EagleSign

Lattices · MNTRU/MLWE · csrc.nist.gov(opens in a new tab)

Programmes
On-ramp R1
Latest version
Round 1 ·
Security flags
Broken (all sets)

Parameter sets

Round 1 · 1 Jun 2023

Parameter sets of EagleSign
Parameter setLevelpk (B)sig (B)pk+sig (B)SignVerify
Recomm I Broken31,8242,3364,160514.6 µs(Estimated from 1.3M cycles @ 2.5 GHz)900.4 µs(Estimated from 2.3M cycles @ 2.5 GHz)
High I Broken53,6163,4887,104366.9 µs(Estimated from 917K cycles @ 2.5 GHz)601.2 µs(Estimated from 1.5M cycles @ 2.5 GHz)
Recomm II Broken33,6162,4646,080—Not yet benchmarked—Not yet benchmarked
Medium Broken21,8242,1443,968—Not yet benchmarked—Not yet benchmarked

Wall-clock times vary between runs and machines (CPU frequency scaling, other tenants on cloud VMs); cycle counts are the steadier basis for comparison.

Security flags

  • Broken (all parameter sets): signature leaks secret key

Only one version of EagleSign is recorded, so there is nothing to compare yet.

History

  1. New version

    Round 1

Full timeline →