NIST PQC Algorithms
The current state of PQC is represented by the ongoing NIST PQC standardization process
- Submission Requirements and Evaluation Criteria for the Post-Quantum Cryptography Standardization Process.
- Status report on the first round.
- Status report on the second round.
NIST PQC candidate algorithms:
| Algorithm | Description | Type | NIST Round |
|---|---|---|---|
| BIKE | Bit flipping key-encapsulation based on QC-MDPC (Quasi-Cyclic Moderate Density Parity-Check) | Public-key Encryption and Key-establishment | Round Three Alternative |
| CRYSTALS-Dilithium | Digital signature scheme based on the hardness of lattice problems over module lattices | Digital Signature | Round 3 Finalist |
| Falcon | Lattice-based signature scheme based on the short integer solution problem (SIS) over NTRU lattices | Digital Signature | Round 3 Finalist |
| FrodoKEM | Key-encapsulation from generic lattices | Public-key Encryption and Key-establishment | Round Three Alternative |
| GeMSS | Multivariate signature scheme producing small signatures | Digital Signature | Round Three Alternative |
| HQC | Hamming quasi-cyclic code-based public-key encryption scheme | Public-key Encryption and Key-establishment | Round Three Alternative |
| CRYSTALS-Kyber | IND-CCA2-secure key-encapsulation mechanism (KEM) based on hard problems over module lattices | Public-key Encryption and Key-establishment | Round 3 Finalist |
| Classic McEliece | Code-based public-key cryptosystem based on random binary Goppa codes | Public-key Encryption and Key-establishment | Round 3 Finalist |
| NTRU | Public-key cryptosystem based on lattice-based cryptography | Public-key Encryption and Key-establishment | Round 3 Finalist |
| NTRU-Prime | Small lattice-based key-encapsulation mechanism (KEM) | Public-key Encryption and Key-establishment | Round 3 Alternative |
| Picnic | Digital signature algorithm based on the zero-knowledge proof system and symmetric key primitives | Digital Signature | Round 3 Alternative |
| Rainbow | Public-key cryptosystem based on the hardness of solving a set of random multivariate quadratic systems | Digital Signature | Round 3 Finalist |
| SABER | IND-CCA2-secure key-encapsulation mechanism (KEM) based on the hardness of the module learning with rounding problem (MLWR) | Public-key Encryption and Key-establishment | Round 3 Finalist |
| SIKE | Isogeny-based key-encapsulation suite based on pseudo-random walks in supersingular isogeny graphs | Public-key Encryption and Key-establishment | Round 3 Alternative |
| SPHINCS+ | A stateless hash-based signature scheme | Digital Signature | Round 3 Alternative |
Last modified November 29, 2021