FLIT
Lattices · NTRU · niccs.org.cn(opens in a new tab)
- Programmes
- NGCC R1
- Status
- NGCC round 1
- Security flags
- Implementation findings (all sets)
Third-party findings: full report on ngcc.dev(opens in a new tab).
Parameter sets
| Parameter set | Level | pk (B) | ct (B) | pk+ct (B) | Keygen | Encaps | Decaps |
|---|---|---|---|---|---|---|---|
| FLIT128 Implementation findings | 128-bit | 615 | 512 | 1,127 | 18.7 µs | 22.2 µs | 18.3 µs |
| FLIT256 Implementation findings | 256-bit | 1,229 | 1,024 | 2,253 | 42.6 µs | 38.3 µs | 33.3 µs |
| FLIT512 Implementation findings | 512-bit | 3,072 | 2,304 | 5,376 | 190.9 µs | 157.6 µs | 134.1 µs |
Wall-clock times vary between runs and machines (CPU frequency scaling, other tenants on cloud VMs); cycle counts are the steadier basis for comparison.
Security flags
- Implementation findings (all parameter sets): The optimised equality check accepts invalid ciphertexts (Xiong and Wang), and the additional FIPS202 builds never seed their generator, so their keys are predictable (Saarinen). Full findings report(opens in a new tab)
History
No events recorded for this scheme yet.