2021-07-23 14:35:24 -04:00

3.3 KiB

Falcon

  • Algorithm type: Digital signature scheme.
  • Main cryptographic assumption: hardness of NTRU lattice problems.
  • Principal submitters: Thomas Prest.
  • Auxiliary submitters: Pierre-Alain Fouque, Jeffrey Hoffstein, Paul Kirchner, Vadim Lyubashevsky, Thomas Pornin, Thomas Ricosset, Gregor Seiler, William Whyte, Zhenfei Zhang.
  • Authors' website: https://falcon-sign.info
  • Specification version: v1.2.
  • Implementation source: 89d3461336, which takes it from:
  • Implementation license (SPDX-Identifier): CC0-1.0.

Parameter set summary

Parameter set Security model Claimed NIST Level Public key size (bytes) Secret key size (bytes) Signature size (bytes)
Falcon-512 EUF-CMA 1 897 1281 690
Falcon-1024 EUF-CMA 5 1793 2305 1330

Falcon-512 implementation characteristics

Identifier in upstream Supported architecture(s) Supported operating system(s) CPU extension(s) used No branching-on-secrets claimed? No branching-on-secrets checked by valgrind? Large stack usage?
clean All All None True True False
avx2 x86_64 Linux,Darwin AVX2 True True False

Are implementations chosen based on runtime CPU feature detection? Yes.

Falcon-1024 implementation characteristics

Identifier in upstream Supported architecture(s) Supported operating system(s) CPU extension(s) used No branching-on-secrets claimed? No branching-on-secrets checked by valgrind? Large stack usage?
clean All All None True True False
avx2 x86_64 Linux,Darwin AVX2 True True False

Are implementations chosen based on runtime CPU feature detection? Yes.