Shuttle
Lattices · MLWE/MSIS · niccs.org.cn(opens in a new tab)
- Programmes
- NGCC R1
- Latest version
- Round 1 ·
- Security flags
- Broken (all sets)
Third-party findings: full report on ngcc.dev(opens in a new tab).
Parameter sets
Round 1 · 20 Sep 2026
| Parameter set | Level | pk (B) | sig (B) | pk+sig (B) | Sign | Verify |
|---|---|---|---|---|---|---|
| SHUTTLE-128 Broken | 128-bit | 1,264 | 1,183 | 2,447 | 193.5 µs | 77.7 µs |
| SHUTTLE-256 Broken | 256-bit | 1,952 | 2,417 | 4,369 | 303.0 µs | 114.7 µs |
| SHUTTLE-512 Broken | 512-bit | 3,648 | 5,001 | 8,649 | 645.4 µs | 197.9 µs |
Wall-clock times vary between runs and machines (CPU frequency scaling, other tenants on cloud VMs); cycle counts are the steadier basis for comparison.
Security flags
- Broken (all parameter sets): A reversed transition in the signing procedure leaks an equivalent signing key after a few hundred thousand signatures, giving forgeries at every level (Feussner).
Only one version of Shuttle is recorded, so there is nothing to compare yet.
History
- New version
Round 1