CROSS
Code-based · Restricted Synd. Dec. · cross-crypto.com(opens in a new tab)
- Programmes
- On-ramp R2
- Latest version
- v2.2 ·
- Security flags
- None on current sets
Parameter sets
v2.2 · 31 Jul 2025
| Parameter set | Level | pk (B) | sig (B) | pk+sig (B) | Sign | Verify |
|---|---|---|---|---|---|---|
| R-SDP 1 fast | 1 | 77 | 18,432 | 18,509 | 331.2 µs | 211.1 µs |
| R-SDP 1 balanced | 1 | 77 | 13,152 | 13,229 | 556.4 µs | 394.2 µs |
| R-SDP 1 small | 1 | 77 | 12,432 | 12,509 | 1.10 ms | 820.5 µs |
| R-SDP(G) 1 fast | 1 | 54 | 11,980 | 12,034 | 175.7 µs | 118.3 µs |
| R-SDP(G) 1 balanced | 1 | 54 | 9,120 | 9,174 | 321.5 µs | 231.9 µs |
| R-SDP(G) 1 small | 1 | 54 | 8,960 | 9,014 | 642.5 µs | 475.1 µs |
| R-SDP 3 fast | 3 | 115 | 41,406 | 41,521 | 742.5 µs | 487.7 µs |
| R-SDP 3 balanced | 3 | 115 | 29,853 | 29,968 | 1.20 ms | 871.2 µs |
| R-SDP 3 small | 3 | 115 | 28,391 | 28,506 | 1.78 ms | 1.31 ms |
| R-SDP(G) 3 fast | 3 | 83 | 26,772 | 26,855 | 438.0 µs | 294.8 µs |
| R-SDP(G) 3 balanced | 3 | 83 | 22,464 | 22,547 | 534.1 µs | 382.5 µs |
| R-SDP(G) 3 small | 3 | 83 | 20,452 | 20,535 | 1.01 ms | 771.5 µs |
| R-SDP 5 fast | 5 | 153 | 74,590 | 74,743 | 1.36 ms | 874.3 µs |
| R-SDP 5 balanced | 5 | 153 | 53,527 | 53,680 | 2.11 ms | 1.48 ms |
| R-SDP 5 small | 5 | 153 | 50,818 | 50,971 | 3.46 ms | 2.45 ms |
| R-SDP(G) 5 fast | 5 | 106 | 48,102 | 48,208 | 749.6 µs | 480.5 µs |
| R-SDP(G) 5 balanced | 5 | 106 | 40,100 | 40,206 | 828.1 µs | 589.2 µs |
| R-SDP(G) 5 small | 5 | 106 | 36,454 | 36,560 | 1.44 ms | 1.08 ms |
Wall-clock times vary between runs and machines (CPU frequency scaling, other tenants on cloud VMs); cycle counts are the steadier basis for comparison.
Compare versions
Parameter sets are matched by name.
| Parameter set | Level | Public key (B) | Change | Signature (B) | Change | Security flag (today's assessment) |
|---|---|---|---|---|---|---|
| R-SDP 1 fast | 1 | 77 to 77 | same | 18,432 to 18,432 | same | — |
| R-SDP 1 balanced | 1 | 77 to 77 | same | 13,152 to 13,152 | same | — |
| R-SDP 1 small | 1 | 77 to 77 | same | 12,432 to 12,432 | same | — |
| R-SDP(G) 1 fast | 1 | 54 to 54 | same | 11,980 to 11,980 | same | — |
| R-SDP(G) 1 balanced | 1 | 54 to 54 | same | 9,120 to 9,120 | same | — |
| R-SDP(G) 1 small | 1 | 54 to 54 | same | 8,960 to 8,960 | same | — |
| R-SDP 3 fast | 3 | 115 to 115 | same | 41,406 to 41,406 | same | — |
| R-SDP 3 balanced | 3 | 115 to 115 | same | 29,853 to 29,853 | same | — |
| R-SDP 3 small | 3 | 115 to 115 | same | 28,391 to 28,391 | same | — |
| R-SDP(G) 3 fast | 3 | 83 to 83 | same | 26,772 to 26,772 | same | — |
| R-SDP(G) 3 balanced | 3 | 83 to 83 | same | 22,464 to 22,464 | same | — |
| R-SDP(G) 3 small | 3 | 83 to 83 | same | 20,452 to 20,452 | same | — |
| R-SDP 5 fast | 5 | 153 to 153 | same | 74,590 to 74,590 | same | — |
| R-SDP 5 balanced | 5 | 153 to 153 | same | 53,527 to 53,527 | same | — |
| R-SDP 5 small | 5 | 153 to 153 | same | 50,818 to 50,818 | same | — |
| R-SDP(G) 5 fast | 5 | 106 to 106 | same | 48,102 to 48,102 | same | — |
| R-SDP(G) 5 balanced | 5 | 106 to 106 | same | 40,100 to 40,100 | same | — |
| R-SDP(G) 5 small | 5 | 106 to 106 | same | 36,454 to 36,454 | same | — |
▼ smaller or faster, ▲ larger or slower. Sizes in bytes. Flags are today's assessment of each version's parameter sets; the history below shows when each attack was published.
History
- added to site Update
Updated 7 schemes to their latest published specifications. PERK redesigned parameter sets (v2.2.0). MQOM adds gf16 variants (v2.1). RYDE and Mirath corrected signature sizes and added faster variants. CROSS, SQIsign, and MAYO updated with revised benchmarks.
- New version
v2.2
- New version
v2
- New version
Round 1