Skip to content

CI: Bump ACVP, liboqs, expo, and AWS-LC versions#1662

Merged
mkannwischer merged 1 commit intomainfrom
ci-version-bumps
Apr 24, 2026
Merged

CI: Bump ACVP, liboqs, expo, and AWS-LC versions#1662
mkannwischer merged 1 commit intomainfrom
ci-version-bumps

Conversation

@mkannwischer
Copy link
Copy Markdown
Contributor

@mkannwischer mkannwischer commented Apr 22, 2026

  • ACVP: slide window to [v1.1.0.40, v1.1.0.41, v1.1.0.42]
  • liboqs: bump to main (2026-04-21, d8509387)
  • expo: bump to master (2026-04-21, 53619a73)
  • AWS-LC: bump to v1.72.0

Drop the v1.1.0.39 dk-in-tg fallback in test/acvp/acvp_client.py now that v1.1.0.39 is no longer in the test matrix.

@oqs-bot
Copy link
Copy Markdown
Contributor

oqs-bot commented Apr 22, 2026 •
edited
Loading

CBMC Results (ML-KEM-1024)

Full Results (191 proofs)
Proof Status Current Previous Change
**TOTAL** ✅ 1224s 1349s -9.3%
mlk_indcpa_enc ✅ 147s 164s -10%
mlk_indcpa_keypair_derand ✅ 127s 144s -12%
mlk_rej_uniform_c ✅ 122s 160s -24%
mlk_polyvec_basemul_acc_montgomery_cached_c ✅ 79s 84s -6%
polyvec_basemul_acc_montgomery_cached_native ✅ 37s 35s +6%
mlk_ntt_layer ✅ 33s 38s -13%
mlk_poly_rej_uniform ✅ 30s 30s +0%
mlk_keccak_squeezeblocks_x4 ✅ 25s 27s -7%
poly_ntt_native ✅ 24s 28s -14%
mlk_poly_reduce_native ✅ 23s 26s -12%
keccakf1600x4_permute_native_x4 ✅ 19s 19s +0%
mlk_poly_decompress_d5_native ✅ 16s 15s +7%
mlk_fqmul ✅ 15s 17s -12%
mlk_poly_decompress_d11_native ✅ 15s 15s +0%
mlk_polyvec_add ✅ 14s 11s +27%
mlk_indcpa_dec ✅ 10s 9s +11%
mlk_poly_frommsg ✅ 10s 10s +0%
mlk_keccak_squeezeblocks ✅ 9s 11s -18%
mlk_poly_frombytes_native ✅ 9s 12s -25%
mlk_poly_ntt ✅ 9s 8s +12%
mlk_keccak_squeeze_once ✅ 8s 9s -11%
mlk_keccakf1600_permute_c ✅ 8s 5s +60%
mlk_ntt_butterfly_block ✅ 8s 7s +14%
mlk_gen_matrix ✅ 7s 6s +17%
mlk_keccak_absorb_once_x4 ✅ 7s 6s +17%
mlk_polymat_permute_bitrev_to_custom ✅ 7s 8s -12%
poly_decompress_d5_native_x86_64 ✅ 7s 5s +40%
kem_check_pk ✅ 6s 4s +50%
mlk_keccak_absorb_once ✅ 6s 5s +20%
mlk_poly_rej_uniform_x4 ✅ 6s 6s +0%
poly_decompress_d11_native_x86_64 ✅ 6s 5s +20%
rej_uniform_native_x86_64 ✅ 6s 8s -25%
kem_check_sk ✅ 5s 3s +67%
kem_dec ✅ 5s 5s +0%
mlk_poly_compress_d11_c ✅ 5s 4s +25%
mlk_poly_decompress_dv ✅ 5s 2s +150%
mlk_poly_mulcache_compute_native ✅ 5s 2s +150%
poly_frombytes_native_x86_64 ✅ 5s 5s +0%
mlk_ct_cmask_nonzero_u16 ✅ 4s 3s +33%
mlk_ct_memcmp ✅ 4s 2s +100%
mlk_gen_matrix_serial ✅ 4s 5s -20%
mlk_invntt_layer ✅ 4s 5s -20%
mlk_poly_compress_d5 ✅ 4s 4s +0%
mlk_poly_compress_du ✅ 4s 4s +0%
mlk_poly_compress_dv ✅ 4s 3s +33%
mlk_poly_getnoise_eta1_4x ✅ 4s 2s +100%
mlk_poly_getnoise_eta1_4x_native ✅ 4s 4s +0%
mlk_polyvec_permute_bitrev_to_custom ✅ 4s 3s +33%
mlk_scalar_compress_d1 ✅ 4s 2s +100%
mlk_scalar_decompress_d10 ✅ 4s 3s +33%
mlk_shake128x4_absorb_once ✅ 4s 2s +100%
polyvec_basemul_acc_montgomery_cached_k3_native_x86_64 ✅ 4s 3s +33%
polyvec_basemul_acc_montgomery_cached_k4_native_x86_64 ✅ 4s 3s +33%
intt_native_x86_64 ✅ 3s 2s +50%
keccak_f1600_x4_native_avx2 ✅ 3s 3s +0%
keccakf1600x4_xor_bytes_native ✅ 3s 2s +50%
kem_keypair ✅ 3s 4s -25%
mlk_ct_cmask_neg_i16 ✅ 3s 3s +0%
mlk_ct_get_optblocker_i32 ✅ 3s 3s +0%
mlk_keccakf1600x4_extract_bytes ✅ 3s 2s +50%
mlk_keccakf1600x4_extract_bytes_c ✅ 3s 1s +200%
mlk_keypair_getnoise_eta1 ✅ 3s 2s +50%
mlk_poly_compress_d10 ✅ 3s 3s +0%
mlk_poly_compress_d4 ✅ 3s 3s +0%
mlk_poly_compress_d5_c ✅ 3s 3s +0%
mlk_poly_compress_d5_native ✅ 3s 5s -40%
mlk_poly_decompress_d10 ✅ 3s 3s +0%
mlk_poly_invntt_tomont ✅ 3s 2s +50%
mlk_poly_mulcache_compute_c ✅ 3s 2s +50%
mlk_poly_reduce_c ✅ 3s 1s +200%
mlk_poly_tomont ✅ 3s 2s +50%
mlk_poly_tomont_c ✅ 3s 2s +50%
mlk_polyvec_frombytes ✅ 3s 3s +0%
mlk_polyvec_mulcache_compute ✅ 3s 2s +50%
mlk_polyvec_tomont ✅ 3s 3s +0%
mlk_scalar_compress_d11 ✅ 3s 2s +50%
mlk_scalar_compress_d4 ✅ 3s 3s +0%
mlk_shake128_absorb_once ✅ 3s 3s +0%
mlk_shake128_squeezeblocks ✅ 3s 1s +200%
mlk_shake256 ✅ 3s 4s -25%
mlk_shake256x4 ✅ 3s 4s -25%
mlk_value_barrier_i32 ✅ 3s 3s +0%
mlk_value_barrier_u8 ✅ 3s 2s +50%
ntt_native_aarch64 ✅ 3s 5s -40%
poly_invntt_tomont_native ✅ 3s 2s +50%
poly_mulcache_compute_native_x86_64 ✅ 3s 1s +200%
poly_tobytes_native_aarch64 ✅ 3s 2s +50%
poly_tomont_native_aarch64 ✅ 3s 2s +50%
polyvec_basemul_acc_montgomery_cached_k2_native_x86_64 ✅ 3s 3s +0%
polyvec_basemul_acc_montgomery_cached_k3_native_aarch64 ✅ 3s 2s +50%
rej_uniform_native ✅ 3s 2s +50%
intt_native_aarch64 ✅ 2s 2s +0%
keccak_f1600_x1_native_aarch64_v84a ✅ 2s 2s +0%
keccakf1600_permute_native ✅ 2s 2s +0%
keccakf1600x4_extract_bytes_native ✅ 2s 1s +100%
kem_enc_derand ✅ 2s 2s +0%
mlk_barrett_reduce ✅ 2s 3s -33%
mlk_check_pct ✅ 2s 1s +100%
mlk_ct_cmask_nonzero_u8 ✅ 2s 2s +0%
mlk_ct_get_optblocker_u32 ✅ 2s 3s -33%
mlk_ct_get_optblocker_u8 ✅ 2s 1s +100%
mlk_ct_sel_uint8 ✅ 2s 2s +0%
mlk_keccakf1600_extract_bytes ✅ 2s 4s -50%
mlk_keccakf1600_xor_bytes ✅ 2s 2s +0%
mlk_keccakf1600_xor_bytes (big endian) ✅ 2s 2s +0%
mlk_keccakf1600x4_permute ✅ 2s 2s +0%
mlk_keccakf1600x4_xor_bytes ✅ 2s 1s +100%
mlk_keccakf1600x4_xor_bytes_c ✅ 2s 1s +100%
mlk_matvec_mul ✅ 2s 3s -33%
mlk_montgomery_reduce ✅ 2s 1s +100%
mlk_poly_add ✅ 2s 3s -33%
mlk_poly_cbd_eta1 ✅ 2s 3s -33%
mlk_poly_cbd_eta2 ✅ 2s 2s +0%
mlk_poly_compress_d10_c ✅ 2s 2s +0%
mlk_poly_compress_d11_native ✅ 2s 3s -33%
mlk_poly_compress_d4_c ✅ 2s 2s +0%
mlk_poly_compress_d4_native ✅ 2s 3s -33%
mlk_poly_decompress_d10_c ✅ 2s 2s +0%
mlk_poly_decompress_d10_native ✅ 2s 1s +100%
mlk_poly_decompress_d11 ✅ 2s 2s +0%
mlk_poly_decompress_d11_c ✅ 2s 2s +0%
mlk_poly_decompress_d4 ✅ 2s 2s +0%
mlk_poly_decompress_d4_c ✅ 2s 2s +0%
mlk_poly_decompress_d5_c ✅ 2s 2s +0%
mlk_poly_frombytes ✅ 2s 2s +0%
mlk_poly_getnoise_eta1122_4x ✅ 2s 3s -33%
mlk_poly_getnoise_eta2 ✅ 2s 2s +0%
mlk_poly_invntt_tomont_c ✅ 2s 2s +0%
mlk_poly_mulcache_compute ✅ 2s 4s -50%
mlk_poly_ntt_c ✅ 2s 5s -60%
mlk_poly_tobytes ✅ 2s 4s -50%
mlk_poly_tobytes_native ✅ 2s 3s -33%
mlk_poly_tomont_native ✅ 2s 2s +0%
mlk_polyvec_compress_du ✅ 2s 3s -33%
mlk_polyvec_decompress_du ✅ 2s 5s -60%
mlk_polyvec_invntt_tomont ✅ 2s 2s +0%
mlk_polyvec_ntt ✅ 2s 3s -33%
mlk_polyvec_permute_bitrev_to_custom_native ✅ 2s 4s -50%
mlk_polyvec_tobytes ✅ 2s 2s +0%
mlk_rej_uniform ✅ 2s 3s -33%
mlk_scalar_compress_d10 ✅ 2s 2s +0%
mlk_scalar_decompress_d11 ✅ 2s 3s -33%
mlk_scalar_decompress_d5 ✅ 2s 3s -33%
mlk_scalar_signed_to_unsigned_q ✅ 2s 3s -33%
mlk_sha3_256 ✅ 2s 2s +0%
mlk_sha3_512 ✅ 2s 1s +100%
nttunpack_native_x86_64 ✅ 2s 3s -33%
poly_compress_d5_native_x86_64 ✅ 2s 2s +0%
poly_decompress_d10_native_x86_64 ✅ 2s 3s -33%
poly_getnoise_eta1122_4x_native ✅ 2s 2s +0%
poly_mulcache_compute_native_aarch64 ✅ 2s 3s -33%
poly_reduce_native_x86_64 ✅ 2s 3s -33%
poly_tobytes_native_x86_64 ✅ 2s 3s -33%
poly_tomont_native_x86_64 ✅ 2s 3s -33%
polyvec_basemul_acc_montgomery_cached_k4_native_aarch64 ✅ 2s 1s +100%
rej_uniform_native_aarch64 ✅ 2s 3s -33%
keccak_f1600_x1_native_aarch64 ✅ 1s 3s -67%
keccak_f1600_x4_native_aarch64_v84a ✅ 1s 1s +0%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid ✅ 1s 3s -67%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid ✅ 1s 2s -50%
kem_enc ✅ 1s 2s -50%
kem_keypair_derand ✅ 1s 4s -75%
mlk_ct_cmov_zero ✅ 1s 4s -75%
mlk_ct_sel_int16 ✅ 1s 2s -50%
mlk_enc_getnoise_eta1_eta2 ✅ 1s 4s -75%
mlk_keccakf1600_extract_bytes (big endian) ✅ 1s 2s -50%
mlk_keccakf1600_permute ✅ 1s 2s -50%
mlk_poly_compress_d10_native ✅ 1s 2s -50%
mlk_poly_compress_d11 ✅ 1s 2s -50%
mlk_poly_decompress_d4_native ✅ 1s 5s -80%
mlk_poly_decompress_d5 ✅ 1s 3s -67%
mlk_poly_decompress_du ✅ 1s 4s -75%
mlk_poly_frombytes_c ✅ 1s 2s -50%
mlk_poly_reduce ✅ 1s 2s -50%
mlk_poly_sub ✅ 1s 2s -50%
mlk_poly_tobytes_c ✅ 1s 1s +0%
mlk_poly_tomsg ✅ 1s 3s -67%
mlk_polyvec_basemul_acc_montgomery_cached ✅ 1s 2s -50%
mlk_polyvec_reduce ✅ 1s 2s -50%
mlk_scalar_compress_d5 ✅ 1s 5s -80%
mlk_scalar_decompress_d4 ✅ 1s 2s -50%
mlk_shake128x4_squeezeblocks ✅ 1s 2s -50%
mlk_value_barrier_u32 ✅ 1s 2s -50%
ntt_native_x86_64 ✅ 1s 5s -80%
poly_compress_d10_native_x86_64 ✅ 1s 1s +0%
poly_compress_d11_native_x86_64 ✅ 1s 1s +0%
poly_compress_d4_native_x86_64 ✅ 1s 1s +0%
poly_decompress_d4_native_x86_64 ✅ 1s 2s -50%
poly_reduce_native_aarch64 ✅ 1s 3s -67%
polyvec_basemul_acc_montgomery_cached_k2_native_aarch64 ✅ 1s 2s -50%
sys_check_capability ✅ 1s 4s -75%

@oqs-bot
Copy link
Copy Markdown
Contributor

oqs-bot commented Apr 22, 2026 •
edited
Loading

CBMC Results (ML-KEM-768)

Full Results (191 proofs)
Proof Status Current Previous Change
**TOTAL** ✅ 1195s 1262s -5.3%
mlk_indcpa_keypair_derand ✅ 186s 193s -4%
mlk_indcpa_enc ✅ 166s 175s -5%
mlk_rej_uniform_c ✅ 110s 122s -10%
mlk_polyvec_basemul_acc_montgomery_cached_c ✅ 42s 46s -9%
mlk_poly_rej_uniform ✅ 28s 30s -7%
mlk_ntt_layer ✅ 27s 33s -18%
mlk_keccak_squeezeblocks_x4 ✅ 23s 22s +5%
poly_ntt_native ✅ 22s 22s +0%
keccakf1600x4_permute_native_x4 ✅ 20s 19s +5%
mlk_poly_reduce_native ✅ 19s 21s -10%
mlk_fqmul ✅ 17s 17s +0%
polyvec_basemul_acc_montgomery_cached_native ✅ 17s 17s +0%
mlk_poly_decompress_d4_native ✅ 14s 14s +0%
mlk_indcpa_dec ✅ 11s 14s -21%
mlk_poly_decompress_d10_native ✅ 11s 15s -27%
mlk_polyvec_add ✅ 9s 13s -31%
mlk_keccak_squeeze_once ✅ 8s 8s +0%
mlk_keccak_squeezeblocks ✅ 8s 9s -11%
mlk_poly_frombytes_native ✅ 7s 7s +0%
mlk_poly_frommsg ✅ 7s 8s -12%
kem_keypair ✅ 6s 4s +50%
mlk_keccakf1600_permute_c ✅ 6s 5s +20%
mlk_ntt_butterfly_block ✅ 6s 6s +0%
mlk_poly_ntt ✅ 6s 7s -14%
rej_uniform_native_x86_64 ✅ 6s 6s +0%
kem_dec ✅ 5s 7s -29%
mlk_gen_matrix_serial ✅ 5s 5s +0%
mlk_invntt_layer ✅ 5s 5s +0%
mlk_keccak_absorb_once_x4 ✅ 5s 5s +0%
poly_decompress_d10_native_x86_64 ✅ 5s 4s +25%
poly_frombytes_native_x86_64 ✅ 5s 5s +0%
polyvec_basemul_acc_montgomery_cached_k4_native_aarch64 ✅ 5s 2s +150%
mlk_ct_get_optblocker_i32 ✅ 4s 3s +33%
mlk_ct_memcmp ✅ 4s 2s +100%
mlk_gen_matrix ✅ 4s 3s +33%
mlk_keccakf1600_permute ✅ 4s 3s +33%
mlk_poly_compress_d11 ✅ 4s 2s +100%
mlk_poly_compress_d11_native ✅ 4s 3s +33%
mlk_poly_compress_d5_c ✅ 4s 2s +100%
mlk_poly_decompress_d10 ✅ 4s 2s +100%
mlk_poly_decompress_d5 ✅ 4s 2s +100%
mlk_poly_mulcache_compute_native ✅ 4s 4s +0%
mlk_poly_ntt_c ✅ 4s 4s +0%
mlk_poly_rej_uniform_x4 ✅ 4s 8s -50%
mlk_poly_tobytes_native ✅ 4s 4s +0%
mlk_poly_tomsg ✅ 4s 2s +100%
mlk_polymat_permute_bitrev_to_custom ✅ 4s 4s +0%
mlk_polyvec_decompress_du ✅ 4s 2s +100%
mlk_polyvec_invntt_tomont ✅ 4s 3s +33%
mlk_scalar_compress_d5 ✅ 4s 2s +100%
mlk_scalar_decompress_d4 ✅ 4s 2s +100%
ntt_native_x86_64 ✅ 4s 3s +33%
poly_decompress_d4_native_x86_64 ✅ 4s 4s +0%
poly_tobytes_native_x86_64 ✅ 4s 3s +33%
poly_tomont_native_aarch64 ✅ 4s 3s +33%
intt_native_aarch64 ✅ 3s 3s +0%
kem_check_sk ✅ 3s 2s +50%
kem_enc_derand ✅ 3s 4s -25%
mlk_barrett_reduce ✅ 3s 1s +200%
mlk_ct_get_optblocker_u32 ✅ 3s 2s +50%
mlk_ct_get_optblocker_u8 ✅ 3s 3s +0%
mlk_ct_sel_int16 ✅ 3s 4s -25%
mlk_enc_getnoise_eta1_eta2 ✅ 3s 3s +0%
mlk_keccakf1600_extract_bytes ✅ 3s 2s +50%
mlk_keccakf1600x4_extract_bytes ✅ 3s 1s +200%
mlk_keccakf1600x4_extract_bytes_c ✅ 3s 2s +50%
mlk_keccakf1600x4_permute ✅ 3s 1s +200%
mlk_keypair_getnoise_eta1 ✅ 3s 2s +50%
mlk_matvec_mul ✅ 3s 5s -40%
mlk_montgomery_reduce ✅ 3s 3s +0%
mlk_poly_cbd_eta1 ✅ 3s 3s +0%
mlk_poly_compress_d10_c ✅ 3s 2s +50%
mlk_poly_compress_d4 ✅ 3s 3s +0%
mlk_poly_compress_d4_native ✅ 3s 2s +50%
mlk_poly_decompress_d11 ✅ 3s 2s +50%
mlk_poly_decompress_d11_c ✅ 3s 3s +0%
mlk_poly_decompress_d4 ✅ 3s 3s +0%
mlk_poly_getnoise_eta1122_4x ✅ 3s 1s +200%
mlk_poly_getnoise_eta2 ✅ 3s 2s +50%
mlk_poly_mulcache_compute ✅ 3s 2s +50%
mlk_poly_mulcache_compute_c ✅ 3s 3s +0%
mlk_poly_sub ✅ 3s 2s +50%
mlk_poly_tobytes ✅ 3s 3s +0%
mlk_polyvec_mulcache_compute ✅ 3s 2s +50%
mlk_polyvec_ntt ✅ 3s 1s +200%
mlk_polyvec_permute_bitrev_to_custom ✅ 3s 2s +50%
mlk_rej_uniform ✅ 3s 1s +200%
mlk_scalar_decompress_d5 ✅ 3s 3s +0%
mlk_scalar_signed_to_unsigned_q ✅ 3s 2s +50%
mlk_sha3_512 ✅ 3s 1s +200%
mlk_shake256 ✅ 3s 2s +50%
poly_compress_d5_native_x86_64 ✅ 3s 2s +50%
poly_decompress_d11_native_x86_64 ✅ 3s 1s +200%
poly_reduce_native_x86_64 ✅ 3s 2s +50%
polyvec_basemul_acc_montgomery_cached_k2_native_aarch64 ✅ 3s 2s +50%
polyvec_basemul_acc_montgomery_cached_k2_native_x86_64 ✅ 3s 4s -25%
polyvec_basemul_acc_montgomery_cached_k4_native_x86_64 ✅ 3s 2s +50%
sys_check_capability ✅ 3s 2s +50%
keccak_f1600_x1_native_aarch64 ✅ 2s 3s -33%
keccak_f1600_x4_native_aarch64_v84a ✅ 2s 3s -33%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid ✅ 2s 1s +100%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid ✅ 2s 2s +0%
keccakf1600_permute_native ✅ 2s 3s -33%
keccakf1600x4_xor_bytes_native ✅ 2s 2s +0%
kem_check_pk ✅ 2s 4s -50%
kem_enc ✅ 2s 2s +0%
kem_keypair_derand ✅ 2s 1s +100%
mlk_check_pct ✅ 2s 4s -50%
mlk_ct_cmask_neg_i16 ✅ 2s 1s +100%
mlk_ct_cmask_nonzero_u16 ✅ 2s 3s -33%
mlk_ct_cmask_nonzero_u8 ✅ 2s 4s -50%
mlk_ct_sel_uint8 ✅ 2s 2s +0%
mlk_keccak_absorb_once ✅ 2s 3s -33%
mlk_keccakf1600_extract_bytes (big endian) ✅ 2s 2s +0%
mlk_keccakf1600_xor_bytes ✅ 2s 2s +0%
mlk_keccakf1600x4_xor_bytes_c ✅ 2s 2s +0%
mlk_poly_add ✅ 2s 1s +100%
mlk_poly_compress_d10 ✅ 2s 1s +100%
mlk_poly_compress_d5 ✅ 2s 5s -60%
mlk_poly_compress_d5_native ✅ 2s 3s -33%
mlk_poly_compress_dv ✅ 2s 2s +0%
mlk_poly_decompress_d4_c ✅ 2s 3s -33%
mlk_poly_decompress_du ✅ 2s 4s -50%
mlk_poly_decompress_dv ✅ 2s 4s -50%
mlk_poly_frombytes_c ✅ 2s 3s -33%
mlk_poly_getnoise_eta1_4x ✅ 2s 3s -33%
mlk_poly_invntt_tomont ✅ 2s 3s -33%
mlk_poly_invntt_tomont_c ✅ 2s 2s +0%
mlk_poly_reduce ✅ 2s 4s -50%
mlk_poly_reduce_c ✅ 2s 4s -50%
mlk_poly_tobytes_c ✅ 2s 3s -33%
mlk_poly_tomont_c ✅ 2s 2s +0%
mlk_poly_tomont_native ✅ 2s 4s -50%
mlk_polyvec_basemul_acc_montgomery_cached ✅ 2s 1s +100%
mlk_polyvec_compress_du ✅ 2s 1s +100%
mlk_polyvec_frombytes ✅ 2s 3s -33%
mlk_polyvec_permute_bitrev_to_custom_native ✅ 2s 4s -50%
mlk_polyvec_reduce ✅ 2s 2s +0%
mlk_polyvec_tobytes ✅ 2s 2s +0%
mlk_polyvec_tomont ✅ 2s 1s +100%
mlk_scalar_compress_d10 ✅ 2s 1s +100%
mlk_scalar_compress_d4 ✅ 2s 2s +0%
mlk_scalar_decompress_d10 ✅ 2s 2s +0%
mlk_sha3_256 ✅ 2s 3s -33%
mlk_shake128_absorb_once ✅ 2s 1s +100%
mlk_shake128_squeezeblocks ✅ 2s 3s -33%
mlk_shake128x4_absorb_once ✅ 2s 1s +100%
mlk_shake128x4_squeezeblocks ✅ 2s 1s +100%
mlk_shake256x4 ✅ 2s 4s -50%
mlk_value_barrier_u32 ✅ 2s 2s +0%
mlk_value_barrier_u8 ✅ 2s 4s -50%
nttunpack_native_x86_64 ✅ 2s 4s -50%
poly_compress_d10_native_x86_64 ✅ 2s 2s +0%
poly_getnoise_eta1122_4x_native ✅ 2s 2s +0%
poly_mulcache_compute_native_aarch64 ✅ 2s 3s -33%
poly_mulcache_compute_native_x86_64 ✅ 2s 2s +0%
poly_tobytes_native_aarch64 ✅ 2s 2s +0%
poly_tomont_native_x86_64 ✅ 2s 2s +0%
polyvec_basemul_acc_montgomery_cached_k3_native_aarch64 ✅ 2s 4s -50%
polyvec_basemul_acc_montgomery_cached_k3_native_x86_64 ✅ 2s 3s -33%
rej_uniform_native ✅ 2s 1s +100%
rej_uniform_native_aarch64 ✅ 2s 3s -33%
intt_native_x86_64 ✅ 1s 2s -50%
keccak_f1600_x1_native_aarch64_v84a ✅ 1s 3s -67%
keccak_f1600_x4_native_avx2 ✅ 1s 4s -75%
keccakf1600x4_extract_bytes_native ✅ 1s 3s -67%
mlk_ct_cmov_zero ✅ 1s 3s -67%
mlk_keccakf1600_xor_bytes (big endian) ✅ 1s 3s -67%
mlk_keccakf1600x4_xor_bytes ✅ 1s 2s -50%
mlk_poly_cbd_eta2 ✅ 1s 2s -50%
mlk_poly_compress_d10_native ✅ 1s 1s +0%
mlk_poly_compress_d11_c ✅ 1s 2s -50%
mlk_poly_compress_d4_c ✅ 1s 2s -50%
mlk_poly_compress_du ✅ 1s 2s -50%
mlk_poly_decompress_d10_c ✅ 1s 2s -50%
mlk_poly_decompress_d11_native ✅ 1s 4s -75%
mlk_poly_decompress_d5_c ✅ 1s 1s +0%
mlk_poly_decompress_d5_native ✅ 1s 1s +0%
mlk_poly_frombytes ✅ 1s 3s -67%
mlk_poly_getnoise_eta1_4x_native ✅ 1s 1s +0%
mlk_poly_tomont ✅ 1s 2s -50%
mlk_scalar_compress_d1 ✅ 1s 4s -75%
mlk_scalar_compress_d11 ✅ 1s 1s +0%
mlk_scalar_decompress_d11 ✅ 1s 3s -67%
mlk_value_barrier_i32 ✅ 1s 3s -67%
ntt_native_aarch64 ✅ 1s 2s -50%
poly_compress_d11_native_x86_64 ✅ 1s 2s -50%
poly_compress_d4_native_x86_64 ✅ 1s 2s -50%
poly_decompress_d5_native_x86_64 ✅ 1s 2s -50%
poly_invntt_tomont_native ✅ 1s 2s -50%
poly_reduce_native_aarch64 ✅ 1s 3s -67%

@oqs-bot
Copy link
Copy Markdown
Contributor

oqs-bot commented Apr 22, 2026 •
edited
Loading

CBMC Results (ML-KEM-512)

Full Results (191 proofs)
Proof Status Current Previous Change
**TOTAL** ✅ 1327s 1477s -10.2%
mlk_indcpa_keypair_derand ✅ 253s 273s -7%
mlk_indcpa_enc ✅ 167s 186s -10%
mlk_rej_uniform_c ✅ 125s 157s -20%
mlk_polyvec_basemul_acc_montgomery_cached_c ✅ 51s 62s -18%
mlk_ntt_layer ✅ 36s 43s -16%
mlk_poly_rej_uniform ✅ 31s 35s -11%
mlk_keccak_squeezeblocks_x4 ✅ 26s 31s -16%
poly_ntt_native ✅ 25s 31s -19%
mlk_poly_reduce_native ✅ 20s 22s -9%
keccakf1600x4_permute_native_x4 ✅ 19s 18s +6%
mlk_fqmul ✅ 16s 20s -20%
mlk_indcpa_dec ✅ 16s 18s -11%
mlk_poly_decompress_d10_native ✅ 15s 16s -6%
mlk_poly_decompress_d4_native ✅ 13s 17s -24%
mlk_polyvec_add ✅ 11s 13s -15%
mlk_keccak_squeeze_once ✅ 9s 9s +0%
mlk_poly_frombytes_native ✅ 9s 12s -25%
mlk_invntt_layer ✅ 8s 6s +33%
mlk_keccak_squeezeblocks ✅ 8s 10s -20%
mlk_poly_frommsg ✅ 8s 13s -38%
mlk_keccak_absorb_once_x4 ✅ 6s 7s -14%
mlk_keccakf1600_permute_c ✅ 6s 7s -14%
mlk_ntt_butterfly_block ✅ 6s 10s -40%
mlk_poly_compress_d10_c ✅ 6s 2s +200%
mlk_poly_ntt ✅ 6s 9s -33%
mlk_poly_rej_uniform_x4 ✅ 6s 6s +0%
poly_decompress_d10_native_x86_64 ✅ 6s 6s +0%
mlk_enc_getnoise_eta1_eta2 ✅ 5s 5s +0%
mlk_keypair_getnoise_eta1 ✅ 5s 2s +150%
mlk_poly_cbd_eta2 ✅ 5s 8s -38%
mlk_poly_reduce_c ✅ 5s 1s +400%
poly_decompress_d4_native_x86_64 ✅ 5s 4s +25%
poly_frombytes_native_x86_64 ✅ 5s 8s -38%
polyvec_basemul_acc_montgomery_cached_native ✅ 5s 7s -29%
kem_dec ✅ 4s 5s -20%
mlk_ct_cmask_neg_i16 ✅ 4s 4s +0%
mlk_keccak_absorb_once ✅ 4s 5s -20%
mlk_keccakf1600x4_extract_bytes ✅ 4s 1s +300%
mlk_keccakf1600x4_xor_bytes_c ✅ 4s 2s +100%
mlk_poly_cbd_eta1 ✅ 4s 4s +0%
mlk_poly_compress_d11_c ✅ 4s 1s +300%
mlk_poly_compress_d4 ✅ 4s 2s +100%
mlk_poly_compress_d4_c ✅ 4s 2s +100%
mlk_poly_compress_d5 ✅ 4s 3s +33%
mlk_poly_decompress_d11_c ✅ 4s 2s +100%
mlk_poly_decompress_d4_c ✅ 4s 1s +300%
mlk_poly_getnoise_eta1122_4x ✅ 4s 2s +100%
mlk_poly_getnoise_eta1_4x ✅ 4s 2s +100%
mlk_poly_invntt_tomont ✅ 4s 2s +100%
mlk_poly_mulcache_compute ✅ 4s 2s +100%
mlk_poly_ntt_c ✅ 4s 3s +33%
mlk_poly_tomsg ✅ 4s 4s +0%
mlk_polyvec_compress_du ✅ 4s 2s +100%
mlk_polyvec_frombytes ✅ 4s 2s +100%
mlk_polyvec_permute_bitrev_to_custom ✅ 4s 4s +0%
mlk_rej_uniform ✅ 4s 3s +33%
poly_compress_d5_native_x86_64 ✅ 4s 4s +0%
poly_getnoise_eta1122_4x_native ✅ 4s 2s +100%
poly_tobytes_native_aarch64 ✅ 4s 3s +33%
poly_tomont_native_aarch64 ✅ 4s 2s +100%
polyvec_basemul_acc_montgomery_cached_k2_native_aarch64 ✅ 4s 1s +300%
polyvec_basemul_acc_montgomery_cached_k3_native_x86_64 ✅ 4s 2s +100%
rej_uniform_native_aarch64 ✅ 4s 4s +0%
rej_uniform_native_x86_64 ✅ 4s 3s +33%
sys_check_capability ✅ 4s 3s +33%
intt_native_x86_64 ✅ 3s 2s +50%
keccak_f1600_x1_native_aarch64 ✅ 3s 2s +50%
kem_check_sk ✅ 3s 4s -25%
kem_enc ✅ 3s 4s -25%
kem_keypair ✅ 3s 1s +200%
mlk_check_pct ✅ 3s 2s +50%
mlk_ct_get_optblocker_u8 ✅ 3s 2s +50%
mlk_ct_sel_int16 ✅ 3s 1s +200%
mlk_ct_sel_uint8 ✅ 3s 1s +200%
mlk_gen_matrix ✅ 3s 3s +0%
mlk_keccakf1600_permute ✅ 3s 2s +50%
mlk_poly_add ✅ 3s 1s +200%
mlk_poly_compress_d5_native ✅ 3s 3s +0%
mlk_poly_decompress_d10 ✅ 3s 5s -40%
mlk_poly_decompress_d10_c ✅ 3s 2s +50%
mlk_poly_decompress_d5 ✅ 3s 1s +200%
mlk_poly_decompress_dv ✅ 3s 4s -25%
mlk_poly_getnoise_eta2 ✅ 3s 1s +200%
mlk_poly_reduce ✅ 3s 3s +0%
mlk_poly_tobytes ✅ 3s 3s +0%
mlk_poly_tobytes_c ✅ 3s 2s +50%
mlk_polyvec_basemul_acc_montgomery_cached ✅ 3s 2s +50%
mlk_polyvec_invntt_tomont ✅ 3s 3s +0%
mlk_polyvec_permute_bitrev_to_custom_native ✅ 3s 4s -25%
mlk_polyvec_tobytes ✅ 3s 1s +200%
mlk_scalar_compress_d4 ✅ 3s 2s +50%
mlk_scalar_decompress_d11 ✅ 3s 4s -25%
mlk_scalar_decompress_d4 ✅ 3s 4s -25%
mlk_scalar_decompress_d5 ✅ 3s 2s +50%
mlk_sha3_256 ✅ 3s 4s -25%
mlk_value_barrier_u32 ✅ 3s 1s +200%
mlk_value_barrier_u8 ✅ 3s 4s -25%
nttunpack_native_x86_64 ✅ 3s 2s +50%
poly_invntt_tomont_native ✅ 3s 1s +200%
poly_reduce_native_x86_64 ✅ 3s 5s -40%
polyvec_basemul_acc_montgomery_cached_k2_native_x86_64 ✅ 3s 4s -25%
rej_uniform_native ✅ 3s 2s +50%
keccak_f1600_x1_native_aarch64_v84a ✅ 2s 4s -50%
keccak_f1600_x4_native_aarch64_v84a ✅ 2s 2s +0%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid ✅ 2s 2s +0%
keccakf1600x4_extract_bytes_native ✅ 2s 1s +100%
kem_enc_derand ✅ 2s 3s -33%
kem_keypair_derand ✅ 2s 4s -50%
mlk_ct_cmask_nonzero_u8 ✅ 2s 3s -33%
mlk_ct_cmov_zero ✅ 2s 3s -33%
mlk_ct_memcmp ✅ 2s 2s +0%
mlk_keccakf1600_extract_bytes ✅ 2s 2s +0%
mlk_keccakf1600_extract_bytes (big endian) ✅ 2s 2s +0%
mlk_keccakf1600_xor_bytes ✅ 2s 2s +0%
mlk_keccakf1600_xor_bytes (big endian) ✅ 2s 2s +0%
mlk_keccakf1600x4_extract_bytes_c ✅ 2s 3s -33%
mlk_keccakf1600x4_permute ✅ 2s 2s +0%
mlk_keccakf1600x4_xor_bytes ✅ 2s 2s +0%
mlk_matvec_mul ✅ 2s 4s -50%
mlk_montgomery_reduce ✅ 2s 1s +100%
mlk_poly_compress_d11 ✅ 2s 2s +0%
mlk_poly_compress_d4_native ✅ 2s 2s +0%
mlk_poly_compress_d5_c ✅ 2s 2s +0%
mlk_poly_compress_du ✅ 2s 3s -33%
mlk_poly_compress_dv ✅ 2s 3s -33%
mlk_poly_decompress_d4 ✅ 2s 1s +100%
mlk_poly_decompress_d5_c ✅ 2s 2s +0%
mlk_poly_decompress_d5_native ✅ 2s 1s +100%
mlk_poly_decompress_du ✅ 2s 2s +0%
mlk_poly_frombytes ✅ 2s 4s -50%
mlk_poly_frombytes_c ✅ 2s 2s +0%
mlk_poly_invntt_tomont_c ✅ 2s 3s -33%
mlk_poly_mulcache_compute_native ✅ 2s 2s +0%
mlk_poly_sub ✅ 2s 2s +0%
mlk_poly_tomont ✅ 2s 3s -33%
mlk_poly_tomont_c ✅ 2s 2s +0%
mlk_poly_tomont_native ✅ 2s 4s -50%
mlk_polymat_permute_bitrev_to_custom ✅ 2s 2s +0%
mlk_polyvec_decompress_du ✅ 2s 3s -33%
mlk_polyvec_mulcache_compute ✅ 2s 6s -67%
mlk_polyvec_reduce ✅ 2s 2s +0%
mlk_polyvec_tomont ✅ 2s 2s +0%
mlk_scalar_compress_d1 ✅ 2s 1s +100%
mlk_scalar_compress_d10 ✅ 2s 2s +0%
mlk_scalar_compress_d11 ✅ 2s 3s -33%
mlk_scalar_decompress_d10 ✅ 2s 2s +0%
mlk_scalar_signed_to_unsigned_q ✅ 2s 2s +0%
mlk_shake128_absorb_once ✅ 2s 4s -50%
mlk_shake128x4_absorb_once ✅ 2s 2s +0%
mlk_shake128x4_squeezeblocks ✅ 2s 1s +100%
mlk_shake256 ✅ 2s 2s +0%
mlk_shake256x4 ✅ 2s 4s -50%
ntt_native_aarch64 ✅ 2s 3s -33%
poly_compress_d11_native_x86_64 ✅ 2s 2s +0%
poly_compress_d4_native_x86_64 ✅ 2s 1s +100%
poly_decompress_d11_native_x86_64 ✅ 2s 4s -50%
poly_mulcache_compute_native_x86_64 ✅ 2s 3s -33%
poly_reduce_native_aarch64 ✅ 2s 4s -50%
poly_tobytes_native_x86_64 ✅ 2s 3s -33%
poly_tomont_native_x86_64 ✅ 2s 2s +0%
polyvec_basemul_acc_montgomery_cached_k3_native_aarch64 ✅ 2s 4s -50%
polyvec_basemul_acc_montgomery_cached_k4_native_x86_64 ✅ 2s 2s +0%
intt_native_aarch64 ✅ 1s 1s +0%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid ✅ 1s 1s +0%
keccak_f1600_x4_native_avx2 ✅ 1s 1s +0%
keccakf1600_permute_native ✅ 1s 4s -75%
keccakf1600x4_xor_bytes_native ✅ 1s 1s +0%
kem_check_pk ✅ 1s 5s -80%
mlk_barrett_reduce ✅ 1s 2s -50%
mlk_ct_cmask_nonzero_u16 ✅ 1s 4s -75%
mlk_ct_get_optblocker_i32 ✅ 1s 3s -67%
mlk_ct_get_optblocker_u32 ✅ 1s 1s +0%
mlk_gen_matrix_serial ✅ 1s 1s +0%
mlk_poly_compress_d10 ✅ 1s 1s +0%
mlk_poly_compress_d10_native ✅ 1s 3s -67%
mlk_poly_compress_d11_native ✅ 1s 3s -67%
mlk_poly_decompress_d11 ✅ 1s 3s -67%
mlk_poly_decompress_d11_native ✅ 1s 1s +0%
mlk_poly_getnoise_eta1_4x_native ✅ 1s 2s -50%
mlk_poly_mulcache_compute_c ✅ 1s 4s -75%
mlk_poly_tobytes_native ✅ 1s 4s -75%
mlk_polyvec_ntt ✅ 1s 5s -80%
mlk_scalar_compress_d5 ✅ 1s 2s -50%
mlk_sha3_512 ✅ 1s 3s -67%
mlk_shake128_squeezeblocks ✅ 1s 2s -50%
mlk_value_barrier_i32 ✅ 1s 2s -50%
ntt_native_x86_64 ✅ 1s 6s -83%
poly_compress_d10_native_x86_64 ✅ 1s 5s -80%
poly_decompress_d5_native_x86_64 ✅ 1s 3s -67%
poly_mulcache_compute_native_aarch64 ✅ 1s 1s +0%
polyvec_basemul_acc_montgomery_cached_k4_native_aarch64 ✅ 1s 3s -67%

@mkannwischer mkannwischer marked this pull request as ready for review April 23, 2026 10:22
@mkannwischer mkannwischer requested a review from a team as a code owner April 23, 2026 10:22
hanno-becker
hanno-becker approved these changes Apr 24, 2026
View reviewed changes
Copy link
Copy Markdown
Contributor

@hanno-becker hanno-becker left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@mkannwischer
CI: Bump ACVP, liboqs, expo, and AWS-LC versions
ad9ffe2 
- ACVP: slide window to [v1.1.0.40, v1.1.0.41, v1.1.0.42]
- liboqs: bump to main (2026-04-21, d8509387)
- expo: bump to master (2026-04-21, 53619a73)
- AWS-LC: bump to v1.72.0

Drop the v1.1.0.39 `dk`-in-tg fallback in test/acvp/acvp_client.py
now that v1.1.0.39 is no longer in the test matrix.

Signed-off-by: Matthias J. Kannwischer <matthias@zerorisc.com>
@mkannwischer mkannwischer mentioned this pull request Apr 24, 2026
Merged
@mkannwischer mkannwischer merged commit 4840443 into main Apr 24, 2026
385 checks passed
@mkannwischer mkannwischer deleted the ci-version-bumps branch April 24, 2026 05:58
hanno-becker pushed a commit to pq-code-package/mldsa-native that referenced this pull request Apr 25, 2026
@mkannwischer @hanno-becker
CI: Bump ACVP, liboqs, expo, and AWS-LC versions
be8adae 
- ACVP: slide window to [v1.1.0.40, v1.1.0.41, v1.1.0.42]
- liboqs: bump to main (2026-04-21, d8509387)
- expo: bump to master (2026-04-21, 53619a73)
- AWS-LC: bump v1.67.0 -> v1.72.0

Port of pq-code-package/mlkem-native#1662.

Signed-off-by: Matthias J. Kannwischer <matthias@zerorisc.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@hanno-becker hanno-becker hanno-becker approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@mkannwischer @oqs-bot @hanno-becker