CTL Algorithm
Lattices · NTRU/RLWR · niccs.org.cn(opens in a new tab)
- Programmes
- NGCC R1
- Status
- NGCC round 1
- Security flags
- Broken (1 of 3 sets) · Implementation findings (1 of 3 sets)
Third-party findings: full report on ngcc.dev(opens in a new tab).
Parameter sets
| Parameter set | Level | pk (B) | ct (B) | pk+ct (B) | Keygen | Encaps | Decaps |
|---|---|---|---|---|---|---|---|
| CTL-257-512 | 128-bit | 521 | 473 | 994 | 3.61 ms | 11.6 µs | 55.0 µs |
| CTL-769-1024 | 256-bit | 1,230 | 1,006 | 2,236 | 15.56 ms | 16.9 µs | 101.6 µs |
| CTL-3329-2048 BrokenImplementation findings | 512-bit | 3,009 | 2,353 | 5,362 | 490.98 ms | 53.7 µs | 14.31 ms |
Wall-clock times vary between runs and machines (CPU frequency scaling, other tenants on cloud VMs); cycle counts are the steadier basis for comparison.
Security flags
- Broken (CTL-3329-2048): The specified private key is a 32-byte seed, so at most 2^256 public keys exist and key search falls below the 512-bit target (Saarinen).
- Implementation findings (CTL-3329-2048): The submitted code also returns a 384-bit shared secret instead of the specified 512 bits (Saarinen). Full findings report(opens in a new tab)
History
No events recorded for this scheme yet.