Express alignment portably with alignas (C23) / _Alignas (C11/C17)

[mkannwischer]

MLD_ALIGN had no portable definition: __attribute__((aligned)) for GCC/Clang, __declspec(align) for MSVC, and on anything else it expanded to nothing at all. A toolchain outside those two families therefore silently dropped the 32-byte alignment.

C11 added _Alignas and C23 renamed it to alignas, so any compiler claiming either standard can express the constraint without an extension. Prefer those when __STDC_VERSION__ advertises them and keep the extensions as the fallback for C90 and C99.

An alignment specifier belongs to the declaration specifiers, so unlike an attribute it cannot be attached to a typedef or a struct tag.

• Resolve Consider adding support for alignas (C23) and _Alignas (C11/C17) #1378

[oqs-bot]

CBMC Results (ML-DSA-44, REDUCE-RAM)

⚠️ Attention Required

Proof	Status	Current	Previous	Change
compute_pack_t0_t1	⚠️	29s	12s	+142%
mld_attempt_signature_generation	⚠️	149s	19s	+684%
sign_pk_from_sk	⚠️	41s	5s	+720%
sign_verify_internal	⚠️	162s	49s	+231%

Full Results (210 proofs)

Proof	Status	Current	Previous	Change
**TOTAL**	✅	1244s	1364s	-8.8%
sign_verify_internal	⚠️	162s	49s	+231%
mld_attempt_signature_generation	⚠️	149s	19s	+684%
polyvec_matrix_pointwise_montgomery_yvec	✅	100s	149s	-33%
poly_pointwise_montgomery_c	✅	67s	112s	-40%
mld_invntt_layer	✅	54s	105s	-49%
sign_pk_from_sk	⚠️	41s	5s	+720%
compute_pack_t0_t1	⚠️	29s	12s	+142%
fqmul	✅	22s	39s	-44%
mld_ntt_layer	✅	21s	41s	-49%
sign_keypair_internal	✅	17s	4s	+325%
sign_signature_internal	✅	15s	4s	+275%
keccakf1600x4_permute_native	✅	13s	22s	-41%
sig_unpack_hints	✅	12s	2s	+500%
mld_ntt_butterfly_block	✅	11s	23s	-52%
rej_uniform_c	✅	11s	16s	-31%
poly_ntt_c	✅	10s	21s	-52%
polyt0_unpack	✅	10s	12s	-17%
rej_uniform	✅	9s	8s	+12%
rej_uniform_native_x86_64	✅	8s	-	new
mld_check_pct	✅	7s	15s	-53%
poly_invntt_tomont_c	✅	7s	11s	-36%
poly_uniform_eta_4x	✅	7s	12s	-42%
polyeta_unpack	✅	7s	14s	-50%
polyz_unpack_c	✅	7s	8s	-12%
sign_keypair	✅	7s	5s	+40%
sign_signature_pre_hash_shake256	✅	7s	4s	+75%
keccak_absorb_once_x4	✅	6s	8s	-25%
polyvec_matrix_pointwise_montgomery_row	✅	6s	6s	+0%
intt_native_x86_64	✅	5s	2s	+150%
poly_chknorm_c	✅	5s	11s	-55%
poly_permute_bitrev_to_custom_optional_native	✅	5s	3s	+67%
polyveck_decompose	✅	5s	7s	-29%
polyz_unpack_19_native_aarch64	✅	5s	4s	+25%
rej_uniform_native	✅	5s	5s	+0%
sign_verify	✅	5s	4s	+25%
keccak_absorb	✅	4s	3s	+33%
keccak_squeezeblocks_x4	✅	4s	3s	+33%
mld_sign_finish	✅	4s	-	new
mld_sign_resume	✅	4s	-	new
montgomery_reduce	✅	4s	2s	+100%
pack_sk_rho_key_tr_s2	✅	4s	5s	-20%
pointwise_acc_native_aarch64	✅	4s	6s	-33%
poly_add	✅	4s	7s	-43%
poly_uniform_eta	✅	4s	2s	+100%
polyt1_unpack	✅	4s	2s	+100%
polyw1_pack_32	✅	4s	3s	+33%
polyz_pack	✅	4s	2s	+100%
polyz_unpack_native	✅	4s	3s	+33%
rej_eta_native	✅	4s	3s	+33%
shake256x4_squeezeblocks	✅	4s	2s	+100%
sign_signature	✅	4s	6s	-33%
sign_verify_extmu	✅	4s	5s	-20%
caddq	✅	3s	6s	-50%
fqscale	✅	3s	2s	+50%
intt_native_aarch64	✅	3s	3s	+0%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid	✅	3s	2s	+50%
keccak_init	✅	3s	3s	+0%
keccakf1600_extract_bytes (big endian)	✅	3s	4s	-25%
keccakf1600_xor_bytes (big endian)	✅	3s	6s	-50%
keccakf1600x4_xor_bytes_native	✅	3s	5s	-40%
mld_compute_pack_z	✅	3s	6s	-50%
mld_ct_cmask_nonzero_u32	✅	3s	3s	+0%
mld_ct_get_optblocker_u32	✅	3s	2s	+50%
mld_h	✅	3s	4s	-25%
mld_keccakf1600_permute_c	✅	3s	7s	-57%
mld_sign_attempt	✅	3s	-	new
ntt_native_x86_64	✅	3s	3s	+0%
pack_sig_h	✅	3s	4s	-25%
pack_sk_s1	✅	3s	3s	+0%
poly_chknorm_native	✅	3s	4s	-25%
poly_decompose_32_native_aarch64	✅	3s	4s	-25%
poly_decompose_native_x86_64	✅	3s	2s	+50%
poly_ntt_native	✅	3s	3s	+0%
poly_pointwise_montgomery	✅	3s	3s	+0%
poly_sub	✅	3s	3s	+0%
polyt1_pack	✅	3s	3s	+0%
polyveck_chknorm	✅	3s	67s	-96%
polyveck_pack_w1	✅	3s	3s	+0%
polyveck_unpack_eta	✅	3s	2s	+50%
polyvecl_pointwise_acc_montgomery_c	✅	3s	4s	-25%
polyvecl_uniform_gamma1	✅	3s	2s	+50%
polyvecl_unpack_eta	✅	3s	4s	-25%
polyz_unpack_native_x86_64	✅	3s	3s	+0%
rej_eta	✅	3s	5s	-40%
rej_uniform_eta_native_aarch64	✅	3s	3s	+0%
rej_uniform_native_aarch64	✅	3s	3s	+0%
shake128_release	✅	3s	2s	+50%
shake256	✅	3s	1s	+200%
shake256_finalize	✅	3s	2s	+50%
shake256_release	✅	3s	1s	+200%
sign_verify_pre_hash_internal	✅	3s	5s	-40%
sk_s2hat_get_poly	✅	3s	5s	-40%
use_hint	✅	3s	2s	+50%
decompose	✅	2s	3s	-33%
keccak_f1600_x1_native_aarch64_v84a	✅	2s	2s	+0%
keccak_f1600_x4_native_aarch64_v84a	✅	2s	3s	-33%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid	✅	2s	3s	-33%
keccak_finalize	✅	2s	2s	+0%
keccakf1600_permute	✅	2s	2s	+0%
keccakf1600_permute_native	✅	2s	3s	-33%
keccakf1600_xor_bytes	✅	2s	3s	-33%
keccakf1600x4_extract_bytes	✅	2s	2s	+0%
keccakf1600x4_extract_bytes_native	✅	2s	4s	-50%
keccakf1600x4_permute	✅	2s	4s	-50%
mld_ct_abs_i32	✅	2s	3s	-33%
mld_ct_cmask_neg_i32	✅	2s	2s	+0%
mld_ct_cmask_nonzero_u8	✅	2s	2s	+0%
mld_ct_get_optblocker_i64	✅	2s	4s	-50%
mld_ct_get_optblocker_u8	✅	2s	2s	+0%
mld_ct_memcmp	✅	2s	1s	+100%
mld_keccakf1600_extract_bytes	✅	2s	2s	+0%
mld_keccakf1600x4_extract_bytes_c	✅	2s	4s	-50%
mld_keccakf1600x4_xor_bytes_c	✅	2s	4s	-50%
mld_polymat_expand_entry	✅	2s	2s	+0%
mld_prepare_domain_separation_prefix	✅	2s	3s	-33%
mld_sample_s1_s2_serial	✅	2s	4s	-50%
ntt_native_aarch64	✅	2s	4s	-50%
nttunpack_native_x86_64	✅	2s	4s	-50%
pack_sig_z	✅	2s	2s	+0%
pointwise_acc_native_x86_64	✅	2s	4s	-50%
pointwise_native_x86_64	✅	2s	4s	-50%
poly_caddq	✅	2s	4s	-50%
poly_caddq_native_x86_64	✅	2s	4s	-50%
poly_chknorm_native_aarch64	✅	2s	2s	+0%
poly_decompose	✅	2s	2s	+0%
poly_decompose_88_native_aarch64	✅	2s	3s	-33%
poly_decompose_c	✅	2s	5s	-60%
poly_invntt_tomont	✅	2s	2s	+0%
poly_power2round	✅	2s	4s	-50%
poly_reduce	✅	2s	4s	-50%
poly_uniform_4x	✅	2s	3s	-33%
poly_uniform_gamma1	✅	2s	3s	-33%
poly_uniform_gamma1_4x	✅	2s	5s	-60%
poly_use_hint	✅	2s	2s	+0%
poly_use_hint_c	✅	2s	5s	-60%
poly_use_hint_native_x86_64	✅	2s	-	new
polyvec_matrix_expand_serial	✅	2s	4s	-50%
polyveck_caddq	✅	2s	3s	-33%
polyveck_invntt_tomont	✅	2s	5s	-60%
polyveck_ntt	✅	2s	2s	+0%
polyveck_reduce	✅	2s	4s	-50%
polyvecl_chknorm	✅	2s	11s	-82%
polyvecl_ntt	✅	2s	3s	-33%
polyvecl_pack_eta	✅	2s	2s	+0%
polyvecl_pointwise_acc_montgomery	✅	2s	3s	-33%
polyvecl_pointwise_acc_montgomery_native	✅	2s	3s	-33%
polyvecl_uniform_gamma1_serial	✅	2s	2s	+0%
polyvecl_unpack_z	✅	2s	3s	-33%
polyw1_pack_88	✅	2s	2s	+0%
polyz_unpack_17_native_aarch64	✅	2s	2s	+0%
power2round	✅	2s	2s	+0%
reduce32	✅	2s	3s	-33%
rej_eta_c	✅	2s	4s	-50%
rej_uniform_eta_native_x86_64	✅	2s	-	new
shake128_absorb	✅	2s	3s	-33%
shake128_finalize	✅	2s	3s	-33%
shake128_init	✅	2s	2s	+0%
shake128_squeeze	✅	2s	2s	+0%
shake128x4_squeezeblocks	✅	2s	2s	+0%
shake256_absorb	✅	2s	2s	+0%
shake256_init	✅	2s	4s	-50%
shake256_squeeze	✅	2s	2s	+0%
shake256x4_absorb_once	✅	2s	1s	+100%
sign_signature_extmu	✅	2s	4s	-50%
sign_verify_pre_hash_shake256	✅	2s	5s	-60%
sk_t0hat_get_poly	✅	2s	1s	+100%
unpack_pk_t1	✅	2s	3s	-33%
unpack_sk_s1hat	✅	2s	3s	-33%
unpack_sk_s2hat	✅	2s	4s	-50%
unpack_sk_t0hat	✅	2s	2s	+0%
yvec_get_poly	✅	2s	3s	-33%
yvec_init	✅	2s	1s	+100%
keccak_f1600_x1_native_aarch64	✅	1s	3s	-67%
keccak_f1600_x4_native_avx2	✅	1s	2s	-50%
keccak_squeeze	✅	1s	2s	-50%
keccakf1600x4_xor_bytes	✅	1s	3s	-67%
make_hint	✅	1s	3s	-67%
mld_ct_sel_int32	✅	1s	3s	-67%
mld_sample_s1_s2	✅	1s	1s	+0%
mld_value_barrier_i64	✅	1s	3s	-67%
mld_value_barrier_u32	✅	1s	1s	+0%
mld_value_barrier_u8	✅	1s	4s	-75%
pack_sig_c	✅	1s	5s	-80%
pointwise_native_aarch64	✅	1s	2s	-50%
poly_caddq_c	✅	1s	3s	-67%
poly_caddq_native	✅	1s	3s	-67%
poly_caddq_native_aarch64	✅	1s	3s	-67%
poly_challenge	✅	1s	6s	-83%
poly_chknorm	✅	1s	3s	-67%
poly_chknorm_native_x86_64	✅	1s	2s	-50%
poly_decompose_native	✅	1s	2s	-50%
poly_invntt_tomont_native	✅	1s	3s	-67%
poly_ntt	✅	1s	3s	-67%
poly_permute_bitrev_to_custom_optional	✅	1s	5s	-80%
poly_pointwise_montgomery_native	✅	1s	2s	-50%
poly_shiftl	✅	1s	4s	-75%
poly_uniform	✅	1s	3s	-67%
poly_use_hint_native	✅	1s	3s	-67%
poly_use_hint_native_aarch64	✅	1s	3s	-67%
polyeta_pack	✅	1s	3s	-67%
polyt0_pack	✅	1s	4s	-75%
polyvec_matrix_expand	✅	1s	3s	-67%
polyveck_pack_eta	✅	1s	4s	-75%
polyw1_pack	✅	1s	4s	-75%
polyz_unpack	✅	1s	3s	-67%
shake128x4_absorb_once	✅	1s	2s	-50%
sign_signature_pre_hash_internal	✅	1s	4s	-75%
sk_s1hat_get_poly	✅	1s	2s	-50%
sys_check_capability	✅	1s	2s	-50%
unpack_sk	✅	1s	3s	-67%

[oqs-bot]

CBMC Results (ML-DSA-65, REDUCE-RAM)

⚠️ Attention Required

Proof	Status	Current	Previous	Change
compute_pack_t0_t1	⚠️	33s	7s	+371%
mld_attempt_signature_generation	⚠️	157s	31s	+406%
sign_keypair_internal	⚠️	26s	3s	+767%
sign_pk_from_sk	⚠️	54s	5s	+980%
sign_verify_internal	⚠️	172s	71s	+142%

Full Results (210 proofs)

Proof	Status	Current	Previous	Change
**TOTAL**	✅	1356s	1482s	-8.5%
sign_verify_internal	⚠️	172s	71s	+142%
mld_attempt_signature_generation	⚠️	157s	31s	+406%
polyvec_matrix_pointwise_montgomery_yvec	✅	149s	201s	-26%
poly_pointwise_montgomery_c	✅	66s	116s	-43%
mld_invntt_layer	✅	60s	108s	-44%
sign_pk_from_sk	⚠️	54s	5s	+980%
polyvecl_chknorm	✅	49s	43s	+14%
compute_pack_t0_t1	⚠️	33s	7s	+371%
sign_keypair_internal	⚠️	26s	3s	+767%
mld_ntt_layer	✅	23s	43s	-47%
fqmul	✅	22s	40s	-45%
mld_ntt_butterfly_block	✅	12s	25s	-52%
keccakf1600x4_permute_native	✅	11s	22s	-50%
rej_uniform_c	✅	11s	16s	-31%
sign_signature_internal	✅	11s	6s	+83%
poly_ntt_c	✅	10s	22s	-55%
sig_unpack_hints	✅	10s	1s	+900%
polyt0_unpack	✅	9s	13s	-31%
rej_uniform	✅	9s	7s	+29%
poly_invntt_tomont_c	✅	8s	10s	-20%
rej_uniform_native_x86_64	✅	8s	-	new
poly_uniform_eta_4x	✅	7s	13s	-46%
polyveck_decompose	✅	7s	14s	-50%
poly_chknorm_c	✅	6s	13s	-54%
poly_challenge	✅	5s	5s	+0%
poly_decompose	✅	5s	2s	+150%
poly_power2round	✅	5s	7s	-29%
polyeta_unpack	✅	5s	4s	+25%
polyvec_matrix_pointwise_montgomery_row	✅	5s	8s	-38%
polyveck_caddq	✅	5s	7s	-29%
polyw1_pack_88	✅	5s	3s	+67%
polyz_unpack_c	✅	5s	9s	-44%
sign_keypair	✅	5s	4s	+25%
sign_signature_pre_hash_shake256	✅	5s	7s	-29%
keccak_f1600_x1_native_aarch64_v84a	✅	4s	2s	+100%
keccak_init	✅	4s	4s	+0%
make_hint	✅	4s	3s	+33%
pointwise_acc_native_x86_64	✅	4s	5s	-20%
poly_add	✅	4s	7s	-43%
poly_decompose_88_native_aarch64	✅	4s	2s	+100%
poly_decompose_c	✅	4s	8s	-50%
poly_pointwise_montgomery	✅	4s	2s	+100%
poly_pointwise_montgomery_native	✅	4s	4s	+0%
poly_uniform	✅	4s	2s	+100%
poly_use_hint_native_aarch64	✅	4s	4s	+0%
polyveck_pack_eta	✅	4s	3s	+33%
polyvecl_ntt	✅	4s	7s	-43%
polyvecl_unpack_z	✅	4s	1s	+300%
sign_signature_extmu	✅	4s	4s	+0%
sign_signature_pre_hash_internal	✅	4s	3s	+33%
sign_verify_extmu	✅	4s	2s	+100%
sign_verify_pre_hash_shake256	✅	4s	6s	-33%
sk_t0hat_get_poly	✅	4s	1s	+300%
keccak_absorb_once_x4	✅	3s	10s	-70%
keccakf1600_xor_bytes	✅	3s	4s	-25%
keccakf1600x4_extract_bytes_native	✅	3s	1s	+200%
keccakf1600x4_xor_bytes	✅	3s	2s	+50%
mld_check_pct	✅	3s	12s	-75%
mld_compute_pack_z	✅	3s	5s	-40%
mld_h	✅	3s	3s	+0%
mld_keccakf1600_permute_c	✅	3s	7s	-57%
mld_keccakf1600x4_xor_bytes_c	✅	3s	2s	+50%
mld_sample_s1_s2_serial	✅	3s	3s	+0%
ntt_native_x86_64	✅	3s	5s	-40%
pack_sk_s1	✅	3s	3s	+0%
pointwise_acc_native_aarch64	✅	3s	6s	-50%
poly_caddq	✅	3s	3s	+0%
poly_caddq_native_x86_64	✅	3s	1s	+200%
poly_decompose_native	✅	3s	5s	-40%
poly_invntt_tomont	✅	3s	5s	-40%
poly_permute_bitrev_to_custom_optional_native	✅	3s	3s	+0%
poly_sub	✅	3s	4s	-25%
poly_use_hint_native	✅	3s	7s	-57%
polyeta_pack	✅	3s	1s	+200%
polyt1_unpack	✅	3s	3s	+0%
polyvec_matrix_expand	✅	3s	6s	-50%
polyveck_invntt_tomont	✅	3s	7s	-57%
polyveck_pack_w1	✅	3s	4s	-25%
polyveck_reduce	✅	3s	6s	-50%
polyveck_unpack_eta	✅	3s	3s	+0%
polyw1_pack	✅	3s	3s	+0%
polyz_unpack	✅	3s	3s	+0%
polyz_unpack_19_native_aarch64	✅	3s	5s	-40%
power2round	✅	3s	2s	+50%
rej_eta_native	✅	3s	3s	+0%
rej_uniform_eta_native_x86_64	✅	3s	-	new
shake128_release	✅	3s	2s	+50%
shake256_init	✅	3s	4s	-25%
shake256_squeeze	✅	3s	4s	-25%
sign_signature	✅	3s	5s	-40%
sign_verify_pre_hash_internal	✅	3s	5s	-40%
sk_s1hat_get_poly	✅	3s	3s	+0%
decompose	✅	2s	4s	-50%
intt_native_aarch64	✅	2s	2s	+0%
keccak_absorb	✅	2s	3s	-33%
keccak_f1600_x4_native_avx2	✅	2s	2s	+0%
keccak_squeeze	✅	2s	2s	+0%
keccakf1600_permute	✅	2s	4s	-50%
keccakf1600_permute_native	✅	2s	2s	+0%
keccakf1600_xor_bytes (big endian)	✅	2s	2s	+0%
keccakf1600x4_extract_bytes	✅	2s	4s	-50%
keccakf1600x4_permute	✅	2s	1s	+100%
keccakf1600x4_xor_bytes_native	✅	2s	2s	+0%
mld_ct_abs_i32	✅	2s	6s	-67%
mld_ct_cmask_nonzero_u32	✅	2s	3s	-33%
mld_ct_get_optblocker_i64	✅	2s	1s	+100%
mld_ct_get_optblocker_u32	✅	2s	3s	-33%
mld_ct_memcmp	✅	2s	4s	-50%
mld_ct_sel_int32	✅	2s	2s	+0%
mld_keccakf1600x4_extract_bytes_c	✅	2s	2s	+0%
mld_prepare_domain_separation_prefix	✅	2s	4s	-50%
mld_sample_s1_s2	✅	2s	6s	-67%
mld_sign_attempt	✅	2s	-	new
mld_sign_finish	✅	2s	-	new
mld_sign_resume	✅	2s	-	new
mld_value_barrier_u32	✅	2s	4s	-50%
montgomery_reduce	✅	2s	1s	+100%
pack_sig_c	✅	2s	3s	-33%
pack_sk_rho_key_tr_s2	✅	2s	2s	+0%
poly_caddq_c	✅	2s	5s	-60%
poly_chknorm	✅	2s	3s	-33%
poly_chknorm_native	✅	2s	4s	-50%
poly_decompose_native_x86_64	✅	2s	2s	+0%
poly_ntt	✅	2s	2s	+0%
poly_ntt_native	✅	2s	2s	+0%
poly_reduce	✅	2s	4s	-50%
poly_shiftl	✅	2s	3s	-33%
poly_uniform_4x	✅	2s	4s	-50%
poly_use_hint	✅	2s	3s	-33%
poly_use_hint_c	✅	2s	2s	+0%
poly_use_hint_native_x86_64	✅	2s	-	new
polyt0_pack	✅	2s	5s	-60%
polyt1_pack	✅	2s	3s	-33%
polyvec_matrix_expand_serial	✅	2s	3s	-33%
polyveck_ntt	✅	2s	4s	-50%
polyvecl_pointwise_acc_montgomery_native	✅	2s	3s	-33%
polyvecl_uniform_gamma1	✅	2s	4s	-50%
polyvecl_uniform_gamma1_serial	✅	2s	1s	+100%
polyvecl_unpack_eta	✅	2s	2s	+0%
polyw1_pack_32	✅	2s	2s	+0%
polyz_pack	✅	2s	3s	-33%
polyz_unpack_native	✅	2s	3s	-33%
polyz_unpack_native_x86_64	✅	2s	3s	-33%
reduce32	✅	2s	2s	+0%
rej_uniform_eta_native_aarch64	✅	2s	5s	-60%
rej_uniform_native	✅	2s	4s	-50%
shake128_squeeze	✅	2s	3s	-33%
shake256	✅	2s	2s	+0%
shake256_absorb	✅	2s	4s	-50%
sk_s2hat_get_poly	✅	2s	1s	+100%
unpack_sk	✅	2s	3s	-33%
unpack_sk_s1hat	✅	2s	1s	+100%
unpack_sk_s2hat	✅	2s	3s	-33%
unpack_sk_t0hat	✅	2s	4s	-50%
use_hint	✅	2s	2s	+0%
yvec_get_poly	✅	2s	3s	-33%
yvec_init	✅	2s	5s	-60%
caddq	✅	1s	2s	-50%
fqscale	✅	1s	3s	-67%
intt_native_x86_64	✅	1s	4s	-75%
keccak_f1600_x1_native_aarch64	✅	1s	2s	-50%
keccak_f1600_x4_native_aarch64_v84a	✅	1s	2s	-50%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid	✅	1s	3s	-67%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid	✅	1s	3s	-67%
keccak_finalize	✅	1s	2s	-50%
keccak_squeezeblocks_x4	✅	1s	4s	-75%
keccakf1600_extract_bytes (big endian)	✅	1s	3s	-67%
mld_ct_cmask_neg_i32	✅	1s	3s	-67%
mld_ct_cmask_nonzero_u8	✅	1s	2s	-50%
mld_ct_get_optblocker_u8	✅	1s	4s	-75%
mld_keccakf1600_extract_bytes	✅	1s	2s	-50%
mld_polymat_expand_entry	✅	1s	3s	-67%
mld_value_barrier_i64	✅	1s	2s	-50%
mld_value_barrier_u8	✅	1s	1s	+0%
ntt_native_aarch64	✅	1s	3s	-67%
nttunpack_native_x86_64	✅	1s	3s	-67%
pack_sig_h	✅	1s	2s	-50%
pack_sig_z	✅	1s	1s	+0%
pointwise_native_aarch64	✅	1s	3s	-67%
pointwise_native_x86_64	✅	1s	2s	-50%
poly_caddq_native	✅	1s	4s	-75%
poly_caddq_native_aarch64	✅	1s	2s	-50%
poly_chknorm_native_aarch64	✅	1s	2s	-50%
poly_chknorm_native_x86_64	✅	1s	4s	-75%
poly_decompose_32_native_aarch64	✅	1s	4s	-75%
poly_invntt_tomont_native	✅	1s	5s	-80%
poly_permute_bitrev_to_custom_optional	✅	1s	3s	-67%
poly_uniform_eta	✅	1s	5s	-80%
poly_uniform_gamma1	✅	1s	3s	-67%
poly_uniform_gamma1_4x	✅	1s	3s	-67%
polyveck_chknorm	✅	1s	36s	-97%
polyvecl_pack_eta	✅	1s	2s	-50%
polyvecl_pointwise_acc_montgomery	✅	1s	3s	-67%
polyvecl_pointwise_acc_montgomery_c	✅	1s	3s	-67%
polyz_unpack_17_native_aarch64	✅	1s	2s	-50%
rej_eta	✅	1s	5s	-80%
rej_eta_c	✅	1s	4s	-75%
rej_uniform_native_aarch64	✅	1s	5s	-80%
shake128_absorb	✅	1s	2s	-50%
shake128_finalize	✅	1s	2s	-50%
shake128_init	✅	1s	6s	-83%
shake128x4_absorb_once	✅	1s	2s	-50%
shake128x4_squeezeblocks	✅	1s	2s	-50%
shake256_finalize	✅	1s	1s	+0%
shake256_release	✅	1s	3s	-67%
shake256x4_absorb_once	✅	1s	2s	-50%
shake256x4_squeezeblocks	✅	1s	2s	-50%
sign_verify	✅	1s	6s	-83%
sys_check_capability	✅	1s	1s	+0%
unpack_pk_t1	✅	1s	2s	-50%

[oqs-bot]

CBMC Results (ML-DSA-44)

⚠️ Attention Required

Proof	Status	Current	Previous	Change
compute_pack_t0_t1	⚠️	101s	50s	+102%
mld_attempt_signature_generation	⚠️	299s	58s	+416%
sig_unpack_hints	⚠️	21s	2s	+950%
sign_keypair_internal	⚠️	21s	4s	+425%
sign_pk_from_sk	⚠️	36s	5s	+620%
sign_signature_internal	⚠️	94s	26s	+262%
sign_verify_internal	⚠️	285s	114s	+150%

Full Results (210 proofs)

Proof	Status	Current	Previous	Change
**TOTAL**	✅	1826s	1514s	+20.6%
mld_attempt_signature_generation	⚠️	299s	58s	+416%
sign_verify_internal	⚠️	285s	114s	+150%
polyvecl_pointwise_acc_montgomery_c	✅	149s	131s	+14%
poly_pointwise_montgomery_c	✅	143s	114s	+25%
compute_pack_t0_t1	⚠️	101s	50s	+102%
sign_signature_internal	⚠️	94s	26s	+262%
mld_invntt_layer	✅	60s	107s	-44%
sign_pk_from_sk	⚠️	36s	5s	+620%
fqmul	✅	22s	39s	-44%
mld_ntt_layer	✅	22s	42s	-48%
sig_unpack_hints	⚠️	21s	2s	+950%
sign_keypair_internal	⚠️	21s	4s	+425%
polyvec_matrix_expand	✅	15s	28s	-46%
keccakf1600x4_permute_native	✅	13s	22s	-41%
mld_ntt_butterfly_block	✅	11s	23s	-52%
poly_ntt_c	✅	10s	19s	-47%
rej_uniform	✅	9s	18s	-50%
poly_uniform_eta_4x	✅	8s	11s	-27%
polyt0_unpack	✅	8s	15s	-47%
polyvec_matrix_pointwise_montgomery_yvec	✅	8s	15s	-47%
rej_uniform_native_x86_64	✅	8s	-	new
poly_chknorm_c	✅	7s	17s	-59%
poly_power2round	✅	7s	4s	+75%
poly_uniform_4x	✅	7s	14s	-50%
rej_uniform_c	✅	7s	15s	-53%
sign_verify_pre_hash_shake256	✅	7s	5s	+40%
pointwise_acc_native_aarch64	✅	6s	4s	+50%
polyeta_unpack	✅	6s	14s	-57%
polyz_unpack_c	✅	6s	11s	-45%
sign_keypair	✅	6s	4s	+50%
decompose	✅	5s	2s	+150%
keccak_absorb_once_x4	✅	5s	9s	-44%
poly_chknorm_native_x86_64	✅	5s	2s	+150%
poly_invntt_tomont_c	✅	5s	11s	-55%
sign_signature_pre_hash_shake256	✅	5s	3s	+67%
mld_check_pct	✅	4s	14s	-71%
mld_compute_pack_z	✅	4s	7s	-43%
mld_sample_s1_s2_serial	✅	4s	3s	+33%
mld_sign_attempt	✅	4s	-	new
mld_value_barrier_i64	✅	4s	2s	+100%
ntt_native_x86_64	✅	4s	3s	+33%
polyvec_matrix_expand_serial	✅	4s	8s	-50%
polyveck_ntt	✅	4s	5s	-20%
polyvecl_ntt	✅	4s	2s	+100%
polyz_unpack_19_native_aarch64	✅	4s	5s	-20%
rej_uniform_eta_native_aarch64	✅	4s	2s	+100%
shake128_squeeze	✅	4s	1s	+300%
sign_signature	✅	4s	3s	+33%
sign_signature_pre_hash_internal	✅	4s	6s	-33%
sk_s1hat_get_poly	✅	4s	3s	+33%
sk_t0hat_get_poly	✅	4s	2s	+100%
unpack_sk_s1hat	✅	4s	1s	+300%
caddq	✅	3s	2s	+50%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid	✅	3s	3s	+0%
keccak_squeezeblocks_x4	✅	3s	4s	-25%
keccakf1600_extract_bytes (big endian)	✅	3s	2s	+50%
keccakf1600_xor_bytes (big endian)	✅	3s	4s	-25%
mld_ct_get_optblocker_i64	✅	3s	4s	-25%
mld_ct_get_optblocker_u8	✅	3s	1s	+200%
mld_ct_memcmp	✅	3s	3s	+0%
mld_ct_sel_int32	✅	3s	2s	+50%
mld_keccakf1600_permute_c	✅	3s	8s	-62%
mld_keccakf1600x4_xor_bytes_c	✅	3s	2s	+50%
mld_polymat_expand_entry	✅	3s	3s	+0%
mld_sign_resume	✅	3s	-	new
montgomery_reduce	✅	3s	3s	+0%
pack_sig_c	✅	3s	2s	+50%
pack_sig_h	✅	3s	3s	+0%
pack_sk_rho_key_tr_s2	✅	3s	3s	+0%
pack_sk_s1	✅	3s	2s	+50%
pointwise_acc_native_x86_64	✅	3s	7s	-57%
pointwise_native_aarch64	✅	3s	5s	-40%
poly_add	✅	3s	7s	-57%
poly_caddq	✅	3s	2s	+50%
poly_chknorm_native	✅	3s	4s	-25%
poly_decompose_native_x86_64	✅	3s	3s	+0%
poly_invntt_tomont	✅	3s	4s	-25%
poly_permute_bitrev_to_custom_optional_native	✅	3s	4s	-25%
poly_pointwise_montgomery	✅	3s	3s	+0%
poly_reduce	✅	3s	3s	+0%
poly_uniform	✅	3s	6s	-50%
poly_use_hint_native_aarch64	✅	3s	2s	+50%
polyt1_pack	✅	3s	4s	-25%
polyveck_caddq	✅	3s	3s	+0%
polyveck_chknorm	✅	3s	5s	-40%
polyveck_pack_eta	✅	3s	2s	+50%
polyveck_unpack_eta	✅	3s	2s	+50%
polyw1_pack	✅	3s	3s	+0%
polyw1_pack_88	✅	3s	1s	+200%
rej_eta_c	✅	3s	4s	-25%
rej_eta_native	✅	3s	6s	-50%
rej_uniform_eta_native_x86_64	✅	3s	-	new
rej_uniform_native	✅	3s	4s	-25%
shake256_absorb	✅	3s	3s	+0%
shake256x4_absorb_once	✅	3s	3s	+0%
shake256x4_squeezeblocks	✅	3s	4s	-25%
sign_verify_extmu	✅	3s	3s	+0%
sys_check_capability	✅	3s	4s	-25%
unpack_pk_t1	✅	3s	5s	-40%
unpack_sk	✅	3s	3s	+0%
unpack_sk_s2hat	✅	3s	4s	-25%
yvec_init	✅	3s	3s	+0%
fqscale	✅	2s	3s	-33%
intt_native_x86_64	✅	2s	4s	-50%
keccak_absorb	✅	2s	5s	-60%
keccak_f1600_x4_native_aarch64_v84a	✅	2s	2s	+0%
keccak_f1600_x4_native_avx2	✅	2s	3s	-33%
keccak_finalize	✅	2s	3s	-33%
keccak_init	✅	2s	3s	-33%
keccakf1600_permute	✅	2s	2s	+0%
keccakf1600_permute_native	✅	2s	3s	-33%
keccakf1600_xor_bytes	✅	2s	1s	+100%
keccakf1600x4_extract_bytes	✅	2s	2s	+0%
keccakf1600x4_extract_bytes_native	✅	2s	3s	-33%
keccakf1600x4_xor_bytes_native	✅	2s	3s	-33%
make_hint	✅	2s	3s	-33%
mld_ct_abs_i32	✅	2s	2s	+0%
mld_ct_cmask_neg_i32	✅	2s	3s	-33%
mld_ct_cmask_nonzero_u32	✅	2s	2s	+0%
mld_ct_cmask_nonzero_u8	✅	2s	2s	+0%
mld_ct_get_optblocker_u32	✅	2s	1s	+100%
mld_keccakf1600x4_extract_bytes_c	✅	2s	2s	+0%
ntt_native_aarch64	✅	2s	3s	-33%
poly_caddq_c	✅	2s	2s	+0%
poly_caddq_native_aarch64	✅	2s	4s	-50%
poly_challenge	✅	2s	3s	-33%
poly_chknorm_native_aarch64	✅	2s	4s	-50%
poly_decompose_32_native_aarch64	✅	2s	2s	+0%
poly_decompose_88_native_aarch64	✅	2s	4s	-50%
poly_decompose_c	✅	2s	4s	-50%
poly_decompose_native	✅	2s	3s	-33%
poly_invntt_tomont_native	✅	2s	4s	-50%
poly_ntt	✅	2s	3s	-33%
poly_ntt_native	✅	2s	5s	-60%
poly_permute_bitrev_to_custom_optional	✅	2s	2s	+0%
poly_pointwise_montgomery_native	✅	2s	2s	+0%
poly_shiftl	✅	2s	3s	-33%
poly_uniform_eta	✅	2s	5s	-60%
poly_uniform_gamma1_4x	✅	2s	5s	-60%
poly_use_hint	✅	2s	4s	-50%
poly_use_hint_c	✅	2s	3s	-33%
poly_use_hint_native	✅	2s	4s	-50%
poly_use_hint_native_x86_64	✅	2s	-	new
polyeta_pack	✅	2s	3s	-33%
polyt1_unpack	✅	2s	5s	-60%
polyvec_matrix_pointwise_montgomery_row	✅	2s	2s	+0%
polyveck_decompose	✅	2s	4s	-50%
polyveck_invntt_tomont	✅	2s	5s	-60%
polyveck_reduce	✅	2s	5s	-60%
polyvecl_chknorm	✅	2s	10s	-80%
polyvecl_pointwise_acc_montgomery	✅	2s	4s	-50%
polyvecl_pointwise_acc_montgomery_native	✅	2s	2s	+0%
polyvecl_uniform_gamma1	✅	2s	3s	-33%
polyvecl_uniform_gamma1_serial	✅	2s	2s	+0%
polyvecl_unpack_eta	✅	2s	2s	+0%
polyw1_pack_32	✅	2s	2s	+0%
polyz_pack	✅	2s	2s	+0%
polyz_unpack_17_native_aarch64	✅	2s	5s	-60%
polyz_unpack_native	✅	2s	2s	+0%
reduce32	✅	2s	2s	+0%
rej_uniform_native_aarch64	✅	2s	5s	-60%
shake128_absorb	✅	2s	2s	+0%
shake128_finalize	✅	2s	2s	+0%
shake128_init	✅	2s	3s	-33%
shake128_release	✅	2s	1s	+100%
shake128x4_absorb_once	✅	2s	3s	-33%
shake256_finalize	✅	2s	2s	+0%
shake256_release	✅	2s	2s	+0%
sign_signature_extmu	✅	2s	4s	-50%
sign_verify	✅	2s	4s	-50%
sign_verify_pre_hash_internal	✅	2s	3s	-33%
sk_s2hat_get_poly	✅	2s	2s	+0%
unpack_sk_t0hat	✅	2s	3s	-33%
use_hint	✅	2s	2s	+0%
yvec_get_poly	✅	2s	3s	-33%
intt_native_aarch64	✅	1s	9s	-89%
keccak_f1600_x1_native_aarch64	✅	1s	2s	-50%
keccak_f1600_x1_native_aarch64_v84a	✅	1s	3s	-67%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid	✅	1s	1s	+0%
keccak_squeeze	✅	1s	1s	+0%
keccakf1600x4_permute	✅	1s	4s	-75%
keccakf1600x4_xor_bytes	✅	1s	2s	-50%
mld_h	✅	1s	4s	-75%
mld_keccakf1600_extract_bytes	✅	1s	2s	-50%
mld_prepare_domain_separation_prefix	✅	1s	4s	-75%
mld_sample_s1_s2	✅	1s	4s	-75%
mld_sign_finish	✅	1s	-	new
mld_value_barrier_u32	✅	1s	2s	-50%
mld_value_barrier_u8	✅	1s	3s	-67%
nttunpack_native_x86_64	✅	1s	1s	+0%
pack_sig_z	✅	1s	4s	-75%
pointwise_native_x86_64	✅	1s	4s	-75%
poly_caddq_native	✅	1s	5s	-80%
poly_caddq_native_x86_64	✅	1s	4s	-75%
poly_chknorm	✅	1s	4s	-75%
poly_decompose	✅	1s	3s	-67%
poly_sub	✅	1s	3s	-67%
poly_uniform_gamma1	✅	1s	4s	-75%
polyt0_pack	✅	1s	2s	-50%
polyveck_pack_w1	✅	1s	1s	+0%
polyvecl_pack_eta	✅	1s	3s	-67%
polyvecl_unpack_z	✅	1s	2s	-50%
polyz_unpack	✅	1s	3s	-67%
polyz_unpack_native_x86_64	✅	1s	3s	-67%
power2round	✅	1s	3s	-67%
rej_eta	✅	1s	3s	-67%
shake128x4_squeezeblocks	✅	1s	1s	+0%
shake256	✅	1s	1s	+0%
shake256_init	✅	1s	3s	-67%
shake256_squeeze	✅	1s	2s	-50%

[oqs-bot]

CBMC Results (ML-DSA-87, REDUCE-RAM)

⚠️ Attention Required

Proof	Status	Current	Previous	Change
**TOTAL**	⚠️	1833s	1436s	+27.6%
compute_pack_t0_t1	⚠️	34s	12s	+183%
mld_attempt_signature_generation	⚠️	275s	34s	+709%
sign_keypair_internal	⚠️	50s	6s	+733%
sign_pk_from_sk	⚠️	69s	6s	+1050%
sign_verify_internal	⚠️	372s	47s	+691%

Full Results (210 proofs)

Proof	Status	Current	Previous	Change
**TOTAL**	⚠️	1833s	1436s	+27.6%
sign_verify_internal	⚠️	372s	47s	+691%
mld_attempt_signature_generation	⚠️	275s	34s	+709%
polyvec_matrix_pointwise_montgomery_yvec	✅	225s	196s	+15%
poly_pointwise_montgomery_c	✅	75s	125s	-40%
sign_pk_from_sk	⚠️	69s	6s	+1050%
mld_invntt_layer	✅	66s	111s	-41%
sign_keypair_internal	⚠️	50s	6s	+733%
compute_pack_t0_t1	⚠️	34s	12s	+183%
mld_ntt_layer	✅	27s	44s	-39%
fqmul	✅	24s	39s	-38%
sign_signature_internal	✅	17s	3s	+467%
mld_ntt_butterfly_block	✅	14s	23s	-39%
rej_uniform_c	✅	14s	18s	-22%
sig_unpack_hints	✅	14s	4s	+250%
polyt0_unpack	✅	12s	14s	-14%
keccakf1600x4_permute_native	✅	11s	25s	-56%
poly_ntt_c	✅	10s	19s	-47%
polyveck_decompose	✅	10s	12s	-17%
rej_uniform	✅	10s	7s	+43%
rej_uniform_native_x86_64	✅	10s	-	new
polyeta_unpack	✅	9s	13s	-31%
poly_chknorm_c	✅	8s	13s	-38%
poly_uniform_eta_4x	✅	8s	12s	-33%
sign_keypair	✅	7s	4s	+75%
poly_invntt_tomont_c	✅	6s	9s	-33%
polyvec_matrix_pointwise_montgomery_row	✅	6s	13s	-54%
polyveck_invntt_tomont	✅	6s	4s	+50%
polyvecl_ntt	✅	6s	8s	-25%
mld_check_pct	✅	5s	15s	-67%
poly_decompose_c	✅	5s	6s	-17%
polyvec_matrix_expand	✅	5s	3s	+67%
polyveck_caddq	✅	5s	8s	-38%
polyvecl_chknorm	✅	5s	38s	-87%
rej_uniform_native	✅	5s	5s	+0%
shake256x4_squeezeblocks	✅	5s	4s	+25%
sign_signature_extmu	✅	5s	4s	+25%
sign_signature_pre_hash_internal	✅	5s	2s	+150%
sign_signature_pre_hash_shake256	✅	5s	3s	+67%
sign_verify_pre_hash_internal	✅	5s	3s	+67%
unpack_pk_t1	✅	5s	2s	+150%
keccak_absorb_once_x4	✅	4s	8s	-50%
keccak_finalize	✅	4s	1s	+300%
keccak_squeezeblocks_x4	✅	4s	4s	+0%
mld_compute_pack_z	✅	4s	6s	-33%
mld_sample_s1_s2_serial	✅	4s	6s	-33%
pointwise_acc_native_aarch64	✅	4s	5s	-20%
poly_caddq_native	✅	4s	3s	+33%
poly_chknorm	✅	4s	4s	+0%
poly_chknorm_native	✅	4s	1s	+300%
poly_pointwise_montgomery	✅	4s	3s	+33%
poly_power2round	✅	4s	7s	-43%
poly_shiftl	✅	4s	4s	+0%
polyveck_reduce	✅	4s	6s	-33%
polyz_unpack_c	✅	4s	7s	-43%
sign_signature	✅	4s	4s	+0%
sign_verify	✅	4s	2s	+100%
sign_verify_pre_hash_shake256	✅	4s	7s	-43%
unpack_sk	✅	4s	4s	+0%
intt_native_aarch64	✅	3s	4s	-25%
keccak_absorb	✅	3s	4s	-25%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid	✅	3s	2s	+50%
keccakf1600x4_xor_bytes_native	✅	3s	2s	+50%
mld_keccakf1600_permute_c	✅	3s	8s	-62%
mld_keccakf1600x4_extract_bytes_c	✅	3s	3s	+0%
mld_polymat_expand_entry	✅	3s	4s	-25%
mld_prepare_domain_separation_prefix	✅	3s	3s	+0%
mld_sample_s1_s2	✅	3s	8s	-62%
mld_sign_finish	✅	3s	-	new
mld_sign_resume	✅	3s	-	new
mld_value_barrier_u32	✅	3s	3s	+0%
montgomery_reduce	✅	3s	2s	+50%
pack_sk_s1	✅	3s	2s	+50%
pointwise_acc_native_x86_64	✅	3s	8s	-62%
poly_add	✅	3s	8s	-62%
poly_caddq_native_aarch64	✅	3s	3s	+0%
poly_caddq_native_x86_64	✅	3s	3s	+0%
poly_challenge	✅	3s	4s	-25%
poly_chknorm_native_aarch64	✅	3s	5s	-40%
poly_decompose	✅	3s	2s	+50%
poly_decompose_88_native_aarch64	✅	3s	2s	+50%
poly_invntt_tomont	✅	3s	4s	-25%
poly_invntt_tomont_native	✅	3s	2s	+50%
poly_permute_bitrev_to_custom_optional_native	✅	3s	3s	+0%
poly_uniform_gamma1	✅	3s	3s	+0%
poly_use_hint_native_x86_64	✅	3s	-	new
polyeta_pack	✅	3s	3s	+0%
polyt0_pack	✅	3s	3s	+0%
polyvec_matrix_expand_serial	✅	3s	3s	+0%
polyveck_chknorm	✅	3s	9s	-67%
polyvecl_unpack_eta	✅	3s	3s	+0%
polyvecl_unpack_z	✅	3s	3s	+0%
polyz_unpack_17_native_aarch64	✅	3s	4s	-25%
polyz_unpack_19_native_aarch64	✅	3s	5s	-40%
power2round	✅	3s	3s	+0%
reduce32	✅	3s	3s	+0%
rej_uniform_native_aarch64	✅	3s	3s	+0%
shake256_absorb	✅	3s	3s	+0%
shake256x4_absorb_once	✅	3s	5s	-40%
sk_t0hat_get_poly	✅	3s	3s	+0%
sys_check_capability	✅	3s	2s	+50%
unpack_sk_s1hat	✅	3s	3s	+0%
use_hint	✅	3s	3s	+0%
yvec_init	✅	3s	4s	-25%
caddq	✅	2s	3s	-33%
decompose	✅	2s	2s	+0%
fqscale	✅	2s	1s	+100%
intt_native_x86_64	✅	2s	4s	-50%
keccak_f1600_x1_native_aarch64_v84a	✅	2s	2s	+0%
keccak_f1600_x4_native_aarch64_v84a	✅	2s	1s	+100%
keccak_f1600_x4_native_avx2	✅	2s	3s	-33%
keccak_squeeze	✅	2s	5s	-60%
keccakf1600_extract_bytes (big endian)	✅	2s	3s	-33%
keccakf1600_permute	✅	2s	2s	+0%
keccakf1600_permute_native	✅	2s	3s	-33%
keccakf1600_xor_bytes (big endian)	✅	2s	2s	+0%
keccakf1600x4_extract_bytes_native	✅	2s	4s	-50%
keccakf1600x4_xor_bytes	✅	2s	1s	+100%
make_hint	✅	2s	2s	+0%
mld_ct_cmask_neg_i32	✅	2s	2s	+0%
mld_ct_get_optblocker_u32	✅	2s	2s	+0%
mld_ct_get_optblocker_u8	✅	2s	3s	-33%
mld_ct_memcmp	✅	2s	1s	+100%
mld_h	✅	2s	2s	+0%
mld_keccakf1600_extract_bytes	✅	2s	1s	+100%
mld_keccakf1600x4_xor_bytes_c	✅	2s	1s	+100%
mld_sign_attempt	✅	2s	-	new
pack_sig_h	✅	2s	3s	-33%
pack_sig_z	✅	2s	3s	-33%
pointwise_native_aarch64	✅	2s	4s	-50%
pointwise_native_x86_64	✅	2s	5s	-60%
poly_caddq	✅	2s	5s	-60%
poly_caddq_c	✅	2s	3s	-33%
poly_decompose_native_x86_64	✅	2s	3s	-33%
poly_ntt_native	✅	2s	4s	-50%
poly_permute_bitrev_to_custom_optional	✅	2s	2s	+0%
poly_pointwise_montgomery_native	✅	2s	3s	-33%
poly_reduce	✅	2s	4s	-50%
poly_sub	✅	2s	5s	-60%
poly_uniform	✅	2s	4s	-50%
poly_uniform_eta	✅	2s	5s	-60%
poly_uniform_gamma1_4x	✅	2s	3s	-33%
poly_use_hint	✅	2s	4s	-50%
poly_use_hint_c	✅	2s	4s	-50%
poly_use_hint_native_aarch64	✅	2s	3s	-33%
polyt1_pack	✅	2s	5s	-60%
polyveck_ntt	✅	2s	3s	-33%
polyveck_pack_eta	✅	2s	5s	-60%
polyvecl_pointwise_acc_montgomery	✅	2s	2s	+0%
polyvecl_pointwise_acc_montgomery_native	✅	2s	2s	+0%
polyvecl_uniform_gamma1	✅	2s	3s	-33%
polyvecl_uniform_gamma1_serial	✅	2s	2s	+0%
polyw1_pack_88	✅	2s	2s	+0%
polyz_pack	✅	2s	4s	-50%
polyz_unpack	✅	2s	3s	-33%
rej_eta	✅	2s	2s	+0%
rej_eta_c	✅	2s	4s	-50%
rej_eta_native	✅	2s	4s	-50%
shake128_absorb	✅	2s	2s	+0%
shake128_init	✅	2s	2s	+0%
shake128_release	✅	2s	3s	-33%
shake128x4_squeezeblocks	✅	2s	1s	+100%
shake256	✅	2s	3s	-33%
shake256_release	✅	2s	5s	-60%
shake256_squeeze	✅	2s	2s	+0%
sk_s1hat_get_poly	✅	2s	3s	-33%
sk_s2hat_get_poly	✅	2s	2s	+0%
unpack_sk_s2hat	✅	2s	3s	-33%
keccak_f1600_x1_native_aarch64	✅	1s	2s	-50%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid	✅	1s	2s	-50%
keccak_init	✅	1s	1s	+0%
keccakf1600_xor_bytes	✅	1s	1s	+0%
keccakf1600x4_extract_bytes	✅	1s	1s	+0%
keccakf1600x4_permute	✅	1s	2s	-50%
mld_ct_abs_i32	✅	1s	1s	+0%
mld_ct_cmask_nonzero_u32	✅	1s	5s	-80%
mld_ct_cmask_nonzero_u8	✅	1s	2s	-50%
mld_ct_get_optblocker_i64	✅	1s	2s	-50%
mld_ct_sel_int32	✅	1s	2s	-50%
mld_value_barrier_i64	✅	1s	2s	-50%
mld_value_barrier_u8	✅	1s	2s	-50%
ntt_native_aarch64	✅	1s	4s	-75%
ntt_native_x86_64	✅	1s	2s	-50%
nttunpack_native_x86_64	✅	1s	3s	-67%
pack_sig_c	✅	1s	2s	-50%
pack_sk_rho_key_tr_s2	✅	1s	2s	-50%
poly_chknorm_native_x86_64	✅	1s	2s	-50%
poly_decompose_32_native_aarch64	✅	1s	3s	-67%
poly_decompose_native	✅	1s	2s	-50%
poly_ntt	✅	1s	2s	-50%
poly_uniform_4x	✅	1s	3s	-67%
poly_use_hint_native	✅	1s	1s	+0%
polyt1_unpack	✅	1s	3s	-67%
polyveck_pack_w1	✅	1s	3s	-67%
polyveck_unpack_eta	✅	1s	3s	-67%
polyvecl_pack_eta	✅	1s	2s	-50%
polyvecl_pointwise_acc_montgomery_c	✅	1s	2s	-50%
polyw1_pack	✅	1s	2s	-50%
polyw1_pack_32	✅	1s	3s	-67%
polyz_unpack_native	✅	1s	1s	+0%
polyz_unpack_native_x86_64	✅	1s	3s	-67%
rej_uniform_eta_native_aarch64	✅	1s	3s	-67%
rej_uniform_eta_native_x86_64	✅	1s	-	new
shake128_finalize	✅	1s	2s	-50%
shake128_squeeze	✅	1s	1s	+0%
shake128x4_absorb_once	✅	1s	4s	-75%
shake256_finalize	✅	1s	3s	-67%
shake256_init	✅	1s	3s	-67%
sign_verify_extmu	✅	1s	4s	-75%
unpack_sk_t0hat	✅	1s	4s	-75%
yvec_get_poly	✅	1s	2s	-50%

[oqs-bot]

CBMC Results (ML-DSA-65)

⚠️ Attention Required

Proof	Status	Current	Previous	Change
compute_pack_t0_t1	⚠️	127s	13s	+877%
mld_attempt_signature_generation	⚠️	250s	63s	+297%
sig_unpack_hints	⚠️	30s	2s	+1400%
sign_keypair_internal	⚠️	23s	5s	+360%
sign_pk_from_sk	⚠️	43s	6s	+617%
sign_signature_internal	⚠️	192s	55s	+249%
sign_verify_internal	⚠️	387s	177s	+119%

Full Results (210 proofs)

Proof	Status	Current	Previous	Change
**TOTAL**	✅	2142s	1784s	+20.1%
sign_verify_internal	⚠️	387s	177s	+119%
mld_attempt_signature_generation	⚠️	250s	63s	+297%
sign_signature_internal	⚠️	192s	55s	+249%
polyvecl_pointwise_acc_montgomery_c	✅	173s	210s	-18%
poly_pointwise_montgomery_c	✅	141s	125s	+13%
compute_pack_t0_t1	⚠️	127s	13s	+877%
polyvec_matrix_expand	✅	74s	110s	-33%
mld_invntt_layer	✅	60s	109s	-45%
sign_pk_from_sk	⚠️	43s	6s	+617%
sig_unpack_hints	⚠️	30s	2s	+1400%
fqmul	✅	27s	40s	-32%
mld_ntt_layer	✅	24s	41s	-41%
sign_keypair_internal	⚠️	23s	5s	+360%
polyvec_matrix_expand_serial	✅	18s	27s	-33%
polyveck_ntt	✅	16s	7s	+129%
keccakf1600x4_permute_native	✅	14s	23s	-39%
mld_ntt_butterfly_block	✅	12s	24s	-50%
poly_ntt_c	✅	12s	19s	-37%
polyveck_decompose	✅	11s	12s	-8%
poly_chknorm_c	✅	10s	15s	-33%
rej_uniform_c	✅	10s	14s	-29%
rej_uniform	✅	9s	18s	-50%
poly_uniform_eta_4x	✅	8s	14s	-43%
polyt0_unpack	✅	8s	16s	-50%
rej_uniform_native_x86_64	✅	8s	-	new
poly_uniform_4x	✅	7s	13s	-46%
polyvec_matrix_pointwise_montgomery_yvec	✅	7s	18s	-61%
sign_keypair	✅	7s	3s	+133%
poly_decompose_c	✅	6s	5s	+20%
polyveck_chknorm	✅	6s	6s	+0%
sign_signature_pre_hash_shake256	✅	6s	3s	+100%
keccak_absorb_once_x4	✅	5s	8s	-38%
pointwise_acc_native_aarch64	✅	5s	6s	-17%
poly_add	✅	5s	9s	-44%
poly_invntt_tomont_c	✅	5s	11s	-55%
poly_power2round	✅	5s	4s	+25%
poly_use_hint_c	✅	5s	5s	+0%
polyvecl_ntt	✅	5s	4s	+25%
rej_eta_c	✅	5s	5s	+0%
sign_signature_pre_hash_internal	✅	5s	3s	+67%
keccak_absorb	✅	4s	3s	+33%
keccak_squeezeblocks_x4	✅	4s	5s	-20%
mld_check_pct	✅	4s	14s	-71%
mld_compute_pack_z	✅	4s	7s	-43%
mld_keccakf1600_permute_c	✅	4s	6s	-33%
mld_keccakf1600x4_xor_bytes_c	✅	4s	2s	+100%
mld_value_barrier_u8	✅	4s	3s	+33%
pointwise_acc_native_x86_64	✅	4s	8s	-50%
poly_chknorm_native	✅	4s	2s	+100%
poly_chknorm_native_aarch64	✅	4s	3s	+33%
poly_uniform	✅	4s	4s	+0%
poly_use_hint_native	✅	4s	2s	+100%
polyt0_pack	✅	4s	3s	+33%
polyt1_pack	✅	4s	3s	+33%
polyt1_unpack	✅	4s	5s	-20%
polyvec_matrix_pointwise_montgomery_row	✅	4s	1s	+300%
polyveck_invntt_tomont	✅	4s	8s	-50%
polyw1_pack_32	✅	4s	4s	+0%
rej_uniform_native	✅	4s	4s	+0%
sign_verify	✅	4s	3s	+33%
unpack_sk_s1hat	✅	4s	2s	+100%
decompose	✅	3s	1s	+200%
fqscale	✅	3s	3s	+0%
intt_native_aarch64	✅	3s	3s	+0%
keccak_f1600_x1_native_aarch64	✅	3s	2s	+50%
mld_polymat_expand_entry	✅	3s	4s	-25%
mld_sample_s1_s2_serial	✅	3s	4s	-25%
mld_value_barrier_i64	✅	3s	2s	+50%
ntt_native_x86_64	✅	3s	2s	+50%
pack_sig_c	✅	3s	5s	-40%
pack_sk_rho_key_tr_s2	✅	3s	2s	+50%
poly_challenge	✅	3s	6s	-50%
poly_chknorm_native_x86_64	✅	3s	3s	+0%
poly_decompose_32_native_aarch64	✅	3s	3s	+0%
poly_invntt_tomont_native	✅	3s	2s	+50%
poly_pointwise_montgomery_native	✅	3s	3s	+0%
poly_shiftl	✅	3s	3s	+0%
poly_uniform_eta	✅	3s	4s	-25%
polyeta_pack	✅	3s	3s	+0%
polyveck_caddq	✅	3s	6s	-50%
polyveck_pack_w1	✅	3s	3s	+0%
polyvecl_chknorm	✅	3s	7s	-57%
polyvecl_pointwise_acc_montgomery_native	✅	3s	2s	+50%
polyvecl_unpack_z	✅	3s	3s	+0%
polyw1_pack_88	✅	3s	2s	+50%
polyz_pack	✅	3s	3s	+0%
polyz_unpack_17_native_aarch64	✅	3s	3s	+0%
polyz_unpack_19_native_aarch64	✅	3s	3s	+0%
polyz_unpack_c	✅	3s	13s	-77%
power2round	✅	3s	1s	+200%
rej_eta	✅	3s	2s	+50%
rej_eta_native	✅	3s	3s	+0%
shake128_absorb	✅	3s	2s	+50%
shake128x4_absorb_once	✅	3s	3s	+0%
shake128x4_squeezeblocks	✅	3s	3s	+0%
shake256	✅	3s	2s	+50%
shake256_absorb	✅	3s	2s	+50%
sign_signature_extmu	✅	3s	2s	+50%
sk_t0hat_get_poly	✅	3s	2s	+50%
unpack_pk_t1	✅	3s	5s	-40%
unpack_sk	✅	3s	3s	+0%
unpack_sk_t0hat	✅	3s	5s	-40%
yvec_get_poly	✅	3s	3s	+0%
caddq	✅	2s	3s	-33%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid	✅	2s	2s	+0%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid	✅	2s	2s	+0%
keccak_f1600_x4_native_avx2	✅	2s	2s	+0%
keccakf1600_xor_bytes	✅	2s	2s	+0%
keccakf1600_xor_bytes (big endian)	✅	2s	2s	+0%
keccakf1600x4_extract_bytes	✅	2s	4s	-50%
keccakf1600x4_extract_bytes_native	✅	2s	4s	-50%
keccakf1600x4_permute	✅	2s	4s	-50%
keccakf1600x4_xor_bytes	✅	2s	1s	+100%
make_hint	✅	2s	2s	+0%
mld_ct_get_optblocker_u8	✅	2s	2s	+0%
mld_ct_memcmp	✅	2s	2s	+0%
mld_ct_sel_int32	✅	2s	3s	-33%
mld_h	✅	2s	2s	+0%
mld_keccakf1600x4_extract_bytes_c	✅	2s	3s	-33%
mld_sample_s1_s2	✅	2s	6s	-67%
mld_sign_attempt	✅	2s	-	new
mld_value_barrier_u32	✅	2s	3s	-33%
nttunpack_native_x86_64	✅	2s	3s	-33%
pack_sig_z	✅	2s	2s	+0%
pack_sk_s1	✅	2s	5s	-60%
pointwise_native_aarch64	✅	2s	5s	-60%
poly_caddq	✅	2s	2s	+0%
poly_caddq_c	✅	2s	2s	+0%
poly_caddq_native	✅	2s	2s	+0%
poly_caddq_native_x86_64	✅	2s	3s	-33%
poly_chknorm	✅	2s	4s	-50%
poly_ntt	✅	2s	2s	+0%
poly_permute_bitrev_to_custom_optional	✅	2s	2s	+0%
poly_permute_bitrev_to_custom_optional_native	✅	2s	4s	-50%
poly_pointwise_montgomery	✅	2s	3s	-33%
poly_uniform_gamma1_4x	✅	2s	4s	-50%
poly_use_hint	✅	2s	3s	-33%
poly_use_hint_native_aarch64	✅	2s	3s	-33%
polyveck_reduce	✅	2s	4s	-50%
polyvecl_pack_eta	✅	2s	3s	-33%
polyvecl_uniform_gamma1	✅	2s	2s	+0%
polyvecl_uniform_gamma1_serial	✅	2s	3s	-33%
polyvecl_unpack_eta	✅	2s	3s	-33%
polyz_unpack_native	✅	2s	4s	-50%
reduce32	✅	2s	3s	-33%
rej_uniform_eta_native_aarch64	✅	2s	4s	-50%
rej_uniform_native_aarch64	✅	2s	3s	-33%
shake128_init	✅	2s	2s	+0%
shake128_squeeze	✅	2s	2s	+0%
shake256_squeeze	✅	2s	3s	-33%
shake256x4_absorb_once	✅	2s	3s	-33%
sign_signature	✅	2s	6s	-67%
sign_verify_extmu	✅	2s	3s	-33%
sign_verify_pre_hash_internal	✅	2s	5s	-60%
sk_s1hat_get_poly	✅	2s	6s	-67%
sys_check_capability	✅	2s	4s	-50%
yvec_init	✅	2s	3s	-33%
intt_native_x86_64	✅	1s	3s	-67%
keccak_f1600_x1_native_aarch64_v84a	✅	1s	3s	-67%
keccak_f1600_x4_native_aarch64_v84a	✅	1s	4s	-75%
keccak_finalize	✅	1s	2s	-50%
keccak_init	✅	1s	1s	+0%
keccak_squeeze	✅	1s	4s	-75%
keccakf1600_extract_bytes (big endian)	✅	1s	2s	-50%
keccakf1600_permute	✅	1s	2s	-50%
keccakf1600_permute_native	✅	1s	3s	-67%
keccakf1600x4_xor_bytes_native	✅	1s	3s	-67%
mld_ct_abs_i32	✅	1s	2s	-50%
mld_ct_cmask_neg_i32	✅	1s	2s	-50%
mld_ct_cmask_nonzero_u32	✅	1s	4s	-75%
mld_ct_cmask_nonzero_u8	✅	1s	3s	-67%
mld_ct_get_optblocker_i64	✅	1s	2s	-50%
mld_ct_get_optblocker_u32	✅	1s	3s	-67%
mld_keccakf1600_extract_bytes	✅	1s	1s	+0%
mld_prepare_domain_separation_prefix	✅	1s	2s	-50%
mld_sign_finish	✅	1s	-	new
mld_sign_resume	✅	1s	-	new
montgomery_reduce	✅	1s	4s	-75%
ntt_native_aarch64	✅	1s	2s	-50%
pack_sig_h	✅	1s	5s	-80%
pointwise_native_x86_64	✅	1s	3s	-67%
poly_caddq_native_aarch64	✅	1s	2s	-50%
poly_decompose	✅	1s	2s	-50%
poly_decompose_88_native_aarch64	✅	1s	1s	+0%
poly_decompose_native	✅	1s	3s	-67%
poly_decompose_native_x86_64	✅	1s	3s	-67%
poly_invntt_tomont	✅	1s	3s	-67%
poly_ntt_native	✅	1s	4s	-75%
poly_reduce	✅	1s	3s	-67%
poly_sub	✅	1s	3s	-67%
poly_uniform_gamma1	✅	1s	3s	-67%
poly_use_hint_native_x86_64	✅	1s	-	new
polyeta_unpack	✅	1s	8s	-88%
polyveck_pack_eta	✅	1s	4s	-75%
polyveck_unpack_eta	✅	1s	6s	-83%
polyvecl_pointwise_acc_montgomery	✅	1s	3s	-67%
polyw1_pack	✅	1s	4s	-75%
polyz_unpack	✅	1s	3s	-67%
polyz_unpack_native_x86_64	✅	1s	3s	-67%
rej_uniform_eta_native_x86_64	✅	1s	-	new
shake128_finalize	✅	1s	1s	+0%
shake128_release	✅	1s	3s	-67%
shake256_finalize	✅	1s	1s	+0%
shake256_init	✅	1s	2s	-50%
shake256_release	✅	1s	2s	-50%
shake256x4_squeezeblocks	✅	1s	2s	-50%
sign_verify_pre_hash_shake256	✅	1s	5s	-80%
sk_s2hat_get_poly	✅	1s	2s	-50%
unpack_sk_s2hat	✅	1s	4s	-75%
use_hint	✅	1s	2s	-50%

[oqs-bot]

CBMC Results (ML-DSA-87)

⚠️ Attention Required

Proof	Status	Current	Previous	Change
**TOTAL**	⚠️	2970s	2151s	+38.1%
compute_pack_t0_t1	⚠️	200s	19s	+953%
mld_attempt_signature_generation	⚠️	315s	55s	+473%
sig_unpack_hints	⚠️	29s	3s	+867%
sign_keypair_internal	⚠️	56s	6s	+833%
sign_pk_from_sk	⚠️	51s	6s	+750%
sign_signature_internal	⚠️	341s	42s	+712%
sign_verify_internal	⚠️	776s	97s	+700%

Full Results (210 proofs)

Proof	Status	Current	Previous	Change
**TOTAL**	⚠️	2970s	2151s	+38.1%
sign_verify_internal	⚠️	776s	97s	+700%
sign_signature_internal	⚠️	341s	42s	+712%
mld_attempt_signature_generation	⚠️	315s	55s	+473%
polyvecl_pointwise_acc_montgomery_c	✅	240s	353s	-32%
compute_pack_t0_t1	⚠️	200s	19s	+953%
poly_pointwise_montgomery_c	✅	148s	144s	+3%
polyvec_matrix_expand	✅	87s	324s	-73%
mld_invntt_layer	✅	63s	115s	-45%
sign_keypair_internal	⚠️	56s	6s	+833%
sign_pk_from_sk	⚠️	51s	6s	+750%
sig_unpack_hints	⚠️	29s	3s	+867%
mld_ntt_layer	✅	26s	45s	-42%
fqmul	✅	23s	43s	-47%
polyvec_matrix_expand_serial	✅	23s	38s	-39%
polyvec_matrix_pointwise_montgomery_yvec	✅	13s	18s	-28%
mld_ntt_butterfly_block	✅	12s	24s	-50%
keccakf1600x4_permute_native	✅	11s	23s	-52%
poly_ntt_c	✅	10s	21s	-52%
rej_uniform_native_x86_64	✅	10s	-	new
polyt0_unpack	✅	9s	14s	-36%
poly_uniform_eta_4x	✅	8s	11s	-27%
rej_uniform	✅	8s	15s	-47%
rej_uniform_c	✅	8s	19s	-58%
poly_chknorm_c	✅	7s	15s	-53%
polyveck_decompose	✅	7s	13s	-46%
sign_keypair	✅	7s	4s	+75%
sign_signature_extmu	✅	7s	4s	+75%
mld_check_pct	✅	6s	16s	-62%
poly_add	✅	6s	6s	+0%
poly_invntt_tomont_c	✅	6s	12s	-50%
poly_uniform_4x	✅	6s	13s	-54%
polyeta_unpack	✅	6s	17s	-65%
polyz_unpack_c	✅	6s	3s	+100%
sign_signature	✅	6s	5s	+20%
sign_signature_pre_hash_shake256	✅	6s	6s	+0%
keccak_absorb_once_x4	✅	5s	9s	-44%
mld_compute_pack_z	✅	5s	8s	-38%
mld_sample_s1_s2	✅	5s	6s	-17%
pack_sig_c	✅	5s	4s	+25%
polyveck_caddq	✅	5s	8s	-38%
polyveck_ntt	✅	5s	11s	-55%
polyveck_reduce	✅	5s	3s	+67%
polyveck_unpack_eta	✅	5s	4s	+25%
polyvecl_ntt	✅	5s	7s	-29%
polyvecl_uniform_gamma1	✅	5s	2s	+150%
fqscale	✅	4s	3s	+33%
keccakf1600x4_permute	✅	4s	3s	+33%
mld_keccakf1600_permute_c	✅	4s	7s	-43%
mld_prepare_domain_separation_prefix	✅	4s	4s	+0%
mld_sample_s1_s2_serial	✅	4s	8s	-50%
ntt_native_x86_64	✅	4s	2s	+100%
pointwise_acc_native_aarch64	✅	4s	6s	-33%
poly_caddq_native_x86_64	✅	4s	2s	+100%
poly_decompose_native	✅	4s	2s	+100%
poly_invntt_tomont_native	✅	4s	5s	-20%
poly_shiftl	✅	4s	4s	+0%
polyveck_invntt_tomont	✅	4s	9s	-56%
polyvecl_chknorm	✅	4s	7s	-43%
polyvecl_uniform_gamma1_serial	✅	4s	4s	+0%
polyw1_pack	✅	4s	4s	+0%
rej_uniform_native	✅	4s	8s	-50%
shake256_init	✅	4s	2s	+100%
sign_verify_pre_hash_internal	✅	4s	3s	+33%
sk_s2hat_get_poly	✅	4s	3s	+33%
unpack_sk_s2hat	✅	4s	3s	+33%
keccak_absorb	✅	3s	3s	+0%
keccak_f1600_x1_native_aarch64	✅	3s	1s	+200%
keccakf1600_extract_bytes (big endian)	✅	3s	3s	+0%
keccakf1600_permute	✅	3s	3s	+0%
keccakf1600x4_xor_bytes	✅	3s	3s	+0%
mld_ct_cmask_neg_i32	✅	3s	4s	-25%
mld_ct_get_optblocker_u32	✅	3s	2s	+50%
mld_h	✅	3s	3s	+0%
mld_keccakf1600x4_xor_bytes_c	✅	3s	4s	-25%
mld_sign_finish	✅	3s	-	new
mld_sign_resume	✅	3s	-	new
pack_sk_rho_key_tr_s2	✅	3s	3s	+0%
pointwise_acc_native_x86_64	✅	3s	6s	-50%
poly_caddq_c	✅	3s	3s	+0%
poly_challenge	✅	3s	5s	-40%
poly_decompose	✅	3s	3s	+0%
poly_decompose_c	✅	3s	5s	-40%
poly_decompose_native_x86_64	✅	3s	2s	+50%
poly_permute_bitrev_to_custom_optional	✅	3s	3s	+0%
poly_permute_bitrev_to_custom_optional_native	✅	3s	5s	-40%
poly_pointwise_montgomery_native	✅	3s	5s	-40%
poly_power2round	✅	3s	3s	+0%
poly_reduce	✅	3s	2s	+50%
poly_sub	✅	3s	3s	+0%
poly_uniform_gamma1_4x	✅	3s	3s	+0%
poly_use_hint	✅	3s	1s	+200%
poly_use_hint_c	✅	3s	2s	+50%
poly_use_hint_native_aarch64	✅	3s	2s	+50%
poly_use_hint_native_x86_64	✅	3s	-	new
polyt1_pack	✅	3s	3s	+0%
polyt1_unpack	✅	3s	4s	-25%
polyvec_matrix_pointwise_montgomery_row	✅	3s	3s	+0%
polyveck_pack_eta	✅	3s	6s	-50%
polyvecl_unpack_eta	✅	3s	5s	-40%
polyz_unpack_native_x86_64	✅	3s	3s	+0%
shake128_finalize	✅	3s	2s	+50%
shake128_init	✅	3s	1s	+200%
shake128x4_squeezeblocks	✅	3s	3s	+0%
shake256_release	✅	3s	3s	+0%
sign_verify_extmu	✅	3s	3s	+0%
sk_s1hat_get_poly	✅	3s	3s	+0%
unpack_pk_t1	✅	3s	1s	+200%
unpack_sk_t0hat	✅	3s	7s	-57%
yvec_init	✅	3s	4s	-25%
intt_native_x86_64	✅	2s	3s	-33%
keccak_f1600_x1_native_aarch64_v84a	✅	2s	1s	+100%
keccak_f1600_x4_native_aarch64_v84a	✅	2s	4s	-50%
keccak_f1600_x4_native_aarch64_v8a_scalar_hybrid	✅	2s	3s	-33%
keccak_f1600_x4_native_aarch64_v8a_v84a_scalar_hybrid	✅	2s	4s	-50%
keccak_f1600_x4_native_avx2	✅	2s	2s	+0%
keccak_finalize	✅	2s	1s	+100%
keccak_squeezeblocks_x4	✅	2s	4s	-50%
keccakf1600_permute_native	✅	2s	4s	-50%
make_hint	✅	2s	3s	-33%
mld_ct_cmask_nonzero_u32	✅	2s	2s	+0%
mld_ct_memcmp	✅	2s	3s	-33%
mld_keccakf1600_extract_bytes	✅	2s	4s	-50%
mld_keccakf1600x4_extract_bytes_c	✅	2s	2s	+0%
mld_polymat_expand_entry	✅	2s	3s	-33%
mld_sign_attempt	✅	2s	-	new
mld_value_barrier_i64	✅	2s	1s	+100%
mld_value_barrier_u8	✅	2s	3s	-33%
montgomery_reduce	✅	2s	3s	-33%
ntt_native_aarch64	✅	2s	6s	-67%
nttunpack_native_x86_64	✅	2s	3s	-33%
pack_sig_z	✅	2s	5s	-60%
pack_sk_s1	✅	2s	1s	+100%
pointwise_native_aarch64	✅	2s	5s	-60%
pointwise_native_x86_64	✅	2s	2s	+0%
poly_caddq_native_aarch64	✅	2s	3s	-33%
poly_chknorm	✅	2s	3s	-33%
poly_chknorm_native	✅	2s	4s	-50%
poly_chknorm_native_x86_64	✅	2s	2s	+0%
poly_decompose_32_native_aarch64	✅	2s	5s	-60%
poly_decompose_88_native_aarch64	✅	2s	2s	+0%
poly_invntt_tomont	✅	2s	1s	+100%
poly_ntt	✅	2s	3s	-33%
poly_ntt_native	✅	2s	3s	-33%
poly_pointwise_montgomery	✅	2s	4s	-50%
poly_uniform	✅	2s	4s	-50%
poly_uniform_eta	✅	2s	4s	-50%
poly_uniform_gamma1	✅	2s	4s	-50%
poly_use_hint_native	✅	2s	3s	-33%
polyeta_pack	✅	2s	4s	-50%
polyt0_pack	✅	2s	4s	-50%
polyveck_chknorm	✅	2s	3s	-33%
polyvecl_pointwise_acc_montgomery	✅	2s	5s	-60%
polyvecl_unpack_z	✅	2s	4s	-50%
polyw1_pack_88	✅	2s	3s	-33%
polyz_pack	✅	2s	5s	-60%
polyz_unpack_17_native_aarch64	✅	2s	3s	-33%
polyz_unpack_19_native_aarch64	✅	2s	4s	-50%
polyz_unpack_native	✅	2s	4s	-50%
power2round	✅	2s	4s	-50%
rej_eta_c	✅	2s	5s	-60%
rej_eta_native	✅	2s	6s	-67%
rej_uniform_eta_native_x86_64	✅	2s	-	new
rej_uniform_native_aarch64	✅	2s	2s	+0%
shake128_release	✅	2s	4s	-50%
shake128_squeeze	✅	2s	2s	+0%
shake256_absorb	✅	2s	2s	+0%
shake256_finalize	✅	2s	2s	+0%
shake256_squeeze	✅	2s	2s	+0%
sign_signature_pre_hash_internal	✅	2s	5s	-60%
sign_verify_pre_hash_shake256	✅	2s	3s	-33%
unpack_sk	✅	2s	5s	-60%
unpack_sk_s1hat	✅	2s	2s	+0%
yvec_get_poly	✅	2s	4s	-50%
caddq	✅	1s	4s	-75%
decompose	✅	1s	3s	-67%
intt_native_aarch64	✅	1s	3s	-67%
keccak_init	✅	1s	3s	-67%
keccak_squeeze	✅	1s	2s	-50%
keccakf1600_xor_bytes	✅	1s	3s	-67%
keccakf1600_xor_bytes (big endian)	✅	1s	2s	-50%
keccakf1600x4_extract_bytes	✅	1s	2s	-50%
keccakf1600x4_extract_bytes_native	✅	1s	2s	-50%
keccakf1600x4_xor_bytes_native	✅	1s	3s	-67%
mld_ct_abs_i32	✅	1s	3s	-67%
mld_ct_cmask_nonzero_u8	✅	1s	3s	-67%
mld_ct_get_optblocker_i64	✅	1s	3s	-67%
mld_ct_get_optblocker_u8	✅	1s	3s	-67%
mld_ct_sel_int32	✅	1s	3s	-67%
mld_value_barrier_u32	✅	1s	2s	-50%
pack_sig_h	✅	1s	4s	-75%
poly_caddq	✅	1s	2s	-50%
poly_caddq_native	✅	1s	4s	-75%
poly_chknorm_native_aarch64	✅	1s	4s	-75%
polyveck_pack_w1	✅	1s	3s	-67%
polyvecl_pack_eta	✅	1s	3s	-67%
polyvecl_pointwise_acc_montgomery_native	✅	1s	3s	-67%
polyw1_pack_32	✅	1s	4s	-75%
polyz_unpack	✅	1s	2s	-50%
reduce32	✅	1s	3s	-67%
rej_eta	✅	1s	4s	-75%
rej_uniform_eta_native_aarch64	✅	1s	5s	-80%
shake128_absorb	✅	1s	4s	-75%
shake128x4_absorb_once	✅	1s	5s	-80%
shake256	✅	1s	2s	-50%
shake256x4_absorb_once	✅	1s	2s	-50%
shake256x4_squeezeblocks	✅	1s	1s	+0%
sign_verify	✅	1s	5s	-80%
sk_t0hat_get_poly	✅	1s	4s	-75%
sys_check_capability	✅	1s	3s	-67%
use_hint	✅	1s	3s	-67%

[hanno-becker]

Have you confirmed that this works as expected?

[oqs-bot]

Intel Xeon 4th gen (c7i)

Details

Benchmark suite	Current: 0437594	Previous: c030803	Ratio
ML-DSA-44 keypair	43338 cycles	43406 cycles	1.00
ML-DSA-44 sign	130063 cycles	130328 cycles	1.00
ML-DSA-44 verify	45179 cycles	45394 cycles	1.00
ML-DSA-65 keypair	75825 cycles	75716 cycles	1.00
ML-DSA-65 sign	213691 cycles	213428 cycles	1.00
ML-DSA-65 verify	74364 cycles	74401 cycles	1.00
ML-DSA-87 keypair	123229 cycles	122967 cycles	1.00
ML-DSA-87 sign	271105 cycles	271422 cycles	1.00
ML-DSA-87 verify	120802 cycles	120745 cycles	1.00

This comment was automatically generated by workflow using github-action-benchmark.

[oqs-bot]

Intel Xeon 4th gen (c7i) (no-opt)

Details

Benchmark suite	Current: 0437594	Previous: c030803	Ratio
ML-DSA-44 keypair	91696 cycles	91577 cycles	1.00
ML-DSA-44 sign	351502 cycles	350445 cycles	1.00
ML-DSA-44 verify	99280 cycles	99260 cycles	1.00
ML-DSA-65 keypair	154014 cycles	153794 cycles	1.00
ML-DSA-65 sign	568402 cycles	567121 cycles	1.00
ML-DSA-65 verify	159668 cycles	159672 cycles	1.00
ML-DSA-87 keypair	254998 cycles	254960 cycles	1.00
ML-DSA-87 sign	720568 cycles	719634 cycles	1.00
ML-DSA-87 verify	264194 cycles	264044 cycles	1.00

This comment was automatically generated by workflow using github-action-benchmark.

[oqs-bot]

AMD EPYC 4th gen (c7a)

Details

Benchmark suite	Current: 0437594	Previous: c030803	Ratio
ML-DSA-44 keypair	48762 cycles	46742 cycles	1.04
ML-DSA-44 sign	142043 cycles	138904 cycles	1.02
ML-DSA-44 verify	50147 cycles	49395 cycles	1.02
ML-DSA-65 keypair	82987 cycles	82443 cycles	1.01
ML-DSA-65 sign	227319 cycles	225922 cycles	1.01
ML-DSA-65 verify	82350 cycles	82394 cycles	1.00
ML-DSA-87 keypair	130455 cycles	129220 cycles	1.01
ML-DSA-87 sign	281195 cycles	278748 cycles	1.01
ML-DSA-87 verify	128647 cycles	128767 cycles	1.00

This comment was automatically generated by workflow using github-action-benchmark.

[oqs-bot]

⚠️ Performance Alert ⚠️

Possible performance regression was detected for benchmark 'AMD EPYC 4th gen (c7a)'.
Benchmark result of this commit is worse than the previous benchmark result exceeding threshold 1.03.

Benchmark suite	Current: 0437594	Previous: c030803	Ratio
ML-DSA-44 keypair	48762 cycles	46742 cycles	1.04

This comment was automatically generated by workflow using github-action-benchmark.

[oqs-bot]

Graviton5

Details

Benchmark suite	Current: 0437594	Previous: c030803	Ratio
ML-DSA-44 keypair	51462 cycles	51549 cycles	1.00
ML-DSA-44 sign	161898 cycles	162124 cycles	1.00
ML-DSA-44 verify	54816 cycles	54699 cycles	1.00
ML-DSA-65 keypair	90205 cycles	90153 cycles	1.00
ML-DSA-65 sign	268050 cycles	267449 cycles	1.00
ML-DSA-65 verify	89991 cycles	89813 cycles	1.00
ML-DSA-87 keypair	145915 cycles	145750 cycles	1.00
ML-DSA-87 sign	335745 cycles	336113 cycles	1.00
ML-DSA-87 verify	144858 cycles	145412 cycles	1.00

This comment was automatically generated by workflow using github-action-benchmark.

[oqs-bot]

AMD EPYC 3rd gen (c6a)

Details

Benchmark suite	Current: 0437594	Previous: c030803	Ratio
ML-DSA-44 keypair	52162 cycles	52599 cycles	0.99
ML-DSA-44 sign	155158 cycles	156313 cycles	0.99
ML-DSA-44 verify	54512 cycles	54739 cycles	1.00
ML-DSA-65 keypair	89650 cycles	90550 cycles	0.99
ML-DSA-65 sign	254163 cycles	254859 cycles	1.00
ML-DSA-65 verify	89342 cycles	89593 cycles	1.00
ML-DSA-87 keypair	144149 cycles	144983 cycles	0.99
ML-DSA-87 sign	311823 cycles	312830 cycles	1.00
ML-DSA-87 verify	139927 cycles	140308 cycles	1.00

This comment was automatically generated by workflow using github-action-benchmark.

[oqs-bot]

AMD EPYC 4th gen (c7a) (no-opt)

Details

Benchmark suite	Current: 0437594	Previous: c030803	Ratio
ML-DSA-44 keypair	118765 cycles	118151 cycles	1.01
ML-DSA-44 sign	459610 cycles	458576 cycles	1.00
ML-DSA-44 verify	130980 cycles	130511 cycles	1.00
ML-DSA-65 keypair	201279 cycles	200941 cycles	1.00
ML-DSA-65 sign	747175 cycles	743760 cycles	1.00
ML-DSA-65 verify	210143 cycles	208994 cycles	1.01
ML-DSA-87 keypair	330091 cycles	328922 cycles	1.00
ML-DSA-87 sign	936528 cycles	933671 cycles	1.00
ML-DSA-87 verify	342477 cycles	342058 cycles	1.00

This comment was automatically generated by workflow using github-action-benchmark.

[oqs-bot]

Graviton5 (no-opt)

Details

Benchmark suite	Current: 0437594	Previous: c030803	Ratio
ML-DSA-44 keypair	100419 cycles	100427 cycles	1.00
ML-DSA-44 sign	369327 cycles	368917 cycles	1.00
ML-DSA-44 verify	110447 cycles	110269 cycles	1.00
ML-DSA-65 keypair	174737 cycles	175489 cycles	1.00
ML-DSA-65 sign	598278 cycles	596736 cycles	1.00
ML-DSA-65 verify	177827 cycles	177498 cycles	1.00
ML-DSA-87 keypair	285265 cycles	286619 cycles	1.00
ML-DSA-87 sign	758762 cycles	757665 cycles	1.00
ML-DSA-87 verify	297026 cycles	295682 cycles	1.00

This comment was automatically generated by workflow using github-action-benchmark.

[oqs-bot]

Intel Xeon 3rd gen (c6i)

Details

Benchmark suite	Current: 0437594	Previous: c030803	Ratio
ML-DSA-44 keypair	62378 cycles	61484 cycles	1.01
ML-DSA-44 sign	188395 cycles	187734 cycles	1.00
ML-DSA-44 verify	66118 cycles	66224 cycles	1.00
ML-DSA-65 keypair	108838 cycles	109368 cycles	1.00
ML-DSA-65 sign	311838 cycles	314007 cycles	0.99
ML-DSA-65 verify	109661 cycles	110752 cycles	0.99
ML-DSA-87 keypair	170738 cycles	169955 cycles	1.00
ML-DSA-87 sign	377275 cycles	378115 cycles	1.00
ML-DSA-87 verify	170252 cycles	170410 cycles	1.00

This comment was automatically generated by workflow using github-action-benchmark.

[oqs-bot]

AMD EPYC 3rd gen (c6a) (no-opt)

Details

Benchmark suite	Current: 0437594	Previous: c030803	Ratio
ML-DSA-44 keypair	133582 cycles	133189 cycles	1.00
ML-DSA-44 sign	518781 cycles	517874 cycles	1.00
ML-DSA-44 verify	146348 cycles	146808 cycles	1.00
ML-DSA-65 keypair	224908 cycles	224813 cycles	1.00
ML-DSA-65 sign	846246 cycles	844406 cycles	1.00
ML-DSA-65 verify	234454 cycles	234567 cycles	1.00
ML-DSA-87 keypair	368072 cycles	371767 cycles	0.99
ML-DSA-87 sign	1060596 cycles	1070444 cycles	0.99
ML-DSA-87 verify	381692 cycles	384562 cycles	0.99

This comment was automatically generated by workflow using github-action-benchmark.

[oqs-bot]

Intel Xeon 3rd gen (c6i) (no-opt)

Details

Benchmark suite	Current: 0437594	Previous: c030803	Ratio
ML-DSA-44 keypair	154180 cycles	153939 cycles	1.00
ML-DSA-44 sign	587448 cycles	587344 cycles	1.00
ML-DSA-44 verify	169043 cycles	169095 cycles	1.00
ML-DSA-65 keypair	262503 cycles	261913 cycles	1.00
ML-DSA-65 sign	964162 cycles	964236 cycles	1.00
ML-DSA-65 verify	272247 cycles	271621 cycles	1.00
ML-DSA-87 keypair	430918 cycles	432466 cycles	1.00
ML-DSA-87 sign	1209934 cycles	1215350 cycles	1.00
ML-DSA-87 verify	446475 cycles	447567 cycles	1.00

This comment was automatically generated by workflow using github-action-benchmark.

[oqs-bot]

Graviton4

Details

Benchmark suite	Current: 0437594	Previous: c030803	Ratio
ML-DSA-44 keypair	67448 cycles	67353 cycles	1.00
ML-DSA-44 sign	198090 cycles	198392 cycles	1.00
ML-DSA-44 verify	70389 cycles	70244 cycles	1.00
ML-DSA-65 keypair	119410 cycles	119333 cycles	1.00
ML-DSA-65 sign	326318 cycles	325716 cycles	1.00
ML-DSA-65 verify	116932 cycles	116636 cycles	1.00
ML-DSA-87 keypair	196598 cycles	196579 cycles	1.00
ML-DSA-87 sign	421514 cycles	422722 cycles	1.00
ML-DSA-87 verify	193036 cycles	193349 cycles	1.00

This comment was automatically generated by workflow using github-action-benchmark.

[oqs-bot]

Graviton4 (no-opt)

Details

Benchmark suite	Current: 0437594	Previous: c030803	Ratio
ML-DSA-44 keypair	128045 cycles	128032 cycles	1.00
ML-DSA-44 sign	441407 cycles	441067 cycles	1.00
ML-DSA-44 verify	136467 cycles	136441 cycles	1.00
ML-DSA-65 keypair	221697 cycles	221712 cycles	1.00
ML-DSA-65 sign	715046 cycles	714329 cycles	1.00
ML-DSA-65 verify	221149 cycles	220869 cycles	1.00
ML-DSA-87 keypair	364939 cycles	364984 cycles	1.00
ML-DSA-87 sign	916618 cycles	916434 cycles	1.00
ML-DSA-87 verify	371338 cycles	371375 cycles	1.00

This comment was automatically generated by workflow using github-action-benchmark.

[oqs-bot]

Graviton3

Details

Benchmark suite	Current: 0437594	Previous: c030803	Ratio
ML-DSA-44 keypair	71529 cycles	71605 cycles	1.00
ML-DSA-44 sign	209170 cycles	209407 cycles	1.00
ML-DSA-44 verify	75128 cycles	74975 cycles	1.00
ML-DSA-65 keypair	126162 cycles	126075 cycles	1.00
ML-DSA-65 sign	345663 cycles	345704 cycles	1.00
ML-DSA-65 verify	124348 cycles	124156 cycles	1.00
ML-DSA-87 keypair	206905 cycles	206384 cycles	1.00
ML-DSA-87 sign	444540 cycles	439764 cycles	1.01
ML-DSA-87 verify	204299 cycles	204682 cycles	1.00

This comment was automatically generated by workflow using github-action-benchmark.

[oqs-bot]

Graviton3 (no-opt)

Details

Benchmark suite	Current: 0437594	Previous: c030803	Ratio
ML-DSA-44 keypair	138648 cycles	138735 cycles	1.00
ML-DSA-44 sign	487560 cycles	486987 cycles	1.00
ML-DSA-44 verify	149564 cycles	149555 cycles	1.00
ML-DSA-65 keypair	242376 cycles	242521 cycles	1.00
ML-DSA-65 sign	793817 cycles	794003 cycles	1.00
ML-DSA-65 verify	242345 cycles	242185 cycles	1.00
ML-DSA-87 keypair	396084 cycles	395897 cycles	1.00
ML-DSA-87 sign	1016723 cycles	1016651 cycles	1.00
ML-DSA-87 verify	404583 cycles	405058 cycles	1.00

This comment was automatically generated by workflow using github-action-benchmark.

[oqs-bot]

Graviton2

Details

Benchmark suite	Current: 0437594	Previous: c030803	Ratio
ML-DSA-44 keypair	112577 cycles	112473 cycles	1.00
ML-DSA-44 sign	354041 cycles	353898 cycles	1.00
ML-DSA-44 verify	117469 cycles	117228 cycles	1.00
ML-DSA-65 keypair	194932 cycles	194828 cycles	1.00
ML-DSA-65 sign	584289 cycles	584065 cycles	1.00
ML-DSA-65 verify	193358 cycles	193089 cycles	1.00
ML-DSA-87 keypair	321660 cycles	322483 cycles	1.00
ML-DSA-87 sign	748126 cycles	751038 cycles	1.00
ML-DSA-87 verify	319368 cycles	320239 cycles	1.00

This comment was automatically generated by workflow using github-action-benchmark.

[oqs-bot]

Graviton2 (no-opt)

Details

Benchmark suite	Current: 0437594	Previous: c030803	Ratio
ML-DSA-44 keypair	220494 cycles	212354 cycles	1.04
ML-DSA-44 sign	761434 cycles	761222 cycles	1.00
ML-DSA-44 verify	230185 cycles	230023 cycles	1.00
ML-DSA-65 keypair	376592 cycles	376527 cycles	1.00
ML-DSA-65 sign	1248255 cycles	1248654 cycles	1.00
ML-DSA-65 verify	372446 cycles	372533 cycles	1.00
ML-DSA-87 keypair	603009 cycles	601749 cycles	1.00
ML-DSA-87 sign	1587128 cycles	1585220 cycles	1.00
ML-DSA-87 verify	618752 cycles	617838 cycles	1.00

This comment was automatically generated by workflow using github-action-benchmark.

[oqs-bot]

⚠️ Performance Alert ⚠️

Possible performance regression was detected for benchmark 'Graviton2 (no-opt)'.
Benchmark result of this commit is worse than the previous benchmark result exceeding threshold 1.03.

Benchmark suite	Current: 0437594	Previous: c030803	Ratio
ML-DSA-44 keypair	220494 cycles	212354 cycles	1.04

This comment was automatically generated by workflow using github-action-benchmark.