VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems
ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of key-encapsulation mechanisms on one machine: amd64; Haswell+AES (306c3); 2013 Intel Core i7-4770; 4 x 3400MHz; speed2supercop, supercop-20250307

[Page version: 20250326 01:56:31]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for key-encapsulation mechanisms:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol C: means that the current SUPERCOP database does not list IND-CCA2 security as a goal for this key-encapsulation mechanism. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each key-encapsulation mechanism and each implementation. Designers and implementors interested in submitting new key-encapsulation mechanisms and new implementations of existing systems should read the call for submissions.

Test results

Graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

NISTPQC graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

Cycles to generate a key pair
25%50%75%system
190801918819320kyber90s512
245522469225004kyber512
281842829628460
T:
C:nhcompact512cca
293202951229816kyber90s768
303283050835992ntruplus576
35456?37044?45796?timer
379603804038136smaugt1
379763805238140
T:
lightsaber2
407324092041072
T:
C:nhcompact768cca
420484229242528kyber90s1024
428164335243712ntrulpr653
434364352443648
T:
ntrulpr4591761
437044398044108ntruplus768
447764488445672ntrulpr761
480324839648768T!!!newhope512cca
428884972851284kyber768
520045212452640ntruplus864
455325256452848
T:
lac128
535525382054276
T:
C:nhcompact1024cca
566405681657000ntrulpr857
588965964459840ntrulpr1013
596965996860680ntrulpr953
55760?62108?71396?ntruplus1152
613486211263000kyber1024
671046723267436
T:
saber2
559246762869080smaugt3
792607941279612smaugt5
806728096481384ntrulpr1277
898929005690460
T:
hqc128round4
891129073690908
T:
lac256
906089101291348T!!!newhope1024cca
106040106112106240
T:
firesaber2
133012133620135764
T:
lac192
167988168656169056ntruhps2048509
213372213592214096
T:
hqc192round4
227032243860244080C:threebears624r2cpa
234340247724250936threebears624r2cca
261464261824265828
T:
kindi256342
267344268012268492ntruhrss701
273688274500275008
T:
C:hila5
279044279456280028
T:
kindi512222
285484286160286416ntruhps2048677
288660289560308832
T:
kindi512241
403944404532406888
T:
hqcrmrs128
412148417304420028ntruhps4096821
423540430400442896
T:
ntrukem443
443508444424454972
T:
hqc256round4
443120453396465704
T:
hqc128
456196456816457244threebears936r2cca
456876475212489296C:threebears936r2cpa
482200483228503076
T:
hqc1281
581324583848585840
T:
kindi512321
587728589132619440
T:
C:bikel1
695456696140696912
T:
kindi256522
722156735256777604sntrup653
751580763208767104
T:
rqc128
803816818928826780
T:
hqcrmrs192
824648827740892872sntrup761
833788845692863688
T:
C:edonk128k16n80nu4l6
825456869800920888C:threebears1248r2cpa
784768872108930396threebears1248r2cca
887832901044920340
T:
hqc1921
905104912184936420
T:
hqc192
930912949080950700sntrup4591761
940700956712986188
T:
hqc1922
102348410286761036160
T:
C:rolloi128
110466811125961120084
T:
ntrukem743
116296011859881220252sntrup857
120655612076841208884
T:
frodokem640
129944813013801303596
T:
C:rolloi192
1318528?1324008?1882672?
T:
rqc192
132516413428361381436
T:
hqcrmrs256
134556813497841360880
T:
C:edonk128k16n80nu8l6
137257613981801425152
T:
hqc2561
140092414154601417884sntrup953
145691214615041464436
T:
frodokem640aes
144636814880321537060
T:
hqc256
146360814953921527468
T:
hqc2562
148784815250041564248
T:
hqc2563
156042015779961601312
T:
C:edonk128k32n96nu4l4
162865216952161718116sntrup1013
169962417028601707916
T:
C:rolloi256
173254817354601740812
T:
C:bikel3
189463219166801963100
T:
C:edonk192k32n128nu4l6
1899744?1920124?2705240?
T:
rqc256
198813219924202007140
T:
C:edonk128ref
240076024175442449964
T:
C:lake1
256212825710642588740
T:
C:lake2
260532826131922624300sntrup1277
260208826201682640868
T:
frodokem976
267205226825602708128
T:
C:lake3
285064828762202904108
T:
C:edonk192k48n144nu4l4
300813630148523033904
T:
frodokem976aes
393220839364363946948
T:
frodokem640shake
431172843165604329372
T:
rolloii192
427591243376484351868
T:
locker1
445223644573764468416
T:
rolloii128
457776846029924649540
T:
locker2
500862850330285070652
T:
locker3
506096850732845083536
T:
rolloii256
511534851295965142384
T:
frodokem1344aes
547733255591965828996
T:
locker4
634200864399206717120
T:
locker6
690425269388886954788
T:
remblem928
687229269391486963448
T:
remblem1056
724308875015527537972
T:
locker5
763600876412767651744
T:
frodokem976shake
818142481939728260104
T:
sikep434
107468001112732811359916
T:
locker7
115724601161379211686388
T:
lotus128
114555481165544812021216
T:
locker8
121695281220939212239928
T:
locker9
122702241228660012351624
T:
sikep503
132108921329562413399144
T:
frodokem1344shake
138824481391380815086408
T:
sikep434comp
199240081996536021632492
T:
sikep503comp
221345962220550022224440
T:
lotus192
252411042528984025496152
T:
mersenne756839
254277042557686825583852
T:
sikep610
347743323521362835428224mceliece348864pcf
347384843548011235657488mceliece348864f
362443003998326040053980
T:
lotus256
433705444353417647407156
T:
sikep610comp
442681044427503244281636
T:
sikep751
499383605004472850172848
T:
ntskem1264
34707564?56300844?77525840?mceliece348864
45558892?56542192?78331828?mceliece348864pc
690361886910317674744852
T:
sikep751comp
112045980113050736114207056mceliece460896pcf
113365596113711884116091608mceliece460896f
91440764?131670808?198030608?
T:
rsa2048
152782932153029652153232160
T:
ntskem1380
114007180?183490672?220330356?mceliece460896pc
149140380?185428936?262020412?mceliece460896
234085192234556624234766616mceliece6960119f
235060808238238380240165244mceliece6960119pcf
267477144267647640267877456
T:
ntskem13136
273919204274066704277774508mceliece6688128pcf
275238260275497408275809668
T:
oddmanhattan128
275645376276923824276999952mceliece6688128f
300507196301745928303662868mceliece8192128pcf
302191964302452124306333484mceliece8192128f
242351064?385501220?535692584?mceliece6960119
238968448?388059936?547076144?mceliece6960119pc
304409356?393444916?571293728?mceliece8192128pc
443929280445003544446118896
T:
oddmanhattan192
274597528?448147320?624003576?mceliece6688128pc
277243976?449722696?627899184?mceliece6688128
389161716?482029896?664943060?mceliece8192128
785309040795857176797187796
T:
oddmanhattan256
897116952900603032905306376
T:
bigquake1
716471967672495426727341173612
T:
bigquake3
140225230121407709180814139037648
T:
bigquake5
Cycles for encapsulation
25%50%75%system
243602439224440smaugt1
245162469227316timer
239682482426932
T:
rsa2048
247362491625572ntruhps2048509
249122497625268ntruplus576
258642593626016ntruhrss701
307203085631008ntruplus768
316963175231808kyber90s512
351443646038752mceliece348864
361643660037064ntruhps2048677
345923660838544mceliece348864f
370963718439480kyber512
396843984040280ntruplus864
422844267642888ntruhps4096821
437884392044476sntrup4591761
430924430846448mceliece348864pc
445044465645376kyber90s768
442364557647260mceliece348864pcf
449804571645872sntrup653
462444633246612ntruplus1152
484244851648684
T:
C:nhcompact512cca
484444870048960sntrup761
484764870049500smaugt3
507365078050852
T:
lightsaber2
562485630456428kyber768
605646070060900kyber90s1024
602486099661140sntrup857
652926546065672sntrup953
652406586066080sntrup1013
678406796868168
T:
C:nhcompact768cca
687126885269228smaugt5
696647012470348ntrulpr653
735007364873808ntrulpr761
698487508480964mceliece460896
751167552076072
T:
lac128
696927584883204mceliece460896f
763047644876612
T:
ntrulpr4591761
808528126481740T!!!newhope512cca
778648285693940mceliece460896pcf
838248388083948
T:
saber2
782888442094560mceliece460896pc
826728494887824kyber1024
852848545685628sntrup1277
866408690887320
T:
ntskem1264
886088869288840
T:
C:nhcompact1024cca
940849436894548ntrulpr857
9444096652102472
T:
C:edonk128k16n80nu4l6
977809785697952ntrulpr1013
9868899584100180ntrulpr953
116936117440118364
T:
C:bikel1
120868126232133468mceliece6688128
126508126580126700
T:
firesaber2
121088128316136544mceliece6688128f
125844128988135616mceliece6960119f
130244130448130812ntrulpr1277
127428130552135144
T:
ntrukem443
128300132400139596mceliece6960119
131892138872147408mceliece6688128pc
133904140952150108mceliece6688128pcf
140776144180147668mceliece6960119pc
143152144792146288mceliece8192128f
142156145312153036mceliece6960119pcf
144356146056149660mceliece8192128
150048150816151136T!!!newhope1024cca
154948156892158856mceliece8192128pc
155932157432159332mceliece8192128pcf
160140160528160868
T:
lotus128
160008160872161764
T:
C:rolloi128
172232173396175056
T:
C:rolloi192
172220174480180768
T:
lac256
171888175920176756
T:
lac192
200512201564202344
T:
C:rolloi256
201948204568213124
T:
C:edonk128k16n80nu8l6
229268232088240812
T:
lotus192
238728238996244228
T:
hqc128round4
241652243988249388
T:
ntrukem743
275772276552277340
T:
C:bikel3
324752325440326220
T:
ntskem1380
303928330024336768C:threebears624r2cpa
335536336188336824
T:
C:hila5
338064339956342076
T:
C:edonk128k32n96nu4l4
341668342384343028
T:
kindi256342
318052353832359428threebears624r2cca
370032373688381164
T:
C:edonk128ref
296024?376920?383552?
T:
lotus256
380036381388392912
T:
ntskem13136
403160403812404428
T:
kindi512222
414964415616417168
T:
kindi512241
444656452216461448
T:
C:lake1
491728495116510440
T:
C:lake2
501452504248508284
T:
C:edonk192k32n128nu4l6
513796515188518104
T:
rolloii128
538088539336542268
T:
rolloii192
545112547572550424
T:
C:lake3
548420548920549564
T:
hqc192round4
555100562640578588
T:
hqcrmrs128
573696574540575520threebears936r2cca
578304583972646996C:threebears936r2cpa
589624592052595504
T:
rolloii256
599224612544624496
T:
hqc128
717940722536732824
T:
C:edonk192k48n144nu4l4
718744736384754032
T:
hqc1281
741396759508784108
T:
locker2
743572760876767772
T:
locker1
759916761472770976
T:
kindi512321
835140839572842396
T:
kindi256522
838684856004861572
T:
locker3
9440929621481007168
T:
locker4
96920810136201023512C:threebears1248r2cpa
102927210370641040572
T:
rqc128
103606410560401084088
T:
locker6
106860410707321071872
T:
hqc256round4
93794410786681123952threebears1248r2cca
113748011713481186416
T:
hqcrmrs192
119830412159721222360
T:
locker5
124593612488801284580
T:
hqc192
135282813671161397044
T:
hqc1921
146016414763881496108
T:
hqc1922
172113217218841724360
T:
frodokem640
185186418614241874252
T:
locker8
186248018878561904280
T:
locker7
188774418929241898632
T:
frodokem640aes
1884772?1898160?2446188?
T:
rqc192
188923619048561942376
T:
hqcrmrs256
201478020727442084056
T:
locker9
205256820835922140356
T:
hqc256
217827622203642237000
T:
hqc2561
232886423526482389912
T:
hqc2562
238193224215562442512
T:
hqc2563
238754824359362499512
T:
bigquake1
341995634230283436800
T:
frodokem976
2688224?3468876?3487248?
T:
rqc256
366190036641043677792
T:
frodokem976aes
428802042904244302604
T:
frodokem640shake
620270862155806248252
T:
frodokem1344aes
689458871034727279288
T:
bigquake3
8058332?8166208?12773568?
T:
frodokem976shake
101775361019960010222232
T:
remblem1056
102371961032147210694920
T:
remblem928
105838161086901611126256
T:
bigquake5
132283641324124813246132
T:
sikep434
141629321417469614254836
T:
frodokem1344shake
202045202026483620289704
T:
sikep503
217043482178610821895728
T:
sikep434comp
275448762757245227705720
T:
mersenne756839
310255523115602831305372
T:
sikep503comp
466723404668601246701556
T:
sikep610
592486165944790459790624
T:
oddmanhattan128
639423926412138464423760
T:
sikep610comp
714028567141763271434472
T:
sikep751
110562404110682996111234848
T:
sikep751comp
113667068113863436114129844
T:
oddmanhattan192
235614620236143328236793620
T:
oddmanhattan256
Cycles for decapsulation
25%50%75%system
189201894818980ntruplus576
227402279223080ntruplus768
234122347223520kyber90s512
291002916029332ntruplus864
297242978429832kyber512
338443400834504kyber90s768
357083576035800ntruplus1152
384003847638548smaugt1
387083877639864timer
387323888438944ntruhps2048509
471004717247252
T:
C:nhcompact512cca
474924761247708kyber90s1024
505885063250664
T:
lightsaber2
459365184453212kyber768
539565411254364
T:
C:hila5
591965943259580sntrup761
601326030861304ntruhps2048677
616766182061960sntrup653
619366204062172ntruhrss701
660126615667204smaugt3
675766768067804
T:
C:nhcompact768cca
68160?68268?86020?kyber1024
767007779278564ntruhps4096821
827048277282860
T:
saber2
842208456484984ntrulpr653
855248560485736sntrup857
880208811688240
T:
C:nhcompact1024cca
884488860088812ntrulpr761
889808934489492T!!!newhope512cca
900889021290284sntrup953
915009160491756sntrup1013
922969263292772sntrup4591761
933329428894472smaugt5
101340101712112076
T:
lac128
107800108052108600
T:
ntrulpr4591761
116144116268116572ntrulpr857
117160117296117492sntrup1277
118564118644118732ntrulpr1013
120996121420122176ntrulpr953
124224124392124592mceliece348864f
124328124564124724mceliece348864
125472125612126072
T:
firesaber2
131176131492132392C:threebears624r2cpa
131712132076133220mceliece348864pc
131684132796133328mceliece348864pcf
134260134704135516
T:
ntrukem443
158488158772158892ntrulpr1277
163236163412165052T!!!newhope1024cca
181360184408199032C:threebears936r2cpa
186396186612186892
T:
lotus128
215636217644220572
T:
lac192
219140226924248444C:threebears1248r2cpa
250656250780250980mceliece460896
250276254336254700mceliece460896f
257612258588259780mceliece460896pcf
257756258756259076mceliece460896pc
271896272488282604
T:
lotus192
279992281272286768mceliece6960119
281728282676282936mceliece6960119f
291584292440292740mceliece6960119pcf
294492294884295244mceliece6960119pc
295332295604296512mceliece6688128
295792296788299196mceliece8192128f
295616296956300648mceliece8192128
297952298664300064mceliece6688128f
304756305192305712mceliece6688128pcf
307172308424309420mceliece6688128pc
309620310128311100mceliece8192128pcf
311244311480311876mceliece8192128pc
311352314044318852
T:
ntrukem743
283704?375664?405628?
T:
lac256
386960387380388292
T:
ntskem1264
414048414328414620
T:
hqc128round4
427664427968428744
T:
kindi256342
380216437844473240
T:
lotus256
534900535784537248
T:
kindi512222
547104547660548532
T:
kindi512241
719728720632722268
T:
ntskem1380
722636749268761768threebears624r2cca
874156875152876492
T:
hqc192round4
924564944132947408
T:
hqcrmrs128
943456946312951344
T:
hqc128
953964956076962108
T:
kindi512321
973384977924994872
T:
kindi256522
104336810476361050620
T:
C:rolloi128
122826412296401232560
T:
C:rolloi192
124650012477041251620threebears936r2cca
131434413182361326568
T:
hqc1281
138900813932281400184
T:
ntskem13136
170761217109521713772
T:
frodokem640
170453217277081732652
T:
hqcrmrs192
173273217373041745988
T:
rolloii128
173850817613961764332
T:
hqc256round4
176408417882401868452
T:
hqc192
180832418112081813064
T:
frodokem640aes
180978018118001815296
T:
C:bikel1
184998018551841865748
T:
C:lake1
192498819307761935288
T:
rolloii192
207472420792122086084
T:
C:rolloi256
198005621333922141228threebears1248r2cca
217347221833482205308
T:
hqc1921
224061622727882286392
T:
hqc1922
913284?2308080?3999976?
T:
C:edonk128k32n96nu4l4
246994824774402485132
T:
rolloii256
262290426314282645332
T:
rsa2048
278388828039682834308
T:
hqcrmrs256
286831628931362910104
T:
hqc256
310462831141283130296
T:
C:lake2
316646031860163194668
T:
hqc2561
342958034343643446552
T:
frodokem976
347310434803683489632
T:
frodokem976aes
341513235218123550136
T:
bigquake1
348965235324963557292
T:
hqc2562
352126835358483576880
T:
hqc2563
359461236085323639432
T:
rqc128
367923237106723743372
T:
locker1
374311238332963870392
T:
locker2
419150441933604207028
T:
frodokem640shake
420878842215844240156
T:
C:lake3
422318042469964275516
T:
locker4
2474440?4541664?6660392?
T:
C:edonk192k48n144nu4l4
550694855299245566396
T:
locker3
574788857669725802164
T:
C:bikel3
596733659809566027292
T:
frodokem1344aes
594780859915046071816
T:
locker6
627340862919926323216
T:
locker5
689289669170966944308
T:
locker7
694035669688246991240
T:
locker8
734800073669808522324
T:
rqc192
7887552?7897900?11303840?
T:
frodokem976shake
949277695276689559244
T:
locker9
115851921317334813197832
T:
rqc256
137094321377425213790284
T:
remblem1056
137790401386708414342064
T:
remblem928
13910040?14013816?17452732?
T:
frodokem1344shake
142105321423394814242424
T:
sikep434
158581521586630415880452
T:
sikep434comp
12195916?17331100?118225060?
T:
C:edonk128ref
19575992?21401368?159893704?
T:
C:edonk128k16n80nu8l6
215224282153629621578904
T:
sikep503
230264602304470423068068
T:
sikep503comp
286965522928267629930256
T:
bigquake3
397219523975034439986740
T:
mersenne756839
447450204477097645463464
T:
bigquake5
470138844710598447132636
T:
sikep610
496589324987824049996968
T:
sikep610comp
15992572?60246268?61740968?
T:
C:edonk128k16n80nu4l6
650689646518493265282676
T:
oddmanhattan128
769340567699860877093848
T:
sikep751
815456248155910881584732
T:
sikep751comp
48144752?88172348?116255784?
T:
C:edonk192k32n128nu4l6
125995708126269696126436404
T:
oddmanhattan192
259331048260287396260750512
T:
oddmanhattan256