CEDRUSɑ

Symmetric · Hash-based · niccs.org.cn(opens in a new tab)

Programmes
NGCC R1
Latest version
Round 1 ·
Security flags
Implementation findings (2 of 8 sets)

Third-party findings: full report on ngcc.dev(opens in a new tab).

Parameter sets

Round 1 · 20 Sep 2026

Parameter sets of CEDRUSɑ
Parameter setLevelpk (B)sig (B)pk+sig (B)SignVerify
CEDRUSALPHA-160s Implementation findings128-bit4010,30010,3402.16 s5.34 ms
CEDRUSALPHA-160f Implementation findings128-bit4019,42019,460158.54 ms4.94 ms
CEDRUSALPHA-256s 256-bit6425,56825,6323.36 s8.15 ms
CEDRUSALPHA-256f 256-bit6443,29643,360375.64 ms6.71 ms
CEDRUSALPHA-384s 384-bit9660,67260,76812.44 s19.22 ms
CEDRUSALPHA-384f 384-bit9676,17676,2723.49 s34.73 ms
CEDRUSALPHA-512s 512-bit12898,04898,17624.94 s36.14 ms
CEDRUSALPHA-512f 512-bit128127,488127,6165.88 s40.99 ms

Wall-clock times vary between runs and machines (CPU frequency scaling, other tenants on cloud VMs); cycle counts are the steadier basis for comparison.

Security flags

  • Implementation findings (CEDRUSALPHA-160s, CEDRUSALPHA-160f): The submitted code checks only 128 bits of each one-time chain value, so a lower-layer root can be replaced with about 2^128 work, below the claim for this set (shiyuan). Full findings report(opens in a new tab)

Only one version of CEDRUSɑ is recorded, so there is nothing to compare yet.

History

  1. New version

    Round 1

Full timeline →