SPHINCS-alpha

Symmetric · Hash-based · csrc.nist.gov(opens in a new tab)

Programmes
On-ramp R1
Latest version
Round 1 ·
Security flags
None on current sets

Parameter sets

Round 1 · 31 May 2023

Parameter sets of SPHINCS-alpha
Parameter setLevelpk (B)sig (B)pk+sig (B)SignVerify
256s SHAKE 56427,23227,296798.70 ms(Estimated from 2.00G cycles @ 2.5 GHz)2.90 ms(Estimated from 7.3M cycles @ 2.5 GHz)
256f SHAKE 56449,31249,376632.95 ms(Estimated from 1.58G cycles @ 2.5 GHz)4.67 ms(Estimated from 11.7M cycles @ 2.5 GHz)
192f SHAKE 34834,89634,94436.83 ms(Estimated from 92.1M cycles @ 2.5 GHz)1.21 ms(Estimated from 3.0M cycles @ 2.5 GHz)
256s SHA2 56427,23227,296305.74 ms(Estimated from 764.4M cycles @ 2.5 GHz)2.40 ms(Estimated from 6.0M cycles @ 2.5 GHz)
256f SHA2 56449,31249,37636.53 ms(Estimated from 91.3M cycles @ 2.5 GHz)1.27 ms(Estimated from 3.2M cycles @ 2.5 GHz)
192f SHA2 34834,89634,94418.09 ms(Estimated from 45.2M cycles @ 2.5 GHz)697.6 µs(Estimated from 1.7M cycles @ 2.5 GHz)
192s SHAKE 34814,56814,616798.70 ms(Estimated from 2.00G cycles @ 2.5 GHz)2.90 ms(Estimated from 7.3M cycles @ 2.5 GHz)
128f SHAKE 13216,72016,75222.83 ms(Estimated from 57.1M cycles @ 2.5 GHz)1.42 ms(Estimated from 3.6M cycles @ 2.5 GHz)
192s SHA2 34814,56814,616395.56 ms(Estimated from 988.9M cycles @ 2.5 GHz)1.54 ms(Estimated from 3.8M cycles @ 2.5 GHz)
128s SHAKE 1326,8806,912455.90 ms(Estimated from 1.14G cycles @ 2.5 GHz)1.96 ms(Estimated from 4.9M cycles @ 2.5 GHz)
128f SHA2 13216,72016,75210.65 ms(Estimated from 26.6M cycles @ 2.5 GHz)811.3 µs(Estimated from 2.0M cycles @ 2.5 GHz)
128s SHA2 1326,8806,912214.81 ms(Estimated from 537.0M cycles @ 2.5 GHz)1.08 ms(Estimated from 2.7M cycles @ 2.5 GHz)

Wall-clock times vary between runs and machines (CPU frequency scaling, other tenants on cloud VMs); cycle counts are the steadier basis for comparison.

Only one version of SPHINCS-alpha is recorded, so there is nothing to compare yet.

History

  1. New version

    Round 1

Full timeline →