NGCC-provider

NGCC (Next-Generation Cryptography Competition) is a global call for next-generation commercial cryptography algorithms, launched in 2025 by the Institute of Commercial Cryptography Standards (ICCS). The notice on collecting next-generation public-key algorithm proposals officially published the submission requirements and evaluation criteria for public-key cryptographic algorithms and started accepting public-key algorithm proposals.

The public-key portion (KEM + signature) comprises 74 schemes and 306 parameter sets. This provider integrates 71 schemes and 220 parameter sets (excluding the inefficient 384/512-bit security categories). See the list in NGCC_PROPOSALS_SUMMARY.md.

NGCC-provider adapts NGCC proposal reference implementations to the Tongsuo provider interface, providing KEM, signature, signature-key encoding/decoding, and TLS 1.3 capabilities. Proposal algorithm sources are compiled into a single ngcc.so; the provider load name is ngcc.

Author reference implementations live in the NGCC-candidates repository. This repository mounts that tree as a git submodule at ngcc/candidates and does not modify any author algorithm source.

Disclaimer

This repository is for testing only and must not be used in production.

Scheme code comes from implementations submitted by NGCC proposal teams. This repository only performs interface adaptation and makes no guarantees about cryptographic security or implementation security. Passing tests does not mean a scheme is secure.

Many submissions still use a placeholder for the underlying hash algorithm, to be replaced later; so we estimate the test computation costs as only provisional. However, under current parameters, the test communication costs are fixed.

Documentation

• Proposal summary: integrated and unintegrated parameter sets, EVP/TLS call names, source provenance, test results, and limitations.
• Usage: C API and command-line examples, including KEM, sign/verify, certificate issuance, and TLS 1.3.

Build

Building requires Perl, make, a C toolchain, and the Tongsuo library.

Install Tongsuo

Clone the source from Tongsuo. Tongsuo also requires Perl 5 (including the Text::Template module), make, and a C compiler.

git clone https://github.com/Tongsuo-Project/Tongsuo
cd Tongsuo
./config --prefix=$HOME/opt/tongsuo
make -j6
make install

Clone and initialize the reference-implementation repository:

git submodule update --init
./config OPENSSL_PREFIX=$HOME/opt/tongsuo
make -j6

./config --list lists targets; ./config --list-algorithms lists names. Configuration accepts CC=..., LD=..., CFLAGS=..., CPPFLAGS=..., LDFLAGS=..., GMP_STATIC=..., and similar parameters. The current system is detected by default; cross compilation requires an explicit target plus a matching toolchain and dependency libraries.

The output is ngcc.so.

GMP

The following schemes depend on GMP and are disabled by default. To include them in the build, you must specify a GMP path:

• QIMEN-PIKE: 2 parameter sets, kem-31-ngcc-1, kem-31-ngcc-2.
• SQISign2Dsquare: 12 parameter sets, sig-25-sqisign2dsq-*.
• SQIsign2D-push1/2: 2 parameter sets, sig-26-sqisign2d-lvl1, sig-26-sqisign2d-lvl3.
• SQIsignTriangle: 3 parameter sets, sig-27-sqisigntriangle-lvl1, sig-27-sqisigntriangle-lvl2, sig-27-sqisigntriangle-lvl5.

./config --with-gmp-source=/path/to/gmp-source

The GMP source directory must contain configure and must not already be configured; building GMP also requires m4. After configuration, NGCC-provider's make builds a PIC static library in build/gmp/ and links it into ngcc.so without modifying the GMP source directory. If you already have a PIC static GMP, you can point to it with GMP_ROOT=/path/to/gmp-install; that option is mutually exclusive with the source option. Each configure run must pass the GMP options you need. For cross compilation, set the GMP target with GMP_HOST=<target-triplet>.

Test

Tests cover EVP, TLS, certificates, and interoperability. The actual run set and skipped items follow the proposal summary. By default, parameter sets whose historical full-case wall-clock time exceeded 1 second are skipped. FULL_TEST=1 runs all enabled parameters; Python 3.10+ is required.

These are this repository's own correctness acceptance tests. For usage examples, see Usage.

make verify-sources
make test JOBS=6 TEST_TIMEOUT=1800