PQ Security Level | AES/SHA3 hardness | PQC Algorithm |
---|---|---|
1 | Find optimal key in AES-128 | Kyber512, Falcon512, Sphincs+SHA256 128f/s |
2 | Find optimal collision in SHA3-256 | Dilithium2 |
3 | Find optimal key in AES-192 | Kyber768, Dilithium3, Sphincs+SHA256 192f/s |
4 | Find optimal collision in SHA3-384 | No algorithm tested at this level |
5 | Find optimal key in AES-256 | Kyber1024, Falcon1024, Dilithium5, Sphincs+SHA256 256f/s |
PQ Security Level | Algorithm | Public key size (in bytes) | Private key size (in bytes) | Signature size (in bytes) |
---|---|---|---|---|
1 | SPHINCS+-{SHA2,SHAKE}-128f | 32 | 64 | 17088 |
1 | SPHINCS+-{SHA2,SHAKE}-128s | 32 | 64 | 7856 |
3 | SPHINCS+-{SHA2,SHAKE}-192f | 48 | 96 | 35664 |
3 | SPHINCS+-{SHA2,SHAKE}-192s | 48 | 96 | 16224 |
5 | SPHINCS+-{SHA2,SHAKE}-256f | 64 | 128 | 49856 |
5 | SPHINCS+-{SHA2,SHAKE}-256s | 64 | 128 | 29792 |
PQ Security Level | Algorithm | Public key size (in bytes) | Private key size (in bytes) | Ciphertext/Signature size (in bytes) |
---|---|---|---|---|
1 | Kyber512 | 800 | 1632 | 768 |
1 | Falcon512 | 897 | 1281 | 666 |
2 | Dilithium2 | 1312 | 2528 | 2420 |
3 | Kyber768 | 1184 | 2400 | 1088 |
5 | Falcon1024 | 1793 | 2305 | 1280 |
5 | Kyber1024 | 1568 | 3168 | 1588 |
PQ Security Level | Algorithm | Public key size (in bytes) | Private key size (in bytes) | Ciphertext size (in bytes) |
---|---|---|---|---|
Traditional | P256_HKDF_SHA256 | 65 | 32 | 65 |
Traditional | P521_HKDF_SHA512 | 133 | 66 | 133 |
Traditional | X25519_HKDF_SHA256 | 32 | 32 | 32 |
1 | Kyber512 | 800 | 1632 | 768 |
3 | Kyber768 | 1184 | 2400 | 1088 |
5 | Kyber1024 | 1568 | 3168 | 1588 |
PQ Security Level | Algorithm | Public key size (in bytes) | Private key size (in bytes) | Signature size (in bytes) |
---|---|---|---|---|
Traditional | RSA2048 | 256 | 256 | 256 |
Traditional | P256 | 64 | 32 | 64 |
1 | Falcon512 | 897 | 1281 | 666 |
2 | Dilithium2 | 1312 | 2528 | 768 |
3 | Dilithium3 | 1952 | 4000 | 3293 |
5 | Falcon1024 | 1793 | 2305 | 1280 |