QCTM
Quasi-Cyclic Twisted McEliece Key Encapsulation Mechanism
Code-based · QC twisted Goppa SD · niccs.org.cn(opens in a new tab)
- Programmes
- NGCC R1
- Status
- NGCC round 1
- Security flags
- Implementation findings (1 of 3 sets)
Third-party findings: full report on ngcc.dev(opens in a new tab).
Parameter sets
| Parameter set | Level | pk (B) | ct (B) | pk+ct (B) | Keygen | Encaps | Decaps |
|---|---|---|---|---|---|---|---|
| QCTM128 | 128-bit | 167,987 | 640 | 168,627 | 2.46 s | 563.1 µs | 1.98 ms |
| QCTM256 | 256-bit | 595,662 | 1,153 | 596,815 | 10.68 s | 538.0 µs | 4.56 ms |
| QCTM512 Implementation findings | 512-bit | 2,374,727 | 2,264 | 2,376,991 | 218.76 s | 4.61 ms | 15.99 ms |
Wall-clock times vary between runs and machines (CPU frequency scaling, other tenants on cloud VMs); cycle counts are the steadier basis for comparison.
Security flags
- Implementation findings (QCTM512): The bundled random generator limits key-generation and encapsulation randomness to 384 bits, below the 512-bit target (Saarinen). Full findings report(opens in a new tab)
History
No events recorded for this scheme yet.