[CFRG] Re: [pqc-forum] PQ KEM comparison tool

[Aron <[e-mail]>]

Hi Thom,very useful site/diagram! Thanks for it!One question/suggestion: since the measured running times are also shown/listed in the table for "Keygen", "Encaps", "Decaps", "Sign", "Verify", is it possible to use other crypto libraries as well? This would make possible to compare the currently used OpenSSL with Java JDK, BouncyCastle, .NET core. All of these could be used on the same OS. Also, for "Sign", is it possible to show avg. number of iterations to get one ML-DSA signature?BR, Aron-------- Eredeti levél --------Feladó: John Mattsson <john.mattsson=[e-mail]>Dátum: 2026 július 2 07:26:11Tárgy: [CFRG] Re: [pqc-forum] PQ KEM comparison toolCímzett: Thom Wiggers <[e-mail]> IRTF CFRG <[e-mail]> pqc-forum <[e-mail]>Thanks Thom, Great work! >I am open to suggestions for more things to include. For signatures I think I >would like to keep the focus on the NIST on-ramp for now, but for KEMs I think >that the discussion in CFRG benefits from a more open approach.For the KEMs, I think it would be nice with some isogeny-based KEM for comparison. It should fit nicely between ECDH-KEM and BAT.Cheers,John Preuß MattssonFrom: [e-mail] <[e-mail]> on behalf of Thom Wiggers <[e-mail]> Date: Wednesday, 1 July 2026 at 16:03 To: IRTF CFRG <[e-mail]>; pqc-forum <[e-mail]> Subject: [pqc-forum] PQ KEM comparison toolHi all,On suggestion of Frederik Vercauteren, I’ve expanded the scope of my “signatures zoo” website [1] by adding a page that compares KEMs [2].While I have your attention, please also see the “advanced view” link below the graphs that will allow you to plot whatever you want on the X and Y axes!I am open to suggestions for more things to include. For signatures I think I would like to keep the focus on the NIST on-ramp for now, but for KEMs I think that the discussion in CFRG benefits from
 a more open approach.I hope this is helpful,Thom[1]  https://pqshield.github.io/nist-sigs-zoo/[2]  https://pqshield.github.io/nist-sigs-zoo/kems/N.B. Unfortunately, the NEV KEM (which is also very compact) did not appear to have an implementation available, so I have not added it. If anyone knows where I could find it, let me know. -- You received this message because you are subscribed to the Google Groups "pqc-forum" group. To unsubscribe from this group and stop receiving emails from it, send an email to  [e-mail]. To view this discussion visit  https://groups.google.com/a/list.nist.gov/d/msgid/pqc-forum/D527D3F9-A057-49DD-A256-9B4D6A8A2124%40thomwiggers.nl.