Total number of proposals by field

1,068 views

Skip to first unread message

Ryo Fujita

unread,

Dec 27, 2017, 2:29:36 AM12/27/17

to pqc-forum

I tried to create a table that compiled the number of proposals by field independently.
There seems to be somewhat differences from the aggregate contents already announced.

Alperin-Sheriff, Jacob (Fed)

unread,

Dec 27, 2017, 9:42:35 AM12/27/17

to Ryo Fujita, pqc-forum

The discrepancies are due to a combination of choices choices you made in categorization and counting.

A number of schemes were not considered complete and proper
We released KEM and Encryption counts together because as mentioned in the Call For Proposals, we reserve the right to apply standard transformations from one to the other and are generally considering them together.
You created more categories than we did and chose to put some things in different categories than we did.

--
You received this message because you are subscribed to the Google Groups "pqc-forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email to pqc-forum+...@list.nist.gov.
Visit this group at https://groups.google.com/a/list.nist.gov/group/pqc-forum/.

Ryo Fujita

unread,

Dec 27, 2017, 7:18:29 PM12/27/17

to pqc-forum, rfujit...@gmail.com

Thank you for your comment.
We updated classification table according to your comment.

2017年12月27日水曜日 23時42分35秒 UTC+9 Alperin-Sheriff, Jacob (Fed):

D. J. Bernstein

unread,

Jan 2, 2018, 11:44:32 AM1/2/18

to pqc-...@list.nist.gov

Compared to Ryo Fujita's table, I would list Giophantus as multivariate,
Lepton as code-based (I see LWE->LPN as crossing the lattices->codes
line), and Mersenne/Ramstake/Three Bears in a separate category. I also
think it's a bit silly for NIST to count (e.g.) two pqRSA submissions.

Another way to categorize submissions is by sizes. This is correlated
with categories (e.g., small signatures are from multivariates) but of
course sees more distinctions (e.g., LWE vs. Ring-LWE). Here's a list of
sizes extracted from api.h in the submissions---with several important
caveats:

* Sizes in api.h for signatures etc. are upper bounds, and some
submissions actually use fewer bytes.

* This list isn't complete. (There are submissions that seem to need
definitions from Makefile, which my script doesn't try to parse.)

* This list isn't tied to proper testing. Sizes are meaningless for
code that doesn't actually work.

An alternate approach is to parse KAT files, but these are somewhat more
messily organized on NIST's web site than the rest of the submissions.

---Dan

enc bytes=48 pk=431 sk=194 mcnie/McNie/encrypt/3Q_128_1
enc bytes=48 pk=486 sk=218 mcnie/McNie/encrypt/3Q_128_2
enc bytes=48 pk=569 sk=247 mcnie/McNie/encrypt/3Q_192_1
enc bytes=48 pk=631 sk=274 mcnie/McNie/encrypt/3Q_192_2
enc bytes=48 pk=819 sk=337 mcnie/McNie/encrypt/3Q_256_1
enc bytes=48 pk=347 sk=340 mcnie/McNie/encrypt/4Q_128_1
enc bytes=48 pk=829 sk=348 mcnie/McNie/encrypt/3Q_256_2
enc bytes=48 pk=417 sk=401 mcnie/McNie/encrypt/4Q_128_2
enc bytes=48 pk=487 sk=465 mcnie/McNie/encrypt/4Q_192_1
enc bytes=48 pk=539 sk=512 mcnie/McNie/encrypt/4Q_192_2
enc bytes=48 pk=630 sk=584 mcnie/McNie/encrypt/4Q_256_1
enc bytes=48 pk=647 sk=601 mcnie/McNie/encrypt/4Q_256_2
enc bytes=560 pk=437 sk=558 round2/Round2/encrypt/uround2_pke_nd_l1
enc bytes=622 pk=515 sk=642 round2/Round2/encrypt/nround2_pke_nd_l1
enc bytes=720 pk=2064 sk=232 compact_lwe/Compact-LWE-Public-Key-Enc
enc bytes=764 pk=641 sk=808 round2/Round2/encrypt/uround2_pke_nd_l2
enc bytes=784 pk=685 sk=856 round2/Round2/encrypt/uround2_pke_nd_l3
enc bytes=820 pk=673 sk=841 round2/Round2/encrypt/nround2_pke_nd_l3
enc bytes=846 pk=659 sk=830 round2/Round2/encrypt/nround2_pke_nd_l2
enc bytes=953 pk=830 sk=1039 round2/Round2/encrypt/uround2_pke_nd_l5
enc bytes=1017 pk=830 sk=1039 round2/Round2/encrypt/nround2_pke_nd_l5
enc bytes=1017 pk=846 sk=1071 round2/Round2/encrypt/uround2_pke_nd_l4
enc bytes=1113 pk=846 sk=1071 round2/Round2/encrypt/nround2_pke_nd_l4
enc bytes=1144 pk=658944 sk=714240 lotus/LOTUS/encrypt/lotus128
enc bytes=1456 pk=1025024 sk=1126400 lotus/LOTUS/encrypt/lotus192
enc bytes=1648 pk=1622016 sk=137216 lizard/NISTLizardFinal/Lizard.CCA
enc bytes=1768 pk=1470976 sk=1630720 lotus/LOTUS/encrypt/lotus256
enc bytes=1792 pk=1184 sk=1472 kindi/KINDI/encrypt/KINDI-256-3-4-2
enc bytes=2208 pk=4096 sk=1024 lizard/NISTLizardFinal/RLizard.CCA
enc bytes=2496 pk=1456 sk=1712 kindi/KINDI/encrypt/KINDI-512-2-2-2
enc bytes=2560 pk=11552 sk=32 titanium/Titanium/Titanium_CPA_toy
enc bytes=2688 pk=1728 sk=2112 kindi/KINDI/encrypt/KINDI-512-2-4-1
enc bytes=2688 pk=1984 sk=2304 kindi/KINDI/encrypt/KINDI-256-5-2-2
enc bytes=2976 pk=13088 sk=32 titanium/Titanium/Titanium_CPA_lite
enc bytes=3328 pk=2368 sk=2752 kindi/KINDI/encrypt/KINDI-512-3-2-1
enc bytes=3520 pk=14720 sk=32 titanium/Titanium/Titanium_CPA_std
enc bytes=4512 pk=16448 sk=32 titanium/Titanium/Titanium_CPA_med
enc bytes=4881 pk=3455 sk=4096 round2/Round2/encrypt/uround2_pke_n1_fn0_l1
enc bytes=4881 pk=3455 sk=4096 round2/Round2/encrypt/uround2_pke_n1_fn1_l1
enc bytes=4881 pk=3455 sk=4096 round2/Round2/encrypt/uround2_pke_n1_fn2_l1
enc bytes=6016 pk=17952 sk=32 titanium/Titanium/Titanium_CPA_hi
enc bytes=6147 pk=6145 sk=9217 lima/Lima/NIST/EncCCA
enc bytes=6147 pk=6145 sk=9217 lima/Lima/NIST/EncCPA
enc bytes=6567 pk=6468 sk=7670 round2/Round2/encrypt/uround2_pke_n1_fn0_l2
enc bytes=6567 pk=6468 sk=7670 round2/Round2/encrypt/uround2_pke_n1_fn1_l2
enc bytes=6567 pk=6468 sk=7670 round2/Round2/encrypt/uround2_pke_n1_fn2_l2
enc bytes=7185 pk=5330 sk=6319 round2/Round2/encrypt/uround2_pke_n1_fn0_l3
enc bytes=7185 pk=5330 sk=6319 round2/Round2/encrypt/uround2_pke_n1_fn1_l3
enc bytes=7185 pk=5330 sk=6319 round2/Round2/encrypt/uround2_pke_n1_fn2_l3
enc bytes=8320 pk=23552 sk=32 titanium/Titanium/Titanium_CPA_super
enc bytes=10128 pk=10053 sk=11755 round2/Round2/encrypt/uround2_pke_n1_fn0_l5
enc bytes=10128 pk=10053 sk=11755 round2/Round2/encrypt/uround2_pke_n1_fn1_l5
enc bytes=10128 pk=10053 sk=11755 round2/Round2/encrypt/uround2_pke_n1_fn2_l5
enc bytes=12673 pk=12574 sk=14710 round2/Round2/encrypt/uround2_pke_n1_fn0_l4
enc bytes=12673 pk=12574 sk=14710 round2/Round2/encrypt/uround2_pke_n1_fn1_l4
enc bytes=12673 pk=12574 sk=14710 round2/Round2/encrypt/uround2_pke_n1_fn2_l4
enc bytes=28824 pk=14412 sk=602 giophantus/submission3/encrypt/IEC602
enc bytes=32768 pk=32768 sk=98304 postquantum_rsa_enc/PostQuantum_RSA/encrypt/pqrsa15
enc bytes=41592 pk=20796 sk=868 giophantus/submission3/encrypt/IEC868
enc bytes=54408 pk=27204 sk=1134 giophantus/submission3/encrypt/IEC1134
enc bytes=1048576 pk=1048576 sk=3145728 postquantum_rsa_enc/PostQuantum_RSA/encrypt/pqrsa20
enc bytes=9216000 pk=4000 sk=2000 guessagain/GuessAgain
enc bytes=33554432 pk=33554432 sk=100663296 postquantum_rsa_enc/PostQuantum_RSA/encrypt/pqrsa25
enc bytes=1073741824 pk=1073741824 sk=3221225472 postquantum_rsa_enc/PostQuantum_RSA/encrypt/pqrsa30
kem ct=36 pk=2304 sk=288 bytes=33 dme/DME
kem ct=128 pk=319488 sk=9216 bytes=32 nts_kem/NTS-KEM/kem/nts_kem_12_64
kem ct=162 pk=929760 sk=17524 bytes=32 nts_kem/NTS-KEM/kem/nts_kem_13_80
kem ct=201 pk=25482 sk=14772 bytes=32 big_quake/BIG_QUAKE/BIG_QUAKE_1
kem ct=226 pk=1047319 sk=13908 bytes=32 classic_mceliece/Classic_McEliece/kem/mceliece6960119
kem ct=240 pk=1357824 sk=14080 bytes=32 classic_mceliece/Classic_McEliece/kem/mceliece8192128
kem ct=253 pk=1419704 sk=19890 bytes=32 nts_kem/NTS-KEM/kem/nts_kem_13_136
kem ct=402 pk=378 sk=434 bytes=16 sike/SIKEp503
kem ct=406 pk=84132 sk=30860 bytes=32 big_quake/BIG_QUAKE/BIG_QUAKE_3
kem ct=423 pk=423 sk=40 bytes=64 lake/LAKE-I/src
kem ct=464 pk=417 sk=100 bytes=16 round2/Round2/kem/nround2_kem_nd_l1
kem ct=482 pk=435 sk=105 bytes=16 round2/Round2/kem/uround2_kem_nd_l1
kem ct=492 pk=149800 sk=41804 bytes=32 big_quake/BIG_QUAKE/BIG_QUAKE_5
kem ct=596 pk=564 sk=644 bytes=24 sike/SIKEp751
kem ct=611 pk=611 sk=701 bytes=32 ntruencrypt/NTRUEncrypt/ntru-kem-443
kem ct=611 pk=611 sk=701 bytes=32 ntruencrypt/NTRUEncrypt/ntru-pke-443
kem ct=614 pk=519 sk=122 bytes=32 round2/Round2/kem/nround2_kem_nd_l2
kem ct=618 pk=555 sk=131 bytes=32 round2/Round2/kem/uround2_kem_nd_l2
kem ct=636 pk=636 sk=40 bytes=64 lake/LAKE-II/src
kem ct=636 pk=565 sk=135 bytes=24 round2/Round2/kem/uround2_kem_nd_l3
kem ct=652 pk=581 sk=139 bytes=24 round2/Round2/kem/nround2_kem_nd_l3
kem ct=729 pk=696 sk=128 bytes=81 cfpkm/CFPKM/kem/CFPKM128/include
kem ct=736 pk=672 sk=1568 bytes=32 saber/SABER_KEM_KEM/light_saber
kem ct=766 pk=726 sk=826 bytes=32 sike/SIKEp964
kem ct=785 pk=118441 sk=179946 bytes=64 rlce/RLCE/RLCE_KEM_128A
kem ct=800 pk=736 sk=1632 bytes=32 crystals_kyber/CRYSTALS-Kyber/crypto_kem/kyber512
kem ct=818 pk=691 sk=165 bytes=32 round2/Round2/kem/nround2_kem_nd_l5
kem ct=826 pk=826 sk=40 bytes=64 lake/LAKE-III/src
kem ct=868 pk=709 sk=169 bytes=32 round2/Round2/kem/uround2_kem_nd_l5
kem ct=875 pk=747 sk=787 bytes=64 locker/LOCKER-I/src
kem ct=898 pk=707 sk=165 bytes=48 round2/Round2/kem/nround2_kem_nd_l4
kem ct=917 pk=804 sk=40 bytes=32 threebears/ThreeBears/crypto_kem/BabyBear
kem ct=917 pk=804 sk=40 bytes=32 threebears/ThreeBears/crypto_kem/BabyBearEphem
kem ct=940 pk=749 sk=175 bytes=48 round2/Round2/kem/uround2_kem_nd_l4
kem ct=988 pk=188001 sk=310116 bytes=64 rlce/RLCE/RLCE_KEM_128B
kem ct=1023 pk=1023 sk=1173 bytes=48 ntruencrypt/NTRUEncrypt/ntru-kem-743
kem ct=1023 pk=1023 sk=1173 bytes=48 ntruencrypt/NTRUEncrypt/ntru-pke-743
kem ct=1024 pk=544 sk=1056 bytes=32 lac/LAC
kem ct=1044 pk=995 sk=182 bytes=116 cfpkm/CFPKM/kem/CFPKM182/include
kem ct=1047 pk=1218 sk=1600 bytes=32 ntru_prime/ntruprime-20171214/kem/sntrup4591761
kem ct=1088 pk=928 sk=896 bytes=32 newhope/NewHope/crypto_kem/newhope512cpa
kem ct=1088 pk=1040 sk=1536 bytes=64 ding_lwe_key_exchange
kem ct=1088 pk=992 sk=2304 bytes=32 saber/SABER_KEM_KEM/saber
kem ct=1120 pk=992 sk=288 bytes=32 okcn_akcn_cnke/OKCN_AKCN_CNKE/kem/AKCN-MLWE/ref
kem ct=1120 pk=992 sk=288 bytes=32 okcn_akcn_cnke/OKCN_AKCN_CNKE/kem/OKCN-MLWE/ref
kem ct=1120 pk=928 sk=1888 bytes=32 newhope/NewHope/crypto_kem/newhope512cca
kem ct=1138 pk=1010 sk=1050 bytes=64 locker/LOCKER-IV/src
kem ct=1152 pk=1088 sk=2400 bytes=32 crystals_kyber/CRYSTALS-Kyber/crypto_kem/kyber768
kem ct=1160 pk=658944 sk=714240 bytes=16 lotus/LOTUS/kem/lotus128
kem ct=1175 pk=1047 sk=1238 bytes=32 ntru_prime/ntruprime-20171214/kem/ntrulpr4591761
kem ct=1184 pk=840 sk=32 bytes=32 edonk/EdonK/edonk128K08N72nu8L8
kem ct=1207 pk=1079 sk=1119 bytes=64 locker/LOCKER-II/src
kem ct=1238 pk=287371 sk=440008 bytes=64 rlce/RLCE/RLCE_KEM_192A
kem ct=1272 pk=676 sk=40 bytes=64 ouroboros_r/ouroboros-r-128/src
kem ct=1278 pk=1138 sk=1418 bytes=32 ntru_hrss_kem/NIST-PQ-Submission-NTRU-HRSS-KEM-20171130/crypto_kem/ntruhrss701
kem ct=1307 pk=1194 sk=40 bytes=32 threebears/ThreeBears/crypto_kem/MamaBear
kem ct=1307 pk=1194 sk=40 bytes=32 threebears/ThreeBears/crypto_kem/MamaBearEphem
kem ct=1312 pk=1552 sk=32 bytes=32 edonk/EdonK/edonk128K16N80nu8L6
kem ct=1312 pk=776 sk=32 bytes=32 edonk/EdonK/edonk128K16N80nu4L6
kem ct=1374 pk=1246 sk=1286 bytes=64 locker/LOCKER-III/src
kem ct=1467 pk=1339 sk=1379 bytes=64 locker/LOCKER-V/src
kem ct=1472 pk=1312 sk=3040 bytes=32 saber/SABER_KEM_KEM/fire_saber
kem ct=1480 pk=1025024 sk=1126400 bytes=24 lotus/LOTUS/kem/lotus192
kem ct=1504 pk=1440 sk=3168 bytes=32 crystals_kyber/CRYSTALS-Kyber/crypto_kem/kyber1024
kem ct=1534 pk=807 sk=40 bytes=64 ouroboros_r/ouroboros-r-192/src
kem ct=1545 pk=450761 sk=747393 bytes=64 rlce/RLCE/RLCE_KEM_192B
kem ct=1556 pk=786 sk=826 bytes=64 rqc/rqc128/src
kem ct=1568 pk=1680 sk=32 bytes=32 edonk/EdonK/edonk128K32N96nu4L4
kem ct=1570 pk=1442 sk=1482 bytes=64 locker/LOCKER-VI/src
kem ct=1697 pk=1584 sk=40 bytes=32 threebears/ThreeBears/crypto_kem/PapaBear
kem ct=1697 pk=1584 sk=40 bytes=32 threebears/ThreeBears/crypto_kem/PapaBearEphem
kem ct=1767 pk=1639 sk=1679 bytes=64 locker/LOCKER-VII/src
kem ct=1800 pk=1470976 sk=1630720 bytes=32 lotus/LOTUS/kem/lotus256
kem ct=1824 pk=1184 sk=1472 bytes=32 kindi/KINDI/kem/KINDI-256-3-4-2
kem ct=1955 pk=1696 sk=1664 bytes=95 okcn_akcn_cnke/OKCN_AKCN_CNKE/kem/OKCN-SEC/ref
kem ct=2012 pk=1824 sk=1824 bytes=32 hila5
kem ct=2023 pk=742089 sk=1048176 bytes=64 rlce/RLCE/RLCE_KEM_256A
kem ct=2065 pk=1937 sk=1977 bytes=64 locker/LOCKER-VIII/src
kem ct=2080 pk=4096 sk=1152 bytes=32 lizard/NISTLizardFinal/RLizard.KEM
kem ct=2083 pk=1696 sk=1664 bytes=95 okcn_akcn_cnke/OKCN_AKCN_CNKE/kem/AKCN-SEC/ref
kem ct=2144 pk=1112 sk=40 bytes=64 ouroboros_r/ouroboros-r-256/src
kem ct=2144 pk=11616 sk=2973704 bytes=64 dags/DAGS/kem/dags5
kem ct=2176 pk=1824 sk=1792 bytes=32 newhope/NewHope/crypto_kem/newhope1024cpa
kem ct=2208 pk=1824 sk=3680 bytes=32 newhope/NewHope/crypto_kem/newhope1024cca
kem ct=2326 pk=2198 sk=2238 bytes=64 locker/LOCKER-IX/src
kem ct=2336 pk=2576 sk=32 bytes=32 edonk/EdonK/edonk128ref
kem ct=2544 pk=1456 sk=1712 bytes=48 kindi/KINDI/kem/KINDI-512-2-2-2
kem ct=2640 pk=1232001 sk=1773271 bytes=64 rlce/RLCE/RLCE_KEM_256B
kem ct=2720 pk=12192 sk=12224 bytes=32 titanium/Titanium/Titanium_CCA_toy
kem ct=2736 pk=1096 sk=32 bytes=48 edonk/EdonK/edonk192K16N112nu4L8
kem ct=2736 pk=2192 sk=32 bytes=48 edonk/EdonK/edonk192ref
kem ct=2752 pk=1728 sk=2112 bytes=64 kindi/KINDI/kem/KINDI-512-2-4-1
kem ct=2752 pk=1984 sk=2304 bytes=64 kindi/KINDI/kem/KINDI-256-5-2-2
kem ct=2806 pk=1411 sk=1451 bytes=64 rqc/rqc192/src
kem ct=3008 pk=14720 sk=14752 bytes=32 titanium/Titanium/Titanium_CCA_lite
kem ct=3120 pk=2256 sk=32 bytes=48 edonk/EdonK/edonk192K32N128nu4L6
kem ct=3392 pk=2368 sk=2752 bytes=64 kindi/KINDI/kem/KINDI-512-3-2-1
kem ct=3504 pk=3672 sk=32 bytes=48 edonk/EdonK/edonk192K48K144nu4L4
kem ct=3552 pk=16352 sk=16384 bytes=32 titanium/Titanium/Titanium_CCA_std
kem ct=3574 pk=1795 sk=1835 bytes=64 rqc/rqc256/src
kem ct=3843 pk=6145 sk=9217 bytes=32 lima/Lima/NIST/EncapCPA
kem ct=4097 pk=4097 sk=8194 bytes=48 ntruencrypt/NTRUEncrypt/ntru-kem-1024
kem ct=4097 pk=4097 sk=8194 bytes=48 ntruencrypt/NTRUEncrypt/ntru-pke-1024
kem ct=4227 pk=6145 sk=9217 bytes=32 lima/Lima/NIST/EncapCCA
kem ct=4544 pk=18272 sk=18304 bytes=32 titanium/Titanium/Titanium_CCA_med
kem ct=4837 pk=3455 sk=625 bytes=16 round2/Round2/kem/uround2_kem_n1_fn0_l1
kem ct=4837 pk=3455 sk=625 bytes=16 round2/Round2/kem/uround2_kem_n1_fn1_l1
kem ct=4837 pk=3455 sk=625 bytes=16 round2/Round2/kem/uround2_kem_n1_fn2_l1
kem ct=5622 pk=2819 sk=2859 bytes=64 hqc/HQC/hqc-basic-I/src
kem ct=6002 pk=3009 sk=3049 bytes=64 hqc/HQC/hqc-basic-II/src
kem ct=6048 pk=20512 sk=20544 bytes=32 titanium/Titanium/Titanium_CCA_hi
kem ct=6234 pk=3125 sk=3165 bytes=64 hqc/HQC/hqc-basic-III/src
kem ct=6428 pk=6413 sk=1160 bytes=32 round2/Round2/kem/uround2_kem_n1_fn0_l2
kem ct=6428 pk=6413 sk=1160 bytes=32 round2/Round2/kem/uround2_kem_n1_fn1_l2
kem ct=6428 pk=6413 sk=1160 bytes=32 round2/Round2/kem/uround2_kem_n1_fn2_l2
kem ct=6972 pk=5223 sk=945 bytes=24 round2/Round2/kem/uround2_kem_n1_fn0_l3
kem ct=6972 pk=5223 sk=945 bytes=24 round2/Round2/kem/uround2_kem_n1_fn1_l3
kem ct=6972 pk=5223 sk=945 bytes=24 round2/Round2/kem/uround2_kem_n1_fn2_l3
kem ct=8188 pk=8188 sk=8188 bytes=32 bike/BIKE
kem ct=8226 pk=4097 sk=548 bytes=32 qc_mdpc_kem/QC-MDPC KEM - Atsushi Yamada/kem/mdpc
kem ct=8352 pk=26912 sk=26944 bytes=32 titanium/Titanium/Titanium_CCA_super
kem ct=8710 pk=8679 sk=1572 bytes=32 round2/Round2/kem/uround2_kem_n1_fn0_l5
kem ct=8710 pk=8679 sk=1572 bytes=32 round2/Round2/kem/uround2_kem_n1_fn1_l5
kem ct=8710 pk=8679 sk=1572 bytes=32 round2/Round2/kem/uround2_kem_n1_fn2_l5
kem ct=9736 pk=9616 sk=19872 bytes=16 frodo/reference/FrodoKEM-640
kem ct=10214 pk=5115 sk=5155 bytes=64 hqc/HQC/hqc-advanced-I/src
kem ct=10904 pk=10857 sk=1965 bytes=48 round2/Round2/kem/uround2_kem_n1_fn0_l4
kem ct=10904 pk=10857 sk=1965 bytes=48 round2/Round2/kem/uround2_kem_n1_fn1_l4
kem ct=10904 pk=10857 sk=1965 bytes=48 round2/Round2/kem/uround2_kem_n1_fn2_l4
kem ct=10982 pk=5499 sk=5539 bytes=64 hqc/HQC/hqc-advanced-II/src
kem ct=11752 pk=5884 sk=5924 bytes=64 hqc/HQC/hqc-advanced-III/src
kem ct=14818 pk=7417 sk=7457 bytes=64 hqc/HQC/hqc-paranoiac-I/src
kem ct=15768 pk=15632 sk=31272 bytes=24 frodo/reference/FrodoKEM-976
kem ct=15962 pk=7989 sk=8029 bytes=64 hqc/HQC/hqc-paranoiac-II/src
kem ct=16990 pk=8503 sk=8543 bytes=64 hqc/HQC/hqc-paranoiac-III/src
kem ct=17696 pk=1130496 sk=8608 bytes=32 lizard/NISTLizardFinal/Lizard.KEM
kem ct=17778 pk=8897 sk=8937 bytes=64 hqc/HQC/hqc-paranoiac-IV/src
kem ct=28064 pk=27044 sk=54056 bytes=32 ramstake/ramstake/Ramstake_RS_216091
kem ct=32768 pk=32768 sk=98304 bytes=32 postquantum_rsa_enc/PostQuantum_RSA/kem/pqrsa15
kem ct=96167 pk=94637 sk=189242 bytes=32 ramstake/ramstake/Ramstake_RS_756839
kem ct=160160 pk=189248 sk=32 bytes=32 mersenne_756839/Mersenne_756839
kem ct=180224 pk=1626240 sk=1627648 bytes=16 odd_manhattan/Odd_Manhattan
kem ct=1048576 pk=1048576 sk=3145728 bytes=32 postquantum_rsa_enc/PostQuantum_RSA/kem/pqrsa20
kem ct=33554432 pk=33554432 sk=100663296 bytes=32 postquantum_rsa_enc/PostQuantum_RSA/kem/pqrsa25
kem ct=1073741824 pk=1073741824 sk=3221225472 bytes=32 postquantum_rsa_enc/PostQuantum_RSA/kem/pqrsa30
sign bytes=45 pk=422122 sk=14985 gui/Gui-184
sign bytes=48 pk=417408 sk=14208 gemss/GeMSS/sign/GeMSS128/include
sign bytes=63 pk=1990045 sk=41755 gui/Gui-312
sign bytes=64 pk=152097 sk=100209 rainbow/Rainbow/Ia
sign bytes=75 pk=125400 sk=11489 himq_3/HiMQ-3/HiMQ-3
sign bytes=75 pk=125400 sk=11489 himq_3/HiMQ-3/HiMQ-3F
sign bytes=78 pk=163185 sk=114308 rainbow/Rainbow/Ib
sign bytes=83 pk=5903405 sk=94757 gui/Gui-448
sign bytes=88 pk=1304192 sk=39440 gemss/GeMSS/sign/GeMSS192/include
sign bytes=92 pk=565489 sk=376141 rainbow/Rainbow/IVa
sign bytes=104 pk=3603792 sk=82056 gemss/GeMSS/sign/GeMSS256/include
sign bytes=104 pk=192241 sk=143385 rainbow/Rainbow/Ic
sign bytes=112 pk=564535 sk=409463 rainbow/Rainbow/IIIb
sign bytes=118 pk=1351361 sk=892079 rainbow/Rainbow/VIa
sign bytes=147 pk=1456225 sk=1016868 rainbow/Rainbow/VIb
sign bytes=156 pk=720793 sk=537781 rainbow/Rainbow/IIIc
sign bytes=204 pk=1723681 sk=1274317 rainbow/Rainbow/Vc
sign bytes=319 pk=15908 sk=32 luov/LUOV/luov-8-63-256
sign bytes=441 pk=46101 sk=32 luov/LUOV/luov-8-90-351
sign bytes=521 pk=100989 sk=32 luov/LUOV/luov-8-117-404
sign bytes=528 pk=501176 sk=334006 pqsigrm/pqsigRM/pqsigrm612
sign bytes=528 pk=336804 sk=1382118 pqsigrm/pqsigRM/pqsigrm412
sign bytes=600 pk=102000 sk=720000 racoss/RaCoSS
sign bytes=1040 pk=2105344 sk=2144166 pqsigrm/pqsigRM/pqsigrm613
sign bytes=1100 pk=83 sk=136 walnutdsa/WalnutDSA/walnut
sign bytes=1377 pk=10080 sk=23864 ranksign/RankSign/RankSign-I/src
sign bytes=1487 pk=896 sk=2096 crystals_dilithium/CRYSTALS-Dilithium/Dilithium_weak
sign bytes=1501 pk=12096 sk=28092 ranksign/RankSign/RankSign-II/src
sign bytes=1746 pk=7536 sk=32 luov/LUOV/luov-48-49-242
sign bytes=2044 pk=1184 sk=2800 crystals_dilithium/CRYSTALS-Dilithium/Dilithium_medium
sign bytes=2065 pk=2065 sk=2604 pqntrusign/pqNTRUsign/Gaussian-1024
sign bytes=2065 pk=2065 sk=2604 pqntrusign/pqNTRUsign/Uniform-1024
sign bytes=2161 pk=19440 sk=44316 ranksign/RankSign/RankSign-III/src
sign bytes=2701 pk=1472 sk=3504 crystals_dilithium/CRYSTALS-Dilithium/Dilithium_recommended
sign bytes=2929 pk=28560 sk=64340 ranksign/RankSign/RankSign-IV/src
sign bytes=3104 pk=4128 sk=2112 qtesla/qTESLA/qTesla_128
sign bytes=3184 pk=19973 sk=32 luov/LUOV/luov-64-68-330
sign bytes=3366 pk=1760 sk=3856 crystals_dilithium/CRYSTALS-Dilithium/Dilithium_very_high
sign bytes=4850 pk=40248 sk=32 luov/LUOV/luov-80-86-399
sign bytes=6176 pk=8224 sk=8256 qtesla/qTESLA/qTesla_192
sign bytes=6176 pk=8224 sk=8256 qtesla/qTESLA/qTesla_256
sign bytes=8080 pk=32 sk=64 sphincs_plus/SPHINCSPlus/crypto_sign/sphincs-haraka-128s
sign bytes=8080 pk=32 sk=64 sphincs_plus/SPHINCSPlus/crypto_sign/sphincs-sha256-128s
sign bytes=8080 pk=32 sk=64 sphincs_plus/SPHINCSPlus/crypto_sign/sphincs-shake256-128s
sign bytes=15728 pk=32 sk=65568 gravity_sphincs/gravity-sphincs
sign bytes=16976 pk=32 sk=64 sphincs_plus/SPHINCSPlus/crypto_sign/sphincs-haraka-128f
sign bytes=16976 pk=32 sk=64 sphincs_plus/SPHINCSPlus/crypto_sign/sphincs-sha256-128f
sign bytes=16976 pk=32 sk=64 sphincs_plus/SPHINCSPlus/crypto_sign/sphincs-shake256-128f
sign bytes=17064 pk=48 sk=96 sphincs_plus/SPHINCSPlus/crypto_sign/sphincs-haraka-192s
sign bytes=17064 pk=48 sk=96 sphincs_plus/SPHINCSPlus/crypto_sign/sphincs-sha256-192s
sign bytes=17064 pk=48 sk=96 sphincs_plus/SPHINCSPlus/crypto_sign/sphincs-shake256-192s
sign bytes=29792 pk=64 sk=128 sphincs_plus/SPHINCSPlus/crypto_sign/sphincs-haraka-256s
sign bytes=29792 pk=64 sk=128 sphincs_plus/SPHINCSPlus/crypto_sign/sphincs-sha256-256s
sign bytes=29792 pk=64 sk=128 sphincs_plus/SPHINCSPlus/crypto_sign/sphincs-shake256-256s
sign bytes=32640 pk=528 sk=18038184 dualmodems/DualModeMS/sign/DualModeMS128/include
sign bytes=32800 pk=32768 sk=98304 postquantum_rsa_sign/PostQuantum_RSA_Sign/sign/pqrsa15
sign bytes=32882 pk=62 sk=32 mqdss/MQDSS/crypto_sign/mqdss-48
sign bytes=34004 pk=33 sk=49 picnic/Picnic/picnicl1fs
sign bytes=35664 pk=48 sk=96 sphincs_plus/SPHINCSPlus/crypto_sign/sphincs-haraka-192f
sign bytes=35664 pk=48 sk=96 sphincs_plus/SPHINCSPlus/crypto_sign/sphincs-sha256-192f
sign bytes=35664 pk=48 sk=96 sphincs_plus/SPHINCSPlus/crypto_sign/sphincs-shake256-192f
sign bytes=49216 pk=64 sk=128 sphincs_plus/SPHINCSPlus/crypto_sign/sphincs-haraka-256f
sign bytes=49216 pk=64 sk=128 sphincs_plus/SPHINCSPlus/crypto_sign/sphincs-sha256-256f
sign bytes=49216 pk=64 sk=128 sphincs_plus/SPHINCSPlus/crypto_sign/sphincs-shake256-256f
sign bytes=53933 pk=33 sk=49 picnic/Picnic/picnicl1ur
sign bytes=67800 pk=88 sk=48 mqdss/MQDSS/crypto_sign/mqdss-64
sign bytes=76744 pk=49 sk=73 picnic/Picnic/picnicl3fs
sign bytes=121817 pk=49 sk=73 picnic/Picnic/picnicl3ur
sign bytes=132828 pk=65 sk=97 picnic/Picnic/picnicl5fs
sign bytes=209478 pk=65 sk=97 picnic/Picnic/picnicl5ur
sign bytes=1048608 pk=1048576 sk=3145728 postquantum_rsa_sign/PostQuantum_RSA_Sign/sign/pqrsa20
sign bytes=33554464 pk=33554432 sk=100663296 postquantum_rsa_sign/PostQuantum_RSA_Sign/sign/pqrsa25
sign bytes=1073741856 pk=1073741824 sk=3221225472 postquantum_rsa_sign/PostQuantum_RSA_Sign/sign/pqrsa30

D. J. Bernstein

unread,

Jan 3, 2018, 11:16:02 AM1/3/18

to pqc-...@list.nist.gov

Here's an improved table, this time from parsing (some) KAT files. This
still isn't complete. The sizes are now observed maxima over KATs, which
sometimes understates the actual sizes (e.g., pqrsa15 says 32735-byte
overhead when it's actually 32768).

There are more serious discrepancies from the api.h data. Offhand I'd
say that some KATs are missing, some implementations are missing, and
some define implementations define sizes that are too small (which
should be caught by SUPERCOP's tests).

As for counting, LEDA is another example beyond pqRSA of something
that's listed as two submissions but really looks like just one. In
pqRSA's case the split came from NIST; I don't know whether this is also
the case for LEDA.

---Dan

enc bytes=328 pk=2064 sk=232 compact_lwe/Compact-LWE-Public-Key-Enc/KAT/PQCencryptKAT_232.rsp
enc bytes=328 pk=2064 sk=232 compact_lwe/Compact-LWE-Public-Key-Enc/Reference_Implementation/PQCencryptKAT_232.rsp
enc bytes=488 pk=268288 sk=2100736 srtpi/PQCencryptKAT_2100736.rsp
enc bytes=560 pk=437 sk=558 round2/KAT/encrypt/uround2_pke_nd_l1/PQCencryptKAT_558.rsp
enc bytes=594 pk=611 sk=701 ntruencrypt/NTRUEncrypt/KAT/sample output/PQCencryptKAT_701.rsp
enc bytes=622 pk=515 sk=642 round2/KAT/encrypt/nround2_pke_nd_l1/PQCencryptKAT_642.rsp
enc bytes=764 pk=641 sk=808 round2/KAT/encrypt/uround2_pke_nd_l2/PQCencryptKAT_808.rsp
enc bytes=784 pk=685 sk=856 round2/KAT/encrypt/uround2_pke_nd_l3/PQCencryptKAT_856.rsp
enc bytes=820 pk=673 sk=841 round2/KAT/encrypt/nround2_pke_nd_l3/PQCencryptKAT_841.rsp
enc bytes=846 pk=659 sk=830 round2/KAT/encrypt/nround2_pke_nd_l2/PQCencryptKAT_830.rsp
enc bytes=951 pk=1882112 sk=169728 lizard/KAT_Lizard/Lizard.CCA/PQCencryptKAT_169728.rsp
enc bytes=953 pk=830 sk=1039 round2/KAT/encrypt/uround2_pke_nd_l5/PQCencryptKAT_1039.rsp
enc bytes=1006 pk=1023 sk=1173 ntruencrypt/NTRUEncrypt/KAT/sample output/PQCencryptKAT_1173.rsp
enc bytes=1008 pk=544 sk=1056 lac/LAC/KAT/KAT_VALUES/ENCRYPT/LAC128/PQCencryptKAT_1056.rsp
enc bytes=1017 pk=830 sk=1039 round2/KAT/encrypt/nround2_pke_nd_l5/PQCencryptKAT_1039.rsp
enc bytes=1017 pk=846 sk=1071 round2/KAT/encrypt/uround2_pke_nd_l4/PQCencryptKAT_1071.rsp
enc bytes=1113 pk=846 sk=1071 round2/KAT/encrypt/nround2_pke_nd_l4/PQCencryptKAT_1071.rsp
enc bytes=1144 pk=658944 sk=714240 lotus/KAT_LOTUS/encrypt/lotus128/PQCencryptKAT_714240.rsp
enc bytes=1168 pk=992 sk=1312 okcn_akcn_cnke/OKCN_AKCN_CNKE/KAT/encrypt/AKCN-MLWE-CCA/PQCencryptKAT_1312.rsp
enc bytes=1168 pk=992 sk=1312 okcn_akcn_cnke/OKCN_AKCN_CNKE/Reference_Implementation/encrypt/AKCN-MLWE-CCA/ref/PQCencryptKAT_1312.rsp
enc bytes=1456 pk=1025024 sk=1126400 lotus/KAT_LOTUS/encrypt/lotus192/PQCencryptKAT_1126400.rsp
enc bytes=1520 pk=1056 sk=2080 lac/LAC/KAT/KAT_VALUES/ENCRYPT/LAC192/PQCencryptKAT_2080.rsp
enc bytes=1616 pk=1622016 sk=137216 lizard/KAT_Lizard/Lizard.CCA/PQCencryptKAT_137216.rsp
enc bytes=1768 pk=1470976 sk=1630720 lotus/KAT_LOTUS/encrypt/lotus256/PQCencryptKAT_1630720.rsp
enc bytes=1776 pk=1184 sk=1472 kindi/KINDI/KAT/Additional_Implementation/encrypt/KINDI-256-3-4-2/PQCencryptKAT_1472.rsp
enc bytes=1776 pk=1184 sk=1472 kindi/KINDI/KAT/Reference_Implementation/encrypt/KINDI-256-3-4-2/PQCencryptKAT_1472.rsp
enc bytes=2032 pk=1056 sk=2080 lac/LAC/KAT/KAT_VALUES/ENCRYPT/LAC256/PQCencryptKAT_2080.rsp
enc bytes=2176 pk=4096 sk=257 lizard/KAT_Lizard/RLizard.CCA/PQCencryptKAT_257(Category1).rsp
enc bytes=2448 pk=2457600 sk=313344 lizard/KAT_Lizard/Lizard.CCA/PQCencryptKAT_313344.rsp
enc bytes=2480 pk=1456 sk=1712 kindi/KINDI/KAT/Additional_Implementation/encrypt/KINDI-512-2-2-2/PQCencryptKAT_1712.rsp
enc bytes=2480 pk=1456 sk=1712 kindi/KINDI/KAT/Reference_Implementation/encrypt/KINDI-512-2-2-2/PQCencryptKAT_1712.rsp
enc bytes=2528 pk=11552 sk=32 titanium/KAT/Titanium_CPA_toy/PQCencryptKAT_32.rsp
enc bytes=2672 pk=1728 sk=2112 kindi/KINDI/KAT/Additional_Implementation/encrypt/KINDI-512-2-4-1/PQCencryptKAT_2112.rsp
enc bytes=2672 pk=1728 sk=2112 kindi/KINDI/KAT/Reference_Implementation/encrypt/KINDI-512-2-4-1/PQCencryptKAT_2112.rsp
enc bytes=2672 pk=1984 sk=2304 kindi/KINDI/KAT/Additional_Implementation/encrypt/KINDI-256-5-2-2/PQCencryptKAT_2304.rsp
enc bytes=2672 pk=1984 sk=2304 kindi/KINDI/KAT/Reference_Implementation/encrypt/KINDI-256-5-2-2/PQCencryptKAT_2304.rsp
enc bytes=2720 pk=2736128 sk=365568 lizard/KAT_Lizard/Lizard.CCA/PQCencryptKAT_365568.rsp
enc bytes=2745 pk=829 sk=348 mcnie/McNie/KAT/encrypt/3Q_256_2/encryptKAT_348.rsp
enc bytes=2856 pk=539 sk=512 mcnie/McNie/KAT/encrypt/4Q_192_2/encryptKAT_512.rsp
enc bytes=2864 pk=487 sk=465 mcnie/McNie/KAT/encrypt/4Q_192_1/encryptKAT_465.rsp
enc bytes=2886 pk=631 sk=274 mcnie/McNie/KAT/encrypt/3Q_192_2/encryptKAT_274.rsp
enc bytes=2911 pk=569 sk=247 mcnie/McNie/KAT/encrypt/3Q_192_1/encryptKAT_247.rsp
enc bytes=2944 pk=13088 sk=32 titanium/KAT/Titanium_CPA_lite/PQCencryptKAT_32.rsp
enc bytes=3014 pk=647 sk=601 mcnie/McNie/KAT/encrypt/4Q_256_2/encryptKAT_601.rsp
enc bytes=3052 pk=630 sk=584 mcnie/McNie/KAT/encrypt/4Q_256_1/encryptKAT_584.rsp
enc bytes=3201 pk=431 sk=194 mcnie/McNie/KAT/encrypt/3Q_128_1/encryptKAT_194.rsp
enc bytes=3264 pk=6553600 sk=557056 lizard/KAT_Lizard/Lizard.CCA/PQCencryptKAT_557056.rsp
enc bytes=3296 pk=486 sk=218 mcnie/McNie/KAT/encrypt/3Q_128_2/encryptKAT_218.rsp
enc bytes=3312 pk=2368 sk=2752 kindi/KINDI/KAT/Additional_Implementation/encrypt/KINDI-512-3-2-1/PQCencryptKAT_2752.rsp
enc bytes=3312 pk=2368 sk=2752 kindi/KINDI/KAT/Reference_Implementation/encrypt/KINDI-512-3-2-1/PQCencryptKAT_2752.rsp
enc bytes=3381 pk=819 sk=337 mcnie/McNie/KAT/encrypt/3Q_256_1/encryptKAT_337.rsp
enc bytes=3397 pk=417 sk=401 mcnie/McNie/KAT/encrypt/4Q_128_2/encryptKAT_401.rsp
enc bytes=3488 pk=14720 sk=32 titanium/KAT/Titanium_CPA_std/PQCencryptKAT_32.rsp
enc bytes=3518 pk=347 sk=340 mcnie/McNie/KAT/encrypt/4Q_128_1/encryptKAT_340.rsp
enc bytes=3688 pk=3710976 sk=665600 lizard/KAT_Lizard/Lizard.CCA/PQCencryptKAT_665600.rsp
enc bytes=4081 pk=4097 sk=8194 ntruencrypt/NTRUEncrypt/KAT/sample output/PQCencryptKAT_8194.rsp
enc bytes=4224 pk=4096 sk=513 lizard/KAT_Lizard/RLizard.CCA/PQCencryptKAT_513(Category3_N1024).rsp
enc bytes=4480 pk=16448 sk=32 titanium/KAT/Titanium_CPA_med/PQCencryptKAT_32.rsp
enc bytes=4881 pk=3455 sk=4096 round2/KAT/encrypt/uround2_pke_n1_fn0_l1/PQCencryptKAT_4096.rsp
enc bytes=4881 pk=3455 sk=4096 round2/KAT/encrypt/uround2_pke_n1_fn1_l1/PQCencryptKAT_4096.rsp
enc bytes=4881 pk=3455 sk=4096 round2/KAT/encrypt/uround2_pke_n1_fn2_l1/PQCencryptKAT_4096.rsp
enc bytes=5984 pk=17952 sk=32 titanium/KAT/Titanium_CPA_hi/PQCencryptKAT_32.rsp
enc bytes=6567 pk=6468 sk=7670 round2/KAT/encrypt/uround2_pke_n1_fn0_l2/PQCencryptKAT_7670.rsp
enc bytes=6567 pk=6468 sk=7670 round2/KAT/encrypt/uround2_pke_n1_fn1_l2/PQCencryptKAT_7670.rsp
enc bytes=6567 pk=6468 sk=7670 round2/KAT/encrypt/uround2_pke_n1_fn2_l2/PQCencryptKAT_7670.rsp
enc bytes=6944 pk=3480 sk=24 ledapkc/KAT/PQCencryptKAT_24_2.rsp
enc bytes=7016 pk=4688 sk=24 ledapkc/KAT/PQCencryptKAT_24_3.rsp
enc bytes=7185 pk=5330 sk=6319 round2/KAT/encrypt/uround2_pke_n1_fn0_l3/PQCencryptKAT_6319.rsp
enc bytes=7185 pk=5330 sk=6319 round2/KAT/encrypt/uround2_pke_n1_fn1_l3/PQCencryptKAT_6319.rsp
enc bytes=7185 pk=5330 sk=6319 round2/KAT/encrypt/uround2_pke_n1_fn2_l3/PQCencryptKAT_6319.rsp
enc bytes=8288 pk=23552 sk=32 titanium/KAT/Titanium_CPA_super/PQCencryptKAT_32.rsp
enc bytes=8448 pk=8192 sk=369 lizard/KAT_Lizard/RLizard.CCA/PQCencryptKAT_369(Category3_N2048).rsp
enc bytes=8448 pk=8192 sk=513 lizard/KAT_Lizard/RLizard.CCA/PQCencryptKAT_513(Category5).rsp
enc bytes=8528 pk=6408 sk=24 ledapkc/KAT/PQCencryptKAT_24_4.rsp
enc bytes=10128 pk=10053 sk=11755 round2/KAT/encrypt/uround2_pke_n1_fn0_l5/PQCencryptKAT_11755.rsp
enc bytes=10128 pk=10053 sk=11755 round2/KAT/encrypt/uround2_pke_n1_fn1_l5/PQCencryptKAT_11755.rsp
enc bytes=10128 pk=10053 sk=11755 round2/KAT/encrypt/uround2_pke_n1_fn2_l5/PQCencryptKAT_11755.rsp
enc bytes=12673 pk=12574 sk=14710 round2/KAT/encrypt/uround2_pke_n1_fn0_l4/PQCencryptKAT_14710.rsp
enc bytes=12673 pk=12574 sk=14710 round2/KAT/encrypt/uround2_pke_n1_fn1_l4/PQCencryptKAT_14710.rsp
enc bytes=12673 pk=12574 sk=14710 round2/KAT/encrypt/uround2_pke_n1_fn2_l4/PQCencryptKAT_14710.rsp
enc bytes=14384 pk=7200 sk=32 ledapkc/KAT/PQCencryptKAT_32_2.rsp
enc bytes=15560 pk=10384 sk=32 ledapkc/KAT/PQCencryptKAT_32_3.rsp
enc bytes=17520 pk=13152 sk=32 ledapkc/KAT/PQCencryptKAT_32_4.rsp
enc bytes=24752 pk=12384 sk=40 ledapkc/KAT/PQCencryptKAT_40_2.rsp
enc bytes=27008 pk=18016 sk=40 ledapkc/KAT/PQCencryptKAT_40_3.rsp
enc bytes=28808 pk=14412 sk=602 giophantus/submission3/KAT/encrypt/IEC602/PQCencryptKAT_602.rsp
enc bytes=30256 pk=22704 sk=40 ledapkc/KAT/PQCencryptKAT_40_4.rsp
enc bytes=32735 pk=32768 sk=98304 postquantum_rsa_enc/PostQuantum_RSA/KAT/encrypt/pqrsa15/kat_encrypt.rsp
enc bytes=41568 pk=20796 sk=868 giophantus/submission3/KAT/encrypt/IEC868/PQCencryptKAT_868.rsp
enc bytes=54376 pk=27204 sk=1134 giophantus/submission3/KAT/encrypt/IEC1134/PQCencryptKAT_1134.rsp
enc bytes=1023968 pk=4000 sk=2000 guessagain/KAT_GuessAgain/GuessAgainEncryptKAT_2000.rsp
kem ct=36 pk=2304 sk=288 bytes=33 dme/DME/KAT/PQCkemKAT_288.rsp
kem ct=64 pk=464 sk=336 bytes=64 hk17/HK17/KAT/PQCkemKAT_336.rsp
kem ct=64 pk=720 sk=592 bytes=64 hk17/HK17/KAT/PQCkemKAT_592.rsp
kem ct=64 pk=1232 sk=1104 bytes=64 hk17/HK17/KAT/PQCkemKAT_1104.rsp
kem ct=128 pk=319488 sk=9216 bytes=32 nts_kem/KAT_NTS_KEM/kem/nts_kem_12_64/PQCkemKAT_9216.rsp
kem ct=162 pk=929760 sk=17524 bytes=32 nts_kem/KAT_NTS_KEM/kem/nts_kem_13_80/PQCkemKAT_17524.rsp
kem ct=201 pk=25482 sk=14772 bytes=32 big_quake/BIG_QUAKE/KAT/PQCkemKAT_BIG_QUAKE_1.rsp
kem ct=226 pk=1047319 sk=13908 bytes=32 classic_mceliece/KAT_Classic_McEliece/kem/mceliece6960119/kat_kem.rsp
kem ct=240 pk=1357824 sk=14080 bytes=32 classic_mceliece/KAT_Classic_McEliece/kem/mceliece8192128/kat_kem.rsp
kem ct=253 pk=1419704 sk=19890 bytes=32 nts_kem/KAT_NTS_KEM/kem/nts_kem_13_136/PQCkemKAT_19890.rsp
kem ct=402 pk=378 sk=434 bytes=16 sike/KAT/PQCkemKAT_434.rsp
kem ct=406 pk=84132 sk=30860 bytes=32 big_quake/BIG_QUAKE/KAT/PQCkemKAT_BIG_QUAKE_3.rsp
kem ct=423 pk=423 sk=40 bytes=64 lake/KATs/Reference_Implementation/LAKE-I/PQCkemKAT_40.rsp
kem ct=464 pk=417 sk=100 bytes=16 round2/KAT/kem/nround2_kem_nd_l1/PQCkemKAT_100.rsp
kem ct=482 pk=435 sk=105 bytes=16 round2/KAT/kem/uround2_kem_nd_l1/PQCkemKAT_105.rsp
kem ct=492 pk=149800 sk=41804 bytes=32 big_quake/BIG_QUAKE/KAT/PQCkemKAT_BIG_QUAKE_5.rsp
kem ct=500 pk=460 sk=110 bytes=32 rvb/RVB/KAT/PQCkemKAT_110.rsp
kem ct=596 pk=564 sk=644 bytes=24 sike/KAT/PQCkemKAT_644.rsp
kem ct=611 pk=611 sk=701 bytes=32 ntruencrypt/NTRUEncrypt/KAT/sample output/PQCkemKAT_701.rsp
kem ct=614 pk=519 sk=122 bytes=32 round2/KAT/kem/nround2_kem_nd_l2/PQCkemKAT_122.rsp
kem ct=618 pk=555 sk=131 bytes=32 round2/KAT/kem/uround2_kem_nd_l2/PQCkemKAT_131.rsp
kem ct=636 pk=636 sk=40 bytes=64 lake/KATs/Reference_Implementation/LAKE-II/PQCkemKAT_40.rsp
kem ct=636 pk=565 sk=135 bytes=24 round2/KAT/kem/uround2_kem_nd_l3/PQCkemKAT_135.rsp
kem ct=652 pk=581 sk=139 bytes=24 round2/KAT/kem/nround2_kem_nd_l3/PQCkemKAT_139.rsp
kem ct=729 pk=696 sk=128 bytes=81 cfpkm/CFPKM/KAT/KEM/CFPKM128/PQCkemKAT_128.rsp
kem ct=736 pk=672 sk=1568 bytes=32 saber/SABER_KEM/KAT/light_saber/PQCkemKAT_1568.rsp
kem ct=750 pk=690 sk=160 bytes=48 rvb/RVB/KAT/PQCkemKAT_160.rsp
kem ct=766 pk=726 sk=826 bytes=32 sike/KAT/PQCkemKAT_826.rsp
kem ct=785 pk=118441 sk=179946 bytes=64 rlce/KAT_RLCE/PQCkemKAT_179946.rsp
kem ct=800 pk=736 sk=1632 bytes=32 crystals_kyber/CRYSTALS-Kyber/KAT/kyber512/PQCkemKAT_1632.rsp
kem ct=818 pk=691 sk=165 bytes=32 round2/KAT/kem/nround2_kem_nd_l5/PQCkemKAT_165.rsp
kem ct=826 pk=826 sk=40 bytes=64 lake/KATs/Reference_Implementation/LAKE-III/PQCkemKAT_40.rsp
kem ct=868 pk=709 sk=169 bytes=32 round2/KAT/kem/uround2_kem_nd_l5/PQCkemKAT_169.rsp
kem ct=875 pk=747 sk=787 bytes=64 locker/KATs/Reference_Implementation/LOCKER-I/PQCkemKAT_787.rsp
kem ct=898 pk=707 sk=165 bytes=48 round2/KAT/kem/nround2_kem_nd_l4/PQCkemKAT_165.rsp
kem ct=917 pk=804 sk=40 bytes=32 threebears/ThreeBears/KAT/crypto_kem/BabyBearEphem/PQCkemKAT_40.rsp
kem ct=917 pk=804 sk=40 bytes=32 threebears/ThreeBears/KAT/crypto_kem/BabyBear/PQCkemKAT_40.rsp
kem ct=940 pk=749 sk=175 bytes=48 round2/KAT/kem/uround2_kem_nd_l4/PQCkemKAT_175.rsp
kem ct=944 pk=4602 sk=4661 bytes=2 odd_manhattan/Odd_Manhattan/KAT/PQCkemKAT_4661.rsp
kem ct=988 pk=188001 sk=310116 bytes=64 rlce/KAT_RLCE/PQCkemKAT_310116.rsp
kem ct=1000 pk=920 sk=210 bytes=64 rvb/RVB/KAT/PQCkemKAT_210.rsp
kem ct=1023 pk=1023 sk=1173 bytes=48 ntruencrypt/NTRUEncrypt/KAT/sample output/PQCkemKAT_1173.rsp
kem ct=1024 pk=544 sk=1056 bytes=32 lac/LAC/KAT/KAT_VALUES/KEM/LAC128/PQCkemKAT_1056.rsp
kem ct=1044 pk=995 sk=182 bytes=116 cfpkm/CFPKM/KAT/KEM/CFPKM182/PQCkemKAT_182.rsp
kem ct=1047 pk=1218 sk=1600 bytes=32 ntru_prime/ntruprime-20171214/KAT/kem/sntrup4591761/kat_kem.rsp
kem ct=1088 pk=928 sk=896 bytes=32 newhope/NewHope/KAT/newhope512cpa/PQCkemKAT_896.rsp
kem ct=1088 pk=1040 sk=1536 bytes=64 ding_lwe_key_exchange/KAT/output/PQCkemKAT_1536.rsp
kem ct=1088 pk=992 sk=2304 bytes=32 saber/SABER_KEM/KAT/saber/PQCkemKAT_2304.rsp
kem ct=1120 pk=992 sk=288 bytes=32 okcn_akcn_cnke/OKCN_AKCN_CNKE/KAT/kem/AKCN-MLWE/PQCkemKAT_288.rsp
kem ct=1120 pk=992 sk=288 bytes=32 okcn_akcn_cnke/OKCN_AKCN_CNKE/KAT/kem/OKCN-MLWE/PQCkemKAT_288.rsp
kem ct=1120 pk=992 sk=288 bytes=32 okcn_akcn_cnke/OKCN_AKCN_CNKE/Reference_Implementation/kem/AKCN-MLWE/ref/PQCkemKAT_288.rsp
kem ct=1120 pk=992 sk=288 bytes=32 okcn_akcn_cnke/OKCN_AKCN_CNKE/Reference_Implementation/kem/OKCN-MLWE/ref/PQCkemKAT_288.rsp
kem ct=1120 pk=928 sk=1888 bytes=32 newhope/NewHope/KAT/newhope512cca/PQCkemKAT_1888.rsp
kem ct=1138 pk=1010 sk=1050 bytes=64 locker/KATs/Reference_Implementation/LOCKER-IV/PQCkemKAT_1050.rsp
kem ct=1152 pk=1088 sk=2400 bytes=32 crystals_kyber/CRYSTALS-Kyber/KAT/kyber768/PQCkemKAT_2400.rsp
kem ct=1160 pk=658944 sk=714240 bytes=16 lotus/KAT_LOTUS/kem/lotus128/PQCkemKAT_714240.rsp
kem ct=1175 pk=1047 sk=1238 bytes=32 ntru_prime/ntruprime-20171214/KAT/kem/ntrulpr4591761/kat_kem.rsp
kem ct=1184 pk=840 sk=32 bytes=32 edonk/EdonK/KAT/edonk128K08N72nu8L8/PQCkemKAT.rsp
kem ct=1207 pk=1079 sk=1119 bytes=64 locker/KATs/Reference_Implementation/LOCKER-II/PQCkemKAT_1119.rsp
kem ct=1238 pk=287371 sk=440008 bytes=64 rlce/KAT_RLCE/PQCkemKAT_440008.rsp
kem ct=1272 pk=676 sk=40 bytes=64 ouroboros_r/KATs/Reference_Implementation/ouroboros-r-128/ouroboros-r-128_kat.rsp
kem ct=1278 pk=1138 sk=1418 bytes=32 ntru_hrss_kem/NIST-PQ-Submission-NTRU-HRSS-KEM-20171130/KAT/ntruhrss701/PQCkemKAT_1418.rsp
kem ct=1307 pk=1194 sk=40 bytes=32 threebears/ThreeBears/KAT/crypto_kem/MamaBearEphem/PQCkemKAT_40.rsp
kem ct=1307 pk=1194 sk=40 bytes=32 threebears/ThreeBears/KAT/crypto_kem/MamaBear/PQCkemKAT_40.rsp
kem ct=1312 pk=1552 sk=32 bytes=32 edonk/EdonK/KAT/edonk128K16N80nu8L6/PQCkemKAT.rsp
kem ct=1312 pk=776 sk=32 bytes=32 edonk/EdonK/KAT/edonk128K16N80nu4L6/PQCkemKAT.rsp
kem ct=1374 pk=1246 sk=1286 bytes=64 locker/KATs/Reference_Implementation/LOCKER-III/PQCkemKAT_1286.rsp
kem ct=1467 pk=1339 sk=1379 bytes=64 locker/KATs/Reference_Implementation/LOCKER-V/PQCkemKAT_1379.rsp
kem ct=1472 pk=1312 sk=3040 bytes=32 saber/SABER_KEM/KAT/fire_saber/PQCkemKAT_3040.rsp
kem ct=1472 pk=1312 sk=3040 bytes=32 saber/SABER_KEM/Reference_Implementation_KEM/fire_saber/PQCkemKAT_3040.rsp
kem ct=1480 pk=1025024 sk=1126400 bytes=24 lotus/KAT_LOTUS/kem/lotus192/PQCkemKAT_1126400.rsp
kem ct=1504 pk=1440 sk=3168 bytes=32 crystals_kyber/CRYSTALS-Kyber/KAT/kyber1024/PQCkemKAT_3168.rsp
kem ct=1534 pk=807 sk=40 bytes=64 ouroboros_r/KATs/Reference_Implementation/ouroboros-r-192/ouroboros-r-192_kat.rsp
kem ct=1536 pk=1056 sk=2080 bytes=48 lac/LAC/KAT/KAT_VALUES/KEM/LAC192/PQCkemKAT_2080.rsp
kem ct=1545 pk=450761 sk=747393 bytes=64 rlce/KAT_RLCE/PQCkemKAT_747393.rsp
kem ct=1556 pk=786 sk=826 bytes=64 rqc/KATs/Reference_Implementation/rqc128/rqc128_kat.rsp
kem ct=1568 pk=1680 sk=32 bytes=32 edonk/EdonK/KAT/edonk128K32N96nu4L4/PQCkemKAT.rsp
kem ct=1570 pk=1442 sk=1482 bytes=64 locker/KATs/Reference_Implementation/LOCKER-VI/PQCkemKAT_1482.rsp
kem ct=1585 pk=1045 sk=32 bytes=32 lepton/Lepton/KAT/Lepton.CPA/Light_I/PQCkemKAT_32.rsp
kem ct=1617 pk=1045 sk=1077 bytes=32 lepton/Lepton/KAT/Lepton.CCA/Light_I/PQCkemKAT_1077.rsp
kem ct=1697 pk=1584 sk=40 bytes=32 threebears/ThreeBears/KAT/crypto_kem/PapaBearEphem/PQCkemKAT_40.rsp
kem ct=1697 pk=1584 sk=40 bytes=32 threebears/ThreeBears/KAT/crypto_kem/PapaBear/PQCkemKAT_40.rsp
kem ct=1767 pk=1639 sk=1679 bytes=64 locker/KATs/Reference_Implementation/LOCKER-VII/PQCkemKAT_1679.rsp
kem ct=1800 pk=1470976 sk=1630720 bytes=32 lotus/KAT_LOTUS/kem/lotus256/PQCkemKAT_1630720.rsp
kem ct=1824 pk=1184 sk=1472 bytes=32 kindi/KINDI/KAT/Additional_Implementation/kem/KINDI-256-3-4-2/PQCkemKAT_1472.rsp
kem ct=1824 pk=1184 sk=1472 bytes=32 kindi/KINDI/KAT/Reference_Implementation/kem/KINDI-256-3-4-2/PQCkemKAT_1472.rsp
kem ct=1955 pk=1696 sk=1664 bytes=95 okcn_akcn_cnke/OKCN_AKCN_CNKE/KAT/kem/OKCN-SEC/PQCkemKAT_1664.rsp
kem ct=1955 pk=1696 sk=1664 bytes=95 okcn_akcn_cnke/OKCN_AKCN_CNKE/Reference_Implementation/kem/OKCN-SEC/ref/PQCkemKAT_1664.rsp
kem ct=1966 pk=1045 sk=40 bytes=32 lepton/Lepton/KAT/Lepton.CPA/Light_II/PQCkemKAT_40.rsp
kem ct=1998 pk=1045 sk=1085 bytes=32 lepton/Lepton/KAT/Lepton.CCA/Light_II/PQCkemKAT_1085.rsp
kem ct=2012 pk=1824 sk=1824 bytes=32 hila5/KAT/PQCkemKAT_1824.rsp
kem ct=2023 pk=742089 sk=1048176 bytes=64 rlce/KAT_RLCE/PQCkemKAT_1048176.rsp
kem ct=2048 pk=1056 sk=2080 bytes=64 lac/LAC/KAT/KAT_VALUES/KEM/LAC256/PQCkemKAT_2080.rsp
kem ct=2065 pk=1937 sk=1977 bytes=64 locker/KATs/Reference_Implementation/LOCKER-VIII/PQCkemKAT_1977.rsp
kem ct=2080 pk=4096 sk=385 bytes=32 lizard/KAT_Lizard/RLizard.KEM/PQCkemKAT_385(Category1).rsp
kem ct=2083 pk=1696 sk=1664 bytes=95 okcn_akcn_cnke/OKCN_AKCN_CNKE/KAT/kem/AKCN-SEC/PQCkemKAT_1664.rsp
kem ct=2083 pk=1696 sk=1664 bytes=95 okcn_akcn_cnke/OKCN_AKCN_CNKE/Reference_Implementation/kem/AKCN-SEC/ref/PQCkemKAT_1664.rsp
kem ct=2136 pk=6408 sk=24 bytes=32 ledakem/KAT/PQCkemKAT_24_4.rsp
kem ct=2144 pk=1112 sk=40 bytes=64 ouroboros_r/KATs/Reference_Implementation/ouroboros-r-256/ouroboros-r-256_kat.rsp
kem ct=2144 pk=11616 sk=2973704 bytes=64 dags/KAT_DAGS/kem/dags3/kat_kem.rsp
kem ct=2144 pk=11616 sk=2973704 bytes=64 dags/KAT_DAGS/kem/dags5/kat_kem.rsp
kem ct=2176 pk=1824 sk=1792 bytes=32 newhope/NewHope/KAT/newhope1024cpa/PQCkemKAT_1792.rsp
kem ct=2176 pk=2064 sk=3072 bytes=128 ding_lwe_key_exchange/KAT/output/PQCkemKAT_3072.rsp
kem ct=2208 pk=1824 sk=3680 bytes=32 newhope/NewHope/KAT/newhope1024cca/PQCkemKAT_3680.rsp
kem ct=2326 pk=2198 sk=2238 bytes=64 locker/KATs/Reference_Implementation/LOCKER-IX/PQCkemKAT_2238.rsp
kem ct=2336 pk=2576 sk=32 bytes=32 edonk/EdonK/KAT/edonk128ref/PQCkemKAT.rsp
kem ct=2344 pk=4688 sk=24 bytes=32 ledakem/KAT/PQCkemKAT_24_3.rsp
kem ct=2465 pk=2052 sk=38 bytes=32 lepton/Lepton/KAT/Lepton.CPA/Moderate_I/PQCkemKAT_38.rsp
kem ct=2497 pk=2052 sk=2090 bytes=32 lepton/Lepton/KAT/Lepton.CCA/Moderate_I/PQCkemKAT_2090.rsp
kem ct=2542 pk=2542 sk=2542 bytes=32 bike/BIKE/KAT/PQCkemKAT_BIKE1-Level1_2542.rsp
kem ct=2542 pk=2542 sk=2542 bytes=32 bike/BIKE/KAT/PQCkemKAT_BIKE2-Level1_2542.rsp
kem ct=2544 pk=1456 sk=1712 bytes=48 kindi/KINDI/KAT/Additional_Implementation/kem/KINDI-512-2-2-2/PQCkemKAT_1712.rsp
kem ct=2544 pk=1456 sk=1712 bytes=48 kindi/KINDI/KAT/Reference_Implementation/kem/KINDI-512-2-2-2/PQCkemKAT_1712.rsp
kem ct=2640 pk=1232001 sk=1773271 bytes=64 rlce/KAT_RLCE/PQCkemKAT_1773271.rsp
kem ct=2719 pk=2052 sk=48 bytes=32 lepton/Lepton/KAT/Lepton.CPA/Moderate_II/PQCkemKAT_48.rsp
kem ct=2720 pk=12192 sk=12224 bytes=32 titanium/KAT/Titanium_CCA_toy/PQCkemKAT_12224.rsp
kem ct=2736 pk=1096 sk=32 bytes=48 edonk/EdonK/KAT/edonk192K16N112nu4L8/PQCkemKAT.rsp
kem ct=2736 pk=2192 sk=32 bytes=48 edonk/EdonK/KAT/edonk192ref/PQCkemKAT.rsp
kem ct=2751 pk=2052 sk=2100 bytes=32 lepton/Lepton/KAT/Lepton.CCA/Moderate_II/PQCkemKAT_2100.rsp
kem ct=2752 pk=1728 sk=2112 bytes=64 kindi/KINDI/KAT/Additional_Implementation/kem/KINDI-512-2-4-1/PQCkemKAT_2112.rsp
kem ct=2752 pk=1728 sk=2112 bytes=64 kindi/KINDI/KAT/Reference_Implementation/kem/KINDI-512-2-4-1/PQCkemKAT_2112.rsp
kem ct=2752 pk=1984 sk=2304 bytes=64 kindi/KINDI/KAT/Additional_Implementation/kem/KINDI-256-5-2-2/PQCkemKAT_2304.rsp
kem ct=2752 pk=1984 sk=2304 bytes=64 kindi/KINDI/KAT/Reference_Implementation/kem/KINDI-256-5-2-2/PQCkemKAT_2304.rsp
kem ct=2758 pk=2758 sk=2758 bytes=32 bike/BIKE/KAT/PQCkemKAT_BIKE3-Level1_2758.rsp
kem ct=2806 pk=1411 sk=1451 bytes=64 rqc/KATs/Reference_Implementation/rqc192/rqc192_kat.rsp
kem ct=2973 pk=2052 sk=56 bytes=32 lepton/Lepton/KAT/Lepton.CPA/Moderate_III/PQCkemKAT_56.rsp
kem ct=3005 pk=2052 sk=2108 bytes=32 lepton/Lepton/KAT/Lepton.CCA/Moderate_III/PQCkemKAT_2108.rsp
kem ct=3008 pk=14720 sk=14752 bytes=32 titanium/KAT/Titanium_CCA_lite/PQCkemKAT_14752.rsp
kem ct=3104 pk=4096 sk=6144 bytes=32 emblem_r_emblem/EMBLEM_R_EMBLEM/KAT/R_EMBLEM/PQCkemKAT_6144.rsp
kem ct=3120 pk=2256 sk=32 bytes=48 edonk/EdonK/KAT/edonk192K32N128nu4L6/PQCkemKAT.rsp
kem ct=3392 pk=2368 sk=2752 bytes=64 kindi/KINDI/KAT/Additional_Implementation/kem/KINDI-512-3-2-1/PQCkemKAT_2752.rsp
kem ct=3392 pk=2368 sk=2752 bytes=64 kindi/KINDI/KAT/Reference_Implementation/kem/KINDI-512-3-2-1/PQCkemKAT_2752.rsp
kem ct=3480 pk=3480 sk=24 bytes=32 ledakem/KAT/PQCkemKAT_24_2.rsp
kem ct=3504 pk=3672 sk=32 bytes=48 edonk/EdonK/KAT/edonk192K48K144nu4L4/PQCkemKAT.rsp
kem ct=3552 pk=16352 sk=16384 bytes=32 titanium/KAT/Titanium_CCA_std/PQCkemKAT_16384.rsp
kem ct=3574 pk=1795 sk=1835 bytes=64 rqc/KATs/Reference_Implementation/rqc256/rqc256_kat.rsp
kem ct=3989 pk=2052 sk=74 bytes=32 lepton/Lepton/KAT/Lepton.CPA/Moderate_IV/PQCkemKAT_74.rsp
kem ct=4021 pk=2052 sk=2126 bytes=32 lepton/Lepton/KAT/Lepton.CCA/Moderate_IV/PQCkemKAT_2126.rsp
kem ct=4097 pk=4097 sk=8194 bytes=48 ntruencrypt/NTRUEncrypt/KAT/sample output/PQCkemKAT_8194.rsp
kem ct=4144 pk=4096 sk=641 bytes=48 lizard/KAT_Lizard/RLizard.KEM/PQCkemKAT_641(Category3_N1024).rsp
kem ct=4384 pk=13152 sk=32 bytes=48 ledakem/KAT/PQCkemKAT_32_4.rsp
kem ct=4544 pk=18272 sk=18304 bytes=32 titanium/KAT/Titanium_CCA_med/PQCkemKAT_18304.rsp
kem ct=4837 pk=3455 sk=625 bytes=16 round2/KAT/kem/uround2_kem_n1_fn0_l1/PQCkemKAT_625.rsp
kem ct=4837 pk=3455 sk=625 bytes=16 round2/KAT/kem/uround2_kem_n1_fn1_l1/PQCkemKAT_625.rsp
kem ct=4837 pk=3455 sk=625 bytes=16 round2/KAT/kem/uround2_kem_n1_fn2_l1/PQCkemKAT_625.rsp
kem ct=4964 pk=4964 sk=4964 bytes=32 bike/BIKE/KAT/PQCkemKAT_BIKE1-Level3_4964.rsp
kem ct=4964 pk=4964 sk=4964 bytes=32 bike/BIKE/KAT/PQCkemKAT_BIKE2-Level3_4964.rsp
kem ct=5192 pk=10384 sk=32 bytes=48 ledakem/KAT/PQCkemKAT_32_3.rsp
kem ct=5303 pk=4128 sk=70 bytes=32 lepton/Lepton/KAT/Lepton.CPA/Paranoid_I/PQCkemKAT_70.rsp
kem ct=5335 pk=4128 sk=4198 bytes=32 lepton/Lepton/KAT/Lepton.CCA/Paranoid I/PQCkemKAT_4198.rsp
kem ct=5422 pk=5422 sk=5422 bytes=32 bike/BIKE/KAT/PQCkemKAT_BIKE3-Level3_5422.rsp
kem ct=5557 pk=4128 sk=80 bytes=32 lepton/Lepton/KAT/Lepton.CPA/Paranoid_II/PQCkemKAT_80.rsp
kem ct=5589 pk=4128 sk=4208 bytes=32 lepton/Lepton/KAT/Lepton.CCA/Paranoid II/PQCkemKAT_4208.rsp
kem ct=5622 pk=2819 sk=2859 bytes=64 hqc/KAT_HQC/Reference_Implementation/PQCkemKAT_2859.rsp
kem ct=6002 pk=3009 sk=3049 bytes=64 hqc/KAT_HQC/Reference_Implementation/PQCkemKAT_3049.rsp
kem ct=6048 pk=20512 sk=20544 bytes=32 titanium/KAT/Titanium_CCA_hi/PQCkemKAT_20544.rsp
kem ct=6234 pk=3125 sk=3165 bytes=64 hqc/KAT_HQC/Reference_Implementation/PQCkemKAT_3165.rsp
kem ct=6428 pk=6413 sk=1160 bytes=32 round2/KAT/kem/uround2_kem_n1_fn0_l2/PQCkemKAT_1160.rsp
kem ct=6428 pk=6413 sk=1160 bytes=32 round2/KAT/kem/uround2_kem_n1_fn1_l2/PQCkemKAT_1160.rsp
kem ct=6428 pk=6413 sk=1160 bytes=32 round2/KAT/kem/uround2_kem_n1_fn2_l2/PQCkemKAT_1160.rsp
kem ct=6972 pk=5223 sk=945 bytes=24 round2/KAT/kem/uround2_kem_n1_fn0_l3/PQCkemKAT_945.rsp
kem ct=6972 pk=5223 sk=945 bytes=24 round2/KAT/kem/uround2_kem_n1_fn1_l3/PQCkemKAT_945.rsp
kem ct=6972 pk=5223 sk=945 bytes=24 round2/KAT/kem/uround2_kem_n1_fn2_l3/PQCkemKAT_945.rsp
kem ct=7200 pk=7200 sk=32 bytes=48 ledakem/KAT/PQCkemKAT_32_2.rsp
kem ct=7568 pk=22704 sk=40 bytes=64 ledakem/KAT/PQCkemKAT_40_4.rsp
kem ct=8188 pk=8188 sk=8188 bytes=32 bike/BIKE/KAT/PQCkemKAT_BIKE1-Level5_8188.rsp
kem ct=8188 pk=8188 sk=8188 bytes=32 bike/BIKE/KAT/PQCkemKAT_BIKE2-Level5_8188.rsp
kem ct=8226 pk=4097 sk=548 bytes=32 qc_mdpc_kem/QC-MDPC KEM - Atsushi Yamada/KAT/kem/mdpc/kat_kem.rsp
kem ct=8240 pk=8192 sk=625 bytes=48 lizard/KAT_Lizard/RLizard.KEM/PQCkemKAT_625(Category3_N2048).rsp
kem ct=8256 pk=8192 sk=769 bytes=64 lizard/KAT_Lizard/RLizard.KEM/PQCkemKAT_769(Category5).rsp
kem ct=8352 pk=26912 sk=26944 bytes=32 titanium/KAT/Titanium_CCA_super/PQCkemKAT_26944.rsp
kem ct=8710 pk=8679 sk=1572 bytes=32 round2/KAT/kem/uround2_kem_n1_fn0_l5/PQCkemKAT_1572.rsp
kem ct=8710 pk=8679 sk=1572 bytes=32 round2/KAT/kem/uround2_kem_n1_fn1_l5/PQCkemKAT_1572.rsp
kem ct=8710 pk=8679 sk=1572 bytes=32 round2/KAT/kem/uround2_kem_n1_fn2_l5/PQCkemKAT_1572.rsp
kem ct=9008 pk=18016 sk=40 bytes=64 ledakem/KAT/PQCkemKAT_40_3.rsp
kem ct=9034 pk=9034 sk=9034 bytes=32 bike/BIKE/KAT/PQCkemKAT_BIKE3-Level5_9034.rsp
kem ct=9736 pk=9616 sk=19872 bytes=16 frodo/KAT/PQCkemKAT_19872_cshake.rsp
kem ct=9736 pk=9616 sk=19872 bytes=16 frodo/KAT/PQCkemKAT_19872.rsp
kem ct=10214 pk=5115 sk=5155 bytes=64 hqc/KAT_HQC/Reference_Implementation/PQCkemKAT_5155.rsp
kem ct=10896 pk=1390592 sk=10640 bytes=32 lizard/KAT_Lizard/Lizard.KEM/PQCkemKAT_10640.rsp
kem ct=10904 pk=10857 sk=1965 bytes=48 round2/KAT/kem/uround2_kem_n1_fn0_l4/PQCkemKAT_1965.rsp
kem ct=10904 pk=10857 sk=1965 bytes=48 round2/KAT/kem/uround2_kem_n1_fn1_l4/PQCkemKAT_1965.rsp
kem ct=10904 pk=10857 sk=1965 bytes=48 round2/KAT/kem/uround2_kem_n1_fn2_l4/PQCkemKAT_1965.rsp
kem ct=10982 pk=5499 sk=5539 bytes=64 hqc/KAT_HQC/Reference_Implementation/PQCkemKAT_5539.rsp
kem ct=11752 pk=5884 sk=5924 bytes=64 hqc/KAT_HQC/Reference_Implementation/PQCkemKAT_5924.rsp
kem ct=12384 pk=12384 sk=40 bytes=64 ledakem/KAT/PQCkemKAT_40_2.rsp
kem ct=14818 pk=7417 sk=7457 bytes=64 hqc/KAT_HQC/Reference_Implementation/PQCkemKAT_7457.rsp
kem ct=15768 pk=15632 sk=31272 bytes=24 frodo/KAT/PQCkemKAT_31272_cshake.rsp
kem ct=15768 pk=15632 sk=31272 bytes=24 frodo/KAT/PQCkemKAT_31272.rsp
kem ct=15962 pk=7989 sk=8029 bytes=64 hqc/KAT_HQC/Reference_Implementation/PQCkemKAT_8029.rsp
kem ct=16990 pk=8503 sk=8543 bytes=64 hqc/KAT_HQC/Reference_Implementation/PQCkemKAT_8543.rsp
kem ct=17696 pk=1130496 sk=8608 bytes=32 lizard/KAT_Lizard/Lizard.KEM/PQCkemKAT_8608.rsp
kem ct=17778 pk=8897 sk=8937 bytes=64 hqc/KAT_HQC/Reference_Implementation/PQCkemKAT_8937.rsp
kem ct=26928 pk=1720320 sk=19632 bytes=48 lizard/KAT_Lizard/Lizard.KEM/PQCkemKAT_19632.rsp
kem ct=28064 pk=27044 sk=54056 bytes=32 ramstake/ramstake/KAT/Ramstake_RS_216091/PQCkemKAT_54056.rsp
kem ct=31280 pk=1998848 sk=22896 bytes=48 lizard/KAT_Lizard/Lizard.KEM/PQCkemKAT_22896.rsp
kem ct=32768 pk=32768 sk=98304 bytes=32 postquantum_rsa_enc/PostQuantum_RSA/KAT/kem/pqrsa15/kat_kem.rsp
kem ct=35904 pk=4587520 sk=34880 bytes=64 lizard/KAT_Lizard/Lizard.KEM/PQCkemKAT_34880.rsp
kem ct=42688 pk=2727936 sk=41664 bytes=64 lizard/KAT_Lizard/Lizard.KEM/PQCkemKAT_41664.rsp
kem ct=78368 pk=2036736 sk=2039180 bytes=32 emblem_r_emblem/EMBLEM_R_EMBLEM/KAT/EMBLEM/PQCkemKAT_2039180.rsp
kem ct=96167 pk=94637 sk=189242 bytes=32 ramstake/ramstake/KAT/Ramstake_RS_756839/PQCkemKAT_189242.rsp
kem ct=160160 pk=189248 sk=32 bytes=32 mersenne_756839/PQCkemKAT_32.rsp
sign bytes=45 pk=422122 sk=14985 gui/KAT_Gui/Gui-184/PQCsignKAT_14985.rsp
sign bytes=48 pk=417408 sk=14208 gemss/KAT/sign/GeMSS128/PQCsignKAT_14208.rsp
sign bytes=63 pk=1990045 sk=41755 gui/KAT_Gui/Gui-312/PQCsignKAT_41755.rsp
sign bytes=64 pk=152097 sk=100209 rainbow/KAT_Rainbow/KAT/Ia/PQCsignKAT_100209.rsp
sign bytes=67 pk=97954 sk=16464 himq_3/KAT_HiMQ_3/KAT_HiMQ_3_F/PQCsignKAT_16464.rsp
sign bytes=75 pk=125400 sk=11489 himq_3/KAT_HiMQ_3/KAT_HiMQ_3/PQCsignKAT_11489.rsp
sign bytes=78 pk=163185 sk=114308 rainbow/KAT_Rainbow/KAT/Ib/PQCsignKAT_114308.rsp
sign bytes=83 pk=5903405 sk=94757 gui/KAT_Gui/Gui-448/PQCsignKAT_94757.rsp
sign bytes=88 pk=1304192 sk=39440 gemss/KAT/sign/GeMSS192/PQCsignKAT_39440.rsp
sign bytes=92 pk=565489 sk=376141 rainbow/KAT_Rainbow/KAT/IVa/PQCsignKAT_376141.rsp
sign bytes=104 pk=3603792 sk=82056 gemss/KAT/sign/GeMSS256/PQCsignKAT_82056.rsp
sign bytes=104 pk=192241 sk=143385 rainbow/KAT_Rainbow/KAT/Ic/PQCsignKAT_143385.rsp
sign bytes=112 pk=564535 sk=409463 rainbow/KAT_Rainbow/KAT/IIIb/PQCsignKAT_409463.rsp
sign bytes=118 pk=1351361 sk=892079 rainbow/KAT_Rainbow/KAT/VIa/PQCsignKAT_892079.rsp
sign bytes=156 pk=720793 sk=537781 rainbow/KAT_Rainbow/KAT/IIIc/PQCsignKAT_537781.rsp
sign bytes=204 pk=1723681 sk=1274317 rainbow/KAT_Rainbow/KAT/Vc/PQCsignKAT_1274317.rsp
sign bytes=289 pk=15908 sk=32 luov/KAT/luov-8-63-256-mr/PQCsignKAT_32.rsp
sign bytes=319 pk=15908 sk=32 luov/KAT/luov-8-63-256/PQCsignKAT_32.rsp
sign bytes=416 pk=46101 sk=32 luov/KAT/luov-8-90-351-mr/PQCsignKAT_32.rsp
sign bytes=441 pk=46101 sk=32 luov/KAT/luov-8-90-351/PQCsignKAT_32.rsp
sign bytes=488 pk=100989 sk=32 luov/KAT/luov-8-117-404-mr/PQCsignKAT_32.rsp
sign bytes=521 pk=100989 sk=32 luov/KAT/luov-8-117-404/PQCsignKAT_32.rsp
sign bytes=528 pk=501176 sk=334006 pqsigrm/KAT_pqsigRM/pqsigrm612/PQCsignKAT_334006.rsp
sign bytes=528 pk=336804 sk=1382118 pqsigrm/KAT_pqsigRM/pqsigrm412/PQCsignKAT_1382118.rsp
sign bytes=600 pk=102000 sk=720000 racoss/RaCoSS/PQCsignKAT_720000.rsp
sign bytes=639 pk=28987 sk=122 drs/DRS/KAT/PQCsignKAT_122.rsp
sign bytes=667 pk=897 sk=4097 falcon/falcon_final/KAT/falcon512-KAT.rsp
sign bytes=707 pk=83 sk=136 walnutdsa/WalnutDSA/KAT/intermediates/walnut128/bkl/PQCsignKAT_136.rsp
sign bytes=758 pk=83 sk=136 walnutdsa/WalnutDSA/KAT/intermediates/walnut128/stochasticrewrite/PQCsignKAT_136.rsp
sign bytes=839 pk=83 sk=136 walnutdsa/WalnutDSA/KAT/walnut128/bkl/PQCsignKAT_136.rsp
sign bytes=869 pk=51 sk=67 walnutdsa/WalnutDSA/KAT/walnut128/bkl/PQCsignKAT_67.rsp
sign bytes=887 pk=83 sk=136 walnutdsa/WalnutDSA/KAT/walnut128/stochasticrewrite/PQCsignKAT_136.rsp
sign bytes=1040 pk=2105344 sk=2144166 pqsigrm/KAT_pqsigRM/pqsigrm613/PQCsignKAT_2144166.rsp
sign bytes=1042 pk=1441 sk=6145 falcon/falcon_final/KAT/falcon768-KAT.rsp
sign bytes=1083 pk=51 sk=67 walnutdsa/WalnutDSA/KAT/walnut128/stochasticrewrite/PQCsignKAT_67.rsp
sign bytes=1133 pk=128 sk=291 walnutdsa/WalnutDSA/KAT/intermediates/walnut256/bkl/PQCsignKAT_291.rsp
sign bytes=1237 pk=128 sk=291 walnutdsa/WalnutDSA/KAT/intermediates/walnut256/stochasticrewrite/PQCsignKAT_291.rsp
sign bytes=1282 pk=1793 sk=8193 falcon/falcon_final/KAT/falcon1024-KAT.rsp
sign bytes=1328 pk=83 sk=136 walnutdsa/WalnutDSA/KAT/intermediates/walnut128/stochasticrewritenodehornoy/PQCsignKAT_136.rsp
sign bytes=1377 pk=10080 sk=23864 ranksign/KATs/Reference_Implementation/RankSign-I/PQCsignKAT_23864.rsp
sign bytes=1471 pk=128 sk=291 walnutdsa/WalnutDSA/KAT/walnut256/bkl/PQCsignKAT_291.rsp
sign bytes=1487 pk=896 sk=2096 crystals_dilithium/CRYSTALS-Dilithium/KAT/Dilithium_weak/PQCsignKAT_2096.rsp
sign bytes=1501 pk=12096 sk=28092 ranksign/KATs/Reference_Implementation/RankSign-II/PQCsignKAT_28092.rsp
sign bytes=1566 pk=83 sk=147 walnutdsa/WalnutDSA/KAT/walnut256/bkl/PQCsignKAT_147.rsp
sign bytes=1578 pk=83 sk=136 walnutdsa/WalnutDSA/KAT/walnut128/stochasticrewritenodehornoy/PQCsignKAT_136.rsp
sign bytes=1603 pk=128 sk=291 walnutdsa/WalnutDSA/KAT/walnut256/stochasticrewrite/PQCsignKAT_291.rsp
sign bytes=1713 pk=7536 sk=32 luov/KAT/luov-48-49-242-mr/PQCsignKAT_32.rsp
sign bytes=1746 pk=7536 sk=32 luov/KAT/luov-48-49-242/PQCsignKAT_32.rsp
sign bytes=1760 pk=51 sk=67 walnutdsa/WalnutDSA/KAT/walnut128/stochasticrewritenodehornoy/PQCsignKAT_67.rsp
sign bytes=1793 pk=83 sk=147 walnutdsa/WalnutDSA/KAT/walnut256/stochasticrewrite/PQCsignKAT_147.rsp
sign bytes=2044 pk=1184 sk=2800 crystals_dilithium/CRYSTALS-Dilithium/KAT/Dilithium_medium/PQCsignKAT_2800.rsp
sign bytes=2065 pk=2065 sk=2604 pqntrusign/pqNTRUsign/KAT/Gaussian1024/PQCsignKAT_2604.rsp
sign bytes=2065 pk=2065 sk=2604 pqntrusign/pqNTRUsign/KAT/Uniform1024/PQCsignKAT_2604.rsp
sign bytes=2065 pk=2065 sk=2604 pqntrusign/pqNTRUsign/Reference_Implementation/Gaussian-1024/PQCsignKAT_2604.rsp
sign bytes=2161 pk=19440 sk=44316 ranksign/KATs/Reference_Implementation/RankSign-III/PQCsignKAT_44316.rsp
sign bytes=2701 pk=1472 sk=3504 crystals_dilithium/CRYSTALS-Dilithium/KAT/Dilithium_recommended/PQCsignKAT_3504.rsp
sign bytes=2729 pk=128 sk=291 walnutdsa/WalnutDSA/KAT/intermediates/walnut256/stochasticrewritenodehornoy/PQCsignKAT_291.rsp
sign bytes=2929 pk=28560 sk=64340 ranksign/KATs/Reference_Implementation/Ranksign-IV/PQCsignKAT_64340.rsp
sign bytes=2954 pk=128 sk=291 walnutdsa/WalnutDSA/KAT/walnut256/stochasticrewritenodehornoy/PQCsignKAT_291.rsp
sign bytes=3103 pk=83 sk=147 walnutdsa/WalnutDSA/KAT/walnut256/stochasticrewritenodehornoy/PQCsignKAT_147.rsp
sign bytes=3104 pk=4128 sk=2112 qtesla/qTESLA/KAT/PQCsignKAT_qTesla-128.rsp
sign bytes=3151 pk=19973 sk=32 luov/KAT/luov-64-68-330-mr/PQCsignKAT_32.rsp
sign bytes=3184 pk=19973 sk=32 luov/KAT/luov-64-68-330/PQCsignKAT_32.rsp
sign bytes=3366 pk=1760 sk=3856 crystals_dilithium/CRYSTALS-Dilithium/KAT/Dilithium_very_high/PQCsignKAT_3856.rsp
sign bytes=4817 pk=40248 sk=32 luov/KAT/luov-80-86-399-mr/PQCsignKAT_32.rsp
sign bytes=4850 pk=40248 sk=32 luov/KAT/luov-80-86-399/PQCsignKAT_32.rsp
sign bytes=6176 pk=8224 sk=8256 qtesla/qTESLA/KAT/PQCsignKAT_qTesla-192.rsp
sign bytes=6176 pk=8224 sk=8256 qtesla/qTESLA/KAT/PQCsignKAT_qTesla-256.rsp
sign bytes=8080 pk=32 sk=64 sphincs_plus/KAT_SPHINCSPlus/sphincs-haraka-128s/PQCsignKAT_64.rsp
sign bytes=8080 pk=32 sk=64 sphincs_plus/KAT_SPHINCSPlus/sphincs-sha256-128s/PQCsignKAT_64.rsp
sign bytes=8080 pk=32 sk=64 sphincs_plus/KAT_SPHINCSPlus/sphincs-shake256-128s/PQCsignKAT_64.rsp
sign bytes=15728 pk=32 sk=65568 gravity_sphincs/KAT_Gravity_SPHINCS/PQCsignKAT_65568.rsp
sign bytes=16976 pk=32 sk=64 sphincs_plus/KAT_SPHINCSPlus/sphincs-haraka-128f/PQCsignKAT_64.rsp
sign bytes=16976 pk=32 sk=64 sphincs_plus/KAT_SPHINCSPlus/sphincs-sha256-128f/PQCsignKAT_64.rsp
sign bytes=16976 pk=32 sk=64 sphincs_plus/KAT_SPHINCSPlus/sphincs-shake256-128f/PQCsignKAT_64.rsp
sign bytes=17064 pk=48 sk=96 sphincs_plus/KAT_SPHINCSPlus/sphincs-haraka-192s/PQCsignKAT_96.rsp
sign bytes=17064 pk=48 sk=96 sphincs_plus/KAT_SPHINCSPlus/sphincs-sha256-192s/PQCsignKAT_96.rsp
sign bytes=17064 pk=48 sk=96 sphincs_plus/KAT_SPHINCSPlus/sphincs-shake256-192s/PQCsignKAT_96.rsp
sign bytes=29792 pk=64 sk=128 sphincs_plus/KAT_SPHINCSPlus/sphincs-haraka-256s/PQCsignKAT_128.rsp
sign bytes=29792 pk=64 sk=128 sphincs_plus/KAT_SPHINCSPlus/sphincs-sha256-256s/PQCsignKAT_128.rsp
sign bytes=29792 pk=64 sk=128 sphincs_plus/KAT_SPHINCSPlus/sphincs-shake256-256s/PQCsignKAT_128.rsp
sign bytes=32800 pk=32768 sk=98304 postquantum_rsa_sign/PostQuantum_RSA_Sign/KAT/sign/pqrsa15/kat_sign.rsp
sign bytes=32882 pk=62 sk=32 mqdss/MQDSS/KAT/mqdss-48/PQCsignKAT_32.rsp
sign bytes=33092 pk=33 sk=49 picnic/KAT_Picnic/picnicl1fs/PQCsignKAT_L1.rsp
sign bytes=34064 pk=32 sk=2097184 gravity_sphincs/KAT_Gravity_SPHINCS/PQCsignKAT_2097184.rsp
sign bytes=35664 pk=48 sk=96 sphincs_plus/KAT_SPHINCSPlus/sphincs-haraka-192f/PQCsignKAT_96.rsp
sign bytes=35664 pk=48 sk=96 sphincs_plus/KAT_SPHINCSPlus/sphincs-sha256-192f/PQCsignKAT_96.rsp
sign bytes=35664 pk=48 sk=96 sphincs_plus/KAT_SPHINCSPlus/sphincs-shake256-192f/PQCsignKAT_96.rsp
sign bytes=38768 pk=32 sk=1048608 gravity_sphincs/KAT_Gravity_SPHINCS/PQCsignKAT_1048608.rsp
sign bytes=49216 pk=64 sk=128 sphincs_plus/KAT_SPHINCSPlus/sphincs-haraka-256f/PQCsignKAT_128.rsp
sign bytes=49216 pk=64 sk=128 sphincs_plus/KAT_SPHINCSPlus/sphincs-sha256-256f/PQCsignKAT_128.rsp
sign bytes=49216 pk=64 sk=128 sphincs_plus/KAT_SPHINCSPlus/sphincs-shake256-256f/PQCsignKAT_128.rsp
sign bytes=53933 pk=33 sk=49 picnic/KAT_Picnic/picnicl1ur/PQCsignKAT_L1.rsp
sign bytes=67800 pk=88 sk=48 mqdss/MQDSS/KAT/mqdss-64/PQCsignKAT_48.rsp
sign bytes=74512 pk=49 sk=73 picnic/KAT_Picnic/picnicl3fs/PQCsignKAT_L3.rsp
sign bytes=121817 pk=49 sk=73 picnic/KAT_Picnic/picnicl3ur/PQCsignKAT_L3.rsp
sign bytes=129052 pk=65 sk=97 picnic/KAT_Picnic/picnicl5fs/PQCsignKAT_L5.rsp
sign bytes=209478 pk=65 sk=97 picnic/KAT_Picnic/picnicl5ur/PQCsignKAT_L5.rsp

Marco Baldi

unread,

Jan 4, 2018, 12:46:19 PM1/4/18

to pqc-...@list.nist.gov

Dear Dan and dear all,

concerning LEDAkem/pkc, we already discussed this matter with NIST at the time of submission.

These two cryptosystems rely on the same code-based trapdoor, however:

- LEDAkem employs a Niederreiter formulation, while LEDApkc employs a McEliece formulation,

- LEDApkc implements an IND-CCA2 conversion, while LEDAkem does not (since it is not needed),

- LEDAkem uses ephemeral keys, while LEDApkc does not.

We are fine if considering them together makes their management easier, provided that these differences are clearly highlighted.

Best wishes,

the LEDAkem/pkc team

Da: D. J. Bernstein <d...@cr.yp.to>
Inviato: mercoledì 3 gennaio 2018 17:15:49
A: pqc-...@list.nist.gov
Oggetto: Re: [pqc-forum] Total number of proposals by field

Ryo Fujita

unread,

Jan 4, 2018, 8:19:32 PM1/4/18

to pqc-forum

Based on your table, I made a diagram showing the distribution of signature size, ciphertext size and public key size.

2018年1月4日木曜日 1時16分02秒 UTC+9 D. J. Bernstein:

Ryo Fujita

unread,

Jan 26, 2018, 10:11:41 AM1/26/18

to pqc-forum

We updated the classification table reflecting various changes etc. made during the past month.

2017年12月28日木曜日 9時18分29秒 UTC+9 Ryo Fujita:

Thank you for your comment.
We updated classification table according to your comment.

Vincent Dupaquis

unread,

Jan 29, 2018, 9:25:58 AM1/29/18

to pqc-forum

Hello,

Congratulations for your compilation work, however, may I suggest a tiny improvement ?

To avoid any misunderstanding, would it be possible that the scale are added for each curve ?
For instance indicating wether we are talking for the size about bits or bytes ... It looks as a basic thing, but as this forum is public, precision would simply help non-specialist not to do any mistakes.
... And If I remind correclty when I studied, forgetting a scale on such a diagram was not very appreciated ;-)

Regards,
Vincent.

Ryo Fujita

unread,

Jan 29, 2018, 6:45:57 PM1/29/18

to pqc-forum

Thank you for your comment.

The purpose of these graphs is to simply visualize the data provided by Professor Bernstein. When we make improvements as suggested, more data will need to be provided. Alternatively, I should be able to run programs submitted for standardization proposals on my own and obtain various data. However, we have no skills etc for doing such work yet. Especially, in order to compare the computation time for key generation, encryption and decryption, such work becomes necessary.

For the moment, NIST provided data on computation time for key generation, encryption / decryption, and we created some graphs based on that data. These graphs are posted on another topic: Preliminary Baseline Numbers for Mandatory Optimized Implementations.

2018年1月29日月曜日 23時25分58秒 UTC+9 Vincent Dupaquis:

Ryo Fujita

unread,

Mar 9, 2018, 4:19:09 AM3/9/18

to pqc-forum

We updated the contents of the classification table and added information on the scheduled presentation session and the presentation order at the DRAFT AGENDA of the First PQC Standardization Conference.

2018年1月27日土曜日 0時11分41秒 UTC+9 Ryo Fujita:

We updated the classification table reflecting various changes etc. made during the past month.

2017年12月28日木曜日 9時18分29秒 UTC+9 Ryo Fujita:

Ryo Fujita

unread,

Apr 3, 2018, 7:11:02 PM4/3/18

to pqc-forum

I updated the uploading table.
I am sincerely praying for the success of the first PQC Standardization Conference.

2018年3月9日金曜日 18時19分09秒 UTC+9 Ryo Fujita:

We updated the contents of the classification table and added information on the scheduled presentation session and the presentation order at the DRAFT AGENDA of the First PQC Standardization Conference.

2018年1月27日土曜日 0時11分41秒 UTC+9 Ryo Fujita:

Ryo Fujita

unread,

Apr 6, 2018, 4:40:07 AM4/6/18

to pqc-forum

We made modifications to the uploaded table.

2018年4月4日水曜日 8時11分02秒 UTC+9 Ryo Fujita:

I updated the uploading table.
I am sincerely praying for the success of the first PQC Standardization Conference.

Ryo Fujita

unread,

Apr 16, 2018, 12:32:52 AM4/16/18

to pqc-forum

We updated the uploading table.

We are sincerely grateful for the opportunity to have been provided a discussion forum for proposed algorithms at the first PQC Standardization Conference.

2018年4月6日金曜日 17時40分07秒 UTC+9 Ryo Fujita:

We made modifications to the uploaded table.

Reply all

Reply to author

Forward

0 new messages