Skip to content

CI: Minimize workflow permissions and secrets - #1294

Draft
hanno-becker wants to merge 1 commit into
mainfrom
ci-least-privilege
Draft

CI: Minimize workflow permissions and secrets#1294
hanno-becker wants to merge 1 commit into
mainfrom
ci-least-privilege

Conversation

@hanno-becker

@hanno-becker hanno-becker commented Jul 17, 2026

Copy link
Copy Markdown
Contributor

The goal of this commit is to minimize the permissions granted to CI tasks without impacting their current functionality.

  • Remove id-token: write from those jobs that do interface with EC2: base, lint-markdown, nix, riscv, oqs/awslc integration, ct-test, baremetal, zephyr, isabelle, awslc-main. Keep it in for: ci, cbmc, slothy, pavona, scorecard.
  • Replace broad "secrets: inherit" with an explicit AWS_GITHUB_TOKEN passing.
  • Narrow the PR/merge-queue nix job to actions: read; stick with actions: write only on the main-only nix_cache path that saves the cache.

While at it, we also add tag comments to the pinned versions of donatj/symlink-check-action and zephyr actions/checkout.

@hanno-becker
hanno-becker requested a review from a team as a code owner July 17, 2026 05:55
@hanno-becker
hanno-becker marked this pull request as draft July 17, 2026 06:04
@hanno-becker
CI: Minimize workflow permissions and secrets
dc05a79 
The goal of this commit is to minimize the permissions granted to CI
tasks without impacting their current functionality.

- Remove `id-token: write` from jobs that do not use AWS OIDC:
  base, lint-markdown, nix, riscv, libOQS/AWS-LC integrations,
  constant-time, baremetal, Zephyr, Isabelle, and AWS-LC main.
  Keep it for CI, CBMC, SLOTHY, Pavona, and Scorecard.
- Replace broad `secrets: inherit` forwarding with explicit
  `AWS_GITHUB_TOKEN` forwarding through workflows that manage EC2
  runners.
- Isolate Nix cache writes in the main-only cache workflow. PR and
  merge-queue checks use `actions: read`; only cache builds receive
  `actions: write`.
- Remove the unused `pull-requests: write` permission from CBMC. Its
  reporting uses the explicitly forwarded token.

While at it, add a tag comment to the pinned version of
donatj/symlink-check-action.

Signed-off-by: Hanno Becker <beckphan@amazon.co.uk>
@oqs-bot

oqs-bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

CBMC Results (ML-DSA-87, REDUCE-RAM)

⚠️ Attention Required

Proof Status Current Previous Change
**TOTAL** ⚠️ 1975s 1436s +37.5%
compute_pack_t0_t1 ⚠️ 40s 12s +233%
mld_attempt_signature_generation ⚠️ 212s 34s +524%
rej_uniform ⚠️ 22s 7s +214%
sign_keypair_internal ⚠️ 20s 6s +233%
sign_pk_from_sk ⚠️ 52s 6s +767%
sign_verify_internal ⚠️ 258s 47s +449%
Full Results (210 proofs)
Proof Status Current Previous Change
**TOTAL** ⚠️ 1975s 1436s +37.5%
sign_verify_internal ⚠️ 258s 47s +449%
mld_attempt_signature_generation ⚠️ 212s 34s +524%
polyvec_matrix_pointwise_montgomery_yvec ✅ 190s 196s -3%
poly_pointwise_montgomery_c ✅ 113s 125s -10%
mld_invntt_layer ✅ 98s 111s -12%
sign_pk_from_sk ⚠️ 52s 6s +767%
mld_ntt_layer ✅ 43s 44s -2%
compute_pack_t0_t1 ⚠️ 40s 12s +233%
fqmul ✅ 40s 39s +3%
polyvecl_chknorm ✅ 35s 38s -8%
keccakf1600x4_permute_native ✅ 23s 25s -8%
rej_uniform ⚠️ 22s 7s +214%
mld_ntt_butterfly_block ✅ 20s 23s -13%
poly_ntt_c ✅ 20s 19s +5%
sign_keypair_internal ⚠️ 20s 6s +233%
sig_unpack_hints ✅ 18s 4s +350%
sign_signature_internal ✅ 16s 3s +433%
polyvec_matrix_pointwise_montgomery_row ✅ 14s 13s +8%
rej_uniform_native_x86_64 ✅ 14s - new
poly_uniform_eta_4x ✅ 13s 12s +8%
polyeta_unpack ✅ 13s 13s +0%
polyt0_unpack ✅ 13s 14s -7%
rej_uniform_c ✅ 13s 18s -28%
poly_chknorm_c ✅ 12s 13s -8%
polyveck_decompose ✅ 11s 12s -8%
keccak_absorb_once_x4 ✅ 9s 8s +12%
mld_check_pct ✅ 9s 15s -40%
mld_sample_s1_s2 ✅ 9s 8s +12%
poly_invntt_tomont_c ✅ 9s 9s +0%
polyveck_caddq ✅ 9s 8s +12%
polyveck_chknorm ✅ 9s 9s +0%
polyvecl_ntt ✅ 9s 8s +12%
sign_keypair ✅ 9s 4s +125%
pointwise_acc_native_x86_64 ✅ 8s 8s +0%
poly_add ✅ 8s 8s +0%
poly_reduce ✅ 8s 4s +100%
mld_sample_s1_s2_serial ✅ 7s 6s +17%
polyveck_reduce ✅ 7s 6s +17%
polyz_unpack_c ✅ 7s 7s +0%
keccak_absorb ✅ 6s 4s +50%
mld_keccakf1600_permute_c ✅ 6s 8s -25%
pointwise_acc_native_aarch64 ✅ 6s 5s +20%
poly_decompose_32_native_aarch64 ✅ 6s 3s +100%
poly_decompose_c ✅ 6s 6s +0%
sign_signature ✅ 6s 4s +50%
sign_verify_pre_hash_shake256 ✅ 6s 7s -14%
sk_s1hat_get_poly ✅ 6s 3s +100%
intt_native_aarch64 ✅ 5s 4s +25%
keccak_squeezeblocks_x4 ✅ 5s 4s +25%
mld_compute_pack_z ✅ 5s 6s -17%
mld_prepare_domain_separation_prefix ✅ 5s 3s +67%
pointwise_native_aarch64 ✅ 5s 4s +25%
poly_challenge ✅ 5s 4s +25%
poly_pointwise_montgomery_native ✅ 5s 3s +67%
poly_uniform ✅ 5s 4s +25%
poly_use_hint_native ✅ 5s 1s +400%
polyveck_unpack_eta ✅ 5s 3s +67%
polyvecl_uniform_gamma1 ✅ 5s 3s +67%
polyz_unpack_native ✅ 5s 1s +400%
rej_eta_native ✅ 5s 4s +25%
rej_uniform_native ✅ 5s 5s +0%
shake128x4_squeezeblocks ✅ 5s 1s +400%
sign_signature_pre_hash_internal ✅ 5s 2s +150%
sign_verify_extmu ✅ 5s 4s +25%
sign_verify_pre_hash_internal ✅ 5s 3s +67%
use_hint ✅ 5s 3s +67%
intt_native_x86_64 ✅ 4s 4s +0%
keccakf1600_permute ✅ 4s 2s +100%
mld_h ✅ 4s 2s +100%
mld_keccakf1600x4_xor_bytes_c ✅ 4s 1s +300%
mld_sign_resume ✅ 4s - new
pack_sig_c ✅ 4s 2s +100%
poly_caddq ✅ 4s 5s -20%
poly_caddq_c ✅ 4s 3s +33%
poly_decompose_native_x86_64 ✅ 4s 3s +33%
poly_ntt_native ✅ 4s 4s +0%
poly_pointwise_montgomery ✅ 4s 3s +33%
poly_power2round ✅ 4s 7s -43%
poly_uniform_4x ✅ 4s 3s +33%
poly_uniform_gamma1_4x ✅ 4s 3s +33%
polyeta_pack ✅ 4s 3s +33%
polyt0_pack ✅ 4s 3s +33%
polyt1_pack ✅ 4s 5s -20%
polyt1_unpack ✅ 4s 3s +33%
polyveck_invntt_tomont ✅ 4s 4s +0%
polyvecl_uniform_gamma1_serial ✅ 4s 2s +100%
polyvecl_unpack_eta ✅ 4s 3s +33%
polyz_pack ✅ 4s 4s +0%
rej_eta_c ✅ 4s 4s +0%
rej_uniform_native_aarch64 ✅ 4s 3s +33%
shake256_absorb ✅ 4s 3s +33%
shake256_finalize ✅ 4s 3s +33%
sign_signature_extmu ✅ 4s 4s +0%
sign_verify ✅ 4s 2s +100%
unpack_pk_t1 ✅ 4s 2s +100%
caddq ✅ 3s 3s +0%
decompose ✅ 3s 2s +50%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid ✅ 3s 2s +50%
keccak_f1600_x4_native_avx2 ✅ 3s 3s +0%
keccakf1600_extract_bytes (big endian) ✅ 3s 3s +0%
keccakf1600_xor_bytes ✅ 3s 1s +200%
keccakf1600_xor_bytes (big endian) ✅ 3s 2s +50%
keccakf1600x4_extract_bytes ✅ 3s 1s +200%
keccakf1600x4_extract_bytes_native ✅ 3s 4s -25%
keccakf1600x4_permute ✅ 3s 2s +50%
keccakf1600x4_xor_bytes_native ✅ 3s 2s +50%
mld_ct_get_optblocker_u32 ✅ 3s 2s +50%
mld_ct_get_optblocker_u8 ✅ 3s 3s +0%
mld_keccakf1600_extract_bytes ✅ 3s 1s +200%
mld_keccakf1600x4_extract_bytes_c ✅ 3s 3s +0%
mld_polymat_expand_entry ✅ 3s 4s -25%
montgomery_reduce ✅ 3s 2s +50%
ntt_native_aarch64 ✅ 3s 4s -25%
ntt_native_x86_64 ✅ 3s 2s +50%
nttunpack_native_x86_64 ✅ 3s 3s +0%
pack_sig_h ✅ 3s 3s +0%
pack_sk_rho_key_tr_s2 ✅ 3s 2s +50%
poly_caddq_native ✅ 3s 3s +0%
poly_caddq_native_x86_64 ✅ 3s 3s +0%
poly_chknorm ✅ 3s 4s -25%
poly_chknorm_native ✅ 3s 1s +200%
poly_chknorm_native_aarch64 ✅ 3s 5s -40%
poly_chknorm_native_x86_64 ✅ 3s 2s +50%
poly_invntt_tomont_native ✅ 3s 2s +50%
poly_permute_bitrev_to_custom_optional ✅ 3s 2s +50%
poly_permute_bitrev_to_custom_optional_native ✅ 3s 3s +0%
poly_shiftl ✅ 3s 4s -25%
poly_uniform_gamma1 ✅ 3s 3s +0%
poly_use_hint ✅ 3s 4s -25%
poly_use_hint_native_aarch64 ✅ 3s 3s +0%
poly_use_hint_native_x86_64 ✅ 3s - new
polyveck_pack_w1 ✅ 3s 3s +0%
polyvecl_pack_eta ✅ 3s 2s +50%
polyvecl_pointwise_acc_montgomery ✅ 3s 2s +50%
polyvecl_pointwise_acc_montgomery_c ✅ 3s 2s +50%
polyvecl_unpack_z ✅ 3s 3s +0%
polyw1_pack_32 ✅ 3s 3s +0%
polyz_unpack ✅ 3s 3s +0%
polyz_unpack_19_native_aarch64 ✅ 3s 5s -40%
polyz_unpack_native_x86_64 ✅ 3s 3s +0%
power2round ✅ 3s 3s +0%
reduce32 ✅ 3s 3s +0%
rej_uniform_eta_native_aarch64 ✅ 3s 3s +0%
rej_uniform_eta_native_x86_64 ✅ 3s - new
shake128_absorb ✅ 3s 2s +50%
shake256 ✅ 3s 3s +0%
shake256_init ✅ 3s 3s +0%
shake256_squeeze ✅ 3s 2s +50%
shake256x4_absorb_once ✅ 3s 5s -40%
shake256x4_squeezeblocks ✅ 3s 4s -25%
sign_signature_pre_hash_shake256 ✅ 3s 3s +0%
sk_t0hat_get_poly ✅ 3s 3s +0%
unpack_sk ✅ 3s 4s -25%
unpack_sk_s1hat ✅ 3s 3s +0%
unpack_sk_s2hat ✅ 3s 3s +0%
unpack_sk_t0hat ✅ 3s 4s -25%
yvec_get_poly ✅ 3s 2s +50%
fqscale ✅ 2s 1s +100%
keccak_f1600_x1_native_aarch64 ✅ 2s 2s +0%
keccak_f1600_x1_native_aarch64_v84a ✅ 2s 2s +0%
keccak_f1600_x4_native_aarch64_v84a ✅ 2s 1s +100%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid ✅ 2s 2s +0%
keccak_init ✅ 2s 1s +100%
mld_ct_abs_i32 ✅ 2s 1s +100%
mld_ct_cmask_nonzero_u32 ✅ 2s 5s -60%
mld_ct_cmask_nonzero_u8 ✅ 2s 2s +0%
mld_ct_memcmp ✅ 2s 1s +100%
mld_sign_finish ✅ 2s - new
mld_value_barrier_i64 ✅ 2s 2s +0%
pack_sig_z ✅ 2s 3s -33%
pack_sk_s1 ✅ 2s 2s +0%
pointwise_native_x86_64 ✅ 2s 5s -60%
poly_caddq_native_aarch64 ✅ 2s 3s -33%
poly_decompose ✅ 2s 2s +0%
poly_decompose_88_native_aarch64 ✅ 2s 2s +0%
poly_decompose_native ✅ 2s 2s +0%
poly_invntt_tomont ✅ 2s 4s -50%
poly_ntt ✅ 2s 2s +0%
poly_sub ✅ 2s 5s -60%
poly_uniform_eta ✅ 2s 5s -60%
poly_use_hint_c ✅ 2s 4s -50%
polyvec_matrix_expand ✅ 2s 3s -33%
polyvec_matrix_expand_serial ✅ 2s 3s -33%
polyveck_ntt ✅ 2s 3s -33%
polyvecl_pointwise_acc_montgomery_native ✅ 2s 2s +0%
polyw1_pack_88 ✅ 2s 2s +0%
rej_eta ✅ 2s 2s +0%
shake128_finalize ✅ 2s 2s +0%
shake128_init ✅ 2s 2s +0%
shake128x4_absorb_once ✅ 2s 4s -50%
shake256_release ✅ 2s 5s -60%
sk_s2hat_get_poly ✅ 2s 2s +0%
sys_check_capability ✅ 2s 2s +0%
yvec_init ✅ 2s 4s -50%
keccak_finalize ✅ 1s 1s +0%
keccak_squeeze ✅ 1s 5s -80%
keccakf1600_permute_native ✅ 1s 3s -67%
keccakf1600x4_xor_bytes ✅ 1s 1s +0%
make_hint ✅ 1s 2s -50%
mld_ct_cmask_neg_i32 ✅ 1s 2s -50%
mld_ct_get_optblocker_i64 ✅ 1s 2s -50%
mld_ct_sel_int32 ✅ 1s 2s -50%
mld_sign_attempt ✅ 1s - new
mld_value_barrier_u32 ✅ 1s 3s -67%
mld_value_barrier_u8 ✅ 1s 2s -50%
polyveck_pack_eta ✅ 1s 5s -80%
polyw1_pack ✅ 1s 2s -50%
polyz_unpack_17_native_aarch64 ✅ 1s 4s -75%
shake128_release ✅ 1s 3s -67%
shake128_squeeze ✅ 1s 1s +0%

@oqs-bot

oqs-bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

CBMC Results (ML-DSA-44, REDUCE-RAM)

⚠️ Attention Required

Proof Status Current Previous Change
**TOTAL** ⚠️ 2027s 1364s +48.6%
compute_pack_t0_t1 ⚠️ 42s 12s +250%
mld_attempt_signature_generation ⚠️ 194s 19s +921%
rej_uniform ⚠️ 21s 8s +162%
sig_unpack_hints ⚠️ 41s 2s +1950%
sign_pk_from_sk ⚠️ 42s 5s +740%
sign_verify_internal ⚠️ 281s 49s +473%
Full Results (210 proofs)
Proof Status Current Previous Change
**TOTAL** ⚠️ 2027s 1364s +48.6%
sign_verify_internal ⚠️ 281s 49s +473%
mld_attempt_signature_generation ⚠️ 194s 19s +921%
polyvec_matrix_pointwise_montgomery_yvec ✅ 158s 149s +6%
poly_pointwise_montgomery_c ✅ 132s 112s +18%
mld_invntt_layer ✅ 115s 105s +10%
polyveck_chknorm ✅ 69s 67s +3%
fqmul ✅ 43s 39s +10%
compute_pack_t0_t1 ⚠️ 42s 12s +250%
mld_ntt_layer ✅ 42s 41s +2%
sign_pk_from_sk ⚠️ 42s 5s +740%
sig_unpack_hints ⚠️ 41s 2s +1950%
mld_ntt_butterfly_block ✅ 23s 23s +0%
keccakf1600x4_permute_native ✅ 22s 22s +0%
poly_ntt_c ✅ 22s 21s +5%
rej_uniform ⚠️ 21s 8s +162%
polyeta_unpack ✅ 17s 14s +21%
sign_keypair_internal ✅ 17s 4s +325%
sign_signature_internal ✅ 17s 4s +325%
rej_uniform_c ✅ 16s 16s +0%
polyt0_unpack ✅ 14s 12s +17%
rej_uniform_native_x86_64 ✅ 14s - new
polyvecl_chknorm ✅ 13s 11s +18%
poly_chknorm_c ✅ 12s 11s +9%
poly_invntt_tomont_c ✅ 12s 11s +9%
poly_uniform_eta_4x ✅ 11s 12s -8%
polyz_unpack_c ✅ 11s 8s +38%
mld_check_pct ✅ 9s 15s -40%
keccak_absorb_once_x4 ✅ 8s 8s +0%
polyveck_decompose ✅ 8s 7s +14%
sign_keypair ✅ 8s 5s +60%
poly_invntt_tomont_native ✅ 7s 3s +133%
rej_eta_native ✅ 7s 3s +133%
sign_signature_pre_hash_shake256 ✅ 7s 4s +75%
mld_compute_pack_z ✅ 6s 6s +0%
mld_keccakf1600_permute_c ✅ 6s 7s -14%
mld_sample_s1_s2_serial ✅ 6s 4s +50%
mld_sign_attempt ✅ 6s - new
pointwise_acc_native_x86_64 ✅ 6s 4s +50%
poly_reduce ✅ 6s 4s +50%
rej_uniform_eta_native_aarch64 ✅ 6s 3s +100%
sign_verify_pre_hash_shake256 ✅ 6s 5s +20%
keccak_absorb ✅ 5s 3s +67%
keccakf1600x4_extract_bytes ✅ 5s 2s +150%
mld_keccakf1600_extract_bytes ✅ 5s 2s +150%
montgomery_reduce ✅ 5s 2s +150%
ntt_native_aarch64 ✅ 5s 4s +25%
pack_sig_c ✅ 5s 5s +0%
pack_sk_rho_key_tr_s2 ✅ 5s 5s +0%
pointwise_acc_native_aarch64 ✅ 5s 6s -17%
pointwise_native_aarch64 ✅ 5s 2s +150%
pointwise_native_x86_64 ✅ 5s 4s +25%
poly_add ✅ 5s 7s -29%
poly_caddq_native_x86_64 ✅ 5s 4s +25%
poly_decompose_c ✅ 5s 5s +0%
poly_ntt_native ✅ 5s 3s +67%
poly_permute_bitrev_to_custom_optional ✅ 5s 5s +0%
poly_power2round ✅ 5s 4s +25%
poly_use_hint_native ✅ 5s 3s +67%
poly_use_hint_native_x86_64 ✅ 5s - new
polyvec_matrix_pointwise_montgomery_row ✅ 5s 6s -17%
polyveck_caddq ✅ 5s 3s +67%
polyveck_reduce ✅ 5s 4s +25%
polyvecl_unpack_z ✅ 5s 3s +67%
polyz_unpack_native_x86_64 ✅ 5s 3s +67%
rej_uniform_native ✅ 5s 5s +0%
sign_signature_extmu ✅ 5s 4s +25%
sign_verify_pre_hash_internal ✅ 5s 5s +0%
yvec_init ✅ 5s 1s +400%
intt_native_x86_64 ✅ 4s 2s +100%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid ✅ 4s 2s +100%
keccak_squeezeblocks_x4 ✅ 4s 3s +33%
keccakf1600x4_xor_bytes ✅ 4s 3s +33%
mld_ct_sel_int32 ✅ 4s 3s +33%
mld_h ✅ 4s 4s +0%
mld_sample_s1_s2 ✅ 4s 1s +300%
ntt_native_x86_64 ✅ 4s 3s +33%
pack_sig_h ✅ 4s 4s +0%
pack_sig_z ✅ 4s 2s +100%
pack_sk_s1 ✅ 4s 3s +33%
poly_caddq ✅ 4s 4s +0%
poly_caddq_c ✅ 4s 3s +33%
poly_caddq_native ✅ 4s 3s +33%
poly_challenge ✅ 4s 6s -33%
poly_chknorm_native ✅ 4s 4s +0%
poly_chknorm_native_x86_64 ✅ 4s 2s +100%
poly_invntt_tomont ✅ 4s 2s +100%
poly_ntt ✅ 4s 3s +33%
poly_permute_bitrev_to_custom_optional_native ✅ 4s 3s +33%
poly_uniform_eta ✅ 4s 2s +100%
poly_use_hint_native_aarch64 ✅ 4s 3s +33%
polyvec_matrix_expand ✅ 4s 3s +33%
polyvecl_ntt ✅ 4s 3s +33%
polyvecl_uniform_gamma1_serial ✅ 4s 2s +100%
polyw1_pack_88 ✅ 4s 2s +100%
polyz_unpack ✅ 4s 3s +33%
rej_eta_c ✅ 4s 4s +0%
rej_uniform_native_aarch64 ✅ 4s 3s +33%
sign_signature_pre_hash_internal ✅ 4s 4s +0%
sign_verify ✅ 4s 4s +0%
sk_s1hat_get_poly ✅ 4s 2s +100%
sk_t0hat_get_poly ✅ 4s 1s +300%
use_hint ✅ 4s 2s +100%
intt_native_aarch64 ✅ 3s 3s +0%
keccak_squeeze ✅ 3s 2s +50%
keccakf1600_extract_bytes (big endian) ✅ 3s 4s -25%
keccakf1600_permute_native ✅ 3s 3s +0%
keccakf1600_xor_bytes ✅ 3s 3s +0%
make_hint ✅ 3s 3s +0%
mld_ct_abs_i32 ✅ 3s 3s +0%
mld_ct_cmask_neg_i32 ✅ 3s 2s +50%
mld_ct_get_optblocker_u32 ✅ 3s 2s +50%
mld_ct_get_optblocker_u8 ✅ 3s 2s +50%
mld_keccakf1600x4_xor_bytes_c ✅ 3s 4s -25%
mld_polymat_expand_entry ✅ 3s 2s +50%
mld_value_barrier_i64 ✅ 3s 3s +0%
poly_caddq_native_aarch64 ✅ 3s 3s +0%
poly_chknorm_native_aarch64 ✅ 3s 2s +50%
poly_decompose ✅ 3s 2s +50%
poly_decompose_32_native_aarch64 ✅ 3s 4s -25%
poly_shiftl ✅ 3s 4s -25%
poly_uniform ✅ 3s 3s +0%
poly_uniform_4x ✅ 3s 3s +0%
poly_uniform_gamma1_4x ✅ 3s 5s -40%
poly_use_hint ✅ 3s 2s +50%
polyeta_pack ✅ 3s 3s +0%
polyt1_unpack ✅ 3s 2s +50%
polyvec_matrix_expand_serial ✅ 3s 4s -25%
polyveck_invntt_tomont ✅ 3s 5s -40%
polyveck_pack_eta ✅ 3s 4s -25%
polyveck_unpack_eta ✅ 3s 2s +50%
polyvecl_pack_eta ✅ 3s 2s +50%
polyvecl_pointwise_acc_montgomery ✅ 3s 3s +0%
polyvecl_pointwise_acc_montgomery_c ✅ 3s 4s -25%
polyvecl_uniform_gamma1 ✅ 3s 2s +50%
polyvecl_unpack_eta ✅ 3s 4s -25%
polyz_unpack_native ✅ 3s 3s +0%
reduce32 ✅ 3s 3s +0%
rej_eta ✅ 3s 5s -40%
rej_uniform_eta_native_x86_64 ✅ 3s - new
shake128_init ✅ 3s 2s +50%
shake256_finalize ✅ 3s 2s +50%
shake256_init ✅ 3s 4s -25%
sign_signature ✅ 3s 6s -50%
sign_verify_extmu ✅ 3s 5s -40%
unpack_pk_t1 ✅ 3s 3s +0%
unpack_sk ✅ 3s 3s +0%
unpack_sk_s2hat ✅ 3s 4s -25%
unpack_sk_t0hat ✅ 3s 2s +50%
caddq ✅ 2s 6s -67%
decompose ✅ 2s 3s -33%
fqscale ✅ 2s 2s +0%
keccak_f1600_x1_native_aarch64 ✅ 2s 3s -33%
keccak_f1600_x1_native_aarch64_v84a ✅ 2s 2s +0%
keccak_f1600_x4_native_aarch64_v84a ✅ 2s 3s -33%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid ✅ 2s 3s -33%
keccak_init ✅ 2s 3s -33%
keccakf1600_permute ✅ 2s 2s +0%
keccakf1600_xor_bytes (big endian) ✅ 2s 6s -67%
keccakf1600x4_permute ✅ 2s 4s -50%
keccakf1600x4_xor_bytes_native ✅ 2s 5s -60%
mld_ct_cmask_nonzero_u32 ✅ 2s 3s -33%
mld_ct_memcmp ✅ 2s 1s +100%
mld_prepare_domain_separation_prefix ✅ 2s 3s -33%
mld_sign_finish ✅ 2s - new
mld_sign_resume ✅ 2s - new
mld_value_barrier_u32 ✅ 2s 1s +100%
mld_value_barrier_u8 ✅ 2s 4s -50%
nttunpack_native_x86_64 ✅ 2s 4s -50%
poly_chknorm ✅ 2s 3s -33%
poly_decompose_88_native_aarch64 ✅ 2s 3s -33%
poly_decompose_native ✅ 2s 2s +0%
poly_decompose_native_x86_64 ✅ 2s 2s +0%
poly_pointwise_montgomery ✅ 2s 3s -33%
poly_pointwise_montgomery_native ✅ 2s 2s +0%
poly_sub ✅ 2s 3s -33%
poly_uniform_gamma1 ✅ 2s 3s -33%
poly_use_hint_c ✅ 2s 5s -60%
polyt0_pack ✅ 2s 4s -50%
polyt1_pack ✅ 2s 3s -33%
polyveck_ntt ✅ 2s 2s +0%
polyveck_pack_w1 ✅ 2s 3s -33%
polyvecl_pointwise_acc_montgomery_native ✅ 2s 3s -33%
polyw1_pack ✅ 2s 4s -50%
polyw1_pack_32 ✅ 2s 3s -33%
polyz_pack ✅ 2s 2s +0%
polyz_unpack_17_native_aarch64 ✅ 2s 2s +0%
polyz_unpack_19_native_aarch64 ✅ 2s 4s -50%
power2round ✅ 2s 2s +0%
shake128_absorb ✅ 2s 3s -33%
shake128_release ✅ 2s 2s +0%
shake128x4_absorb_once ✅ 2s 2s +0%
shake128x4_squeezeblocks ✅ 2s 2s +0%
shake256 ✅ 2s 1s +100%
shake256_absorb ✅ 2s 2s +0%
shake256_release ✅ 2s 1s +100%
shake256_squeeze ✅ 2s 2s +0%
shake256x4_squeezeblocks ✅ 2s 2s +0%
sk_s2hat_get_poly ✅ 2s 5s -60%
sys_check_capability ✅ 2s 2s +0%
unpack_sk_s1hat ✅ 2s 3s -33%
yvec_get_poly ✅ 2s 3s -33%
keccak_f1600_x4_native_avx2 ✅ 1s 2s -50%
keccak_finalize ✅ 1s 2s -50%
keccakf1600x4_extract_bytes_native ✅ 1s 4s -75%
mld_ct_cmask_nonzero_u8 ✅ 1s 2s -50%
mld_ct_get_optblocker_i64 ✅ 1s 4s -75%
mld_keccakf1600x4_extract_bytes_c ✅ 1s 4s -75%
shake128_finalize ✅ 1s 3s -67%
shake128_squeeze ✅ 1s 2s -50%
shake256x4_absorb_once ✅ 1s 1s +0%

@oqs-bot

oqs-bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

CBMC Results (ML-DSA-44)

⚠️ Attention Required

Proof Status Current Previous Change
**TOTAL** ⚠️ 2251s 1514s +48.7%
compute_pack_t0_t1 ⚠️ 103s 50s +106%
mld_attempt_signature_generation ⚠️ 346s 58s +497%
sig_unpack_hints ⚠️ 42s 2s +2000%
sign_pk_from_sk ⚠️ 40s 5s +700%
sign_signature_internal ⚠️ 72s 26s +177%
sign_verify_internal ⚠️ 283s 114s +148%
Full Results (210 proofs)
Proof Status Current Previous Change
**TOTAL** ⚠️ 2251s 1514s +48.7%
mld_attempt_signature_generation ⚠️ 346s 58s +497%
sign_verify_internal ⚠️ 283s 114s +148%
polyvecl_pointwise_acc_montgomery_c ✅ 147s 131s +12%
poly_pointwise_montgomery_c ✅ 132s 114s +16%
mld_invntt_layer ✅ 112s 107s +5%
compute_pack_t0_t1 ⚠️ 103s 50s +106%
sign_signature_internal ⚠️ 72s 26s +177%
mld_ntt_layer ✅ 44s 42s +5%
sig_unpack_hints ⚠️ 42s 2s +2000%
fqmul ✅ 41s 39s +5%
sign_pk_from_sk ⚠️ 40s 5s +700%
polyvec_matrix_expand ✅ 28s 28s +0%
mld_ntt_butterfly_block ✅ 24s 23s +4%
keccakf1600x4_permute_native ✅ 22s 22s +0%
poly_ntt_c ✅ 19s 19s +0%
sign_keypair_internal ✅ 18s 4s +350%
polyeta_unpack ✅ 17s 14s +21%
poly_chknorm_c ✅ 16s 17s -6%
polyt0_unpack ✅ 16s 15s +7%
polyvec_matrix_pointwise_montgomery_yvec ✅ 16s 15s +7%
rej_uniform_native_x86_64 ✅ 15s - new
rej_uniform ✅ 14s 18s -22%
rej_uniform_c ✅ 14s 15s -7%
poly_uniform_eta_4x ✅ 12s 11s +9%
poly_invntt_tomont_c ✅ 11s 11s +0%
poly_uniform_4x ✅ 11s 14s -21%
polyvecl_chknorm ✅ 10s 10s +0%
mld_check_pct ✅ 9s 14s -36%
polyz_unpack_c ✅ 9s 11s -18%
pointwise_acc_native_x86_64 ✅ 8s 7s +14%
polyvec_matrix_expand_serial ✅ 8s 8s +0%
keccak_absorb_once_x4 ✅ 7s 9s -22%
keccak_squeezeblocks_x4 ✅ 7s 4s +75%
mld_compute_pack_z ✅ 7s 7s +0%
poly_uniform_gamma1_4x ✅ 7s 5s +40%
sign_keypair ✅ 7s 4s +75%
sign_verify_extmu ✅ 7s 3s +133%
keccak_absorb ✅ 6s 5s +20%
mld_keccakf1600_permute_c ✅ 6s 8s -25%
poly_caddq_c ✅ 6s 2s +200%
polyveck_caddq ✅ 6s 3s +100%
polyveck_chknorm ✅ 6s 5s +20%
polyveck_unpack_eta ✅ 6s 2s +200%
polyz_pack ✅ 6s 2s +200%
polyz_unpack_native_x86_64 ✅ 6s 3s +100%
rej_uniform_eta_native_aarch64 ✅ 6s 2s +200%
rej_uniform_native ✅ 6s 4s +50%
mld_h ✅ 5s 4s +25%
mld_sample_s1_s2 ✅ 5s 4s +25%
mld_sign_finish ✅ 5s - new
ntt_native_aarch64 ✅ 5s 3s +67%
pointwise_acc_native_aarch64 ✅ 5s 4s +25%
pointwise_native_aarch64 ✅ 5s 5s +0%
poly_caddq ✅ 5s 2s +150%
poly_challenge ✅ 5s 3s +67%
poly_decompose_c ✅ 5s 4s +25%
polyveck_invntt_tomont ✅ 5s 5s +0%
polyveck_ntt ✅ 5s 5s +0%
polyw1_pack ✅ 5s 3s +67%
rej_eta_c ✅ 5s 4s +25%
rej_uniform_native_aarch64 ✅ 5s 5s +0%
shake128_finalize ✅ 5s 2s +150%
shake256_init ✅ 5s 3s +67%
sign_signature_extmu ✅ 5s 4s +25%
sign_signature_pre_hash_internal ✅ 5s 6s -17%
sign_verify ✅ 5s 4s +25%
unpack_sk_t0hat ✅ 5s 3s +67%
fqscale ✅ 4s 3s +33%
intt_native_aarch64 ✅ 4s 9s -56%
keccakf1600_permute ✅ 4s 2s +100%
keccakf1600x4_xor_bytes_native ✅ 4s 3s +33%
mld_polymat_expand_entry ✅ 4s 3s +33%
mld_prepare_domain_separation_prefix ✅ 4s 4s +0%
mld_sample_s1_s2_serial ✅ 4s 3s +33%
mld_sign_attempt ✅ 4s - new
mld_sign_resume ✅ 4s - new
pack_sig_c ✅ 4s 2s +100%
poly_add ✅ 4s 7s -43%
poly_caddq_native ✅ 4s 5s -20%
poly_decompose_88_native_aarch64 ✅ 4s 4s +0%
poly_invntt_tomont ✅ 4s 4s +0%
poly_invntt_tomont_native ✅ 4s 4s +0%
poly_reduce ✅ 4s 3s +33%
poly_uniform ✅ 4s 6s -33%
poly_uniform_eta ✅ 4s 5s -20%
poly_use_hint_native ✅ 4s 4s +0%
poly_use_hint_native_x86_64 ✅ 4s - new
polyt0_pack ✅ 4s 2s +100%
polyt1_pack ✅ 4s 4s +0%
polyt1_unpack ✅ 4s 5s -20%
polyvec_matrix_pointwise_montgomery_row ✅ 4s 2s +100%
polyveck_decompose ✅ 4s 4s +0%
polyveck_pack_eta ✅ 4s 2s +100%
polyvecl_pack_eta ✅ 4s 3s +33%
polyw1_pack_32 ✅ 4s 2s +100%
polyz_unpack_17_native_aarch64 ✅ 4s 5s -20%
polyz_unpack_19_native_aarch64 ✅ 4s 5s -20%
rej_eta_native ✅ 4s 6s -33%
sign_signature ✅ 4s 3s +33%
sign_verify_pre_hash_internal ✅ 4s 3s +33%
sign_verify_pre_hash_shake256 ✅ 4s 5s -20%
sk_s2hat_get_poly ✅ 4s 2s +100%
sys_check_capability ✅ 4s 4s +0%
unpack_sk_s2hat ✅ 4s 4s +0%
yvec_init ✅ 4s 3s +33%
intt_native_x86_64 ✅ 3s 4s -25%
keccak_init ✅ 3s 3s +0%
keccakf1600_permute_native ✅ 3s 3s +0%
keccakf1600_xor_bytes (big endian) ✅ 3s 4s -25%
keccakf1600x4_extract_bytes ✅ 3s 2s +50%
keccakf1600x4_xor_bytes ✅ 3s 2s +50%
mld_ct_cmask_nonzero_u32 ✅ 3s 2s +50%
mld_keccakf1600x4_extract_bytes_c ✅ 3s 2s +50%
montgomery_reduce ✅ 3s 3s +0%
nttunpack_native_x86_64 ✅ 3s 1s +200%
pack_sig_h ✅ 3s 3s +0%
pack_sk_rho_key_tr_s2 ✅ 3s 3s +0%
poly_caddq_native_aarch64 ✅ 3s 4s -25%
poly_chknorm ✅ 3s 4s -25%
poly_chknorm_native ✅ 3s 4s -25%
poly_chknorm_native_aarch64 ✅ 3s 4s -25%
poly_chknorm_native_x86_64 ✅ 3s 2s +50%
poly_decompose_32_native_aarch64 ✅ 3s 2s +50%
poly_ntt ✅ 3s 3s +0%
poly_ntt_native ✅ 3s 5s -40%
poly_permute_bitrev_to_custom_optional_native ✅ 3s 4s -25%
poly_pointwise_montgomery ✅ 3s 3s +0%
poly_pointwise_montgomery_native ✅ 3s 2s +50%
poly_power2round ✅ 3s 4s -25%
poly_uniform_gamma1 ✅ 3s 4s -25%
poly_use_hint ✅ 3s 4s -25%
poly_use_hint_c ✅ 3s 3s +0%
polyeta_pack ✅ 3s 3s +0%
polyveck_reduce ✅ 3s 5s -40%
polyvecl_pointwise_acc_montgomery ✅ 3s 4s -25%
polyvecl_uniform_gamma1_serial ✅ 3s 2s +50%
polyvecl_unpack_eta ✅ 3s 2s +50%
power2round ✅ 3s 3s +0%
rej_eta ✅ 3s 3s +0%
shake128x4_absorb_once ✅ 3s 3s +0%
shake256_squeeze ✅ 3s 2s +50%
shake256x4_squeezeblocks ✅ 3s 4s -25%
sk_s1hat_get_poly ✅ 3s 3s +0%
unpack_pk_t1 ✅ 3s 5s -40%
unpack_sk ✅ 3s 3s +0%
yvec_get_poly ✅ 3s 3s +0%
caddq ✅ 2s 2s +0%
decompose ✅ 2s 2s +0%
keccak_f1600_x1_native_aarch64 ✅ 2s 2s +0%
keccak_f1600_x1_native_aarch64_v84a ✅ 2s 3s -33%
keccak_f1600_x4_native_aarch64_v84a ✅ 2s 2s +0%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid ✅ 2s 1s +100%
keccak_finalize ✅ 2s 3s -33%
keccak_squeeze ✅ 2s 1s +100%
keccakf1600_extract_bytes (big endian) ✅ 2s 2s +0%
make_hint ✅ 2s 3s -33%
mld_ct_cmask_neg_i32 ✅ 2s 3s -33%
mld_ct_cmask_nonzero_u8 ✅ 2s 2s +0%
mld_ct_get_optblocker_u32 ✅ 2s 1s +100%
mld_ct_get_optblocker_u8 ✅ 2s 1s +100%
mld_ct_memcmp ✅ 2s 3s -33%
mld_ct_sel_int32 ✅ 2s 2s +0%
mld_keccakf1600_extract_bytes ✅ 2s 2s +0%
mld_keccakf1600x4_xor_bytes_c ✅ 2s 2s +0%
mld_value_barrier_i64 ✅ 2s 2s +0%
mld_value_barrier_u32 ✅ 2s 2s +0%
ntt_native_x86_64 ✅ 2s 3s -33%
pack_sig_z ✅ 2s 4s -50%
pack_sk_s1 ✅ 2s 2s +0%
pointwise_native_x86_64 ✅ 2s 4s -50%
poly_caddq_native_x86_64 ✅ 2s 4s -50%
poly_decompose ✅ 2s 3s -33%
poly_decompose_native ✅ 2s 3s -33%
poly_decompose_native_x86_64 ✅ 2s 3s -33%
poly_permute_bitrev_to_custom_optional ✅ 2s 2s +0%
poly_shiftl ✅ 2s 3s -33%
poly_sub ✅ 2s 3s -33%
poly_use_hint_native_aarch64 ✅ 2s 2s +0%
polyveck_pack_w1 ✅ 2s 1s +100%
polyvecl_ntt ✅ 2s 2s +0%
polyvecl_pointwise_acc_montgomery_native ✅ 2s 2s +0%
polyvecl_unpack_z ✅ 2s 2s +0%
polyz_unpack ✅ 2s 3s -33%
polyz_unpack_native ✅ 2s 2s +0%
reduce32 ✅ 2s 2s +0%
rej_uniform_eta_native_x86_64 ✅ 2s - new
shake128_absorb ✅ 2s 2s +0%
shake128_squeeze ✅ 2s 1s +100%
shake128x4_squeezeblocks ✅ 2s 1s +100%
shake256 ✅ 2s 1s +100%
shake256_finalize ✅ 2s 2s +0%
shake256_release ✅ 2s 2s +0%
shake256x4_absorb_once ✅ 2s 3s -33%
sign_signature_pre_hash_shake256 ✅ 2s 3s -33%
sk_t0hat_get_poly ✅ 2s 2s +0%
unpack_sk_s1hat ✅ 2s 1s +100%
use_hint ✅ 2s 2s +0%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid ✅ 1s 3s -67%
keccak_f1600_x4_native_avx2 ✅ 1s 3s -67%
keccakf1600_xor_bytes ✅ 1s 1s +0%
keccakf1600x4_extract_bytes_native ✅ 1s 3s -67%
keccakf1600x4_permute ✅ 1s 4s -75%
mld_ct_abs_i32 ✅ 1s 2s -50%
mld_ct_get_optblocker_i64 ✅ 1s 4s -75%
mld_value_barrier_u8 ✅ 1s 3s -67%
polyvecl_uniform_gamma1 ✅ 1s 3s -67%
polyw1_pack_88 ✅ 1s 1s +0%
shake128_init ✅ 1s 3s -67%
shake128_release ✅ 1s 1s +0%
shake256_absorb ✅ 1s 3s -67%

@oqs-bot

oqs-bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

CBMC Results (ML-DSA-65)

⚠️ Attention Required

Proof Status Current Previous Change
**TOTAL** ⚠️ 2874s 1784s +61.1%
compute_pack_t0_t1 ⚠️ 81s 13s +523%
mld_attempt_signature_generation ⚠️ 429s 63s +581%
sig_unpack_hints ⚠️ 31s 2s +1450%
sign_pk_from_sk ⚠️ 54s 6s +800%
sign_signature_internal ⚠️ 111s 55s +102%
sign_verify_internal ⚠️ 429s 177s +142%
Full Results (210 proofs)
Proof Status Current Previous Change
**TOTAL** ⚠️ 2874s 1784s +61.1%
mld_attempt_signature_generation ⚠️ 429s 63s +581%
sign_verify_internal ⚠️ 429s 177s +142%
polyvecl_pointwise_acc_montgomery_c ✅ 266s 210s +27%
poly_pointwise_montgomery_c ✅ 153s 125s +22%
mld_invntt_layer ✅ 123s 109s +13%
polyvec_matrix_expand ✅ 121s 110s +10%
sign_signature_internal ⚠️ 111s 55s +102%
compute_pack_t0_t1 ⚠️ 81s 13s +523%
sign_pk_from_sk ⚠️ 54s 6s +800%
mld_ntt_layer ✅ 50s 41s +22%
fqmul ✅ 43s 40s +7%
sig_unpack_hints ⚠️ 31s 2s +1450%
polyvec_matrix_expand_serial ✅ 29s 27s +7%
polyvec_matrix_pointwise_montgomery_yvec ✅ 23s 18s +28%
keccakf1600x4_permute_native ✅ 22s 23s -4%
mld_ntt_butterfly_block ✅ 22s 24s -8%
poly_ntt_c ✅ 22s 19s +16%
poly_chknorm_c ✅ 16s 15s +7%
polyt0_unpack ✅ 16s 16s +0%
rej_uniform_c ✅ 16s 14s +14%
rej_uniform_native_x86_64 ✅ 16s - new
rej_uniform ✅ 15s 18s -17%
poly_invntt_tomont_c ✅ 14s 11s +27%
polyz_unpack_c ✅ 14s 13s +8%
sign_keypair_internal ✅ 14s 5s +180%
polyveck_decompose ✅ 13s 12s +8%
mld_compute_pack_z ✅ 12s 7s +71%
poly_uniform_eta_4x ✅ 12s 14s -14%
poly_uniform_4x ✅ 11s 13s -15%
keccak_absorb_once_x4 ✅ 10s 8s +25%
polyveck_caddq ✅ 10s 6s +67%
mld_check_pct ✅ 9s 14s -36%
poly_add ✅ 9s 9s +0%
sign_keypair ✅ 9s 3s +200%
polyveck_invntt_tomont ✅ 8s 8s +0%
keccak_absorb ✅ 7s 3s +133%
mld_sample_s1_s2 ✅ 7s 6s +17%
poly_caddq_native_aarch64 ✅ 7s 2s +250%
polyt1_unpack ✅ 7s 5s +40%
polyveck_chknorm ✅ 7s 6s +17%
polyveck_ntt ✅ 7s 7s +0%
polyvecl_chknorm ✅ 7s 7s +0%
polyvecl_ntt ✅ 7s 4s +75%
mld_keccakf1600_permute_c ✅ 6s 6s +0%
mld_sign_attempt ✅ 6s - new
mld_sign_resume ✅ 6s - new
pack_sig_z ✅ 6s 2s +200%
pointwise_acc_native_aarch64 ✅ 6s 6s +0%
poly_decompose_c ✅ 6s 5s +20%
poly_pointwise_montgomery ✅ 6s 3s +100%
poly_pointwise_montgomery_native ✅ 6s 3s +100%
poly_use_hint_c ✅ 6s 5s +20%
rej_uniform_native ✅ 6s 4s +50%
shake128_finalize ✅ 6s 1s +500%
sign_verify ✅ 6s 3s +100%
unpack_sk_t0hat ✅ 6s 5s +20%
keccak_squeezeblocks_x4 ✅ 5s 5s +0%
keccakf1600x4_extract_bytes_native ✅ 5s 4s +25%
mld_keccakf1600x4_xor_bytes_c ✅ 5s 2s +150%
mld_prepare_domain_separation_prefix ✅ 5s 2s +150%
mld_sign_finish ✅ 5s - new
nttunpack_native_x86_64 ✅ 5s 3s +67%
pointwise_acc_native_x86_64 ✅ 5s 8s -38%
pointwise_native_x86_64 ✅ 5s 3s +67%
poly_challenge ✅ 5s 6s -17%
poly_decompose_88_native_aarch64 ✅ 5s 1s +400%
poly_decompose_native ✅ 5s 3s +67%
poly_invntt_tomont ✅ 5s 3s +67%
poly_invntt_tomont_native ✅ 5s 2s +150%
poly_reduce ✅ 5s 3s +67%
poly_uniform ✅ 5s 4s +25%
poly_uniform_gamma1_4x ✅ 5s 4s +25%
polyt0_pack ✅ 5s 3s +67%
polyveck_pack_eta ✅ 5s 4s +25%
polyvecl_pointwise_acc_montgomery ✅ 5s 3s +67%
polyvecl_unpack_eta ✅ 5s 3s +67%
reduce32 ✅ 5s 3s +67%
shake256_release ✅ 5s 2s +150%
sign_signature_pre_hash_internal ✅ 5s 3s +67%
sign_signature_pre_hash_shake256 ✅ 5s 3s +67%
sign_verify_extmu ✅ 5s 3s +67%
sign_verify_pre_hash_internal ✅ 5s 5s +0%
sign_verify_pre_hash_shake256 ✅ 5s 5s +0%
unpack_sk ✅ 5s 3s +67%
decompose ✅ 4s 1s +300%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid ✅ 4s 2s +100%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid ✅ 4s 2s +100%
keccak_init ✅ 4s 1s +300%
keccakf1600x4_extract_bytes ✅ 4s 4s +0%
keccakf1600x4_permute ✅ 4s 4s +0%
keccakf1600x4_xor_bytes ✅ 4s 1s +300%
mld_ct_cmask_neg_i32 ✅ 4s 2s +100%
mld_ct_cmask_nonzero_u32 ✅ 4s 4s +0%
mld_ct_sel_int32 ✅ 4s 3s +33%
mld_h ✅ 4s 2s +100%
mld_polymat_expand_entry ✅ 4s 4s +0%
mld_sample_s1_s2_serial ✅ 4s 4s +0%
mld_value_barrier_u32 ✅ 4s 3s +33%
pack_sig_h ✅ 4s 5s -20%
poly_chknorm_native_aarch64 ✅ 4s 3s +33%
poly_chknorm_native_x86_64 ✅ 4s 3s +33%
poly_permute_bitrev_to_custom_optional ✅ 4s 2s +100%
poly_power2round ✅ 4s 4s +0%
poly_uniform_eta ✅ 4s 4s +0%
poly_use_hint_native ✅ 4s 2s +100%
polyeta_unpack ✅ 4s 8s -50%
polyt1_pack ✅ 4s 3s +33%
polyvecl_pointwise_acc_montgomery_native ✅ 4s 2s +100%
polyvecl_uniform_gamma1 ✅ 4s 2s +100%
polyvecl_uniform_gamma1_serial ✅ 4s 3s +33%
polyw1_pack ✅ 4s 4s +0%
polyz_pack ✅ 4s 3s +33%
polyz_unpack_17_native_aarch64 ✅ 4s 3s +33%
polyz_unpack_19_native_aarch64 ✅ 4s 3s +33%
rej_eta_c ✅ 4s 5s -20%
rej_eta_native ✅ 4s 3s +33%
rej_uniform_eta_native_aarch64 ✅ 4s 4s +0%
rej_uniform_native_aarch64 ✅ 4s 3s +33%
shake256 ✅ 4s 2s +100%
shake256_absorb ✅ 4s 2s +100%
shake256x4_absorb_once ✅ 4s 3s +33%
shake256x4_squeezeblocks ✅ 4s 2s +100%
sign_signature_extmu ✅ 4s 2s +100%
use_hint ✅ 4s 2s +100%
intt_native_aarch64 ✅ 3s 3s +0%
keccak_f1600_x4_native_avx2 ✅ 3s 2s +50%
keccakf1600_permute ✅ 3s 2s +50%
keccakf1600_xor_bytes ✅ 3s 2s +50%
keccakf1600_xor_bytes (big endian) ✅ 3s 2s +50%
mld_ct_abs_i32 ✅ 3s 2s +50%
mld_ct_get_optblocker_i64 ✅ 3s 2s +50%
mld_ct_get_optblocker_u32 ✅ 3s 3s +0%
mld_keccakf1600_extract_bytes ✅ 3s 1s +200%
ntt_native_aarch64 ✅ 3s 2s +50%
ntt_native_x86_64 ✅ 3s 2s +50%
pack_sk_s1 ✅ 3s 5s -40%
pointwise_native_aarch64 ✅ 3s 5s -40%
poly_caddq_c ✅ 3s 2s +50%
poly_caddq_native ✅ 3s 2s +50%
poly_caddq_native_x86_64 ✅ 3s 3s +0%
poly_decompose_32_native_aarch64 ✅ 3s 3s +0%
poly_decompose_native_x86_64 ✅ 3s 3s +0%
poly_ntt_native ✅ 3s 4s -25%
poly_permute_bitrev_to_custom_optional_native ✅ 3s 4s -25%
poly_shiftl ✅ 3s 3s +0%
poly_sub ✅ 3s 3s +0%
poly_uniform_gamma1 ✅ 3s 3s +0%
polyeta_pack ✅ 3s 3s +0%
polyvec_matrix_pointwise_montgomery_row ✅ 3s 1s +200%
polyveck_pack_w1 ✅ 3s 3s +0%
polyveck_reduce ✅ 3s 4s -25%
polyvecl_pack_eta ✅ 3s 3s +0%
polyw1_pack_32 ✅ 3s 4s -25%
power2round ✅ 3s 1s +200%
rej_uniform_eta_native_x86_64 ✅ 3s - new
shake128_absorb ✅ 3s 2s +50%
shake128_init ✅ 3s 2s +50%
shake128_release ✅ 3s 3s +0%
shake128_squeeze ✅ 3s 2s +50%
shake128x4_squeezeblocks ✅ 3s 3s +0%
sign_signature ✅ 3s 6s -50%
sk_s1hat_get_poly ✅ 3s 6s -50%
sys_check_capability ✅ 3s 4s -25%
unpack_pk_t1 ✅ 3s 5s -40%
unpack_sk_s1hat ✅ 3s 2s +50%
yvec_get_poly ✅ 3s 3s +0%
yvec_init ✅ 3s 3s +0%
caddq ✅ 2s 3s -33%
intt_native_x86_64 ✅ 2s 3s -33%
keccak_f1600_x1_native_aarch64 ✅ 2s 2s +0%
keccak_f1600_x1_native_aarch64_v84a ✅ 2s 3s -33%
keccak_finalize ✅ 2s 2s +0%
keccak_squeeze ✅ 2s 4s -50%
keccakf1600_extract_bytes (big endian) ✅ 2s 2s +0%
make_hint ✅ 2s 2s +0%
mld_ct_cmask_nonzero_u8 ✅ 2s 3s -33%
mld_ct_get_optblocker_u8 ✅ 2s 2s +0%
mld_keccakf1600x4_extract_bytes_c ✅ 2s 3s -33%
mld_value_barrier_u8 ✅ 2s 3s -33%
montgomery_reduce ✅ 2s 4s -50%
pack_sig_c ✅ 2s 5s -60%
pack_sk_rho_key_tr_s2 ✅ 2s 2s +0%
poly_caddq ✅ 2s 2s +0%
poly_chknorm ✅ 2s 4s -50%
poly_chknorm_native ✅ 2s 2s +0%
poly_decompose ✅ 2s 2s +0%
poly_ntt ✅ 2s 2s +0%
poly_use_hint ✅ 2s 3s -33%
poly_use_hint_native_aarch64 ✅ 2s 3s -33%
poly_use_hint_native_x86_64 ✅ 2s - new
polyveck_unpack_eta ✅ 2s 6s -67%
polyvecl_unpack_z ✅ 2s 3s -33%
polyz_unpack ✅ 2s 3s -33%
polyz_unpack_native ✅ 2s 4s -50%
polyz_unpack_native_x86_64 ✅ 2s 3s -33%
rej_eta ✅ 2s 2s +0%
shake256_finalize ✅ 2s 1s +100%
shake256_init ✅ 2s 2s +0%
shake256_squeeze ✅ 2s 3s -33%
sk_s2hat_get_poly ✅ 2s 2s +0%
sk_t0hat_get_poly ✅ 2s 2s +0%
unpack_sk_s2hat ✅ 2s 4s -50%
fqscale ✅ 1s 3s -67%
keccak_f1600_x4_native_aarch64_v84a ✅ 1s 4s -75%
keccakf1600_permute_native ✅ 1s 3s -67%
keccakf1600x4_xor_bytes_native ✅ 1s 3s -67%
mld_ct_memcmp ✅ 1s 2s -50%
mld_value_barrier_i64 ✅ 1s 2s -50%
polyw1_pack_88 ✅ 1s 2s -50%
shake128x4_absorb_once ✅ 1s 3s -67%

@oqs-bot

oqs-bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

CBMC Results (ML-DSA-65, REDUCE-RAM)

⚠️ Attention Required

Proof Status Current Previous Change
**TOTAL** ⚠️ 2286s 1482s +54.3%
compute_pack_t0_t1 ⚠️ 51s 7s +629%
mld_attempt_signature_generation ⚠️ 445s 31s +1335%
rej_uniform ⚠️ 21s 7s +200%
sign_pk_from_sk ⚠️ 44s 5s +780%
sign_verify_internal ⚠️ 264s 71s +272%
Full Results (210 proofs)
Proof Status Current Previous Change
**TOTAL** ⚠️ 2286s 1482s +54.3%
mld_attempt_signature_generation ⚠️ 445s 31s +1335%
sign_verify_internal ⚠️ 264s 71s +272%
polyvec_matrix_pointwise_montgomery_yvec ✅ 199s 201s -1%
poly_pointwise_montgomery_c ✅ 124s 116s +7%
mld_invntt_layer ✅ 108s 108s +0%
compute_pack_t0_t1 ⚠️ 51s 7s +629%
mld_ntt_layer ✅ 44s 43s +2%
sign_pk_from_sk ⚠️ 44s 5s +780%
polyvecl_chknorm ✅ 42s 43s -2%
fqmul ✅ 41s 40s +2%
polyveck_chknorm ✅ 35s 36s -3%
keccakf1600x4_permute_native ✅ 22s 22s +0%
mld_ntt_butterfly_block ✅ 21s 25s -16%
rej_uniform ⚠️ 21s 7s +200%
poly_ntt_c ✅ 20s 22s -9%
sig_unpack_hints ✅ 18s 1s +1700%
sign_signature_internal ✅ 18s 6s +200%
rej_uniform_native_x86_64 ✅ 15s - new
sign_keypair_internal ✅ 15s 3s +400%
rej_uniform_c ✅ 14s 16s -12%
poly_uniform_eta_4x ✅ 13s 13s +0%
polyt0_unpack ✅ 12s 13s -8%
mld_check_pct ✅ 11s 12s -8%
poly_chknorm_c ✅ 11s 13s -15%
poly_invntt_tomont_c ✅ 11s 10s +10%
polyveck_decompose ✅ 11s 14s -21%
sign_keypair ✅ 11s 4s +175%
polyvec_matrix_pointwise_montgomery_row ✅ 10s 8s +25%
polyz_unpack_c ✅ 10s 9s +11%
keccak_absorb_once_x4 ✅ 8s 10s -20%
mld_keccakf1600_permute_c ✅ 8s 7s +14%
poly_add ✅ 8s 7s +14%
polyveck_reduce ✅ 8s 6s +33%
mld_sample_s1_s2 ✅ 7s 6s +17%
pointwise_acc_native_x86_64 ✅ 7s 5s +40%
poly_decompose_c ✅ 7s 8s -12%
polyveck_caddq ✅ 7s 7s +0%
polyvecl_ntt ✅ 7s 7s +0%
caddq ✅ 6s 2s +200%
keccak_absorb ✅ 6s 3s +100%
poly_challenge ✅ 6s 5s +20%
poly_power2round ✅ 6s 7s -14%
poly_shiftl ✅ 6s 3s +100%
poly_use_hint ✅ 6s 3s +100%
polyt0_pack ✅ 6s 5s +20%
polyveck_invntt_tomont ✅ 6s 7s -14%
rej_uniform_native ✅ 6s 4s +50%
sign_signature ✅ 6s 5s +20%
keccak_squeezeblocks_x4 ✅ 5s 4s +25%
mld_compute_pack_z ✅ 5s 5s +0%
mld_prepare_domain_separation_prefix ✅ 5s 4s +25%
mld_sign_finish ✅ 5s - new
pack_sk_s1 ✅ 5s 3s +67%
pointwise_acc_native_aarch64 ✅ 5s 6s -17%
poly_caddq_native_aarch64 ✅ 5s 2s +150%
poly_decompose ✅ 5s 2s +150%
poly_decompose_native_x86_64 ✅ 5s 2s +150%
poly_reduce ✅ 5s 4s +25%
poly_uniform_gamma1_4x ✅ 5s 3s +67%
polyveck_ntt ✅ 5s 4s +25%
polyveck_unpack_eta ✅ 5s 3s +67%
polyw1_pack_32 ✅ 5s 2s +150%
rej_uniform_native_aarch64 ✅ 5s 5s +0%
shake256x4_absorb_once ✅ 5s 2s +150%
sign_verify_pre_hash_internal ✅ 5s 5s +0%
sign_verify_pre_hash_shake256 ✅ 5s 6s -17%
fqscale ✅ 4s 3s +33%
keccakf1600_permute_native ✅ 4s 2s +100%
keccakf1600_xor_bytes (big endian) ✅ 4s 2s +100%
keccakf1600x4_extract_bytes ✅ 4s 4s +0%
keccakf1600x4_xor_bytes ✅ 4s 2s +100%
keccakf1600x4_xor_bytes_native ✅ 4s 2s +100%
mld_ct_cmask_nonzero_u8 ✅ 4s 2s +100%
mld_h ✅ 4s 3s +33%
mld_keccakf1600x4_xor_bytes_c ✅ 4s 2s +100%
mld_sample_s1_s2_serial ✅ 4s 3s +33%
mld_sign_attempt ✅ 4s - new
mld_sign_resume ✅ 4s - new
ntt_native_aarch64 ✅ 4s 3s +33%
nttunpack_native_x86_64 ✅ 4s 3s +33%
pack_sk_rho_key_tr_s2 ✅ 4s 2s +100%
poly_decompose_32_native_aarch64 ✅ 4s 4s +0%
poly_invntt_tomont_native ✅ 4s 5s -20%
poly_permute_bitrev_to_custom_optional_native ✅ 4s 3s +33%
poly_pointwise_montgomery_native ✅ 4s 4s +0%
poly_uniform ✅ 4s 2s +100%
poly_uniform_gamma1 ✅ 4s 3s +33%
poly_use_hint_native ✅ 4s 7s -43%
poly_use_hint_native_x86_64 ✅ 4s - new
polyt1_pack ✅ 4s 3s +33%
polyvecl_pointwise_acc_montgomery_c ✅ 4s 3s +33%
polyw1_pack ✅ 4s 3s +33%
polyw1_pack_88 ✅ 4s 3s +33%
polyz_unpack_19_native_aarch64 ✅ 4s 5s -20%
polyz_unpack_native ✅ 4s 3s +33%
reduce32 ✅ 4s 2s +100%
rej_eta_native ✅ 4s 3s +33%
rej_uniform_eta_native_aarch64 ✅ 4s 5s -20%
sign_signature_extmu ✅ 4s 4s +0%
sign_signature_pre_hash_internal ✅ 4s 3s +33%
sign_signature_pre_hash_shake256 ✅ 4s 7s -43%
unpack_pk_t1 ✅ 4s 2s +100%
unpack_sk_s1hat ✅ 4s 1s +300%
decompose ✅ 3s 4s -25%
intt_native_aarch64 ✅ 3s 2s +50%
keccak_f1600_x1_native_aarch64 ✅ 3s 2s +50%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid ✅ 3s 3s +0%
keccak_finalize ✅ 3s 2s +50%
keccak_init ✅ 3s 4s -25%
keccakf1600_permute ✅ 3s 4s -25%
make_hint ✅ 3s 3s +0%
mld_ct_abs_i32 ✅ 3s 6s -50%
mld_keccakf1600_extract_bytes ✅ 3s 2s +50%
mld_polymat_expand_entry ✅ 3s 3s +0%
mld_value_barrier_i64 ✅ 3s 2s +50%
mld_value_barrier_u8 ✅ 3s 1s +200%
pack_sig_c ✅ 3s 3s +0%
pack_sig_h ✅ 3s 2s +50%
pack_sig_z ✅ 3s 1s +200%
pointwise_native_x86_64 ✅ 3s 2s +50%
poly_caddq ✅ 3s 3s +0%
poly_caddq_c ✅ 3s 5s -40%
poly_chknorm_native ✅ 3s 4s -25%
poly_chknorm_native_aarch64 ✅ 3s 2s +50%
poly_decompose_88_native_aarch64 ✅ 3s 2s +50%
poly_decompose_native ✅ 3s 5s -40%
poly_invntt_tomont ✅ 3s 5s -40%
poly_ntt_native ✅ 3s 2s +50%
poly_pointwise_montgomery ✅ 3s 2s +50%
poly_use_hint_native_aarch64 ✅ 3s 4s -25%
polyt1_unpack ✅ 3s 3s +0%
polyvec_matrix_expand ✅ 3s 6s -50%
polyvec_matrix_expand_serial ✅ 3s 3s +0%
polyveck_pack_eta ✅ 3s 3s +0%
polyvecl_pack_eta ✅ 3s 2s +50%
polyvecl_pointwise_acc_montgomery ✅ 3s 3s +0%
polyvecl_pointwise_acc_montgomery_native ✅ 3s 3s +0%
polyvecl_uniform_gamma1_serial ✅ 3s 1s +200%
polyvecl_unpack_eta ✅ 3s 2s +50%
rej_eta ✅ 3s 5s -40%
rej_eta_c ✅ 3s 4s -25%
rej_uniform_eta_native_x86_64 ✅ 3s - new
shake128_absorb ✅ 3s 2s +50%
shake128_squeeze ✅ 3s 3s +0%
shake256 ✅ 3s 2s +50%
shake256_absorb ✅ 3s 4s -25%
shake256_init ✅ 3s 4s -25%
shake256_squeeze ✅ 3s 4s -25%
sign_verify ✅ 3s 6s -50%
sign_verify_extmu ✅ 3s 2s +50%
sk_s1hat_get_poly ✅ 3s 3s +0%
sk_t0hat_get_poly ✅ 3s 1s +200%
unpack_sk ✅ 3s 3s +0%
unpack_sk_s2hat ✅ 3s 3s +0%
unpack_sk_t0hat ✅ 3s 4s -25%
yvec_init ✅ 3s 5s -40%
intt_native_x86_64 ✅ 2s 4s -50%
keccak_f1600_x1_native_aarch64_v84a ✅ 2s 2s +0%
keccak_f1600_x4_native_aarch64_v84a ✅ 2s 2s +0%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid ✅ 2s 3s -33%
keccak_f1600_x4_native_avx2 ✅ 2s 2s +0%
keccak_squeeze ✅ 2s 2s +0%
keccakf1600_xor_bytes ✅ 2s 4s -50%
keccakf1600x4_extract_bytes_native ✅ 2s 1s +100%
keccakf1600x4_permute ✅ 2s 1s +100%
mld_ct_cmask_neg_i32 ✅ 2s 3s -33%
mld_ct_cmask_nonzero_u32 ✅ 2s 3s -33%
mld_ct_get_optblocker_i64 ✅ 2s 1s +100%
mld_ct_get_optblocker_u32 ✅ 2s 3s -33%
mld_ct_memcmp ✅ 2s 4s -50%
mld_ct_sel_int32 ✅ 2s 2s +0%
mld_keccakf1600x4_extract_bytes_c ✅ 2s 2s +0%
mld_value_barrier_u32 ✅ 2s 4s -50%
montgomery_reduce ✅ 2s 1s +100%
pointwise_native_aarch64 ✅ 2s 3s -33%
poly_caddq_native ✅ 2s 4s -50%
poly_chknorm ✅ 2s 3s -33%
poly_ntt ✅ 2s 2s +0%
poly_permute_bitrev_to_custom_optional ✅ 2s 3s -33%
poly_sub ✅ 2s 4s -50%
poly_uniform_4x ✅ 2s 4s -50%
poly_uniform_eta ✅ 2s 5s -60%
poly_use_hint_c ✅ 2s 2s +0%
polyeta_pack ✅ 2s 1s +100%
polyeta_unpack ✅ 2s 4s -50%
polyveck_pack_w1 ✅ 2s 4s -50%
polyvecl_uniform_gamma1 ✅ 2s 4s -50%
polyvecl_unpack_z ✅ 2s 1s +100%
polyz_pack ✅ 2s 3s -33%
polyz_unpack ✅ 2s 3s -33%
polyz_unpack_17_native_aarch64 ✅ 2s 2s +0%
polyz_unpack_native_x86_64 ✅ 2s 3s -33%
power2round ✅ 2s 2s +0%
shake128_init ✅ 2s 6s -67%
shake128x4_absorb_once ✅ 2s 2s +0%
shake128x4_squeezeblocks ✅ 2s 2s +0%
shake256_finalize ✅ 2s 1s +100%
shake256_release ✅ 2s 3s -33%
shake256x4_squeezeblocks ✅ 2s 2s +0%
sk_s2hat_get_poly ✅ 2s 1s +100%
sys_check_capability ✅ 2s 1s +100%
use_hint ✅ 2s 2s +0%
yvec_get_poly ✅ 2s 3s -33%
keccakf1600_extract_bytes (big endian) ✅ 1s 3s -67%
mld_ct_get_optblocker_u8 ✅ 1s 4s -75%
ntt_native_x86_64 ✅ 1s 5s -80%
poly_caddq_native_x86_64 ✅ 1s 1s +0%
poly_chknorm_native_x86_64 ✅ 1s 4s -75%
shake128_finalize ✅ 1s 2s -50%
shake128_release ✅ 1s 2s -50%

@oqs-bot

oqs-bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

CBMC Results (ML-DSA-87)

⚠️ Attention Required

Proof Status Current Previous Change
**TOTAL** ⚠️ 3073s 2151s +42.9%
compute_pack_t0_t1 ⚠️ 83s 19s +337%
mld_attempt_signature_generation ⚠️ 350s 55s +536%
sig_unpack_hints ⚠️ 28s 3s +833%
sign_pk_from_sk ⚠️ 45s 6s +650%
sign_signature_internal ⚠️ 149s 42s +255%
sign_verify_internal ⚠️ 509s 97s +425%
Full Results (210 proofs)
Proof Status Current Previous Change
**TOTAL** ⚠️ 3073s 2151s +42.9%
sign_verify_internal ⚠️ 509s 97s +425%
mld_attempt_signature_generation ⚠️ 350s 55s +536%
polyvecl_pointwise_acc_montgomery_c ✅ 350s 353s -1%
polyvec_matrix_expand ✅ 314s 324s -3%
sign_signature_internal ⚠️ 149s 42s +255%
poly_pointwise_montgomery_c ✅ 126s 144s -12%
mld_invntt_layer ✅ 110s 115s -4%
compute_pack_t0_t1 ⚠️ 83s 19s +337%
sign_pk_from_sk ⚠️ 45s 6s +650%
fqmul ✅ 43s 43s +0%
mld_ntt_layer ✅ 41s 45s -9%
polyvec_matrix_expand_serial ✅ 35s 38s -8%
sig_unpack_hints ⚠️ 28s 3s +833%
mld_ntt_butterfly_block ✅ 22s 24s -8%
keccakf1600x4_permute_native ✅ 21s 23s -9%
poly_ntt_c ✅ 21s 21s +0%
polyvec_matrix_pointwise_montgomery_yvec ✅ 17s 18s -6%
rej_uniform_native_x86_64 ✅ 17s - new
sign_keypair_internal ✅ 16s 6s +167%
poly_chknorm_c ✅ 15s 15s +0%
poly_uniform_eta_4x ✅ 14s 11s +27%
polyeta_unpack ✅ 14s 17s -18%
polyt0_unpack ✅ 14s 14s +0%
rej_uniform ✅ 14s 15s -7%
poly_uniform_4x ✅ 13s 13s +0%
rej_uniform_c ✅ 13s 19s -32%
poly_invntt_tomont_c ✅ 12s 12s +0%
mld_compute_pack_z ✅ 11s 8s +38%
polyveck_decompose ✅ 11s 13s -15%
polyveck_ntt ✅ 10s 11s -9%
pointwise_acc_native_x86_64 ✅ 8s 6s +33%
polyvecl_ntt ✅ 8s 7s +14%
sign_keypair ✅ 8s 4s +100%
decompose ✅ 7s 3s +133%
keccak_absorb ✅ 7s 3s +133%
keccak_absorb_once_x4 ✅ 7s 9s -22%
mld_sample_s1_s2 ✅ 7s 6s +17%
pointwise_acc_native_aarch64 ✅ 7s 6s +17%
poly_add ✅ 7s 6s +17%
poly_pointwise_montgomery_native ✅ 7s 5s +40%
polyveck_caddq ✅ 7s 8s -12%
sign_signature_pre_hash_shake256 ✅ 7s 6s +17%
mld_check_pct ✅ 6s 16s -62%
mld_h ✅ 6s 3s +100%
mld_keccakf1600_permute_c ✅ 6s 7s -14%
mld_sample_s1_s2_serial ✅ 6s 8s -25%
pointwise_native_x86_64 ✅ 6s 2s +200%
poly_chknorm_native_x86_64 ✅ 6s 2s +200%
poly_decompose_88_native_aarch64 ✅ 6s 2s +200%
poly_decompose_c ✅ 6s 5s +20%
polyveck_invntt_tomont ✅ 6s 9s -33%
sign_verify ✅ 6s 5s +20%
unpack_sk_t0hat ✅ 6s 7s -14%
intt_native_aarch64 ✅ 5s 3s +67%
mld_sign_resume ✅ 5s - new
montgomery_reduce ✅ 5s 3s +67%
poly_invntt_tomont ✅ 5s 1s +400%
poly_ntt_native ✅ 5s 3s +67%
poly_pointwise_montgomery ✅ 5s 4s +25%
poly_reduce ✅ 5s 2s +150%
poly_use_hint_native_x86_64 ✅ 5s - new
polyw1_pack ✅ 5s 4s +25%
rej_eta_native ✅ 5s 6s -17%
rej_uniform_eta_native_x86_64 ✅ 5s - new
rej_uniform_native ✅ 5s 8s -38%
shake256x4_squeezeblocks ✅ 5s 1s +400%
sign_signature ✅ 5s 5s +0%
sign_verify_extmu ✅ 5s 3s +67%
unpack_sk ✅ 5s 5s +0%
unpack_sk_s1hat ✅ 5s 2s +150%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid ✅ 4s 3s +33%
keccak_init ✅ 4s 3s +33%
keccak_squeezeblocks_x4 ✅ 4s 4s +0%
keccakf1600_permute_native ✅ 4s 4s +0%
make_hint ✅ 4s 3s +33%
mld_ct_sel_int32 ✅ 4s 3s +33%
mld_keccakf1600x4_extract_bytes_c ✅ 4s 2s +100%
mld_prepare_domain_separation_prefix ✅ 4s 4s +0%
ntt_native_x86_64 ✅ 4s 2s +100%
nttunpack_native_x86_64 ✅ 4s 3s +33%
pack_sig_z ✅ 4s 5s -20%
poly_caddq_native ✅ 4s 4s +0%
poly_caddq_native_aarch64 ✅ 4s 3s +33%
poly_challenge ✅ 4s 5s -20%
poly_chknorm_native_aarch64 ✅ 4s 4s +0%
poly_invntt_tomont_native ✅ 4s 5s -20%
poly_permute_bitrev_to_custom_optional ✅ 4s 3s +33%
poly_uniform_eta ✅ 4s 4s +0%
poly_uniform_gamma1_4x ✅ 4s 3s +33%
poly_use_hint ✅ 4s 1s +300%
poly_use_hint_c ✅ 4s 2s +100%
polyveck_chknorm ✅ 4s 3s +33%
polyveck_pack_w1 ✅ 4s 3s +33%
polyveck_unpack_eta ✅ 4s 4s +0%
polyvecl_uniform_gamma1_serial ✅ 4s 4s +0%
polyvecl_unpack_eta ✅ 4s 5s -20%
polyw1_pack_32 ✅ 4s 4s +0%
polyw1_pack_88 ✅ 4s 3s +33%
reduce32 ✅ 4s 3s +33%
rej_uniform_eta_native_aarch64 ✅ 4s 5s -20%
shake128_squeeze ✅ 4s 2s +100%
shake128x4_absorb_once ✅ 4s 5s -20%
shake128x4_squeezeblocks ✅ 4s 3s +33%
shake256_init ✅ 4s 2s +100%
sign_signature_extmu ✅ 4s 4s +0%
sign_signature_pre_hash_internal ✅ 4s 5s -20%
sign_verify_pre_hash_internal ✅ 4s 3s +33%
sys_check_capability ✅ 4s 3s +33%
unpack_pk_t1 ✅ 4s 1s +300%
yvec_init ✅ 4s 4s +0%
caddq ✅ 3s 4s -25%
fqscale ✅ 3s 3s +0%
intt_native_x86_64 ✅ 3s 3s +0%
keccak_f1600_x1_native_aarch64 ✅ 3s 1s +200%
keccak_f1600_x1_native_aarch64_v84a ✅ 3s 1s +200%
keccak_f1600_x4_native_aarch64_v84a ✅ 3s 4s -25%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid ✅ 3s 4s -25%
keccak_f1600_x4_native_avx2 ✅ 3s 2s +50%
keccak_finalize ✅ 3s 1s +200%
keccakf1600x4_extract_bytes ✅ 3s 2s +50%
keccakf1600x4_extract_bytes_native ✅ 3s 2s +50%
mld_ct_cmask_nonzero_u32 ✅ 3s 2s +50%
mld_ct_cmask_nonzero_u8 ✅ 3s 3s +0%
mld_polymat_expand_entry ✅ 3s 3s +0%
mld_sign_finish ✅ 3s - new
mld_value_barrier_u8 ✅ 3s 3s +0%
pack_sk_s1 ✅ 3s 1s +200%
pointwise_native_aarch64 ✅ 3s 5s -40%
poly_caddq_native_x86_64 ✅ 3s 2s +50%
poly_chknorm ✅ 3s 3s +0%
poly_chknorm_native ✅ 3s 4s -25%
poly_decompose ✅ 3s 3s +0%
poly_decompose_native ✅ 3s 2s +50%
poly_ntt ✅ 3s 3s +0%
poly_permute_bitrev_to_custom_optional_native ✅ 3s 5s -40%
poly_power2round ✅ 3s 3s +0%
poly_shiftl ✅ 3s 4s -25%
poly_uniform_gamma1 ✅ 3s 4s -25%
poly_use_hint_native ✅ 3s 3s +0%
polyt0_pack ✅ 3s 4s -25%
polyt1_pack ✅ 3s 3s +0%
polyt1_unpack ✅ 3s 4s -25%
polyvec_matrix_pointwise_montgomery_row ✅ 3s 3s +0%
polyveck_pack_eta ✅ 3s 6s -50%
polyvecl_chknorm ✅ 3s 7s -57%
polyvecl_pack_eta ✅ 3s 3s +0%
polyvecl_pointwise_acc_montgomery ✅ 3s 5s -40%
polyvecl_pointwise_acc_montgomery_native ✅ 3s 3s +0%
polyvecl_unpack_z ✅ 3s 4s -25%
polyz_unpack_19_native_aarch64 ✅ 3s 4s -25%
polyz_unpack_native_x86_64 ✅ 3s 3s +0%
shake128_finalize ✅ 3s 2s +50%
shake128_release ✅ 3s 4s -25%
shake256_absorb ✅ 3s 2s +50%
shake256_finalize ✅ 3s 2s +50%
sign_verify_pre_hash_shake256 ✅ 3s 3s +0%
sk_s2hat_get_poly ✅ 3s 3s +0%
sk_t0hat_get_poly ✅ 3s 4s -25%
keccakf1600_permute ✅ 2s 3s -33%
keccakf1600_xor_bytes ✅ 2s 3s -33%
keccakf1600_xor_bytes (big endian) ✅ 2s 2s +0%
keccakf1600x4_permute ✅ 2s 3s -33%
keccakf1600x4_xor_bytes ✅ 2s 3s -33%
keccakf1600x4_xor_bytes_native ✅ 2s 3s -33%
mld_ct_cmask_neg_i32 ✅ 2s 4s -50%
mld_ct_get_optblocker_u8 ✅ 2s 3s -33%
mld_ct_memcmp ✅ 2s 3s -33%
mld_keccakf1600_extract_bytes ✅ 2s 4s -50%
mld_sign_attempt ✅ 2s - new
mld_value_barrier_i64 ✅ 2s 1s +100%
ntt_native_aarch64 ✅ 2s 6s -67%
pack_sig_c ✅ 2s 4s -50%
pack_sig_h ✅ 2s 4s -50%
pack_sk_rho_key_tr_s2 ✅ 2s 3s -33%
poly_caddq ✅ 2s 2s +0%
poly_caddq_c ✅ 2s 3s -33%
poly_decompose_32_native_aarch64 ✅ 2s 5s -60%
poly_decompose_native_x86_64 ✅ 2s 2s +0%
poly_sub ✅ 2s 3s -33%
poly_uniform ✅ 2s 4s -50%
poly_use_hint_native_aarch64 ✅ 2s 2s +0%
polyeta_pack ✅ 2s 4s -50%
polyveck_reduce ✅ 2s 3s -33%
polyvecl_uniform_gamma1 ✅ 2s 2s +0%
polyz_pack ✅ 2s 5s -60%
polyz_unpack_17_native_aarch64 ✅ 2s 3s -33%
polyz_unpack_c ✅ 2s 3s -33%
polyz_unpack_native ✅ 2s 4s -50%
power2round ✅ 2s 4s -50%
rej_eta ✅ 2s 4s -50%
rej_eta_c ✅ 2s 5s -60%
shake128_absorb ✅ 2s 4s -50%
shake256 ✅ 2s 2s +0%
shake256_release ✅ 2s 3s -33%
shake256x4_absorb_once ✅ 2s 2s +0%
sk_s1hat_get_poly ✅ 2s 3s -33%
unpack_sk_s2hat ✅ 2s 3s -33%
use_hint ✅ 2s 3s -33%
yvec_get_poly ✅ 2s 4s -50%
keccak_squeeze ✅ 1s 2s -50%
keccakf1600_extract_bytes (big endian) ✅ 1s 3s -67%
mld_ct_abs_i32 ✅ 1s 3s -67%
mld_ct_get_optblocker_i64 ✅ 1s 3s -67%
mld_ct_get_optblocker_u32 ✅ 1s 2s -50%
mld_keccakf1600x4_xor_bytes_c ✅ 1s 4s -75%
mld_value_barrier_u32 ✅ 1s 2s -50%
polyz_unpack ✅ 1s 2s -50%
rej_uniform_native_aarch64 ✅ 1s 2s -50%
shake128_init ✅ 1s 1s +0%
shake256_squeeze ✅ 1s 2s -50%

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

needs-mlkem-native-port

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@hanno-becker @oqs-bot @mkannwischer