VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems
ECRYPT II
General information: Introduction eBASH eBASC eBAEAD eBATS SUPERCOP XBX Computers Arch
How to submit new software: Tips hash stream aead dh kem encrypt sign
List of primitives measured: lwc sha3 hash stream lwc caesar aead dh kem encrypt sign
Measurements: lwc sha3 hash stream lwc caesar aead dh kem encrypt sign
List of subroutines: verify decode encode sort core hashblocks xof scalarmult

List of key-encapsulation mechanisms measured

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page lists the key-encapsulation mechanisms covered by SUPERCOP. The page then lists implementations of these systems.

There is a separate page that lists machines and, for each machine, the measurements of these systems.

Designers and implementors interested in submitting new key-encapsulation mechanisms and new implementations of existing systems should read the call for submissions.

Which key-encapsulation mechanisms are measured?

PrimitiveDescriptionDesigners
bigquake1
bigquake3
bigquake5
bike1l1
bike1l1nc
bike1l1sc
bike2l1
bike2l1nc
bike2l1sc
bike3l1
bike3l1nc
bike3l1sc
bikel1 BIKE Level 1 (2020.05 version)
bikel3 BIKE Level 3 (2020.05 version)
dags3
dags5
dags3v2
dags5v2
edonk128k08n72nu8l8 An alternative Edon-K KEM proposal in Category 1. Conjectured security requires computational resources comparable to or greater than those required for key search on a block cipher with a 128-bit key (e.g. AES128) - Category 1 Danilo Gligoroski
edonk128k16n80nu4l6 An alternative Edon-K KEM proposal in Category 1. Conjectured security requires computational resources comparable to or greater than those required for key search on a block cipher with a 128-bit key (e.g. AES128) - Category 1 Danilo Gligoroski
edonk128k16n80nu8l6 An alternative Edon-K KEM proposal in Category 1. Conjectured security requires computational resources comparable to or greater than those required for key search on a block cipher with a 128-bit key (e.g. AES128) - Category 1 Danilo Gligoroski
edonk128k32n96nu4l4 An alternative Edon-K KEM proposal in Category 1. Conjectured security requires computational resources comparable to or greater than those required for key search on a block cipher with a 128-bit key (e.g. AES128) - Category 1 Danilo Gligoroski
edonk128ref Reference proposal KEM Edon-K128 in Category 1. Conjectured security requires computational resources comparable to or greater than those required for key search on a block cipher with a 128-bit key (e.g. AES128) - Category 1 Danilo Gligoroski
edonk192k16n112nu4l8 An alternative Edon-K KEM proposal in Category 3. Conjectured security requires computational resources comparable to or greater than those required for key search on a block cipher with a 192-bit key (e.g. AES192) - Category 3 Danilo Gligoroski
edonk192k32n128nu4l6 An alternative Edon-K KEM proposal in Category 3. Conjectured security requires computational resources comparable to or greater than those required for key search on a block cipher with a 192-bit key (e.g. AES192) - Category 3 Danilo Gligoroski
edonk192k48n144nu4l4 An alternative Edon-K KEM proposal in Category 3. Conjectured security requires computational resources comparable to or greater than those required for key search on a block cipher with a 192-bit key (e.g. AES192) - Category 3 Danilo Gligoroski
edonk192ref Reference proposal KEM Edon-K192 in Category 3. Conjectured security requires computational resources comparable to or greater than those required for key search on a block cipher with a 192-bit key (e.g. AES192) - Category 3 Danilo Gligoroski
firesaber
firesaber2 FireSABER (NISTPQC round 2)
frodokem640
frodokem976
frodokem1344aes FrodoKEM-1344-AES (NISTPQC round 2) Erdem Alkim
Joppe W. Bos (NXP Semiconductors)
Léo Ducas (CWI)
Patrick Longa (Microsoft Research)
Ilya Mironov (Google)
Michael Naehrig (Microsoft Research)
Valeria Nikolaenko
Chris Peikert (University of Michigan)
Ananth Raghunathan (Google)
Douglas Stebila (University of Waterloo)
frodokem1344shake FrodoKEM-1344-SHAKE (NISTPQC round 2) Erdem Alkim
Joppe W. Bos (NXP Semiconductors)
Léo Ducas (CWI)
Patrick Longa (Microsoft Research)
Ilya Mironov (Google)
Michael Naehrig (Microsoft Research)
Valeria Nikolaenko
Chris Peikert (University of Michigan)
Ananth Raghunathan (Google)
Douglas Stebila (University of Waterloo)
frodokem640aes FrodoKEM-640-AES (NISTPQC round 2) Erdem Alkim
Joppe W. Bos (NXP Semiconductors)
Léo Ducas (CWI)
Patrick Longa (Microsoft Research)
Ilya Mironov (Google)
Michael Naehrig (Microsoft Research)
Valeria Nikolaenko
Chris Peikert (University of Michigan)
Ananth Raghunathan (Google)
Douglas Stebila (University of Waterloo)
frodokem640shake FrodoKEM-640-SHAKE (NISTPQC round 2) Erdem Alkim
Joppe W. Bos (NXP Semiconductors)
Léo Ducas (CWI)
Patrick Longa (Microsoft Research)
Ilya Mironov (Google)
Michael Naehrig (Microsoft Research)
Valeria Nikolaenko
Chris Peikert (University of Michigan)
Ananth Raghunathan (Google)
Douglas Stebila (University of Waterloo)
frodokem976aes FrodoKEM-976-AES (NISTPQC round 2) Erdem Alkim
Joppe W. Bos (NXP Semiconductors)
Léo Ducas (CWI)
Patrick Longa (Microsoft Research)
Ilya Mironov (Google)
Michael Naehrig (Microsoft Research)
Valeria Nikolaenko
Chris Peikert (University of Michigan)
Ananth Raghunathan (Google)
Douglas Stebila (University of Waterloo)
frodokem976shake FrodoKEM-976-SHAKE (NISTPQC round 2) Erdem Alkim
Joppe W. Bos (NXP Semiconductors)
Léo Ducas (CWI)
Patrick Longa (Microsoft Research)
Ilya Mironov (Google)
Michael Naehrig (Microsoft Research)
Valeria Nikolaenko
Chris Peikert (University of Michigan)
Ananth Raghunathan (Google)
Douglas Stebila (University of Waterloo)
hila5
hqc128 HQC-128 (2020.04 version)
hqc192 HQC-192 (2020.04 version)
hqc256 HQC-256 (2020.04 version)
hqc1281
hqc1921
hqc1922
hqc2561
hqc2562
hqc2563
hqc128round4
hqc192round4
hqc256round4
hqcrmrs128 HQC-RMRS-128 (2020.04 version)
hqcrmrs192 HQC-RMRS-192 (2020.04 version)
hqcrmrs256 HQC-RMRS-256 (2020.04 version)
kindi256342
kindi256522
kindi512222
kindi512241
kindi512321
kyber512 Kyber-512 (NISTPQC round 3); was smaller round-2 Kyber-512 before supercop-20210125 Roberto Avanzi (ARM Limited)
Joppe Bos (NXP Semiconductors)
Léo Ducas (CWI)
Eike Kiltz (Ruhr-Universität Bochum)
Tancrède Lepoint (SRI International)
Vadim Lyubashevsky (IBM Research)
John M. Schanck (University of Waterloo)
Peter Schwabe (MPI Bochum)
Gregor Seiler (IBM Research)
Damien Stehlé (ENS de Lyon)
kyber768 Kyber-768 (NISTPQC round 3); was round-2 Kyber-768 before supercop-20210125 Roberto Avanzi (ARM Limited)
Joppe Bos (NXP Semiconductors)
Léo Ducas (CWI)
Eike Kiltz (Ruhr-Universität Bochum)
Tancrède Lepoint (SRI International)
Vadim Lyubashevsky (IBM Research)
John M. Schanck (University of Waterloo)
Peter Schwabe (MPI Bochum)
Gregor Seiler (IBM Research)
Damien Stehlé (ENS de Lyon)
kyber1024 Kyber-1024 (NISTPQC round 3); was round-2 Kyber-1024 before supercop-20210125 Roberto Avanzi (ARM Limited)
Joppe Bos (NXP Semiconductors)
Léo Ducas (CWI)
Eike Kiltz (Ruhr-Universität Bochum)
Tancrède Lepoint (SRI International)
Vadim Lyubashevsky (IBM Research)
John M. Schanck (University of Waterloo)
Peter Schwabe (MPI Bochum)
Gregor Seiler (IBM Research)
Damien Stehlé (ENS de Lyon)
kyber90s512 Kyber-90s-512 (NISTPQC round 3); was smaller round-2 Kyber-90s-512 before supercop-20210125 Roberto Avanzi (ARM Limited)
Joppe Bos (NXP Semiconductors)
Léo Ducas (CWI)
Eike Kiltz (Ruhr-Universität Bochum)
Tancrède Lepoint (SRI International)
Vadim Lyubashevsky (IBM Research)
John M. Schanck (University of Waterloo)
Peter Schwabe (MPI Bochum)
Gregor Seiler (IBM Research)
Damien Stehlé (ENS de Lyon)
kyber90s768 Kyber-90s-768 (NISTPQC round 3); was round-2 Kyber-90s-768 before supercop-20210125 Roberto Avanzi (ARM Limited)
Joppe Bos (NXP Semiconductors)
Léo Ducas (CWI)
Eike Kiltz (Ruhr-Universität Bochum)
Tancrède Lepoint (SRI International)
Vadim Lyubashevsky (IBM Research)
John M. Schanck (University of Waterloo)
Peter Schwabe (MPI Bochum)
Gregor Seiler (IBM Research)
Damien Stehlé (ENS de Lyon)
kyber90s1024 Kyber-90s-1024 (NISTPQC round 3); was round-2 Kyber-90s-1024 before supercop-20210125 Roberto Avanzi (ARM Limited)
Joppe Bos (NXP Semiconductors)
Léo Ducas (CWI)
Eike Kiltz (Ruhr-Universität Bochum)
Tancrède Lepoint (SRI International)
Vadim Lyubashevsky (IBM Research)
John M. Schanck (University of Waterloo)
Peter Schwabe (MPI Bochum)
Gregor Seiler (IBM Research)
Damien Stehlé (ENS de Lyon)
lac128
lac192
lac256
lake1
lake2
lake3
ledakem1264 LEDAcrypt-KEM cat=1 n0=2 dfr=64 (2020.03 version) Marco Baldi m.baldi@univpm.it
Alessandro Barenghi alessandro.barenghi@polimi.it
Franco Chiaraluce f.chiaraluce@univpm.it
Gerardo Pelosi gerardo.pelosi@polimi.it
Paolo Santini p.santini@pm.univpm.it
ledakem1364 LEDAcrypt-KEM cat=1 n0=3 dfr=64 (2020.03 version) Marco Baldi m.baldi@univpm.it
Alessandro Barenghi alessandro.barenghi@polimi.it
Franco Chiaraluce f.chiaraluce@univpm.it
Gerardo Pelosi gerardo.pelosi@polimi.it
Paolo Santini p.santini@pm.univpm.it
ledakem1464 LEDAcrypt-KEM cat=1 n0=4 dfr=64 (2020.03 version) Marco Baldi m.baldi@univpm.it
Alessandro Barenghi alessandro.barenghi@polimi.it
Franco Chiaraluce f.chiaraluce@univpm.it
Gerardo Pelosi gerardo.pelosi@polimi.it
Paolo Santini p.santini@pm.univpm.it
ledakem3264 LEDAcrypt-KEM cat=3 n0=2 dfr=64 (2020.03 version) Marco Baldi m.baldi@univpm.it
Alessandro Barenghi alessandro.barenghi@polimi.it
Franco Chiaraluce f.chiaraluce@univpm.it
Gerardo Pelosi gerardo.pelosi@polimi.it
Paolo Santini p.santini@pm.univpm.it
ledakem3364 LEDAcrypt-KEM cat=3 n0=3 dfr=64 (2020.03 version) Marco Baldi m.baldi@univpm.it
Alessandro Barenghi alessandro.barenghi@polimi.it
Franco Chiaraluce f.chiaraluce@univpm.it
Gerardo Pelosi gerardo.pelosi@polimi.it
Paolo Santini p.santini@pm.univpm.it
ledakem3464 LEDAcrypt-KEM cat=3 n0=4 dfr=64 (2020.03 version) Marco Baldi m.baldi@univpm.it
Alessandro Barenghi alessandro.barenghi@polimi.it
Franco Chiaraluce f.chiaraluce@univpm.it
Gerardo Pelosi gerardo.pelosi@polimi.it
Paolo Santini p.santini@pm.univpm.it
ledakem5264 LEDAcrypt-KEM cat=5 n0=2 dfr=64 (2020.03 version) Marco Baldi m.baldi@univpm.it
Alessandro Barenghi alessandro.barenghi@polimi.it
Franco Chiaraluce f.chiaraluce@univpm.it
Gerardo Pelosi gerardo.pelosi@polimi.it
Paolo Santini p.santini@pm.univpm.it
ledakem5364 LEDAcrypt-KEM cat=5 n0=3 dfr=64 (2020.03 version) Marco Baldi m.baldi@univpm.it
Alessandro Barenghi alessandro.barenghi@polimi.it
Franco Chiaraluce f.chiaraluce@univpm.it
Gerardo Pelosi gerardo.pelosi@polimi.it
Paolo Santini p.santini@pm.univpm.it
ledakem5464 LEDAcrypt-KEM cat=5 n0=4 dfr=64 (2020.03 version) Marco Baldi m.baldi@univpm.it
Alessandro Barenghi alessandro.barenghi@polimi.it
Franco Chiaraluce f.chiaraluce@univpm.it
Gerardo Pelosi gerardo.pelosi@polimi.it
Paolo Santini p.santini@pm.univpm.it
ledakem12sl LEDAcrypt-KEM cat=1 n0=2 dfr=sl (2020.03 version) Marco Baldi m.baldi@univpm.it
Alessandro Barenghi alessandro.barenghi@polimi.it
Franco Chiaraluce f.chiaraluce@univpm.it
Gerardo Pelosi gerardo.pelosi@polimi.it
Paolo Santini p.santini@pm.univpm.it
ledakem13sl LEDAcrypt-KEM cat=1 n0=3 dfr=sl (2020.03 version) Marco Baldi m.baldi@univpm.it
Alessandro Barenghi alessandro.barenghi@polimi.it
Franco Chiaraluce f.chiaraluce@univpm.it
Gerardo Pelosi gerardo.pelosi@polimi.it
Paolo Santini p.santini@pm.univpm.it
ledakem14sl LEDAcrypt-KEM cat=1 n0=4 dfr=sl (2020.03 version) Marco Baldi m.baldi@univpm.it
Alessandro Barenghi alessandro.barenghi@polimi.it
Franco Chiaraluce f.chiaraluce@univpm.it
Gerardo Pelosi gerardo.pelosi@polimi.it
Paolo Santini p.santini@pm.univpm.it
ledakem32sl LEDAcrypt-KEM cat=3 n0=2 dfr=sl (2020.03 version) Marco Baldi m.baldi@univpm.it
Alessandro Barenghi alessandro.barenghi@polimi.it
Franco Chiaraluce f.chiaraluce@univpm.it
Gerardo Pelosi gerardo.pelosi@polimi.it
Paolo Santini p.santini@pm.univpm.it
ledakem33sl LEDAcrypt-KEM cat=3 n0=3 dfr=sl (2020.03 version) Marco Baldi m.baldi@univpm.it
Alessandro Barenghi alessandro.barenghi@polimi.it
Franco Chiaraluce f.chiaraluce@univpm.it
Gerardo Pelosi gerardo.pelosi@polimi.it
Paolo Santini p.santini@pm.univpm.it
ledakem34sl LEDAcrypt-KEM cat=3 n0=4 dfr=sl (2020.03 version) Marco Baldi m.baldi@univpm.it
Alessandro Barenghi alessandro.barenghi@polimi.it
Franco Chiaraluce f.chiaraluce@univpm.it
Gerardo Pelosi gerardo.pelosi@polimi.it
Paolo Santini p.santini@pm.univpm.it
ledakem52sl LEDAcrypt-KEM cat=5 n0=2 dfr=sl (2020.03 version) Marco Baldi m.baldi@univpm.it
Alessandro Barenghi alessandro.barenghi@polimi.it
Franco Chiaraluce f.chiaraluce@univpm.it
Gerardo Pelosi gerardo.pelosi@polimi.it
Paolo Santini p.santini@pm.univpm.it
ledakem53sl LEDAcrypt-KEM cat=5 n0=3 dfr=sl (2020.03 version) Marco Baldi m.baldi@univpm.it
Alessandro Barenghi alessandro.barenghi@polimi.it
Franco Chiaraluce f.chiaraluce@univpm.it
Gerardo Pelosi gerardo.pelosi@polimi.it
Paolo Santini p.santini@pm.univpm.it
ledakem54sl LEDAcrypt-KEM cat=5 n0=4 dfr=sl (2020.03 version) Marco Baldi m.baldi@univpm.it
Alessandro Barenghi alessandro.barenghi@polimi.it
Franco Chiaraluce f.chiaraluce@univpm.it
Gerardo Pelosi gerardo.pelosi@polimi.it
Paolo Santini p.santini@pm.univpm.it
ledakemcpa12 LEDAcrypt-KEM-CPA cat=1 n0=2 (2020.03 version) Marco Baldi m.baldi@univpm.it
Alessandro Barenghi alessandro.barenghi@polimi.it
Franco Chiaraluce f.chiaraluce@univpm.it
Gerardo Pelosi gerardo.pelosi@polimi.it
Paolo Santini p.santini@pm.univpm.it
ledakemcpa13 LEDAcrypt-KEM-CPA cat=1 n0=3 (2020.03 version) Marco Baldi m.baldi@univpm.it
Alessandro Barenghi alessandro.barenghi@polimi.it
Franco Chiaraluce f.chiaraluce@univpm.it
Gerardo Pelosi gerardo.pelosi@polimi.it
Paolo Santini p.santini@pm.univpm.it
ledakemcpa14 LEDAcrypt-KEM-CPA cat=1 n0=4 (2020.03 version) Marco Baldi m.baldi@univpm.it
Alessandro Barenghi alessandro.barenghi@polimi.it
Franco Chiaraluce f.chiaraluce@univpm.it
Gerardo Pelosi gerardo.pelosi@polimi.it
Paolo Santini p.santini@pm.univpm.it
ledakemcpa32 LEDAcrypt-KEM-CPA cat=3 n0=2 (2020.03 version) Marco Baldi m.baldi@univpm.it
Alessandro Barenghi alessandro.barenghi@polimi.it
Franco Chiaraluce f.chiaraluce@univpm.it
Gerardo Pelosi gerardo.pelosi@polimi.it
Paolo Santini p.santini@pm.univpm.it
ledakemcpa33 LEDAcrypt-KEM-CPA cat=3 n0=3 (2020.03 version) Marco Baldi m.baldi@univpm.it
Alessandro Barenghi alessandro.barenghi@polimi.it
Franco Chiaraluce f.chiaraluce@univpm.it
Gerardo Pelosi gerardo.pelosi@polimi.it
Paolo Santini p.santini@pm.univpm.it
ledakemcpa34 LEDAcrypt-KEM-CPA cat=3 n0=4 (2020.03 version) Marco Baldi m.baldi@univpm.it
Alessandro Barenghi alessandro.barenghi@polimi.it
Franco Chiaraluce f.chiaraluce@univpm.it
Gerardo Pelosi gerardo.pelosi@polimi.it
Paolo Santini p.santini@pm.univpm.it
ledakemcpa52 LEDAcrypt-KEM-CPA cat=5 n0=2 (2020.03 version) Marco Baldi m.baldi@univpm.it
Alessandro Barenghi alessandro.barenghi@polimi.it
Franco Chiaraluce f.chiaraluce@univpm.it
Gerardo Pelosi gerardo.pelosi@polimi.it
Paolo Santini p.santini@pm.univpm.it
ledakemcpa53 LEDAcrypt-KEM-CPA cat=5 n0=3 (2020.03 version) Marco Baldi m.baldi@univpm.it
Alessandro Barenghi alessandro.barenghi@polimi.it
Franco Chiaraluce f.chiaraluce@univpm.it
Gerardo Pelosi gerardo.pelosi@polimi.it
Paolo Santini p.santini@pm.univpm.it
ledakemcpa54 LEDAcrypt-KEM-CPA cat=5 n0=4 (2020.03 version) Marco Baldi m.baldi@univpm.it
Alessandro Barenghi alessandro.barenghi@polimi.it
Franco Chiaraluce f.chiaraluce@univpm.it
Gerardo Pelosi gerardo.pelosi@polimi.it
Paolo Santini p.santini@pm.univpm.it
lightsaber
lightsaber2 LightSABER (NISTPQC round 2)
lima2p1024cca
lima2p2048cca
limasp1018cca
limasp1306cca
limasp1822cca
limasp2062cca
locker1
locker2
locker3
locker4
locker5
locker6
locker7
locker8
locker9
lotus128
lotus192
lotus256
mceliece348864
mceliece460896
mceliece348864f
mceliece348864pc
mceliece348864pcf
mceliece460896f
mceliece460896pc
mceliece460896pcf
mceliece6688128f
mceliece6688128pc
mceliece6688128pcf
mceliece6960119f
mceliece6960119pc
mceliece6960119pcf
mceliece6688128
mceliece6960119
mceliece8192128f
mceliece8192128pc
mceliece8192128pcf
mceliece8192128
mersenne756839
newhope1024cca
newhope512cca
nhcompact1024cca
nhcompact512cca
nhcompact768cca
ntruhps2048509 ntruhps2048509 as specified by the NTRU submission to the second round of the NIST post-quantum standardisation process. Cong Chen
Oussama Danba
Jeffrey Hoffstein
Andreas Hülsing
Joost Rijneveld
Tsunekazu Saito
John M. Schanck
Peter Schwabe
William Whyte
Keita Xagawa
Takashi Yamakawa
Zhenfei Zhang
ntruhps2048677 ntruhps2048677 as specified by the NTRU submission to the second round of the NIST post-quantum standardisation process. Cong Chen
Oussama Danba
Jeffrey Hoffstein
Andreas Hülsing
Joost Rijneveld
Tsunekazu Saito
John M. Schanck
Peter Schwabe
William Whyte
Keita Xagawa
Takashi Yamakawa
Zhenfei Zhang
ntruhps4096821 ntruhps4096821 as specified by the NTRU submission to the second round of the NIST post-quantum standardisation process. Cong Chen
Oussama Danba
Jeffrey Hoffstein
Andreas Hülsing
Joost Rijneveld
Tsunekazu Saito
John M. Schanck
Peter Schwabe
William Whyte
Keita Xagawa
Takashi Yamakawa
Zhenfei Zhang
ntruhrss701 ntruhrss701 as specified by the NTRU submission to the second round of the NIST post-quantum standardisation process. Cong Chen
Oussama Danba
Jeffrey Hoffstein
Andreas Hülsing
Joost Rijneveld
Tsunekazu Saito
John M. Schanck
Peter Schwabe
William Whyte
Keita Xagawa
Takashi Yamakawa
Zhenfei Zhang
ntrukem443
ntrukem743
ntrulpr653 NTRU LPRime 4621^653 (NISTPQC round 3, same as in round 2)
ntrulpr761 NTRU LPRime 4591^761 (NISTPQC round 3, same as in round 2)
ntrulpr857 NTRU LPRime 5167^857 (NISTPQC round 3, same as in round 2)
ntrulpr953 NTRU LPRime 6343^953 (NISTPQC round 3, same as in round 2)
ntrulpr1013 NTRU LPRime 7177^1013 (NISTPQC round 3, same as in round 2)
ntrulpr1277 NTRU LPRime 7879^1277 (NISTPQC round 3, same as in round 2)
ntrulpr4591761 NTRU LPRime 4591^761 (NISTPQC round 1), superseded by ntrulpr761 Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
ntruplus576
ntruplus768
ntruplus864
ntruplus1152
ntskem1264
ntskem1380
ntskem13136
oddmanhattan128
oddmanhattan192
oddmanhattan256
pqrsa15
r5n11kem0d
r5n13kem0d
r5n15kem0d
r5nd0kem2iot
r5nd1kem0d
r5nd1kem4longkey
r5nd1kem5d
r5nd3kem0d
r5nd3kem5d
r5nd5kem0d
r5nd5kem5d
ramstakers216091
ramstakers756839
remblem928
remblem1056
rolloi128 ROLLO-I-128 (2020.04 version starting in supercop-20200603; before that, NISTPQC round-2 version)
rolloi192 ROLLO-I-192 (2020.04 version starting in supercop-20200603; before that, NISTPQC round-2 version)
rolloi256 ROLLO-I-256 (2020.04 version starting in supercop-20200603; before that, NISTPQC round-2 version)
rolloii128 ROLLO-II-128 (2020.04 version starting in supercop-20200603; before that, NISTPQC round-2 version)
rolloii192 ROLLO-II-192 (2020.04 version starting in supercop-20200603; before that, NISTPQC round-2 version)
rolloii256 ROLLO-II-256 (2020.04 version starting in supercop-20200603; before that, NISTPQC round-2 version)
rolloiii128
rolloiii192
rolloiii256
rqc128 RQC-I (2020.04 version starting in supercop-20200603; before that, NISTPQC round-2 version)
rqc192 RQC-II (2020.04 version starting in supercop-20200603; before that, NISTPQC round-2 version)
rqc256 RQC-III (2020.04 version starting in supercop-20200603; before that, NISTPQC round-2 version)
rsa2048 Ronald L. Rivest
Adi Shamir
Leonard M. Adleman
Michael O. Rabin (small exponent)
Victor Shoup (session key is hash of random integer)
saber
saber2 SABER (NISTPQC round 2)
saberx4
sikep434
sikep503
sikep610
sikep751
sikep434comp
sikep503comp
sikep610comp
sikep751comp
smaugt1
smaugt3
smaugt5
sntrup653 Streamlined NTRU Prime 4621^653 (NISTPQC round 3, same as in round 2)
sntrup761 Streamlined NTRU Prime 4591^761 (NISTPQC round 3, same as in round 2)
sntrup857 Streamlined NTRU Prime 5167^857 (NISTPQC round 3, same as in round 2)
sntrup953 Streamlined NTRU Prime 6343^953 (NISTPQC round 3, same as in round 2)
sntrup1013 Streamlined NTRU Prime 7177^1013 (NISTPQC round 3, same as in round 2)
sntrup1277 Streamlined NTRU Prime 7879^1277 (NISTPQC round 3, same as in round 2)
sntrup4591761 Streamlined NTRU Prime 4591^761 (NISTPQC round 1), superseded by sntrup761 Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
threebears1248r2cca PapaBear CCA (2019.07 version)
threebears1248r2ccax PapaBear CCA (2019.07 version), variant caching expanded private key
threebears1248r2cpa PapaBear CPA (2019.07 version)
threebears1248r2cpax PapaBear CPA (2019.07 version), variant caching expanded private key
threebears624r2cca BabyBear CCA (2019.07 version)
threebears624r2ccax BabyBear CCA (2019.07 version), variant caching expanded private key
threebears624r2cpa BabyBear CPA (2019.07 version)
threebears624r2cpax BabyBear CPA (2019.07 version), variant caching expanded private key
threebears936r2cca MamaBear CCA (2019.07 version)
threebears936r2ccax MamaBear CCA (2019.07 version), variant caching expanded private key
threebears936r2cpa MamaBear CPA (2019.07 version)
threebears936r2cpax MamaBear CPA (2019.07 version), variant caching expanded private key
timer
titaniumccahi
titaniumccalite
titaniumccamed
titaniumccastd
titaniumccasuper
titaniumccatoy

Implementations

PrimitiveImplementationAuthors
bigquake1ref
bigquake3ref
bigquake5ref
bike1l1ref_ntl Nir Drucker (University of Haifa, Israel, and Amazon Web Services, USA),
Shay Gueron (University of Haifa, Israel, and Amazon Web Services, USA),
Rafael Misoczki (Intel Corporation, USA),
Tobias Oder (Ruhr-Universitat Bochum, Germany DFKI, Germany),
Tim Gueneysu (Ruhr-Universitat Bochum, Germany DFKI, Germany).
bike1l1ncavx2_ntl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike1l1ncavx2_ossl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike1l1ncavx512_ntl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike1l1ncavx512_ossl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike1l1ncref_ntl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike1l1ncref_ossl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike1l1scavx2_ntl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike1l1scavx2_ossl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike1l1scavx512_ntl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike1l1scavx512_ossl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike1l1scref_ntl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike1l1scref_ossl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike2l1ref_ntl Nir Drucker (University of Haifa, Israel, and Amazon Web Services, USA),
Shay Gueron (University of Haifa, Israel, and Amazon Web Services, USA),
Rafael Misoczki (Intel Corporation, USA),
Tobias Oder (Ruhr-Universitat Bochum, Germany DFKI, Germany),
Tim Gueneysu (Ruhr-Universitat Bochum, Germany DFKI, Germany).
bike2l1ncavx2_ntl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike2l1ncavx2_ossl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike2l1ncavx512_ntl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike2l1ncavx512_ossl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike2l1ncref_ntl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike2l1ncref_ossl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike2l1scavx2_ntl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike2l1scavx2_ossl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike2l1scavx512_ntl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike2l1scavx512_ossl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike2l1scref_ntl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike2l1scref_ossl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike3l1ref_ntl Nir Drucker (University of Haifa, Israel, and Amazon Web Services, USA),
Shay Gueron (University of Haifa, Israel, and Amazon Web Services, USA),
Rafael Misoczki (Intel Corporation, USA),
Tobias Oder (Ruhr-Universitat Bochum, Germany DFKI, Germany),
Tim Gueneysu (Ruhr-Universitat Bochum, Germany DFKI, Germany).
bike3l1ncavx2_ntl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike3l1ncavx2_ossl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike3l1ncavx512_ntl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike3l1ncavx512_ossl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike3l1ncref_ntl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike3l1ncref_ossl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike3l1scavx2_ntl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike3l1scavx2_ossl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike3l1scavx512_ntl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike3l1scavx512_ossl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike3l1scref_ntl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike3l1scref_ossl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bikel1aes-ni-and-pclmul Nir Drucker (University of Haifa, Israel, and Amazon, USA),
Shay Gueron (University of Haifa, Israel, and Amazon, USA),
Dusan Kostic (EPFL, Switzerland)
bikel1aes-ni-only Nir Drucker (University of Haifa, Israel, and Amazon, USA),
Shay Gueron (University of Haifa, Israel, and Amazon, USA),
Dusan Kostic (EPFL, Switzerland)
bikel1avx2 Nir Drucker (University of Haifa, Israel, and Amazon, USA),
Shay Gueron (University of Haifa, Israel, and Amazon, USA),
Dusan Kostic (EPFL, Switzerland)
bikel1avx512 Nir Drucker (University of Haifa, Israel, and Amazon, USA),
Shay Gueron (University of Haifa, Israel, and Amazon, USA),
Dusan Kostic (EPFL, Switzerland)
bikel1avx512-vpclmul Nir Drucker (University of Haifa, Israel, and Amazon, USA),
Shay Gueron (University of Haifa, Israel, and Amazon, USA),
Dusan Kostic (EPFL, Switzerland)
bikel1ches2021 Original wrwitten by

Nir Drucker (University of Haifa, Israel, and Amazon, USA)
Shay Gueron (University of Haifa, Israel, and Amazon, USA)
Dusan Kostic (EPFL, Switzerland)

Modified by

Ming-Shing Chen (Ruhr University Bochum, Germany)
Tung Chou (Academia Sinica, Taiwan)

bikel1portable Nir Drucker (University of Haifa, Israel, and Amazon, USA),
Shay Gueron (University of Haifa, Israel, and Amazon, USA),
Dusan Kostic (EPFL, Switzerland)
bikel3aes-ni-and-pclmul Nir Drucker (University of Haifa, Israel, and Amazon, USA),
Shay Gueron (University of Haifa, Israel, and Amazon, USA),
Dusan Kostic (EPFL, Switzerland)
bikel3aes-ni-only Nir Drucker (University of Haifa, Israel, and Amazon, USA),
Shay Gueron (University of Haifa, Israel, and Amazon, USA),
Dusan Kostic (EPFL, Switzerland)
bikel3avx2 Nir Drucker (University of Haifa, Israel, and Amazon, USA),
Shay Gueron (University of Haifa, Israel, and Amazon, USA),
Dusan Kostic (EPFL, Switzerland)
bikel3avx512 Nir Drucker (University of Haifa, Israel, and Amazon, USA),
Shay Gueron (University of Haifa, Israel, and Amazon, USA),
Dusan Kostic (EPFL, Switzerland)
bikel3avx512-vpclmul Nir Drucker (University of Haifa, Israel, and Amazon, USA),
Shay Gueron (University of Haifa, Israel, and Amazon, USA),
Dusan Kostic (EPFL, Switzerland)
bikel3ches2021 Original wrwitten by

Nir Drucker (University of Haifa, Israel, and Amazon, USA)
Shay Gueron (University of Haifa, Israel, and Amazon, USA)
Dusan Kostic (EPFL, Switzerland)

Modified by

Ming-Shing Chen (Ruhr University Bochum, Germany)
Tung Chou (Academia Sinica, Taiwan)

bikel3portable Nir Drucker (University of Haifa, Israel, and Amazon, USA),
Shay Gueron (University of Haifa, Israel, and Amazon, USA),
Dusan Kostic (EPFL, Switzerland)
dags3ref
dags5ref
dags3v2ref
dags5v2ref
edonk128k08n72nu8l8ref Danilo Gligoroski
edonk128k16n80nu4l6ref Danilo Gligoroski
edonk128k16n80nu8l6ref Danilo Gligoroski
edonk128k32n96nu4l4ref Danilo Gligoroski
edonk128refref Danilo Gligoroski
edonk192k16n112nu4l8ref Danilo Gligoroski
edonk192k32n128nu4l6ref Danilo Gligoroski
edonk192k48n144nu4l4ref Danilo Gligoroski
edonk192refref Danilo Gligoroski
firesaber2avx2
firesaber2avx2_nttmul
firesaber2neon2 Duc Tri Nguyen (CERG George Mason University)
firesaber2neon Duc Tri Nguyen (CERG George Mason University)
firesaber2ref
frodokem640optimized
frodokem640reference
frodokem640x64
frodokem976optimized
frodokem976reference
frodokem976x64
frodokem1344aesoptimized
frodokem1344aesx64
frodokem1344shakeoptimized
frodokem1344shakex64
frodokem640aesoptimized
frodokem640aesx64
frodokem640shakeoptimized
frodokem640shakex64
frodokem976aesoptimized
frodokem976aesx64
frodokem976shakeoptimized
frodokem976shakex64
hila5avx2
hila5opt
hila5ref
hqc128avx
hqc192avx
hqc256avx
hqc1281opt
hqc1281ref
hqc1921opt
hqc1921ref
hqc1922opt
hqc1922ref
hqc2561opt
hqc2561ref
hqc2562opt
hqc2562ref
hqc2563opt
hqc2563ref
hqc128round4avx
hqc192round4avx
hqc256round4avx
hqcrmrs128avx
hqcrmrs192avx
hqcrmrs256avx
kindi256342ref
kindi256522ref
kindi512222ref
kindi512241ref
kindi512321ref
kyber512avx2
kyber512compact
kyber512ref
kyber768avx2
kyber768compact
kyber768ref
kyber1024avx2
kyber1024compact
kyber1024ref
kyber90s512avx2
kyber90s512ref
kyber90s768avx2
kyber90s768ref
kyber90s1024avx2
kyber90s1024ref
lac128avx2
lac128opt
lac128ref
lac192avx2
lac192opt
lac192ref
lac256avx2
lac256opt
lac256ref
lake1ref
lake2ref
lake3ref
ledakem1264portableopt
ledakem1364portableopt
ledakem1464portableopt
ledakem3264portableopt
ledakem3364portableopt
ledakem3464portableopt
ledakem5264portableopt
ledakem5364portableopt
ledakem5464portableopt
ledakem12slportableopt
ledakem13slportableopt
ledakem14slportableopt
ledakem32slportableopt
ledakem33slportableopt
ledakem34slportableopt
ledakem52slportableopt
ledakem53slportableopt
ledakem54slportableopt
ledakemcpa12portableopt
ledakemcpa13portableopt
ledakemcpa14portableopt
ledakemcpa32portableopt
ledakemcpa33portableopt
ledakemcpa34portableopt
ledakemcpa52portableopt
ledakemcpa53portableopt
ledakemcpa54portableopt
lightsaber2avx2
lightsaber2avx2_nttmul
lightsaber2neon2 Duc Tri Nguyen (CERG George Mason University)
lightsaber2neon Duc Tri Nguyen (CERG George Mason University)
lightsaber2ref
lima2p1024ccaopt
lima2p1024ccaref
lima2p2048ccaopt
lima2p2048ccaref
limasp1018ccaopt
limasp1018ccaref
limasp1306ccaopt
limasp1306ccaref
limasp1822ccaopt
limasp1822ccaref
limasp2062ccaopt
limasp2062ccaref
locker1ref
locker2ref
locker3ref
locker4ref
locker5ref
locker6ref
locker7ref
locker8ref
locker9ref
lotus128avx2 Takuya HAYASHI
lotus128opt Takuya HAYASHI
lotus128ref Takuya HAYASHI
lotus192avx2 Takuya HAYASHI
lotus192opt Takuya HAYASHI
lotus192ref Takuya HAYASHI
lotus256avx2 Takuya HAYASHI
lotus256opt Takuya HAYASHI
lotus256ref Takuya HAYASHI
mceliece348864avx
mceliece348864ref
mceliece348864sse
mceliece348864vec
mceliece460896avx
mceliece460896ref
mceliece460896sse
mceliece460896vec
mceliece348864favx
mceliece348864fref
mceliece348864fsse
mceliece348864fvec
mceliece348864pcavx
mceliece348864pcref
mceliece348864pcsse
mceliece348864pcvec
mceliece348864pcfavx
mceliece348864pcfref
mceliece348864pcfsse
mceliece348864pcfvec
mceliece460896favx
mceliece460896fref
mceliece460896fsse
mceliece460896fvec
mceliece460896pcavx
mceliece460896pcref
mceliece460896pcsse
mceliece460896pcvec
mceliece460896pcfavx
mceliece460896pcfref
mceliece460896pcfsse
mceliece460896pcfvec
mceliece6688128favx
mceliece6688128fref
mceliece6688128fsse
mceliece6688128fvec
mceliece6688128pcavx
mceliece6688128pcref
mceliece6688128pcsse
mceliece6688128pcvec
mceliece6688128pcfavx
mceliece6688128pcfref
mceliece6688128pcfsse
mceliece6688128pcfvec
mceliece6960119favx
mceliece6960119fref
mceliece6960119fsse
mceliece6960119fvec
mceliece6960119pcavx
mceliece6960119pcref
mceliece6960119pcsse
mceliece6960119pcvec
mceliece6960119pcfavx
mceliece6960119pcfref
mceliece6960119pcfsse
mceliece6960119pcfvec
mceliece6688128avx
mceliece6688128ref
mceliece6688128sse
mceliece6688128vec
mceliece6960119avx
mceliece6960119ref
mceliece6960119sse
mceliece6960119vec
mceliece8192128favx
mceliece8192128fref
mceliece8192128fsse
mceliece8192128fvec
mceliece8192128pcavx
mceliece8192128pcref
mceliece8192128pcsse
mceliece8192128pcvec
mceliece8192128pcfavx
mceliece8192128pcfref
mceliece8192128pcfsse
mceliece8192128pcfvec
mceliece8192128avx
mceliece8192128ref
mceliece8192128sse
mceliece8192128vec
mersenne756839opt
mersenne756839ref
newhope1024ccaavx2
newhope1024ccaref
newhope512ccaavx2
newhope512ccaref
nhcompact1024ccaavx2
nhcompact512ccaavx2
nhcompact768ccaavx2
ntruhps2048509avx2 Oussama Danba
Joost Rijneveld
John M. Schanck
Peter Schwabe
ntruhps2048509compact
ntruhps2048509neon Duc Tri Nguyen (CERG George Mason University)
ntruhps2048509ref Oussama Danba
Joost Rijneveld
John M. Schanck
Peter Schwabe
ntruhps2048677avx2 Oussama Danba
Joost Rijneveld
John M. Schanck
Peter Schwabe
ntruhps2048677compact
ntruhps2048677neon Duc Tri Nguyen (CERG George Mason University)
ntruhps2048677ref Oussama Danba
Joost Rijneveld
John M. Schanck
Peter Schwabe
ntruhps4096821avx2 Oussama Danba
Joost Rijneveld
John M. Schanck
Peter Schwabe
ntruhps4096821compact
ntruhps4096821neon Duc Tri Nguyen (CERG George Mason University)
ntruhps4096821ref Oussama Danba
Joost Rijneveld
John M. Schanck
Peter Schwabe
ntruhrss701avx2 Oussama Danba
Joost Rijneveld
John M. Schanck
Peter Schwabe
ntruhrss701compact
ntruhrss701neon Duc Tri Nguyen (CERG George Mason University)
ntruhrss701ref Oussama Danba
Joost Rijneveld
John M. Schanck
Peter Schwabe
ntrukem443ref
ntrukem743ref
ntrulpr653factored Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
ntrulpr653ref Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
ntrulpr761factored Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
ntrulpr761ref Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
ntrulpr857factored Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
ntrulpr857ref Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
ntrulpr953factored Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
ntrulpr953ref Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
ntrulpr1013factored Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
ntrulpr1013ref Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
ntrulpr1277factored Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
ntrulpr1277ref Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
ntrulpr4591761avx Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
ntrulpr4591761ref Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
ntruplus576avx2
ntruplus576ref
ntruplus768avx2
ntruplus768ref
ntruplus864avx2
ntruplus864ref
ntruplus1152avx2
ntruplus1152ref
ntskem1264avx2
ntskem1264opt
ntskem1264ref
ntskem1264sse2
ntskem1380avx2
ntskem1380opt
ntskem1380ref
ntskem1380sse2
ntskem13136avx2
ntskem13136opt
ntskem13136ref
ntskem13136sse2
oddmanhattan128opt
oddmanhattan128ref
oddmanhattan192opt
oddmanhattan192ref
oddmanhattan256opt
oddmanhattan256ref
pqrsa15ref
r5n11kem0davx2
r5n11kem0dopt
r5n11kem0dref
r5n13kem0davx2
r5n13kem0dopt
r5n13kem0dref
r5n15kem0davx2
r5n15kem0dopt
r5n15kem0dref
r5nd0kem2iotavx2
r5nd0kem2iotopt
r5nd0kem2iotref
r5nd1kem0davx2
r5nd1kem0dopt
r5nd1kem0dref
r5nd1kem4longkeyavx2
r5nd1kem4longkeyopt
r5nd1kem4longkeyref
r5nd1kem5davx2
r5nd1kem5dopt
r5nd1kem5dref
r5nd3kem0davx2
r5nd3kem0dopt
r5nd3kem0dref
r5nd3kem5davx2
r5nd3kem5dopt
r5nd3kem5dref
r5nd5kem0davx2
r5nd5kem0dopt
r5nd5kem0dref
r5nd5kem5davx2
r5nd5kem5dopt
r5nd5kem5dref
ramstakers216091ref
ramstakers756839ref
remblem928ref
remblem1056ref
rolloi128avx
rolloi128ref
rolloi192avx
rolloi192ref
rolloi256avx
rolloi256ref
rolloii128avx
rolloii128ref
rolloii192avx
rolloii192ref
rolloii256avx
rolloii256ref
rolloiii128avx
rolloiii128ref
rolloiii192avx
rolloiii192ref
rolloiii256avx
rolloiii256ref
rqc128avx
rqc128ref
rqc192avx
rqc192ref
rqc256avx
rqc256ref
rsa2048gmp
rsa2048gmpxx
rsa2048ntl
saber2avx2
saber2avx2_nttmul
saber2neon2 Duc Tri Nguyen (CERG George Mason University)
saber2neon Duc Tri Nguyen (CERG George Mason University)
saber2ref
saberx4avx2
sikep434amd64
sikep434amd64asm
sikep434arm64
sikep434arm64asm
sikep434arm
sikep434mulxadx
sikep434mulx
sikep434ref
sikep434x86
sikep503amd64
sikep503amd64asm
sikep503arm64
sikep503arm64asm
sikep503arm
sikep503mulxadx
sikep503mulx
sikep503ref
sikep503x86
sikep610amd64
sikep610amd64asm
sikep610arm64
sikep610arm64asm
sikep610arm
sikep610mulxadx
sikep610mulx
sikep610ref
sikep610x86
sikep751amd64
sikep751amd64asm
sikep751arm64
sikep751arm64asm
sikep751arm
sikep751mulxadx
sikep751mulx
sikep751ref
sikep751x86
sikep434compamd64
sikep434compamd64asm
sikep434comparm64
sikep434comparm64asm
sikep434comparm
sikep434compmulxadx
sikep434compmulx
sikep434compx86
sikep503compamd64
sikep503compamd64asm
sikep503comparm64
sikep503comparm64asm
sikep503comparm
sikep503compmulxadx
sikep503compmulx
sikep503compx86
sikep610compamd64
sikep610compamd64asm
sikep610comparm64
sikep610comparm64asm
sikep610comparm
sikep610compmulxadx
sikep610compmulx
sikep610compx86
sikep751compamd64
sikep751compamd64asm
sikep751comparm64
sikep751comparm64asm
sikep751comparm
sikep751compmulxadx
sikep751compmulx
sikep751compx86
smaugt1avx2
smaugt1ref
smaugt3avx2
smaugt3ref
smaugt5avx2
smaugt5ref
sntrup653avx
sntrup653compact
sntrup653factored Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
sntrup653ref Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
sntrup761avx
sntrup761compact
sntrup761factored Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
sntrup761ref Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
sntrup857avx
sntrup857compact
sntrup857factored Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
sntrup857ref Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
sntrup953avx
sntrup953compact
sntrup953factored Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
sntrup953ref Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
sntrup1013avx
sntrup1013compact
sntrup1013factored Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
sntrup1013ref Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
sntrup1277avx
sntrup1277compact
sntrup1277factored Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
sntrup1277ref Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
sntrup4591761avx Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
sntrup4591761cavx Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
sntrup4591761ref Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
threebears1248r2ccalowmem
threebears1248r2ccaopt
threebears1248r2ccaref
threebears1248r2ccavec
threebears1248r2ccaxopt
threebears1248r2ccaxvec
threebears1248r2cpalowmem
threebears1248r2cpaopt
threebears1248r2cparef
threebears1248r2cpavec
threebears1248r2cpaxopt
threebears1248r2cpaxvec
threebears624r2ccalowmem
threebears624r2ccaopt
threebears624r2ccaref
threebears624r2ccavec
threebears624r2ccaxopt
threebears624r2ccaxvec
threebears624r2cpalowmem
threebears624r2cpaopt
threebears624r2cparef
threebears624r2cpavec
threebears624r2cpaxopt
threebears624r2cpaxvec
threebears936r2ccalowmem
threebears936r2ccaopt
threebears936r2ccaref
threebears936r2ccavec
threebears936r2ccaxopt
threebears936r2ccaxvec
threebears936r2cpalowmem
threebears936r2cpaopt
threebears936r2cparef
threebears936r2cpavec
threebears936r2cpaxopt
threebears936r2cpaxvec
timeravx2
timerref
titaniumccahiavx2
titaniumccahiopt
titaniumccahiref
titaniumccaliteavx2
titaniumccaliteopt
titaniumccaliteref
titaniumccamedavx2
titaniumccamedopt
titaniumccamedref
titaniumccastdavx2
titaniumccastdopt
titaniumccastdref
titaniumccasuperavx2
titaniumccasuperopt
titaniumccasuperref
titaniumccatoyavx2
titaniumccatoyopt
titaniumccatoyref

Version

This is version 2024.11.20 of the primitives-kem.html web page. This web page is in the public domain.