VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems
ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of key-encapsulation mechanisms on one machine: amd64; Golden Cove (90675-00); 2022 Intel Core i3-12100; 4 x 3300MHz; alder, supercop-20250922

[Page version: 20251103 11:56:20]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for key-encapsulation mechanisms:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol C: means that the current SUPERCOP database does not list IND-CCA2 security as a goal for this key-encapsulation mechanism. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each key-encapsulation mechanism and each implementation. Designers and implementors interested in submitting new key-encapsulation mechanisms and new implementations of existing systems should read the call for submissions.

Test results

Graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

NISTPQC graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

Cycles to generate a key pair
25%50%75%system
908992159412kyber90s512
134571356113800kyber90s768
180371843018628kyber512
193041961819931kyber90s1024
231782351823740
T:
C:nhcompact512cca
236442381324001
T:
lac128
254302564626181
T:
lightsaber2
256692574825908
T:
ntrulpr4591761
261142641026847ntrulpr653
276142783328520smaugt1
275412805628367ntrulpr761
303343044730587timer
303663086731130kyber768
328963365634154
T:
C:nhcompact768cca
349153545735814ntrulpr857
357823591640701ntruplus576
363413654636859ntrulpr953
370243727437670ntrulpr1013
379463811938726T!!!newhope512cca
400344132241607
T:
C:nhcompact1024cca
429024313043637kyber1024
439514418945988smaugt3
463424673547027
T:
saber2
474414757147921ntrulpr1277
585115940159661smaugt5
598336009460393
T:
lac256
610976125461495ntruplus768
637686387064117ntruplus864
657506593066343
T:
lac192
668866715667849
T:
hqc128round4
706637112671916
T:
firesaber2
68663?71662?92250?ntruplus1152
740027431674735T!!!newhope1024cca
105644106546107439
T:
C:hila5
114005114354114824ntruhps2048509
134918139342147220threebears624r2cca
136482146329148989C:threebears624r2cpa
154780161948167997
T:
hqc192round4
168549169254169721
T:
kindi256342
179946180690181449
T:
kindi512222
184177185257185986
T:
kindi512241
189835190396192180ntruhrss701
199456199749200384ntruhps2048677
272471273536285610
T:
hqcrmrs128
278186280450307786threebears936r2cca
284871290791311173C:threebears936r2cpa
290397291016291562ntruhps4096821
304902306786318622
T:
hqc128
309863311353321133
T:
hqc1281
323871326465327116
T:
hqc256round4
339704342538346552
T:
ntrukem443
379087379700380433
T:
kindi512321
403309406368427253
T:
C:bikel1
453168453930460419
T:
kindi256522
487329494033502598threebears1248r2cca
555408555987556933sntrup653
556166556831563487sntrup761
560425565684570495C:threebears1248r2cpa
564113567903584464
T:
hqcrmrs192
573669576031592981
T:
hqc1921
577244579351581890
T:
rqc128
604326607154625020
T:
hqc192
612070621768635344
T:
C:edonk128k16n80nu4l6
612622632436635365
T:
hqc1922
708670713813716385
T:
frodokem640
718880719747721244sntrup4591761
720269722891725219
T:
C:rolloi128
785932788574791874
T:
ntrukem743
877524887955898214
T:
frodokem640aes
887543893336899214
T:
C:rolloi192
890240911619930620
T:
hqc2561
911944913536915809sntrup857
907310933158942162
T:
hqcrmrs256
937445962824967101
T:
hqc2562
971259?975769?1430647?
T:
rqc192
9762859807791004626
T:
hqc256
9784759872771004629
T:
C:edonk128k16n80nu8l6
9733099958941006452
T:
hqc2563
109753311013521104667sntrup953
111303911162841124042
T:
C:bikel3
115307711690011184472
T:
C:edonk128k32n96nu4l4
121138512188201226809
T:
C:rolloi256
122593812289291257243sntrup1013
135066213714851388752
T:
C:edonk192k32n128nu4l6
1376637?1398726?2037354?
T:
rqc256
141034114194131457699
T:
C:edonk128ref
143953114444751450883
T:
frodokem976
170895817151551730824
T:
frodokem976aes
178882817994901817411
T:
C:lake2
180018418103291822448
T:
C:lake3
179588918112971834127
T:
C:lake1
190325819071281911401sntrup1277
208032921225712151848
T:
C:edonk192k48n144nu4l4
268860227021552712770
T:
rolloii192
280077928034202817091
T:
frodokem640shake
292858229440772959954
T:
frodokem1344aes
300547130171753043169
T:
locker1
312507831441463162313
T:
rolloii256
327592032926903307735
T:
locker2
339076534143283430950
T:
rolloii128
348458235180853541065
T:
locker3
386488638832433909251
T:
locker4
439083344087914423961
T:
locker6
467270546840034693780
T:
sikep434
475438647829154806812
T:
remblem928
478070747995234814747
T:
remblem1056
576120357844555804160
T:
locker5
585976158660986360874
T:
frodokem976shake
616302661668086175442
T:
lotus128
672489267478846764969
T:
sikep503
763352076624957697933
T:
locker7
779211378203688485929
T:
sikep434comp
811437581366118163843
T:
locker8
859785586313828677710
T:
locker9
102882441032382210338980
T:
frodokem1344shake
110975151116045212117182
T:
sikep503comp
121286601213992212150114
T:
sikep610
125776061259539912632108
T:
lotus192
148853331498866715167834
T:
mersenne756839
203121582033100820349825
T:
sikep751
207775962101721823573992
T:
lotus256
210302292106528522797807
T:
sikep610comp
264799082653316826588453mceliece348864pcf
265293952661857227231710mceliece348864f
276194752766903627709042
T:
ntskem1264
321784313221481934925694
T:
sikep751comp
26954237?35622871?53011823?mceliece348864
34732430?43433835?52963418?mceliece348864pc
33520677?59618728?101858798?
T:
rsa2048
820562628418865485792930
T:
ntskem1380
850686258525708787276186mceliece460896f
851147258692141787097681mceliece460896pcf
110804481?137226192?189801068?mceliece460896
87240881?137333040?166134306?mceliece460896pc
161328497161641006163295002mceliece6960119pcf
161535149163611005163910758mceliece6960119f
178192547179750146180236432
T:
oddmanhattan128
191884100192147792194567424mceliece6688128f
192208151192776418193801154mceliece6688128pcf
201509617203386577203706247mceliece8192128pcf
204980211205247696205701660mceliece8192128f
212221192?213229815?313284980?mceliece6960119
164224673?260233588?360348034?mceliece6960119pc
202622991?260316278?374825382?mceliece8192128
291176552293069706293918564
T:
oddmanhattan192
194218671?305659301?418380575?mceliece6688128
248174787?306484095?428979948?mceliece6688128pc
214138931?315522153?431875563?mceliece8192128pc
305268130331761734336497881
T:
ntskem13136
516680918517886257518843657
T:
oddmanhattan256
647614400741297737746121142
T:
bigquake1
586509425460522661826122501730
T:
bigquake3
108257415451102920606011149602304
T:
bigquake5
Cycles for encapsulation
25%50%75%system
9377980110396
T:
rsa2048
136201366313746kyber90s512
146871495115198ntruhps2048509
160181614016276ntruhrss701
166651674116898ntruplus576
184041847018564kyber90s768
199422005220244smaugt1
202682033620460timer
203332040220522ntruplus768
218792225622593ntruhps2048677
235172359723770ntruplus864
247102480424943kyber90s1024
245132504126718mceliece348864f
244452527226439mceliece348864
257702588226166kyber512
256312592826264ntruhps4096821
280752849128597sntrup4591761
304283130932988mceliece348864pc
313693146331805ntruplus1152
304833154532947mceliece348864pcf
314403171031930sntrup653
341023421034422sntrup761
343733447634791
T:
lightsaber2
375053766937870
T:
C:nhcompact512cca
390203921040203kyber768
398793999540168smaugt3
405224150447410
T:
C:edonk128k16n80nu4l6
416554187342084sntrup857
424294296144198
T:
lac128
446674496545554sntrup953
456234574745891ntrulpr653
455744588146062sntrup1013
481354826148422
T:
ntrulpr4591761
485324865648805ntrulpr761
45665?49758?59425?mceliece460896
449975110855112mceliece460896f
512165142952344
T:
C:nhcompact768cca
549555521655683kyber1024
510475533160563mceliece460896pcf
552605542255588smaugt5
511135575863266mceliece460896pc
582505839259740sntrup1277
579375852559307
T:
saber2
607686142261576ntrulpr857
611876148962003T!!!newhope512cca
628466292963095ntrulpr953
632466410966091
T:
ntskem1264
641516426064433ntrulpr1013
657246596266246
T:
C:nhcompact1024cca
735017566780900mceliece6960119
751737795082970mceliece6960119f
812118136081513ntrulpr1277
779368205987647mceliece6688128
819728261983614
T:
C:bikel1
809408384488263mceliece6960119pcf
806428437492145mceliece6688128f
852328585587518
T:
firesaber2
836948797493235mceliece6960119pc
868459182399108mceliece6688128pcf
920589246392956
T:
lotus128
8839492842102685mceliece6688128pc
924829326795113mceliece8192128
938659502696504mceliece8192128f
101553101840102213
T:
lac192
101710102767104268mceliece8192128pcf
102841104025105429mceliece8192128pc
111291113319117143
T:
ntrukem443
115153116199117152T!!!newhope1024cca
120025120298120819
T:
lac256
118468120508122430
T:
C:rolloi128
133563134034134921
T:
lotus192
126149?141317?165474?
T:
C:edonk128k16n80nu8l6
143656144803146247
T:
C:rolloi192
154620155347157198
T:
C:hila5
162672164383166064
T:
C:rolloi256
171309171820172405
T:
hqc128round4
163450174846197434
T:
C:edonk128k32n96nu4l4
178750?180096?253168?
T:
lotus256
183698185290196802threebears624r2cca
187103188610193112
T:
ntrukem743
197363198352200232
T:
C:bikel3
197824208580218050C:threebears624r2cpa
216270217304219817
T:
ntskem1380
220431220992221559
T:
kindi256342
262048262679264833
T:
kindi512222
266477268593269322
T:
kindi512241
268680269352270121
T:
ntskem13136
324606327493335853
T:
C:lake1
327515336254352680
T:
C:edonk128ref
349966351619353798
T:
C:lake2
353927360364384391threebears936r2cca
377904380575382821
T:
rolloii128
381694383370386079
T:
C:lake3
374587386340415209C:threebears936r2cpa
384308388637395226
T:
hqc192round4
388544392284395906
T:
rolloii192
396050397894412125
T:
hqcrmrs128
423891426618431360
T:
rolloii256
433609436111450485
T:
hqc128
468642470293473243
T:
C:edonk192k32n128nu4l6
492341494979509130
T:
hqc1281
496828498117500249
T:
kindi512321
504475508571514885
T:
locker1
517111519319522242
T:
locker2
542715543446545575
T:
kindi256522
572873575845579069
T:
locker3
584295604125622310threebears1248r2cca
605932619644638966
T:
C:edonk192k48n144nu4l4
653082657706664201
T:
locker4
668776684665692193C:threebears1248r2cpa
710403712628716747
T:
locker6
758215762123768720
T:
rqc128
757926762357767894
T:
hqc256round4
824007830864851593
T:
hqcrmrs192
856225865045882896
T:
hqc192
877242880468886738
T:
locker5
898020903592924352
T:
hqc1921
971408977498999750
T:
hqc1922
108276710866101092110
T:
frodokem640
120379312076931219716
T:
frodokem640aes
121548012221291239432
T:
locker7
124760712525791271042
T:
locker8
133572813400481346689
T:
rqc192
134835913532581359632
T:
locker9
135703913691751397598
T:
hqcrmrs256
140468014234181449650
T:
hqc256
141822414274681455753
T:
hqc2561
149683815261671534501
T:
hqc2562
155249015608391592137
T:
hqc2563
1847544?1855753?2484749?
T:
rqc256
215582021665872179173
T:
frodokem976
214497621976382242604
T:
bigquake1
229894323092262324995
T:
frodokem976aes
302736030424023085091
T:
frodokem640shake
394874639651263987707
T:
frodokem1344aes
621160562188016238620
T:
frodokem976shake
629272564540166593577
T:
bigquake3
708281171037597121389
T:
remblem928
709787071430147175862
T:
remblem1056
760789476231077635885
T:
sikep434
9602543984967810241345
T:
bigquake5
108702471090213510925455
T:
frodokem1344shake
110590181108433211105774
T:
sikep503
120480001209131612165383
T:
sikep434comp
146049331476309414858036
T:
mersenne756839
170407111710933017201161
T:
sikep503comp
222742612229146722315577
T:
sikep610
307409263085496831037447
T:
sikep610comp
327825433281061732858206
T:
sikep751
391060863926709639445586
T:
oddmanhattan128
511493095128459651445101
T:
sikep751comp
751280857539256475636416
T:
oddmanhattan192
154263353154998831155730538
T:
oddmanhattan256
Cycles for decapsulation
25%50%75%system
110931113611229kyber90s512
154161547615543kyber90s768
162391627916331ntruplus576
197701989320008ntruplus768
208302088220969kyber512
214342156121678kyber90s1024
230632316723358ntruplus864
245742461524688ntruhps2048509
306523079530910ntruplus1152
312373135931486smaugt1
318533211132210kyber768
324103249732634timer
346543497335432
T:
lightsaber2
362883644236609
T:
C:hila5
365453664736866
T:
C:nhcompact512cca
366623679336864ntruhps2048677
382153826438370ntruhrss701
410504112941217sntrup761
430144310443361sntrup653
458904597146078kyber1024
484654858048890ntruhps4096821
504105058750744
T:
C:nhcompact768cca
539265421754447ntrulpr653
556635587756748smaugt3
560645632156710ntrulpr761
571195732857737
T:
saber2
579805807958321sntrup857
585845895159337
T:
lac128
607626089961079sntrup953
622616241062560sntrup1013
623446243662649sntrup4591761
648386508165288
T:
C:nhcompact1024cca
677626809868561T!!!newhope512cca
698016996770066
T:
ntrulpr4591761
729177314973620ntrulpr857
744727455374678ntrulpr953
753357542375551ntrulpr1013
758417596976140smaugt5
778947801678429sntrup1277
854818632088291
T:
firesaber2
934319368094077mceliece348864f
936819411595919mceliece348864
949009597198154C:threebears624r2cpa
958709600597019ntrulpr1277
9965799834100128mceliece348864pc
9963199939100258mceliece348864pcf
107713107866108201
T:
lotus128
109464110258110714
T:
ntrukem443
121414126834127686C:threebears936r2cpa
126049127255128657T!!!newhope1024cca
140952141199141498
T:
lac192
143456145390147422C:threebears1248r2cpa
161979162380163129
T:
lotus192
198706199311200987
T:
ntrukem743
221665221934222186mceliece460896
221653221970222250mceliece460896f
220825222821242576mceliece6960119
221272226722243460mceliece6960119f
227498227763228212mceliece460896pc
227557227930228304mceliece460896pcf
223501229154233204
T:
lac256
229041229400229870mceliece6688128
229281229661229985mceliece6688128f
230476230772231252mceliece8192128f
230940231275231642mceliece8192128
236958237305237665mceliece6688128pcf
237478238001238585mceliece6688128pc
229529238555251717mceliece6960119pcf
239219239595240037mceliece8192128pc
229874239630251661mceliece6960119pc
239345239674240198mceliece8192128pcf
279890280569281741
T:
kindi256342
226771?294461?312912?
T:
lotus256
299912300291300687
T:
ntskem1264
302510302975303717
T:
hqc128round4
350066350871353423
T:
kindi512222
353827355477359299
T:
kindi512241
424508445080462889threebears624r2cca
565189566846568702
T:
ntskem1380
625574628216650262
T:
kindi512321
638943639820641267
T:
kindi256522
639082642549645655
T:
hqc192round4
678169680317682179
T:
hqcrmrs128
668136691770699563
T:
hqc128
765076771132858365threebears936r2cca
628611?786237?1060204?
T:
C:edonk128k32n96nu4l4
871534876980893595
T:
C:rolloi128
898398908608922130
T:
hqc1281
101552410205991031802
T:
C:rolloi192
104177410459101051085
T:
ntskem13136
108050610862311095064
T:
frodokem640
114835211525231158676
T:
frodokem640aes
121417112260861338968threebears1248r2cca
125886712616621267325
T:
hqc256round4
126658212711691283404
T:
hqc192
129244012978171321526
T:
hqcrmrs192
131684413203981401059
T:
C:bikel1
134415013547761394193
T:
rolloii128
137262913912841416923
T:
C:lake1
146981514805591504114
T:
rolloii192
144767414871161505789
T:
hqc1921
151396215182661542118
T:
hqc1922
157394415793801584568
T:
rsa2048
173343317404771755609
T:
C:rolloi256
193556119484951970511
T:
rolloii256
198100320081202030254
T:
hqc256
201765720375922073693
T:
hqcrmrs256
214427521584622170864
T:
frodokem976
212748421713432182086
T:
hqc2561
218552021973802209336
T:
frodokem976aes
223548222647492289375
T:
hqc2562
230415223776112385281
T:
hqc2563
245114024722312483437
T:
C:lake2
267025326932232707295
T:
locker1
269108027174412728429
T:
bigquake1
274086527574442778658
T:
rqc128
276361727869162808899
T:
locker2
298807830055863019068
T:
frodokem640shake
304161030591673078128
T:
locker4
332463433384193355042
T:
C:lake3
380045538145943827645
T:
frodokem1344aes
411263341180664196695
T:
C:bikel3
419439442348474251517
T:
locker3
2873481?4382151?4624086?
T:
C:edonk192k48n144nu4l4
451335145497544568526
T:
locker6
492353149396334949638
T:
locker5
495011749745644999303
T:
locker7
505654750769965108931
T:
locker8
518133851995105222810
T:
rqc192
4298629?5780381?8523159?
T:
C:edonk128k16n80nu4l6
602345560344206061225
T:
frodokem976shake
6037281?7063380?14937911?
T:
C:edonk128k16n80nu8l6
710386771277047153666
T:
locker9
785945178973449184276
T:
rqc256
815909781716168195488
T:
sikep434
868154987004388721258
T:
sikep434comp
8374058?8919559?19450595?
T:
C:edonk128ref
950966495387829558429
T:
remblem928
951986395504159585173
T:
remblem1056
107510391076482910787908
T:
frodokem1344shake
117727401179999911831387
T:
sikep503
125302421256636712597270
T:
sikep503comp
217517172192467922099285
T:
mersenne756839
224382042245576122479469
T:
sikep610
237570362378020023801294
T:
sikep610comp
239930732428875624676083
T:
bigquake3
353142783534497135388108
T:
sikep751
350988713600768736385580
T:
bigquake5
374489233747802037498041
T:
sikep751comp
420380284225714942610520
T:
oddmanhattan128
24105103?80901195?87282691?
T:
C:edonk192k32n128nu4l6
825097238280802983092605
T:
oddmanhattan192
169217641169729695170133784
T:
oddmanhattan256