PK | SK | W | H=5 | H=10 | H=15 | H=20 | H=25 |
---|---|---|---|---|---|---|---|
56 | 52 | 1 | 8684 | 8844 | 9004 | 9164 | 9324 |
56 | 52 | 2 | 4460 | 4620 | 4780 | 4940 | 5100 |
56 | 52 | 4 | 2348 | 2508 | 2668 | 2828 | 2988 |
56 | 52 | 8 | 1292 | 1452 | 1612 | 1772 | 1932 |
PQ Security Level | AES/SHA(2/3) hardness | PQC Algorithm |
---|---|---|
1 | AES-128 (exhaustive key recovery) | ML-KEM-512, FN-DSA-512, SLH-DSA-SHA2/SHAKE-128f/s |
2 | SHA-256/SHA3-256 (collision search) | ML-DSA-44 |
3 | AES-192 (exhaustive key recovery) | ML-KEM-768, ML-DSA-65, SLH-DSA-SHA2/SHAKE-192f/s |
4 | SHA-384/SHA3-384 (collision search) | No algorithm tested at this level |
5 | AES-256 (exhaustive key recovery) | ML-KEM-1024, FN-DSA-1024, ML-DSA-87, SLH-DSA-SHA2/SHAKE-256f/s |
PQ Security Level | Algorithm | Public key size (in bytes) | Private key size (in bytes) | Signature size (in bytes) |
---|---|---|---|---|
1 | SLH-DSA-{SHA2,SHAKE}-128f | 32 | 64 | 17088 |
1 | SLH-DSA-{SHA2,SHAKE}-128s | 32 | 64 | 7856 |
3 | SLH-DSA-{SHA2,SHAKE}-192f | 48 | 96 | 35664 |
3 | SLH-DSA-{SHA2,SHAKE}-192s | 48 | 96 | 16224 |
5 | SLH-DSA-{SHA2,SHAKE}-256f | 64 | 128 | 49856 |
5 | SLH-DSA-{SHA2,SHAKE}-256s | 64 | 128 | 29792 |
PQ Security Level | Algorithm | Public key size (in bytes) | Private key size (in bytes) | Ciphertext/Signature size (in bytes) |
---|---|---|---|---|
1 | ML-KEM-512 | 800 | 1632 | 768 |
1 | FN-DSA-512 | 897 | 1281 | 666 |
2 | ML-DSA-44 | 1312 | 2528 | 2420 |
3 | ML-KEM-768 | 1184 | 2400 | 1088 |
3 | ML-DSA-65 | 1952 | 4000 | 3309 |
5 | FN-DSA-1024 | 1793 | 2305 | 1280 |
5 | ML-KEM-1024 | 1568 | 3168 | 1588 |
5 | ML-DSA-87 | 2592 | 4864 | 4627 |
PQ Security Level | Algorithm | Public key size (in bytes) | Private key size (in bytes) | Ciphertext size (in bytes) |
---|---|---|---|---|
Traditional | P256_HKDF_SHA-256 | 65 | 32 | 65 |
Traditional | P521_HKDF_SHA-512 | 133 | 66 | 133 |
Traditional | X25519_HKDF_SHA-256 | 32 | 32 | 32 |
1 | ML-KEM-512 | 800 | 1632 | 768 |
3 | ML-KEM-768 | 1184 | 2400 | 1088 |
5 | ML-KEM-1024 | 1568 | 3168 | 1568 |
PQ Security Level | Algorithm | Public key size (in bytes) | Private key size (in bytes) | Signature size (in bytes) |
---|---|---|---|---|
Traditional | RSA2048 | 256 | 256 | 256 |
Traditional | P256 | 64 | 32 | 64 |
1 | FN-DSA-512 | 897 | 1281 | 666 |
2 | ML-DSA-44 | 1312 | 2528 | 768 |
3 | ML-DSA-65 | 1952 | 4000 | 3293 |
5 | FN-DSA-1024 | 1793 | 2305 | 1280 |
5 | ML-DSA-87 | 2592 | 4864 | 4627 |