Lore
Lattices · MLWR · niccs.org.cn(opens in a new tab)
- Programmes
- NGCC R1
- Status
- NGCC round 1
- Security flags
- Broken (2 of 4 sets)
Third-party findings: full report on ngcc.dev(opens in a new tab).
Parameter sets
| Parameter set | Level | pk (B) | ct (B) | pk+ct (B) | Keygen | Encaps | Decaps |
|---|---|---|---|---|---|---|---|
| Lore-L1 | 128-bit | 610 | 706 | 1,316 | 19.6 µs | 33.3 µs | 43.1 µs |
| Lore-L2 | 256-bit | 1,186 | 1,282 | 2,468 | 42.7 µs | 64.6 µs | 104.6 µs |
| Lore-L3 Broken | 384-bit | 1,954 | 2,114 | 4,068 | 84.9 µs | 118.8 µs | 154.1 µs |
| Lore-L4 Broken | 512-bit | 2,914 | 3,170 | 6,084 | 145.8 µs | 202.9 µs | 280.2 µs |
Wall-clock times vary between runs and machines (CPU frequency scaling, other tenants on cloud VMs); cycle counts are the steadier basis for comparison.
Security flags
- Broken (Lore-L3, Lore-L4): This set outputs 256-bit shared secrets from 256-bit key-generation seeds, short of its target (Saarinen).
History
No events recorded for this scheme yet.