SABER

Algorithm type: Key encapsulation mechanism.
Main cryptographic assumption: Module learning with rounding.
Principal submitters: Jan-Pieter D'Anvers, Angshuman Karmakar, Sujoy Sinha Roy, Frederik Vercauteren.
Authors' website: https://www.esat.kuleuven.be/cosic/pqcrypto/saber/
Specification version: NIST Round 3 submission.
Implementation source: 89d3461336, which takes it from:
- https://github.com/jschanck/package-pqclean/tree/1ae84c3c/saber, which takes it from:
- 509cc5ec3a
Implementation license (SPDX-Identifier): Public domain.

Parameter set summary

Parameter set	Security model	Claimed NIST Level	Public key size (bytes)	Secret key size (bytes)	Ciphertext size (bytes)	Shared secret size (bytes)
LightSaber-KEM	IND-CCA2	1	672	1568	736	32
Saber-KEM	IND-CCA2	3	992	2304	1088	32
FireSaber-KEM	IND-CCA2	5	1312	3040	1472	32

Identifier in upstream	Supported architecture(s)	Supported operating system(s)	CPU extension(s) used	No branching-on-secrets claimed?	No branching-on-secrets checked by valgrind?	Large stack usage?
clean	All	All	None	True	True	False
avx2	x86_64	Linux,Darwin	AVX2	False	True	False

Are implementations chosen based on runtime CPU feature detection? Yes.

Identifier in upstream	Supported architecture(s)	Supported operating system(s)	CPU extension(s) used	No branching-on-secrets claimed?	No branching-on-secrets checked by valgrind?	Large stack usage?
clean	All	All	None	True	True	False
avx2	x86_64	Linux,Darwin	AVX2	False	True	False

Are implementations chosen based on runtime CPU feature detection? Yes.

Identifier in upstream	Supported architecture(s)	Supported operating system(s)	CPU extension(s) used	No branching-on-secrets claimed?	No branching-on-secrets checked by valgrind?	Large stack usage?
clean	All	All	None	True	True	False
avx2	x86_64	Linux,Darwin	AVX2	False	True	False

Are implementations chosen based on runtime CPU feature detection? Yes.