Skip to content

poly: Deduplicate poly_decompose and poly_use_hint#1159

Draft
mkannwischer wants to merge 1 commit into
mainfrom
dedup-poly-kl
Draft

poly: Deduplicate poly_decompose and poly_use_hint#1159
mkannwischer wants to merge 1 commit into
mainfrom
dedup-poly-kl

Conversation

@mkannwischer

@mkannwischer mkannwischer commented Jun 7, 2026

Copy link
Copy Markdown
Contributor

poly_decompose and poly_use_hint depend only on GAMMA2, so ML-DSA-65 and -87 use identical code. Move them into the shared poly.c as mld_poly_decompose_{88,32} and mld_poly_use_hint_{88,32}, compiled once, with thin dispatchers in poly_kl.h, so a multilevel build shares a single copy instead of emitting one per parameter set. The native backend dispatch moves into the value-specialized variants, dropping the parameter-set checks.

The underlying rounding.h helpers mld_decompose and mld_use_hint are likewise split into value-specialized variants written against the parameter-set independent constants MLDSA_GAMMA2_{88,32}; the original dispatching forms are removed as they have no remaining users.

Split the CBMC proofs into per-variant proofs plus dispatcher proofs.

@mkannwischer
poly: Deduplicate poly_decompose and poly_use_hint
8bc366e 
poly_decompose and poly_use_hint depend only on GAMMA2, so ML-DSA-65
and -87 use identical code. Move them into the shared poly.c as
mld_poly_decompose_{88,32} and mld_poly_use_hint_{88,32}, compiled
once, with thin dispatchers in poly_kl.h, so a multilevel build shares
a single copy instead of emitting one per parameter set. The native
backend dispatch moves into the value-specialized variants, dropping
the parameter-set checks.

The underlying rounding.h helpers mld_decompose and mld_use_hint are
likewise split into value-specialized variants written against the
parameter-set independent constants MLDSA_GAMMA2_{88,32}; the original
dispatching forms are removed as they have no remaining users.

Split the CBMC proofs into per-variant proofs plus dispatcher proofs.

- Towards #536

Signed-off-by: Matthias J. Kannwischer <matthias@zerorisc.com>
@oqs-bot

oqs-bot commented Jun 7, 2026

Copy link
Copy Markdown
Contributor

CBMC Results (ML-DSA-87, REDUCE-RAM)

Full Results (210 proofs)
Proof Status Current Previous Change
**TOTAL** ✅ 1602s 1689s -5.2%
mld_invntt_layer ✅ 165s 166s -1%
rej_uniform_native ✅ 117s 125s -6%
poly_ntt_c ✅ 91s 90s +1%
poly_pointwise_montgomery_c ✅ 88s 137s -36%
polyvec_matrix_pointwise_montgomery_yvec ✅ 71s 158s -55%
mld_ct_memcmp ✅ 69s 66s +5%
mld_ntt_layer ✅ 42s 44s -5%
fqmul ✅ 40s 41s -2%
mld_attempt_signature_generation ✅ 32s 32s +0%
keccakf1600x4_permute_native ✅ 23s 25s -8%
mld_ntt_butterfly_block ✅ 22s 22s +0%
polyt0_unpack ✅ 18s 16s +12%
rej_uniform ✅ 18s 7s +157%
rej_uniform_c ✅ 18s 15s +20%
poly_chknorm_c ✅ 17s 20s -15%
polyvecl_chknorm ✅ 17s 10s +70%
sign_verify_internal ✅ 15s 21s -29%
mld_check_pct ✅ 14s 15s -7%
poly_uniform_eta_4x ✅ 13s 14s -7%
polyeta_unpack ✅ 13s 15s -13%
pointwise_acc_native_x86_64 ✅ 12s 9s +33%
poly_add ✅ 11s 11s +0%
polyveck_decompose ✅ 11s 20s -45%
keccak_absorb_once_x4 ✅ 9s 10s -10%
polyveck_invntt_tomont ✅ 9s 6s +50%
compute_pack_t0_t1 ✅ 8s 11s -27%
mld_keccakf1600_permute_c ✅ 8s 7s +14%
mld_sample_s1_s2 ✅ 8s 5s +60%
poly_invntt_tomont_c ✅ 8s 7s +14%
polyvec_matrix_pointwise_montgomery_row ✅ 8s 6s +33%
polyveck_reduce ✅ 8s 5s +60%
sign ✅ 8s 10s -20%
sign_pk_from_sk ✅ 8s 6s +33%
sign_verify_pre_hash_shake256 ✅ 8s 4s +100%
keccak_absorb ✅ 7s 7s +0%
mld_compute_pack_z ✅ 7s 6s +17%
polyveck_caddq ✅ 7s 8s -12%
polyvecl_ntt ✅ 7s 10s -30%
pointwise_acc_native_aarch64 ✅ 6s 5s +20%
poly_caddq_c ✅ 6s 6s +0%
poly_decompose_32 ✅ 6s - new
poly_invntt_tomont_native ✅ 6s 2s +200%
poly_use_hint ✅ 6s 2s +200%
keccak_squeezeblocks_x4 ✅ 5s 5s +0%
keccakf1600_permute ✅ 5s 4s +25%
mld_prepare_domain_separation_prefix ✅ 5s 4s +25%
mld_sample_s1_s2_serial ✅ 5s 6s -17%
poly_shiftl ✅ 5s 4s +25%
poly_uniform ✅ 5s 3s +67%
poly_use_hint_32 ✅ 5s - new
polyt0_pack ✅ 5s 4s +25%
polyveck_chknorm ✅ 5s 5s +0%
polyveck_unpack_eta ✅ 5s 5s +0%
polyw1_pack_32 ✅ 5s 1s +400%
polyz_unpack_19_native_aarch64 ✅ 5s 3s +67%
power2round ✅ 5s 1s +400%
rej_eta_c ✅ 5s 4s +25%
rej_uniform_native_aarch64 ✅ 5s 4s +25%
shake256 ✅ 5s 5s +0%
sign_signature ✅ 5s 4s +25%
sign_signature_internal ✅ 5s 5s +0%
sign_verify ✅ 5s 3s +67%
sign_verify_pre_hash_internal ✅ 5s 3s +67%
unpack_pk_t1 ✅ 5s 3s +67%
unpack_sk ✅ 5s 2s +150%
caddq ✅ 4s 3s +33%
intt_native_aarch64 ✅ 4s 3s +33%
intt_native_x86_64 ✅ 4s 2s +100%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid ✅ 4s 2s +100%
keccak_squeeze ✅ 4s 5s -20%
mld_keccakf1600x4_xor_bytes_c ✅ 4s 5s -20%
ntt_native_aarch64 ✅ 4s 2s +100%
pack_sig_z ✅ 4s 3s +33%
pointwise_native_aarch64 ✅ 4s 4s +0%
poly_chknorm ✅ 4s 4s +0%
poly_decompose_32_c ✅ 4s - new
poly_decompose_88_native_aarch64 ✅ 4s 4s +0%
poly_invntt_tomont ✅ 4s 4s +0%
poly_ntt ✅ 4s 3s +33%
poly_ntt_native ✅ 4s 3s +33%
poly_reduce ✅ 4s 3s +33%
poly_uniform_4x ✅ 4s 3s +33%
polyvec_matrix_expand ✅ 4s 2s +100%
polyveck_pack_eta ✅ 4s 1s +300%
polyvecl_pointwise_acc_montgomery ✅ 4s 4s +0%
polyvecl_uniform_gamma1 ✅ 4s 1s +300%
polyz_pack ✅ 4s 4s +0%
polyz_unpack ✅ 4s 2s +100%
polyz_unpack_c ✅ 4s 5s -20%
polyz_unpack_native ✅ 4s 3s +33%
rej_eta_native ✅ 4s 5s -20%
shake128_finalize ✅ 4s 2s +100%
sign_keypair_internal ✅ 4s 6s -33%
sign_open ✅ 4s 3s +33%
sign_signature_pre_hash_internal ✅ 4s 3s +33%
sk_s2hat_get_poly ✅ 4s 4s +0%
sk_t0hat_get_poly ✅ 4s 2s +100%
use_hint_88 ✅ 4s - new
decompose_32 ✅ 3s - new
keccak_f1600_x1_native_aarch64 ✅ 3s 1s +200%
keccak_f1600_x1_native_aarch64_v84a ✅ 3s 1s +200%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid ✅ 3s 1s +200%
keccak_init ✅ 3s 2s +50%
keccakf1600_xor_bytes (big endian) ✅ 3s 3s +0%
mld_ct_cmask_neg_i32 ✅ 3s 2s +50%
mld_ct_cmask_nonzero_u8 ✅ 3s 2s +50%
mld_ct_get_optblocker_u32 ✅ 3s 1s +200%
mld_ct_sel_int32 ✅ 3s 3s +0%
pack_sk_s1 ✅ 3s 6s -50%
pointwise_native_x86_64 ✅ 3s 3s +0%
poly_caddq ✅ 3s 4s -25%
poly_caddq_native ✅ 3s 2s +50%
poly_caddq_native_aarch64 ✅ 3s 5s -40%
poly_caddq_native_x86_64 ✅ 3s 3s +0%
poly_challenge ✅ 3s 4s -25%
poly_decompose ✅ 3s 2s +50%
poly_decompose_32_native_aarch64 ✅ 3s 4s -25%
poly_decompose_88 ✅ 3s - new
poly_decompose_88_c ✅ 3s - new
poly_decompose_native ✅ 3s 4s -25%
poly_permute_bitrev_to_custom_optional_native ✅ 3s 3s +0%
poly_pointwise_montgomery ✅ 3s 3s +0%
poly_pointwise_montgomery_native ✅ 3s 2s +50%
poly_power2round ✅ 3s 5s -40%
poly_sub ✅ 3s 2s +50%
poly_uniform_eta ✅ 3s 4s -25%
poly_use_hint_32_c ✅ 3s - new
poly_use_hint_88 ✅ 3s - new
poly_use_hint_88_c ✅ 3s - new
poly_use_hint_native_aarch64 ✅ 3s 3s +0%
polyeta_pack ✅ 3s 5s -40%
polyt1_pack ✅ 3s 2s +50%
polyt1_unpack ✅ 3s 2s +50%
polyvec_matrix_expand_serial ✅ 3s 1s +200%
polyvecl_pack_eta ✅ 3s 4s -25%
polyvecl_uniform_gamma1_serial ✅ 3s 2s +50%
polyw1_pack_88 ✅ 3s 3s +0%
reduce32 ✅ 3s 6s -50%
rej_eta ✅ 3s 3s +0%
shake128_squeeze ✅ 3s 3s +0%
shake128x4_absorb_once ✅ 3s 1s +200%
shake128x4_squeezeblocks ✅ 3s 3s +0%
shake256_finalize ✅ 3s 2s +50%
shake256_init ✅ 3s 1s +200%
shake256_squeeze ✅ 3s 2s +50%
shake256x4_squeezeblocks ✅ 3s 2s +50%
sig_unpack_hints ✅ 3s 3s +0%
sign_signature_extmu ✅ 3s 4s -25%
sign_signature_pre_hash_shake256 ✅ 3s 4s -25%
sign_verify_extmu ✅ 3s 2s +50%
sk_s1hat_get_poly ✅ 3s 2s +50%
unpack_sk_s1hat ✅ 3s 2s +50%
unpack_sk_s2hat ✅ 3s 4s -25%
unpack_sk_t0hat ✅ 3s 3s +0%
use_hint_32 ✅ 3s - new
yvec_get_poly ✅ 3s 3s +0%
yvec_init ✅ 3s 3s +0%
decompose_88 ✅ 2s - new
fqscale ✅ 2s 2s +0%
keccak_f1600_x4_native_aarch64_v84a ✅ 2s 1s +100%
keccak_f1600_x4_native_avx2 ✅ 2s 2s +0%
keccak_finalize ✅ 2s 1s +100%
keccakf1600_xor_bytes ✅ 2s 3s -33%
keccakf1600x4_extract_bytes ✅ 2s 4s -50%
keccakf1600x4_extract_bytes_native ✅ 2s 3s -33%
keccakf1600x4_permute ✅ 2s 3s -33%
keccakf1600x4_xor_bytes_native ✅ 2s 3s -33%
mld_ct_abs_i32 ✅ 2s 4s -50%
mld_ct_cmask_nonzero_u32 ✅ 2s 3s -33%
mld_ct_get_optblocker_i64 ✅ 2s 1s +100%
mld_h ✅ 2s 4s -50%
mld_keccakf1600_extract_bytes ✅ 2s 2s +0%
mld_keccakf1600x4_extract_bytes_c ✅ 2s 2s +0%
mld_polymat_expand_entry ✅ 2s 3s -33%
mld_value_barrier_u32 ✅ 2s 2s +0%
montgomery_reduce ✅ 2s 2s +0%
ntt_native_x86_64 ✅ 2s 3s -33%
nttunpack_native_x86_64 ✅ 2s 3s -33%
pack_sig_c ✅ 2s 3s -33%
pack_sig_h ✅ 2s 4s -50%
pack_sk_rho_key_tr_s2 ✅ 2s 4s -50%
poly_chknorm_native ✅ 2s 4s -50%
poly_chknorm_native_aarch64 ✅ 2s 2s +0%
poly_permute_bitrev_to_custom_optional ✅ 2s 2s +0%
poly_uniform_gamma1 ✅ 2s 4s -50%
poly_uniform_gamma1_4x ✅ 2s 3s -33%
poly_use_hint_native ✅ 2s 3s -33%
polyveck_ntt ✅ 2s 5s -60%
polyveck_pack_w1 ✅ 2s 4s -50%
polyvecl_pointwise_acc_montgomery_c ✅ 2s 4s -50%
polyvecl_pointwise_acc_montgomery_native ✅ 2s 4s -50%
polyvecl_unpack_eta ✅ 2s 4s -50%
polyvecl_unpack_z ✅ 2s 4s -50%
polyw1_pack ✅ 2s 4s -50%
polyz_unpack_17_native_aarch64 ✅ 2s 3s -33%
shake128_absorb ✅ 2s 3s -33%
shake128_init ✅ 2s 2s +0%
shake256_absorb ✅ 2s 2s +0%
shake256_release ✅ 2s 2s +0%
shake256x4_absorb_once ✅ 2s 1s +100%
sign_keypair ✅ 2s 6s -67%
sys_check_capability ✅ 2s 2s +0%
keccakf1600_extract_bytes (big endian) ✅ 1s 2s -50%
keccakf1600_permute_native ✅ 1s 4s -75%
keccakf1600x4_xor_bytes ✅ 1s 2s -50%
make_hint ✅ 1s 3s -67%
mld_ct_get_optblocker_u8 ✅ 1s 1s +0%
mld_value_barrier_i64 ✅ 1s 2s -50%
mld_value_barrier_u8 ✅ 1s 1s +0%
shake128_release ✅ 1s 3s -67%

@oqs-bot

oqs-bot commented Jun 7, 2026

Copy link
Copy Markdown
Contributor

CBMC Results (ML-DSA-44, REDUCE-RAM)

Full Results (210 proofs)
Proof Status Current Previous Change
**TOTAL** ✅ 1542s 1579s -2.3%
mld_invntt_layer ✅ 161s 151s +7%
rej_uniform_native ✅ 116s 123s -6%
poly_ntt_c ✅ 89s 90s -1%
poly_pointwise_montgomery_c ✅ 87s 124s -30%
polyvec_matrix_pointwise_montgomery_yvec ✅ 77s 115s -33%
mld_ct_memcmp ✅ 68s 68s +0%
mld_ntt_layer ✅ 45s 43s +5%
fqmul ✅ 42s 42s +0%
mld_attempt_signature_generation ✅ 25s 25s +0%
keccakf1600x4_permute_native ✅ 21s 21s +0%
mld_ntt_butterfly_block ✅ 21s 21s +0%
poly_chknorm_c ✅ 20s 18s +11%
rej_uniform_c ✅ 19s 15s +27%
polyt0_unpack ✅ 17s 14s +21%
rej_uniform ✅ 17s 8s +112%
sign_verify_internal ✅ 17s 23s -26%
mld_check_pct ✅ 14s 16s -12%
polyeta_unpack ✅ 13s 15s -13%
poly_add ✅ 11s 12s -8%
poly_uniform_eta_4x ✅ 11s 13s -15%
keccak_absorb_once_x4 ✅ 10s 9s +11%
polyz_unpack_c ✅ 10s 10s +0%
polyveck_decompose ✅ 9s 8s +12%
sign ✅ 9s 6s +50%
polyvec_matrix_pointwise_montgomery_row ✅ 8s 7s +14%
poly_caddq_c ✅ 7s 3s +133%
poly_shiftl ✅ 7s 4s +75%
keccak_absorb ✅ 6s 7s -14%
mld_compute_pack_z ✅ 6s 6s +0%
mld_keccakf1600_permute_c ✅ 6s 7s -14%
montgomery_reduce ✅ 6s 3s +100%
pack_sk_rho_key_tr_s2 ✅ 6s 2s +200%
poly_caddq_native_x86_64 ✅ 6s 4s +50%
poly_decompose_88_c ✅ 6s - new
poly_decompose_native ✅ 6s 6s +0%
poly_invntt_tomont_c ✅ 6s 7s -14%
poly_use_hint_native ✅ 6s 3s +100%
polyveck_caddq ✅ 6s 4s +50%
polyveck_chknorm ✅ 6s 10s -40%
sign_keypair_internal ✅ 6s 6s +0%
sign_signature_internal ✅ 6s 8s -25%
compute_pack_t0_t1 ✅ 5s 7s -29%
keccak_squeezeblocks_x4 ✅ 5s 4s +25%
keccakf1600x4_permute ✅ 5s 3s +67%
make_hint ✅ 5s 4s +25%
pointwise_acc_native_aarch64 ✅ 5s 4s +25%
pointwise_acc_native_x86_64 ✅ 5s 5s +0%
pointwise_native_aarch64 ✅ 5s 3s +67%
poly_challenge ✅ 5s 5s +0%
poly_decompose_32_c ✅ 5s - new
poly_pointwise_montgomery ✅ 5s 2s +150%
poly_power2round ✅ 5s 6s -17%
poly_reduce ✅ 5s 5s +0%
poly_use_hint_88_c ✅ 5s - new
rej_eta_c ✅ 5s 4s +25%
shake256 ✅ 5s 3s +67%
shake256_finalize ✅ 5s 3s +67%
sign_open ✅ 5s 4s +25%
sign_verify_extmu ✅ 5s 5s +0%
unpack_pk_t1 ✅ 5s 2s +150%
unpack_sk ✅ 5s 2s +150%
decompose_88 ✅ 4s - new
intt_native_aarch64 ✅ 4s 4s +0%
keccak_f1600_x1_native_aarch64 ✅ 4s 1s +300%
keccakf1600_permute ✅ 4s 3s +33%
mld_ct_cmask_nonzero_u32 ✅ 4s 2s +100%
mld_ct_sel_int32 ✅ 4s 2s +100%
mld_prepare_domain_separation_prefix ✅ 4s 3s +33%
mld_sample_s1_s2_serial ✅ 4s 4s +0%
nttunpack_native_x86_64 ✅ 4s 4s +0%
pack_sk_s1 ✅ 4s 2s +100%
poly_caddq_native ✅ 4s 4s +0%
poly_chknorm_native ✅ 4s 3s +33%
poly_decompose_88 ✅ 4s - new
poly_ntt ✅ 4s 2s +100%
poly_ntt_native ✅ 4s 1s +300%
poly_permute_bitrev_to_custom_optional ✅ 4s 4s +0%
poly_sub ✅ 4s 2s +100%
poly_uniform_4x ✅ 4s 2s +100%
poly_uniform_eta ✅ 4s 6s -33%
polyt0_pack ✅ 4s 2s +100%
polyt1_unpack ✅ 4s 3s +33%
polyveck_pack_eta ✅ 4s 3s +33%
polyveck_pack_w1 ✅ 4s 2s +100%
polyveck_reduce ✅ 4s 3s +33%
polyvecl_chknorm ✅ 4s 8s -50%
polyvecl_ntt ✅ 4s 4s +0%
polyw1_pack_32 ✅ 4s 5s -20%
polyw1_pack_88 ✅ 4s 2s +100%
polyz_pack ✅ 4s 3s +33%
polyz_unpack ✅ 4s 3s +33%
power2round ✅ 4s 3s +33%
reduce32 ✅ 4s 4s +0%
rej_uniform_native_aarch64 ✅ 4s 4s +0%
shake256x4_squeezeblocks ✅ 4s 2s +100%
sign_pk_from_sk ✅ 4s 5s -20%
sign_verify ✅ 4s 3s +33%
sk_s2hat_get_poly ✅ 4s 3s +33%
sys_check_capability ✅ 4s 2s +100%
keccak_f1600_x1_native_aarch64_v84a ✅ 3s 3s +0%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid ✅ 3s 3s +0%
keccak_squeeze ✅ 3s 5s -40%
keccakf1600_permute_native ✅ 3s 4s -25%
mld_ct_abs_i32 ✅ 3s 1s +200%
mld_ct_cmask_nonzero_u8 ✅ 3s 3s +0%
mld_keccakf1600_extract_bytes ✅ 3s 3s +0%
mld_polymat_expand_entry ✅ 3s 1s +200%
mld_sample_s1_s2 ✅ 3s 4s -25%
mld_value_barrier_i64 ✅ 3s 4s -25%
ntt_native_aarch64 ✅ 3s 4s -25%
ntt_native_x86_64 ✅ 3s 4s -25%
pack_sig_c ✅ 3s 3s +0%
pointwise_native_x86_64 ✅ 3s 3s +0%
poly_caddq ✅ 3s 2s +50%
poly_chknorm_native_aarch64 ✅ 3s 3s +0%
poly_decompose ✅ 3s 3s +0%
poly_decompose_32 ✅ 3s - new
poly_pointwise_montgomery_native ✅ 3s 3s +0%
poly_uniform ✅ 3s 2s +50%
poly_use_hint ✅ 3s 4s -25%
poly_use_hint_88 ✅ 3s - new
polyveck_invntt_tomont ✅ 3s 3s +0%
polyvecl_pack_eta ✅ 3s 2s +50%
polyvecl_pointwise_acc_montgomery_c ✅ 3s 1s +200%
polyvecl_unpack_eta ✅ 3s 4s -25%
polyvecl_unpack_z ✅ 3s 3s +0%
polyw1_pack ✅ 3s 2s +50%
rej_eta_native ✅ 3s 6s -50%
shake128_squeeze ✅ 3s 2s +50%
shake256_squeeze ✅ 3s 4s -25%
sign_keypair ✅ 3s 4s -25%
sign_signature ✅ 3s 4s -25%
sign_signature_extmu ✅ 3s 3s +0%
sign_signature_pre_hash_shake256 ✅ 3s 7s -57%
sign_verify_pre_hash_internal ✅ 3s 5s -40%
sign_verify_pre_hash_shake256 ✅ 3s 2s +50%
sk_t0hat_get_poly ✅ 3s 2s +50%
use_hint_32 ✅ 3s - new
use_hint_88 ✅ 3s - new
yvec_get_poly ✅ 3s 5s -40%
caddq ✅ 2s 2s +0%
decompose_32 ✅ 2s - new
fqscale ✅ 2s 3s -33%
intt_native_x86_64 ✅ 2s 3s -33%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid ✅ 2s 2s +0%
keccak_f1600_x4_native_avx2 ✅ 2s 1s +100%
keccak_finalize ✅ 2s 4s -50%
keccak_init ✅ 2s 2s +0%
keccakf1600_extract_bytes (big endian) ✅ 2s 5s -60%
keccakf1600_xor_bytes ✅ 2s 4s -50%
keccakf1600_xor_bytes (big endian) ✅ 2s 2s +0%
keccakf1600x4_extract_bytes_native ✅ 2s 2s +0%
keccakf1600x4_xor_bytes ✅ 2s 4s -50%
keccakf1600x4_xor_bytes_native ✅ 2s 2s +0%
mld_ct_cmask_neg_i32 ✅ 2s 2s +0%
mld_ct_get_optblocker_i64 ✅ 2s 2s +0%
mld_ct_get_optblocker_u32 ✅ 2s 2s +0%
mld_h ✅ 2s 3s -33%
mld_keccakf1600x4_xor_bytes_c ✅ 2s 1s +100%
mld_value_barrier_u32 ✅ 2s 2s +0%
mld_value_barrier_u8 ✅ 2s 1s +100%
pack_sig_h ✅ 2s 1s +100%
pack_sig_z ✅ 2s 5s -60%
poly_caddq_native_aarch64 ✅ 2s 2s +0%
poly_chknorm ✅ 2s 2s +0%
poly_decompose_32_native_aarch64 ✅ 2s 4s -50%
poly_decompose_88_native_aarch64 ✅ 2s 3s -33%
poly_invntt_tomont_native ✅ 2s 2s +0%
poly_permute_bitrev_to_custom_optional_native ✅ 2s 4s -50%
poly_uniform_gamma1 ✅ 2s 3s -33%
poly_use_hint_32 ✅ 2s - new
poly_use_hint_32_c ✅ 2s - new
poly_use_hint_native_aarch64 ✅ 2s 3s -33%
polyeta_pack ✅ 2s 4s -50%
polyt1_pack ✅ 2s 4s -50%
polyvec_matrix_expand ✅ 2s 4s -50%
polyvec_matrix_expand_serial ✅ 2s 3s -33%
polyveck_ntt ✅ 2s 4s -50%
polyveck_unpack_eta ✅ 2s 3s -33%
polyvecl_pointwise_acc_montgomery ✅ 2s 3s -33%
polyvecl_pointwise_acc_montgomery_native ✅ 2s 3s -33%
polyvecl_uniform_gamma1 ✅ 2s 2s +0%
polyvecl_uniform_gamma1_serial ✅ 2s 4s -50%
polyz_unpack_17_native_aarch64 ✅ 2s 3s -33%
polyz_unpack_19_native_aarch64 ✅ 2s 2s +0%
polyz_unpack_native ✅ 2s 3s -33%
rej_eta ✅ 2s 1s +100%
shake128_absorb ✅ 2s 2s +0%
shake128_finalize ✅ 2s 2s +0%
shake128_init ✅ 2s 2s +0%
shake128x4_absorb_once ✅ 2s 4s -50%
shake128x4_squeezeblocks ✅ 2s 2s +0%
shake256_absorb ✅ 2s 3s -33%
shake256_init ✅ 2s 3s -33%
shake256_release ✅ 2s 3s -33%
sig_unpack_hints ✅ 2s 3s -33%
sign_signature_pre_hash_internal ✅ 2s 5s -60%
sk_s1hat_get_poly ✅ 2s 2s +0%
unpack_sk_s1hat ✅ 2s 3s -33%
unpack_sk_s2hat ✅ 2s 2s +0%
unpack_sk_t0hat ✅ 2s 2s +0%
yvec_init ✅ 2s 3s -33%
keccak_f1600_x4_native_aarch64_v84a ✅ 1s 2s -50%
keccakf1600x4_extract_bytes ✅ 1s 2s -50%
mld_ct_get_optblocker_u8 ✅ 1s 5s -80%
mld_keccakf1600x4_extract_bytes_c ✅ 1s 2s -50%
poly_invntt_tomont ✅ 1s 2s -50%
poly_uniform_gamma1_4x ✅ 1s 1s +0%
shake128_release ✅ 1s 2s -50%
shake256x4_absorb_once ✅ 1s 2s -50%

@oqs-bot

oqs-bot commented Jun 7, 2026

Copy link
Copy Markdown
Contributor

CBMC Results (ML-DSA-44)

⚠️ Attention Required

Proof Status Current Previous Change
polyvecl_pointwise_acc_montgomery_c ⚠️ 283s 118s +140%
Full Results (210 proofs)
Proof Status Current Previous Change
**TOTAL** ✅ 1942s 1804s +7.6%
polyvecl_pointwise_acc_montgomery_c ⚠️ 283s 118s +140%
mld_invntt_layer ✅ 222s 259s -14%
rej_uniform_native ✅ 118s 145s -19%
poly_pointwise_montgomery_c ✅ 102s 98s +4%
poly_ntt_c ✅ 94s 96s -2%
mld_ct_memcmp ✅ 66s 68s -3%
mld_attempt_signature_generation ✅ 60s 58s +3%
mld_ntt_layer ✅ 44s 43s +2%
fqmul ✅ 41s 40s +2%
sign_signature_internal ✅ 27s 19s +42%
polyvec_matrix_expand ✅ 25s 26s -4%
sign_verify_internal ✅ 23s 26s -12%
keccakf1600x4_permute_native ✅ 22s 21s +5%
mld_ntt_butterfly_block ✅ 22s 21s +5%
polyvec_matrix_pointwise_montgomery_yvec ✅ 16s 9s +78%
rej_uniform ✅ 15s 20s -25%
poly_chknorm_c ✅ 14s 19s -26%
poly_uniform_4x ✅ 14s 10s +40%
polyeta_unpack ✅ 14s 15s -7%
polyt0_unpack ✅ 14s 16s -12%
mld_check_pct ✅ 13s 14s -7%
poly_uniform_eta_4x ✅ 13s 11s +18%
rej_uniform_c ✅ 12s 12s +0%
polyvec_matrix_expand_serial ✅ 11s 9s +22%
polyz_unpack_c ✅ 11s 12s -8%
compute_pack_t0_t1 ✅ 10s 16s -38%
mld_compute_pack_z ✅ 10s 8s +25%
keccak_absorb_once_x4 ✅ 9s 9s +0%
poly_add ✅ 9s 13s -31%
poly_invntt_tomont_c ✅ 9s 9s +0%
poly_shiftl ✅ 9s 5s +80%
polyveck_decompose ✅ 8s 7s +14%
mld_keccakf1600_permute_c ✅ 7s 9s -22%
pointwise_acc_native_aarch64 ✅ 7s 4s +75%
poly_power2round ✅ 7s 3s +133%
poly_use_hint_88_c ✅ 7s - new
sign ✅ 7s 9s -22%
pointwise_acc_native_x86_64 ✅ 6s 5s +20%
poly_caddq_c ✅ 6s 4s +50%
poly_decompose_88_native_aarch64 ✅ 6s 1s +500%
poly_ntt_native ✅ 6s 4s +50%
poly_uniform_eta ✅ 6s 4s +50%
poly_use_hint_native_aarch64 ✅ 6s 4s +50%
polyveck_invntt_tomont ✅ 6s 4s +50%
sig_unpack_hints ✅ 6s 4s +50%
sign_signature ✅ 6s 3s +100%
decompose_88 ✅ 5s - new
keccak_absorb ✅ 5s 7s -29%
keccakf1600x4_xor_bytes ✅ 5s 2s +150%
mld_h ✅ 5s 4s +25%
mld_sample_s1_s2_serial ✅ 5s 5s +0%
poly_caddq_native ✅ 5s 3s +67%
poly_decompose_native ✅ 5s 4s +25%
poly_invntt_tomont ✅ 5s 3s +67%
poly_sub ✅ 5s 3s +67%
poly_use_hint_native ✅ 5s 5s +0%
polyveck_unpack_eta ✅ 5s 3s +67%
polyvecl_pack_eta ✅ 5s 2s +150%
polyvecl_uniform_gamma1 ✅ 5s 4s +25%
rej_eta ✅ 5s 1s +400%
rej_eta_c ✅ 5s 3s +67%
shake256_finalize ✅ 5s 3s +67%
sign_keypair_internal ✅ 5s 4s +25%
sign_open ✅ 5s 4s +25%
sign_signature_pre_hash_internal ✅ 5s 4s +25%
sign_verify_pre_hash_shake256 ✅ 5s 2s +150%
intt_native_aarch64 ✅ 4s 3s +33%
keccakf1600_xor_bytes ✅ 4s 3s +33%
keccakf1600x4_extract_bytes_native ✅ 4s 2s +100%
keccakf1600x4_xor_bytes_native ✅ 4s 2s +100%
mld_ct_cmask_nonzero_u8 ✅ 4s 3s +33%
mld_keccakf1600_extract_bytes ✅ 4s 5s -20%
mld_sample_s1_s2 ✅ 4s 4s +0%
ntt_native_aarch64 ✅ 4s 4s +0%
ntt_native_x86_64 ✅ 4s 1s +300%
pack_sk_rho_key_tr_s2 ✅ 4s 4s +0%
poly_caddq ✅ 4s 2s +100%
poly_chknorm_native ✅ 4s 2s +100%
poly_decompose_32_native_aarch64 ✅ 4s 1s +300%
poly_decompose_88 ✅ 4s - new
poly_ntt ✅ 4s 3s +33%
poly_reduce ✅ 4s 4s +0%
poly_uniform ✅ 4s 4s +0%
poly_uniform_gamma1_4x ✅ 4s 3s +33%
poly_use_hint_32_c ✅ 4s - new
poly_use_hint_88 ✅ 4s - new
polyt1_unpack ✅ 4s 1s +300%
polyveck_caddq ✅ 4s 2s +100%
polyveck_chknorm ✅ 4s 10s -60%
polyveck_ntt ✅ 4s 5s -20%
polyvecl_chknorm ✅ 4s 5s -20%
polyvecl_ntt ✅ 4s 5s -20%
polyvecl_uniform_gamma1_serial ✅ 4s 3s +33%
polyw1_pack_88 ✅ 4s 4s +0%
reduce32 ✅ 4s 1s +300%
rej_uniform_native_aarch64 ✅ 4s 3s +33%
sign_pk_from_sk ✅ 4s 5s -20%
sign_signature_extmu ✅ 4s 3s +33%
sign_verify ✅ 4s 4s +0%
sign_verify_pre_hash_internal ✅ 4s 5s -20%
unpack_sk ✅ 4s 1s +300%
unpack_sk_s1hat ✅ 4s 2s +100%
unpack_sk_t0hat ✅ 4s 3s +33%
use_hint_32 ✅ 4s - new
use_hint_88 ✅ 4s - new
yvec_get_poly ✅ 4s 2s +100%
caddq ✅ 3s 3s +0%
decompose_32 ✅ 3s - new
fqscale ✅ 3s 2s +50%
keccak_init ✅ 3s 3s +0%
keccak_squeeze ✅ 3s 2s +50%
keccak_squeezeblocks_x4 ✅ 3s 3s +0%
keccakf1600_permute ✅ 3s 4s -25%
keccakf1600x4_extract_bytes ✅ 3s 2s +50%
keccakf1600x4_permute ✅ 3s 1s +200%
mld_ct_sel_int32 ✅ 3s 1s +200%
mld_keccakf1600x4_extract_bytes_c ✅ 3s 2s +50%
mld_prepare_domain_separation_prefix ✅ 3s 4s -25%
nttunpack_native_x86_64 ✅ 3s 2s +50%
pack_sig_c ✅ 3s 4s -25%
pointwise_native_aarch64 ✅ 3s 2s +50%
pointwise_native_x86_64 ✅ 3s 2s +50%
poly_caddq_native_aarch64 ✅ 3s 4s -25%
poly_caddq_native_x86_64 ✅ 3s 1s +200%
poly_chknorm ✅ 3s 2s +50%
poly_decompose_32 ✅ 3s - new
poly_decompose_32_c ✅ 3s - new
poly_permute_bitrev_to_custom_optional_native ✅ 3s 3s +0%
poly_pointwise_montgomery ✅ 3s 3s +0%
poly_use_hint_32 ✅ 3s - new
polyeta_pack ✅ 3s 4s -25%
polyt0_pack ✅ 3s 4s -25%
polyveck_reduce ✅ 3s 3s +0%
polyvecl_pointwise_acc_montgomery ✅ 3s 2s +50%
polyvecl_pointwise_acc_montgomery_native ✅ 3s 2s +50%
polyw1_pack_32 ✅ 3s 3s +0%
polyz_pack ✅ 3s 3s +0%
polyz_unpack_19_native_aarch64 ✅ 3s 3s +0%
rej_eta_native ✅ 3s 3s +0%
shake128_squeeze ✅ 3s 2s +50%
shake256_squeeze ✅ 3s 3s +0%
sign_keypair ✅ 3s 4s -25%
sign_signature_pre_hash_shake256 ✅ 3s 4s -25%
sk_s2hat_get_poly ✅ 3s 3s +0%
sk_t0hat_get_poly ✅ 3s 2s +50%
unpack_pk_t1 ✅ 3s 3s +0%
yvec_init ✅ 3s 3s +0%
intt_native_x86_64 ✅ 2s 5s -60%
keccak_f1600_x1_native_aarch64 ✅ 2s 3s -33%
keccak_f1600_x4_native_aarch64_v84a ✅ 2s 4s -50%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid ✅ 2s 4s -50%
keccak_f1600_x4_native_avx2 ✅ 2s 3s -33%
keccakf1600_extract_bytes (big endian) ✅ 2s 2s +0%
keccakf1600_xor_bytes (big endian) ✅ 2s 3s -33%
make_hint ✅ 2s 4s -50%
mld_ct_abs_i32 ✅ 2s 2s +0%
mld_ct_cmask_neg_i32 ✅ 2s 2s +0%
mld_ct_get_optblocker_i64 ✅ 2s 2s +0%
mld_polymat_expand_entry ✅ 2s 3s -33%
mld_value_barrier_u32 ✅ 2s 3s -33%
mld_value_barrier_u8 ✅ 2s 2s +0%
montgomery_reduce ✅ 2s 3s -33%
pack_sig_z ✅ 2s 4s -50%
poly_challenge ✅ 2s 7s -71%
poly_chknorm_native_aarch64 ✅ 2s 2s +0%
poly_decompose ✅ 2s 1s +100%
poly_decompose_88_c ✅ 2s - new
poly_invntt_tomont_native ✅ 2s 3s -33%
poly_permute_bitrev_to_custom_optional ✅ 2s 5s -60%
poly_pointwise_montgomery_native ✅ 2s 5s -60%
poly_uniform_gamma1 ✅ 2s 3s -33%
poly_use_hint ✅ 2s 2s +0%
polyt1_pack ✅ 2s 2s +0%
polyvec_matrix_pointwise_montgomery_row ✅ 2s 2s +0%
polyveck_pack_eta ✅ 2s 3s -33%
polyveck_pack_w1 ✅ 2s 3s -33%
polyvecl_unpack_eta ✅ 2s 4s -50%
polyw1_pack ✅ 2s 4s -50%
polyz_unpack ✅ 2s 3s -33%
polyz_unpack_17_native_aarch64 ✅ 2s 2s +0%
polyz_unpack_native ✅ 2s 5s -60%
power2round ✅ 2s 6s -67%
shake128_finalize ✅ 2s 2s +0%
shake128_release ✅ 2s 2s +0%
shake128x4_absorb_once ✅ 2s 2s +0%
shake128x4_squeezeblocks ✅ 2s 3s -33%
shake256_absorb ✅ 2s 2s +0%
shake256_release ✅ 2s 3s -33%
shake256x4_absorb_once ✅ 2s 3s -33%
shake256x4_squeezeblocks ✅ 2s 5s -60%
sign_verify_extmu ✅ 2s 5s -60%
sk_s1hat_get_poly ✅ 2s 3s -33%
sys_check_capability ✅ 2s 6s -67%
unpack_sk_s2hat ✅ 2s 3s -33%
keccak_f1600_x1_native_aarch64_v84a ✅ 1s 3s -67%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid ✅ 1s 2s -50%
keccak_finalize ✅ 1s 4s -75%
keccakf1600_permute_native ✅ 1s 2s -50%
mld_ct_cmask_nonzero_u32 ✅ 1s 3s -67%
mld_ct_get_optblocker_u32 ✅ 1s 2s -50%
mld_ct_get_optblocker_u8 ✅ 1s 5s -80%
mld_keccakf1600x4_xor_bytes_c ✅ 1s 2s -50%
mld_value_barrier_i64 ✅ 1s 2s -50%
pack_sig_h ✅ 1s 4s -75%
pack_sk_s1 ✅ 1s 3s -67%
polyvecl_unpack_z ✅ 1s 3s -67%
shake128_absorb ✅ 1s 1s +0%
shake128_init ✅ 1s 4s -75%
shake256 ✅ 1s 5s -80%
shake256_init ✅ 1s 2s -50%

@oqs-bot

oqs-bot commented Jun 7, 2026

Copy link
Copy Markdown
Contributor

CBMC Results (ML-DSA-65)

⚠️ Attention Required

Proof Status Current Previous Change
compute_pack_t0_t1 ⚠️ 28s 16s +75%
polyveck_chknorm ⚠️ 45s 9s +400%
polyvecl_pointwise_acc_montgomery_c ⚠️ 310s 202s +53%
Full Results (210 proofs)
Proof Status Current Previous Change
**TOTAL** ✅ 2350s 2161s +8.7%
polyvecl_pointwise_acc_montgomery_c ⚠️ 310s 202s +53%
mld_invntt_layer ✅ 259s 277s -6%
polyvec_matrix_expand ✅ 141s 126s +12%
rej_uniform_native ✅ 131s 145s -10%
poly_pointwise_montgomery_c ✅ 129s 101s +28%
poly_ntt_c ✅ 106s 91s +16%
mld_attempt_signature_generation ✅ 81s 66s +23%
mld_ct_memcmp ✅ 78s 65s +20%
mld_ntt_layer ✅ 48s 44s +9%
sign_signature_internal ✅ 47s 49s -4%
fqmul ✅ 46s 38s +21%
polyveck_chknorm ⚠️ 45s 9s +400%
sign_verify_internal ✅ 35s 64s -45%
compute_pack_t0_t1 ⚠️ 28s 16s +75%
polyvec_matrix_expand_serial ✅ 27s 25s +8%
mld_ntt_butterfly_block ✅ 25s 22s +14%
keccakf1600x4_permute_native ✅ 23s 23s +0%
mld_check_pct ✅ 16s 14s +14%
poly_chknorm_c ✅ 16s 19s -16%
polyveck_decompose ✅ 16s 14s +14%
rej_uniform ✅ 15s 22s -32%
polyt0_unpack ✅ 14s 17s -18%
poly_add ✅ 13s 12s +8%
poly_uniform_4x ✅ 13s 11s +18%
poly_uniform_eta_4x ✅ 13s 13s +0%
keccak_absorb_once_x4 ✅ 12s 8s +50%
poly_invntt_tomont_c ✅ 12s 6s +100%
rej_uniform_c ✅ 12s 14s -14%
polyveck_ntt ✅ 11s 9s +22%
mld_compute_pack_z ✅ 10s 11s -9%
poly_caddq_c ✅ 8s 6s +33%
poly_power2round ✅ 8s 5s +60%
polyveck_invntt_tomont ✅ 8s 8s +0%
polyvecl_ntt ✅ 8s 6s +33%
sign_signature_extmu ✅ 8s 3s +167%
mld_keccakf1600_permute_c ✅ 7s 8s -12%
pointwise_acc_native_x86_64 ✅ 7s 7s +0%
polyvec_matrix_pointwise_montgomery_yvec ✅ 7s 9s -22%
polyveck_caddq ✅ 7s 5s +40%
polyvecl_chknorm ✅ 7s 17s -59%
keccak_absorb ✅ 6s 6s +0%
pointwise_acc_native_aarch64 ✅ 6s 4s +50%
poly_caddq_native ✅ 6s 4s +50%
poly_decompose_32_c ✅ 6s - new
sign ✅ 6s 10s -40%
decompose_32 ✅ 5s - new
decompose_88 ✅ 5s - new
mld_polymat_expand_entry ✅ 5s 4s +25%
mld_sample_s1_s2_serial ✅ 5s 4s +25%
pack_sig_c ✅ 5s 3s +67%
pack_sig_z ✅ 5s 5s +0%
pointwise_native_aarch64 ✅ 5s 2s +150%
poly_chknorm_native ✅ 5s 2s +150%
poly_ntt_native ✅ 5s 4s +25%
poly_permute_bitrev_to_custom_optional ✅ 5s 1s +400%
poly_shiftl ✅ 5s 5s +0%
poly_uniform_gamma1 ✅ 5s 5s +0%
poly_use_hint_88_c ✅ 5s - new
polyeta_unpack ✅ 5s 5s +0%
polyvecl_uniform_gamma1 ✅ 5s 4s +25%
sign_keypair_internal ✅ 5s 6s -17%
sign_pk_from_sk ✅ 5s 5s +0%
sign_signature ✅ 5s 4s +25%
sign_verify ✅ 5s 5s +0%
sign_verify_extmu ✅ 5s 5s +0%
unpack_sk ✅ 5s 4s +25%
intt_native_x86_64 ✅ 4s 2s +100%
keccak_f1600_x4_native_aarch64_v84a ✅ 4s 2s +100%
keccak_f1600_x4_native_avx2 ✅ 4s 2s +100%
keccakf1600_extract_bytes (big endian) ✅ 4s 4s +0%
keccakf1600x4_extract_bytes_native ✅ 4s 2s +100%
keccakf1600x4_permute ✅ 4s 1s +300%
mld_ct_sel_int32 ✅ 4s 3s +33%
mld_h ✅ 4s 4s +0%
mld_keccakf1600_extract_bytes ✅ 4s 2s +100%
mld_prepare_domain_separation_prefix ✅ 4s 5s -20%
mld_sample_s1_s2 ✅ 4s 4s +0%
montgomery_reduce ✅ 4s 3s +33%
ntt_native_aarch64 ✅ 4s 4s +0%
ntt_native_x86_64 ✅ 4s 3s +33%
pack_sig_h ✅ 4s 4s +0%
poly_caddq_native_x86_64 ✅ 4s 5s -20%
poly_challenge ✅ 4s 4s +0%
poly_chknorm ✅ 4s 3s +33%
poly_decompose_88 ✅ 4s - new
poly_decompose_88_native_aarch64 ✅ 4s 1s +300%
poly_decompose_native ✅ 4s 2s +100%
poly_invntt_tomont_native ✅ 4s 4s +0%
poly_permute_bitrev_to_custom_optional_native ✅ 4s 6s -33%
poly_uniform ✅ 4s 3s +33%
poly_use_hint_32_c ✅ 4s - new
polyt0_pack ✅ 4s 6s -33%
polyveck_pack_eta ✅ 4s 4s +0%
polyveck_unpack_eta ✅ 4s 3s +33%
polyvecl_unpack_z ✅ 4s 1s +300%
polyw1_pack ✅ 4s 3s +33%
polyz_pack ✅ 4s 4s +0%
polyz_unpack ✅ 4s 2s +100%
polyz_unpack_17_native_aarch64 ✅ 4s 5s -20%
polyz_unpack_19_native_aarch64 ✅ 4s 3s +33%
power2round ✅ 4s 4s +0%
reduce32 ✅ 4s 5s -20%
shake128_finalize ✅ 4s 3s +33%
sign_open ✅ 4s 6s -33%
unpack_sk_s2hat ✅ 4s 3s +33%
use_hint_32 ✅ 4s - new
fqscale ✅ 3s 3s +0%
intt_native_aarch64 ✅ 3s 3s +0%
keccak_f1600_x1_native_aarch64_v84a ✅ 3s 3s +0%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid ✅ 3s 2s +50%
keccak_squeezeblocks_x4 ✅ 3s 4s -25%
keccakf1600_permute_native ✅ 3s 6s -50%
keccakf1600_xor_bytes ✅ 3s 3s +0%
keccakf1600x4_extract_bytes ✅ 3s 2s +50%
mld_ct_cmask_neg_i32 ✅ 3s 3s +0%
mld_ct_cmask_nonzero_u8 ✅ 3s 1s +200%
mld_value_barrier_i64 ✅ 3s 2s +50%
mld_value_barrier_u32 ✅ 3s 2s +50%
nttunpack_native_x86_64 ✅ 3s 2s +50%
pack_sk_rho_key_tr_s2 ✅ 3s 3s +0%
pack_sk_s1 ✅ 3s 3s +0%
pointwise_native_x86_64 ✅ 3s 5s -40%
poly_caddq ✅ 3s 1s +200%
poly_caddq_native_aarch64 ✅ 3s 4s -25%
poly_invntt_tomont ✅ 3s 3s +0%
poly_ntt ✅ 3s 4s -25%
poly_pointwise_montgomery ✅ 3s 3s +0%
poly_sub ✅ 3s 1s +200%
poly_uniform_eta ✅ 3s 3s +0%
poly_uniform_gamma1_4x ✅ 3s 3s +0%
poly_use_hint_32 ✅ 3s - new
poly_use_hint_88 ✅ 3s - new
polyeta_pack ✅ 3s 4s -25%
polyt1_pack ✅ 3s 4s -25%
polyt1_unpack ✅ 3s 3s +0%
polyvec_matrix_pointwise_montgomery_row ✅ 3s 3s +0%
polyveck_pack_w1 ✅ 3s 3s +0%
polyveck_reduce ✅ 3s 5s -40%
polyvecl_pack_eta ✅ 3s 4s -25%
polyvecl_pointwise_acc_montgomery ✅ 3s 4s -25%
polyz_unpack_c ✅ 3s 8s -62%
rej_eta ✅ 3s 2s +50%
rej_eta_c ✅ 3s 2s +50%
shake128_squeeze ✅ 3s 3s +0%
shake256 ✅ 3s 5s -40%
shake256_absorb ✅ 3s 2s +50%
sig_unpack_hints ✅ 3s 6s -50%
sign_keypair ✅ 3s 6s -50%
sign_signature_pre_hash_shake256 ✅ 3s 4s -25%
sign_verify_pre_hash_internal ✅ 3s 3s +0%
sys_check_capability ✅ 3s 3s +0%
unpack_pk_t1 ✅ 3s 1s +200%
unpack_sk_s1hat ✅ 3s 2s +50%
unpack_sk_t0hat ✅ 3s 4s -25%
caddq ✅ 2s 6s -67%
keccak_f1600_x1_native_aarch64 ✅ 2s 2s +0%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid ✅ 2s 2s +0%
keccak_finalize ✅ 2s 2s +0%
keccak_init ✅ 2s 3s -33%
keccak_squeeze ✅ 2s 5s -60%
keccakf1600_permute ✅ 2s 2s +0%
keccakf1600_xor_bytes (big endian) ✅ 2s 4s -50%
keccakf1600x4_xor_bytes ✅ 2s 1s +100%
keccakf1600x4_xor_bytes_native ✅ 2s 3s -33%
make_hint ✅ 2s 5s -60%
mld_ct_abs_i32 ✅ 2s 2s +0%
mld_ct_cmask_nonzero_u32 ✅ 2s 4s -50%
mld_ct_get_optblocker_i64 ✅ 2s 4s -50%
mld_ct_get_optblocker_u32 ✅ 2s 1s +100%
mld_ct_get_optblocker_u8 ✅ 2s 2s +0%
poly_chknorm_native_aarch64 ✅ 2s 2s +0%
poly_decompose ✅ 2s 2s +0%
poly_decompose_32 ✅ 2s - new
poly_decompose_32_native_aarch64 ✅ 2s 3s -33%
poly_decompose_88_c ✅ 2s - new
poly_pointwise_montgomery_native ✅ 2s 5s -60%
poly_reduce ✅ 2s 4s -50%
poly_use_hint ✅ 2s 2s +0%
poly_use_hint_native ✅ 2s 5s -60%
polyvecl_uniform_gamma1_serial ✅ 2s 3s -33%
polyvecl_unpack_eta ✅ 2s 3s -33%
polyw1_pack_32 ✅ 2s 4s -50%
polyw1_pack_88 ✅ 2s 2s +0%
polyz_unpack_native ✅ 2s 4s -50%
rej_eta_native ✅ 2s 5s -60%
rej_uniform_native_aarch64 ✅ 2s 5s -60%
shake128_absorb ✅ 2s 5s -60%
shake128_init ✅ 2s 3s -33%
shake128_release ✅ 2s 1s +100%
shake128x4_absorb_once ✅ 2s 5s -60%
shake128x4_squeezeblocks ✅ 2s 4s -50%
shake256_finalize ✅ 2s 2s +0%
shake256_init ✅ 2s 1s +100%
shake256x4_absorb_once ✅ 2s 3s -33%
shake256x4_squeezeblocks ✅ 2s 3s -33%
sign_signature_pre_hash_internal ✅ 2s 3s -33%
sign_verify_pre_hash_shake256 ✅ 2s 6s -67%
sk_s1hat_get_poly ✅ 2s 3s -33%
sk_t0hat_get_poly ✅ 2s 2s +0%
use_hint_88 ✅ 2s - new
yvec_get_poly ✅ 2s 3s -33%
yvec_init ✅ 2s 3s -33%
mld_keccakf1600x4_extract_bytes_c ✅ 1s 3s -67%
mld_keccakf1600x4_xor_bytes_c ✅ 1s 3s -67%
mld_value_barrier_u8 ✅ 1s 3s -67%
poly_use_hint_native_aarch64 ✅ 1s 4s -75%
polyvecl_pointwise_acc_montgomery_native ✅ 1s 3s -67%
shake256_release ✅ 1s 2s -50%
shake256_squeeze ✅ 1s 2s -50%
sk_s2hat_get_poly ✅ 1s 4s -75%

@oqs-bot

oqs-bot commented Jun 7, 2026

Copy link
Copy Markdown
Contributor

CBMC Results (ML-DSA-87)

⚠️ Attention Required

Proof Status Current Previous Change
polyveck_decompose ⚠️ 68s 9s +656%
Full Results (210 proofs)
Proof Status Current Previous Change
**TOTAL** ✅ 2630s 2473s +6.3%
polyvecl_pointwise_acc_montgomery_c ✅ 424s 315s +35%
mld_invntt_layer ✅ 259s 293s -12%
polyvec_matrix_expand ✅ 202s 215s -6%
rej_uniform_native ✅ 132s 144s -8%
poly_pointwise_montgomery_c ✅ 122s 106s +15%
poly_ntt_c ✅ 105s 98s +7%
sign_verify_internal ✅ 88s 60s +47%
mld_attempt_signature_generation ✅ 76s 99s -23%
mld_ct_memcmp ✅ 75s 68s +10%
polyveck_decompose ⚠️ 68s 9s +656%
mld_ntt_layer ✅ 47s 42s +12%
sign_signature_internal ✅ 45s 64s -30%
fqmul ✅ 44s 42s +5%
polyvec_matrix_expand_serial ✅ 43s 48s -10%
polyvec_matrix_pointwise_montgomery_yvec ✅ 27s 30s -10%
mld_ntt_butterfly_block ✅ 25s 21s +19%
keccakf1600x4_permute_native ✅ 23s 25s -8%
compute_pack_t0_t1 ✅ 19s 32s -41%
rej_uniform ✅ 16s 23s -30%
polyt0_unpack ✅ 15s 17s -12%
poly_add ✅ 14s 11s +27%
poly_chknorm_c ✅ 14s 20s -30%
polyeta_unpack ✅ 14s 17s -18%
poly_uniform_4x ✅ 13s 11s +18%
poly_uniform_eta_4x ✅ 13s 12s +8%
rej_uniform_c ✅ 13s 12s +8%
mld_check_pct ✅ 12s 14s -14%
mld_compute_pack_z ✅ 12s 7s +71%
keccak_absorb_once_x4 ✅ 11s 10s +10%
polyvecl_chknorm ✅ 9s 5s +80%
polyz_unpack_c ✅ 9s 6s +50%
mld_keccakf1600_permute_c ✅ 8s 8s +0%
pointwise_acc_native_aarch64 ✅ 8s 7s +14%
poly_invntt_tomont_c ✅ 8s 11s -27%
polyvecl_ntt ✅ 8s 9s -11%
sign ✅ 8s 10s -20%
unpack_sk_t0hat ✅ 8s 7s +14%
keccak_absorb ✅ 7s 7s +0%
pointwise_acc_native_x86_64 ✅ 7s 8s -12%
poly_caddq_c ✅ 7s 7s +0%
poly_use_hint_88_c ✅ 7s - new
polyveck_invntt_tomont ✅ 7s 9s -22%
polyveck_ntt ✅ 7s 7s +0%
sign_keypair_internal ✅ 7s 6s +17%
sign_verify ✅ 7s 4s +75%
mld_sample_s1_s2_serial ✅ 6s 6s +0%
poly_decompose_32_c ✅ 6s - new
poly_use_hint ✅ 6s 3s +100%
poly_use_hint_32_c ✅ 6s - new
polyvec_matrix_pointwise_montgomery_row ✅ 6s 5s +20%
polyveck_caddq ✅ 6s 5s +20%
polyveck_unpack_eta ✅ 6s 1s +500%
reduce32 ✅ 6s 2s +200%
sign_pk_from_sk ✅ 6s 8s -25%
unpack_sk ✅ 6s 4s +50%
intt_native_aarch64 ✅ 5s 4s +25%
keccakf1600_permute ✅ 5s 3s +67%
mld_h ✅ 5s 3s +67%
mld_prepare_domain_separation_prefix ✅ 5s 3s +67%
mld_sample_s1_s2 ✅ 5s 7s -29%
poly_caddq_native_aarch64 ✅ 5s 4s +25%
poly_challenge ✅ 5s 4s +25%
poly_power2round ✅ 5s 6s -17%
poly_shiftl ✅ 5s 4s +25%
poly_use_hint_native ✅ 5s 3s +67%
polyveck_chknorm ✅ 5s 5s +0%
polyvecl_pointwise_acc_montgomery_native ✅ 5s 4s +25%
polyw1_pack ✅ 5s 3s +67%
rej_eta_c ✅ 5s 4s +25%
rej_eta_native ✅ 5s 5s +0%
sign_signature ✅ 5s 6s -17%
sys_check_capability ✅ 5s 4s +25%
intt_native_x86_64 ✅ 4s 3s +33%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid ✅ 4s 2s +100%
keccakf1600x4_xor_bytes_native ✅ 4s 1s +300%
make_hint ✅ 4s 2s +100%
mld_polymat_expand_entry ✅ 4s 4s +0%
montgomery_reduce ✅ 4s 3s +33%
ntt_native_aarch64 ✅ 4s 3s +33%
ntt_native_x86_64 ✅ 4s 5s -20%
nttunpack_native_x86_64 ✅ 4s 5s -20%
pointwise_native_x86_64 ✅ 4s 2s +100%
poly_caddq ✅ 4s 5s -20%
poly_caddq_native_x86_64 ✅ 4s 5s -20%
poly_chknorm_native ✅ 4s 3s +33%
poly_decompose_32_native_aarch64 ✅ 4s 3s +33%
poly_decompose_88_c ✅ 4s - new
poly_decompose_88_native_aarch64 ✅ 4s 3s +33%
poly_invntt_tomont_native ✅ 4s 2s +100%
poly_ntt ✅ 4s 4s +0%
poly_permute_bitrev_to_custom_optional ✅ 4s 2s +100%
poly_use_hint_32 ✅ 4s - new
polyt0_pack ✅ 4s 5s -20%
polyt1_pack ✅ 4s 3s +33%
polyt1_unpack ✅ 4s 2s +100%
polyveck_reduce ✅ 4s 3s +33%
polyvecl_pack_eta ✅ 4s 3s +33%
polyvecl_pointwise_acc_montgomery ✅ 4s 2s +100%
polyvecl_uniform_gamma1 ✅ 4s 2s +100%
polyvecl_unpack_z ✅ 4s 2s +100%
polyz_unpack_17_native_aarch64 ✅ 4s 2s +100%
polyz_unpack_19_native_aarch64 ✅ 4s 3s +33%
power2round ✅ 4s 3s +33%
shake256_absorb ✅ 4s 3s +33%
sign_keypair ✅ 4s 4s +0%
sign_open ✅ 4s 3s +33%
sign_signature_extmu ✅ 4s 4s +0%
sign_signature_pre_hash_internal ✅ 4s 5s -20%
sign_verify_pre_hash_shake256 ✅ 4s 4s +0%
sk_s1hat_get_poly ✅ 4s 4s +0%
sk_s2hat_get_poly ✅ 4s 3s +33%
caddq ✅ 3s 2s +50%
fqscale ✅ 3s 3s +0%
keccak_f1600_x1_native_aarch64_v84a ✅ 3s 2s +50%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid ✅ 3s 2s +50%
keccak_squeeze ✅ 3s 3s +0%
keccak_squeezeblocks_x4 ✅ 3s 3s +0%
keccakf1600_extract_bytes (big endian) ✅ 3s 2s +50%
keccakf1600_permute_native ✅ 3s 1s +200%
keccakf1600x4_xor_bytes ✅ 3s 2s +50%
mld_ct_get_optblocker_i64 ✅ 3s 3s +0%
mld_keccakf1600_extract_bytes ✅ 3s 3s +0%
mld_keccakf1600x4_xor_bytes_c ✅ 3s 2s +50%
pack_sig_c ✅ 3s 2s +50%
pack_sig_h ✅ 3s 3s +0%
pack_sig_z ✅ 3s 2s +50%
pack_sk_s1 ✅ 3s 4s -25%
pointwise_native_aarch64 ✅ 3s 3s +0%
poly_caddq_native ✅ 3s 4s -25%
poly_chknorm ✅ 3s 2s +50%
poly_chknorm_native_aarch64 ✅ 3s 4s -25%
poly_decompose ✅ 3s 2s +50%
poly_decompose_32 ✅ 3s - new
poly_decompose_88 ✅ 3s - new
poly_ntt_native ✅ 3s 3s +0%
poly_reduce ✅ 3s 2s +50%
poly_uniform_eta ✅ 3s 4s -25%
poly_uniform_gamma1_4x ✅ 3s 4s -25%
poly_use_hint_88 ✅ 3s - new
poly_use_hint_native_aarch64 ✅ 3s 2s +50%
polyveck_pack_w1 ✅ 3s 2s +50%
polyvecl_uniform_gamma1_serial ✅ 3s 3s +0%
polyvecl_unpack_eta ✅ 3s 5s -40%
polyw1_pack_32 ✅ 3s 4s -25%
polyz_pack ✅ 3s 3s +0%
polyz_unpack ✅ 3s 3s +0%
rej_eta ✅ 3s 4s -25%
rej_uniform_native_aarch64 ✅ 3s 4s -25%
shake128x4_squeezeblocks ✅ 3s 3s +0%
shake256_release ✅ 3s 3s +0%
shake256x4_squeezeblocks ✅ 3s 2s +50%
sig_unpack_hints ✅ 3s 2s +50%
sign_signature_pre_hash_shake256 ✅ 3s 4s -25%
sign_verify_extmu ✅ 3s 4s -25%
sign_verify_pre_hash_internal ✅ 3s 4s -25%
sk_t0hat_get_poly ✅ 3s 3s +0%
unpack_pk_t1 ✅ 3s 4s -25%
use_hint_32 ✅ 3s - new
yvec_get_poly ✅ 3s 2s +50%
yvec_init ✅ 3s 2s +50%
decompose_32 ✅ 2s - new
decompose_88 ✅ 2s - new
keccak_f1600_x1_native_aarch64 ✅ 2s 1s +100%
keccak_f1600_x4_native_aarch64_v84a ✅ 2s 2s +0%
keccak_f1600_x4_native_avx2 ✅ 2s 2s +0%
keccak_finalize ✅ 2s 1s +100%
keccak_init ✅ 2s 5s -60%
keccakf1600_xor_bytes ✅ 2s 3s -33%
keccakf1600_xor_bytes (big endian) ✅ 2s 3s -33%
keccakf1600x4_extract_bytes ✅ 2s 2s +0%
keccakf1600x4_permute ✅ 2s 4s -50%
mld_ct_abs_i32 ✅ 2s 2s +0%
mld_ct_cmask_neg_i32 ✅ 2s 2s +0%
mld_ct_cmask_nonzero_u32 ✅ 2s 3s -33%
mld_ct_cmask_nonzero_u8 ✅ 2s 2s +0%
mld_ct_sel_int32 ✅ 2s 3s -33%
mld_value_barrier_i64 ✅ 2s 2s +0%
mld_value_barrier_u8 ✅ 2s 2s +0%
pack_sk_rho_key_tr_s2 ✅ 2s 2s +0%
poly_decompose_native ✅ 2s 3s -33%
poly_invntt_tomont ✅ 2s 3s -33%
poly_permute_bitrev_to_custom_optional_native ✅ 2s 3s -33%
poly_pointwise_montgomery ✅ 2s 2s +0%
poly_pointwise_montgomery_native ✅ 2s 3s -33%
poly_uniform ✅ 2s 3s -33%
poly_uniform_gamma1 ✅ 2s 4s -50%
polyveck_pack_eta ✅ 2s 2s +0%
polyw1_pack_88 ✅ 2s 2s +0%
polyz_unpack_native ✅ 2s 3s -33%
shake128_absorb ✅ 2s 4s -50%
shake128_init ✅ 2s 2s +0%
shake128_squeeze ✅ 2s 4s -50%
shake256_finalize ✅ 2s 2s +0%
shake256_init ✅ 2s 3s -33%
shake256_squeeze ✅ 2s 2s +0%
shake256x4_absorb_once ✅ 2s 4s -50%
unpack_sk_s1hat ✅ 2s 3s -33%
unpack_sk_s2hat ✅ 2s 3s -33%
use_hint_88 ✅ 2s - new
keccakf1600x4_extract_bytes_native ✅ 1s 3s -67%
mld_ct_get_optblocker_u32 ✅ 1s 2s -50%
mld_ct_get_optblocker_u8 ✅ 1s 3s -67%
mld_keccakf1600x4_extract_bytes_c ✅ 1s 3s -67%
mld_value_barrier_u32 ✅ 1s 4s -75%
poly_sub ✅ 1s 3s -67%
polyeta_pack ✅ 1s 2s -50%
shake128_finalize ✅ 1s 2s -50%
shake128_release ✅ 1s 3s -67%
shake128x4_absorb_once ✅ 1s 3s -67%
shake256 ✅ 1s 3s -67%

@oqs-bot

oqs-bot commented Jun 7, 2026

Copy link
Copy Markdown
Contributor

CBMC Results (ML-DSA-65, REDUCE-RAM)

⚠️ Attention Required

Proof Status Current Previous Change
**TOTAL** ⚠️ 2114s 1562s +35.3%
polyvec_matrix_pointwise_montgomery_yvec ⚠️ 614s 81s +658%
sign_verify_internal ⚠️ 29s 16s +81%
Full Results (210 proofs)
Proof Status Current Previous Change
**TOTAL** ⚠️ 2114s 1562s +35.3%
polyvec_matrix_pointwise_montgomery_yvec ⚠️ 614s 81s +658%
mld_invntt_layer ✅ 164s 159s +3%
rej_uniform_native ✅ 120s 121s -1%
poly_ntt_c ✅ 93s 91s +2%
poly_pointwise_montgomery_c ✅ 89s 130s -32%
mld_ct_memcmp ✅ 67s 67s +0%
fqmul ✅ 43s 41s +5%
mld_ntt_layer ✅ 43s 44s -2%
mld_attempt_signature_generation ✅ 33s 23s +43%
sign_verify_internal ⚠️ 29s 16s +81%
keccakf1600x4_permute_native ✅ 23s 22s +5%
mld_ntt_butterfly_block ✅ 23s 21s +10%
rej_uniform_c ✅ 20s 16s +25%
poly_chknorm_c ✅ 19s 18s +6%
mld_check_pct ✅ 18s 13s +38%
rej_uniform ✅ 18s 10s +80%
polyt0_unpack ✅ 16s 16s +0%
poly_uniform_eta_4x ✅ 12s 12s +0%
polyveck_chknorm ✅ 11s 38s -71%
polyveck_decompose ✅ 11s 14s -21%
keccak_absorb_once_x4 ✅ 10s 8s +25%
compute_pack_t0_t1 ✅ 9s 5s +80%
mld_compute_pack_z ✅ 9s 6s +50%
poly_add ✅ 9s 10s -10%
polyvec_matrix_pointwise_montgomery_row ✅ 9s 10s -10%
polyveck_reduce ✅ 9s 4s +125%
poly_invntt_tomont_c ✅ 7s 7s +0%
polyeta_unpack ✅ 7s 6s +17%
polyveck_invntt_tomont ✅ 7s 6s +17%
polyvecl_ntt ✅ 7s 10s -30%
polyz_pack ✅ 7s 4s +75%
keccak_absorb ✅ 6s 7s -14%
mld_keccakf1600_permute_c ✅ 6s 7s -14%
mld_sample_s1_s2_serial ✅ 6s 4s +50%
pointwise_acc_native_aarch64 ✅ 6s 5s +20%
pointwise_acc_native_x86_64 ✅ 6s 6s +0%
poly_caddq_c ✅ 6s 3s +100%
poly_chknorm_native ✅ 6s 2s +200%
sign ✅ 6s 7s -14%
sign_open ✅ 6s 5s +20%
decompose_32 ✅ 5s - new
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid ✅ 5s 2s +150%
keccak_squeezeblocks_x4 ✅ 5s 4s +25%
keccakf1600x4_xor_bytes_native ✅ 5s 2s +150%
mld_ct_cmask_nonzero_u8 ✅ 5s 2s +150%
mld_sample_s1_s2 ✅ 5s 5s +0%
poly_challenge ✅ 5s 6s -17%
poly_decompose_88_native_aarch64 ✅ 5s 2s +150%
poly_decompose_native ✅ 5s 3s +67%
polyveck_caddq ✅ 5s 7s -29%
polyvecl_chknorm ✅ 5s 14s -64%
sig_unpack_hints ✅ 5s 5s +0%
sign_pk_from_sk ✅ 5s 6s -17%
sign_signature ✅ 5s 4s +25%
sign_verify_pre_hash_shake256 ✅ 5s 6s -17%
use_hint_32 ✅ 5s - new
caddq ✅ 4s 5s -20%
intt_native_x86_64 ✅ 4s 4s +0%
keccak_f1600_x1_native_aarch64_v84a ✅ 4s 3s +33%
keccakf1600_permute ✅ 4s 3s +33%
keccakf1600_permute_native ✅ 4s 5s -20%
make_hint ✅ 4s 3s +33%
mld_h ✅ 4s 5s -20%
mld_keccakf1600x4_xor_bytes_c ✅ 4s 3s +33%
mld_prepare_domain_separation_prefix ✅ 4s 3s +33%
mld_value_barrier_u32 ✅ 4s 1s +300%
ntt_native_x86_64 ✅ 4s 2s +100%
pack_sk_rho_key_tr_s2 ✅ 4s 2s +100%
pack_sk_s1 ✅ 4s 2s +100%
poly_caddq_native_x86_64 ✅ 4s 2s +100%
poly_chknorm_native_aarch64 ✅ 4s 2s +100%
poly_decompose_32_native_aarch64 ✅ 4s 3s +33%
poly_permute_bitrev_to_custom_optional_native ✅ 4s 2s +100%
poly_pointwise_montgomery_native ✅ 4s 3s +33%
poly_power2round ✅ 4s 4s +0%
poly_reduce ✅ 4s 5s -20%
poly_shiftl ✅ 4s 4s +0%
poly_uniform ✅ 4s 2s +100%
poly_uniform_eta ✅ 4s 3s +33%
poly_use_hint ✅ 4s 4s +0%
polyt1_pack ✅ 4s 4s +0%
polyvecl_pointwise_acc_montgomery ✅ 4s 3s +33%
polyz_unpack_native ✅ 4s 4s +0%
power2round ✅ 4s 2s +100%
sign_keypair ✅ 4s 5s -20%
sk_s1hat_get_poly ✅ 4s 4s +0%
sk_t0hat_get_poly ✅ 4s 2s +100%
sys_check_capability ✅ 4s 2s +100%
fqscale ✅ 3s 2s +50%
intt_native_aarch64 ✅ 3s 3s +0%
keccak_f1600_x1_native_aarch64 ✅ 3s 4s -25%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid ✅ 3s 3s +0%
keccak_f1600_x4_native_avx2 ✅ 3s 1s +200%
keccakf1600_extract_bytes (big endian) ✅ 3s 3s +0%
keccakf1600_xor_bytes ✅ 3s 1s +200%
keccakf1600x4_extract_bytes_native ✅ 3s 5s -40%
mld_ct_get_optblocker_i64 ✅ 3s 1s +200%
mld_ct_get_optblocker_u32 ✅ 3s 2s +50%
mld_value_barrier_i64 ✅ 3s 1s +200%
montgomery_reduce ✅ 3s 3s +0%
nttunpack_native_x86_64 ✅ 3s 3s +0%
pack_sig_c ✅ 3s 2s +50%
pack_sig_h ✅ 3s 2s +50%
pointwise_native_x86_64 ✅ 3s 3s +0%
poly_caddq ✅ 3s 1s +200%
poly_caddq_native_aarch64 ✅ 3s 4s -25%
poly_chknorm ✅ 3s 2s +50%
poly_decompose ✅ 3s 1s +200%
poly_decompose_32_c ✅ 3s - new
poly_decompose_88 ✅ 3s - new
poly_decompose_88_c ✅ 3s - new
poly_invntt_tomont_native ✅ 3s 4s -25%
poly_ntt_native ✅ 3s 4s -25%
poly_sub ✅ 3s 4s -25%
poly_uniform_gamma1 ✅ 3s 3s +0%
poly_uniform_gamma1_4x ✅ 3s 2s +50%
poly_use_hint_native ✅ 3s 3s +0%
poly_use_hint_native_aarch64 ✅ 3s 4s -25%
polyeta_pack ✅ 3s 1s +200%
polyveck_ntt ✅ 3s 2s +50%
polyveck_pack_eta ✅ 3s 4s -25%
polyvecl_pointwise_acc_montgomery_c ✅ 3s 2s +50%
polyvecl_pointwise_acc_montgomery_native ✅ 3s 3s +0%
polyvecl_uniform_gamma1 ✅ 3s 4s -25%
polyvecl_uniform_gamma1_serial ✅ 3s 3s +0%
polyvecl_unpack_z ✅ 3s 2s +50%
polyw1_pack_32 ✅ 3s 2s +50%
rej_eta ✅ 3s 4s -25%
rej_eta_native ✅ 3s 3s +0%
rej_uniform_native_aarch64 ✅ 3s 2s +50%
shake128_release ✅ 3s 3s +0%
shake128_squeeze ✅ 3s 5s -40%
shake128x4_absorb_once ✅ 3s 2s +50%
shake128x4_squeezeblocks ✅ 3s 4s -25%
shake256 ✅ 3s 2s +50%
shake256_release ✅ 3s 3s +0%
shake256x4_absorb_once ✅ 3s 3s +0%
shake256x4_squeezeblocks ✅ 3s 1s +200%
sign_keypair_internal ✅ 3s 2s +50%
sign_signature_extmu ✅ 3s 3s +0%
sign_signature_internal ✅ 3s 4s -25%
sign_signature_pre_hash_internal ✅ 3s 2s +50%
sign_signature_pre_hash_shake256 ✅ 3s 3s +0%
sign_verify ✅ 3s 3s +0%
sign_verify_extmu ✅ 3s 6s -50%
sign_verify_pre_hash_internal ✅ 3s 4s -25%
sk_s2hat_get_poly ✅ 3s 1s +200%
unpack_sk ✅ 3s 3s +0%
use_hint_88 ✅ 3s - new
yvec_get_poly ✅ 3s 2s +50%
decompose_88 ✅ 2s - new
keccak_f1600_x4_native_aarch64_v84a ✅ 2s 1s +100%
keccak_finalize ✅ 2s 3s -33%
keccak_init ✅ 2s 3s -33%
keccak_squeeze ✅ 2s 3s -33%
keccakf1600_xor_bytes (big endian) ✅ 2s 3s -33%
keccakf1600x4_extract_bytes ✅ 2s 2s +0%
keccakf1600x4_permute ✅ 2s 2s +0%
keccakf1600x4_xor_bytes ✅ 2s 3s -33%
mld_ct_abs_i32 ✅ 2s 2s +0%
mld_ct_cmask_neg_i32 ✅ 2s 3s -33%
mld_ct_cmask_nonzero_u32 ✅ 2s 4s -50%
mld_ct_get_optblocker_u8 ✅ 2s 2s +0%
mld_ct_sel_int32 ✅ 2s 2s +0%
mld_keccakf1600x4_extract_bytes_c ✅ 2s 1s +100%
mld_polymat_expand_entry ✅ 2s 3s -33%
ntt_native_aarch64 ✅ 2s 2s +0%
poly_caddq_native ✅ 2s 3s -33%
poly_decompose_32 ✅ 2s - new
poly_ntt ✅ 2s 4s -50%
poly_permute_bitrev_to_custom_optional ✅ 2s 4s -50%
poly_uniform_4x ✅ 2s 2s +0%
poly_use_hint_32 ✅ 2s - new
poly_use_hint_32_c ✅ 2s - new
poly_use_hint_88 ✅ 2s - new
poly_use_hint_88_c ✅ 2s - new
polyt0_pack ✅ 2s 4s -50%
polyt1_unpack ✅ 2s 2s +0%
polyvec_matrix_expand ✅ 2s 1s +100%
polyvec_matrix_expand_serial ✅ 2s 2s +0%
polyveck_pack_w1 ✅ 2s 4s -50%
polyveck_unpack_eta ✅ 2s 4s -50%
polyvecl_unpack_eta ✅ 2s 2s +0%
polyw1_pack ✅ 2s 4s -50%
polyw1_pack_88 ✅ 2s 2s +0%
polyz_unpack ✅ 2s 2s +0%
polyz_unpack_17_native_aarch64 ✅ 2s 5s -60%
polyz_unpack_19_native_aarch64 ✅ 2s 4s -50%
reduce32 ✅ 2s 3s -33%
rej_eta_c ✅ 2s 4s -50%
shake128_absorb ✅ 2s 4s -50%
shake128_finalize ✅ 2s 2s +0%
shake128_init ✅ 2s 3s -33%
shake256_absorb ✅ 2s 2s +0%
shake256_finalize ✅ 2s 2s +0%
shake256_squeeze ✅ 2s 2s +0%
unpack_sk_s1hat ✅ 2s 1s +100%
unpack_sk_s2hat ✅ 2s 3s -33%
unpack_sk_t0hat ✅ 2s 1s +100%
yvec_init ✅ 2s 2s +0%
mld_keccakf1600_extract_bytes ✅ 1s 2s -50%
mld_value_barrier_u8 ✅ 1s 3s -67%
pack_sig_z ✅ 1s 2s -50%
pointwise_native_aarch64 ✅ 1s 3s -67%
poly_invntt_tomont ✅ 1s 4s -75%
poly_pointwise_montgomery ✅ 1s 1s +0%
polyvecl_pack_eta ✅ 1s 2s -50%
polyz_unpack_c ✅ 1s 5s -80%
shake256_init ✅ 1s 3s -67%
unpack_pk_t1 ✅ 1s 1s +0%

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@mkannwischer @oqs-bot