Performance

Software performance

Timing data of NTRU-HPS for C optimized code (cycles)
Security Level(q,n)KeyGenEncapsDecaps
I(128 bits) (2048, 677)2,347,326124,309213,716
III(192 bits) (4096, 821)3,104,995149,723251,573
V(256 bits) (4096, 1229)5,801,628198,734270,030
Timing data of NTRU-HPS for C optimized code with AVX2 instructions (cycles)
Security Level(q,n)KeyGenEncapsDecaps
I(128 bits) (2048, 677)178,64324,97638,705
III(192 bits) (4096, 821)246,64028,47050,780
V(256 bits) (4096, 1229)---
Timing data of NTRU-HRSS for C optimized code (cycles)
Security Level(n)KeyGenEncapsDecaps
I(128 bits) (701)2,419,90281,282225,271
V(256 bits) (1373)7,297,129140,255398,237
Timing data of NTRU-HRSS for C optimized code with AVX2 instructions (cycles)
Security Level(n)KeyGenEncapsDecaps
I(128 bits) (701)176,70719,75540,450
V(256 bits) (1373)---

Hardware performance