VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information: Introduction eBASH eBASC eBAEAD eBATS SUPERCOP XBX Computers Arch
How to submit new software: Tips hash stream aead dh kem encrypt sign
List of primitives measured: lwc sha3 hash stream lwc caesar aead dh kem encrypt sign
Measurements: lwc sha3 hash stream lwc caesar aead dh kem encrypt sign
List of subroutines: verify decode encode sort core hashblocks xof scalarmult

Measurements of public-key cryptosystems

[Page version: 20240710 12:22:08]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key encryption:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol C: means that the current SUPERCOP database does not list IND-CCA2 security as a goal for this public-key cryptosystem. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each public-key cryptosystem and each implementation. Designers and implementors interested in submitting new public-key cryptosystems and new implementations of existing cryptosystems should read the call for submissions.

Sizes across machines
Secret key
bytessystem
26ledapkc1264
26ledapkc12sl
26ledapkc1364
26ledapkc13sl
26ledapkc1464
26ledapkc14sl
34ledapkc3264
34ledapkc32sl
34ledapkc3364
34ledapkc33sl
34ledapkc3464
34ledapkc34sl
42ledapkc5264
42ledapkc52sl
42ledapkc5364
42ledapkc53sl
42ledapkc5464
42ledapkc54sl
194mcnie3q1281
218mcnie3q1282
247mcnie3q1921
274mcnie3q1922
337mcnie3q2561
340mcnie4q1281
348mcnie3q2562
384cargocult2048
384rsa2048
401mcnie4q1282
465mcnie4q1921
493r5nd1pke5d
512mcnie4q1922
584mcnie4q2561
601mcnie4q2562
607C:ntruees401ep2
659C:ntruees439ep1
708r5nd1pke0d
828r5nd3pke5d
891C:ntruees593ep1
1024ronald1024
1031r5nd3pke0d
1042r5nd5pke5d
1120C:ntruees743ep1
1413r5nd5pke0d
1536ronald1536
1854C:ntruees787ep1
2048ronald2048
3072ronald3072
4096ronald4096
5184C:3hfe
5772r5n11pke0d
9708r5n13pke0d
14700r5n15pke0d
98304pqrsa15
137282C:mceliece
163584r5n13pke0smallct
714240lotus128
1126400lotus192
1630720lotus256
Public key
bytessystem
128ronald1024
192ronald1536
256cargocult2048
256ronald2048
256rsa2048
347mcnie4q1281
384ronald3072
417mcnie4q1282
431mcnie3q1281
461r5nd1pke5d
486mcnie3q1282
487mcnie4q1921
512ronald4096
539mcnie4q1922
557C:ntruees401ep2
569mcnie3q1921
609C:ntruees439ep1
630mcnie4q2561
631mcnie3q1922
647mcnie4q2562
676r5nd1pke0d
780r5nd3pke5d
819mcnie3q2561
821C:ntruees593ep1
829mcnie3q2562
978r5nd5pke5d
983r5nd3pke0d
1027C:ntruees743ep1
1349r5nd5pke0d
1574C:ntruees787ep1
2928ledapkc1264
3536ledapkc12sl
4032ledapkc1364
4928ledapkc13sl
5040ledapkc1464
5104ledapkc3264
5740r5n11pke0d
6096ledapkc14sl
6584ledapkc32sl
7104ledapkc3364
7616C:3hfe
7720ledapkc5264
8592ledapkc3464
9168ledapkc33sl
9660r5n13pke0d
10448ledapkc52sl
10672ledapkc5364
11568ledapkc34sl
13320ledapkc5464
14544ledapkc53sl
14636r5n15pke0d
18144ledapkc54sl
32768pqrsa15
81408C:mceliece
163536r5n13pke0smallct
658944lotus128
1025024lotus192
1470976lotus256
Encrypting 0 bytes
bytessystem
67C:3hfe
128ronald1024
192ronald1536
256C:mceliece
256ronald2048
272rsa2048
284cargocult2048
384ronald3072
422mcnie4q1281
505mcnie4q1282
512ronald4096
552C:ntruees401ep2
579mcnie3q1281
590mcnie4q1921
604C:ntruees439ep1
636r5nd1pke5d
651mcnie4q1922
653mcnie3q1282
756r5nd1pke0d
761mcnie4q2561
764mcnie3q1921
781mcnie4q2562
816C:ntruees593ep1
846mcnie3q1922
950r5nd3pke5d
988r5n13pke0smallct
1022C:ntruees743ep1
1097mcnie3q2561
1110mcnie3q2562
1119r5nd3pke0d
1144lotus128
1301r5nd5pke5d
1456lotus192
1525r5nd5pke0d
1574C:ntruees787ep1
1768lotus256
5804r5n11pke0d
5856ledapkc1264
6048ledapkc1364
6720ledapkc1464
7072ledapkc12sl
7392ledapkc13sl
8128ledapkc14sl
9732r5n13pke0d
10208ledapkc3264
10656ledapkc3364
11456ledapkc3464
13168ledapkc32sl
13752ledapkc33sl
14724r5n15pke0d
15424ledapkc34sl
15440ledapkc5264
16008ledapkc5364
17760ledapkc5464
20896ledapkc52sl
21816ledapkc53sl
24192ledapkc54sl
32768pqrsa15
Encrypting 23 bytes
bytessystem
44C:3hfe
105ronald1024
169ronald1536
233C:mceliece
233ronald2048
272rsa2048
284cargocult2048
361ronald3072
399mcnie4q1281
482mcnie4q1282
489ronald4096
529C:ntruees401ep2
556mcnie3q1281
567mcnie4q1921
581C:ntruees439ep1
628mcnie4q1922
630mcnie3q1282
636r5nd1pke5d
738mcnie4q2561
741mcnie3q1921
756r5nd1pke0d
758mcnie4q2562
793C:ntruees593ep1
823mcnie3q1922
950r5nd3pke5d
988r5n13pke0smallct
999C:ntruees743ep1
1074mcnie3q2561
1087mcnie3q2562
1119r5nd3pke0d
1144lotus128
1301r5nd5pke5d
1456lotus192
1525r5nd5pke0d
1551C:ntruees787ep1
1768lotus256
5804r5n11pke0d
5833ledapkc1264
6025ledapkc1364
6697ledapkc1464
7049ledapkc12sl
7369ledapkc13sl
8105ledapkc14sl
9732r5n13pke0d
10185ledapkc3264
10633ledapkc3364
11433ledapkc3464
13145ledapkc32sl
13729ledapkc33sl
14724r5n15pke0d
15401ledapkc34sl
15417ledapkc5264
15985ledapkc5364
17737ledapkc5464
20873ledapkc52sl
21793ledapkc53sl
24169ledapkc54sl
32745pqrsa15
Encrypting many bytes
bytessystem
67C:3hfe
75ronald1024
75ronald1536
75ronald2048
75ronald3072
75ronald4096
110C:mceliece
141..142..142pqrsa15
272rsa2048
284cargocult2048
544C:ntruees401ep2
603C:ntruees439ep1
636r5nd1pke5d
756r5nd1pke0d
794C:ntruees593ep1
950r5nd3pke5d
980C:ntruees743ep1
988r5n13pke0smallct
1119r5nd3pke0d
1144lotus128
1301r5nd5pke5d
1456lotus192
1525r5nd5pke0d
1573C:ntruees787ep1
1729ledapkc1464
1768lotus256
2064ledapkc1364
2075ledapkc14sl
2497ledapkc13sl
2909ledapkc3464
2967ledapkc1264
3570ledapkc12sl
3594ledapkc3364
3913ledapkc34sl
4493ledapkc5464
4635ledapkc33sl
5150ledapkc3264
5387ledapkc5364
5804r5n11pke0d
6101ledapkc54sl
6625ledapkc32sl
7322ledapkc53sl
7774ledapkc5264
9732r5n13pke0d
10497ledapkc52sl
14724r5n15pke0d
56783mcnie3q2562
65189mcnie3q1922
66335mcnie3q1921
67613mcnie4q2562
70347mcnie3q2561
72212mcnie4q1922
72933mcnie4q1921
74067mcnie4q2561
79913mcnie3q1282
81935mcnie3q1281
88433mcnie4q1282
93081mcnie4q1281
amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20240625 Measurements; implementation notesamd64; Raptor Cove (b06a2); 2023 Intel Core i7-13700H, P cores; 6 x 4800MHz; raptor, supercop-20231107 Measurements; implementation notesamd64; Golden Cove (906a4-40); 2022 Intel Core i3-1215U, P cores; 2 x 1600MHz; alder2,1f626960,5600000, supercop-20240425 Measurements; implementation notesamd64; Gracemont (906a4-20); 2022 Intel Core i3-1215U, E cores; 4 x 1600MHz; alder2,1f626960,3300000, supercop-20240425 Measurements; implementation notesamd64; Golden Cove (90675-00); 2022 Intel Core i3-12100; 4 x 3300MHz; alder, supercop-20240625 Measurements; implementation notesamd64; Zen 2 (860f01); 2022 AMD Ryzen 5 4500U; 6 x 3600MHz; renoir, supercop-20240625 Measurements; implementation notesamd64; Zen 3 (a50f00); 2021 AMD Ryzen 5 PRO 5650G; 6 x 3900MHz; cezanne, supercop-20240625 Measurements; implementation notesamd64; Zen 3 (a50f00); 2021 AMD Ryzen 5 5560U; 6 x 4062MHz; beelink, supercop-20221122 Measurements; implementation notesamd64; Zen 2 (860f81); 2021 AMD Ryzen 3 5300U; 4 x 2600MHz; lucienne, supercop-20240625 Measurements; implementation notesamd64; Tremont (906c0); 2021 Intel Pentium Silver N6000; 4 x 1100MHz; jasper, supercop-20240625 Measurements; implementation notesamd64; Tremont (906c0); 2021 Intel Celeron N5105; 4 x 2000MHz; jasper3, supercop-20240625 Measurements; implementation notesamd64; Tremont (906c0); 2021 Intel Celeron N4500; 2 x 1100MHz; jasper2, supercop-20240425 Measurements; implementation notesamd64; Zen 3 (a20f10); 2020 AMD Ryzen 5 5600X; 6 x 3700MHz; unstable; spawn, supercop-20231215 Measurements; implementation notesamd64; Zen (820f01); 2020 AMD Athlon Silver 3050e; 2 x 1400MHz; dali, supercop-20240425 Measurements; implementation notesamd64; Tiger Lake (806c1); 2020 Intel Core i7-1165G7; 4 x 2800MHz; panther, supercop-20240625 Measurements; implementation notesaarch64; Cortex-A72 (410fd083); 2019 Broadcom BCM2711; 4 x 1500MHz; pi4b, supercop-20240425 Measurements; implementation notesamd64; Zen 2 (830f10); 2019 AMD EPYC 7742; 64 x 2250MHz; rome0, supercop-20240625 Measurements; implementation notesamd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; comet, supercop-20240425 Measurements; implementation notesamd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; cubi10, supercop-20240625 Measurements; implementation notesamd64; Ice Lake (706e5); 2019 Intel Core i3-1035G1; 4 x 1000MHz; icelake2, supercop-20221005 Measurements; implementation notesamd64; Goldmont Plus (706a8); 2019 Intel Celeron N4020; 2 x 1100MHz; gemini, supercop-20240425 Measurements; implementation notesaarch64; Skylark (503f0002); 2018 Ampere eMAG 8180; 32 x 3300MHz; unstable; gcc185, supercop-20240107 Measurements; implementation notesaarch64; Cortex-A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3aplus, supercop-20240425 Measurements; implementation notesaarch64; Cortex-A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3bplus, supercop-20231107 Measurements; implementation notesamd64; Coffee Lake (906ea); 2018 Intel Xeon E-2124; 4 x 3300MHz; r24000, supercop-20240107 Measurements; implementation notesriscv64; U54 (sifive,u54-mc); 2017 SiFive Freedom U540; 4 x 1000MHz; riscvunleashed000, supercop-20240107 Measurements; implementation notesamd64; Zen (800f11); 2017 AMD Ryzen 7 1700; 8 x 3000MHz; rumba7, supercop-20240625 Measurements; implementation notesamd64; Zen (800f11); 2017 AMD Ryzen 5 1600; 6 x 3200MHz; rumba5, supercop-20240625 Measurements; implementation notesamd64; Zen (800f11); 2017 AMD Ryzen 3 1200; 4 x 3100MHz; rumba3, supercop-20221122 Measurements; implementation notesamd64; Kaby Lake (906e9); 2017 Intel Xeon E3-1220 v6; 4 x 3000MHz; kizomba, supercop-20240625 Measurements; implementation notesamd64; Kaby Lake (806e9); 2017 Intel Core i3-7100; 2 x 2400MHz; whosthere, supercop-20221122 Measurements; implementation notesarmeabi; Cortex-A7 (410fc075); 2016 Broadcom BCM2836; 4 x 900MHz; berry2, supercop-20240425 Measurements; implementation notesamd64; Goldmont (506c9); 2016 Intel Celeron J3455; 4 x 1500MHz; wooden, supercop-20240425 Measurements; implementation notesamd64; Broadwell+AES (406f1); 2016 Intel Xeon E5-2609 v4; 8 x 1700MHz; bolero, supercop-20240625 Measurements; implementation notesamd64; Silvermont (406c4); 2016 Intel Atom x5-Z8350; 4 x 1440MHz; cherry, supercop-20240425 Measurements; implementation notesamd64; Skylake (506e3); 2015 Intel Xeon E3-1220 v5; 4 x 3000MHz; samba, supercop-20240625 Measurements; implementation notesamd64; Airmont (406c3); 2015 Intel Pentium N3700; 4 x 1600MHz; nucnuc, supercop-20240425 Measurements; implementation notesamd64; Broadwell+AES (306d4); 2015 Intel Core i3-5005U; 2 x 1900MHz; shoe, supercop-20240425 Measurements; implementation notesarmeabi; Cortex-A17 (410fc0d1); 2014 Rockchip RK3288; 4 x 1800MHz; tinker, supercop-20240107 Measurements; implementation notesamd64; Haswell+AES (306c3); 2013 Intel Xeon E3-1275 V3; 4 x 3500MHz; titan0, supercop-20240625 Measurements; implementation notesamd64; Haswell+AES (306c3); 2013 Intel Xeon E3-1220 v3; 4 x 3100MHz; hiphop, supercop-20231107 Measurements; implementation notesamd64; Haswell+AES (306c3); 2013 Intel Core i7-4770; 4 x 3400MHz; speed2supercop, supercop-20240425 Measurements; implementation notesarmeabi; Cortex-A8 (413fc082); 2012 TI Sitara XAM3359AZCZ100; 1 x 1000MHz; bblack, supercop-20240107 Measurements; implementation notesamd64; Bulldozer (600f20); 2012 AMD FX-8350; 4 x 4000MHz; saber214, supercop-20240625 Measurements; implementation notesamd64; Ivy Bridge+AES (306a9); 2012 Intel Xeon E3-1275 V2; 4 x 3500MHz; hydra8, supercop-20240625 Measurements; implementation notesamd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3427U; 2 x 1800MHz; hunsnivy, supercop-20240425 Measurements; implementation notesarmeabi; Cortex-A9+NEON (412fc09a); 2011 Freescale i.MX6 Quad; 4 x 1200MHz; unstable; novena, supercop-20220506 Measurements; implementation notesarmeabi; ARM1176 (410fb767); 2011 Broadcom BCM2835; 1 x 1000MHz; berry0, supercop-20240107 Measurements; implementation notesmipso32; Octeon II (cnmips64v2); 2011 Cavium Octeon II CN6120; 2 x 2000MHz; gcc23, supercop-20230530 Measurements; implementation notesamd64; Bobcat (500f10); 2011 AMD G-T56N; 2 x 1650MHz; h8bobcat, supercop-20240425 Measurements; implementation notesamd64; K10 32nm (300f10); 2011 AMD A8-3850; 4 x 2900MHz; hydra5, supercop-20240625 Measurements; implementation notesamd64; K10 32nm (300f10); 2011 AMD A6-3650; 4 x 2600MHz; hydra4, supercop-20240425 Measurements; implementation notesamd64; Bonnell (30661); 2011 Intel Atom D2500; 2 x 1866MHz; h8atom, supercop-20240425 Measurements; implementation notesamd64; Sandy Bridge+AES (206a7); 2011 Intel Xeon E3-1225; 4 x 3100MHz; hydra7, supercop-20240625 Measurements; implementation notesamd64; Sandy Bridge (206a7); 2011 Intel Core i3-2310M; 2 x 2100MHz; h6sandy, supercop-20240625 Measurements; implementation notesamd64; K10 45nm (100f63); 2010 AMD Athlon II Neo K125; 1 x 1700MHz; h3neo, supercop-20240425 Measurements; implementation notesamd64; Bonnell (106ca); 2010 Intel Atom N455; 1 x 1000MHz; h2atom, supercop-20240107 Measurements; implementation notesamd64; Core 2 45nm (1067a); 2009 Intel Core 2 Duo E7600; 2 x 3060MHz; wolfdale, supercop-20240425 Measurements; implementation notesamd64; Core 2 45nm (10676); 2007 Intel Xeon X5450; 8 x 2992MHz; unstable; gcc14, supercop-20220506 Measurements; implementation notesamd64; Core 2 65nm (6fb); 2007 Intel Core 2 Quad Q6600; 4 x 2404MHz; margaux, supercop-20240425 Measurements; implementation notesamd64; Core 2 65nm (6fb); 2007 Intel Core 2 Duo T7300; 2 x 2000MHz; trident, supercop-20240425 Measurements; implementation notes

Version

This is version 2024.07.10 of the results-encrypt.html web page. This web page is in the public domain.