name: Picnic
type: signature
principal-submitters:
- Greg Zaverucha
- Melissa Chase
- David Derler
- Steven Goldfeder
- Claudio Orlandi
- Sebastian Ramacher
- Christian Rechberger
- Daniel Slamanig
- Jonathan Katz
- Xiao Wang
- Vladmir Kolesnikov
crypto-assumption: hash function security (ROM/QROM), key recovery attacks on the
  lowMC block cipher
website: https://microsoft.github.io/Picnic/
nist-round: 3
spec-version: 3.0.10
spdx-license-identifier: MIT
upstream: https://github.com/IAIK/Picnic/tree/v3.0.10
parameter-sets:
- name: picnic_L1_FS
  claimed-nist-level: 1
  claimed-security: EUF-CMA
  length-public-key: 33
  length-secret-key: 49
  length-signature: 34036
  implementations-switch-on-runtime-cpu-features: false
  implementations:
  - upstream-id: master
    supported-platforms: all
    common-crypto:
    - SHA3: liboqs
    no-secret-dependent-branching-claimed: true
    no-secret-dependent-branching-checked-by-valgrind: true
    large-stack-usage: false
  - upstream-id: master
    supported-platforms:
    - architecture: x86_64
      operating_systems:
      - Linux
      required_flags:
      - avx2
      - sse2
    - architecture: x86_64
      operating_systems:
      - Darwin
      - Windows
      required_flags:
      - sse2
    common-crypto:
    - SHA3: liboqs
    no-secret-dependent-branching-claimed: true
    no-secret-dependent-branching-checked-by-valgrind: true
    large-stack-usage: false
- name: picnic_L1_UR
  claimed-nist-level: 1
  claimed-security: EUF-CMA
  length-public-key: 33
  length-secret-key: 49
  length-signature: 53965
  implementations-switch-on-runtime-cpu-features: false
  implementations:
  - upstream-id: master
    supported-platforms: all
    common-crypto:
    - SHA3: liboqs
    no-secret-dependent-branching-claimed: true
    no-secret-dependent-branching-checked-by-valgrind: true
    large-stack-usage: false
  - upstream-id: master
    supported-platforms:
    - architecture: x86_64
      operating_systems:
      - Linux
      required_flags:
      - avx2
      - sse2
    - architecture: x86_64
      operating_systems:
      - Darwin
      - Windows
      required_flags:
      - sse2
    common-crypto:
    - SHA3: liboqs
    no-secret-dependent-branching-claimed: true
    no-secret-dependent-branching-checked-by-valgrind: true
    large-stack-usage: false
- name: picnic_L1_full
  claimed-nist-level: 1
  claimed-security: EUF-CMA
  length-public-key: 35
  length-secret-key: 52
  length-signature: 32065
  implementations-switch-on-runtime-cpu-features: false
  implementations:
  - upstream-id: master
    supported-platforms: all
    common-crypto:
    - SHA3: liboqs
    no-secret-dependent-branching-claimed: true
    no-secret-dependent-branching-checked-by-valgrind: true
    large-stack-usage: false
  - upstream-id: master
    supported-platforms:
    - architecture: x86_64
      operating_systems:
      - Linux
      required_flags:
      - avx2
      - sse2
    - architecture: x86_64
      operating_systems:
      - Darwin
      - Windows
      required_flags:
      - sse2
    common-crypto:
    - SHA3: liboqs
    no-secret-dependent-branching-claimed: true
    no-secret-dependent-branching-checked-by-valgrind: true
    large-stack-usage: false
- name: picnic_L3_FS
  claimed-nist-level: 3
  claimed-security: EUF-CMA
  length-public-key: 49
  length-secret-key: 73
  length-signature: 76776
  implementations-switch-on-runtime-cpu-features: false
  implementations:
  - upstream-id: master
    supported-platforms: all
    common-crypto:
    - SHA3: liboqs
    no-secret-dependent-branching-claimed: true
    no-secret-dependent-branching-checked-by-valgrind: true
    large-stack-usage: false
  - upstream-id: master
    supported-platforms:
    - architecture: x86_64
      operating_systems:
      - Linux
      required_flags:
      - avx2
      - sse2
    - architecture: x86_64
      operating_systems:
      - Darwin
      - Windows
      required_flags:
      - sse2
    common-crypto:
    - SHA3: liboqs
    no-secret-dependent-branching-claimed: true
    no-secret-dependent-branching-checked-by-valgrind: true
    large-stack-usage: false
- name: picnic_L3_UR
  claimed-nist-level: 3
  claimed-security: EUF-CMA
  length-public-key: 49
  length-secret-key: 73
  length-signature: 121849
  implementations-switch-on-runtime-cpu-features: false
  implementations:
  - upstream-id: master
    supported-platforms: all
    common-crypto:
    - SHA3: liboqs
    no-secret-dependent-branching-claimed: true
    no-secret-dependent-branching-checked-by-valgrind: true
    large-stack-usage: false
  - upstream-id: master
    supported-platforms:
    - architecture: x86_64
      operating_systems:
      - Linux
      required_flags:
      - avx2
      - sse2
    - architecture: x86_64
      operating_systems:
      - Darwin
      - Windows
      required_flags:
      - sse2
    common-crypto:
    - SHA3: liboqs
    no-secret-dependent-branching-claimed: true
    no-secret-dependent-branching-checked-by-valgrind: true
    large-stack-usage: false
- name: picnic_L3_full
  claimed-nist-level: 3
  claimed-security: EUF-CMA
  length-public-key: 49
  length-secret-key: 73
  length-signature: 71183
  implementations-switch-on-runtime-cpu-features: false
  implementations:
  - upstream-id: master
    supported-platforms: all
    common-crypto:
    - SHA3: liboqs
    no-secret-dependent-branching-claimed: true
    no-secret-dependent-branching-checked-by-valgrind: true
    large-stack-usage: false
  - upstream-id: master
    supported-platforms:
    - architecture: x86_64
      operating_systems:
      - Linux
      required_flags:
      - avx2
      - sse2
    - architecture: x86_64
      operating_systems:
      - Darwin
      - Windows
      required_flags:
      - sse2
    common-crypto:
    - SHA3: liboqs
    no-secret-dependent-branching-claimed: true
    no-secret-dependent-branching-checked-by-valgrind: true
    large-stack-usage: false
- name: picnic_L5_FS
  claimed-nist-level: 5
  claimed-security: EUF-CMA
  length-public-key: 65
  length-secret-key: 97
  length-signature: 132860
  implementations-switch-on-runtime-cpu-features: false
  implementations:
  - upstream-id: master
    supported-platforms: all
    common-crypto:
    - SHA3: liboqs
    no-secret-dependent-branching-claimed: true
    no-secret-dependent-branching-checked-by-valgrind: true
    large-stack-usage: false
  - upstream-id: master
    supported-platforms:
    - architecture: x86_64
      operating_systems:
      - Linux
      required_flags:
      - avx2
      - sse2
    - architecture: x86_64
      operating_systems:
      - Darwin
      - Windows
      required_flags:
      - sse2
    common-crypto:
    - SHA3: liboqs
    no-secret-dependent-branching-claimed: true
    no-secret-dependent-branching-checked-by-valgrind: true
    large-stack-usage: false
- name: picnic_L5_UR
  claimed-nist-level: 5
  claimed-security: EUF-CMA
  length-public-key: 65
  length-secret-key: 97
  length-signature: 209510
  implementations-switch-on-runtime-cpu-features: false
  implementations:
  - upstream-id: master
    supported-platforms: all
    common-crypto:
    - SHA3: liboqs
    no-secret-dependent-branching-claimed: true
    no-secret-dependent-branching-checked-by-valgrind: true
    large-stack-usage: false
  - upstream-id: master
    supported-platforms:
    - architecture: x86_64
      operating_systems:
      - Linux
      required_flags:
      - avx2
      - sse2
    - architecture: x86_64
      operating_systems:
      - Darwin
      - Windows
      required_flags:
      - sse2
    common-crypto:
    - SHA3: liboqs
    no-secret-dependent-branching-claimed: true
    no-secret-dependent-branching-checked-by-valgrind: true
    large-stack-usage: false
- name: picnic_L5_full
  claimed-nist-level: 5
  claimed-security: EUF-CMA
  length-public-key: 65
  length-secret-key: 97
  length-signature: 126290
  implementations-switch-on-runtime-cpu-features: false
  implementations:
  - upstream-id: master
    supported-platforms: all
    common-crypto:
    - SHA3: liboqs
    no-secret-dependent-branching-claimed: true
    no-secret-dependent-branching-checked-by-valgrind: true
    large-stack-usage: false
  - upstream-id: master
    supported-platforms:
    - architecture: x86_64
      operating_systems:
      - Linux
      required_flags:
      - avx2
      - sse2
    - architecture: x86_64
      operating_systems:
      - Darwin
      - Windows
      required_flags:
      - sse2
    common-crypto:
    - SHA3: liboqs
    no-secret-dependent-branching-claimed: true
    no-secret-dependent-branching-checked-by-valgrind: true
    large-stack-usage: false
- name: picnic3_L1
  claimed-nist-level: 1
  claimed-security: EUF-CMA
  length-public-key: 35
  length-secret-key: 52
  length-signature: 14612
  implementations-switch-on-runtime-cpu-features: false
  implementations:
  - upstream-id: master
    supported-platforms: all
    common-crypto:
    - SHA3: liboqs
    no-secret-dependent-branching-claimed: true
    no-secret-dependent-branching-checked-by-valgrind: true
    large-stack-usage: false
  - upstream-id: master
    supported-platforms:
    - architecture: x86_64
      operating_systems:
      - Linux
      required_flags:
      - avx2
      - sse2
    - architecture: x86_64
      operating_systems:
      - Darwin
      - Windows
      required_flags:
      - sse2
    common-crypto:
    - SHA3: liboqs
    no-secret-dependent-branching-claimed: true
    no-secret-dependent-branching-checked-by-valgrind: true
    large-stack-usage: false
- name: picnic3_L3
  claimed-nist-level: 3
  claimed-security: EUF-CMA
  length-public-key: 49
  length-secret-key: 73
  length-signature: 35028
  implementations-switch-on-runtime-cpu-features: false
  implementations:
  - upstream-id: master
    supported-platforms: all
    common-crypto:
    - SHA3: liboqs
    no-secret-dependent-branching-claimed: true
    no-secret-dependent-branching-checked-by-valgrind: true
    large-stack-usage: false
  - upstream-id: master
    supported-platforms:
    - architecture: x86_64
      operating_systems:
      - Linux
      required_flags:
      - avx2
      - sse2
    - architecture: x86_64
      operating_systems:
      - Darwin
      - Windows
      required_flags:
      - sse2
    common-crypto:
    - SHA3: liboqs
    no-secret-dependent-branching-claimed: true
    no-secret-dependent-branching-checked-by-valgrind: true
    large-stack-usage: false
- name: picnic3_L5
  claimed-nist-level: 5
  claimed-security: EUF-CMA
  length-public-key: 65
  length-secret-key: 97
  length-signature: 61028
  implementations-switch-on-runtime-cpu-features: false
  implementations:
  - upstream-id: master
    supported-platforms: all
    common-crypto:
    - SHA3: liboqs
    no-secret-dependent-branching-claimed: true
    no-secret-dependent-branching-checked-by-valgrind: true
    large-stack-usage: false
  - upstream-id: master
    supported-platforms:
    - architecture: x86_64
      operating_systems:
      - Linux
      required_flags:
      - avx2
      - sse2
    - architecture: x86_64
      operating_systems:
      - Darwin
      - Windows
      required_flags:
      - sse2
    common-crypto:
    - SHA3: liboqs
    no-secret-dependent-branching-claimed: true
    no-secret-dependent-branching-checked-by-valgrind: true
    large-stack-usage: false