VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems
ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of key-encapsulation mechanisms on one machine: amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20250307

[Page version: 20250326 01:56:31]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for key-encapsulation mechanisms:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol C: means that the current SUPERCOP database does not list IND-CCA2 security as a goal for this key-encapsulation mechanism. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each key-encapsulation mechanism and each implementation. Designers and implementors interested in submitting new key-encapsulation mechanisms and new implementations of existing systems should read the call for submissions.

Test results

Graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

NISTPQC graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

Cycles to generate a key pair
25%50%75%system
846785648695kyber90s512
11417?11623?14738?ntruplus576
126891286613157kyber90s768
136621371113784ntruplus768
150991523215319ntruplus864
153421548515696kyber512
183481856118799kyber90s1024
190171929119822timer
195981970319916smaugt1
211962138921690
T:
C:nhcompact512cca
244452456624761ntrulpr653
245112463324992
T:
ntrulpr4591761
245712480225151
T:
lac128
19901?25005?26884?ntruplus1152
264542663226937kyber768
267202676226898
T:
lightsaber2
266092686827030ntrulpr761
311043130231632
T:
C:nhcompact768cca
316073173031846ntrulpr857
318413223332601smaugt3
335353375834073newhope512cca
344703464534964ntrulpr1013
340383465937286kyber1024
344973533235596ntrulpr953
383083850638729
T:
C:nhcompact1024cca
404464062141227smaugt5
443554448644810ntrulpr1277
480354810248210
T:
saber2
602306033660482
T:
hqc128round4
630986347665290newhope1024cca
660826643674121
T:
lac256
714797168171912
T:
lac192
749117511975525
T:
firesaber2
103512103654103957ntruhps2048509
139977140094151565C:threebears624r2cpa
143859145106145647
T:
C:hila5
145566145899146281
T:
hqc192round4
140125148112157692threebears624r2cca
162304162445162765
T:
kindi256342
162805163061163327ntruhrss701
163739164047164629ntruhps2048677
167911168773170331
T:
kindi512222
175881176056176553
T:
kindi512241
238712240662243360
T:
hqcrmrs128
252597252926253390ntruhps4096821
269117271637281916
T:
hqc128
276337277262288132
T:
hqc1281
294895295275295916
T:
hqc256round4
288227307159329194C:threebears936r2cpa
288654310748311491threebears936r2cca
348248350882351330
T:
kindi512321
380320383421386544
T:
ntrukem443
416327422298425851sntrup653
426311428278437269
T:
kindi256522
453090454938455952
T:
C:bikel1
473611474117475573sntrup761
490003490379516034C:threebears1248r2cpa
488427490764495315
T:
hqcrmrs192
492310494297511334
T:
hqc1921
490241497710533325threebears1248r2cca
550423555029569546
T:
hqc192
539139556575562822
T:
hqc1922
571376572872575235
T:
rqc128
564202573224575326sntrup4591761
663419679207722543sntrup857
733862736249738336
T:
frodokem640
737516756566763460
T:
hqc2561
762094764853767479
T:
ntrukem743
793347800737824472
T:
hqc2562
784865805358812227
T:
hqcrmrs256
829961853628865180
T:
hqc2563
867607871383894255
T:
hqc256
893142897470907222
T:
C:rolloi128
878954901500908574sntrup953
907949909929911717
T:
frodokem640aes
903969?955375?1932812?sntrup1013
102978210376311060348
T:
rqc192
124605012471801249296
T:
C:bikel3
130452813063521308535
T:
C:rolloi192
1396941?1409541?2028428?
T:
rqc256
148809614912961494924
T:
frodokem976
146382015185911522888sntrup1277
170974517126181717471
T:
C:rolloi256
177425517769411778437
T:
frodokem976aes
207901420808832082330
T:
frodokem640shake
299264429954292999811
T:
frodokem1344aes
415275341707574178669
T:
rolloii128
422290942335364246355
T:
remblem1056
424693242586904285683
T:
remblem928
426931042728194276552
T:
frodokem976shake
434787743517464357138
T:
rolloii192
510005051051855115866
T:
rolloii256
562509956291685635688
T:
sikep434
733022873330287336128
T:
frodokem1344shake
742866374336447441188
T:
lotus128
845852684878728497367
T:
sikep503
9185210922193810022170
T:
sikep434comp
138323741385085315048143
T:
sikep503comp
143390101434811914758757
T:
lotus192
143338431438245614392369
T:
sikep610
169970581709468517662900
T:
ntskem1264
238114222382123424920729mceliece348864pcf
238222812384477924960869mceliece348864f
241662702417597324241409
T:
lotus256
243222942436445826339464
T:
sikep610comp
249077312493077224975532
T:
sikep751
23567236?32650212?59889923?mceliece348864pc
391777523926169742514976
T:
sikep751comp
32427284?42543828?60521111?mceliece348864
493293434947600549908206
T:
ntskem1380
776236528092664682977122mceliece460896f
777633878170665682275208mceliece460896pcf
103589555103830171104131357
T:
ntskem13136
81206012?107693668?160929543?mceliece460896
82120688?108451938?182633800?mceliece460896pc
131905918131971447132158442mceliece6688128f
133013910133152950133685961mceliece6960119pcf
133061814136501071137861801mceliece6960119f
158712186159301460159399343mceliece8192128f
158972013164764171164955648mceliece8192128pcf
167143543167391037170225025mceliece6688128pcf
137239053?180391445?265705706?mceliece6960119
136811160?180766641?266971319?mceliece6960119pc
148490472?198633935?298626886?mceliece8192128pc
166317868?216390155?312748530?mceliece8192128
167264203?217283415?317442562?mceliece6688128pc
170974600?221224131?367303412?mceliece6688128
618662545641893589650673804
T:
bigquake1
462633529651350177575154623635
T:
bigquake3
845725319090518113999076605507
T:
bigquake5
Cycles for encapsulation
25%50%75%system
126621272812841kyber90s512
151041521715385ntruhps2048509
151481521715417ntruplus576
166831676116836ntruhrss701
169681700017047smaugt1
170251706117100timer
174131748217588kyber90s768
172431765819060mceliece348864f
173201855219206mceliece348864
185211857918643ntruplus768
211722126321527ntruhps2048677
215902165421852ntruplus864
224202284024324mceliece348864pc
235422361823672kyber90s1024
225242389125340mceliece348864pcf
244422450124576kyber512
263112653326766ntruhps4096821
284942864128899ntruplus1152
287042880629091sntrup4591761
324563273333130sntrup653
329563307833239smaugt3
347473491635110sntrup761
350993519735296
T:
C:nhcompact512cca
355013557735667
T:
lightsaber2
366433683137836kyber768
354743929244038mceliece460896f
35204?39937?45073?mceliece460896
395154094341285
T:
ntskem1264
412504136341589sntrup857
423494248742725smaugt5
401064423049993mceliece460896pcf
442464436444606sntrup953
443004449644920ntrulpr653
450364528945425sntrup1013
40195?45578?56839?mceliece460896pc
472724738647538ntrulpr761
481494829448473
T:
ntrulpr4591761
483274857249140kyber1024
474014940151371
T:
lac128
493974966949916
T:
C:nhcompact768cca
556135579656040sntrup1277
566615683157149newhope512cca
568925698457161ntrulpr857
598825995760056
T:
saber2
611406147462349ntrulpr953
619806225862471ntrulpr1013
629566314363328
T:
C:nhcompact1024cca
617906524371765mceliece6688128f
652846826975562mceliece6688128
682987150876077mceliece6960119
697707204977413mceliece6960119f
728497648181795mceliece6688128pcf
763657651876729ntrulpr1277
743557776384569mceliece6688128pc
765867913584857mceliece6960119pc
785067968381989mceliece8192128f
789678023781877mceliece8192128
774908054884885mceliece6960119pcf
826628334984018
T:
C:bikel1
845608509087186mceliece8192128pc
869978790989076mceliece8192128pcf
890438927489468
T:
firesaber2
103883104254104704newhope1024cca
109800111173123190
T:
lac192
110695111182111931
T:
lotus128
111515112137113167
T:
ntskem1380
123803125709128403
T:
ntrukem443
131428132035134363
T:
C:rolloi128
149638150166150696
T:
ntskem13136
149238151863153971
T:
lac256
152476153015153724
T:
C:rolloi192
147903155009156395
T:
lotus192
168193168546168879
T:
hqc128round4
174777175442176373
T:
C:rolloi256
190439190565202171C:threebears624r2cpa
190360191131191943
T:
C:hila5
191265192187193130
T:
C:bikel3
187673204094208976threebears624r2cca
207779209081210007
T:
lotus256
207709209623213151
T:
ntrukem743
212121212288212723
T:
kindi256342
249843250482255034
T:
kindi512222
256411256633257178
T:
kindi512241
348589350624364197
T:
hqcrmrs128
361964376594402548threebears936r2cca
386522386927387716
T:
hqc192round4
378773390998393742
T:
hqc128
360384391977414387C:threebears936r2cpa
426139427255428878
T:
rolloii128
425318430673440066
T:
hqc1281
457504459312461384
T:
rolloii192
464769467292468082
T:
kindi512321
506109507360509525
T:
rolloii256
512559513974526879
T:
kindi256522
576003576427641439threebears1248r2cca
579111580051627448C:threebears1248r2cpa
713153716350736602
T:
hqcrmrs192
733327734342735285
T:
hqc256round4
740259758475762934
T:
hqc1921
761440764896768535
T:
rqc128
785283792999811385
T:
hqc192
798785819241841447
T:
hqc1922
101302610141121015176
T:
frodokem640
111976611212461122802
T:
frodokem640aes
111287211284311146789
T:
hqc2561
116419411708291196727
T:
hqcrmrs256
116844111760951202195
T:
hqc2562
124324812679921276187
T:
hqc2563
124760512680631286308
T:
hqc256
143064014390761459870
T:
rqc192
188496218949061901724
T:
rqc256
194147619454161956181
T:
frodokem976
197814920177422066023
T:
bigquake1
210601821078302111483
T:
frodokem976aes
225688522590982261260
T:
frodokem640shake
350475935160483526959
T:
frodokem1344aes
458034845895754592409
T:
frodokem976shake
570591958811946084743
T:
bigquake3
626652562748086294732
T:
remblem1056
631939563340126358608
T:
remblem928
784786678559017860931
T:
frodokem1344shake
890477991682249533590
T:
bigquake5
920039392032099236296
T:
sikep434
138716191390402613966475
T:
sikep503
143390501440724614481636
T:
sikep434comp
214806482156849121640334
T:
sikep503comp
262985952632116026340600
T:
sikep610
360711233617288836286403
T:
sikep610comp
404680194049579140512819
T:
sikep751
627097646281931763266719
T:
sikep751comp
Cycles for decapsulation
25%50%75%system
106281071710767kyber90s512
139501399414014ntruplus576
149121496014998kyber90s768
169621700217035ntruplus768
183721856518623kyber512
199081994119972ntruplus864
207322076920848kyber90s1024
261352620126411ntruhps2048509
267132677226860ntruplus1152
268192683726862smaugt1
274462750727942timer
280512811228190kyber768
329113295433010
T:
C:nhcompact512cca
334673353133902
T:
C:hila5
336493371433759
T:
lightsaber2
375153762138347kyber1024
380703812638252ntruhps2048677
390463910639177ntruhrss701
414654155341711sntrup761
434294354643687sntrup653
462284632646501smaugt3
466514671446770
T:
C:nhcompact768cca
513145202952165ntrulpr653
529175328653415ntruhps4096821
541085425954499ntrulpr761
564985662956787sntrup857
566155670256773
T:
saber2
596555985159985smaugt5
596275998960099sntrup953
600806018960313
T:
C:nhcompact1024cca
602636035760485newhope512cca
608646102461292sntrup1013
605226114564212
T:
lac128
612566131061379sntrup4591761
673036739667559ntrulpr857
682606833468555
T:
ntrulpr4591761
724537267073626ntrulpr953
731547346973629ntrulpr1013
733747356873779sntrup1277
854628557485694
T:
firesaber2
888368897189167ntrulpr1277
899329005492548C:threebears624r2cpa
934179371595022mceliece348864
935419416896119mceliece348864f
986779885498989mceliece348864pc
987529910799658mceliece348864pcf
110436110704111409newhope1024cca
114666120060127065C:threebears936r2cpa
124132124459125882
T:
lotus128
128806129588131177
T:
ntrukem443
139915153319155525C:threebears1248r2cpa
159163159848170868
T:
lac192
172925173651180284
T:
lotus192
180533181015181728mceliece460896f
182234182461182809mceliece460896
186422186676186933mceliece460896pc
186412186799187113mceliece460896pcf
187346188233231329
T:
ntskem1264
201526201781202168mceliece6960119
201705202002202260mceliece6960119f
209496209838210296mceliece6960119pcf
210895211111211351mceliece6960119pc
212794213320213755mceliece6688128
214313214556215023mceliece8192128f
214497214794215187mceliece8192128
216722217375218194mceliece6688128f
220309220594221022mceliece6688128pc
220927221321221672mceliece6688128pcf
223081223332223670mceliece8192128pcf
226216226757227339mceliece8192128pc
237349238429241369
T:
lac256
244601245332246084
T:
lotus256
256078257126258503
T:
ntrukem743
267867270032276097
T:
kindi256342
291201291486291879
T:
hqc128round4
334389335180336855
T:
kindi512241
332983336098339100
T:
kindi512222
335579336240340394
T:
ntskem1380
432136461058474694threebears624r2cca
587778590795618061
T:
hqcrmrs128
589257591064593111
T:
kindi512321
603110607765609115
T:
kindi256522
610729612483625328
T:
hqc128
615377616058616817
T:
hqc192round4
625858627005632436
T:
ntskem13136
778697788770887703threebears936r2cca
835232837632857974
T:
hqc1281
858110866063875415
T:
C:rolloi128
101286210140381014993
T:
frodokem640
101979610279041047142
T:
C:rolloi192
105889710604861061756
T:
frodokem640aes
106095910634301071388
T:
C:bikel1
104776810675401071550
T:
hqcrmrs192
113372311370231194363
T:
hqc192
119202611930351194496
T:
hqc256round4
125956712695751289444
T:
hqc1921
130019413060621324181
T:
rolloii128
131439713196091336803
T:
hqc1922
123036613973611401607threebears1248r2cca
152565915338661552163
T:
rolloii192
166081016880151691734
T:
hqcrmrs256
174475617526291758482
T:
hqc256
175924017793481799817
T:
hqc2561
178652317918331802519
T:
C:rolloi256
182740918681551898384
T:
hqc2562
188834719275351932853
T:
hqc2563
194103419488751951413
T:
frodokem976
198450319856691987324
T:
frodokem976aes
204860120541622069801
T:
rolloii256
219615421978392203350
T:
frodokem640shake
262677426589252663954
T:
bigquake1
288546328954292903671
T:
rqc128
331408833182573325627
T:
C:bikel3
334410733529733358054
T:
frodokem1344aes
447719644818124488170
T:
frodokem976shake
598213060014796038793
T:
rqc192
770391277097987715719
T:
frodokem1344shake
844326084602798474861
T:
remblem1056
852139985528128577162
T:
remblem928
860700386207408640930
T:
rqc256
983303898360969849762
T:
sikep434
104624151046894310522930
T:
sikep434comp
147871551479712414889097
T:
sikep503
158044291581389315821880
T:
sikep503comp
248267312529555525476793
T:
bigquake3
264598752647962126536476
T:
sikep610
280739472810042128297451
T:
sikep610comp
363092723810001438686054
T:
bigquake5
434385264346862143559802
T:
sikep751
461462604617581446194910
T:
sikep751comp