MAMBA-Frost
Lattices · LWE · niccs.org.cn(opens in a new tab)
- Programmes
- NGCC R1
- Status
- NGCC round 1
- Security flags
- Implementation findings (all sets)
Third-party findings: full report on ngcc.dev(opens in a new tab).
Parameter sets
| Parameter set | Level | pk (B) | ct (B) | pk+ct (B) | Keygen | Encaps | Decaps |
|---|---|---|---|---|---|---|---|
| MAMBA-Frost-128 Recommended Implementation findings | 128-bit | 5,152 | 5,192 | 10,344 | 366.9 µs | 513.1 µs | 605.0 µs |
| MAMBA-Frost-256 Recommended Implementation findings | 256-bit | 16,776 | 15,552 | 32,328 | 1.57 ms | 2.01 ms | 2.11 ms |
| MAMBA-Frost-384 Recommended Implementation findings | 384-bit | 25,096 | 37,736 | 62,832 | 2.75 ms | 4.57 ms | 4.97 ms |
| MAMBA-Frost-512 Recommended Implementation findings | 512-bit | 36,432 | 72,944 | 109,376 | 4.91 ms | 9.29 ms | 10.21 ms |
| MAMBA-Frost-CC-384 Implementation findings | 384-bit | 37,628 | 25,204 | 62,832 | 3.79 ms | 3.96 ms | 4.13 ms |
| MAMBA-Frost-CC-512 Implementation findings | 512-bit | 72,832 | 36,544 | 109,376 | 8.21 ms | 6.67 ms | 6.92 ms |
Wall-clock times vary between runs and machines (CPU frequency scaling, other tenants on cloud VMs); cycle counts are the steadier basis for comparison.
Security flags
- Implementation findings (all parameter sets): In the reference code an allocation failure during key generation still reports success, leaving keys whose shared secrets can be recovered from the public key (Yamin Liu). Full findings report(opens in a new tab)
History
- added to site Update
Where a specification lists alternative or additional parameter sets next to its main ones, the main sets are now marked, so the Recommended filter hides the alternatives: SNOVA, MAYO, QR-UOV, SQIsign and FAEST (FAEST-EM is the specification's alternative variant), and the NGCC KEMs DTRU (DTRU-Light and DTRU-Prime are the alternatives to the primary tricyclotomic sets) and MAMBA-Frost (the compact-ciphertext CC variants are additional to the default sets). The round-3 specifications of SNOVA (Table 6), MAYO (Table 2.2), QR-UOV (Appendix B) and SQIsign (Appendix P) also list alternative or additional parameter sets; these are now shown under All parameter sets, with sizes from the specifications. The six odd-characteristic SNOVA alternatives are marked broken by Beullens & Hess's vinegar-bias attack.