCS primitives; compact-ciphertext variant, detailed measurement only |
kem-20 |
MAMBA-Frost PDF | MAMBA-Frost-CC-192 |
111.68 M (1.3%) | 118.93 M (2.0%) | 120.02 M (2.4%) | 9712 | 9760 | mixed own/ICCS primitives; compact-ciphertext variant, detailed measurement only |
kem-20 |
MAMBA-Frost PDF | MAMBA-Frost-CC-256 |
241.47 M (1.3%) | 255.32 M (1.7%) | 258.07 M (2.0%) | 16776 | 15552 | mixed own/ICCS primitives; compact-ciphertext variant, detailed measurement only |
kem-20 |
MAMBA-Frost PDF | MAMBA-Frost-CC-384 |
541.61 M (1.3%) | 571.29 M (1.4%) | 572.50 M (1.5%) | 37628 | 25204 | mixed own/ICCS primitives; compact-ciphertext variant, detailed measurement only |
kem-20 |
MAMBA-Frost PDF | MAMBA-Frost-CC-512 |
998.62 M (1.6%) | 972.28 M (1.5%) | 973.29 M (1.5%) | 72832 | 36544 | mixed own/ICCS primitives; compact-ciphertext variant, detailed measurement only |
kem-21 |
MAMBA-Viper PDF | MAMBA-Viper-128 |
225.5 k (46%) | 349.4 k (48%) | 422.5 k (46%) | 608 | 736 | – |
kem-21 |
MAMBA-Viper PDF | MAMBA-Viper-192 |
479.3 k (48%) | 654.3 k (47%) | 747.5 k (43%) | 992 | 1088 | – |
kem-21 |
MAMBA-Viper PDF | MAMBA-Viper-256 |
798.2 k (47%) | 1.01 M (45%) | 1.12 M (42%) | 1312 | 1472 | – |
kem-21 |
MAMBA-Viper PDF | MAMBA-Viper-384 |
2.35 M (47%) | 2.70 M (46%) | 2.88 M (43%) | 2496 | 2656 | – |
kem-21 |
MAMBA-Viper PDF | MAMBA-Viper-512 |
3.79 M (46%) | 4.24 M (45%) | 4.45 M (43%) | 3200 | 3456 | – |
kem-22 |
Mithril PDF | Mithril-128 |
340.6 k (40%) | 376.6 k (38%) | 408.2 k (35%) | 944 | 928 | – |
kem-22 |
Mithril PDF | Mithril-256 |
865.5 k (28%) | 994.3 k (25%) | 1.12 M (23%) | 1648 | 1680 | – |
kem-22 |
Mithril PDF | Mithril-512 |
2.66 M (20%) | 3.16 M (17%) | 3.66 M (15%) | 3056 | 3504 | – |
kem-23 |
Mito PDF | Mito-1-128 |
12.63 M (0.3%) | 20.92 M (1.0%) | 29.58 M (1.6%) | 3908 | 5796 | – |
kem-23 |
Mito PDF | Mito-1-256 |
38.14 M (0.1%) | 63.41 M (0.6%) | 89.90 M (1.1%) | 8522 | 12714 | – |
kem-23 |
Mito PDF | Mito-1-512 |
234.79 M (0.0%) | 391.13 M (0.3%) | 550.81 M (0.5%) | 26630 | 39878 | – |
kem-23 |
Mito PDF | Mito-1-E-128 |
11.69 M (0.3%) | 19.36 M (1.0%) | 27.35 M (1.6%) | 3720 | 5512 | – |
kem-23 |
Mito PDF | Mito-1-E-256 |
39.69 M (0.1%) | 65.98 M (0.6%) | 93.36 M (1.0%) | 8130 | 12130 | – |
kem-23 |
Mito PDF | Mito-1-E-512 |
224.83 M (0.0%) | 374.52 M (0.3%) | 527.42 M (0.5%) | 25674 | 38442 | – |
kem-23 |
Mito PDF | Mito-2-E-128 |
17.27 M (0.2%) | 24.84 M (1.1%) | 32.99 M (1.7%) | 5192 | 6440 | – |
kem-23 |
Mito PDF | Mito-2-E-256 |
55.07 M (0.1%) | 79.54 M (0.6%) | 105.35 M (1.0%) | 10828 | 13484 | – |
kem-23 |
Mito PDF | Mito-2-E-512 |
346.96 M (0.0%) | 501.43 M (0.3%) | 660.21 M (0.5%) | 32712 | 40840 | – |
kem-24 |
MORNING-Scabbard PDF | scabbard128 |
741.6 k (70%) | 775.8 k (69%) | 779.7 k (67%) | 736 | 760 | – |
kem-24 |
MORNING-Scabbard PDF | scabbard256 |
1.72 M (53%) | 1.84 M (52%) | 1.89 M (49%) | 1616 | 1648 | – |
kem-24 |
MORNING-Scabbard PDF | scabbard512 |
5.12 M (51%) | 5.57 M (49%) | 5.77 M (45%) | 2880 | 3072 | – |
kem-25 |
NEV PDF | NEV_512_769_C_ICCS |
95.3 k (35%) | 70.2 k (39%) | 85.0 k (16%) | 615 | 512 | alternative parameter set, detailed measurement only |
kem-25 |
NEV PDF | NEV_512_769_ICCS |
94.8 k (34%) | 80.0 k (43%) | 85.9 k (24%) | 615 | 615 | alternative parameter set, detailed measurement only |
kem-25 |
NEV PDF | NEV_512_1409_ICCS |
126.8 k (42%) | 95.2 k (54%) | 95.1 k (39%) | 672 | 672 | recommended R set, used in ordered measurements |
kem-25 |
NEV PDF | NEV_512_3329_ICCS |
166.9 k (61%) | 152.8 k (67%) | 149.8 k (56%) | 768 | 768 | alternative parameter set, detailed measurement only |
kem-25 |
NEV PDF | NEV_1024_769_C_ICCS |
205.1 k (29%) | 149.2 k (41%) | 188.8 k (18%) | 1229 | 1024 | alternative parameter set, detailed measurement only |
kem-25 |
NEV PDF | NEV_1024_769_ICCS |
206.1 k (28%) | 165.7 k (44%) | 186.6 k (25%) | 1229 | 1229 | alternative parameter set, detailed measurement only |
kem-25 |
NEV PDF | NEV_1024_1409_ICCS |
253.5 k (32%) | 173.8 k (51%) | 188.2 k (31%) | 1344 | 1344 | recommended R set, used in ordered measurements |
kem-25 |
NEV PDF | NEV_1024_3329_ICCS |
263.4 k (49%) | 227.5 k (61%) | 229.3 k (46%) | 1536 | 1536 | alternative parameter set, detailed measurement only |
kem-25 |
NEV PDF | NEV_2048_769_C_ICCS |
620.7 k (43%) | 364.5 k (52%) | 401.2 k (19%) | 2458 | 2048 | alternative parameter set, detailed measurement only |
kem-25 |
NEV PDF | NEV_2048_769_ICCS |
622.6 k (43%) | 409.9 k (56%) | 413.3 k (28%) | 2458 | 2458 | alternative parameter set, detailed measurement only |
kem-25 |
NEV PDF | NEV_2048_1409_ICCS |
672.5 k (32%) | 481.8 k (59%) | 466.8 k (34%) | 2688 | 2688 | recommended R set, used in ordered measurements |
kem-25 |
NEV PDF | NEV_2048_3329_ICCS |
720.2 k (53%) | 575.6 k (69%) | 525.9 k (49%) | 3072 | 3072 | alternative parameter set, detailed measurement only |
kem-26 |
NSS-HQC PDF | HQC-128 |
36.60 M (??%) | 64.37 M (??%) | 128.53 M (??%) | 3713 | 5185 | own symmetric primitives; placeholder share unavailable |
kem-26 |
NSS-HQC PDF | HQC-256 |
108.08 M (??%) | 194.06 M (??%) | 343.84 M (??%) | 6844 | 9084 | own symmetric primitives; placeholder share unavailable |
kem-26 |
NSS-HQC PDF | HQC-384 |
366.16 M (??%) | 661.21 M (??%) | 1.09 G (??%) | 15371 | 18571 | own symmetric primitives; placeholder share unavailable |
kem-26 |
NSS-HQC PDF | HQC-512 |
868.07 M (??%) | 1.58 G (??%) | 2.53 G (??%) | 27302 | 31462 | own symmetric primitives; placeholder share unavailable |
kem-27 |
NTRE Key Encapsulation Mechanism PDF | NTRE-128 |
142.3 k (28%) | 113.7 k (49%) | 113.2 k (30%) | 972 | 972 | – |
kem-27 |
NTRE Key Encapsulation Mechanism PDF | NTRE-256 |
261.1 k (29%) | 220.1 k (49%) | 230.7 k (28%) | 1944 | 1944 | – |
kem-27 |
NTRE Key Encapsulation Mechanism PDF | NTRE-512 |
574.5 k (22%) | 535.8 k (44%) | 541.9 k (30%) | 3456 | 3456 | – |
kem-28 |
OAEP-NTRU PDF | OAEP-NTRU-648 |
179.1 k (13%) | 124.8 k (52%) | 127.9 k (33%) | 1053 | 1085 | – |
kem-28 |
OAEP-NTRU PDF | OAEP-NTRU-1296 |
493.8 k (23%) | 431.5 k (59%) | 339.0 k (42%) | 2430 | 2494 | – |
kem-28 |
OAEP-NTRU PDF | OAEP-NTRU-2592 |
1.19 M (20%) | 1.12 M (66%) | 955.5 k (53%) | 4860 | 4988 | – |
kem-29 |
Polar-KEM PDF | PolarKEM-128 |
166.5 k (94%) | 532.3 k (91%) | 1.04 M (95%) | 1024 | 768 | – |
kem-29 |
Polar-KEM PDF | PolarKEM-256 |
325.7 k (97%) | 678.8 k (88%) | 1.32 M (92%) | 2048 | 1280 | – |
kem-29 |
Polar-KEM PDF | PolarKEM-512 |
644.7 k (98%) | 1.33 M (88%) | 2.61 M (93%) | 4096 | 2304 | – |
kem-30 |
PolarLAC PDF | POLARLAC-128 |
160.5 k (64%) | 209.2 k (68%) | 252.7 k (62%) | 530 | 640 | – |
kem-30 |
PolarLAC PDF | POLARLAC-256 |
285.9 k (61%) | 398.5 k (65%) | 496.0 k (58%) | 1060 | 1280 | – |
kem-30 |
PolarLAC PDF | POLARLAC-512 |
980.5 k (72%) | 1.32 M (73%) | 1.60 M (67%) | 2116 | 2560 | bounded-query alternative, detailed measurement only |
kem-30 |
PolarLAC PDF | POLARLAC-512-Star |
1.07 M (65%) | 1.42 M (68%) | 1.70 M (64%) | 2522 | 2970 | recommended for unrestricted queries, used in ordered measurements |
kem-30 |
PolarLAC PDF | POLARLAC-Light |
149.0 k (61%) | 195.5 k (66%) | 237.9 k (60%) | 530 | 608 | – |
kem-31 |
QIMEN-PIKE PDF | NGCC-1 |
391.07 M (??%) | 129.56 M (??%) | 200.66 M (??%) | 389 | 602 | own symmetric primitives; placeholder share unavailable |
kem-31 |
QIMEN-PIKE PDF | NGCC-2 |
1.28 G (??%) | 409.71 M (??%) | 638.67 M (??%) | 592 | 882 | own symmetric primitives; placeholder share unavailable |
kem-31 |
QIMEN-PIKE PDF | NGCC-3 |
8.51 G (??%) | 3.13 G (??%) | 4.79 G (??%) | 1198 | 1746 | own symmetric primitives; placeholder share unavailable |
kem-32 |
Quasi-Cyclic Twisted McEliece Key Encapsulation Mechanism PDF | QCTM128 |
53.85 G (??%, n=65) | 18.43 M (??%) | 5.90 G (??%) | 167987 | 640 | own symmetric primitives; placeholder share unavailable |
kem-32 |
Quasi-Cyclic Twisted McEliece Key Encapsulation Mechanism PDF | QCTM256 |
132.38 G (??%, n=10) | 53.10 M (??%) | 29.11 G (??%, n=60) | 595662 | 1153 | own symmetric primitives; placeholder share unavailable |
kem-32 |
Quasi-Cyclic Twisted McEliece Key Encapsulation Mechanism PDF | QCTM512 |
793.78 G (??%, n=2) | 211.05 M (??%) | 204.27 G (??%, n=5) | 2374727 | 2264 | own symmetric primitives; placeholder share unavailable |
kem-33 |
QUBE PDF | qube-128 ⚠ KAT MISMATCH |
616.9 k (55%) | 657.8 k (62%) | 1.18 M (49%) | 3294 | 3287 | KAT/output caveat; see candidate page |
kem-33 |
QUBE PDF | qube-192 ⚠ KAT NOKAT |
1.41 M (49%) | 1.48 M (56%) | 2.83 M (41%) | 6364 | 6362 | KAT/output caveat; see candidate page |
kem-33 |
QUBE PDF | qube-256 ⚠ KAT MISMATCH |
2.89 M (47%) | 2.92 M (53%) | 5.95 M (35%) | 10446 | 10423 | KAT/output caveat; see candidate page |
kem-33 |
QUBE PDF | qube-384 ⚠ KAT MISMATCH |
7.21 M (38%) | 7.17 M (48%) | 13.37 M (40%) | 20738 | 20633 | KAT/output caveat; see candidate page |
kem-33 |
QUBE PDF | qube-512 ⚠ KAT MISMATCH |
19.03 M (51%) | 18.67 M (60%) | 29.26 M (49%) | 34028 | 33846 | KAT/output caveat; see candidate page |
kem-34 |
Rudraksh2 PDF | lwekem128 |
3.19 M (92%) | 3.13 M (93%) | 3.17 M (91%) | 880 | 912 | – |
kem-34 |
Rudraksh2 PDF | lwekem256 |
6.31 M (92%) | 6.25 M (93%) | 6.33 M (92%) | 1760 | 1728 | – |
kem-34 |
Rudraksh2 PDF | lwekem512 |
19.96 M (96%) | 19.99 M (96%) | 20.15 M (95%) | 3392 | 3552 | – |
kem-35 |
Scloud+ PDF | Scloudplus-128-SM3-packed10 |
23.68 M (92%) | 23.93 M (92%) | 23.78 M (92%) | 6096 | 6160 | hash backend varies by instance |
kem-35 |
Scloud+ PDF | Scloudplus-192-SM3-packed10 |
44.44 M (93%) | 45.14 M (92%) | 45.03 M (91%) | 11456 | 12645 | hash backend varies by instance |
kem-35 |
Scloud+ PDF | Scloudplus-256-SM3-packed10 |
90.93 M (91%) | 92.25 M (91%) | 92.03 M (90%) | 16296 | 17925 | hash backend varies by instance |
kem-35 |
Scloud+ PDF | Scloudplus-384-SM3-packed10 |
179.31 M (90%) | 182.22 M (90%) | 181.76 M (89%) | 33296 | 33600 | hash backend varies by instance |
kem-35 |
Scloud+ PDF | Scloudplus-512-SM3-packed10 |
376.23 M (89%) | 379.05 M (89%) | 377.95 M (89%) | 48016 | 48320 | hash backend varies by instance |
kem-36 |
TRIKE PDF | TRIKE-2 |
101.46 M (0.0%) | 9.36 M (4.7%) | 51.33 M (0.8%) | 1980 | 3928 | – |
kem-36 |
TRIKE PDF | TRIKE-5 |
740.74 M (0.0%) | 69.36 M (1.4%) | 203.28 M (0.5%) | 4453 | 8874 | – |
kem-36 |
TRIKE PDF | TRIKE-7 |
2.41 G (0.0%) | 203.56 M (0.9%) | 598.79 M (0.3%) | 8776 | 17488 | – |
kem-36 |
TRIKE PDF | TRIKE-9 |
3.04 G (0.0%) | 206.80 M (1.5%) | 1.17 G (0.3%) | 14320 | 28576 | – |
kem-37 |
TriQ-KEM PDF | TriQ-KEM-128 |
3.92 M (12%) | 7.41 M (6.1%) | 11.21 M (4.6%) | 2054 | 4086 | – |
kem-37 |
TriQ-KEM PDF | TriQ-KEM-256 |
21.48 M (4.1%) | 42.49 M (2.9%) | 63.63 M (2.3%) | 6328 | 12472 | – |
kem-37 |
TriQ-KEM PDF | TriQ-KEM-384 |
57.31 M (2.9%) | 113.81 M (2.0%) | 171.18 M (1.9%) | 12255 | 24335 | – |
kem-37 |
TriQ-KEM PDF | TriQ-KEM-512 |
122.30 M (3.7%) | 242.32 M (2.6%) | 362.24 M (2.2%) | 19768 | 39320 | – |
kem-38 |
UVW Key Encapsulation Mechanism PDF | UVW-KEM-128 |
627.34 M (0.0%) | 987.6 k (14%) | 1.36 G (0.0%) | 208013 | 1032 | – |
kem-38 |
UVW Key Encapsulation Mechanism PDF | UVW-KEM-256 |
4.82 G (0.0%) | 2.88 M (9.5%) | 9.76 G (0.0%) | 911645 | 2199 | – |
kem-38 |
UVW Key Encapsulation Mechanism PDF | UVW-KEM-512 |
37.96 G (0.0%, n=45) | 18.93 M (3.9%) | 62.33 G (0.0%, n=30) | 4001850 | 4820 | – |
kem-39 |
Weaver PDF | WeaverKEM-128 |
545.1 k (82%) | 585.8 k (81%) | 610.9 k (78%) | 752 | 816 | – |
kem-39 |
Weaver PDF | WeaverKEM-256 |
845.7 k (76%) | 952.3 k (71%) | 956.1 k (68%) | 1312 | 1536 | – |
kem-39 |
Weaver PDF | WeaverKEM-512 |
2.74 M (82%) | 3.18 M (77%) | 3.23 M (76%) | 2880 | 3392 | – |
kem-40 |
YuanYang.KEM PDF | yuanyang-512 |
505.6 k (8.1%) | 288.3 k (42%) | 433.4 k (21%) | 736 | 656 | – |
kem-40 |
YuanYang.KEM PDF | yuanyang-1024 |
1.07 M (7.2%) | 495.2 k (38%) | 808.6 k (15%) | 1568 | 1344 | – |
kem-40 |
YuanYang.KEM PDF | yuanyang-2048 |
2.06 M (7.5%) | 991.5 k (34%) | 1.68 M (12%) | 3328 | 2880 | – |
kem-41 |
ZEN PDF | ZEN_128 |
222.8 k (29%) | 143.8 k (67%) | 191.9 k (49%) | 615 | 512 | – |
kem-41 |
ZEN PDF | ZEN_256 |
391.5 k (36%) | 200.6 k (47%) | 327.4 k (28%) | 1229 | 1024 | – |
kem-41 |
ZEN PDF | ZEN_512 |
970.2 k (46%) | 501.9 k (57%) | 788.0 k (34%) | 2458 | 2048 | – |
Key exchange
| id | algorithm | instance performance report | exchange cycles (sym %) | bandwidth (bytes) | notes |
|---|---|---|---|---|---|
kex-01 |
ADKEX (Authenticated Ding Key Exchange) PDF | ADKEX-128 |
1.52 M (63%) | 3200 | – |
kex-01 |
ADKEX (Authenticated Ding Key Exchange) PDF | ADKEX-256 |
4.05 M (69%) | 6336 | – |
kex-01 |
ADKEX (Authenticated Ding Key Exchange) PDF | ADKEX-512 |
13.97 M (81%) | 13056 | – |
kex-02 |
AFS-KEX PDF | AFS_KEX_C128 |
2.81 M (63%) | 4704 | – |
kex-02 |
AFS-KEX PDF | AFS_KEX_C256 |
6.52 M (73%) | 9216 | – |
kex-02 |
AFS-KEX PDF | AFS_KEX_C512 |
22.17 M (76%) | 18560 | – |
kex-03 |
CreTAKE PDF | CreTAKE-K2K-PLAC128 |
1.99 M (68%) | 3510 | – |
kex-03 |
CreTAKE PDF | CreTAKE-K2K-PLAC256 |
4.05 M (66%) | 7020 | – |
kex-03 |
CreTAKE PDF | CreTAKE-K2K-PLAC512 |
14.18 M (74%) | 13516 | – |
kex-03 |
CreTAKE PDF | CreTAKE-K2K-PLAC512Star |
15.43 M (70%) | 15964 | – |
kex-03 |
CreTAKE PDF | CreTAKE-K2K-ZEN128 |
1.91 M (46%) | 3381 | – |
kex-03 |
CreTAKE PDF | CreTAKE-K2K-ZEN256 |
3.55 M (46%) | 6759 | – |
kex-03 |
CreTAKE PDF | CreTAKE-K2K-ZEN512 |
9.55 M (57%) | 13518 | – |
kex-03 |
CreTAKE PDF | CreTAKE-K2S-PLAC128-BiT128 |
4.40 M (64%) | 4892 | – |
kex-03 |
CreTAKE PDF | CreTAKE-K2S-PLAC256-BiT256 |
8.04 M (71%) | 10280 | – |
kex-03 |
CreTAKE PDF | CreTAKE-K2S-PLAC512-BiT512 |
26.97 M (77%) | 21103 | – |
kex-03 |
CreTAKE PDF | CreTAKE-K2S-ZEN128-BiT128 |
4.26 M (59%) | 4806 | – |
kex-03 |
CreTAKE PDF | CreTAKE-K2S-ZEN256-BiT256 |
7.88 M (66%) | 10106 | – |
kex-03 |
CreTAKE PDF | CreTAKE-K2S-ZEN512-BiT512 |
24.31 M (74%) | 20763 | – |
kex-03 |
CreTAKE PDF | CreTAKE-S2K-BiT128-PLAC128 |
4.45 M (64%) | 4892 | – |
kex-03 |
CreTAKE PDF | CreTAKE-S2K-BiT128-ZEN128 |
4.49 M (58%) | 4806 | – |
kex-03 |
CreTAKE PDF | CreTAKE-S2K-BiT256-PLAC256 |
8.34 M (71%) | 10280 | – |
kex-03 |
CreTAKE PDF | CreTAKE-S2K-BiT256-ZEN256 |
8.13 M (64%) | 10106 | – |
kex-03 |
CreTAKE PDF | CreTAKE-S2K-BiT512-PLAC512 |
29.73 M (76%) | 21103 | – |
kex-03 |
CreTAKE PDF | CreTAKE-S2K-BiT512-ZEN512 |
25.76 M (72%) | 20763 | – |
kex-03 |
CreTAKE PDF | CreTAKE-S2S-BiT128-ePLAC128 |
6.97 M (63%) | 6274 | – |
kex-03 |
CreTAKE PDF | CreTAKE-S2S-BiT128-eZEN128 |
7.02 M (61%) | 6231 | – |
kex-03 |
CreTAKE PDF | CreTAKE-S2S-BiT256-ePLAC256 |
12.50 M (72%) | 13540 | – |
kex-03 |
CreTAKE PDF | CreTAKE-S2S-BiT256-eZEN256 |
12.64 M (69%) | 13453 | – |
kex-03 |
CreTAKE PDF | CreTAKE-S2S-BiT512-ePLAC512 |
41.88 M (78%) | 28178 | – |
kex-03 |
CreTAKE PDF | CreTAKE-S2S-BiT512-eZEN512 |
43.97 M (75%) | 28008 | – |
kex-04 |
DKEX (Ding Key Exchange) PDF | DKEX-128 |
3.84 M (12%) | 9032 | mixed own/ICCS primitives |
kex-04 |
DKEX (Ding Key Exchange) PDF | DKEX-256 |
8.70 M (14%) | 17574 | mixed own/ICCS primitives |
kex-04 |
DKEX (Ding Key Exchange) PDF | DKEX-512 |
12.24 M (36%) | 20902 | mixed own/ICCS primitives |
kex-05 |
Loom PDF | LoomKEX-128 |
30.90 M (3.1%) | 6566 | – |
kex-05 |
Loom PDF | LoomKEX-256 |
38.83 M (3.4%) | 11610 | – |
kex-05 |
Loom PDF | LoomKEX-512 |
81.64 M (6.2%) | 23466 | – |
kex-06 |
MAMBA-NIKE PDF | MAMBA-NIKE-128 |
6.09 M (??%) | 2752 | own symmetric primitives; placeholder share unavailable |
kex-06 |
MAMBA-NIKE PDF | MAMBA-NIKE-192 |
6.14 M (??%) | 2880 | own symmetric primitives; placeholder share unavailable |
kex-06 |
MAMBA-NIKE PDF | MAMBA-NIKE-256 |
6.20 M (??%) | 2880 | own symmetric primitives; placeholder share unavailable |
kex-06 |
MAMBA-NIKE PDF | MAMBA-NIKE-384 |
12.94 M (??%) | 6208 | own symmetric primitives; placeholder share unavailable |
kex-06 |
MAMBA-NIKE PDF | MAMBA-NIKE-512 |
13.11 M (??%) | 6208 | own symmetric primitives; placeholder share unavailable |
kex-07 |
NEV-AKE PDF | NEV_AKE_512_769 |
889.2 k (45%) | 3690 | alternative parameter set, detailed measurement only |
kex-07 |
NEV-AKE PDF | NEV_AKE_512_769_C |
847.7 k (42%) | 3484 | alternative parameter set, detailed measurement only |
kex-07 |
NEV-AKE PDF | NEV_AKE_512_1409 |
1.08 M (52%) | 4032 | recommended R set, used in ordered measurements |
kex-07 |
NEV-AKE PDF | NEV_AKE_1024_769 |
1.83 M (42%) | 7374 | alternative parameter set, detailed measurement only |
kex-07 |
NEV-AKE PDF | NEV_AKE_1024_769_C |
1.76 M (38%) | 6964 | alternative parameter set, detailed measurement only |
kex-07 |
NEV-AKE PDF | NEV_AKE_1024_1409 |
2.03 M (45%) | 8064 | recommended R set, used in ordered measurements |
kex-07 |
NEV-AKE PDF | NEV_AKE_2048_769 |
5.18 M (55%) | 14748 | alternative parameter set, detailed measurement only |
kex-07 |
NEV-AKE PDF | NEV_AKE_2048_769_C |
4.87 M (51%) | 13928 | alternative parameter set, detailed measurement only |
kex-07 |
NEV-AKE PDF | NEV_AKE_2048_1409 |
5.75 M (53%) | 16128 | recommended R set, used in ordered measurements |
kex-08 |
NIIKE PDF | NIIKE-lv128 |
52.91 G (??%, n=35) | 8320 | own symmetric primitives; placeholder share unavailable |
kex-08 |
NIIKE PDF | NIIKE-lv256 |
935.98 G (??%, n=1) | 17920 | own symmetric primitives; placeholder share unavailable |
kex-09 |
TriQ-KEX PDF | TriQ-KEX-128 |
60.66 M (7.0%) | 18436 | – |
kex-09 |
TriQ-KEX PDF | TriQ-KEX-256 |
343.23 M (3.6%) | 56416 | – |
kex-09 |
TriQ-KEX PDF | TriQ-KEX-384 |
934.75 M (4.4%) | 109786 | – |
kex-09 |
TriQ-KEX PDF | TriQ-KEX-512 |
1.96 G (3.8%) | 177280 | – |
ICCS hash helpers
The ICCS placeholder functions from api/auxfunc.c, built with the reference flags and timed as hash instances at the guide's S1–S8 message lengths (mean cycles per call). pseudohash exists only with 512-, 768- and 1024-bit output; pseudoXOF is given at every digest width of a hash candidate.
| ICCS helper | output bits | 32 B | 128 B | 512 B | 1 KiB | 4 KiB | 8 KiB | 16 KiB | 64 KiB | cycles/byte (64 KiB) |
|---|---|---|---|---|---|---|---|---|---|---|
sm3hash |
256 | 1469 | 4150 | 12.2 k | 23.0 k | 87.7 k | 173.7 k | 346.0 k | 1.39 M | 21.1 |
pseudohash |
512 | 10000 | 15.4 k | 31.6 k | 53.2 k | 182.9 k | 355.6 k | 701.1 k | 2.80 M | 42.7 |
pseudohash |
768 | 18.5 k | 23.9 k | 40.1 k | 61.7 k | 191.4 k | 363.7 k | 709.8 k | 2.81 M | 42.9 |
pseudohash |
1024 | 32.6 k | 38.0 k | 54.2 k | 76.0 k | 205.7 k | 378.2 k | 724.3 k | 2.82 M | 43.1 |
pseudoXOF |
256 | 1536 | 4209 | 12.3 k | 23.1 k | 87.8 k | 173.9 k | 346.5 k | 1.40 M | 21.3 |
pseudoXOF |
384 | 2996 | 8378 | 24.6 k | 46.1 k | 175.6 k | 348.0 k | 692.4 k | 2.79 M | 42.6 |
pseudoXOF |
512 | 3009 | 8381 | 24.6 k | 46.2 k | 175.8 k | 347.8 k | 692.5 k | 2.78 M | 42.5 |
pseudoXOF |
768 | 4530 | 12.5 k | 36.9 k | 69.2 k | 263.2 k | 521.7 k | 1.04 M | 4.18 M | 63.8 |
pseudoXOF |
1024 | 6009 | 16.7 k | 49.1 k | 92.2 k | 350.9 k | 696.0 k | 1.38 M | 5.56 M | 84.8 |
pseudoXOF |
1152 | 7491 | 20.8 k | 61.4 k | 115.3 k | 438.9 k | 869.4 k | 1.73 M | 6.96 M | 106.2 |
pseudoXOF |
1280 | 7487 | 20.8 k | 61.4 k | 115.3 k | 438.4 k | 868.3 k | 1.73 M | 6.96 M | 106.2 |
pseudoXOF |
2048 | 11.9 k | 33.3 k | 98.1 k | 184.5 k | 702.1 k | 1.39 M | 2.77 M | 11.11 M | 169.5 |
Hash functions
| id | algorithm | instance performance report | 32 B cycles (× pseudoXOF) | 1 KiB cycles (× pseudoXOF) | 64 KiB cycles (× pseudoXOF) | notes |
|---|---|---|---|---|---|---|
hash-01 |
AFS-TrEDM PDF | AFS-TrEDM-512 |
23.7 k (7.88×) | 212.3 k (4.60×) | 12.08 M (4.34×) | – |
hash-01 |
AFS-TrEDM PDF | AFS-TrEDM-768 |
39.4 k (8.70×) | 431.7 k (6.24×) | 26.80 M (6.41×) | – |
hash-01 |
AFS-TrEDM PDF | AFS-TrEDM-1024 |
46.9 k (7.80×) | 795.5 k (8.63×) | 48.01 M (8.64×) | – |
hash-02 |
AXIS: Advanced eXpandable Iterative Stream-based Hash PDF | AXIS-512 |
58.7 k (19.50×) | 94.8 k (2.05×) | 2.45 M (0.88×) | – |
hash-02 |
AXIS: Advanced eXpandable Iterative Stream-based Hash PDF | AXIS-768 |
72.6 k (16.03×) | 169.3 k (2.45×) | 5.96 M (1.43×) | – |
hash-02 |
AXIS: Advanced eXpandable Iterative Stream-based Hash PDF | AXIS-1024 |
96.3 k (16.03×) | 155.5 k (1.69×) | 3.88 M (0.70×) | – |
hash-03 |
C Hash PDF | CHash_512 |
190.3 k (63.26×) | 1.33 M (28.84×) | 67.98 M (24.43×) | 16-byte secret-indexed S-box (lead) |
hash-03 |
C Hash PDF | CHash_1024 |
190.4 k (31.68×) | 1.33 M (14.48×) | 68.14 M (12.26×) | 16-byte secret-indexed S-box (lead) |
hash-04 |
CHAMP PDF | CHAMP-512 |
66.9 k (22.25×) | 564.1 k (12.21×) | 33.76 M (12.13×) | secret-indexed matrix table |
hash-04 |
CHAMP PDF | CHAMP-1024 |
369.9 k (61.56×) | 1.78 M (19.35×) | 93.70 M (16.86×) | secret-indexed matrix table |
hash-05 |
Cryptographic Hash Algorithm uHash PDF | uHash-512 |
58.0 k (19.26×) | 640.8 k (13.87×) | 39.38 M (14.15×) | secret-indexed S-box |
hash-05 |
Cryptographic Hash Algorithm uHash PDF | uHash-768 |
86.7 k (19.13×) | 1.47 M (21.22×) | 88.11 M (21.08×) | secret-indexed S-box |
hash-05 |
Cryptographic Hash Algorithm uHash PDF | uHash-1024 |
230.6 k (38.38×) | 3.78 M (41.00×) | 235.53 M (42.39×) | secret-indexed S-box |
hash-06 |
Cuishen PDF | Cuishen-512 |
2294 (0.76×) | 20.2 k (0.44×) | 1.17 M (0.42×) | – |
hash-06 |
Cuishen PDF | Cuishen-768 |
3119 (0.69×) | 28.7 k (0.41×) | 1.62 M (0.39×) | – |
hash-06 |
Cuishen PDF | Cuishen-1024 |
3214 (0.53×) | 28.3 k (0.31×) | 1.63 M (0.29×) | – |
hash-07 |
Dragon Hash Family PDF | Dragon-512 |
2436 (0.81×) | 20.4 k (0.44×) | 1.17 M (0.42×) | – |
hash-07 |
Dragon Hash Family PDF | Dragon-768 |
2418 (0.53×) | 25.4 k (0.37×) | 1.57 M (0.38×) | – |
hash-07 |
Dragon Hash Family PDF | Dragon-1024 |
2424 (0.40×) | 39.6 k (0.43×) | 2.37 M (0.43×) | – |
hash-07 |
Dragon Hash Family PDF | Dragon-XOF-256 |
9860 (1.32×) | 28.1 k (0.24×) | 1.20 M (0.17×) | – |
hash-07 |
Dragon Hash Family PDF | Dragon-XOF-384 |
9114 (1.22×) | 32.1 k (0.28×) | 1.57 M (0.23×) | – |
hash-07 |
Dragon Hash Family PDF | Dragon-XOF-512 |
8367 (1.39×) | 45.4 k (0.49×) | 2.38 M (0.43×) | – |
hash-08 |
Duet PDF | Duet-512 |
6249 (2.08×) | 135.4 k (2.93×) | 8.40 M (3.02×) | – |
hash-08 |
Duet PDF | Duet-768 |
29.4 k (6.48×) | 232.3 k (3.36×) | 14.02 M (3.35×) | – |
hash-08 |
Duet PDF | Duet-1024 |
29.3 k (4.88×) | 319.4 k (3.46×) | 19.85 M (3.57×) | – |
hash-09 |
Eijen Hash Function PDF | Eijen-256 |
2165 (1.41×) | 10.4 k (0.45×) | 623.2 k (0.45×) | – |
hash-09 |
Eijen Hash Function PDF | Eijen-384 |
2219 (0.74×) | 12.5 k (0.27×) | 664.0 k (0.24×) | – |
hash-09 |
Eijen Hash Function PDF | Eijen-512 |
2150 (0.71×) | 12.4 k (0.27×) | 735.5 k (0.26×) | – |
hash-09 |
Eijen Hash Function PDF | Eijen-768 |
2211 (0.49×) | 14.8 k (0.21×) | 892.5 k (0.21×) | – |
hash-09 |
Eijen Hash Function PDF | Eijen-1024 |
2185 (0.36×) | 19.3 k (0.21×) | 1.12 M (0.20×) | – |
hash-10 |
FEILIAN PDF | FEILIAN512 |
2014 (0.67×) | 15.1 k (0.33×) | 962.6 k (0.35×) | – |
hash-10 |
FEILIAN PDF | FEILIAN768 |
2125 (0.47×) | 15.2 k (0.22×) | 960.4 k (0.23×) | – |
hash-10 |
FEILIAN PDF | FEILIAN1024 |
2175 (0.36×) | 15.3 k (0.17×) | 961.1 k (0.17×) | – |
hash-11 |
Garnet PDF | Garnet_512_Cap512 |
18.6 k (6.20×) | 105.9 k (2.29×) | 5.61 M (2.01×) | secret-indexed AES T-tables |
hash-11 |
Garnet PDF | Garnet_512_Cap640 |
19.0 k (6.32×) | 84.2 k (1.82×) | 4.58 M (1.65×) | secret-indexed AES T-tables |
hash-11 |
Garnet PDF | Garnet_512_Cap768 |
18.6 k (6.20×) | 73.2 k (1.59×) | 3.74 M (1.35×) | secret-indexed AES T-tables |
hash-11 |
Garnet PDF | Garnet_512_Cap896 |
18.6 k (6.19×) | 67.8 k (1.47×) | 3.22 M (1.16×) | secret-indexed AES T-tables |
hash-11 |
Garnet PDF | Garnet_512_Cap1024 |
11.3 k (3.75×) | 37.7 k (0.82×) | 1.70 M (0.61×) | secret-indexed AES T-tables |
hash-11 |
Garnet PDF | Garnet_768 |
10.9 k (2.40×) | 62.1 k (0.90×) | 3.29 M (0.79×) | secret-indexed AES T-tables |
hash-11 |
Garnet PDF | Garnet_1024 |
48.4 k (8.05×) | 179.7 k (1.95×) | 8.63 M (1.55×) | secret-indexed AES T-tables |
hash-11 |
Garnet PDF | Garnet_1024_DM4x4 ⚠ KAT MISMATCH |
– | – | – | KAT/output caveat; see candidate page; secret-indexed AES T-tables |
hash-12 |
Iphe PDF | Iphe-512 |
18.5 k (6.13×) | 94.1 k (2.04×) | 5.40 M (1.94×) | – |
hash-12 |
Iphe PDF | Iphe-768 |
17.7 k (3.92×) | 108.0 k (1.56×) | 6.48 M (1.55×) | – |
hash-12 |
Iphe PDF | Iphe-1024 |
17.1 k (2.85×) | 135.7 k (1.47×) | 8.11 M (1.46×) | – |
hash-13 |
JuziHash PDF | JuziHash-512 |
132.9 k (44.16×) | 443.3 k (9.60×) | 22.84 M (8.21×) | 16-entry secret-indexed S-box (lead) |
hash-13 |
JuziHash PDF | JuziHash-1024 |
133.4 k (22.20×) | 443.1 k (4.81×) | 22.81 M (4.11×) | 16-entry secret-indexed S-box (lead) |
hash-14 |
Laurus PDF | Laurus-512 |
4178 (1.39×) | 37.3 k (0.81×) | 2.15 M (0.77×) | – |
hash-14 |
Laurus PDF | Laurus-768 |
4068 (0.90×) | 43.2 k (0.62×) | 2.63 M (0.63×) | – |
hash-14 |
Laurus PDF | Laurus-1024 |
4081 (0.68×) | 66.0 k (0.72×) | 4.25 M (0.76×) | – |
hash-14 |
Laurus PDF | Laurus-XOF |
8147 (0.68×) | 41.4 k (0.22×) | 2.15 M (0.19×) | – |
hash-15 |
Litchi PDF | litchi_512 |
4129 (1.37×) | 36.6 k (0.79×) | 2.06 M (0.74×) | – |
hash-15 |
Litchi PDF | litchi_768 |
4162 (0.92×) | 44.4 k (0.64×) | 2.74 M (0.66×) | – |
hash-15 |
Litchi PDF | litchi_1024 |
4111 (0.68×) | 66.7 k (0.72×) | 4.01 M (0.72×) | – |
hash-15 |
Litchi PDF | litchi_xof |
4291 (0.71×) | 58.0 k (0.63×) | 3.53 M (0.63×) | – |
hash-16 |
LLH PDF | LLH-256 |
2006 (1.31×) | 34.2 k (1.48×) | 2.14 M (1.53×) | – |
hash-16 |
LLH PDF | LLH-512 |
2993 (0.99×) | 26.4 k (0.57×) | 1.62 M (0.58×) | – |
hash-16 |
LLH PDF | LLH-768 |
10.3 k (2.28×) | 62.3 k (0.90×) | 3.68 M (0.88×) | – |
hash-16 |
LLH PDF | LLH-1024 |
10.3 k (1.72×) | 47.8 k (0.52×) | 2.74 M (0.49×) | – |
hash-17 |
MasterCube PDF | MasterCube-512 |
15.4 k (5.11×) | 79.0 k (1.71×) | 4.19 M (1.51×) | – |
hash-17 |
MasterCube PDF | MasterCube-768 |
22.9 k (5.05×) | 109.8 k (1.59×) | 5.69 M (1.36×) | – |
hash-17 |
MasterCube PDF | MasterCube-1024 |
30.6 k (5.09×) | 171.2 k (1.86×) | 8.93 M (1.61×) | – |
hash-18 |
Megascon Hash Function PDF | MEGASCON-384 |
3021 (1.01×) | 20.3 k (0.44×) | 1.19 M (0.43×) | – |
hash-18 |
Megascon Hash Function PDF | MEGASCON-384-XOF-256 |
3279 (2.13×) | 21.7 k (0.94×) | 1.27 M (0.91×) | – |
hash-18 |
Megascon Hash Function PDF | MEGASCON-384-XOF-1024 |
3487 (0.58×) | 21.9 k (0.24×) | 1.27 M (0.23×) | – |
hash-18 |
Megascon Hash Function PDF | MEGASCON-384-XOF-2048 |
6552 (0.55×) | 24.9 k (0.14×) | 1.27 M (0.11×) | – |
hash-18 |
Megascon Hash Function PDF | MEGASCON-512 |
3016 (1.00×) | 26.0 k (0.56×) | 1.48 M (0.53×) | – |
hash-18 |
Megascon Hash Function PDF | MEGASCON-512-XOF-256 |
3235 (2.11×) | 27.4 k (1.19×) | 1.56 M (1.12×) | – |
hash-18 |
Megascon Hash Function PDF | MEGASCON-512-XOF-1024 |
3438 (0.57×) | 27.6 k (0.30×) | 1.56 M (0.28×) | – |
hash-18 |
Megascon Hash Function PDF | MEGASCON-512-XOF-2048 |
6505 (0.55×) | 30.7 k (0.17×) | 1.56 M (0.14×) | – |
hash-18 |
Megascon Hash Function PDF | MEGASCON-768 |
3266 (0.72×) | 21.9 k (0.32×) | 1.35 M (0.32×) | – |
hash-18 |
Megascon Hash Function PDF | MEGASCON-1024 |
3264 (0.54×) | 28.0 k (0.30×) | 1.70 M (0.31×) | – |
hash-19 |
MoFang Hash Function PDF | MoFang-256 |
2439 (1.59×) | 18.6 k (0.81×) | 1.05 M (0.75×) | – |
hash-19 |
MoFang Hash Function PDF | MoFang-256-XOF |
2504 (1.63×) | 17.9 k (0.78×) | 1.01 M (0.72×) | – |
hash-19 |
MoFang Hash Function PDF | MoFang-512 |
2554 (0.85×) | 18.8 k (0.41×) | 1.05 M (0.38×) | – |
hash-19 |
MoFang Hash Function PDF | MoFang-768 |
4309 (0.95×) | 32.7 k (0.47×) | 1.86 M (0.45×) | – |
hash-19 |
MoFang Hash Function PDF | MoFang-768-XOF |
4728 (1.04×) | 33.1 k (0.48×) | 1.86 M (0.44×) | – |
hash-19 |
MoFang Hash Function PDF | MoFang-1024 |
4421 (0.74×) | 33.0 k (0.36×) | 1.85 M (0.33×) | – |
hash-20 |
Mozi Hash Function PDF | MOZI-384 |
3139 (1.05×) | 21.1 k (0.46×) | 1.23 M (0.44×) | – |
hash-20 |
Mozi Hash Function PDF | MOZI-384-XOF-256 |
3323 (2.16×) | 22.0 k (0.95×) | 1.28 M (0.92×) | – |
hash-20 |
Mozi Hash Function PDF | MOZI-384-XOF-1024 |
3535 (0.59×) | 22.4 k (0.24×) | 1.28 M (0.23×) | – |
hash-20 |
Mozi Hash Function PDF | MOZI-384-XOF-2048 |
6711 (0.56×) | 25.4 k (0.14×) | 1.28 M (0.12×) | – |
hash-20 |
Mozi Hash Function PDF | MOZI-512 |
3108 (1.03×) | 26.8 k (0.58×) | 1.53 M (0.55×) | – |
hash-20 |
Mozi Hash Function PDF | MOZI-512-XOF-256 |
3351 (2.18×) | 27.8 k (1.21×) | 1.58 M (1.13×) | – |
hash-20 |
Mozi Hash Function PDF | MOZI-512-XOF-1024 |
3475 (0.58×) | 28.3 k (0.31×) | 1.58 M (0.28×) | – |
hash-20 |
Mozi Hash Function PDF | MOZI-512-XOF-2048 |
6604 (0.55×) | 31.2 k (0.17×) | 1.58 M (0.14×) | – |
hash-20 |
Mozi Hash Function PDF | MOZI-768 |
3621 (0.80×) | 24.6 k (0.35×) | 1.50 M (0.36×) | – |
hash-20 |
Mozi Hash Function PDF | MOZI-1024 |
3611 (0.60×) | 31.4 k (0.34×) | 1.89 M (0.34×) | – |
hash-21 |
Neulaser PDF | Neulaser-512 |
16.7 k (5.54×) | 129.4 k (2.80×) | 7.72 M (2.77×) | secret-indexed S-box, state-dependent remainder |
hash-21 |
Neulaser PDF | Neulaser-768 |
21.5 k (4.75×) | 131.9 k (1.91×) | 7.94 M (1.90×) | secret-indexed S-box, state-dependent remainder |
hash-21 |
Neulaser PDF | Neulaser-1024 |
26.6 k (4.42×) | 137.6 k (1.49×) | 7.92 M (1.43×) | secret-indexed S-box, state-dependent remainder |
hash-22 |
Pavelor: A Highly Secure Hash Algorithm for Software Implementation PDF | Pavelor-512 |
37.8 k (12.56×) | 224.0 k (4.85×) | 12.64 M (4.54×) | secret-indexed AES S-box |
hash-22 |
Pavelor: A Highly Secure Hash Algorithm for Software Implementation PDF | Pavelor-768 |
37.9 k (8.36×) | 332.7 k (4.81×) | 19.02 M (4.55×) | secret-indexed AES S-box |
hash-22 |
Pavelor: A Highly Secure Hash Algorithm for Software Implementation PDF | Pavelor-1024 |
74.5 k (12.40×) | 662.8 k (7.19×) | 37.78 M (6.80×) | secret-indexed AES S-box |
hash-23 |
QILIN PDF | QILIN-512 |
12.7 k (4.22×) | 50.3 k (1.09×) | 3.12 M (1.12×) | – |
hash-23 |
QILIN PDF | QILIN-768 |
14.7 k (3.24×) | 87.4 k (1.26×) | 4.76 M (1.14×) | – |
hash-23 |
QILIN PDF | QILIN-1024 |
16.8 k (2.79×) | 132.5 k (1.44×) | 7.96 M (1.43×) | – |
hash-24 |
QuantaSylva Hash PDF | QSH-512 |
81.8 k (27.19×) | 299.6 k (6.49×) | 15.73 M (5.65×) | – |
hash-24 |
QuantaSylva Hash PDF | QSH-768 |
160.5 k (35.44×) | 375.3 k (5.42×) | 15.55 M (3.72×) | – |
hash-24 |
QuantaSylva Hash PDF | QSH-1024 |
160.3 k (26.68×) | 374.4 k (4.06×) | 15.54 M (2.80×) | – |
hash-25 |
TaiChi PDF | TaiChi-512 |
23.7 k (7.88×) | 128.4 k (2.78×) | 7.95 M (2.86×) | – |
hash-25 |
TaiChi PDF | TaiChi-768 |
23.1 k (5.11×) | 172.3 k (2.49×) | 9.71 M (2.32×) | – |
hash-25 |
TaiChi PDF | TaiChi-1024 |
44.2 k (7.36×) | 236.5 k (2.56×) | 12.54 M (2.26×) | – |
hash-26 |
The Hash Function CHIME PDF | CHIME-512 |
2248 (0.75×) | 37.2 k (0.80×) | 2.24 M (0.80×) | – |
hash-26 |
The Hash Function CHIME PDF | CHIME-1024 |
3030 (0.50×) | 55.7 k (0.60×) | 3.42 M (0.62×) | – |
hash-27 |
The Vedak Hash Function Family PDF | Vedak-512 |
24.7 k (8.20×) | 174.6 k (3.78×) | 10.10 M (3.63×) | secret-indexed S-box |
hash-27 |
The Vedak Hash Function Family PDF | Vedak-768 |
24.6 k (5.43×) | 245.7 k (3.55×) | 14.07 M (3.37×) | secret-indexed S-box |
hash-27 |
The Vedak Hash Function Family PDF | Vedak-1024 |
47.6 k (7.93×) | 453.3 k (4.92×) | 25.93 M (4.67×) | secret-indexed S-box |
hash-28 |
The XRH-1 Hash Function PDF | XRH-1-512 |
2665 (0.89×) | 30.4 k (0.66×) | 1.88 M (0.68×) | – |
hash-28 |
The XRH-1 Hash Function PDF | XRH-1-768 |
5073 (1.12×) | 50.4 k (0.73×) | 2.97 M (0.71×) | – |
hash-28 |
The XRH-1 Hash Function PDF | XRH-1-1024 |
17.2 k (2.87×) | 119.3 k (1.29×) | 6.92 M (1.25×) | – |
hash-29 |
The XRH-2 Hash Function PDF | XRH-2-512 |
2721 (0.90×) | 31.5 k (0.68×) | 1.95 M (0.70×) | – |
hash-29 |
The XRH-2 Hash Function PDF | XRH-2-768 |
5292 (1.17×) | 51.6 k (0.75×) | 3.07 M (0.73×) | – |
hash-29 |
The XRH-2 Hash Function PDF | XRH-2-1024 |
17.2 k (2.86×) | 118.5 k (1.29×) | 6.92 M (1.25×) | – |
hash-30 |
The ZC-DM Hash Function PDF | ZC-DM-1280-512 |
1219 (0.41×) | 7725 (0.17×) | 442.1 k (0.16×) | – |
hash-30 |
The ZC-DM Hash Function PDF | ZC-DM-1280-768 |
1570 (0.35×) | 12.4 k (0.18×) | 691.9 k (0.17×) | – |
hash-30 |
The ZC-DM Hash Function PDF | ZC-DM-1280-1024 |
4305 (0.72×) | 28.2 k (0.31×) | 1.59 M (0.29×) | – |
hash-30 |
The ZC-DM Hash Function PDF | ZC-DM-1536-512 |
1915 (0.64×) | 10.2 k (0.22×) | 581.9 k (0.21×) | – |
hash-30 |
The ZC-DM Hash Function PDF | ZC-DM-1536-768 |
2675 (0.59×) | 14.2 k (0.20×) | 786.4 k (0.19×) | – |
hash-30 |
The ZC-DM Hash Function PDF | ZC-DM-1536-1024 |
3433 (0.57×) | 22.6 k (0.25×) | 1.24 M (0.22×) | – |
hash-31 |
The ZC-DMC Hash Function PDF | ZC-DMC-1280-512 |
5167 (1.72×) | 11.4 k (0.25×) | 442.6 k (0.16×) | – |
hash-31 |
The ZC-DMC Hash Function PDF | ZC-DMC-1280-768 |
7239 (1.60×) | 17.9 k (0.26×) | 696.1 k (0.17×) | – |
hash-31 |
The ZC-DMC Hash Function PDF | ZC-DMC-1280-1024 |
9852 (1.64×) | 34.0 k (0.37×) | 1.62 M (0.29×) | – |
hash-31 |
The ZC-DMC Hash Function PDF | ZC-DMC-1536-512 |
9099 (3.02×) | 17.4 k (0.38×) | 593.3 k (0.21×) | – |
hash-31 |
The ZC-DMC Hash Function PDF | ZC-DMC-1536-768 |
12.9 k (2.86×) | 24.4 k (0.35×) | 808.9 k (0.19×) | – |
hash-31 |
The ZC-DMC Hash Function PDF | ZC-DMC-1536-1024 |
16.7 k (2.78×) | 36.1 k (0.39×) | 1.26 M (0.23×) | – |
hash-32 |
The ZC-EDMC Hash Function PDF | ZC-EDMC-1280-512 |
1235 (0.41×) | 7371 (0.16×) | 431.8 k (0.16×) | – |
hash-32 |
The ZC-EDMC Hash Function PDF | ZC-EDMC-1280-768 |
1539 (0.34×) | 12.3 k (0.18×) | 679.1 k (0.16×) | – |
hash-32 |
The ZC-EDMC Hash Function PDF | ZC-EDMC-1280-1024 |
4252 (0.71×) | 28.0 k (0.30×) | 1.59 M (0.29×) | – |
hash-32 |
The ZC-EDMC Hash Function PDF | ZC-EDMC-1536-512 |
1939 (0.64×) | 10.4 k (0.23×) | 594.6 k (0.21×) | – |
hash-32 |
The ZC-EDMC Hash Function PDF | ZC-EDMC-1536-768 |
2715 (0.60×) | 14.5 k (0.21×) | 809.0 k (0.19×) | – |
hash-32 |
The ZC-EDMC Hash Function PDF | ZC-EDMC-1536-1024 |
3472 (0.58×) | 23.2 k (0.25×) | 1.27 M (0.23×) | – |
hash-33 |
Thunder Hash Family PDF | Thunder-512 |
4276 (1.42×) | 37.4 k (0.81×) | 2.13 M (0.76×) | – |
hash-33 |
Thunder Hash Family PDF | Thunder-768 |
4240 (0.94×) | 45.8 k (0.66×) | 2.84 M (0.68×) | – |
hash-33 |
Thunder Hash Family PDF | Thunder-1024 |
4266 (0.71×) | 70.3 k (0.76×) | 4.24 M (0.76×) | – |
hash-33 |
Thunder Hash Family PDF | Thunder-XOF-256 |
11.4 k (1.53×) | 44.8 k (0.39×) | 2.14 M (0.31×) | – |
hash-33 |
Thunder Hash Family PDF | Thunder-XOF-384 |
10.7 k (1.43×) | 52.2 k (0.45×) | 2.84 M (0.41×) | – |
hash-33 |
Thunder Hash Family PDF | Thunder-XOF-512 |
9996 (1.66×) | 76.1 k (0.83×) | 4.22 M (0.76×) | – |
hash-34 |
WChain Hash Function PDF | WChain-V1-512 |
2099 (0.70×) | 8844 (0.19×) | 433.6 k (0.16×) | – |
hash-34 |
WChain Hash Function PDF | WChain-V2-1024 |
6691 (1.11×) | 16.5 k (0.18×) | 746.0 k (0.13×) | – |
hash-35 |
Wish Hash Function PDF | Wish512 |
245.8 k (81.68×) | 5.14 M (111.30×) | 311.51 M (111.97×) | secret-indexed S-box, variable-time GF multiply |
hash-35 |
Wish Hash Function PDF | Wish1024 |
763.8 k (127.11×) | 7.24 M (78.52×) | 414.04 M (74.52×) | secret-indexed S-box, variable-time GF multiply |