NSS-HQC
Code-based · QCSD · niccs.org.cn(opens in a new tab)
- Programmes
- NGCC R1
- Status
- NGCC round 1
- Security flags
- Broken (3 of 4 sets)
Third-party findings: full report on ngcc.dev(opens in a new tab).
Parameter sets
| Parameter set | Level | pk (B) | ct (B) | pk+ct (B) | Keygen | Encaps | Decaps |
|---|---|---|---|---|---|---|---|
| HQC-128 | 128-bit | 3,713 | 5,185 | 8,898 | 8.97 ms | 16.31 ms | 30.36 ms |
| HQC-256 Broken | 256-bit | 6,844 | 9,084 | 15,928 | 26.62 ms | 47.99 ms | 82.81 ms |
| HQC-384 Broken | 384-bit | 15,371 | 18,571 | 33,942 | 89.70 ms | 161.92 ms | 264.07 ms |
| HQC-512 Broken | 512-bit | 27,302 | 31,462 | 58,764 | 211.89 ms | 387.48 ms | 615.97 ms |
Wall-clock times vary between runs and machines (CPU frequency scaling, other tenants on cloud VMs); cycle counts are the steadier basis for comparison.
Security flags
- Broken (HQC-256): Decoding the ephemeral syndrome costs about 2^227, below the 256-bit target (Saarinen).
- Broken (HQC-384, HQC-512): Ephemeral syndrome decoding (Saarinen), and a 256-bit decryption sub-seed both give attacks below this set's target (Xiong and Wang).
History
No events recorded for this scheme yet.