VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems
ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of key-encapsulation mechanisms on one machine: amd64; Haswell+AES (306c3); 2013 Intel Core i7-4770; 4 x 3400MHz; speed2supercop, supercop-20250415

[Page version: 20250510 09:50:11]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for key-encapsulation mechanisms:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol C: means that the current SUPERCOP database does not list IND-CCA2 security as a goal for this key-encapsulation mechanism. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each key-encapsulation mechanism and each implementation. Designers and implementors interested in submitting new key-encapsulation mechanisms and new implementations of existing systems should read the call for submissions.

Test results

Graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

NISTPQC graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

Cycles to generate a key pair
25%50%75%system
190801918819320kyber90s512
245522469225004kyber512
281842829628460
T:
C:nhcompact512cca
293202951229816kyber90s768
303283050835992ntruplus576
355843599242440timer
378923797638124smaugt1
379763805238140
T:
lightsaber2
407324092041072
T:
C:nhcompact768cca
420484229242528kyber90s1024
423004302843296ntrulpr653
436164393244328
T:
ntrulpr4591761
437044398044108ntruplus768
445604463645428ntrulpr761
480324839648768T!!!newhope512cca
428884972851284kyber768
520045212452640ntruplus864
455325256452848
T:
lac128
535525382054276
T:
C:nhcompact1024cca
561325629667584smaugt3
565845678457172ntrulpr857
587605951259720ntrulpr1013
598806013260932ntrulpr953
55760?62108?71396?ntruplus1152
613486211263000kyber1024
671046723267436
T:
saber2
805408072881008ntrulpr1277
758488342485688smaugt5
898929005690460
T:
hqc128round4
891129073690908
T:
lac256
906089101291348T!!!newhope1024cca
106040106112106240
T:
firesaber2
133012133620135764
T:
lac192
166436166824167352ntruhps2048509
213372213592214096
T:
hqc192round4
217588231936257212C:threebears624r2cpa
219804248516253232threebears624r2cca
261464261824265828
T:
kindi256342
266544266888268084ntruhrss701
273688274500275008
T:
C:hila5
279044279456280028
T:
kindi512222
287240288672289416ntruhps2048677
288660289560308832
T:
kindi512241
394832403264404564
T:
hqcrmrs128
410340411464412772ntruhps4096821
434784439744442976
T:
ntrukem443
443508444424454972
T:
hqc256round4
457556458592525788threebears936r2cca
442280459400468844
T:
hqc128
482200483228503076
T:
hqc1281
460868532976540740C:threebears936r2cpa
581324583848585840
T:
kindi512321
587728589132619440
T:
C:bikel1
695456696140696912
T:
kindi256522
713580741252789996sntrup653
747640753388761636
T:
rqc128
806296821136826376
T:
hqcrmrs192
820748826584828896sntrup761
833788845692863688
T:
C:edonk128k16n80nu4l6
799504864188891536threebears1248r2cca
887832901044920340
T:
hqc1921
889696901456924020
T:
hqc192
851768910492918016C:threebears1248r2cpa
904896955904961508sntrup4591761
940700956712986188
T:
hqc1922
102242410262081029728
T:
C:rolloi128
111172811166721122168
T:
ntrukem743
120655612076841208884
T:
frodokem640
117806812267281228664sntrup857
129923613027041323048
T:
C:rolloi192
131788813288241360600
T:
hqcrmrs256
1321812?1333840?1871596?
T:
rqc192
134556813497841360880
T:
C:edonk128k16n80nu8l6
137257613981801425152
T:
hqc2561
143479614559641513484sntrup953
145691214615041464436
T:
frodokem640aes
144771214769281499292
T:
hqc256
146360814953921527468
T:
hqc2562
148784815250041564248
T:
hqc2563
156042015779961601312
T:
C:edonk128k32n96nu4l4
163082416366201725428sntrup1013
169884417017841707076
T:
C:rolloi256
173254817354601740812
T:
C:bikel3
190005619069481943104
T:
rqc256
189463219166801963100
T:
C:edonk192k32n128nu4l6
198813219924202007140
T:
C:edonk128ref
240076024175442449964
T:
C:lake1
256212825710642588740
T:
C:lake2
259823226077082649444sntrup1277
260208826201682640868
T:
frodokem976
267205226825602708128
T:
C:lake3
285064828762202904108
T:
C:edonk192k48n144nu4l4
300813630148523033904
T:
frodokem976aes
393220839364363946948
T:
frodokem640shake
427591243376484351868
T:
locker1
444942444546164464484
T:
rolloii128
445732044647404474608
T:
rolloii192
457776846029924649540
T:
locker2
500862850330285070652
T:
locker3
505759650702165079432
T:
rolloii256
511534851295965142384
T:
frodokem1344aes
547733255591965828996
T:
locker4
634200864399206717120
T:
locker6
690425269388886954788
T:
remblem928
687229269391486963448
T:
remblem1056
724308875015527537972
T:
locker5
763600876412767651744
T:
frodokem976shake
818142481939728260104
T:
sikep434
107468001112732811359916
T:
locker7
115747801158966011957448
T:
lotus128
114555481165544812021216
T:
locker8
121695281220939212239928
T:
locker9
122702241228660012351624
T:
sikep503
132108921329562413399144
T:
frodokem1344shake
138824481391380815086408
T:
sikep434comp
199240081996536021632492
T:
sikep503comp
221196962215089622226164
T:
lotus192
252411042528984025496152
T:
mersenne756839
254277042557686825583852
T:
sikep610
347289643527257635310268mceliece348864f
352496803587643636096100mceliece348864pcf
357026243593312440342076
T:
lotus256
433705444353417647407156
T:
sikep610comp
442681044427503244281636
T:
sikep751
499383605004472850172848
T:
ntskem1264
36212692?55572272?80746164?mceliece348864pc
34385132?55620072?77500944?mceliece348864
690361886910317674744852
T:
sikep751comp
110618280111189876113226664mceliece460896f
111435408111576032114732800mceliece460896pcf
91440764?131670808?198030608?
T:
rsa2048
113824036?151073312?219346740?mceliece460896
152782932153029652153232160
T:
ntskem1380
148447392?160044244?228446180?mceliece460896pc
233785004234998480236104596mceliece6960119f
234894224236371664239346888mceliece6960119pcf
267477144267647640267877456
T:
ntskem13136
268851388269548000269687356mceliece6688128f
272163580273497196274032416mceliece6688128pcf
275238260275497408275809668
T:
oddmanhattan128
300819312301043860301676416mceliece8192128pcf
301292680301821448304170068mceliece8192128f
240359672?316730220?544204892?mceliece6960119pc
277685168?366687184?629621556?mceliece6688128
309322536?385558120?536331932?mceliece6960119
304603468?389500808?565606316?mceliece8192128
304970192?394090416?568418340?mceliece8192128pc
443929280445003544446118896
T:
oddmanhattan192
281574304?446357304?622313952?mceliece6688128pc
785309040795857176797187796
T:
oddmanhattan256
897117364900183348904490592
T:
bigquake1
679539118468997266086969095264
T:
bigquake3
137303222361377903373613835750564
T:
bigquake5
Cycles for encapsulation
25%50%75%system
244242448024576smaugt1
246202474025464ntruhps2048509
239682482426932
T:
rsa2048
249122497625268ntruplus576
243442582426036timer
259962606026756ntruhrss701
307203085631008ntruplus768
316963175231808kyber90s512
353563607637752mceliece348864f
352043617637984mceliece348864
362043635637040ntruhps2048677
370963718439480kyber512
396843984040280ntruplus864
420884248842704ntruhps4096821
438524403244540sntrup4591761
433604445646956mceliece348864pcf
445044465645376kyber90s768
438204520847428mceliece348864pc
449004560845848sntrup653
462444633246612ntruplus1152
484244851648684
T:
C:nhcompact512cca
485484871248852sntrup761
487004905257616smaugt3
507365078050852
T:
lightsaber2
562485630456428kyber768
605646070060900kyber90s1024
603526103261204sntrup857
651006519665488sntrup953
653686594466292sntrup1013
678406796868168
T:
C:nhcompact768cca
690366924469700smaugt5
698486994470088ntrulpr653
735367359673716ntrulpr761
751167552076072
T:
lac128
758687598876136
T:
ntrulpr4591761
701407685285740mceliece460896f
705607730885436mceliece460896
808528126481740T!!!newhope512cca
781608290492564mceliece460896pc
780608356489508mceliece460896pcf
838248388083948
T:
saber2
826728494887824kyber1024
851728531285548sntrup1277
866408690887320
T:
ntskem1264
886088869288840
T:
C:nhcompact1024cca
940529417694332ntrulpr857
9444096652102472
T:
C:edonk128k16n80nu4l6
980289832898816ntrulpr1013
986889882098936ntrulpr953
116936117440118364
T:
C:bikel1
117252121088129856mceliece6688128f
126508126580126700
T:
firesaber2
125812127904133160
T:
ntrukem443
123848128380136816mceliece6688128
125908129072136432mceliece6960119f
130192130296130452ntrulpr1277
128416132604138288mceliece6960119
132076139144149024mceliece6688128pc
134268139852149292mceliece6688128pcf
141404143984148616mceliece6960119pcf
140580144256151628mceliece6960119pc
142900144308146032mceliece8192128
143080144748146784mceliece8192128f
150048150816151136T!!!newhope1024cca
151980153720157136mceliece8192128pcf
155052156528159344mceliece8192128pc
160132160440160812
T:
lotus128
160564161748163580
T:
C:rolloi128
172576173056173680
T:
C:rolloi192
172220174480180768
T:
lac256
171888175920176756
T:
lac192
200668201288202212
T:
C:rolloi256
201948204568213124
T:
C:edonk128k16n80nu8l6
238728238996244228
T:
hqc128round4
230144241528242340
T:
lotus192
243556246644251636
T:
ntrukem743
275772276552277340
T:
C:bikel3
299484299888300296threebears624r2cca
324752325440326220
T:
ntskem1380
335536336188336824
T:
C:hila5
338064339956342076
T:
C:edonk128k32n96nu4l4
341668342384343028
T:
kindi256342
299868?347144?383608?
T:
lotus256
334012349560353448C:threebears624r2cpa
370032373688381164
T:
C:edonk128ref
380036381388392912
T:
ntskem13136
403160403812404428
T:
kindi512222
414964415616417168
T:
kindi512241
444656452216461448
T:
C:lake1
491728495116510440
T:
C:lake2
501452504248508284
T:
C:edonk192k32n128nu4l6
509988511596513428
T:
rolloii128
529244530596531396
T:
rolloii192
545112547572550424
T:
C:lake3
548420548920549564
T:
hqc192round4
558280566800590444
T:
hqcrmrs128
574560575708671632threebears936r2cca
578252579680663220C:threebears936r2cpa
589184590672598796
T:
rolloii256
598180621704636732
T:
hqc128
717940722536732824
T:
C:edonk192k48n144nu4l4
718744736384754032
T:
hqc1281
741396759508784108
T:
locker2
743572760876767772
T:
locker1
759916761472770976
T:
kindi512321
835140839572842396
T:
kindi256522
838684856004861572
T:
locker3
9440929621481007168
T:
locker4
93617610030641102364threebears1248r2cca
102553210273121031520
T:
rqc128
103606410560401084088
T:
locker6
106860410707321071872
T:
hqc256round4
105838011022521129324C:threebears1248r2cpa
113562411616001173256
T:
hqcrmrs192
119830412159721222360
T:
locker5
123906412685041294112
T:
hqc192
135282813671161397044
T:
hqc1921
146016414763881496108
T:
hqc1922
172113217218841724360
T:
frodokem640
185186418614241874252
T:
locker8
186248018878561904280
T:
locker7
188774418929241898632
T:
frodokem640aes
1889020?1914280?2448428?
T:
rqc192
189996419366201965000
T:
hqcrmrs256
204080020681202105908
T:
hqc256
201478020727442084056
T:
locker9
217827622203642237000
T:
hqc2561
232886423526482389912
T:
hqc2562
238193224215562442512
T:
hqc2563
239557224711402517972
T:
bigquake1
265457626645522687736
T:
rqc256
341995634230283436800
T:
frodokem976
366190036641043677792
T:
frodokem976aes
428802042904244302604
T:
frodokem640shake
620270862155806248252
T:
frodokem1344aes
684615670796367256852
T:
bigquake3
8058332?8166208?12773568?
T:
frodokem976shake
101775361019960010222232
T:
remblem1056
102371961032147210694920
T:
remblem928
104626041084454011182880
T:
bigquake5
132283641324124813246132
T:
sikep434
141629321417469614254836
T:
frodokem1344shake
202045202026483620289704
T:
sikep503
217043482178610821895728
T:
sikep434comp
275448762757245227705720
T:
mersenne756839
310255523115602831305372
T:
sikep503comp
466723404668601246701556
T:
sikep610
592486165944790459790624
T:
oddmanhattan128
639423926412138464423760
T:
sikep610comp
714028567141763271434472
T:
sikep751
110562404110682996111234848
T:
sikep751comp
113667068113863436114129844
T:
oddmanhattan192
235614620236143328236793620
T:
oddmanhattan256
Cycles for decapsulation
25%50%75%system
189201894818980ntruplus576
227402279223080ntruplus768
234122347223520kyber90s512
291002916029332ntruplus864
297242978429832kyber512
338443400834504kyber90s768
357083576035800ntruplus1152
380763814438764timer
383883841238476smaugt1
387123879238968ntruhps2048509
471004717247252
T:
C:nhcompact512cca
474924761247708kyber90s1024
505885063250664
T:
lightsaber2
459365184453212kyber768
539565411254364
T:
C:hila5
593645944859548sntrup761
602246036060504ntruhps2048677
616166172461804sntrup653
621566227663088ntruhrss701
665406730072472smaugt3
675766768067804
T:
C:nhcompact768cca
68160?68268?86020?kyber1024
764087678877480ntruhps4096821
827048277282860
T:
saber2
843008449284716ntrulpr653
858728599286080sntrup857
880208811688240
T:
C:nhcompact1024cca
883168839288484ntrulpr761
889808934489492T!!!newhope512cca
895368971289868sntrup953
912129129691448sntrup1013
922609247692724sntrup4591761
9318493752103712smaugt5
101340101712112076
T:
lac128
107920108128108292
T:
ntrulpr4591761
116072116148116272ntrulpr857
116504116640116804sntrup1277
118616118684118796ntrulpr1013
120856121032121160ntrulpr953
124048124416124544mceliece348864f
123992124528125120mceliece348864
125472125612126072
T:
firesaber2
132348132644133004mceliece348864pcf
132636132968133516mceliece348864pc
134736135088135752
T:
ntrukem443
134588138712149356C:threebears624r2cpa
157016157144157280ntrulpr1277
163236163412165052T!!!newhope1024cca
186624186836187068
T:
lotus128
176224193292199016C:threebears936r2cpa
215636217644220572
T:
lac192
216860219068241980C:threebears1248r2cpa
250140250628251268mceliece460896
250648250816251052mceliece460896f
257944258480259528mceliece460896pc
258900259232260620mceliece460896pcf
279068279956281248mceliece6960119
282344282752284236mceliece6960119f
271924283372284024
T:
lotus192
291260292172293376mceliece6960119pc
291744292408292784mceliece6960119pcf
294908295588296452mceliece8192128
293940295612297884mceliece6688128
299420299712300096mceliece8192128f
301524302164304692mceliece6688128f
305420306848310056mceliece6688128pc
308568309048312408mceliece6688128pcf
308432309140310240mceliece8192128pc
314192314728315300mceliece8192128pcf
316080320012322212
T:
ntrukem743
283704?375664?405628?
T:
lac256
373840376200451468
T:
lotus256
386960387380388292
T:
ntskem1264
414048414328414620
T:
hqc128round4
427664427968428744
T:
kindi256342
534900535784537248
T:
kindi512222
547104547660548532
T:
kindi512241
668704715372718872threebears624r2cca
719728720632722268
T:
ntskem1380
874156875152876492
T:
hqc192round4
913128932584949064
T:
hqc128
920856947236962048
T:
hqcrmrs128
953964956076962108
T:
kindi512321
973384977924994872
T:
kindi256522
104452410467441051448
T:
C:rolloi128
123106412349601309920
T:
C:rolloi192
123267612393681240000threebears936r2cca
131434413182361326568
T:
hqc1281
138900813932281400184
T:
ntskem13136
170761217109521713772
T:
frodokem640
173044417342641745316
T:
rolloii128
171614417359321764888
T:
hqcrmrs192
173850817613961764332
T:
hqc256round4
177432017911081850716
T:
hqc192
180832418112081813064
T:
frodokem640aes
180978018118001815296
T:
C:bikel1
184998018551841865748
T:
C:lake1
189712419006761905624
T:
rolloii192
207482020798762086540
T:
C:rolloi256
217347221833482205308
T:
hqc1921
210046822319722255896threebears1248r2cca
224061622727882286392
T:
hqc1922
913284?2308080?3999976?
T:
C:edonk128k32n96nu4l4
246712424696522477540
T:
rolloii256
262290426314282645332
T:
rsa2048
273923227771842871236
T:
hqcrmrs256
283412428738002888608
T:
hqc256
310462831141283130296
T:
C:lake2
316646031860163194668
T:
hqc2561
342958034343643446552
T:
frodokem976
343134434627403490352
T:
bigquake1
347310434803683489632
T:
frodokem976aes
348965235324963557292
T:
hqc2562
352126835358483576880
T:
hqc2563
359254836047403622824
T:
rqc128
367923237106723743372
T:
locker1
374311238332963870392
T:
locker2
419150441933604207028
T:
frodokem640shake
420878842215844240156
T:
C:lake3
422318042469964275516
T:
locker4
2474440?4541664?6660392?
T:
C:edonk192k48n144nu4l4
550694855299245566396
T:
locker3
574788857669725802164
T:
C:bikel3
596733659809566027292
T:
frodokem1344aes
594780859915046071816
T:
locker6
627340862919926323216
T:
locker5
689289669170966944308
T:
locker7
694035669688246991240
T:
locker8
735296073856568474560
T:
rqc192
7887552?7897900?11303840?
T:
frodokem976shake
949277695276689559244
T:
locker9
115803601160061211620612
T:
rqc256
137094321377425213790284
T:
remblem1056
137790401386708414342064
T:
remblem928
13910040?14013816?17452732?
T:
frodokem1344shake
142105321423394814242424
T:
sikep434
158581521586630415880452
T:
sikep434comp
12195916?17331100?118225060?
T:
C:edonk128ref
19575992?21401368?159893704?
T:
C:edonk128k16n80nu8l6
215224282153629621578904
T:
sikep503
230264602304470423068068
T:
sikep503comp
289302962929800429367088
T:
bigquake3
397219523975034439986740
T:
mersenne756839
435930924375688045325804
T:
bigquake5
470138844710598447132636
T:
sikep610
496589324987824049996968
T:
sikep610comp
15992572?60246268?61740968?
T:
C:edonk128k16n80nu4l6
650689646518493265282676
T:
oddmanhattan128
769340567699860877093848
T:
sikep751
815456248155910881584732
T:
sikep751comp
48144752?88172348?116255784?
T:
C:edonk192k32n128nu4l6
125995708126269696126436404
T:
oddmanhattan192
259331048260287396260750512
T:
oddmanhattan256