Biscuit
Multivariate · Multivariate (Structured) · biscuit-pqc.org(opens in a new tab)
- Programmes
- On-ramp R1
- Latest version
- Round 1 ·
- Security flags
- Warning (all sets)
Parameter sets
Round 1 · 1 Jun 2023
| Parameter set | Level | pk (B) | sig (B) | pk+sig (B) | Sign | Verify |
|---|---|---|---|---|---|---|
| 256s Warning | 5 | 93 | 20,192 | 20,285 | 516.44 ms(Estimated from 1.29G cycles @ 2.5 GHz) | 509.83 ms(Estimated from 1.27G cycles @ 2.5 GHz) |
| 192s Warning | 3 | 69 | 11,349 | 11,418 | 289.79 ms(Estimated from 724.5M cycles @ 2.5 GHz) | 285.98 ms(Estimated from 714.9M cycles @ 2.5 GHz) |
| 256f Warning | 5 | 93 | 27,348 | 27,441 | 58.84 ms(Estimated from 147.1M cycles @ 2.5 GHz) | 54.94 ms(Estimated from 137.4M cycles @ 2.5 GHz) |
| 192f Warning | 3 | 69 | 15,129 | 15,198 | 32.60 ms(Estimated from 81.5M cycles @ 2.5 GHz) | 30.33 ms(Estimated from 75.8M cycles @ 2.5 GHz) |
| 128s Warning | 1 | 50 | 4,758 | 4,808 | 32.22 ms(Estimated from 80.6M cycles @ 2.5 GHz) | 31.56 ms(Estimated from 78.9M cycles @ 2.5 GHz) |
| 128f Warning | 1 | 50 | 6,726 | 6,776 | 3.86 ms(Estimated from 9.7M cycles @ 2.5 GHz) | 3.49 ms(Estimated from 8.7M cycles @ 2.5 GHz) |
Wall-clock times vary between runs and machines (CPU frequency scaling, other tenants on cloud VMs); cycle counts are the steadier basis for comparison.
Security flags
- Warning (all parameter sets): smaller security margin
Only one version of Biscuit is recorded, so there is nothing to compare yet.
History
- New version
Round 1