Properties

key size (pk/sk)
trust in scheme
- attacks
- cryptanalysis
- assumption
cipher/signature size
performance
- platforms
  - x64
  - ARM (M4, Cortex)
  - SmartCard
- different implementations
  - ref
  - optimized
    - hardened
    - side-channel categories
    - parallel?
- security level

Constraints

key sizes
performance
memory requirement
code size
state management
key re-use number
randomness requirement
- how much
- when
CPU features
power consumption
DH-likeness
- symmetry
- static keys
- froward-secrecy