SYDO
MPCitH · Regular Synd. Dec. · niccs.org.cn(opens in a new tab)
- Programmes
- NGCC R1
- Latest version
- Round 1 ·
- Security flags
- None on current sets
Third-party findings: full report on ngcc.dev(opens in a new tab).
Parameter sets
Round 1 · 20 Sep 2026
| Parameter set | Level | pk (B) | sig (B) | pk+sig (B) | Sign | Verify |
|---|---|---|---|---|---|---|
| sydo_160s | 128-bit | 80 | 5,428 | 5,508 | 21.39 ms | 18.98 ms |
| sydo_160f | 128-bit | 80 | 6,724 | 6,804 | 4.14 ms | 3.97 ms |
| sydo_256s | 256-bit | 128 | 14,444 | 14,572 | 47.08 ms | 46.59 ms |
| sydo_256f | 256-bit | 128 | 17,604 | 17,732 | 9.64 ms | 9.36 ms |
| sydo_512s | 512-bit | 246 | 56,672 | 56,918 | 360.77 ms | 336.80 ms |
| sydo_512f | 512-bit | 246 | 67,716 | 67,962 | 69.12 ms | 68.53 ms |
Wall-clock times vary between runs and machines (CPU frequency scaling, other tenants on cloud VMs); cycle counts are the steadier basis for comparison.
Only one version of SYDO is recorded, so there is nothing to compare yet.
History
- added to site Update
Lynxer, ReSolveD-ɑ and SYDO are now built from their submitted optimised x86 implementations (C++ with AVX2) instead of the reference code. The optimised builds reproduce the submitted test vectors and give the same key and signature sizes. Their earlier timings came from the reference code and are removed until our next benchmark run. Galas stays on its reference code, because its optimised code has no implementation of the NGCC signature interface.
- New version
Round 1