NTRU
Lattices · NTRU · ntru.org(opens in a new tab)
- Programmes
- NIST R3
- Status
- Round-3 finalist
- Security flags
- None on current sets
Parameter sets
| Parameter set | Level | pk (B) | ct (B) | pk+ct (B) | Keygen | Encaps | Decaps |
|---|---|---|---|---|---|---|---|
| ntruhps2048509 Note | 1 | 699 | 699 | 1,398 | 34.5 µs | 10.9 µs | 8.3 µs |
| ntruhps2048677 Note | 3 | 930 | 930 | 1,860 | 53.0 µs | 14.2 µs | 11.7 µs |
| ntruhps4096821 Note | 5 | 1,230 | 1,230 | 2,460 | 74.4 µs | 16.1 µs | 15.3 µs |
| ntruhrss701 Note | 1 | 1,138 | 1,138 | 2,276 | 50.5 µs | 10.0 µs | 12.8 µs |
Wall-clock times vary between runs and machines (CPU frequency scaling, other tenants on cloud VMs); cycle counts are the steadier basis for comparison.
Security flags
- Note (all parameter sets): Merged NTRU-HPS and NTRU-HRSS submission. A NIST round-3 finalist, not selected for standardisation. AVX2 reference from github.com/jschanck/ntru; public key and ciphertext are the same size.
History
No events recorded for this scheme yet.