Mirath (merge of MIRA and MiRitH) is a digital signature scheme based on the hardness of solving the MinRank problem. It is designed to provide security against attacks by both classical and quantum computers and has been submitted to the NIST’s Post-Quantum Standardization Project.
The tables below illustrate the sizes and performances of Mirath. Numbers reported correspond to an optimized implementation using AVX2 instructions and have been obtained using an Intel Core i9-13900K (3 Ghz) CPU.
Parameter Set | NIST Security Level | SK size | PK size | Sig size |
---|---|---|---|---|
Mirath-1a-Short | 1 | 32 B | 73 B | 3 078 B |
Mirath-1b-Short | 1 | 32 B | 57 B | 2 902 B |
Mirath-1a-Fast | 1 | 32 B | 73 B | 3 728 B |
Mirath-1b-Fast | 1 | 32 B | 57 B | 3 456 B |
Mirath-3a-Short | 3 | 48 B | 107 B | 6 907 B |
Mirath-3b-Short | 3 | 48 B | 84 B | 6 514 B |
Mirath-3a-Fast | 3 | 48 B | 107 B | 8 537 B |
Mirath-3b-Fast | 3 | 48 B | 84 B | 7 936 B |
Mirath-5a-Short | 5 | 64 B | 147 B | 12 413 B |
Mirath-5b-Short | 5 | 64 B | 112 B | 11 620 B |
Mirath-5a-Fast | 5 | 64 B | 147 B | 15 504 B |
Mirath-5b-Fast | 5 | 64 B | 112 B | 14 262 B |
Parameter Set | NIST Security Level | Keygen (CPU cycles) | Sign (CPU cycles) | Verify (CPU cycles) |
---|---|---|---|---|
Mirath-1a-Short | 1 | 0.2 M | 166 M | 123 M |
Mirath-1b-Short | 1 | 0.6 M | 152 M | 101 M |
Mirath-1a-Fast | 1 | 0.2 M | 11.0 M | 9.8 M |
Mirath-1b-Fast | 1 | 0.6 M | 15.1 M | 12.2 M |
Mirath-3a-Short | 3 | 0.3 M | 597 M | 411 M |
Mirath-3b-Short | 3 | 1.2 M | 520 M | 327 M |
Mirath-3a-Fast | 3 | 0.3 M | 33.6 M | 34.4 M |
Mirath-3b-Fast | 3 | 1.2 M | 55.0 M | 51.6 M |
Mirath-5a-Short | 5 | 0.5 M | 1 415 M | 712 M |
Mirath-5b-Short | 5 | 2.0 M | 1 421 M | 630 M |
Mirath-5a-Fast | 5 | 0.5 M | 86.7 M | 65.1 M |
Mirath-5b-Fast | 5 | 2.0 M | 121 M | 88.0 M |