[PQC-SIG] CRYSTALS-Dillithium

  • Algorithm type: Digital signature scheme.
  • Main cryptographic assumption: hardness of lattice problems over module lattices.

Parameter set of CRYSTALS-Dillithium

Parameter Set Security Model Security Level Public Key Size (bytes) Secret Key Size (bytes) Signature Size (bytes)
Dillithium2 SUF-CMA 2 1312 2528 2420
Dillithium3 SUF-CMA 3 1952 4000 3293
Dillithium5 SUF-CMA 5 2592 4864 4595

Performance of CRYSTALS-Dillithium on ARMv8-A (Cortex-A76) with 1M samples

  • option: -mcpu=cortex-a76 -O3
Parameter Set Keypair Sign Verify
Dillithium3 median: 8573 cycles/ticks
average: 8581 cycles/ticks
median: 17711 cycles/ticks
average: 21115 cycles/ticks
median: 7308 cycles/ticks
average: 7312 cycles/ticks
  • option: -mcpu=cortex-a76 -O0
Parameter Set Keypair Sign Verify
Dillithium3 median: 36473 cycles/ticks
average: 36616 cycles/ticks
median: 66528 cycles/ticks
average: 76780 cycles/ticks
median: 35110 cycles/ticks
average: 35125 cycles/ticks

[KpqC-SIG] NCC-Sign Trinomial

  • Algorithm type: Digital signature scheme.
  • Main cryptographic assumption: hardness of lattice problems over module lattices.

Parameter set of NCC-Sign Trinomial

Parameter Set Security Model Security Level Public Key Size (bytes) Secret Key Size (bytes) Signature Size (bytes)
NCC-Sign Tri. 1 UF-CMA 1 1760 2400 2912
NCC-Sign Tri. 3 UF-CMA 3 2336 3618 3872
NCC-Sign Tri. 5' UF-CMA 5 3104 3936 5152
NCC-Sign Tri. 5 UF-CMA 5 3200 4992 6080

Performance of NCC-Sign Tri. on ARMv8-A (Cortex-A76) with 1M samples

  • option: -mcpu=cortex-a76 -O3
Parameter Set Keypair Sign Verify
NCC-Sign Tri. 1 median: 5034 cycles/ticks
average: 5041 cycles/ticks
median: 10394 cycles/ticks
average: 14761 cycles/ticks
median: 5101 cycles/ticks
average: 5105 cycles/ticks
  • option: -mcpu=cortex-a76 -O0
Parameter Set Keypair Sign Verify
NCC-Sign Tri. 1 median: 17412 cycles/ticks
average: 17794 cycles/ticks
median: 39214 cycles/ticks
average: 56375 cycles/ticks
median: 18105 cycles/ticks
average: 18132 cycles/ticks

cycles/ticks

Stage C with Montgomery Reduction ASM with Barrett Multiplication
CRT (only) [Ave] 429
[Med] 425
[Ave] 37
[Med] 34
Radix2 (only) [Ave] 2669
[Med] 2639
[Ave] 160
[Med] 160
Radix3 (only) [Ave] 1943
[Med] 1924
[Ave] 261
[Med] 261
CRT+Radix2 [Ave] 3053
[Med] 3051
[Ave] 181
[Med] 182
CRT+Radix2+Radix3 [Ave] 4943
[Med] 4939
[Ave] 429
[Med] 429

ms

Stage C with Montgomery Reduction ASM with Barrett Multiplication
CRT (only) [Ave] 0.007906
[Med] 0.007815
[Ave] 0.000649
[Med] 0.000574
Radix2 (only) [Ave] 0.049388
[Med] 0.048816
[Ave] 0.002922
[Med] 0.002926
Radix3 (only) [Ave] 0.035942
[Med] 0.035593
[Ave] 0.004797
[Med] 0.004796
CRT+Radix2 [Ave] 0.056504
[Med] 0.056445
[Ave] 0.003324
[Med] 0.003315
CRT+Radix2+Radix3 [Ave] 0.091502
[Med] 0.091427
[Ave] 0.007902
[Med] 0.007889

Graph

NTT Benchmark Measurement
Figure 1: NTT Benchmark Measurement