Skip to content

CI: Add RISC-V runners to base CI (via RISE project)#1643

Merged
hanno-becker merged 2 commits intomainfrom
riscv-runners
Apr 11, 2026
Merged

CI: Add RISC-V runners to base CI (via RISE project)#1643
hanno-becker merged 2 commits intomainfrom
riscv-runners

Conversation

@mkannwischer
Copy link
Copy Markdown
Contributor

@mkannwischer mkannwischer commented Apr 3, 2026

The RISE project now provides free RISV-V Github runners, see https://riseproject-dev.github.io/riscv-runner/
This commit adds them to the base CI.

@oqs-bot
Copy link
Copy Markdown
Contributor

oqs-bot commented Apr 3, 2026 •
edited
Loading

CBMC Results (ML-KEM-512)

Full Results (190 proofs)
Proof Status Current Previous Change
**TOTAL** ✅ 1268s 1309s -3.1%
mlk_indcpa_keypair_derand ✅ 173s 172s +1%
mlk_indcpa_enc ✅ 157s 164s -4%
mlk_rej_uniform_c ✅ 95s 93s +2%
mlk_polyvec_basemul_acc_montgomery_cached_c ✅ 79s 81s -2%
mlk_poly_rej_uniform ✅ 41s 41s +0%
poly_ntt_native ✅ 38s 39s -3%
mlk_keccak_squeezeblocks_x4 ✅ 29s 33s -12%
polyvec_basemul_acc_montgomery_cached_native ✅ 23s 24s -4%
keccakf1600x4_permute_native_x4 ✅ 20s 20s +0%
mlk_poly_reduce_native ✅ 17s 18s -6%
mlk_polyvec_add ✅ 17s 17s +0%
mlk_poly_decompress_d4_native ✅ 16s 17s -6%
mlk_ntt_layer ✅ 14s 16s -12%
mlk_poly_decompress_d10_native ✅ 14s 18s -22%
mlk_indcpa_dec ✅ 13s 12s +8%
mlk_poly_frommsg ✅ 13s 14s -7%
mlk_keccak_absorb_once_x4 ✅ 11s 8s +38%
mlk_poly_frombytes_native ✅ 11s 9s +22%
mlk_polymat_permute_bitrev_to_custom ✅ 11s 9s +22%
mlk_poly_rej_uniform_x4 ✅ 9s 9s +0%
mlk_ntt_butterfly_block ✅ 8s 8s +0%
mlk_poly_decompress_d10_c ✅ 8s 4s +100%
mlk_invntt_layer ✅ 7s 5s +40%
mlk_keccak_squeeze_once ✅ 7s 7s +0%
mlk_keccak_squeezeblocks ✅ 7s 6s +17%
poly_frombytes_native_x86_64 ✅ 7s 5s +40%
mlk_fqmul ✅ 6s 7s -14%
mlk_poly_mulcache_compute_c ✅ 6s 5s +20%
kem_dec ✅ 5s 4s +25%
mlk_poly_add ✅ 5s 5s +0%
mlk_poly_getnoise_eta1_4x_native ✅ 5s 4s +25%
mlk_shake256x4 ✅ 5s 3s +67%
mlk_value_barrier_u32 ✅ 5s 4s +25%
poly_decompress_d4_native_x86_64 ✅ 5s 4s +25%
polyvec_basemul_acc_montgomery_cached_k2_native_x86_64 ✅ 5s 1s +400%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid ✅ 4s 1s +300%
kem_check_sk ✅ 4s 3s +33%
mlk_ct_get_optblocker_u8 ✅ 4s 1s +300%
mlk_gen_matrix ✅ 4s 4s +0%
mlk_keccak_absorb_once ✅ 4s 6s -33%
mlk_keccakf1600_extract_bytes (big endian) ✅ 4s 2s +100%
mlk_keccakf1600_permute ✅ 4s 3s +33%
mlk_poly_cbd_eta2 ✅ 4s 6s -33%
mlk_poly_compress_d10_c ✅ 4s 4s +0%
mlk_poly_compress_d11_native ✅ 4s 1s +300%
mlk_poly_compress_d5 ✅ 4s 2s +100%
mlk_poly_decompress_d4_c ✅ 4s 2s +100%
mlk_poly_decompress_d5 ✅ 4s 4s +0%
mlk_poly_getnoise_eta1_4x ✅ 4s 3s +33%
mlk_poly_reduce ✅ 4s 4s +0%
mlk_poly_tobytes_c ✅ 4s 3s +33%
mlk_polyvec_mulcache_compute ✅ 4s 3s +33%
mlk_polyvec_tobytes ✅ 4s 3s +33%
ntt_native_aarch64 ✅ 4s 2s +100%
poly_compress_d4_native_x86_64 ✅ 4s 3s +33%
poly_decompress_d10_native_x86_64 ✅ 4s 4s +0%
poly_mulcache_compute_native_x86_64 ✅ 4s 2s +100%
polyvec_basemul_acc_montgomery_cached_k3_native_aarch64 ✅ 4s 3s +33%
intt_native_aarch64 ✅ 3s 2s +50%
keccakf1600_permute_native ✅ 3s 2s +50%
kem_check_pk ✅ 3s 3s +0%
kem_enc ✅ 3s 3s +0%
kem_keypair ✅ 3s 5s -40%
mlk_ct_cmask_neg_i16 ✅ 3s 1s +200%
mlk_ct_cmask_nonzero_u16 ✅ 3s 3s +0%
mlk_gen_matrix_serial ✅ 3s 3s +0%
mlk_keccakf1600_extract_bytes ✅ 3s 1s +200%
mlk_keccakf1600_permute_c ✅ 3s 3s +0%
mlk_keccakf1600_xor_bytes (big endian) ✅ 3s 4s -25%
mlk_keccakf1600x4_permute ✅ 3s 2s +50%
mlk_matvec_mul ✅ 3s 3s +0%
mlk_poly_compress_d10 ✅ 3s 2s +50%
mlk_poly_compress_d4 ✅ 3s 1s +200%
mlk_poly_compress_d5_native ✅ 3s 4s -25%
mlk_poly_decompress_d11_native ✅ 3s 1s +200%
mlk_poly_decompress_d4 ✅ 3s 3s +0%
mlk_poly_decompress_d5_native ✅ 3s 2s +50%
mlk_poly_decompress_du ✅ 3s 2s +50%
mlk_poly_getnoise_eta2 ✅ 3s 2s +50%
mlk_poly_invntt_tomont ✅ 3s 4s -25%
mlk_poly_ntt ✅ 3s 3s +0%
mlk_poly_reduce_c ✅ 3s 1s +200%
mlk_polyvec_decompress_du ✅ 3s 1s +200%
mlk_polyvec_ntt ✅ 3s 4s -25%
mlk_polyvec_permute_bitrev_to_custom ✅ 3s 4s -25%
mlk_scalar_compress_d1 ✅ 3s 3s +0%
mlk_scalar_compress_d10 ✅ 3s 2s +50%
mlk_scalar_compress_d5 ✅ 3s 2s +50%
mlk_scalar_decompress_d4 ✅ 3s 5s -40%
mlk_scalar_signed_to_unsigned_q ✅ 3s 5s -40%
mlk_shake128x4_squeezeblocks ✅ 3s 2s +50%
mlk_value_barrier_i32 ✅ 3s 2s +50%
ntt_native_x86_64 ✅ 3s 1s +200%
poly_compress_d11_native_x86_64 ✅ 3s 4s -25%
poly_getnoise_eta1122_4x_native ✅ 3s 3s +0%
poly_reduce_native_aarch64 ✅ 3s 2s +50%
poly_tobytes_native_aarch64 ✅ 3s 3s +0%
poly_tobytes_native_x86_64 ✅ 3s 3s +0%
poly_tomont_native_aarch64 ✅ 3s 3s +0%
polyvec_basemul_acc_montgomery_cached_k4_native_aarch64 ✅ 3s 3s +0%
polyvec_basemul_acc_montgomery_cached_k4_native_x86_64 ✅ 3s 3s +0%
rej_uniform_native ✅ 3s 4s -25%
rej_uniform_native_aarch64 ✅ 3s 5s -40%
sys_check_capability ✅ 3s 2s +50%
intt_native_x86_64 ✅ 2s 3s -33%
keccak_f1600_x1_native_aarch64_v84a ✅ 2s 2s +0%
keccak_f1600_x4_native_avx2 ✅ 2s 2s +0%
keccakf1600x4_xor_bytes_native ✅ 2s 2s +0%
kem_keypair_derand ✅ 2s 5s -60%
mlk_check_pct ✅ 2s 4s -50%
mlk_ct_cmask_nonzero_u8 ✅ 2s 4s -50%
mlk_ct_cmov_zero ✅ 2s 3s -33%
mlk_ct_get_optblocker_u32 ✅ 2s 3s -33%
mlk_ct_memcmp ✅ 2s 1s +100%
mlk_ct_sel_int16 ✅ 2s 4s -50%
mlk_ct_sel_uint8 ✅ 2s 2s +0%
mlk_keccakf1600_xor_bytes ✅ 2s 1s +100%
mlk_keccakf1600x4_extract_bytes ✅ 2s 1s +100%
mlk_keccakf1600x4_extract_bytes_c ✅ 2s 2s +0%
mlk_keccakf1600x4_xor_bytes ✅ 2s 2s +0%
mlk_poly_cbd_eta1 ✅ 2s 2s +0%
mlk_poly_compress_d10_native ✅ 2s 2s +0%
mlk_poly_compress_d11_c ✅ 2s 3s -33%
mlk_poly_compress_d4_c ✅ 2s 4s -50%
mlk_poly_compress_d4_native ✅ 2s 3s -33%
mlk_poly_compress_d5_c ✅ 2s 4s -50%
mlk_poly_compress_du ✅ 2s 2s +0%
mlk_poly_decompress_d10 ✅ 2s 1s +100%
mlk_poly_decompress_d11 ✅ 2s 3s -33%
mlk_poly_decompress_d11_c ✅ 2s 2s +0%
mlk_poly_decompress_dv ✅ 2s 2s +0%
mlk_poly_frombytes ✅ 2s 2s +0%
mlk_poly_getnoise_eta1122_4x ✅ 2s 3s -33%
mlk_poly_invntt_tomont_c ✅ 2s 4s -50%
mlk_poly_mulcache_compute ✅ 2s 3s -33%
mlk_poly_sub ✅ 2s 5s -60%
mlk_poly_tobytes ✅ 2s 2s +0%
mlk_poly_tobytes_native ✅ 2s 3s -33%
mlk_poly_tomont_native ✅ 2s 4s -50%
mlk_polyvec_basemul_acc_montgomery_cached ✅ 2s 3s -33%
mlk_polyvec_compress_du ✅ 2s 1s +100%
mlk_polyvec_invntt_tomont ✅ 2s 1s +100%
mlk_polyvec_reduce ✅ 2s 2s +0%
mlk_polyvec_tomont ✅ 2s 2s +0%
mlk_rej_uniform ✅ 2s 1s +100%
mlk_scalar_compress_d11 ✅ 2s 3s -33%
mlk_scalar_decompress_d11 ✅ 2s 2s +0%
mlk_scalar_decompress_d5 ✅ 2s 2s +0%
mlk_sha3_256 ✅ 2s 2s +0%
mlk_sha3_512 ✅ 2s 3s -33%
mlk_shake128_absorb_once ✅ 2s 1s +100%
mlk_shake128_squeezeblocks ✅ 2s 4s -50%
mlk_shake128x4_absorb_once ✅ 2s 1s +100%
mlk_shake256 ✅ 2s 1s +100%
mlk_value_barrier_u8 ✅ 2s 2s +0%
nttunpack_native_x86_64 ✅ 2s 3s -33%
poly_compress_d10_native_x86_64 ✅ 2s 2s +0%
poly_decompress_d5_native_x86_64 ✅ 2s 4s -50%
poly_invntt_tomont_native ✅ 2s 4s -50%
poly_mulcache_compute_native_aarch64 ✅ 2s 2s +0%
poly_reduce_native_x86_64 ✅ 2s 3s -33%
poly_tomont_native_x86_64 ✅ 2s 4s -50%
polyvec_basemul_acc_montgomery_cached_k2_native_aarch64 ✅ 2s 2s +0%
polyvec_basemul_acc_montgomery_cached_k3_native_x86_64 ✅ 2s 3s -33%
keccak_f1600_x1_native_aarch64 ✅ 1s 2s -50%
keccak_f1600_x4_native_aarch64_v84a ✅ 1s 1s +0%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid ✅ 1s 2s -50%
keccakf1600x4_extract_bytes_native ✅ 1s 3s -67%
kem_enc_derand ✅ 1s 4s -75%
mlk_barrett_reduce ✅ 1s 2s -50%
mlk_ct_get_optblocker_i32 ✅ 1s 1s +0%
mlk_keccakf1600x4_xor_bytes_c ✅ 1s 4s -75%
mlk_keypair_getnoise_eta1 ✅ 1s 2s -50%
mlk_montgomery_reduce ✅ 1s 3s -67%
mlk_poly_compress_d11 ✅ 1s 3s -67%
mlk_poly_compress_dv ✅ 1s 2s -50%
mlk_poly_decompress_d5_c ✅ 1s 1s +0%
mlk_poly_frombytes_c ✅ 1s 1s +0%
mlk_poly_mulcache_compute_native ✅ 1s 2s -50%
mlk_poly_ntt_c ✅ 1s 5s -80%
mlk_poly_tomont ✅ 1s 3s -67%
mlk_poly_tomont_c ✅ 1s 1s +0%
mlk_poly_tomsg ✅ 1s 3s -67%
mlk_polyvec_frombytes ✅ 1s 7s -86%
mlk_polyvec_permute_bitrev_to_custom_native ✅ 1s 4s -75%
mlk_scalar_compress_d4 ✅ 1s 3s -67%
mlk_scalar_decompress_d10 ✅ 1s 2s -50%
poly_compress_d5_native_x86_64 ✅ 1s 6s -83%
poly_decompress_d11_native_x86_64 ✅ 1s 5s -80%
rej_uniform_native_x86_64 ✅ 1s 3s -67%

@oqs-bot
Copy link
Copy Markdown
Contributor

oqs-bot commented Apr 3, 2026 •
edited
Loading

CBMC Results (ML-KEM-768)

Full Results (190 proofs)
Proof Status Current Previous Change
**TOTAL** ✅ 1322s 1390s -4.9%
mlk_indcpa_enc ✅ 261s 246s +6%
mlk_indcpa_keypair_derand ✅ 210s 226s -7%
mlk_rej_uniform_c ✅ 65s 79s -18%
polyvec_basemul_acc_montgomery_cached_native ✅ 60s 65s -8%
mlk_polyvec_basemul_acc_montgomery_cached_c ✅ 46s 53s -13%
mlk_poly_rej_uniform ✅ 34s 36s -6%
mlk_polyvec_add ✅ 27s 30s -10%
mlk_keccak_squeezeblocks_x4 ✅ 26s 30s -13%
poly_ntt_native ✅ 23s 24s -4%
keccakf1600x4_permute_native_x4 ✅ 19s 19s +0%
mlk_poly_reduce_native ✅ 14s 17s -18%
mlk_poly_decompress_d4_native ✅ 13s 15s -13%
mlk_indcpa_dec ✅ 12s 17s -29%
mlk_ntt_layer ✅ 12s 15s -20%
mlk_poly_decompress_d10_native ✅ 9s 12s -25%
mlk_poly_frombytes_native ✅ 9s 11s -18%
mlk_poly_frommsg ✅ 9s 12s -25%
mlk_keccak_absorb_once_x4 ✅ 8s 10s -20%
mlk_ntt_butterfly_block ✅ 8s 9s -11%
kem_dec ✅ 7s 4s +75%
mlk_poly_add ✅ 7s 5s +40%
mlk_polymat_permute_bitrev_to_custom ✅ 7s 5s +40%
mlk_keccak_squeezeblocks ✅ 6s 7s -14%
mlk_poly_rej_uniform_x4 ✅ 6s 8s -25%
mlk_fqmul ✅ 5s 8s -38%
mlk_keccak_squeeze_once ✅ 5s 6s -17%
mlk_poly_decompress_d11_c ✅ 5s 2s +150%
mlk_poly_getnoise_eta1_4x ✅ 5s 4s +25%
poly_decompress_d4_native_x86_64 ✅ 5s 4s +25%
poly_frombytes_native_x86_64 ✅ 5s 8s -38%
poly_invntt_tomont_native ✅ 5s 3s +67%
kem_enc_derand ✅ 4s 3s +33%
mlk_check_pct ✅ 4s 1s +300%
mlk_ct_sel_int16 ✅ 4s 2s +100%
mlk_invntt_layer ✅ 4s 6s -33%
mlk_keccakf1600_xor_bytes (big endian) ✅ 4s 2s +100%
mlk_montgomery_reduce ✅ 4s 1s +300%
mlk_poly_cbd_eta1 ✅ 4s 4s +0%
mlk_poly_compress_d4_native ✅ 4s 2s +100%
mlk_poly_compress_dv ✅ 4s 1s +300%
mlk_poly_getnoise_eta1_4x_native ✅ 4s 3s +33%
mlk_poly_reduce_c ✅ 4s 3s +33%
mlk_polyvec_permute_bitrev_to_custom_native ✅ 4s 6s -33%
mlk_sha3_256 ✅ 4s 2s +100%
mlk_shake128_squeezeblocks ✅ 4s 3s +33%
ntt_native_x86_64 ✅ 4s 3s +33%
poly_compress_d5_native_x86_64 ✅ 4s 1s +300%
poly_tobytes_native_aarch64 ✅ 4s 2s +100%
polyvec_basemul_acc_montgomery_cached_k3_native_aarch64 ✅ 4s 4s +0%
polyvec_basemul_acc_montgomery_cached_k3_native_x86_64 ✅ 4s 3s +33%
intt_native_aarch64 ✅ 3s 3s +0%
keccakf1600_permute_native ✅ 3s 2s +50%
keccakf1600x4_extract_bytes_native ✅ 3s 3s +0%
kem_check_pk ✅ 3s 2s +50%
kem_check_sk ✅ 3s 3s +0%
kem_enc ✅ 3s 2s +50%
kem_keypair ✅ 3s 3s +0%
mlk_barrett_reduce ✅ 3s 4s -25%
mlk_ct_cmask_nonzero_u16 ✅ 3s 2s +50%
mlk_ct_get_optblocker_i32 ✅ 3s 2s +50%
mlk_ct_get_optblocker_u8 ✅ 3s 2s +50%
mlk_gen_matrix ✅ 3s 4s -25%
mlk_keccak_absorb_once ✅ 3s 5s -40%
mlk_keccakf1600_permute_c ✅ 3s 3s +0%
mlk_keccakf1600_xor_bytes ✅ 3s 2s +50%
mlk_keccakf1600x4_extract_bytes ✅ 3s 1s +200%
mlk_keccakf1600x4_extract_bytes_c ✅ 3s 3s +0%
mlk_keccakf1600x4_xor_bytes_c ✅ 3s 4s -25%
mlk_keypair_getnoise_eta1 ✅ 3s 1s +200%
mlk_matvec_mul ✅ 3s 3s +0%
mlk_poly_compress_d11_native ✅ 3s 1s +200%
mlk_poly_compress_d4 ✅ 3s 4s -25%
mlk_poly_compress_d4_c ✅ 3s 2s +50%
mlk_poly_compress_du ✅ 3s 4s -25%
mlk_poly_decompress_d10 ✅ 3s 1s +200%
mlk_poly_decompress_d10_c ✅ 3s 6s -50%
mlk_poly_decompress_d11_native ✅ 3s 1s +200%
mlk_poly_decompress_d4_c ✅ 3s 3s +0%
mlk_poly_decompress_d5_c ✅ 3s 4s -25%
mlk_poly_decompress_d5_native ✅ 3s 4s -25%
mlk_poly_frombytes_c ✅ 3s 3s +0%
mlk_poly_invntt_tomont_c ✅ 3s 2s +50%
mlk_poly_mulcache_compute ✅ 3s 2s +50%
mlk_poly_mulcache_compute_c ✅ 3s 5s -40%
mlk_poly_tobytes_c ✅ 3s 2s +50%
mlk_poly_tomont_c ✅ 3s 2s +50%
mlk_poly_tomont_native ✅ 3s 3s +0%
mlk_polyvec_decompress_du ✅ 3s 3s +0%
mlk_polyvec_frombytes ✅ 3s 3s +0%
mlk_polyvec_mulcache_compute ✅ 3s 2s +50%
mlk_polyvec_ntt ✅ 3s 2s +50%
mlk_polyvec_tobytes ✅ 3s 1s +200%
mlk_polyvec_tomont ✅ 3s 2s +50%
mlk_rej_uniform ✅ 3s 1s +200%
mlk_scalar_compress_d11 ✅ 3s 3s +0%
mlk_scalar_decompress_d4 ✅ 3s 2s +50%
mlk_shake128x4_absorb_once ✅ 3s 3s +0%
mlk_shake256x4 ✅ 3s 4s -25%
nttunpack_native_x86_64 ✅ 3s 2s +50%
poly_compress_d10_native_x86_64 ✅ 3s 3s +0%
poly_decompress_d10_native_x86_64 ✅ 3s 5s -40%
poly_decompress_d11_native_x86_64 ✅ 3s 2s +50%
poly_decompress_d5_native_x86_64 ✅ 3s 4s -25%
poly_tobytes_native_x86_64 ✅ 3s 2s +50%
polyvec_basemul_acc_montgomery_cached_k2_native_x86_64 ✅ 3s 3s +0%
polyvec_basemul_acc_montgomery_cached_k4_native_aarch64 ✅ 3s 4s -25%
intt_native_x86_64 ✅ 2s 4s -50%
keccak_f1600_x1_native_aarch64 ✅ 2s 1s +100%
keccak_f1600_x4_native_aarch64_v84a ✅ 2s 3s -33%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid ✅ 2s 2s +0%
keccakf1600x4_xor_bytes_native ✅ 2s 1s +100%
kem_keypair_derand ✅ 2s 2s +0%
mlk_ct_cmask_neg_i16 ✅ 2s 4s -50%
mlk_ct_cmask_nonzero_u8 ✅ 2s 2s +0%
mlk_ct_cmov_zero ✅ 2s 2s +0%
mlk_ct_get_optblocker_u32 ✅ 2s 3s -33%
mlk_ct_memcmp ✅ 2s 3s -33%
mlk_gen_matrix_serial ✅ 2s 3s -33%
mlk_keccakf1600_extract_bytes ✅ 2s 1s +100%
mlk_keccakf1600_extract_bytes (big endian) ✅ 2s 1s +100%
mlk_keccakf1600x4_permute ✅ 2s 1s +100%
mlk_keccakf1600x4_xor_bytes ✅ 2s 1s +100%
mlk_poly_cbd_eta2 ✅ 2s 2s +0%
mlk_poly_compress_d10 ✅ 2s 4s -50%
mlk_poly_compress_d10_c ✅ 2s 5s -60%
mlk_poly_compress_d10_native ✅ 2s 2s +0%
mlk_poly_compress_d11 ✅ 2s 2s +0%
mlk_poly_compress_d11_c ✅ 2s 2s +0%
mlk_poly_compress_d5 ✅ 2s 2s +0%
mlk_poly_compress_d5_c ✅ 2s 3s -33%
mlk_poly_compress_d5_native ✅ 2s 2s +0%
mlk_poly_decompress_d4 ✅ 2s 3s -33%
mlk_poly_decompress_d5 ✅ 2s 2s +0%
mlk_poly_decompress_dv ✅ 2s 2s +0%
mlk_poly_frombytes ✅ 2s 2s +0%
mlk_poly_getnoise_eta1122_4x ✅ 2s 2s +0%
mlk_poly_getnoise_eta2 ✅ 2s 2s +0%
mlk_poly_invntt_tomont ✅ 2s 1s +100%
mlk_poly_mulcache_compute_native ✅ 2s 2s +0%
mlk_poly_ntt ✅ 2s 2s +0%
mlk_poly_ntt_c ✅ 2s 2s +0%
mlk_poly_reduce ✅ 2s 3s -33%
mlk_poly_sub ✅ 2s 2s +0%
mlk_poly_tobytes ✅ 2s 3s -33%
mlk_poly_tobytes_native ✅ 2s 3s -33%
mlk_poly_tomont ✅ 2s 2s +0%
mlk_poly_tomsg ✅ 2s 2s +0%
mlk_polyvec_compress_du ✅ 2s 2s +0%
mlk_polyvec_invntt_tomont ✅ 2s 2s +0%
mlk_polyvec_permute_bitrev_to_custom ✅ 2s 2s +0%
mlk_polyvec_reduce ✅ 2s 3s -33%
mlk_scalar_compress_d4 ✅ 2s 2s +0%
mlk_scalar_compress_d5 ✅ 2s 4s -50%
mlk_scalar_decompress_d5 ✅ 2s 2s +0%
mlk_scalar_signed_to_unsigned_q ✅ 2s 2s +0%
mlk_sha3_512 ✅ 2s 1s +100%
mlk_shake128_absorb_once ✅ 2s 3s -33%
mlk_value_barrier_i32 ✅ 2s 3s -33%
mlk_value_barrier_u8 ✅ 2s 3s -33%
poly_compress_d11_native_x86_64 ✅ 2s 3s -33%
poly_compress_d4_native_x86_64 ✅ 2s 2s +0%
poly_mulcache_compute_native_x86_64 ✅ 2s 2s +0%
poly_tomont_native_aarch64 ✅ 2s 2s +0%
poly_tomont_native_x86_64 ✅ 2s 2s +0%
polyvec_basemul_acc_montgomery_cached_k2_native_aarch64 ✅ 2s 3s -33%
rej_uniform_native ✅ 2s 1s +100%
sys_check_capability ✅ 2s 2s +0%
keccak_f1600_x1_native_aarch64_v84a ✅ 1s 2s -50%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid ✅ 1s 2s -50%
keccak_f1600_x4_native_avx2 ✅ 1s 2s -50%
mlk_ct_sel_uint8 ✅ 1s 2s -50%
mlk_keccakf1600_permute ✅ 1s 2s -50%
mlk_poly_decompress_d11 ✅ 1s 2s -50%
mlk_poly_decompress_du ✅ 1s 2s -50%
mlk_polyvec_basemul_acc_montgomery_cached ✅ 1s 3s -67%
mlk_scalar_compress_d1 ✅ 1s 2s -50%
mlk_scalar_compress_d10 ✅ 1s 2s -50%
mlk_scalar_decompress_d10 ✅ 1s 1s +0%
mlk_scalar_decompress_d11 ✅ 1s 2s -50%
mlk_shake128x4_squeezeblocks ✅ 1s 1s +0%
mlk_shake256 ✅ 1s 3s -67%
mlk_value_barrier_u32 ✅ 1s 2s -50%
ntt_native_aarch64 ✅ 1s 2s -50%
poly_getnoise_eta1122_4x_native ✅ 1s 4s -75%
poly_mulcache_compute_native_aarch64 ✅ 1s 2s -50%
poly_reduce_native_aarch64 ✅ 1s 5s -80%
poly_reduce_native_x86_64 ✅ 1s 3s -67%
polyvec_basemul_acc_montgomery_cached_k4_native_x86_64 ✅ 1s 3s -67%
rej_uniform_native_aarch64 ✅ 1s 3s -67%
rej_uniform_native_x86_64 ✅ 1s 3s -67%

@oqs-bot
Copy link
Copy Markdown
Contributor

oqs-bot commented Apr 3, 2026 •
edited
Loading

CBMC Results (ML-KEM-1024)

Full Results (190 proofs)
Proof Status Current Previous Change
**TOTAL** ✅ 1350s 1329s +1.6%
mlk_indcpa_enc ✅ 259s 249s +4%
polyvec_basemul_acc_montgomery_cached_native ✅ 134s 128s +5%
mlk_indcpa_keypair_derand ✅ 88s 77s +14%
mlk_polyvec_basemul_acc_montgomery_cached_c ✅ 79s 69s +14%
mlk_rej_uniform_c ✅ 77s 71s +8%
poly_ntt_native ✅ 38s 30s +27%
mlk_poly_rej_uniform ✅ 33s 33s +0%
mlk_keccak_squeezeblocks_x4 ✅ 29s 25s +16%
mlk_polyvec_add ✅ 25s 26s -4%
keccakf1600x4_permute_native_x4 ✅ 18s 21s -14%
mlk_poly_reduce_native ✅ 16s 15s +7%
mlk_poly_decompress_d5_native ✅ 15s 13s +15%
mlk_poly_decompress_d11_native ✅ 14s 14s +0%
mlk_polyvec_ntt ✅ 13s 16s -19%
mlk_indcpa_dec ✅ 12s 10s +20%
mlk_ntt_layer ✅ 12s 12s +0%
mlk_polymat_permute_bitrev_to_custom ✅ 11s 10s +10%
mlk_poly_compress_d11_c ✅ 10s 8s +25%
mlk_poly_frommsg ✅ 10s 8s +25%
mlk_keccak_absorb_once_x4 ✅ 9s 10s -10%
mlk_poly_rej_uniform_x4 ✅ 9s 7s +29%
kem_dec ✅ 8s 6s +33%
mlk_keccak_squeezeblocks ✅ 8s 8s +0%
poly_frombytes_native_x86_64 ✅ 8s 5s +60%
mlk_poly_frombytes_native ✅ 7s 9s -22%
mlk_fqmul ✅ 6s 7s -14%
mlk_gen_matrix ✅ 6s 7s -14%
mlk_gen_matrix_serial ✅ 6s 6s +0%
mlk_ntt_butterfly_block ✅ 6s 11s -45%
mlk_keccak_squeeze_once ✅ 5s 6s -17%
mlk_poly_add ✅ 5s 5s +0%
mlk_poly_compress_d4_native ✅ 5s 1s +400%
mlk_poly_decompress_d11 ✅ 5s 2s +150%
mlk_poly_reduce_c ✅ 5s 2s +150%
poly_decompress_d11_native_x86_64 ✅ 5s 3s +67%
kem_check_pk ✅ 4s 4s +0%
mlk_ct_cmask_nonzero_u16 ✅ 4s 3s +33%
mlk_invntt_layer ✅ 4s 7s -43%
mlk_keccak_absorb_once ✅ 4s 3s +33%
mlk_poly_compress_d11 ✅ 4s 3s +33%
mlk_poly_getnoise_eta1_4x ✅ 4s 3s +33%
mlk_scalar_decompress_d11 ✅ 4s 4s +0%
mlk_shake256 ✅ 4s 2s +100%
mlk_shake256x4 ✅ 4s 4s +0%
mlk_value_barrier_u32 ✅ 4s 2s +100%
poly_mulcache_compute_native_x86_64 ✅ 4s 3s +33%
polyvec_basemul_acc_montgomery_cached_k3_native_aarch64 ✅ 4s 3s +33%
intt_native_x86_64 ✅ 3s 4s -25%
keccak_f1600_x1_native_aarch64 ✅ 3s 2s +50%
keccak_f1600_x4_native_avx2 ✅ 3s 2s +50%
kem_check_sk ✅ 3s 3s +0%
kem_enc_derand ✅ 3s 2s +50%
mlk_ct_cmask_neg_i16 ✅ 3s 2s +50%
mlk_ct_cmask_nonzero_u8 ✅ 3s 3s +0%
mlk_ct_cmov_zero ✅ 3s 2s +50%
mlk_ct_memcmp ✅ 3s 2s +50%
mlk_ct_sel_uint8 ✅ 3s 4s -25%
mlk_keccakf1600_extract_bytes (big endian) ✅ 3s 2s +50%
mlk_keccakf1600_permute_c ✅ 3s 4s -25%
mlk_keccakf1600x4_extract_bytes ✅ 3s 2s +50%
mlk_keccakf1600x4_xor_bytes ✅ 3s 4s -25%
mlk_keccakf1600x4_xor_bytes_c ✅ 3s 1s +200%
mlk_montgomery_reduce ✅ 3s 3s +0%
mlk_poly_compress_d11_native ✅ 3s 2s +50%
mlk_poly_compress_dv ✅ 3s 3s +0%
mlk_poly_decompress_d5_c ✅ 3s 1s +200%
mlk_poly_decompress_du ✅ 3s 4s -25%
mlk_poly_getnoise_eta1122_4x ✅ 3s 1s +200%
mlk_poly_getnoise_eta1_4x_native ✅ 3s 3s +0%
mlk_poly_getnoise_eta2 ✅ 3s 4s -25%
mlk_poly_invntt_tomont ✅ 3s 3s +0%
mlk_poly_mulcache_compute_c ✅ 3s 3s +0%
mlk_poly_tobytes_native ✅ 3s 2s +50%
mlk_poly_tomont_c ✅ 3s 2s +50%
mlk_poly_tomont_native ✅ 3s 2s +50%
mlk_poly_tomsg ✅ 3s 4s -25%
mlk_polyvec_compress_du ✅ 3s 1s +200%
mlk_polyvec_frombytes ✅ 3s 2s +50%
mlk_polyvec_invntt_tomont ✅ 3s 4s -25%
mlk_polyvec_mulcache_compute ✅ 3s 2s +50%
mlk_polyvec_permute_bitrev_to_custom ✅ 3s 4s -25%
mlk_polyvec_permute_bitrev_to_custom_native ✅ 3s 5s -40%
mlk_polyvec_tobytes ✅ 3s 3s +0%
mlk_rej_uniform ✅ 3s 3s +0%
mlk_scalar_compress_d5 ✅ 3s 3s +0%
mlk_scalar_decompress_d4 ✅ 3s 1s +200%
mlk_value_barrier_i32 ✅ 3s 1s +200%
ntt_native_x86_64 ✅ 3s 3s +0%
nttunpack_native_x86_64 ✅ 3s 5s -40%
poly_compress_d10_native_x86_64 ✅ 3s 4s -25%
poly_decompress_d5_native_x86_64 ✅ 3s 4s -25%
poly_getnoise_eta1122_4x_native ✅ 3s 3s +0%
poly_invntt_tomont_native ✅ 3s 3s +0%
poly_tobytes_native_aarch64 ✅ 3s 2s +50%
poly_tobytes_native_x86_64 ✅ 3s 1s +200%
polyvec_basemul_acc_montgomery_cached_k2_native_aarch64 ✅ 3s 2s +50%
rej_uniform_native ✅ 3s 3s +0%
rej_uniform_native_aarch64 ✅ 3s 6s -50%
intt_native_aarch64 ✅ 2s 2s +0%
keccak_f1600_x1_native_aarch64_v84a ✅ 2s 2s +0%
keccak_f1600_x4_native_aarch64_v84a ✅ 2s 3s -33%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid ✅ 2s 1s +100%
keccakf1600x4_extract_bytes_native ✅ 2s 2s +0%
kem_enc ✅ 2s 2s +0%
kem_keypair ✅ 2s 4s -50%
kem_keypair_derand ✅ 2s 2s +0%
mlk_check_pct ✅ 2s 2s +0%
mlk_ct_get_optblocker_u32 ✅ 2s 2s +0%
mlk_ct_get_optblocker_u8 ✅ 2s 1s +100%
mlk_keccakf1600_extract_bytes ✅ 2s 2s +0%
mlk_keccakf1600_permute ✅ 2s 3s -33%
mlk_keccakf1600_xor_bytes ✅ 2s 2s +0%
mlk_keccakf1600x4_permute ✅ 2s 3s -33%
mlk_keypair_getnoise_eta1 ✅ 2s 6s -67%
mlk_matvec_mul ✅ 2s 5s -60%
mlk_poly_cbd_eta1 ✅ 2s 2s +0%
mlk_poly_cbd_eta2 ✅ 2s 2s +0%
mlk_poly_compress_d10 ✅ 2s 1s +100%
mlk_poly_compress_d10_c ✅ 2s 2s +0%
mlk_poly_compress_d10_native ✅ 2s 3s -33%
mlk_poly_compress_d4 ✅ 2s 2s +0%
mlk_poly_compress_d4_c ✅ 2s 1s +100%
mlk_poly_compress_d5 ✅ 2s 4s -50%
mlk_poly_compress_d5_c ✅ 2s 3s -33%
mlk_poly_compress_d5_native ✅ 2s 2s +0%
mlk_poly_decompress_d4 ✅ 2s 2s +0%
mlk_poly_decompress_d5 ✅ 2s 3s -33%
mlk_poly_decompress_dv ✅ 2s 2s +0%
mlk_poly_frombytes_c ✅ 2s 2s +0%
mlk_poly_invntt_tomont_c ✅ 2s 3s -33%
mlk_poly_mulcache_compute ✅ 2s 3s -33%
mlk_poly_ntt ✅ 2s 2s +0%
mlk_poly_ntt_c ✅ 2s 5s -60%
mlk_poly_reduce ✅ 2s 2s +0%
mlk_poly_sub ✅ 2s 4s -50%
mlk_poly_tobytes ✅ 2s 1s +100%
mlk_poly_tobytes_c ✅ 2s 2s +0%
mlk_polyvec_basemul_acc_montgomery_cached ✅ 2s 3s -33%
mlk_polyvec_decompress_du ✅ 2s 1s +100%
mlk_polyvec_reduce ✅ 2s 1s +100%
mlk_polyvec_tomont ✅ 2s 2s +0%
mlk_scalar_compress_d1 ✅ 2s 3s -33%
mlk_scalar_signed_to_unsigned_q ✅ 2s 1s +100%
mlk_sha3_256 ✅ 2s 2s +0%
mlk_sha3_512 ✅ 2s 3s -33%
mlk_shake128_absorb_once ✅ 2s 2s +0%
mlk_shake128x4_absorb_once ✅ 2s 1s +100%
mlk_shake128x4_squeezeblocks ✅ 2s 2s +0%
poly_compress_d11_native_x86_64 ✅ 2s 1s +100%
poly_compress_d4_native_x86_64 ✅ 2s 3s -33%
poly_decompress_d10_native_x86_64 ✅ 2s 2s +0%
poly_decompress_d4_native_x86_64 ✅ 2s 5s -60%
poly_mulcache_compute_native_aarch64 ✅ 2s 3s -33%
poly_reduce_native_aarch64 ✅ 2s 2s +0%
poly_reduce_native_x86_64 ✅ 2s 4s -50%
poly_tomont_native_x86_64 ✅ 2s 1s +100%
polyvec_basemul_acc_montgomery_cached_k2_native_x86_64 ✅ 2s 3s -33%
polyvec_basemul_acc_montgomery_cached_k4_native_x86_64 ✅ 2s 3s -33%
sys_check_capability ✅ 2s 3s -33%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid ✅ 1s 2s -50%
keccakf1600_permute_native ✅ 1s 1s +0%
keccakf1600x4_xor_bytes_native ✅ 1s 3s -67%
mlk_barrett_reduce ✅ 1s 2s -50%
mlk_ct_get_optblocker_i32 ✅ 1s 2s -50%
mlk_ct_sel_int16 ✅ 1s 2s -50%
mlk_keccakf1600_xor_bytes (big endian) ✅ 1s 1s +0%
mlk_keccakf1600x4_extract_bytes_c ✅ 1s 3s -67%
mlk_poly_compress_du ✅ 1s 2s -50%
mlk_poly_decompress_d10 ✅ 1s 2s -50%
mlk_poly_decompress_d10_c ✅ 1s 4s -75%
mlk_poly_decompress_d10_native ✅ 1s 2s -50%
mlk_poly_decompress_d11_c ✅ 1s 3s -67%
mlk_poly_decompress_d4_c ✅ 1s 2s -50%
mlk_poly_decompress_d4_native ✅ 1s 2s -50%
mlk_poly_frombytes ✅ 1s 2s -50%
mlk_poly_mulcache_compute_native ✅ 1s 1s +0%
mlk_poly_tomont ✅ 1s 3s -67%
mlk_scalar_compress_d10 ✅ 1s 3s -67%
mlk_scalar_compress_d11 ✅ 1s 2s -50%
mlk_scalar_compress_d4 ✅ 1s 3s -67%
mlk_scalar_decompress_d10 ✅ 1s 3s -67%
mlk_scalar_decompress_d5 ✅ 1s 3s -67%
mlk_shake128_squeezeblocks ✅ 1s 3s -67%
mlk_value_barrier_u8 ✅ 1s 1s +0%
ntt_native_aarch64 ✅ 1s 4s -75%
poly_compress_d5_native_x86_64 ✅ 1s 1s +0%
poly_tomont_native_aarch64 ✅ 1s 2s -50%
polyvec_basemul_acc_montgomery_cached_k3_native_x86_64 ✅ 1s 1s +0%
polyvec_basemul_acc_montgomery_cached_k4_native_aarch64 ✅ 1s 2s -50%
rej_uniform_native_x86_64 ✅ 1s 2s -50%

@mkannwischer
Copy link
Copy Markdown
Contributor Author

mkannwischer commented Apr 11, 2026 •
edited
Loading

scan-build and C90 builds seem very slow on riscv64 in the base CI. I will remove those , but instead add the riscv64, native to the extended CI. - the latter does not work because it would require nix which isn't supported yet on riscv64 afaik.

@mkannwischer
auto.mk: Add RVV feature detection for RISC-V 64-bit
ead9ebe 
Previously, -march=rv64gcv was unconditionally added for all riscv64
targets, causing compilation failures on RISC-V systems without the
vector extension. Add host CPU and compiler feature detection for RVV,
mirroring the existing pattern for x86_64 (AVX2/BMI2) and AArch64
(SHA3). The host detection parses the ISA string from /proc/cpuinfo
to check for the 'v' extension.

Also add riscv64 to the host_info make target.

Signed-off-by: Matthias J. Kannwischer <matthias@zerorisc.com>
@mkannwischer
CI: Add RISC-V runners to base CI (via RISE project)
8622975 
The RISE project now provides free RISC-V Github runners, see
https://riseproject-dev.github.io/riscv-runner/
This commit adds them to the Quickcheck and Quickcheck ACVP jobs
of the base CI.

The C90 and scan-build jobs are intentionally not enabled on
RISC-V as they are slow.
We can't run the extended CI on RISC-V as those require nix
which does not yet support RISC-V.

Signed-off-by: Matthias J. Kannwischer <matthias@zerorisc.com>
@mkannwischer mkannwischer marked this pull request as ready for review April 11, 2026 04:06
@mkannwischer mkannwischer requested a review from a team as a code owner April 11, 2026 04:06
@hanno-becker hanno-becker merged commit e2bc4ad into main Apr 11, 2026
764 of 765 checks passed
@hanno-becker hanno-becker deleted the riscv-runners branch April 11, 2026 05:01
@mkannwischer mkannwischer mentioned this pull request Apr 11, 2026
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@hanno-becker hanno-becker hanno-becker approved these changes

Assignees

@hanno-becker hanno-becker

Labels

ci RV64

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@mkannwischer @oqs-bot @hanno-becker