Skip to content

Remove --no-array-field-sensitivity for all proofs#1654

Merged
hanno-becker merged 2 commits intomainfrom
simplify-cbmc-options2
Apr 20, 2026
Merged

Remove --no-array-field-sensitivity for all proofs#1654
hanno-becker merged 2 commits intomainfrom
simplify-cbmc-options2

Conversation

@rod-chapman
Copy link
Copy Markdown
Contributor

@rod-chapman rod-chapman commented Apr 20, 2026

  1. Remove --no-array-field-sensitivity from all per-function Makefiles

  2. Update Makefile.common to:
    a. Reject --slice-formula if specified in a per-function Makefile, since it is already added by default in Makefile.common now.
    b. Reject --no-array-field-sensitivity if specified in a per-function Makefile

@rod-chapman
Remove --no-array-field-sensitivity for all proofs
1e666ca 
1. Remove --no-array-field-sensitivty from all per-function Makefiles

2. Update Makefile.common to:
   a. Reject --slice-formula if specified in a per-function Makefile, since
      it is already added by default in Makefile.common now.
   b. Reject --no-array-field-sensitivity if specified in a per-function Makefile

Signed-off-by: Rod Chapman <rodchap@amazon.com>
@rod-chapman rod-chapman self-assigned this Apr 20, 2026
@rod-chapman rod-chapman requested a review from a team as a code owner April 20, 2026 10:12
@rod-chapman
Copy link
Copy Markdown
Contributor Author

rod-chapman commented Apr 20, 2026

Proof time data before and after this PR, for K=2,3,4

macOS,-j8, CPU user time in minutes:seconds

main branch: 31:22, 32:58, 32:01
this branch: 31:05, 32:57: 32:22

Grv4 (EC2 r8g.metal-24xlarge)/Ubuntu, -j96

main branch: 31:44, 30:58, 30:20
this branch: 31:33, 30:38, 30:05

hanno-becker
hanno-becker reviewed Apr 20, 2026
View reviewed changes
Comment thread proofs/cbmc/Makefile.common Outdated
@oqs-bot
Copy link
Copy Markdown
Contributor

oqs-bot commented Apr 20, 2026 •
edited
Loading

CBMC Results (ML-KEM-1024)

Full Results (191 proofs)
Proof Status Current Previous Change
**TOTAL** ✅ 1644s 1441s +14.1%
mlk_rej_uniform_c ✅ 205s 167s +23%
mlk_indcpa_enc ✅ 187s 161s +16%
mlk_indcpa_keypair_derand ✅ 170s 149s +14%
mlk_polyvec_basemul_acc_montgomery_cached_c ✅ 120s 98s +22%
mlk_ntt_layer ✅ 54s 44s +23%
polyvec_basemul_acc_montgomery_cached_native ✅ 46s 41s +12%
mlk_poly_rej_uniform ✅ 40s 40s +0%
poly_ntt_native ✅ 40s 34s +18%
mlk_keccak_squeezeblocks_x4 ✅ 36s 31s +16%
mlk_poly_reduce_native ✅ 29s 25s +16%
mlk_fqmul ✅ 24s 17s +41%
mlk_poly_decompress_d5_native ✅ 23s 17s +35%
mlk_poly_decompress_d11_native ✅ 19s 17s +12%
keccakf1600x4_permute_native_x4 ✅ 18s 18s +0%
mlk_polyvec_add ✅ 17s 29s -41%
mlk_poly_frombytes_native ✅ 16s 11s +45%
mlk_keccak_squeezeblocks ✅ 12s 8s +50%
mlk_ntt_butterfly_block ✅ 12s 7s +71%
mlk_poly_frommsg ✅ 12s 10s +20%
mlk_indcpa_dec ✅ 11s 11s +0%
mlk_poly_compress_d11_c ✅ 10s 7s +43%
mlk_poly_ntt ✅ 10s 8s +25%
mlk_poly_rej_uniform_x4 ✅ 10s 8s +25%
mlk_polymat_permute_bitrev_to_custom ✅ 10s 11s -9%
mlk_invntt_layer ✅ 9s 9s +0%
mlk_keccak_squeeze_once ✅ 9s 8s +12%
mlk_gen_matrix ✅ 8s 7s +14%
poly_frombytes_native_x86_64 ✅ 8s 6s +33%
kem_dec ✅ 7s 7s +0%
mlk_gen_matrix_serial ✅ 7s 4s +75%
mlk_keccak_absorb_once_x4 ✅ 7s 8s -12%
poly_decompress_d5_native_x86_64 ✅ 6s 4s +50%
kem_enc ✅ 5s 3s +67%
kem_keypair ✅ 5s 2s +150%
mlk_ct_sel_uint8 ✅ 5s 3s +67%
mlk_poly_decompress_d4 ✅ 5s 1s +400%
mlk_poly_ntt_c ✅ 5s 3s +67%
mlk_polyvec_ntt ✅ 5s 7s -29%
mlk_shake256x4 ✅ 5s 4s +25%
poly_decompress_d11_native_x86_64 ✅ 5s 4s +25%
polyvec_basemul_acc_montgomery_cached_k2_native_aarch64 ✅ 5s 2s +150%
polyvec_basemul_acc_montgomery_cached_k3_native_aarch64 ✅ 5s 3s +67%
intt_native_x86_64 ✅ 4s 4s +0%
kem_check_pk ✅ 4s 3s +33%
kem_check_sk ✅ 4s 2s +100%
mlk_barrett_reduce ✅ 4s 4s +0%
mlk_check_pct ✅ 4s 2s +100%
mlk_ct_memcmp ✅ 4s 3s +33%
mlk_enc_getnoise_eta1_eta2 ✅ 4s 5s -20%
mlk_keccak_absorb_once ✅ 4s 4s +0%
mlk_keccakf1600_permute_c ✅ 4s 4s +0%
mlk_keccakf1600x4_xor_bytes_c ✅ 4s 2s +100%
mlk_matvec_mul ✅ 4s 3s +33%
mlk_poly_compress_d11 ✅ 4s 3s +33%
mlk_poly_compress_d5 ✅ 4s 4s +0%
mlk_poly_decompress_d4_c ✅ 4s 1s +300%
mlk_poly_decompress_d5 ✅ 4s 1s +300%
mlk_poly_frombytes_c ✅ 4s 2s +100%
mlk_poly_getnoise_eta1_4x_native ✅ 4s 3s +33%
mlk_poly_mulcache_compute_c ✅ 4s 2s +100%
mlk_poly_reduce_c ✅ 4s 2s +100%
mlk_poly_tobytes ✅ 4s 1s +300%
mlk_poly_tomont_native ✅ 4s 4s +0%
mlk_poly_tomsg ✅ 4s 1s +300%
mlk_polyvec_tobytes ✅ 4s 1s +300%
mlk_rej_uniform ✅ 4s 1s +300%
mlk_scalar_signed_to_unsigned_q ✅ 4s 3s +33%
mlk_shake128_squeezeblocks ✅ 4s 1s +300%
mlk_shake128x4_absorb_once ✅ 4s 3s +33%
mlk_value_barrier_u8 ✅ 4s 2s +100%
poly_mulcache_compute_native_aarch64 ✅ 4s 3s +33%
poly_tobytes_native_aarch64 ✅ 4s 2s +100%
poly_tomont_native_x86_64 ✅ 4s 3s +33%
polyvec_basemul_acc_montgomery_cached_k2_native_x86_64 ✅ 4s 3s +33%
intt_native_aarch64 ✅ 3s 3s +0%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid ✅ 3s 2s +50%
keccakf1600_permute_native ✅ 3s 2s +50%
keccakf1600x4_extract_bytes_native ✅ 3s 1s +200%
keccakf1600x4_xor_bytes_native ✅ 3s 2s +50%
mlk_ct_cmov_zero ✅ 3s 2s +50%
mlk_keccakf1600_extract_bytes ✅ 3s 2s +50%
mlk_keccakf1600_extract_bytes (big endian) ✅ 3s 1s +200%
mlk_keccakf1600_permute ✅ 3s 3s +0%
mlk_keccakf1600x4_permute ✅ 3s 3s +0%
mlk_keccakf1600x4_xor_bytes ✅ 3s 2s +50%
mlk_poly_cbd_eta1 ✅ 3s 4s -25%
mlk_poly_compress_d10_c ✅ 3s 3s +0%
mlk_poly_compress_du ✅ 3s 5s -40%
mlk_poly_decompress_d11 ✅ 3s 2s +50%
mlk_poly_decompress_d4_native ✅ 3s 2s +50%
mlk_poly_decompress_du ✅ 3s 4s -25%
mlk_poly_decompress_dv ✅ 3s 2s +50%
mlk_poly_getnoise_eta2 ✅ 3s 3s +0%
mlk_poly_invntt_tomont ✅ 3s 2s +50%
mlk_poly_invntt_tomont_c ✅ 3s 3s +0%
mlk_poly_tobytes_native ✅ 3s 2s +50%
mlk_poly_tomont ✅ 3s 4s -25%
mlk_poly_tomont_c ✅ 3s 2s +50%
mlk_polyvec_basemul_acc_montgomery_cached ✅ 3s 4s -25%
mlk_polyvec_compress_du ✅ 3s 2s +50%
mlk_polyvec_invntt_tomont ✅ 3s 3s +0%
mlk_polyvec_mulcache_compute ✅ 3s 4s -25%
mlk_polyvec_permute_bitrev_to_custom ✅ 3s 4s -25%
mlk_polyvec_tomont ✅ 3s 2s +50%
mlk_scalar_compress_d1 ✅ 3s 2s +50%
mlk_scalar_compress_d10 ✅ 3s 3s +0%
mlk_scalar_compress_d11 ✅ 3s 2s +50%
mlk_scalar_decompress_d11 ✅ 3s 1s +200%
mlk_scalar_decompress_d5 ✅ 3s 3s +0%
mlk_sha3_256 ✅ 3s 3s +0%
mlk_sha3_512 ✅ 3s 3s +0%
mlk_shake256 ✅ 3s 5s -40%
nttunpack_native_x86_64 ✅ 3s 5s -40%
poly_compress_d10_native_x86_64 ✅ 3s 2s +50%
poly_compress_d11_native_x86_64 ✅ 3s 4s -25%
poly_compress_d5_native_x86_64 ✅ 3s 2s +50%
poly_decompress_d10_native_x86_64 ✅ 3s 4s -25%
poly_tobytes_native_x86_64 ✅ 3s 5s -40%
poly_tomont_native_aarch64 ✅ 3s 3s +0%
polyvec_basemul_acc_montgomery_cached_k3_native_x86_64 ✅ 3s 5s -40%
polyvec_basemul_acc_montgomery_cached_k4_native_aarch64 ✅ 3s 4s -25%
polyvec_basemul_acc_montgomery_cached_k4_native_x86_64 ✅ 3s 3s +0%
rej_uniform_native ✅ 3s 1s +200%
rej_uniform_native_x86_64 ✅ 3s 2s +50%
sys_check_capability ✅ 3s 3s +0%
keccak_f1600_x1_native_aarch64 ✅ 2s 3s -33%
keccak_f1600_x1_native_aarch64_v84a ✅ 2s 2s +0%
keccak_f1600_x4_native_aarch64_v84a ✅ 2s 2s +0%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid ✅ 2s 1s +100%
kem_enc_derand ✅ 2s 4s -50%
kem_keypair_derand ✅ 2s 3s -33%
mlk_ct_cmask_nonzero_u16 ✅ 2s 3s -33%
mlk_ct_get_optblocker_i32 ✅ 2s 1s +100%
mlk_ct_get_optblocker_u32 ✅ 2s 2s +0%
mlk_ct_sel_int16 ✅ 2s 1s +100%
mlk_keccakf1600_xor_bytes ✅ 2s 2s +0%
mlk_keccakf1600_xor_bytes (big endian) ✅ 2s 3s -33%
mlk_keccakf1600x4_extract_bytes_c ✅ 2s 2s +0%
mlk_keypair_getnoise_eta1 ✅ 2s 4s -50%
mlk_poly_add ✅ 2s 1s +100%
mlk_poly_cbd_eta2 ✅ 2s 7s -71%
mlk_poly_compress_d10 ✅ 2s 4s -50%
mlk_poly_compress_d10_native ✅ 2s 2s +0%
mlk_poly_compress_d11_native ✅ 2s 3s -33%
mlk_poly_compress_d4_c ✅ 2s 5s -60%
mlk_poly_compress_d4_native ✅ 2s 1s +100%
mlk_poly_compress_d5_c ✅ 2s 1s +100%
mlk_poly_compress_d5_native ✅ 2s 2s +0%
mlk_poly_decompress_d10 ✅ 2s 2s +0%
mlk_poly_decompress_d10_c ✅ 2s 2s +0%
mlk_poly_decompress_d10_native ✅ 2s 2s +0%
mlk_poly_decompress_d11_c ✅ 2s 2s +0%
mlk_poly_decompress_d5_c ✅ 2s 3s -33%
mlk_poly_frombytes ✅ 2s 2s +0%
mlk_poly_getnoise_eta1122_4x ✅ 2s 2s +0%
mlk_poly_getnoise_eta1_4x ✅ 2s 4s -50%
mlk_poly_mulcache_compute ✅ 2s 2s +0%
mlk_poly_mulcache_compute_native ✅ 2s 1s +100%
mlk_poly_reduce ✅ 2s 2s +0%
mlk_poly_sub ✅ 2s 2s +0%
mlk_poly_tobytes_c ✅ 2s 4s -50%
mlk_polyvec_frombytes ✅ 2s 3s -33%
mlk_polyvec_permute_bitrev_to_custom_native ✅ 2s 2s +0%
mlk_polyvec_reduce ✅ 2s 2s +0%
mlk_scalar_compress_d4 ✅ 2s 2s +0%
mlk_scalar_compress_d5 ✅ 2s 1s +100%
mlk_scalar_decompress_d10 ✅ 2s 3s -33%
mlk_scalar_decompress_d4 ✅ 2s 4s -50%
mlk_value_barrier_i32 ✅ 2s 3s -33%
mlk_value_barrier_u32 ✅ 2s 2s +0%
ntt_native_aarch64 ✅ 2s 3s -33%
ntt_native_x86_64 ✅ 2s 3s -33%
poly_compress_d4_native_x86_64 ✅ 2s 2s +0%
poly_decompress_d4_native_x86_64 ✅ 2s 5s -60%
poly_getnoise_eta1122_4x_native ✅ 2s 2s +0%
poly_invntt_tomont_native ✅ 2s 4s -50%
poly_mulcache_compute_native_x86_64 ✅ 2s 2s +0%
poly_reduce_native_aarch64 ✅ 2s 2s +0%
poly_reduce_native_x86_64 ✅ 2s 2s +0%
rej_uniform_native_aarch64 ✅ 2s 2s +0%
keccak_f1600_x4_native_avx2 ✅ 1s 2s -50%
mlk_ct_cmask_neg_i16 ✅ 1s 4s -75%
mlk_ct_cmask_nonzero_u8 ✅ 1s 1s +0%
mlk_ct_get_optblocker_u8 ✅ 1s 2s -50%
mlk_keccakf1600x4_extract_bytes ✅ 1s 1s +0%
mlk_montgomery_reduce ✅ 1s 2s -50%
mlk_poly_compress_d4 ✅ 1s 2s -50%
mlk_poly_compress_dv ✅ 1s 2s -50%
mlk_polyvec_decompress_du ✅ 1s 2s -50%
mlk_shake128_absorb_once ✅ 1s 2s -50%
mlk_shake128x4_squeezeblocks ✅ 1s 2s -50%

@oqs-bot
Copy link
Copy Markdown
Contributor

oqs-bot commented Apr 20, 2026 •
edited
Loading

CBMC Results (ML-KEM-768)

Full Results (191 proofs)
Proof Status Current Previous Change
**TOTAL** ✅ 1195s 1186s +0.8%
mlk_indcpa_keypair_derand ✅ 181s 184s -2%
mlk_indcpa_enc ✅ 159s 161s -1%
mlk_rej_uniform_c ✅ 113s 113s +0%
mlk_polyvec_basemul_acc_montgomery_cached_c ✅ 41s 39s +5%
mlk_poly_rej_uniform ✅ 30s 30s +0%
mlk_ntt_layer ✅ 29s 25s +16%
mlk_keccak_squeezeblocks_x4 ✅ 24s 23s +4%
poly_ntt_native ✅ 24s 24s +0%
mlk_poly_reduce_native ✅ 20s 18s +11%
keccakf1600x4_permute_native_x4 ✅ 18s 18s +0%
polyvec_basemul_acc_montgomery_cached_native ✅ 18s 16s +12%
mlk_fqmul ✅ 17s 15s +13%
mlk_poly_decompress_d4_native ✅ 13s 12s +8%
mlk_indcpa_dec ✅ 12s 12s +0%
mlk_poly_decompress_d10_native ✅ 12s 12s +0%
mlk_poly_frombytes_native ✅ 9s 6s +50%
mlk_polyvec_add ✅ 9s 24s -62%
mlk_keccak_squeeze_once ✅ 8s 8s +0%
mlk_ntt_butterfly_block ✅ 8s 6s +33%
mlk_keccak_absorb_once_x4 ✅ 7s 6s +17%
mlk_keccak_squeezeblocks ✅ 7s 7s +0%
mlk_poly_frommsg ✅ 7s 8s -12%
kem_dec ✅ 6s 4s +50%
mlk_invntt_layer ✅ 6s 5s +20%
mlk_poly_ntt ✅ 6s 4s +50%
mlk_keccakf1600_permute_c ✅ 5s 3s +67%
mlk_poly_rej_uniform_x4 ✅ 5s 9s -44%
mlk_polyvec_permute_bitrev_to_custom ✅ 5s 4s +25%
mlk_scalar_compress_d5 ✅ 5s 2s +150%
poly_frombytes_native_x86_64 ✅ 5s 4s +25%
keccak_f1600_x1_native_aarch64 ✅ 4s 1s +300%
kem_keypair_derand ✅ 4s 2s +100%
mlk_ct_get_optblocker_u8 ✅ 4s 1s +300%
mlk_gen_matrix ✅ 4s 6s -33%
mlk_keccak_absorb_once ✅ 4s 3s +33%
mlk_keccakf1600x4_extract_bytes_c ✅ 4s 1s +300%
mlk_poly_cbd_eta2 ✅ 4s 3s +33%
mlk_poly_compress_d10_native ✅ 4s 2s +100%
mlk_poly_compress_d5_c ✅ 4s 2s +100%
mlk_poly_compress_dv ✅ 4s 3s +33%
mlk_poly_decompress_d4_c ✅ 4s 3s +33%
mlk_poly_decompress_du ✅ 4s 1s +300%
mlk_poly_frombytes ✅ 4s 1s +300%
mlk_shake128_absorb_once ✅ 4s 2s +100%
mlk_shake128x4_squeezeblocks ✅ 4s 3s +33%
mlk_shake256x4 ✅ 4s 3s +33%
mlk_value_barrier_u32 ✅ 4s 1s +300%
mlk_value_barrier_u8 ✅ 4s 1s +300%
ntt_native_x86_64 ✅ 4s 4s +0%
poly_compress_d4_native_x86_64 ✅ 4s 3s +33%
poly_decompress_d4_native_x86_64 ✅ 4s 3s +33%
poly_decompress_d5_native_x86_64 ✅ 4s 2s +100%
poly_mulcache_compute_native_aarch64 ✅ 4s 4s +0%
intt_native_x86_64 ✅ 3s 1s +200%
keccak_f1600_x4_native_aarch64_v84a ✅ 3s 3s +0%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid ✅ 3s 2s +50%
keccak_f1600_x4_native_avx2 ✅ 3s 2s +50%
kem_check_pk ✅ 3s 3s +0%
kem_check_sk ✅ 3s 1s +200%
kem_enc ✅ 3s 2s +50%
kem_keypair ✅ 3s 3s +0%
mlk_check_pct ✅ 3s 2s +50%
mlk_ct_cmov_zero ✅ 3s 2s +50%
mlk_ct_sel_uint8 ✅ 3s 2s +50%
mlk_gen_matrix_serial ✅ 3s 3s +0%
mlk_keccakf1600_permute ✅ 3s 4s -25%
mlk_keccakf1600x4_xor_bytes_c ✅ 3s 3s +0%
mlk_matvec_mul ✅ 3s 2s +50%
mlk_poly_compress_d10_c ✅ 3s 5s -40%
mlk_poly_compress_du ✅ 3s 3s +0%
mlk_poly_decompress_d10_c ✅ 3s 2s +50%
mlk_poly_decompress_d11_native ✅ 3s 3s +0%
mlk_poly_decompress_d4 ✅ 3s 3s +0%
mlk_poly_decompress_d5 ✅ 3s 2s +50%
mlk_poly_decompress_d5_c ✅ 3s 2s +50%
mlk_poly_decompress_dv ✅ 3s 2s +50%
mlk_poly_getnoise_eta1122_4x ✅ 3s 2s +50%
mlk_poly_invntt_tomont_c ✅ 3s 1s +200%
mlk_poly_mulcache_compute_c ✅ 3s 3s +0%
mlk_poly_ntt_c ✅ 3s 4s -25%
mlk_poly_reduce ✅ 3s 2s +50%
mlk_poly_tomont ✅ 3s 1s +200%
mlk_poly_tomont_c ✅ 3s 3s +0%
mlk_polymat_permute_bitrev_to_custom ✅ 3s 5s -40%
mlk_polyvec_decompress_du ✅ 3s 2s +50%
mlk_polyvec_ntt ✅ 3s 6s -50%
mlk_polyvec_reduce ✅ 3s 2s +50%
mlk_scalar_compress_d4 ✅ 3s 3s +0%
mlk_scalar_decompress_d11 ✅ 3s 2s +50%
mlk_shake128x4_absorb_once ✅ 3s 2s +50%
poly_decompress_d10_native_x86_64 ✅ 3s 4s -25%
poly_decompress_d11_native_x86_64 ✅ 3s 2s +50%
poly_invntt_tomont_native ✅ 3s 2s +50%
polyvec_basemul_acc_montgomery_cached_k2_native_aarch64 ✅ 3s 3s +0%
polyvec_basemul_acc_montgomery_cached_k3_native_aarch64 ✅ 3s 2s +50%
polyvec_basemul_acc_montgomery_cached_k3_native_x86_64 ✅ 3s 3s +0%
polyvec_basemul_acc_montgomery_cached_k4_native_aarch64 ✅ 3s 1s +200%
polyvec_basemul_acc_montgomery_cached_k4_native_x86_64 ✅ 3s 1s +200%
rej_uniform_native_aarch64 ✅ 3s 4s -25%
intt_native_aarch64 ✅ 2s 2s +0%
keccakf1600x4_extract_bytes_native ✅ 2s 2s +0%
kem_enc_derand ✅ 2s 3s -33%
mlk_ct_cmask_neg_i16 ✅ 2s 1s +100%
mlk_ct_cmask_nonzero_u16 ✅ 2s 2s +0%
mlk_ct_cmask_nonzero_u8 ✅ 2s 1s +100%
mlk_ct_get_optblocker_u32 ✅ 2s 4s -50%
mlk_ct_memcmp ✅ 2s 3s -33%
mlk_ct_sel_int16 ✅ 2s 1s +100%
mlk_enc_getnoise_eta1_eta2 ✅ 2s 2s +0%
mlk_keccakf1600_extract_bytes (big endian) ✅ 2s 1s +100%
mlk_keccakf1600_xor_bytes ✅ 2s 2s +0%
mlk_keccakf1600x4_extract_bytes ✅ 2s 3s -33%
mlk_keccakf1600x4_permute ✅ 2s 3s -33%
mlk_keypair_getnoise_eta1 ✅ 2s 3s -33%
mlk_montgomery_reduce ✅ 2s 1s +100%
mlk_poly_add ✅ 2s 2s +0%
mlk_poly_cbd_eta1 ✅ 2s 2s +0%
mlk_poly_compress_d10 ✅ 2s 2s +0%
mlk_poly_compress_d11_c ✅ 2s 2s +0%
mlk_poly_compress_d11_native ✅ 2s 2s +0%
mlk_poly_compress_d4 ✅ 2s 1s +100%
mlk_poly_compress_d4_c ✅ 2s 3s -33%
mlk_poly_compress_d4_native ✅ 2s 3s -33%
mlk_poly_compress_d5 ✅ 2s 3s -33%
mlk_poly_decompress_d10 ✅ 2s 3s -33%
mlk_poly_decompress_d11_c ✅ 2s 4s -50%
mlk_poly_frombytes_c ✅ 2s 3s -33%
mlk_poly_getnoise_eta1_4x ✅ 2s 6s -67%
mlk_poly_getnoise_eta2 ✅ 2s 3s -33%
mlk_poly_invntt_tomont ✅ 2s 2s +0%
mlk_poly_mulcache_compute ✅ 2s 1s +100%
mlk_poly_mulcache_compute_native ✅ 2s 2s +0%
mlk_poly_reduce_c ✅ 2s 2s +0%
mlk_poly_sub ✅ 2s 3s -33%
mlk_poly_tobytes ✅ 2s 1s +100%
mlk_poly_tomont_native ✅ 2s 4s -50%
mlk_poly_tomsg ✅ 2s 3s -33%
mlk_polyvec_basemul_acc_montgomery_cached ✅ 2s 3s -33%
mlk_polyvec_compress_du ✅ 2s 2s +0%
mlk_polyvec_frombytes ✅ 2s 1s +100%
mlk_polyvec_invntt_tomont ✅ 2s 3s -33%
mlk_polyvec_mulcache_compute ✅ 2s 2s +0%
mlk_polyvec_permute_bitrev_to_custom_native ✅ 2s 3s -33%
mlk_polyvec_tobytes ✅ 2s 4s -50%
mlk_rej_uniform ✅ 2s 3s -33%
mlk_scalar_compress_d1 ✅ 2s 1s +100%
mlk_scalar_compress_d11 ✅ 2s 4s -50%
mlk_scalar_decompress_d10 ✅ 2s 4s -50%
mlk_scalar_decompress_d4 ✅ 2s 2s +0%
mlk_scalar_decompress_d5 ✅ 2s 2s +0%
mlk_sha3_256 ✅ 2s 3s -33%
mlk_shake128_squeezeblocks ✅ 2s 2s +0%
mlk_shake256 ✅ 2s 3s -33%
ntt_native_aarch64 ✅ 2s 2s +0%
nttunpack_native_x86_64 ✅ 2s 4s -50%
poly_compress_d11_native_x86_64 ✅ 2s 2s +0%
poly_mulcache_compute_native_x86_64 ✅ 2s 2s +0%
poly_reduce_native_x86_64 ✅ 2s 2s +0%
poly_tomont_native_aarch64 ✅ 2s 1s +100%
poly_tomont_native_x86_64 ✅ 2s 1s +100%
polyvec_basemul_acc_montgomery_cached_k2_native_x86_64 ✅ 2s 2s +0%
rej_uniform_native ✅ 2s 5s -60%
rej_uniform_native_x86_64 ✅ 2s 1s +100%
keccak_f1600_x1_native_aarch64_v84a ✅ 1s 2s -50%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid ✅ 1s 2s -50%
keccakf1600_permute_native ✅ 1s 1s +0%
keccakf1600x4_xor_bytes_native ✅ 1s 1s +0%
mlk_barrett_reduce ✅ 1s 5s -80%
mlk_ct_get_optblocker_i32 ✅ 1s 1s +0%
mlk_keccakf1600_extract_bytes ✅ 1s 1s +0%
mlk_keccakf1600_xor_bytes (big endian) ✅ 1s 4s -75%
mlk_keccakf1600x4_xor_bytes ✅ 1s 1s +0%
mlk_poly_compress_d11 ✅ 1s 2s -50%
mlk_poly_compress_d5_native ✅ 1s 2s -50%
mlk_poly_decompress_d11 ✅ 1s 1s +0%
mlk_poly_decompress_d5_native ✅ 1s 1s +0%
mlk_poly_getnoise_eta1_4x_native ✅ 1s 2s -50%
mlk_poly_tobytes_c ✅ 1s 2s -50%
mlk_poly_tobytes_native ✅ 1s 2s -50%
mlk_polyvec_tomont ✅ 1s 4s -75%
mlk_scalar_compress_d10 ✅ 1s 3s -67%
mlk_scalar_signed_to_unsigned_q ✅ 1s 4s -75%
mlk_sha3_512 ✅ 1s 1s +0%
mlk_value_barrier_i32 ✅ 1s 1s +0%
poly_compress_d10_native_x86_64 ✅ 1s 1s +0%
poly_compress_d5_native_x86_64 ✅ 1s 2s -50%
poly_getnoise_eta1122_4x_native ✅ 1s 2s -50%
poly_reduce_native_aarch64 ✅ 1s 3s -67%
poly_tobytes_native_aarch64 ✅ 1s 1s +0%
poly_tobytes_native_x86_64 ✅ 1s 4s -75%
sys_check_capability ✅ 1s 1s +0%

@oqs-bot
Copy link
Copy Markdown
Contributor

oqs-bot commented Apr 20, 2026 •
edited
Loading

CBMC Results (ML-KEM-512)

Full Results (191 proofs)
Proof Status Current Previous Change
**TOTAL** ✅ 1313s 1233s +6.5%
mlk_indcpa_keypair_derand ✅ 250s 234s +7%
mlk_indcpa_enc ✅ 171s 153s +12%
mlk_rej_uniform_c ✅ 126s 103s +22%
mlk_polyvec_basemul_acc_montgomery_cached_c ✅ 52s 50s +4%
mlk_ntt_layer ✅ 36s 27s +33%
mlk_poly_rej_uniform ✅ 32s 26s +23%
mlk_keccak_squeezeblocks_x4 ✅ 27s 23s +17%
poly_ntt_native ✅ 26s 22s +18%
mlk_poly_reduce_native ✅ 21s 17s +24%
keccakf1600x4_permute_native_x4 ✅ 18s 18s +0%
mlk_fqmul ✅ 18s 16s +12%
mlk_indcpa_dec ✅ 15s 14s +7%
mlk_poly_decompress_d10_native ✅ 15s 11s +36%
mlk_poly_decompress_d4_native ✅ 14s 12s +17%
mlk_polyvec_add ✅ 11s 18s -39%
mlk_keccak_squeezeblocks ✅ 10s 6s +67%
mlk_poly_frombytes_native ✅ 9s 8s +12%
polyvec_basemul_acc_montgomery_cached_native ✅ 9s 7s +29%
mlk_invntt_layer ✅ 8s 4s +100%
mlk_keccak_squeeze_once ✅ 8s 7s +14%
mlk_poly_frommsg ✅ 8s 7s +14%
mlk_poly_ntt ✅ 8s 6s +33%
mlk_ntt_butterfly_block ✅ 7s 6s +17%
mlk_poly_rej_uniform_x4 ✅ 7s 6s +17%
poly_frombytes_native_x86_64 ✅ 6s 6s +0%
mlk_keccak_absorb_once_x4 ✅ 5s 6s -17%
mlk_keccakf1600_permute_c ✅ 5s 3s +67%
mlk_poly_cbd_eta2 ✅ 5s 3s +67%
polyvec_basemul_acc_montgomery_cached_k3_native_x86_64 ✅ 5s 3s +67%
intt_native_x86_64 ✅ 4s 2s +100%
kem_check_pk ✅ 4s 4s +0%
mlk_barrett_reduce ✅ 4s 1s +300%
mlk_enc_getnoise_eta1_eta2 ✅ 4s 2s +100%
mlk_keccak_absorb_once ✅ 4s 3s +33%
mlk_poly_add ✅ 4s 4s +0%
mlk_poly_compress_du ✅ 4s 4s +0%
mlk_poly_ntt_c ✅ 4s 3s +33%
mlk_rej_uniform ✅ 4s 1s +300%
mlk_scalar_decompress_d11 ✅ 4s 3s +33%
mlk_shake128x4_squeezeblocks ✅ 4s 1s +300%
poly_decompress_d10_native_x86_64 ✅ 4s 3s +33%
poly_decompress_d4_native_x86_64 ✅ 4s 5s -20%
poly_decompress_d5_native_x86_64 ✅ 4s 1s +300%
poly_invntt_tomont_native ✅ 4s 3s +33%
polyvec_basemul_acc_montgomery_cached_k4_native_aarch64 ✅ 4s 2s +100%
keccakf1600x4_extract_bytes_native ✅ 3s 2s +50%
kem_dec ✅ 3s 5s -40%
kem_enc_derand ✅ 3s 3s +0%
mlk_ct_cmask_nonzero_u16 ✅ 3s 1s +200%
mlk_ct_cmov_zero ✅ 3s 3s +0%
mlk_ct_get_optblocker_i32 ✅ 3s 5s -40%
mlk_ct_sel_uint8 ✅ 3s 1s +200%
mlk_gen_matrix ✅ 3s 2s +50%
mlk_gen_matrix_serial ✅ 3s 1s +200%
mlk_keccakf1600_extract_bytes ✅ 3s 1s +200%
mlk_keccakf1600_extract_bytes (big endian) ✅ 3s 2s +50%
mlk_keccakf1600_xor_bytes ✅ 3s 1s +200%
mlk_keccakf1600x4_extract_bytes ✅ 3s 2s +50%
mlk_keccakf1600x4_xor_bytes ✅ 3s 1s +200%
mlk_montgomery_reduce ✅ 3s 1s +200%
mlk_poly_cbd_eta1 ✅ 3s 3s +0%
mlk_poly_compress_d10_c ✅ 3s 4s -25%
mlk_poly_compress_d11_c ✅ 3s 2s +50%
mlk_poly_compress_d4 ✅ 3s 2s +50%
mlk_poly_compress_dv ✅ 3s 3s +0%
mlk_poly_decompress_d11_native ✅ 3s 2s +50%
mlk_poly_decompress_du ✅ 3s 4s -25%
mlk_poly_getnoise_eta1122_4x ✅ 3s 3s +0%
mlk_poly_getnoise_eta1_4x_native ✅ 3s 1s +200%
mlk_poly_getnoise_eta2 ✅ 3s 4s -25%
mlk_poly_invntt_tomont ✅ 3s 1s +200%
mlk_poly_invntt_tomont_c ✅ 3s 3s +0%
mlk_poly_mulcache_compute_c ✅ 3s 4s -25%
mlk_poly_reduce_c ✅ 3s 3s +0%
mlk_poly_tobytes_native ✅ 3s 2s +50%
mlk_poly_tomont ✅ 3s 1s +200%
mlk_poly_tomsg ✅ 3s 3s +0%
mlk_polyvec_basemul_acc_montgomery_cached ✅ 3s 3s +0%
mlk_polyvec_compress_du ✅ 3s 3s +0%
mlk_polyvec_decompress_du ✅ 3s 4s -25%
mlk_polyvec_mulcache_compute ✅ 3s 3s +0%
mlk_polyvec_reduce ✅ 3s 4s -25%
mlk_polyvec_tobytes ✅ 3s 2s +50%
mlk_scalar_compress_d11 ✅ 3s 4s -25%
mlk_scalar_decompress_d5 ✅ 3s 1s +200%
mlk_sha3_256 ✅ 3s 3s +0%
mlk_sha3_512 ✅ 3s 1s +200%
mlk_shake128x4_absorb_once ✅ 3s 1s +200%
mlk_shake256x4 ✅ 3s 4s -25%
mlk_value_barrier_i32 ✅ 3s 1s +200%
ntt_native_aarch64 ✅ 3s 3s +0%
ntt_native_x86_64 ✅ 3s 3s +0%
nttunpack_native_x86_64 ✅ 3s 1s +200%
poly_getnoise_eta1122_4x_native ✅ 3s 2s +50%
poly_mulcache_compute_native_aarch64 ✅ 3s 4s -25%
poly_reduce_native_x86_64 ✅ 3s 1s +200%
rej_uniform_native_x86_64 ✅ 3s 4s -25%
intt_native_aarch64 ✅ 2s 3s -33%
keccak_f1600_x1_native_aarch64 ✅ 2s 2s +0%
keccak_f1600_x1_native_aarch64_v84a ✅ 2s 3s -33%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid ✅ 2s 2s +0%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid ✅ 2s 3s -33%
keccakf1600_permute_native ✅ 2s 4s -50%
kem_enc ✅ 2s 4s -50%
kem_keypair_derand ✅ 2s 2s +0%
mlk_check_pct ✅ 2s 2s +0%
mlk_ct_cmask_neg_i16 ✅ 2s 2s +0%
mlk_ct_cmask_nonzero_u8 ✅ 2s 3s -33%
mlk_ct_memcmp ✅ 2s 4s -50%
mlk_ct_sel_int16 ✅ 2s 1s +100%
mlk_keccakf1600_permute ✅ 2s 3s -33%
mlk_keccakf1600x4_extract_bytes_c ✅ 2s 2s +0%
mlk_keccakf1600x4_permute ✅ 2s 1s +100%
mlk_keccakf1600x4_xor_bytes_c ✅ 2s 3s -33%
mlk_matvec_mul ✅ 2s 4s -50%
mlk_poly_compress_d10 ✅ 2s 3s -33%
mlk_poly_compress_d10_native ✅ 2s 5s -60%
mlk_poly_compress_d4_c ✅ 2s 3s -33%
mlk_poly_compress_d4_native ✅ 2s 2s +0%
mlk_poly_compress_d5 ✅ 2s 2s +0%
mlk_poly_compress_d5_c ✅ 2s 4s -50%
mlk_poly_compress_d5_native ✅ 2s 1s +100%
mlk_poly_decompress_d10 ✅ 2s 3s -33%
mlk_poly_decompress_d11 ✅ 2s 1s +100%
mlk_poly_decompress_d4_c ✅ 2s 2s +0%
mlk_poly_decompress_d5_c ✅ 2s 3s -33%
mlk_poly_decompress_d5_native ✅ 2s 3s -33%
mlk_poly_decompress_dv ✅ 2s 4s -50%
mlk_poly_frombytes ✅ 2s 3s -33%
mlk_poly_frombytes_c ✅ 2s 2s +0%
mlk_poly_getnoise_eta1_4x ✅ 2s 2s +0%
mlk_poly_mulcache_compute ✅ 2s 2s +0%
mlk_poly_mulcache_compute_native ✅ 2s 2s +0%
mlk_poly_reduce ✅ 2s 1s +100%
mlk_poly_sub ✅ 2s 3s -33%
mlk_poly_tobytes ✅ 2s 3s -33%
mlk_poly_tobytes_c ✅ 2s 2s +0%
mlk_poly_tomont_native ✅ 2s 3s -33%
mlk_polymat_permute_bitrev_to_custom ✅ 2s 6s -67%
mlk_polyvec_frombytes ✅ 2s 2s +0%
mlk_polyvec_invntt_tomont ✅ 2s 4s -50%
mlk_polyvec_ntt ✅ 2s 2s +0%
mlk_polyvec_permute_bitrev_to_custom ✅ 2s 2s +0%
mlk_polyvec_tomont ✅ 2s 2s +0%
mlk_scalar_compress_d10 ✅ 2s 1s +100%
mlk_scalar_compress_d4 ✅ 2s 3s -33%
mlk_scalar_compress_d5 ✅ 2s 2s +0%
mlk_shake128_absorb_once ✅ 2s 1s +100%
mlk_shake128_squeezeblocks ✅ 2s 2s +0%
mlk_shake256 ✅ 2s 4s -50%
mlk_value_barrier_u32 ✅ 2s 2s +0%
mlk_value_barrier_u8 ✅ 2s 2s +0%
poly_compress_d10_native_x86_64 ✅ 2s 2s +0%
poly_compress_d4_native_x86_64 ✅ 2s 4s -50%
poly_compress_d5_native_x86_64 ✅ 2s 2s +0%
poly_mulcache_compute_native_x86_64 ✅ 2s 3s -33%
poly_tobytes_native_x86_64 ✅ 2s 3s -33%
poly_tomont_native_aarch64 ✅ 2s 2s +0%
poly_tomont_native_x86_64 ✅ 2s 2s +0%
polyvec_basemul_acc_montgomery_cached_k2_native_aarch64 ✅ 2s 2s +0%
polyvec_basemul_acc_montgomery_cached_k2_native_x86_64 ✅ 2s 3s -33%
rej_uniform_native ✅ 2s 2s +0%
rej_uniform_native_aarch64 ✅ 2s 2s +0%
sys_check_capability ✅ 2s 1s +100%
keccak_f1600_x4_native_aarch64_v84a ✅ 1s 2s -50%
keccak_f1600_x4_native_avx2 ✅ 1s 3s -67%
keccakf1600x4_xor_bytes_native ✅ 1s 2s -50%
kem_check_sk ✅ 1s 2s -50%
kem_keypair ✅ 1s 2s -50%
mlk_ct_get_optblocker_u32 ✅ 1s 1s +0%
mlk_ct_get_optblocker_u8 ✅ 1s 2s -50%
mlk_keccakf1600_xor_bytes (big endian) ✅ 1s 2s -50%
mlk_keypair_getnoise_eta1 ✅ 1s 4s -75%
mlk_poly_compress_d11 ✅ 1s 2s -50%
mlk_poly_compress_d11_native ✅ 1s 4s -75%
mlk_poly_decompress_d10_c ✅ 1s 4s -75%
mlk_poly_decompress_d11_c ✅ 1s 2s -50%
mlk_poly_decompress_d4 ✅ 1s 2s -50%
mlk_poly_decompress_d5 ✅ 1s 3s -67%
mlk_poly_tomont_c ✅ 1s 2s -50%
mlk_polyvec_permute_bitrev_to_custom_native ✅ 1s 2s -50%
mlk_scalar_compress_d1 ✅ 1s 4s -75%
mlk_scalar_decompress_d10 ✅ 1s 4s -75%
mlk_scalar_decompress_d4 ✅ 1s 2s -50%
mlk_scalar_signed_to_unsigned_q ✅ 1s 3s -67%
poly_compress_d11_native_x86_64 ✅ 1s 3s -67%
poly_decompress_d11_native_x86_64 ✅ 1s 2s -50%
poly_reduce_native_aarch64 ✅ 1s 3s -67%
poly_tobytes_native_aarch64 ✅ 1s 2s -50%
polyvec_basemul_acc_montgomery_cached_k3_native_aarch64 ✅ 1s 5s -80%
polyvec_basemul_acc_montgomery_cached_k4_native_x86_64 ✅ 1s 2s -50%

@rod-chapman @hanno-becker
Update proofs/cbmc/Makefile.common
1dcb386 
Co-authored-by: Hanno Becker <beckphan@amazon.co.uk>
Signed-off-by: Roderick Chapman <rodchap@amazon.com>
@hanno-becker hanno-becker merged commit 5d6774a into main Apr 20, 2026
389 checks passed
@hanno-becker hanno-becker deleted the simplify-cbmc-options2 branch April 20, 2026 13:21
mkannwischer added a commit to pq-code-package/mldsa-native that referenced this pull request Apr 20, 2026
@mkannwischer
CBMC: Remove --no-array-field-sensitivity from all proofs
4e8c54b 
Ports pq-code-package/mlkem-native#1654

Signed-off-by: Matthias J. Kannwischer <matthias@zerorisc.com>
mkannwischer added a commit to pq-code-package/mldsa-native that referenced this pull request Apr 20, 2026
@mkannwischer
CBMC: Remove --no-array-field-sensitivity from all proofs
56bfbee 
Ports pq-code-package/mlkem-native#1654

Signed-off-by: Matthias J. Kannwischer <matthias@zerorisc.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@hanno-becker hanno-becker hanno-becker approved these changes

Assignees

@rod-chapman rod-chapman

Labels

CBMC

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@rod-chapman @oqs-bot @hanno-becker