Scheme | Assumption | Security | pk+sig size |
---|---|---|---|
GLP | DCK | 80-bits | 21.5 kb |
BLISS-I | R-SIS | 128-bits | 12.6 kb |
BLISS-II | R-SIS | 128-bits | 12 kb |
BLISS-III | R-SIS | 160-bits | 13 kb |
BLISS-IV | R-SIS | 192-bits | 13.5 kb |
ring-TESLA-I | R-LWE | 80-bits | 36.5 kb |
ring-TESLA-II | R-LWE | 128-bits | 36 kb |
Dilithium | MLWE, MSIS | 128-bits | 15 kb |