2
$\begingroup$

I'm interested in the Post Quantum Algorithms of the 3rd round of the NIST standardization competition. The algorithms for KEM are Classic McEliece, CRYSTALS-KYBER, NTRU, SABER and their 5 alternatives. The signature algorithms are CRYSTALS-DILITHIUM, FALCON, Rainbow and the 3 alternatives. I was looking for a comparison of those algorithms regarding key length (mainly for level 1 NIST security) and runtime. Sadly I couldn't find a good source for that. Can you help me?

$\endgroup$
2

1 Answer 1

3
$\begingroup$

You can find the full sets of parameters and run times for all propositions in their relevant algorithm specifications and supporting documents:

CRYSTALS-KYBER:

  • parameter sets - page 9
  • runtimes - page 15

Classic McEliece:

  • parameter sets - page 19
  • runtimes - page 33

NTRU:

  • parameter sets - page 5
  • runtimes - page 29

Saber:

  • parameter sets - page 11
  • runtimes - page 14

All of these and more files such as the test implementations these times are generated from can be found from the NIST round 3 submissions page.

edit: As @kelalaka has said in their comment, this question more succinctly answers the question regarding key length

edit 2: I found this paper which quite nicely compares the key length and performance of the round 3 submissions.

$\endgroup$
4
  • $\begingroup$ Welcome to Cryptography.SE. This is not comparison. $\endgroup$
    – kelalaka
    Commented Apr 26, 2022 at 18:22
  • $\begingroup$ I don't understand how to give a comparison better than this - the runtime tables show cpu cycles taken for the given operations on the same processor, and the security of the schemes is not necessarily dependant on the length of the key but the parameters chosen. $\endgroup$
    – supinie
    Commented Apr 26, 2022 at 18:36
  • $\begingroup$ See my comment under the question... $\endgroup$
    – kelalaka
    Commented Apr 26, 2022 at 19:13
  • $\begingroup$ I see, I do agree that link does provide a more clear answer for key length and have added it as an edit, I still believe my answer gives comparison for runtimes. $\endgroup$
    – supinie
    Commented Apr 26, 2022 at 19:56

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.