Qing Luan
MPCitH · Restricted Synd. Dec. · niccs.org.cn(opens in a new tab)
- Programmes
- NGCC R1
- Latest version
- Round 1 ·
- Security flags
- Broken (2 of 4 sets)
Third-party findings: full report on ngcc.dev(opens in a new tab).
Parameter sets
Round 1 · 20 Sep 2026
| Parameter set | Level | pk (B) | sig (B) | pk+sig (B) | Sign | Verify |
|---|---|---|---|---|---|---|
| QingLuan-128 | 128-bit | 77 | 18,720 | 18,797 | 4.11 ms | 1.85 ms |
| QingLuan-256 | 256-bit | 153 | 74,248 | 74,401 | 26.65 ms | 12.06 ms |
| QingLuan-384 Broken | 384-bit | 227 | 164,940 | 165,167 | 66.33 ms | 30.88 ms |
| QingLuan-512 Broken | 512-bit | 302 | 292,816 | 293,118 | 160.79 ms | 74.19 ms |
Wall-clock times vary between runs and machines (CPU frequency scaling, other tenants on cloud VMs); cycle counts are the steadier basis for comparison.
Security flags
- Broken (QingLuan-384, QingLuan-512): Nested SM3 hashing (Xiong and Wang), and the specified key-generation state each limit security to about 2^256 work, below this set's target (Feussner).
Only one version of Qing Luan is recorded, so there is nothing to compare yet.
History
- New version
Round 1