BRA
Code-based · Rank Synd. Dec. · niccs.org.cn(opens in a new tab)
- Programmes
- NGCC R1
- Status
- NGCC round 1
- Security flags
- Implementation findings (all sets)
Third-party findings: full report on ngcc.dev(opens in a new tab).
Parameter sets
| Parameter set | Level | pk (B) | ct (B) | pk+ct (B) | Keygen | Encaps | Decaps |
|---|---|---|---|---|---|---|---|
| BRA-128 Implementation findings | 128-bit | 1,078 | 2,092 | 3,170 | 153.0 µs | 268.9 µs | 832.8 µs |
| BRA-256 Implementation findings | 256-bit | 1,735 | 3,406 | 5,141 | 253.2 µs | 448.7 µs | 1.39 ms |
| BRA-512 Implementation findings | 512-bit | 3,573 | 7,082 | 10,655 | 422.0 µs | 753.8 µs | 2.34 ms |
Wall-clock times vary between runs and machines (CPU frequency scaling, other tenants on cloud VMs); cycle counts are the steadier basis for comparison.
Security flags
- Implementation findings (all parameter sets): The submitted decapsulation ignores padding bits, so altered copies of a challenge ciphertext decapsulate to the same key, breaking IND-CCA security (Saarinen). Full findings report(opens in a new tab)
History
No events recorded for this scheme yet.