HuFu

Lattices · LWE/SIS · 123.56.244.4(opens in a new tab)

Programmes
On-ramp R1
Latest version
Round 1 ·
Security flags
None on current sets

Parameter sets

Round 1 · 1 Jun 2023

Parameter sets of HuFu
Parameter setLevelpk (B)sig (B)pk+sig (B)SignVerify
NIST-5 SHAKE Note53,573,0004,5203,577,5208.74 ms(Estimated from 21.8M cycles @ 2.5 GHz)5.48 ms(Estimated from 13.7M cycles @ 2.5 GHz)
NIST-3 SHAKE Note32,177,0003,5402,180,5405.21 ms(Estimated from 13.0M cycles @ 2.5 GHz)3.40 ms(Estimated from 8.5M cycles @ 2.5 GHz)
NIST-5 AES Note53,573,0004,5203,577,5204.84 ms(Estimated from 12.1M cycles @ 2.5 GHz)1.52 ms(Estimated from 3.8M cycles @ 2.5 GHz)
NIST-3 AES Note32,177,0003,5402,180,5402.80 ms(Estimated from 7.0M cycles @ 2.5 GHz)943.2 µs(Estimated from 2.4M cycles @ 2.5 GHz)
NIST-1 SHAKE Note11,059,0002,4551,061,4552.54 ms(Estimated from 6.3M cycles @ 2.5 GHz)1.23 ms(Estimated from 3.1M cycles @ 2.5 GHz)
NIST-1 AES Note11,059,0002,4551,061,4551.55 ms(Estimated from 3.9M cycles @ 2.5 GHz)320.4 µs(Estimated from 801K cycles @ 2.5 GHz)

Wall-clock times vary between runs and machines (CPU frequency scaling, other tenants on cloud VMs); cycle counts are the steadier basis for comparison.

Security flags

  • Note (all parameter sets): Original version had bit-flipping signature forgery

Only one version of HuFu is recorded, so there is nothing to compare yet.

History

  1. New version

    Round 1

Full timeline →