LESS
Code-based · Linear Equiv. · less-project.com(opens in a new tab)
- Programmes
- On-ramp R2
- Latest version
- v2.1 ·
- Security flags
- None on current sets
Parameter sets
v2.1 · 13 Jul 2026
| Parameter set | Level | pk (B) | sig (B) | pk+sig (B) | Sign | Verify |
|---|---|---|---|---|---|---|
| 252-192 | 1 | 13,940 | 2,609 | 16,549 | 40.10 ms | 33.88 ms |
| 252-68 | 1 | 41,788 | 1,825 | 43,613 | 14.63 ms | 13.40 ms |
| 252-45 | 1 | 97,484 | 1,329 | 98,813 | 9.80 ms | 9.24 ms |
| 400-220 | 3 | 35,074 | 6,353 | 41,427 | 126.89 ms | 114.18 ms |
| 400-102 | 3 | 105,174 | 4,131 | 109,305 | 59.54 ms | 55.93 ms |
| 548-345 | 5 | 65,793 | 10,712 | 76,505 | 445.69 ms | 412.37 ms |
| 548-137 | 5 | 197,315 | 7,436 | 204,751 | 178.97 ms | 175.19 ms |
Wall-clock times vary between runs and machines (CPU frequency scaling, other tenants on cloud VMs); cycle counts are the steadier basis for comparison.
Compare versions
Parameter sets are matched by name.
| Parameter set | Level | Public key (B) | Change | Signature (B) | Change | Security flag (today's assessment) |
|---|---|---|---|---|---|---|
| 252-192 | 1 | 13,940 to 13,940 | same | 2,609 to 2,609 | same | — |
| 252-68 | 1 | 41,788 to 41,788 | same | 1,825 to 1,825 | same | — |
| 252-45 | 1 | 97,484 to 97,484 | same | 1,329 to 1,329 | same | — |
| 400-220 | 3 | 35,074 to 35,074 | same | 6,353 to 6,353 | same | — |
| 400-102 | 3 | 105,174 to 105,174 | same | 4,131 to 4,131 | same | — |
| 548-345 | 5 | 65,793 to 65,793 | same | 10,712 to 10,712 | same | — |
| 548-137 | 5 | 197,315 to 197,315 | same | 7,436 to 7,436 | same | — |
▼ smaller or faster, ▲ larger or slower. Sizes in bytes. Flags are today's assessment of each version's parameter sets; the history below shows when each attack was published.
History
- added to site Update
LESS: the signature sizes of LESS-252-192, LESS-400-220 and LESS-548-345 are now the maximum sizes of the submitted code (2,609, 6,353 and 10,712 bytes) instead of the specification's Table 4 (2,625, 6,329 and 10,680 bytes).
- added to site New version
v2.1
LESS v2.1 (code release v2.1.1) implements the optimised canonical forms of Beckwith, Esser, Persichetti, Santini and Zweydinger (ePrint 2025/1424, TCHES 2025). The parameter sets and sizes are those of the round-2 specification v2.0; signatures differ, so the known-answer tests changed. There is no new specification document. We build its AVX2 implementation and keep our timings of the round-2 code for v2.0. On AWS c8i.4xlarge, v2.1 signs 22% to 35% faster and verifies 23% to 42% faster than v2.0 (LESS-252-192: signing 61.6 to 40.1 ms, verification 58.4 to 33.9 ms).
- New version
v2.0
- New version
Round 1