VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems
ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of key-encapsulation mechanisms on one machine: amd64; Golden Cove (90675-00); 2022 Intel Core i3-12100; 4 x 3300MHz; alder, supercop-20251222

[Page version: 20251227 18:55:45]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for key-encapsulation mechanisms:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol C: means that the current SUPERCOP database does not list IND-CCA2 security as a goal for this key-encapsulation mechanism. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each key-encapsulation mechanism and each implementation. Designers and implementors interested in submitting new key-encapsulation mechanisms and new implementations of existing systems should read the call for submissions.

Test results

Graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

NISTPQC graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

Cycles to generate a key pair
25%50%75%system
902091409324kyber90s512
135851407714366kyber90s768
176131780218162mlkem512
177341789818207kyber512
192891954719860kyber90s1024
231782351823740
T:
C:nhcompact512cca
236442381324001
T:
lac128
254302564626181
T:
lightsaber2
256692574825908
T:
ntrulpr4591761
273422762427884ntrulpr653
288622904829511ntrulpr761
304233071132083mlkem768
307533092831173smaugt1
309253105131291timer
308103109131436kyber768
328963365634154
T:
C:nhcompact768cca
348343513735546newhope512cca
357843594441774ntruplus576
364013658136945ntrulpr857
379533816238490ntrulpr953
387793903039365ntrulpr1013
400344132241607
T:
C:nhcompact1024cca
433814387844599mlkem1024
436104539146232kyber1024
463424673547027
T:
saber2
473384745247707smaugt3
496214978350242ntrulpr1277
598336009460393
T:
lac256
609876112061280ntruplus768
624466263562872smaugt5
637736386964117ntruplus864
657506593066343
T:
lac192
657516608166402newhope1024cca
668866715667849
T:
hqc128round4
68585?69089?93615?ntruplus1152
706637112671916
T:
firesaber2
105644106546107439
T:
C:hila5
113770113958114343ntruhps2048509
134918139342147220threebears624r2cca
136482146329148989C:threebears624r2cpa
154780161948167997
T:
hqc192round4
168549169254169721
T:
kindi256342
179946180690181449
T:
kindi512222
184177185257185986
T:
kindi512241
191775192045193638ntruhrss701
200190201008202034ntruhps2048677
272471273536285610
T:
hqcrmrs128
278186280450307786threebears936r2cca
289712290445291438ntruhps4096821
284871290791311173C:threebears936r2cpa
304902306786318622
T:
hqc128
309863311353321133
T:
hqc1281
323871326465327116
T:
hqc256round4
339704342538346552
T:
ntrukem443
379087379700380433
T:
kindi512321
403309406368427253
T:
C:bikel1
453168453930460419
T:
kindi256522
487329494033502598threebears1248r2cca
555408555987556933sntrup653
558113559068560502sntrup761
560425565684570495C:threebears1248r2cpa
564113567903584464
T:
hqcrmrs192
573669576031592981
T:
hqc1921
577244579351581890
T:
rqc128
604326607154625020
T:
hqc192
612070621768635344
T:
C:edonk128k16n80nu4l6
612622632436635365
T:
hqc1922
708670713813716385
T:
frodokem640
719470720708722159sntrup4591761
720269722891725219
T:
C:rolloi128
785932788574791874
T:
ntrukem743
877524887955898214
T:
frodokem640aes
887543893336899214
T:
C:rolloi192
890240911619930620
T:
hqc2561
911944913536915809sntrup857
907310933158942162
T:
hqcrmrs256
937445962824967101
T:
hqc2562
971259?975769?1430647?
T:
rqc192
9762859807791004626
T:
hqc256
9784759872771004629
T:
C:edonk128k16n80nu8l6
9733099958941006452
T:
hqc2563
109753311013521104667sntrup953
111303911162841124042
T:
C:bikel3
115307711690011184472
T:
C:edonk128k32n96nu4l4
121138512188201226809
T:
C:rolloi256
122593812289291257243sntrup1013
135066213714851388752
T:
C:edonk192k32n128nu4l6
1376637?1398726?2037354?
T:
rqc256
141034114194131457699
T:
C:edonk128ref
143953114444751450883
T:
frodokem976
170895817151551730824
T:
frodokem976aes
178882817994901817411
T:
C:lake2
180018418103291822448
T:
C:lake3
179588918112971834127
T:
C:lake1
190325819071281911401sntrup1277
208032921225712151848
T:
C:edonk192k48n144nu4l4
268860227021552712770
T:
rolloii192
280077928034202817091
T:
frodokem640shake
292858229440772959954
T:
frodokem1344aes
300547130171753043169
T:
locker1
312507831441463162313
T:
rolloii256
327592032926903307735
T:
locker2
339076534143283430950
T:
rolloii128
348458235180853541065
T:
locker3
386488638832433909251
T:
locker4
439083344087914423961
T:
locker6
467270546840034693780
T:
sikep434
475438647829154806812
T:
remblem928
478070747995234814747
T:
remblem1056
576120357844555804160
T:
locker5
585976158660986360874
T:
frodokem976shake
616302661668086175442
T:
lotus128
672489267478846764969
T:
sikep503
763352076624957697933
T:
locker7
779211378203688485929
T:
sikep434comp
811437581366118163843
T:
locker8
859785586313828677710
T:
locker9
102882441032382210338980
T:
frodokem1344shake
110975151116045212117182
T:
sikep503comp
121286601213992212150114
T:
sikep610
125776061259539912632108
T:
lotus192
148853331498866715167834
T:
mersenne756839
203121582033100820349825
T:
sikep751
207775962101721823573992
T:
lotus256
210302292106528522797807
T:
sikep610comp
264799082653316826588453mceliece348864pcf
265293952661857227231710mceliece348864f
276194752766903627709042
T:
ntskem1264
321784313221481934925694
T:
sikep751comp
26954237?35622871?53011823?mceliece348864
34732430?43433835?52963418?mceliece348864pc
33520677?59618728?101858798?
T:
rsa2048
820562628418865485792930
T:
ntskem1380
850686258525708787276186mceliece460896f
851147258692141787097681mceliece460896pcf
110804481?137226192?189801068?mceliece460896
87240881?137333040?166134306?mceliece460896pc
161328497161641006163295002mceliece6960119pcf
161535149163611005163910758mceliece6960119f
178192547179750146180236432
T:
oddmanhattan128
191884100192147792194567424mceliece6688128f
192208151192776418193801154mceliece6688128pcf
201509617203386577203706247mceliece8192128pcf
204980211205247696205701660mceliece8192128f
212221192?213229815?313284980?mceliece6960119
164224673?260233588?360348034?mceliece6960119pc
202622991?260316278?374825382?mceliece8192128
291176552293069706293918564
T:
oddmanhattan192
194218671?305659301?418380575?mceliece6688128
248174787?306484095?428979948?mceliece6688128pc
214138931?315522153?431875563?mceliece8192128pc
305268130331761734336497881
T:
ntskem13136
516680918517886257518843657
T:
oddmanhattan256
647614400741297737746121142
T:
bigquake1
586509425460522661826122501730
T:
bigquake3
108257415451102920606011149602304
T:
bigquake5
Cycles for encapsulation
25%50%75%system
9377980110396
T:
rsa2048
135961364613760kyber90s512
145001463914842ntruhps2048509
156741580315910ntruhrss701
166591670816821ntruplus576
183591841418556kyber90s768
191631927619380mlkem512
201492021520306timer
201772029820468smaugt1
203492040220530ntruplus768
213192153721780ntruhps2048677
234832359223783ntruplus864
247532486025002kyber90s1024
245132504126718mceliece348864f
244452527226439mceliece348864
259732611926441ntruhps4096821
259452633526585kyber512
283852852828692sntrup4591761
297942988230074mlkem768
304283130932988mceliece348864pc
304833154532947mceliece348864pcf
314403171031930sntrup653
314653172131929ntruplus1152
341423424834463sntrup761
343733447634791
T:
lightsaber2
375053766937870
T:
C:nhcompact512cca
389383938641208kyber768
405224150447410
T:
C:edonk128k16n80nu4l6
416554187342084sntrup857
417784188142068smaugt3
424294296144198
T:
lac128
430994340843637mlkem1024
446674496545554sntrup953
455744588146062sntrup1013
469904714547753ntrulpr653
481354826148422
T:
ntrulpr4591761
495444966649817ntrulpr761
45665?49758?59425?mceliece460896
449975110855112mceliece460896f
512165142952344
T:
C:nhcompact768cca
510475533160563mceliece460896pcf
555755574656092newhope512cca
511135575863266mceliece460896pc
552065707159255kyber1024
568185739158269smaugt5
582505839259740sntrup1277
579375852559307
T:
saber2
624496257662761ntrulpr857
632466410966091
T:
ntskem1264
641516430664511ntrulpr953
656616582265980ntrulpr1013
657246596266246
T:
C:nhcompact1024cca
735017566780900mceliece6960119
751737795082970mceliece6960119f
779368205987647mceliece6688128
819728261983614
T:
C:bikel1
809408384488263mceliece6960119pcf
835828409885189ntrulpr1277
806428437492145mceliece6688128f
852328585587518
T:
firesaber2
836948797493235mceliece6960119pc
868459182399108mceliece6688128pcf
920589246392956
T:
lotus128
8839492842102685mceliece6688128pc
924829326795113mceliece8192128
938659502696504mceliece8192128f
101553101840102213
T:
lac192
101710102767104268mceliece8192128pcf
103328103531103910newhope1024cca
102841104025105429mceliece8192128pc
111291113319117143
T:
ntrukem443
120025120298120819
T:
lac256
118468120508122430
T:
C:rolloi128
133563134034134921
T:
lotus192
126149?141317?165474?
T:
C:edonk128k16n80nu8l6
143656144803146247
T:
C:rolloi192
154620155347157198
T:
C:hila5
162672164383166064
T:
C:rolloi256
171309171820172405
T:
hqc128round4
163450174846197434
T:
C:edonk128k32n96nu4l4
178750?180096?253168?
T:
lotus256
183698185290196802threebears624r2cca
187103188610193112
T:
ntrukem743
197363198352200232
T:
C:bikel3
197824208580218050C:threebears624r2cpa
216270217304219817
T:
ntskem1380
220431220992221559
T:
kindi256342
262048262679264833
T:
kindi512222
266477268593269322
T:
kindi512241
268680269352270121
T:
ntskem13136
324606327493335853
T:
C:lake1
327515336254352680
T:
C:edonk128ref
349966351619353798
T:
C:lake2
353927360364384391threebears936r2cca
377904380575382821
T:
rolloii128
381694383370386079
T:
C:lake3
374587386340415209C:threebears936r2cpa
384308388637395226
T:
hqc192round4
388544392284395906
T:
rolloii192
396050397894412125
T:
hqcrmrs128
423891426618431360
T:
rolloii256
433609436111450485
T:
hqc128
468642470293473243
T:
C:edonk192k32n128nu4l6
492341494979509130
T:
hqc1281
496828498117500249
T:
kindi512321
504475508571514885
T:
locker1
517111519319522242
T:
locker2
542715543446545575
T:
kindi256522
572873575845579069
T:
locker3
584295604125622310threebears1248r2cca
605932619644638966
T:
C:edonk192k48n144nu4l4
653082657706664201
T:
locker4
668776684665692193C:threebears1248r2cpa
710403712628716747
T:
locker6
758215762123768720
T:
rqc128
757926762357767894
T:
hqc256round4
824007830864851593
T:
hqcrmrs192
856225865045882896
T:
hqc192
877242880468886738
T:
locker5
898020903592924352
T:
hqc1921
971408977498999750
T:
hqc1922
108276710866101092110
T:
frodokem640
120379312076931219716
T:
frodokem640aes
121548012221291239432
T:
locker7
124760712525791271042
T:
locker8
133572813400481346689
T:
rqc192
134835913532581359632
T:
locker9
135703913691751397598
T:
hqcrmrs256
140468014234181449650
T:
hqc256
141822414274681455753
T:
hqc2561
149683815261671534501
T:
hqc2562
155249015608391592137
T:
hqc2563
1847544?1855753?2484749?
T:
rqc256
215582021665872179173
T:
frodokem976
214497621976382242604
T:
bigquake1
229894323092262324995
T:
frodokem976aes
302736030424023085091
T:
frodokem640shake
394874639651263987707
T:
frodokem1344aes
621160562188016238620
T:
frodokem976shake
629272564540166593577
T:
bigquake3
708281171037597121389
T:
remblem928
709787071430147175862
T:
remblem1056
760789476231077635885
T:
sikep434
9602543984967810241345
T:
bigquake5
108702471090213510925455
T:
frodokem1344shake
110590181108433211105774
T:
sikep503
120480001209131612165383
T:
sikep434comp
146049331476309414858036
T:
mersenne756839
170407111710933017201161
T:
sikep503comp
222742612229146722315577
T:
sikep610
307409263085496831037447
T:
sikep610comp
327825433281061732858206
T:
sikep751
391060863926709639445586
T:
oddmanhattan128
511493095128459651445101
T:
sikep751comp
751280857539256475636416
T:
oddmanhattan192
154263353154998831155730538
T:
oddmanhattan256
Cycles for decapsulation
25%50%75%system
111261119611275kyber90s512
154871555215673kyber90s768
195391958919701ntruplus576
197711984119987mlkem512
207382084721603kyber512
214042145421542kyber90s1024
240832420724313ntruhps2048509
241062429824486ntruplus768
280842828228429ntruplus864
310023113131934mlkem768
314053148731636smaugt1
319673208032209timer
320233232432628kyber768
346543497335432
T:
lightsaber2
357153582735949ntruhps2048677
362883644236609
T:
C:hila5
365453664736866
T:
C:nhcompact512cca
371913733437502ntruplus1152
373343747237585ntruhrss701
410864115241261sntrup761
430144310443361sntrup653
462834669447395kyber1024
467584691547735mlkem1024
485074864048797ntruhps4096821
504105058750744
T:
C:nhcompact768cca
569075705057631ntrulpr653
571195732857737
T:
saber2
579805807958321sntrup857
580395824358518smaugt3
585845895159337
T:
lac128
591315924159437ntrulpr761
607626089961079sntrup953
615416182162249newhope512cca
622916237462464sntrup4591761
622616241062560sntrup1013
648386508165288
T:
C:nhcompact1024cca
698016996770066
T:
ntrulpr4591761
760057612976287smaugt5
765067659376747ntrulpr857
773147758977870ntrulpr953
778947801678429sntrup1277
784907866878817ntrulpr1013
854818632088291
T:
firesaber2
934319368094077mceliece348864f
936819411595919mceliece348864
949009597198154C:threebears624r2cpa
9946699697100868ntrulpr1277
9965799834100128mceliece348864pc
9963199939100258mceliece348864pcf
107713107866108201
T:
lotus128
109464110258110714
T:
ntrukem443
113853114343114767newhope1024cca
121414126834127686C:threebears936r2cpa
140952141199141498
T:
lac192
143456145390147422C:threebears1248r2cpa
161979162380163129
T:
lotus192
198706199311200987
T:
ntrukem743
221665221934222186mceliece460896
221653221970222250mceliece460896f
220825222821242576mceliece6960119
221272226722243460mceliece6960119f
227498227763228212mceliece460896pc
227557227930228304mceliece460896pcf
223501229154233204
T:
lac256
229041229400229870mceliece6688128
229281229661229985mceliece6688128f
230476230772231252mceliece8192128f
230940231275231642mceliece8192128
236958237305237665mceliece6688128pcf
237478238001238585mceliece6688128pc
229529238555251717mceliece6960119pcf
239219239595240037mceliece8192128pc
229874239630251661mceliece6960119pc
239345239674240198mceliece8192128pcf
279890280569281741
T:
kindi256342
226771?294461?312912?
T:
lotus256
299912300291300687
T:
ntskem1264
302510302975303717
T:
hqc128round4
350066350871353423
T:
kindi512222
353827355477359299
T:
kindi512241
424508445080462889threebears624r2cca
565189566846568702
T:
ntskem1380
625574628216650262
T:
kindi512321
638943639820641267
T:
kindi256522
639082642549645655
T:
hqc192round4
678169680317682179
T:
hqcrmrs128
668136691770699563
T:
hqc128
765076771132858365threebears936r2cca
628611?786237?1060204?
T:
C:edonk128k32n96nu4l4
871534876980893595
T:
C:rolloi128
898398908608922130
T:
hqc1281
101552410205991031802
T:
C:rolloi192
104177410459101051085
T:
ntskem13136
108050610862311095064
T:
frodokem640
114835211525231158676
T:
frodokem640aes
121417112260861338968threebears1248r2cca
125886712616621267325
T:
hqc256round4
126658212711691283404
T:
hqc192
129244012978171321526
T:
hqcrmrs192
131684413203981401059
T:
C:bikel1
134415013547761394193
T:
rolloii128
137262913912841416923
T:
C:lake1
146981514805591504114
T:
rolloii192
144767414871161505789
T:
hqc1921
151396215182661542118
T:
hqc1922
157394415793801584568
T:
rsa2048
173343317404771755609
T:
C:rolloi256
193556119484951970511
T:
rolloii256
198100320081202030254
T:
hqc256
201765720375922073693
T:
hqcrmrs256
214427521584622170864
T:
frodokem976
212748421713432182086
T:
hqc2561
218552021973802209336
T:
frodokem976aes
223548222647492289375
T:
hqc2562
230415223776112385281
T:
hqc2563
245114024722312483437
T:
C:lake2
267025326932232707295
T:
locker1
269108027174412728429
T:
bigquake1
274086527574442778658
T:
rqc128
276361727869162808899
T:
locker2
298807830055863019068
T:
frodokem640shake
304161030591673078128
T:
locker4
332463433384193355042
T:
C:lake3
380045538145943827645
T:
frodokem1344aes
411263341180664196695
T:
C:bikel3
419439442348474251517
T:
locker3
2873481?4382151?4624086?
T:
C:edonk192k48n144nu4l4
451335145497544568526
T:
locker6
492353149396334949638
T:
locker5
495011749745644999303
T:
locker7
505654750769965108931
T:
locker8
518133851995105222810
T:
rqc192
4298629?5780381?8523159?
T:
C:edonk128k16n80nu4l6
602345560344206061225
T:
frodokem976shake
6037281?7063380?14937911?
T:
C:edonk128k16n80nu8l6
710386771277047153666
T:
locker9
785945178973449184276
T:
rqc256
815909781716168195488
T:
sikep434
868154987004388721258
T:
sikep434comp
8374058?8919559?19450595?
T:
C:edonk128ref
950966495387829558429
T:
remblem928
951986395504159585173
T:
remblem1056
107510391076482910787908
T:
frodokem1344shake
117727401179999911831387
T:
sikep503
125302421256636712597270
T:
sikep503comp
217517172192467922099285
T:
mersenne756839
224382042245576122479469
T:
sikep610
237570362378020023801294
T:
sikep610comp
239930732428875624676083
T:
bigquake3
353142783534497135388108
T:
sikep751
350988713600768736385580
T:
bigquake5
374489233747802037498041
T:
sikep751comp
420380284225714942610520
T:
oddmanhattan128
24105103?80901195?87282691?
T:
C:edonk192k32n128nu4l6
825097238280802983092605
T:
oddmanhattan192
169217641169729695170133784
T:
oddmanhattan256