Kyber vs Dilithium vs SPHINCS+ vs Falcon
Post-Quantum Cryptography Comparison
Comparison of 4 NIST-selected PQC algorithms — type, key sizes, performance, standardization, and use case.
Kyber (ML-KEM)Dilithium (ML-DSA)SPHINCS+Falcon
Full Specification Comparison
| Specification | Kyber (ML-KEM) | Dilithium (ML-DSA) | SPHINCS+ | Falcon |
|---|---|---|---|---|
| Type | KEM (encryption) | Signature | Signature (hash) | Signature (lattice) |
| NIST Standard | FIPS 203 | FIPS 204 | FIPS 205 | FIPS 206 (pending) |
| Public Key Size | 1,568 B | 1,952 B | 32-64 KB | 897-1,793 B |
| Signature Size | N/A | 2,701 B | 7-49 KB | 666-1,280 B |
| Performance | Fast | Fast | Slow | Fast (verify) |
| Security Basis | Lattice (LWE) | Lattice (LWE) | Hash function | Lattice (NTRU) |
| Best For | Key exchange | General signing | Long-term backup | Constrained devices |
Expert Verdict
Kyber is the NIST KEM standard (FIPS 203); Dilithium is the primary signature standard (FIPS 204); SPHINCS+ offers hash-based security as backup (FIPS 205); Falcon provides compact signatures for constrained devices.
Subject Breakdown
Kyber (ML-KEM)
0 Category Wins
Dilithium (ML-DSA)
0 Category Wins
SPHINCS+
0 Category Wins
Falcon
2 Category Wins
- ★ Public Key Size: 897-1,793 B
- ★ Signature Size: 666-1,280 B