With the private key, kyber512 has a key size of 1,632 bytes, and bike128 has a public key of 2,289 bytes. The ciphertext for kyber512 is 768 bytes, and in bike128 it is 1,573 bytes. The table below provides the sizes and performances of hqc
Sizes are given for the keypair (ek, dk), ciphertext c and shared key k With the public key, kyber512 has a key size of 1,632 bytes, and bike128 has a public key of 3,114 bytes Although the bandwidth of hqc exceeds that of bike, hqc’s key generation and decapsulation only require a fraction of the kilocycles required by bike. nist security category 1, taken from algorithm specifications
Specifically, hqc’s ciphertext and public key sizes are roughly 2.9 and 1.5 times those of bike, respectively. Compared to bike, hqc has larger public key and ciphertext sizes but cheaper key generation and decryption Please note that nist plans to issue a draft standard incorporating the hqc algorithm in about a year, with a finalized standard expected in 2027. Bike, classic mceliece, hqc, and sike
