Add NUCLEO-N657X0-Q Zephyr hardware platform by mkannwischer · Pull Request #1269 · pq-code-package/mldsa-native

mkannwischer · 2026-07-08T06:10:35Z

github-actions

Mac Mini (M1, 2020) benchmarks (opt)

Details

Benchmark suite	Current: `cd26685`	Previous: `4d1cd02`	Ratio
`ML-DSA-44 keypair`	`46511` cycles	`46529` cycles	`1.00`
`ML-DSA-44 sign`	`131087` cycles	`131133` cycles	`1.00`
`ML-DSA-44 verify`	`47330` cycles	`47327` cycles	`1.00`
`ML-DSA-65 keypair`	`81717` cycles	`81722` cycles	`1.00`
`ML-DSA-65 sign`	`215465` cycles	`215456` cycles	`1.00`
`ML-DSA-65 verify`	`79340` cycles	`79333` cycles	`1.00`
`ML-DSA-87 keypair`	`132436` cycles	`132429` cycles	`1.00`
`ML-DSA-87 sign`	`277473` cycles	`277467` cycles	`1.00`
`ML-DSA-87 verify`	`134085` cycles	`134071` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

github-actions

Mac Mini (M1, 2020) benchmarks (no-opt)

Details

Benchmark suite	Current: `cd26685`	Previous: `4d1cd02`	Ratio
`ML-DSA-44 keypair`	`113054` cycles	`112780` cycles	`1.00`
`ML-DSA-44 sign`	`402109` cycles	`401131` cycles	`1.00`
`ML-DSA-44 verify`	`119719` cycles	`119476` cycles	`1.00`
`ML-DSA-65 keypair`	`192954` cycles	`192933` cycles	`1.00`
`ML-DSA-65 sign`	`650110` cycles	`649991` cycles	`1.00`
`ML-DSA-65 verify`	`192878` cycles	`192872` cycles	`1.00`
`ML-DSA-87 keypair`	`318903` cycles	`318814` cycles	`1.00`
`ML-DSA-87 sign`	`829148` cycles	`828822` cycles	`1.00`
`ML-DSA-87 verify`	`326919` cycles	`326789` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

github-actions

Arm Cortex-A76 (Raspberry Pi 5) benchmarks (opt)

Details

Benchmark suite	Current: `cd26685`	Previous: `4d1cd02`	Ratio
`ML-DSA-44 keypair`	`112242` cycles	`112126` cycles	`1.00`
`ML-DSA-44 sign`	`353825` cycles	`353561` cycles	`1.00`
`ML-DSA-44 verify`	`117015` cycles	`117175` cycles	`1.00`
`ML-DSA-65 keypair`	`194629` cycles	`194414` cycles	`1.00`
`ML-DSA-65 sign`	`584114` cycles	`583732` cycles	`1.00`
`ML-DSA-65 verify`	`193061` cycles	`193245` cycles	`1.00`
`ML-DSA-87 keypair`	`320769` cycles	`320009` cycles	`1.00`
`ML-DSA-87 sign`	`747290` cycles	`747712` cycles	`1.00`
`ML-DSA-87 verify`	`318563` cycles	`317961` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

oqs-bot

Intel Xeon 4th gen (c7i)

Details

Benchmark suite	Current: `cd26685`	Previous: `4d1cd02`	Ratio
`ML-DSA-44 keypair`	`43297` cycles	`43507` cycles	`1.00`
`ML-DSA-44 sign`	`130101` cycles	`130635` cycles	`1.00`
`ML-DSA-44 verify`	`45377` cycles	`45544` cycles	`1.00`
`ML-DSA-65 keypair`	`75410` cycles	`75715` cycles	`1.00`
`ML-DSA-65 sign`	`213811` cycles	`213758` cycles	`1.00`
`ML-DSA-65 verify`	`74447` cycles	`74761` cycles	`1.00`
`ML-DSA-87 keypair`	`123363` cycles	`123342` cycles	`1.00`
`ML-DSA-87 sign`	`270861` cycles	`271526` cycles	`1.00`
`ML-DSA-87 verify`	`120796` cycles	`120918` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

oqs-bot

Intel Xeon 4th gen (c7i) (no-opt)

Details

Benchmark suite	Current: `cd26685`	Previous: `4d1cd02`	Ratio
`ML-DSA-44 keypair`	`91516` cycles	`91577` cycles	`1.00`
`ML-DSA-44 sign`	`352048` cycles	`352146` cycles	`1.00`
`ML-DSA-44 verify`	`99969` cycles	`99862` cycles	`1.00`
`ML-DSA-65 keypair`	`154113` cycles	`153862` cycles	`1.00`
`ML-DSA-65 sign`	`571593` cycles	`572127` cycles	`1.00`
`ML-DSA-65 verify`	`159963` cycles	`159943` cycles	`1.00`
`ML-DSA-87 keypair`	`255138` cycles	`254942` cycles	`1.00`
`ML-DSA-87 sign`	`726587` cycles	`724844` cycles	`1.00`
`ML-DSA-87 verify`	`264016` cycles	`263556` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

oqs-bot

AMD EPYC 3rd gen (c6a)

Details

Benchmark suite	Current: `cd26685`	Previous: `4d1cd02`	Ratio
`ML-DSA-44 keypair`	`52007` cycles	`51930` cycles	`1.00`
`ML-DSA-44 sign`	`154548` cycles	`155127` cycles	`1.00`
`ML-DSA-44 verify`	`54157` cycles	`54273` cycles	`1.00`
`ML-DSA-65 keypair`	`89467` cycles	`89344` cycles	`1.00`
`ML-DSA-65 sign`	`253300` cycles	`252840` cycles	`1.00`
`ML-DSA-65 verify`	`89592` cycles	`89521` cycles	`1.00`
`ML-DSA-87 keypair`	`141828` cycles	`142306` cycles	`1.00`
`ML-DSA-87 sign`	`310358` cycles	`311536` cycles	`1.00`
`ML-DSA-87 verify`	`138469` cycles	`138952` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

oqs-bot

Graviton5

Details

Benchmark suite	Current: `cd26685`	Previous: `4d1cd02`	Ratio
`ML-DSA-44 keypair`	`51437` cycles	`51443` cycles	`1.00`
`ML-DSA-44 sign`	`162008` cycles	`162021` cycles	`1.00`
`ML-DSA-44 verify`	`54758` cycles	`54777` cycles	`1.00`
`ML-DSA-65 keypair`	`90191` cycles	`90182` cycles	`1.00`
`ML-DSA-65 sign`	`268062` cycles	`268067` cycles	`1.00`
`ML-DSA-65 verify`	`89937` cycles	`89939` cycles	`1.00`
`ML-DSA-87 keypair`	`145847` cycles	`145916` cycles	`1.00`
`ML-DSA-87 sign`	`335510` cycles	`335552` cycles	`1.00`
`ML-DSA-87 verify`	`144916` cycles	`144984` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

oqs-bot

Intel Xeon 3rd gen (c6i)

Details

Benchmark suite	Current: `cd26685`	Previous: `4d1cd02`	Ratio
`ML-DSA-44 keypair`	`61554` cycles	`61522` cycles	`1.00`
`ML-DSA-44 sign`	`188542` cycles	`188243` cycles	`1.00`
`ML-DSA-44 verify`	`66491` cycles	`66411` cycles	`1.00`
`ML-DSA-65 keypair`	`109657` cycles	`108996` cycles	`1.01`
`ML-DSA-65 sign`	`315026` cycles	`312150` cycles	`1.01`
`ML-DSA-65 verify`	`109999` cycles	`109678` cycles	`1.00`
`ML-DSA-87 keypair`	`171256` cycles	`171726` cycles	`1.00`
`ML-DSA-87 sign`	`378237` cycles	`378350` cycles	`1.00`
`ML-DSA-87 verify`	`170685` cycles	`171118` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

oqs-bot

AMD EPYC 4th gen (c7a)

Details

Benchmark suite	Current: `cd26685`	Previous: `4d1cd02`	Ratio
`ML-DSA-44 keypair`	`48884` cycles	`46891` cycles	`1.04`
`ML-DSA-44 sign`	`141823` cycles	`143738` cycles	`0.99`
`ML-DSA-44 verify`	`51065` cycles	`50751` cycles	`1.01`
`ML-DSA-65 keypair`	`82160` cycles	`82746` cycles	`0.99`
`ML-DSA-65 sign`	`227876` cycles	`226632` cycles	`1.01`
`ML-DSA-65 verify`	`81916` cycles	`81771` cycles	`1.00`
`ML-DSA-87 keypair`	`131436` cycles	`131859` cycles	`1.00`
`ML-DSA-87 sign`	`279417` cycles	`281195` cycles	`0.99`
`ML-DSA-87 verify`	`128620` cycles	`129631` cycles	`0.99`

This comment was automatically generated by workflow using github-action-benchmark.

github-actions

Arm Cortex-A76 (Raspberry Pi 5) benchmarks (no-opt)

Details

Benchmark suite	Current: `cd26685`	Previous: `4d1cd02`	Ratio
`ML-DSA-44 keypair`	`211461` cycles	`211656` cycles	`1.00`
`ML-DSA-44 sign`	`759244` cycles	`759773` cycles	`1.00`
`ML-DSA-44 verify`	`228983` cycles	`229440` cycles	`1.00`
`ML-DSA-65 keypair`	`377143` cycles	`377976` cycles	`1.00`
`ML-DSA-65 sign`	`1247172` cycles	`1246928` cycles	`1.00`
`ML-DSA-65 verify`	`371895` cycles	`372036` cycles	`1.00`
`ML-DSA-87 keypair`	`600282` cycles	`601174` cycles	`1.00`
`ML-DSA-87 sign`	`1583717` cycles	`1581948` cycles	`1.00`
`ML-DSA-87 verify`	`615946` cycles	`617118` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

oqs-bot

AMD EPYC 3rd gen (c6a) (no-opt)

Details

Benchmark suite	Current: `cd26685`	Previous: `4d1cd02`	Ratio
`ML-DSA-44 keypair`	`133037` cycles	`133186` cycles	`1.00`
`ML-DSA-44 sign`	`518691` cycles	`519441` cycles	`1.00`
`ML-DSA-44 verify`	`146662` cycles	`146625` cycles	`1.00`
`ML-DSA-65 keypair`	`224370` cycles	`224028` cycles	`1.00`
`ML-DSA-65 sign`	`843207` cycles	`844002` cycles	`1.00`
`ML-DSA-65 verify`	`234417` cycles	`234340` cycles	`1.00`
`ML-DSA-87 keypair`	`367609` cycles	`368525` cycles	`1.00`
`ML-DSA-87 sign`	`1059299` cycles	`1064163` cycles	`1.00`
`ML-DSA-87 verify`	`381077` cycles	`382376` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

oqs-bot

Graviton5 (no-opt)

Details

Benchmark suite	Current: `cd26685`	Previous: `4d1cd02`	Ratio
`ML-DSA-44 keypair`	`100046` cycles	`99914` cycles	`1.00`
`ML-DSA-44 sign`	`369029` cycles	`369026` cycles	`1.00`
`ML-DSA-44 verify`	`110160` cycles	`110058` cycles	`1.00`
`ML-DSA-65 keypair`	`174589` cycles	`174535` cycles	`1.00`
`ML-DSA-65 sign`	`599012` cycles	`598622` cycles	`1.00`
`ML-DSA-65 verify`	`178112` cycles	`178137` cycles	`1.00`
`ML-DSA-87 keypair`	`285924` cycles	`285929` cycles	`1.00`
`ML-DSA-87 sign`	`759576` cycles	`759510` cycles	`1.00`
`ML-DSA-87 verify`	`296404` cycles	`296446` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

oqs-bot

Intel Xeon 3rd gen (c6i) (no-opt)

Details

Benchmark suite	Current: `cd26685`	Previous: `4d1cd02`	Ratio
`ML-DSA-44 keypair`	`154126` cycles	`154174` cycles	`1.00`
`ML-DSA-44 sign`	`590554` cycles	`588413` cycles	`1.00`
`ML-DSA-44 verify`	`169576` cycles	`168971` cycles	`1.00`
`ML-DSA-65 keypair`	`262300` cycles	`261545` cycles	`1.00`
`ML-DSA-65 sign`	`964902` cycles	`960994` cycles	`1.00`
`ML-DSA-65 verify`	`271675` cycles	`271745` cycles	`1.00`
`ML-DSA-87 keypair`	`432177` cycles	`431426` cycles	`1.00`
`ML-DSA-87 sign`	`1211166` cycles	`1209372` cycles	`1.00`
`ML-DSA-87 verify`	`446963` cycles	`447236` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

oqs-bot

Graviton4

Details

Benchmark suite	Current: `cd26685`	Previous: `4d1cd02`	Ratio
`ML-DSA-44 keypair`	`67153` cycles	`67388` cycles	`1.00`
`ML-DSA-44 sign`	`198296` cycles	`198249` cycles	`1.00`
`ML-DSA-44 verify`	`70273` cycles	`70461` cycles	`1.00`
`ML-DSA-65 keypair`	`119461` cycles	`119416` cycles	`1.00`
`ML-DSA-65 sign`	`326145` cycles	`326203` cycles	`1.00`
`ML-DSA-65 verify`	`116973` cycles	`117004` cycles	`1.00`
`ML-DSA-87 keypair`	`196623` cycles	`196618` cycles	`1.00`
`ML-DSA-87 sign`	`421641` cycles	`421605` cycles	`1.00`
`ML-DSA-87 verify`	`193011` cycles	`193006` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

oqs-bot

AMD EPYC 4th gen (c7a) (no-opt)

Details

Benchmark suite	Current: `cd26685`	Previous: `4d1cd02`	Ratio
`ML-DSA-44 keypair`	`118598` cycles	`120146` cycles	`0.99`
`ML-DSA-44 sign`	`457553` cycles	`462692` cycles	`0.99`
`ML-DSA-44 verify`	`130621` cycles	`132207` cycles	`0.99`
`ML-DSA-65 keypair`	`202461` cycles	`202154` cycles	`1.00`
`ML-DSA-65 sign`	`742425` cycles	`749806` cycles	`0.99`
`ML-DSA-65 verify`	`209095` cycles	`210383` cycles	`0.99`
`ML-DSA-87 keypair`	`331958` cycles	`330656` cycles	`1.00`
`ML-DSA-87 sign`	`937209` cycles	`936531` cycles	`1.00`
`ML-DSA-87 verify`	`343009` cycles	`343169` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

oqs-bot

Graviton3

Details

Benchmark suite	Current: `cd26685`	Previous: `4d1cd02`	Ratio
`ML-DSA-44 keypair`	`71473` cycles	`71463` cycles	`1.00`
`ML-DSA-44 sign`	`208802` cycles	`208780` cycles	`1.00`
`ML-DSA-44 verify`	`74916` cycles	`74909` cycles	`1.00`
`ML-DSA-65 keypair`	`125897` cycles	`125892` cycles	`1.00`
`ML-DSA-65 sign`	`345640` cycles	`345655` cycles	`1.00`
`ML-DSA-65 verify`	`124387` cycles	`124383` cycles	`1.00`
`ML-DSA-87 keypair`	`207002` cycles	`207028` cycles	`1.00`
`ML-DSA-87 sign`	`444288` cycles	`444312` cycles	`1.00`
`ML-DSA-87 verify`	`203951` cycles	`203961` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

oqs-bot

Graviton4 (no-opt)

Details

Benchmark suite	Current: `cd26685`	Previous: `4d1cd02`	Ratio
`ML-DSA-44 keypair`	`127766` cycles	`127739` cycles	`1.00`
`ML-DSA-44 sign`	`441094` cycles	`440920` cycles	`1.00`
`ML-DSA-44 verify`	`136500` cycles	`136498` cycles	`1.00`
`ML-DSA-65 keypair`	`220460` cycles	`220513` cycles	`1.00`
`ML-DSA-65 sign`	`714710` cycles	`714829` cycles	`1.00`
`ML-DSA-65 verify`	`221531` cycles	`221386` cycles	`1.00`
`ML-DSA-87 keypair`	`364279` cycles	`364262` cycles	`1.00`
`ML-DSA-87 sign`	`915825` cycles	`915854` cycles	`1.00`
`ML-DSA-87 verify`	`371328` cycles	`371290` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

oqs-bot

Graviton3 (no-opt)

Details

Benchmark suite	Current: `cd26685`	Previous: `4d1cd02`	Ratio
`ML-DSA-44 keypair`	`138187` cycles	`138180` cycles	`1.00`
`ML-DSA-44 sign`	`485856` cycles	`485908` cycles	`1.00`
`ML-DSA-44 verify`	`149250` cycles	`149260` cycles	`1.00`
`ML-DSA-65 keypair`	`241751` cycles	`241558` cycles	`1.00`
`ML-DSA-65 sign`	`792077` cycles	`792067` cycles	`1.00`
`ML-DSA-65 verify`	`243100` cycles	`243100` cycles	`1`
`ML-DSA-87 keypair`	`395534` cycles	`395542` cycles	`1.00`
`ML-DSA-87 sign`	`1014072` cycles	`1014135` cycles	`1.00`
`ML-DSA-87 verify`	`404437` cycles	`404454` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

oqs-bot

Graviton2

Details

Benchmark suite	Current: `cd26685`	Previous: `4d1cd02`	Ratio
`ML-DSA-44 keypair`	`112544` cycles	`112548` cycles	`1.00`
`ML-DSA-44 sign`	`353932` cycles	`353942` cycles	`1.00`
`ML-DSA-44 verify`	`117408` cycles	`117413` cycles	`1.00`
`ML-DSA-65 keypair`	`194947` cycles	`194919` cycles	`1.00`
`ML-DSA-65 sign`	`584605` cycles	`584476` cycles	`1.00`
`ML-DSA-65 verify`	`193162` cycles	`193129` cycles	`1.00`
`ML-DSA-87 keypair`	`321377` cycles	`322928` cycles	`1.00`
`ML-DSA-87 sign`	`747733` cycles	`751569` cycles	`0.99`
`ML-DSA-87 verify`	`318987` cycles	`320755` cycles	`0.99`

This comment was automatically generated by workflow using github-action-benchmark.

oqs-bot

Graviton2 (no-opt)

Details

Benchmark suite	Current: `cd26685`	Previous: `4d1cd02`	Ratio
`ML-DSA-44 keypair`	`211830` cycles	`211973` cycles	`1.00`
`ML-DSA-44 sign`	`759380` cycles	`759626` cycles	`1.00`
`ML-DSA-44 verify`	`229254` cycles	`229394` cycles	`1.00`
`ML-DSA-65 keypair`	`377988` cycles	`377461` cycles	`1.00`
`ML-DSA-65 sign`	`1248633` cycles	`1247856` cycles	`1.00`
`ML-DSA-65 verify`	`373052` cycles	`372478` cycles	`1.00`
`ML-DSA-87 keypair`	`601052` cycles	`601219` cycles	`1.00`
`ML-DSA-87 sign`	`1584391` cycles	`1584562` cycles	`1.00`
`ML-DSA-87 verify`	`616612` cycles	`616672` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

github-actions

SpacemiT K1 8 (Banana Pi F3) benchmarks (no-opt)

Details

Benchmark suite	Current: `cd26685`	Previous: `4d1cd02`	Ratio
`ML-DSA-44 keypair`	`757437` cycles	`759973` cycles	`1.00`
`ML-DSA-44 sign`	`3133828` cycles	`3137778` cycles	`1.00`
`ML-DSA-44 verify`	`856840` cycles	`859368` cycles	`1.00`
`ML-DSA-65 keypair`	`1285848` cycles	`1288775` cycles	`1.00`
`ML-DSA-65 sign`	`5079204` cycles	`5081360` cycles	`1.00`
`ML-DSA-65 verify`	`1364416` cycles	`1368633` cycles	`1.00`
`ML-DSA-87 keypair`	`2112300` cycles	`2110772` cycles	`1.00`
`ML-DSA-87 sign`	`6357937` cycles	`6364237` cycles	`1.00`
`ML-DSA-87 verify`	`2229238` cycles	`2229321` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

github-actions

Arm Cortex-A55 (Snapdragon 888) benchmarks (opt)

Details

Benchmark suite	Current: `cd26685`	Previous: `4d1cd02`	Ratio
`ML-DSA-44 keypair`	`270060` cycles	`271714` cycles	`0.99`
`ML-DSA-44 sign`	`815767` cycles	`809927` cycles	`1.01`
`ML-DSA-44 verify`	`272394` cycles	`272166` cycles	`1.00`
`ML-DSA-65 keypair`	`465188` cycles	`466985` cycles	`1.00`
`ML-DSA-65 sign`	`1328836` cycles	`1346942` cycles	`0.99`
`ML-DSA-65 verify`	`451106` cycles	`454039` cycles	`0.99`
`ML-DSA-87 keypair`	`795378` cycles	`808650` cycles	`0.98`
`ML-DSA-87 sign`	`1807935` cycles	`1891727` cycles	`0.96`
`ML-DSA-87 verify`	`775145` cycles	`792373` cycles	`0.98`

This comment was automatically generated by workflow using github-action-benchmark.

github-actions

Arm Cortex-A55 (Snapdragon 888) benchmarks (no-opt)

Details

Benchmark suite	Current: `cd26685`	Previous: `4d1cd02`	Ratio
`ML-DSA-44 keypair`	`467533` cycles	`465559` cycles	`1.00`
`ML-DSA-44 sign`	`2154994` cycles	`2141332` cycles	`1.01`
`ML-DSA-44 verify`	`562723` cycles	`559633` cycles	`1.01`
`ML-DSA-65 keypair`	`790984` cycles	`784008` cycles	`1.01`
`ML-DSA-65 sign`	`3511674` cycles	`3486654` cycles	`1.01`
`ML-DSA-65 verify`	`874742` cycles	`869645` cycles	`1.01`
`ML-DSA-87 keypair`	`1276643` cycles	`1265231` cycles	`1.01`
`ML-DSA-87 sign`	`4344212` cycles	`4355817` cycles	`1.00`
`ML-DSA-87 verify`	`1401650` cycles	`1391456` cycles	`1.01`

This comment was automatically generated by workflow using github-action-benchmark.

github-actions

Arm Cortex-A72 (Raspberry Pi 4) benchmarks (opt)

Details

Benchmark suite	Current: `cd26685`	Previous: `4d1cd02`	Ratio
`ML-DSA-44 keypair`	`217358` cycles	`219392` cycles	`0.99`
`ML-DSA-44 sign`	`598508` cycles	`602290` cycles	`0.99`
`ML-DSA-44 verify`	`217032` cycles	`222119` cycles	`0.98`
`ML-DSA-65 keypair`	`379431` cycles	`382298` cycles	`0.99`
`ML-DSA-65 sign`	`987599` cycles	`988926` cycles	`1.00`
`ML-DSA-65 verify`	`364423` cycles	`366091` cycles	`1.00`
`ML-DSA-87 keypair`	`635661` cycles	`636096` cycles	`1.00`
`ML-DSA-87 sign`	`1318272` cycles	`1330502` cycles	`0.99`
`ML-DSA-87 verify`	`616791` cycles	`617156` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

github-actions

⚠️ Performance Alert ⚠️

Possible performance regression was detected for benchmark 'Arm Cortex-A72 (Raspberry Pi 4) benchmarks (opt)'.
Benchmark result of this commit is worse than the previous benchmark result exceeding threshold 1.03.

Benchmark suite	Current: `886a852`	Previous: `31c9b9e`	Ratio
`ML-DSA-44 verify`	`220216` cycles	`212143` cycles	`1.04`

This comment was automatically generated by workflow using github-action-benchmark.

github-actions

Arm Cortex-A72 (Raspberry Pi 4) benchmarks (no-opt)

Details

Benchmark suite	Current: `cd26685`	Previous: `4d1cd02`	Ratio
`ML-DSA-44 keypair`	`301585` cycles	`301067` cycles	`1.00`
`ML-DSA-44 sign`	`1140106` cycles	`1138977` cycles	`1.00`
`ML-DSA-44 verify`	`331732` cycles	`333106` cycles	`1.00`
`ML-DSA-65 keypair`	`546218` cycles	`549001` cycles	`0.99`
`ML-DSA-65 sign`	`1867249` cycles	`1869232` cycles	`1.00`
`ML-DSA-65 verify`	`527430` cycles	`529979` cycles	`1.00`
`ML-DSA-87 keypair`	`841639` cycles	`848290` cycles	`0.99`
`ML-DSA-87 sign`	`2358585` cycles	`2366465` cycles	`1.00`
`ML-DSA-87 verify`	`870590` cycles	`876188` cycles	`0.99`

This comment was automatically generated by workflow using github-action-benchmark.

github-actions

⚠️ Performance Alert ⚠️

Possible performance regression was detected for benchmark 'Arm Cortex-A72 (Raspberry Pi 4) benchmarks (no-opt)'.
Benchmark result of this commit is worse than the previous benchmark result exceeding threshold 1.03.

Benchmark suite	Current: `ff7f8f3`	Previous: `31c9b9e`	Ratio
`ML-DSA-87 sign`	`2434339` cycles	`2354951` cycles	`1.03`

This comment was automatically generated by workflow using github-action-benchmark.

oqs-bot · 2026-07-08T06:47:52Z

CBMC Results (ML-DSA-44, REDUCE-RAM)

Full Results (206 proofs)

Proof	Status	Current	Previous	Change
`TOTAL`	✅	1405s	1364s	+3.0%
`polyvec_matrix_pointwise_montgomery_yvec`	✅	148s	149s	-1%
`poly_pointwise_montgomery_c`	✅	116s	112s	+4%
`mld_invntt_layer`	✅	106s	105s	+1%
`polyveck_chknorm`	✅	63s	67s	-6%
`sign_verify_internal`	✅	55s	49s	+12%
`mld_ntt_layer`	✅	43s	41s	+5%
`fqmul`	✅	40s	39s	+3%
`keccakf1600x4_permute_native`	✅	22s	22s	+0%
`mld_ntt_butterfly_block`	✅	20s	23s	-13%
`mld_attempt_signature_generation`	✅	19s	19s	+0%
`poly_ntt_c`	✅	19s	21s	-10%
`rej_uniform_c`	✅	18s	16s	+12%
`polyeta_unpack`	✅	15s	14s	+7%
`compute_pack_t0_t1`	✅	14s	12s	+17%
`polyvecl_chknorm`	✅	14s	11s	+27%
`mld_check_pct`	✅	12s	15s	-20%
`polyt0_unpack`	✅	12s	12s	+0%
`poly_chknorm_c`	✅	11s	11s	+0%
`poly_invntt_tomont_c`	✅	11s	11s	+0%
`poly_uniform_eta_4x`	✅	11s	12s	-8%
`keccak_absorb_once_x4`	✅	10s	8s	+25%
`rej_uniform_native_x86_64`	✅	10s	-	new
`polyz_unpack_c`	✅	9s	8s	+12%
`mld_keccakf1600_permute_c`	✅	8s	7s	+14%
`pointwise_acc_native_aarch64`	✅	8s	6s	+33%
`poly_reduce`	✅	8s	4s	+100%
`sign_keypair`	✅	8s	5s	+60%
`pointwise_acc_native_x86_64`	✅	7s	4s	+75%
`poly_decompose_c`	✅	7s	5s	+40%
`polyveck_decompose`	✅	7s	7s	+0%
`rej_uniform`	✅	7s	8s	-12%
`unpack_sk`	✅	7s	3s	+133%
`keccakf1600x4_extract_bytes`	✅	6s	2s	+200%
`mld_sample_s1_s2_serial`	✅	6s	4s	+50%
`pointwise_native_x86_64`	✅	6s	4s	+50%
`polyvec_matrix_pointwise_montgomery_row`	✅	6s	6s	+0%
`rej_eta_c`	✅	6s	4s	+50%
`sign_keypair_internal`	✅	6s	4s	+50%
`sign_pk_from_sk`	✅	6s	5s	+20%
`keccak_absorb`	✅	5s	3s	+67%
`keccak_f1600_x1_native_aarch64_v84a`	✅	5s	2s	+150%
`keccakf1600_xor_bytes`	✅	5s	3s	+67%
`mld_ct_get_optblocker_u8`	✅	5s	2s	+150%
`mld_h`	✅	5s	4s	+25%
`mld_keccakf1600_extract_bytes`	✅	5s	2s	+150%
`pack_sk_s1`	✅	5s	3s	+67%
`pointwise_native_aarch64`	✅	5s	2s	+150%
`poly_add`	✅	5s	7s	-29%
`poly_caddq_c`	✅	5s	3s	+67%
`poly_ntt_native`	✅	5s	3s	+67%
`polyt0_pack`	✅	5s	4s	+25%
`polyveck_caddq`	✅	5s	3s	+67%
`polyveck_ntt`	✅	5s	2s	+150%
`polyvecl_ntt`	✅	5s	3s	+67%
`sign_signature_extmu`	✅	5s	4s	+25%
`sign_signature_internal`	✅	5s	4s	+25%
`sign_verify_pre_hash_shake256`	✅	5s	5s	+0%
`keccak_f1600_x4_native_aarch64_v84a`	✅	4s	3s	+33%
`keccakf1600x4_extract_bytes_native`	✅	4s	4s	+0%
`keccakf1600x4_permute`	✅	4s	4s	+0%
`mld_compute_pack_z`	✅	4s	6s	-33%
`mld_ct_abs_i32`	✅	4s	3s	+33%
`mld_ct_cmask_nonzero_u8`	✅	4s	2s	+100%
`mld_keccakf1600x4_xor_bytes_c`	✅	4s	4s	+0%
`mld_prepare_domain_separation_prefix`	✅	4s	3s	+33%
`mld_sample_s1_s2`	✅	4s	1s	+300%
`ntt_native_x86_64`	✅	4s	3s	+33%
`poly_caddq_native_x86_64`	✅	4s	4s	+0%
`poly_decompose_32_native_aarch64`	✅	4s	4s	+0%
`poly_decompose_native_x86_64`	✅	4s	2s	+100%
`poly_invntt_tomont`	✅	4s	2s	+100%
`poly_permute_bitrev_to_custom_optional`	✅	4s	5s	-20%
`poly_permute_bitrev_to_custom_optional_native`	✅	4s	3s	+33%
`poly_power2round`	✅	4s	4s	+0%
`poly_uniform_4x`	✅	4s	3s	+33%
`poly_uniform_eta`	✅	4s	2s	+100%
`polyvecl_pointwise_acc_montgomery`	✅	4s	3s	+33%
`polyvecl_unpack_eta`	✅	4s	4s	+0%
`polyz_pack`	✅	4s	2s	+100%
`polyz_unpack_17_native_aarch64`	✅	4s	2s	+100%
`polyz_unpack_19_native_aarch64`	✅	4s	4s	+0%
`rej_eta_native`	✅	4s	3s	+33%
`rej_uniform_native`	✅	4s	5s	-20%
`shake128_init`	✅	4s	2s	+100%
`shake128_release`	✅	4s	2s	+100%
`shake256_release`	✅	4s	1s	+300%
`sign_signature_pre_hash_internal`	✅	4s	4s	+0%
`decompose`	✅	3s	3s	+0%
`fqscale`	✅	3s	2s	+50%
`intt_native_aarch64`	✅	3s	3s	+0%
`intt_native_x86_64`	✅	3s	2s	+50%
`keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid`	✅	3s	2s	+50%
`keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid`	✅	3s	3s	+0%
`keccak_finalize`	✅	3s	2s	+50%
`keccak_init`	✅	3s	3s	+0%
`keccak_squeezeblocks_x4`	✅	3s	3s	+0%
`keccakf1600x4_xor_bytes`	✅	3s	3s	+0%
`keccakf1600x4_xor_bytes_native`	✅	3s	5s	-40%
`mld_ct_cmask_neg_i32`	✅	3s	2s	+50%
`mld_ct_cmask_nonzero_u32`	✅	3s	3s	+0%
`mld_ct_sel_int32`	✅	3s	3s	+0%
`mld_value_barrier_u32`	✅	3s	1s	+200%
`ntt_native_aarch64`	✅	3s	4s	-25%
`pack_sig_h`	✅	3s	4s	-25%
`pack_sig_z`	✅	3s	2s	+50%
`poly_caddq`	✅	3s	4s	-25%
`poly_challenge`	✅	3s	6s	-50%
`poly_chknorm`	✅	3s	3s	+0%
`poly_chknorm_native`	✅	3s	4s	-25%
`poly_chknorm_native_x86_64`	✅	3s	2s	+50%
`poly_decompose`	✅	3s	2s	+50%
`poly_decompose_88_native_aarch64`	✅	3s	3s	+0%
`poly_ntt`	✅	3s	3s	+0%
`poly_pointwise_montgomery`	✅	3s	3s	+0%
`poly_pointwise_montgomery_native`	✅	3s	2s	+50%
`poly_use_hint_native`	✅	3s	3s	+0%
`poly_use_hint_native_aarch64`	✅	3s	3s	+0%
`poly_use_hint_native_x86_64`	✅	3s	-	new
`polyeta_pack`	✅	3s	3s	+0%
`polyt1_pack`	✅	3s	3s	+0%
`polyt1_unpack`	✅	3s	2s	+50%
`polyvec_matrix_expand`	✅	3s	3s	+0%
`polyvec_matrix_expand_serial`	✅	3s	4s	-25%
`polyveck_invntt_tomont`	✅	3s	5s	-40%
`polyveck_pack_w1`	✅	3s	3s	+0%
`polyveck_reduce`	✅	3s	4s	-25%
`polyvecl_pointwise_acc_montgomery_c`	✅	3s	4s	-25%
`polyvecl_uniform_gamma1`	✅	3s	2s	+50%
`polyvecl_uniform_gamma1_serial`	✅	3s	2s	+50%
`polyvecl_unpack_z`	✅	3s	3s	+0%
`polyw1_pack`	✅	3s	4s	-25%
`polyz_unpack`	✅	3s	3s	+0%
`rej_uniform_native_aarch64`	✅	3s	3s	+0%
`shake128_absorb`	✅	3s	3s	+0%
`shake128_finalize`	✅	3s	3s	+0%
`shake128x4_absorb_once`	✅	3s	2s	+50%
`shake128x4_squeezeblocks`	✅	3s	2s	+50%
`shake256`	✅	3s	1s	+200%
`shake256_absorb`	✅	3s	2s	+50%
`shake256_squeeze`	✅	3s	2s	+50%
`shake256x4_absorb_once`	✅	3s	1s	+200%
`sign_signature_pre_hash_shake256`	✅	3s	4s	-25%
`sign_verify`	✅	3s	4s	-25%
`sign_verify_pre_hash_internal`	✅	3s	5s	-40%
`unpack_pk_t1`	✅	3s	3s	+0%
`use_hint`	✅	3s	2s	+50%
`yvec_init`	✅	3s	1s	+200%
`keccak_f1600_x4_native_avx2`	✅	2s	2s	+0%
`keccak_squeeze`	✅	2s	2s	+0%
`keccakf1600_permute`	✅	2s	2s	+0%
`keccakf1600_permute_native`	✅	2s	3s	-33%
`keccakf1600_xor_bytes (big endian)`	✅	2s	6s	-67%
`make_hint`	✅	2s	3s	-33%
`mld_ct_get_optblocker_i64`	✅	2s	4s	-50%
`mld_ct_get_optblocker_u32`	✅	2s	2s	+0%
`mld_ct_memcmp`	✅	2s	1s	+100%
`mld_keccakf1600x4_extract_bytes_c`	✅	2s	4s	-50%
`mld_polymat_expand_entry`	✅	2s	2s	+0%
`mld_value_barrier_u8`	✅	2s	4s	-50%
`montgomery_reduce`	✅	2s	2s	+0%
`nttunpack_native_x86_64`	✅	2s	4s	-50%
`pack_sig_c`	✅	2s	5s	-60%
`pack_sk_rho_key_tr_s2`	✅	2s	5s	-60%
`poly_caddq_native`	✅	2s	3s	-33%
`poly_caddq_native_aarch64`	✅	2s	3s	-33%
`poly_chknorm_native_aarch64`	✅	2s	2s	+0%
`poly_decompose_native`	✅	2s	2s	+0%
`poly_invntt_tomont_native`	✅	2s	3s	-33%
`poly_shiftl`	✅	2s	4s	-50%
`poly_sub`	✅	2s	3s	-33%
`poly_uniform`	✅	2s	3s	-33%
`poly_uniform_gamma1`	✅	2s	3s	-33%
`poly_uniform_gamma1_4x`	✅	2s	5s	-60%
`poly_use_hint`	✅	2s	2s	+0%
`poly_use_hint_c`	✅	2s	5s	-60%
`polyveck_pack_eta`	✅	2s	4s	-50%
`polyveck_unpack_eta`	✅	2s	2s	+0%
`polyvecl_pointwise_acc_montgomery_native`	✅	2s	3s	-33%
`polyw1_pack_32`	✅	2s	3s	-33%
`polyw1_pack_88`	✅	2s	2s	+0%
`polyz_unpack_native_x86_64`	✅	2s	3s	-33%
`power2round`	✅	2s	2s	+0%
`rej_eta`	✅	2s	5s	-60%
`rej_uniform_eta_native_aarch64`	✅	2s	3s	-33%
`shake128_squeeze`	✅	2s	2s	+0%
`shake256_finalize`	✅	2s	2s	+0%
`shake256x4_squeezeblocks`	✅	2s	2s	+0%
`sig_unpack_hints`	✅	2s	2s	+0%
`sign_signature`	✅	2s	6s	-67%
`sign_verify_extmu`	✅	2s	5s	-60%
`sk_s1hat_get_poly`	✅	2s	2s	+0%
`sk_t0hat_get_poly`	✅	2s	1s	+100%
`unpack_sk_s1hat`	✅	2s	3s	-33%
`unpack_sk_s2hat`	✅	2s	4s	-50%
`unpack_sk_t0hat`	✅	2s	2s	+0%
`yvec_get_poly`	✅	2s	3s	-33%
`caddq`	✅	1s	6s	-83%
`keccak_f1600_x1_native_aarch64`	✅	1s	3s	-67%
`keccakf1600_extract_bytes (big endian)`	✅	1s	4s	-75%
`mld_value_barrier_i64`	✅	1s	3s	-67%
`polyvecl_pack_eta`	✅	1s	2s	-50%
`polyz_unpack_native`	✅	1s	3s	-67%
`reduce32`	✅	1s	3s	-67%
`shake256_init`	✅	1s	4s	-75%
`sk_s2hat_get_poly`	✅	1s	5s	-80%
`sys_check_capability`	✅	1s	2s	-50%

oqs-bot · 2026-07-08T06:47:53Z

CBMC Results (ML-DSA-44)

Full Results (206 proofs)

Proof	Status	Current	Previous	Change
`TOTAL`	✅	1571s	1514s	+3.8%
`polyvecl_pointwise_acc_montgomery_c`	✅	138s	131s	+5%
`poly_pointwise_montgomery_c`	✅	127s	114s	+11%
`sign_verify_internal`	✅	121s	114s	+6%
`mld_invntt_layer`	✅	108s	107s	+1%
`mld_attempt_signature_generation`	✅	58s	58s	+0%
`compute_pack_t0_t1`	✅	49s	50s	-2%
`mld_ntt_layer`	✅	45s	42s	+7%
`fqmul`	✅	40s	39s	+3%
`polyvec_matrix_expand`	✅	27s	28s	-4%
`sign_signature_internal`	✅	27s	26s	+4%
`keccakf1600x4_permute_native`	✅	24s	22s	+9%
`mld_ntt_butterfly_block`	✅	20s	23s	-13%
`poly_ntt_c`	✅	19s	19s	+0%
`polyvec_matrix_pointwise_montgomery_yvec`	✅	16s	15s	+7%
`poly_chknorm_c`	✅	15s	17s	-12%
`polyeta_unpack`	✅	15s	14s	+7%
`poly_uniform_4x`	✅	14s	14s	+0%
`poly_uniform_eta_4x`	✅	14s	11s	+27%
`polyt0_unpack`	✅	14s	15s	-7%
`rej_uniform`	✅	14s	18s	-22%
`rej_uniform_c`	✅	13s	15s	-13%
`mld_check_pct`	✅	11s	14s	-21%
`poly_invntt_tomont_c`	✅	10s	11s	-9%
`polyz_unpack_c`	✅	10s	11s	-9%
`rej_uniform_native_x86_64`	✅	10s	-	new
`polyvecl_chknorm`	✅	9s	10s	-10%
`keccak_absorb_once_x4`	✅	8s	9s	-11%
`polyvec_matrix_expand_serial`	✅	8s	8s	+0%
`mld_compute_pack_z`	✅	7s	7s	+0%
`poly_add`	✅	7s	7s	+0%
`sign_pk_from_sk`	✅	7s	5s	+40%
`sign_verify_extmu`	✅	7s	3s	+133%
`keccak_squeezeblocks_x4`	✅	6s	4s	+50%
`mld_keccakf1600_permute_c`	✅	6s	8s	-25%
`poly_challenge`	✅	6s	3s	+100%
`poly_chknorm_native_aarch64`	✅	6s	4s	+50%
`poly_ntt`	✅	6s	3s	+100%
`poly_use_hint`	✅	6s	4s	+50%
`polyveck_chknorm`	✅	6s	5s	+20%
`polyveck_invntt_tomont`	✅	6s	5s	+20%
`polyz_unpack`	✅	6s	3s	+100%
`polyz_unpack_native_x86_64`	✅	6s	3s	+100%
`sign_signature`	✅	6s	3s	+100%
`sign_signature_extmu`	✅	6s	4s	+50%
`caddq`	✅	5s	2s	+150%
`intt_native_aarch64`	✅	5s	9s	-44%
`intt_native_x86_64`	✅	5s	4s	+25%
`keccak_f1600_x4_native_aarch64_v84a`	✅	5s	2s	+150%
`keccakf1600x4_xor_bytes`	✅	5s	2s	+150%
`pointwise_acc_native_aarch64`	✅	5s	4s	+25%
`poly_permute_bitrev_to_custom_optional`	✅	5s	2s	+150%
`poly_use_hint_c`	✅	5s	3s	+67%
`polyvec_matrix_pointwise_montgomery_row`	✅	5s	2s	+150%
`polyveck_caddq`	✅	5s	3s	+67%
`rej_eta_c`	✅	5s	4s	+25%
`rej_eta_native`	✅	5s	6s	-17%
`sk_t0hat_get_poly`	✅	5s	2s	+150%
`yvec_get_poly`	✅	5s	3s	+67%
`decompose`	✅	4s	2s	+100%
`keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid`	✅	4s	1s	+300%
`keccak_f1600_x4_native_avx2`	✅	4s	3s	+33%
`keccakf1600_xor_bytes`	✅	4s	1s	+300%
`make_hint`	✅	4s	3s	+33%
`mld_ct_get_optblocker_u32`	✅	4s	1s	+300%
`mld_polymat_expand_entry`	✅	4s	3s	+33%
`mld_sample_s1_s2_serial`	✅	4s	3s	+33%
`pack_sk_rho_key_tr_s2`	✅	4s	3s	+33%
`pointwise_acc_native_x86_64`	✅	4s	7s	-43%
`poly_caddq_native_aarch64`	✅	4s	4s	+0%
`poly_chknorm_native`	✅	4s	4s	+0%
`poly_chknorm_native_x86_64`	✅	4s	2s	+100%
`poly_decompose_32_native_aarch64`	✅	4s	2s	+100%
`poly_decompose_c`	✅	4s	4s	+0%
`poly_decompose_native_x86_64`	✅	4s	3s	+33%
`poly_ntt_native`	✅	4s	5s	-20%
`poly_permute_bitrev_to_custom_optional_native`	✅	4s	4s	+0%
`poly_pointwise_montgomery_native`	✅	4s	2s	+100%
`poly_shiftl`	✅	4s	3s	+33%
`poly_uniform_eta`	✅	4s	5s	-20%
`poly_uniform_gamma1_4x`	✅	4s	5s	-20%
`poly_use_hint_native_aarch64`	✅	4s	2s	+100%
`polyeta_pack`	✅	4s	3s	+33%
`polyt1_unpack`	✅	4s	5s	-20%
`polyveck_decompose`	✅	4s	4s	+0%
`polyveck_pack_eta`	✅	4s	2s	+100%
`polyveck_reduce`	✅	4s	5s	-20%
`polyz_unpack_19_native_aarch64`	✅	4s	5s	-20%
`reduce32`	✅	4s	2s	+100%
`rej_eta`	✅	4s	3s	+33%
`rej_uniform_native`	✅	4s	4s	+0%
`shake128_finalize`	✅	4s	2s	+100%
`shake256_finalize`	✅	4s	2s	+100%
`shake256_release`	✅	4s	2s	+100%
`sign_verify`	✅	4s	4s	+0%
`sign_verify_pre_hash_internal`	✅	4s	3s	+33%
`sk_s1hat_get_poly`	✅	4s	3s	+33%
`unpack_sk_s1hat`	✅	4s	1s	+300%
`unpack_sk_s2hat`	✅	4s	4s	+0%
`unpack_sk_t0hat`	✅	4s	3s	+33%
`use_hint`	✅	4s	2s	+100%
`keccak_absorb`	✅	3s	5s	-40%
`keccak_squeeze`	✅	3s	1s	+200%
`keccakf1600_extract_bytes (big endian)`	✅	3s	2s	+50%
`keccakf1600_permute`	✅	3s	2s	+50%
`keccakf1600_permute_native`	✅	3s	3s	+0%
`keccakf1600x4_extract_bytes_native`	✅	3s	3s	+0%
`keccakf1600x4_xor_bytes_native`	✅	3s	3s	+0%
`mld_ct_cmask_neg_i32`	✅	3s	3s	+0%
`mld_ct_cmask_nonzero_u32`	✅	3s	2s	+50%
`mld_ct_cmask_nonzero_u8`	✅	3s	2s	+50%
`mld_ct_get_optblocker_i64`	✅	3s	4s	-25%
`mld_h`	✅	3s	4s	-25%
`mld_keccakf1600x4_xor_bytes_c`	✅	3s	2s	+50%
`mld_prepare_domain_separation_prefix`	✅	3s	4s	-25%
`mld_value_barrier_u8`	✅	3s	3s	+0%
`ntt_native_x86_64`	✅	3s	3s	+0%
`nttunpack_native_x86_64`	✅	3s	1s	+200%
`pack_sig_h`	✅	3s	3s	+0%
`pack_sig_z`	✅	3s	4s	-25%
`poly_caddq`	✅	3s	2s	+50%
`poly_caddq_native_x86_64`	✅	3s	4s	-25%
`poly_decompose`	✅	3s	3s	+0%
`poly_decompose_88_native_aarch64`	✅	3s	4s	-25%
`poly_decompose_native`	✅	3s	3s	+0%
`poly_invntt_tomont`	✅	3s	4s	-25%
`poly_invntt_tomont_native`	✅	3s	4s	-25%
`poly_pointwise_montgomery`	✅	3s	3s	+0%
`poly_reduce`	✅	3s	3s	+0%
`poly_sub`	✅	3s	3s	+0%
`poly_uniform`	✅	3s	6s	-50%
`poly_use_hint_native`	✅	3s	4s	-25%
`poly_use_hint_native_x86_64`	✅	3s	-	new
`polyt1_pack`	✅	3s	4s	-25%
`polyveck_ntt`	✅	3s	5s	-40%
`polyveck_pack_w1`	✅	3s	1s	+200%
`polyvecl_ntt`	✅	3s	2s	+50%
`polyvecl_pointwise_acc_montgomery`	✅	3s	4s	-25%
`polyw1_pack_32`	✅	3s	2s	+50%
`polyw1_pack_88`	✅	3s	1s	+200%
`polyz_unpack_native`	✅	3s	2s	+50%
`rej_uniform_eta_native_aarch64`	✅	3s	2s	+50%
`shake128_absorb`	✅	3s	2s	+50%
`shake128_squeeze`	✅	3s	1s	+200%
`shake256_init`	✅	3s	3s	+0%
`shake256_squeeze`	✅	3s	2s	+50%
`sig_unpack_hints`	✅	3s	2s	+50%
`sign_keypair`	✅	3s	4s	-25%
`sign_keypair_internal`	✅	3s	4s	-25%
`sign_signature_pre_hash_shake256`	✅	3s	3s	+0%
`fqscale`	✅	2s	3s	-33%
`keccak_f1600_x1_native_aarch64`	✅	2s	2s	+0%
`keccak_f1600_x1_native_aarch64_v84a`	✅	2s	3s	-33%
`keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid`	✅	2s	3s	-33%
`keccak_finalize`	✅	2s	3s	-33%
`keccakf1600_xor_bytes (big endian)`	✅	2s	4s	-50%
`keccakf1600x4_extract_bytes`	✅	2s	2s	+0%
`mld_ct_get_optblocker_u8`	✅	2s	1s	+100%
`mld_ct_sel_int32`	✅	2s	2s	+0%
`mld_keccakf1600_extract_bytes`	✅	2s	2s	+0%
`mld_sample_s1_s2`	✅	2s	4s	-50%
`mld_value_barrier_i64`	✅	2s	2s	+0%
`mld_value_barrier_u32`	✅	2s	2s	+0%
`ntt_native_aarch64`	✅	2s	3s	-33%
`pack_sig_c`	✅	2s	2s	+0%
`pack_sk_s1`	✅	2s	2s	+0%
`pointwise_native_aarch64`	✅	2s	5s	-60%
`pointwise_native_x86_64`	✅	2s	4s	-50%
`poly_caddq_c`	✅	2s	2s	+0%
`poly_caddq_native`	✅	2s	5s	-60%
`poly_chknorm`	✅	2s	4s	-50%
`poly_power2round`	✅	2s	4s	-50%
`poly_uniform_gamma1`	✅	2s	4s	-50%
`polyt0_pack`	✅	2s	2s	+0%
`polyveck_unpack_eta`	✅	2s	2s	+0%
`polyvecl_pack_eta`	✅	2s	3s	-33%
`polyvecl_uniform_gamma1`	✅	2s	3s	-33%
`polyvecl_uniform_gamma1_serial`	✅	2s	2s	+0%
`polyvecl_unpack_z`	✅	2s	2s	+0%
`polyw1_pack`	✅	2s	3s	-33%
`polyz_pack`	✅	2s	2s	+0%
`polyz_unpack_17_native_aarch64`	✅	2s	5s	-60%
`power2round`	✅	2s	3s	-33%
`rej_uniform_native_aarch64`	✅	2s	5s	-60%
`shake128_init`	✅	2s	3s	-33%
`shake128_release`	✅	2s	1s	+100%
`shake128x4_absorb_once`	✅	2s	3s	-33%
`shake128x4_squeezeblocks`	✅	2s	1s	+100%
`shake256`	✅	2s	1s	+100%
`shake256x4_squeezeblocks`	✅	2s	4s	-50%
`sign_signature_pre_hash_internal`	✅	2s	6s	-67%
`sign_verify_pre_hash_shake256`	✅	2s	5s	-60%
`sk_s2hat_get_poly`	✅	2s	2s	+0%
`unpack_pk_t1`	✅	2s	5s	-60%
`yvec_init`	✅	2s	3s	-33%
`keccak_init`	✅	1s	3s	-67%
`keccakf1600x4_permute`	✅	1s	4s	-75%
`mld_ct_abs_i32`	✅	1s	2s	-50%
`mld_ct_memcmp`	✅	1s	3s	-67%
`mld_keccakf1600x4_extract_bytes_c`	✅	1s	2s	-50%
`montgomery_reduce`	✅	1s	3s	-67%
`polyvecl_pointwise_acc_montgomery_native`	✅	1s	2s	-50%
`polyvecl_unpack_eta`	✅	1s	2s	-50%
`shake256_absorb`	✅	1s	3s	-67%
`shake256x4_absorb_once`	✅	1s	3s	-67%
`sys_check_capability`	✅	1s	4s	-75%
`unpack_sk`	✅	1s	3s	-67%

oqs-bot · 2026-07-08T06:48:44Z

CBMC Results (ML-DSA-65, REDUCE-RAM)

Full Results (206 proofs)

Proof	Status	Current	Previous	Change
`TOTAL`	✅	1532s	1482s	+3.4%
`polyvec_matrix_pointwise_montgomery_yvec`	✅	207s	201s	+3%
`poly_pointwise_montgomery_c`	✅	129s	116s	+11%
`mld_invntt_layer`	✅	118s	108s	+9%
`sign_verify_internal`	✅	74s	71s	+4%
`mld_ntt_layer`	✅	46s	43s	+7%
`fqmul`	✅	45s	40s	+12%
`polyvecl_chknorm`	✅	43s	43s	+0%
`polyveck_chknorm`	✅	35s	36s	-3%
`mld_attempt_signature_generation`	✅	32s	31s	+3%
`mld_ntt_butterfly_block`	✅	24s	25s	-4%
`keccakf1600x4_permute_native`	✅	22s	22s	+0%
`poly_ntt_c`	✅	21s	22s	-5%
`rej_uniform_c`	✅	16s	16s	+0%
`mld_check_pct`	✅	15s	12s	+25%
`poly_chknorm_c`	✅	13s	13s	+0%
`poly_invntt_tomont_c`	✅	13s	10s	+30%
`poly_uniform_eta_4x`	✅	12s	13s	-8%
`polyt0_unpack`	✅	12s	13s	-8%
`polyveck_decompose`	✅	12s	14s	-14%
`polyvec_matrix_pointwise_montgomery_row`	✅	11s	8s	+38%
`keccak_absorb_once_x4`	✅	10s	10s	+0%
`rej_uniform_native_x86_64`	✅	10s	-	new
`pointwise_acc_native_x86_64`	✅	9s	5s	+80%
`polyz_unpack_c`	✅	8s	9s	-11%
`compute_pack_t0_t1`	✅	7s	7s	+0%
`poly_add`	✅	7s	7s	+0%
`polyveck_caddq`	✅	7s	7s	+0%
`polyveck_invntt_tomont`	✅	7s	7s	+0%
`polyvecl_ntt`	✅	7s	7s	+0%
`keccak_init`	✅	6s	4s	+50%
`mld_compute_pack_z`	✅	6s	5s	+20%
`mld_keccakf1600_permute_c`	✅	6s	7s	-14%
`mld_sample_s1_s2`	✅	6s	6s	+0%
`poly_caddq_c`	✅	6s	5s	+20%
`poly_decompose_c`	✅	6s	8s	-25%
`poly_decompose_native_x86_64`	✅	6s	2s	+200%
`polyvec_matrix_expand`	✅	6s	6s	+0%
`polyveck_reduce`	✅	6s	6s	+0%
`rej_uniform`	✅	6s	7s	-14%
`sign_pk_from_sk`	✅	6s	5s	+20%
`keccakf1600_xor_bytes (big endian)`	✅	5s	2s	+150%
`mld_sample_s1_s2_serial`	✅	5s	3s	+67%
`pointwise_acc_native_aarch64`	✅	5s	6s	-17%
`poly_challenge`	✅	5s	5s	+0%
`poly_permute_bitrev_to_custom_optional_native`	✅	5s	3s	+67%
`poly_pointwise_montgomery`	✅	5s	2s	+150%
`poly_reduce`	✅	5s	4s	+25%
`rej_eta_native`	✅	5s	3s	+67%
`shake256_finalize`	✅	5s	1s	+400%
`sign_signature_internal`	✅	5s	6s	-17%
`sign_verify_pre_hash_shake256`	✅	5s	6s	-17%
`caddq`	✅	4s	2s	+100%
`decompose`	✅	4s	4s	+0%
`fqscale`	✅	4s	3s	+33%
`keccak_finalize`	✅	4s	2s	+100%
`keccak_squeezeblocks_x4`	✅	4s	4s	+0%
`keccakf1600x4_extract_bytes`	✅	4s	4s	+0%
`mld_ct_cmask_neg_i32`	✅	4s	3s	+33%
`mld_ct_cmask_nonzero_u32`	✅	4s	3s	+33%
`mld_ct_cmask_nonzero_u8`	✅	4s	2s	+100%
`mld_value_barrier_i64`	✅	4s	2s	+100%
`poly_chknorm_native_aarch64`	✅	4s	2s	+100%
`poly_decompose_88_native_aarch64`	✅	4s	2s	+100%
`poly_decompose_native`	✅	4s	5s	-20%
`poly_power2round`	✅	4s	7s	-43%
`poly_sub`	✅	4s	4s	+0%
`poly_uniform_4x`	✅	4s	4s	+0%
`poly_uniform_gamma1`	✅	4s	3s	+33%
`poly_use_hint_c`	✅	4s	2s	+100%
`polyeta_unpack`	✅	4s	4s	+0%
`polyt0_pack`	✅	4s	5s	-20%
`polyt1_pack`	✅	4s	3s	+33%
`polyveck_pack_w1`	✅	4s	4s	+0%
`polyvecl_pack_eta`	✅	4s	2s	+100%
`polyvecl_pointwise_acc_montgomery_c`	✅	4s	3s	+33%
`polyvecl_unpack_z`	✅	4s	1s	+300%
`polyw1_pack_32`	✅	4s	2s	+100%
`polyz_unpack_17_native_aarch64`	✅	4s	2s	+100%
`reduce32`	✅	4s	2s	+100%
`rej_eta_c`	✅	4s	4s	+0%
`rej_uniform_eta_native_aarch64`	✅	4s	5s	-20%
`rej_uniform_native`	✅	4s	4s	+0%
`shake256`	✅	4s	2s	+100%
`shake256_init`	✅	4s	4s	+0%
`sign_keypair_internal`	✅	4s	3s	+33%
`sign_signature`	✅	4s	5s	-20%
`sign_signature_pre_hash_internal`	✅	4s	3s	+33%
`sign_signature_pre_hash_shake256`	✅	4s	7s	-43%
`sk_s1hat_get_poly`	✅	4s	3s	+33%
`unpack_sk`	✅	4s	3s	+33%
`intt_native_x86_64`	✅	3s	4s	-25%
`keccak_absorb`	✅	3s	3s	+0%
`keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid`	✅	3s	3s	+0%
`keccakf1600x4_permute`	✅	3s	1s	+200%
`make_hint`	✅	3s	3s	+0%
`mld_ct_abs_i32`	✅	3s	6s	-50%
`mld_ct_get_optblocker_u8`	✅	3s	4s	-25%
`mld_ct_memcmp`	✅	3s	4s	-25%
`mld_h`	✅	3s	3s	+0%
`mld_keccakf1600x4_extract_bytes_c`	✅	3s	2s	+50%
`mld_polymat_expand_entry`	✅	3s	3s	+0%
`mld_prepare_domain_separation_prefix`	✅	3s	4s	-25%
`ntt_native_aarch64`	✅	3s	3s	+0%
`ntt_native_x86_64`	✅	3s	5s	-40%
`nttunpack_native_x86_64`	✅	3s	3s	+0%
`pack_sig_h`	✅	3s	2s	+50%
`pack_sk_rho_key_tr_s2`	✅	3s	2s	+50%
`pack_sk_s1`	✅	3s	3s	+0%
`pointwise_native_aarch64`	✅	3s	3s	+0%
`pointwise_native_x86_64`	✅	3s	2s	+50%
`poly_caddq_native`	✅	3s	4s	-25%
`poly_caddq_native_aarch64`	✅	3s	2s	+50%
`poly_chknorm`	✅	3s	3s	+0%
`poly_chknorm_native`	✅	3s	4s	-25%
`poly_chknorm_native_x86_64`	✅	3s	4s	-25%
`poly_decompose`	✅	3s	2s	+50%
`poly_ntt`	✅	3s	2s	+50%
`poly_ntt_native`	✅	3s	2s	+50%
`poly_shiftl`	✅	3s	3s	+0%
`poly_uniform`	✅	3s	2s	+50%
`poly_uniform_eta`	✅	3s	5s	-40%
`poly_use_hint_native_aarch64`	✅	3s	4s	-25%
`poly_use_hint_native_x86_64`	✅	3s	-	new
`polyt1_unpack`	✅	3s	3s	+0%
`polyveck_ntt`	✅	3s	4s	-25%
`polyveck_pack_eta`	✅	3s	3s	+0%
`polyveck_unpack_eta`	✅	3s	3s	+0%
`polyvecl_pointwise_acc_montgomery`	✅	3s	3s	+0%
`polyvecl_pointwise_acc_montgomery_native`	✅	3s	3s	+0%
`polyvecl_uniform_gamma1`	✅	3s	4s	-25%
`polyz_pack`	✅	3s	3s	+0%
`polyz_unpack_native`	✅	3s	3s	+0%
`polyz_unpack_native_x86_64`	✅	3s	3s	+0%
`power2round`	✅	3s	2s	+50%
`rej_uniform_native_aarch64`	✅	3s	5s	-40%
`shake128_absorb`	✅	3s	2s	+50%
`shake128_release`	✅	3s	2s	+50%
`shake128x4_squeezeblocks`	✅	3s	2s	+50%
`shake256_absorb`	✅	3s	4s	-25%
`shake256_squeeze`	✅	3s	4s	-25%
`sign_keypair`	✅	3s	4s	-25%
`sign_verify_extmu`	✅	3s	2s	+50%
`sign_verify_pre_hash_internal`	✅	3s	5s	-40%
`sk_s2hat_get_poly`	✅	3s	1s	+200%
`sys_check_capability`	✅	3s	1s	+200%
`unpack_pk_t1`	✅	3s	2s	+50%
`unpack_sk_s2hat`	✅	3s	3s	+0%
`use_hint`	✅	3s	2s	+50%
`yvec_init`	✅	3s	5s	-40%
`intt_native_aarch64`	✅	2s	2s	+0%
`keccak_f1600_x1_native_aarch64_v84a`	✅	2s	2s	+0%
`keccak_f1600_x4_native_aarch64_v84a`	✅	2s	2s	+0%
`keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid`	✅	2s	3s	-33%
`keccak_f1600_x4_native_avx2`	✅	2s	2s	+0%
`keccakf1600_permute_native`	✅	2s	2s	+0%
`keccakf1600_xor_bytes`	✅	2s	4s	-50%
`keccakf1600x4_extract_bytes_native`	✅	2s	1s	+100%
`keccakf1600x4_xor_bytes`	✅	2s	2s	+0%
`keccakf1600x4_xor_bytes_native`	✅	2s	2s	+0%
`mld_ct_get_optblocker_i64`	✅	2s	1s	+100%
`mld_ct_get_optblocker_u32`	✅	2s	3s	-33%
`mld_ct_sel_int32`	✅	2s	2s	+0%
`mld_keccakf1600x4_xor_bytes_c`	✅	2s	2s	+0%
`mld_value_barrier_u32`	✅	2s	4s	-50%
`mld_value_barrier_u8`	✅	2s	1s	+100%
`pack_sig_c`	✅	2s	3s	-33%
`pack_sig_z`	✅	2s	1s	+100%
`poly_caddq`	✅	2s	3s	-33%
`poly_caddq_native_x86_64`	✅	2s	1s	+100%
`poly_invntt_tomont`	✅	2s	5s	-60%
`poly_invntt_tomont_native`	✅	2s	5s	-60%
`poly_permute_bitrev_to_custom_optional`	✅	2s	3s	-33%
`poly_pointwise_montgomery_native`	✅	2s	4s	-50%
`poly_uniform_gamma1_4x`	✅	2s	3s	-33%
`poly_use_hint`	✅	2s	3s	-33%
`poly_use_hint_native`	✅	2s	7s	-71%
`polyeta_pack`	✅	2s	1s	+100%
`polyvec_matrix_expand_serial`	✅	2s	3s	-33%
`polyvecl_uniform_gamma1_serial`	✅	2s	1s	+100%
`polyvecl_unpack_eta`	✅	2s	2s	+0%
`polyw1_pack`	✅	2s	3s	-33%
`polyz_unpack`	✅	2s	3s	-33%
`polyz_unpack_19_native_aarch64`	✅	2s	5s	-60%
`rej_eta`	✅	2s	5s	-60%
`shake128_finalize`	✅	2s	2s	+0%
`shake128_init`	✅	2s	6s	-67%
`shake128_squeeze`	✅	2s	3s	-33%
`shake128x4_absorb_once`	✅	2s	2s	+0%
`shake256_release`	✅	2s	3s	-33%
`shake256x4_absorb_once`	✅	2s	2s	+0%
`shake256x4_squeezeblocks`	✅	2s	2s	+0%
`sig_unpack_hints`	✅	2s	1s	+100%
`sign_signature_extmu`	✅	2s	4s	-50%
`sign_verify`	✅	2s	6s	-67%
`sk_t0hat_get_poly`	✅	2s	1s	+100%
`unpack_sk_s1hat`	✅	2s	1s	+100%
`unpack_sk_t0hat`	✅	2s	4s	-50%
`yvec_get_poly`	✅	2s	3s	-33%
`keccak_f1600_x1_native_aarch64`	✅	1s	2s	-50%
`keccak_squeeze`	✅	1s	2s	-50%
`keccakf1600_extract_bytes (big endian)`	✅	1s	3s	-67%
`keccakf1600_permute`	✅	1s	4s	-75%
`mld_keccakf1600_extract_bytes`	✅	1s	2s	-50%
`montgomery_reduce`	✅	1s	1s	+0%
`poly_decompose_32_native_aarch64`	✅	1s	4s	-75%
`polyw1_pack_88`	✅	1s	3s	-67%

oqs-bot · 2026-07-08T06:48:48Z

CBMC Results (ML-DSA-87, REDUCE-RAM)

Full Results (206 proofs)

Proof	Status	Current	Previous	Change
`TOTAL`	✅	1405s	1436s	-2.2%
`polyvec_matrix_pointwise_montgomery_yvec`	✅	185s	196s	-6%
`poly_pointwise_montgomery_c`	✅	109s	125s	-13%
`mld_invntt_layer`	✅	102s	111s	-8%
`sign_verify_internal`	✅	45s	47s	-4%
`mld_ntt_layer`	✅	44s	44s	+0%
`fqmul`	✅	40s	39s	+3%
`polyvecl_chknorm`	✅	34s	38s	-11%
`mld_attempt_signature_generation`	✅	32s	34s	-6%
`mld_ntt_butterfly_block`	✅	23s	23s	+0%
`keccakf1600x4_permute_native`	✅	22s	25s	-12%
`poly_ntt_c`	✅	21s	19s	+11%
`mld_check_pct`	✅	17s	15s	+13%
`poly_chknorm_c`	✅	15s	13s	+15%
`polyveck_decompose`	✅	15s	12s	+25%
`rej_uniform_c`	✅	15s	18s	-17%
`compute_pack_t0_t1`	✅	13s	12s	+8%
`polyt0_unpack`	✅	13s	14s	-7%
`polyeta_unpack`	✅	12s	13s	-8%
`poly_uniform_eta_4x`	✅	11s	12s	-8%
`polyvec_matrix_pointwise_montgomery_row`	✅	11s	13s	-15%
`keccak_absorb_once_x4`	✅	10s	8s	+25%
`poly_invntt_tomont_c`	✅	10s	9s	+11%
`rej_uniform`	✅	10s	7s	+43%
`polyveck_caddq`	✅	9s	8s	+12%
`polyveck_chknorm`	✅	9s	9s	+0%
`polyz_unpack_c`	✅	9s	7s	+29%
`mld_keccakf1600_permute_c`	✅	8s	8s	+0%
`mld_sample_s1_s2`	✅	8s	8s	+0%
`polyveck_reduce`	✅	8s	6s	+33%
`rej_uniform_native_x86_64`	✅	8s	-	new
`pointwise_acc_native_aarch64`	✅	7s	5s	+40%
`pointwise_acc_native_x86_64`	✅	7s	8s	-12%
`polyvecl_ntt`	✅	7s	8s	-12%
`poly_decompose_c`	✅	6s	6s	+0%
`poly_reduce`	✅	6s	4s	+50%
`poly_uniform_gamma1_4x`	✅	6s	3s	+100%
`polyveck_unpack_eta`	✅	6s	3s	+100%
`rej_eta_c`	✅	6s	4s	+50%
`keccak_finalize`	✅	5s	1s	+400%
`keccak_squeezeblocks_x4`	✅	5s	4s	+25%
`mld_compute_pack_z`	✅	5s	6s	-17%
`ntt_native_aarch64`	✅	5s	4s	+25%
`pack_sig_c`	✅	5s	2s	+150%
`poly_add`	✅	5s	8s	-38%
`poly_uniform_eta`	✅	5s	5s	+0%
`polyvec_matrix_expand`	✅	5s	3s	+67%
`polyz_unpack_19_native_aarch64`	✅	5s	5s	+0%
`rej_uniform_eta_native_aarch64`	✅	5s	3s	+67%
`sig_unpack_hints`	✅	5s	4s	+25%
`sign_pk_from_sk`	✅	5s	6s	-17%
`sign_signature_extmu`	✅	5s	4s	+25%
`yvec_get_poly`	✅	5s	2s	+150%
`decompose`	✅	4s	2s	+100%
`keccakf1600_xor_bytes (big endian)`	✅	4s	2s	+100%
`mld_h`	✅	4s	2s	+100%
`mld_sample_s1_s2_serial`	✅	4s	6s	-33%
`nttunpack_native_x86_64`	✅	4s	3s	+33%
`pack_sig_z`	✅	4s	3s	+33%
`poly_caddq_c`	✅	4s	3s	+33%
`poly_caddq_native_aarch64`	✅	4s	3s	+33%
`poly_decompose_88_native_aarch64`	✅	4s	2s	+100%
`poly_decompose_native_x86_64`	✅	4s	3s	+33%
`poly_ntt`	✅	4s	2s	+100%
`poly_ntt_native`	✅	4s	4s	+0%
`poly_power2round`	✅	4s	7s	-43%
`poly_uniform`	✅	4s	4s	+0%
`poly_uniform_4x`	✅	4s	3s	+33%
`poly_uniform_gamma1`	✅	4s	3s	+33%
`polyveck_pack_w1`	✅	4s	3s	+33%
`polyvecl_pointwise_acc_montgomery_c`	✅	4s	2s	+100%
`polyvecl_unpack_eta`	✅	4s	3s	+33%
`polyz_unpack`	✅	4s	3s	+33%
`polyz_unpack_17_native_aarch64`	✅	4s	4s	+0%
`reduce32`	✅	4s	3s	+33%
`rej_eta_native`	✅	4s	4s	+0%
`rej_uniform_native`	✅	4s	5s	-20%
`rej_uniform_native_aarch64`	✅	4s	3s	+33%
`shake128_release`	✅	4s	3s	+33%
`shake128x4_squeezeblocks`	✅	4s	1s	+300%
`sign_keypair`	✅	4s	4s	+0%
`sign_keypair_internal`	✅	4s	6s	-33%
`sign_signature`	✅	4s	4s	+0%
`sign_signature_internal`	✅	4s	3s	+33%
`sign_signature_pre_hash_internal`	✅	4s	2s	+100%
`sign_signature_pre_hash_shake256`	✅	4s	3s	+33%
`sign_verify`	✅	4s	2s	+100%
`sign_verify_extmu`	✅	4s	4s	+0%
`sign_verify_pre_hash_shake256`	✅	4s	7s	-43%
`unpack_sk_s1hat`	✅	4s	3s	+33%
`caddq`	✅	3s	3s	+0%
`intt_native_aarch64`	✅	3s	4s	-25%
`keccak_absorb`	✅	3s	4s	-25%
`keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid`	✅	3s	2s	+50%
`keccak_squeeze`	✅	3s	5s	-40%
`keccakf1600_extract_bytes (big endian)`	✅	3s	3s	+0%
`keccakf1600_permute`	✅	3s	2s	+50%
`keccakf1600x4_extract_bytes_native`	✅	3s	4s	-25%
`keccakf1600x4_xor_bytes`	✅	3s	1s	+200%
`make_hint`	✅	3s	2s	+50%
`mld_ct_cmask_nonzero_u32`	✅	3s	5s	-40%
`mld_ct_cmask_nonzero_u8`	✅	3s	2s	+50%
`mld_ct_sel_int32`	✅	3s	2s	+50%
`mld_keccakf1600x4_extract_bytes_c`	✅	3s	3s	+0%
`mld_prepare_domain_separation_prefix`	✅	3s	3s	+0%
`pack_sig_h`	✅	3s	3s	+0%
`pack_sk_rho_key_tr_s2`	✅	3s	2s	+50%
`pack_sk_s1`	✅	3s	2s	+50%
`pointwise_native_aarch64`	✅	3s	4s	-25%
`pointwise_native_x86_64`	✅	3s	5s	-40%
`poly_caddq_native_x86_64`	✅	3s	3s	+0%
`poly_chknorm_native`	✅	3s	1s	+200%
`poly_decompose_native`	✅	3s	2s	+50%
`poly_invntt_tomont`	✅	3s	4s	-25%
`poly_permute_bitrev_to_custom_optional`	✅	3s	2s	+50%
`poly_permute_bitrev_to_custom_optional_native`	✅	3s	3s	+0%
`poly_pointwise_montgomery`	✅	3s	3s	+0%
`poly_pointwise_montgomery_native`	✅	3s	3s	+0%
`poly_sub`	✅	3s	5s	-40%
`poly_use_hint`	✅	3s	4s	-25%
`poly_use_hint_native`	✅	3s	1s	+200%
`poly_use_hint_native_x86_64`	✅	3s	-	new
`polyt1_unpack`	✅	3s	3s	+0%
`polyveck_invntt_tomont`	✅	3s	4s	-25%
`polyveck_ntt`	✅	3s	3s	+0%
`polyw1_pack_32`	✅	3s	3s	+0%
`polyw1_pack_88`	✅	3s	2s	+50%
`power2round`	✅	3s	3s	+0%
`rej_eta`	✅	3s	2s	+50%
`shake128_finalize`	✅	3s	2s	+50%
`shake128_squeeze`	✅	3s	1s	+200%
`shake128x4_absorb_once`	✅	3s	4s	-25%
`shake256_absorb`	✅	3s	3s	+0%
`shake256_finalize`	✅	3s	3s	+0%
`sign_verify_pre_hash_internal`	✅	3s	3s	+0%
`sys_check_capability`	✅	3s	2s	+50%
`unpack_sk_t0hat`	✅	3s	4s	-25%
`use_hint`	✅	3s	3s	+0%
`yvec_init`	✅	3s	4s	-25%
`intt_native_x86_64`	✅	2s	4s	-50%
`keccak_f1600_x4_native_aarch64_v84a`	✅	2s	1s	+100%
`keccak_f1600_x4_native_avx2`	✅	2s	3s	-33%
`keccak_init`	✅	2s	1s	+100%
`keccakf1600_xor_bytes`	✅	2s	1s	+100%
`keccakf1600x4_extract_bytes`	✅	2s	1s	+100%
`keccakf1600x4_permute`	✅	2s	2s	+0%
`keccakf1600x4_xor_bytes_native`	✅	2s	2s	+0%
`mld_ct_get_optblocker_u8`	✅	2s	3s	-33%
`mld_ct_memcmp`	✅	2s	1s	+100%
`mld_keccakf1600x4_xor_bytes_c`	✅	2s	1s	+100%
`mld_polymat_expand_entry`	✅	2s	4s	-50%
`mld_value_barrier_i64`	✅	2s	2s	+0%
`mld_value_barrier_u8`	✅	2s	2s	+0%
`montgomery_reduce`	✅	2s	2s	+0%
`ntt_native_x86_64`	✅	2s	2s	+0%
`poly_caddq`	✅	2s	5s	-60%
`poly_caddq_native`	✅	2s	3s	-33%
`poly_challenge`	✅	2s	4s	-50%
`poly_chknorm`	✅	2s	4s	-50%
`poly_chknorm_native_aarch64`	✅	2s	5s	-60%
`poly_chknorm_native_x86_64`	✅	2s	2s	+0%
`poly_decompose`	✅	2s	2s	+0%
`poly_decompose_32_native_aarch64`	✅	2s	3s	-33%
`poly_invntt_tomont_native`	✅	2s	2s	+0%
`poly_shiftl`	✅	2s	4s	-50%
`poly_use_hint_native_aarch64`	✅	2s	3s	-33%
`polyeta_pack`	✅	2s	3s	-33%
`polyt0_pack`	✅	2s	3s	-33%
`polyt1_pack`	✅	2s	5s	-60%
`polyvec_matrix_expand_serial`	✅	2s	3s	-33%
`polyveck_pack_eta`	✅	2s	5s	-60%
`polyvecl_pack_eta`	✅	2s	2s	+0%
`polyvecl_pointwise_acc_montgomery`	✅	2s	2s	+0%
`polyvecl_uniform_gamma1`	✅	2s	3s	-33%
`polyvecl_uniform_gamma1_serial`	✅	2s	2s	+0%
`polyvecl_unpack_z`	✅	2s	3s	-33%
`polyw1_pack`	✅	2s	2s	+0%
`polyz_pack`	✅	2s	4s	-50%
`polyz_unpack_native`	✅	2s	1s	+100%
`polyz_unpack_native_x86_64`	✅	2s	3s	-33%
`shake128_absorb`	✅	2s	2s	+0%
`shake256`	✅	2s	3s	-33%
`shake256_init`	✅	2s	3s	-33%
`shake256_release`	✅	2s	5s	-60%
`shake256_squeeze`	✅	2s	2s	+0%
`shake256x4_absorb_once`	✅	2s	5s	-60%
`shake256x4_squeezeblocks`	✅	2s	4s	-50%
`sk_s1hat_get_poly`	✅	2s	3s	-33%
`sk_s2hat_get_poly`	✅	2s	2s	+0%
`sk_t0hat_get_poly`	✅	2s	3s	-33%
`unpack_pk_t1`	✅	2s	2s	+0%
`unpack_sk_s2hat`	✅	2s	3s	-33%
`fqscale`	✅	1s	1s	+0%
`keccak_f1600_x1_native_aarch64`	✅	1s	2s	-50%
`keccak_f1600_x1_native_aarch64_v84a`	✅	1s	2s	-50%
`keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid`	✅	1s	2s	-50%
`keccakf1600_permute_native`	✅	1s	3s	-67%
`mld_ct_abs_i32`	✅	1s	1s	+0%
`mld_ct_cmask_neg_i32`	✅	1s	2s	-50%
`mld_ct_get_optblocker_i64`	✅	1s	2s	-50%
`mld_ct_get_optblocker_u32`	✅	1s	2s	-50%
`mld_keccakf1600_extract_bytes`	✅	1s	1s	+0%
`mld_value_barrier_u32`	✅	1s	3s	-67%
`poly_use_hint_c`	✅	1s	4s	-75%
`polyvecl_pointwise_acc_montgomery_native`	✅	1s	2s	-50%
`shake128_init`	✅	1s	2s	-50%
`unpack_sk`	✅	1s	4s	-75%

oqs-bot · 2026-07-08T06:49:14Z

CBMC Results (ML-DSA-65)

Full Results (206 proofs)

Proof	Status	Current	Previous	Change
`TOTAL`	✅	1844s	1784s	+3.4%
`polyvecl_pointwise_acc_montgomery_c`	✅	232s	210s	+10%
`sign_verify_internal`	✅	175s	177s	-1%
`poly_pointwise_montgomery_c`	✅	128s	125s	+2%
`mld_invntt_layer`	✅	113s	109s	+4%
`polyvec_matrix_expand`	✅	111s	110s	+1%
`mld_attempt_signature_generation`	✅	65s	63s	+3%
`sign_signature_internal`	✅	57s	55s	+4%
`mld_ntt_layer`	✅	45s	41s	+10%
`fqmul`	✅	42s	40s	+5%
`polyvec_matrix_expand_serial`	✅	29s	27s	+7%
`keccakf1600x4_permute_native`	✅	21s	23s	-9%
`mld_ntt_butterfly_block`	✅	21s	24s	-12%
`polyvec_matrix_pointwise_montgomery_yvec`	✅	19s	18s	+6%
`poly_ntt_c`	✅	18s	19s	-5%
`poly_chknorm_c`	✅	17s	15s	+13%
`polyt0_unpack`	✅	17s	16s	+6%
`rej_uniform`	✅	16s	18s	-11%
`rej_uniform_c`	✅	16s	14s	+14%
`mld_check_pct`	✅	15s	14s	+7%
`polyveck_decompose`	✅	15s	12s	+25%
`compute_pack_t0_t1`	✅	13s	13s	+0%
`poly_invntt_tomont_c`	✅	12s	11s	+9%
`poly_uniform_4x`	✅	11s	13s	-15%
`poly_uniform_eta_4x`	✅	11s	14s	-21%
`polyz_unpack_c`	✅	11s	13s	-15%
`rej_uniform_native_x86_64`	✅	10s	-	new
`polyveck_invntt_tomont`	✅	9s	8s	+12%
`keccak_absorb_once_x4`	✅	8s	8s	+0%
`mld_compute_pack_z`	✅	8s	7s	+14%
`poly_add`	✅	8s	9s	-11%
`rej_eta_native`	✅	8s	3s	+167%
`polyveck_caddq`	✅	7s	6s	+17%
`polyvecl_chknorm`	✅	7s	7s	+0%
`polyvecl_ntt`	✅	7s	4s	+75%
`unpack_sk_t0hat`	✅	7s	5s	+40%
`mld_keccakf1600_permute_c`	✅	6s	6s	+0%
`pointwise_acc_native_aarch64`	✅	6s	6s	+0%
`pointwise_acc_native_x86_64`	✅	6s	8s	-25%
`poly_caddq_native`	✅	6s	2s	+200%
`poly_caddq_native_x86_64`	✅	6s	3s	+100%
`poly_decompose_c`	✅	6s	5s	+20%
`poly_uniform`	✅	6s	4s	+50%
`poly_uniform_gamma1_4x`	✅	6s	4s	+50%
`poly_use_hint_c`	✅	6s	5s	+20%
`polyeta_unpack`	✅	6s	8s	-25%
`polyveck_chknorm`	✅	6s	6s	+0%
`polyveck_ntt`	✅	6s	7s	-14%
`polyw1_pack_32`	✅	6s	4s	+50%
`sign_pk_from_sk`	✅	6s	6s	+0%
`sign_signature_extmu`	✅	6s	2s	+200%
`keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid`	✅	5s	2s	+150%
`keccak_init`	✅	5s	1s	+400%
`keccakf1600_extract_bytes (big endian)`	✅	5s	2s	+150%
`mld_sample_s1_s2_serial`	✅	5s	4s	+25%
`poly_decompose_32_native_aarch64`	✅	5s	3s	+67%
`poly_uniform_eta`	✅	5s	4s	+25%
`polyt1_unpack`	✅	5s	5s	+0%
`polyvecl_pointwise_acc_montgomery_native`	✅	5s	2s	+150%
`polyz_pack`	✅	5s	3s	+67%
`sig_unpack_hints`	✅	5s	2s	+150%
`sign_signature_pre_hash_internal`	✅	5s	3s	+67%
`sign_signature_pre_hash_shake256`	✅	5s	3s	+67%
`sign_verify`	✅	5s	3s	+67%
`sign_verify_pre_hash_internal`	✅	5s	5s	+0%
`use_hint`	✅	5s	2s	+150%
`intt_native_aarch64`	✅	4s	3s	+33%
`intt_native_x86_64`	✅	4s	3s	+33%
`keccakf1600x4_xor_bytes`	✅	4s	1s	+300%
`mld_ct_cmask_nonzero_u32`	✅	4s	4s	+0%
`mld_ct_cmask_nonzero_u8`	✅	4s	3s	+33%
`mld_ct_memcmp`	✅	4s	2s	+100%
`mld_ct_sel_int32`	✅	4s	3s	+33%
`mld_h`	✅	4s	2s	+100%
`mld_keccakf1600_extract_bytes`	✅	4s	1s	+300%
`mld_sample_s1_s2`	✅	4s	6s	-33%
`pack_sig_c`	✅	4s	5s	-20%
`pointwise_native_x86_64`	✅	4s	3s	+33%
`poly_challenge`	✅	4s	6s	-33%
`poly_chknorm_native_aarch64`	✅	4s	3s	+33%
`poly_decompose`	✅	4s	2s	+100%
`poly_sub`	✅	4s	3s	+33%
`polyt1_pack`	✅	4s	3s	+33%
`polyveck_pack_eta`	✅	4s	4s	+0%
`polyw1_pack_88`	✅	4s	2s	+100%
`power2round`	✅	4s	1s	+300%
`rej_uniform_eta_native_aarch64`	✅	4s	4s	+0%
`rej_uniform_native_aarch64`	✅	4s	3s	+33%
`shake256_absorb`	✅	4s	2s	+100%
`shake256x4_absorb_once`	✅	4s	3s	+33%
`sign_keypair_internal`	✅	4s	5s	-20%
`sys_check_capability`	✅	4s	4s	+0%
`unpack_sk_s1hat`	✅	4s	2s	+100%
`yvec_get_poly`	✅	4s	3s	+33%
`fqscale`	✅	3s	3s	+0%
`keccak_absorb`	✅	3s	3s	+0%
`keccak_f1600_x1_native_aarch64`	✅	3s	2s	+50%
`keccak_f1600_x4_native_aarch64_v84a`	✅	3s	4s	-25%
`keccak_finalize`	✅	3s	2s	+50%
`keccak_squeezeblocks_x4`	✅	3s	5s	-40%
`keccakf1600x4_xor_bytes_native`	✅	3s	3s	+0%
`mld_ct_cmask_neg_i32`	✅	3s	2s	+50%
`mld_ct_get_optblocker_i64`	✅	3s	2s	+50%
`mld_prepare_domain_separation_prefix`	✅	3s	2s	+50%
`montgomery_reduce`	✅	3s	4s	-25%
`ntt_native_aarch64`	✅	3s	2s	+50%
`nttunpack_native_x86_64`	✅	3s	3s	+0%
`pack_sk_rho_key_tr_s2`	✅	3s	2s	+50%
`poly_caddq`	✅	3s	2s	+50%
`poly_caddq_c`	✅	3s	2s	+50%
`poly_caddq_native_aarch64`	✅	3s	2s	+50%
`poly_chknorm`	✅	3s	4s	-25%
`poly_chknorm_native`	✅	3s	2s	+50%
`poly_decompose_88_native_aarch64`	✅	3s	1s	+200%
`poly_decompose_native`	✅	3s	3s	+0%
`poly_decompose_native_x86_64`	✅	3s	3s	+0%
`poly_invntt_tomont`	✅	3s	3s	+0%
`poly_ntt_native`	✅	3s	4s	-25%
`poly_permute_bitrev_to_custom_optional_native`	✅	3s	4s	-25%
`poly_pointwise_montgomery`	✅	3s	3s	+0%
`poly_power2round`	✅	3s	4s	-25%
`poly_shiftl`	✅	3s	3s	+0%
`poly_uniform_gamma1`	✅	3s	3s	+0%
`poly_use_hint_native`	✅	3s	2s	+50%
`polyeta_pack`	✅	3s	3s	+0%
`polyt0_pack`	✅	3s	3s	+0%
`polyveck_reduce`	✅	3s	4s	-25%
`polyvecl_pack_eta`	✅	3s	3s	+0%
`polyvecl_pointwise_acc_montgomery`	✅	3s	3s	+0%
`polyz_unpack_17_native_aarch64`	✅	3s	3s	+0%
`polyz_unpack_native_x86_64`	✅	3s	3s	+0%
`rej_eta_c`	✅	3s	5s	-40%
`rej_uniform_native`	✅	3s	4s	-25%
`shake128_absorb`	✅	3s	2s	+50%
`shake128_finalize`	✅	3s	1s	+200%
`shake128_init`	✅	3s	2s	+50%
`shake128_squeeze`	✅	3s	2s	+50%
`shake256`	✅	3s	2s	+50%
`shake256_finalize`	✅	3s	1s	+200%
`shake256_release`	✅	3s	2s	+50%
`sign_keypair`	✅	3s	3s	+0%
`sign_verify_pre_hash_shake256`	✅	3s	5s	-40%
`sk_s2hat_get_poly`	✅	3s	2s	+50%
`sk_t0hat_get_poly`	✅	3s	2s	+50%
`unpack_sk`	✅	3s	3s	+0%
`caddq`	✅	2s	3s	-33%
`decompose`	✅	2s	1s	+100%
`keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid`	✅	2s	2s	+0%
`keccak_squeeze`	✅	2s	4s	-50%
`keccakf1600_xor_bytes`	✅	2s	2s	+0%
`keccakf1600_xor_bytes (big endian)`	✅	2s	2s	+0%
`keccakf1600x4_extract_bytes`	✅	2s	4s	-50%
`keccakf1600x4_extract_bytes_native`	✅	2s	4s	-50%
`keccakf1600x4_permute`	✅	2s	4s	-50%
`make_hint`	✅	2s	2s	+0%
`mld_ct_abs_i32`	✅	2s	2s	+0%
`mld_ct_get_optblocker_u32`	✅	2s	3s	-33%
`mld_ct_get_optblocker_u8`	✅	2s	2s	+0%
`mld_keccakf1600x4_extract_bytes_c`	✅	2s	3s	-33%
`mld_value_barrier_u8`	✅	2s	3s	-33%
`ntt_native_x86_64`	✅	2s	2s	+0%
`pack_sig_z`	✅	2s	2s	+0%
`pointwise_native_aarch64`	✅	2s	5s	-60%
`poly_chknorm_native_x86_64`	✅	2s	3s	-33%
`poly_pointwise_montgomery_native`	✅	2s	3s	-33%
`poly_reduce`	✅	2s	3s	-33%
`poly_use_hint`	✅	2s	3s	-33%
`poly_use_hint_native_aarch64`	✅	2s	3s	-33%
`poly_use_hint_native_x86_64`	✅	2s	-	new
`polyvec_matrix_pointwise_montgomery_row`	✅	2s	1s	+100%
`polyveck_pack_w1`	✅	2s	3s	-33%
`polyveck_unpack_eta`	✅	2s	6s	-67%
`polyvecl_uniform_gamma1`	✅	2s	2s	+0%
`polyvecl_uniform_gamma1_serial`	✅	2s	3s	-33%
`polyvecl_unpack_eta`	✅	2s	3s	-33%
`polyvecl_unpack_z`	✅	2s	3s	-33%
`polyz_unpack`	✅	2s	3s	-33%
`polyz_unpack_19_native_aarch64`	✅	2s	3s	-33%
`polyz_unpack_native`	✅	2s	4s	-50%
`reduce32`	✅	2s	3s	-33%
`shake128_release`	✅	2s	3s	-33%
`shake256_squeeze`	✅	2s	3s	-33%
`sign_signature`	✅	2s	6s	-67%
`sign_verify_extmu`	✅	2s	3s	-33%
`sk_s1hat_get_poly`	✅	2s	6s	-67%
`unpack_pk_t1`	✅	2s	5s	-60%
`unpack_sk_s2hat`	✅	2s	4s	-50%
`yvec_init`	✅	2s	3s	-33%
`keccak_f1600_x1_native_aarch64_v84a`	✅	1s	3s	-67%
`keccak_f1600_x4_native_avx2`	✅	1s	2s	-50%
`keccakf1600_permute`	✅	1s	2s	-50%
`keccakf1600_permute_native`	✅	1s	3s	-67%
`mld_keccakf1600x4_xor_bytes_c`	✅	1s	2s	-50%
`mld_polymat_expand_entry`	✅	1s	4s	-75%
`mld_value_barrier_i64`	✅	1s	2s	-50%
`mld_value_barrier_u32`	✅	1s	3s	-67%
`pack_sig_h`	✅	1s	5s	-80%
`pack_sk_s1`	✅	1s	5s	-80%
`poly_invntt_tomont_native`	✅	1s	2s	-50%
`poly_ntt`	✅	1s	2s	-50%
`poly_permute_bitrev_to_custom_optional`	✅	1s	2s	-50%
`polyw1_pack`	✅	1s	4s	-75%
`rej_eta`	✅	1s	2s	-50%
`shake128x4_absorb_once`	✅	1s	3s	-67%
`shake128x4_squeezeblocks`	✅	1s	3s	-67%
`shake256_init`	✅	1s	2s	-50%
`shake256x4_squeezeblocks`	✅	1s	2s	-50%

oqs-bot · 2026-07-08T06:50:49Z

CBMC Results (ML-DSA-87)

Full Results (206 proofs)

Proof	Status	Current	Previous	Change
`TOTAL`	✅	2078s	2151s	-3.4%
`polyvecl_pointwise_acc_montgomery_c`	✅	350s	353s	-1%
`polyvec_matrix_expand`	✅	307s	324s	-5%
`poly_pointwise_montgomery_c`	✅	134s	144s	-7%
`mld_invntt_layer`	✅	112s	115s	-3%
`sign_verify_internal`	✅	99s	97s	+2%
`mld_attempt_signature_generation`	✅	56s	55s	+2%
`mld_ntt_layer`	✅	42s	45s	-7%
`fqmul`	✅	41s	43s	-5%
`sign_signature_internal`	✅	40s	42s	-5%
`polyvec_matrix_expand_serial`	✅	36s	38s	-5%
`keccakf1600x4_permute_native`	✅	22s	23s	-4%
`mld_ntt_butterfly_block`	✅	22s	24s	-8%
`compute_pack_t0_t1`	✅	18s	19s	-5%
`poly_ntt_c`	✅	18s	21s	-14%
`polyvec_matrix_pointwise_montgomery_yvec`	✅	17s	18s	-6%
`polyeta_unpack`	✅	16s	17s	-6%
`rej_uniform_c`	✅	16s	19s	-16%
`poly_chknorm_c`	✅	15s	15s	+0%
`rej_uniform`	✅	15s	15s	+0%
`mld_check_pct`	✅	14s	16s	-12%
`poly_uniform_4x`	✅	14s	13s	+8%
`polyt0_unpack`	✅	14s	14s	+0%
`poly_uniform_eta_4x`	✅	13s	11s	+18%
`poly_invntt_tomont_c`	✅	12s	12s	+0%
`polyveck_decompose`	✅	11s	13s	-15%
`polyveck_ntt`	✅	9s	11s	-18%
`polyvecl_ntt`	✅	9s	7s	+29%
`keccak_absorb_once_x4`	✅	8s	9s	-11%
`mld_keccakf1600_permute_c`	✅	8s	7s	+14%
`pointwise_acc_native_aarch64`	✅	8s	6s	+33%
`pointwise_acc_native_x86_64`	✅	8s	6s	+33%
`rej_uniform_native_x86_64`	✅	8s	-	new
`mld_compute_pack_z`	✅	7s	8s	-12%
`polyveck_caddq`	✅	7s	8s	-12%
`polyveck_invntt_tomont`	✅	7s	9s	-22%
`sign_keypair_internal`	✅	7s	6s	+17%
`unpack_sk_t0hat`	✅	7s	7s	+0%
`mld_sample_s1_s2`	✅	6s	6s	+0%
`poly_decompose_c`	✅	6s	5s	+20%
`polyt1_unpack`	✅	6s	4s	+50%
`sign_keypair`	✅	6s	4s	+50%
`sign_pk_from_sk`	✅	6s	6s	+0%
`sign_verify`	✅	6s	5s	+20%
`intt_native_aarch64`	✅	5s	3s	+67%
`keccak_squeezeblocks_x4`	✅	5s	4s	+25%
`mld_h`	✅	5s	3s	+67%
`mld_sample_s1_s2_serial`	✅	5s	8s	-38%
`ntt_native_x86_64`	✅	5s	2s	+150%
`pointwise_native_x86_64`	✅	5s	2s	+150%
`poly_add`	✅	5s	6s	-17%
`poly_chknorm_native_x86_64`	✅	5s	2s	+150%
`poly_shiftl`	✅	5s	4s	+25%
`poly_uniform`	✅	5s	4s	+25%
`poly_use_hint_c`	✅	5s	2s	+150%
`poly_use_hint_native_aarch64`	✅	5s	2s	+150%
`polyveck_chknorm`	✅	5s	3s	+67%
`polyvecl_chknorm`	✅	5s	7s	-29%
`polyvecl_uniform_gamma1_serial`	✅	5s	4s	+25%
`polyvecl_unpack_z`	✅	5s	4s	+25%
`polyw1_pack_88`	✅	5s	3s	+67%
`rej_uniform_eta_native_aarch64`	✅	5s	5s	+0%
`shake128_finalize`	✅	5s	2s	+150%
`sign_signature_pre_hash_internal`	✅	5s	5s	+0%
`intt_native_x86_64`	✅	4s	3s	+33%
`keccak_f1600_x4_native_avx2`	✅	4s	2s	+100%
`keccak_init`	✅	4s	3s	+33%
`keccakf1600_permute`	✅	4s	3s	+33%
`mld_ct_get_optblocker_u32`	✅	4s	2s	+100%
`mld_ct_memcmp`	✅	4s	3s	+33%
`mld_polymat_expand_entry`	✅	4s	3s	+33%
`montgomery_reduce`	✅	4s	3s	+33%
`pack_sig_z`	✅	4s	5s	-20%
`pack_sk_s1`	✅	4s	1s	+300%
`poly_challenge`	✅	4s	5s	-20%
`poly_decompose`	✅	4s	3s	+33%
`poly_decompose_32_native_aarch64`	✅	4s	5s	-20%
`poly_decompose_88_native_aarch64`	✅	4s	2s	+100%
`poly_invntt_tomont_native`	✅	4s	5s	-20%
`poly_permute_bitrev_to_custom_optional_native`	✅	4s	5s	-20%
`polyt0_pack`	✅	4s	4s	+0%
`polyvec_matrix_pointwise_montgomery_row`	✅	4s	3s	+33%
`polyveck_pack_eta`	✅	4s	6s	-33%
`polyvecl_unpack_eta`	✅	4s	5s	-20%
`polyw1_pack_32`	✅	4s	4s	+0%
`polyz_unpack_native`	✅	4s	4s	+0%
`rej_eta`	✅	4s	4s	+0%
`rej_eta_native`	✅	4s	6s	-33%
`rej_uniform_native`	✅	4s	8s	-50%
`shake128_absorb`	✅	4s	4s	+0%
`shake128_squeeze`	✅	4s	2s	+100%
`sign_signature_extmu`	✅	4s	4s	+0%
`sign_verify_pre_hash_internal`	✅	4s	3s	+33%
`unpack_pk_t1`	✅	4s	1s	+300%
`unpack_sk_s2hat`	✅	4s	3s	+33%
`yvec_init`	✅	4s	4s	+0%
`decompose`	✅	3s	3s	+0%
`keccak_f1600_x1_native_aarch64`	✅	3s	1s	+200%
`keccak_finalize`	✅	3s	1s	+200%
`keccakf1600_permute_native`	✅	3s	4s	-25%
`keccakf1600_xor_bytes`	✅	3s	3s	+0%
`keccakf1600x4_extract_bytes`	✅	3s	2s	+50%
`keccakf1600x4_xor_bytes`	✅	3s	3s	+0%
`mld_ct_cmask_nonzero_u8`	✅	3s	3s	+0%
`mld_ct_get_optblocker_i64`	✅	3s	3s	+0%
`mld_ct_get_optblocker_u8`	✅	3s	3s	+0%
`mld_ct_sel_int32`	✅	3s	3s	+0%
`mld_keccakf1600x4_extract_bytes_c`	✅	3s	2s	+50%
`mld_keccakf1600x4_xor_bytes_c`	✅	3s	4s	-25%
`mld_prepare_domain_separation_prefix`	✅	3s	4s	-25%
`mld_value_barrier_u32`	✅	3s	2s	+50%
`mld_value_barrier_u8`	✅	3s	3s	+0%
`ntt_native_aarch64`	✅	3s	6s	-50%
`nttunpack_native_x86_64`	✅	3s	3s	+0%
`pack_sig_h`	✅	3s	4s	-25%
`pack_sk_rho_key_tr_s2`	✅	3s	3s	+0%
`pointwise_native_aarch64`	✅	3s	5s	-40%
`poly_caddq`	✅	3s	2s	+50%
`poly_caddq_c`	✅	3s	3s	+0%
`poly_caddq_native`	✅	3s	4s	-25%
`poly_caddq_native_x86_64`	✅	3s	2s	+50%
`poly_chknorm_native`	✅	3s	4s	-25%
`poly_decompose_native`	✅	3s	2s	+50%
`poly_decompose_native_x86_64`	✅	3s	2s	+50%
`poly_pointwise_montgomery_native`	✅	3s	5s	-40%
`poly_uniform_eta`	✅	3s	4s	-25%
`poly_uniform_gamma1_4x`	✅	3s	3s	+0%
`poly_use_hint`	✅	3s	1s	+200%
`poly_use_hint_native`	✅	3s	3s	+0%
`poly_use_hint_native_x86_64`	✅	3s	-	new
`polyveck_pack_w1`	✅	3s	3s	+0%
`polyveck_reduce`	✅	3s	3s	+0%
`polyveck_unpack_eta`	✅	3s	4s	-25%
`polyvecl_uniform_gamma1`	✅	3s	2s	+50%
`polyw1_pack`	✅	3s	4s	-25%
`polyz_pack`	✅	3s	5s	-40%
`polyz_unpack_c`	✅	3s	3s	+0%
`power2round`	✅	3s	4s	-25%
`reduce32`	✅	3s	3s	+0%
`rej_uniform_native_aarch64`	✅	3s	2s	+50%
`shake128_init`	✅	3s	1s	+200%
`shake128x4_squeezeblocks`	✅	3s	3s	+0%
`shake256`	✅	3s	2s	+50%
`shake256_init`	✅	3s	2s	+50%
`shake256_release`	✅	3s	3s	+0%
`shake256x4_absorb_once`	✅	3s	2s	+50%
`shake256x4_squeezeblocks`	✅	3s	1s	+200%
`sign_signature_pre_hash_shake256`	✅	3s	6s	-50%
`sign_verify_extmu`	✅	3s	3s	+0%
`sign_verify_pre_hash_shake256`	✅	3s	3s	+0%
`sk_s1hat_get_poly`	✅	3s	3s	+0%
`unpack_sk`	✅	3s	5s	-40%
`unpack_sk_s1hat`	✅	3s	2s	+50%
`use_hint`	✅	3s	3s	+0%
`fqscale`	✅	2s	3s	-33%
`keccak_absorb`	✅	2s	3s	-33%
`keccak_f1600_x4_native_aarch64_v84a`	✅	2s	4s	-50%
`keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid`	✅	2s	3s	-33%
`keccakf1600_extract_bytes (big endian)`	✅	2s	3s	-33%
`keccakf1600x4_extract_bytes_native`	✅	2s	2s	+0%
`keccakf1600x4_permute`	✅	2s	3s	-33%
`keccakf1600x4_xor_bytes_native`	✅	2s	3s	-33%
`make_hint`	✅	2s	3s	-33%
`mld_ct_abs_i32`	✅	2s	3s	-33%
`mld_ct_cmask_neg_i32`	✅	2s	4s	-50%
`mld_ct_cmask_nonzero_u32`	✅	2s	2s	+0%
`mld_keccakf1600_extract_bytes`	✅	2s	4s	-50%
`pack_sig_c`	✅	2s	4s	-50%
`poly_caddq_native_aarch64`	✅	2s	3s	-33%
`poly_chknorm`	✅	2s	3s	-33%
`poly_chknorm_native_aarch64`	✅	2s	4s	-50%
`poly_ntt`	✅	2s	3s	-33%
`poly_permute_bitrev_to_custom_optional`	✅	2s	3s	-33%
`poly_pointwise_montgomery`	✅	2s	4s	-50%
`poly_reduce`	✅	2s	2s	+0%
`poly_sub`	✅	2s	3s	-33%
`poly_uniform_gamma1`	✅	2s	4s	-50%
`polyeta_pack`	✅	2s	4s	-50%
`polyt1_pack`	✅	2s	3s	-33%
`polyvecl_pack_eta`	✅	2s	3s	-33%
`polyvecl_pointwise_acc_montgomery`	✅	2s	5s	-60%
`polyvecl_pointwise_acc_montgomery_native`	✅	2s	3s	-33%
`polyz_unpack`	✅	2s	2s	+0%
`polyz_unpack_17_native_aarch64`	✅	2s	3s	-33%
`polyz_unpack_19_native_aarch64`	✅	2s	4s	-50%
`polyz_unpack_native_x86_64`	✅	2s	3s	-33%
`rej_eta_c`	✅	2s	5s	-60%
`shake256_finalize`	✅	2s	2s	+0%
`shake256_squeeze`	✅	2s	2s	+0%
`sig_unpack_hints`	✅	2s	3s	-33%
`sign_signature`	✅	2s	5s	-60%
`sk_s2hat_get_poly`	✅	2s	3s	-33%
`sk_t0hat_get_poly`	✅	2s	4s	-50%
`yvec_get_poly`	✅	2s	4s	-50%
`caddq`	✅	1s	4s	-75%
`keccak_f1600_x1_native_aarch64_v84a`	✅	1s	1s	+0%
`keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid`	✅	1s	4s	-75%
`keccak_squeeze`	✅	1s	2s	-50%
`keccakf1600_xor_bytes (big endian)`	✅	1s	2s	-50%
`mld_value_barrier_i64`	✅	1s	1s	+0%
`poly_invntt_tomont`	✅	1s	1s	+0%
`poly_ntt_native`	✅	1s	3s	-67%
`poly_power2round`	✅	1s	3s	-67%
`shake128_release`	✅	1s	4s	-75%
`shake128x4_absorb_once`	✅	1s	5s	-80%
`shake256_absorb`	✅	1s	2s	-50%
`sys_check_capability`	✅	1s	3s	-67%

github-actions

⚠️ Performance Alert ⚠️

Possible performance regression was detected for benchmark 'Arm Cortex-A55 (Snapdragon 888) benchmarks (opt)'.
Benchmark result of this commit is worse than the previous benchmark result exceeding threshold 1.03.

Benchmark suite	Current: `886a852`	Previous: `31c9b9e`	Ratio
`ML-DSA-87 sign`	`1860266` cycles	`1775733` cycles	`1.05`

This comment was automatically generated by workflow using github-action-benchmark.

- Port of pq-code-package/mlkem-native#1547 Signed-off-by: Matthias J. Kannwischer <matthias@zerorisc.com>

- Port of pq-code-package/mlkem-native#1791 Signed-off-by: Matthias J. Kannwischer <matthias@zerorisc.com>

Zephyr's k_cycle_get_32() can wrap during long NUCLEO benchmark windows, producing huge unsigned deltas in the benchmark output. Use k_cycle_get_64() for Zephyr targets. Also make ML-DSA benchmark percentile sorting and formatting robust for large uint64_t cycle values. Signed-off-by: Brendan Moran <brendan.moran@arm.com>

Run the NUCLEO-N657X0-Q Zephyr test image as XIP from ITCM and place runtime data/stacks in DTCM after the runner expands FLEXMEM to 256 KiB ITCM and 256 KiB DTCM. Force STM32N6 SystemInit() to use the ITCM vector table address for VTOR. Without this, its fallback derives VTOR from &g_pfnVectors, which moves into DTCM with Zephyr data and points VTOR at RAM data instead of the vector table. Add an early reset hook that scrubs the expanded DTCM window before Zephyr stack, BSS, and MPU setup touch it. Tested: - nix develop .#zephyr --command make run_func EXTRA_MAKEFILE=test/zephyr/platform.mk ZEPHYR_TARGET=mps3-an547 CYCLES=NO -j1 - nix develop .#zephyr --command make run_bench_components EXTRA_MAKEFILE=test/zephyr/platform.mk ZEPHYR_TARGET=nucleo-n657x0-q CYCLES=NO -j1 Signed-off-by: Brendan Moran <brendan.moran@arm.com>

oqs-bot

⚠️ Performance Alert ⚠️

Possible performance regression was detected for benchmark 'AMD EPYC 4th gen (c7a)'.
Benchmark result of this commit is worse than the previous benchmark result exceeding threshold 1.03.

Benchmark suite	Current: `cd26685`	Previous: `4d1cd02`	Ratio
`ML-DSA-44 keypair`	`48884` cycles	`46891` cycles	`1.04`

This comment was automatically generated by workflow using github-action-benchmark.

Signed-off-by: Brendan Moran <brendan.moran@arm.com>

hanno-becker

This appears to be a faithful port

mkannwischer added the benchmark label Jul 8, 2026

github-actions Bot reviewed Jul 8, 2026

View reviewed changes

oqs-bot reviewed Jul 8, 2026

View reviewed changes

github-actions Bot reviewed Jul 8, 2026

View reviewed changes

oqs-bot reviewed Jul 8, 2026

View reviewed changes

github-actions Bot reviewed Jul 8, 2026

View reviewed changes

bremoran force-pushed the port-nucleo branch from 432cc41 to cf52cfb Compare July 8, 2026 17:40

mkannwischer added benchmark and removed benchmark labels Jul 9, 2026

github-actions Bot reviewed Jul 9, 2026

View reviewed changes

bremoran force-pushed the port-nucleo branch from 6edc2a4 to 886a852 Compare July 10, 2026 08:10

mkannwischer and others added 4 commits July 10, 2026 16:36

Add NUCLEO-N657X0-Q Zephyr hardware platform

001b584

- Port of pq-code-package/mlkem-native#1547 Signed-off-by: Matthias J. Kannwischer <matthias@zerorisc.com>

zephyr: keep project CFLAGS off Zephyr internals

439cbef

- Port of pq-code-package/mlkem-native#1791 Signed-off-by: Matthias J. Kannwischer <matthias@zerorisc.com>

bremoran force-pushed the port-nucleo branch from 886a852 to cd26685 Compare July 10, 2026 16:01

bremoran added benchmark and removed benchmark labels Jul 13, 2026

oqs-bot reviewed Jul 13, 2026

View reviewed changes

bremoran marked this pull request as ready for review July 13, 2026 10:11

bremoran requested a review from a team as a code owner July 13, 2026 10:11

bremoran marked this pull request as draft July 13, 2026 10:27

bench: document uint64_t comparator pattern

0c48ca9

Signed-off-by: Brendan Moran <brendan.moran@arm.com>

mkannwischer marked this pull request as ready for review July 14, 2026 04:02

hanno-becker approved these changes Jul 14, 2026

View reviewed changes

hanno-becker added this pull request to the merge queue Jul 14, 2026

Merged via the queue into main with commit 37016f1 Jul 14, 2026
423 checks passed

hanno-becker deleted the port-nucleo branch July 14, 2026 05:40

This was referenced Jul 14, 2026

Merge-queue: HOL-Light proofs do not gate merges #1281

Closed

zephyr: fix NUCLEO benchmark timing and TCM layout pq-code-package/mlkem-native#1796

Merged

bremoran mentioned this pull request Jul 30, 2026

Tracking: record completed NUCLEO-N657X0-Q platform support #1321

Closed

4 tasks done

Conversation

mkannwischer commented Jul 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Mac Mini (M1, 2020) benchmarks (opt)

Uh oh!

github-actions Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Mac Mini (M1, 2020) benchmarks (no-opt)

Uh oh!

github-actions Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Arm Cortex-A76 (Raspberry Pi 5) benchmarks (opt)

Uh oh!

oqs-bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Intel Xeon 4th gen (c7i)

Uh oh!

oqs-bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Intel Xeon 4th gen (c7i) (no-opt)

Uh oh!

oqs-bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

AMD EPYC 3rd gen (c6a)

Uh oh!

oqs-bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Graviton5

Uh oh!

oqs-bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Intel Xeon 3rd gen (c6i)

Uh oh!

oqs-bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

AMD EPYC 4th gen (c7a)

Uh oh!

github-actions Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Arm Cortex-A76 (Raspberry Pi 5) benchmarks (no-opt)

Uh oh!

oqs-bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

AMD EPYC 3rd gen (c6a) (no-opt)

Uh oh!

oqs-bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Graviton5 (no-opt)

Uh oh!

oqs-bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Intel Xeon 3rd gen (c6i) (no-opt)

Uh oh!

oqs-bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Graviton4

Uh oh!

oqs-bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

AMD EPYC 4th gen (c7a) (no-opt)

Uh oh!

oqs-bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

mkannwischer commented Jul 8, 2026 •

edited

Loading

github-actions Bot left a comment •

edited

Loading

github-actions Bot left a comment •

edited

Loading

github-actions Bot left a comment •

edited

Loading

oqs-bot left a comment •

edited

Loading

oqs-bot left a comment •

edited

Loading

oqs-bot left a comment •

edited

Loading

oqs-bot left a comment •

edited

Loading

oqs-bot left a comment •

edited

Loading

oqs-bot left a comment •

edited

Loading

github-actions Bot left a comment •

edited

Loading

oqs-bot left a comment •

edited

Loading

oqs-bot left a comment •

edited

Loading

oqs-bot left a comment •

edited

Loading

oqs-bot left a comment •

edited

Loading

oqs-bot left a comment •

edited

Loading

oqs-bot left a comment •

edited

Loading

oqs-bot left a comment •

edited

Loading

oqs-bot left a comment •

edited

Loading

oqs-bot left a comment •

edited

Loading

oqs-bot left a comment •

edited

Loading

github-actions Bot left a comment •

edited

Loading

github-actions Bot left a comment •

edited

Loading

github-actions Bot left a comment •

edited

Loading

github-actions Bot left a comment •

edited

Loading

github-actions Bot left a comment •

edited

Loading

github-actions Bot left a comment •

edited

Loading

oqs-bot commented Jul 8, 2026 •

edited

Loading

oqs-bot commented Jul 8, 2026 •

edited

Loading