Skip to content

CI: Update GitHub action dependencies - #1344

Open
mkannwischer wants to merge 1 commit into
mainfrom
dependabot-combined
Open

CI: Update GitHub action dependencies#1344
mkannwischer wants to merge 1 commit into
mainfrom
dependabot-combined

Conversation

@mkannwischer

@mkannwischer mkannwischer commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

Bump actions/checkout to v7.0.1, aws-actions/configure-aws-credentials to v6.2.3 and ossf/scorecard-action to v2.4.4.

Also covers the checkout pin in .github/actions/cbmc/action.yml. Dependabot scans the workflow directory only, so pins in composite actions are not part of its update PRs.

This was referenced Aug 3, 2026
Closed
Closed
Closed
@oqs-bot

oqs-bot commented Aug 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

CBMC Results (ML-DSA-87, REDUCE-RAM)

⚠️ Attention Required

Proof Status Current Previous Change
compute_pack_t0_t1 ⚠️ 27s 12s +125%
mld_attempt_signature_generation ⚠️ 243s 34s +615%
sign_keypair_internal ⚠️ 43s 6s +617%
sign_pk_from_sk ⚠️ 62s 6s +933%
sign_verify_internal ⚠️ 305s 47s +549%
Full Results (210 proofs)
Proof Status Current Previous Change
**TOTAL** ✅ 1617s 1436s +12.6%
sign_verify_internal ⚠️ 305s 47s +549%
mld_attempt_signature_generation ⚠️ 243s 34s +615%
polyvec_matrix_pointwise_montgomery_yvec ✅ 192s 196s -2%
poly_pointwise_montgomery_c ✅ 67s 125s -46%
sign_pk_from_sk ⚠️ 62s 6s +933%
mld_invntt_layer ✅ 54s 111s -51%
sign_keypair_internal ⚠️ 43s 6s +617%
compute_pack_t0_t1 ⚠️ 27s 12s +125%
fqmul ✅ 22s 39s -44%
mld_ntt_layer ✅ 21s 44s -52%
keccakf1600x4_permute_native ✅ 14s 25s -44%
sign_signature_internal ✅ 14s 3s +367%
sig_unpack_hints ✅ 13s 4s +225%
mld_ntt_butterfly_block ✅ 11s 23s -52%
rej_uniform_c ✅ 11s 18s -39%
polyeta_unpack ✅ 10s 13s -23%
poly_ntt_c ✅ 9s 19s -53%
rej_uniform ✅ 9s 7s +29%
polyt0_unpack ✅ 8s 14s -43%
polyveck_decompose ✅ 8s 12s -33%
rej_uniform_native_x86_64 ✅ 8s - new
pointwise_acc_native_aarch64 ✅ 6s 5s +20%
poly_uniform_eta_4x ✅ 6s 12s -50%
sign_keypair ✅ 6s 4s +50%
mld_check_pct ✅ 5s 15s -67%
mld_compute_pack_z ✅ 5s 6s -17%
mld_sample_s1_s2 ✅ 5s 8s -38%
pointwise_acc_native_x86_64 ✅ 5s 8s -38%
poly_decompose_c ✅ 5s 6s -17%
poly_invntt_tomont_c ✅ 5s 9s -44%
polyveck_chknorm ✅ 5s 9s -44%
polyveck_invntt_tomont ✅ 5s 4s +25%
polyveck_reduce ✅ 5s 6s -17%
polyvecl_ntt ✅ 5s 8s -38%
sign_verify ✅ 5s 2s +150%
intt_native_aarch64 ✅ 4s 4s +0%
keccakf1600x4_permute ✅ 4s 2s +100%
mld_keccakf1600_permute_c ✅ 4s 8s -50%
mld_value_barrier_i64 ✅ 4s 2s +100%
pack_sig_h ✅ 4s 3s +33%
poly_caddq ✅ 4s 5s -20%
poly_chknorm ✅ 4s 4s +0%
poly_chknorm_c ✅ 4s 13s -69%
poly_chknorm_native ✅ 4s 1s +300%
poly_uniform_4x ✅ 4s 3s +33%
poly_use_hint_c ✅ 4s 4s +0%
sign_signature_extmu ✅ 4s 4s +0%
sign_signature_pre_hash_shake256 ✅ 4s 3s +33%
sign_verify_pre_hash_shake256 ✅ 4s 7s -43%
intt_native_x86_64 ✅ 3s 4s -25%
keccak_absorb_once_x4 ✅ 3s 8s -62%
keccak_f1600_x1_native_aarch64_v84a ✅ 3s 2s +50%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid ✅ 3s 2s +50%
keccak_squeezeblocks_x4 ✅ 3s 4s -25%
keccakf1600_xor_bytes ✅ 3s 1s +200%
mld_h ✅ 3s 2s +50%
mld_keccakf1600_extract_bytes ✅ 3s 1s +200%
mld_keccakf1600x4_extract_bytes_c ✅ 3s 3s +0%
mld_sample_s1_s2_serial ✅ 3s 6s -50%
ntt_native_aarch64 ✅ 3s 4s -25%
nttunpack_native_x86_64 ✅ 3s 3s +0%
pack_sig_c ✅ 3s 2s +50%
pack_sig_z ✅ 3s 3s +0%
pack_sk_s1 ✅ 3s 2s +50%
pointwise_native_aarch64 ✅ 3s 4s -25%
poly_add ✅ 3s 8s -62%
poly_caddq_c ✅ 3s 3s +0%
poly_caddq_native ✅ 3s 3s +0%
poly_chknorm_native_aarch64 ✅ 3s 5s -40%
poly_decompose_32_native_aarch64 ✅ 3s 3s +0%
poly_decompose_88_native_aarch64 ✅ 3s 2s +50%
poly_pointwise_montgomery ✅ 3s 3s +0%
poly_power2round ✅ 3s 7s -57%
poly_sub ✅ 3s 5s -40%
poly_uniform_gamma1 ✅ 3s 3s +0%
poly_use_hint ✅ 3s 4s -25%
polyeta_pack ✅ 3s 3s +0%
polyvec_matrix_expand_serial ✅ 3s 3s +0%
polyvec_matrix_pointwise_montgomery_row ✅ 3s 13s -77%
polyveck_caddq ✅ 3s 8s -62%
polyveck_ntt ✅ 3s 3s +0%
polyvecl_chknorm ✅ 3s 38s -92%
polyw1_pack ✅ 3s 2s +50%
polyw1_pack_32 ✅ 3s 3s +0%
polyw1_pack_88 ✅ 3s 2s +50%
polyz_pack ✅ 3s 4s -25%
polyz_unpack_17_native_aarch64 ✅ 3s 4s -25%
power2round ✅ 3s 3s +0%
reduce32 ✅ 3s 3s +0%
rej_eta ✅ 3s 2s +50%
rej_eta_c ✅ 3s 4s -25%
rej_eta_native ✅ 3s 4s -25%
rej_uniform_native ✅ 3s 5s -40%
shake128_release ✅ 3s 3s +0%
shake256_finalize ✅ 3s 3s +0%
shake256_release ✅ 3s 5s -40%
shake256_squeeze ✅ 3s 2s +50%
sign_signature ✅ 3s 4s -25%
sign_signature_pre_hash_internal ✅ 3s 2s +50%
sign_verify_extmu ✅ 3s 4s -25%
sign_verify_pre_hash_internal ✅ 3s 3s +0%
sk_s1hat_get_poly ✅ 3s 3s +0%
sk_s2hat_get_poly ✅ 3s 2s +50%
caddq ✅ 2s 3s -33%
decompose ✅ 2s 2s +0%
fqscale ✅ 2s 1s +100%
keccak_absorb ✅ 2s 4s -50%
keccak_f1600_x1_native_aarch64 ✅ 2s 2s +0%
keccak_f1600_x4_native_aarch64_v84a ✅ 2s 1s +100%
keccak_f1600_x4_native_avx2 ✅ 2s 3s -33%
keccakf1600_extract_bytes (big endian) ✅ 2s 3s -33%
keccakf1600_permute ✅ 2s 2s +0%
keccakf1600_permute_native ✅ 2s 3s -33%
keccakf1600_xor_bytes (big endian) ✅ 2s 2s +0%
keccakf1600x4_extract_bytes_native ✅ 2s 4s -50%
keccakf1600x4_xor_bytes ✅ 2s 1s +100%
keccakf1600x4_xor_bytes_native ✅ 2s 2s +0%
make_hint ✅ 2s 2s +0%
mld_ct_cmask_neg_i32 ✅ 2s 2s +0%
mld_ct_cmask_nonzero_u32 ✅ 2s 5s -60%
mld_ct_get_optblocker_u32 ✅ 2s 2s +0%
mld_ct_get_optblocker_u8 ✅ 2s 3s -33%
mld_keccakf1600x4_xor_bytes_c ✅ 2s 1s +100%
mld_prepare_domain_separation_prefix ✅ 2s 3s -33%
mld_sign_attempt ✅ 2s - new
ntt_native_x86_64 ✅ 2s 2s +0%
pack_sk_rho_key_tr_s2 ✅ 2s 2s +0%
pointwise_native_x86_64 ✅ 2s 5s -60%
poly_caddq_native_aarch64 ✅ 2s 3s -33%
poly_caddq_native_x86_64 ✅ 2s 3s -33%
poly_challenge ✅ 2s 4s -50%
poly_chknorm_native_x86_64 ✅ 2s 2s +0%
poly_decompose ✅ 2s 2s +0%
poly_invntt_tomont ✅ 2s 4s -50%
poly_invntt_tomont_native ✅ 2s 2s +0%
poly_ntt ✅ 2s 2s +0%
poly_ntt_native ✅ 2s 4s -50%
poly_permute_bitrev_to_custom_optional ✅ 2s 2s +0%
poly_permute_bitrev_to_custom_optional_native ✅ 2s 3s -33%
poly_pointwise_montgomery_native ✅ 2s 3s -33%
poly_reduce ✅ 2s 4s -50%
poly_uniform_eta ✅ 2s 5s -60%
poly_uniform_gamma1_4x ✅ 2s 3s -33%
polyt0_pack ✅ 2s 3s -33%
polyt1_pack ✅ 2s 5s -60%
polyveck_pack_w1 ✅ 2s 3s -33%
polyveck_unpack_eta ✅ 2s 3s -33%
polyvecl_pack_eta ✅ 2s 2s +0%
polyvecl_pointwise_acc_montgomery ✅ 2s 2s +0%
polyvecl_pointwise_acc_montgomery_native ✅ 2s 2s +0%
polyvecl_uniform_gamma1_serial ✅ 2s 2s +0%
polyvecl_unpack_eta ✅ 2s 3s -33%
polyvecl_unpack_z ✅ 2s 3s -33%
polyz_unpack ✅ 2s 3s -33%
polyz_unpack_19_native_aarch64 ✅ 2s 5s -60%
polyz_unpack_c ✅ 2s 7s -71%
polyz_unpack_native ✅ 2s 1s +100%
polyz_unpack_native_x86_64 ✅ 2s 3s -33%
rej_uniform_eta_native_aarch64 ✅ 2s 3s -33%
rej_uniform_native_aarch64 ✅ 2s 3s -33%
shake128_absorb ✅ 2s 2s +0%
shake128_init ✅ 2s 2s +0%
shake128x4_squeezeblocks ✅ 2s 1s +100%
shake256 ✅ 2s 3s -33%
shake256_absorb ✅ 2s 3s -33%
sk_t0hat_get_poly ✅ 2s 3s -33%
unpack_pk_t1 ✅ 2s 2s +0%
unpack_sk_s2hat ✅ 2s 3s -33%
unpack_sk_t0hat ✅ 2s 4s -50%
use_hint ✅ 2s 3s -33%
yvec_get_poly ✅ 2s 2s +0%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid ✅ 1s 2s -50%
keccak_finalize ✅ 1s 1s +0%
keccak_init ✅ 1s 1s +0%
keccak_squeeze ✅ 1s 5s -80%
keccakf1600x4_extract_bytes ✅ 1s 1s +0%
mld_ct_abs_i32 ✅ 1s 1s +0%
mld_ct_cmask_nonzero_u8 ✅ 1s 2s -50%
mld_ct_get_optblocker_i64 ✅ 1s 2s -50%
mld_ct_memcmp ✅ 1s 1s +0%
mld_ct_sel_int32 ✅ 1s 2s -50%
mld_polymat_expand_entry ✅ 1s 4s -75%
mld_sign_finish ✅ 1s - new
mld_sign_resume ✅ 1s - new
mld_value_barrier_u32 ✅ 1s 3s -67%
mld_value_barrier_u8 ✅ 1s 2s -50%
montgomery_reduce ✅ 1s 2s -50%
poly_decompose_native ✅ 1s 2s -50%
poly_decompose_native_x86_64 ✅ 1s 3s -67%
poly_shiftl ✅ 1s 4s -75%
poly_uniform ✅ 1s 4s -75%
poly_use_hint_native ✅ 1s 1s +0%
poly_use_hint_native_aarch64 ✅ 1s 3s -67%
poly_use_hint_native_x86_64 ✅ 1s - new
polyt1_unpack ✅ 1s 3s -67%
polyvec_matrix_expand ✅ 1s 3s -67%
polyveck_pack_eta ✅ 1s 5s -80%
polyvecl_pointwise_acc_montgomery_c ✅ 1s 2s -50%
polyvecl_uniform_gamma1 ✅ 1s 3s -67%
rej_uniform_eta_native_x86_64 ✅ 1s - new
shake128_finalize ✅ 1s 2s -50%
shake128_squeeze ✅ 1s 1s +0%
shake128x4_absorb_once ✅ 1s 4s -75%
shake256_init ✅ 1s 3s -67%
shake256x4_absorb_once ✅ 1s 5s -80%
shake256x4_squeezeblocks ✅ 1s 4s -75%
sys_check_capability ✅ 1s 2s -50%
unpack_sk ✅ 1s 4s -75%
unpack_sk_s1hat ✅ 1s 3s -67%
yvec_init ✅ 1s 4s -75%

@oqs-bot

oqs-bot commented Aug 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

CBMC Results (ML-DSA-44, REDUCE-RAM)

⚠️ Attention Required

Proof Status Current Previous Change
compute_pack_t0_t1 ⚠️ 31s 12s +158%
mld_attempt_signature_generation ⚠️ 146s 19s +668%
sign_keypair_internal ⚠️ 20s 4s +400%
sign_pk_from_sk ⚠️ 39s 5s +680%
sign_verify_internal ⚠️ 161s 49s +229%
Full Results (210 proofs)
Proof Status Current Previous Change
**TOTAL** ✅ 1251s 1364s -8.3%
sign_verify_internal ⚠️ 161s 49s +229%
mld_attempt_signature_generation ⚠️ 146s 19s +668%
polyvec_matrix_pointwise_montgomery_yvec ✅ 97s 149s -35%
poly_pointwise_montgomery_c ✅ 65s 112s -42%
mld_invntt_layer ✅ 55s 105s -48%
sign_pk_from_sk ⚠️ 39s 5s +680%
compute_pack_t0_t1 ⚠️ 31s 12s +158%
mld_ntt_layer ✅ 24s 41s -41%
fqmul ✅ 22s 39s -44%
sign_keypair_internal ⚠️ 20s 4s +400%
sign_signature_internal ✅ 14s 4s +250%
poly_ntt_c ✅ 13s 21s -38%
keccakf1600x4_permute_native ✅ 12s 22s -45%
rej_uniform_c ✅ 12s 16s -25%
sig_unpack_hints ✅ 12s 2s +500%
mld_ntt_butterfly_block ✅ 11s 23s -52%
rej_uniform_native_x86_64 ✅ 10s - new
polyeta_unpack ✅ 9s 14s -36%
polyt0_unpack ✅ 9s 12s -25%
rej_uniform ✅ 8s 8s +0%
poly_invntt_tomont_c ✅ 6s 11s -45%
poly_uniform_eta_4x ✅ 6s 12s -50%
polyvecl_uniform_gamma1 ✅ 6s 2s +200%
polyz_unpack_c ✅ 6s 8s -25%
make_hint ✅ 5s 3s +67%
poly_chknorm_c ✅ 5s 11s -55%
polyvec_matrix_pointwise_montgomery_row ✅ 5s 6s -17%
rej_eta_native ✅ 5s 3s +67%
sign_keypair ✅ 5s 5s +0%
sign_signature_pre_hash_internal ✅ 5s 4s +25%
sign_signature_pre_hash_shake256 ✅ 5s 4s +25%
decompose ✅ 4s 3s +33%
fqscale ✅ 4s 2s +100%
keccak_absorb_once_x4 ✅ 4s 8s -50%
keccakf1600_permute ✅ 4s 2s +100%
keccakf1600x4_extract_bytes_native ✅ 4s 4s +0%
mld_check_pct ✅ 4s 15s -73%
mld_ct_get_optblocker_u8 ✅ 4s 2s +100%
mld_keccakf1600_permute_c ✅ 4s 7s -43%
mld_keccakf1600x4_extract_bytes_c ✅ 4s 4s +0%
mld_sign_resume ✅ 4s - new
poly_add ✅ 4s 7s -43%
poly_caddq_native_aarch64 ✅ 4s 3s +33%
poly_permute_bitrev_to_custom_optional ✅ 4s 5s -20%
poly_sub ✅ 4s 3s +33%
poly_uniform_eta ✅ 4s 2s +100%
polyeta_pack ✅ 4s 3s +33%
polyveck_chknorm ✅ 4s 67s -94%
polyveck_unpack_eta ✅ 4s 2s +100%
polyw1_pack_88 ✅ 4s 2s +100%
polyz_unpack ✅ 4s 3s +33%
reduce32 ✅ 4s 3s +33%
rej_uniform_eta_native_aarch64 ✅ 4s 3s +33%
shake128_squeeze ✅ 4s 2s +100%
sign_verify ✅ 4s 4s +0%
sign_verify_pre_hash_shake256 ✅ 4s 5s -20%
caddq ✅ 3s 6s -50%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid ✅ 3s 3s +0%
keccakf1600_extract_bytes (big endian) ✅ 3s 4s -25%
mld_compute_pack_z ✅ 3s 6s -50%
mld_ct_cmask_nonzero_u32 ✅ 3s 3s +0%
mld_ct_cmask_nonzero_u8 ✅ 3s 2s +50%
mld_prepare_domain_separation_prefix ✅ 3s 3s +0%
mld_sign_attempt ✅ 3s - new
ntt_native_aarch64 ✅ 3s 4s -25%
ntt_native_x86_64 ✅ 3s 3s +0%
pack_sig_h ✅ 3s 4s -25%
pack_sk_rho_key_tr_s2 ✅ 3s 5s -40%
poly_caddq_native ✅ 3s 3s +0%
poly_caddq_native_x86_64 ✅ 3s 4s -25%
poly_challenge ✅ 3s 6s -50%
poly_chknorm_native_aarch64 ✅ 3s 2s +50%
poly_decompose_c ✅ 3s 5s -40%
poly_invntt_tomont_native ✅ 3s 3s +0%
poly_permute_bitrev_to_custom_optional_native ✅ 3s 3s +0%
poly_pointwise_montgomery_native ✅ 3s 2s +50%
poly_power2round ✅ 3s 4s -25%
poly_shiftl ✅ 3s 4s -25%
poly_use_hint ✅ 3s 2s +50%
poly_use_hint_native ✅ 3s 3s +0%
polyt0_pack ✅ 3s 4s -25%
polyt1_pack ✅ 3s 3s +0%
polyt1_unpack ✅ 3s 2s +50%
polyveck_decompose ✅ 3s 7s -57%
polyveck_invntt_tomont ✅ 3s 5s -40%
polyvecl_ntt ✅ 3s 3s +0%
polyw1_pack ✅ 3s 4s -25%
polyz_pack ✅ 3s 2s +50%
polyz_unpack_17_native_aarch64 ✅ 3s 2s +50%
polyz_unpack_native ✅ 3s 3s +0%
power2round ✅ 3s 2s +50%
rej_uniform_eta_native_x86_64 ✅ 3s - new
rej_uniform_native ✅ 3s 5s -40%
rej_uniform_native_aarch64 ✅ 3s 3s +0%
shake128_finalize ✅ 3s 3s +0%
shake128_release ✅ 3s 2s +50%
shake128x4_absorb_once ✅ 3s 2s +50%
shake128x4_squeezeblocks ✅ 3s 2s +50%
sign_signature ✅ 3s 6s -50%
sign_verify_extmu ✅ 3s 5s -40%
sk_s1hat_get_poly ✅ 3s 2s +50%
unpack_sk ✅ 3s 3s +0%
yvec_get_poly ✅ 3s 3s +0%
intt_native_x86_64 ✅ 2s 2s +0%
keccak_absorb ✅ 2s 3s -33%
keccak_f1600_x1_native_aarch64 ✅ 2s 3s -33%
keccak_f1600_x1_native_aarch64_v84a ✅ 2s 2s +0%
keccak_finalize ✅ 2s 2s +0%
keccak_squeezeblocks_x4 ✅ 2s 3s -33%
keccakf1600_permute_native ✅ 2s 3s -33%
keccakf1600_xor_bytes ✅ 2s 3s -33%
keccakf1600_xor_bytes (big endian) ✅ 2s 6s -67%
keccakf1600x4_extract_bytes ✅ 2s 2s +0%
keccakf1600x4_permute ✅ 2s 4s -50%
keccakf1600x4_xor_bytes ✅ 2s 3s -33%
keccakf1600x4_xor_bytes_native ✅ 2s 5s -60%
mld_ct_abs_i32 ✅ 2s 3s -33%
mld_ct_get_optblocker_i64 ✅ 2s 4s -50%
mld_ct_get_optblocker_u32 ✅ 2s 2s +0%
mld_ct_memcmp ✅ 2s 1s +100%
mld_ct_sel_int32 ✅ 2s 3s -33%
mld_keccakf1600_extract_bytes ✅ 2s 2s +0%
mld_polymat_expand_entry ✅ 2s 2s +0%
mld_sample_s1_s2 ✅ 2s 1s +100%
mld_value_barrier_i64 ✅ 2s 3s -33%
mld_value_barrier_u32 ✅ 2s 1s +100%
mld_value_barrier_u8 ✅ 2s 4s -50%
montgomery_reduce ✅ 2s 2s +0%
nttunpack_native_x86_64 ✅ 2s 4s -50%
pack_sk_s1 ✅ 2s 3s -33%
pointwise_acc_native_aarch64 ✅ 2s 6s -67%
pointwise_acc_native_x86_64 ✅ 2s 4s -50%
pointwise_native_aarch64 ✅ 2s 2s +0%
pointwise_native_x86_64 ✅ 2s 4s -50%
poly_caddq ✅ 2s 4s -50%
poly_caddq_c ✅ 2s 3s -33%
poly_chknorm ✅ 2s 3s -33%
poly_chknorm_native_x86_64 ✅ 2s 2s +0%
poly_decompose ✅ 2s 2s +0%
poly_decompose_32_native_aarch64 ✅ 2s 4s -50%
poly_decompose_88_native_aarch64 ✅ 2s 3s -33%
poly_decompose_native ✅ 2s 2s +0%
poly_invntt_tomont ✅ 2s 2s +0%
poly_ntt ✅ 2s 3s -33%
poly_ntt_native ✅ 2s 3s -33%
poly_pointwise_montgomery ✅ 2s 3s -33%
poly_reduce ✅ 2s 4s -50%
poly_uniform_4x ✅ 2s 3s -33%
poly_uniform_gamma1 ✅ 2s 3s -33%
poly_uniform_gamma1_4x ✅ 2s 5s -60%
poly_use_hint_c ✅ 2s 5s -60%
poly_use_hint_native_aarch64 ✅ 2s 3s -33%
poly_use_hint_native_x86_64 ✅ 2s - new
polyvec_matrix_expand ✅ 2s 3s -33%
polyveck_caddq ✅ 2s 3s -33%
polyveck_pack_eta ✅ 2s 4s -50%
polyveck_reduce ✅ 2s 4s -50%
polyvecl_pack_eta ✅ 2s 2s +0%
polyvecl_pointwise_acc_montgomery ✅ 2s 3s -33%
polyvecl_pointwise_acc_montgomery_c ✅ 2s 4s -50%
polyvecl_pointwise_acc_montgomery_native ✅ 2s 3s -33%
polyw1_pack_32 ✅ 2s 3s -33%
polyz_unpack_native_x86_64 ✅ 2s 3s -33%
shake256 ✅ 2s 1s +100%
shake256_absorb ✅ 2s 2s +0%
shake256_finalize ✅ 2s 2s +0%
shake256x4_absorb_once ✅ 2s 1s +100%
shake256x4_squeezeblocks ✅ 2s 2s +0%
sign_signature_extmu ✅ 2s 4s -50%
sign_verify_pre_hash_internal ✅ 2s 5s -60%
sk_s2hat_get_poly ✅ 2s 5s -60%
sk_t0hat_get_poly ✅ 2s 1s +100%
sys_check_capability ✅ 2s 2s +0%
unpack_pk_t1 ✅ 2s 3s -33%
unpack_sk_s1hat ✅ 2s 3s -33%
unpack_sk_t0hat ✅ 2s 2s +0%
use_hint ✅ 2s 2s +0%
intt_native_aarch64 ✅ 1s 3s -67%
keccak_f1600_x4_native_aarch64_v84a ✅ 1s 3s -67%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid ✅ 1s 2s -50%
keccak_f1600_x4_native_avx2 ✅ 1s 2s -50%
keccak_init ✅ 1s 3s -67%
keccak_squeeze ✅ 1s 2s -50%
mld_ct_cmask_neg_i32 ✅ 1s 2s -50%
mld_h ✅ 1s 4s -75%
mld_keccakf1600x4_xor_bytes_c ✅ 1s 4s -75%
mld_sample_s1_s2_serial ✅ 1s 4s -75%
mld_sign_finish ✅ 1s - new
pack_sig_c ✅ 1s 5s -80%
pack_sig_z ✅ 1s 2s -50%
poly_chknorm_native ✅ 1s 4s -75%
poly_decompose_native_x86_64 ✅ 1s 2s -50%
poly_uniform ✅ 1s 3s -67%
polyvec_matrix_expand_serial ✅ 1s 4s -75%
polyveck_ntt ✅ 1s 2s -50%
polyveck_pack_w1 ✅ 1s 3s -67%
polyvecl_chknorm ✅ 1s 11s -91%
polyvecl_uniform_gamma1_serial ✅ 1s 2s -50%
polyvecl_unpack_eta ✅ 1s 4s -75%
polyvecl_unpack_z ✅ 1s 3s -67%
polyz_unpack_19_native_aarch64 ✅ 1s 4s -75%
rej_eta ✅ 1s 5s -80%
rej_eta_c ✅ 1s 4s -75%
shake128_absorb ✅ 1s 3s -67%
shake128_init ✅ 1s 2s -50%
shake256_init ✅ 1s 4s -75%
shake256_release ✅ 1s 1s +0%
shake256_squeeze ✅ 1s 2s -50%
unpack_sk_s2hat ✅ 1s 4s -75%
yvec_init ✅ 1s 1s +0%

@oqs-bot

oqs-bot commented Aug 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

CBMC Results (ML-DSA-44)

⚠️ Attention Required

Proof Status Current Previous Change
compute_pack_t0_t1 ⚠️ 100s 50s +100%
mld_attempt_signature_generation ⚠️ 299s 58s +416%
sig_unpack_hints ⚠️ 23s 2s +1050%
sign_keypair_internal ⚠️ 20s 4s +400%
sign_pk_from_sk ⚠️ 38s 5s +660%
sign_signature_internal ⚠️ 96s 26s +269%
sign_verify_internal ⚠️ 287s 114s +152%
Full Results (210 proofs)
Proof Status Current Previous Change
**TOTAL** ✅ 1842s 1514s +21.7%
mld_attempt_signature_generation ⚠️ 299s 58s +416%
sign_verify_internal ⚠️ 287s 114s +152%
polyvecl_pointwise_acc_montgomery_c ✅ 155s 131s +18%
poly_pointwise_montgomery_c ✅ 139s 114s +22%
compute_pack_t0_t1 ⚠️ 100s 50s +100%
sign_signature_internal ⚠️ 96s 26s +269%
mld_invntt_layer ✅ 59s 107s -45%
sign_pk_from_sk ⚠️ 38s 5s +660%
mld_ntt_layer ✅ 25s 42s -40%
fqmul ✅ 24s 39s -38%
sig_unpack_hints ⚠️ 23s 2s +1050%
sign_keypair_internal ⚠️ 20s 4s +400%
polyvec_matrix_expand ✅ 17s 28s -39%
keccakf1600x4_permute_native ✅ 12s 22s -45%
mld_ntt_butterfly_block ✅ 12s 23s -48%
polyt0_unpack ✅ 10s 15s -33%
polyvec_matrix_pointwise_montgomery_yvec ✅ 10s 15s -33%
poly_ntt_c ✅ 9s 19s -53%
poly_chknorm_c ✅ 8s 17s -53%
poly_invntt_tomont_c ✅ 8s 11s -27%
rej_uniform_c ✅ 8s 15s -47%
rej_uniform_native_x86_64 ✅ 8s - new
poly_uniform_eta_4x ✅ 7s 11s -36%
rej_uniform ✅ 7s 18s -61%
sign_keypair ✅ 7s 4s +75%
polyeta_unpack ✅ 6s 14s -57%
keccak_absorb_once_x4 ✅ 5s 9s -44%
keccakf1600_permute ✅ 5s 2s +150%
mld_check_pct ✅ 5s 14s -64%
poly_uniform_4x ✅ 5s 14s -64%
polyz_unpack_c ✅ 5s 11s -55%
sign_signature_pre_hash_shake256 ✅ 5s 3s +67%
yvec_get_poly ✅ 5s 3s +67%
keccak_absorb ✅ 4s 5s -20%
mld_compute_pack_z ✅ 4s 7s -43%
mld_ct_get_optblocker_u8 ✅ 4s 1s +300%
mld_keccakf1600_extract_bytes ✅ 4s 2s +100%
pointwise_acc_native_x86_64 ✅ 4s 7s -43%
poly_add ✅ 4s 7s -43%
poly_caddq_native ✅ 4s 5s -20%
poly_decompose_native ✅ 4s 3s +33%
poly_power2round ✅ 4s 4s +0%
polyveck_invntt_tomont ✅ 4s 5s -20%
polyveck_reduce ✅ 4s 5s -20%
polyw1_pack ✅ 4s 3s +33%
polyz_unpack_native ✅ 4s 2s +100%
rej_eta_native ✅ 4s 6s -33%
rej_uniform_native ✅ 4s 4s +0%
sign_signature_pre_hash_internal ✅ 4s 6s -33%
sign_verify_extmu ✅ 4s 3s +33%
sign_verify_pre_hash_internal ✅ 4s 3s +33%
caddq ✅ 3s 2s +50%
fqscale ✅ 3s 3s +0%
intt_native_x86_64 ✅ 3s 4s -25%
keccak_f1600_x4_native_aarch64_v84a ✅ 3s 2s +50%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid ✅ 3s 3s +0%
keccakf1600_extract_bytes (big endian) ✅ 3s 2s +50%
make_hint ✅ 3s 3s +0%
mld_ct_abs_i32 ✅ 3s 2s +50%
mld_ct_sel_int32 ✅ 3s 2s +50%
mld_h ✅ 3s 4s -25%
mld_keccakf1600_permute_c ✅ 3s 8s -62%
mld_keccakf1600x4_xor_bytes_c ✅ 3s 2s +50%
mld_polymat_expand_entry ✅ 3s 3s +0%
mld_sample_s1_s2 ✅ 3s 4s -25%
mld_sign_attempt ✅ 3s - new
ntt_native_aarch64 ✅ 3s 3s +0%
nttunpack_native_x86_64 ✅ 3s 1s +200%
pack_sig_z ✅ 3s 4s -25%
pointwise_acc_native_aarch64 ✅ 3s 4s -25%
poly_caddq ✅ 3s 2s +50%
poly_caddq_native_aarch64 ✅ 3s 4s -25%
poly_chknorm_native ✅ 3s 4s -25%
poly_decompose_32_native_aarch64 ✅ 3s 2s +50%
poly_decompose_c ✅ 3s 4s -25%
poly_invntt_tomont ✅ 3s 4s -25%
poly_invntt_tomont_native ✅ 3s 4s -25%
poly_ntt ✅ 3s 3s +0%
poly_pointwise_montgomery_native ✅ 3s 2s +50%
poly_uniform_eta ✅ 3s 5s -40%
poly_uniform_gamma1_4x ✅ 3s 5s -40%
poly_use_hint_native ✅ 3s 4s -25%
polyt1_pack ✅ 3s 4s -25%
polyvec_matrix_expand_serial ✅ 3s 8s -62%
polyvec_matrix_pointwise_montgomery_row ✅ 3s 2s +50%
polyveck_caddq ✅ 3s 3s +0%
polyveck_decompose ✅ 3s 4s -25%
polyveck_pack_eta ✅ 3s 2s +50%
polyveck_pack_w1 ✅ 3s 1s +200%
polyvecl_pointwise_acc_montgomery ✅ 3s 4s -25%
polyvecl_uniform_gamma1_serial ✅ 3s 2s +50%
polyw1_pack_32 ✅ 3s 2s +50%
polyz_unpack_17_native_aarch64 ✅ 3s 5s -40%
polyz_unpack_19_native_aarch64 ✅ 3s 5s -40%
polyz_unpack_native_x86_64 ✅ 3s 3s +0%
rej_uniform_eta_native_aarch64 ✅ 3s 2s +50%
rej_uniform_eta_native_x86_64 ✅ 3s - new
shake128_absorb ✅ 3s 2s +50%
shake128_squeeze ✅ 3s 1s +200%
shake128x4_absorb_once ✅ 3s 3s +0%
shake256 ✅ 3s 1s +200%
shake256_finalize ✅ 3s 2s +50%
shake256_release ✅ 3s 2s +50%
sign_signature ✅ 3s 3s +0%
sign_signature_extmu ✅ 3s 4s -25%
sign_verify_pre_hash_shake256 ✅ 3s 5s -40%
sk_t0hat_get_poly ✅ 3s 2s +50%
unpack_pk_t1 ✅ 3s 5s -40%
unpack_sk ✅ 3s 3s +0%
use_hint ✅ 3s 2s +50%
decompose ✅ 2s 2s +0%
keccak_f1600_x1_native_aarch64 ✅ 2s 2s +0%
keccak_finalize ✅ 2s 3s -33%
keccak_init ✅ 2s 3s -33%
keccak_squeeze ✅ 2s 1s +100%
keccak_squeezeblocks_x4 ✅ 2s 4s -50%
keccakf1600x4_extract_bytes ✅ 2s 2s +0%
keccakf1600x4_permute ✅ 2s 4s -50%
keccakf1600x4_xor_bytes ✅ 2s 2s +0%
keccakf1600x4_xor_bytes_native ✅ 2s 3s -33%
mld_ct_cmask_nonzero_u32 ✅ 2s 2s +0%
mld_ct_cmask_nonzero_u8 ✅ 2s 2s +0%
mld_ct_memcmp ✅ 2s 3s -33%
mld_keccakf1600x4_extract_bytes_c ✅ 2s 2s +0%
mld_sample_s1_s2_serial ✅ 2s 3s -33%
mld_sign_finish ✅ 2s - new
mld_sign_resume ✅ 2s - new
mld_value_barrier_i64 ✅ 2s 2s +0%
mld_value_barrier_u32 ✅ 2s 2s +0%
mld_value_barrier_u8 ✅ 2s 3s -33%
montgomery_reduce ✅ 2s 3s -33%
pack_sig_c ✅ 2s 2s +0%
pack_sk_rho_key_tr_s2 ✅ 2s 3s -33%
pack_sk_s1 ✅ 2s 2s +0%
pointwise_native_aarch64 ✅ 2s 5s -60%
pointwise_native_x86_64 ✅ 2s 4s -50%
poly_caddq_c ✅ 2s 2s +0%
poly_caddq_native_x86_64 ✅ 2s 4s -50%
poly_challenge ✅ 2s 3s -33%
poly_chknorm_native_aarch64 ✅ 2s 4s -50%
poly_chknorm_native_x86_64 ✅ 2s 2s +0%
poly_decompose ✅ 2s 3s -33%
poly_decompose_88_native_aarch64 ✅ 2s 4s -50%
poly_ntt_native ✅ 2s 5s -60%
poly_permute_bitrev_to_custom_optional ✅ 2s 2s +0%
poly_permute_bitrev_to_custom_optional_native ✅ 2s 4s -50%
poly_pointwise_montgomery ✅ 2s 3s -33%
poly_uniform ✅ 2s 6s -67%
poly_uniform_gamma1 ✅ 2s 4s -50%
poly_use_hint ✅ 2s 4s -50%
poly_use_hint_c ✅ 2s 3s -33%
polyeta_pack ✅ 2s 3s -33%
polyt1_unpack ✅ 2s 5s -60%
polyvecl_chknorm ✅ 2s 10s -80%
polyvecl_ntt ✅ 2s 2s +0%
polyvecl_pack_eta ✅ 2s 3s -33%
polyvecl_pointwise_acc_montgomery_native ✅ 2s 2s +0%
polyvecl_uniform_gamma1 ✅ 2s 3s -33%
polyvecl_unpack_eta ✅ 2s 2s +0%
polyw1_pack_88 ✅ 2s 1s +100%
polyz_pack ✅ 2s 2s +0%
polyz_unpack ✅ 2s 3s -33%
rej_eta ✅ 2s 3s -33%
rej_eta_c ✅ 2s 4s -50%
shake128_finalize ✅ 2s 2s +0%
shake128_release ✅ 2s 1s +100%
shake128x4_squeezeblocks ✅ 2s 1s +100%
shake256x4_absorb_once ✅ 2s 3s -33%
sign_verify ✅ 2s 4s -50%
sk_s2hat_get_poly ✅ 2s 2s +0%
sys_check_capability ✅ 2s 4s -50%
unpack_sk_s1hat ✅ 2s 1s +100%
unpack_sk_t0hat ✅ 2s 3s -33%
yvec_init ✅ 2s 3s -33%
intt_native_aarch64 ✅ 1s 9s -89%
keccak_f1600_x1_native_aarch64_v84a ✅ 1s 3s -67%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid ✅ 1s 1s +0%
keccak_f1600_x4_native_avx2 ✅ 1s 3s -67%
keccakf1600_permute_native ✅ 1s 3s -67%
keccakf1600_xor_bytes ✅ 1s 1s +0%
keccakf1600_xor_bytes (big endian) ✅ 1s 4s -75%
keccakf1600x4_extract_bytes_native ✅ 1s 3s -67%
mld_ct_cmask_neg_i32 ✅ 1s 3s -67%
mld_ct_get_optblocker_i64 ✅ 1s 4s -75%
mld_ct_get_optblocker_u32 ✅ 1s 1s +0%
mld_prepare_domain_separation_prefix ✅ 1s 4s -75%
ntt_native_x86_64 ✅ 1s 3s -67%
pack_sig_h ✅ 1s 3s -67%
poly_chknorm ✅ 1s 4s -75%
poly_decompose_native_x86_64 ✅ 1s 3s -67%
poly_reduce ✅ 1s 3s -67%
poly_shiftl ✅ 1s 3s -67%
poly_sub ✅ 1s 3s -67%
poly_use_hint_native_aarch64 ✅ 1s 2s -50%
poly_use_hint_native_x86_64 ✅ 1s - new
polyt0_pack ✅ 1s 2s -50%
polyveck_chknorm ✅ 1s 5s -80%
polyveck_ntt ✅ 1s 5s -80%
polyveck_unpack_eta ✅ 1s 2s -50%
polyvecl_unpack_z ✅ 1s 2s -50%
power2round ✅ 1s 3s -67%
reduce32 ✅ 1s 2s -50%
rej_uniform_native_aarch64 ✅ 1s 5s -80%
shake128_init ✅ 1s 3s -67%
shake256_absorb ✅ 1s 3s -67%
shake256_init ✅ 1s 3s -67%
shake256_squeeze ✅ 1s 2s -50%
shake256x4_squeezeblocks ✅ 1s 4s -75%
sk_s1hat_get_poly ✅ 1s 3s -67%
unpack_sk_s2hat ✅ 1s 4s -75%

@oqs-bot

oqs-bot commented Aug 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

CBMC Results (ML-DSA-65, REDUCE-RAM)

⚠️ Attention Required

Proof Status Current Previous Change
compute_pack_t0_t1 ⚠️ 33s 7s +371%
mld_attempt_signature_generation ⚠️ 145s 31s +368%
sign_keypair_internal ⚠️ 26s 3s +767%
sign_pk_from_sk ⚠️ 55s 5s +1000%
sign_verify_internal ⚠️ 164s 71s +131%
Full Results (210 proofs)
Proof Status Current Previous Change
**TOTAL** ✅ 1325s 1482s -10.6%
sign_verify_internal ⚠️ 164s 71s +131%
mld_attempt_signature_generation ⚠️ 145s 31s +368%
polyvec_matrix_pointwise_montgomery_yvec ✅ 135s 201s -33%
poly_pointwise_montgomery_c ✅ 64s 116s -45%
mld_invntt_layer ✅ 55s 108s -49%
sign_pk_from_sk ⚠️ 55s 5s +1000%
polyvecl_chknorm ✅ 46s 43s +7%
compute_pack_t0_t1 ⚠️ 33s 7s +371%
sign_keypair_internal ⚠️ 26s 3s +767%
fqmul ✅ 22s 40s -45%
mld_ntt_layer ✅ 20s 43s -53%
sign_signature_internal ✅ 13s 6s +117%
mld_ntt_butterfly_block ✅ 12s 25s -52%
keccakf1600x4_permute_native ✅ 11s 22s -50%
sig_unpack_hints ✅ 11s 1s +1000%
poly_ntt_c ✅ 10s 22s -55%
rej_uniform_c ✅ 10s 16s -38%
polyt0_unpack ✅ 9s 13s -31%
rej_uniform ✅ 9s 7s +29%
poly_uniform_eta_4x ✅ 7s 13s -46%
rej_uniform_native_x86_64 ✅ 7s - new
poly_invntt_tomont_c ✅ 6s 10s -40%
polyveck_decompose ✅ 6s 14s -57%
mld_value_barrier_u32 ✅ 5s 4s +25%
pointwise_acc_native_x86_64 ✅ 5s 5s +0%
poly_chknorm_c ✅ 5s 13s -62%
polyeta_unpack ✅ 5s 4s +25%
polyvec_matrix_pointwise_montgomery_row ✅ 5s 8s -38%
polyz_unpack_17_native_aarch64 ✅ 5s 2s +150%
keccak_absorb ✅ 4s 3s +33%
keccak_absorb_once_x4 ✅ 4s 10s -60%
poly_caddq_native ✅ 4s 4s +0%
poly_decompose_c ✅ 4s 8s -50%
poly_invntt_tomont_native ✅ 4s 5s -20%
poly_power2round ✅ 4s 7s -43%
poly_shiftl ✅ 4s 3s +33%
poly_use_hint_c ✅ 4s 2s +100%
poly_use_hint_native_x86_64 ✅ 4s - new
polyveck_caddq ✅ 4s 7s -43%
polyveck_invntt_tomont ✅ 4s 7s -43%
polyvecl_ntt ✅ 4s 7s -43%
polyvecl_unpack_eta ✅ 4s 2s +100%
polyz_unpack_19_native_aarch64 ✅ 4s 5s -20%
polyz_unpack_c ✅ 4s 9s -56%
rej_eta_c ✅ 4s 4s +0%
shake256 ✅ 4s 2s +100%
sign_keypair ✅ 4s 4s +0%
sign_signature_extmu ✅ 4s 4s +0%
sign_signature_pre_hash_internal ✅ 4s 3s +33%
sign_signature_pre_hash_shake256 ✅ 4s 7s -43%
sign_verify_pre_hash_shake256 ✅ 4s 6s -33%
unpack_sk ✅ 4s 3s +33%
unpack_sk_s1hat ✅ 4s 1s +300%
use_hint ✅ 4s 2s +100%
intt_native_x86_64 ✅ 3s 4s -25%
keccak_f1600_x1_native_aarch64 ✅ 3s 2s +50%
keccak_f1600_x1_native_aarch64_v84a ✅ 3s 2s +50%
keccak_squeezeblocks_x4 ✅ 3s 4s -25%
keccakf1600_permute ✅ 3s 4s -25%
keccakf1600x4_extract_bytes_native ✅ 3s 1s +200%
mld_check_pct ✅ 3s 12s -75%
mld_compute_pack_z ✅ 3s 5s -40%
mld_h ✅ 3s 3s +0%
mld_keccakf1600_permute_c ✅ 3s 7s -57%
mld_keccakf1600x4_xor_bytes_c ✅ 3s 2s +50%
mld_sample_s1_s2 ✅ 3s 6s -50%
mld_sample_s1_s2_serial ✅ 3s 3s +0%
mld_sign_attempt ✅ 3s - new
mld_sign_resume ✅ 3s - new
ntt_native_x86_64 ✅ 3s 5s -40%
nttunpack_native_x86_64 ✅ 3s 3s +0%
pointwise_acc_native_aarch64 ✅ 3s 6s -50%
poly_add ✅ 3s 7s -57%
poly_challenge ✅ 3s 5s -40%
poly_chknorm ✅ 3s 3s +0%
poly_decompose ✅ 3s 2s +50%
poly_decompose_32_native_aarch64 ✅ 3s 4s -25%
poly_decompose_88_native_aarch64 ✅ 3s 2s +50%
poly_ntt ✅ 3s 2s +50%
poly_ntt_native ✅ 3s 2s +50%
poly_uniform ✅ 3s 2s +50%
poly_uniform_eta ✅ 3s 5s -40%
poly_uniform_gamma1 ✅ 3s 3s +0%
poly_uniform_gamma1_4x ✅ 3s 3s +0%
poly_use_hint_native_aarch64 ✅ 3s 4s -25%
polyt1_pack ✅ 3s 3s +0%
polyt1_unpack ✅ 3s 3s +0%
polyveck_chknorm ✅ 3s 36s -92%
polyvecl_pointwise_acc_montgomery_c ✅ 3s 3s +0%
polyvecl_pointwise_acc_montgomery_native ✅ 3s 3s +0%
polyvecl_uniform_gamma1_serial ✅ 3s 1s +200%
polyw1_pack ✅ 3s 3s +0%
polyz_unpack ✅ 3s 3s +0%
polyz_unpack_native ✅ 3s 3s +0%
reduce32 ✅ 3s 2s +50%
rej_eta ✅ 3s 5s -40%
rej_uniform_native_aarch64 ✅ 3s 5s -40%
shake128_release ✅ 3s 2s +50%
shake256x4_squeezeblocks ✅ 3s 2s +50%
sign_signature ✅ 3s 5s -40%
sign_verify_extmu ✅ 3s 2s +50%
unpack_sk_t0hat ✅ 3s 4s -25%
caddq ✅ 2s 2s +0%
intt_native_aarch64 ✅ 2s 2s +0%
keccak_f1600_x4_native_aarch64_v84a ✅ 2s 2s +0%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid ✅ 2s 3s -33%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid ✅ 2s 3s -33%
keccak_init ✅ 2s 4s -50%
keccak_squeeze ✅ 2s 2s +0%
keccakf1600_permute_native ✅ 2s 2s +0%
keccakf1600_xor_bytes (big endian) ✅ 2s 2s +0%
keccakf1600x4_extract_bytes ✅ 2s 4s -50%
keccakf1600x4_permute ✅ 2s 1s +100%
keccakf1600x4_xor_bytes_native ✅ 2s 2s +0%
make_hint ✅ 2s 3s -33%
mld_ct_abs_i32 ✅ 2s 6s -67%
mld_ct_cmask_neg_i32 ✅ 2s 3s -33%
mld_ct_cmask_nonzero_u32 ✅ 2s 3s -33%
mld_ct_cmask_nonzero_u8 ✅ 2s 2s +0%
mld_ct_get_optblocker_i64 ✅ 2s 1s +100%
mld_ct_get_optblocker_u32 ✅ 2s 3s -33%
mld_ct_get_optblocker_u8 ✅ 2s 4s -50%
mld_keccakf1600_extract_bytes ✅ 2s 2s +0%
mld_keccakf1600x4_extract_bytes_c ✅ 2s 2s +0%
mld_prepare_domain_separation_prefix ✅ 2s 4s -50%
mld_sign_finish ✅ 2s - new
montgomery_reduce ✅ 2s 1s +100%
ntt_native_aarch64 ✅ 2s 3s -33%
pack_sig_c ✅ 2s 3s -33%
pack_sk_s1 ✅ 2s 3s -33%
pointwise_native_aarch64 ✅ 2s 3s -33%
poly_caddq ✅ 2s 3s -33%
poly_caddq_c ✅ 2s 5s -60%
poly_caddq_native_aarch64 ✅ 2s 2s +0%
poly_caddq_native_x86_64 ✅ 2s 1s +100%
poly_chknorm_native_aarch64 ✅ 2s 2s +0%
poly_chknorm_native_x86_64 ✅ 2s 4s -50%
poly_decompose_native_x86_64 ✅ 2s 2s +0%
poly_permute_bitrev_to_custom_optional_native ✅ 2s 3s -33%
poly_pointwise_montgomery ✅ 2s 2s +0%
poly_pointwise_montgomery_native ✅ 2s 4s -50%
poly_reduce ✅ 2s 4s -50%
poly_sub ✅ 2s 4s -50%
poly_use_hint ✅ 2s 3s -33%
poly_use_hint_native ✅ 2s 7s -71%
polyeta_pack ✅ 2s 1s +100%
polyt0_pack ✅ 2s 5s -60%
polyvec_matrix_expand_serial ✅ 2s 3s -33%
polyveck_ntt ✅ 2s 4s -50%
polyveck_pack_eta ✅ 2s 3s -33%
polyveck_reduce ✅ 2s 6s -67%
polyvecl_pack_eta ✅ 2s 2s +0%
polyvecl_unpack_z ✅ 2s 1s +100%
polyw1_pack_32 ✅ 2s 2s +0%
polyw1_pack_88 ✅ 2s 3s -33%
polyz_unpack_native_x86_64 ✅ 2s 3s -33%
rej_uniform_eta_native_aarch64 ✅ 2s 5s -60%
rej_uniform_eta_native_x86_64 ✅ 2s - new
shake128x4_absorb_once ✅ 2s 2s +0%
shake256_init ✅ 2s 4s -50%
shake256_release ✅ 2s 3s -33%
shake256_squeeze ✅ 2s 4s -50%
shake256x4_absorb_once ✅ 2s 2s +0%
sk_s1hat_get_poly ✅ 2s 3s -33%
sys_check_capability ✅ 2s 1s +100%
unpack_pk_t1 ✅ 2s 2s +0%
unpack_sk_s2hat ✅ 2s 3s -33%
yvec_get_poly ✅ 2s 3s -33%
yvec_init ✅ 2s 5s -60%
decompose ✅ 1s 4s -75%
fqscale ✅ 1s 3s -67%
keccak_f1600_x4_native_avx2 ✅ 1s 2s -50%
keccak_finalize ✅ 1s 2s -50%
keccakf1600_extract_bytes (big endian) ✅ 1s 3s -67%
keccakf1600_xor_bytes ✅ 1s 4s -75%
keccakf1600x4_xor_bytes ✅ 1s 2s -50%
mld_ct_memcmp ✅ 1s 4s -75%
mld_ct_sel_int32 ✅ 1s 2s -50%
mld_polymat_expand_entry ✅ 1s 3s -67%
mld_value_barrier_i64 ✅ 1s 2s -50%
mld_value_barrier_u8 ✅ 1s 1s +0%
pack_sig_h ✅ 1s 2s -50%
pack_sig_z ✅ 1s 1s +0%
pack_sk_rho_key_tr_s2 ✅ 1s 2s -50%
pointwise_native_x86_64 ✅ 1s 2s -50%
poly_chknorm_native ✅ 1s 4s -75%
poly_decompose_native ✅ 1s 5s -80%
poly_invntt_tomont ✅ 1s 5s -80%
poly_permute_bitrev_to_custom_optional ✅ 1s 3s -67%
poly_uniform_4x ✅ 1s 4s -75%
polyvec_matrix_expand ✅ 1s 6s -83%
polyveck_pack_w1 ✅ 1s 4s -75%
polyveck_unpack_eta ✅ 1s 3s -67%
polyvecl_pointwise_acc_montgomery ✅ 1s 3s -67%
polyvecl_uniform_gamma1 ✅ 1s 4s -75%
polyz_pack ✅ 1s 3s -67%
power2round ✅ 1s 2s -50%
rej_eta_native ✅ 1s 3s -67%
rej_uniform_native ✅ 1s 4s -75%
shake128_absorb ✅ 1s 2s -50%
shake128_finalize ✅ 1s 2s -50%
shake128_init ✅ 1s 6s -83%
shake128_squeeze ✅ 1s 3s -67%
shake128x4_squeezeblocks ✅ 1s 2s -50%
shake256_absorb ✅ 1s 4s -75%
shake256_finalize ✅ 1s 1s +0%
sign_verify ✅ 1s 6s -83%
sign_verify_pre_hash_internal ✅ 1s 5s -80%
sk_s2hat_get_poly ✅ 1s 1s +0%
sk_t0hat_get_poly ✅ 1s 1s +0%

@oqs-bot

oqs-bot commented Aug 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

CBMC Results (ML-DSA-65)

⚠️ Attention Required

Proof Status Current Previous Change
compute_pack_t0_t1 ⚠️ 128s 13s +885%
mld_attempt_signature_generation ⚠️ 250s 63s +297%
sig_unpack_hints ⚠️ 27s 2s +1250%
sign_keypair_internal ⚠️ 23s 5s +360%
sign_pk_from_sk ⚠️ 42s 6s +600%
sign_signature_internal ⚠️ 187s 55s +240%
sign_verify_internal ⚠️ 389s 177s +120%
Full Results (210 proofs)
Proof Status Current Previous Change
**TOTAL** ✅ 2109s 1784s +18.2%
sign_verify_internal ⚠️ 389s 177s +120%
mld_attempt_signature_generation ⚠️ 250s 63s +297%
sign_signature_internal ⚠️ 187s 55s +240%
polyvecl_pointwise_acc_montgomery_c ✅ 161s 210s -23%
poly_pointwise_montgomery_c ✅ 136s 125s +9%
compute_pack_t0_t1 ⚠️ 128s 13s +885%
polyvec_matrix_expand ✅ 75s 110s -32%
mld_invntt_layer ✅ 58s 109s -47%
sign_pk_from_sk ⚠️ 42s 6s +600%
sig_unpack_hints ⚠️ 27s 2s +1250%
mld_ntt_layer ✅ 24s 41s -41%
sign_keypair_internal ⚠️ 23s 5s +360%
fqmul ✅ 22s 40s -45%
polyveck_ntt ✅ 17s 7s +143%
polyvec_matrix_expand_serial ✅ 16s 27s -41%
keccakf1600x4_permute_native ✅ 12s 23s -48%
mld_ntt_butterfly_block ✅ 12s 24s -50%
rej_uniform ✅ 11s 18s -39%
poly_ntt_c ✅ 10s 19s -47%
polyveck_decompose ✅ 10s 12s -17%
mld_check_pct ✅ 9s 14s -36%
poly_uniform_eta_4x ✅ 8s 14s -43%
polyt0_unpack ✅ 8s 16s -50%
poly_chknorm_c ✅ 7s 15s -53%
poly_invntt_tomont_c ✅ 7s 11s -36%
polyvec_matrix_pointwise_montgomery_yvec ✅ 7s 18s -61%
rej_uniform_native_x86_64 ✅ 7s - new
polyvecl_unpack_eta ✅ 6s 3s +100%
rej_uniform_c ✅ 6s 14s -57%
sign_keypair ✅ 6s 3s +100%
keccak_absorb_once_x4 ✅ 5s 8s -38%
make_hint ✅ 5s 2s +150%
poly_power2round ✅ 5s 4s +25%
polyeta_pack ✅ 5s 3s +67%
polyw1_pack ✅ 5s 4s +25%
rej_eta_native ✅ 5s 3s +67%
shake256x4_absorb_once ✅ 5s 3s +67%
sign_signature_extmu ✅ 5s 2s +150%
sign_verify ✅ 5s 3s +67%
keccak_absorb ✅ 4s 3s +33%
keccak_squeezeblocks_x4 ✅ 4s 5s -20%
mld_compute_pack_z ✅ 4s 7s -43%
mld_ct_cmask_neg_i32 ✅ 4s 2s +100%
mld_ct_cmask_nonzero_u8 ✅ 4s 3s +33%
mld_keccakf1600_permute_c ✅ 4s 6s -33%
pointwise_acc_native_aarch64 ✅ 4s 6s -33%
poly_caddq_native ✅ 4s 2s +100%
poly_decompose_c ✅ 4s 5s -20%
poly_pointwise_montgomery_native ✅ 4s 3s +33%
poly_reduce ✅ 4s 3s +33%
poly_uniform_4x ✅ 4s 13s -69%
poly_use_hint_c ✅ 4s 5s -20%
polyt1_unpack ✅ 4s 5s -20%
polyveck_caddq ✅ 4s 6s -33%
polyz_unpack ✅ 4s 3s +33%
polyz_unpack_c ✅ 4s 13s -69%
rej_uniform_native ✅ 4s 4s +0%
shake128_absorb ✅ 4s 2s +100%
sign_signature_pre_hash_internal ✅ 4s 3s +33%
sign_verify_pre_hash_shake256 ✅ 4s 5s -20%
decompose ✅ 3s 1s +200%
fqscale ✅ 3s 3s +0%
keccak_f1600_x4_native_aarch64_v84a ✅ 3s 4s -25%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid ✅ 3s 2s +50%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid ✅ 3s 2s +50%
keccak_init ✅ 3s 1s +200%
keccakf1600x4_extract_bytes_native ✅ 3s 4s -25%
mld_ct_memcmp ✅ 3s 2s +50%
mld_sample_s1_s2 ✅ 3s 6s -50%
mld_sign_attempt ✅ 3s - new
mld_value_barrier_i64 ✅ 3s 2s +50%
pointwise_acc_native_x86_64 ✅ 3s 8s -62%
poly_caddq_c ✅ 3s 2s +50%
poly_caddq_native_aarch64 ✅ 3s 2s +50%
poly_chknorm_native ✅ 3s 2s +50%
poly_decompose_native_x86_64 ✅ 3s 3s +0%
poly_invntt_tomont ✅ 3s 3s +0%
poly_sub ✅ 3s 3s +0%
poly_uniform ✅ 3s 4s -25%
poly_use_hint_native_x86_64 ✅ 3s - new
polyveck_chknorm ✅ 3s 6s -50%
polyveck_invntt_tomont ✅ 3s 8s -62%
polyveck_pack_w1 ✅ 3s 3s +0%
polyveck_reduce ✅ 3s 4s -25%
polyveck_unpack_eta ✅ 3s 6s -50%
polyvecl_ntt ✅ 3s 4s -25%
polyvecl_pointwise_acc_montgomery ✅ 3s 3s +0%
polyvecl_pointwise_acc_montgomery_native ✅ 3s 2s +50%
polyw1_pack_88 ✅ 3s 2s +50%
rej_uniform_eta_native_x86_64 ✅ 3s - new
shake256x4_squeezeblocks ✅ 3s 2s +50%
sign_signature_pre_hash_shake256 ✅ 3s 3s +0%
sk_s2hat_get_poly ✅ 3s 2s +50%
unpack_sk_s2hat ✅ 3s 4s -25%
unpack_sk_t0hat ✅ 3s 5s -40%
yvec_get_poly ✅ 3s 3s +0%
yvec_init ✅ 3s 3s +0%
caddq ✅ 2s 3s -33%
intt_native_aarch64 ✅ 2s 3s -33%
keccak_f1600_x1_native_aarch64 ✅ 2s 2s +0%
keccak_f1600_x1_native_aarch64_v84a ✅ 2s 3s -33%
keccak_f1600_x4_native_avx2 ✅ 2s 2s +0%
keccak_finalize ✅ 2s 2s +0%
keccak_squeeze ✅ 2s 4s -50%
keccakf1600_permute ✅ 2s 2s +0%
keccakf1600_permute_native ✅ 2s 3s -33%
keccakf1600_xor_bytes ✅ 2s 2s +0%
keccakf1600_xor_bytes (big endian) ✅ 2s 2s +0%
keccakf1600x4_extract_bytes ✅ 2s 4s -50%
keccakf1600x4_permute ✅ 2s 4s -50%
mld_ct_abs_i32 ✅ 2s 2s +0%
mld_ct_cmask_nonzero_u32 ✅ 2s 4s -50%
mld_ct_sel_int32 ✅ 2s 3s -33%
mld_h ✅ 2s 2s +0%
mld_keccakf1600x4_extract_bytes_c ✅ 2s 3s -33%
mld_polymat_expand_entry ✅ 2s 4s -50%
mld_prepare_domain_separation_prefix ✅ 2s 2s +0%
mld_sample_s1_s2_serial ✅ 2s 4s -50%
mld_sign_resume ✅ 2s - new
mld_value_barrier_u32 ✅ 2s 3s -33%
montgomery_reduce ✅ 2s 4s -50%
pack_sig_h ✅ 2s 5s -60%
pack_sig_z ✅ 2s 2s +0%
pack_sk_rho_key_tr_s2 ✅ 2s 2s +0%
pointwise_native_aarch64 ✅ 2s 5s -60%
pointwise_native_x86_64 ✅ 2s 3s -33%
poly_add ✅ 2s 9s -78%
poly_caddq ✅ 2s 2s +0%
poly_caddq_native_x86_64 ✅ 2s 3s -33%
poly_challenge ✅ 2s 6s -67%
poly_chknorm ✅ 2s 4s -50%
poly_chknorm_native_aarch64 ✅ 2s 3s -33%
poly_chknorm_native_x86_64 ✅ 2s 3s -33%
poly_decompose ✅ 2s 2s +0%
poly_decompose_32_native_aarch64 ✅ 2s 3s -33%
poly_decompose_88_native_aarch64 ✅ 2s 1s +100%
poly_decompose_native ✅ 2s 3s -33%
poly_invntt_tomont_native ✅ 2s 2s +0%
poly_ntt ✅ 2s 2s +0%
poly_pointwise_montgomery ✅ 2s 3s -33%
poly_shiftl ✅ 2s 3s -33%
poly_uniform_gamma1 ✅ 2s 3s -33%
poly_use_hint ✅ 2s 3s -33%
poly_use_hint_native_aarch64 ✅ 2s 3s -33%
polyeta_unpack ✅ 2s 8s -75%
polyt0_pack ✅ 2s 3s -33%
polyvec_matrix_pointwise_montgomery_row ✅ 2s 1s +100%
polyveck_pack_eta ✅ 2s 4s -50%
polyvecl_pack_eta ✅ 2s 3s -33%
polyvecl_uniform_gamma1 ✅ 2s 2s +0%
polyvecl_uniform_gamma1_serial ✅ 2s 3s -33%
polyvecl_unpack_z ✅ 2s 3s -33%
polyw1_pack_32 ✅ 2s 4s -50%
polyz_unpack_native_x86_64 ✅ 2s 3s -33%
rej_eta_c ✅ 2s 5s -60%
shake128_finalize ✅ 2s 1s +100%
shake128_init ✅ 2s 2s +0%
shake128_release ✅ 2s 3s -33%
shake128x4_squeezeblocks ✅ 2s 3s -33%
shake256 ✅ 2s 2s +0%
shake256_absorb ✅ 2s 2s +0%
shake256_finalize ✅ 2s 1s +100%
shake256_init ✅ 2s 2s +0%
shake256_squeeze ✅ 2s 3s -33%
sign_signature ✅ 2s 6s -67%
sign_verify_extmu ✅ 2s 3s -33%
sign_verify_pre_hash_internal ✅ 2s 5s -60%
sk_t0hat_get_poly ✅ 2s 2s +0%
sys_check_capability ✅ 2s 4s -50%
unpack_pk_t1 ✅ 2s 5s -60%
unpack_sk ✅ 2s 3s -33%
unpack_sk_s1hat ✅ 2s 2s +0%
intt_native_x86_64 ✅ 1s 3s -67%
keccakf1600_extract_bytes (big endian) ✅ 1s 2s -50%
keccakf1600x4_xor_bytes ✅ 1s 1s +0%
keccakf1600x4_xor_bytes_native ✅ 1s 3s -67%
mld_ct_get_optblocker_i64 ✅ 1s 2s -50%
mld_ct_get_optblocker_u32 ✅ 1s 3s -67%
mld_ct_get_optblocker_u8 ✅ 1s 2s -50%
mld_keccakf1600_extract_bytes ✅ 1s 1s +0%
mld_keccakf1600x4_xor_bytes_c ✅ 1s 2s -50%
mld_sign_finish ✅ 1s - new
mld_value_barrier_u8 ✅ 1s 3s -67%
ntt_native_aarch64 ✅ 1s 2s -50%
ntt_native_x86_64 ✅ 1s 2s -50%
nttunpack_native_x86_64 ✅ 1s 3s -67%
pack_sig_c ✅ 1s 5s -80%
pack_sk_s1 ✅ 1s 5s -80%
poly_ntt_native ✅ 1s 4s -75%
poly_permute_bitrev_to_custom_optional ✅ 1s 2s -50%
poly_permute_bitrev_to_custom_optional_native ✅ 1s 4s -75%
poly_uniform_eta ✅ 1s 4s -75%
poly_uniform_gamma1_4x ✅ 1s 4s -75%
poly_use_hint_native ✅ 1s 2s -50%
polyt1_pack ✅ 1s 3s -67%
polyvecl_chknorm ✅ 1s 7s -86%
polyz_pack ✅ 1s 3s -67%
polyz_unpack_17_native_aarch64 ✅ 1s 3s -67%
polyz_unpack_19_native_aarch64 ✅ 1s 3s -67%
polyz_unpack_native ✅ 1s 4s -75%
power2round ✅ 1s 1s +0%
reduce32 ✅ 1s 3s -67%
rej_eta ✅ 1s 2s -50%
rej_uniform_eta_native_aarch64 ✅ 1s 4s -75%
rej_uniform_native_aarch64 ✅ 1s 3s -67%
shake128_squeeze ✅ 1s 2s -50%
shake128x4_absorb_once ✅ 1s 3s -67%
shake256_release ✅ 1s 2s -50%
sk_s1hat_get_poly ✅ 1s 6s -83%
use_hint ✅ 1s 2s -50%

@oqs-bot

oqs-bot commented Aug 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

CBMC Results (ML-DSA-87)

⚠️ Attention Required

Proof Status Current Previous Change
**TOTAL** ⚠️ 3094s 2151s +43.8%
compute_pack_t0_t1 ⚠️ 206s 19s +984%
mld_attempt_signature_generation ⚠️ 333s 55s +505%
sig_unpack_hints ⚠️ 29s 3s +867%
sign_keypair_internal ⚠️ 56s 6s +833%
sign_pk_from_sk ⚠️ 50s 6s +733%
sign_signature_internal ⚠️ 354s 42s +743%
sign_verify_internal ⚠️ 811s 97s +736%
Full Results (210 proofs)
Proof Status Current Previous Change
**TOTAL** ⚠️ 3094s 2151s +43.8%
sign_verify_internal ⚠️ 811s 97s +736%
sign_signature_internal ⚠️ 354s 42s +743%
mld_attempt_signature_generation ⚠️ 333s 55s +505%
polyvecl_pointwise_acc_montgomery_c ✅ 258s 353s -27%
compute_pack_t0_t1 ⚠️ 206s 19s +984%
poly_pointwise_montgomery_c ✅ 154s 144s +7%
polyvec_matrix_expand ✅ 88s 324s -73%
mld_invntt_layer ✅ 65s 115s -43%
sign_keypair_internal ⚠️ 56s 6s +833%
sign_pk_from_sk ⚠️ 50s 6s +733%
sig_unpack_hints ⚠️ 29s 3s +867%
polyvec_matrix_expand_serial ✅ 24s 38s -37%
fqmul ✅ 23s 43s -47%
mld_ntt_layer ✅ 23s 45s -49%
mld_ntt_butterfly_block ✅ 14s 24s -42%
keccakf1600x4_permute_native ✅ 13s 23s -43%
polyvec_matrix_pointwise_montgomery_yvec ✅ 13s 18s -28%
rej_uniform_native_x86_64 ✅ 12s - new
poly_ntt_c ✅ 11s 21s -48%
polyt0_unpack ✅ 10s 14s -29%
rej_uniform ✅ 9s 15s -40%
rej_uniform_c ✅ 9s 19s -53%
poly_uniform_4x ✅ 8s 13s -38%
poly_uniform_eta_4x ✅ 8s 11s -27%
polyveck_decompose ✅ 8s 13s -38%
sign_keypair ✅ 8s 4s +100%
poly_chknorm_c ✅ 7s 15s -53%
poly_invntt_tomont_c ✅ 7s 12s -42%
polyeta_unpack ✅ 7s 17s -59%
pointwise_acc_native_aarch64 ✅ 6s 6s +0%
polyveck_invntt_tomont ✅ 6s 9s -33%
polyvecl_chknorm ✅ 6s 7s -14%
sign_verify_pre_hash_shake256 ✅ 6s 3s +100%
keccak_absorb_once_x4 ✅ 5s 9s -44%
mld_check_pct ✅ 5s 16s -69%
mld_compute_pack_z ✅ 5s 8s -38%
mld_keccakf1600_permute_c ✅ 5s 7s -29%
montgomery_reduce ✅ 5s 3s +67%
pointwise_acc_native_x86_64 ✅ 5s 6s -17%
poly_chknorm ✅ 5s 3s +67%
rej_uniform_eta_native_aarch64 ✅ 5s 5s +0%
sign_signature_pre_hash_shake256 ✅ 5s 6s -17%
unpack_sk_s2hat ✅ 5s 3s +67%
caddq ✅ 4s 4s +0%
intt_native_aarch64 ✅ 4s 3s +33%
keccak_squeeze ✅ 4s 2s +100%
keccak_squeezeblocks_x4 ✅ 4s 4s +0%
make_hint ✅ 4s 3s +33%
mld_sample_s1_s2 ✅ 4s 6s -33%
pack_sk_s1 ✅ 4s 1s +300%
poly_add ✅ 4s 6s -33%
poly_chknorm_native ✅ 4s 4s +0%
poly_decompose_native ✅ 4s 2s +100%
poly_reduce ✅ 4s 2s +100%
poly_use_hint ✅ 4s 1s +300%
poly_use_hint_native_x86_64 ✅ 4s - new
polyt1_unpack ✅ 4s 4s +0%
polyveck_caddq ✅ 4s 8s -50%
polyveck_ntt ✅ 4s 11s -64%
polyvecl_ntt ✅ 4s 7s -43%
polyvecl_unpack_z ✅ 4s 4s +0%
polyw1_pack ✅ 4s 4s +0%
polyz_unpack_c ✅ 4s 3s +33%
shake128x4_absorb_once ✅ 4s 5s -20%
sign_verify_extmu ✅ 4s 3s +33%
unpack_sk ✅ 4s 5s -20%
fqscale ✅ 3s 3s +0%
intt_native_x86_64 ✅ 3s 3s +0%
keccak_absorb ✅ 3s 3s +0%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid ✅ 3s 3s +0%
keccakf1600_extract_bytes (big endian) ✅ 3s 3s +0%
keccakf1600x4_extract_bytes_native ✅ 3s 2s +50%
keccakf1600x4_xor_bytes ✅ 3s 3s +0%
keccakf1600x4_xor_bytes_native ✅ 3s 3s +0%
mld_ct_cmask_nonzero_u8 ✅ 3s 3s +0%
mld_ct_get_optblocker_u32 ✅ 3s 2s +50%
mld_sample_s1_s2_serial ✅ 3s 8s -62%
mld_sign_attempt ✅ 3s - new
mld_sign_finish ✅ 3s - new
mld_sign_resume ✅ 3s - new
ntt_native_aarch64 ✅ 3s 6s -50%
pack_sig_c ✅ 3s 4s -25%
pack_sig_z ✅ 3s 5s -40%
pointwise_native_aarch64 ✅ 3s 5s -40%
pointwise_native_x86_64 ✅ 3s 2s +50%
poly_caddq ✅ 3s 2s +50%
poly_caddq_native_aarch64 ✅ 3s 3s +0%
poly_caddq_native_x86_64 ✅ 3s 2s +50%
poly_challenge ✅ 3s 5s -40%
poly_decompose_88_native_aarch64 ✅ 3s 2s +50%
poly_decompose_native_x86_64 ✅ 3s 2s +50%
poly_pointwise_montgomery_native ✅ 3s 5s -40%
poly_power2round ✅ 3s 3s +0%
poly_uniform_eta ✅ 3s 4s -25%
poly_use_hint_c ✅ 3s 2s +50%
poly_use_hint_native ✅ 3s 3s +0%
polyeta_pack ✅ 3s 4s -25%
polyt0_pack ✅ 3s 4s -25%
polyvec_matrix_pointwise_montgomery_row ✅ 3s 3s +0%
polyveck_pack_w1 ✅ 3s 3s +0%
polyveck_reduce ✅ 3s 3s +0%
polyvecl_pointwise_acc_montgomery_native ✅ 3s 3s +0%
polyvecl_uniform_gamma1_serial ✅ 3s 4s -25%
polyvecl_unpack_eta ✅ 3s 5s -40%
polyw1_pack_32 ✅ 3s 4s -25%
polyw1_pack_88 ✅ 3s 3s +0%
polyz_pack ✅ 3s 5s -40%
power2round ✅ 3s 4s -25%
reduce32 ✅ 3s 3s +0%
rej_eta ✅ 3s 4s -25%
rej_uniform_native ✅ 3s 8s -62%
shake128_init ✅ 3s 1s +200%
shake128_squeeze ✅ 3s 2s +50%
shake128x4_squeezeblocks ✅ 3s 3s +0%
shake256 ✅ 3s 2s +50%
sign_signature ✅ 3s 5s -40%
sign_signature_extmu ✅ 3s 4s -25%
sign_signature_pre_hash_internal ✅ 3s 5s -40%
unpack_pk_t1 ✅ 3s 1s +200%
unpack_sk_s1hat ✅ 3s 2s +50%
keccak_finalize ✅ 2s 1s +100%
keccak_init ✅ 2s 3s -33%
keccakf1600_permute ✅ 2s 3s -33%
keccakf1600x4_extract_bytes ✅ 2s 2s +0%
keccakf1600x4_permute ✅ 2s 3s -33%
mld_ct_abs_i32 ✅ 2s 3s -33%
mld_ct_cmask_neg_i32 ✅ 2s 4s -50%
mld_h ✅ 2s 3s -33%
mld_keccakf1600x4_extract_bytes_c ✅ 2s 2s +0%
mld_keccakf1600x4_xor_bytes_c ✅ 2s 4s -50%
mld_prepare_domain_separation_prefix ✅ 2s 4s -50%
mld_value_barrier_i64 ✅ 2s 1s +100%
mld_value_barrier_u8 ✅ 2s 3s -33%
nttunpack_native_x86_64 ✅ 2s 3s -33%
pack_sig_h ✅ 2s 4s -50%
pack_sk_rho_key_tr_s2 ✅ 2s 3s -33%
poly_caddq_native ✅ 2s 4s -50%
poly_chknorm_native_aarch64 ✅ 2s 4s -50%
poly_chknorm_native_x86_64 ✅ 2s 2s +0%
poly_decompose_32_native_aarch64 ✅ 2s 5s -60%
poly_decompose_c ✅ 2s 5s -60%
poly_invntt_tomont_native ✅ 2s 5s -60%
poly_ntt_native ✅ 2s 3s -33%
poly_pointwise_montgomery ✅ 2s 4s -50%
poly_shiftl ✅ 2s 4s -50%
poly_sub ✅ 2s 3s -33%
poly_uniform_gamma1 ✅ 2s 4s -50%
poly_uniform_gamma1_4x ✅ 2s 3s -33%
poly_use_hint_native_aarch64 ✅ 2s 2s +0%
polyt1_pack ✅ 2s 3s -33%
polyveck_chknorm ✅ 2s 3s -33%
polyveck_pack_eta ✅ 2s 6s -67%
polyveck_unpack_eta ✅ 2s 4s -50%
polyvecl_pack_eta ✅ 2s 3s -33%
polyvecl_uniform_gamma1 ✅ 2s 2s +0%
polyz_unpack ✅ 2s 2s +0%
polyz_unpack_17_native_aarch64 ✅ 2s 3s -33%
polyz_unpack_19_native_aarch64 ✅ 2s 4s -50%
polyz_unpack_native_x86_64 ✅ 2s 3s -33%
rej_eta_c ✅ 2s 5s -60%
rej_eta_native ✅ 2s 6s -67%
rej_uniform_eta_native_x86_64 ✅ 2s - new
rej_uniform_native_aarch64 ✅ 2s 2s +0%
shake128_finalize ✅ 2s 2s +0%
shake128_release ✅ 2s 4s -50%
shake256_absorb ✅ 2s 2s +0%
shake256_finalize ✅ 2s 2s +0%
shake256_init ✅ 2s 2s +0%
shake256_release ✅ 2s 3s -33%
shake256_squeeze ✅ 2s 2s +0%
shake256x4_absorb_once ✅ 2s 2s +0%
shake256x4_squeezeblocks ✅ 2s 1s +100%
sign_verify ✅ 2s 5s -60%
sys_check_capability ✅ 2s 3s -33%
unpack_sk_t0hat ✅ 2s 7s -71%
use_hint ✅ 2s 3s -33%
yvec_get_poly ✅ 2s 4s -50%
yvec_init ✅ 2s 4s -50%
decompose ✅ 1s 3s -67%
keccak_f1600_x1_native_aarch64 ✅ 1s 1s +0%
keccak_f1600_x1_native_aarch64_v84a ✅ 1s 1s +0%
keccak_f1600_x4_native_aarch64_v84a ✅ 1s 4s -75%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid ✅ 1s 4s -75%
keccak_f1600_x4_native_avx2 ✅ 1s 2s -50%
keccakf1600_permute_native ✅ 1s 4s -75%
keccakf1600_xor_bytes ✅ 1s 3s -67%
keccakf1600_xor_bytes (big endian) ✅ 1s 2s -50%
mld_ct_cmask_nonzero_u32 ✅ 1s 2s -50%
mld_ct_get_optblocker_i64 ✅ 1s 3s -67%
mld_ct_get_optblocker_u8 ✅ 1s 3s -67%
mld_ct_memcmp ✅ 1s 3s -67%
mld_ct_sel_int32 ✅ 1s 3s -67%
mld_keccakf1600_extract_bytes ✅ 1s 4s -75%
mld_polymat_expand_entry ✅ 1s 3s -67%
mld_value_barrier_u32 ✅ 1s 2s -50%
ntt_native_x86_64 ✅ 1s 2s -50%
poly_caddq_c ✅ 1s 3s -67%
poly_decompose ✅ 1s 3s -67%
poly_invntt_tomont ✅ 1s 1s +0%
poly_ntt ✅ 1s 3s -67%
poly_permute_bitrev_to_custom_optional ✅ 1s 3s -67%
poly_permute_bitrev_to_custom_optional_native ✅ 1s 5s -80%
poly_uniform ✅ 1s 4s -75%
polyvecl_pointwise_acc_montgomery ✅ 1s 5s -80%
polyz_unpack_native ✅ 1s 4s -75%
shake128_absorb ✅ 1s 4s -75%
sign_verify_pre_hash_internal ✅ 1s 3s -67%
sk_s1hat_get_poly ✅ 1s 3s -67%
sk_s2hat_get_poly ✅ 1s 3s -67%
sk_t0hat_get_poly ✅ 1s 4s -75%

@mkannwischer mkannwischer added this to the v2.1 milestone Aug 4, 2026
@mkannwischer
CI: Update GitHub action dependencies
51a1e3c 
Bump actions/checkout to v7.0.1, aws-actions/configure-aws-credentials
to v6.2.3 and ossf/scorecard-action to v2.4.4.

Also covers the checkout pin in .github/actions/cbmc/action.yml.
Dependabot scans the workflow directory only, so pins in composite
actions are not part of its update PRs.

Signed-off-by: Matthias J. Kannwischer <matthias@zerorisc.com>
@mkannwischer
mkannwischer marked this pull request as ready for review August 7, 2026 06:12
@mkannwischer
mkannwischer requested a review from a team as a code owner August 7, 2026 06:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

v2.1

Development

Successfully merging this pull request may close these issues.

2 participants

@mkannwischer @oqs-bot