ReSolveD-ɑ

MPCitH · Regular Synd. Dec. · niccs.org.cn(opens in a new tab)

Programmes: NGCC R1
Latest version: Round 1 · 20 Sep 2026
Security flags: Broken (6 of 8 sets)

Third-party findings: full report on ngcc.dev(opens in a new tab).

Parameter sets

Round 1 · 20 Sep 2026

Parameter sets of ReSolveD-ɑ
Parameter set	Level	pk (B)	sig (B)	pk+sig (B)	Sign	Verify
ReSolveD-alpha-160s	128-bit	121	5,307	5,428	21.96 ms	17.18 ms
ReSolveD-alpha-160f	128-bit	121	6,851	6,972	4.42 ms	2.33 ms
ReSolveD-alpha-256s Broken	256-bit	194	13,973	14,167	59.90 ms	44.39 ms
ReSolveD-alpha-256f Broken	256-bit	194	17,932	18,126	10.00 ms	5.09 ms
ReSolveD-alpha-384s Broken	384-bit	288	31,575	31,863	237.94 ms	143.44 ms
ReSolveD-alpha-384f Broken	384-bit	288	40,469	40,757	31.29 ms	18.07 ms
ReSolveD-alpha-512s Broken	512-bit	385	56,239	56,624	7.52 s	6.84 s
ReSolveD-alpha-512f Broken	512-bit	385	72,611	72,996	765.93 ms	676.14 ms

Wall-clock times vary between runs and machines (CPU frequency scaling, other tenants on cloud VMs); cycle counts are the steadier basis for comparison.

Security flags

Broken (ReSolveD-alpha-256s, ReSolveD-alpha-256f, ReSolveD-alpha-384s, ReSolveD-alpha-384f, ReSolveD-alpha-512s, ReSolveD-alpha-512f): Reused tweaks let an attacker recover the signing key from a single signature with work below this set's claimed level (Xiong and Wang).

Only one version of ReSolveD-ɑ is recorded, so there is nothing to compare yet.

History

14 Oct 2026 added to site 10 Nov 2026 Update

Lynxer, ReSolveD-ɑ and SYDO are now built from their submitted optimised x86 implementations (C++ with AVX2) instead of the reference code. The optimised builds reproduce the submitted test vectors and give the same key and signature sizes. Their earlier timings came from the reference code and are removed until our next benchmark run. Galas stays on its reference code, because its optimised code has no implementation of the NGCC signature interface.
20 Sep 2026 New version

Round 1

Full timeline →