Galas
Galas Signature Scheme
Symmetric · Gala OWF · niccs.org.cn(opens in a new tab)
- Programmes
- NGCC R1
- Latest version
- Round 1 ·
- Security flags
- Implementation findings (all sets)
Third-party findings: full report on ngcc.dev(opens in a new tab).
Parameter sets
Round 1 · 20 Sep 2026
| Parameter set | Level | pk (B) | sig (B) | pk+sig (B) | Sign | Verify |
|---|---|---|---|---|---|---|
| Galas-160S Implementation findings | 128-bit | 40 | 4,812 | 4,852 | 574.00 ms | 408.55 ms |
| Galas-160F Implementation findings | 128-bit | 40 | 5,964 | 6,004 | 441.12 ms | 285.33 ms |
| Galas-256S Implementation findings | 256-bit | 64 | 12,114 | 12,178 | 2.93 s | 2.27 s |
| Galas-256F Implementation findings | 256-bit | 64 | 15,950 | 16,014 | 1.80 s | 1.15 s |
| Galas-384S Implementation findings | 384-bit | 96 | 27,784 | 27,880 | 8.92 s | 6.49 s |
| Galas-384F Implementation findings | 384-bit | 96 | 33,384 | 33,480 | 6.60 s | 4.17 s |
| Galas-512S Implementation findings | 512-bit | 128 | 49,516 | 49,644 | 21.11 s | 14.69 s |
| Galas-512F Implementation findings | 512-bit | 128 | 59,416 | 59,544 | 16.59 s | 10.19 s |
Wall-clock times vary between runs and machines (CPU frequency scaling, other tenants on cloud VMs); cycle counts are the steadier basis for comparison.
Security flags
- Implementation findings (all parameter sets): The submitted signing code seeds its generator with a fixed value, so anyone can regenerate a victim's secret key (Saarinen). A 32-bit length truncation also allows forgeries on long messages (pq-CUC). Full findings report(opens in a new tab)
Only one version of Galas is recorded, so there is nothing to compare yet.
History
- New version
Round 1