Sigurd
MPCitH · Regular Synd. Dec. · niccs.org.cn(opens in a new tab)
- Programmes
- NGCC R1
- Latest version
- Round 1 ·
- Security flags
- Implementation findings (all sets)
Third-party findings: full report on ngcc.dev(opens in a new tab).
Parameter sets
Round 1 · 20 Sep 2026
| Parameter set | Level | pk (B) | sig (B) | pk+sig (B) | Sign | Verify |
|---|---|---|---|---|---|---|
| Sigurd128 Implementation findings | 128-bit | 112 | 62,868 | 62,980 | 9.77 ms | 3.96 ms |
| Sigurd256 Implementation findings | 256-bit | 212 | 137,412 | 137,624 | 89.53 ms | 32.16 ms |
| Sigurd512 Implementation findings | 512-bit | 435 | 494,532 | 494,967 | 824.97 ms | 294.29 ms |
Wall-clock times vary between runs and machines (CPU frequency scaling, other tenants on cloud VMs); cycle counts are the steadier basis for comparison.
Security flags
- Implementation findings (all parameter sets): The submitted code leaks the signing witness through its encoding after a handful of signatures (Guoxiao Liu; Feussner; Saarinen), and through occasional zero challenges, enabling forgery at every level (Saarinen). Full findings report(opens in a new tab)
Only one version of Sigurd is recorded, so there is nothing to compare yet.
History
- New version
Round 1