OAEP-NTRU
Lattices · NTRU/RLWE · niccs.org.cn(opens in a new tab)
- Programmes
- NGCC R1
- Status
- NGCC round 1
- Security flags
- Implementation findings (all sets)
Third-party findings: full report on ngcc.dev(opens in a new tab).
Parameter sets
| Parameter set | Level | pk (B) | ct (B) | pk+ct (B) | Keygen | Encaps | Decaps |
|---|---|---|---|---|---|---|---|
| OAEP-NTRU-648 Implementation findings | 128-bit | 1,053 | 1,085 | 2,138 | 20.1 µs | 25.1 µs | 15.8 µs |
| OAEP-NTRU-1296 Implementation findings | 256-bit | 2,430 | 2,494 | 4,924 | 53.8 µs | 82.1 µs | 46.7 µs |
| OAEP-NTRU-2592 Implementation findings | 512-bit | 4,860 | 4,988 | 9,848 | 121.8 µs | 236.4 µs | 165.3 µs |
Wall-clock times vary between runs and machines (CPU frequency scaling, other tenants on cloud VMs); cycle counts are the steadier basis for comparison.
Security flags
- Implementation findings (all parameter sets): Specification and code accept non-canonical ciphertext encodings, so a re-encoded challenge ciphertext decapsulates to the same key, defeating IND-CCA security (Meijers). Full findings report(opens in a new tab)
History
No events recorded for this scheme yet.