Skip to content

common: Split context-parameter machinery into context.h#1768

Open
mkannwischer wants to merge 1 commit into
mainfrom
context_move
Open

common: Split context-parameter machinery into context.h#1768
mkannwischer wants to merge 1 commit into
mainfrom
context_move

Conversation

@mkannwischer

@mkannwischer mkannwischer commented Jun 29, 2026

Copy link
Copy Markdown
Contributor

Move the MLK_CONTEXT_PARAMETERS_n macros and the associated configuration check out of common.h into a new, level-generic header context.h, included by common.h at the point the material previously sat. No behavioral change.

@mkannwischer
common: Split context-parameter machinery into context.h
9f57806 
Move the MLK_CONTEXT_PARAMETERS_n macros and the associated configuration
check out of common.h into a new, level-generic header context.h, included
by common.h at the point the material previously sat. No behavioral change.

 - Ports pq-code-package/mldsa-native#1238
 - Fixes #1767

Signed-off-by: Matthias J. Kannwischer <matthias@zerorisc.com>
@mkannwischer mkannwischer marked this pull request as ready for review June 29, 2026 11:40
@mkannwischer mkannwischer requested a review from a team as a code owner June 29, 2026 11:40
@oqs-bot

oqs-bot commented Jun 29, 2026

Copy link
Copy Markdown
Contributor

CBMC Results (ML-KEM-512)

Full Results (191 proofs)
Proof Status Current Previous Change
**TOTAL** ✅ 1680s 1600s +5.0%
mlk_indcpa_enc ✅ 262s 256s +2%
mlk_indcpa_keypair_derand ✅ 216s 199s +9%
mlk_rej_uniform_c ✅ 155s 133s +17%
mlk_poly_rej_uniform ✅ 134s 153s -12%
rej_uniform_native_x86_64 ✅ 67s 54s +24%
mlk_polyvec_basemul_acc_montgomery_cached_c ✅ 60s 65s -8%
poly_ntt_native ✅ 47s 35s +34%
rej_uniform_native_aarch64 ✅ 41s 35s +17%
mlk_ntt_layer ✅ 40s 28s +43%
mlk_poly_reduce_native ✅ 34s 36s -6%
mlk_keccak_squeezeblocks_x4 ✅ 27s 27s +0%
mlk_indcpa_dec ✅ 19s 13s +46%
keccakf1600x4_permute_native_x4 ✅ 16s 18s -11%
mlk_fqmul ✅ 16s 18s -11%
mlk_poly_decompress_d4_native ✅ 16s 16s +0%
mlk_poly_decompress_d10_native ✅ 14s 13s +8%
mlk_poly_frommsg ✅ 13s 8s +62%
mlk_polyvec_add ✅ 11s 11s +0%
mlk_keccak_squeezeblocks ✅ 10s 9s +11%
mlk_keccak_squeeze_once ✅ 9s 8s +12%
mlk_ntt_butterfly_block ✅ 9s 9s +0%
mlk_poly_frombytes_native ✅ 9s 7s +29%
polyvec_basemul_acc_montgomery_cached_native ✅ 8s 8s +0%
mlk_poly_sub ✅ 7s 7s +0%
keccak_f1600_x4_native_aarch64_v84a ✅ 6s 2s +200%
kem_dec ✅ 6s 5s +20%
mlk_poly_add ✅ 6s 3s +100%
mlk_poly_ntt ✅ 6s 6s +0%
mlk_poly_rej_uniform_x4 ✅ 6s 8s -25%
poly_decompress_d10_native_x86_64 ✅ 6s 6s +0%
mlk_keccak_absorb_once ✅ 5s 4s +25%
mlk_keccak_absorb_once_x4 ✅ 5s 6s -17%
mlk_keccakf1600_permute_c ✅ 5s 4s +25%
mlk_poly_compress_d10_native ✅ 5s 2s +150%
mlk_poly_decompress_d10_c ✅ 5s 2s +150%
mlk_poly_frombytes_c ✅ 5s 4s +25%
mlk_poly_getnoise_eta1122_4x ✅ 5s 3s +67%
mlk_polyvec_permute_bitrev_to_custom_native ✅ 5s 2s +150%
mlk_polyvec_reduce ✅ 5s 2s +150%
poly_tomont_native_x86_64 ✅ 5s 2s +150%
intt_native_aarch64 ✅ 4s 1s +300%
kem_check_sk ✅ 4s 1s +300%
kem_enc ✅ 4s 4s +0%
kem_keypair_derand ✅ 4s 4s +0%
mlk_ct_cmask_nonzero_u8 ✅ 4s 3s +33%
mlk_invntt_layer ✅ 4s 3s +33%
mlk_keccakf1600x4_extract_bytes ✅ 4s 2s +100%
mlk_poly_compress_d11 ✅ 4s 5s -20%
mlk_poly_compress_du ✅ 4s 4s +0%
mlk_poly_decompress_d4_c ✅ 4s 4s +0%
mlk_poly_decompress_d5_native ✅ 4s 2s +100%
mlk_poly_decompress_du ✅ 4s 2s +100%
mlk_poly_tobytes ✅ 4s 4s +0%
mlk_poly_tomont ✅ 4s 1s +300%
mlk_polyvec_basemul_acc_montgomery_cached ✅ 4s 3s +33%
mlk_polyvec_decompress_du ✅ 4s 2s +100%
mlk_shake256x4 ✅ 4s 4s +0%
poly_frombytes_native_x86_64 ✅ 4s 5s -20%
poly_reduce_native_x86_64 ✅ 4s 1s +300%
poly_tobytes_native_aarch64 ✅ 4s 3s +33%
polyvec_basemul_acc_montgomery_cached_k3_native_aarch64 ✅ 4s 4s +0%
intt_native_x86_64 ✅ 3s 3s +0%
keccakf1600_permute_native ✅ 3s 2s +50%
keccakf1600x4_extract_bytes_native ✅ 3s 2s +50%
keccakf1600x4_xor_bytes_native ✅ 3s 2s +50%
kem_enc_derand ✅ 3s 1s +200%
kem_keypair ✅ 3s 2s +50%
mlk_ct_get_optblocker_u8 ✅ 3s 1s +200%
mlk_ct_sel_int16 ✅ 3s 2s +50%
mlk_ct_sel_uint8 ✅ 3s 1s +200%
mlk_enc_getnoise_eta1_eta2 ✅ 3s 2s +50%
mlk_keccakf1600_extract_bytes (big endian) ✅ 3s 2s +50%
mlk_keccakf1600_xor_bytes (big endian) ✅ 3s 2s +50%
mlk_keccakf1600x4_permute ✅ 3s 3s +0%
mlk_montgomery_reduce ✅ 3s 2s +50%
mlk_poly_compress_d10 ✅ 3s 1s +200%
mlk_poly_compress_d11_native ✅ 3s 2s +50%
mlk_poly_compress_d4 ✅ 3s 5s -40%
mlk_poly_compress_d4_native ✅ 3s 3s +0%
mlk_poly_decompress_d11_c ✅ 3s 2s +50%
mlk_poly_getnoise_eta1_4x ✅ 3s 4s -25%
mlk_poly_invntt_tomont_c ✅ 3s 2s +50%
mlk_poly_mulcache_compute_c ✅ 3s 3s +0%
mlk_poly_mulcache_compute_native ✅ 3s 5s -40%
mlk_poly_ntt_c ✅ 3s 3s +0%
mlk_poly_tobytes_native ✅ 3s 4s -25%
mlk_poly_tomont_c ✅ 3s 3s +0%
mlk_polyvec_frombytes ✅ 3s 1s +200%
mlk_polyvec_permute_bitrev_to_custom ✅ 3s 4s -25%
mlk_scalar_compress_d10 ✅ 3s 2s +50%
mlk_scalar_decompress_d11 ✅ 3s 2s +50%
mlk_sha3_256 ✅ 3s 2s +50%
mlk_sha3_512 ✅ 3s 1s +200%
mlk_shake128_squeezeblocks ✅ 3s 2s +50%
nttunpack_native_x86_64 ✅ 3s 2s +50%
poly_compress_d5_native_x86_64 ✅ 3s 3s +0%
poly_decompress_d4_native_x86_64 ✅ 3s 5s -40%
poly_getnoise_eta1122_4x_native ✅ 3s 2s +50%
poly_invntt_tomont_native ✅ 3s 3s +0%
poly_mulcache_compute_native_aarch64 ✅ 3s 3s +0%
poly_tobytes_native_x86_64 ✅ 3s 2s +50%
polyvec_basemul_acc_montgomery_cached_k2_native_aarch64 ✅ 3s 2s +50%
polyvec_basemul_acc_montgomery_cached_k3_native_x86_64 ✅ 3s 2s +50%
keccak_f1600_x1_native_aarch64 ✅ 2s 2s +0%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid ✅ 2s 3s -33%
keccak_f1600_x4_native_avx2 ✅ 2s 3s -33%
kem_check_pk ✅ 2s 5s -60%
mlk_check_pct ✅ 2s 1s +100%
mlk_ct_cmask_nonzero_u16 ✅ 2s 2s +0%
mlk_gen_matrix ✅ 2s 2s +0%
mlk_gen_matrix_serial ✅ 2s 5s -60%
mlk_keccakf1600_xor_bytes ✅ 2s 3s -33%
mlk_keccakf1600x4_xor_bytes ✅ 2s 3s -33%
mlk_keypair_getnoise_eta1 ✅ 2s 2s +0%
mlk_matvec_mul ✅ 2s 2s +0%
mlk_poly_cbd_eta2 ✅ 2s 3s -33%
mlk_poly_compress_d10_c ✅ 2s 5s -60%
mlk_poly_compress_d5 ✅ 2s 3s -33%
mlk_poly_compress_d5_native ✅ 2s 1s +100%
mlk_poly_decompress_d10 ✅ 2s 2s +0%
mlk_poly_decompress_d11 ✅ 2s 1s +100%
mlk_poly_decompress_d11_native ✅ 2s 1s +100%
mlk_poly_decompress_d4 ✅ 2s 1s +100%
mlk_poly_decompress_d5 ✅ 2s 1s +100%
mlk_poly_decompress_d5_c ✅ 2s 1s +100%
mlk_poly_decompress_dv ✅ 2s 1s +100%
mlk_poly_getnoise_eta1_4x_native ✅ 2s 3s -33%
mlk_poly_getnoise_eta2 ✅ 2s 4s -50%
mlk_poly_invntt_tomont ✅ 2s 1s +100%
mlk_poly_mulcache_compute ✅ 2s 2s +0%
mlk_poly_tobytes_c ✅ 2s 2s +0%
mlk_poly_tomsg ✅ 2s 2s +0%
mlk_polymat_permute_bitrev_to_custom ✅ 2s 4s -50%
mlk_polyvec_invntt_tomont ✅ 2s 3s -33%
mlk_polyvec_mulcache_compute ✅ 2s 2s +0%
mlk_polyvec_ntt ✅ 2s 3s -33%
mlk_polyvec_tomont ✅ 2s 4s -50%
mlk_rej_uniform ✅ 2s 2s +0%
mlk_scalar_compress_d11 ✅ 2s 2s +0%
mlk_scalar_compress_d5 ✅ 2s 3s -33%
mlk_scalar_decompress_d4 ✅ 2s 3s -33%
mlk_scalar_decompress_d5 ✅ 2s 1s +100%
mlk_scalar_signed_to_unsigned_q ✅ 2s 2s +0%
mlk_shake128_absorb_once ✅ 2s 2s +0%
mlk_shake128x4_absorb_once ✅ 2s 2s +0%
mlk_shake256 ✅ 2s 1s +100%
mlk_value_barrier_i32 ✅ 2s 1s +100%
mlk_value_barrier_u32 ✅ 2s 1s +100%
mlk_value_barrier_u8 ✅ 2s 2s +0%
ntt_native_aarch64 ✅ 2s 3s -33%
ntt_native_x86_64 ✅ 2s 4s -50%
poly_compress_d10_native_x86_64 ✅ 2s 2s +0%
poly_compress_d11_native_x86_64 ✅ 2s 4s -50%
poly_decompress_d11_native_x86_64 ✅ 2s 3s -33%
poly_decompress_d5_native_x86_64 ✅ 2s 1s +100%
poly_mulcache_compute_native_x86_64 ✅ 2s 1s +100%
poly_tomont_native_aarch64 ✅ 2s 1s +100%
polyvec_basemul_acc_montgomery_cached_k2_native_x86_64 ✅ 2s 4s -50%
rej_uniform_native ✅ 2s 2s +0%
keccak_f1600_x1_native_aarch64_v84a ✅ 1s 2s -50%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid ✅ 1s 2s -50%
mlk_barrett_reduce ✅ 1s 2s -50%
mlk_ct_cmask_neg_i16 ✅ 1s 2s -50%
mlk_ct_cmov_zero ✅ 1s 3s -67%
mlk_ct_get_optblocker_i32 ✅ 1s 3s -67%
mlk_ct_get_optblocker_u32 ✅ 1s 2s -50%
mlk_ct_memcmp ✅ 1s 2s -50%
mlk_keccakf1600_extract_bytes ✅ 1s 3s -67%
mlk_keccakf1600_permute ✅ 1s 3s -67%
mlk_keccakf1600x4_extract_bytes_c ✅ 1s 2s -50%
mlk_keccakf1600x4_xor_bytes_c ✅ 1s 3s -67%
mlk_poly_cbd_eta1 ✅ 1s 2s -50%
mlk_poly_compress_d11_c ✅ 1s 2s -50%
mlk_poly_compress_d4_c ✅ 1s 1s +0%
mlk_poly_compress_d5_c ✅ 1s 1s +0%
mlk_poly_compress_dv ✅ 1s 3s -67%
mlk_poly_frombytes ✅ 1s 4s -75%
mlk_poly_reduce ✅ 1s 1s +0%
mlk_poly_reduce_c ✅ 1s 4s -75%
mlk_poly_tomont_native ✅ 1s 3s -67%
mlk_polyvec_compress_du ✅ 1s 3s -67%
mlk_polyvec_tobytes ✅ 1s 3s -67%
mlk_scalar_compress_d1 ✅ 1s 3s -67%
mlk_scalar_compress_d4 ✅ 1s 4s -75%
mlk_scalar_decompress_d10 ✅ 1s 1s +0%
mlk_shake128x4_squeezeblocks ✅ 1s 3s -67%
poly_compress_d4_native_x86_64 ✅ 1s 2s -50%
poly_reduce_native_aarch64 ✅ 1s 2s -50%
polyvec_basemul_acc_montgomery_cached_k4_native_aarch64 ✅ 1s 2s -50%
polyvec_basemul_acc_montgomery_cached_k4_native_x86_64 ✅ 1s 3s -67%
sys_check_capability ✅ 1s 3s -67%

@oqs-bot

oqs-bot commented Jun 29, 2026

Copy link
Copy Markdown
Contributor

CBMC Results (ML-KEM-768)

Full Results (191 proofs)
Proof Status Current Previous Change
**TOTAL** ✅ 1795s 1642s +9.3%
mlk_indcpa_keypair_derand ✅ 342s 289s +18%
mlk_indcpa_enc ✅ 255s 252s +1%
mlk_poly_rej_uniform ✅ 159s 133s +20%
mlk_rej_uniform_c ✅ 133s 123s +8%
rej_uniform_native_x86_64 ✅ 63s 52s +21%
mlk_polyvec_basemul_acc_montgomery_cached_c ✅ 55s 49s +12%
poly_ntt_native ✅ 42s 39s +8%
mlk_poly_reduce_native ✅ 38s 36s +6%
rej_uniform_native_aarch64 ✅ 37s 36s +3%
mlk_ntt_layer ✅ 35s 28s +25%
mlk_keccak_squeezeblocks_x4 ✅ 26s 25s +4%
keccakf1600x4_permute_native_x4 ✅ 17s 18s -6%
polyvec_basemul_acc_montgomery_cached_native ✅ 17s 14s +21%
mlk_poly_decompress_d4_native ✅ 16s 16s +0%
mlk_fqmul ✅ 15s 17s -12%
mlk_poly_decompress_d10_native ✅ 15s 16s -6%
mlk_indcpa_dec ✅ 13s 8s +62%
mlk_poly_frommsg ✅ 12s 8s +50%
mlk_poly_frombytes_native ✅ 11s 11s +0%
mlk_polyvec_add ✅ 11s 13s -15%
mlk_keccak_squeeze_once ✅ 10s 7s +43%
mlk_keccak_squeezeblocks ✅ 10s 9s +11%
mlk_poly_ntt ✅ 8s 6s +33%
mlk_ntt_butterfly_block ✅ 7s 6s +17%
mlk_poly_rej_uniform_x4 ✅ 7s 7s +0%
mlk_poly_sub ✅ 7s 5s +40%
mlk_invntt_layer ✅ 6s 5s +20%
mlk_keccakf1600_permute_c ✅ 6s 4s +50%
poly_frombytes_native_x86_64 ✅ 6s 6s +0%
kem_dec ✅ 5s 4s +25%
mlk_keccak_absorb_once_x4 ✅ 5s 5s +0%
mlk_keccakf1600_xor_bytes (big endian) ✅ 5s 3s +67%
mlk_poly_add ✅ 5s 3s +67%
mlk_poly_decompress_d4_c ✅ 5s 5s +0%
mlk_poly_frombytes_c ✅ 5s 6s -17%
mlk_scalar_decompress_d5 ✅ 5s 2s +150%
mlk_shake128x4_absorb_once ✅ 5s 3s +67%
poly_decompress_d10_native_x86_64 ✅ 5s 3s +67%
polyvec_basemul_acc_montgomery_cached_k4_native_aarch64 ✅ 5s 1s +400%
kem_keypair_derand ✅ 4s 3s +33%
mlk_ct_cmask_neg_i16 ✅ 4s 2s +100%
mlk_gen_matrix ✅ 4s 5s -20%
mlk_gen_matrix_serial ✅ 4s 3s +33%
mlk_keccak_absorb_once ✅ 4s 4s +0%
mlk_keypair_getnoise_eta1 ✅ 4s 4s +0%
mlk_poly_cbd_eta1 ✅ 4s 2s +100%
mlk_poly_compress_d10_c ✅ 4s 2s +100%
mlk_poly_compress_d10_native ✅ 4s 3s +33%
mlk_poly_compress_d11 ✅ 4s 2s +100%
mlk_poly_compress_d4_c ✅ 4s 2s +100%
mlk_poly_decompress_dv ✅ 4s 4s +0%
mlk_poly_getnoise_eta1122_4x ✅ 4s 3s +33%
mlk_poly_mulcache_compute ✅ 4s 1s +300%
mlk_poly_ntt_c ✅ 4s 1s +300%
mlk_polyvec_tobytes ✅ 4s 3s +33%
mlk_rej_uniform ✅ 4s 1s +300%
mlk_scalar_compress_d11 ✅ 4s 3s +33%
mlk_scalar_signed_to_unsigned_q ✅ 4s 4s +0%
ntt_native_x86_64 ✅ 4s 1s +300%
poly_compress_d4_native_x86_64 ✅ 4s 2s +100%
poly_decompress_d11_native_x86_64 ✅ 4s 3s +33%
poly_invntt_tomont_native ✅ 4s 1s +300%
poly_mulcache_compute_native_x86_64 ✅ 4s 1s +300%
poly_tobytes_native_aarch64 ✅ 4s 2s +100%
poly_tomont_native_aarch64 ✅ 4s 2s +100%
polyvec_basemul_acc_montgomery_cached_k4_native_x86_64 ✅ 4s 5s -20%
intt_native_aarch64 ✅ 3s 1s +200%
intt_native_x86_64 ✅ 3s 2s +50%
keccak_f1600_x4_native_avx2 ✅ 3s 4s -25%
keccakf1600_permute_native ✅ 3s 2s +50%
kem_check_pk ✅ 3s 6s -50%
kem_enc_derand ✅ 3s 3s +0%
mlk_ct_cmask_nonzero_u8 ✅ 3s 3s +0%
mlk_ct_sel_int16 ✅ 3s 2s +50%
mlk_keccakf1600x4_xor_bytes_c ✅ 3s 1s +200%
mlk_matvec_mul ✅ 3s 2s +50%
mlk_poly_compress_d10 ✅ 3s 2s +50%
mlk_poly_decompress_d10 ✅ 3s 1s +200%
mlk_poly_decompress_d10_c ✅ 3s 2s +50%
mlk_poly_decompress_d11 ✅ 3s 2s +50%
mlk_poly_decompress_d11_c ✅ 3s 2s +50%
mlk_poly_decompress_d5_c ✅ 3s 3s +0%
mlk_poly_decompress_d5_native ✅ 3s 1s +200%
mlk_poly_invntt_tomont ✅ 3s 2s +50%
mlk_poly_invntt_tomont_c ✅ 3s 2s +50%
mlk_poly_mulcache_compute_c ✅ 3s 1s +200%
mlk_poly_mulcache_compute_native ✅ 3s 4s -25%
mlk_poly_reduce_c ✅ 3s 2s +50%
mlk_poly_tomsg ✅ 3s 3s +0%
mlk_polyvec_basemul_acc_montgomery_cached ✅ 3s 1s +200%
mlk_polyvec_invntt_tomont ✅ 3s 1s +200%
mlk_polyvec_ntt ✅ 3s 2s +50%
mlk_polyvec_permute_bitrev_to_custom_native ✅ 3s 2s +50%
mlk_polyvec_reduce ✅ 3s 3s +0%
mlk_sha3_256 ✅ 3s 2s +50%
mlk_value_barrier_i32 ✅ 3s 2s +50%
nttunpack_native_x86_64 ✅ 3s 5s -40%
poly_compress_d11_native_x86_64 ✅ 3s 3s +0%
poly_compress_d5_native_x86_64 ✅ 3s 3s +0%
poly_decompress_d4_native_x86_64 ✅ 3s 5s -40%
poly_decompress_d5_native_x86_64 ✅ 3s 3s +0%
poly_reduce_native_aarch64 ✅ 3s 3s +0%
poly_tobytes_native_x86_64 ✅ 3s 3s +0%
polyvec_basemul_acc_montgomery_cached_k3_native_aarch64 ✅ 3s 5s -40%
keccak_f1600_x1_native_aarch64 ✅ 2s 2s +0%
keccak_f1600_x1_native_aarch64_v84a ✅ 2s 4s -50%
keccak_f1600_x4_native_aarch64_v84a ✅ 2s 1s +100%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid ✅ 2s 1s +100%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid ✅ 2s 1s +100%
keccakf1600x4_extract_bytes_native ✅ 2s 1s +100%
keccakf1600x4_xor_bytes_native ✅ 2s 1s +100%
kem_check_sk ✅ 2s 2s +0%
kem_keypair ✅ 2s 3s -33%
mlk_barrett_reduce ✅ 2s 2s +0%
mlk_check_pct ✅ 2s 6s -67%
mlk_ct_cmask_nonzero_u16 ✅ 2s 2s +0%
mlk_ct_cmov_zero ✅ 2s 2s +0%
mlk_ct_get_optblocker_i32 ✅ 2s 2s +0%
mlk_ct_get_optblocker_u8 ✅ 2s 2s +0%
mlk_keccakf1600_extract_bytes (big endian) ✅ 2s 2s +0%
mlk_keccakf1600_permute ✅ 2s 3s -33%
mlk_keccakf1600_xor_bytes ✅ 2s 2s +0%
mlk_keccakf1600x4_extract_bytes ✅ 2s 1s +100%
mlk_poly_cbd_eta2 ✅ 2s 4s -50%
mlk_poly_compress_d11_native ✅ 2s 1s +100%
mlk_poly_compress_d4 ✅ 2s 2s +0%
mlk_poly_compress_d4_native ✅ 2s 2s +0%
mlk_poly_compress_d5_native ✅ 2s 2s +0%
mlk_poly_compress_du ✅ 2s 3s -33%
mlk_poly_decompress_d11_native ✅ 2s 1s +100%
mlk_poly_decompress_d5 ✅ 2s 1s +100%
mlk_poly_frombytes ✅ 2s 3s -33%
mlk_poly_getnoise_eta1_4x ✅ 2s 3s -33%
mlk_poly_getnoise_eta1_4x_native ✅ 2s 2s +0%
mlk_poly_getnoise_eta2 ✅ 2s 2s +0%
mlk_poly_tobytes ✅ 2s 2s +0%
mlk_poly_tobytes_c ✅ 2s 3s -33%
mlk_poly_tomont ✅ 2s 2s +0%
mlk_poly_tomont_c ✅ 2s 2s +0%
mlk_poly_tomont_native ✅ 2s 2s +0%
mlk_polymat_permute_bitrev_to_custom ✅ 2s 3s -33%
mlk_polyvec_compress_du ✅ 2s 2s +0%
mlk_polyvec_decompress_du ✅ 2s 4s -50%
mlk_polyvec_mulcache_compute ✅ 2s 4s -50%
mlk_polyvec_permute_bitrev_to_custom ✅ 2s 4s -50%
mlk_scalar_compress_d10 ✅ 2s 2s +0%
mlk_scalar_compress_d4 ✅ 2s 2s +0%
mlk_scalar_compress_d5 ✅ 2s 2s +0%
mlk_scalar_decompress_d11 ✅ 2s 2s +0%
mlk_sha3_512 ✅ 2s 3s -33%
mlk_shake128_absorb_once ✅ 2s 2s +0%
mlk_shake128_squeezeblocks ✅ 2s 3s -33%
mlk_shake256 ✅ 2s 4s -50%
mlk_shake256x4 ✅ 2s 3s -33%
mlk_value_barrier_u8 ✅ 2s 1s +100%
ntt_native_aarch64 ✅ 2s 6s -67%
poly_compress_d10_native_x86_64 ✅ 2s 2s +0%
poly_getnoise_eta1122_4x_native ✅ 2s 2s +0%
polyvec_basemul_acc_montgomery_cached_k2_native_x86_64 ✅ 2s 5s -60%
polyvec_basemul_acc_montgomery_cached_k3_native_x86_64 ✅ 2s 1s +100%
sys_check_capability ✅ 2s 2s +0%
kem_enc ✅ 1s 2s -50%
mlk_ct_get_optblocker_u32 ✅ 1s 1s +0%
mlk_ct_memcmp ✅ 1s 1s +0%
mlk_ct_sel_uint8 ✅ 1s 1s +0%
mlk_enc_getnoise_eta1_eta2 ✅ 1s 4s -75%
mlk_keccakf1600_extract_bytes ✅ 1s 1s +0%
mlk_keccakf1600x4_extract_bytes_c ✅ 1s 3s -67%
mlk_keccakf1600x4_permute ✅ 1s 3s -67%
mlk_keccakf1600x4_xor_bytes ✅ 1s 2s -50%
mlk_montgomery_reduce ✅ 1s 3s -67%
mlk_poly_compress_d11_c ✅ 1s 3s -67%
mlk_poly_compress_d5 ✅ 1s 3s -67%
mlk_poly_compress_d5_c ✅ 1s 1s +0%
mlk_poly_compress_dv ✅ 1s 3s -67%
mlk_poly_decompress_d4 ✅ 1s 2s -50%
mlk_poly_decompress_du ✅ 1s 2s -50%
mlk_poly_reduce ✅ 1s 3s -67%
mlk_poly_tobytes_native ✅ 1s 2s -50%
mlk_polyvec_frombytes ✅ 1s 3s -67%
mlk_polyvec_tomont ✅ 1s 3s -67%
mlk_scalar_compress_d1 ✅ 1s 1s +0%
mlk_scalar_decompress_d10 ✅ 1s 1s +0%
mlk_scalar_decompress_d4 ✅ 1s 2s -50%
mlk_shake128x4_squeezeblocks ✅ 1s 2s -50%
mlk_value_barrier_u32 ✅ 1s 3s -67%
poly_mulcache_compute_native_aarch64 ✅ 1s 4s -75%
poly_reduce_native_x86_64 ✅ 1s 3s -67%
poly_tomont_native_x86_64 ✅ 1s 2s -50%
polyvec_basemul_acc_montgomery_cached_k2_native_aarch64 ✅ 1s 3s -67%
rej_uniform_native ✅ 1s 1s +0%

@oqs-bot

oqs-bot commented Jun 29, 2026

Copy link
Copy Markdown
Contributor

CBMC Results (ML-KEM-1024)

Full Results (191 proofs)
Proof Status Current Previous Change
**TOTAL** ✅ 1736s 1645s +5.5%
mlk_indcpa_enc ✅ 375s 368s +2%
mlk_indcpa_keypair_derand ✅ 165s 152s +9%
mlk_poly_rej_uniform ✅ 147s 131s +12%
mlk_rej_uniform_c ✅ 118s 107s +10%
mlk_polyvec_basemul_acc_montgomery_cached_c ✅ 71s 67s +6%
rej_uniform_native_x86_64 ✅ 59s 60s -2%
poly_ntt_native ✅ 39s 38s +3%
mlk_poly_reduce_native ✅ 38s 34s +12%
rej_uniform_native_aarch64 ✅ 37s 34s +9%
mlk_ntt_layer ✅ 36s 29s +24%
polyvec_basemul_acc_montgomery_cached_native ✅ 28s 26s +8%
mlk_keccak_squeezeblocks_x4 ✅ 25s 23s +9%
mlk_polyvec_add ✅ 20s 15s +33%
keccakf1600x4_permute_native_x4 ✅ 16s 17s -6%
mlk_fqmul ✅ 16s 16s +0%
mlk_poly_decompress_d11_native ✅ 16s 12s +33%
mlk_poly_decompress_d5_native ✅ 15s 13s +15%
mlk_indcpa_dec ✅ 12s 13s -8%
mlk_keccak_squeezeblocks ✅ 11s 9s +22%
mlk_poly_frommsg ✅ 10s 10s +0%
mlk_ntt_butterfly_block ✅ 9s 6s +50%
mlk_polyvec_ntt ✅ 9s 10s -10%
mlk_poly_sub ✅ 8s 5s +60%
mlk_keccak_absorb_once_x4 ✅ 7s 7s +0%
mlk_keccak_squeeze_once ✅ 7s 7s +0%
mlk_poly_frombytes_native ✅ 7s 7s +0%
mlk_poly_ntt ✅ 7s 7s +0%
poly_decompress_d11_native_x86_64 ✅ 7s 5s +40%
mlk_gen_matrix ✅ 6s 4s +50%
mlk_gen_matrix_serial ✅ 6s 3s +100%
mlk_invntt_layer ✅ 6s 5s +20%
mlk_polymat_permute_bitrev_to_custom ✅ 6s 4s +50%
mlk_scalar_decompress_d5 ✅ 6s 2s +200%
kem_check_pk ✅ 5s 4s +25%
mlk_keccakf1600_permute_c ✅ 5s 7s -29%
mlk_poly_add ✅ 5s 4s +25%
mlk_poly_decompress_d11_c ✅ 5s 4s +25%
mlk_poly_frombytes_c ✅ 5s 3s +67%
mlk_poly_mulcache_compute_native ✅ 5s 3s +67%
mlk_poly_rej_uniform_x4 ✅ 5s 5s +0%
mlk_polyvec_permute_bitrev_to_custom ✅ 5s 2s +150%
mlk_polyvec_permute_bitrev_to_custom_native ✅ 5s 3s +67%
poly_frombytes_native_x86_64 ✅ 5s 3s +67%
poly_getnoise_eta1122_4x_native ✅ 5s 3s +67%
kem_dec ✅ 4s 5s -20%
mlk_matvec_mul ✅ 4s 5s -20%
mlk_poly_cbd_eta1 ✅ 4s 2s +100%
mlk_poly_compress_d11_c ✅ 4s 2s +100%
mlk_poly_compress_du ✅ 4s 3s +33%
mlk_poly_decompress_d10_c ✅ 4s 1s +300%
mlk_poly_tomont ✅ 4s 4s +0%
mlk_scalar_compress_d11 ✅ 4s 3s +33%
mlk_shake128x4_squeezeblocks ✅ 4s 2s +100%
mlk_value_barrier_i32 ✅ 4s 2s +100%
poly_decompress_d10_native_x86_64 ✅ 4s 3s +33%
poly_decompress_d4_native_x86_64 ✅ 4s 1s +300%
poly_decompress_d5_native_x86_64 ✅ 4s 4s +0%
poly_mulcache_compute_native_x86_64 ✅ 4s 3s +33%
poly_reduce_native_aarch64 ✅ 4s 2s +100%
poly_tobytes_native_aarch64 ✅ 4s 1s +300%
keccak_f1600_x4_native_avx2 ✅ 3s 1s +200%
keccakf1600_permute_native ✅ 3s 2s +50%
keccakf1600x4_extract_bytes_native ✅ 3s 2s +50%
keccakf1600x4_xor_bytes_native ✅ 3s 3s +0%
kem_enc ✅ 3s 3s +0%
mlk_check_pct ✅ 3s 3s +0%
mlk_ct_cmask_neg_i16 ✅ 3s 2s +50%
mlk_ct_cmask_nonzero_u8 ✅ 3s 3s +0%
mlk_enc_getnoise_eta1_eta2 ✅ 3s 3s +0%
mlk_keccak_absorb_once ✅ 3s 5s -40%
mlk_keccakf1600_extract_bytes (big endian) ✅ 3s 5s -40%
mlk_keccakf1600_xor_bytes ✅ 3s 1s +200%
mlk_keccakf1600x4_permute ✅ 3s 5s -40%
mlk_keypair_getnoise_eta1 ✅ 3s 4s -25%
mlk_poly_cbd_eta2 ✅ 3s 3s +0%
mlk_poly_compress_d4_c ✅ 3s 2s +50%
mlk_poly_compress_d5_c ✅ 3s 4s -25%
mlk_poly_decompress_d11 ✅ 3s 2s +50%
mlk_poly_decompress_d4 ✅ 3s 2s +50%
mlk_poly_frombytes ✅ 3s 3s +0%
mlk_poly_getnoise_eta1_4x ✅ 3s 3s +0%
mlk_poly_getnoise_eta1_4x_native ✅ 3s 3s +0%
mlk_poly_getnoise_eta2 ✅ 3s 2s +50%
mlk_poly_ntt_c ✅ 3s 2s +50%
mlk_poly_tomont_native ✅ 3s 1s +200%
mlk_polyvec_basemul_acc_montgomery_cached ✅ 3s 1s +200%
mlk_polyvec_compress_du ✅ 3s 2s +50%
mlk_polyvec_mulcache_compute ✅ 3s 4s -25%
mlk_polyvec_reduce ✅ 3s 2s +50%
mlk_shake128_squeezeblocks ✅ 3s 4s -25%
mlk_value_barrier_u32 ✅ 3s 1s +200%
mlk_value_barrier_u8 ✅ 3s 2s +50%
ntt_native_aarch64 ✅ 3s 2s +50%
nttunpack_native_x86_64 ✅ 3s 2s +50%
poly_compress_d4_native_x86_64 ✅ 3s 2s +50%
poly_tobytes_native_x86_64 ✅ 3s 2s +50%
poly_tomont_native_aarch64 ✅ 3s 1s +200%
polyvec_basemul_acc_montgomery_cached_k2_native_aarch64 ✅ 3s 2s +50%
polyvec_basemul_acc_montgomery_cached_k2_native_x86_64 ✅ 3s 2s +50%
polyvec_basemul_acc_montgomery_cached_k3_native_aarch64 ✅ 3s 2s +50%
polyvec_basemul_acc_montgomery_cached_k4_native_aarch64 ✅ 3s 3s +0%
polyvec_basemul_acc_montgomery_cached_k4_native_x86_64 ✅ 3s 2s +50%
sys_check_capability ✅ 3s 3s +0%
intt_native_aarch64 ✅ 2s 1s +100%
intt_native_x86_64 ✅ 2s 5s -60%
keccak_f1600_x1_native_aarch64 ✅ 2s 1s +100%
keccak_f1600_x1_native_aarch64_v84a ✅ 2s 2s +0%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid ✅ 2s 1s +100%
kem_check_sk ✅ 2s 4s -50%
kem_enc_derand ✅ 2s 2s +0%
kem_keypair_derand ✅ 2s 2s +0%
mlk_ct_cmask_nonzero_u16 ✅ 2s 1s +100%
mlk_ct_get_optblocker_u32 ✅ 2s 1s +100%
mlk_ct_memcmp ✅ 2s 3s -33%
mlk_ct_sel_int16 ✅ 2s 2s +0%
mlk_ct_sel_uint8 ✅ 2s 2s +0%
mlk_keccakf1600x4_extract_bytes ✅ 2s 1s +100%
mlk_keccakf1600x4_extract_bytes_c ✅ 2s 1s +100%
mlk_keccakf1600x4_xor_bytes ✅ 2s 2s +0%
mlk_poly_compress_d10 ✅ 2s 2s +0%
mlk_poly_compress_d10_c ✅ 2s 1s +100%
mlk_poly_compress_d10_native ✅ 2s 3s -33%
mlk_poly_compress_d11 ✅ 2s 3s -33%
mlk_poly_compress_d4_native ✅ 2s 3s -33%
mlk_poly_compress_d5_native ✅ 2s 3s -33%
mlk_poly_compress_dv ✅ 2s 2s +0%
mlk_poly_decompress_d10 ✅ 2s 2s +0%
mlk_poly_decompress_d4_c ✅ 2s 3s -33%
mlk_poly_decompress_d5 ✅ 2s 2s +0%
mlk_poly_decompress_dv ✅ 2s 1s +100%
mlk_poly_getnoise_eta1122_4x ✅ 2s 2s +0%
mlk_poly_mulcache_compute_c ✅ 2s 2s +0%
mlk_poly_reduce ✅ 2s 2s +0%
mlk_poly_reduce_c ✅ 2s 4s -50%
mlk_poly_tobytes_native ✅ 2s 4s -50%
mlk_poly_tomsg ✅ 2s 3s -33%
mlk_polyvec_decompress_du ✅ 2s 2s +0%
mlk_polyvec_frombytes ✅ 2s 4s -50%
mlk_polyvec_invntt_tomont ✅ 2s 2s +0%
mlk_scalar_compress_d1 ✅ 2s 6s -67%
mlk_scalar_compress_d5 ✅ 2s 2s +0%
mlk_scalar_decompress_d11 ✅ 2s 4s -50%
mlk_scalar_decompress_d4 ✅ 2s 4s -50%
mlk_scalar_signed_to_unsigned_q ✅ 2s 2s +0%
mlk_sha3_256 ✅ 2s 3s -33%
mlk_shake128_absorb_once ✅ 2s 2s +0%
mlk_shake128x4_absorb_once ✅ 2s 3s -33%
mlk_shake256 ✅ 2s 1s +100%
mlk_shake256x4 ✅ 2s 3s -33%
ntt_native_x86_64 ✅ 2s 2s +0%
poly_compress_d10_native_x86_64 ✅ 2s 4s -50%
poly_compress_d11_native_x86_64 ✅ 2s 2s +0%
poly_compress_d5_native_x86_64 ✅ 2s 2s +0%
poly_mulcache_compute_native_aarch64 ✅ 2s 3s -33%
poly_reduce_native_x86_64 ✅ 2s 3s -33%
poly_tomont_native_x86_64 ✅ 2s 2s +0%
polyvec_basemul_acc_montgomery_cached_k3_native_x86_64 ✅ 2s 4s -50%
rej_uniform_native ✅ 2s 1s +100%
keccak_f1600_x4_native_aarch64_v84a ✅ 1s 2s -50%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid ✅ 1s 1s +0%
kem_keypair ✅ 1s 4s -75%
mlk_barrett_reduce ✅ 1s 2s -50%
mlk_ct_cmov_zero ✅ 1s 2s -50%
mlk_ct_get_optblocker_i32 ✅ 1s 4s -75%
mlk_ct_get_optblocker_u8 ✅ 1s 2s -50%
mlk_keccakf1600_extract_bytes ✅ 1s 2s -50%
mlk_keccakf1600_permute ✅ 1s 1s +0%
mlk_keccakf1600_xor_bytes (big endian) ✅ 1s 4s -75%
mlk_keccakf1600x4_xor_bytes_c ✅ 1s 2s -50%
mlk_montgomery_reduce ✅ 1s 3s -67%
mlk_poly_compress_d11_native ✅ 1s 3s -67%
mlk_poly_compress_d4 ✅ 1s 1s +0%
mlk_poly_compress_d5 ✅ 1s 2s -50%
mlk_poly_decompress_d10_native ✅ 1s 2s -50%
mlk_poly_decompress_d4_native ✅ 1s 1s +0%
mlk_poly_decompress_d5_c ✅ 1s 1s +0%
mlk_poly_decompress_du ✅ 1s 1s +0%
mlk_poly_invntt_tomont ✅ 1s 4s -75%
mlk_poly_invntt_tomont_c ✅ 1s 3s -67%
mlk_poly_mulcache_compute ✅ 1s 1s +0%
mlk_poly_tobytes ✅ 1s 2s -50%
mlk_poly_tobytes_c ✅ 1s 1s +0%
mlk_poly_tomont_c ✅ 1s 2s -50%
mlk_polyvec_tobytes ✅ 1s 1s +0%
mlk_polyvec_tomont ✅ 1s 4s -75%
mlk_rej_uniform ✅ 1s 2s -50%
mlk_scalar_compress_d10 ✅ 1s 2s -50%
mlk_scalar_compress_d4 ✅ 1s 1s +0%
mlk_scalar_decompress_d10 ✅ 1s 3s -67%
mlk_sha3_512 ✅ 1s 4s -75%
poly_invntt_tomont_native ✅ 1s 3s -67%

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Port: common: Split context-parameter machinery into context.h

2 participants

@mkannwischer @oqs-bot