VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems
ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of key-encapsulation mechanisms on one machine: amd64; Golden Cove (90675-00); 2022 Intel Core i3-12100; 4 x 3300MHz; alder, supercop-20251222

[Page version: 20260221 06:44:52]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for key-encapsulation mechanisms:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol C: means that the current SUPERCOP database does not list IND-CCA2 security as a goal for this key-encapsulation mechanism. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each key-encapsulation mechanism and each implementation. Designers and implementors interested in submitting new key-encapsulation mechanisms and new implementations of existing systems should read the call for submissions.

Test results

Graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

NISTPQC graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

Cycles to generate a key pair
25%50%75%system
902091409324kyber90s512
135851407714366kyber90s768
176131780218162mlkem512
177341789818207kyber512
192891954719860kyber90s1024
231782351823740
T:
C:nhcompact512cca
236442381324001
T:
lac128
254302564626181
T:
lightsaber2
256692574825908
T:
ntrulpr4591761
273422762427884ntrulpr653
288622904829511ntrulpr761
304233071132083mlkem768
307533092831173smaugt1
309253105131291timer
308103109131436kyber768
328963365634154
T:
C:nhcompact768cca
348343513735546newhope512cca
357843594441774ntruplus576
364013658136945ntrulpr857
379533816238490ntrulpr953
387793903039365ntrulpr1013
400344132241607
T:
C:nhcompact1024cca
433814387844599mlkem1024
436104539146232kyber1024
463424673547027
T:
saber2
473384745247707smaugt3
496214978350242ntrulpr1277
598336009460393
T:
lac256
609876112061280ntruplus768
624466263562872smaugt5
637736386964117ntruplus864
657506593066343
T:
lac192
657516608166402newhope1024cca
668866715667849
T:
hqc128round4
68585?69089?93615?ntruplus1152
706637112671916
T:
firesaber2
105644106546107439
T:
C:hila5
113770113958114343ntruhps2048509
134918139342147220threebears624r2cca
136482146329148989C:threebears624r2cpa
154780161948167997
T:
hqc192round4
168549169254169721
T:
kindi256342
179946180690181449
T:
kindi512222
184177185257185986
T:
kindi512241
191775192045193638ntruhrss701
200190201008202034ntruhps2048677
272471273536285610
T:
hqcrmrs128
278186280450307786threebears936r2cca
289712290445291438ntruhps4096821
284871290791311173C:threebears936r2cpa
304902306786318622
T:
hqc128
309863311353321133
T:
hqc1281
323871326465327116
T:
hqc256round4
339704342538346552
T:
ntrukem443
379087379700380433
T:
kindi512321
403309406368427253
T:
C:bikel1
453168453930460419
T:
kindi256522
487329494033502598threebears1248r2cca
555408555987556933sntrup653
558113559068560502sntrup761
560425565684570495C:threebears1248r2cpa
564113567903584464
T:
hqcrmrs192
573669576031592981
T:
hqc1921
577244579351581890
T:
rqc128
604326607154625020
T:
hqc192
612070621768635344
T:
C:edonk128k16n80nu4l6
612622632436635365
T:
hqc1922
708670713813716385
T:
frodokem640
719470720708722159sntrup4591761
720269722891725219
T:
C:rolloi128
785932788574791874
T:
ntrukem743
877524887955898214
T:
frodokem640aes
887543893336899214
T:
C:rolloi192
890240911619930620
T:
hqc2561
911944913536915809sntrup857
907310933158942162
T:
hqcrmrs256
937445962824967101
T:
hqc2562
971259?975769?1430647?
T:
rqc192
9762859807791004626
T:
hqc256
9784759872771004629
T:
C:edonk128k16n80nu8l6
9733099958941006452
T:
hqc2563
109753311013521104667sntrup953
111303911162841124042
T:
C:bikel3
115307711690011184472
T:
C:edonk128k32n96nu4l4
121138512188201226809
T:
C:rolloi256
122593812289291257243sntrup1013
135066213714851388752
T:
C:edonk192k32n128nu4l6
1376637?1398726?2037354?
T:
rqc256
141034114194131457699
T:
C:edonk128ref
143953114444751450883
T:
frodokem976
170895817151551730824
T:
frodokem976aes
178882817994901817411
T:
C:lake2
180018418103291822448
T:
C:lake3
179588918112971834127
T:
C:lake1
190325819071281911401sntrup1277
208032921225712151848
T:
C:edonk192k48n144nu4l4
268860227021552712770
T:
rolloii192
280077928034202817091
T:
frodokem640shake
292858229440772959954
T:
frodokem1344aes
300547130171753043169
T:
locker1
312507831441463162313
T:
rolloii256
327592032926903307735
T:
locker2
339076534143283430950
T:
rolloii128
348458235180853541065
T:
locker3
386488638832433909251
T:
locker4
439083344087914423961
T:
locker6
467270546840034693780
T:
sikep434
475438647829154806812
T:
remblem928
478070747995234814747
T:
remblem1056
576120357844555804160
T:
locker5
585976158660986360874
T:
frodokem976shake
616302661668086175442
T:
lotus128
672489267478846764969
T:
sikep503
763352076624957697933
T:
locker7
779211378203688485929
T:
sikep434comp
811437581366118163843
T:
locker8
859785586313828677710
T:
locker9
102882441032382210338980
T:
frodokem1344shake
110975151116045212117182
T:
sikep503comp
121286601213992212150114
T:
sikep610
125776061259539912632108
T:
lotus192
148853331498866715167834
T:
mersenne756839
203121582033100820349825
T:
sikep751
207775962101721823573992
T:
lotus256
210302292106528522797807
T:
sikep610comp
264799082653316826588453mceliece348864pcf
265293952661857227231710mceliece348864f
276194752766903627709042
T:
ntskem1264
321784313221481934925694
T:
sikep751comp
26954237?35622871?53011823?mceliece348864
34732430?43433835?52963418?mceliece348864pc
33520677?59618728?101858798?
T:
rsa2048
820562628418865485792930
T:
ntskem1380
850686258525708787276186mceliece460896f
851147258692141787097681mceliece460896pcf
110804481?137226192?189801068?mceliece460896
87240881?137333040?166134306?mceliece460896pc
161328497161641006163295002mceliece6960119pcf
161535149163611005163910758mceliece6960119f
178192547179750146180236432
T:
oddmanhattan128
191884100192147792194567424mceliece6688128f
192208151192776418193801154mceliece6688128pcf
201509617203386577203706247mceliece8192128pcf
204980211205247696205701660mceliece8192128f
212221192?213229815?313284980?mceliece6960119
164224673?260233588?360348034?mceliece6960119pc
202622991?260316278?374825382?mceliece8192128
291176552293069706293918564
T:
oddmanhattan192
194218671?305659301?418380575?mceliece6688128
248174787?306484095?428979948?mceliece6688128pc
214138931?315522153?431875563?mceliece8192128pc
305268130331761734336497881
T:
ntskem13136
516680918517886257518843657
T:
oddmanhattan256
647614400741297737746121142
T:
bigquake1
586509425460522661826122501730
T:
bigquake3
108257415451102920606011149602304
T:
bigquake5
Cycles for encapsulation
25%50%75%system
9377980110396
T:
rsa2048
135961364613760kyber90s512
145001463914842ntruhps2048509
156741580315910ntruhrss701
166591670816821ntruplus576
183591841418556kyber90s768
191631927619380mlkem512
201492021520306timer
201772029820468smaugt1
203492040220530ntruplus768
213192153721780ntruhps2048677
234832359223783ntruplus864
247532486025002kyber90s1024
245132504126718mceliece348864f
244452527226439mceliece348864
259732611926441ntruhps4096821
259452633526585kyber512
283852852828692sntrup4591761
297942988230074mlkem768
304283130932988mceliece348864pc
304833154532947mceliece348864pcf
314403171031930sntrup653
314653172131929ntruplus1152
341423424834463sntrup761
343733447634791
T:
lightsaber2
375053766937870
T:
C:nhcompact512cca
389383938641208kyber768
405224150447410
T:
C:edonk128k16n80nu4l6
416554187342084sntrup857
417784188142068smaugt3
424294296144198
T:
lac128
430994340843637mlkem1024
446674496545554sntrup953
455744588146062sntrup1013
469904714547753ntrulpr653
481354826148422
T:
ntrulpr4591761
495444966649817ntrulpr761
45665?49758?59425?mceliece460896
449975110855112mceliece460896f
512165142952344
T:
C:nhcompact768cca
510475533160563mceliece460896pcf
555755574656092newhope512cca
511135575863266mceliece460896pc
552065707159255kyber1024
568185739158269smaugt5
582505839259740sntrup1277
579375852559307
T:
saber2
624496257662761ntrulpr857
632466410966091
T:
ntskem1264
641516430664511ntrulpr953
656616582265980ntrulpr1013
657246596266246
T:
C:nhcompact1024cca
735017566780900mceliece6960119
751737795082970mceliece6960119f
779368205987647mceliece6688128
819728261983614
T:
C:bikel1
809408384488263mceliece6960119pcf
835828409885189ntrulpr1277
806428437492145mceliece6688128f
852328585587518
T:
firesaber2
836948797493235mceliece6960119pc
868459182399108mceliece6688128pcf
920589246392956
T:
lotus128
8839492842102685mceliece6688128pc
924829326795113mceliece8192128
938659502696504mceliece8192128f
101553101840102213
T:
lac192
101710102767104268mceliece8192128pcf
103328103531103910newhope1024cca
102841104025105429mceliece8192128pc
111291113319117143
T:
ntrukem443
120025120298120819
T:
lac256
118468120508122430
T:
C:rolloi128
133563134034134921
T:
lotus192
126149?141317?165474?
T:
C:edonk128k16n80nu8l6
143656144803146247
T:
C:rolloi192
154620155347157198
T:
C:hila5
162672164383166064
T:
C:rolloi256
171309171820172405
T:
hqc128round4
163450174846197434
T:
C:edonk128k32n96nu4l4
178750?180096?253168?
T:
lotus256
183698185290196802threebears624r2cca
187103188610193112
T:
ntrukem743
197363198352200232
T:
C:bikel3
197824208580218050C:threebears624r2cpa
216270217304219817
T:
ntskem1380
220431220992221559
T:
kindi256342
262048262679264833
T:
kindi512222
266477268593269322
T:
kindi512241
268680269352270121
T:
ntskem13136
324606327493335853
T:
C:lake1
327515336254352680
T:
C:edonk128ref
349966351619353798
T:
C:lake2
353927360364384391threebears936r2cca
377904380575382821
T:
rolloii128
381694383370386079
T:
C:lake3
374587386340415209C:threebears936r2cpa
384308388637395226
T:
hqc192round4
388544392284395906
T:
rolloii192
396050397894412125
T:
hqcrmrs128
423891426618431360
T:
rolloii256
433609436111450485
T:
hqc128
468642470293473243
T:
C:edonk192k32n128nu4l6
492341494979509130
T:
hqc1281
496828498117500249
T:
kindi512321
504475508571514885
T:
locker1
517111519319522242
T:
locker2
542715543446545575
T:
kindi256522
572873575845579069
T:
locker3
584295604125622310threebears1248r2cca
605932619644638966
T:
C:edonk192k48n144nu4l4
653082657706664201
T:
locker4
668776684665692193C:threebears1248r2cpa
710403712628716747
T:
locker6
758215762123768720
T:
rqc128
757926762357767894
T:
hqc256round4
824007830864851593
T:
hqcrmrs192
856225865045882896
T:
hqc192
877242880468886738
T:
locker5
898020903592924352
T:
hqc1921
971408977498999750
T:
hqc1922
108276710866101092110
T:
frodokem640
120379312076931219716
T:
frodokem640aes
121548012221291239432
T:
locker7
124760712525791271042
T:
locker8
133572813400481346689
T:
rqc192
134835913532581359632
T:
locker9
135703913691751397598
T:
hqcrmrs256
140468014234181449650
T:
hqc256
141822414274681455753
T:
hqc2561
149683815261671534501
T:
hqc2562
155249015608391592137
T:
hqc2563
1847544?1855753?2484749?
T:
rqc256
215582021665872179173
T:
frodokem976
214497621976382242604
T:
bigquake1
229894323092262324995
T:
frodokem976aes
302736030424023085091
T:
frodokem640shake
394874639651263987707
T:
frodokem1344aes
621160562188016238620
T:
frodokem976shake
629272564540166593577
T:
bigquake3
708281171037597121389
T:
remblem928
709787071430147175862
T:
remblem1056
760789476231077635885
T:
sikep434
9602543984967810241345
T:
bigquake5
108702471090213510925455
T:
frodokem1344shake
110590181108433211105774
T:
sikep503
120480001209131612165383
T:
sikep434comp
146049331476309414858036
T:
mersenne756839
170407111710933017201161
T:
sikep503comp
222742612229146722315577
T:
sikep610
307409263085496831037447
T:
sikep610comp
327825433281061732858206
T:
sikep751
391060863926709639445586
T:
oddmanhattan128
511493095128459651445101
T:
sikep751comp
751280857539256475636416
T:
oddmanhattan192
154263353154998831155730538
T:
oddmanhattan256
Cycles for decapsulation
25%50%75%system
111261119611275kyber90s512
154871555215673kyber90s768
195391958919701ntruplus576
197711984119987mlkem512
207382084721603kyber512
214042145421542kyber90s1024
240832420724313ntruhps2048509
241062429824486ntruplus768
280842828228429ntruplus864
310023113131934mlkem768
314053148731636smaugt1
319673208032209timer
320233232432628kyber768
346543497335432
T:
lightsaber2
357153582735949ntruhps2048677
362883644236609
T:
C:hila5
365453664736866
T:
C:nhcompact512cca
371913733437502ntruplus1152
373343747237585ntruhrss701
410864115241261sntrup761
430144310443361sntrup653
462834669447395kyber1024
467584691547735mlkem1024
485074864048797ntruhps4096821
504105058750744
T:
C:nhcompact768cca
569075705057631ntrulpr653
571195732857737
T:
saber2
579805807958321sntrup857
580395824358518smaugt3
585845895159337
T:
lac128
591315924159437ntrulpr761
607626089961079sntrup953
615416182162249newhope512cca
622916237462464sntrup4591761
622616241062560sntrup1013
648386508165288
T:
C:nhcompact1024cca
698016996770066
T:
ntrulpr4591761
760057612976287smaugt5
765067659376747ntrulpr857
773147758977870ntrulpr953
778947801678429sntrup1277
784907866878817ntrulpr1013
854818632088291
T:
firesaber2
934319368094077mceliece348864f
936819411595919mceliece348864
949009597198154C:threebears624r2cpa
9946699697100868ntrulpr1277
9965799834100128mceliece348864pc
9963199939100258mceliece348864pcf
107713107866108201
T:
lotus128
109464110258110714
T:
ntrukem443
113853114343114767newhope1024cca
121414126834127686C:threebears936r2cpa
140952141199141498
T:
lac192
143456145390147422C:threebears1248r2cpa
161979162380163129
T:
lotus192
198706199311200987
T:
ntrukem743
221665221934222186mceliece460896
221653221970222250mceliece460896f
220825222821242576mceliece6960119
221272226722243460mceliece6960119f
227498227763228212mceliece460896pc
227557227930228304mceliece460896pcf
223501229154233204
T:
lac256
229041229400229870mceliece6688128
229281229661229985mceliece6688128f
230476230772231252mceliece8192128f
230940231275231642mceliece8192128
236958237305237665mceliece6688128pcf
237478238001238585mceliece6688128pc
229529238555251717mceliece6960119pcf
239219239595240037mceliece8192128pc
229874239630251661mceliece6960119pc
239345239674240198mceliece8192128pcf
279890280569281741
T:
kindi256342
226771?294461?312912?
T:
lotus256
299912300291300687
T:
ntskem1264
302510302975303717
T:
hqc128round4
350066350871353423
T:
kindi512222
353827355477359299
T:
kindi512241
424508445080462889threebears624r2cca
565189566846568702
T:
ntskem1380
625574628216650262
T:
kindi512321
638943639820641267
T:
kindi256522
639082642549645655
T:
hqc192round4
678169680317682179
T:
hqcrmrs128
668136691770699563
T:
hqc128
765076771132858365threebears936r2cca
628611?786237?1060204?
T:
C:edonk128k32n96nu4l4
871534876980893595
T:
C:rolloi128
898398908608922130
T:
hqc1281
101552410205991031802
T:
C:rolloi192
104177410459101051085
T:
ntskem13136
108050610862311095064
T:
frodokem640
114835211525231158676
T:
frodokem640aes
121417112260861338968threebears1248r2cca
125886712616621267325
T:
hqc256round4
126658212711691283404
T:
hqc192
129244012978171321526
T:
hqcrmrs192
131684413203981401059
T:
C:bikel1
134415013547761394193
T:
rolloii128
137262913912841416923
T:
C:lake1
146981514805591504114
T:
rolloii192
144767414871161505789
T:
hqc1921
151396215182661542118
T:
hqc1922
157394415793801584568
T:
rsa2048
173343317404771755609
T:
C:rolloi256
193556119484951970511
T:
rolloii256
198100320081202030254
T:
hqc256
201765720375922073693
T:
hqcrmrs256
214427521584622170864
T:
frodokem976
212748421713432182086
T:
hqc2561
218552021973802209336
T:
frodokem976aes
223548222647492289375
T:
hqc2562
230415223776112385281
T:
hqc2563
245114024722312483437
T:
C:lake2
267025326932232707295
T:
locker1
269108027174412728429
T:
bigquake1
274086527574442778658
T:
rqc128
276361727869162808899
T:
locker2
298807830055863019068
T:
frodokem640shake
304161030591673078128
T:
locker4
332463433384193355042
T:
C:lake3
380045538145943827645
T:
frodokem1344aes
411263341180664196695
T:
C:bikel3
419439442348474251517
T:
locker3
2873481?4382151?4624086?
T:
C:edonk192k48n144nu4l4
451335145497544568526
T:
locker6
492353149396334949638
T:
locker5
495011749745644999303
T:
locker7
505654750769965108931
T:
locker8
518133851995105222810
T:
rqc192
4298629?5780381?8523159?
T:
C:edonk128k16n80nu4l6
602345560344206061225
T:
frodokem976shake
6037281?7063380?14937911?
T:
C:edonk128k16n80nu8l6
710386771277047153666
T:
locker9
785945178973449184276
T:
rqc256
815909781716168195488
T:
sikep434
868154987004388721258
T:
sikep434comp
8374058?8919559?19450595?
T:
C:edonk128ref
950966495387829558429
T:
remblem928
951986395504159585173
T:
remblem1056
107510391076482910787908
T:
frodokem1344shake
117727401179999911831387
T:
sikep503
125302421256636712597270
T:
sikep503comp
217517172192467922099285
T:
mersenne756839
224382042245576122479469
T:
sikep610
237570362378020023801294
T:
sikep610comp
239930732428875624676083
T:
bigquake3
353142783534497135388108
T:
sikep751
350988713600768736385580
T:
bigquake5
374489233747802037498041
T:
sikep751comp
420380284225714942610520
T:
oddmanhattan128
24105103?80901195?87282691?
T:
C:edonk192k32n128nu4l6
825097238280802983092605
T:
oddmanhattan192
169217641169729695170133784
T:
oddmanhattan256