Aigis-Enc+
Lattices · MLWE · niccs.org.cn(opens in a new tab)
- Programmes
- NGCC R1
- Status
- NGCC round 1
- Security flags
- Implementation findings (all sets)
Third-party findings: full report on ngcc.dev(opens in a new tab).
Parameter sets
| Parameter set | Level | pk (B) | ct (B) | pk+ct (B) | Keygen | Encaps | Decaps |
|---|---|---|---|---|---|---|---|
| Aigis-Enc+-I Implementation findings | 128-bit | 656 | 896 | 1,552 | 63.2 µs | 71.1 µs | 72.0 µs |
| Aigis-Enc+-II Implementation findings | 256-bit | 1,312 | 1,664 | 2,976 | 96.6 µs | 115.0 µs | 117.5 µs |
| Aigis-Enc+-III Implementation findings | 512-bit | 2,624 | 3,584 | 6,208 | 217.9 µs | 257.3 µs | 270.9 µs |
Wall-clock times vary between runs and machines (CPU frequency scaling, other tenants on cloud VMs); cycle counts are the steadier basis for comparison.
Security flags
- Implementation findings (all parameter sets): Implicit rejection in the submitted decapsulation has no effect, so many modified ciphertexts return the original shared secret, breaking IND-CCA security (Saarinen). Full findings report(opens in a new tab)
History
No events recorded for this scheme yet.