Skip to content

CI: Update GitHub action dependencies#1260

Merged
mkannwischer merged 4 commits into
mainfrom
ci-update-github-actions
Jul 3, 2026
Merged

CI: Update GitHub action dependencies#1260
mkannwischer merged 4 commits into
mainfrom
ci-update-github-actions

Conversation

@oqs-bot

oqs-bot commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

CBMC Results (ML-DSA-44)

Full Results (204 proofs)
Proof Status Current Previous Change
**TOTAL** 1645s 1692s -2.8%
polyvecl_pointwise_acc_montgomery_c 160s 163s -2%
poly_pointwise_montgomery_c 142s 148s -4%
sign_verify_internal 127s 127s +0%
mld_invntt_layer 118s 122s -3%
mld_attempt_signature_generation 62s 65s -5%
compute_pack_t0_t1 52s 52s +0%
mld_ntt_layer 47s 46s +2%
fqmul 44s 41s +7%
polyvec_matrix_expand 28s 29s -3%
mld_ntt_butterfly_block 26s 24s +8%
sign_signature_internal 25s 25s +0%
poly_ntt_c 24s 23s +4%
keccakf1600x4_permute_native 23s 23s +0%
poly_chknorm_c 18s 13s +38%
polyt0_unpack 17s 16s +6%
mld_check_pct 16s 15s +7%
polyeta_unpack 16s 16s +0%
polyvec_matrix_pointwise_montgomery_yvec 16s 16s +0%
rej_uniform 16s 18s -11%
rej_uniform_c 16s 18s -11%
poly_uniform_4x 14s 13s +8%
poly_invntt_tomont_c 13s 11s +18%
poly_uniform_eta_4x 13s 12s +8%
keccak_absorb_once_x4 10s 11s -9%
polyvecl_chknorm 10s 11s -9%
polyz_unpack_c 10s 12s -17%
mld_keccakf1600_permute_c 8s 7s +14%
polyeta_pack 8s 4s +100%
rej_eta_native 7s 5s +40%
keccak_absorb 6s 6s +0%
mld_compute_pack_z 6s 7s -14%
pointwise_acc_native_x86_64 6s 4s +50%
poly_add 6s 7s -14%
poly_caddq 6s 4s +50%
poly_permute_bitrev_to_custom_optional_native 6s 2s +200%
polyveck_invntt_tomont 6s 5s +20%
polyvecl_uniform_gamma1 6s 3s +100%
sign_signature_extmu 6s 5s +20%
keccakf1600_xor_bytes (big endian) 5s 3s +67%
keccakf1600x4_xor_bytes 5s 4s +25%
mld_prepare_domain_separation_prefix 5s 3s +67%
poly_challenge 5s 5s +0%
poly_chknorm 5s 2s +150%
poly_chknorm_native_aarch64 5s 6s -17%
poly_permute_bitrev_to_custom_optional 5s 1s +400%
poly_uniform_eta 5s 4s +25%
polyvec_matrix_expand_serial 5s 7s -29%
polyveck_caddq 5s 6s -17%
polyveck_decompose 5s 6s -17%
polyveck_pack_eta 5s 6s -17%
polyz_unpack_19_native_aarch64 5s 3s +67%
rej_uniform_native 5s 5s +0%
shake256_finalize 5s 3s +67%
sign_keypair 5s 3s +67%
sign_pk_from_sk 5s 7s -29%
sign_verify_pre_hash_shake256 5s 3s +67%
keccak_f1600_x4_native_avx2 4s 1s +300%
keccakf1600x4_extract_bytes 4s 2s +100%
keccakf1600x4_permute 4s 3s +33%
mld_ct_cmask_nonzero_u32 4s 4s +0%
mld_sample_s1_s2 4s 6s -33%
montgomery_reduce 4s 2s +100%
ntt_native_x86_64 4s 3s +33%
pack_sig_c 4s 4s +0%
pointwise_acc_native_aarch64 4s 5s -20%
pointwise_native_aarch64 4s 7s -43%
poly_caddq_native 4s 5s -20%
poly_caddq_native_x86_64 4s 8s -50%
poly_chknorm_native_x86_64 4s 3s +33%
poly_decompose_88_native_aarch64 4s 3s +33%
poly_invntt_tomont_native 4s 3s +33%
poly_pointwise_montgomery_native 4s 5s -20%
poly_use_hint_c 4s 3s +33%
polyt0_pack 4s 5s -20%
polyt1_pack 4s 4s +0%
polyveck_ntt 4s 3s +33%
polyveck_pack_w1 4s 5s -20%
polyvecl_ntt 4s 4s +0%
polyvecl_pack_eta 4s 4s +0%
polyw1_pack 4s 2s +100%
polyw1_pack_32 4s 4s +0%
polyw1_pack_88 4s 5s -20%
reduce32 4s 2s +100%
rej_eta_c 4s 4s +0%
sign_keypair_internal 4s 3s +33%
sign_signature_pre_hash_internal 4s 3s +33%
sign_signature_pre_hash_shake256 4s 3s +33%
sign_verify_extmu 4s 7s -43%
unpack_sk_s1hat 4s 2s +100%
use_hint 4s 3s +33%
decompose 3s 3s +0%
fqscale 3s 3s +0%
intt_native_aarch64 3s 4s -25%
keccak_f1600_x1_native_aarch64 3s 2s +50%
keccak_f1600_x1_native_aarch64_v84a 3s 3s +0%
keccak_f1600_x4_native_aarch64_v84a 3s 3s +0%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid 3s 3s +0%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid 3s 5s -40%
keccak_squeezeblocks_x4 3s 6s -50%
keccakf1600_permute 3s 4s -25%
keccakf1600_permute_native 3s 2s +50%
keccakf1600x4_xor_bytes_native 3s 4s -25%
make_hint 3s 3s +0%
mld_ct_cmask_nonzero_u8 3s 3s +0%
mld_h 3s 2s +50%
mld_keccakf1600_extract_bytes 3s 2s +50%
mld_polymat_expand_entry 3s 4s -25%
mld_sample_s1_s2_serial 3s 3s +0%
mld_value_barrier_u8 3s 4s -25%
nttunpack_native_x86_64 3s 5s -40%
pack_sig_h 3s 3s +0%
pack_sk_rho_key_tr_s2 3s 4s -25%
poly_caddq_c 3s 2s +50%
poly_caddq_native_aarch64 3s 3s +0%
poly_decompose 3s 4s -25%
poly_decompose_32_native_aarch64 3s 3s +0%
poly_decompose_native 3s 3s +0%
poly_invntt_tomont 3s 1s +200%
poly_ntt 3s 5s -40%
poly_ntt_native 3s 4s -25%
poly_shiftl 3s 2s +50%
poly_sub 3s 3s +0%
poly_uniform 3s 5s -40%
poly_use_hint_native_aarch64 3s 6s -50%
polyt1_unpack 3s 4s -25%
polyveck_reduce 3s 1s +200%
polyveck_unpack_eta 3s 4s -25%
polyvecl_pointwise_acc_montgomery 3s 3s +0%
polyvecl_pointwise_acc_montgomery_native 3s 6s -50%
polyvecl_unpack_eta 3s 2s +50%
polyz_unpack 3s 3s +0%
polyz_unpack_17_native_aarch64 3s 4s -25%
polyz_unpack_native 3s 4s -25%
power2round 3s 3s +0%
rej_uniform_eta_native_aarch64 3s 4s -25%
rej_uniform_native_aarch64 3s 4s -25%
shake128_init 3s 2s +50%
shake128_release 3s 2s +50%
shake256 3s 4s -25%
shake256_init 3s 3s +0%
shake256_release 3s 1s +200%
shake256x4_squeezeblocks 3s 4s -25%
sig_unpack_hints 3s 2s +50%
sign_signature 3s 4s -25%
sign_verify_pre_hash_internal 3s 4s -25%
sk_s2hat_get_poly 3s 4s -25%
unpack_pk_t1 3s 2s +50%
unpack_sk 3s 4s -25%
yvec_init 3s 4s -25%
caddq 2s 3s -33%
intt_native_x86_64 2s 3s -33%
keccak_finalize 2s 3s -33%
keccak_init 2s 2s +0%
keccak_squeeze 2s 1s +100%
mld_ct_cmask_neg_i32 2s 4s -50%
mld_ct_get_optblocker_i64 2s 2s +0%
mld_ct_get_optblocker_u32 2s 4s -50%
mld_ct_get_optblocker_u8 2s 4s -50%
mld_ct_memcmp 2s 2s +0%
mld_ct_sel_int32 2s 3s -33%
mld_keccakf1600x4_extract_bytes_c 2s 2s +0%
mld_value_barrier_i64 2s 1s +100%
mld_value_barrier_u32 2s 3s -33%
ntt_native_aarch64 2s 4s -50%
pack_sig_z 2s 4s -50%
pack_sk_s1 2s 2s +0%
pointwise_native_x86_64 2s 3s -33%
poly_chknorm_native 2s 4s -50%
poly_decompose_c 2s 5s -60%
poly_decompose_native_x86_64 2s 3s -33%
poly_pointwise_montgomery 2s 4s -50%
poly_power2round 2s 1s +100%
poly_reduce 2s 3s -33%
poly_uniform_gamma1_4x 2s 4s -50%
poly_use_hint 2s 2s +0%
poly_use_hint_native 2s 3s -33%
polyvec_matrix_pointwise_montgomery_row 2s 2s +0%
polyveck_chknorm 2s 5s -60%
polyvecl_uniform_gamma1_serial 2s 2s +0%
polyz_pack 2s 3s -33%
polyz_unpack_native_x86_64 2s 2s +0%
rej_eta 2s 4s -50%
shake128_absorb 2s 2s +0%
shake128_finalize 2s 2s +0%
shake128_squeeze 2s 5s -60%
shake128x4_absorb_once 2s 3s -33%
shake128x4_squeezeblocks 2s 3s -33%
shake256_absorb 2s 2s +0%
shake256_squeeze 2s 2s +0%
shake256x4_absorb_once 2s 1s +100%
sign_verify 2s 7s -71%
sk_s1hat_get_poly 2s 3s -33%
sk_t0hat_get_poly 2s 3s -33%
unpack_sk_s2hat 2s 2s +0%
unpack_sk_t0hat 2s 3s -33%
yvec_get_poly 2s 2s +0%
keccakf1600_extract_bytes (big endian) 1s 3s -67%
keccakf1600_xor_bytes 1s 2s -50%
keccakf1600x4_extract_bytes_native 1s 3s -67%
mld_ct_abs_i32 1s 2s -50%
mld_keccakf1600x4_xor_bytes_c 1s 2s -50%
poly_uniform_gamma1 1s 3s -67%
polyvecl_unpack_z 1s 3s -67%
sys_check_capability 1s 3s -67%

@oqs-bot

oqs-bot commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

CBMC Results (ML-DSA-44, REDUCE-RAM)

Full Results (204 proofs)
Proof Status Current Previous Change
**TOTAL** 1489s 1377s +8.1%
polyvec_matrix_pointwise_montgomery_yvec 167s 157s +6%
poly_pointwise_montgomery_c 136s 119s +14%
mld_invntt_layer 124s 112s +11%
polyveck_chknorm 74s 66s +12%
sign_verify_internal 55s 50s +10%
mld_ntt_layer 48s 44s +9%
fqmul 46s 40s +15%
mld_ntt_butterfly_block 26s 21s +24%
poly_ntt_c 24s 19s +26%
keccakf1600x4_permute_native 23s 22s +5%
mld_attempt_signature_generation 21s 20s +5%
rej_uniform_c 19s 16s +19%
compute_pack_t0_t1 16s 11s +45%
poly_invntt_tomont_c 16s 10s +60%
polyeta_unpack 15s 13s +15%
mld_check_pct 14s 12s +17%
poly_chknorm_c 14s 10s +40%
polyt0_unpack 14s 13s +8%
polyvecl_chknorm 13s 12s +8%
keccak_absorb_once_x4 12s 9s +33%
poly_uniform_eta_4x 12s 11s +9%
polyz_unpack_c 10s 7s +43%
rej_uniform 9s 9s +0%
poly_add 8s 6s +33%
polyveck_decompose 8s 7s +14%
mld_keccakf1600_permute_c 7s 7s +0%
poly_decompose_c 7s 5s +40%
sign_pk_from_sk 7s 4s +75%
poly_power2round 6s 5s +20%
poly_reduce 6s 6s +0%
polyveck_invntt_tomont 6s 4s +50%
sign_signature_extmu 6s 5s +20%
sign_verify 6s 6s +0%
sign_verify_pre_hash_internal 6s 3s +100%
sign_verify_pre_hash_shake256 6s 6s +0%
decompose 5s 3s +67%
intt_native_x86_64 5s 2s +150%
mld_compute_pack_z 5s 8s -38%
mld_keccakf1600x4_extract_bytes_c 5s 2s +150%
mld_polymat_expand_entry 5s 3s +67%
montgomery_reduce 5s 5s +0%
pointwise_acc_native_aarch64 5s 6s -17%
pointwise_acc_native_x86_64 5s 7s -29%
poly_chknorm_native 5s 4s +25%
poly_use_hint_native 5s 1s +400%
polyeta_pack 5s 3s +67%
polyvec_matrix_pointwise_montgomery_row 5s 7s -29%
polyveck_pack_eta 5s 3s +67%
polyveck_reduce 5s 7s -29%
polyvecl_pack_eta 5s 3s +67%
polyw1_pack 5s 2s +150%
polyz_unpack_17_native_aarch64 5s 3s +67%
reduce32 5s 5s +0%
sign_keypair 5s 3s +67%
sign_signature 5s 3s +67%
sign_signature_internal 5s 7s -29%
unpack_sk_s1hat 5s 3s +67%
intt_native_aarch64 4s 2s +100%
keccak_absorb 4s 3s +33%
keccak_squeeze 4s 1s +300%
keccak_squeezeblocks_x4 4s 3s +33%
keccakf1600_extract_bytes (big endian) 4s 4s +0%
keccakf1600_xor_bytes 4s 1s +300%
make_hint 4s 2s +100%
mld_ct_cmask_nonzero_u8 4s 3s +33%
mld_ct_get_optblocker_i64 4s 2s +100%
mld_ct_memcmp 4s 3s +33%
mld_prepare_domain_separation_prefix 4s 4s +0%
mld_sample_s1_s2 4s 2s +100%
mld_sample_s1_s2_serial 4s 4s +0%
ntt_native_aarch64 4s 6s -33%
nttunpack_native_x86_64 4s 4s +0%
pack_sig_c 4s 1s +300%
pack_sig_z 4s 3s +33%
poly_caddq 4s 2s +100%
poly_challenge 4s 6s -33%
poly_decompose_32_native_aarch64 4s 4s +0%
poly_decompose_native 4s 2s +100%
poly_invntt_tomont 4s 2s +100%
poly_invntt_tomont_native 4s 2s +100%
poly_ntt_native 4s 2s +100%
poly_uniform_eta 4s 3s +33%
poly_use_hint 4s 6s -33%
polyveck_ntt 4s 2s +100%
polyvecl_ntt 4s 3s +33%
rej_eta 4s 3s +33%
rej_eta_native 4s 5s -20%
rej_uniform_native 4s 6s -33%
shake256_absorb 4s 2s +100%
shake256x4_absorb_once 4s 1s +300%
shake256x4_squeezeblocks 4s 4s +0%
sign_signature_pre_hash_shake256 4s 3s +33%
sign_verify_extmu 4s 3s +33%
sys_check_capability 4s 1s +300%
yvec_get_poly 4s 3s +33%
fqscale 3s 2s +50%
keccakf1600_permute 3s 3s +0%
keccakf1600x4_permute 3s 1s +200%
keccakf1600x4_xor_bytes 3s 2s +50%
mld_ct_cmask_nonzero_u32 3s 2s +50%
mld_keccakf1600_extract_bytes 3s 3s +0%
mld_keccakf1600x4_xor_bytes_c 3s 3s +0%
mld_value_barrier_i64 3s 2s +50%
mld_value_barrier_u8 3s 2s +50%
poly_caddq_c 3s 3s +0%
poly_caddq_native 3s 2s +50%
poly_chknorm_native_aarch64 3s 3s +0%
poly_chknorm_native_x86_64 3s 3s +0%
poly_decompose 3s 2s +50%
poly_pointwise_montgomery_native 3s 5s -40%
poly_shiftl 3s 3s +0%
poly_uniform 3s 6s -50%
poly_uniform_4x 3s 3s +0%
poly_uniform_gamma1 3s 4s -25%
poly_use_hint_c 3s 2s +50%
poly_use_hint_native_aarch64 3s 3s +0%
polyt1_pack 3s 2s +50%
polyvec_matrix_expand 3s 2s +50%
polyvecl_pointwise_acc_montgomery_c 3s 5s -40%
polyvecl_pointwise_acc_montgomery_native 3s 2s +50%
polyvecl_uniform_gamma1 3s 2s +50%
polyvecl_uniform_gamma1_serial 3s 3s +0%
polyvecl_unpack_eta 3s 3s +0%
polyvecl_unpack_z 3s 2s +50%
polyw1_pack_32 3s 2s +50%
polyz_unpack 3s 2s +50%
rej_uniform_eta_native_aarch64 3s 2s +50%
shake128x4_squeezeblocks 3s 4s -25%
shake256 3s 3s +0%
shake256_init 3s 1s +200%
sig_unpack_hints 3s 3s +0%
sign_keypair_internal 3s 4s -25%
sign_signature_pre_hash_internal 3s 4s -25%
unpack_sk_s2hat 3s 3s +0%
unpack_sk_t0hat 3s 2s +50%
caddq 2s 5s -60%
keccak_f1600_x1_native_aarch64 2s 2s +0%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid 2s 1s +100%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid 2s 1s +100%
keccak_init 2s 2s +0%
keccakf1600x4_extract_bytes_native 2s 5s -60%
keccakf1600x4_xor_bytes_native 2s 2s +0%
mld_ct_abs_i32 2s 4s -50%
mld_ct_get_optblocker_u32 2s 3s -33%
mld_ct_get_optblocker_u8 2s 1s +100%
mld_ct_sel_int32 2s 2s +0%
mld_h 2s 5s -60%
mld_value_barrier_u32 2s 2s +0%
ntt_native_x86_64 2s 3s -33%
pack_sig_h 2s 4s -50%
pack_sk_rho_key_tr_s2 2s 3s -33%
pack_sk_s1 2s 3s -33%
pointwise_native_aarch64 2s 2s +0%
pointwise_native_x86_64 2s 5s -60%
poly_caddq_native_aarch64 2s 3s -33%
poly_caddq_native_x86_64 2s 2s +0%
poly_decompose_88_native_aarch64 2s 3s -33%
poly_decompose_native_x86_64 2s 3s -33%
poly_permute_bitrev_to_custom_optional 2s 2s +0%
poly_permute_bitrev_to_custom_optional_native 2s 4s -50%
poly_pointwise_montgomery 2s 2s +0%
poly_uniform_gamma1_4x 2s 3s -33%
polyt0_pack 2s 4s -50%
polyt1_unpack 2s 2s +0%
polyvec_matrix_expand_serial 2s 2s +0%
polyveck_caddq 2s 3s -33%
polyveck_unpack_eta 2s 4s -50%
polyvecl_pointwise_acc_montgomery 2s 3s -33%
polyw1_pack_88 2s 3s -33%
polyz_unpack_native_x86_64 2s 1s +100%
power2round 2s 3s -33%
rej_eta_c 2s 5s -60%
rej_uniform_native_aarch64 2s 3s -33%
shake128_init 2s 4s -50%
shake128_squeeze 2s 3s -33%
shake128x4_absorb_once 2s 1s +100%
shake256_finalize 2s 5s -60%
shake256_release 2s 2s +0%
shake256_squeeze 2s 3s -33%
sk_s1hat_get_poly 2s 4s -50%
sk_s2hat_get_poly 2s 1s +100%
sk_t0hat_get_poly 2s 4s -50%
unpack_pk_t1 2s 3s -33%
unpack_sk 2s 3s -33%
use_hint 2s 1s +100%
yvec_init 2s 1s +100%
keccak_f1600_x1_native_aarch64_v84a 1s 4s -75%
keccak_f1600_x4_native_aarch64_v84a 1s 1s +0%
keccak_f1600_x4_native_avx2 1s 2s -50%
keccak_finalize 1s 2s -50%
keccakf1600_permute_native 1s 5s -80%
keccakf1600_xor_bytes (big endian) 1s 3s -67%
keccakf1600x4_extract_bytes 1s 3s -67%
mld_ct_cmask_neg_i32 1s 2s -50%
poly_chknorm 1s 5s -80%
poly_ntt 1s 3s -67%
poly_sub 1s 2s -50%
polyveck_pack_w1 1s 5s -80%
polyz_pack 1s 2s -50%
polyz_unpack_19_native_aarch64 1s 5s -80%
polyz_unpack_native 1s 1s +0%
shake128_absorb 1s 2s -50%
shake128_finalize 1s 2s -50%
shake128_release 1s 3s -67%

@oqs-bot

oqs-bot commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

CBMC Results (ML-DSA-65, REDUCE-RAM)

Full Results (204 proofs)
Proof Status Current Previous Change
**TOTAL** 1457s 1685s -13.5%
polyvec_matrix_pointwise_montgomery_yvec 196s 236s -17%
poly_pointwise_montgomery_c 117s 161s -27%
mld_invntt_layer 111s 132s -16%
sign_verify_internal 71s 79s -10%
mld_ntt_layer 44s 48s -8%
fqmul 43s 48s -10%
polyvecl_chknorm 40s 51s -22%
polyveck_chknorm 32s 40s -20%
mld_attempt_signature_generation 31s 37s -16%
keccakf1600x4_permute_native 24s 24s +0%
mld_ntt_butterfly_block 22s 26s -15%
poly_ntt_c 21s 26s -19%
rej_uniform_c 15s 18s -17%
poly_chknorm_c 13s 14s -7%
poly_invntt_tomont_c 12s 14s -14%
poly_uniform_eta_4x 12s 13s -8%
mld_check_pct 11s 14s -21%
polyt0_unpack 11s 14s -21%
polyveck_decompose 11s 14s -21%
polyz_unpack_c 11s 9s +22%
keccak_absorb_once_x4 9s 11s -18%
polyvec_matrix_pointwise_montgomery_row 9s 10s -10%
sign_pk_from_sk 9s 10s -10%
compute_pack_t0_t1 8s 8s +0%
poly_add 8s 8s +0%
rej_uniform 8s 7s +14%
pointwise_acc_native_aarch64 7s 5s +40%
pointwise_acc_native_x86_64 7s 5s +40%
poly_decompose_c 7s 8s -12%
polyvecl_ntt 7s 7s +0%
keccak_squeezeblocks_x4 6s 4s +50%
mld_compute_pack_z 6s 4s +50%
mld_keccakf1600_permute_c 6s 8s -25%
mld_sample_s1_s2_serial 6s 4s +50%
pack_sig_c 6s 2s +200%
poly_power2round 6s 6s +0%
sign_keypair_internal 6s 4s +50%
mld_h 5s 3s +67%
mld_sample_s1_s2 5s 5s +0%
nttunpack_native_x86_64 5s 3s +67%
poly_caddq_c 5s 5s +0%
poly_invntt_tomont_native 5s 5s +0%
poly_ntt 5s 4s +25%
poly_pointwise_montgomery 5s 8s -38%
polyt0_pack 5s 3s +67%
polyveck_caddq 5s 8s -38%
polyveck_invntt_tomont 5s 6s -17%
polyveck_reduce 5s 8s -38%
polyvecl_uniform_gamma1_serial 5s 2s +150%
rej_eta_c 5s 5s +0%
shake128_absorb 5s 2s +150%
sign_signature_internal 5s 4s +25%
sign_verify_pre_hash_internal 5s 4s +25%
decompose 4s 2s +100%
keccak_absorb 4s 5s -20%
keccakf1600x4_extract_bytes_native 4s 1s +300%
keccakf1600x4_permute 4s 1s +300%
mld_ct_get_optblocker_u32 4s 4s +0%
mld_ct_memcmp 4s 2s +100%
pack_sk_s1 4s 2s +100%
pointwise_native_x86_64 4s 6s -33%
poly_chknorm_native_x86_64 4s 3s +33%
poly_permute_bitrev_to_custom_optional_native 4s 3s +33%
poly_reduce 4s 5s -20%
poly_uniform 4s 5s -20%
poly_uniform_4x 4s 4s +0%
poly_uniform_gamma1 4s 3s +33%
poly_use_hint 4s 2s +100%
polyeta_unpack 4s 3s +33%
polyveck_unpack_eta 4s 3s +33%
polyvecl_pack_eta 4s 2s +100%
polyvecl_pointwise_acc_montgomery 4s 3s +33%
polyz_unpack_19_native_aarch64 4s 2s +100%
polyz_unpack_native_x86_64 4s 5s -20%
rej_eta 4s 4s +0%
rej_eta_native 4s 3s +33%
rej_uniform_eta_native_aarch64 4s 4s +0%
rej_uniform_native 4s 5s -20%
sign_signature_extmu 4s 3s +33%
sign_signature_pre_hash_internal 4s 7s -43%
sign_verify 4s 5s -20%
sign_verify_extmu 4s 4s +0%
sign_verify_pre_hash_shake256 4s 4s +0%
sk_t0hat_get_poly 4s 2s +100%
unpack_sk_s2hat 4s 3s +33%
caddq 3s 5s -40%
keccak_f1600_x1_native_aarch64 3s 2s +50%
keccak_finalize 3s 2s +50%
keccak_squeeze 3s 5s -40%
keccakf1600_extract_bytes (big endian) 3s 3s +0%
make_hint 3s 3s +0%
mld_ct_abs_i32 3s 3s +0%
mld_ct_cmask_neg_i32 3s 3s +0%
mld_ct_cmask_nonzero_u32 3s 2s +50%
mld_ct_sel_int32 3s 2s +50%
mld_keccakf1600_extract_bytes 3s 1s +200%
mld_keccakf1600x4_extract_bytes_c 3s 3s +0%
mld_prepare_domain_separation_prefix 3s 5s -40%
mld_value_barrier_u32 3s 3s +0%
ntt_native_aarch64 3s 4s -25%
pack_sig_z 3s 4s -25%
pack_sk_rho_key_tr_s2 3s 6s -50%
poly_caddq 3s 3s +0%
poly_caddq_native 3s 4s -25%
poly_caddq_native_aarch64 3s 2s +50%
poly_challenge 3s 3s +0%
poly_chknorm_native 3s 3s +0%
poly_decompose 3s 4s -25%
poly_decompose_native 3s 3s +0%
poly_invntt_tomont 3s 5s -40%
poly_ntt_native 3s 3s +0%
poly_permute_bitrev_to_custom_optional 3s 3s +0%
poly_sub 3s 1s +200%
poly_use_hint_c 3s 2s +50%
poly_use_hint_native 3s 3s +0%
poly_use_hint_native_aarch64 3s 3s +0%
polyeta_pack 3s 3s +0%
polyvec_matrix_expand 3s 3s +0%
polyvec_matrix_expand_serial 3s 3s +0%
polyveck_ntt 3s 3s +0%
polyveck_pack_w1 3s 3s +0%
polyvecl_pointwise_acc_montgomery_native 3s 3s +0%
polyvecl_uniform_gamma1 3s 3s +0%
polyvecl_unpack_eta 3s 1s +200%
polyvecl_unpack_z 3s 2s +50%
polyw1_pack 3s 1s +200%
polyw1_pack_32 3s 3s +0%
polyw1_pack_88 3s 3s +0%
polyz_unpack 3s 4s -25%
polyz_unpack_native 3s 3s +0%
shake128_init 3s 3s +0%
shake128x4_squeezeblocks 3s 3s +0%
shake256 3s 4s -25%
shake256_finalize 3s 5s -40%
shake256_release 3s 6s -50%
shake256x4_squeezeblocks 3s 3s +0%
sign_keypair 3s 7s -57%
sign_signature 3s 5s -40%
sk_s2hat_get_poly 3s 4s -25%
unpack_sk_s1hat 3s 3s +0%
unpack_sk_t0hat 3s 3s +0%
fqscale 2s 2s +0%
intt_native_aarch64 2s 4s -50%
intt_native_x86_64 2s 4s -50%
keccak_f1600_x1_native_aarch64_v84a 2s 4s -50%
keccak_f1600_x4_native_aarch64_v84a 2s 2s +0%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid 2s 3s -33%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid 2s 3s -33%
keccak_f1600_x4_native_avx2 2s 4s -50%
keccak_init 2s 2s +0%
keccakf1600_permute_native 2s 3s -33%
keccakf1600_xor_bytes 2s 3s -33%
keccakf1600_xor_bytes (big endian) 2s 2s +0%
keccakf1600x4_extract_bytes 2s 5s -60%
keccakf1600x4_xor_bytes 2s 2s +0%
keccakf1600x4_xor_bytes_native 2s 3s -33%
mld_ct_cmask_nonzero_u8 2s 4s -50%
mld_ct_get_optblocker_u8 2s 1s +100%
ntt_native_x86_64 2s 3s -33%
pack_sig_h 2s 5s -60%
pointwise_native_aarch64 2s 2s +0%
poly_caddq_native_x86_64 2s 2s +0%
poly_chknorm 2s 4s -50%
poly_chknorm_native_aarch64 2s 4s -50%
poly_decompose_88_native_aarch64 2s 5s -60%
poly_decompose_native_x86_64 2s 5s -60%
poly_pointwise_montgomery_native 2s 2s +0%
poly_shiftl 2s 4s -50%
poly_uniform_eta 2s 5s -60%
poly_uniform_gamma1_4x 2s 2s +0%
polyt1_pack 2s 3s -33%
polyveck_pack_eta 2s 2s +0%
polyvecl_pointwise_acc_montgomery_c 2s 1s +100%
polyz_pack 2s 2s +0%
polyz_unpack_17_native_aarch64 2s 4s -50%
reduce32 2s 2s +0%
rej_uniform_native_aarch64 2s 3s -33%
shake128_release 2s 3s -33%
shake128_squeeze 2s 3s -33%
shake128x4_absorb_once 2s 4s -50%
shake256_absorb 2s 4s -50%
shake256_init 2s 4s -50%
shake256_squeeze 2s 4s -50%
shake256x4_absorb_once 2s 1s +100%
sig_unpack_hints 2s 5s -60%
sign_signature_pre_hash_shake256 2s 3s -33%
sk_s1hat_get_poly 2s 3s -33%
sys_check_capability 2s 1s +100%
unpack_sk 2s 4s -50%
use_hint 2s 3s -33%
keccakf1600_permute 1s 2s -50%
mld_ct_get_optblocker_i64 1s 1s +0%
mld_keccakf1600x4_xor_bytes_c 1s 2s -50%
mld_polymat_expand_entry 1s 3s -67%
mld_value_barrier_i64 1s 3s -67%
mld_value_barrier_u8 1s 3s -67%
montgomery_reduce 1s 2s -50%
poly_decompose_32_native_aarch64 1s 5s -80%
polyt1_unpack 1s 2s -50%
power2round 1s 3s -67%
shake128_finalize 1s 2s -50%
unpack_pk_t1 1s 2s -50%
yvec_get_poly 1s 2s -50%
yvec_init 1s 4s -75%

@oqs-bot

oqs-bot commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

CBMC Results (ML-DSA-65)

Full Results (204 proofs)
Proof Status Current Previous Change
**TOTAL** 1881s 1793s +4.9%
polyvecl_pointwise_acc_montgomery_c 246s 203s +21%
sign_verify_internal 178s 177s +1%
poly_pointwise_montgomery_c 129s 120s +7%
mld_invntt_layer 114s 105s +9%
polyvec_matrix_expand 114s 109s +5%
mld_attempt_signature_generation 67s 66s +2%
sign_signature_internal 55s 60s -8%
mld_ntt_layer 46s 41s +12%
fqmul 42s 39s +8%
polyvec_matrix_expand_serial 28s 30s -7%
keccakf1600x4_permute_native 24s 23s +4%
mld_ntt_butterfly_block 21s 21s +0%
poly_ntt_c 20s 17s +18%
polyvec_matrix_pointwise_montgomery_yvec 20s 22s -9%
polyveck_decompose 16s 12s +33%
rej_uniform 16s 15s +7%
rej_uniform_c 16s 15s +7%
poly_chknorm_c 15s 15s +0%
polyt0_unpack 15s 12s +25%
compute_pack_t0_t1 14s 14s +0%
mld_check_pct 14s 14s +0%
poly_uniform_4x 14s 14s +0%
poly_uniform_eta_4x 12s 13s -8%
polyz_unpack_c 12s 12s +0%
poly_invntt_tomont_c 11s 10s +10%
polyveck_invntt_tomont 10s 8s +25%
keccak_absorb_once_x4 9s 9s +0%
mld_compute_pack_z 9s 8s +12%
mld_keccakf1600_permute_c 8s 6s +33%
poly_use_hint_c 8s 6s +33%
rej_uniform_native 8s 5s +60%
poly_add 7s 8s -12%
polyeta_unpack 7s 4s +75%
polyveck_caddq 7s 5s +40%
polyveck_ntt 7s 6s +17%
sig_unpack_hints 7s 4s +75%
mld_sample_s1_s2 6s 4s +50%
pointwise_acc_native_aarch64 6s 5s +20%
poly_decompose_native 6s 5s +20%
polyveck_chknorm 6s 6s +0%
polyvecl_chknorm 6s 5s +20%
unpack_pk_t1 6s 2s +200%
unpack_sk 6s 5s +20%
keccak_squeezeblocks_x4 5s 5s +0%
mld_polymat_expand_entry 5s 3s +67%
mld_value_barrier_i64 5s 2s +150%
pack_sig_c 5s 3s +67%
pointwise_acc_native_x86_64 5s 5s +0%
pointwise_native_aarch64 5s 4s +25%
poly_challenge 5s 5s +0%
poly_decompose_c 5s 4s +25%
poly_ntt_native 5s 4s +25%
poly_shiftl 5s 3s +67%
polyveck_unpack_eta 5s 2s +150%
polyvecl_ntt 5s 7s -29%
polyz_unpack_19_native_aarch64 5s 3s +67%
sign_signature_pre_hash_shake256 5s 4s +25%
sign_verify 5s 4s +25%
unpack_sk_t0hat 5s 9s -44%
keccak_absorb 4s 4s +0%
keccak_f1600_x1_native_aarch64 4s 2s +100%
keccak_f1600_x4_native_aarch64_v84a 4s 2s +100%
keccak_init 4s 2s +100%
keccakf1600x4_extract_bytes 4s 3s +33%
keccakf1600x4_xor_bytes_native 4s 1s +300%
mld_ct_cmask_nonzero_u8 4s 3s +33%
mld_ct_memcmp 4s 2s +100%
mld_keccakf1600x4_xor_bytes_c 4s 4s +0%
ntt_native_x86_64 4s 3s +33%
pack_sig_z 4s 3s +33%
pointwise_native_x86_64 4s 4s +0%
poly_caddq_c 4s 3s +33%
poly_caddq_native 4s 6s -33%
poly_caddq_native_aarch64 4s 2s +100%
poly_caddq_native_x86_64 4s 3s +33%
poly_chknorm_native_x86_64 4s 4s +0%
poly_decompose_88_native_aarch64 4s 4s +0%
poly_decompose_native_x86_64 4s 3s +33%
poly_ntt 4s 3s +33%
poly_power2round 4s 2s +100%
polyt1_pack 4s 2s +100%
polyt1_unpack 4s 7s -43%
polyveck_pack_w1 4s 2s +100%
polyvecl_pointwise_acc_montgomery_native 4s 5s -20%
polyvecl_uniform_gamma1_serial 4s 3s +33%
polyvecl_unpack_z 4s 2s +100%
polyz_unpack 4s 4s +0%
polyz_unpack_native_x86_64 4s 1s +300%
power2round 4s 3s +33%
rej_eta_native 4s 4s +0%
shake128x4_absorb_once 4s 2s +100%
shake256_finalize 4s 1s +300%
shake256_squeeze 4s 2s +100%
shake256x4_absorb_once 4s 1s +300%
sign_keypair_internal 4s 2s +100%
sign_pk_from_sk 4s 6s -33%
sign_signature_extmu 4s 3s +33%
sk_s1hat_get_poly 4s 2s +100%
unpack_sk_s2hat 4s 3s +33%
yvec_get_poly 4s 4s +0%
yvec_init 4s 4s +0%
caddq 3s 3s +0%
decompose 3s 2s +50%
intt_native_x86_64 3s 3s +0%
keccak_f1600_x4_native_avx2 3s 1s +200%
keccak_squeeze 3s 1s +200%
keccakf1600_extract_bytes (big endian) 3s 2s +50%
keccakf1600x4_permute 3s 4s -25%
make_hint 3s 3s +0%
mld_ct_cmask_nonzero_u32 3s 1s +200%
mld_ct_get_optblocker_u32 3s 4s -25%
mld_ct_sel_int32 3s 2s +50%
mld_sample_s1_s2_serial 3s 4s -25%
montgomery_reduce 3s 2s +50%
ntt_native_aarch64 3s 3s +0%
pack_sig_h 3s 4s -25%
pack_sk_s1 3s 3s +0%
poly_chknorm 3s 2s +50%
poly_chknorm_native 3s 3s +0%
poly_decompose 3s 1s +200%
poly_decompose_32_native_aarch64 3s 5s -40%
poly_invntt_tomont_native 3s 4s -25%
poly_permute_bitrev_to_custom_optional 3s 5s -40%
poly_permute_bitrev_to_custom_optional_native 3s 3s +0%
poly_pointwise_montgomery_native 3s 3s +0%
poly_reduce 3s 3s +0%
poly_uniform_eta 3s 3s +0%
poly_uniform_gamma1 3s 2s +50%
poly_uniform_gamma1_4x 3s 5s -40%
poly_use_hint_native 3s 2s +50%
poly_use_hint_native_aarch64 3s 3s +0%
polyeta_pack 3s 2s +50%
polyt0_pack 3s 4s -25%
polyvec_matrix_pointwise_montgomery_row 3s 4s -25%
polyveck_reduce 3s 4s -25%
polyvecl_pack_eta 3s 4s -25%
polyvecl_unpack_eta 3s 5s -40%
polyw1_pack_32 3s 2s +50%
polyw1_pack_88 3s 2s +50%
rej_eta_c 3s 4s -25%
rej_uniform_eta_native_aarch64 3s 4s -25%
shake128_finalize 3s 3s +0%
shake128_release 3s 1s +200%
shake256x4_squeezeblocks 3s 1s +200%
sign_signature 3s 3s +0%
sign_signature_pre_hash_internal 3s 6s -50%
sign_verify_extmu 3s 4s -25%
unpack_sk_s1hat 3s 2s +50%
fqscale 2s 4s -50%
intt_native_aarch64 2s 3s -33%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid 2s 2s +0%
keccakf1600_permute 2s 2s +0%
keccakf1600_permute_native 2s 1s +100%
keccakf1600_xor_bytes 2s 2s +0%
keccakf1600_xor_bytes (big endian) 2s 6s -67%
keccakf1600x4_extract_bytes_native 2s 2s +0%
keccakf1600x4_xor_bytes 2s 2s +0%
mld_ct_abs_i32 2s 2s +0%
mld_ct_cmask_neg_i32 2s 3s -33%
mld_ct_get_optblocker_i64 2s 3s -33%
mld_h 2s 7s -71%
mld_keccakf1600_extract_bytes 2s 3s -33%
mld_prepare_domain_separation_prefix 2s 3s -33%
mld_value_barrier_u8 2s 4s -50%
nttunpack_native_x86_64 2s 3s -33%
poly_caddq 2s 3s -33%
poly_chknorm_native_aarch64 2s 3s -33%
poly_invntt_tomont 2s 4s -50%
poly_pointwise_montgomery 2s 4s -50%
poly_sub 2s 2s +0%
poly_uniform 2s 4s -50%
poly_use_hint 2s 4s -50%
polyveck_pack_eta 2s 2s +0%
polyvecl_pointwise_acc_montgomery 2s 5s -60%
polyvecl_uniform_gamma1 2s 3s -33%
polyz_pack 2s 2s +0%
polyz_unpack_17_native_aarch64 2s 3s -33%
polyz_unpack_native 2s 2s +0%
reduce32 2s 2s +0%
rej_eta 2s 5s -60%
rej_uniform_native_aarch64 2s 3s -33%
shake128_absorb 2s 2s +0%
shake128_init 2s 4s -50%
shake128_squeeze 2s 2s +0%
shake128x4_squeezeblocks 2s 2s +0%
shake256 2s 4s -50%
shake256_absorb 2s 3s -33%
shake256_init 2s 3s -33%
shake256_release 2s 3s -33%
sign_keypair 2s 5s -60%
sign_verify_pre_hash_internal 2s 6s -67%
sign_verify_pre_hash_shake256 2s 4s -50%
sk_s2hat_get_poly 2s 3s -33%
sk_t0hat_get_poly 2s 4s -50%
sys_check_capability 2s 5s -60%
use_hint 2s 3s -33%
keccak_f1600_x1_native_aarch64_v84a 1s 3s -67%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid 1s 1s +0%
keccak_finalize 1s 3s -67%
mld_ct_get_optblocker_u8 1s 2s -50%
mld_keccakf1600x4_extract_bytes_c 1s 3s -67%
mld_value_barrier_u32 1s 3s -67%
pack_sk_rho_key_tr_s2 1s 4s -75%
polyw1_pack 1s 4s -75%

@oqs-bot

oqs-bot commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

CBMC Results (ML-DSA-87, REDUCE-RAM)

Full Results (204 proofs)
Proof Status Current Previous Change
**TOTAL** 1439s 1476s -2.5%
polyvec_matrix_pointwise_montgomery_yvec 188s 198s -5%
poly_pointwise_montgomery_c 117s 135s -13%
mld_invntt_layer 108s 115s -6%
sign_verify_internal 47s 50s -6%
mld_ntt_layer 44s 45s -2%
fqmul 40s 40s +0%
mld_attempt_signature_generation 33s 32s +3%
polyvecl_chknorm 33s 38s -13%
keccakf1600x4_permute_native 23s 22s +5%
mld_ntt_butterfly_block 21s 25s -16%
poly_ntt_c 20s 23s -13%
polyeta_unpack 17s 17s +0%
mld_check_pct 16s 17s -6%
rej_uniform_c 16s 16s +0%
poly_uniform_eta_4x 13s 11s +18%
compute_pack_t0_t1 12s 11s +9%
poly_chknorm_c 12s 12s +0%
polyt0_unpack 12s 12s +0%
polyveck_chknorm 12s 10s +20%
polyveck_decompose 12s 15s -20%
keccak_absorb_once_x4 11s 10s +10%
poly_invntt_tomont_c 11s 11s +0%
polyvec_matrix_pointwise_montgomery_row 10s 15s -33%
polyvecl_ntt 9s 6s +50%
rej_uniform_native 9s 4s +125%
pointwise_acc_native_x86_64 8s 7s +14%
poly_add 8s 7s +14%
polyveck_caddq 8s 7s +14%
rej_uniform 8s 7s +14%
mld_keccakf1600_permute_c 7s 7s +0%
pointwise_acc_native_aarch64 7s 9s -22%
poly_decompose_c 7s 6s +17%
polyveck_reduce 7s 7s +0%
polyz_unpack_c 7s 8s -12%
sign_pk_from_sk 7s 5s +40%
sign_signature_internal 7s 5s +40%
sk_s2hat_get_poly 7s 2s +250%
mld_compute_pack_z 6s 6s +0%
mld_sample_s1_s2 6s 6s +0%
mld_sample_s1_s2_serial 6s 7s -14%
poly_challenge 6s 5s +20%
sign_keypair 6s 4s +50%
sign_verify_extmu 6s 7s -14%
sign_verify_pre_hash_internal 6s 4s +50%
keccak_squeeze 5s 4s +25%
make_hint 5s 2s +150%
ntt_native_aarch64 5s 3s +67%
pack_sig_h 5s 3s +67%
poly_caddq_c 5s 3s +67%
poly_pointwise_montgomery 5s 4s +25%
poly_power2round 5s 4s +25%
poly_reduce 5s 6s -17%
poly_uniform_gamma1_4x 5s 5s +0%
poly_use_hint 5s 2s +150%
polyvecl_pointwise_acc_montgomery 5s 2s +150%
polyvecl_uniform_gamma1_serial 5s 2s +150%
power2round 5s 2s +150%
rej_uniform_eta_native_aarch64 5s 3s +67%
rej_uniform_native_aarch64 5s 3s +67%
sign_signature_pre_hash_shake256 5s 5s +0%
sign_verify_pre_hash_shake256 5s 3s +67%
keccak_absorb 4s 4s +0%
keccak_f1600_x4_native_aarch64_v84a 4s 2s +100%
keccak_squeezeblocks_x4 4s 4s +0%
keccakf1600_permute 4s 4s +0%
mld_ct_get_optblocker_u8 4s 2s +100%
ntt_native_x86_64 4s 4s +0%
pointwise_native_x86_64 4s 4s +0%
poly_chknorm_native 4s 3s +33%
poly_decompose 4s 4s +0%
poly_decompose_native 4s 3s +33%
poly_invntt_tomont 4s 3s +33%
poly_ntt_native 4s 2s +100%
poly_uniform_eta 4s 3s +33%
poly_uniform_gamma1 4s 3s +33%
poly_use_hint_native_aarch64 4s 2s +100%
polyt0_pack 4s 3s +33%
polyt1_unpack 4s 5s -20%
polyveck_invntt_tomont 4s 5s -20%
polyveck_ntt 4s 2s +100%
polyvecl_pointwise_acc_montgomery_c 4s 2s +100%
polyvecl_pointwise_acc_montgomery_native 4s 4s +0%
polyz_unpack_native 4s 3s +33%
rej_eta_c 4s 6s -33%
shake128_release 4s 3s +33%
shake256 4s 2s +100%
sig_unpack_hints 4s 2s +100%
sign_keypair_internal 4s 5s -20%
sign_signature_pre_hash_internal 4s 5s -20%
sk_s1hat_get_poly 4s 1s +300%
sk_t0hat_get_poly 4s 2s +100%
fqscale 3s 3s +0%
intt_native_aarch64 3s 6s -50%
intt_native_x86_64 3s 4s -25%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid 3s 4s -25%
keccak_f1600_x4_native_avx2 3s 3s +0%
keccakf1600x4_extract_bytes 3s 4s -25%
keccakf1600x4_xor_bytes_native 3s 3s +0%
mld_ct_cmask_neg_i32 3s 2s +50%
mld_ct_cmask_nonzero_u8 3s 3s +0%
mld_h 3s 3s +0%
pack_sig_c 3s 2s +50%
pack_sk_rho_key_tr_s2 3s 2s +50%
pack_sk_s1 3s 2s +50%
pointwise_native_aarch64 3s 4s -25%
poly_chknorm 3s 4s -25%
poly_chknorm_native_x86_64 3s 2s +50%
poly_decompose_32_native_aarch64 3s 4s -25%
poly_decompose_88_native_aarch64 3s 3s +0%
poly_decompose_native_x86_64 3s 2s +50%
poly_permute_bitrev_to_custom_optional_native 3s 2s +50%
poly_shiftl 3s 4s -25%
poly_sub 3s 3s +0%
poly_uniform 3s 3s +0%
poly_uniform_4x 3s 4s -25%
poly_use_hint_c 3s 4s -25%
polyeta_pack 3s 2s +50%
polyvec_matrix_expand 3s 3s +0%
polyvec_matrix_expand_serial 3s 1s +200%
polyvecl_pack_eta 3s 3s +0%
polyvecl_unpack_eta 3s 4s -25%
polyz_unpack_17_native_aarch64 3s 2s +50%
rej_eta 3s 4s -25%
rej_eta_native 3s 3s +0%
shake128_init 3s 4s -25%
shake128_squeeze 3s 1s +200%
shake128x4_absorb_once 3s 2s +50%
shake256_release 3s 3s +0%
shake256x4_squeezeblocks 3s 3s +0%
sign_signature 3s 2s +50%
sign_verify 3s 3s +0%
sys_check_capability 3s 2s +50%
unpack_sk_s1hat 3s 4s -25%
yvec_init 3s 2s +50%
caddq 2s 4s -50%
decompose 2s 3s -33%
keccak_f1600_x1_native_aarch64 2s 2s +0%
keccak_f1600_x1_native_aarch64_v84a 2s 3s -33%
keccak_finalize 2s 4s -50%
keccak_init 2s 3s -33%
keccakf1600_extract_bytes (big endian) 2s 3s -33%
keccakf1600_permute_native 2s 3s -33%
keccakf1600_xor_bytes 2s 3s -33%
keccakf1600x4_extract_bytes_native 2s 1s +100%
keccakf1600x4_permute 2s 2s +0%
mld_ct_abs_i32 2s 2s +0%
mld_ct_cmask_nonzero_u32 2s 3s -33%
mld_ct_get_optblocker_i64 2s 3s -33%
mld_ct_get_optblocker_u32 2s 2s +0%
mld_ct_memcmp 2s 2s +0%
mld_keccakf1600_extract_bytes 2s 2s +0%
mld_keccakf1600x4_extract_bytes_c 2s 3s -33%
mld_keccakf1600x4_xor_bytes_c 2s 3s -33%
mld_polymat_expand_entry 2s 3s -33%
mld_prepare_domain_separation_prefix 2s 4s -50%
mld_value_barrier_u32 2s 1s +100%
mld_value_barrier_u8 2s 3s -33%
montgomery_reduce 2s 3s -33%
nttunpack_native_x86_64 2s 3s -33%
pack_sig_z 2s 3s -33%
poly_caddq 2s 3s -33%
poly_caddq_native 2s 3s -33%
poly_caddq_native_x86_64 2s 1s +100%
poly_chknorm_native_aarch64 2s 1s +100%
poly_invntt_tomont_native 2s 2s +0%
poly_ntt 2s 4s -50%
poly_permute_bitrev_to_custom_optional 2s 2s +0%
poly_pointwise_montgomery_native 2s 4s -50%
poly_use_hint_native 2s 3s -33%
polyt1_pack 2s 2s +0%
polyveck_pack_eta 2s 1s +100%
polyveck_pack_w1 2s 3s -33%
polyvecl_uniform_gamma1 2s 3s -33%
polyvecl_unpack_z 2s 3s -33%
polyw1_pack 2s 4s -50%
polyw1_pack_32 2s 3s -33%
polyz_pack 2s 5s -60%
polyz_unpack 2s 2s +0%
polyz_unpack_19_native_aarch64 2s 1s +100%
polyz_unpack_native_x86_64 2s 5s -60%
reduce32 2s 4s -50%
shake128_absorb 2s 1s +100%
shake128_finalize 2s 1s +100%
shake128x4_squeezeblocks 2s 3s -33%
shake256_absorb 2s 3s -33%
shake256_finalize 2s 3s -33%
shake256_init 2s 3s -33%
sign_signature_extmu 2s 3s -33%
unpack_pk_t1 2s 3s -33%
unpack_sk_s2hat 2s 2s +0%
unpack_sk_t0hat 2s 3s -33%
use_hint 2s 4s -50%
yvec_get_poly 2s 2s +0%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid 1s 3s -67%
keccakf1600_xor_bytes (big endian) 1s 3s -67%
keccakf1600x4_xor_bytes 1s 3s -67%
mld_ct_sel_int32 1s 2s -50%
mld_value_barrier_i64 1s 3s -67%
poly_caddq_native_aarch64 1s 3s -67%
polyveck_unpack_eta 1s 3s -67%
polyw1_pack_88 1s 1s +0%
shake256_squeeze 1s 2s -50%
shake256x4_absorb_once 1s 3s -67%
unpack_sk 1s 2s -50%

@oqs-bot

oqs-bot commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

CBMC Results (ML-DSA-87)

Full Results (204 proofs)
Proof Status Current Previous Change
**TOTAL** 2279s 1978s +15.2%
polyvecl_pointwise_acc_montgomery_c 416s 320s +30%
polyvec_matrix_expand 338s 294s +15%
poly_pointwise_montgomery_c 150s 129s +16%
mld_invntt_layer 120s 101s +19%
sign_verify_internal 104s 93s +12%
mld_attempt_signature_generation 56s 54s +4%
mld_ntt_layer 47s 41s +15%
fqmul 44s 41s +7%
sign_signature_internal 43s 43s +0%
polyvec_matrix_expand_serial 41s 37s +11%
keccakf1600x4_permute_native 23s 20s +15%
mld_ntt_butterfly_block 23s 22s +5%
poly_ntt_c 22s 18s +22%
compute_pack_t0_t1 20s 18s +11%
polyvec_matrix_pointwise_montgomery_yvec 19s 18s +6%
polyt0_unpack 18s 15s +20%
mld_check_pct 17s 16s +6%
polyeta_unpack 17s 17s +0%
poly_chknorm_c 16s 15s +7%
rej_uniform 16s 15s +7%
rej_uniform_c 16s 14s +14%
poly_uniform_4x 15s 11s +36%
poly_invntt_tomont_c 14s 11s +27%
poly_uniform_eta_4x 12s 10s +20%
mld_compute_pack_z 11s 9s +22%
polyveck_decompose 11s 12s -8%
polyveck_ntt 10s 9s +11%
keccak_absorb_once_x4 9s 9s +0%
mld_sample_s1_s2 9s 6s +50%
pointwise_acc_native_x86_64 9s 6s +50%
polyveck_caddq 9s 8s +12%
mld_keccakf1600_permute_c 8s 8s +0%
pointwise_acc_native_aarch64 8s 7s +14%
polyveck_invntt_tomont 8s 9s -11%
sign_pk_from_sk 8s 6s +33%
mld_sample_s1_s2_serial 7s 6s +17%
poly_add 7s 6s +17%
poly_pointwise_montgomery_native 7s 2s +250%
keccak_absorb 6s 3s +100%
keccak_squeezeblocks_x4 6s 4s +50%
poly_decompose_c 6s 4s +50%
poly_invntt_tomont 6s 2s +200%
poly_permute_bitrev_to_custom_optional_native 6s 5s +20%
polyt1_unpack 6s 4s +50%
polyvecl_ntt 6s 6s +0%
polyz_unpack_19_native_aarch64 6s 3s +100%
rej_uniform_native 6s 5s +20%
unpack_sk_t0hat 6s 7s -14%
intt_native_aarch64 5s 3s +67%
mld_ct_get_optblocker_i64 5s 2s +150%
mld_keccakf1600x4_extract_bytes_c 5s 1s +400%
mld_prepare_domain_separation_prefix 5s 3s +67%
mld_value_barrier_u8 5s 2s +150%
pack_sig_c 5s 5s +0%
pack_sig_z 5s 4s +25%
pack_sk_rho_key_tr_s2 5s 2s +150%
poly_caddq_native_aarch64 5s 4s +25%
poly_chknorm 5s 2s +150%
poly_decompose_88_native_aarch64 5s 4s +25%
poly_ntt_native 5s 2s +150%
poly_uniform_gamma1_4x 5s 2s +150%
poly_use_hint 5s 3s +67%
poly_use_hint_c 5s 4s +25%
polyveck_chknorm 5s 4s +25%
polyvecl_unpack_eta 5s 3s +67%
polyz_unpack_native 5s 3s +67%
rej_eta_c 5s 3s +67%
rej_eta_native 5s 3s +67%
sign_keypair_internal 5s 6s -17%
caddq 4s 3s +33%
intt_native_x86_64 4s 4s +0%
keccakf1600_xor_bytes (big endian) 4s 1s +300%
mld_ct_memcmp 4s 3s +33%
ntt_native_aarch64 4s 5s -20%
pointwise_native_aarch64 4s 2s +100%
poly_caddq_c 4s 3s +33%
poly_chknorm_native 4s 3s +33%
poly_chknorm_native_x86_64 4s 3s +33%
poly_decompose 4s 2s +100%
poly_sub 4s 4s +0%
poly_uniform 4s 2s +100%
poly_uniform_eta 4s 3s +33%
poly_use_hint_native 4s 3s +33%
polyeta_pack 4s 2s +100%
polyt0_pack 4s 3s +33%
polyvec_matrix_pointwise_montgomery_row 4s 3s +33%
polyveck_reduce 4s 2s +100%
polyvecl_chknorm 4s 3s +33%
polyvecl_uniform_gamma1 4s 3s +33%
polyw1_pack_32 4s 2s +100%
polyw1_pack_88 4s 5s -20%
polyz_unpack_native_x86_64 4s 4s +0%
power2round 4s 2s +100%
rej_eta 4s 3s +33%
rej_uniform_native_aarch64 4s 3s +33%
shake128_absorb 4s 3s +33%
shake128x4_absorb_once 4s 3s +33%
shake128x4_squeezeblocks 4s 3s +33%
shake256_finalize 4s 1s +300%
sign_signature_extmu 4s 5s -20%
sign_signature_pre_hash_shake256 4s 4s +0%
sign_verify 4s 5s -20%
sign_verify_extmu 4s 5s -20%
sign_verify_pre_hash_internal 4s 4s +0%
sign_verify_pre_hash_shake256 4s 2s +100%
unpack_sk_s1hat 4s 3s +33%
fqscale 3s 3s +0%
keccak_f1600_x1_native_aarch64 3s 4s -25%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid 3s 3s +0%
keccak_squeeze 3s 2s +50%
keccakf1600_extract_bytes (big endian) 3s 2s +50%
keccakf1600_permute 3s 4s -25%
keccakf1600_permute_native 3s 3s +0%
keccakf1600x4_extract_bytes 3s 3s +0%
keccakf1600x4_extract_bytes_native 3s 2s +50%
keccakf1600x4_xor_bytes 3s 2s +50%
make_hint 3s 2s +50%
mld_ct_get_optblocker_u8 3s 1s +200%
mld_keccakf1600_extract_bytes 3s 3s +0%
mld_polymat_expand_entry 3s 2s +50%
mld_value_barrier_i64 3s 2s +50%
ntt_native_x86_64 3s 3s +0%
pack_sig_h 3s 2s +50%
poly_caddq 3s 3s +0%
poly_caddq_native 3s 2s +50%
poly_caddq_native_x86_64 3s 2s +50%
poly_challenge 3s 4s -25%
poly_decompose_native 3s 3s +0%
poly_ntt 3s 3s +0%
poly_permute_bitrev_to_custom_optional 3s 1s +200%
poly_pointwise_montgomery 3s 1s +200%
poly_shiftl 3s 3s +0%
poly_uniform_gamma1 3s 3s +0%
poly_use_hint_native_aarch64 3s 3s +0%
polyt1_pack 3s 3s +0%
polyvecl_pack_eta 3s 2s +50%
polyvecl_pointwise_acc_montgomery 3s 1s +200%
polyvecl_pointwise_acc_montgomery_native 3s 3s +0%
polyvecl_uniform_gamma1_serial 3s 4s -25%
polyvecl_unpack_z 3s 4s -25%
polyw1_pack 3s 3s +0%
polyz_pack 3s 3s +0%
polyz_unpack_17_native_aarch64 3s 6s -50%
polyz_unpack_c 3s 5s -40%
reduce32 3s 2s +50%
rej_uniform_eta_native_aarch64 3s 2s +50%
shake128_squeeze 3s 5s -40%
shake256 3s 1s +200%
shake256x4_squeezeblocks 3s 1s +200%
sig_unpack_hints 3s 4s -25%
sign_keypair 3s 6s -50%
sign_signature 3s 2s +50%
sign_signature_pre_hash_internal 3s 7s -57%
unpack_pk_t1 3s 3s +0%
unpack_sk_s2hat 3s 3s +0%
use_hint 3s 2s +50%
yvec_get_poly 3s 3s +0%
decompose 2s 3s -33%
keccak_f1600_x1_native_aarch64_v84a 2s 2s +0%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid 2s 2s +0%
keccak_f1600_x4_native_avx2 2s 2s +0%
keccakf1600_xor_bytes 2s 4s -50%
keccakf1600x4_permute 2s 2s +0%
keccakf1600x4_xor_bytes_native 2s 3s -33%
mld_ct_cmask_neg_i32 2s 4s -50%
mld_ct_cmask_nonzero_u32 2s 3s -33%
mld_ct_cmask_nonzero_u8 2s 3s -33%
mld_ct_get_optblocker_u32 2s 3s -33%
mld_ct_sel_int32 2s 3s -33%
mld_h 2s 4s -50%
mld_keccakf1600x4_xor_bytes_c 2s 2s +0%
nttunpack_native_x86_64 2s 1s +100%
pack_sk_s1 2s 2s +0%
pointwise_native_x86_64 2s 2s +0%
poly_chknorm_native_aarch64 2s 2s +0%
poly_decompose_32_native_aarch64 2s 4s -50%
poly_power2round 2s 5s -60%
poly_reduce 2s 1s +100%
polyveck_pack_eta 2s 3s -33%
polyveck_pack_w1 2s 5s -60%
polyveck_unpack_eta 2s 5s -60%
polyz_unpack 2s 4s -50%
shake128_finalize 2s 2s +0%
shake128_init 2s 3s -33%
shake128_release 2s 3s -33%
shake256_absorb 2s 2s +0%
shake256_init 2s 3s -33%
shake256_release 2s 4s -50%
shake256_squeeze 2s 2s +0%
shake256x4_absorb_once 2s 1s +100%
sk_s1hat_get_poly 2s 2s +0%
sk_s2hat_get_poly 2s 4s -50%
sk_t0hat_get_poly 2s 2s +0%
sys_check_capability 2s 5s -60%
unpack_sk 2s 3s -33%
keccak_f1600_x4_native_aarch64_v84a 1s 2s -50%
keccak_finalize 1s 3s -67%
keccak_init 1s 2s -50%
mld_ct_abs_i32 1s 2s -50%
mld_value_barrier_u32 1s 3s -67%
montgomery_reduce 1s 3s -67%
poly_decompose_native_x86_64 1s 2s -50%
poly_invntt_tomont_native 1s 5s -80%
yvec_init 1s 2s -50%

@mkannwischer mkannwischer marked this pull request as ready for review July 2, 2026 06:53
@mkannwischer mkannwischer requested a review from a team as a code owner July 2, 2026 06:53
@hanno-becker hanno-becker force-pushed the ci-update-github-actions branch from 41b293c to 5efd353 Compare July 2, 2026 15:52
dependabot Bot and others added 4 commits July 3, 2026 09:24
Bumps [actions/checkout](https://github.com/actions/checkout) from 5.0.0 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v5...9c091bb)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) from 6.2.0 to 6.2.1.
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases)
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md)
- [Commits](aws-actions/configure-aws-credentials@e7f100c...254c19b)

---
updated-dependencies:
- dependency-name: aws-actions/configure-aws-credentials
  dependency-version: 6.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Both actions were still on the deprecated node20 runtime, triggering
Node.js 20 deprecation warnings in CI. github-action-benchmark v1.22.1
and cache-nix-action v7.0.2 both run on node24. cache-nix-action v7
caches only /nix by default.

Signed-off-by: Matthias J. Kannwischer <matthias@zerorisc.com>
The checkout bump touched only .github/workflows/*, leaving the cbmc
composite action on v6.0.2. Align it with the rest.

Signed-off-by: Matthias J. Kannwischer <matthias@zerorisc.com>
@mkannwischer mkannwischer force-pushed the ci-update-github-actions branch from 5efd353 to 5718ca1 Compare July 3, 2026 01:24
@mkannwischer mkannwischer merged commit 3fb58d1 into main Jul 3, 2026
415 checks passed
@mkannwischer mkannwischer deleted the ci-update-github-actions branch July 3, 2026 03:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

CI: Update github-action-benchmark and cache-nix-action (due to Node.js 20 deprecation)

3 participants