N: 4096 Security level M: 128 Field: Prime S-box: f(x) = x^5 [8, 59, 187, 47872] Recommendation for N=4096, t=16: R_F = 8 R_P = 59 S-box cost = 187 Size cost = 47872 --- Round numbers (with security margin) --- Format: [Security Level, Field Size, # Elements, Field, S-Box, R_F, R_P] ['45', '45', '3', 'GF(2^n)', 'x^3', '8', '28'] ['45', '45', '3', 'GF(p)', 'x^3', '8', '26'] ['45', '90', '3', 'GF(2^n)', 'x^3', '8', '28'] ['45', '90', '3', 'GF(p)', 'x^3', '8', '26'] ['80', '80', '4', 'GF(2^n)', 'x^3', '8', '53'] ['80', '80', '4', 'GF(p)', 'x^3', '8', '51'] ['80', '160', '3', 'GF(2^n)', 'x^3', '8', '52'] ['80', '160', '3', 'GF(p)', 'x^3', '8', '50'] ['80', '160', '11', 'GF(2^n)', 'x^3', '8', '54'] ['80', '160', '11', 'GF(p)', 'x^3', '8', '52'] ['128', '128', '4', 'GF(2^n)', 'x^3', '8', '85'] ['128', '128', '4', 'GF(p)', 'x^3', '8', '83'] ['128', '256', '3', 'GF(2^n)', 'x^3', '8', '85'] ['128', '256', '3', 'GF(p)', 'x^3', '8', '83'] ['128', '128', '12', 'GF(2^n)', 'x^3', '8', '88'] ['128', '128', '12', 'GF(p)', 'x^3', '8', '85'] ['128', '256', '11', 'GF(2^n)', 'x^3', '8', '88'] ['128', '256', '11', 'GF(p)', 'x^3', '8', '85'] ['256', '128', '8', 'GF(2^n)', 'x^3', '8', '86'] ['256', '128', '8', 'GF(p)', 'x^3', '8', '84'] ['256', '512', '3', 'GF(2^n)', 'x^3', '8', '171'] ['256', '512', '3', 'GF(p)', 'x^3', '8', '169'] ['256', '128', '14', 'GF(2^n)', 'x^3', '8', '88'] ['256', '128', '14', 'GF(p)', 'x^3', '8', '85'] ['256', '512', '11', 'GF(2^n)', 'x^3', '8', '174'] ['256', '512', '11', 'GF(p)', 'x^3', '8', '171']