C11 FIPS 203 IPD v0.6

I just released v0.6 of fips203ipd.

fips203ipd is an embeddable, dependency-free, MIT-0 licensed, C11 implementation of the FIPS 203 initial public draft (IPD) with scalar, AVX-512, and Neon backends. The final version of FIPS 203 will become ML-KEM, NIST’s standarized post-quantum key encapsulation mechanism (KEM).

Git Repository, API Documentation, Original Announcement, pqc-forum Announcement

Changes in v0.6

• Add Neon backend
• Add MacOS support to test suite (thanks Rod!)
• Add backend auto-detection, BACKEND command-line build parameter, and fips203ipd_backend() function
• Add Raspberry Pi 5 (Cortex-A76) benchmarks
• Add “Backends” documentation section with brief notes about each backend

Benchmarks

Here are median cycle count as measured by the included bench tool for each parameter set, function, compiler, and backend from several of my systems.

For context, the results below are competitive with the eBATS results (kyber512, kyber768, kyber1024), although the comparison is inexact because the results were measured with different tools and because Kyber and ML-KEM differ slightly.

Lenovo ThinkPad X1 Carbon, 6th Gen (x86-64 i7-1185G7)

Download CSV

Raspberry Pi 5 (ARM Cortex-A76)

Download CSV

Odroid N2L (ARM Cortex-A73)

Download CSV

Update (2024-05-16): Added cycle counts for scalar backend (clang and gcc), added bar charts, added downloadable CSVs. The CSVs and SVGs generated by the Python scripts in the scripts/bench-chart/ directory of the Git repository.