VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems
ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of key-encapsulation mechanisms on one machine: amd64; Skylake (506e3); 2015 Intel Core i5-6500T; 4 x 2500MHz; thinksky, supercop-20251222

[Page version: 20260217 20:24:27]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for key-encapsulation mechanisms:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol C: means that the current SUPERCOP database does not list IND-CCA2 security as a goal for this key-encapsulation mechanism. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each key-encapsulation mechanism and each implementation. Designers and implementors interested in submitting new key-encapsulation mechanisms and new implementations of existing systems should read the call for submissions.

Test results

Graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

NISTPQC graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

Cycles to generate a key pair
25%50%75%system
168401698317192kyber90s512
197491980423715ntruplus576
225492268822920mlkem512
226232281423015kyber512
244372452124662ntruplus768
249232519125388kyber90s768
271042714827246ntruplus864
276522779327966
T:
C:nhcompact512cca
342943459434864
T:
lac128
349523499435091
T:
lightsaber2
355333578436039kyber90s1024
370843727037478smaugt1
372513731737465timer
384163858638872
T:
C:nhcompact768cca
385433868239217mlkem768
386983885439290kyber768
387973886338986
T:
ntrulpr4591761
382283900839211ntrulpr653
398663993740732ntrulpr761
354764082044099ntruplus1152
455034567145972T!!!newhope512cca
505915073650878ntrulpr857
506265089451296
T:
C:nhcompact1024cca
532025342154291ntrulpr953
538085401854508mlkem1024
533885407454455ntrulpr1013
539515423254575kyber1024
562015656257002smaugt3
633436351763782
T:
saber2
698687001070207ntrulpr1277
760407634776849smaugt5
805868103382547
T:
hqc128round4
818888201582261
T:
lac256
879018819188665T!!!newhope1024cca
896609000190325
T:
lac192
982559833198439
T:
firesaber2
158440158832159535ntruhps2048509
164825166070166999
T:
C:hila5
186721186901191664threebears624r2cca
186032190821203717C:threebears624r2cpa
191605192565192984
T:
hqc192round4
255155255938256859
T:
kindi256342
258273258793259254ntruhrss701
271447272264272889
T:
kindi512222
272442273562275328ntruhps2048677
273678274235274964
T:
kindi512241
357319358256362138
T:
hqcrmrs128
388989389340430324threebears936r2cca
391437392295393585ntruhps4096821
392960394066404813
T:
hqc256round4
390149402582410463C:threebears936r2cpa
400863406708422923
T:
hqc128
416599420998424972
T:
ntrukem443
429955431874448528
T:
hqc1281
589165589853591106
T:
C:bikel1
608273609879611254
T:
kindi512321
621423630038633665sntrup653
646274649330654196
T:
kindi256522
674680683114716454C:threebears1248r2cpa
663234695549734661threebears1248r2cca
716687719674722619sntrup761
732191733886739437
T:
hqcrmrs192
748855754068768863
T:
rqc128
784527793005814109
T:
hqc1921
822931827010846263
T:
hqc192
832350858246863876
T:
hqc1922
845285859273876615
T:
C:edonk128k16n80nu4l6
858966866984889790sntrup4591761
942748945262948748
T:
C:rolloi128
942615948973953838
T:
ntrukem743
104900010568681069018sntrup857
109498410956891097033
T:
frodokem640
117268312066431214075
T:
hqcrmrs256
120948112164501247964
T:
hqc2561
125387512888701312977
T:
hqc2562
128708712893561323456sntrup953
129704912992181301800
T:
C:rolloi192
1304081?1308234?1876938?
T:
rqc192
131531613458951355110
T:
hqc256
134533013468871351185
T:
frodokem640aes
137584013803471386806
T:
hqc2563
137800613843321390702
T:
C:edonk128k16n80nu8l6
141673314535041457276sntrup1013
157764415979631616169
T:
C:edonk128k32n96nu4l4
164654516505251654259
T:
C:bikel3
172999617325011735642
T:
C:rolloi256
185791218624131875303
T:
rqc256
189150719167161947661
T:
C:edonk192k32n128nu4l6
199387419990622008466
T:
C:edonk128ref
216974722020142259746sntrup1277
240504524168982437240
T:
C:lake1
242626524354192443427
T:
frodokem976
256348925681402572773
T:
C:lake2
270671227116102717775
T:
C:lake3
287194928898462916608
T:
C:edonk192k48n144nu4l4
288456928934502902219
T:
frodokem976aes
341152035028013553463
T:
frodokem640shake
382950638357933841864
T:
rolloii128
426063942882914305045
T:
locker1
435037143583564374346
T:
rolloii192
476308847793924885304
T:
locker2
480088748060364814226
T:
frodokem1344aes
509697251060065164196
T:
rolloii256
518597652007285609216
T:
locker3
565764356746795719773
T:
locker4
588295958894205977377
T:
sikep434
649897865276436611606
T:
remblem1056
652760065356016543928
T:
locker6
648813765631816598971
T:
remblem928
726557872873237306916
T:
frodokem976shake
770376977254647744742
T:
locker5
809524081210208135598
T:
sikep503
9549804963005210073119
T:
lotus128
9593074974309410501666
T:
sikep434comp
110774871108713511102152
T:
locker7
118871811190130311922481
T:
locker8
127013521271257512726946
T:
locker9
127778041279243313314131
T:
frodokem1344shake
131727361326075414505376
T:
sikep503comp
147252881472863914900173
T:
sikep610
176178331778875117889366
T:
lotus192
199921232004965320435610
T:
mersenne756839
249912562502219925070918
T:
sikep751
255603242567203027752749
T:
sikep610comp
304737223054598430879220
T:
lotus256
300424823063531031631971mceliece348864f
308905363117989531555879mceliece348864pcf
392257503936692942506559
T:
sikep751comp
30143450?41263482?69893816?mceliece348864pc
428906864306290843350727
T:
ntskem1264
39811711?49784693?61078111?mceliece348864
49505430?76263589?128749935?
T:
rsa2048
990611209955945399880091mceliece460896pcf
99805116100212100101673577mceliece460896f
102162934104034587105334801
T:
ntskem1380
96350027?136776206?197849871?mceliece460896pc
101796984?161677112?196870648?mceliece460896
186263851189926193190926142mceliece6960119pcf
187001939190739963191386634mceliece6960119f
230252227232109807233542595mceliece6688128f
232213336232578096233362804mceliece6688128pcf
240866292241934137244170666mceliece8192128f
239713455243197655244779919mceliece8192128pcf
248321295249220698251222218
T:
oddmanhattan128
252438149253443487254472560
T:
ntskem13136
237574769?308992813?448131782?mceliece6688128pc
191833297?315566929?384920213?mceliece6960119pc
191990035?317647101?387426024?mceliece6960119
236718566?380851303?590646827?mceliece6688128
312354536?385169276?531486593?mceliece8192128pc
251518975?387779025?528467586?mceliece8192128
397873395398392546399566132
T:
oddmanhattan192
703512102704611316706319216
T:
oddmanhattan256
861358079868222724877220430
T:
bigquake1
717514178874387292157660548478
T:
bigquake3
129927805401343233091513576860773
T:
bigquake5
Cycles for encapsulation
25%50%75%system
142721508815494
T:
rsa2048
216732178621972smaugt1
219572198722057timer
219452203222783ntruhps2048509
223652241522457ntruplus576
236522372923829ntruhrss701
242752433724540mlkem512
277152785627982ntruplus768
288222887128940kyber90s512
318223189532141ntruplus864
321153243033015ntruhps2048677
314463273035161mceliece348864f
312113279135449mceliece348864
344043454635042kyber512
378883800038672ntruhps4096821
383893863139024mlkem768
386643935739495sntrup653
393703947939645kyber90s768
397374006640312sntrup4591761
390594058643144mceliece348864pc
398384091742960mceliece348864pcf
419194200242512ntruplus1152
423454246142626sntrup761
453634546245846smaugt3
461014625446358
T:
C:nhcompact512cca
465694663846706
T:
lightsaber2
517675193252194kyber768
515585228452416sntrup857
528905294853153kyber90s1024
551595531256914mlkem1024
564455652956878sntrup953
566685745957622sntrup1013
619826208062350smaugt5
624196255062674ntrulpr653
648426488264960
T:
C:nhcompact768cca
648456496065076ntrulpr761
634466835878056mceliece460896f
681726841968656
T:
ntrulpr4591761
628996842977812mceliece460896
677526982670832
T:
lac128
722937262073276kyber1024
732057332273440sntrup1277
691387497582912mceliece460896pc
768267705477683T!!!newhope512cca
787297876378818
T:
saber2
709657990488674mceliece460896pcf
792038033794103
T:
ntskem1264
830728320683457ntrulpr857
840358428584539
T:
C:nhcompact1024cca
867348693787159ntrulpr953
875588764587753ntrulpr1013
100794104202112205
T:
C:edonk128k16n80nu4l6
101764106097113138mceliece6688128
106951107366108178
T:
C:bikel1
102279108046118528mceliece6688128f
112522112654112831ntrulpr1277
110200113065118770mceliece6960119
116776116815116906
T:
firesaber2
112365117689124884mceliece6960119f
113943119646128314mceliece6688128pcf
120064122393125305mceliece8192128
119776123446132499mceliece8192128f
122730125244128497
T:
ntrukem443
123608126570132823mceliece6960119pcf
124055127728132358mceliece6960119pc
132371134385136934mceliece8192128pc
135227136924141204mceliece8192128pcf
138434138820139337
T:
lac192
124491140361155158mceliece6688128pc
139726140692156192
T:
lotus128
145314146582148264T!!!newhope1024cca
157262157979158787
T:
C:rolloi128
162420165623168141
T:
lac256
179380180154181058
T:
C:rolloi192
207124207983209609
T:
C:rolloi256
206300208642210970
T:
lotus192
217049217715221336
T:
hqc128round4
223491224382225562
T:
C:hila5
227051229102232687
T:
ntrukem743
235485239009248798
T:
C:edonk128k16n80nu8l6
251287251924252985
T:
C:bikel3
256799262613265886threebears624r2cca
259207266671277995C:threebears624r2cpa
293332296984302056
T:
lotus256
294432297527304588
T:
C:edonk128k32n96nu4l4
305332307619314783
T:
ntskem1380
334667335201335968
T:
kindi256342
324153374274380431
T:
ntskem13136
393563394174395604
T:
kindi512222
395063395492396563
T:
kindi512241
434167438412447820
T:
C:edonk128ref
446821449938457353
T:
C:lake1
488662489839550412threebears936r2cca
495325495754497079
T:
hqc192round4
494108496322498120
T:
C:lake2
506267508074527710
T:
hqcrmrs128
492376509751517958C:threebears936r2cpa
528267530919534204
T:
rolloii128
535801538458541917
T:
rolloii192
546978551318569892
T:
hqc128
557729559629562200
T:
C:lake3
591261592948604248
T:
rolloii256
606341609744613171
T:
C:edonk192k32n128nu4l6
652284671336675542
T:
hqc1281
759373769073773719
T:
locker1
768281774023795221
T:
locker2
774672778568783281
T:
kindi256522
793570794649796043
T:
kindi512321
817587823052873247C:threebears1248r2cpa
819641826675835019
T:
C:edonk192k48n144nu4l4
790897844196892103threebears1248r2cca
872970876538953343
T:
locker3
954447955492956656
T:
hqc256round4
99697010003631006438
T:
locker4
102223410267801056384
T:
rqc128
103853410519661073091
T:
hqcrmrs192
108339010872621091097
T:
locker6
113166011605211170512
T:
hqc192
118067511965431212201
T:
hqc1921
126529612680811273099
T:
locker5
125336112781441293425
T:
hqc1922
163137116328291633991
T:
frodokem640
171057617289511763393
T:
hqcrmrs256
181322318166761818445
T:
frodokem640aes
182474018619401893304
T:
hqc2561
186008618685651888898
T:
locker7
186609318722071911626
T:
hqc256
1868920?1887372?2437255?
T:
rqc192
190811819208961931879
T:
locker8
193560819740371994773
T:
hqc2562
206076020634762068074
T:
locker9
209211221013952142268
T:
hqc2563
235951224254192479650
T:
bigquake1
256538925685562573770
T:
rqc256
327018332896493305571
T:
frodokem976
353872135442333547815
T:
frodokem976aes
369660737570443775403
T:
frodokem640shake
592288859269535934140
T:
frodokem1344aes
694191471519457332941
T:
bigquake3
761611176228557640968
T:
frodokem976shake
961971796276329634951
T:
sikep434
969905397075209829867
T:
remblem1056
963877598124629828688
T:
remblem928
105450621092819411151699
T:
bigquake5
133055871337885013423169
T:
sikep503
134307991352780614098671
T:
frodokem1344shake
150051651507800015197633
T:
sikep434comp
192217271928953519389317
T:
mersenne756839
205504612058023420664567
T:
sikep503comp
270309602705067227705124
T:
sikep610
375137513771063037852514
T:
sikep610comp
404086284044126540612619
T:
sikep751
530098645319914853414709
T:
oddmanhattan128
628236546303847263289063
T:
sikep751comp
102428529102632372102855514
T:
oddmanhattan192
211291322212121168212939001
T:
oddmanhattan256
Cycles for decapsulation
25%50%75%system
205142056320620kyber90s512
213142136721452ntruplus576
257932600026072mlkem512
265082654126596ntruplus768
270222716627276kyber512
284692850028568kyber90s768
309173100231133ntruplus864
332093329933406smaugt1
349373504235223timer
377393775737795ntruhps2048509
396223968139756kyber90s1024
401474026441322mlkem768
410144120641351kyber768
412254138341506ntruplus1152
447884488945208
T:
C:nhcompact512cca
456384568045717
T:
lightsaber2
469174716648032
T:
C:hila5
504815058050861sntrup761
528945298653086sntrup653
577885792658036ntruhps2048677
578565794358050ntruhrss701
578905817359947mlkem1024
588545889958990kyber1024
611336162762387smaugt3
640786417464256
T:
C:nhcompact768cca
705407080071558ntruhps4096821
722137233472538sntrup857
764617651676568
T:
saber2
770817720777433ntrulpr653
771677724477362sntrup953
778687793578052sntrup1013
795437972179978ntrulpr761
827208287483184smaugt5
834088359383738
T:
C:nhcompact1024cca
844498478685544T!!!newhope512cca
852078591486554sntrup4591761
8762689506105024
T:
lac128
972669738797584sntrup1277
980709836698653
T:
ntrulpr4591761
103438103664103912ntrulpr857
107059107214107411ntrulpr1013
107197107504108132ntrulpr953
114789114876114966
T:
firesaber2
117648118272118646mceliece348864
118095118274119817mceliece348864f
116886121847122652C:threebears624r2cpa
126007126173126851mceliece348864pcf
125556126343132350mceliece348864pc
134697135545135894
T:
ntrukem443
136943137203137623ntrulpr1277
159374159835161738T!!!newhope1024cca
160896166580166797C:threebears936r2cpa
172950176735189202
T:
lotus128
192940193629206405C:threebears1248r2cpa
193345193777194564
T:
lac192
236375236880237160mceliece460896
237372239633241639mceliece460896f
244949245395247590mceliece460896pcf
246791247582248613
T:
lotus192
252270252544253402mceliece460896pc
266643267648270456
T:
ntrukem743
267856268766269839mceliece6960119
268866269705274927mceliece6960119f
279941280495281324mceliece6960119pc
281771282141283028mceliece6960119pcf
286129286768287782mceliece6688128
287374288308290934mceliece6688128f
288223288766289716mceliece8192128
289101289667294908mceliece8192128f
297861298422299344mceliece6688128pcf
300110300476301120mceliece8192128pc
300845301451303224mceliece8192128pcf
228043?303875?317433?
T:
lac256
295793309518329383mceliece6688128pc
313952314552315114
T:
ntskem1264
355120361566370278
T:
lotus256
374991376294382013
T:
hqc128round4
415942417265418316
T:
kindi256342
521899522482524096
T:
kindi512241
521021522550524835
T:
kindi512222
582288582847583994
T:
ntskem1380
579083583078584415threebears624r2cca
797279798018799074
T:
hqc192round4
833588842769879568
T:
hqc128
850213850876852377
T:
hqcrmrs128
894446895973900710
T:
kindi256522
996097997983999863
T:
kindi512321
107901910809471120431threebears936r2cca
112725911302301135316
T:
C:rolloi128
116794411906271193560
T:
hqc1281
120644912096341216218
T:
ntskem13136
136286213653711368921
T:
C:rolloi192
155107715529431556056
T:
hqcrmrs192
155932515606311566880
T:
C:bikel1
156426015665411571725
T:
hqc256round4
159980516112331645970
T:
hqc192
162650316297671639302
T:
frodokem640
170437417223741835844threebears1248r2cca
174485317472601756574
T:
frodokem640aes
182243418361201841769
T:
rolloii128
187598018888241891547
T:
hqc1921
190507519088971960599
T:
hqc1922
192547919279831932082
T:
C:lake1
199266619990392009972
T:
rolloii192
208853720913742103115
T:
rsa2048
218679221907272196637
T:
C:rolloi256
244327824871532517346
T:
hqcrmrs256
255740025677322583080
T:
rolloii256
259515626153362666541
T:
hqc256
268860227521542758551
T:
hqc2561
284497928758862906992
T:
hqc2562
309494931514523158371
T:
hqc2563
320156032618413278032
T:
bigquake1
326323632753093288626
T:
C:lake2
327613332954723302103
T:
frodokem976
338932033914043395504
T:
frodokem976aes
2301853?3531454?5641447?
T:
C:edonk192k48n144nu4l4
354412035531203608355
T:
rqc128
358135035967383619710
T:
frodokem640shake
377820238197263851147
T:
locker1
391448339240724057233
T:
locker2
430343943163774342653
T:
locker4
445283144679094485860
T:
C:lake3
487824548842444894618
T:
C:bikel3
3101152?5279581?8160060?
T:
C:edonk128k32n96nu4l4
573799857484465750039
T:
frodokem1344aes
584141458573976365853
T:
locker3
630288663193366335686
T:
locker6
658968265982066608319
T:
locker5
690472869167398044712
T:
rqc192
705565870752797090700
T:
locker7
721208872252527253404
T:
locker8
738478074032307416283
T:
frodokem976shake
978010597967829817482
T:
locker9
102654161033816510365987
T:
sikep434
108808461090342910932121
T:
rqc256
109108521096215911016605
T:
sikep434comp
129479981305497313217477
T:
remblem1056
129539671309903513205504
T:
remblem928
131537591316574513715043
T:
frodokem1344shake
141582211421972014229842
T:
sikep503
150648661507353215121390
T:
sikep503comp
272571512744666627483077
T:
sikep610
284590002852348428845949
T:
mersenne756839
290132252904759029145796
T:
bigquake3
290351282905301729069405
T:
sikep610comp
21729121?35674943?112582983?
T:
C:edonk128k16n80nu4l6
435378704359410943764761
T:
sikep751
435911214361086943935689
T:
bigquake5
459511824598808546140002
T:
sikep751comp
42718979?53825590?176231777?
T:
C:edonk192k32n128nu4l6
575070445767753458020368
T:
oddmanhattan128
34216281?59011050?68204549?
T:
C:edonk128ref
40315627?80072714?122664894?
T:
C:edonk128k16n80nu8l6
112255665112459459112720081
T:
oddmanhattan192
231978348232899824233858741
T:
oddmanhattan256