I would have expected this info to be easier to Google Scholar for, but alas I'm asking here.
the public key consists of one ring, and so it takes up $11 \times 439 = 4829$ bits, which compresses to 604 bytes.
For instance, with $N = 1171$ and $q = 2048$, which are recommended parameters, public and private keys are of size 1.57 KB.
Those don't agree.
What about the size of NTRUsign signatures?
Have Bernstein, Lange, Chuengsatiansup, and van Vredendaal published a signature variant of NTRU Prime yet? (I only see encryption ), but in the paper:
Our public keys are field elements, easily squeezed into 1232 bytes.
Any idea what signature sizes of an NTRU Prime-based signature scheme would be?
: NTRU Prime, 2016