Measurements of public-key cryptosystems
[Page version: 20240904 09:05:03]
eBATS
(ECRYPT Benchmarking
of Asymmetric Systems)
is a project
to measure the performance of public-key systems.
This page presents benchmark results collected in eBATS
for public-key encryption:
- Time (cycles) to generate a key pair:
a secret key and a corresponding public key.
- Time to encrypt a short message (59 bytes).
- Time to decrypt a short message,
i.e., to recover a short message from a (larger) ciphertext.
- Space (bytes) for a secret key.
- Space for a public key.
- Ciphertext length for a 0-byte message.
- Ciphertext overhead for a 23-byte message:
the ciphertext length minus 23 bytes.
- Ciphertext overhead for a long message:
the ciphertext length minus the message length.
Each table row lists
the first quartile of many speed measurements,
the median of many speed measurements,
the third quartile of many speed measurements, and
the name of the primitive.
Measurements with large variance are indicated in red with question marks.
The symbol
C:
means that the current SUPERCOP database does not list IND-CCA2 security
as a goal for this public-key cryptosystem.
The symbol
T:
(starting with supercop-20200816)
means that the SUPERCOP database
at the time of benchmarking did not list constant time
as a goal for this implementation.
The symbol
T!!!
means that constant time was listed as a goal for this implementation,
but that the implementation failed TIMECOP.
(TIMECOP failures are not necessarily security issues;
they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)
There is a
separate page
with more information about each public-key cryptosystem and each implementation.
Designers and implementors
interested in submitting new public-key cryptosystems
and new implementations of existing cryptosystems
should read the call for submissions.
Sizes across machines
Secret key |
bytes | system |
26 | ledapkc1264 |
26 | ledapkc12sl |
26 | ledapkc1364 |
26 | ledapkc13sl |
26 | ledapkc1464 |
26 | ledapkc14sl |
34 | ledapkc3264 |
34 | ledapkc32sl |
34 | ledapkc3364 |
34 | ledapkc33sl |
34 | ledapkc3464 |
34 | ledapkc34sl |
42 | ledapkc5264 |
42 | ledapkc52sl |
42 | ledapkc5364 |
42 | ledapkc53sl |
42 | ledapkc5464 |
42 | ledapkc54sl |
194 | mcnie3q1281 |
218 | mcnie3q1282 |
247 | mcnie3q1921 |
274 | mcnie3q1922 |
337 | mcnie3q2561 |
340 | mcnie4q1281 |
348 | mcnie3q2562 |
384 | cargocult2048 |
384 | rsa2048 |
401 | mcnie4q1282 |
465 | mcnie4q1921 |
493 | r5nd1pke5d |
512 | mcnie4q1922 |
584 | mcnie4q2561 |
601 | mcnie4q2562 |
607 | C:ntruees401ep2 |
659 | C:ntruees439ep1 |
708 | r5nd1pke0d |
828 | r5nd3pke5d |
891 | C:ntruees593ep1 |
1024 | ronald1024 |
1031 | r5nd3pke0d |
1042 | r5nd5pke5d |
1120 | C:ntruees743ep1 |
1413 | r5nd5pke0d |
1536 | ronald1536 |
1854 | C:ntruees787ep1 |
2048 | ronald2048 |
3072 | ronald3072 |
4096 | ronald4096 |
5772 | r5n11pke0d |
8480 | C:4hfe |
9708 | r5n13pke0d |
14700 | r5n15pke0d |
98304 | pqrsa15 |
137282 | C:mceliece |
163584 | r5n13pke0smallct |
714240 | lotus128 |
1126400 | lotus192 |
1630720 | lotus256 |
|
Public key |
bytes | system |
128 | ronald1024 |
192 | ronald1536 |
256 | cargocult2048 |
256 | ronald2048 |
256 | rsa2048 |
347 | mcnie4q1281 |
384 | ronald3072 |
417 | mcnie4q1282 |
431 | mcnie3q1281 |
461 | r5nd1pke5d |
486 | mcnie3q1282 |
487 | mcnie4q1921 |
512 | ronald4096 |
539 | mcnie4q1922 |
557 | C:ntruees401ep2 |
569 | mcnie3q1921 |
609 | C:ntruees439ep1 |
630 | mcnie4q2561 |
631 | mcnie3q1922 |
647 | mcnie4q2562 |
676 | r5nd1pke0d |
780 | r5nd3pke5d |
819 | mcnie3q2561 |
821 | C:ntruees593ep1 |
829 | mcnie3q2562 |
978 | r5nd5pke5d |
983 | r5nd3pke0d |
1027 | C:ntruees743ep1 |
1349 | r5nd5pke0d |
1574 | C:ntruees787ep1 |
2928 | ledapkc1264 |
3536 | ledapkc12sl |
4032 | ledapkc1364 |
4928 | ledapkc13sl |
5040 | ledapkc1464 |
5104 | ledapkc3264 |
5740 | r5n11pke0d |
6096 | ledapkc14sl |
6584 | ledapkc32sl |
7104 | ledapkc3364 |
7720 | ledapkc5264 |
8592 | ledapkc3464 |
9168 | ledapkc33sl |
9660 | r5n13pke0d |
10448 | ledapkc52sl |
10672 | ledapkc5364 |
11568 | ledapkc34sl |
13320 | ledapkc5464 |
14544 | ledapkc53sl |
14636 | r5n15pke0d |
18144 | ledapkc54sl |
23040 | C:4hfe |
32768 | pqrsa15 |
81408 | C:mceliece |
163536 | r5n13pke0smallct |
658944 | lotus128 |
1025024 | lotus192 |
1470976 | lotus256 |
|
Encrypting 0 bytes |
bytes | system |
68 | C:4hfe |
128 | ronald1024 |
192 | ronald1536 |
256 | C:mceliece |
256 | ronald2048 |
272 | rsa2048 |
284 | cargocult2048 |
384 | ronald3072 |
422 | mcnie4q1281 |
505 | mcnie4q1282 |
512 | ronald4096 |
552 | C:ntruees401ep2 |
579 | mcnie3q1281 |
590 | mcnie4q1921 |
604 | C:ntruees439ep1 |
636 | r5nd1pke5d |
651 | mcnie4q1922 |
653 | mcnie3q1282 |
756 | r5nd1pke0d |
761 | mcnie4q2561 |
764 | mcnie3q1921 |
781 | mcnie4q2562 |
816 | C:ntruees593ep1 |
846 | mcnie3q1922 |
950 | r5nd3pke5d |
988 | r5n13pke0smallct |
1022 | C:ntruees743ep1 |
1097 | mcnie3q2561 |
1110 | mcnie3q2562 |
1119 | r5nd3pke0d |
1144 | lotus128 |
1301 | r5nd5pke5d |
1456 | lotus192 |
1525 | r5nd5pke0d |
1574 | C:ntruees787ep1 |
1768 | lotus256 |
5804 | r5n11pke0d |
5856 | ledapkc1264 |
6048 | ledapkc1364 |
6720 | ledapkc1464 |
7072 | ledapkc12sl |
7392 | ledapkc13sl |
8128 | ledapkc14sl |
9732 | r5n13pke0d |
10208 | ledapkc3264 |
10656 | ledapkc3364 |
11456 | ledapkc3464 |
13168 | ledapkc32sl |
13752 | ledapkc33sl |
14724 | r5n15pke0d |
15424 | ledapkc34sl |
15440 | ledapkc5264 |
16008 | ledapkc5364 |
17760 | ledapkc5464 |
20896 | ledapkc52sl |
21816 | ledapkc53sl |
24192 | ledapkc54sl |
32768 | pqrsa15 |
|
Encrypting 23 bytes |
bytes | system |
45 | C:4hfe |
105 | ronald1024 |
169 | ronald1536 |
233 | C:mceliece |
233 | ronald2048 |
272 | rsa2048 |
284 | cargocult2048 |
361 | ronald3072 |
399 | mcnie4q1281 |
482 | mcnie4q1282 |
489 | ronald4096 |
529 | C:ntruees401ep2 |
556 | mcnie3q1281 |
567 | mcnie4q1921 |
581 | C:ntruees439ep1 |
628 | mcnie4q1922 |
630 | mcnie3q1282 |
636 | r5nd1pke5d |
738 | mcnie4q2561 |
741 | mcnie3q1921 |
756 | r5nd1pke0d |
758 | mcnie4q2562 |
793 | C:ntruees593ep1 |
823 | mcnie3q1922 |
950 | r5nd3pke5d |
988 | r5n13pke0smallct |
999 | C:ntruees743ep1 |
1074 | mcnie3q2561 |
1087 | mcnie3q2562 |
1119 | r5nd3pke0d |
1144 | lotus128 |
1301 | r5nd5pke5d |
1456 | lotus192 |
1525 | r5nd5pke0d |
1551 | C:ntruees787ep1 |
1768 | lotus256 |
5804 | r5n11pke0d |
5833 | ledapkc1264 |
6025 | ledapkc1364 |
6697 | ledapkc1464 |
7049 | ledapkc12sl |
7369 | ledapkc13sl |
8105 | ledapkc14sl |
9732 | r5n13pke0d |
10185 | ledapkc3264 |
10633 | ledapkc3364 |
11433 | ledapkc3464 |
13145 | ledapkc32sl |
13729 | ledapkc33sl |
14724 | r5n15pke0d |
15401 | ledapkc34sl |
15417 | ledapkc5264 |
15985 | ledapkc5364 |
17737 | ledapkc5464 |
20873 | ledapkc52sl |
21793 | ledapkc53sl |
24169 | ledapkc54sl |
32745 | pqrsa15 |
|
Encrypting many bytes |
bytes | system |
68 | C:4hfe |
75 | ronald1024 |
75 | ronald1536 |
75 | ronald2048 |
75 | ronald3072 |
75 | ronald4096 |
110 | C:mceliece |
141..142..142 | pqrsa15 |
272 | rsa2048 |
284 | cargocult2048 |
544 | C:ntruees401ep2 |
603 | C:ntruees439ep1 |
636 | r5nd1pke5d |
756 | r5nd1pke0d |
794 | C:ntruees593ep1 |
950 | r5nd3pke5d |
980 | C:ntruees743ep1 |
988 | r5n13pke0smallct |
1119 | r5nd3pke0d |
1144 | lotus128 |
1301 | r5nd5pke5d |
1456 | lotus192 |
1525 | r5nd5pke0d |
1573 | C:ntruees787ep1 |
1729 | ledapkc1464 |
1768 | lotus256 |
2064 | ledapkc1364 |
2075 | ledapkc14sl |
2497 | ledapkc13sl |
2909 | ledapkc3464 |
2967 | ledapkc1264 |
3570 | ledapkc12sl |
3594 | ledapkc3364 |
3913 | ledapkc34sl |
4493 | ledapkc5464 |
4635 | ledapkc33sl |
5150 | ledapkc3264 |
5387 | ledapkc5364 |
5804 | r5n11pke0d |
6101 | ledapkc54sl |
6625 | ledapkc32sl |
7322 | ledapkc53sl |
7774 | ledapkc5264 |
9732 | r5n13pke0d |
10497 | ledapkc52sl |
14724 | r5n15pke0d |
56783 | mcnie3q2562 |
65189 | mcnie3q1922 |
66335 | mcnie3q1921 |
67613 | mcnie4q2562 |
70347 | mcnie3q2561 |
72212 | mcnie4q1922 |
72933 | mcnie4q1921 |
74067 | mcnie4q2561 |
79913 | mcnie3q1282 |
81935 | mcnie3q1281 |
88433 | mcnie4q1282 |
93081 | mcnie4q1281 |
|
amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20240808
Measurements Test resultsamd64; Raptor Cove (b06a2); 2023 Intel Core i7-13700H, P cores; 6 x 4800MHz; raptor, supercop-20231107
Measurements Test resultsamd64; Golden Cove (906a4-40); 2022 Intel Core i3-1215U, P cores; 2 x 1600MHz; alder2,1f626960,5600000, supercop-20240808
Measurements Test resultsamd64; Gracemont (906a4-20); 2022 Intel Core i3-1215U, E cores; 4 x 1600MHz; alder2,1f626960,3300000, supercop-20240808
Measurements Test resultsamd64; Golden Cove (90675-00); 2022 Intel Core i3-12100; 4 x 3300MHz; alder, supercop-20240808
Measurements Test resultsamd64; Zen 2 (860f01); 2022 AMD Ryzen 5 4500U; 6 x 3600MHz; renoir, supercop-20240808
Measurements Test resultsamd64; Zen 3 (a50f00); 2021 AMD Ryzen 5 PRO 5650G; 6 x 3900MHz; cezanne, supercop-20240808
Measurements Test resultsamd64; Zen 3 (a50f00); 2021 AMD Ryzen 5 5560U; 6 x 4062MHz; beelink, supercop-20221122
Measurements Test resultsamd64; Zen 2 (860f81); 2021 AMD Ryzen 3 5300U; 4 x 2600MHz; lucienne, supercop-20240808
Measurements Test resultsamd64; Tremont (906c0); 2021 Intel Pentium Silver N6000; 4 x 1100MHz; jasper, supercop-20240808
Measurements Test resultsamd64; Tremont (906c0); 2021 Intel Celeron N5105; 4 x 2000MHz; jasper3, supercop-20240808
Measurements Test resultsamd64; Tremont (906c0); 2021 Intel Celeron N4500; 2 x 1100MHz; jasper2, supercop-20240808
Measurements Test resultsamd64; Zen 3 (a20f10); 2020 AMD Ryzen 5 5600X; 6 x 3700MHz; unstable; spawn, supercop-20231215
Measurements Test resultsamd64; Zen (820f01); 2020 AMD Athlon Silver 3050e; 2 x 1400MHz; dali, supercop-20240808
Measurements Test resultsamd64; Tiger Lake (806c1); 2020 Intel Core i7-1165G7; 4 x 2800MHz; panther, supercop-20240808
Measurements Test resultsaarch64; Cortex-A72 (410fd083); 2019 Broadcom BCM2711; 4 x 1500MHz; pi4b, supercop-20240808
Measurements Test resultsamd64; Zen 2 (830f10); 2019 AMD EPYC 7742; 64 x 2250MHz; rome0, supercop-20240808
Measurements Test resultsamd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; comet, supercop-20240808
Measurements Test resultsamd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; cubi10, supercop-20240808
Measurements Test resultsamd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; know, supercop-20240808
Measurements Test resultsamd64; Ice Lake (706e5); 2019 Intel Core i3-1035G1; 4 x 1000MHz; icelake2, supercop-20221005
Measurements Test resultsamd64; Goldmont Plus (706a8); 2019 Intel Celeron N4020; 2 x 1100MHz; gemini, supercop-20240808
Measurements Test resultsaarch64; Skylark (503f0002); 2018 Ampere eMAG 8180; 32 x 3300MHz; unstable; gcc185, supercop-20240107
Measurements Test resultsaarch64; Cortex-A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3aplus, supercop-20240425
Measurements Test resultsaarch64; Cortex-A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3bplus, supercop-20231107
Measurements Test resultsamd64; Coffee Lake (906ea); 2018 Intel Xeon E-2124; 4 x 3300MHz; r24000, supercop-20240808
Measurements Test resultsamd64; Coffee Lake (806ea); 2018 Intel Core i3-8109U; 2 x 3000MHz; like, supercop-20240808
Measurements Test resultsriscv64; U54 (sifive,u54-mc); 2017 SiFive Freedom U540; 4 x 1000MHz; riscvunleashed000, supercop-20240107
Measurements Test resultsamd64; Zen (800f11); 2017 AMD Ryzen 7 1700; 8 x 3000MHz; rumba7, supercop-20240808
Measurements Test resultsamd64; Zen (800f11); 2017 AMD Ryzen 5 1600; 6 x 3200MHz; rumba5, supercop-20240808
Measurements Test resultsamd64; Zen (800f11); 2017 AMD Ryzen 3 1200; 4 x 3100MHz; rumba3, supercop-20221122
Measurements Test resultsamd64; Kaby Lake (906e9); 2017 Intel Xeon E3-1220 v6; 4 x 3000MHz; kizomba, supercop-20240808
Measurements Test resultsamd64; Kaby Lake (806e9); 2017 Intel Core i3-7100; 2 x 2400MHz; whosthere, supercop-20221122
Measurements Test resultsarmeabi; Cortex-A7 (410fc075); 2016 Broadcom BCM2836; 4 x 900MHz; berry2, supercop-20240425
Measurements Test resultsamd64; Goldmont (506c9); 2016 Intel Celeron J3455; 4 x 1500MHz; wooden, supercop-20240808
Measurements Test resultsamd64; Broadwell+AES (406f1); 2016 Intel Xeon E5-2609 v4; 8 x 1700MHz; bolero, supercop-20240808
Measurements Test resultsamd64; Silvermont (406c4); 2016 Intel Atom x5-Z8350; 4 x 1440MHz; cherry, supercop-20240808
Measurements Test resultsamd64; Skylake (506e3); 2015 Intel Xeon E3-1220 v5; 4 x 3000MHz; samba, supercop-20240808
Measurements Test resultsamd64; Airmont (406c3); 2015 Intel Pentium N3700; 4 x 1600MHz; nucnuc, supercop-20240625
Measurements Test resultsamd64; Broadwell+AES (306d4); 2015 Intel Core i3-5005U; 2 x 1900MHz; shoe, supercop-20240808
Measurements Test resultsarmeabi; Cortex-A17 (410fc0d1); 2014 Rockchip RK3288; 4 x 1800MHz; tinker, supercop-20240107
Measurements Test resultsamd64; Haswell+AES (306c3); 2013 Intel Xeon E3-1275 V3; 4 x 3500MHz; titan0, supercop-20240808
Measurements Test resultsamd64; Haswell+AES (306c3); 2013 Intel Xeon E3-1220 v3; 4 x 3100MHz; hiphop, supercop-20231107
Measurements Test resultsamd64; Haswell+AES (306c3); 2013 Intel Core i7-4770; 4 x 3400MHz; speed2supercop, supercop-20240808
Measurements Test resultsamd64; Haswell+AES (306c3); 2013 Intel Core i7-4765T; 4 x 2000MHz; prodesk, supercop-20240808
Measurements Test resultsarmeabi; Cortex-A8 (413fc082); 2012 TI Sitara XAM3359AZCZ100; 1 x 1000MHz; bblack, supercop-20240425
Measurements Test resultsamd64; Bulldozer (600f20); 2012 AMD FX-8350; 4 x 4000MHz; saber214, supercop-20240808
Measurements Test resultsamd64; Ivy Bridge+AES (306a9); 2012 Intel Xeon E3-1275 V2; 4 x 3500MHz; hydra8, supercop-20240808
Measurements Test resultsamd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3427U; 2 x 1800MHz; hunsnivy, supercop-20240808
Measurements Test resultsarmeabi; Cortex-A9+NEON (412fc09a); 2011 Freescale i.MX6 Quad; 4 x 1200MHz; unstable; novena, supercop-20220506
Measurements Test resultsarmeabi; ARM1176 (410fb767); 2011 Broadcom BCM2835; 1 x 1000MHz; berry0, supercop-20240107
Measurements Test resultsmipso32; Octeon II (cnmips64v2); 2011 Cavium Octeon II CN6120; 2 x 2000MHz; gcc23, supercop-20230530
Measurements Test resultsamd64; Bobcat (500f10); 2011 AMD G-T56N; 2 x 1650MHz; h8bobcat, supercop-20240808
Measurements Test resultsamd64; K10 32nm (300f10); 2011 AMD A8-3850; 4 x 2900MHz; hydra5, supercop-20240808
Measurements Test resultsamd64; K10 32nm (300f10); 2011 AMD A6-3650; 4 x 2600MHz; hydra4, supercop-20240808
Measurements Test resultsamd64; Bonnell (30661); 2011 Intel Atom D2500; 2 x 1866MHz; h8atom, supercop-20240808
Measurements Test resultsamd64; Sandy Bridge+AES (206a7); 2011 Intel Xeon E3-1225; 4 x 3100MHz; hydra7, supercop-20240808
Measurements Test resultsamd64; Sandy Bridge (206a7); 2011 Intel Core i3-2310M; 2 x 2100MHz; h6sandy, supercop-20240808
Measurements Test resultsamd64; K10 45nm (100f63); 2010 AMD Athlon II Neo K125; 1 x 1700MHz; h3neo, supercop-20240808
Measurements Test resultsamd64; Bonnell (106ca); 2010 Intel Atom N455; 1 x 1000MHz; h2atom, supercop-20240107
Measurements Test resultsamd64; Core 2 45nm (1067a); 2009 Intel Core 2 Duo E7600; 2 x 3060MHz; wolfdale, supercop-20240808
Measurements Test resultsamd64; Core 2 45nm (10676); 2007 Intel Xeon X5450; 8 x 2992MHz; unstable; gcc14, supercop-20220506
Measurements Test resultsamd64; Core 2 65nm (6fb); 2007 Intel Core 2 Quad Q6600; 4 x 2404MHz; margaux, supercop-20240808
Measurements Test resultsamd64; Core 2 65nm (6fb); 2007 Intel Core 2 Duo T7300; 2 x 2000MHz; trident, supercop-20240808
Measurements Test results |