PQ Signatures zoo (widescreen)

Post-Quantum signatures zoo

NIST Round 2

Schemes are still getting updated

As part of round 2, schemes will be updating their parameters and submission documents. These have not yet been included in our data.

A list of post-quantum algorithms and their characteristics.

In the below, we give an overview of the post-quantum algorithms that have been submitted to the NIST post-quantum signatures on-ramp and are still part of the second round.

We have copied the properties of the schemes out of the individual scheme submission documents, so be aware of potential errors.

We welcome any and all suggestions and improvements on this page's GitHub repository.

Parameters

Performance characteristics have been directly taken from the submission documents!

Note that many submissions do not have optimized implementations, and that the measurements were collected under an enormous variation of measurement setups. Some implementation are also not timing-invariant with regards to secrets ("constant-time"), and fixing this may also come with performance penalties. Take the performance metrics with a significant grain of salt.

Some metrics have been extrapolated from reported times in milliseconds. These have been converted assuming a 2.5 GHz cpu; independent of the benchmarking platform reported. Converted metrics are marked as such.

Click on the table headers to sort. Filters can be configured below the table.
Scheme Category Parameterset NIST level Pk bytes Sig bytes pk+sig Sign (cycles) Verify (cycles)
Filter Security Levels
Filter categories
Filter on sizes
Public key size
Signature size
Pk+Sig size
Filter on runtime
Signing cycles
Verification cycles
Filter schemes
Select none all