Add NUCLEO-N657X0-Q Zephyr hardware platform by mkannwischer · Pull Request #1269 · pq-code-package/mldsa-native

mkannwischer · 2026-07-08T06:10:35Z

github-actions

Mac Mini (M1, 2020) benchmarks (opt)

Details

Benchmark suite	Current: `886a852`	Previous: `31c9b9e`	Ratio
`ML-DSA-44 keypair`	`46531` cycles	`46522` cycles	`1.00`
`ML-DSA-44 sign`	`131170` cycles	`131160` cycles	`1.00`
`ML-DSA-44 verify`	`47350` cycles	`47327` cycles	`1.00`
`ML-DSA-65 keypair`	`81684` cycles	`81716` cycles	`1.00`
`ML-DSA-65 sign`	`215375` cycles	`215437` cycles	`1.00`
`ML-DSA-65 verify`	`79306` cycles	`79333` cycles	`1.00`
`ML-DSA-87 keypair`	`132402` cycles	`132420` cycles	`1.00`
`ML-DSA-87 sign`	`277364` cycles	`277471` cycles	`1.00`
`ML-DSA-87 verify`	`134052` cycles	`134052` cycles	`1`

This comment was automatically generated by workflow using github-action-benchmark.

github-actions

Mac Mini (M1, 2020) benchmarks (no-opt)

Details

Benchmark suite	Current: `886a852`	Previous: `31c9b9e`	Ratio
`ML-DSA-44 keypair`	`112993` cycles	`112861` cycles	`1.00`
`ML-DSA-44 sign`	`401759` cycles	`401477` cycles	`1.00`
`ML-DSA-44 verify`	`119633` cycles	`119561` cycles	`1.00`
`ML-DSA-65 keypair`	`192986` cycles	`192890` cycles	`1.00`
`ML-DSA-65 sign`	`650235` cycles	`650013` cycles	`1.00`
`ML-DSA-65 verify`	`192936` cycles	`192845` cycles	`1.00`
`ML-DSA-87 keypair`	`318825` cycles	`318816` cycles	`1.00`
`ML-DSA-87 sign`	`828801` cycles	`828929` cycles	`1.00`
`ML-DSA-87 verify`	`326769` cycles	`326792` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

github-actions

Arm Cortex-A76 (Raspberry Pi 5) benchmarks (opt)

Details

Benchmark suite	Current: `886a852`	Previous: `31c9b9e`	Ratio
`ML-DSA-44 keypair`	`112109` cycles	`112231` cycles	`1.00`
`ML-DSA-44 sign`	`353591` cycles	`353770` cycles	`1.00`
`ML-DSA-44 verify`	`117189` cycles	`117003` cycles	`1.00`
`ML-DSA-65 keypair`	`194471` cycles	`194658` cycles	`1.00`
`ML-DSA-65 sign`	`583807` cycles	`583989` cycles	`1.00`
`ML-DSA-65 verify`	`193132` cycles	`192975` cycles	`1.00`
`ML-DSA-87 keypair`	`320191` cycles	`320806` cycles	`1.00`
`ML-DSA-87 sign`	`747662` cycles	`747067` cycles	`1.00`
`ML-DSA-87 verify`	`317985` cycles	`318658` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

oqs-bot

Intel Xeon 4th gen (c7i)

Details

Benchmark suite	Current: `886a852`	Previous: `31c9b9e`	Ratio
`ML-DSA-44 keypair`	`43588` cycles	`43330` cycles	`1.01`
`ML-DSA-44 sign`	`130620` cycles	`130219` cycles	`1.00`
`ML-DSA-44 verify`	`45338` cycles	`45321` cycles	`1.00`
`ML-DSA-65 keypair`	`76037` cycles	`75635` cycles	`1.01`
`ML-DSA-65 sign`	`214108` cycles	`213902` cycles	`1.00`
`ML-DSA-65 verify`	`74699` cycles	`74608` cycles	`1.00`
`ML-DSA-87 keypair`	`123255` cycles	`123482` cycles	`1.00`
`ML-DSA-87 sign`	`271545` cycles	`271162` cycles	`1.00`
`ML-DSA-87 verify`	`120756` cycles	`121208` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

oqs-bot

Intel Xeon 4th gen (c7i) (no-opt)

Details

Benchmark suite	Current: `886a852`	Previous: `31c9b9e`	Ratio
`ML-DSA-44 keypair`	`91600` cycles	`91434` cycles	`1.00`
`ML-DSA-44 sign`	`352305` cycles	`352157` cycles	`1.00`
`ML-DSA-44 verify`	`99893` cycles	`99900` cycles	`1.00`
`ML-DSA-65 keypair`	`154138` cycles	`153885` cycles	`1.00`
`ML-DSA-65 sign`	`571874` cycles	`571112` cycles	`1.00`
`ML-DSA-65 verify`	`159988` cycles	`159924` cycles	`1.00`
`ML-DSA-87 keypair`	`255466` cycles	`255269` cycles	`1.00`
`ML-DSA-87 sign`	`726589` cycles	`726097` cycles	`1.00`
`ML-DSA-87 verify`	`263939` cycles	`263770` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

oqs-bot

AMD EPYC 3rd gen (c6a)

Details

Benchmark suite	Current: `886a852`	Previous: `31c9b9e`	Ratio
`ML-DSA-44 keypair`	`55356` cycles	`55903` cycles	`0.99`
`ML-DSA-44 sign`	`158690` cycles	`159714` cycles	`0.99`
`ML-DSA-44 verify`	`57761` cycles	`58286` cycles	`0.99`
`ML-DSA-65 keypair`	`95615` cycles	`96468` cycles	`0.99`
`ML-DSA-65 sign`	`260140` cycles	`260877` cycles	`1.00`
`ML-DSA-65 verify`	`95939` cycles	`96550` cycles	`0.99`
`ML-DSA-87 keypair`	`154474` cycles	`154870` cycles	`1.00`
`ML-DSA-87 sign`	`324130` cycles	`324218` cycles	`1.00`
`ML-DSA-87 verify`	`151298` cycles	`151710` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

oqs-bot

Graviton5

Details

Benchmark suite	Current: `886a852`	Previous: `31c9b9e`	Ratio
`ML-DSA-44 keypair`	`51446` cycles	`51442` cycles	`1.00`
`ML-DSA-44 sign`	`162127` cycles	`162032` cycles	`1.00`
`ML-DSA-44 verify`	`54672` cycles	`54750` cycles	`1.00`
`ML-DSA-65 keypair`	`90285` cycles	`90174` cycles	`1.00`
`ML-DSA-65 sign`	`267924` cycles	`268054` cycles	`1.00`
`ML-DSA-65 verify`	`89968` cycles	`89932` cycles	`1.00`
`ML-DSA-87 keypair`	`146057` cycles	`145918` cycles	`1.00`
`ML-DSA-87 sign`	`335353` cycles	`335532` cycles	`1.00`
`ML-DSA-87 verify`	`145304` cycles	`144974` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

oqs-bot

Intel Xeon 3rd gen (c6i)

Details

Benchmark suite	Current: `886a852`	Previous: `31c9b9e`	Ratio
`ML-DSA-44 keypair`	`61470` cycles	`61472` cycles	`1.00`
`ML-DSA-44 sign`	`188151` cycles	`188707` cycles	`1.00`
`ML-DSA-44 verify`	`66435` cycles	`66517` cycles	`1.00`
`ML-DSA-65 keypair`	`109364` cycles	`107865` cycles	`1.01`
`ML-DSA-65 sign`	`312810` cycles	`310455` cycles	`1.01`
`ML-DSA-65 verify`	`109333` cycles	`108692` cycles	`1.01`
`ML-DSA-87 keypair`	`172878` cycles	`171177` cycles	`1.01`
`ML-DSA-87 sign`	`382794` cycles	`379610` cycles	`1.01`
`ML-DSA-87 verify`	`171889` cycles	`170527` cycles	`1.01`

This comment was automatically generated by workflow using github-action-benchmark.

oqs-bot

AMD EPYC 4th gen (c7a)

Details

Benchmark suite	Current: `886a852`	Previous: `31c9b9e`	Ratio
`ML-DSA-44 keypair`	`46423` cycles	`47532` cycles	`0.98`
`ML-DSA-44 sign`	`139965` cycles	`142152` cycles	`0.98`
`ML-DSA-44 verify`	`49352` cycles	`49985` cycles	`0.99`
`ML-DSA-65 keypair`	`83292` cycles	`82366` cycles	`1.01`
`ML-DSA-65 sign`	`226331` cycles	`226362` cycles	`1.00`
`ML-DSA-65 verify`	`81752` cycles	`83532` cycles	`0.98`
`ML-DSA-87 keypair`	`130237` cycles	`130125` cycles	`1.00`
`ML-DSA-87 sign`	`279954` cycles	`280804` cycles	`1.00`
`ML-DSA-87 verify`	`128225` cycles	`128934` cycles	`0.99`

This comment was automatically generated by workflow using github-action-benchmark.

github-actions

Arm Cortex-A76 (Raspberry Pi 5) benchmarks (no-opt)

Details

Benchmark suite	Current: `886a852`	Previous: `31c9b9e`	Ratio
`ML-DSA-44 keypair`	`211787` cycles	`211407` cycles	`1.00`
`ML-DSA-44 sign`	`759863` cycles	`759221` cycles	`1.00`
`ML-DSA-44 verify`	`229572` cycles	`228950` cycles	`1.00`
`ML-DSA-65 keypair`	`377864` cycles	`377309` cycles	`1.00`
`ML-DSA-65 sign`	`1246825` cycles	`1247055` cycles	`1.00`
`ML-DSA-65 verify`	`372342` cycles	`371400` cycles	`1.00`
`ML-DSA-87 keypair`	`601781` cycles	`600192` cycles	`1.00`
`ML-DSA-87 sign`	`1582456` cycles	`1582352` cycles	`1.00`
`ML-DSA-87 verify`	`617363` cycles	`615832` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

oqs-bot

AMD EPYC 3rd gen (c6a) (no-opt)

Details

Benchmark suite	Current: `886a852`	Previous: `31c9b9e`	Ratio
`ML-DSA-44 keypair`	`133217` cycles	`133925` cycles	`0.99`
`ML-DSA-44 sign`	`518204` cycles	`521786` cycles	`0.99`
`ML-DSA-44 verify`	`146438` cycles	`147535` cycles	`0.99`
`ML-DSA-65 keypair`	`223868` cycles	`225339` cycles	`0.99`
`ML-DSA-65 sign`	`843723` cycles	`848854` cycles	`0.99`
`ML-DSA-65 verify`	`234209` cycles	`235631` cycles	`0.99`
`ML-DSA-87 keypair`	`366736` cycles	`369976` cycles	`0.99`
`ML-DSA-87 sign`	`1058825` cycles	`1068131` cycles	`0.99`
`ML-DSA-87 verify`	`380856` cycles	`383727` cycles	`0.99`

This comment was automatically generated by workflow using github-action-benchmark.

oqs-bot

Graviton5 (no-opt)

Details

Benchmark suite	Current: `886a852`	Previous: `31c9b9e`	Ratio
`ML-DSA-44 keypair`	`99998` cycles	`99939` cycles	`1.00`
`ML-DSA-44 sign`	`369090` cycles	`369067` cycles	`1.00`
`ML-DSA-44 verify`	`110132` cycles	`110036` cycles	`1.00`
`ML-DSA-65 keypair`	`174188` cycles	`174485` cycles	`1.00`
`ML-DSA-65 sign`	`598989` cycles	`599038` cycles	`1.00`
`ML-DSA-65 verify`	`178034` cycles	`178226` cycles	`1.00`
`ML-DSA-87 keypair`	`285442` cycles	`285879` cycles	`1.00`
`ML-DSA-87 sign`	`760385` cycles	`759708` cycles	`1.00`
`ML-DSA-87 verify`	`296844` cycles	`296489` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

oqs-bot

Intel Xeon 3rd gen (c6i) (no-opt)

Details

Benchmark suite	Current: `886a852`	Previous: `31c9b9e`	Ratio
`ML-DSA-44 keypair`	`153961` cycles	`153927` cycles	`1.00`
`ML-DSA-44 sign`	`589733` cycles	`588765` cycles	`1.00`
`ML-DSA-44 verify`	`169184` cycles	`169314` cycles	`1.00`
`ML-DSA-65 keypair`	`262036` cycles	`262608` cycles	`1.00`
`ML-DSA-65 sign`	`965146` cycles	`966006` cycles	`1.00`
`ML-DSA-65 verify`	`271996` cycles	`272645` cycles	`1.00`
`ML-DSA-87 keypair`	`431993` cycles	`431720` cycles	`1.00`
`ML-DSA-87 sign`	`1211571` cycles	`1210447` cycles	`1.00`
`ML-DSA-87 verify`	`447405` cycles	`447284` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

oqs-bot

Graviton4

Details

Benchmark suite	Current: `886a852`	Previous: `31c9b9e`	Ratio
`ML-DSA-44 keypair`	`67223` cycles	`67314` cycles	`1.00`
`ML-DSA-44 sign`	`198467` cycles	`198296` cycles	`1.00`
`ML-DSA-44 verify`	`70079` cycles	`70230` cycles	`1.00`
`ML-DSA-65 keypair`	`119432` cycles	`119339` cycles	`1.00`
`ML-DSA-65 sign`	`326253` cycles	`326466` cycles	`1.00`
`ML-DSA-65 verify`	`116881` cycles	`116954` cycles	`1.00`
`ML-DSA-87 keypair`	`196396` cycles	`196576` cycles	`1.00`
`ML-DSA-87 sign`	`421221` cycles	`421603` cycles	`1.00`
`ML-DSA-87 verify`	`193252` cycles	`193034` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

oqs-bot

AMD EPYC 4th gen (c7a) (no-opt)

Details

Benchmark suite	Current: `886a852`	Previous: `31c9b9e`	Ratio
`ML-DSA-44 keypair`	`118479` cycles	`118289` cycles	`1.00`
`ML-DSA-44 sign`	`461045` cycles	`458458` cycles	`1.01`
`ML-DSA-44 verify`	`130758` cycles	`130706` cycles	`1.00`
`ML-DSA-65 keypair`	`201304` cycles	`201164` cycles	`1.00`
`ML-DSA-65 sign`	`744924` cycles	`744803` cycles	`1.00`
`ML-DSA-65 verify`	`208388` cycles	`209751` cycles	`0.99`
`ML-DSA-87 keypair`	`330676` cycles	`329940` cycles	`1.00`
`ML-DSA-87 sign`	`938564` cycles	`936013` cycles	`1.00`
`ML-DSA-87 verify`	`343721` cycles	`343460` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

oqs-bot

Graviton3

Details

Benchmark suite	Current: `886a852`	Previous: `31c9b9e`	Ratio
`ML-DSA-44 keypair`	`71431` cycles	`71469` cycles	`1.00`
`ML-DSA-44 sign`	`209032` cycles	`208775` cycles	`1.00`
`ML-DSA-44 verify`	`74831` cycles	`74899` cycles	`1.00`
`ML-DSA-65 keypair`	`126022` cycles	`125873` cycles	`1.00`
`ML-DSA-65 sign`	`345651` cycles	`345621` cycles	`1.00`
`ML-DSA-65 verify`	`124186` cycles	`124399` cycles	`1.00`
`ML-DSA-87 keypair`	`207040` cycles	`207014` cycles	`1.00`
`ML-DSA-87 sign`	`444019` cycles	`444288` cycles	`1.00`
`ML-DSA-87 verify`	`204110` cycles	`203939` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

oqs-bot

Graviton4 (no-opt)

Details

Benchmark suite	Current: `886a852`	Previous: `31c9b9e`	Ratio
`ML-DSA-44 keypair`	`127562` cycles	`127773` cycles	`1.00`
`ML-DSA-44 sign`	`441240` cycles	`440966` cycles	`1.00`
`ML-DSA-44 verify`	`136379` cycles	`136491` cycles	`1.00`
`ML-DSA-65 keypair`	`220509` cycles	`220481` cycles	`1.00`
`ML-DSA-65 sign`	`714637` cycles	`714733` cycles	`1.00`
`ML-DSA-65 verify`	`220862` cycles	`221438` cycles	`1.00`
`ML-DSA-87 keypair`	`364564` cycles	`364304` cycles	`1.00`
`ML-DSA-87 sign`	`915543` cycles	`915795` cycles	`1.00`
`ML-DSA-87 verify`	`370854` cycles	`371309` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

oqs-bot

Graviton3 (no-opt)

Details

Benchmark suite	Current: `886a852`	Previous: `31c9b9e`	Ratio
`ML-DSA-44 keypair`	`137952` cycles	`138169` cycles	`1.00`
`ML-DSA-44 sign`	`486027` cycles	`485759` cycles	`1.00`
`ML-DSA-44 verify`	`149054` cycles	`149249` cycles	`1.00`
`ML-DSA-65 keypair`	`241718` cycles	`241504` cycles	`1.00`
`ML-DSA-65 sign`	`791864` cycles	`792141` cycles	`1.00`
`ML-DSA-65 verify`	`242197` cycles	`243127` cycles	`1.00`
`ML-DSA-87 keypair`	`395797` cycles	`395540` cycles	`1.00`
`ML-DSA-87 sign`	`1013588` cycles	`1014179` cycles	`1.00`
`ML-DSA-87 verify`	`403711` cycles	`404443` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

oqs-bot

Graviton2

Details

Benchmark suite	Current: `886a852`	Previous: `31c9b9e`	Ratio
`ML-DSA-44 keypair`	`112431` cycles	`112387` cycles	`1.00`
`ML-DSA-44 sign`	`354495` cycles	`353747` cycles	`1.00`
`ML-DSA-44 verify`	`117647` cycles	`117213` cycles	`1.00`
`ML-DSA-65 keypair`	`194618` cycles	`194859` cycles	`1.00`
`ML-DSA-65 sign`	`584659` cycles	`584232` cycles	`1.00`
`ML-DSA-65 verify`	`193676` cycles	`192978` cycles	`1.00`
`ML-DSA-87 keypair`	`320974` cycles	`321194` cycles	`1.00`
`ML-DSA-87 sign`	`747728` cycles	`747599` cycles	`1.00`
`ML-DSA-87 verify`	`318351` cycles	`318824` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

oqs-bot

Graviton2 (no-opt)

Details

Benchmark suite	Current: `886a852`	Previous: `31c9b9e`	Ratio
`ML-DSA-44 keypair`	`212370` cycles	`211681` cycles	`1.00`
`ML-DSA-44 sign`	`761633` cycles	`759369` cycles	`1.00`
`ML-DSA-44 verify`	`230067` cycles	`229200` cycles	`1.00`
`ML-DSA-65 keypair`	`379405` cycles	`377487` cycles	`1.01`
`ML-DSA-65 sign`	`1251544` cycles	`1247868` cycles	`1.00`
`ML-DSA-65 verify`	`374276` cycles	`372482` cycles	`1.00`
`ML-DSA-87 keypair`	`601930` cycles	`601179` cycles	`1.00`
`ML-DSA-87 sign`	`1584041` cycles	`1584658` cycles	`1.00`
`ML-DSA-87 verify`	`617886` cycles	`616750` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

github-actions

SpacemiT K1 8 (Banana Pi F3) benchmarks (no-opt)

Details

Benchmark suite	Current: `886a852`	Previous: `31c9b9e`	Ratio
`ML-DSA-44 keypair`	`757803` cycles	`760454` cycles	`1.00`
`ML-DSA-44 sign`	`3136111` cycles	`3140802` cycles	`1.00`
`ML-DSA-44 verify`	`856823` cycles	`859417` cycles	`1.00`
`ML-DSA-65 keypair`	`1286491` cycles	`1288691` cycles	`1.00`
`ML-DSA-65 sign`	`5077057` cycles	`5083251` cycles	`1.00`
`ML-DSA-65 verify`	`1364883` cycles	`1368367` cycles	`1.00`
`ML-DSA-87 keypair`	`2112884` cycles	`2110193` cycles	`1.00`
`ML-DSA-87 sign`	`6388072` cycles	`6357135` cycles	`1.00`
`ML-DSA-87 verify`	`2231353` cycles	`2228423` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

github-actions

Arm Cortex-A55 (Snapdragon 888) benchmarks (opt)

Details

Benchmark suite	Current: `886a852`	Previous: `31c9b9e`	Ratio
`ML-DSA-44 keypair`	`271567` cycles	`267604` cycles	`1.01`
`ML-DSA-44 sign`	`823110` cycles	`807489` cycles	`1.02`
`ML-DSA-44 verify`	`276228` cycles	`269318` cycles	`1.03`
`ML-DSA-65 keypair`	`467305` cycles	`459549` cycles	`1.02`
`ML-DSA-65 sign`	`1325880` cycles	`1321391` cycles	`1.00`
`ML-DSA-65 verify`	`451457` cycles	`445861` cycles	`1.01`
`ML-DSA-87 keypair`	`792659` cycles	`784414` cycles	`1.01`
`ML-DSA-87 sign`	`1860266` cycles	`1775733` cycles	`1.05`
`ML-DSA-87 verify`	`777348` cycles	`764570` cycles	`1.02`

This comment was automatically generated by workflow using github-action-benchmark.

github-actions

Arm Cortex-A55 (Snapdragon 888) benchmarks (no-opt)

Details

Benchmark suite	Current: `886a852`	Previous: `31c9b9e`	Ratio
`ML-DSA-44 keypair`	`465936` cycles	`465249` cycles	`1.00`
`ML-DSA-44 sign`	`2135052` cycles	`2136217` cycles	`1.00`
`ML-DSA-44 verify`	`556873` cycles	`557469` cycles	`1.00`
`ML-DSA-65 keypair`	`784160` cycles	`784223` cycles	`1.00`
`ML-DSA-65 sign`	`3511273` cycles	`3490690` cycles	`1.01`
`ML-DSA-65 verify`	`869600` cycles	`867766` cycles	`1.00`
`ML-DSA-87 keypair`	`1270422` cycles	`1267021` cycles	`1.00`
`ML-DSA-87 sign`	`4354544` cycles	`4334500` cycles	`1.00`
`ML-DSA-87 verify`	`1398111` cycles	`1389903` cycles	`1.01`

This comment was automatically generated by workflow using github-action-benchmark.

github-actions

Arm Cortex-A72 (Raspberry Pi 4) benchmarks (opt)

Details

Benchmark suite	Current: `886a852`	Previous: `31c9b9e`	Ratio
`ML-DSA-44 keypair`	`218103` cycles	`213757` cycles	`1.02`
`ML-DSA-44 sign`	`601130` cycles	`591883` cycles	`1.02`
`ML-DSA-44 verify`	`220216` cycles	`212143` cycles	`1.04`
`ML-DSA-65 keypair`	`387702` cycles	`387739` cycles	`1.00`
`ML-DSA-65 sign`	`991285` cycles	`1003536` cycles	`0.99`
`ML-DSA-65 verify`	`367344` cycles	`370541` cycles	`0.99`
`ML-DSA-87 keypair`	`640035` cycles	`632187` cycles	`1.01`
`ML-DSA-87 sign`	`1318830` cycles	`1305234` cycles	`1.01`
`ML-DSA-87 verify`	`621088` cycles	`614382` cycles	`1.01`

This comment was automatically generated by workflow using github-action-benchmark.

github-actions

⚠️ Performance Alert ⚠️

Possible performance regression was detected for benchmark 'Arm Cortex-A72 (Raspberry Pi 4) benchmarks (opt)'.
Benchmark result of this commit is worse than the previous benchmark result exceeding threshold 1.03.

Benchmark suite	Current: `886a852`	Previous: `31c9b9e`	Ratio
`ML-DSA-44 verify`	`220216` cycles	`212143` cycles	`1.04`

This comment was automatically generated by workflow using github-action-benchmark.

github-actions

Arm Cortex-A72 (Raspberry Pi 4) benchmarks (no-opt)

Details

Benchmark suite	Current: `886a852`	Previous: `31c9b9e`	Ratio
`ML-DSA-44 keypair`	`302917` cycles	`301538` cycles	`1.00`
`ML-DSA-44 sign`	`1146091` cycles	`1138950` cycles	`1.01`
`ML-DSA-44 verify`	`332028` cycles	`332863` cycles	`1.00`
`ML-DSA-65 keypair`	`544751` cycles	`547936` cycles	`0.99`
`ML-DSA-65 sign`	`1853787` cycles	`1869744` cycles	`0.99`
`ML-DSA-65 verify`	`524966` cycles	`526463` cycles	`1.00`
`ML-DSA-87 keypair`	`835706` cycles	`838034` cycles	`1.00`
`ML-DSA-87 sign`	`2331203` cycles	`2363198` cycles	`0.99`
`ML-DSA-87 verify`	`863982` cycles	`865513` cycles	`1.00`

This comment was automatically generated by workflow using github-action-benchmark.

github-actions

⚠️ Performance Alert ⚠️

Possible performance regression was detected for benchmark 'Arm Cortex-A72 (Raspberry Pi 4) benchmarks (no-opt)'.
Benchmark result of this commit is worse than the previous benchmark result exceeding threshold 1.03.

Benchmark suite	Current: `ff7f8f3`	Previous: `31c9b9e`	Ratio
`ML-DSA-87 sign`	`2434339` cycles	`2354951` cycles	`1.03`

This comment was automatically generated by workflow using github-action-benchmark.

oqs-bot · 2026-07-08T06:47:52Z

CBMC Results (ML-DSA-44, REDUCE-RAM)

Full Results (206 proofs)

Proof	Status	Current	Previous	Change
`TOTAL`	✅	1386s	1364s	+1.6%
`polyvec_matrix_pointwise_montgomery_yvec`	✅	142s	149s	-5%
`poly_pointwise_montgomery_c`	✅	113s	112s	+1%
`mld_invntt_layer`	✅	104s	105s	-1%
`polyveck_chknorm`	✅	65s	67s	-3%
`sign_verify_internal`	✅	50s	49s	+2%
`mld_ntt_layer`	✅	41s	41s	+0%
`fqmul`	✅	39s	39s	+0%
`keccakf1600x4_permute_native`	✅	23s	22s	+5%
`mld_ntt_butterfly_block`	✅	22s	23s	-4%
`mld_attempt_signature_generation`	✅	19s	19s	+0%
`poly_ntt_c`	✅	19s	21s	-10%
`polyeta_unpack`	✅	15s	14s	+7%
`rej_uniform_c`	✅	15s	16s	-6%
`compute_pack_t0_t1`	✅	13s	12s	+8%
`poly_chknorm_c`	✅	13s	11s	+18%
`polyvecl_chknorm`	✅	13s	11s	+18%
`mld_check_pct`	✅	11s	15s	-27%
`poly_uniform_eta_4x`	✅	11s	12s	-8%
`polyt0_unpack`	✅	11s	12s	-8%
`poly_invntt_tomont_c`	✅	10s	11s	-9%
`polyz_unpack_c`	✅	10s	8s	+25%
`keccak_absorb_once_x4`	✅	9s	8s	+12%
`polyveck_decompose`	✅	9s	7s	+29%
`rej_uniform`	✅	9s	8s	+12%
`rej_uniform_native_x86_64`	✅	9s	-	new
`polyvec_matrix_pointwise_montgomery_row`	✅	8s	6s	+33%
`sign_verify_extmu`	✅	8s	5s	+60%
`decompose`	✅	6s	3s	+100%
`mld_compute_pack_z`	✅	6s	6s	+0%
`mld_keccakf1600_permute_c`	✅	6s	7s	-14%
`pointwise_acc_native_x86_64`	✅	6s	4s	+50%
`poly_add`	✅	6s	7s	-14%
`poly_use_hint_native_aarch64`	✅	6s	3s	+100%
`polyveck_reduce`	✅	6s	4s	+50%
`sig_unpack_hints`	✅	6s	2s	+200%
`sign_keypair_internal`	✅	6s	4s	+50%
`yvec_init`	✅	6s	1s	+500%
`ntt_native_aarch64`	✅	5s	4s	+25%
`pointwise_native_aarch64`	✅	5s	2s	+150%
`poly_decompose_c`	✅	5s	5s	+0%
`poly_power2round`	✅	5s	4s	+25%
`poly_reduce`	✅	5s	4s	+25%
`poly_use_hint`	✅	5s	2s	+150%
`polyw1_pack`	✅	5s	4s	+25%
`rej_uniform_eta_native_aarch64`	✅	5s	3s	+67%
`rej_uniform_native`	✅	5s	5s	+0%
`rej_uniform_native_aarch64`	✅	5s	3s	+67%
`sign_signature_extmu`	✅	5s	4s	+25%
`sign_signature_internal`	✅	5s	4s	+25%
`sign_verify_pre_hash_shake256`	✅	5s	5s	+0%
`unpack_sk_t0hat`	✅	5s	2s	+150%
`intt_native_aarch64`	✅	4s	3s	+33%
`intt_native_x86_64`	✅	4s	2s	+100%
`keccak_absorb`	✅	4s	3s	+33%
`keccak_f1600_x1_native_aarch64`	✅	4s	3s	+33%
`keccak_squeezeblocks_x4`	✅	4s	3s	+33%
`keccakf1600_permute`	✅	4s	2s	+100%
`keccakf1600_xor_bytes (big endian)`	✅	4s	6s	-33%
`keccakf1600x4_xor_bytes`	✅	4s	3s	+33%
`make_hint`	✅	4s	3s	+33%
`mld_ct_cmask_nonzero_u8`	✅	4s	2s	+100%
`mld_prepare_domain_separation_prefix`	✅	4s	3s	+33%
`mld_sample_s1_s2`	✅	4s	1s	+300%
`mld_sample_s1_s2_serial`	✅	4s	4s	+0%
`mld_value_barrier_i64`	✅	4s	3s	+33%
`mld_value_barrier_u8`	✅	4s	4s	+0%
`ntt_native_x86_64`	✅	4s	3s	+33%
`pack_sig_h`	✅	4s	4s	+0%
`pointwise_acc_native_aarch64`	✅	4s	6s	-33%
`poly_caddq_native`	✅	4s	3s	+33%
`poly_decompose_32_native_aarch64`	✅	4s	4s	+0%
`poly_decompose_native`	✅	4s	2s	+100%
`poly_uniform_eta`	✅	4s	2s	+100%
`polyveck_pack_w1`	✅	4s	3s	+33%
`polyvecl_ntt`	✅	4s	3s	+33%
`polyvecl_unpack_eta`	✅	4s	4s	+0%
`polyw1_pack_32`	✅	4s	3s	+33%
`polyw1_pack_88`	✅	4s	2s	+100%
`polyz_unpack_19_native_aarch64`	✅	4s	4s	+0%
`rej_eta_c`	✅	4s	4s	+0%
`rej_eta_native`	✅	4s	3s	+33%
`shake128_absorb`	✅	4s	3s	+33%
`shake128_squeeze`	✅	4s	2s	+100%
`shake256`	✅	4s	1s	+300%
`sign_keypair`	✅	4s	5s	-20%
`sign_pk_from_sk`	✅	4s	5s	-20%
`sign_signature`	✅	4s	6s	-33%
`sign_verify`	✅	4s	4s	+0%
`unpack_sk_s1hat`	✅	4s	3s	+33%
`fqscale`	✅	3s	2s	+50%
`keccak_f1600_x4_native_aarch64_v84a`	✅	3s	3s	+0%
`keccak_f1600_x4_native_avx2`	✅	3s	2s	+50%
`keccak_finalize`	✅	3s	2s	+50%
`keccak_init`	✅	3s	3s	+0%
`keccakf1600_extract_bytes (big endian)`	✅	3s	4s	-25%
`keccakf1600x4_permute`	✅	3s	4s	-25%
`mld_ct_cmask_neg_i32`	✅	3s	2s	+50%
`mld_ct_cmask_nonzero_u32`	✅	3s	3s	+0%
`mld_h`	✅	3s	4s	-25%
`mld_keccakf1600x4_extract_bytes_c`	✅	3s	4s	-25%
`mld_keccakf1600x4_xor_bytes_c`	✅	3s	4s	-25%
`mld_value_barrier_u32`	✅	3s	1s	+200%
`pack_sk_rho_key_tr_s2`	✅	3s	5s	-40%
`pack_sk_s1`	✅	3s	3s	+0%
`pointwise_native_x86_64`	✅	3s	4s	-25%
`poly_caddq_c`	✅	3s	3s	+0%
`poly_caddq_native_aarch64`	✅	3s	3s	+0%
`poly_challenge`	✅	3s	6s	-50%
`poly_chknorm`	✅	3s	3s	+0%
`poly_chknorm_native_aarch64`	✅	3s	2s	+50%
`poly_chknorm_native_x86_64`	✅	3s	2s	+50%
`poly_decompose`	✅	3s	2s	+50%
`poly_decompose_88_native_aarch64`	✅	3s	3s	+0%
`poly_decompose_native_x86_64`	✅	3s	2s	+50%
`poly_invntt_tomont_native`	✅	3s	3s	+0%
`poly_permute_bitrev_to_custom_optional`	✅	3s	5s	-40%
`poly_permute_bitrev_to_custom_optional_native`	✅	3s	3s	+0%
`poly_shiftl`	✅	3s	4s	-25%
`poly_uniform`	✅	3s	3s	+0%
`poly_uniform_4x`	✅	3s	3s	+0%
`poly_uniform_gamma1_4x`	✅	3s	5s	-40%
`poly_use_hint_c`	✅	3s	5s	-40%
`poly_use_hint_native`	✅	3s	3s	+0%
`polyeta_pack`	✅	3s	3s	+0%
`polyt0_pack`	✅	3s	4s	-25%
`polyt1_pack`	✅	3s	3s	+0%
`polyt1_unpack`	✅	3s	2s	+50%
`polyvec_matrix_expand_serial`	✅	3s	4s	-25%
`polyveck_caddq`	✅	3s	3s	+0%
`polyveck_invntt_tomont`	✅	3s	5s	-40%
`polyveck_ntt`	✅	3s	2s	+50%
`polyvecl_pointwise_acc_montgomery`	✅	3s	3s	+0%
`polyvecl_pointwise_acc_montgomery_native`	✅	3s	3s	+0%
`polyvecl_unpack_z`	✅	3s	3s	+0%
`polyz_pack`	✅	3s	2s	+50%
`polyz_unpack`	✅	3s	3s	+0%
`polyz_unpack_17_native_aarch64`	✅	3s	2s	+50%
`polyz_unpack_native_x86_64`	✅	3s	3s	+0%
`power2round`	✅	3s	2s	+50%
`reduce32`	✅	3s	3s	+0%
`shake128_release`	✅	3s	2s	+50%
`shake256_absorb`	✅	3s	2s	+50%
`shake256_init`	✅	3s	4s	-25%
`shake256_squeeze`	✅	3s	2s	+50%
`shake256x4_absorb_once`	✅	3s	1s	+200%
`sign_signature_pre_hash_internal`	✅	3s	4s	-25%
`sign_signature_pre_hash_shake256`	✅	3s	4s	-25%
`sign_verify_pre_hash_internal`	✅	3s	5s	-40%
`sk_s2hat_get_poly`	✅	3s	5s	-40%
`sk_t0hat_get_poly`	✅	3s	1s	+200%
`unpack_pk_t1`	✅	3s	3s	+0%
`unpack_sk`	✅	3s	3s	+0%
`unpack_sk_s2hat`	✅	3s	4s	-25%
`use_hint`	✅	3s	2s	+50%
`caddq`	✅	2s	6s	-67%
`keccak_f1600_x1_native_aarch64_v84a`	✅	2s	2s	+0%
`keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid`	✅	2s	2s	+0%
`keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid`	✅	2s	3s	-33%
`keccakf1600_permute_native`	✅	2s	3s	-33%
`keccakf1600_xor_bytes`	✅	2s	3s	-33%
`keccakf1600x4_extract_bytes`	✅	2s	2s	+0%
`keccakf1600x4_extract_bytes_native`	✅	2s	4s	-50%
`keccakf1600x4_xor_bytes_native`	✅	2s	5s	-60%
`mld_ct_get_optblocker_u32`	✅	2s	2s	+0%
`mld_ct_get_optblocker_u8`	✅	2s	2s	+0%
`mld_ct_memcmp`	✅	2s	1s	+100%
`mld_keccakf1600_extract_bytes`	✅	2s	2s	+0%
`mld_polymat_expand_entry`	✅	2s	2s	+0%
`montgomery_reduce`	✅	2s	2s	+0%
`nttunpack_native_x86_64`	✅	2s	4s	-50%
`pack_sig_c`	✅	2s	5s	-60%
`pack_sig_z`	✅	2s	2s	+0%
`poly_caddq`	✅	2s	4s	-50%
`poly_caddq_native_x86_64`	✅	2s	4s	-50%
`poly_chknorm_native`	✅	2s	4s	-50%
`poly_invntt_tomont`	✅	2s	2s	+0%
`poly_ntt`	✅	2s	3s	-33%
`poly_ntt_native`	✅	2s	3s	-33%
`poly_pointwise_montgomery`	✅	2s	3s	-33%
`poly_pointwise_montgomery_native`	✅	2s	2s	+0%
`poly_sub`	✅	2s	3s	-33%
`poly_uniform_gamma1`	✅	2s	3s	-33%
`polyvec_matrix_expand`	✅	2s	3s	-33%
`polyveck_unpack_eta`	✅	2s	2s	+0%
`polyvecl_pack_eta`	✅	2s	2s	+0%
`polyvecl_pointwise_acc_montgomery_c`	✅	2s	4s	-50%
`polyvecl_uniform_gamma1`	✅	2s	2s	+0%
`polyvecl_uniform_gamma1_serial`	✅	2s	2s	+0%
`polyz_unpack_native`	✅	2s	3s	-33%
`rej_eta`	✅	2s	5s	-60%
`shake128_finalize`	✅	2s	3s	-33%
`shake128_init`	✅	2s	2s	+0%
`shake128x4_absorb_once`	✅	2s	2s	+0%
`shake128x4_squeezeblocks`	✅	2s	2s	+0%
`shake256_finalize`	✅	2s	2s	+0%
`shake256_release`	✅	2s	1s	+100%
`shake256x4_squeezeblocks`	✅	2s	2s	+0%
`sk_s1hat_get_poly`	✅	2s	2s	+0%
`sys_check_capability`	✅	2s	2s	+0%
`yvec_get_poly`	✅	2s	3s	-33%
`keccak_squeeze`	✅	1s	2s	-50%
`mld_ct_abs_i32`	✅	1s	3s	-67%
`mld_ct_get_optblocker_i64`	✅	1s	4s	-75%
`mld_ct_sel_int32`	✅	1s	3s	-67%
`poly_use_hint_native_x86_64`	✅	1s	-	new
`polyveck_pack_eta`	✅	1s	4s	-75%

oqs-bot · 2026-07-08T06:47:53Z

CBMC Results (ML-DSA-44)

Full Results (206 proofs)

Proof	Status	Current	Previous	Change
`TOTAL`	✅	1740s	1514s	+14.9%
`polyvecl_pointwise_acc_montgomery_c`	✅	181s	131s	+38%
`poly_pointwise_montgomery_c`	✅	154s	114s	+35%
`sign_verify_internal`	✅	129s	114s	+13%
`mld_invntt_layer`	✅	125s	107s	+17%
`mld_attempt_signature_generation`	✅	67s	58s	+16%
`compute_pack_t0_t1`	✅	55s	50s	+10%
`mld_ntt_layer`	✅	49s	42s	+17%
`fqmul`	✅	48s	39s	+23%
`polyvec_matrix_expand`	✅	32s	28s	+14%
`keccakf1600x4_permute_native`	✅	25s	22s	+14%
`mld_ntt_butterfly_block`	✅	25s	23s	+9%
`sign_signature_internal`	✅	25s	26s	-4%
`poly_ntt_c`	✅	24s	19s	+26%
`poly_chknorm_c`	✅	20s	17s	+18%
`polyeta_unpack`	✅	20s	14s	+43%
`rej_uniform_c`	✅	18s	15s	+20%
`mld_check_pct`	✅	17s	14s	+21%
`polyt0_unpack`	✅	17s	15s	+13%
`polyvec_matrix_pointwise_montgomery_yvec`	✅	16s	15s	+7%
`rej_uniform`	✅	16s	18s	-11%
`poly_uniform_4x`	✅	13s	14s	-7%
`polyz_unpack_c`	✅	13s	11s	+18%
`poly_invntt_tomont_c`	✅	12s	11s	+9%
`poly_uniform_eta_4x`	✅	12s	11s	+9%
`polyvecl_chknorm`	✅	11s	10s	+10%
`keccak_absorb_once_x4`	✅	10s	9s	+11%
`rej_uniform_native_x86_64`	✅	9s	-	new
`mld_keccakf1600_permute_c`	✅	8s	8s	+0%
`polyvec_matrix_expand_serial`	✅	8s	8s	+0%
`mld_compute_pack_z`	✅	7s	7s	+0%
`poly_uniform_gamma1_4x`	✅	7s	5s	+40%
`polyt1_unpack`	✅	7s	5s	+40%
`sign_pk_from_sk`	✅	7s	5s	+40%
`mld_h`	✅	6s	4s	+50%
`poly_add`	✅	6s	7s	-14%
`poly_caddq`	✅	6s	2s	+200%
`poly_decompose_c`	✅	6s	4s	+50%
`rej_uniform_native`	✅	6s	4s	+50%
`sign_signature`	✅	6s	3s	+100%
`sign_signature_pre_hash_shake256`	✅	6s	3s	+100%
`intt_native_aarch64`	✅	5s	9s	-44%
`keccak_squeezeblocks_x4`	✅	5s	4s	+25%
`mld_ct_abs_i32`	✅	5s	2s	+150%
`mld_ct_cmask_nonzero_u32`	✅	5s	2s	+150%
`pointwise_acc_native_aarch64`	✅	5s	4s	+25%
`pointwise_acc_native_x86_64`	✅	5s	7s	-29%
`pointwise_native_aarch64`	✅	5s	5s	+0%
`poly_permute_bitrev_to_custom_optional_native`	✅	5s	4s	+25%
`poly_pointwise_montgomery_native`	✅	5s	2s	+150%
`poly_uniform_eta`	✅	5s	5s	+0%
`polyvec_matrix_pointwise_montgomery_row`	✅	5s	2s	+150%
`polyveck_chknorm`	✅	5s	5s	+0%
`polyveck_ntt`	✅	5s	5s	+0%
`polyvecl_uniform_gamma1_serial`	✅	5s	2s	+150%
`polyw1_pack_32`	✅	5s	2s	+150%
`polyz_unpack_native_x86_64`	✅	5s	3s	+67%
`rej_eta_c`	✅	5s	4s	+25%
`rej_eta_native`	✅	5s	6s	-17%
`rej_uniform_eta_native_aarch64`	✅	5s	2s	+150%
`sign_verify_extmu`	✅	5s	3s	+67%
`keccak_f1600_x4_native_avx2`	✅	4s	3s	+33%
`keccakf1600_xor_bytes (big endian)`	✅	4s	4s	+0%
`mld_ct_get_optblocker_u8`	✅	4s	1s	+300%
`mld_ct_memcmp`	✅	4s	3s	+33%
`mld_polymat_expand_entry`	✅	4s	3s	+33%
`mld_prepare_domain_separation_prefix`	✅	4s	4s	+0%
`mld_sample_s1_s2`	✅	4s	4s	+0%
`pack_sig_c`	✅	4s	2s	+100%
`pack_sig_z`	✅	4s	4s	+0%
`poly_caddq_c`	✅	4s	2s	+100%
`poly_challenge`	✅	4s	3s	+33%
`poly_chknorm_native`	✅	4s	4s	+0%
`poly_decompose_88_native_aarch64`	✅	4s	4s	+0%
`poly_invntt_tomont_native`	✅	4s	4s	+0%
`poly_power2round`	✅	4s	4s	+0%
`poly_sub`	✅	4s	3s	+33%
`poly_uniform`	✅	4s	6s	-33%
`poly_use_hint_native`	✅	4s	4s	+0%
`polyeta_pack`	✅	4s	3s	+33%
`polyt0_pack`	✅	4s	2s	+100%
`polyt1_pack`	✅	4s	4s	+0%
`polyveck_caddq`	✅	4s	3s	+33%
`polyveck_decompose`	✅	4s	4s	+0%
`polyveck_invntt_tomont`	✅	4s	5s	-20%
`polyveck_reduce`	✅	4s	5s	-20%
`polyvecl_pointwise_acc_montgomery_native`	✅	4s	2s	+100%
`polyvecl_unpack_eta`	✅	4s	2s	+100%
`polyw1_pack`	✅	4s	3s	+33%
`polyz_pack`	✅	4s	2s	+100%
`polyz_unpack_17_native_aarch64`	✅	4s	5s	-20%
`polyz_unpack_19_native_aarch64`	✅	4s	5s	-20%
`rej_uniform_native_aarch64`	✅	4s	5s	-20%
`sig_unpack_hints`	✅	4s	2s	+100%
`sign_keypair`	✅	4s	4s	+0%
`sign_keypair_internal`	✅	4s	4s	+0%
`sign_signature_extmu`	✅	4s	4s	+0%
`sign_signature_pre_hash_internal`	✅	4s	6s	-33%
`sign_verify_pre_hash_internal`	✅	4s	3s	+33%
`sk_s1hat_get_poly`	✅	4s	3s	+33%
`sk_t0hat_get_poly`	✅	4s	2s	+100%
`unpack_sk`	✅	4s	3s	+33%
`unpack_sk_s1hat`	✅	4s	1s	+300%
`unpack_sk_s2hat`	✅	4s	4s	+0%
`unpack_sk_t0hat`	✅	4s	3s	+33%
`caddq`	✅	3s	2s	+50%
`decompose`	✅	3s	2s	+50%
`fqscale`	✅	3s	3s	+0%
`intt_native_x86_64`	✅	3s	4s	-25%
`keccak_absorb`	✅	3s	5s	-40%
`keccak_f1600_x4_native_aarch64_v84a`	✅	3s	2s	+50%
`keccakf1600x4_xor_bytes_native`	✅	3s	3s	+0%
`mld_ct_get_optblocker_i64`	✅	3s	4s	-25%
`mld_keccakf1600_extract_bytes`	✅	3s	2s	+50%
`mld_keccakf1600x4_extract_bytes_c`	✅	3s	2s	+50%
`mld_sample_s1_s2_serial`	✅	3s	3s	+0%
`mld_value_barrier_i64`	✅	3s	2s	+50%
`pack_sig_h`	✅	3s	3s	+0%
`pack_sk_rho_key_tr_s2`	✅	3s	3s	+0%
`pointwise_native_x86_64`	✅	3s	4s	-25%
`poly_caddq_native`	✅	3s	5s	-40%
`poly_caddq_native_x86_64`	✅	3s	4s	-25%
`poly_chknorm_native_x86_64`	✅	3s	2s	+50%
`poly_decompose_32_native_aarch64`	✅	3s	2s	+50%
`poly_decompose_native`	✅	3s	3s	+0%
`poly_invntt_tomont`	✅	3s	4s	-25%
`poly_use_hint_c`	✅	3s	3s	+0%
`poly_use_hint_native_aarch64`	✅	3s	2s	+50%
`poly_use_hint_native_x86_64`	✅	3s	-	new
`polyveck_pack_eta`	✅	3s	2s	+50%
`polyveck_pack_w1`	✅	3s	1s	+200%
`polyvecl_ntt`	✅	3s	2s	+50%
`polyvecl_pack_eta`	✅	3s	3s	+0%
`polyvecl_uniform_gamma1`	✅	3s	3s	+0%
`polyvecl_unpack_z`	✅	3s	2s	+50%
`polyz_unpack`	✅	3s	3s	+0%
`polyz_unpack_native`	✅	3s	2s	+50%
`power2round`	✅	3s	3s	+0%
`reduce32`	✅	3s	2s	+50%
`rej_eta`	✅	3s	3s	+0%
`shake128x4_absorb_once`	✅	3s	3s	+0%
`shake256_finalize`	✅	3s	2s	+50%
`shake256_release`	✅	3s	2s	+50%
`shake256_squeeze`	✅	3s	2s	+50%
`sign_verify`	✅	3s	4s	-25%
`sign_verify_pre_hash_shake256`	✅	3s	5s	-40%
`sys_check_capability`	✅	3s	4s	-25%
`yvec_init`	✅	3s	3s	+0%
`keccak_f1600_x1_native_aarch64`	✅	2s	2s	+0%
`keccak_f1600_x1_native_aarch64_v84a`	✅	2s	3s	-33%
`keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid`	✅	2s	1s	+100%
`keccak_finalize`	✅	2s	3s	-33%
`keccak_init`	✅	2s	3s	-33%
`keccakf1600_extract_bytes (big endian)`	✅	2s	2s	+0%
`keccakf1600_permute`	✅	2s	2s	+0%
`keccakf1600_permute_native`	✅	2s	3s	-33%
`keccakf1600_xor_bytes`	✅	2s	1s	+100%
`keccakf1600x4_extract_bytes_native`	✅	2s	3s	-33%
`keccakf1600x4_permute`	✅	2s	4s	-50%
`keccakf1600x4_xor_bytes`	✅	2s	2s	+0%
`make_hint`	✅	2s	3s	-33%
`mld_ct_cmask_neg_i32`	✅	2s	3s	-33%
`mld_ct_cmask_nonzero_u8`	✅	2s	2s	+0%
`mld_ct_sel_int32`	✅	2s	2s	+0%
`mld_keccakf1600x4_xor_bytes_c`	✅	2s	2s	+0%
`mld_value_barrier_u32`	✅	2s	2s	+0%
`mld_value_barrier_u8`	✅	2s	3s	-33%
`montgomery_reduce`	✅	2s	3s	-33%
`ntt_native_aarch64`	✅	2s	3s	-33%
`ntt_native_x86_64`	✅	2s	3s	-33%
`nttunpack_native_x86_64`	✅	2s	1s	+100%
`pack_sk_s1`	✅	2s	2s	+0%
`poly_caddq_native_aarch64`	✅	2s	4s	-50%
`poly_chknorm`	✅	2s	4s	-50%
`poly_chknorm_native_aarch64`	✅	2s	4s	-50%
`poly_decompose`	✅	2s	3s	-33%
`poly_decompose_native_x86_64`	✅	2s	3s	-33%
`poly_ntt`	✅	2s	3s	-33%
`poly_ntt_native`	✅	2s	5s	-60%
`poly_pointwise_montgomery`	✅	2s	3s	-33%
`poly_reduce`	✅	2s	3s	-33%
`poly_uniform_gamma1`	✅	2s	4s	-50%
`poly_use_hint`	✅	2s	4s	-50%
`polyveck_unpack_eta`	✅	2s	2s	+0%
`polyvecl_pointwise_acc_montgomery`	✅	2s	4s	-50%
`polyw1_pack_88`	✅	2s	1s	+100%
`shake128_absorb`	✅	2s	2s	+0%
`shake128_release`	✅	2s	1s	+100%
`shake256`	✅	2s	1s	+100%
`shake256x4_absorb_once`	✅	2s	3s	-33%
`shake256x4_squeezeblocks`	✅	2s	4s	-50%
`sk_s2hat_get_poly`	✅	2s	2s	+0%
`unpack_pk_t1`	✅	2s	5s	-60%
`use_hint`	✅	2s	2s	+0%
`yvec_get_poly`	✅	2s	3s	-33%
`keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid`	✅	1s	3s	-67%
`keccak_squeeze`	✅	1s	1s	+0%
`keccakf1600x4_extract_bytes`	✅	1s	2s	-50%
`mld_ct_get_optblocker_u32`	✅	1s	1s	+0%
`poly_permute_bitrev_to_custom_optional`	✅	1s	2s	-50%
`poly_shiftl`	✅	1s	3s	-67%
`shake128_finalize`	✅	1s	2s	-50%
`shake128_init`	✅	1s	3s	-67%
`shake128_squeeze`	✅	1s	1s	+0%
`shake128x4_squeezeblocks`	✅	1s	1s	+0%
`shake256_absorb`	✅	1s	3s	-67%
`shake256_init`	✅	1s	3s	-67%

oqs-bot · 2026-07-08T06:48:44Z

CBMC Results (ML-DSA-65, REDUCE-RAM)

Full Results (206 proofs)

Proof	Status	Current	Previous	Change
`TOTAL`	✅	1561s	1482s	+5.3%
`polyvec_matrix_pointwise_montgomery_yvec`	✅	211s	201s	+5%
`poly_pointwise_montgomery_c`	✅	134s	116s	+16%
`mld_invntt_layer`	✅	116s	108s	+7%
`sign_verify_internal`	✅	76s	71s	+7%
`polyvecl_chknorm`	✅	48s	43s	+12%
`mld_ntt_layer`	✅	45s	43s	+5%
`fqmul`	✅	41s	40s	+2%
`polyveck_chknorm`	✅	38s	36s	+6%
`mld_attempt_signature_generation`	✅	34s	31s	+10%
`keccakf1600x4_permute_native`	✅	24s	22s	+9%
`mld_ntt_butterfly_block`	✅	24s	25s	-4%
`poly_ntt_c`	✅	22s	22s	+0%
`rej_uniform_c`	✅	18s	16s	+12%
`poly_invntt_tomont_c`	✅	14s	10s	+40%
`polyt0_unpack`	✅	14s	13s	+8%
`poly_chknorm_c`	✅	13s	13s	+0%
`polyveck_decompose`	✅	13s	14s	-7%
`keccak_absorb_once_x4`	✅	12s	10s	+20%
`mld_check_pct`	✅	11s	12s	-8%
`poly_add`	✅	10s	7s	+43%
`poly_uniform_eta_4x`	✅	10s	13s	-23%
`rej_uniform`	✅	10s	7s	+43%
`poly_decompose_c`	✅	9s	8s	+12%
`polyvec_matrix_pointwise_montgomery_row`	✅	8s	8s	+0%
`polyveck_reduce`	✅	8s	6s	+33%
`polyz_unpack_c`	✅	8s	9s	-11%
`rej_uniform_native_x86_64`	✅	8s	-	new
`sign_pk_from_sk`	✅	8s	5s	+60%
`compute_pack_t0_t1`	✅	7s	7s	+0%
`pointwise_acc_native_aarch64`	✅	7s	6s	+17%
`poly_challenge`	✅	7s	5s	+40%
`poly_power2round`	✅	7s	7s	+0%
`polyvecl_ntt`	✅	7s	7s	+0%
`sign_signature_pre_hash_shake256`	✅	7s	7s	+0%
`polyveck_caddq`	✅	6s	7s	-14%
`polyveck_invntt_tomont`	✅	6s	7s	-14%
`polyvecl_uniform_gamma1_serial`	✅	6s	1s	+500%
`sign_verify_pre_hash_shake256`	✅	6s	6s	+0%
`intt_native_x86_64`	✅	5s	4s	+25%
`keccak_squeeze`	✅	5s	2s	+150%
`keccakf1600_xor_bytes (big endian)`	✅	5s	2s	+150%
`mld_compute_pack_z`	✅	5s	5s	+0%
`mld_keccakf1600_permute_c`	✅	5s	7s	-29%
`mld_sample_s1_s2_serial`	✅	5s	3s	+67%
`pointwise_acc_native_x86_64`	✅	5s	5s	+0%
`poly_caddq_c`	✅	5s	5s	+0%
`poly_chknorm_native_aarch64`	✅	5s	2s	+150%
`poly_reduce`	✅	5s	4s	+25%
`poly_uniform`	✅	5s	2s	+150%
`poly_use_hint_native_aarch64`	✅	5s	4s	+25%
`polyt0_pack`	✅	5s	5s	+0%
`polyw1_pack`	✅	5s	3s	+67%
`polyz_unpack_19_native_aarch64`	✅	5s	5s	+0%
`rej_eta_c`	✅	5s	4s	+25%
`rej_eta_native`	✅	5s	3s	+67%
`rej_uniform_eta_native_aarch64`	✅	5s	5s	+0%
`rej_uniform_native`	✅	5s	4s	+25%
`sign_keypair_internal`	✅	5s	3s	+67%
`sign_signature_extmu`	✅	5s	4s	+25%
`sign_verify_pre_hash_internal`	✅	5s	5s	+0%
`intt_native_aarch64`	✅	4s	2s	+100%
`keccak_f1600_x4_native_aarch64_v84a`	✅	4s	2s	+100%
`keccak_init`	✅	4s	4s	+0%
`keccakf1600_xor_bytes`	✅	4s	4s	+0%
`mld_h`	✅	4s	3s	+33%
`mld_keccakf1600x4_xor_bytes_c`	✅	4s	2s	+100%
`mld_sample_s1_s2`	✅	4s	6s	-33%
`pack_sig_h`	✅	4s	2s	+100%
`pack_sk_s1`	✅	4s	3s	+33%
`poly_caddq`	✅	4s	3s	+33%
`poly_chknorm`	✅	4s	3s	+33%
`poly_decompose`	✅	4s	2s	+100%
`poly_decompose_88_native_aarch64`	✅	4s	2s	+100%
`poly_decompose_native_x86_64`	✅	4s	2s	+100%
`poly_pointwise_montgomery`	✅	4s	2s	+100%
`poly_sub`	✅	4s	4s	+0%
`poly_uniform_4x`	✅	4s	4s	+0%
`poly_uniform_eta`	✅	4s	5s	-20%
`poly_uniform_gamma1`	✅	4s	3s	+33%
`poly_use_hint_native_x86_64`	✅	4s	-	new
`polyveck_pack_eta`	✅	4s	3s	+33%
`polyvecl_pointwise_acc_montgomery`	✅	4s	3s	+33%
`polyvecl_unpack_eta`	✅	4s	2s	+100%
`polyvecl_unpack_z`	✅	4s	1s	+300%
`polyz_unpack_native`	✅	4s	3s	+33%
`polyz_unpack_native_x86_64`	✅	4s	3s	+33%
`power2round`	✅	4s	2s	+100%
`rej_uniform_native_aarch64`	✅	4s	5s	-20%
`shake256x4_squeezeblocks`	✅	4s	2s	+100%
`sign_keypair`	✅	4s	4s	+0%
`sign_signature_internal`	✅	4s	6s	-33%
`sign_signature_pre_hash_internal`	✅	4s	3s	+33%
`sign_verify_extmu`	✅	4s	2s	+100%
`sk_s1hat_get_poly`	✅	4s	3s	+33%
`sys_check_capability`	✅	4s	1s	+300%
`caddq`	✅	3s	2s	+50%
`keccak_absorb`	✅	3s	3s	+0%
`keccak_squeezeblocks_x4`	✅	3s	4s	-25%
`keccakf1600x4_xor_bytes`	✅	3s	2s	+50%
`make_hint`	✅	3s	3s	+0%
`mld_ct_cmask_nonzero_u32`	✅	3s	3s	+0%
`mld_ct_cmask_nonzero_u8`	✅	3s	2s	+50%
`mld_ct_get_optblocker_i64`	✅	3s	1s	+200%
`mld_ct_get_optblocker_u32`	✅	3s	3s	+0%
`mld_keccakf1600_extract_bytes`	✅	3s	2s	+50%
`mld_keccakf1600x4_extract_bytes_c`	✅	3s	2s	+50%
`mld_prepare_domain_separation_prefix`	✅	3s	4s	-25%
`montgomery_reduce`	✅	3s	1s	+200%
`ntt_native_aarch64`	✅	3s	3s	+0%
`ntt_native_x86_64`	✅	3s	5s	-40%
`nttunpack_native_x86_64`	✅	3s	3s	+0%
`pack_sig_c`	✅	3s	3s	+0%
`pack_sig_z`	✅	3s	1s	+200%
`pointwise_native_aarch64`	✅	3s	3s	+0%
`poly_invntt_tomont_native`	✅	3s	5s	-40%
`poly_ntt`	✅	3s	2s	+50%
`poly_ntt_native`	✅	3s	2s	+50%
`poly_permute_bitrev_to_custom_optional_native`	✅	3s	3s	+0%
`poly_pointwise_montgomery_native`	✅	3s	4s	-25%
`poly_uniform_gamma1_4x`	✅	3s	3s	+0%
`poly_use_hint`	✅	3s	3s	+0%
`poly_use_hint_c`	✅	3s	2s	+50%
`polyeta_unpack`	✅	3s	4s	-25%
`polyvec_matrix_expand`	✅	3s	6s	-50%
`polyvec_matrix_expand_serial`	✅	3s	3s	+0%
`polyveck_pack_w1`	✅	3s	4s	-25%
`polyveck_unpack_eta`	✅	3s	3s	+0%
`polyvecl_pack_eta`	✅	3s	2s	+50%
`polyvecl_pointwise_acc_montgomery_c`	✅	3s	3s	+0%
`polyw1_pack_32`	✅	3s	2s	+50%
`polyz_pack`	✅	3s	3s	+0%
`polyz_unpack_17_native_aarch64`	✅	3s	2s	+50%
`reduce32`	✅	3s	2s	+50%
`rej_eta`	✅	3s	5s	-40%
`shake128_init`	✅	3s	6s	-50%
`shake128x4_squeezeblocks`	✅	3s	2s	+50%
`shake256_absorb`	✅	3s	4s	-25%
`shake256_init`	✅	3s	4s	-25%
`sig_unpack_hints`	✅	3s	1s	+200%
`sign_signature`	✅	3s	5s	-40%
`sign_verify`	✅	3s	6s	-50%
`sk_s2hat_get_poly`	✅	3s	1s	+200%
`unpack_sk_s2hat`	✅	3s	3s	+0%
`yvec_get_poly`	✅	3s	3s	+0%
`decompose`	✅	2s	4s	-50%
`keccak_f1600_x1_native_aarch64`	✅	2s	2s	+0%
`keccak_f1600_x1_native_aarch64_v84a`	✅	2s	2s	+0%
`keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid`	✅	2s	3s	-33%
`keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid`	✅	2s	3s	-33%
`keccak_finalize`	✅	2s	2s	+0%
`keccakf1600_extract_bytes (big endian)`	✅	2s	3s	-33%
`keccakf1600_permute`	✅	2s	4s	-50%
`keccakf1600_permute_native`	✅	2s	2s	+0%
`keccakf1600x4_extract_bytes`	✅	2s	4s	-50%
`keccakf1600x4_extract_bytes_native`	✅	2s	1s	+100%
`mld_ct_abs_i32`	✅	2s	6s	-67%
`mld_ct_get_optblocker_u8`	✅	2s	4s	-50%
`mld_ct_memcmp`	✅	2s	4s	-50%
`mld_polymat_expand_entry`	✅	2s	3s	-33%
`mld_value_barrier_u32`	✅	2s	4s	-50%
`mld_value_barrier_u8`	✅	2s	1s	+100%
`pack_sk_rho_key_tr_s2`	✅	2s	2s	+0%
`pointwise_native_x86_64`	✅	2s	2s	+0%
`poly_caddq_native`	✅	2s	4s	-50%
`poly_caddq_native_x86_64`	✅	2s	1s	+100%
`poly_chknorm_native`	✅	2s	4s	-50%
`poly_decompose_32_native_aarch64`	✅	2s	4s	-50%
`poly_decompose_native`	✅	2s	5s	-60%
`poly_invntt_tomont`	✅	2s	5s	-60%
`poly_permute_bitrev_to_custom_optional`	✅	2s	3s	-33%
`poly_use_hint_native`	✅	2s	7s	-71%
`polyeta_pack`	✅	2s	1s	+100%
`polyt1_pack`	✅	2s	3s	-33%
`polyt1_unpack`	✅	2s	3s	-33%
`polyveck_ntt`	✅	2s	4s	-50%
`polyvecl_pointwise_acc_montgomery_native`	✅	2s	3s	-33%
`polyvecl_uniform_gamma1`	✅	2s	4s	-50%
`polyw1_pack_88`	✅	2s	3s	-33%
`polyz_unpack`	✅	2s	3s	-33%
`shake128_absorb`	✅	2s	2s	+0%
`shake128_finalize`	✅	2s	2s	+0%
`shake128_squeeze`	✅	2s	3s	-33%
`shake128x4_absorb_once`	✅	2s	2s	+0%
`shake256`	✅	2s	2s	+0%
`shake256_release`	✅	2s	3s	-33%
`shake256_squeeze`	✅	2s	4s	-50%
`shake256x4_absorb_once`	✅	2s	2s	+0%
`sk_t0hat_get_poly`	✅	2s	1s	+100%
`unpack_pk_t1`	✅	2s	2s	+0%
`unpack_sk`	✅	2s	3s	-33%
`unpack_sk_s1hat`	✅	2s	1s	+100%
`unpack_sk_t0hat`	✅	2s	4s	-50%
`yvec_init`	✅	2s	5s	-60%
`fqscale`	✅	1s	3s	-67%
`keccak_f1600_x4_native_avx2`	✅	1s	2s	-50%
`keccakf1600x4_permute`	✅	1s	1s	+0%
`keccakf1600x4_xor_bytes_native`	✅	1s	2s	-50%
`mld_ct_cmask_neg_i32`	✅	1s	3s	-67%
`mld_ct_sel_int32`	✅	1s	2s	-50%
`mld_value_barrier_i64`	✅	1s	2s	-50%
`poly_caddq_native_aarch64`	✅	1s	2s	-50%
`poly_chknorm_native_x86_64`	✅	1s	4s	-75%
`poly_shiftl`	✅	1s	3s	-67%
`shake128_release`	✅	1s	2s	-50%
`shake256_finalize`	✅	1s	1s	+0%
`use_hint`	✅	1s	2s	-50%

oqs-bot · 2026-07-08T06:48:48Z

CBMC Results (ML-DSA-87, REDUCE-RAM)

Full Results (206 proofs)

Proof	Status	Current	Previous	Change
`TOTAL`	✅	1462s	1436s	+1.8%
`polyvec_matrix_pointwise_montgomery_yvec`	✅	195s	196s	-1%
`poly_pointwise_montgomery_c`	✅	131s	125s	+5%
`mld_invntt_layer`	✅	110s	111s	-1%
`sign_verify_internal`	✅	50s	47s	+6%
`mld_ntt_layer`	✅	42s	44s	-5%
`fqmul`	✅	41s	39s	+5%
`polyvecl_chknorm`	✅	37s	38s	-3%
`mld_attempt_signature_generation`	✅	32s	34s	-6%
`mld_ntt_butterfly_block`	✅	25s	23s	+9%
`keccakf1600x4_permute_native`	✅	21s	25s	-16%
`poly_ntt_c`	✅	20s	19s	+5%
`rej_uniform_c`	✅	18s	18s	+0%
`mld_check_pct`	✅	17s	15s	+13%
`polyeta_unpack`	✅	15s	13s	+15%
`poly_chknorm_c`	✅	13s	13s	+0%
`polyvec_matrix_pointwise_montgomery_row`	✅	13s	13s	+0%
`compute_pack_t0_t1`	✅	12s	12s	+0%
`poly_invntt_tomont_c`	✅	12s	9s	+33%
`polyt0_unpack`	✅	12s	14s	-14%
`poly_uniform_eta_4x`	✅	11s	12s	-8%
`polyveck_chknorm`	✅	11s	9s	+22%
`polyveck_decompose`	✅	11s	12s	-8%
`pointwise_acc_native_aarch64`	✅	10s	5s	+100%
`keccak_absorb_once_x4`	✅	9s	8s	+12%
`polyz_unpack_c`	✅	9s	7s	+29%
`poly_decompose_c`	✅	8s	6s	+33%
`polyvecl_ntt`	✅	8s	8s	+0%
`rej_uniform`	✅	8s	7s	+14%
`rej_uniform_native_x86_64`	✅	8s	-	new
`sign_pk_from_sk`	✅	8s	6s	+33%
`decompose`	✅	7s	2s	+250%
`mld_keccakf1600_permute_c`	✅	7s	8s	-12%
`pointwise_acc_native_x86_64`	✅	7s	8s	-12%
`polyveck_caddq`	✅	7s	8s	-12%
`polyveck_reduce`	✅	7s	6s	+17%
`sign_signature_extmu`	✅	7s	4s	+75%
`keccak_absorb`	✅	6s	4s	+50%
`keccak_f1600_x4_native_aarch64_v84a`	✅	6s	1s	+500%
`mld_sample_s1_s2_serial`	✅	6s	6s	+0%
`pack_sk_rho_key_tr_s2`	✅	6s	2s	+200%
`poly_add`	✅	6s	8s	-25%
`rej_uniform_native`	✅	6s	5s	+20%
`sign_keypair`	✅	6s	4s	+50%
`sign_verify_extmu`	✅	6s	4s	+50%
`mld_compute_pack_z`	✅	5s	6s	-17%
`mld_sample_s1_s2`	✅	5s	8s	-38%
`poly_caddq_native_aarch64`	✅	5s	3s	+67%
`poly_challenge`	✅	5s	4s	+25%
`poly_power2round`	✅	5s	7s	-29%
`poly_reduce`	✅	5s	4s	+25%
`poly_uniform_eta`	✅	5s	5s	+0%
`poly_use_hint_native`	✅	5s	1s	+400%
`polyveck_invntt_tomont`	✅	5s	4s	+25%
`polyveck_ntt`	✅	5s	3s	+67%
`polyveck_pack_w1`	✅	5s	3s	+67%
`polyvecl_pointwise_acc_montgomery_c`	✅	5s	2s	+150%
`rej_eta_native`	✅	5s	4s	+25%
`rej_uniform_eta_native_aarch64`	✅	5s	3s	+67%
`sign_keypair_internal`	✅	5s	6s	-17%
`keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid`	✅	4s	2s	+100%
`keccak_squeezeblocks_x4`	✅	4s	4s	+0%
`keccakf1600x4_extract_bytes_native`	✅	4s	4s	+0%
`mld_keccakf1600_extract_bytes`	✅	4s	1s	+300%
`mld_prepare_domain_separation_prefix`	✅	4s	3s	+33%
`nttunpack_native_x86_64`	✅	4s	3s	+33%
`pack_sig_c`	✅	4s	2s	+100%
`pack_sig_z`	✅	4s	3s	+33%
`poly_caddq_c`	✅	4s	3s	+33%
`poly_caddq_native`	✅	4s	3s	+33%
`poly_decompose_88_native_aarch64`	✅	4s	2s	+100%
`poly_decompose_native`	✅	4s	2s	+100%
`poly_ntt`	✅	4s	2s	+100%
`poly_ntt_native`	✅	4s	4s	+0%
`poly_pointwise_montgomery`	✅	4s	3s	+33%
`poly_shiftl`	✅	4s	4s	+0%
`poly_sub`	✅	4s	5s	-20%
`poly_uniform`	✅	4s	4s	+0%
`poly_use_hint_native_aarch64`	✅	4s	3s	+33%
`polyt0_pack`	✅	4s	3s	+33%
`polyvecl_pack_eta`	✅	4s	2s	+100%
`polyvecl_unpack_z`	✅	4s	3s	+33%
`polyw1_pack`	✅	4s	2s	+100%
`shake256_release`	✅	4s	5s	-20%
`shake256x4_squeezeblocks`	✅	4s	4s	+0%
`sign_signature_internal`	✅	4s	3s	+33%
`sign_signature_pre_hash_internal`	✅	4s	2s	+100%
`sign_signature_pre_hash_shake256`	✅	4s	3s	+33%
`sign_verify`	✅	4s	2s	+100%
`unpack_pk_t1`	✅	4s	2s	+100%
`use_hint`	✅	4s	3s	+33%
`caddq`	✅	3s	3s	+0%
`fqscale`	✅	3s	1s	+200%
`intt_native_aarch64`	✅	3s	4s	-25%
`intt_native_x86_64`	✅	3s	4s	-25%
`keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid`	✅	3s	2s	+50%
`keccak_init`	✅	3s	1s	+200%
`keccakf1600_permute`	✅	3s	2s	+50%
`keccakf1600_xor_bytes`	✅	3s	1s	+200%
`keccakf1600x4_xor_bytes_native`	✅	3s	2s	+50%
`mld_ct_cmask_nonzero_u8`	✅	3s	2s	+50%
`mld_h`	✅	3s	2s	+50%
`mld_polymat_expand_entry`	✅	3s	4s	-25%
`mld_value_barrier_u32`	✅	3s	3s	+0%
`ntt_native_aarch64`	✅	3s	4s	-25%
`ntt_native_x86_64`	✅	3s	2s	+50%
`pack_sig_h`	✅	3s	3s	+0%
`poly_chknorm_native`	✅	3s	1s	+200%
`poly_chknorm_native_x86_64`	✅	3s	2s	+50%
`poly_decompose`	✅	3s	2s	+50%
`poly_pointwise_montgomery_native`	✅	3s	3s	+0%
`poly_uniform_gamma1_4x`	✅	3s	3s	+0%
`poly_use_hint_native_x86_64`	✅	3s	-	new
`polyeta_pack`	✅	3s	3s	+0%
`polyt1_pack`	✅	3s	5s	-40%
`polyvec_matrix_expand`	✅	3s	3s	+0%
`polyveck_unpack_eta`	✅	3s	3s	+0%
`polyvecl_pointwise_acc_montgomery_native`	✅	3s	2s	+50%
`polyvecl_uniform_gamma1_serial`	✅	3s	2s	+50%
`polyz_unpack`	✅	3s	3s	+0%
`polyz_unpack_17_native_aarch64`	✅	3s	4s	-25%
`polyz_unpack_19_native_aarch64`	✅	3s	5s	-40%
`power2round`	✅	3s	3s	+0%
`rej_eta_c`	✅	3s	4s	-25%
`shake128_init`	✅	3s	2s	+50%
`shake128_release`	✅	3s	3s	+0%
`shake128_squeeze`	✅	3s	1s	+200%
`shake256_absorb`	✅	3s	3s	+0%
`sign_verify_pre_hash_internal`	✅	3s	3s	+0%
`sign_verify_pre_hash_shake256`	✅	3s	7s	-57%
`sk_s2hat_get_poly`	✅	3s	2s	+50%
`sk_t0hat_get_poly`	✅	3s	3s	+0%
`sys_check_capability`	✅	3s	2s	+50%
`keccak_f1600_x1_native_aarch64_v84a`	✅	2s	2s	+0%
`keccak_f1600_x4_native_avx2`	✅	2s	3s	-33%
`keccak_squeeze`	✅	2s	5s	-60%
`keccakf1600_permute_native`	✅	2s	3s	-33%
`keccakf1600_xor_bytes (big endian)`	✅	2s	2s	+0%
`keccakf1600x4_permute`	✅	2s	2s	+0%
`make_hint`	✅	2s	2s	+0%
`mld_ct_cmask_neg_i32`	✅	2s	2s	+0%
`mld_ct_cmask_nonzero_u32`	✅	2s	5s	-60%
`mld_ct_get_optblocker_i64`	✅	2s	2s	+0%
`mld_ct_get_optblocker_u32`	✅	2s	2s	+0%
`mld_ct_get_optblocker_u8`	✅	2s	3s	-33%
`mld_ct_memcmp`	✅	2s	1s	+100%
`mld_ct_sel_int32`	✅	2s	2s	+0%
`mld_keccakf1600x4_extract_bytes_c`	✅	2s	3s	-33%
`mld_value_barrier_i64`	✅	2s	2s	+0%
`mld_value_barrier_u8`	✅	2s	2s	+0%
`montgomery_reduce`	✅	2s	2s	+0%
`pack_sk_s1`	✅	2s	2s	+0%
`pointwise_native_aarch64`	✅	2s	4s	-50%
`pointwise_native_x86_64`	✅	2s	5s	-60%
`poly_chknorm`	✅	2s	4s	-50%
`poly_chknorm_native_aarch64`	✅	2s	5s	-60%
`poly_decompose_32_native_aarch64`	✅	2s	3s	-33%
`poly_decompose_native_x86_64`	✅	2s	3s	-33%
`poly_invntt_tomont`	✅	2s	4s	-50%
`poly_permute_bitrev_to_custom_optional`	✅	2s	2s	+0%
`poly_uniform_4x`	✅	2s	3s	-33%
`poly_uniform_gamma1`	✅	2s	3s	-33%
`poly_use_hint`	✅	2s	4s	-50%
`poly_use_hint_c`	✅	2s	4s	-50%
`polyt1_unpack`	✅	2s	3s	-33%
`polyvec_matrix_expand_serial`	✅	2s	3s	-33%
`polyveck_pack_eta`	✅	2s	5s	-60%
`polyvecl_pointwise_acc_montgomery`	✅	2s	2s	+0%
`polyvecl_unpack_eta`	✅	2s	3s	-33%
`polyw1_pack_88`	✅	2s	2s	+0%
`polyz_unpack_native`	✅	2s	1s	+100%
`polyz_unpack_native_x86_64`	✅	2s	3s	-33%
`reduce32`	✅	2s	3s	-33%
`rej_eta`	✅	2s	2s	+0%
`rej_uniform_native_aarch64`	✅	2s	3s	-33%
`shake128_absorb`	✅	2s	2s	+0%
`shake128_finalize`	✅	2s	2s	+0%
`shake128x4_absorb_once`	✅	2s	4s	-50%
`shake128x4_squeezeblocks`	✅	2s	1s	+100%
`shake256_finalize`	✅	2s	3s	-33%
`shake256_squeeze`	✅	2s	2s	+0%
`sig_unpack_hints`	✅	2s	4s	-50%
`sign_signature`	✅	2s	4s	-50%
`sk_s1hat_get_poly`	✅	2s	3s	-33%
`unpack_sk`	✅	2s	4s	-50%
`unpack_sk_s1hat`	✅	2s	3s	-33%
`unpack_sk_t0hat`	✅	2s	4s	-50%
`yvec_get_poly`	✅	2s	2s	+0%
`yvec_init`	✅	2s	4s	-50%
`keccak_f1600_x1_native_aarch64`	✅	1s	2s	-50%
`keccak_finalize`	✅	1s	1s	+0%
`keccakf1600_extract_bytes (big endian)`	✅	1s	3s	-67%
`keccakf1600x4_extract_bytes`	✅	1s	1s	+0%
`keccakf1600x4_xor_bytes`	✅	1s	1s	+0%
`mld_ct_abs_i32`	✅	1s	1s	+0%
`mld_keccakf1600x4_xor_bytes_c`	✅	1s	1s	+0%
`poly_caddq`	✅	1s	5s	-80%
`poly_caddq_native_x86_64`	✅	1s	3s	-67%
`poly_invntt_tomont_native`	✅	1s	2s	-50%
`poly_permute_bitrev_to_custom_optional_native`	✅	1s	3s	-67%
`polyvecl_uniform_gamma1`	✅	1s	3s	-67%
`polyw1_pack_32`	✅	1s	3s	-67%
`polyz_pack`	✅	1s	4s	-75%
`shake256`	✅	1s	3s	-67%
`shake256_init`	✅	1s	3s	-67%
`shake256x4_absorb_once`	✅	1s	5s	-80%
`unpack_sk_s2hat`	✅	1s	3s	-67%

oqs-bot · 2026-07-08T06:49:14Z

CBMC Results (ML-DSA-65)

Full Results (206 proofs)

Proof	Status	Current	Previous	Change
`TOTAL`	✅	2058s	1784s	+15.4%
`polyvecl_pointwise_acc_montgomery_c`	✅	278s	210s	+32%
`sign_verify_internal`	✅	192s	177s	+8%
`poly_pointwise_montgomery_c`	✅	153s	125s	+22%
`mld_invntt_layer`	✅	125s	109s	+15%
`polyvec_matrix_expand`	✅	118s	110s	+7%
`mld_attempt_signature_generation`	✅	67s	63s	+6%
`sign_signature_internal`	✅	62s	55s	+13%
`fqmul`	✅	46s	40s	+15%
`mld_ntt_layer`	✅	45s	41s	+10%
`polyvec_matrix_expand_serial`	✅	33s	27s	+22%
`keccakf1600x4_permute_native`	✅	25s	23s	+9%
`mld_ntt_butterfly_block`	✅	24s	24s	+0%
`polyvec_matrix_pointwise_montgomery_yvec`	✅	21s	18s	+17%
`poly_ntt_c`	✅	20s	19s	+5%
`rej_uniform`	✅	19s	18s	+6%
`rej_uniform_c`	✅	19s	14s	+36%
`mld_check_pct`	✅	17s	14s	+21%
`poly_chknorm_c`	✅	17s	15s	+13%
`compute_pack_t0_t1`	✅	16s	13s	+23%
`poly_uniform_4x`	✅	16s	13s	+23%
`polyt0_unpack`	✅	15s	16s	-6%
`polyveck_decompose`	✅	14s	12s	+17%
`polyz_unpack_c`	✅	13s	13s	+0%
`mld_compute_pack_z`	✅	12s	7s	+71%
`poly_invntt_tomont_c`	✅	12s	11s	+9%
`poly_uniform_eta_4x`	✅	12s	14s	-14%
`rej_uniform_native_x86_64`	✅	11s	-	new
`keccak_absorb_once_x4`	✅	9s	8s	+12%
`polyveck_invntt_tomont`	✅	9s	8s	+12%
`polyveck_ntt`	✅	9s	7s	+29%
`polyt1_unpack`	✅	8s	5s	+60%
`polyveck_caddq`	✅	8s	6s	+33%
`polyveck_chknorm`	✅	8s	6s	+33%
`polyvecl_ntt`	✅	8s	4s	+100%
`sign_pk_from_sk`	✅	8s	6s	+33%
`sign_verify_pre_hash_shake256`	✅	8s	5s	+60%
`mld_keccakf1600_permute_c`	✅	7s	6s	+17%
`pointwise_acc_native_x86_64`	✅	7s	8s	-12%
`poly_add`	✅	7s	9s	-22%
`poly_use_hint`	✅	7s	3s	+133%
`polyeta_unpack`	✅	7s	8s	-12%
`sign_signature_extmu`	✅	7s	2s	+250%
`mld_prepare_domain_separation_prefix`	✅	6s	2s	+200%
`mld_sample_s1_s2_serial`	✅	6s	4s	+50%
`poly_use_hint_c`	✅	6s	5s	+20%
`polyvecl_pack_eta`	✅	6s	3s	+100%
`sign_signature_pre_hash_shake256`	✅	6s	3s	+100%
`caddq`	✅	5s	3s	+67%
`intt_native_x86_64`	✅	5s	3s	+67%
`keccakf1600x4_xor_bytes_native`	✅	5s	3s	+67%
`mld_ct_cmask_nonzero_u32`	✅	5s	4s	+25%
`mld_sample_s1_s2`	✅	5s	6s	-17%
`pointwise_acc_native_aarch64`	✅	5s	6s	-17%
`poly_chknorm_native_aarch64`	✅	5s	3s	+67%
`poly_decompose_c`	✅	5s	5s	+0%
`poly_invntt_tomont_native`	✅	5s	2s	+150%
`poly_shiftl`	✅	5s	3s	+67%
`poly_uniform_gamma1_4x`	✅	5s	4s	+25%
`poly_use_hint_native`	✅	5s	2s	+150%
`poly_use_hint_native_x86_64`	✅	5s	-	new
`polyvecl_unpack_eta`	✅	5s	3s	+67%
`polyw1_pack_32`	✅	5s	4s	+25%
`polyz_unpack`	✅	5s	3s	+67%
`polyz_unpack_native_x86_64`	✅	5s	3s	+67%
`rej_eta_native`	✅	5s	3s	+67%
`rej_uniform_eta_native_aarch64`	✅	5s	4s	+25%
`shake128_squeeze`	✅	5s	2s	+150%
`shake256_finalize`	✅	5s	1s	+400%
`sign_verify`	✅	5s	3s	+67%
`sign_verify_extmu`	✅	5s	3s	+67%
`unpack_sk`	✅	5s	3s	+67%
`unpack_sk_t0hat`	✅	5s	5s	+0%
`yvec_init`	✅	5s	3s	+67%
`keccak_f1600_x1_native_aarch64_v84a`	✅	4s	3s	+33%
`keccak_squeeze`	✅	4s	4s	+0%
`keccak_squeezeblocks_x4`	✅	4s	5s	-20%
`keccakf1600_xor_bytes`	✅	4s	2s	+100%
`keccakf1600_xor_bytes (big endian)`	✅	4s	2s	+100%
`make_hint`	✅	4s	2s	+100%
`mld_ct_cmask_neg_i32`	✅	4s	2s	+100%
`mld_ct_cmask_nonzero_u8`	✅	4s	3s	+33%
`mld_polymat_expand_entry`	✅	4s	4s	+0%
`montgomery_reduce`	✅	4s	4s	+0%
`ntt_native_x86_64`	✅	4s	2s	+100%
`nttunpack_native_x86_64`	✅	4s	3s	+33%
`pack_sk_s1`	✅	4s	5s	-20%
`poly_caddq`	✅	4s	2s	+100%
`poly_challenge`	✅	4s	6s	-33%
`poly_chknorm_native`	✅	4s	2s	+100%
`poly_decompose_32_native_aarch64`	✅	4s	3s	+33%
`poly_decompose_native_x86_64`	✅	4s	3s	+33%
`poly_permute_bitrev_to_custom_optional_native`	✅	4s	4s	+0%
`poly_uniform`	✅	4s	4s	+0%
`poly_uniform_gamma1`	✅	4s	3s	+33%
`poly_use_hint_native_aarch64`	✅	4s	3s	+33%
`polyeta_pack`	✅	4s	3s	+33%
`polyt0_pack`	✅	4s	3s	+33%
`polyvecl_chknorm`	✅	4s	7s	-43%
`polyvecl_pointwise_acc_montgomery_native`	✅	4s	2s	+100%
`polyvecl_uniform_gamma1_serial`	✅	4s	3s	+33%
`polyz_unpack_native`	✅	4s	4s	+0%
`rej_eta`	✅	4s	2s	+100%
`rej_uniform_native`	✅	4s	4s	+0%
`shake128_init`	✅	4s	2s	+100%
`shake128x4_absorb_once`	✅	4s	3s	+33%
`sign_signature`	✅	4s	6s	-33%
`sk_t0hat_get_poly`	✅	4s	2s	+100%
`unpack_pk_t1`	✅	4s	5s	-20%
`decompose`	✅	3s	1s	+200%
`intt_native_aarch64`	✅	3s	3s	+0%
`keccak_absorb`	✅	3s	3s	+0%
`keccak_finalize`	✅	3s	2s	+50%
`keccakf1600_permute_native`	✅	3s	3s	+0%
`keccakf1600x4_xor_bytes`	✅	3s	1s	+200%
`mld_ct_abs_i32`	✅	3s	2s	+50%
`mld_ct_get_optblocker_u32`	✅	3s	3s	+0%
`mld_h`	✅	3s	2s	+50%
`mld_keccakf1600_extract_bytes`	✅	3s	1s	+200%
`mld_keccakf1600x4_extract_bytes_c`	✅	3s	3s	+0%
`mld_keccakf1600x4_xor_bytes_c`	✅	3s	2s	+50%
`mld_value_barrier_i64`	✅	3s	2s	+50%
`ntt_native_aarch64`	✅	3s	2s	+50%
`pack_sig_h`	✅	3s	5s	-40%
`pack_sk_rho_key_tr_s2`	✅	3s	2s	+50%
`pointwise_native_aarch64`	✅	3s	5s	-40%
`pointwise_native_x86_64`	✅	3s	3s	+0%
`poly_caddq_native_aarch64`	✅	3s	2s	+50%
`poly_caddq_native_x86_64`	✅	3s	3s	+0%
`poly_chknorm`	✅	3s	4s	-25%
`poly_chknorm_native_x86_64`	✅	3s	3s	+0%
`poly_decompose_native`	✅	3s	3s	+0%
`poly_invntt_tomont`	✅	3s	3s	+0%
`poly_pointwise_montgomery`	✅	3s	3s	+0%
`poly_power2round`	✅	3s	4s	-25%
`poly_sub`	✅	3s	3s	+0%
`poly_uniform_eta`	✅	3s	4s	-25%
`polyt1_pack`	✅	3s	3s	+0%
`polyveck_pack_eta`	✅	3s	4s	-25%
`polyveck_pack_w1`	✅	3s	3s	+0%
`polyveck_unpack_eta`	✅	3s	6s	-50%
`polyvecl_pointwise_acc_montgomery`	✅	3s	3s	+0%
`polyvecl_uniform_gamma1`	✅	3s	2s	+50%
`polyvecl_unpack_z`	✅	3s	3s	+0%
`polyw1_pack`	✅	3s	4s	-25%
`polyz_pack`	✅	3s	3s	+0%
`polyz_unpack_17_native_aarch64`	✅	3s	3s	+0%
`polyz_unpack_19_native_aarch64`	✅	3s	3s	+0%
`power2round`	✅	3s	1s	+200%
`rej_eta_c`	✅	3s	5s	-40%
`rej_uniform_native_aarch64`	✅	3s	3s	+0%
`shake128_release`	✅	3s	3s	+0%
`shake256`	✅	3s	2s	+50%
`shake256x4_absorb_once`	✅	3s	3s	+0%
`sig_unpack_hints`	✅	3s	2s	+50%
`sign_keypair`	✅	3s	3s	+0%
`sign_keypair_internal`	✅	3s	5s	-40%
`sign_verify_pre_hash_internal`	✅	3s	5s	-40%
`unpack_sk_s1hat`	✅	3s	2s	+50%
`use_hint`	✅	3s	2s	+50%
`yvec_get_poly`	✅	3s	3s	+0%
`fqscale`	✅	2s	3s	-33%
`keccak_f1600_x1_native_aarch64`	✅	2s	2s	+0%
`keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid`	✅	2s	2s	+0%
`keccak_f1600_x4_native_avx2`	✅	2s	2s	+0%
`keccak_init`	✅	2s	1s	+100%
`keccakf1600_permute`	✅	2s	2s	+0%
`keccakf1600x4_extract_bytes`	✅	2s	4s	-50%
`keccakf1600x4_extract_bytes_native`	✅	2s	4s	-50%
`mld_ct_get_optblocker_i64`	✅	2s	2s	+0%
`mld_ct_get_optblocker_u8`	✅	2s	2s	+0%
`mld_ct_memcmp`	✅	2s	2s	+0%
`mld_ct_sel_int32`	✅	2s	3s	-33%
`mld_value_barrier_u32`	✅	2s	3s	-33%
`pack_sig_c`	✅	2s	5s	-60%
`pack_sig_z`	✅	2s	2s	+0%
`poly_caddq_native`	✅	2s	2s	+0%
`poly_decompose`	✅	2s	2s	+0%
`poly_decompose_88_native_aarch64`	✅	2s	1s	+100%
`poly_ntt`	✅	2s	2s	+0%
`poly_ntt_native`	✅	2s	4s	-50%
`poly_permute_bitrev_to_custom_optional`	✅	2s	2s	+0%
`poly_pointwise_montgomery_native`	✅	2s	3s	-33%
`poly_reduce`	✅	2s	3s	-33%
`polyvec_matrix_pointwise_montgomery_row`	✅	2s	1s	+100%
`polyveck_reduce`	✅	2s	4s	-50%
`polyw1_pack_88`	✅	2s	2s	+0%
`reduce32`	✅	2s	3s	-33%
`shake128_absorb`	✅	2s	2s	+0%
`shake128x4_squeezeblocks`	✅	2s	3s	-33%
`shake256_absorb`	✅	2s	2s	+0%
`shake256_init`	✅	2s	2s	+0%
`shake256_release`	✅	2s	2s	+0%
`shake256x4_squeezeblocks`	✅	2s	2s	+0%
`sign_signature_pre_hash_internal`	✅	2s	3s	-33%
`sk_s1hat_get_poly`	✅	2s	6s	-67%
`sk_s2hat_get_poly`	✅	2s	2s	+0%
`unpack_sk_s2hat`	✅	2s	4s	-50%
`keccak_f1600_x4_native_aarch64_v84a`	✅	1s	4s	-75%
`keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid`	✅	1s	2s	-50%
`keccakf1600_extract_bytes (big endian)`	✅	1s	2s	-50%
`keccakf1600x4_permute`	✅	1s	4s	-75%
`mld_value_barrier_u8`	✅	1s	3s	-67%
`poly_caddq_c`	✅	1s	2s	-50%
`shake128_finalize`	✅	1s	1s	+0%
`shake256_squeeze`	✅	1s	3s	-67%
`sys_check_capability`	✅	1s	4s	-75%

oqs-bot · 2026-07-08T06:50:49Z

CBMC Results (ML-DSA-87)

Full Results (206 proofs)

Proof	Status	Current	Previous	Change
`TOTAL`	✅	2525s	2151s	+17.4%
`polyvecl_pointwise_acc_montgomery_c`	✅	485s	353s	+37%
`polyvec_matrix_expand`	✅	375s	324s	+16%
`poly_pointwise_montgomery_c`	✅	177s	144s	+23%
`mld_invntt_layer`	✅	139s	115s	+21%
`sign_verify_internal`	✅	111s	97s	+14%
`mld_attempt_signature_generation`	✅	59s	55s	+7%
`fqmul`	✅	53s	43s	+23%
`mld_ntt_layer`	✅	51s	45s	+13%
`sign_signature_internal`	✅	45s	42s	+7%
`polyvec_matrix_expand_serial`	✅	44s	38s	+16%
`poly_ntt_c`	✅	27s	21s	+29%
`mld_ntt_butterfly_block`	✅	25s	24s	+4%
`keccakf1600x4_permute_native`	✅	23s	23s	+0%
`compute_pack_t0_t1`	✅	22s	19s	+16%
`polyvec_matrix_pointwise_montgomery_yvec`	✅	20s	18s	+11%
`mld_check_pct`	✅	19s	16s	+19%
`poly_chknorm_c`	✅	18s	15s	+20%
`polyeta_unpack`	✅	18s	17s	+6%
`polyt0_unpack`	✅	18s	14s	+29%
`rej_uniform_c`	✅	18s	19s	-5%
`rej_uniform`	✅	17s	15s	+13%
`poly_uniform_eta_4x`	✅	16s	11s	+45%
`poly_invntt_tomont_c`	✅	15s	12s	+25%
`polyveck_decompose`	✅	14s	13s	+8%
`poly_uniform_4x`	✅	13s	13s	+0%
`keccak_absorb_once_x4`	✅	11s	9s	+22%
`polyveck_caddq`	✅	11s	8s	+38%
`rej_uniform_native_x86_64`	✅	11s	-	new
`mld_compute_pack_z`	✅	10s	8s	+25%
`polyveck_ntt`	✅	10s	11s	-9%
`mld_sample_s1_s2`	✅	9s	6s	+50%
`pointwise_acc_native_aarch64`	✅	9s	6s	+50%
`mld_sample_s1_s2_serial`	✅	8s	8s	+0%
`polyveck_invntt_tomont`	✅	8s	9s	-11%
`polyvecl_ntt`	✅	8s	7s	+14%
`keccak_squeezeblocks_x4`	✅	7s	4s	+75%
`mld_keccakf1600_permute_c`	✅	7s	7s	+0%
`pointwise_acc_native_x86_64`	✅	7s	6s	+17%
`poly_add`	✅	7s	6s	+17%
`sign_pk_from_sk`	✅	7s	6s	+17%
`unpack_sk_t0hat`	✅	7s	7s	+0%
`mld_prepare_domain_separation_prefix`	✅	6s	4s	+50%
`nttunpack_native_x86_64`	✅	6s	3s	+100%
`pack_sig_c`	✅	6s	4s	+50%
`poly_invntt_tomont`	✅	6s	1s	+500%
`polyt0_pack`	✅	6s	4s	+50%
`rej_eta_native`	✅	6s	6s	+0%
`sign_signature_extmu`	✅	6s	4s	+50%
`sign_verify`	✅	6s	5s	+20%
`sign_verify_pre_hash_shake256`	✅	6s	3s	+100%
`fqscale`	✅	5s	3s	+67%
`intt_native_aarch64`	✅	5s	3s	+67%
`keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid`	✅	5s	4s	+25%
`make_hint`	✅	5s	3s	+67%
`mld_keccakf1600x4_xor_bytes_c`	✅	5s	4s	+25%
`ntt_native_aarch64`	✅	5s	6s	-17%
`ntt_native_x86_64`	✅	5s	2s	+150%
`pointwise_native_aarch64`	✅	5s	5s	+0%
`poly_decompose_c`	✅	5s	5s	+0%
`poly_decompose_native_x86_64`	✅	5s	2s	+150%
`poly_uniform`	✅	5s	4s	+25%
`poly_uniform_gamma1_4x`	✅	5s	3s	+67%
`poly_use_hint_c`	✅	5s	2s	+150%
`polyeta_pack`	✅	5s	4s	+25%
`polyt1_unpack`	✅	5s	4s	+25%
`polyveck_chknorm`	✅	5s	3s	+67%
`polyveck_pack_eta`	✅	5s	6s	-17%
`polyvecl_chknorm`	✅	5s	7s	-29%
`polyw1_pack`	✅	5s	4s	+25%
`reduce32`	✅	5s	3s	+67%
`shake256_absorb`	✅	5s	2s	+150%
`shake256_squeeze`	✅	5s	2s	+150%
`sig_unpack_hints`	✅	5s	3s	+67%
`sign_keypair`	✅	5s	4s	+25%
`sk_t0hat_get_poly`	✅	5s	4s	+25%
`unpack_sk_s1hat`	✅	5s	2s	+150%
`yvec_init`	✅	5s	4s	+25%
`decompose`	✅	4s	3s	+33%
`keccak_absorb`	✅	4s	3s	+33%
`keccak_init`	✅	4s	3s	+33%
`keccak_squeeze`	✅	4s	2s	+100%
`keccakf1600_permute_native`	✅	4s	4s	+0%
`mld_value_barrier_u8`	✅	4s	3s	+33%
`pointwise_native_x86_64`	✅	4s	2s	+100%
`poly_caddq_c`	✅	4s	3s	+33%
`poly_chknorm_native`	✅	4s	4s	+0%
`poly_chknorm_native_aarch64`	✅	4s	4s	+0%
`poly_decompose_native`	✅	4s	2s	+100%
`poly_pointwise_montgomery`	✅	4s	4s	+0%
`poly_power2round`	✅	4s	3s	+33%
`poly_uniform_eta`	✅	4s	4s	+0%
`poly_use_hint`	✅	4s	1s	+300%
`poly_use_hint_native_x86_64`	✅	4s	-	new
`polyvecl_pointwise_acc_montgomery`	✅	4s	5s	-20%
`polyvecl_uniform_gamma1`	✅	4s	2s	+100%
`polyvecl_uniform_gamma1_serial`	✅	4s	4s	+0%
`polyvecl_unpack_z`	✅	4s	4s	+0%
`polyw1_pack_32`	✅	4s	4s	+0%
`polyw1_pack_88`	✅	4s	3s	+33%
`polyz_unpack_native`	✅	4s	4s	+0%
`rej_eta_c`	✅	4s	5s	-20%
`rej_uniform_eta_native_aarch64`	✅	4s	5s	-20%
`rej_uniform_native`	✅	4s	8s	-50%
`rej_uniform_native_aarch64`	✅	4s	2s	+100%
`shake128_finalize`	✅	4s	2s	+100%
`shake128_init`	✅	4s	1s	+300%
`shake128_release`	✅	4s	4s	+0%
`shake128_squeeze`	✅	4s	2s	+100%
`shake256x4_squeezeblocks`	✅	4s	1s	+300%
`sign_signature`	✅	4s	5s	-20%
`sign_signature_pre_hash_internal`	✅	4s	5s	-20%
`sign_signature_pre_hash_shake256`	✅	4s	6s	-33%
`sign_verify_extmu`	✅	4s	3s	+33%
`sk_s2hat_get_poly`	✅	4s	3s	+33%
`unpack_sk`	✅	4s	5s	-20%
`intt_native_x86_64`	✅	3s	3s	+0%
`keccak_f1600_x4_native_aarch64_v84a`	✅	3s	4s	-25%
`keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid`	✅	3s	3s	+0%
`keccak_finalize`	✅	3s	1s	+200%
`keccakf1600_permute`	✅	3s	3s	+0%
`keccakf1600x4_extract_bytes`	✅	3s	2s	+50%
`keccakf1600x4_permute`	✅	3s	3s	+0%
`keccakf1600x4_xor_bytes`	✅	3s	3s	+0%
`mld_ct_abs_i32`	✅	3s	3s	+0%
`mld_ct_cmask_nonzero_u32`	✅	3s	2s	+50%
`mld_ct_get_optblocker_i64`	✅	3s	3s	+0%
`mld_ct_get_optblocker_u32`	✅	3s	2s	+50%
`mld_ct_memcmp`	✅	3s	3s	+0%
`mld_h`	✅	3s	3s	+0%
`mld_value_barrier_u32`	✅	3s	2s	+50%
`pack_sig_h`	✅	3s	4s	-25%
`poly_caddq_native_aarch64`	✅	3s	3s	+0%
`poly_caddq_native_x86_64`	✅	3s	2s	+50%
`poly_challenge`	✅	3s	5s	-40%
`poly_chknorm`	✅	3s	3s	+0%
`poly_decompose`	✅	3s	3s	+0%
`poly_decompose_32_native_aarch64`	✅	3s	5s	-40%
`poly_permute_bitrev_to_custom_optional`	✅	3s	3s	+0%
`poly_permute_bitrev_to_custom_optional_native`	✅	3s	5s	-40%
`poly_shiftl`	✅	3s	4s	-25%
`poly_sub`	✅	3s	3s	+0%
`poly_uniform_gamma1`	✅	3s	4s	-25%
`poly_use_hint_native`	✅	3s	3s	+0%
`polyveck_reduce`	✅	3s	3s	+0%
`polyveck_unpack_eta`	✅	3s	4s	-25%
`polyvecl_pointwise_acc_montgomery_native`	✅	3s	3s	+0%
`polyvecl_unpack_eta`	✅	3s	5s	-40%
`polyz_pack`	✅	3s	5s	-40%
`polyz_unpack`	✅	3s	2s	+50%
`polyz_unpack_17_native_aarch64`	✅	3s	3s	+0%
`polyz_unpack_19_native_aarch64`	✅	3s	4s	-25%
`polyz_unpack_c`	✅	3s	3s	+0%
`polyz_unpack_native_x86_64`	✅	3s	3s	+0%
`shake128_absorb`	✅	3s	4s	-25%
`shake128x4_squeezeblocks`	✅	3s	3s	+0%
`shake256_finalize`	✅	3s	2s	+50%
`sign_keypair_internal`	✅	3s	6s	-50%
`sign_verify_pre_hash_internal`	✅	3s	3s	+0%
`sk_s1hat_get_poly`	✅	3s	3s	+0%
`unpack_pk_t1`	✅	3s	1s	+200%
`unpack_sk_s2hat`	✅	3s	3s	+0%
`use_hint`	✅	3s	3s	+0%
`caddq`	✅	2s	4s	-50%
`keccak_f1600_x1_native_aarch64`	✅	2s	1s	+100%
`keccak_f1600_x1_native_aarch64_v84a`	✅	2s	1s	+100%
`keccak_f1600_x4_native_avx2`	✅	2s	2s	+0%
`keccakf1600_extract_bytes (big endian)`	✅	2s	3s	-33%
`keccakf1600_xor_bytes`	✅	2s	3s	-33%
`keccakf1600_xor_bytes (big endian)`	✅	2s	2s	+0%
`keccakf1600x4_extract_bytes_native`	✅	2s	2s	+0%
`keccakf1600x4_xor_bytes_native`	✅	2s	3s	-33%
`mld_ct_cmask_nonzero_u8`	✅	2s	3s	-33%
`mld_ct_get_optblocker_u8`	✅	2s	3s	-33%
`mld_ct_sel_int32`	✅	2s	3s	-33%
`mld_keccakf1600_extract_bytes`	✅	2s	4s	-50%
`mld_keccakf1600x4_extract_bytes_c`	✅	2s	2s	+0%
`mld_polymat_expand_entry`	✅	2s	3s	-33%
`mld_value_barrier_i64`	✅	2s	1s	+100%
`montgomery_reduce`	✅	2s	3s	-33%
`pack_sig_z`	✅	2s	5s	-60%
`pack_sk_rho_key_tr_s2`	✅	2s	3s	-33%
`pack_sk_s1`	✅	2s	1s	+100%
`poly_caddq`	✅	2s	2s	+0%
`poly_chknorm_native_x86_64`	✅	2s	2s	+0%
`poly_invntt_tomont_native`	✅	2s	5s	-60%
`poly_ntt`	✅	2s	3s	-33%
`poly_ntt_native`	✅	2s	3s	-33%
`poly_pointwise_montgomery_native`	✅	2s	5s	-60%
`poly_reduce`	✅	2s	2s	+0%
`poly_use_hint_native_aarch64`	✅	2s	2s	+0%
`polyt1_pack`	✅	2s	3s	-33%
`polyveck_pack_w1`	✅	2s	3s	-33%
`polyvecl_pack_eta`	✅	2s	3s	-33%
`power2round`	✅	2s	4s	-50%
`rej_eta`	✅	2s	4s	-50%
`shake128x4_absorb_once`	✅	2s	5s	-60%
`shake256`	✅	2s	2s	+0%
`shake256_init`	✅	2s	2s	+0%
`shake256_release`	✅	2s	3s	-33%
`shake256x4_absorb_once`	✅	2s	2s	+0%
`sys_check_capability`	✅	2s	3s	-33%
`yvec_get_poly`	✅	2s	4s	-50%
`mld_ct_cmask_neg_i32`	✅	1s	4s	-75%
`poly_caddq_native`	✅	1s	4s	-75%
`poly_decompose_88_native_aarch64`	✅	1s	2s	-50%
`polyvec_matrix_pointwise_montgomery_row`	✅	1s	3s	-67%

github-actions

⚠️ Performance Alert ⚠️

Possible performance regression was detected for benchmark 'Arm Cortex-A55 (Snapdragon 888) benchmarks (opt)'.
Benchmark result of this commit is worse than the previous benchmark result exceeding threshold 1.03.

Benchmark suite	Current: `886a852`	Previous: `31c9b9e`	Ratio
`ML-DSA-87 sign`	`1860266` cycles	`1775733` cycles	`1.05`

This comment was automatically generated by workflow using github-action-benchmark.

- Port of pq-code-package/mlkem-native#1547 Signed-off-by: Matthias J. Kannwischer <matthias@zerorisc.com>

- Port of pq-code-package/mlkem-native#1791 Signed-off-by: Matthias J. Kannwischer <matthias@zerorisc.com>

Zephyr's k_cycle_get_32() can wrap during long NUCLEO benchmark windows, producing huge unsigned deltas in the benchmark output. Use k_cycle_get_64() for Zephyr targets. Also make ML-DSA benchmark percentile sorting and formatting robust for large uint64_t cycle values. Signed-off-by: Brendan Moran <brendan.moran@arm.com>

Run the NUCLEO-N657X0-Q Zephyr test image as XIP from ITCM and place runtime data/stacks in DTCM after the runner expands FLEXMEM to 256 KiB ITCM and 256 KiB DTCM. Force STM32N6 SystemInit() to use the ITCM vector table address for VTOR. Without this, its fallback derives VTOR from &g_pfnVectors, which moves into DTCM with Zephyr data and points VTOR at RAM data instead of the vector table. Add an early reset hook that scrubs the expanded DTCM window before Zephyr stack, BSS, and MPU setup touch it. Tested: - nix develop .#zephyr --command make run_func EXTRA_MAKEFILE=test/zephyr/platform.mk ZEPHYR_TARGET=mps3-an547 CYCLES=NO -j1 - nix develop .#zephyr --command make run_bench_components EXTRA_MAKEFILE=test/zephyr/platform.mk ZEPHYR_TARGET=nucleo-n657x0-q CYCLES=NO -j1 Signed-off-by: Brendan Moran <brendan.moran@arm.com>

mkannwischer added the benchmark label Jul 8, 2026

github-actions Bot reviewed Jul 8, 2026

View reviewed changes

oqs-bot reviewed Jul 8, 2026

View reviewed changes

github-actions Bot reviewed Jul 8, 2026

View reviewed changes

oqs-bot reviewed Jul 8, 2026

View reviewed changes

github-actions Bot reviewed Jul 8, 2026

View reviewed changes

bremoran force-pushed the port-nucleo branch from 432cc41 to cf52cfb Compare July 8, 2026 17:40

mkannwischer added benchmark and removed benchmark labels Jul 9, 2026

github-actions Bot reviewed Jul 9, 2026

View reviewed changes

bremoran force-pushed the port-nucleo branch from 6edc2a4 to 886a852 Compare July 10, 2026 08:10

mkannwischer and others added 4 commits July 10, 2026 16:36

Add NUCLEO-N657X0-Q Zephyr hardware platform

001b584

- Port of pq-code-package/mlkem-native#1547 Signed-off-by: Matthias J. Kannwischer <matthias@zerorisc.com>

zephyr: keep project CFLAGS off Zephyr internals

439cbef

- Port of pq-code-package/mlkem-native#1791 Signed-off-by: Matthias J. Kannwischer <matthias@zerorisc.com>

bremoran force-pushed the port-nucleo branch from 886a852 to cd26685 Compare July 10, 2026 16:01

Uh oh!

Conversation

mkannwischer commented Jul 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Mac Mini (M1, 2020) benchmarks (opt)

Uh oh!

github-actions Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Mac Mini (M1, 2020) benchmarks (no-opt)

Uh oh!

github-actions Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Arm Cortex-A76 (Raspberry Pi 5) benchmarks (opt)

Uh oh!

oqs-bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Intel Xeon 4th gen (c7i)

Uh oh!

oqs-bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Intel Xeon 4th gen (c7i) (no-opt)

Uh oh!

oqs-bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

AMD EPYC 3rd gen (c6a)

Uh oh!

oqs-bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Graviton5

Uh oh!

oqs-bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Intel Xeon 3rd gen (c6i)

Uh oh!

oqs-bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

AMD EPYC 4th gen (c7a)

Uh oh!

github-actions Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Arm Cortex-A76 (Raspberry Pi 5) benchmarks (no-opt)

Uh oh!

oqs-bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

AMD EPYC 3rd gen (c6a) (no-opt)

Uh oh!

oqs-bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Graviton5 (no-opt)

Uh oh!

oqs-bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Intel Xeon 3rd gen (c6i) (no-opt)

Uh oh!

oqs-bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Graviton4

Uh oh!

oqs-bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

AMD EPYC 4th gen (c7a) (no-opt)

Uh oh!

mkannwischer commented Jul 8, 2026 •

edited

Loading

github-actions Bot left a comment •

edited

Loading

github-actions Bot left a comment •

edited

Loading

github-actions Bot left a comment •

edited

Loading

oqs-bot left a comment •

edited

Loading

oqs-bot left a comment •

edited

Loading

oqs-bot left a comment •

edited

Loading

oqs-bot left a comment •

edited

Loading

oqs-bot left a comment •

edited

Loading

oqs-bot left a comment •

edited

Loading

github-actions Bot left a comment •

edited

Loading

oqs-bot left a comment •

edited

Loading

oqs-bot left a comment •

edited

Loading

oqs-bot left a comment •

edited

Loading

oqs-bot left a comment •

edited

Loading

oqs-bot left a comment •

edited

Loading

oqs-bot left a comment •

edited

Loading

oqs-bot left a comment •

edited

Loading

oqs-bot left a comment •

edited

Loading

oqs-bot left a comment •

edited

Loading

oqs-bot left a comment •

edited

Loading

github-actions Bot left a comment •

edited

Loading

github-actions Bot left a comment •

edited

Loading

github-actions Bot left a comment •

edited

Loading

github-actions Bot left a comment •

edited

Loading

github-actions Bot left a comment •

edited

Loading

github-actions Bot left a comment •

edited

Loading

oqs-bot commented Jul 8, 2026 •

edited

Loading