VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems
ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of key-encapsulation mechanisms on one machine: amd64; Coffee Lake (806ea); 2018 Intel Core i3-8109U; 2 x 3000MHz; like, supercop-20251222

[Page version: 20260221 06:44:52]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for key-encapsulation mechanisms:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol C: means that the current SUPERCOP database does not list IND-CCA2 security as a goal for this key-encapsulation mechanism. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each key-encapsulation mechanism and each implementation. Designers and implementors interested in submitting new key-encapsulation mechanisms and new implementations of existing systems should read the call for submissions.

Test results

Graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

NISTPQC graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

Cycles to generate a key pair
25%50%75%system
169741708317210kyber90s512
198471989824115ntruplus576
225812269622868kyber512
224992282623064mlkem512
247082482624923ntruplus768
251862535825611kyber90s768
273622742227487ntruplus864
319053207632381
T:
C:nhcompact512cca
340503416234309
T:
lac128
357313577735886
T:
lightsaber2
356763589936239kyber90s1024
370643719137575smaugt1
371393724737385timer
385673867938779
T:
ntrulpr4591761
387483890739383kyber768
388573901839200mlkem768
398304033740755ntrulpr653
35880?42848?45664?ntruplus1152
443814467744880
T:
C:nhcompact768cca
450764519946055ntrulpr761
459964631346674T!!!newhope512cca
526035277252960ntrulpr857
537255425455239kyber1024
541095433554944mlkem1024
543865513055296ntrulpr1013
559995619656469
T:
C:nhcompact1024cca
561285630757048ntrulpr953
563215657957127smaugt3
639616400464132
T:
saber2
723917253972880ntrulpr1277
761417643377093smaugt5
810708127982015
T:
lac256
813678197585685
T:
hqc128round4
881418849088900T!!!newhope1024cca
894008958089892
T:
lac192
976129780598010
T:
firesaber2
155789157138158944
T:
C:hila5
158697159185159759ntruhps2048509
186972187208191292C:threebears624r2cpa
189380189531190391
T:
hqc192round4
193505199047206756threebears624r2cca
255997257561259164ntruhrss701
257353257687258257
T:
kindi256342
273021273904274753
T:
kindi512222
275203276077277722ntruhps2048677
278881279370280021
T:
kindi512241
356314358486363500
T:
hqcrmrs128
390155390507431569threebears936r2cca
391525392420393006
T:
hqc256round4
395060395739396769ntruhps4096821
399812400926418971
T:
hqc128
402223402523426262C:threebears936r2cpa
415264423656438252
T:
ntrukem443
428450430495446291
T:
hqc1281
543538544334544777
T:
kindi512321
597408599767601789
T:
C:bikel1
626635628345654888sntrup653
655452655855656974
T:
kindi256522
668657689995721743C:threebears1248r2cpa
691289699054700651threebears1248r2cca
721620724370730111
T:
hqcrmrs192
726480727922733251sntrup761
746316747767748842
T:
rqc128
784516791170808413
T:
hqc1921
810039817578838931
T:
hqc192
828623856110881523
T:
hqc1922
860740863791866970sntrup4591761
877922889844909310
T:
C:edonk128k16n80nu4l6
945206948515953437
T:
ntrukem743
952751955159958822
T:
C:rolloi128
106204810647401098945sntrup857
109776810999241104414
T:
frodokem640
119496012056021239823
T:
hqcrmrs256
117931912141271230113
T:
hqc2561
125828512889331305905
T:
hqc2562
127495912916841310059sntrup953
129659312993151302559
T:
C:rolloi192
1296070?1301630?1873036?
T:
rqc192
129471913038441333944
T:
hqc256
135429813570001362609
T:
frodokem640aes
136006313678821389494
T:
hqc2563
140145814050501409946
T:
C:edonk128k16n80nu8l6
142373714511081462575sntrup1013
161753816339251652224
T:
C:edonk128k32n96nu4l4
167822116811661722452
T:
C:bikel3
173191217349311739557
T:
C:rolloi256
1887321?1892972?2733854?
T:
rqc256
191963519524681988938
T:
C:edonk192k32n128nu4l6
207804020814872086882
T:
C:edonk128ref
221086422228122225641sntrup1277
238711823960692410218
T:
frodokem976
251079925367352559226
T:
C:lake1
263326626412782657085
T:
C:lake2
275808427671682777388
T:
C:lake3
281742628231132831688
T:
frodokem976aes
293873229641782998157
T:
C:edonk192k48n144nu4l4
363863736426693824204
T:
frodokem640shake
433555743414944359392
T:
rolloii128
441095244165724422206
T:
rolloii192
443931444498244470178
T:
locker1
475582247641134781281
T:
frodokem1344aes
495219649604304968270
T:
locker2
509547451035625108665
T:
rolloii256
528854852991725327811
T:
locker3
587504658788725910656
T:
sikep434
589228359071655917561
T:
locker4
644807564556896539962
T:
remblem1056
653966465858376660086
T:
remblem928
667162866812596687418
T:
locker6
721815372593797518543
T:
frodokem976shake
777570477955577815491
T:
locker5
814686481544228184408
T:
sikep503
9608418964095410478775
T:
sikep434comp
9628987970443010207547
T:
lotus128
114442611145884011480566
T:
locker7
123959121241025812433549
T:
locker8
130642271310707513137810
T:
frodokem1344shake
130625681311077513172796
T:
locker9
133061121335914714564326
T:
sikep503comp
148012431482372614967558
T:
sikep610
184512451866660818954960
T:
lotus192
201889202025156720301310
T:
mersenne756839
249167572492638224931303
T:
sikep751
254917412553813527596084
T:
sikep610comp
303480843056768931042555mceliece348864pcf
306006333064044530769207mceliece348864f
311323653424517135775838
T:
lotus256
393684403940610743226772
T:
sikep751comp
443405984492123145256986
T:
ntskem1264
30626432?50112758?70369118?mceliece348864pc
39800063?50625162?80234383?mceliece348864
46935856?82221616?132769684?
T:
rsa2048
99657168100416224101455506mceliece460896pcf
99643956100447086100980803mceliece460896f
103868588105362030106953773
T:
ntskem1380
100529020?132394447?228870685?mceliece460896pc
100813712?135054135?235901904?mceliece460896
188393116189256717190098790mceliece6960119f
188257606189257643189643243mceliece6960119pcf
231034425231655548232172419mceliece6688128f
231918547232446906233183067mceliece6688128pcf
239513232240241708240818330mceliece8192128f
240679469240911339241233121mceliece8192128pcf
243840904247177898247699183
T:
ntskem13136
247755332248100142248458632
T:
oddmanhattan128
300886501?306267187?450788524?mceliece6688128
191515116?314058065?445837630?mceliece6960119
250941236?315661911?442698058?mceliece6960119pc
234635779?371668007?523777112?mceliece6688128pc
246235502?384504529?465281223?mceliece8192128
250887179?391738297?535025268?mceliece8192128pc
393230836394594662395188851
T:
oddmanhattan192
706003044710103759719118724
T:
oddmanhattan256
852125135861497165867122465
T:
bigquake1
783067667179306932298054395813
T:
bigquake3
141949771541428848291714377027093
T:
bigquake5
Cycles for encapsulation
25%50%75%system
146001545216116
T:
rsa2048
215652162021731smaugt1
217722181521938timer
217762215722650ntruhps2048509
223832245422494ntruplus576
234132349123636ntruhrss701
242892433724379mlkem512
277402791228077ntruplus768
290082906129130kyber90s512
318223187831986ntruplus864
317293200832568ntruhps2048677
309783216434103mceliece348864
312573243633958mceliece348864f
343583476434826kyber512
379273804438803ntruhps4096821
384913862038715mlkem768
388703919939477sntrup4591761
395733970639864kyber90s768
390483977739932sntrup653
390104024141838mceliece348864pcf
391764029242432mceliece348864pc
420914216842999ntruplus1152
424154249642640sntrup761
461884628746621smaugt3
478814793648060
T:
lightsaber2
517145180551959kyber768
526235269652787
T:
C:nhcompact512cca
520275272352879sntrup857
529785314153331kyber90s1024
552865601257230mlkem1024
568355689957178sntrup953
571365771858070sntrup1013
618916198362167smaugt5
643826455964805ntrulpr653
674126749567637
T:
ntrulpr4591761
62262?67682?78046?mceliece460896
620906781677162mceliece460896f
694606954969680ntrulpr761
680847050071011
T:
lac128
712397130371409
T:
C:nhcompact768cca
729727309273196sntrup1277
733307353674102kyber1024
709037589587194mceliece460896pcf
712907622086940mceliece460896pc
772917763878321T!!!newhope512cca
779747885279303
T:
ntskem1264
803018035580406
T:
saber2
849598513585688ntrulpr857
890058914389425ntrulpr1013
902689037890571ntrulpr953
929709307993196
T:
C:nhcompact1024cca
100485105811112433mceliece6688128
102026106378113295mceliece6688128f
107326110470116152mceliece6960119f
109005111389117429mceliece6960119
114962115260115581ntrulpr1277
115442116030116780
T:
C:bikel1
111027116128121547mceliece6688128pcf
117301117399117560
T:
firesaber2
116561118185120014mceliece8192128
117289118376120231mceliece8192128f
113123118699124893mceliece6688128pc
120086123291131576mceliece6960119pcf
119767123322130736mceliece6960119pc
122848125507128346
T:
ntrukem443
128689130514132603mceliece8192128pcf
136401138254140771mceliece8192128pc
139642140142141105
T:
lac192
139831140330159937
T:
lotus128
146439146948147891T!!!newhope1024cca
157390157978158664
T:
C:rolloi128
160655164918166651
T:
lac256
180109181160182444
T:
C:rolloi192
182453184600187270
T:
C:edonk128k16n80nu4l6
200967201896202910
T:
C:rolloi256
208824212781219582
T:
lotus192
216554217763221308
T:
C:hila5
220779221032237129
T:
hqc128round4
220901222164232975
T:
ntskem1380
227128231095238846
T:
C:edonk128k16n80nu8l6
231207233684237158
T:
ntrukem743
267582270843275317C:threebears624r2cpa
270202271137271953
T:
C:bikel3
258854278694281215threebears624r2cca
274171313273314276
T:
lotus256
337549337843338396
T:
kindi256342
299044?341197?383363?
T:
ntskem13136
366787368753371461
T:
C:edonk128k32n96nu4l4
397962398815399499
T:
kindi512222
403636404219405173
T:
kindi512241
440627445068452891
T:
C:edonk128ref
460693464775472639
T:
C:lake1
488997489342549449threebears936r2cca
493036493723494630
T:
hqc192round4
506806510147513905
T:
C:lake2
504561512757526429
T:
hqcrmrs128
494236528707553376C:threebears936r2cpa
527918531276538561
T:
rolloii128
540960541737542664
T:
rolloii192
542772544950564752
T:
hqc128
571286575170581001
T:
C:lake3
591015592324593523
T:
rolloii256
605161609685612637
T:
C:edonk192k32n128nu4l6
651701671179675507
T:
hqc1281
710985712471718286
T:
kindi512321
767070772622779891
T:
locker1
786884787932791718
T:
kindi256522
816002818832824373
T:
locker2
817825822914831829
T:
C:edonk192k48n144nu4l4
800019823628850410C:threebears1248r2cpa
824923848729852997threebears1248r2cca
890592893774899104
T:
locker3
936090937189940853
T:
hqc256round4
100840710106741013383
T:
locker4
102030810222351024535
T:
rqc128
102506310333631059423
T:
hqcrmrs192
111325811189071122995
T:
locker6
112155711503741167040
T:
hqc192
117984312044071221297
T:
hqc1921
127296412770681283308
T:
locker5
127419313055031328220
T:
hqc1922
162719216286081634776
T:
frodokem640
170421717573531790178
T:
hqcrmrs256
181494818186251825605
T:
frodokem640aes
183776918551561898263
T:
hqc256
183315618613641883874
T:
hqc2561
1855288?1865318?2438461?
T:
rqc192
187593818841591908470
T:
locker7
193172119655091988403
T:
hqc2562
201438520225712039114
T:
locker8
208874521244432161697
T:
hqc2563
212130821325402155059
T:
locker9
235321924274402493285
T:
bigquake1
2596367?2603568?4299982?
T:
rqc256
330567233121783321673
T:
frodokem976
355603335637253572041
T:
frodokem976aes
387667338902584200400
T:
frodokem640shake
598613959929906015619
T:
frodokem1344aes
732117175478037796880
T:
bigquake3
761013776349827679237
T:
frodokem976shake
959628595984359611291
T:
sikep434
958053396336439736094
T:
remblem1056
972598897420529899474
T:
remblem928
112954081145792711786519
T:
bigquake5
133121721338043413393657
T:
sikep503
137408111377764513793159
T:
frodokem1344shake
149922291501977215083162
T:
sikep434comp
198610701988727519918832
T:
mersenne756839
206281232065622720744135
T:
sikep503comp
271293282713407127152368
T:
sikep610
374212413776436238108594
T:
sikep610comp
403221474032976540338321
T:
sikep751
540994295435020954602629
T:
oddmanhattan128
629008396310546563222150
T:
sikep751comp
103808571104052854104239760
T:
oddmanhattan192
214649194216556481217591406
T:
oddmanhattan256
Cycles for decapsulation
25%50%75%system
206532069720740kyber90s512
215382157321622ntruplus576
257682581926067mlkem512
267562679826956ntruplus768
268582708427376kyber512
288392894129043kyber90s768
312143126931338ntruplus864
331523327633401smaugt1
340673412434254timer
368403694437027ntruhps2048509
397863988539952kyber90s1024
403824044040568mlkem768
412354130941697kyber768
413754143241564ntruplus1152
469164695847011
T:
lightsaber2
504635068952533
T:
C:hila5
508975096051051
T:
C:nhcompact512cca
505935115351278sntrup761
536225367453733sntrup653
553655553055773ntruhps2048677
571075723557332ntruhrss701
577425788360904mlkem1024
591995938262598kyber1024
613396141361515smaugt3
695916969569878
T:
C:nhcompact768cca
708607116871313ntruhps4096821
730597316873298sntrup857
777917785277946sntrup953
779477800778081
T:
saber2
782727874478807sntrup1013
799098015080448ntrulpr653
824818257482715smaugt5
829548364883895sntrup4591761
840688416584274ntrulpr761
847978512685599T!!!newhope512cca
883298998290624
T:
lac128
919279201392120
T:
C:nhcompact1024cca
964669661996772
T:
ntrulpr4591761
968439693496989sntrup1277
105462105970106992ntrulpr857
108717108909109285ntrulpr1013
110015111398111557ntrulpr953
115002115146115893
T:
firesaber2
118006118217118507mceliece348864
118362118590119060mceliece348864f
119413124147125984C:threebears624r2cpa
126308127192128087mceliece348864pc
126242127208128307mceliece348864pcf
135071135883136843
T:
ntrukem443
139081139319140081ntrulpr1277
153517156962158668C:threebears936r2cpa
162966163514164397T!!!newhope1024cca
162591175464192086
T:
lotus128
197791198503199975
T:
lac192
193526200525207090C:threebears1248r2cpa
235871236287236534mceliece460896
235895236542237084mceliece460896f
244263244590244864mceliece460896pc
249619250129250296mceliece460896pcf
247284252313257409
T:
lotus192
266632267070267432mceliece6960119
266516267081268700mceliece6960119f
267727268703271735
T:
ntrukem743
279147279452279819mceliece6960119pc
279678279910280482mceliece6960119pcf
285422285894286829mceliece6688128
285429286009286860mceliece6688128f
287903288475289065mceliece8192128f
287866288759289071mceliece8192128
292213293440294886
T:
ntskem1264
296767297338298010mceliece6688128pc
297417297868298263mceliece6688128pcf
299275300167300742mceliece8192128pcf
299061300566303724mceliece8192128pc
302261306512312633
T:
lac256
344635352731374444
T:
lotus256
382419382922410560
T:
hqc128round4
424724425128426261
T:
kindi256342
536681538617560660
T:
kindi512222
543486545194546516
T:
kindi512241
560042560685561575
T:
ntskem1380
586332609702629522threebears624r2cca
787785788357789468
T:
hqc192round4
849025851341873536
T:
hqcrmrs128
848691854037856568
T:
hqc128
899847900782902491
T:
kindi512321
925540926281934694
T:
kindi256522
107919010813041081846threebears936r2cca
107789610989601129577
T:
ntskem13136
112681211300751135624
T:
C:rolloi128
115800411665851194245
T:
hqc1281
136541913719191453333
T:
C:rolloi192
154047915418381548662
T:
hqc256round4
155968915700001575185
T:
hqc192
155620515733491578883
T:
hqcrmrs192
161597916177361620045
T:
C:bikel1
162519816276061637266
T:
frodokem640
168901617141471850741threebears1248r2cca
174360617475541755471
T:
frodokem640aes
183573918406631852691
T:
rolloii128
187365018763231919654
T:
hqc1921
192482619526111969358
T:
hqc1922
196961519774041986036
T:
C:lake1
201670520215642024345
T:
rolloii192
209261121005042280049
T:
rsa2048
218946721938632199230
T:
C:rolloi256
248957125613842650944
T:
hqc256
255571325614802571041
T:
rolloii256
2616857?2624767?5617553?
T:
C:edonk192k48n144nu4l4
255316826440822686541
T:
hqcrmrs256
273810227469582788948
T:
hqc2561
287170028866692929466
T:
hqc2562
2076043?3037970?5499047?
T:
C:edonk128k32n96nu4l4
306369331900943198717
T:
hqc2563
320238532305093271696
T:
bigquake1
330379633070543310427
T:
frodokem976
331669933355893357822
T:
C:lake2
341852134240693433821
T:
frodokem976aes
354927135541633563399
T:
rqc128
381896338344554060898
T:
frodokem640shake
384253938576703870857
T:
locker1
404268540499284061115
T:
locker2
438687743998704410691
T:
locker4
463511546520204662542
T:
C:lake3
504858850541395229169
T:
C:bikel3
579640158076615819582
T:
frodokem1344aes
579986058172805829866
T:
locker3
628081362938816353599
T:
locker6
660245966178696632566
T:
locker5
689389869204998064726
T:
rqc192
713205371575847184150
T:
locker7
733550273820817544909
T:
frodokem976shake
749192175123887565013
T:
locker8
989696999425859987546
T:
locker9
102549901027160510273418
T:
sikep434
10891934?10904918?14380532?
T:
rqc256
109401071095309111025206
T:
sikep434comp
130135081307370413098279
T:
remblem1056
131008321313015113289258
T:
remblem928
136290361365996613686084
T:
frodokem1344shake
141709241426683014271673
T:
sikep503
151797831518631315202413
T:
sikep503comp
273440032738028927454087
T:
sikep610
289858602901445829156881
T:
sikep610comp
293255052935886929391344
T:
mersenne756839
300404133038156930505522
T:
bigquake3
434814674351270643521313
T:
sikep751
450360984532791545551760
T:
bigquake5
461855124631904646370313
T:
sikep751comp
19288667?53235325?57305551?
T:
C:edonk128k16n80nu8l6
588121485895532559394044
T:
oddmanhattan128
51728264?69290054?100204073?
T:
C:edonk192k32n128nu4l6
34746597?78898954?96843710?
T:
C:edonk128ref
60434073?108574876?178331113?
T:
C:edonk128k16n80nu4l6
113742589113925622114145399
T:
oddmanhattan192
230182142231066831233676139
T:
oddmanhattan256