In the below, we give an overview of the post-quantum algorithms that have been submitted to the NIST post-quantum signatures on-ramp.
We have copied the properties of the schemes out of the individual scheme submission documents, so be aware of potential errors.
|Scheme||Parameterset||NIST level||Pk bytes||Sig bytes||pk+sig|
Note that many submissions do not have optimized implementations, and that the measurements were collected under an enormous variation of measurement setups. Some implementation are also not timing-invariant with regards to secrets ("constant-time"), and fixing this may also come with performance penalties. Take the performance metrics with a significant grain of salt.
Some metrics have been extrapolated from reported times in milliseconds. These have been converted assuming a 2.5 GHz cpu; independent of the benchmarking platform reported. Converted metrics are marked as such.
|Scheme||Parameterset||NIST level||Sign (cycles)||Verify (cycles)|