ISO/IEC 18033-2 amendment
Amendment 2 to ISO/IEC 18033-2 (asymmetric encryption), published in June 2026, which adds post-quantum KEMs including FrodoKEM. Our data covers FrodoKEM and Classic McEliece.
- Organiser
- ISO/IEC JTC 1/SC 27
- Region
- International
- Stage
- Amendment published, since Jun 2026
- KEMs
- 2 schemes
Timeline
Amendment published
Current ·
Schemes in the amendment
KEMs (2)
pk size vs. ciphertext size (log–log scale)
Scroll to zoom · drag to pan· tap a point for details
| Programmes | Assumption | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| FrodoKEM | Lattices | NIST R3ISO | 640-AES | 1 | 9,616 | 9,752 | 19,368 | 252.2 µs | 279.1 µs | 269.1 µs | LWE |
| FrodoKEM | Lattices | NIST R3ISO | 640-SHAKE | 1 | 9,616 | 9,752 | 19,368 | 540.3 µs | 574.1 µs | 559.2 µs | LWE |
| FrodoKEM | Lattices | NIST R3ISO | 976-AES | 3 | 15,632 | 15,792 | 31,424 | 488.4 µs | 525.6 µs | 500.4 µs | LWE |
| FrodoKEM | Lattices | NIST R3ISO | 976-SHAKE | 3 | 15,632 | 15,792 | 31,424 | 1.12 ms | 1.17 ms | 1.15 ms | LWE |
| FrodoKEM | Lattices | NIST R3ISO | 1344-AES | 5 | 21,520 | 21,696 | 43,216 | 854.1 µs | 887.1 µs | 856.6 µs | LWE |
| FrodoKEM | Lattices | NIST R3ISO | 1344-SHAKE | 5 | 21,520 | 21,696 | 43,216 | 1.98 ms | 2.04 ms | 2.00 ms | LWE |
| Classic McEliece | Code-based | NIST R4ISO | mceliece348864 | 1 | 261,120 | 96 | 261,216 | 10.56 ms | 8.8 µs | 27.1 µs | Syndrome Decoding (binary Goppa) |
| Classic McEliece | Code-based | NIST R4ISO | mceliece460896 | 3 | 524,160 | 156 | 524,316 | 31.89 ms | 15.7 µs | 59.4 µs | Syndrome Decoding (binary Goppa) |
| Classic McEliece | Code-based | NIST R4ISO | mceliece6688128 | 5 | 1,044,992 | 208 | 1,045,200 | 76.38 ms | 35.6 µs | 79.9 µs | Syndrome Decoding (binary Goppa) |
| Classic McEliece | Code-based | NIST R4ISO | mceliece6960119 | 5 | 1,047,319 | 194 | 1,047,513 | 47.61 ms | 37.6 µs | 77.4 µs | Syndrome Decoding (binary Goppa) |
| Classic McEliece | Code-based | NIST R4ISO | mceliece8192128 | 5 | 1,357,824 | 208 | 1,358,032 | 72.60 ms | 52.5 µs | 80.1 µs | Syndrome Decoding (binary Goppa) |
11 parameter sets
Legend pre-quantumbroken schemeimplementation findingssecurity warningnote value estimated from cycle counts at 2.5 GHz — not yet benchmarked timeout / DNF benchmark did not finish (too slow / failed) no code: no implementation to benchmark Select an icon for details