VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems
ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of key-encapsulation mechanisms on one machine: amd64; Coffee Lake (806ea); 2018 Intel Core i3-8109U; 2 x 3000MHz; like, supercop-20250415

[Page version: 20250516 15:10:48]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for key-encapsulation mechanisms:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol C: means that the current SUPERCOP database does not list IND-CCA2 security as a goal for this key-encapsulation mechanism. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each key-encapsulation mechanism and each implementation. Designers and implementors interested in submitting new key-encapsulation mechanisms and new implementations of existing systems should read the call for submissions.

Test results

Graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

NISTPQC graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

Cycles to generate a key pair
25%50%75%system
169281708017448kyber90s512
187391878222561ntruplus576
225772272323260kyber512
235052355323602ntruplus768
252012562626452kyber90s768
262012624826295ntruplus864
319053207632381
T:
C:nhcompact512cca
326763275032876smaugt1
326963278432921timer
357313577735886
T:
lightsaber2
356173635137801kyber90s1024
347053665938772
T:
lac128
371603777838044ntrulpr653
34455?38401?43984?ntruplus1152
385673867938779
T:
ntrulpr4591761
389503928340936kyber768
399394004840786ntrulpr761
443814467744880
T:
C:nhcompact768cca
500795025350686ntrulpr857
508615107051234T!!!newhope512cca
510545121051624smaugt3
519145237952989ntrulpr1013
535275398254534ntrulpr953
546035498455558kyber1024
559995619656469
T:
C:nhcompact1024cca
639616400464132
T:
saber2
691626943170297ntrulpr1277
696656991370217smaugt5
809598137281816
T:
lac256
813678197585685
T:
hqc128round4
893199000697050
T:
lac192
963059661196945T!!!newhope1024cca
976129780598010
T:
firesaber2
155789157138158944
T:
C:hila5
159288175373178825ntruhps2048509
189380189531190391
T:
hqc192round4
186811190349204695threebears624r2cca
187058191991193099C:threebears624r2cpa
251393251852279314ntruhrss701
257353257687258257
T:
kindi256342
273021273904274753
T:
kindi512222
278881279370280021
T:
kindi512241
266871286373324206ntruhps2048677
347858349739352205
T:
hqcrmrs128
362399367798386415ntruhps4096821
390999391311402625C:threebears936r2cpa
391525392420393006
T:
hqc256round4
394063401279420643threebears936r2cca
392316407875413728
T:
hqc128
415264423656438252
T:
ntrukem443
422757424694441017
T:
hqc1281
543538544334544777
T:
kindi512321
597408599767601789
T:
C:bikel1
626635628345654888sntrup653
655452655855656974
T:
kindi256522
669076694495737740C:threebears1248r2cpa
712134715514739530
T:
hqcrmrs192
728523729996733445sntrup761
690749735538744403threebears1248r2cca
739039741536746949
T:
rqc128
767101771893797192
T:
hqc1921
805553814357829045
T:
hqc192
837912845594863984sntrup4591761
822996847143858743
T:
hqc1922
852682865407878698
T:
C:edonk128k16n80nu4l6
945206948515953437
T:
ntrukem743
951408954227957484
T:
C:rolloi128
106204810647401098945sntrup857
109765410989971101636
T:
frodokem640
114857611816301200697
T:
hqcrmrs256
118352012024661246599
T:
hqc2561
125577012703471315109
T:
hqc2562
1272962?1284105?1844596?
T:
rqc192
127495912916841310059sntrup953
129453312978441301329
T:
C:rolloi192
128639213207651393606
T:
hqc256
134810513521521354823
T:
frodokem640aes
141301514264031495170
T:
C:edonk128k16n80nu8l6
139204814317231459948
T:
hqc2563
142373714511081462575sntrup1013
167822116811661722452
T:
C:bikel3
164883517101011740530
T:
C:edonk128k32n96nu4l4
173002017328741737693
T:
C:rolloi256
186162018641381879918
T:
rqc256
195444819832002019536
T:
C:edonk192k32n128nu4l6
207402522139172237381
T:
C:edonk128ref
221086422228122225641sntrup1277
238816223928942397845
T:
frodokem976
249219525070622523338
T:
C:lake1
260993026142102627816
T:
C:lake2
274789327568782765827
T:
C:lake3
282297128303482835191
T:
frodokem976aes
292853029491952982777
T:
C:edonk192k48n144nu4l4
363863736426693824204
T:
frodokem640shake
433258643370544344177
T:
rolloii128
434642943506164360375
T:
rolloii192
443471244486864461389
T:
locker1
475230547611884770937
T:
frodokem1344aes
493669349482634955951
T:
locker2
515657151619615167857
T:
rolloii256
528359052933445305971
T:
locker3
587504658788725910656
T:
sikep434
591463759275135945776
T:
locker4
627275962919246377861
T:
remblem1056
629497363060826315058
T:
remblem928
662503866549976701495
T:
locker6
721970572298627238155
T:
frodokem976shake
780926078407467896531
T:
locker5
814686481544228184408
T:
sikep503
9608418964095410478775
T:
sikep434comp
958970997496929788853
T:
lotus128
114632421150748712162546
T:
locker7
124572411247817312830851
T:
locker8
129733061299023013023429
T:
locker9
130642271310707513137810
T:
frodokem1344shake
133061121335914714564326
T:
sikep503comp
148012431482372614967558
T:
sikep610
182330661909499119256300
T:
lotus192
201226852022462220369232
T:
mersenne756839
249167572492638224931303
T:
sikep751
254917412553813527596084
T:
sikep610comp
301381283062020431243561mceliece348864pcf
304592833073387933163343
T:
lotus256
302495823086821831348848mceliece348864f
393684403940610743226772
T:
sikep751comp
443405984492123145256986
T:
ntskem1264
30315538?49791050?69523769?mceliece348864pc
30465570?50034615?81209440?mceliece348864
41628073?85943798?126709946?
T:
rsa2048
952513599570618395814465mceliece460896f
99829849102397283103013183mceliece460896pcf
103868588105362030106953773
T:
ntskem1380
130232852?163586257?226824403?mceliece460896pc
129706586?165502801?224630797?mceliece460896
187495298187806537188713977mceliece6960119f
188813479189536165192338457mceliece6960119pcf
232880442234520423236569267mceliece6688128f
234476633235544559238048157mceliece6688128pcf
239852823240605427241856658mceliece8192128pcf
240560688242535016247258315mceliece8192128f
242823322244016400250600916
T:
oddmanhattan128
243840904247177898247699183
T:
ntskem13136
193135073?271621701?447119854?mceliece6960119pc
236198351?313935800?497498011?mceliece6688128pc
199844857?315902980?441902516?mceliece6960119
304664327?376083519?524702766?mceliece6688128
248341026?381039920?546801151?mceliece8192128pc
388709573389448722391025055
T:
oddmanhattan192
252952073?390852611?535075006?mceliece8192128
692633939693722749698519711
T:
oddmanhattan256
852125135861497165867122465
T:
bigquake1
783067667179306932298054395813
T:
bigquake3
141949771541428848291714377027093
T:
bigquake5
Cycles for encapsulation
25%50%75%system
150601555616395
T:
rsa2048
212902133321394ntruplus576
216392167421742smaugt1
218502193922233timer
223772322524564ntruhps2048509
236282375324053ntruhrss701
266452669226771ntruplus768
288372941530211kyber90s512
306673072830836ntruplus864
307563179933530mceliece348864f
310993226034297mceliece348864
325923333434376ntruhps2048677
346303478635368kyber512
373413814139282ntruhps4096821
389353911139506sntrup4591761
390483977739932sntrup653
393794039041865kyber90s768
393494043541967mceliece348864pcf
391714047941995mceliece348864pc
407304079241051ntruplus1152
424554257843194sntrup761
440734414444982smaugt3
478814793648060
T:
lightsaber2
516265177855219kyber768
526235269652787
T:
C:nhcompact512cca
520275272352879sntrup857
530235536457501kyber90s1024
568355689957178sntrup953
571365771858070sntrup1013
615056165161873smaugt5
616836208462171ntrulpr653
593526440772965mceliece460896f
653366539765488ntrulpr761
674126749567637
T:
ntrulpr4591761
712397130371409
T:
C:nhcompact768cca
663017301781904mceliece460896
729727309273196sntrup1277
728657356273759kyber1024
703837527978664
T:
lac128
70880?77000?90898?mceliece460896pc
779747885279303
T:
ntskem1264
70431?80343?88418?mceliece460896pcf
803018035580406
T:
saber2
823968291083120ntrulpr857
834878363283762T!!!newhope512cca
857338608386833ntrulpr1013
875538802888183ntrulpr953
929709307993196
T:
C:nhcompact1024cca
102215104779112769
T:
C:edonk128k16n80nu4l6
102327106507113424mceliece6688128f
107011111039115544mceliece6960119f
112070113004113205ntrulpr1277
115442116030116780
T:
C:bikel1
112193116901124765mceliece6688128pcf
110738117189127424mceliece6960119
117301117399117560
T:
firesaber2
116539117809120441mceliece8192128f
115491119077127195mceliece6688128pc
107920119935130135mceliece6688128
120625123358127407mceliece6960119pcf
122848125507128346
T:
ntrukem443
124571126039129420mceliece8192128
120904128666141655mceliece6960119pc
128983130122132743mceliece8192128pc
131014132454135988mceliece8192128pcf
137836138437149550
T:
lac192
145589146386156913
T:
lotus128
156308156553156959T!!!newhope1024cca
157704158526159420
T:
C:rolloi128
160037160782161920
T:
lac256
179542180432181049
T:
C:rolloi192
201780203147204609
T:
C:rolloi256
216554217763221308
T:
C:hila5
220779221032237129
T:
hqc128round4
220901222164232975
T:
ntskem1380
207191227024229326
T:
lotus192
231207233684237158
T:
ntrukem743
229835238474248165
T:
C:edonk128k16n80nu8l6
259910260430267908C:threebears624r2cpa
263197265226284449threebears624r2cca
270202271137271953
T:
C:bikel3
294929295569296322
T:
lotus256
300309310585322469
T:
C:edonk128k32n96nu4l4
337549337843338396
T:
kindi256342
299044?341197?383363?
T:
ntskem13136
397962398815399499
T:
kindi512222
403636404219405173
T:
kindi512241
452682455483465620
T:
C:lake1
453718466519476425
T:
C:edonk128ref
493036493723494630
T:
hqc192round4
494418497705515615
T:
hqcrmrs128
499986502109504594
T:
C:lake2
494808511595514483C:threebears936r2cpa
493677512752519007threebears936r2cca
512003513866515896
T:
C:edonk192k32n128nu4l6
525619527863530224
T:
rolloii128
534182535855537738
T:
rolloii192
535492550356556769
T:
hqc128
559618561671563667
T:
C:lake3
593299594267595269
T:
rolloii256
645252650919669181
T:
hqc1281
710985712471718286
T:
kindi512321
761923766584775422
T:
locker1
786884787932791718
T:
kindi256522
806951809108813251
T:
locker2
816896822598831353
T:
C:edonk192k48n144nu4l4
800347827052896318C:threebears1248r2cpa
886594889307894484
T:
locker3
824543895654901465threebears1248r2cca
936090937189940853
T:
hqc256round4
101059310140981019394
T:
locker4
100984510145361046117
T:
hqcrmrs192
101307310167281022798
T:
rqc128
110194211107191119121
T:
locker6
111648511348841156085
T:
hqc192
116452111914311206916
T:
hqc1921
126841112770941292319
T:
locker5
126372812808491304918
T:
hqc1922
162446116253381626924
T:
frodokem640
166930717121891729872
T:
hqcrmrs256
181074018134651815138
T:
frodokem640aes
181696818477701909574
T:
hqc2561
180015918482141919669
T:
hqc256
187185618924532019347
T:
locker7
190229819507752006964
T:
hqc2562
200775020153842025687
T:
locker8
212012021310162157298
T:
locker9
211565521553272204670
T:
hqc2563
1861006?2387462?2978237?
T:
rqc192
235321924274402493285
T:
bigquake1
257512625819872587051
T:
rqc256
329694233070433312651
T:
frodokem976
355994635641933571353
T:
frodokem976aes
387667338902584200400
T:
frodokem640shake
598088759919516005354
T:
frodokem1344aes
732117175478037796880
T:
bigquake3
760658776237907913035
T:
frodokem976shake
931217693333979445669
T:
remblem1056
937198393831279398280
T:
remblem928
959628595984359611291
T:
sikep434
112954081145792711786519
T:
bigquake5
133121721338043413393657
T:
sikep503
137408111377764513793159
T:
frodokem1344shake
149922291501977215083162
T:
sikep434comp
199327941998098021511679
T:
mersenne756839
206281232065622720744135
T:
sikep503comp
271293282713407127152368
T:
sikep610
374212413776436238108594
T:
sikep610comp
403221474032976540338321
T:
sikep751
541754205456906154997836
T:
oddmanhattan128
629008396310546563222150
T:
sikep751comp
103663656103868787103976103
T:
oddmanhattan192
212263906213659460216251258
T:
oddmanhattan256
Cycles for decapsulation
25%50%75%system
158721590215945ntruplus576
192811931419347ntruplus768
205762080621169kyber90s512
228942295623095ntruplus864
270422713827619kyber512
287552953830623kyber90s768
303113034830400ntruplus1152
331753325633330smaugt1
338293390734009timer
377483877141491ntruhps2048509
398704116942604kyber90s1024
414804172543656kyber768
469164695847011
T:
lightsaber2
504635068952533
T:
C:hila5
508975096051051
T:
C:nhcompact512cca
510095112451568sntrup761
536225367453733sntrup653
574785755960447ntruhrss701
561415892361870ntruhps2048677
591365921359380kyber1024
596665990760070smaugt3
695916969569878
T:
C:nhcompact768cca
728237296776599ntruhps4096821
730597316873298sntrup857
740687458974881ntrulpr653
775947768477789ntrulpr761
777917785277946sntrup953
779477800778081
T:
saber2
782727874478807sntrup1013
822618235383528smaugt5
833178345083547sntrup4591761
905419078190888T!!!newhope512cca
919279201392120
T:
C:nhcompact1024cca
899449630999825
T:
lac128
964669661996772
T:
ntrulpr4591761
968439693496989sntrup1277
100644100930101015ntrulpr857
102959104188104312ntrulpr1013
106195106550106678ntrulpr953
115002115146115893
T:
firesaber2
117998118110118313mceliece348864f
118713118881119041mceliece348864
118198119187121875C:threebears624r2cpa
126133126276126542mceliece348864pcf
126149126661126862mceliece348864pc
134235135133135356ntrulpr1277
135071135883136843
T:
ntrukem443
159081162686164764C:threebears936r2cpa
168634169150182686
T:
lotus128
169469169828170272T!!!newhope1024cca
192950193623210705
T:
lac192
193598197054203460C:threebears1248r2cpa
243760244260244762mceliece460896f
245430246147248100mceliece460896pc
245493250938271509mceliece460896pcf
236708255234258489mceliece460896
267420267895268373mceliece6960119f
267727268703271735
T:
ntrukem743
267684268968287578mceliece6960119
245469274745281982
T:
lotus192
278797279300280138mceliece6960119pcf
279223279961308876mceliece6960119pc
284622285192286208mceliece8192128
285253286023286487mceliece6688128f
287481288109288558mceliece8192128f
292213293440294886
T:
ntskem1264
296903297800299525mceliece6688128pc
297236297821300730mceliece6688128pcf
299381299640300032mceliece8192128pc
300860301439302965mceliece8192128pcf
306959309667316524
T:
lac256
286523309734314999mceliece6688128
357943358454361597
T:
lotus256
382419382922410560
T:
hqc128round4
424724425128426261
T:
kindi256342
536681538617560660
T:
kindi512222
543486545194546516
T:
kindi512241
560042560685561575
T:
ntskem1380
581484593627621828threebears624r2cca
787785788357789468
T:
hqc192round4
840993863656864422
T:
hqcrmrs128
866344867266869790
T:
hqc128
899847900782902491
T:
kindi512321
925540926281934694
T:
kindi256522
108621410905111157572threebears936r2cca
107789610989601129577
T:
ntskem13136
112771811312691139177
T:
C:rolloi128
114104911490261237244
T:
hqc1281
136621613729521461676
T:
C:rolloi192
154047915418381548662
T:
hqc256round4
156368915657361622018
T:
hqcrmrs192
161597916177361620045
T:
C:bikel1
158698716237611669446
T:
hqc192
162434516256601628230
T:
frodokem640
169217217290911856401threebears1248r2cca
174169417441151745424
T:
frodokem640aes
183190718368101841170
T:
rolloii128
182810218455791858017
T:
hqc1921
195719419620741968247
T:
C:lake1
191033919795191990256
T:
hqc1922
198727019924871998069
T:
rolloii192
209531020975622295690
T:
rsa2048
218653321890832195261
T:
C:rolloi256
246599824692682730477
T:
hqc256
240336624936742519799
T:
hqcrmrs256
257654925813792592898
T:
rolloii256
270374727258642772441
T:
hqc2561
283354828818203045142
T:
hqc2562
313500031735143243509
T:
hqc2563
320238532305093271696
T:
bigquake1
329638233040023312632
T:
C:lake2
330251833137033316400
T:
frodokem976
341473234175853422630
T:
frodokem976aes
2476334?3526772?6061939?
T:
C:edonk128k32n96nu4l4
352600435289883537796
T:
rqc128
381896338344554060898
T:
frodokem640shake
385574738656503875876
T:
locker1
403618440438474051985
T:
locker2
4046252?4197550?5604772?
T:
C:edonk192k48n144nu4l4
439264244074324431931
T:
locker4
457355245835804596515
T:
C:lake3
504858850541395229169
T:
C:bikel3
577369758054145819599
T:
locker3
581093458237135834809
T:
frodokem1344aes
643994964553306847697
T:
locker6
657494065940276651771
T:
locker5
715043971849707678082
T:
locker7
732933173366447356915
T:
frodokem976shake
747603675028487515743
T:
locker8
6904296?8082438?9259216?
T:
rqc192
984210999071089948567
T:
locker9
102549901027160510273418
T:
sikep434
108432151087283611571052
T:
rqc256
109401071095309111025206
T:
sikep434comp
125862341260847112625229
T:
remblem928
125408961273958412755623
T:
remblem1056
136290361365996613686084
T:
frodokem1344shake
141709241426683014271673
T:
sikep503
151797831518631315202413
T:
sikep503comp
10297986?16535852?31564404?
T:
C:edonk128ref
273440032738028927454087
T:
sikep610
289858602901445829156881
T:
sikep610comp
296763122975874329867124
T:
mersenne756839
300404133038156930505522
T:
bigquake3
434814674351270643521313
T:
sikep751
41652366?43532269?133688197?
T:
C:edonk192k32n128nu4l6
450360984532791545551760
T:
bigquake5
461855124631904646370313
T:
sikep751comp
31183620?51610698?74188282?
T:
C:edonk128k16n80nu4l6
20310834?55349603?75285904?
T:
C:edonk128k16n80nu8l6
585846715894460659170320
T:
oddmanhattan128
113743288114000545114181338
T:
oddmanhattan192
230164408232931745235531041
T:
oddmanhattan256