2

I'm interested in the Post Quantum Algorithms of the 3rd round of the NIST standardization competition. The algorithms for KEM are Classic McEliece, CRYSTALS-KYBER, NTRU, SABER and their 5 alternatives. The signature algorithms are CRYSTALS-DILITHIUM, FALCON, Rainbow and the 3 alternatives. I was looking for a comparison of those algorithms regarding key length (mainly for level 1 NIST security) and runtime. Sadly I couldn't find a good source for that. Can you help me?

Titanlord
  • 2,812
  • 13
  • 37

1 Answers1

4

You can find the full sets of parameters and run times for all propositions in their relevant algorithm specifications and supporting documents:

CRYSTALS-KYBER:

  • parameter sets - page 9
  • runtimes - page 15

Classic McEliece:

  • parameter sets - page 19
  • runtimes - page 33

NTRU:

  • parameter sets - page 5
  • runtimes - page 29

Saber:

  • parameter sets - page 11
  • runtimes - page 14

All of these and more files such as the test implementations these times are generated from can be found from the NIST round 3 submissions page.

edit: As @kelalaka has said in their comment, this question more succinctly answers the question regarding key length

edit 2: I found this paper which quite nicely compares the key length and performance of the round 3 submissions.

supinie
  • 104
  • 6