Skip to content

liboqs: Normalize return codes to OQS_STATUS#1298

Merged
hanno-becker merged 1 commit into
mainfrom
liboqs-normalize-return-codes
Jul 20, 2026
Merged

liboqs: Normalize return codes to OQS_STATUS#1298
hanno-becker merged 1 commit into
mainfrom
liboqs-normalize-return-codes

Conversation

@mkannwischer

@mkannwischer mkannwischer commented Jul 17, 2026

Copy link
Copy Markdown
Contributor

Collapse any nonzero result to OQS_ERROR in the sig_glue.c shims, since OQS_STATUS is a closed enum and mldsa-native returns a wider error set. Add a keypair shim so keypair is normalized too rather than wired directly to the mldsa-native symbol.

@mkannwischer
liboqs: Normalize return codes to OQS_STATUS
a4f1075 
Collapse any nonzero result to OQS_ERROR in the sig_glue.c shims, since
OQS_STATUS is a closed enum and mldsa-native returns a wider error set.
Add a keypair shim so keypair is normalized too rather than wired
directly to the mldsa-native symbol.

 - Resolves #1296

Signed-off-by: Matthias J. Kannwischer <matthias@zerorisc.com>
@oqs-bot

oqs-bot commented Jul 17, 2026

Copy link
Copy Markdown
Contributor

CBMC Results (ML-DSA-44)

Full Results (210 proofs)
Proof Status Current Previous Change
**TOTAL** ✅ 1443s 1514s -4.7%
polyvecl_pointwise_acc_montgomery_c ✅ 132s 131s +1%
poly_pointwise_montgomery_c ✅ 114s 114s +0%
mld_invntt_layer ✅ 104s 107s -3%
mld_attempt_signature_generation ✅ 57s 58s -2%
compute_pack_t0_t1 ✅ 48s 50s -4%
mld_ntt_layer ✅ 43s 42s +2%
fqmul ✅ 38s 39s -3%
sign_verify_internal ✅ 36s 114s -68%
polyvec_matrix_expand ✅ 29s 28s +4%
sign_signature_internal ✅ 27s 26s +4%
mld_ntt_butterfly_block ✅ 22s 23s -4%
keccakf1600x4_permute_native ✅ 21s 22s -5%
poly_ntt_c ✅ 16s 19s -16%
polyeta_unpack ✅ 16s 14s +14%
poly_chknorm_c ✅ 15s 17s -12%
poly_uniform_4x ✅ 15s 14s +7%
polyt0_unpack ✅ 14s 15s -7%
polyvec_matrix_pointwise_montgomery_yvec ✅ 14s 15s -7%
rej_uniform ✅ 14s 18s -22%
rej_uniform_c ✅ 14s 15s -7%
polyz_unpack_c ✅ 11s 11s +0%
mld_check_pct ✅ 10s 14s -29%
poly_invntt_tomont_c ✅ 10s 11s -9%
poly_uniform_eta_4x ✅ 10s 11s -9%
polyvecl_chknorm ✅ 10s 10s +0%
keccak_absorb_once_x4 ✅ 9s 9s +0%
polyvec_matrix_expand_serial ✅ 8s 8s +0%
mld_keccakf1600_permute_c ✅ 7s 8s -12%
polyveck_decompose ✅ 7s 4s +75%
rej_uniform_native_x86_64 ✅ 7s - new
sign_verify_extmu ✅ 7s 3s +133%
mld_value_barrier_u32 ✅ 6s 2s +200%
pointwise_acc_native_x86_64 ✅ 6s 7s -14%
polyveck_chknorm ✅ 6s 5s +20%
polyveck_invntt_tomont ✅ 6s 5s +20%
polyz_unpack ✅ 6s 3s +100%
sign_pk_from_sk ✅ 6s 5s +20%
decompose ✅ 5s 2s +150%
mld_compute_pack_z ✅ 5s 7s -29%
mld_sample_s1_s2_serial ✅ 5s 3s +67%
mld_value_barrier_u8 ✅ 5s 3s +67%
pack_sig_h ✅ 5s 3s +67%
pointwise_acc_native_aarch64 ✅ 5s 4s +25%
poly_add ✅ 5s 7s -29%
poly_chknorm_native ✅ 5s 4s +25%
poly_ntt_native ✅ 5s 5s +0%
poly_shiftl ✅ 5s 3s +67%
poly_uniform ✅ 5s 6s -17%
poly_uniform_eta ✅ 5s 5s +0%
poly_use_hint_c ✅ 5s 3s +67%
polyt1_pack ✅ 5s 4s +25%
polyt1_unpack ✅ 5s 5s +0%
polyveck_ntt ✅ 5s 5s +0%
polyvecl_ntt ✅ 5s 2s +150%
polyvecl_pack_eta ✅ 5s 3s +67%
rej_uniform_eta_native_aarch64 ✅ 5s 2s +150%
rej_uniform_native ✅ 5s 4s +25%
shake128_finalize ✅ 5s 2s +150%
sign_verify_pre_hash_internal ✅ 5s 3s +67%
sys_check_capability ✅ 5s 4s +25%
fqscale ✅ 4s 3s +33%
keccak_absorb ✅ 4s 5s -20%
keccak_squeeze ✅ 4s 1s +300%
keccak_squeezeblocks_x4 ✅ 4s 4s +0%
keccakf1600_permute ✅ 4s 2s +100%
keccakf1600_permute_native ✅ 4s 3s +33%
mld_ct_cmask_neg_i32 ✅ 4s 3s +33%
mld_polymat_expand_entry ✅ 4s 3s +33%
mld_sample_s1_s2 ✅ 4s 4s +0%
mld_sign_attempt ✅ 4s - new
ntt_native_aarch64 ✅ 4s 3s +33%
poly_caddq_native ✅ 4s 5s -20%
poly_caddq_native_aarch64 ✅ 4s 4s +0%
poly_caddq_native_x86_64 ✅ 4s 4s +0%
poly_decompose_88_native_aarch64 ✅ 4s 4s +0%
poly_decompose_c ✅ 4s 4s +0%
poly_permute_bitrev_to_custom_optional ✅ 4s 2s +100%
poly_pointwise_montgomery_native ✅ 4s 2s +100%
poly_uniform_gamma1_4x ✅ 4s 5s -20%
polyeta_pack ✅ 4s 3s +33%
polyveck_pack_eta ✅ 4s 2s +100%
polyvecl_unpack_eta ✅ 4s 2s +100%
polyw1_pack ✅ 4s 3s +33%
polyz_unpack_19_native_aarch64 ✅ 4s 5s -20%
rej_uniform_native_aarch64 ✅ 4s 5s -20%
shake256_init ✅ 4s 3s +33%
shake256_squeeze ✅ 4s 2s +100%
shake256x4_absorb_once ✅ 4s 3s +33%
sign_keypair ✅ 4s 4s +0%
sign_signature ✅ 4s 3s +33%
sign_signature_pre_hash_internal ✅ 4s 6s -33%
sign_signature_pre_hash_shake256 ✅ 4s 3s +33%
sign_verify_pre_hash_shake256 ✅ 4s 5s -20%
unpack_sk_s2hat ✅ 4s 4s +0%
intt_native_aarch64 ✅ 3s 9s -67%
intt_native_x86_64 ✅ 3s 4s -25%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid ✅ 3s 3s +0%
keccakf1600x4_extract_bytes_native ✅ 3s 3s +0%
keccakf1600x4_permute ✅ 3s 4s -25%
mld_ct_cmask_nonzero_u32 ✅ 3s 2s +50%
mld_ct_cmask_nonzero_u8 ✅ 3s 2s +50%
mld_ct_memcmp ✅ 3s 3s +0%
mld_h ✅ 3s 4s -25%
mld_keccakf1600x4_xor_bytes_c ✅ 3s 2s +50%
mld_sign_resume ✅ 3s - new
ntt_native_x86_64 ✅ 3s 3s +0%
pointwise_native_x86_64 ✅ 3s 4s -25%
poly_caddq ✅ 3s 2s +50%
poly_caddq_c ✅ 3s 2s +50%
poly_challenge ✅ 3s 3s +0%
poly_chknorm_native_aarch64 ✅ 3s 4s -25%
poly_chknorm_native_x86_64 ✅ 3s 2s +50%
poly_decompose ✅ 3s 3s +0%
poly_decompose_native ✅ 3s 3s +0%
poly_invntt_tomont ✅ 3s 4s -25%
poly_invntt_tomont_native ✅ 3s 4s -25%
poly_permute_bitrev_to_custom_optional_native ✅ 3s 4s -25%
poly_pointwise_montgomery ✅ 3s 3s +0%
poly_reduce ✅ 3s 3s +0%
poly_uniform_gamma1 ✅ 3s 4s -25%
poly_use_hint ✅ 3s 4s -25%
poly_use_hint_native ✅ 3s 4s -25%
poly_use_hint_native_aarch64 ✅ 3s 2s +50%
poly_use_hint_native_x86_64 ✅ 3s - new
polyt0_pack ✅ 3s 2s +50%
polyvec_matrix_pointwise_montgomery_row ✅ 3s 2s +50%
polyveck_caddq ✅ 3s 3s +0%
polyveck_reduce ✅ 3s 5s -40%
polyveck_unpack_eta ✅ 3s 2s +50%
polyvecl_uniform_gamma1 ✅ 3s 3s +0%
polyvecl_uniform_gamma1_serial ✅ 3s 2s +50%
polyvecl_unpack_z ✅ 3s 2s +50%
polyw1_pack_32 ✅ 3s 2s +50%
polyz_pack ✅ 3s 2s +50%
polyz_unpack_17_native_aarch64 ✅ 3s 5s -40%
reduce32 ✅ 3s 2s +50%
rej_eta_native ✅ 3s 6s -50%
rej_uniform_eta_native_x86_64 ✅ 3s - new
shake128_absorb ✅ 3s 2s +50%
shake128_release ✅ 3s 1s +200%
shake256x4_squeezeblocks ✅ 3s 4s -25%
sign_keypair_internal ✅ 3s 4s -25%
sign_signature_extmu ✅ 3s 4s -25%
sk_s1hat_get_poly ✅ 3s 3s +0%
unpack_sk ✅ 3s 3s +0%
unpack_sk_t0hat ✅ 3s 3s +0%
caddq ✅ 2s 2s +0%
keccak_f1600_x1_native_aarch64 ✅ 2s 2s +0%
keccak_f1600_x1_native_aarch64_v84a ✅ 2s 3s -33%
keccak_finalize ✅ 2s 3s -33%
keccak_init ✅ 2s 3s -33%
keccakf1600_xor_bytes ✅ 2s 1s +100%
keccakf1600_xor_bytes (big endian) ✅ 2s 4s -50%
keccakf1600x4_xor_bytes ✅ 2s 2s +0%
keccakf1600x4_xor_bytes_native ✅ 2s 3s -33%
make_hint ✅ 2s 3s -33%
mld_ct_get_optblocker_i64 ✅ 2s 4s -50%
mld_ct_get_optblocker_u32 ✅ 2s 1s +100%
mld_ct_get_optblocker_u8 ✅ 2s 1s +100%
mld_ct_sel_int32 ✅ 2s 2s +0%
mld_keccakf1600x4_extract_bytes_c ✅ 2s 2s +0%
mld_prepare_domain_separation_prefix ✅ 2s 4s -50%
mld_sign_finish ✅ 2s - new
mld_value_barrier_i64 ✅ 2s 2s +0%
montgomery_reduce ✅ 2s 3s -33%
nttunpack_native_x86_64 ✅ 2s 1s +100%
pack_sig_c ✅ 2s 2s +0%
pack_sig_z ✅ 2s 4s -50%
pack_sk_rho_key_tr_s2 ✅ 2s 3s -33%
pack_sk_s1 ✅ 2s 2s +0%
pointwise_native_aarch64 ✅ 2s 5s -60%
poly_chknorm ✅ 2s 4s -50%
poly_decompose_32_native_aarch64 ✅ 2s 2s +0%
poly_decompose_native_x86_64 ✅ 2s 3s -33%
poly_power2round ✅ 2s 4s -50%
poly_sub ✅ 2s 3s -33%
polyvecl_pointwise_acc_montgomery ✅ 2s 4s -50%
polyvecl_pointwise_acc_montgomery_native ✅ 2s 2s +0%
polyw1_pack_88 ✅ 2s 1s +100%
polyz_unpack_native_x86_64 ✅ 2s 3s -33%
power2round ✅ 2s 3s -33%
rej_eta ✅ 2s 3s -33%
rej_eta_c ✅ 2s 4s -50%
shake128_squeeze ✅ 2s 1s +100%
shake128x4_absorb_once ✅ 2s 3s -33%
shake128x4_squeezeblocks ✅ 2s 1s +100%
shake256 ✅ 2s 1s +100%
shake256_finalize ✅ 2s 2s +0%
shake256_release ✅ 2s 2s +0%
sig_unpack_hints ✅ 2s 2s +0%
sign_verify ✅ 2s 4s -50%
sk_s2hat_get_poly ✅ 2s 2s +0%
sk_t0hat_get_poly ✅ 2s 2s +0%
unpack_pk_t1 ✅ 2s 5s -60%
unpack_sk_s1hat ✅ 2s 1s +100%
use_hint ✅ 2s 2s +0%
yvec_get_poly ✅ 2s 3s -33%
keccak_f1600_x4_native_aarch64_v84a ✅ 1s 2s -50%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid ✅ 1s 1s +0%
keccak_f1600_x4_native_avx2 ✅ 1s 3s -67%
keccakf1600_extract_bytes (big endian) ✅ 1s 2s -50%
keccakf1600x4_extract_bytes ✅ 1s 2s -50%
mld_ct_abs_i32 ✅ 1s 2s -50%
mld_keccakf1600_extract_bytes ✅ 1s 2s -50%
poly_ntt ✅ 1s 3s -67%
polyveck_pack_w1 ✅ 1s 1s +0%
polyz_unpack_native ✅ 1s 2s -50%
shake128_init ✅ 1s 3s -67%
shake256_absorb ✅ 1s 3s -67%
yvec_init ✅ 1s 3s -67%

@oqs-bot

oqs-bot commented Jul 17, 2026

Copy link
Copy Markdown
Contributor

CBMC Results (ML-DSA-44, REDUCE-RAM)

Full Results (210 proofs)
Proof Status Current Previous Change
**TOTAL** ✅ 1453s 1364s +6.5%
polyvec_matrix_pointwise_montgomery_yvec ✅ 158s 149s +6%
poly_pointwise_montgomery_c ✅ 131s 112s +17%
mld_invntt_layer ✅ 115s 105s +10%
polyveck_chknorm ✅ 70s 67s +4%
mld_ntt_layer ✅ 45s 41s +10%
fqmul ✅ 41s 39s +5%
sign_verify_internal ✅ 30s 49s -39%
keccakf1600x4_permute_native ✅ 24s 22s +9%
mld_ntt_butterfly_block ✅ 24s 23s +4%
mld_attempt_signature_generation ✅ 22s 19s +16%
poly_ntt_c ✅ 20s 21s -5%
rej_uniform_c ✅ 18s 16s +12%
mld_check_pct ✅ 17s 15s +13%
polyeta_unpack ✅ 16s 14s +14%
poly_chknorm_c ✅ 14s 11s +27%
polyvecl_chknorm ✅ 14s 11s +27%
polyt0_unpack ✅ 13s 12s +8%
poly_uniform_eta_4x ✅ 12s 12s +0%
compute_pack_t0_t1 ✅ 11s 12s -8%
poly_invntt_tomont_c ✅ 11s 11s +0%
rej_uniform_native_x86_64 ✅ 11s - new
polyveck_decompose ✅ 10s 7s +43%
keccak_absorb_once_x4 ✅ 8s 8s +0%
poly_add ✅ 8s 7s +14%
polyz_unpack_c ✅ 8s 8s +0%
rej_uniform ✅ 8s 8s +0%
mld_prepare_domain_separation_prefix ✅ 7s 3s +133%
poly_power2round ✅ 7s 4s +75%
rej_eta_native ✅ 7s 3s +133%
use_hint ✅ 7s 2s +250%
mld_compute_pack_z ✅ 6s 6s +0%
mld_keccakf1600_permute_c ✅ 6s 7s -14%
mld_sample_s1_s2 ✅ 6s 1s +500%
pointwise_acc_native_x86_64 ✅ 6s 4s +50%
poly_invntt_tomont ✅ 6s 2s +200%
poly_reduce ✅ 6s 4s +50%
polyvecl_ntt ✅ 6s 3s +100%
shake128_finalize ✅ 6s 3s +100%
sign_pk_from_sk ✅ 6s 5s +20%
sign_signature_extmu ✅ 6s 4s +50%
sk_s2hat_get_poly ✅ 6s 5s +20%
mld_ct_get_optblocker_i64 ✅ 5s 4s +25%
mld_sample_s1_s2_serial ✅ 5s 4s +25%
mld_sign_finish ✅ 5s - new
mld_value_barrier_u8 ✅ 5s 4s +25%
poly_challenge ✅ 5s 6s -17%
poly_decompose_native ✅ 5s 2s +150%
poly_uniform_eta ✅ 5s 2s +150%
poly_uniform_gamma1 ✅ 5s 3s +67%
polyvec_matrix_expand_serial ✅ 5s 4s +25%
polyvec_matrix_pointwise_montgomery_row ✅ 5s 6s -17%
polyveck_caddq ✅ 5s 3s +67%
polyveck_invntt_tomont ✅ 5s 5s +0%
polyveck_pack_eta ✅ 5s 4s +25%
rej_uniform_eta_native_aarch64 ✅ 5s 3s +67%
rej_uniform_native ✅ 5s 5s +0%
sig_unpack_hints ✅ 5s 2s +150%
sign_verify ✅ 5s 4s +25%
keccak_f1600_x4_native_aarch64_v84a ✅ 4s 3s +33%
keccak_squeeze ✅ 4s 2s +100%
keccak_squeezeblocks_x4 ✅ 4s 3s +33%
keccakf1600_xor_bytes (big endian) ✅ 4s 6s -33%
keccakf1600x4_extract_bytes ✅ 4s 2s +100%
keccakf1600x4_extract_bytes_native ✅ 4s 4s +0%
make_hint ✅ 4s 3s +33%
mld_sign_attempt ✅ 4s - new
mld_value_barrier_i64 ✅ 4s 3s +33%
pack_sig_c ✅ 4s 5s -20%
pack_sig_h ✅ 4s 4s +0%
pointwise_acc_native_aarch64 ✅ 4s 6s -33%
pointwise_native_aarch64 ✅ 4s 2s +100%
poly_caddq_native ✅ 4s 3s +33%
poly_chknorm_native_aarch64 ✅ 4s 2s +100%
poly_decompose_c ✅ 4s 5s -20%
poly_invntt_tomont_native ✅ 4s 3s +33%
poly_ntt_native ✅ 4s 3s +33%
poly_pointwise_montgomery_native ✅ 4s 2s +100%
poly_shiftl ✅ 4s 4s +0%
poly_sub ✅ 4s 3s +33%
poly_uniform_gamma1_4x ✅ 4s 5s -20%
poly_use_hint_native_aarch64 ✅ 4s 3s +33%
poly_use_hint_native_x86_64 ✅ 4s - new
polyw1_pack_32 ✅ 4s 3s +33%
polyz_unpack ✅ 4s 3s +33%
polyz_unpack_native_x86_64 ✅ 4s 3s +33%
rej_eta ✅ 4s 5s -20%
rej_uniform_eta_native_x86_64 ✅ 4s - new
shake256 ✅ 4s 1s +300%
sign_keypair ✅ 4s 5s -20%
sign_signature_internal ✅ 4s 4s +0%
sign_verify_extmu ✅ 4s 5s -20%
sign_verify_pre_hash_internal ✅ 4s 5s -20%
sign_verify_pre_hash_shake256 ✅ 4s 5s -20%
sk_s1hat_get_poly ✅ 4s 2s +100%
unpack_pk_t1 ✅ 4s 3s +33%
intt_native_aarch64 ✅ 3s 3s +0%
keccak_absorb ✅ 3s 3s +0%
keccak_f1600_x1_native_aarch64 ✅ 3s 3s +0%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid ✅ 3s 3s +0%
keccak_finalize ✅ 3s 2s +50%
keccakf1600_permute_native ✅ 3s 3s +0%
keccakf1600x4_permute ✅ 3s 4s -25%
keccakf1600x4_xor_bytes ✅ 3s 3s +0%
mld_ct_abs_i32 ✅ 3s 3s +0%
mld_ct_cmask_neg_i32 ✅ 3s 2s +50%
mld_ct_get_optblocker_u32 ✅ 3s 2s +50%
mld_h ✅ 3s 4s -25%
mld_keccakf1600_extract_bytes ✅ 3s 2s +50%
mld_keccakf1600x4_extract_bytes_c ✅ 3s 4s -25%
mld_sign_resume ✅ 3s - new
mld_value_barrier_u32 ✅ 3s 1s +200%
ntt_native_aarch64 ✅ 3s 4s -25%
ntt_native_x86_64 ✅ 3s 3s +0%
pack_sk_s1 ✅ 3s 3s +0%
pointwise_native_x86_64 ✅ 3s 4s -25%
poly_caddq_native_aarch64 ✅ 3s 3s +0%
poly_caddq_native_x86_64 ✅ 3s 4s -25%
poly_decompose_88_native_aarch64 ✅ 3s 3s +0%
poly_decompose_native_x86_64 ✅ 3s 2s +50%
poly_permute_bitrev_to_custom_optional ✅ 3s 5s -40%
poly_permute_bitrev_to_custom_optional_native ✅ 3s 3s +0%
poly_pointwise_montgomery ✅ 3s 3s +0%
poly_uniform_4x ✅ 3s 3s +0%
poly_use_hint_native ✅ 3s 3s +0%
polyeta_pack ✅ 3s 3s +0%
polyt0_pack ✅ 3s 4s -25%
polyt1_unpack ✅ 3s 2s +50%
polyvec_matrix_expand ✅ 3s 3s +0%
polyveck_pack_w1 ✅ 3s 3s +0%
polyvecl_pointwise_acc_montgomery ✅ 3s 3s +0%
polyvecl_pointwise_acc_montgomery_c ✅ 3s 4s -25%
polyvecl_pointwise_acc_montgomery_native ✅ 3s 3s +0%
polyvecl_uniform_gamma1_serial ✅ 3s 2s +50%
polyvecl_unpack_eta ✅ 3s 4s -25%
polyz_unpack_19_native_aarch64 ✅ 3s 4s -25%
polyz_unpack_native ✅ 3s 3s +0%
reduce32 ✅ 3s 3s +0%
rej_eta_c ✅ 3s 4s -25%
shake128_init ✅ 3s 2s +50%
shake256_absorb ✅ 3s 2s +50%
shake256x4_absorb_once ✅ 3s 1s +200%
shake256x4_squeezeblocks ✅ 3s 2s +50%
sign_keypair_internal ✅ 3s 4s -25%
sign_signature_pre_hash_internal ✅ 3s 4s -25%
sys_check_capability ✅ 3s 2s +50%
yvec_get_poly ✅ 3s 3s +0%
caddq ✅ 2s 6s -67%
decompose ✅ 2s 3s -33%
intt_native_x86_64 ✅ 2s 2s +0%
keccak_f1600_x1_native_aarch64_v84a ✅ 2s 2s +0%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid ✅ 2s 2s +0%
keccakf1600_extract_bytes (big endian) ✅ 2s 4s -50%
keccakf1600_permute ✅ 2s 2s +0%
keccakf1600x4_xor_bytes_native ✅ 2s 5s -60%
mld_ct_cmask_nonzero_u32 ✅ 2s 3s -33%
mld_ct_cmask_nonzero_u8 ✅ 2s 2s +0%
mld_ct_get_optblocker_u8 ✅ 2s 2s +0%
mld_ct_sel_int32 ✅ 2s 3s -33%
mld_keccakf1600x4_xor_bytes_c ✅ 2s 4s -50%
mld_polymat_expand_entry ✅ 2s 2s +0%
montgomery_reduce ✅ 2s 2s +0%
nttunpack_native_x86_64 ✅ 2s 4s -50%
poly_caddq ✅ 2s 4s -50%
poly_caddq_c ✅ 2s 3s -33%
poly_chknorm ✅ 2s 3s -33%
poly_chknorm_native ✅ 2s 4s -50%
poly_chknorm_native_x86_64 ✅ 2s 2s +0%
poly_decompose ✅ 2s 2s +0%
poly_decompose_32_native_aarch64 ✅ 2s 4s -50%
poly_ntt ✅ 2s 3s -33%
poly_uniform ✅ 2s 3s -33%
poly_use_hint ✅ 2s 2s +0%
poly_use_hint_c ✅ 2s 5s -60%
polyt1_pack ✅ 2s 3s -33%
polyveck_ntt ✅ 2s 2s +0%
polyveck_reduce ✅ 2s 4s -50%
polyvecl_pack_eta ✅ 2s 2s +0%
polyvecl_uniform_gamma1 ✅ 2s 2s +0%
polyvecl_unpack_z ✅ 2s 3s -33%
polyw1_pack ✅ 2s 4s -50%
polyw1_pack_88 ✅ 2s 2s +0%
polyz_unpack_17_native_aarch64 ✅ 2s 2s +0%
rej_uniform_native_aarch64 ✅ 2s 3s -33%
shake128_absorb ✅ 2s 3s -33%
shake128_squeeze ✅ 2s 2s +0%
shake128x4_absorb_once ✅ 2s 2s +0%
shake256_finalize ✅ 2s 2s +0%
shake256_release ✅ 2s 1s +100%
shake256_squeeze ✅ 2s 2s +0%
sign_signature ✅ 2s 6s -67%
sign_signature_pre_hash_shake256 ✅ 2s 4s -50%
sk_t0hat_get_poly ✅ 2s 1s +100%
unpack_sk ✅ 2s 3s -33%
unpack_sk_s1hat ✅ 2s 3s -33%
unpack_sk_t0hat ✅ 2s 2s +0%
yvec_init ✅ 2s 1s +100%
fqscale ✅ 1s 2s -50%
keccak_f1600_x4_native_avx2 ✅ 1s 2s -50%
keccak_init ✅ 1s 3s -67%
keccakf1600_xor_bytes ✅ 1s 3s -67%
mld_ct_memcmp ✅ 1s 1s +0%
pack_sig_z ✅ 1s 2s -50%
pack_sk_rho_key_tr_s2 ✅ 1s 5s -80%
polyveck_unpack_eta ✅ 1s 2s -50%
polyz_pack ✅ 1s 2s -50%
power2round ✅ 1s 2s -50%
shake128_release ✅ 1s 2s -50%
shake128x4_squeezeblocks ✅ 1s 2s -50%
shake256_init ✅ 1s 4s -75%
unpack_sk_s2hat ✅ 1s 4s -75%

@oqs-bot

oqs-bot commented Jul 17, 2026

Copy link
Copy Markdown
Contributor

CBMC Results (ML-DSA-65, REDUCE-RAM)

Full Results (210 proofs)
Proof Status Current Previous Change
**TOTAL** ✅ 1446s 1482s -2.4%
polyvec_matrix_pointwise_montgomery_yvec ✅ 195s 201s -3%
poly_pointwise_montgomery_c ✅ 113s 116s -3%
mld_invntt_layer ✅ 105s 108s -3%
mld_ntt_layer ✅ 44s 43s +2%
polyvecl_chknorm ✅ 43s 43s +0%
fqmul ✅ 40s 40s +0%
polyveck_chknorm ✅ 33s 36s -8%
mld_attempt_signature_generation ✅ 31s 31s +0%
sign_verify_internal ✅ 30s 71s -58%
keccakf1600x4_permute_native ✅ 23s 22s +5%
mld_ntt_butterfly_block ✅ 21s 25s -16%
poly_ntt_c ✅ 19s 22s -14%
mld_check_pct ✅ 17s 12s +42%
rej_uniform_c ✅ 16s 16s +0%
poly_uniform_eta_4x ✅ 12s 13s -8%
keccak_absorb_once_x4 ✅ 11s 10s +10%
poly_chknorm_c ✅ 11s 13s -15%
poly_invntt_tomont_c ✅ 11s 10s +10%
polyveck_decompose ✅ 11s 14s -21%
polyt0_unpack ✅ 10s 13s -23%
polyvec_matrix_pointwise_montgomery_row ✅ 9s 8s +12%
polyz_unpack_c ✅ 9s 9s +0%
rej_uniform_native_x86_64 ✅ 9s - new
pointwise_acc_native_x86_64 ✅ 8s 5s +60%
polyveck_caddq ✅ 8s 7s +14%
compute_pack_t0_t1 ✅ 7s 7s +0%
ntt_native_aarch64 ✅ 7s 3s +133%
pack_sig_c ✅ 7s 3s +133%
poly_uniform_eta ✅ 7s 5s +40%
rej_uniform ✅ 7s 7s +0%
sign_signature_internal ✅ 7s 6s +17%
keccak_squeezeblocks_x4 ✅ 6s 4s +50%
mld_keccakf1600_permute_c ✅ 6s 7s -14%
pointwise_acc_native_aarch64 ✅ 6s 6s +0%
poly_add ✅ 6s 7s -14%
poly_decompose_c ✅ 6s 8s -25%
poly_reduce ✅ 6s 4s +50%
polyvec_matrix_expand_serial ✅ 6s 3s +100%
polyveck_unpack_eta ✅ 6s 3s +100%
polyz_unpack_17_native_aarch64 ✅ 6s 2s +200%
mld_compute_pack_z ✅ 5s 5s +0%
mld_h ✅ 5s 3s +67%
mld_sign_attempt ✅ 5s - new
ntt_native_x86_64 ✅ 5s 5s +0%
nttunpack_native_x86_64 ✅ 5s 3s +67%
pointwise_native_x86_64 ✅ 5s 2s +150%
poly_pointwise_montgomery_native ✅ 5s 4s +25%
poly_uniform_gamma1_4x ✅ 5s 3s +67%
polyt0_pack ✅ 5s 5s +0%
polyt1_unpack ✅ 5s 3s +67%
polyveck_reduce ✅ 5s 6s -17%
polyvecl_ntt ✅ 5s 7s -29%
rej_uniform_native ✅ 5s 4s +25%
sign_keypair ✅ 5s 4s +25%
sign_keypair_internal ✅ 5s 3s +67%
sign_pk_from_sk ✅ 5s 5s +0%
sk_s2hat_get_poly ✅ 5s 1s +400%
unpack_sk_s2hat ✅ 5s 3s +67%
intt_native_aarch64 ✅ 4s 2s +100%
keccak_f1600_x4_native_aarch64_v84a ✅ 4s 2s +100%
mld_ct_abs_i32 ✅ 4s 6s -33%
mld_keccakf1600x4_extract_bytes_c ✅ 4s 2s +100%
mld_keccakf1600x4_xor_bytes_c ✅ 4s 2s +100%
mld_sample_s1_s2_serial ✅ 4s 3s +33%
mld_sign_resume ✅ 4s - new
montgomery_reduce ✅ 4s 1s +300%
pack_sig_z ✅ 4s 1s +300%
pointwise_native_aarch64 ✅ 4s 3s +33%
poly_caddq_native_x86_64 ✅ 4s 1s +300%
poly_decompose_32_native_aarch64 ✅ 4s 4s +0%
poly_ntt ✅ 4s 2s +100%
poly_ntt_native ✅ 4s 2s +100%
poly_power2round ✅ 4s 7s -43%
poly_uniform ✅ 4s 2s +100%
poly_uniform_4x ✅ 4s 4s +0%
poly_uniform_gamma1 ✅ 4s 3s +33%
poly_use_hint_native_x86_64 ✅ 4s - new
polyeta_pack ✅ 4s 1s +300%
polyveck_invntt_tomont ✅ 4s 7s -43%
polyveck_ntt ✅ 4s 4s +0%
polyvecl_pointwise_acc_montgomery ✅ 4s 3s +33%
polyvecl_uniform_gamma1_serial ✅ 4s 1s +300%
polyz_pack ✅ 4s 3s +33%
polyz_unpack_19_native_aarch64 ✅ 4s 5s -20%
rej_eta_c ✅ 4s 4s +0%
rej_eta_native ✅ 4s 3s +33%
sign_signature_extmu ✅ 4s 4s +0%
sign_verify_pre_hash_internal ✅ 4s 5s -20%
sign_verify_pre_hash_shake256 ✅ 4s 6s -33%
unpack_sk ✅ 4s 3s +33%
decompose ✅ 3s 4s -25%
intt_native_x86_64 ✅ 3s 4s -25%
keccak_absorb ✅ 3s 3s +0%
keccak_f1600_x4_native_avx2 ✅ 3s 2s +50%
keccakf1600_permute ✅ 3s 4s -25%
keccakf1600_xor_bytes ✅ 3s 4s -25%
keccakf1600x4_extract_bytes ✅ 3s 4s -25%
keccakf1600x4_extract_bytes_native ✅ 3s 1s +200%
keccakf1600x4_xor_bytes ✅ 3s 2s +50%
keccakf1600x4_xor_bytes_native ✅ 3s 2s +50%
mld_ct_cmask_nonzero_u8 ✅ 3s 2s +50%
mld_ct_get_optblocker_i64 ✅ 3s 1s +200%
mld_ct_get_optblocker_u8 ✅ 3s 4s -25%
mld_ct_sel_int32 ✅ 3s 2s +50%
mld_keccakf1600_extract_bytes ✅ 3s 2s +50%
mld_polymat_expand_entry ✅ 3s 3s +0%
mld_prepare_domain_separation_prefix ✅ 3s 4s -25%
mld_sample_s1_s2 ✅ 3s 6s -50%
mld_sign_finish ✅ 3s - new
mld_value_barrier_u8 ✅ 3s 1s +200%
pack_sk_rho_key_tr_s2 ✅ 3s 2s +50%
pack_sk_s1 ✅ 3s 3s +0%
poly_caddq ✅ 3s 3s +0%
poly_caddq_c ✅ 3s 5s -40%
poly_caddq_native_aarch64 ✅ 3s 2s +50%
poly_challenge ✅ 3s 5s -40%
poly_chknorm ✅ 3s 3s +0%
poly_chknorm_native ✅ 3s 4s -25%
poly_chknorm_native_aarch64 ✅ 3s 2s +50%
poly_chknorm_native_x86_64 ✅ 3s 4s -25%
poly_decompose_88_native_aarch64 ✅ 3s 2s +50%
poly_decompose_native ✅ 3s 5s -40%
poly_invntt_tomont ✅ 3s 5s -40%
poly_permute_bitrev_to_custom_optional_native ✅ 3s 3s +0%
poly_use_hint ✅ 3s 3s +0%
polyeta_unpack ✅ 3s 4s -25%
polyt1_pack ✅ 3s 3s +0%
polyvec_matrix_expand ✅ 3s 6s -50%
polyveck_pack_w1 ✅ 3s 4s -25%
polyvecl_pack_eta ✅ 3s 2s +50%
polyvecl_pointwise_acc_montgomery_c ✅ 3s 3s +0%
polyvecl_uniform_gamma1 ✅ 3s 4s -25%
polyvecl_unpack_eta ✅ 3s 2s +50%
polyw1_pack ✅ 3s 3s +0%
polyw1_pack_88 ✅ 3s 3s +0%
polyz_unpack_native ✅ 3s 3s +0%
polyz_unpack_native_x86_64 ✅ 3s 3s +0%
reduce32 ✅ 3s 2s +50%
shake128_finalize ✅ 3s 2s +50%
shake128_release ✅ 3s 2s +50%
shake128x4_absorb_once ✅ 3s 2s +50%
shake256 ✅ 3s 2s +50%
shake256_finalize ✅ 3s 1s +200%
shake256_squeeze ✅ 3s 4s -25%
shake256x4_absorb_once ✅ 3s 2s +50%
sig_unpack_hints ✅ 3s 1s +200%
sign_signature ✅ 3s 5s -40%
sign_signature_pre_hash_shake256 ✅ 3s 7s -57%
sign_verify_extmu ✅ 3s 2s +50%
sk_s1hat_get_poly ✅ 3s 3s +0%
unpack_pk_t1 ✅ 3s 2s +50%
use_hint ✅ 3s 2s +50%
yvec_get_poly ✅ 3s 3s +0%
caddq ✅ 2s 2s +0%
fqscale ✅ 2s 3s -33%
keccak_f1600_x1_native_aarch64 ✅ 2s 2s +0%
keccak_f1600_x1_native_aarch64_v84a ✅ 2s 2s +0%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid ✅ 2s 3s -33%
keccak_init ✅ 2s 4s -50%
keccak_squeeze ✅ 2s 2s +0%
keccakf1600_extract_bytes (big endian) ✅ 2s 3s -33%
keccakf1600_permute_native ✅ 2s 2s +0%
keccakf1600x4_permute ✅ 2s 1s +100%
make_hint ✅ 2s 3s -33%
mld_ct_cmask_neg_i32 ✅ 2s 3s -33%
mld_ct_cmask_nonzero_u32 ✅ 2s 3s -33%
mld_ct_get_optblocker_u32 ✅ 2s 3s -33%
mld_ct_memcmp ✅ 2s 4s -50%
mld_value_barrier_i64 ✅ 2s 2s +0%
mld_value_barrier_u32 ✅ 2s 4s -50%
pack_sig_h ✅ 2s 2s +0%
poly_caddq_native ✅ 2s 4s -50%
poly_decompose_native_x86_64 ✅ 2s 2s +0%
poly_invntt_tomont_native ✅ 2s 5s -60%
poly_permute_bitrev_to_custom_optional ✅ 2s 3s -33%
poly_pointwise_montgomery ✅ 2s 2s +0%
poly_shiftl ✅ 2s 3s -33%
poly_sub ✅ 2s 4s -50%
poly_use_hint_c ✅ 2s 2s +0%
polyveck_pack_eta ✅ 2s 3s -33%
polyvecl_pointwise_acc_montgomery_native ✅ 2s 3s -33%
polyvecl_unpack_z ✅ 2s 1s +100%
polyw1_pack_32 ✅ 2s 2s +0%
polyz_unpack ✅ 2s 3s -33%
rej_uniform_eta_native_aarch64 ✅ 2s 5s -60%
rej_uniform_eta_native_x86_64 ✅ 2s - new
rej_uniform_native_aarch64 ✅ 2s 5s -60%
shake128_absorb ✅ 2s 2s +0%
shake128_init ✅ 2s 6s -67%
shake128_squeeze ✅ 2s 3s -33%
shake128x4_squeezeblocks ✅ 2s 2s +0%
shake256_absorb ✅ 2s 4s -50%
shake256_init ✅ 2s 4s -50%
shake256_release ✅ 2s 3s -33%
sign_signature_pre_hash_internal ✅ 2s 3s -33%
sign_verify ✅ 2s 6s -67%
sk_t0hat_get_poly ✅ 2s 1s +100%
sys_check_capability ✅ 2s 1s +100%
unpack_sk_s1hat ✅ 2s 1s +100%
unpack_sk_t0hat ✅ 2s 4s -50%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid ✅ 1s 3s -67%
keccak_finalize ✅ 1s 2s -50%
keccakf1600_xor_bytes (big endian) ✅ 1s 2s -50%
poly_decompose ✅ 1s 2s -50%
poly_use_hint_native ✅ 1s 7s -86%
poly_use_hint_native_aarch64 ✅ 1s 4s -75%
power2round ✅ 1s 2s -50%
rej_eta ✅ 1s 5s -80%
shake256x4_squeezeblocks ✅ 1s 2s -50%
yvec_init ✅ 1s 5s -80%

@oqs-bot

oqs-bot commented Jul 17, 2026

Copy link
Copy Markdown
Contributor

CBMC Results (ML-DSA-65)

Full Results (210 proofs)
Proof Status Current Previous Change
**TOTAL** ✅ 1766s 1784s -1.0%
polyvecl_pointwise_acc_montgomery_c ✅ 230s 210s +10%
poly_pointwise_montgomery_c ✅ 127s 125s +2%
mld_invntt_layer ✅ 117s 109s +7%
polyvec_matrix_expand ✅ 113s 110s +3%
sign_verify_internal ✅ 67s 177s -62%
mld_attempt_signature_generation ✅ 65s 63s +3%
sign_signature_internal ✅ 47s 55s -15%
fqmul ✅ 42s 40s +5%
mld_ntt_layer ✅ 42s 41s +2%
polyvec_matrix_expand_serial ✅ 29s 27s +7%
keccakf1600x4_permute_native ✅ 22s 23s -4%
mld_ntt_butterfly_block ✅ 21s 24s -12%
polyvec_matrix_pointwise_montgomery_yvec ✅ 19s 18s +6%
poly_ntt_c ✅ 18s 19s -5%
poly_chknorm_c ✅ 17s 15s +13%
rej_uniform_c ✅ 16s 14s +14%
compute_pack_t0_t1 ✅ 15s 13s +15%
mld_check_pct ✅ 15s 14s +7%
polyt0_unpack ✅ 14s 16s -12%
polyveck_decompose ✅ 14s 12s +17%
rej_uniform ✅ 14s 18s -22%
poly_uniform_4x ✅ 13s 13s +0%
poly_invntt_tomont_c ✅ 12s 11s +9%
poly_uniform_eta_4x ✅ 12s 14s -14%
polyz_unpack_c ✅ 11s 13s -15%
keccak_absorb_once_x4 ✅ 10s 8s +25%
polyveck_invntt_tomont ✅ 10s 8s +25%
rej_uniform_native_x86_64 ✅ 9s - new
sign_pk_from_sk ✅ 9s 6s +50%
poly_caddq ✅ 8s 2s +300%
polyveck_ntt ✅ 8s 7s +14%
rej_uniform_native ✅ 8s 4s +100%
mld_keccakf1600_permute_c ✅ 7s 6s +17%
polyveck_chknorm ✅ 7s 6s +17%
intt_native_x86_64 ✅ 6s 3s +100%
mld_compute_pack_z ✅ 6s 7s -14%
poly_add ✅ 6s 9s -33%
poly_chknorm_native_aarch64 ✅ 6s 3s +100%
poly_decompose_c ✅ 6s 5s +20%
polyvecl_ntt ✅ 6s 4s +50%
sign_keypair_internal ✅ 6s 5s +20%
sign_signature_extmu ✅ 6s 2s +200%
keccak_absorb ✅ 5s 3s +67%
keccak_squeeze ✅ 5s 4s +25%
keccak_squeezeblocks_x4 ✅ 5s 5s +0%
keccakf1600x4_permute ✅ 5s 4s +25%
mld_ct_sel_int32 ✅ 5s 3s +67%
mld_h ✅ 5s 2s +150%
mld_sample_s1_s2 ✅ 5s 6s -17%
mld_sample_s1_s2_serial ✅ 5s 4s +25%
pointwise_acc_native_aarch64 ✅ 5s 6s -17%
pointwise_acc_native_x86_64 ✅ 5s 8s -38%
pointwise_native_aarch64 ✅ 5s 5s +0%
poly_challenge ✅ 5s 6s -17%
poly_pointwise_montgomery ✅ 5s 3s +67%
poly_power2round ✅ 5s 4s +25%
poly_uniform ✅ 5s 4s +25%
poly_use_hint_c ✅ 5s 5s +0%
polyt1_unpack ✅ 5s 5s +0%
polyveck_caddq ✅ 5s 6s -17%
polyvecl_chknorm ✅ 5s 7s -29%
polyvecl_uniform_gamma1 ✅ 5s 2s +150%
polyw1_pack_32 ✅ 5s 4s +25%
rej_eta ✅ 5s 2s +150%
rej_eta_c ✅ 5s 5s +0%
rej_uniform_eta_native_x86_64 ✅ 5s - new
sign_keypair ✅ 5s 3s +67%
sign_signature_pre_hash_internal ✅ 5s 3s +67%
sign_verify ✅ 5s 3s +67%
yvec_get_poly ✅ 5s 3s +67%
decompose ✅ 4s 1s +300%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid ✅ 4s 2s +100%
keccakf1600_xor_bytes (big endian) ✅ 4s 2s +100%
mld_ct_get_optblocker_u8 ✅ 4s 2s +100%
mld_keccakf1600x4_xor_bytes_c ✅ 4s 2s +100%
mld_prepare_domain_separation_prefix ✅ 4s 2s +100%
mld_sign_attempt ✅ 4s - new
ntt_native_x86_64 ✅ 4s 2s +100%
poly_chknorm ✅ 4s 4s +0%
poly_chknorm_native ✅ 4s 2s +100%
poly_decompose_88_native_aarch64 ✅ 4s 1s +300%
poly_pointwise_montgomery_native ✅ 4s 3s +33%
poly_use_hint_native_aarch64 ✅ 4s 3s +33%
poly_use_hint_native_x86_64 ✅ 4s - new
polyeta_pack ✅ 4s 3s +33%
polyeta_unpack ✅ 4s 8s -50%
polyvecl_unpack_eta ✅ 4s 3s +33%
polyw1_pack_88 ✅ 4s 2s +100%
polyz_unpack ✅ 4s 3s +33%
rej_uniform_native_aarch64 ✅ 4s 3s +33%
shake128_finalize ✅ 4s 1s +300%
shake256_release ✅ 4s 2s +100%
sig_unpack_hints ✅ 4s 2s +100%
sign_signature_pre_hash_shake256 ✅ 4s 3s +33%
sign_verify_pre_hash_shake256 ✅ 4s 5s -20%
sys_check_capability ✅ 4s 4s +0%
unpack_sk ✅ 4s 3s +33%
unpack_sk_t0hat ✅ 4s 5s -20%
yvec_init ✅ 4s 3s +33%
fqscale ✅ 3s 3s +0%
intt_native_aarch64 ✅ 3s 3s +0%
keccak_f1600_x1_native_aarch64 ✅ 3s 2s +50%
keccak_f1600_x4_native_aarch64_v84a ✅ 3s 4s -25%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid ✅ 3s 2s +50%
keccak_finalize ✅ 3s 2s +50%
keccakf1600_extract_bytes (big endian) ✅ 3s 2s +50%
keccakf1600_permute_native ✅ 3s 3s +0%
keccakf1600x4_extract_bytes_native ✅ 3s 4s -25%
keccakf1600x4_xor_bytes ✅ 3s 1s +200%
keccakf1600x4_xor_bytes_native ✅ 3s 3s +0%
mld_ct_abs_i32 ✅ 3s 2s +50%
mld_ct_cmask_nonzero_u8 ✅ 3s 3s +0%
mld_ct_memcmp ✅ 3s 2s +50%
mld_keccakf1600x4_extract_bytes_c ✅ 3s 3s +0%
mld_sign_finish ✅ 3s - new
montgomery_reduce ✅ 3s 4s -25%
pack_sig_h ✅ 3s 5s -40%
pack_sk_rho_key_tr_s2 ✅ 3s 2s +50%
poly_chknorm_native_x86_64 ✅ 3s 3s +0%
poly_decompose ✅ 3s 2s +50%
poly_decompose_native_x86_64 ✅ 3s 3s +0%
poly_invntt_tomont_native ✅ 3s 2s +50%
poly_ntt ✅ 3s 2s +50%
poly_ntt_native ✅ 3s 4s -25%
poly_permute_bitrev_to_custom_optional ✅ 3s 2s +50%
poly_permute_bitrev_to_custom_optional_native ✅ 3s 4s -25%
poly_reduce ✅ 3s 3s +0%
poly_shiftl ✅ 3s 3s +0%
poly_uniform_eta ✅ 3s 4s -25%
poly_uniform_gamma1 ✅ 3s 3s +0%
poly_uniform_gamma1_4x ✅ 3s 4s -25%
poly_use_hint ✅ 3s 3s +0%
poly_use_hint_native ✅ 3s 2s +50%
polyt0_pack ✅ 3s 3s +0%
polyveck_pack_eta ✅ 3s 4s -25%
polyveck_pack_w1 ✅ 3s 3s +0%
polyveck_reduce ✅ 3s 4s -25%
polyveck_unpack_eta ✅ 3s 6s -50%
polyvecl_pointwise_acc_montgomery_native ✅ 3s 2s +50%
polyvecl_unpack_z ✅ 3s 3s +0%
polyz_pack ✅ 3s 3s +0%
polyz_unpack_19_native_aarch64 ✅ 3s 3s +0%
polyz_unpack_native ✅ 3s 4s -25%
power2round ✅ 3s 1s +200%
shake128_absorb ✅ 3s 2s +50%
shake128_init ✅ 3s 2s +50%
shake128_release ✅ 3s 3s +0%
shake128_squeeze ✅ 3s 2s +50%
shake128x4_absorb_once ✅ 3s 3s +0%
shake256 ✅ 3s 2s +50%
shake256_absorb ✅ 3s 2s +50%
shake256_finalize ✅ 3s 1s +200%
shake256_squeeze ✅ 3s 3s +0%
shake256x4_squeezeblocks ✅ 3s 2s +50%
sign_signature ✅ 3s 6s -50%
sign_verify_extmu ✅ 3s 3s +0%
sign_verify_pre_hash_internal ✅ 3s 5s -40%
sk_t0hat_get_poly ✅ 3s 2s +50%
unpack_sk_s2hat ✅ 3s 4s -25%
use_hint ✅ 3s 2s +50%
caddq ✅ 2s 3s -33%
keccak_f1600_x1_native_aarch64_v84a ✅ 2s 3s -33%
keccak_init ✅ 2s 1s +100%
keccakf1600_permute ✅ 2s 2s +0%
keccakf1600_xor_bytes ✅ 2s 2s +0%
make_hint ✅ 2s 2s +0%
mld_ct_cmask_nonzero_u32 ✅ 2s 4s -50%
mld_ct_get_optblocker_u32 ✅ 2s 3s -33%
mld_keccakf1600_extract_bytes ✅ 2s 1s +100%
mld_polymat_expand_entry ✅ 2s 4s -50%
mld_sign_resume ✅ 2s - new
mld_value_barrier_i64 ✅ 2s 2s +0%
mld_value_barrier_u8 ✅ 2s 3s -33%
ntt_native_aarch64 ✅ 2s 2s +0%
nttunpack_native_x86_64 ✅ 2s 3s -33%
pack_sig_c ✅ 2s 5s -60%
pack_sig_z ✅ 2s 2s +0%
pack_sk_s1 ✅ 2s 5s -60%
pointwise_native_x86_64 ✅ 2s 3s -33%
poly_caddq_native ✅ 2s 2s +0%
poly_caddq_native_aarch64 ✅ 2s 2s +0%
poly_caddq_native_x86_64 ✅ 2s 3s -33%
poly_decompose_32_native_aarch64 ✅ 2s 3s -33%
poly_decompose_native ✅ 2s 3s -33%
poly_invntt_tomont ✅ 2s 3s -33%
poly_sub ✅ 2s 3s -33%
polyt1_pack ✅ 2s 3s -33%
polyvec_matrix_pointwise_montgomery_row ✅ 2s 1s +100%
polyvecl_pack_eta ✅ 2s 3s -33%
polyvecl_pointwise_acc_montgomery ✅ 2s 3s -33%
polyvecl_uniform_gamma1_serial ✅ 2s 3s -33%
polyz_unpack_17_native_aarch64 ✅ 2s 3s -33%
polyz_unpack_native_x86_64 ✅ 2s 3s -33%
reduce32 ✅ 2s 3s -33%
rej_eta_native ✅ 2s 3s -33%
rej_uniform_eta_native_aarch64 ✅ 2s 4s -50%
shake128x4_squeezeblocks ✅ 2s 3s -33%
shake256_init ✅ 2s 2s +0%
sk_s1hat_get_poly ✅ 2s 6s -67%
unpack_pk_t1 ✅ 2s 5s -60%
unpack_sk_s1hat ✅ 2s 2s +0%
keccak_f1600_x4_native_avx2 ✅ 1s 2s -50%
keccakf1600x4_extract_bytes ✅ 1s 4s -75%
mld_ct_cmask_neg_i32 ✅ 1s 2s -50%
mld_ct_get_optblocker_i64 ✅ 1s 2s -50%
mld_value_barrier_u32 ✅ 1s 3s -67%
poly_caddq_c ✅ 1s 2s -50%
polyw1_pack ✅ 1s 4s -75%
shake256x4_absorb_once ✅ 1s 3s -67%
sk_s2hat_get_poly ✅ 1s 2s -50%

@oqs-bot

oqs-bot commented Jul 17, 2026

Copy link
Copy Markdown
Contributor

CBMC Results (ML-DSA-87, REDUCE-RAM)

Full Results (210 proofs)
Proof Status Current Previous Change
**TOTAL** ✅ 1467s 1436s +2.2%
polyvec_matrix_pointwise_montgomery_yvec ✅ 193s 196s -2%
poly_pointwise_montgomery_c ✅ 128s 125s +2%
mld_invntt_layer ✅ 115s 111s +4%
fqmul ✅ 44s 39s +13%
mld_ntt_layer ✅ 43s 44s -2%
polyvecl_chknorm ✅ 38s 38s +0%
mld_attempt_signature_generation ✅ 35s 34s +3%
keccakf1600x4_permute_native ✅ 23s 25s -8%
sign_verify_internal ✅ 23s 47s -51%
mld_ntt_butterfly_block ✅ 21s 23s -9%
poly_ntt_c ✅ 21s 19s +11%
polyeta_unpack ✅ 16s 13s +23%
rej_uniform_c ✅ 15s 18s -17%
mld_check_pct ✅ 14s 15s -7%
compute_pack_t0_t1 ✅ 13s 12s +8%
poly_chknorm_c ✅ 13s 13s +0%
poly_invntt_tomont_c ✅ 13s 9s +44%
polyt0_unpack ✅ 13s 14s -7%
poly_uniform_eta_4x ✅ 12s 12s +0%
polyvec_matrix_pointwise_montgomery_row ✅ 12s 13s -8%
polyveck_decompose ✅ 12s 12s +0%
keccak_absorb_once_x4 ✅ 9s 8s +12%
polyveck_chknorm ✅ 9s 9s +0%
polyz_unpack_c ✅ 9s 7s +29%
rej_uniform_native_x86_64 ✅ 9s - new
mld_sample_s1_s2 ✅ 8s 8s +0%
pointwise_acc_native_aarch64 ✅ 8s 5s +60%
poly_decompose_c ✅ 8s 6s +33%
caddq ✅ 7s 3s +133%
pointwise_acc_native_x86_64 ✅ 7s 8s -12%
poly_add ✅ 7s 8s -12%
poly_ntt ✅ 7s 2s +250%
polyveck_caddq ✅ 7s 8s -12%
polyvecl_ntt ✅ 7s 8s -12%
rej_uniform ✅ 7s 7s +0%
sign_keypair_internal ✅ 7s 6s +17%
mld_sample_s1_s2_serial ✅ 6s 6s +0%
pointwise_native_aarch64 ✅ 6s 4s +50%
poly_ntt_native ✅ 6s 4s +50%
poly_reduce ✅ 6s 4s +50%
polyveck_invntt_tomont ✅ 6s 4s +50%
polyveck_reduce ✅ 6s 6s +0%
rej_uniform_eta_native_aarch64 ✅ 6s 3s +100%
sign_pk_from_sk ✅ 6s 6s +0%
keccak_absorb ✅ 5s 4s +25%
mld_compute_pack_z ✅ 5s 6s -17%
mld_keccakf1600_permute_c ✅ 5s 8s -38%
mld_prepare_domain_separation_prefix ✅ 5s 3s +67%
mld_sign_resume ✅ 5s - new
ntt_native_x86_64 ✅ 5s 2s +150%
nttunpack_native_x86_64 ✅ 5s 3s +67%
poly_caddq_c ✅ 5s 3s +67%
poly_challenge ✅ 5s 4s +25%
poly_decompose_88_native_aarch64 ✅ 5s 2s +150%
poly_invntt_tomont ✅ 5s 4s +25%
poly_uniform ✅ 5s 4s +25%
polyt0_pack ✅ 5s 3s +67%
sign_verify ✅ 5s 2s +150%
sign_verify_pre_hash_shake256 ✅ 5s 7s -29%
sk_s2hat_get_poly ✅ 5s 2s +150%
intt_native_x86_64 ✅ 4s 4s +0%
keccak_init ✅ 4s 1s +300%
keccakf1600_xor_bytes (big endian) ✅ 4s 2s +100%
keccakf1600x4_extract_bytes ✅ 4s 1s +300%
mld_keccakf1600_extract_bytes ✅ 4s 1s +300%
pack_sig_c ✅ 4s 2s +100%
pack_sig_h ✅ 4s 3s +33%
pack_sk_rho_key_tr_s2 ✅ 4s 2s +100%
poly_caddq ✅ 4s 5s -20%
poly_power2round ✅ 4s 7s -43%
poly_sub ✅ 4s 5s -20%
poly_uniform_4x ✅ 4s 3s +33%
poly_uniform_eta ✅ 4s 5s -20%
poly_use_hint ✅ 4s 4s +0%
poly_use_hint_native_aarch64 ✅ 4s 3s +33%
polyvec_matrix_expand_serial ✅ 4s 3s +33%
polyveck_ntt ✅ 4s 3s +33%
polyveck_pack_eta ✅ 4s 5s -20%
polyvecl_pointwise_acc_montgomery_c ✅ 4s 2s +100%
polyz_unpack ✅ 4s 3s +33%
reduce32 ✅ 4s 3s +33%
rej_eta_native ✅ 4s 4s +0%
rej_uniform_native ✅ 4s 5s -20%
rej_uniform_native_aarch64 ✅ 4s 3s +33%
shake128_squeeze ✅ 4s 1s +300%
shake256x4_squeezeblocks ✅ 4s 4s +0%
sign_keypair ✅ 4s 4s +0%
sign_signature ✅ 4s 4s +0%
sign_signature_internal ✅ 4s 3s +33%
sign_verify_extmu ✅ 4s 4s +0%
unpack_sk ✅ 4s 4s +0%
decompose ✅ 3s 2s +50%
keccak_f1600_x1_native_aarch64 ✅ 3s 2s +50%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid ✅ 3s 2s +50%
keccak_f1600_x4_native_avx2 ✅ 3s 3s +0%
keccak_finalize ✅ 3s 1s +200%
keccak_squeeze ✅ 3s 5s -40%
keccak_squeezeblocks_x4 ✅ 3s 4s -25%
keccakf1600_permute_native ✅ 3s 3s +0%
keccakf1600_xor_bytes ✅ 3s 1s +200%
mld_ct_abs_i32 ✅ 3s 1s +200%
mld_ct_get_optblocker_i64 ✅ 3s 2s +50%
mld_ct_get_optblocker_u32 ✅ 3s 2s +50%
mld_ct_get_optblocker_u8 ✅ 3s 3s +0%
mld_value_barrier_u8 ✅ 3s 2s +50%
ntt_native_aarch64 ✅ 3s 4s -25%
pack_sk_s1 ✅ 3s 2s +50%
poly_caddq_native ✅ 3s 3s +0%
poly_chknorm_native ✅ 3s 1s +200%
poly_chknorm_native_aarch64 ✅ 3s 5s -40%
poly_chknorm_native_x86_64 ✅ 3s 2s +50%
poly_decompose ✅ 3s 2s +50%
poly_decompose_32_native_aarch64 ✅ 3s 3s +0%
poly_decompose_native ✅ 3s 2s +50%
poly_decompose_native_x86_64 ✅ 3s 3s +0%
poly_invntt_tomont_native ✅ 3s 2s +50%
poly_pointwise_montgomery ✅ 3s 3s +0%
poly_pointwise_montgomery_native ✅ 3s 3s +0%
poly_uniform_gamma1 ✅ 3s 3s +0%
poly_uniform_gamma1_4x ✅ 3s 3s +0%
poly_use_hint_native_x86_64 ✅ 3s - new
polyeta_pack ✅ 3s 3s +0%
polyt1_pack ✅ 3s 5s -40%
polyveck_unpack_eta ✅ 3s 3s +0%
polyvecl_pack_eta ✅ 3s 2s +50%
polyvecl_pointwise_acc_montgomery_native ✅ 3s 2s +50%
polyvecl_unpack_z ✅ 3s 3s +0%
polyw1_pack ✅ 3s 2s +50%
polyw1_pack_32 ✅ 3s 3s +0%
polyz_pack ✅ 3s 4s -25%
polyz_unpack_17_native_aarch64 ✅ 3s 4s -25%
polyz_unpack_native ✅ 3s 1s +200%
rej_uniform_eta_native_x86_64 ✅ 3s - new
shake128_absorb ✅ 3s 2s +50%
shake128_finalize ✅ 3s 2s +50%
shake256 ✅ 3s 3s +0%
shake256_absorb ✅ 3s 3s +0%
shake256_finalize ✅ 3s 3s +0%
shake256_init ✅ 3s 3s +0%
sig_unpack_hints ✅ 3s 4s -25%
sign_signature_extmu ✅ 3s 4s -25%
sign_signature_pre_hash_internal ✅ 3s 2s +50%
sign_signature_pre_hash_shake256 ✅ 3s 3s +0%
sk_s1hat_get_poly ✅ 3s 3s +0%
unpack_sk_s2hat ✅ 3s 3s +0%
yvec_get_poly ✅ 3s 2s +50%
fqscale ✅ 2s 1s +100%
intt_native_aarch64 ✅ 2s 4s -50%
keccak_f1600_x1_native_aarch64_v84a ✅ 2s 2s +0%
keccak_f1600_x4_native_aarch64_v84a ✅ 2s 1s +100%
keccakf1600_extract_bytes (big endian) ✅ 2s 3s -33%
keccakf1600x4_permute ✅ 2s 2s +0%
keccakf1600x4_xor_bytes ✅ 2s 1s +100%
keccakf1600x4_xor_bytes_native ✅ 2s 2s +0%
mld_ct_cmask_neg_i32 ✅ 2s 2s +0%
mld_ct_cmask_nonzero_u32 ✅ 2s 5s -60%
mld_ct_cmask_nonzero_u8 ✅ 2s 2s +0%
mld_ct_memcmp ✅ 2s 1s +100%
mld_ct_sel_int32 ✅ 2s 2s +0%
mld_h ✅ 2s 2s +0%
mld_keccakf1600x4_xor_bytes_c ✅ 2s 1s +100%
mld_polymat_expand_entry ✅ 2s 4s -50%
mld_sign_attempt ✅ 2s - new
mld_sign_finish ✅ 2s - new
montgomery_reduce ✅ 2s 2s +0%
pointwise_native_x86_64 ✅ 2s 5s -60%
poly_caddq_native_aarch64 ✅ 2s 3s -33%
poly_caddq_native_x86_64 ✅ 2s 3s -33%
poly_chknorm ✅ 2s 4s -50%
poly_permute_bitrev_to_custom_optional ✅ 2s 2s +0%
poly_permute_bitrev_to_custom_optional_native ✅ 2s 3s -33%
poly_shiftl ✅ 2s 4s -50%
poly_use_hint_c ✅ 2s 4s -50%
poly_use_hint_native ✅ 2s 1s +100%
polyt1_unpack ✅ 2s 3s -33%
polyvec_matrix_expand ✅ 2s 3s -33%
polyvecl_uniform_gamma1 ✅ 2s 3s -33%
polyvecl_uniform_gamma1_serial ✅ 2s 2s +0%
polyvecl_unpack_eta ✅ 2s 3s -33%
polyw1_pack_88 ✅ 2s 2s +0%
polyz_unpack_19_native_aarch64 ✅ 2s 5s -60%
polyz_unpack_native_x86_64 ✅ 2s 3s -33%
power2round ✅ 2s 3s -33%
rej_eta ✅ 2s 2s +0%
rej_eta_c ✅ 2s 4s -50%
shake128_init ✅ 2s 2s +0%
shake128_release ✅ 2s 3s -33%
shake128x4_absorb_once ✅ 2s 4s -50%
shake128x4_squeezeblocks ✅ 2s 1s +100%
shake256_release ✅ 2s 5s -60%
shake256_squeeze ✅ 2s 2s +0%
sign_verify_pre_hash_internal ✅ 2s 3s -33%
sk_t0hat_get_poly ✅ 2s 3s -33%
sys_check_capability ✅ 2s 2s +0%
unpack_pk_t1 ✅ 2s 2s +0%
unpack_sk_s1hat ✅ 2s 3s -33%
unpack_sk_t0hat ✅ 2s 4s -50%
use_hint ✅ 2s 3s -33%
yvec_init ✅ 2s 4s -50%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid ✅ 1s 2s -50%
keccakf1600_permute ✅ 1s 2s -50%
keccakf1600x4_extract_bytes_native ✅ 1s 4s -75%
make_hint ✅ 1s 2s -50%
mld_keccakf1600x4_extract_bytes_c ✅ 1s 3s -67%
mld_value_barrier_i64 ✅ 1s 2s -50%
mld_value_barrier_u32 ✅ 1s 3s -67%
pack_sig_z ✅ 1s 3s -67%
polyveck_pack_w1 ✅ 1s 3s -67%
polyvecl_pointwise_acc_montgomery ✅ 1s 2s -50%
shake256x4_absorb_once ✅ 1s 5s -80%

@oqs-bot

oqs-bot commented Jul 17, 2026

Copy link
Copy Markdown
Contributor

CBMC Results (ML-DSA-87)

⚠️ Attention Required

Proof Status Current Previous Change
sign_signature_internal ⚠️ 75s 42s +79%
Full Results (210 proofs)
Proof Status Current Previous Change
**TOTAL** ✅ 2066s 2151s -4.0%
polyvecl_pointwise_acc_montgomery_c ✅ 331s 353s -6%
polyvec_matrix_expand ✅ 292s 324s -10%
poly_pointwise_montgomery_c ✅ 127s 144s -12%
mld_invntt_layer ✅ 113s 115s -2%
sign_verify_internal ✅ 76s 97s -22%
sign_signature_internal ⚠️ 75s 42s +79%
mld_attempt_signature_generation ✅ 55s 55s +0%
mld_ntt_layer ✅ 44s 45s -2%
fqmul ✅ 41s 43s -5%
polyvec_matrix_expand_serial ✅ 36s 38s -5%
keccakf1600x4_permute_native ✅ 21s 23s -9%
mld_ntt_butterfly_block ✅ 21s 24s -12%
poly_ntt_c ✅ 20s 21s -5%
compute_pack_t0_t1 ✅ 18s 19s -5%
polyeta_unpack ✅ 17s 17s +0%
polyvec_matrix_pointwise_montgomery_yvec ✅ 16s 18s -11%
polyt0_unpack ✅ 15s 14s +7%
rej_uniform ✅ 15s 15s +0%
poly_chknorm_c ✅ 14s 15s -7%
mld_check_pct ✅ 12s 16s -25%
poly_uniform_4x ✅ 12s 13s -8%
rej_uniform_c ✅ 12s 19s -37%
poly_invntt_tomont_c ✅ 11s 12s -8%
poly_uniform_eta_4x ✅ 10s 11s -9%
rej_uniform_native_x86_64 ✅ 10s - new
keccak_absorb_once_x4 ✅ 9s 9s +0%
polyvecl_ntt ✅ 9s 7s +29%
unpack_sk_t0hat ✅ 9s 7s +29%
mld_compute_pack_z ✅ 8s 8s +0%
polyveck_decompose ✅ 8s 13s -38%
polyveck_ntt ✅ 8s 11s -27%
sign_pk_from_sk ✅ 8s 6s +33%
sign_signature_pre_hash_shake256 ✅ 8s 6s +33%
mld_keccakf1600_permute_c ✅ 7s 7s +0%
pointwise_acc_native_x86_64 ✅ 7s 6s +17%
poly_add ✅ 7s 6s +17%
poly_challenge ✅ 7s 5s +40%
polyveck_caddq ✅ 7s 8s -12%
polyveck_invntt_tomont ✅ 7s 9s -22%
mld_ct_cmask_nonzero_u8 ✅ 6s 3s +100%
pointwise_acc_native_aarch64 ✅ 6s 6s +0%
poly_decompose_c ✅ 6s 5s +20%
polyveck_chknorm ✅ 6s 3s +100%
caddq ✅ 5s 4s +25%
intt_native_x86_64 ✅ 5s 3s +67%
keccak_init ✅ 5s 3s +67%
keccak_squeezeblocks_x4 ✅ 5s 4s +25%
make_hint ✅ 5s 3s +67%
mld_ct_cmask_nonzero_u32 ✅ 5s 2s +150%
mld_h ✅ 5s 3s +67%
mld_prepare_domain_separation_prefix ✅ 5s 4s +25%
mld_sample_s1_s2_serial ✅ 5s 8s -38%
ntt_native_aarch64 ✅ 5s 6s -17%
poly_caddq_native_x86_64 ✅ 5s 2s +150%
poly_pointwise_montgomery_native ✅ 5s 5s +0%
poly_use_hint_native_x86_64 ✅ 5s - new
polyt0_pack ✅ 5s 4s +25%
polyt1_unpack ✅ 5s 4s +25%
polyvecl_chknorm ✅ 5s 7s -29%
rej_eta_c ✅ 5s 5s +0%
shake256_release ✅ 5s 3s +67%
sign_keypair_internal ✅ 5s 6s -17%
sign_signature_extmu ✅ 5s 4s +25%
sign_signature_pre_hash_internal ✅ 5s 5s +0%
sign_verify_extmu ✅ 5s 3s +67%
sk_t0hat_get_poly ✅ 5s 4s +25%
unpack_pk_t1 ✅ 5s 1s +400%
unpack_sk ✅ 5s 5s +0%
keccak_absorb ✅ 4s 3s +33%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid ✅ 4s 3s +33%
keccak_finalize ✅ 4s 1s +300%
mld_sample_s1_s2 ✅ 4s 6s -33%
mld_sign_finish ✅ 4s - new
ntt_native_x86_64 ✅ 4s 2s +100%
pack_sig_c ✅ 4s 4s +0%
poly_chknorm_native_x86_64 ✅ 4s 2s +100%
poly_decompose_32_native_aarch64 ✅ 4s 5s -20%
poly_decompose_88_native_aarch64 ✅ 4s 2s +100%
poly_permute_bitrev_to_custom_optional ✅ 4s 3s +33%
poly_power2round ✅ 4s 3s +33%
poly_shiftl ✅ 4s 4s +0%
poly_uniform ✅ 4s 4s +0%
poly_uniform_gamma1 ✅ 4s 4s +0%
poly_use_hint_native ✅ 4s 3s +33%
polyt1_pack ✅ 4s 3s +33%
polyvec_matrix_pointwise_montgomery_row ✅ 4s 3s +33%
polyveck_pack_eta ✅ 4s 6s -33%
polyvecl_pack_eta ✅ 4s 3s +33%
polyvecl_pointwise_acc_montgomery ✅ 4s 5s -20%
polyw1_pack ✅ 4s 4s +0%
polyw1_pack_32 ✅ 4s 4s +0%
polyz_unpack_17_native_aarch64 ✅ 4s 3s +33%
polyz_unpack_c ✅ 4s 3s +33%
polyz_unpack_native_x86_64 ✅ 4s 3s +33%
rej_uniform_eta_native_aarch64 ✅ 4s 5s -20%
shake128_squeeze ✅ 4s 2s +100%
shake256x4_absorb_once ✅ 4s 2s +100%
sig_unpack_hints ✅ 4s 3s +33%
sign_signature ✅ 4s 5s -20%
sign_verify ✅ 4s 5s -20%
sign_verify_pre_hash_shake256 ✅ 4s 3s +33%
decompose ✅ 3s 3s +0%
fqscale ✅ 3s 3s +0%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid ✅ 3s 4s -25%
keccak_f1600_x4_native_avx2 ✅ 3s 2s +50%
keccakf1600_xor_bytes ✅ 3s 3s +0%
keccakf1600_xor_bytes (big endian) ✅ 3s 2s +50%
keccakf1600x4_extract_bytes_native ✅ 3s 2s +50%
keccakf1600x4_permute ✅ 3s 3s +0%
mld_ct_abs_i32 ✅ 3s 3s +0%
mld_ct_sel_int32 ✅ 3s 3s +0%
mld_keccakf1600x4_extract_bytes_c ✅ 3s 2s +50%
mld_keccakf1600x4_xor_bytes_c ✅ 3s 4s -25%
mld_polymat_expand_entry ✅ 3s 3s +0%
mld_sign_attempt ✅ 3s - new
mld_sign_resume ✅ 3s - new
mld_value_barrier_i64 ✅ 3s 1s +200%
mld_value_barrier_u32 ✅ 3s 2s +50%
montgomery_reduce ✅ 3s 3s +0%
nttunpack_native_x86_64 ✅ 3s 3s +0%
pack_sig_h ✅ 3s 4s -25%
pack_sig_z ✅ 3s 5s -40%
poly_caddq ✅ 3s 2s +50%
poly_caddq_c ✅ 3s 3s +0%
poly_caddq_native ✅ 3s 4s -25%
poly_caddq_native_aarch64 ✅ 3s 3s +0%
poly_chknorm_native_aarch64 ✅ 3s 4s -25%
poly_decompose_native ✅ 3s 2s +50%
poly_decompose_native_x86_64 ✅ 3s 2s +50%
poly_ntt ✅ 3s 3s +0%
poly_ntt_native ✅ 3s 3s +0%
poly_permute_bitrev_to_custom_optional_native ✅ 3s 5s -40%
poly_pointwise_montgomery ✅ 3s 4s -25%
poly_uniform_eta ✅ 3s 4s -25%
poly_use_hint_c ✅ 3s 2s +50%
poly_use_hint_native_aarch64 ✅ 3s 2s +50%
polyeta_pack ✅ 3s 4s -25%
polyveck_pack_w1 ✅ 3s 3s +0%
polyveck_unpack_eta ✅ 3s 4s -25%
polyvecl_uniform_gamma1 ✅ 3s 2s +50%
polyvecl_unpack_z ✅ 3s 4s -25%
power2round ✅ 3s 4s -25%
reduce32 ✅ 3s 3s +0%
rej_eta_native ✅ 3s 6s -50%
rej_uniform_eta_native_x86_64 ✅ 3s - new
rej_uniform_native ✅ 3s 8s -62%
rej_uniform_native_aarch64 ✅ 3s 2s +50%
shake128_absorb ✅ 3s 4s -25%
shake128x4_squeezeblocks ✅ 3s 3s +0%
shake256_init ✅ 3s 2s +50%
shake256_squeeze ✅ 3s 2s +50%
shake256x4_squeezeblocks ✅ 3s 1s +200%
sign_keypair ✅ 3s 4s -25%
sk_s1hat_get_poly ✅ 3s 3s +0%
unpack_sk_s1hat ✅ 3s 2s +50%
yvec_get_poly ✅ 3s 4s -25%
intt_native_aarch64 ✅ 2s 3s -33%
keccak_f1600_x1_native_aarch64 ✅ 2s 1s +100%
keccak_f1600_x1_native_aarch64_v84a ✅ 2s 1s +100%
keccak_squeeze ✅ 2s 2s +0%
keccakf1600_extract_bytes (big endian) ✅ 2s 3s -33%
keccakf1600_permute ✅ 2s 3s -33%
keccakf1600_permute_native ✅ 2s 4s -50%
keccakf1600x4_extract_bytes ✅ 2s 2s +0%
keccakf1600x4_xor_bytes_native ✅ 2s 3s -33%
mld_ct_cmask_neg_i32 ✅ 2s 4s -50%
mld_ct_get_optblocker_i64 ✅ 2s 3s -33%
mld_ct_get_optblocker_u8 ✅ 2s 3s -33%
mld_keccakf1600_extract_bytes ✅ 2s 4s -50%
mld_value_barrier_u8 ✅ 2s 3s -33%
pack_sk_rho_key_tr_s2 ✅ 2s 3s -33%
pack_sk_s1 ✅ 2s 1s +100%
pointwise_native_aarch64 ✅ 2s 5s -60%
poly_chknorm ✅ 2s 3s -33%
poly_chknorm_native ✅ 2s 4s -50%
poly_decompose ✅ 2s 3s -33%
poly_invntt_tomont ✅ 2s 1s +100%
poly_invntt_tomont_native ✅ 2s 5s -60%
poly_reduce ✅ 2s 2s +0%
poly_sub ✅ 2s 3s -33%
poly_uniform_gamma1_4x ✅ 2s 3s -33%
polyvecl_pointwise_acc_montgomery_native ✅ 2s 3s -33%
polyvecl_uniform_gamma1_serial ✅ 2s 4s -50%
polyvecl_unpack_eta ✅ 2s 5s -60%
polyw1_pack_88 ✅ 2s 3s -33%
polyz_pack ✅ 2s 5s -60%
polyz_unpack ✅ 2s 2s +0%
polyz_unpack_19_native_aarch64 ✅ 2s 4s -50%
polyz_unpack_native ✅ 2s 4s -50%
shake128_init ✅ 2s 1s +100%
shake128x4_absorb_once ✅ 2s 5s -60%
shake256 ✅ 2s 2s +0%
shake256_finalize ✅ 2s 2s +0%
sign_verify_pre_hash_internal ✅ 2s 3s -33%
sk_s2hat_get_poly ✅ 2s 3s -33%
sys_check_capability ✅ 2s 3s -33%
unpack_sk_s2hat ✅ 2s 3s -33%
use_hint ✅ 2s 3s -33%
yvec_init ✅ 2s 4s -50%
keccak_f1600_x4_native_aarch64_v84a ✅ 1s 4s -75%
keccakf1600x4_xor_bytes ✅ 1s 3s -67%
mld_ct_get_optblocker_u32 ✅ 1s 2s -50%
mld_ct_memcmp ✅ 1s 3s -67%
pointwise_native_x86_64 ✅ 1s 2s -50%
poly_use_hint ✅ 1s 1s +0%
polyveck_reduce ✅ 1s 3s -67%
rej_eta ✅ 1s 4s -75%
shake128_finalize ✅ 1s 2s -50%
shake128_release ✅ 1s 4s -75%
shake256_absorb ✅ 1s 2s -50%

@mkannwischer
mkannwischer marked this pull request as ready for review July 17, 2026 11:43
@mkannwischer
mkannwischer requested a review from a team as a code owner July 17, 2026 11:43
@hanno-becker
hanno-becker added this pull request to the merge queue Jul 20, 2026
Merged via the queue into main with commit 58ba9fe Jul 20, 2026
389 checks passed
@hanno-becker
hanno-becker deleted the liboqs-normalize-return-codes branch July 20, 2026 06:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@hanno-becker hanno-becker hanno-becker approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

liboqs integration: normalize return codes to OQS_STATUS

3 participants

@mkannwischer @oqs-bot @hanno-becker