YuanYang.DSA
Lattices · NTRU/NTRU-SIS · niccs.org.cn(opens in a new tab)
- Programmes
- NGCC R1
- Latest version
- Round 1 ·
- Security flags
- Implementation findings (all sets)
Third-party findings: full report on ngcc.dev(opens in a new tab).
Parameter sets
Round 1 · 20 Sep 2026
| Parameter set | Level | pk (B) | sig (B) | pk+sig (B) | Sign | Verify |
|---|---|---|---|---|---|---|
| yuanyang-512 Implementation findings | 128-bit | 738 | 561 | 1,299 | 1.29 ms | 53.7 µs |
| yuanyang-1024 Implementation findings | 256-bit | 1,570 | 1,150 | 2,720 | 2.43 ms | 119.5 µs |
| yuanyang-2048 Implementation findings | 512-bit | 3,330 | 2,364 | 5,694 | 4.93 ms | 239.6 µs |
Wall-clock times vary between runs and machines (CPU frequency scaling, other tenants on cloud VMs); cycle counts are the steadier basis for comparison.
Security flags
- Implementation findings (all parameter sets): The submitted code samples with wrong parameters, leaking secret-basis information through signatures (Kwiatkowski; Xiong and Wang), and its unsalted 256-bit prehash allows signature transfer at the higher levels (Saarinen). Full findings report(opens in a new tab)
Only one version of YuanYang.DSA is recorded, so there is nothing to compare yet.
History
- New version
Round 1