Chinith
Symmetric · Block-cipher OWF · niccs.org.cn(opens in a new tab)
- Programmes
- NGCC R1
- Latest version
- Round 1 ·
- Security flags
- Implementation findings (all sets)
Third-party findings: full report on ngcc.dev(opens in a new tab).
Parameter sets
Round 1 · 20 Sep 2026
| Parameter set | Level | pk (B) | sig (B) | pk+sig (B) | Sign | Verify |
|---|---|---|---|---|---|---|
| sm4th_d3_128f_loose Implementation findings | 128-bit | 32 | 6,724 | 6,756 | 4.23 ms | 3.88 ms |
| sm4th_d3_128f_tight Implementation findings | 128-bit | 32 | 11,864 | 11,896 | 4.83 ms | 4.39 ms |
| sm4th_d3_128s_loose Implementation findings | 128-bit | 32 | 5,056 | 5,088 | 30.23 ms | 26.84 ms |
| sm4th_d3_128s_tight Implementation findings | 128-bit | 32 | 9,176 | 9,208 | 33.67 ms | 30.77 ms |
| sm4th_em_d2_128f_loose Implementation findings | 128-bit | 32 | 4,932 | 4,964 | 3.88 ms | 3.68 ms |
| sm4th_em_d2_128f_tight Implementation findings | 128-bit | 32 | 9,450 | 9,482 | 4.05 ms | 3.81 ms |
| sm4th_em_d2_128s_loose Implementation findings | 128-bit | 32 | 3,818 | 3,850 | 28.65 ms | 26.13 ms |
| sm4th_em_d2_128s_tight Implementation findings | 128-bit | 32 | 7,556 | 7,588 | 31.31 ms | 29.39 ms |
| ublockith_d3_256f Implementation findings | 256-bit | 64 | 31,556 | 31,620 | 11.81 ms | 11.34 ms |
| ublockith_d3_256s Implementation findings | 256-bit | 64 | 24,144 | 24,208 | 88.74 ms | 86.12 ms |
| ublockith_em_d3_256f Implementation findings | 256-bit | 64 | 25,028 | 25,092 | 10.73 ms | 10.23 ms |
| ublockith_em_d3_256s Implementation findings | 256-bit | 64 | 19,056 | 19,120 | 83.81 ms | 78.41 ms |
| vistrutith_d3_512f Implementation findings | 512-bit | 128 | 106,788 | 106,916 | 49.26 ms | 45.71 ms |
| vistrutith_d3_512s Implementation findings | 512-bit | 128 | 83,004 | 83,132 | 332.56 ms | 323.86 ms |
Wall-clock times vary between runs and machines (CPU frequency scaling, other tenants on cloud VMs); cycle counts are the steadier basis for comparison.
Security flags
- Implementation findings (all parameter sets): The submitted code leaves a value out of the final Fiat-Shamir challenge, so anyone can forge signatures from the public key alone, at every parameter set (Feussner). Full findings report(opens in a new tab)
Only one version of Chinith is recorded, so there is nothing to compare yet.
History
- New version
Round 1