SABER
Lattices · MLWR · github.com(opens in a new tab)
- Programmes
- NIST R3
- Status
- Round-3 finalist
- Security flags
- None on current sets
Parameter sets
| Parameter set | Level | pk (B) | ct (B) | pk+ct (B) | Keygen | Encaps | Decaps |
|---|---|---|---|---|---|---|---|
| LightSaber Note | 1 | 672 | 736 | 1,408 | 13.8 µs | 13.6 µs | 11.8 µs |
| Saber Note | 3 | 992 | 1,088 | 2,080 | 19.8 µs | 20.4 µs | 18.4 µs |
| FireSaber Note | 5 | 1,312 | 1,472 | 2,784 | 27.4 µs | 28.7 µs | 26.9 µs |
Wall-clock times vary between runs and machines (CPU frequency scaling, other tenants on cloud VMs); cycle counts are the steadier basis for comparison.
Security flags
- Note (all parameter sets): NIST round-3 finalist, not selected for standardisation (ML-KEM was chosen instead). AVX2 reference implementation from github.com/KULeuven-COSIC/SABER.
History
- Update
Added SABER (NIST round-3 finalist, not selected) to the KEMs comparison page, with benchmarked keygen/encaps/decaps timings for LightSaber, Saber, and FireSaber.