VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems
ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of key-encapsulation mechanisms on one machine: amd64; Coffee Lake (806ea); 2018 Intel Core i3-8109U; 2 x 3000MHz; like, supercop-20251114

[Page version: 20251208 20:36:48]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for key-encapsulation mechanisms:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol C: means that the current SUPERCOP database does not list IND-CCA2 security as a goal for this key-encapsulation mechanism. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each key-encapsulation mechanism and each implementation. Designers and implementors interested in submitting new key-encapsulation mechanisms and new implementations of existing systems should read the call for submissions.

Test results

Graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

NISTPQC graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

Cycles to generate a key pair
25%50%75%system
169261710817550kyber90s512
187391878222561ntruplus576
225902282023237kyber512
235052355323602ntruplus768
249472515425330kyber90s768
262012624826295ntruplus864
319053207632381
T:
C:nhcompact512cca
326763275032876smaugt1
326963278432921timer
340503416234309
T:
lac128
357313577735886
T:
lightsaber2
361303639436624kyber90s1024
371603777838044ntrulpr653
34455?38401?43984?ntruplus1152
385673867938779
T:
ntrulpr4591761
388613907439380kyber768
399394004840786ntrulpr761
443814467744880
T:
C:nhcompact768cca
500795025350686ntrulpr857
508615107051234T!!!newhope512cca
510545121051624smaugt3
519145237952989ntrulpr1013
535275398254534ntrulpr953
546135544155956kyber1024
559995619656469
T:
C:nhcompact1024cca
639616400464132
T:
saber2
691626943170297ntrulpr1277
696656991370217smaugt5
810708127982015
T:
lac256
813678197585685
T:
hqc128round4
894008958089892
T:
lac192
963059661196945T!!!newhope1024cca
976129780598010
T:
firesaber2
155789157138158944
T:
C:hila5
159288175373178825ntruhps2048509
186972187208191292C:threebears624r2cpa
189380189531190391
T:
hqc192round4
193505199047206756threebears624r2cca
251393251852279314ntruhrss701
257353257687258257
T:
kindi256342
273021273904274753
T:
kindi512222
278881279370280021
T:
kindi512241
266871286373324206ntruhps2048677
356314358486363500
T:
hqcrmrs128
362399367798386415ntruhps4096821
390155390507431569threebears936r2cca
391525392420393006
T:
hqc256round4
399812400926418971
T:
hqc128
402223402523426262C:threebears936r2cpa
415264423656438252
T:
ntrukem443
428450430495446291
T:
hqc1281
543538544334544777
T:
kindi512321
597408599767601789
T:
C:bikel1
626635628345654888sntrup653
655452655855656974
T:
kindi256522
668657689995721743C:threebears1248r2cpa
691289699054700651threebears1248r2cca
721620724370730111
T:
hqcrmrs192
725761727207761859sntrup761
746316747767748842
T:
rqc128
784516791170808413
T:
hqc1921
810039817578838931
T:
hqc192
837912845594863984sntrup4591761
828623856110881523
T:
hqc1922
877922889844909310
T:
C:edonk128k16n80nu4l6
945206948515953437
T:
ntrukem743
952751955159958822
T:
C:rolloi128
106204810647401098945sntrup857
109776810999241104414
T:
frodokem640
119496012056021239823
T:
hqcrmrs256
117931912141271230113
T:
hqc2561
125828512889331305905
T:
hqc2562
127495912916841310059sntrup953
129659312993151302559
T:
C:rolloi192
1296070?1301630?1873036?
T:
rqc192
129471913038441333944
T:
hqc256
135429813570001362609
T:
frodokem640aes
136006313678821389494
T:
hqc2563
140145814050501409946
T:
C:edonk128k16n80nu8l6
142373714511081462575sntrup1013
161753816339251652224
T:
C:edonk128k32n96nu4l4
167822116811661722452
T:
C:bikel3
173191217349311739557
T:
C:rolloi256
1887321?1892972?2733854?
T:
rqc256
191963519524681988938
T:
C:edonk192k32n128nu4l6
207804020814872086882
T:
C:edonk128ref
221086422228122225641sntrup1277
238711823960692410218
T:
frodokem976
251079925367352559226
T:
C:lake1
263326626412782657085
T:
C:lake2
275808427671682777388
T:
C:lake3
281742628231132831688
T:
frodokem976aes
293873229641782998157
T:
C:edonk192k48n144nu4l4
363863736426693824204
T:
frodokem640shake
433555743414944359392
T:
rolloii128
441095244165724422206
T:
rolloii192
443931444498244470178
T:
locker1
475582247641134781281
T:
frodokem1344aes
495219649604304968270
T:
locker2
509547451035625108665
T:
rolloii256
528854852991725327811
T:
locker3
587504658788725910656
T:
sikep434
589228359071655917561
T:
locker4
644807564556896539962
T:
remblem1056
653966465858376660086
T:
remblem928
667162866812596687418
T:
locker6
721815372593797518543
T:
frodokem976shake
777570477955577815491
T:
locker5
814686481544228184408
T:
sikep503
9608418964095410478775
T:
sikep434comp
9628987970443010207547
T:
lotus128
114442611145884011480566
T:
locker7
123959121241025812433549
T:
locker8
130642271310707513137810
T:
frodokem1344shake
130625681311077513172796
T:
locker9
133061121335914714564326
T:
sikep503comp
148012431482372614967558
T:
sikep610
184512451866660818954960
T:
lotus192
201889202025156720301310
T:
mersenne756839
249167572492638224931303
T:
sikep751
254917412553813527596084
T:
sikep610comp
303480843056768931042555mceliece348864pcf
306006333064044530769207mceliece348864f
311323653424517135775838
T:
lotus256
393684403940610743226772
T:
sikep751comp
443405984492123145256986
T:
ntskem1264
30626432?50112758?70369118?mceliece348864pc
39800063?50625162?80234383?mceliece348864
46935856?82221616?132769684?
T:
rsa2048
99657168100416224101455506mceliece460896pcf
99643956100447086100980803mceliece460896f
103868588105362030106953773
T:
ntskem1380
100529020?132394447?228870685?mceliece460896pc
100813712?135054135?235901904?mceliece460896
188393116189256717190098790mceliece6960119f
188257606189257643189643243mceliece6960119pcf
231034425231655548232172419mceliece6688128f
231918547232446906233183067mceliece6688128pcf
239513232240241708240818330mceliece8192128f
240679469240911339241233121mceliece8192128pcf
243840904247177898247699183
T:
ntskem13136
247755332248100142248458632
T:
oddmanhattan128
300886501?306267187?450788524?mceliece6688128
191515116?314058065?445837630?mceliece6960119
250941236?315661911?442698058?mceliece6960119pc
234635779?371668007?523777112?mceliece6688128pc
246235502?384504529?465281223?mceliece8192128
250887179?391738297?535025268?mceliece8192128pc
393230836394594662395188851
T:
oddmanhattan192
706003044710103759719118724
T:
oddmanhattan256
852125135861497165867122465
T:
bigquake1
783067667179306932298054395813
T:
bigquake3
141949771541428848291714377027093
T:
bigquake5
Cycles for encapsulation
25%50%75%system
146001545216116
T:
rsa2048
212902133321394ntruplus576
216392167421742smaugt1
218502193922233timer
223772322524564ntruhps2048509
236282375324053ntruhrss701
266452669226771ntruplus768
289382907529662kyber90s512
306673072830836ntruplus864
309783216434103mceliece348864
312573243633958mceliece348864f
325923333434376ntruhps2048677
345273466334820kyber512
373413814139282ntruhps4096821
389353911139506sntrup4591761
393163953739761kyber90s768
390483977739932sntrup653
390104024141838mceliece348864pcf
391764029242432mceliece348864pc
407304079241051ntruplus1152
424484252042644sntrup761
440734414444982smaugt3
478814793648060
T:
lightsaber2
526235269652787
T:
C:nhcompact512cca
520275272352879sntrup857
527745299753785kyber768
533735374653944kyber90s1024
568355689957178sntrup953
571365771858070sntrup1013
615056165161873smaugt5
616836208462171ntrulpr653
653366539765488ntrulpr761
674126749567637
T:
ntrulpr4591761
62262?67682?78046?mceliece460896
620906781677162mceliece460896f
680847050071011
T:
lac128
712397130371409
T:
C:nhcompact768cca
722157232272640kyber1024
729727309273196sntrup1277
709037589587194mceliece460896pcf
712907622086940mceliece460896pc
779747885279303
T:
ntskem1264
803018035580406
T:
saber2
823968291083120ntrulpr857
834878363283762T!!!newhope512cca
857338608386833ntrulpr1013
875538802888183ntrulpr953
929709307993196
T:
C:nhcompact1024cca
100485105811112433mceliece6688128
102026106378113295mceliece6688128f
107326110470116152mceliece6960119f
109005111389117429mceliece6960119
112070113004113205ntrulpr1277
115442116030116780
T:
C:bikel1
111027116128121547mceliece6688128pcf
117301117399117560
T:
firesaber2
116561118185120014mceliece8192128
117289118376120231mceliece8192128f
113123118699124893mceliece6688128pc
120086123291131576mceliece6960119pcf
119767123322130736mceliece6960119pc
122848125507128346
T:
ntrukem443
128689130514132603mceliece8192128pcf
136401138254140771mceliece8192128pc
139642140142141105
T:
lac192
139831140330159937
T:
lotus128
156308156553156959T!!!newhope1024cca
157390157978158664
T:
C:rolloi128
160655164918166651
T:
lac256
180109181160182444
T:
C:rolloi192
182453184600187270
T:
C:edonk128k16n80nu4l6
200967201896202910
T:
C:rolloi256
208824212781219582
T:
lotus192
216554217763221308
T:
C:hila5
220779221032237129
T:
hqc128round4
220901222164232975
T:
ntskem1380
227128231095238846
T:
C:edonk128k16n80nu8l6
231207233684237158
T:
ntrukem743
267582270843275317C:threebears624r2cpa
270202271137271953
T:
C:bikel3
258854278694281215threebears624r2cca
274171313273314276
T:
lotus256
337549337843338396
T:
kindi256342
299044?341197?383363?
T:
ntskem13136
366787368753371461
T:
C:edonk128k32n96nu4l4
397962398815399499
T:
kindi512222
403636404219405173
T:
kindi512241
440627445068452891
T:
C:edonk128ref
460693464775472639
T:
C:lake1
488997489342549449threebears936r2cca
493036493723494630
T:
hqc192round4
506806510147513905
T:
C:lake2
504561512757526429
T:
hqcrmrs128
494236528707553376C:threebears936r2cpa
527918531276538561
T:
rolloii128
540960541737542664
T:
rolloii192
542772544950564752
T:
hqc128
571286575170581001
T:
C:lake3
591015592324593523
T:
rolloii256
605161609685612637
T:
C:edonk192k32n128nu4l6
651701671179675507
T:
hqc1281
710985712471718286
T:
kindi512321
767070772622779891
T:
locker1
786884787932791718
T:
kindi256522
816002818832824373
T:
locker2
817825822914831829
T:
C:edonk192k48n144nu4l4
800019823628850410C:threebears1248r2cpa
824923848729852997threebears1248r2cca
890592893774899104
T:
locker3
936090937189940853
T:
hqc256round4
100840710106741013383
T:
locker4
102030810222351024535
T:
rqc128
102506310333631059423
T:
hqcrmrs192
111325811189071122995
T:
locker6
112155711503741167040
T:
hqc192
117984312044071221297
T:
hqc1921
127296412770681283308
T:
locker5
127419313055031328220
T:
hqc1922
162719216286081634776
T:
frodokem640
170421717573531790178
T:
hqcrmrs256
181494818186251825605
T:
frodokem640aes
183776918551561898263
T:
hqc256
183315618613641883874
T:
hqc2561
1855288?1865318?2438461?
T:
rqc192
187593818841591908470
T:
locker7
193172119655091988403
T:
hqc2562
201438520225712039114
T:
locker8
208874521244432161697
T:
hqc2563
212130821325402155059
T:
locker9
235321924274402493285
T:
bigquake1
2596367?2603568?4299982?
T:
rqc256
330567233121783321673
T:
frodokem976
355603335637253572041
T:
frodokem976aes
387667338902584200400
T:
frodokem640shake
598613959929906015619
T:
frodokem1344aes
732117175478037796880
T:
bigquake3
761013776349827679237
T:
frodokem976shake
959628595984359611291
T:
sikep434
958053396336439736094
T:
remblem1056
972598897420529899474
T:
remblem928
112954081145792711786519
T:
bigquake5
133121721338043413393657
T:
sikep503
137408111377764513793159
T:
frodokem1344shake
149922291501977215083162
T:
sikep434comp
198610701988727519918832
T:
mersenne756839
206281232065622720744135
T:
sikep503comp
271293282713407127152368
T:
sikep610
374212413776436238108594
T:
sikep610comp
403221474032976540338321
T:
sikep751
540994295435020954602629
T:
oddmanhattan128
629008396310546563222150
T:
sikep751comp
103808571104052854104239760
T:
oddmanhattan192
214649194216556481217591406
T:
oddmanhattan256
Cycles for decapsulation
25%50%75%system
158721590215945ntruplus576
192811931419347ntruplus768
205272058521456kyber90s512
228942295623095ntruplus864
270362713127261kyber512
284272858928754kyber90s768
303113034830400ntruplus1152
331753325633330smaugt1
338293390734009timer
377483877141491ntruhps2048509
402384035040535kyber90s1024
413494162843025kyber768
469164695847011
T:
lightsaber2
504635068952533
T:
C:hila5
508975096051051
T:
C:nhcompact512cca
509915105051113sntrup761
536225367453733sntrup653
574785755960447ntruhrss701
561415892361870ntruhps2048677
590355913659818kyber1024
596665990760070smaugt3
695916969569878
T:
C:nhcompact768cca
728237296776599ntruhps4096821
730597316873298sntrup857
740687458974881ntrulpr653
775947768477789ntrulpr761
777917785277946sntrup953
779477800778081
T:
saber2
782727874478807sntrup1013
822618235383528smaugt5
833178345083547sntrup4591761
883298998290624
T:
lac128
905419078190888T!!!newhope512cca
919279201392120
T:
C:nhcompact1024cca
964669661996772
T:
ntrulpr4591761
968439693496989sntrup1277
100644100930101015ntrulpr857
102959104188104312ntrulpr1013
106195106550106678ntrulpr953
115002115146115893
T:
firesaber2
118006118217118507mceliece348864
118362118590119060mceliece348864f
119413124147125984C:threebears624r2cpa
126308127192128087mceliece348864pc
126242127208128307mceliece348864pcf
134235135133135356ntrulpr1277
135071135883136843
T:
ntrukem443
153517156962158668C:threebears936r2cpa
169469169828170272T!!!newhope1024cca
162591175464192086
T:
lotus128
197791198503199975
T:
lac192
193526200525207090C:threebears1248r2cpa
235871236287236534mceliece460896
235895236542237084mceliece460896f
244263244590244864mceliece460896pc
249619250129250296mceliece460896pcf
247284252313257409
T:
lotus192
266632267070267432mceliece6960119
266516267081268700mceliece6960119f
267727268703271735
T:
ntrukem743
279147279452279819mceliece6960119pc
279678279910280482mceliece6960119pcf
285422285894286829mceliece6688128
285429286009286860mceliece6688128f
287903288475289065mceliece8192128f
287866288759289071mceliece8192128
292213293440294886
T:
ntskem1264
296767297338298010mceliece6688128pc
297417297868298263mceliece6688128pcf
299275300167300742mceliece8192128pcf
299061300566303724mceliece8192128pc
302261306512312633
T:
lac256
344635352731374444
T:
lotus256
382419382922410560
T:
hqc128round4
424724425128426261
T:
kindi256342
536681538617560660
T:
kindi512222
543486545194546516
T:
kindi512241
560042560685561575
T:
ntskem1380
586332609702629522threebears624r2cca
787785788357789468
T:
hqc192round4
849025851341873536
T:
hqcrmrs128
848691854037856568
T:
hqc128
899847900782902491
T:
kindi512321
925540926281934694
T:
kindi256522
107919010813041081846threebears936r2cca
107789610989601129577
T:
ntskem13136
112681211300751135624
T:
C:rolloi128
115800411665851194245
T:
hqc1281
136541913719191453333
T:
C:rolloi192
154047915418381548662
T:
hqc256round4
155968915700001575185
T:
hqc192
155620515733491578883
T:
hqcrmrs192
161597916177361620045
T:
C:bikel1
162519816276061637266
T:
frodokem640
168901617141471850741threebears1248r2cca
174360617475541755471
T:
frodokem640aes
183573918406631852691
T:
rolloii128
187365018763231919654
T:
hqc1921
192482619526111969358
T:
hqc1922
196961519774041986036
T:
C:lake1
201670520215642024345
T:
rolloii192
209261121005042280049
T:
rsa2048
218946721938632199230
T:
C:rolloi256
248957125613842650944
T:
hqc256
255571325614802571041
T:
rolloii256
2616857?2624767?5617553?
T:
C:edonk192k48n144nu4l4
255316826440822686541
T:
hqcrmrs256
273810227469582788948
T:
hqc2561
287170028866692929466
T:
hqc2562
2076043?3037970?5499047?
T:
C:edonk128k32n96nu4l4
306369331900943198717
T:
hqc2563
320238532305093271696
T:
bigquake1
330379633070543310427
T:
frodokem976
331669933355893357822
T:
C:lake2
341852134240693433821
T:
frodokem976aes
354927135541633563399
T:
rqc128
381896338344554060898
T:
frodokem640shake
384253938576703870857
T:
locker1
404268540499284061115
T:
locker2
438687743998704410691
T:
locker4
463511546520204662542
T:
C:lake3
504858850541395229169
T:
C:bikel3
579640158076615819582
T:
frodokem1344aes
579986058172805829866
T:
locker3
628081362938816353599
T:
locker6
660245966178696632566
T:
locker5
689389869204998064726
T:
rqc192
713205371575847184150
T:
locker7
733550273820817544909
T:
frodokem976shake
749192175123887565013
T:
locker8
989696999425859987546
T:
locker9
102549901027160510273418
T:
sikep434
10891934?10904918?14380532?
T:
rqc256
109401071095309111025206
T:
sikep434comp
130135081307370413098279
T:
remblem1056
131008321313015113289258
T:
remblem928
136290361365996613686084
T:
frodokem1344shake
141709241426683014271673
T:
sikep503
151797831518631315202413
T:
sikep503comp
273440032738028927454087
T:
sikep610
289858602901445829156881
T:
sikep610comp
293255052935886929391344
T:
mersenne756839
300404133038156930505522
T:
bigquake3
434814674351270643521313
T:
sikep751
450360984532791545551760
T:
bigquake5
461855124631904646370313
T:
sikep751comp
19288667?53235325?57305551?
T:
C:edonk128k16n80nu8l6
588121485895532559394044
T:
oddmanhattan128
51728264?69290054?100204073?
T:
C:edonk192k32n128nu4l6
34746597?78898954?96843710?
T:
C:edonk128ref
60434073?108574876?178331113?
T:
C:edonk128k16n80nu4l6
113742589113925622114145399
T:
oddmanhattan192
230182142231066831233676139
T:
oddmanhattan256