For KEM, NIST have defined the finalists of CRYSTALS Kyber (Lattice), Saber (Lattice), McEliece (Code-based) and NTRU (Lattice), and with alternative finalists of BIKE (code-based), HQC (code-based), FrodoKEM (Lattice), and SIKE (isogenies). This page provides a performance speed test for these methods. A Windows binary for assessing the performance of the NIST finalists is here.
PQC Key Encapsulation Mechanism (KEM) Speed Tests |
Outline
The results for the fastest key gen (for cycles) is given below. Generally the lattice based methods do well (such as Kyber, Saber and NTRU), but McEliece, SIKE and SIDH do not do well in this test. For key encapsulation, again Kyber wins, but Saber, NTRU and McEliece also do fairl well, with Saber trailing those methods (apart from LightSaber). SIKE and SIDH do not do well in this test:
In terms of key sizes we get:
We see that SPHINCS+ and Picnic do well for key sizes, but are less good with the size of the signature.
The following are the full tests from liboqs:
Configuration info ================== Target platform: x86_64-Linux-5.4.0-94-generic Compiler: gcc (9.3.0) Compile options: [-march=native;-Werror;-Wall;-Wextra;-Wpedantic;-Wstrict-prototypes;-Wshadow;-Wformat=2;-Wfloat-equal;-Wwrite-strings;-O3;-fomit-frame-pointer;-fdata-sections;-ffunction-sections;-Wl,--gc-sections;-Wbad-function-cast] OQS version: 0.7.2-dev Git commit: fb8f0ffa18dacfcb47b0cd987c0eb3807d5bd6d2 OpenSSL enabled: Yes (OpenSSL 1.1.1f 31 Mar 2020) AES: OpenSSL SHA-2: OpenSSL SHA-3: C OQS build flags: OQS_OPT_TARGET=auto CMAKE_BUILD_TYPE=Release CPU exts compile-time: AES AVX AVX2 BMI1 BMI2 PCLMULQDQ POPCNT SSE SSE2 SSE3 Speed test ========== Started at 2022-01-31 19:10:01 Operation | Iterations | Total time (s) | Time (us): mean | pop. stdev | CPU cycles: mean | pop. stdev ------------------------------ | ----------:| --------------:| ---------------:| ----------:| -------------------------:| ----------: BIKE-L1 | | | | | | keygen | 8144 | 3.000 | 368.408 | 166.283 | 734851 | 331753 encaps | 50461 | 3.001 | 59.465 | 38.824 | 118519 | 77447 decaps | 1167 | 3.001 | 2571.796 | 3681.331 | 5131009 | 7344967 BIKE-L3 | | | | | | keygen | 2863 | 3.001 | 1048.209 | 136.214 | 2091161 | 271746 encaps | 19976 | 3.000 | 150.185 | 330.751 | 299495 | 659902 decaps | 433 | 3.007 | 6943.427 | 713.326 | 13853177 | 1423181 Classic-McEliece-348864 | | | | | | keygen | 13 | 3.079 | 236844.769 | 57174.662 | 472549759 | 114074166 encaps | 73626 | 3.000 | 40.747 | 253.362 | 81172 | 505494 decaps | 31752 | 3.000 | 94.483 | 142.108 | 188381 | 283517 Classic-McEliece-348864f | | | | | | keygen | 18 | 3.149 | 174948.333 | 2173.094 | 349054107 | 4336157 encaps | 96579 | 3.000 | 31.063 | 47.408 | 61805 | 94583 decaps | 32431 | 3.000 | 92.506 | 398.942 | 184433 | 795967 Classic-McEliece-460896 | | | | | | keygen | 4 | 3.001 | 750249.500 | 212516.820 | 1496892143 | 424012104 encaps | 40668 | 3.000 | 73.768 | 685.735 | 146998 | 1368173 decaps | 14044 | 3.000 | 213.617 | 24.503 | 426035 | 48857 Classic-McEliece-460896f | | | | | | keygen | 6 | 3.338 | 556305.667 | 15091.649 | 1109936192 | 30111021 encaps | 42520 | 3.000 | 70.557 | 25.137 | 140594 | 50147 decaps | 13896 | 3.000 | 215.891 | 12.840 | 430599 | 25570 Classic-McEliece-6688128 | | | | | | keygen | 2 | 3.054 | 1527139.000 | 819267.000 | 899451646 | 512888339 encaps | 26122 | 3.000 | 114.846 | 299.482 | 228951 | 597520 decaps | 11300 | 3.000 | 265.494 | 91.413 | 529520 | 182367 Classic-McEliece-6688128f | | | | | | keygen | 5 | 3.510 | 702062.600 | 16051.592 | 1400749128 | 32026100 encaps | 28996 | 3.000 | 103.469 | 76.547 | 206238 | 152714 decaps | 11691 | 3.000 | 256.616 | 62.034 | 511853 | 123747 Classic-McEliece-6960119 | | | | | | keygen | 4 | 3.183 | 795739.000 | 119999.233 | 1587651773 | 239421919 encaps | 31833 | 3.000 | 94.243 | 16.844 | 187845 | 33599 decaps | 12882 | 3.000 | 232.894 | 14.338 | 464536 | 28567 Classic-McEliece-6960119f | | | | | | keygen | 5 | 3.318 | 663525.000 | 2677.276 | 1323860114 | 5341670 encaps | 31885 | 3.000 | 94.090 | 34.065 | 187544 | 67960 decaps | 12647 | 3.000 | 237.225 | 234.590 | 473180 | 468037 Classic-McEliece-8192128 | | | | | | keygen | 3 | 3.991 | 1330207.667 | 520515.132 | 2654019753 | 1038529124 encaps | 29452 | 3.000 | 101.862 | 14.394 | 203049 | 28693 decaps | 11370 | 3.000 | 263.868 | 18.155 | 526242 | 36189 Classic-McEliece-8192128f | | | | | | keygen | 5 | 3.609 | 721747.400 | 2006.807 | 1440024054 | 4004245 encaps | 29463 | 3.000 | 101.825 | 13.326 | 202961 | 26526 decaps | 11485 | 3.000 | 261.218 | 17.461 | 520936 | 34801 HQC-128 | | | | | | keygen | 32041 | 3.000 | 93.630 | 8.751 | 186524 | 17435 encaps | 19561 | 3.000 | 153.371 | 10.867 | 305875 | 21653 decaps | 11471 | 3.000 | 261.532 | 104.963 | 521661 | 209402 HQC-192 | | | | | | keygen | 14906 | 3.000 | 201.266 | 21.063 | 401412 | 42008 encaps | 8664 | 3.000 | 346.274 | 34.191 | 690709 | 68175 decaps | 5456 | 3.000 | 549.884 | 150.115 | 1096878 | 299483 HQC-256 | | | | | | keygen | 8578 | 3.000 | 349.767 | 23.003 | 697629 | 45869 encaps | 4933 | 3.000 | 608.218 | 78.998 | 1213311 | 157588 decaps | 3044 | 3.001 | 985.855 | 143.206 | 1966753 | 285704 Kyber512 | | | | | | keygen | 151224 | 3.000 | 19.838 | 3.479 | 39455 | 6765 encaps | 133941 | 3.000 | 22.398 | 5.971 | 44574 | 11844 decaps | 202623 | 3.000 | 14.806 | 4.076 | 29462 | 8053 Kyber768 | | | | | | keygen | 100998 | 3.000 | 29.704 | 75.144 | 59143 | 149920 encaps | 92749 | 3.000 | 32.346 | 112.737 | 64410 | 224932 decaps | 130259 | 3.000 | 23.031 | 17.691 | 45868 | 35277 Kyber1024 | | | | | | keygen | 79651 | 3.000 | 37.665 | 4.851 | 75026 | 9654 encaps | 70123 | 3.000 | 42.782 | 7.720 | 85229 | 15375 decaps | 91103 | 3.000 | 32.930 | 8.643 | 65614 | 17209 Kyber512-90s | | | | | | keygen | 196265 | 3.000 | 15.285 | 2.803 | 30377 | 5559 encaps | 184205 | 3.000 | 16.286 | 7.327 | 32386 | 14606 decaps | 312329 | 3.000 | 9.605 | 1.648 | 19056 | 3117 Kyber768-90s | | | | | | keygen | 145404 | 3.000 | 20.632 | 3.644 | 41042 | 7216 encaps | 134045 | 3.000 | 22.381 | 26.219 | 44543 | 52307 decaps | 208078 | 3.000 | 14.418 | 2.583 | 28685 | 5073 Kyber1024-90s | | | | | | keygen | 112503 | 3.000 | 26.666 | 3.413 | 53080 | 6744 encaps | 99103 | 3.000 | 30.272 | 35.582 | 60272 | 70979 decaps | 142424 | 3.000 | 21.064 | 3.342 | 41897 | 6612 NTRU-HPS-2048-509 | | | | | | keygen | 33754 | 3.000 | 88.880 | 24.745 | 177211 | 49355 encaps | 125731 | 3.000 | 23.861 | 4.566 | 47477 | 9050 decaps | 161490 | 3.000 | 18.577 | 4.086 | 36974 | 8084 NTRU-HPS-2048-677 | | | | | | keygen | 19975 | 3.000 | 150.192 | 36.931 | 299514 | 73671 encaps | 91833 | 3.000 | 32.668 | 40.069 | 65027 | 79936 decaps | 105097 | 3.000 | 28.545 | 11.084 | 56855 | 22094 NTRU-HPS-4096-821 | | | | | | keygen | 14713 | 3.000 | 203.915 | 18.337 | 406679 | 36572 encaps | 82020 | 3.000 | 36.577 | 6.730 | 72840 | 13381 decaps | 83581 | 3.000 | 35.894 | 5.371 | 71483 | 10639 NTRU-HPS-4096-1229 | | | | | | keygen | 483 | 3.003 | 6218.358 | 116.405 | 12406657 | 232168 encaps | 12986 | 3.000 | 231.030 | 24.845 | 460803 | 49542 decaps | 8074 | 3.000 | 371.581 | 237.829 | 741261 | 474492 NTRU-HRSS-701 | | | | | | keygen | 20844 | 3.000 | 143.930 | 16.656 | 287042 | 33206 encaps | 132996 | 3.000 | 22.557 | 4.038 | 44868 | 7998 decaps | 100842 | 3.000 | 29.750 | 4.385 | 59252 | 8684 NTRU-HRSS-1373 | | | | | | keygen | 376 | 3.001 | 7980.303 | 678.143 | 15922068 | 1352983 encaps | 17594 | 3.000 | 170.514 | 11.764 | 340073 | 23430 decaps | 6683 | 3.000 | 448.927 | 20.393 | 895579 | 40631 ntrulpr653 | | | | | | keygen | 72290 | 3.000 | 41.500 | 44.976 | 82693 | 89732 encaps | 70171 | 3.000 | 42.753 | 4.303 | 85179 | 8544 decaps | 64813 | 3.000 | 46.288 | 19.508 | 92217 | 38906 ntrulpr761 | | | | | | keygen | 69306 | 3.000 | 43.287 | 5.366 | 86244 | 10693 encaps | 68802 | 3.000 | 43.604 | 7.998 | 86863 | 15883 decaps | 63095 | 3.000 | 47.548 | 5.567 | 94738 | 11073 ntrulpr857 | | | | | | keygen | 58571 | 3.000 | 51.220 | 31.712 | 102071 | 63262 encaps | 55235 | 3.000 | 54.314 | 4.235 | 108231 | 8402 decaps | 47853 | 3.000 | 62.693 | 5.075 | 124951 | 10085 ntrulpr1277 | | | | | | keygen | 45888 | 3.000 | 65.377 | 6.814 | 130320 | 13570 encaps | 44216 | 3.000 | 67.850 | 4.991 | 135241 | 9906 decaps | 38691 | 3.000 | 77.538 | 6.736 | 154612 | 13389 sntrup653 | | | | | | keygen | 6535 | 3.000 | 459.123 | 32.001 | 915914 | 63851 encaps | 79342 | 3.000 | 37.811 | 5.285 | 75309 | 10506 decaps | 89705 | 3.000 | 33.443 | 8.932 | 66592 | 17803 sntrup761 | | | | | | keygen | 5693 | 3.000 | 526.977 | 23.216 | 1051296 | 46305 encaps | 72494 | 3.000 | 41.383 | 5.650 | 82427 | 11227 decaps | 85338 | 3.000 | 35.154 | 33.714 | 70008 | 67251 sntrup857 | | | | | | keygen | 4838 | 3.000 | 620.160 | 17.663 | 1237221 | 35241 encaps | 62817 | 3.000 | 47.758 | 5.335 | 95152 | 10606 decaps | 63373 | 3.000 | 47.339 | 42.642 | 94318 | 85069 sntrup1277 | | | | | | keygen | 2098 | 3.000 | 1430.036 | 71.233 | 2853083 | 142118 encaps | 48683 | 3.000 | 61.623 | 22.835 | 122815 | 45555 decaps | 52546 | 3.000 | 57.093 | 5.884 | 113776 | 11679 LightSaber-KEM | | | | | | keygen | 101714 | 3.000 | 29.495 | 5.264 | 58722 | 10480 encaps | 101163 | 3.000 | 29.655 | 16.894 | 59047 | 33693 decaps | 114652 | 3.000 | 26.166 | 5.679 | 52131 | 11285 Saber-KEM | | | | | | keygen | 67444 | 3.000 | 44.481 | 3.459 | 88626 | 6856 encaps | 64396 | 3.000 | 46.587 | 3.912 | 92828 | 7707 decaps | 70010 | 3.000 | 42.851 | 5.128 | 85405 | 10174 FireSaber-KEM | | | | | | keygen | 47348 | 3.000 | 63.362 | 5.861 | 126301 | 11663 encaps | 44694 | 3.000 | 67.124 | 5.769 | 133791 | 11444 decaps | 46653 | 3.000 | 64.305 | 8.148 | 128222 | 16223 FrodoKEM-640-AES | | | | | | keygen | 5209 | 3.000 | 575.953 | 20.269 | 1148982 | 40388 encaps | 3818 | 3.000 | 785.809 | 27.749 | 1567672 | 55318 decaps | 4022 | 3.000 | 745.898 | 20.559 | 1488040 | 40987 FrodoKEM-640-SHAKE | | | | | | keygen | 1901 | 3.000 | 1578.226 | 23.740 | 3148720 | 47317 encaps | 1403 | 3.001 | 2139.038 | 540.066 | 4267582 | 1077492 decaps | 1463 | 3.002 | 2051.624 | 180.175 | 4093162 | 359405 FrodoKEM-976-AES | | | | | | keygen | 2297 | 3.001 | 1306.359 | 138.442 | 2606237 | 276130 encaps | 1464 | 3.003 | 2051.219 | 1596.137 | 4092307 | 3184521 decaps | 1905 | 3.002 | 1575.645 | 382.197 | 3143510 | 762537 FrodoKEM-976-SHAKE | | | | | | keygen | 853 | 3.002 | 3519.474 | 370.804 | 7021826 | 739803 encaps | 648 | 3.002 | 4632.977 | 366.134 | 9243416 | 730470 decaps | 658 | 3.004 | 4565.859 | 518.691 | 9109536 | 1034833 FrodoKEM-1344-AES | | | | | | keygen | 1284 | 3.002 | 2338.100 | 107.833 | 4664746 | 215086 encaps | 1027 | 3.001 | 2921.757 | 142.351 | 5829221 | 283940 decaps | 1113 | 3.001 | 2696.641 | 296.320 | 5379988 | 591156 FrodoKEM-1344-SHAKE | | | | | | keygen | 475 | 3.000 | 6315.882 | 378.970 | 12601112 | 756063 encaps | 372 | 3.003 | 8073.414 | 139.455 | 16107704 | 278181 decaps | 389 | 3.003 | 7719.085 | 332.693 | 15400715 | 663723 SIDH-p434 | | | | | | keygen | 1059 | 3.001 | 2833.973 | 292.462 | 5654091 | 583447 encaps | 514 | 3.001 | 5838.126 | 606.580 | 11647942 | 1210124 decaps | 1324 | 3.000 | 2265.992 | 68.651 | 4520865 | 136796 SIDH-p503 | | | | | | keygen | 753 | 3.003 | 3988.053 | 384.025 | 7956605 | 766131 encaps | 376 | 3.002 | 7984.673 | 224.537 | 15930604 | 447855 decaps | 948 | 3.001 | 3165.881 | 149.440 | 6316223 | 297950 SIDH-p610 | | | | | | keygen | 350 | 3.005 | 8584.946 | 1438.001 | 17128219 | 2868975 encaps | 187 | 3.013 | 16112.027 | 9058.051 | 32146290 | 18072581 decaps | 433 | 3.006 | 6942.764 | 608.438 | 13851706 | 1213845 SIDH-p751 | | | | | | keygen | 254 | 3.007 | 11837.465 | 1897.122 | 23617554 | 3785067 encaps | 123 | 3.009 | 24465.943 | 199.668 | 48813951 | 398259 decaps | 312 | 3.008 | 9640.125 | 257.455 | 19233242 | 513607 SIDH-p434-compressed | | | | | | keygen | 534 | 3.000 | 5618.609 | 498.474 | 11209821 | 994493 encaps | 364 | 3.004 | 8253.637 | 209.139 | 16467316 | 417259 decaps | 1174 | 3.002 | 2557.009 | 177.757 | 5101392 | 354560 SIDH-p503-compressed | | | | | | keygen | 393 | 3.002 | 7639.613 | 711.542 | 15242166 | 1419649 encaps | 261 | 3.008 | 11525.421 | 2310.067 | 22995082 | 4609015 decaps | 845 | 3.002 | 3553.028 | 273.560 | 7088573 | 545793 SIDH-p610-compressed | | | | | | keygen | 195 | 3.008 | 15425.190 | 1216.479 | 30775700 | 2427099 encaps | 136 | 3.010 | 22134.184 | 5321.872 | 44161525 | 10618128 decaps | 396 | 3.008 | 7594.720 | 139.915 | 15152561 | 279064 SIDH-p751-compressed | | | | | | keygen | 135 | 3.005 | 22255.748 | 1573.653 | 44403930 | 3139697 encaps | 89 | 3.008 | 33801.910 | 442.727 | 67441010 | 883315 decaps | 284 | 3.000 | 10564.511 | 136.387 | 21077729 | 272008 SIKE-p434 | | | | | | keygen | 966 | 3.001 | 3106.176 | 107.781 | 6197253 | 215028 encaps | 593 | 3.001 | 5061.054 | 113.240 | 10097567 | 225870 decaps | 549 | 3.001 | 5465.452 | 427.665 | 10904398 | 853308 SIKE-p503 | | | | | | keygen | 691 | 3.003 | 4346.321 | 189.186 | 8671491 | 377401 encaps | 420 | 3.007 | 7160.081 | 326.700 | 14285437 | 651765 decaps | 397 | 3.003 | 7563.476 | 662.846 | 15090345 | 1322429 SIKE-p610 | | | | | | keygen | 363 | 3.005 | 8278.152 | 167.696 | 16516384 | 334566 encaps | 194 | 3.012 | 15524.356 | 1058.123 | 30973808 | 2111170 decaps | 195 | 3.010 | 15434.528 | 396.875 | 30794480 | 791791 SIKE-p751 | | | | | | keygen | 226 | 3.000 | 13275.066 | 301.928 | 26485988 | 602258 encaps | 140 | 3.009 | 21494.979 | 450.278 | 42886151 | 898288 decaps | 127 | 3.005 | 23660.102 | 4421.554 | 47206045 | 8821753 SIKE-p434-compressed | | | | | | keygen | 537 | 3.001 | 5589.192 | 585.869 | 11151196 | 1168923 encaps | 372 | 3.000 | 8065.414 | 96.340 | 16091778 | 192156 decaps | 519 | 3.005 | 5790.193 | 408.777 | 11552400 | 815560 SIKE-p503-compressed | | | | | | keygen | 399 | 3.005 | 7531.406 | 695.946 | 15026278 | 1388531 encaps | 269 | 3.000 | 11152.874 | 560.960 | 22251822 | 1119232 decaps | 377 | 3.003 | 7965.180 | 71.646 | 15891889 | 142849 SIKE-p610-compressed | | | | | | keygen | 180 | 3.013 | 16740.917 | 19846.899 | 33401019 | 39598263 encaps | 141 | 3.009 | 21337.674 | 248.145 | 42572480 | 495132 decaps | 186 | 3.013 | 16197.575 | 110.401 | 32317016 | 220230 SIKE-p751-compressed | | | | | | keygen | 136 | 3.012 | 22147.265 | 1643.873 | 44187613 | 3279842 encaps | 88 | 3.018 | 34290.068 | 1826.455 | 68414496 | 3644155 decaps | 122 | 3.003 | 24610.680 | 2241.031 | 49102481 | 4471237 Ended at 2022-01-31 19:19:05
and:
BIKE-L1 isnull false claimed-nist-level 1 claimed-security IND-CPA length-public-key 1541 length-ciphertext 1573 length-secret-key 5223 length-shared-secret 32 BIKE-L3 isnull false claimed-nist-level 3 claimed-security IND-CPA length-public-key 3083 length-ciphertext 3115 length-secret-key 10105 length-shared-secret 32 Classic-McEliece-348864 isnull false claimed-nist-level 1 claimed-security IND-CCA2 length-public-key 261120 length-ciphertext 128 length-secret-key 6452 length-shared-secret 32 Classic-McEliece-348864f isnull false claimed-nist-level 1 claimed-security IND-CCA2 length-public-key 261120 length-ciphertext 128 length-secret-key 6452 length-shared-secret 32 Classic-McEliece-460896 isnull false claimed-nist-level 3 claimed-security IND-CCA2 length-public-key 524160 length-ciphertext 188 length-secret-key 13568 length-shared-secret 32 Classic-McEliece-460896f isnull false claimed-nist-level 3 claimed-security IND-CCA2 length-public-key 524160 length-ciphertext 188 length-secret-key 13568 length-shared-secret 32 Classic-McEliece-6688128 isnull false claimed-nist-level 5 claimed-security IND-CCA2 length-public-key 1044992 length-ciphertext 240 length-secret-key 13892 length-shared-secret 32 Classic-McEliece-6688128f isnull false claimed-nist-level 5 claimed-security IND-CCA2 length-public-key 1044992 length-ciphertext 240 length-secret-key 13892 length-shared-secret 32 Classic-McEliece-6960119 isnull false claimed-nist-level 5 claimed-security IND-CCA2 length-public-key 1047319 length-ciphertext 226 length-secret-key 13908 length-shared-secret 32 Classic-McEliece-6960119f isnull false claimed-nist-level 5 claimed-security IND-CCA2 length-public-key 1047319 length-ciphertext 226 length-secret-key 13908 length-shared-secret 32 Classic-McEliece-8192128 isnull false claimed-nist-level 5 claimed-security IND-CCA2 length-public-key 1357824 length-ciphertext 240 length-secret-key 14080 length-shared-secret 32 Classic-McEliece-8192128f isnull false claimed-nist-level 5 claimed-security IND-CCA2 length-public-key 1357824 length-ciphertext 240 length-secret-key 14080 length-shared-secret 32 HQC-128 isnull false claimed-nist-level 1 claimed-security IND-CCA2 length-public-key 2249 length-ciphertext 4481 length-secret-key 2289 length-shared-secret 64 HQC-192 isnull false claimed-nist-level 3 claimed-security IND-CCA2 length-public-key 4522 length-ciphertext 9026 length-secret-key 4562 length-shared-secret 64 HQC-256 isnull false claimed-nist-level 5 claimed-security IND-CCA2 length-public-key 7245 length-ciphertext 14469 length-secret-key 7285 length-shared-secret 64 Kyber512 isnull false claimed-nist-level 1 claimed-security IND-CCA2 length-public-key 800 length-ciphertext 768 length-secret-key 1632 length-shared-secret 32 Kyber768 isnull false claimed-nist-level 3 claimed-security IND-CCA2 length-public-key 1184 length-ciphertext 1088 length-secret-key 2400 length-shared-secret 32 Kyber1024 isnull false claimed-nist-level 5 claimed-security IND-CCA2 length-public-key 1568 length-ciphertext 1568 length-secret-key 3168 length-shared-secret 32 Kyber512-90s isnull false claimed-nist-level 1 claimed-security IND-CCA2 length-public-key 800 length-ciphertext 768 length-secret-key 1632 length-shared-secret 32 Kyber768-90s isnull false claimed-nist-level 3 claimed-security IND-CCA2 length-public-key 1184 length-ciphertext 1088 length-secret-key 2400 length-shared-secret 32 Kyber1024-90s isnull false claimed-nist-level 5 claimed-security IND-CCA2 length-public-key 1568 length-ciphertext 1568 length-secret-key 3168 length-shared-secret 32 NTRU-HPS-2048-509 isnull false claimed-nist-level 1 claimed-security IND-CCA2 length-public-key 699 length-ciphertext 699 length-secret-key 935 length-shared-secret 32 NTRU-HPS-2048-677 isnull false claimed-nist-level 3 claimed-security IND-CCA2 length-public-key 930 length-ciphertext 930 length-secret-key 1234 length-shared-secret 32 NTRU-HPS-4096-821 isnull false claimed-nist-level 5 claimed-security IND-CCA2 length-public-key 1230 length-ciphertext 1230 length-secret-key 1590 length-shared-secret 32 NTRU-HPS-4096-1229 isnull false claimed-nist-level 5 claimed-security IND-CCA2 length-public-key 1842 length-ciphertext 1842 length-secret-key 2366 length-shared-secret 32 NTRU-HRSS-701 isnull false claimed-nist-level 3 claimed-security IND-CCA2 length-public-key 1138 length-ciphertext 1138 length-secret-key 1450 length-shared-secret 32 NTRU-HRSS-1373 isnull false claimed-nist-level 5 claimed-security IND-CCA2 length-public-key 2401 length-ciphertext 2401 length-secret-key 2983 length-shared-secret 32 ntrulpr653 isnull false claimed-nist-level 1 claimed-security IND-CCA2 length-public-key 897 length-ciphertext 1025 length-secret-key 1125 length-shared-secret 32 ntrulpr761 isnull false claimed-nist-level 2 claimed-security IND-CCA2 length-public-key 1039 length-ciphertext 1167 length-secret-key 1294 length-shared-secret 32 ntrulpr857 isnull false claimed-nist-level 3 claimed-security IND-CCA2 length-public-key 1184 length-ciphertext 1312 length-secret-key 1463 length-shared-secret 32 ntrulpr1277 isnull false claimed-nist-level 5 claimed-security IND-CCA2 length-public-key 1847 length-ciphertext 1975 length-secret-key 2231 length-shared-secret 32 sntrup653 isnull false claimed-nist-level 1 claimed-security IND-CCA2 length-public-key 994 length-ciphertext 897 length-secret-key 1518 length-shared-secret 32 sntrup761 isnull false claimed-nist-level 2 claimed-security IND-CCA2 length-public-key 1158 length-ciphertext 1039 length-secret-key 1763 length-shared-secret 32 sntrup857 isnull false claimed-nist-level 3 claimed-security IND-CCA2 length-public-key 1322 length-ciphertext 1184 length-secret-key 1999 length-shared-secret 32 sntrup1277 isnull false claimed-nist-level 5 claimed-security IND-CCA2 length-public-key 2067 length-ciphertext 1847 length-secret-key 3059 length-shared-secret 32 LightSaber-KEM isnull false claimed-nist-level 1 claimed-security IND-CCA2 length-public-key 672 length-ciphertext 736 length-secret-key 1568 length-shared-secret 32 Saber-KEM isnull false claimed-nist-level 3 claimed-security IND-CCA2 length-public-key 992 length-ciphertext 1088 length-secret-key 2304 length-shared-secret 32 FireSaber-KEM isnull false claimed-nist-level 5 claimed-security IND-CCA2 length-public-key 1312 length-ciphertext 1472 length-secret-key 3040 length-shared-secret 32 FrodoKEM-640-AES isnull false claimed-nist-level 1 claimed-security IND-CCA2 length-public-key 9616 length-ciphertext 9720 length-secret-key 19888 length-shared-secret 16 FrodoKEM-640-SHAKE isnull false claimed-nist-level 1 claimed-security IND-CCA2 length-public-key 9616 length-ciphertext 9720 length-secret-key 19888 length-shared-secret 16 FrodoKEM-976-AES isnull false claimed-nist-level 3 claimed-security IND-CCA2 length-public-key 15632 length-ciphertext 15744 length-secret-key 31296 length-shared-secret 24 FrodoKEM-976-SHAKE isnull false claimed-nist-level 3 claimed-security IND-CCA2 length-public-key 15632 length-ciphertext 15744 length-secret-key 31296 length-shared-secret 24 FrodoKEM-1344-AES isnull false claimed-nist-level 5 claimed-security IND-CCA2 length-public-key 21520 length-ciphertext 21632 length-secret-key 43088 length-shared-secret 32 FrodoKEM-1344-SHAKE isnull false claimed-nist-level 5 claimed-security IND-CCA2 length-public-key 21520 length-ciphertext 21632 length-secret-key 43088 length-shared-secret 32 SIDH-p434 isnull false claimed-nist-level 1 claimed-security IND-CPA length-public-key 330 length-ciphertext 330 length-secret-key 28 length-shared-secret 110 SIDH-p503 isnull false claimed-nist-level 2 claimed-security IND-CPA length-public-key 378 length-ciphertext 378 length-secret-key 32 length-shared-secret 126 SIDH-p610 isnull false claimed-nist-level 3 claimed-security IND-CPA length-public-key 462 length-ciphertext 462 length-secret-key 39 length-shared-secret 154 SIDH-p751 isnull false claimed-nist-level 5 claimed-security IND-CPA length-public-key 564 length-ciphertext 564 length-secret-key 48 length-shared-secret 188 SIDH-p434-compressed isnull false claimed-nist-level 1 claimed-security IND-CPA length-public-key 197 length-ciphertext 197 length-secret-key 28 length-shared-secret 110 SIDH-p503-compressed isnull false claimed-nist-level 2 claimed-security IND-CPA length-public-key 225 length-ciphertext 225 length-secret-key 32 length-shared-secret 126 SIDH-p610-compressed isnull false claimed-nist-level 3 claimed-security IND-CPA length-public-key 274 length-ciphertext 274 length-secret-key 39 length-shared-secret 154 SIDH-p751-compressed isnull false claimed-nist-level 5 claimed-security IND-CPA length-public-key 335 length-ciphertext 335 length-secret-key 48 length-shared-secret 188 SIKE-p434 isnull false claimed-nist-level 1 claimed-security IND-CCA2 length-public-key 330 length-ciphertext 346 length-secret-key 374 length-shared-secret 16 SIKE-p503 isnull false claimed-nist-level 2 claimed-security IND-CCA2 length-public-key 378 length-ciphertext 402 length-secret-key 434 length-shared-secret 24 SIKE-p610 isnull false claimed-nist-level 3 claimed-security IND-CCA2 length-public-key 462 length-ciphertext 486 length-secret-key 524 length-shared-secret 24 SIKE-p751 isnull false claimed-nist-level 5 claimed-security IND-CCA2 length-public-key 564 length-ciphertext 596 length-secret-key 644 length-shared-secret 32 SIKE-p434-compressed isnull false claimed-nist-level 1 claimed-security IND-CCA2 length-public-key 197 length-ciphertext 236 length-secret-key 350 length-shared-secret 16 SIKE-p503-compressed isnull false claimed-nist-level 2 claimed-security IND-CCA2 length-public-key 225 length-ciphertext 280 length-secret-key 407 length-shared-secret 24 SIKE-p610-compressed isnull false claimed-nist-level 3 claimed-security IND-CCA2 length-public-key 274 length-ciphertext 336 length-secret-key 491 length-shared-secret 24 SIKE-p751-compressed isnull false claimed-nist-level 5 claimed-security IND-CCA2 length-public-key 335 length-ciphertext 410 length-secret-key 602 length-shared-secret 32