NTRE
NTRE Key Encapsulation Mechanism
Lattices · R-NTRU/R-LWE · niccs.org.cn(opens in a new tab)
- Programmes
- NGCC R1
- Status
- NGCC round 1
- Security flags
- Implementation findings (1 of 3 sets)
Third-party findings: full report on ngcc.dev(opens in a new tab).
Parameter sets
| Parameter set | Level | pk (B) | ct (B) | pk+ct (B) | Keygen | Encaps | Decaps |
|---|---|---|---|---|---|---|---|
| NTRE-128 | 128-bit | 972 | 972 | 1,944 | 26.0 µs | 26.5 µs | 22.9 µs |
| NTRE-256 | 256-bit | 1,944 | 1,944 | 3,888 | 38.5 µs | 40.4 µs | 32.4 µs |
| NTRE-512 Implementation findings | 512-bit | 3,456 | 3,456 | 6,912 | 63.4 µs | 82.8 µs | 69.0 µs |
Wall-clock times vary between runs and machines (CPU frequency scaling, other tenants on cloud VMs); cycle counts are the steadier basis for comparison.
Security flags
- Implementation findings (NTRE-512): The submitted code uses a 256-bit secret seed, so offline key search costs at most 2^256, below the 512-bit target (Saarinen). Full findings report(opens in a new tab)
History
No events recorded for this scheme yet.