Security Level | AES/SHA3 hardness | PQC Algorithm |
---|---|---|
1 | Find optimal key in AES-128 | Kyber512, Falcon512, Sphincs+SHA256 128f/s |
2 | Find optimal collision in SHA3-256 | Dilithium2 |
3 | Find optimal key in AES-192 | Kyber768, Dilithium3, Sphincs+SHA256 192f/s |
4 | Find optimal collision in SHA3-384 | No algorithm tested at this level |
5 | Find optimal key in AES-256 | Kyber1024, Falcon1024, Dilithium5, Sphincs+SHA256 256f/s |
Security Level | Algorithm | Public key size (in bytes) | Private key size (in bytes) | Ciphertext/Signature size (in bytes) |
---|---|---|---|---|
1 | Kyber512 | 800 | 1632 | 768 |
2 | Dilithium2 | 1312 | 2528 | 2420 |
3 | Kyber768 | 1184 | 2400 | 1088 |
5 | Falcon1024 | 1793 | 2305 | 1330 |
5 | Kyber1024 | 1568 | 3168 | 1588 |
PQ Security Level | Algorithm | Public key size (in bytes) | Private key size (in bytes) | Ciphertext size (in bytes) |
---|---|---|---|---|
1 | Kyber512 | 800 | 1632 | 768 |
0 | P256_HKDF_SHA256 | 65 | 32 | 65 |
3 | Kyber768 | 1184 | 2400 | 1088 |
0 | P521_HKDF_SHA512 | 133 | 66 | 133 |
5 | Kyber1024 | 1568 | 3168 | 1588 |
0 | X25519_HKDF_SHA256 | 32 | 32 | 32 |
PQ Security Level | Algorithm | Public key size (in bytes) | Private key size (in bytes) | Signature size (in bytes) |
---|---|---|---|---|
2 | Dilithium2 | 1312 | 2528 | 768 |
0 | RSA2048 | 256 | 256 | 256 |
3 | Dilithium3 | 1952 | 4000 | 3293 |
0 | P256 | 64 | 32 | 64 |
5 | Falcon1024 | 1793 | 2305 | 1330 |