VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems
ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of key-encapsulation mechanisms on one machine: amd64; Coffee Lake (806ea); 2018 Intel Core i3-8109U; 2 x 3000MHz; like, supercop-20250922

[Page version: 20251015 23:19:26]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for key-encapsulation mechanisms:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol C: means that the current SUPERCOP database does not list IND-CCA2 security as a goal for this key-encapsulation mechanism. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each key-encapsulation mechanism and each implementation. Designers and implementors interested in submitting new key-encapsulation mechanisms and new implementations of existing systems should read the call for submissions.

Test results

Graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

NISTPQC graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

Cycles to generate a key pair
25%50%75%system
170441719817326kyber90s512
187391878222561ntruplus576
225782281422956kyber512
235052355323602ntruplus768
250512522525414kyber90s768
262012624826295ntruplus864
319053207632381
T:
C:nhcompact512cca
326763275032876smaugt1
326963278432921timer
342503459434830
T:
lac128
357313577735886
T:
lightsaber2
357033595136292kyber90s1024
371603777838044ntrulpr653
34455?38401?43984?ntruplus1152
385673867938779
T:
ntrulpr4591761
391603947239886kyber768
399394004840786ntrulpr761
443814467744880
T:
C:nhcompact768cca
500795025350686ntrulpr857
508615107051234T!!!newhope512cca
510545121051624smaugt3
519145237952989ntrulpr1013
535275398254534ntrulpr953
540245421254617kyber1024
559995619656469
T:
C:nhcompact1024cca
639616400464132
T:
saber2
691626943170297ntrulpr1277
696656991370217smaugt5
813678197585685
T:
hqc128round4
818228207082318
T:
lac256
898409012390505
T:
lac192
963059661196945T!!!newhope1024cca
976129780598010
T:
firesaber2
155789157138158944
T:
C:hila5
159288175373178825ntruhps2048509
186972187208191292C:threebears624r2cpa
189380189531190391
T:
hqc192round4
193505199047206756threebears624r2cca
251393251852279314ntruhrss701
257353257687258257
T:
kindi256342
273021273904274753
T:
kindi512222
278881279370280021
T:
kindi512241
266871286373324206ntruhps2048677
355624358204361242
T:
hqcrmrs128
362399367798386415ntruhps4096821
390155390507431569threebears936r2cca
391525392420393006
T:
hqc256round4
400541401986419095
T:
hqc128
402223402523426262C:threebears936r2cpa
415264423656438252
T:
ntrukem443
431531434337450835
T:
hqc1281
543538544334544777
T:
kindi512321
597408599767601789
T:
C:bikel1
626635628345654888sntrup653
655452655855656974
T:
kindi256522
668657689995721743C:threebears1248r2cpa
691289699054700651threebears1248r2cca
725761727207761859sntrup761
727475729302754295
T:
hqcrmrs192
745782748607752240
T:
rqc128
782343783849811456
T:
hqc1921
814350816954843502
T:
hqc192
837912845594863984sntrup4591761
850031859636874924
T:
C:edonk128k16n80nu4l6
836423860941871672
T:
hqc1922
945206948515953437
T:
ntrukem743
955573959324962693
T:
C:rolloi128
106204810647401098945sntrup857
109723310979231099042
T:
frodokem640
117003112061761216339
T:
hqcrmrs256
118230112173191230079
T:
hqc2561
127495912916841310059sntrup953
128804512945501332385
T:
hqc2562
129515112982451302263
T:
C:rolloi192
1293395?1315338?1875217?
T:
rqc192
130884813166851348621
T:
hqc256
134803913490421351268
T:
frodokem640aes
134994513797961407949
T:
hqc2563
141986614232271430292
T:
C:edonk128k16n80nu8l6
142373714511081462575sntrup1013
160037016183531641032
T:
C:edonk128k32n96nu4l4
167822116811661722452
T:
C:bikel3
172876417308551734843
T:
C:rolloi256
189281518967321907126
T:
rqc256
196299019800682016154
T:
C:edonk192k32n128nu4l6
201103220167022026373
T:
C:edonk128ref
221086422228122225641sntrup1277
237914023844542388541
T:
frodokem976
247174024820562501078
T:
C:lake1
260895526159762621275
T:
C:lake2
275035327604742771099
T:
C:lake3
281736128218532825520
T:
frodokem976aes
294290129666642998275
T:
C:edonk192k48n144nu4l4
363863736426693824204
T:
frodokem640shake
423250542373004243976
T:
rolloii128
441069244138954418282
T:
rolloii192
444332944534214468419
T:
locker1
475749047643564770132
T:
frodokem1344aes
495347749634884976185
T:
locker2
509232851022935113649
T:
rolloii256
529967953248745341315
T:
locker3
587504658788725910656
T:
sikep434
590342659149575928644
T:
locker4
647702365091036619670
T:
remblem928
650120965147906528062
T:
remblem1056
667702966913346786388
T:
locker6
723987072474267549564
T:
frodokem976shake
777561477983567815613
T:
locker5
814686481544228184408
T:
sikep503
9608418964095410478775
T:
sikep434comp
938340699325069993820
T:
lotus128
114371511145240411484113
T:
locker7
124181041242749112442267
T:
locker8
129761501299033013011060
T:
locker9
130642271310707513137810
T:
frodokem1344shake
133061121335914714564326
T:
sikep503comp
148012431482372614967558
T:
sikep610
182127631833801418479105
T:
lotus192
207009452076137120854325
T:
mersenne756839
249167572492638224931303
T:
sikep751
254917412553813527596084
T:
sikep610comp
303045863044848230798633mceliece348864f
309131483097639231035662mceliece348864pcf
301327233173062831964317
T:
lotus256
393684403940610743226772
T:
sikep751comp
31159676?41672975?72664083?mceliece348864
443405984492123145256986
T:
ntskem1264
30645749?50397114?70579427?mceliece348864pc
949312159593226196072795mceliece460896pcf
54479198?98710174?142187413?
T:
rsa2048
99336532100081913100320291mceliece460896f
103868588105362030106953773
T:
ntskem1380
99806878?132732948?200108464?mceliece460896
102021558?133355281?198182403?mceliece460896pc
187593093187795503188311776mceliece6960119f
188124107188482261189058045mceliece6960119pcf
232230121233356298234274057mceliece6688128f
232059416234883428235296474mceliece6688128pcf
239516683239687799240187529mceliece8192128pcf
239969090240352769241063033mceliece8192128f
246176905246472489247847184
T:
oddmanhattan128
243840904247177898247699183
T:
ntskem13136
190931180?256133621?440731794?mceliece6960119pc
233603170?306525372?516014180?mceliece6688128pc
191253400?315142303?381438686?mceliece6960119
240627921?322180740?456478522?mceliece8192128
238392310?376008941?521044394?mceliece6688128
241416566?383868914?529182160?mceliece8192128pc
394976258396721022397786588
T:
oddmanhattan192
704600528709352302709884459
T:
oddmanhattan256
852125135861497165867122465
T:
bigquake1
783067667179306932298054395813
T:
bigquake3
141949771541428848291714377027093
T:
bigquake5
Cycles for encapsulation
25%50%75%system
147261546016174
T:
rsa2048
212902133321394ntruplus576
216392167421742smaugt1
218502193922233timer
223772322524564ntruhps2048509
236282375324053ntruhrss701
266452669226771ntruplus768
291172916629209kyber90s512
306673072830836ntruplus864
313003256034179mceliece348864f
313363273334537mceliece348864
325923333434376ntruhps2048677
344343458134789kyber512
373413814139282ntruhps4096821
389353911139506sntrup4591761
395103956239645kyber90s768
390483977739932sntrup653
394224053842326mceliece348864pc
394134060642132mceliece348864pcf
407304079241051ntruplus1152
424484252042644sntrup761
440734414444982smaugt3
478814793648060
T:
lightsaber2
515755162951716kyber768
526235269652787
T:
C:nhcompact512cca
520275272352879sntrup857
533695345653528kyber90s1024
568355689957178sntrup953
571365771858070sntrup1013
615056165161873smaugt5
616836208462171ntrulpr653
653366539765488ntrulpr761
619816700174664mceliece460896
674126749567637
T:
ntrulpr4591761
676386818470409
T:
lac128
62103?70145?81711?mceliece460896f
712397130371409
T:
C:nhcompact768cca
721637230372587kyber1024
729727309273196sntrup1277
712437623282667mceliece460896pcf
704907690587493mceliece460896pc
779747885279303
T:
ntskem1264
803018035580406
T:
saber2
823968291083120ntrulpr857
834878363283762T!!!newhope512cca
857338608386833ntrulpr1013
875538802888183ntrulpr953
929709307993196
T:
C:nhcompact1024cca
100461103182111473
T:
C:edonk128k16n80nu4l6
100186104538113773mceliece6688128f
107186110009115642mceliece6960119f
103087110122117302mceliece6688128
108815111596117242mceliece6960119
112070113004113205ntrulpr1277
115442116030116780
T:
C:bikel1
117301117399117560
T:
firesaber2
113517117480127146mceliece6688128pcf
116314117602119597mceliece8192128
116359117732119134mceliece8192128f
114323118372125789mceliece6688128pc
119297122521128319mceliece6960119pcf
120416123457127579mceliece6960119pc
122848125507128346
T:
ntrukem443
128548129580131617mceliece8192128pc
129040130397132274mceliece8192128pcf
138615139061139483
T:
lac192
156308156553156959T!!!newhope1024cca
157384157862158938
T:
C:rolloi128
146418162164162633
T:
lotus128
160836162716165439
T:
lac256
179315180505183394
T:
C:rolloi192
206327207000207691
T:
C:rolloi256
208972210523211190
T:
lotus192
216554217763221308
T:
C:hila5
220779221032237129
T:
hqc128round4
220901222164232975
T:
ntskem1380
231207233684237158
T:
ntrukem743
234255237909244345
T:
C:edonk128k16n80nu8l6
267582270843275317C:threebears624r2cpa
270202271137271953
T:
C:bikel3
258854278694281215threebears624r2cca
293284296832305531
T:
C:edonk128k32n96nu4l4
296794298875299924
T:
lotus256
337549337843338396
T:
kindi256342
299044?341197?383363?
T:
ntskem13136
397962398815399499
T:
kindi512222
403636404219405173
T:
kindi512241
431335435704444093
T:
C:edonk128ref
459905463043470475
T:
C:lake1
488997489342549449threebears936r2cca
493036493723494630
T:
hqc192round4
506062506854527524
T:
hqcrmrs128
506455508597510944
T:
C:lake2
513138516315519237
T:
C:edonk192k32n128nu4l6
520532521155522436
T:
rolloii128
494236528707553376C:threebears936r2cpa
541407542500543354
T:
rolloii192
543966563527565653
T:
hqc128
565165566990569023
T:
C:lake3
592503593573594762
T:
rolloii256
653949658059677508
T:
hqc1281
710985712471718286
T:
kindi512321
767085770250780149
T:
locker1
786884787932791718
T:
kindi256522
817026820751825890
T:
locker2
800019823628850410C:threebears1248r2cpa
819511823973831849
T:
C:edonk192k48n144nu4l4
824923848729852997threebears1248r2cca
888308891869896133
T:
locker3
936090937189940853
T:
hqc256round4
100864410115961014345
T:
locker4
101835010206311024267
T:
rqc128
102841710328771063235
T:
hqcrmrs192
111871711236791129788
T:
locker6
112495311302331162291
T:
hqc192
117512011867981214016
T:
hqc1921
126676512725611278866
T:
locker5
127927012855781314378
T:
hqc1922
162504716258841627044
T:
frodokem640
170312517444821748832
T:
hqcrmrs256
181051418120821813067
T:
frodokem640aes
182771218634181875689
T:
hqc2561
185683618674111901401
T:
hqc256
187668018817261906471
T:
locker7
1829887?1882953?2400084?
T:
rqc192
193043919755371990951
T:
hqc2562
201885320267772042319
T:
locker8
211312521168732121573
T:
locker9
209471221233592165009
T:
hqc2563
235321924274402493285
T:
bigquake1
2601967?2622791?3468098?
T:
rqc256
328757332921743308126
T:
frodokem976
356583735685723571582
T:
frodokem976aes
387667338902584200400
T:
frodokem640shake
599241860000436004585
T:
frodokem1344aes
732117175478037796880
T:
bigquake3
766810576777838036877
T:
frodokem976shake
959628595984359611291
T:
sikep434
964769596600629686309
T:
remblem1056
961095996861029783999
T:
remblem928
112954081145792711786519
T:
bigquake5
133121721338043413393657
T:
sikep503
137408111377764513793159
T:
frodokem1344shake
149922291501977215083162
T:
sikep434comp
202640572028376220312446
T:
mersenne756839
206281232065622720744135
T:
sikep503comp
271293282713407127152368
T:
sikep610
374212413776436238108594
T:
sikep610comp
403221474032976540338321
T:
sikep751
540338055418216154395656
T:
oddmanhattan128
629008396310546563222150
T:
sikep751comp
103623072103799563103976109
T:
oddmanhattan192
210838866211385839213394902
T:
oddmanhattan256
Cycles for decapsulation
25%50%75%system
158721590215945ntruplus576
192811931419347ntruplus768
208752092320999kyber90s512
228942295623095ntruplus864
269422722027252kyber512
286202869928814kyber90s768
303113034830400ntruplus1152
331753325633330smaugt1
338293390734009timer
377483877141491ntruhps2048509
401744041040524kyber90s1024
412794163041715kyber768
469164695847011
T:
lightsaber2
504635068952533
T:
C:hila5
508975096051051
T:
C:nhcompact512cca
509915105051113sntrup761
536225367453733sntrup653
574785755960447ntruhrss701
588395889059066kyber1024
561415892361870ntruhps2048677
596665990760070smaugt3
695916969569878
T:
C:nhcompact768cca
728237296776599ntruhps4096821
730597316873298sntrup857
740687458974881ntrulpr653
775947768477789ntrulpr761
777917785277946sntrup953
779477800778081
T:
saber2
782727874478807sntrup1013
822618235383528smaugt5
833178345083547sntrup4591761
885949028090758
T:
lac128
905419078190888T!!!newhope512cca
919279201392120
T:
C:nhcompact1024cca
964669661996772
T:
ntrulpr4591761
968439693496989sntrup1277
100644100930101015ntrulpr857
102959104188104312ntrulpr1013
106195106550106678ntrulpr953
115002115146115893
T:
firesaber2
118294118589119037mceliece348864
118486118814119032mceliece348864f
119413124147125984C:threebears624r2cpa
126292126428126667mceliece348864pcf
126423126720127180mceliece348864pc
134235135133135356ntrulpr1277
135071135883136843
T:
ntrukem443
153517156962158668C:threebears936r2cpa
169469169828170272T!!!newhope1024cca
170005170582182198
T:
lotus128
193174193700193981
T:
lac192
193526200525207090C:threebears1248r2cpa
235638235889236538mceliece460896
235560236436237105mceliece460896f
244298244430244678mceliece460896pc
246100248918249583
T:
lotus192
251183251782252117mceliece460896pcf
267540267912268378mceliece6960119f
267470267948268652mceliece6960119
267727268703271735
T:
ntrukem743
278917279214280159mceliece6960119pcf
279335279832280083mceliece6960119pc
285776286246286959mceliece6688128f
287367287623288002mceliece8192128
286572287848289333mceliece6688128
287763288038288400mceliece8192128f
292213293440294886
T:
ntskem1264
296023296765297271mceliece6688128pc
296656297140297658mceliece6688128pcf
298897299951301615mceliece8192128pcf
299217300874302857mceliece8192128pc
308053310897314378
T:
lac256
359002360541363178
T:
lotus256
382419382922410560
T:
hqc128round4
424724425128426261
T:
kindi256342
536681538617560660
T:
kindi512222
543486545194546516
T:
kindi512241
560042560685561575
T:
ntskem1380
586332609702629522threebears624r2cca
787785788357789468
T:
hqc192round4
832696833780847216
T:
hqc128
870522874162934630
T:
hqcrmrs128
899847900782902491
T:
kindi512321
925540926281934694
T:
kindi256522
107919010813041081846threebears936r2cca
107789610989601129577
T:
ntskem13136
112644911291431134249
T:
C:rolloi128
116090111649281187677
T:
hqc1281
136715113693601373287
T:
C:rolloi192
154047915418381548662
T:
hqc256round4
154836215554691572606
T:
hqcrmrs192
156999115950261665420
T:
hqc192
161597916177361620045
T:
C:bikel1
162441616251761626143
T:
frodokem640
168901617141471850741threebears1248r2cca
173887517396241741936
T:
frodokem640aes
183341018420341845591
T:
rolloii128
188093218840131901639
T:
hqc1921
191864519317311963919
T:
hqc1922
194780219508271954240
T:
C:lake1
201494020180922022556
T:
rolloii192
209161920930792094059
T:
rsa2048
218834521905482196692
T:
C:rolloi256
225384123188222504558
T:
C:edonk192k48n144nu4l4
250328825074132585639
T:
hqcrmrs256
248288925265802534011
T:
hqc256
255514325596242568618
T:
rolloii256
270757027688602808989
T:
hqc2561
287236628999342904723
T:
hqc2562
303299030495753145047
T:
hqc2563
320238532305093271696
T:
bigquake1
329559633079043310602
T:
frodokem976
331100133221083337251
T:
C:lake2
341711334207113424584
T:
frodokem976aes
352785235333433544691
T:
rqc128
381896338344554060898
T:
frodokem640shake
383906038572933870734
T:
locker1
404117040509674058097
T:
locker2
438802244049244417735
T:
locker4
459105446042404616406
T:
C:lake3
504858850541395229169
T:
C:bikel3
579209658036395815529
T:
frodokem1344aes
579850658122665822779
T:
locker3
629668463150786340986
T:
locker6
1912912?6391088?8557330?
T:
C:edonk128k32n96nu4l4
658276165909346599362
T:
locker5
696636570561328089116
T:
rqc192
714372871763517194516
T:
locker7
738851173963907414638
T:
frodokem976shake
747694874950407511666
T:
locker8
979806598131889841961
T:
locker9
102549901027160510273418
T:
sikep434
108605931087783212586786
T:
rqc256
109401071095309111025206
T:
sikep434comp
129922431300344013035267
T:
remblem1056
129076921302011813133425
T:
remblem928
136290361365996613686084
T:
frodokem1344shake
141709241426683014271673
T:
sikep503
151797831518631315202413
T:
sikep503comp
10591606?15545243?77205448?
T:
C:edonk128k16n80nu8l6
273440032738028927454087
T:
sikep610
289858602901445829156881
T:
sikep610comp
297135212993629229973337
T:
mersenne756839
300404133038156930505522
T:
bigquake3
434814674351270643521313
T:
sikep751
450360984532791545551760
T:
bigquake5
461855124631904646370313
T:
sikep751comp
585805015887534258984754
T:
oddmanhattan128
33641933?74859566?105306875?
T:
C:edonk128ref
32027141?83032259?91759694?
T:
C:edonk192k32n128nu4l6
75280416?104730200?107306149?
T:
C:edonk128k16n80nu4l6
113569844113738690113988689
T:
oddmanhattan192
230652448232732222234686367
T:
oddmanhattan256