Polar-KEM
Lattices · Polar-LIP · niccs.org.cn(opens in a new tab)
- Programmes
- NGCC R1
- Status
- NGCC round 1
- Security flags
- Broken (all sets) · Implementation findings (all sets)
Third-party findings: full report on ngcc.dev(opens in a new tab).
Parameter sets
| Parameter set | Level | pk (B) | ct (B) | pk+ct (B) | Keygen | Encaps | Decaps |
|---|---|---|---|---|---|---|---|
| PolarKEM-128 BrokenImplementation findings | 128-bit | 1,024 | 768 | 1,792 | 46.8 µs | 141.6 µs | 173.1 µs |
| PolarKEM-256 BrokenImplementation findings | 256-bit | 2,048 | 1,280 | 3,328 | 90.7 µs | 176.2 µs | 239.9 µs |
| PolarKEM-512 BrokenImplementation findings | 512-bit | 4,096 | 2,304 | 6,400 | 178.1 µs | 344.9 µs | 473.2 µs |
Wall-clock times vary between runs and machines (CPU frequency scaling, other tenants on cloud VMs); cycle counts are the steadier basis for comparison.
Security flags
- Broken (all parameter sets): The specified basis exposes the secret transformation, so the key can be recovered from the public key in polynomial time (Xiao et al.).
- Implementation findings (all parameter sets): The submitted code includes functions that derive the shared secret from public data alone (Saarinen). Full findings report(opens in a new tab)
History
No events recorded for this scheme yet.