VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems
ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of key-encapsulation mechanisms on one machine: armeabi; Cortex-A9+NEON (412fc09a); 2011 Freescale i.MX6 Quad; 4 x 1200MHz; unstable; novena, supercop-20220506

[Page version: 20241120 00:41:14]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for key-encapsulation mechanisms:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol C: means that the current SUPERCOP database does not list IND-CCA2 security as a goal for this key-encapsulation mechanism. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each key-encapsulation mechanism and each implementation. Designers and implementors interested in submitting new key-encapsulation mechanisms and new implementations of existing systems should read the call for submissions.

Test results

Graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

NISTPQC graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

Cycles to generate a key pair
25%50%75%system
257421258478260852
T:
C:r5nd1kem0d
265871267281270600
T:
C:r5nd0kem2iot
305471307457309449
T:
C:r5nd1kem5d
312426312769313763threebears624r2cca
318081319731324219
T:
C:r5nd1kem4longkey
320737321400321734C:threebears624r2cpax
325225325388326049threebears624r2ccax
329039329701330365C:threebears624r2cpa
479445480110486750kyber512
591675594311658468
T:
newhope512cca
627648628850630517threebears936r2cca
634502635833638485C:threebears936r2cpa
632509?638485?795533?
T:
C:r5nd3kem5d
645790646457649113threebears936r2ccax
680655683309686453C:threebears936r2cpax
756154758678767508kyber90s512
824089837038888500kyber768
899127908756919712
T:
C:hila5
100723910149001026512
T:
C:r5nd3kem0d
106281910664711076765threebears1248r2cca
107443410767581094484C:threebears1248r2cpa
108173810830681094029threebears1248r2ccax
120226612055841216541C:threebears1248r2cpax
120947912126471240642
T:
newhope1024cca
126519412895871325919
T:
C:r5nd5kem5d
129224312963421315351kyber1024
138611514054651438128
T:
C:r5nd5kem0d
135632314230611500091kyber90s768
164585116717491777000
T:
kindi256342
173119517504561762613
T:
ntrulpr653
180589018969871983849
T:
kindi512241
184473719680082084705
T:
kindi512222
222727622410052265312
T:
ntrulpr761
228965223265022507458kyber90s1024
242445524387272461309
T:
hqc1281
240685625061292581497
T:
lima2p1024cca
279835328073512826624
T:
ntrulpr857
318807134222323461835
T:
ntrulpr953
312309638267413860508
T:
ntrulpr1013
361178039547594071192
T:
kindi512321
438208144056454423243
T:
kindi256522
477455049690965099249
T:
lima2p2048cca
513644254229755505351
T:
limasp1018cca
544488554724225540177
T:
hqc1921
570473357348325778924
T:
ntrukem443
591702959472405970152
T:
hqc1922
608487761000236150618
T:
ntrulpr1277
8560078?9116359?10721597?
T:
limasp1822cca
984789398887149937208
T:
hqc2561
9601517?10210447?12076768?
T:
limasp1306cca
104624751059827212533361
T:
hqc2562
109003961093094711007645
T:
hqc2563
14858284?14887433?18703667?
T:
ntrulpr4591761
157991041586722219240233
T:
ntrukem743
244553472610717426379089
T:
limasp2062cca
260205022631236726439909
T:
frodokem640
271839192721319627462504
T:
frodokem640aes
293154242956466130254091
T:
C:r5n11kem0d
521044215216662652250724ntruhps2048509
603931036153672972249175
T:
frodokem976
615512086160279963615113
T:
frodokem976aes
633424856375533076485504
T:
frodokem640shake
699633277004861470183744ntruhps2048677
73156869?74018668?91842522?
T:
C:r5n13kem0d
74876491?74987644?94082859?ntruhrss701
843769588441789984492890
T:
sntrup653
844444638447861384635937sntrup653
993883589956822399671928
T:
ntruhps2048677
101828698?101971815?127907642?
T:
ntruhps4096821
101807312?102035186?127955455?ntruhps4096821
111509080114692612114850657
T:
sntrup761
114762596115002393138202492sntrup761
99051218115610651119289935
T:
sntrup4591761
116710663116865386127699957
T:
frodokem1344aes
142947987143355382172255944
T:
frodokem976shake
146649748147056469147269307
T:
sntrup857
147118807147347667172336077sntrup857
135142310?155592170?172004963?
T:
C:r5n15kem0d
162366154?162925949?204274852?
T:
sikep434
147924310174087915181556118
T:
lotus128
179601188181682577181841144
T:
sntrup953
161362935?202447628?202672079?
T:
sntrup1013
202557900202699010203144436sntrup1013
181938315212818432219236129sntrup953
248257849248486804249356720
T:
sikep503
249775609262235503278121933
T:
frodokem1344shake
279592515311865985325539179
T:
sikep434comp
330679912366499833410947105
T:
ntskem1264
375321898414770712454116186
T:
lotus192
396463282429962026464330263
T:
sikep503comp
460787613461239345476776594
T:
sikep610
678986457740897880808337366
T:
lotus256
780002664800819044881627516
T:
sikep610comp
850951866852204103860453005
T:
sikep751
98511799110068027671103159066mceliece348864f
824778674?1126340223?1447593035?mceliece348864
115280108412566046461275485295
T:
ntskem1380
132016662714276109611497209799
T:
sikep751comp
2601615985?2697238295?3264416840?
T:
ntskem13136
363882998040585726164090279409mceliece460896f
488198035249418323845940500829
T:
sntrup1277
4009800515?5215429159?7372312504?mceliece460896
821631447783460134908631391178mceliece6960119f
9268473747983000537811415319869mceliece6688128f
7823584866?10031182755?15657815319?mceliece6960119
109885871241116463443713652682936mceliece8192128f
11749119516?15358583188?27534568790?mceliece6688128
14945631231?20291992079?26746455489?mceliece8192128
Cycles for encapsulation
25%50%75%system
406857408703412136
T:
C:r5nd1kem0d
416360418476424992
T:
C:r5nd0kem2iot
426655427232427652threebears624r2ccax
427980428313430969threebears624r2cca
431635432300433625C:threebears624r2cpax
456535456868457863C:threebears624r2cpa
486089488174513520
T:
C:r5nd1kem5d
504810507004513522
T:
C:r5nd1kem4longkey
466260?573188?597646?mceliece348864
570088578721607938mceliece348864f
640146641807654091kyber512
785241785907792877threebears936r2ccax
784909787237793874threebears936r2cca
767772?788366?1270993?
T:
ntskem1264
777805789949814504
T:
ntrukem443
797857799185807818C:threebears936r2cpa
710867847265849325C:threebears936r2cpax
906429917718968163kyber90s512
942025?954170?1184677?
T:
newhope512cca
942953?970809?1181348?
T:
C:r5nd3kem5d
9348969791431060041mceliece460896
927348?988107?1183671?mceliece460896f
108074310940251163750kyber768
103924112334771250408
T:
C:hila5
126070712626991272328threebears1248r2ccax
126236012673421272328threebears1248r2cca
128050512844991290099C:threebears1248r2cpa
133911213470321357594ntruhps2048509
142073714263811431702C:threebears1248r2cpax
144065814466351731521sntrup653
1301357?1611984?1627258?kyber1024
157408916272561698443kyber90s768
165680616637801672744
T:
sntrup653
149594016956571778993
T:
lima2p1024cca
1511519?1700819?2201929?mceliece6960119
1787682?1834165?2247483?
T:
ntrukem743
186900018922341901210
T:
C:r5nd3kem0d
186399519011801939361
T:
C:r5nd5kem5d
190914719339652384607
T:
newhope1024cca
191177120812712229221mceliece6960119f
203199521607432261334mceliece6688128f
216281521721102175430
T:
sntrup761
215949821754322306914
T:
kindi256342
226175622707212273712sntrup761
226582322829862292771
T:
ntruhps2048677
1939029?2300602?2508121?mceliece6688128
1857649?2319155?2329715?ntruhps2048677
2336582?2342126?2943430?ntruhrss701
2370904?2418162?2966288?
T:
ntskem1380
251426826003583056295mceliece8192128f
254730426120442746848kyber90s1024
264602926924812736223
T:
C:r5nd5kem0d
270368327113342718293
T:
sntrup857
236003928138292828525sntrup857
263130728867972961253
T:
kindi512241
273058229493823074517
T:
kindi512222
3227649?3238236?4037102?
T:
ntruhps4096821
274485632970293310958
T:
sntrup953
3338829?3357283?4186846?ntruhps4096821
337682233837123389256
T:
ntrulpr653
3375505?3585212?4452793?
T:
lima2p2048cca
2858302?3665563?3779449?mceliece8192128
2977622?3716048?3723686?
T:
sntrup1013
312104137379483788078
T:
lotus128
382927138412043872745sntrup1013
343447041255374136739sntrup953
437798943930374424752
T:
ntrulpr761
431766645414464600547
T:
limasp1018cca
4379833?4600850?5983768?
T:
ntskem13136
475361548054075894779
T:
lotus192
475593551951265450532
T:
kindi512321
547367454852915495323
T:
ntrulpr857
556010955866605627834
T:
hqc1281
568494258675536091006
T:
kindi256522
648043067061226768215
T:
ntrulpr953
687113168858866907457
T:
lotus256
694057473883477458840
T:
limasp1822cca
747019775106477555794
T:
ntrulpr1013
8186433?10895421?11013953?
T:
limasp1306cca
12043562?12077347?15063124?
T:
ntrulpr1277
136977101374087913795657
T:
hqc1922
126295841514396915319581
T:
hqc1921
147335281774615817756160
T:
sntrup4591761
192617912126394122481785
T:
limasp2062cca
216589092176967522226562
T:
C:r5n11kem0d
223639062243861222523984
T:
hqc2561
248796622505299425835232
T:
hqc2563
238879462509482928646595
T:
hqc2562
29426937?29488401?36998943?
T:
ntrulpr4591761
29743519?29773717?37517297?
T:
frodokem640
301293343017382530513470
T:
frodokem640aes
54631618?55083118?69454555?
T:
C:r5n13kem0d
685068096927459783476443
T:
frodokem976
692804286950501969680890
T:
frodokem976aes
700820887038190784477320
T:
frodokem640shake
105354727115066455128421009
T:
C:r5n15kem0d
130367463130637732137655432
T:
frodokem1344aes
157934210158223404190194153
T:
frodokem976shake
265723725266296801301673269
T:
sikep434
252001294291600513292565541
T:
frodokem1344shake
409340721409824333430484732
T:
sikep503
405794028413981780482295600
T:
sikep434comp
480001812559261392578707939
T:
sntrup1277
618941162622970891657067936
T:
sikep503comp
848482739848911957869106978
T:
sikep610
115247980011589751891178108384
T:
sikep610comp
138236799214011564691477636855
T:
sikep751
208647395121217087922177909703
T:
sikep751comp
Cycles for decapsulation
25%50%75%system
117869117870118201C:threebears624r2cpax
159704159705160037C:threebears624r2cpa
162109162902164221
T:
C:r5nd1kem0d
140779168812169665C:threebears936r2cpax
182614183278183943
T:
C:r5nd0kem2iot
211216?212495?268610?
T:
C:r5nd1kem5d
216812217144217476C:threebears936r2cpa
218345219139220134
T:
C:r5nd1kem4longkey
228765229097229762C:threebears1248r2cpax
277223277623278901C:threebears1248r2cpa
298823355932357261
T:
C:hila5
396439?406857?500030?
T:
C:r5nd3kem5d
574404574739576045threebears624r2ccax
684305685965725808kyber512
732781733444735105threebears624r2cca
783249802364837369
T:
C:r5nd5kem5d
788106954697970012
T:
C:r5nd3kem0d
9930939940891000725threebears936r2ccax
990869?1003805?1245106?
T:
newhope512cca
99441910083631069282kyber90s512
912191?1122358?1150072?
T:
C:r5n11kem0d
113586111929671244433kyber768
121588412231871459711threebears936r2cca
1027304?1285525?1295294?
T:
ntrukem443
133540713597051395612
T:
C:r5nd5kem0d
152267715246611534298threebears1248r2ccax
133436116504981663780kyber1024
167872517591681805886kyber90s768
1775802?1830718?2792999?mceliece348864
182614118324491839090threebears1248r2cca
1870056?1887217?2353413?
T:
C:r5n13kem0d
1652505?2071257?2556265?
T:
newhope1024cca
1753624?2184399?2291640?
T:
lima2p1024cca
221594022292192244161mceliece348864f
268443027033532714640
T:
kindi256342
268741828640512983249kyber90s1024
2567862?3226619?4047062?
T:
ntrukem743
293776135331013536753sntrup653
352214435347623538728
T:
sntrup653
3666980?3674225?4757928?
T:
ntskem1264
342186036997163830143
T:
kindi512241
370658537211343737767ntruhps2048509
373395838103254592916
T:
lotus128
360381038528223955817
T:
kindi512222
4183408?4490978?5556446?
T:
lima2p2048cca
453615445384584545096
T:
sntrup761
453837145470874660312sntrup761
488992149028964919492
T:
ntrulpr653
582837858383395857597
T:
sntrup857
582970358386665896112sntrup857
4713026?5885486?6060131?mceliece460896
589776959113815950895mceliece460896f
602493660504996137823
T:
lotus192
637134464069826440034
T:
ntrulpr761
4780615?6469519?7390899?
T:
kindi512321
648988564991796506517ntruhps2048677
603712865070456592060
T:
ntskem1380
5115668?6521037?6730670?mceliece6960119
6369489?6530381?8004812?mceliece6960119f
654907965601666570200
T:
ntruhps2048677
6653367?6679984?8623702?mceliece8192128f
569254568258257088746
T:
C:r5n15kem0d
5525950?6951662?8738983?ntruhrss701
4765829?6987155?7013709?
T:
limasp1018cca
685334170054087727906
T:
kindi256522
6658767?7072807?8455364?mceliece6688128
593100071382517154820
T:
sntrup953
714219871495037194156sntrup953
799110480117608028073
T:
ntrulpr857
6414640?8035723?8058964?
T:
sntrup1013
803103180556068102129sntrup1013
690175683680878393936mceliece6688128f
734799684480598479270mceliece8192128
885181688730478928169
T:
hqc1281
7124589?8955735?8987609?
T:
lotus256
907043091448749682150
T:
limasp1822cca
9446725?9472523?11867267?ntruhps4096821
9440915?9473655?11840706?
T:
ntruhps4096821
910844598546379895747
T:
ntrulpr953
94813101098984811040803
T:
ntrulpr1013
10839309?13524084?14359775?
T:
limasp1306cca
15250711?15284138?19111404?
T:
ntskem13136
177609141778731719265937
T:
ntrulpr1277
207472862080803520907311
T:
hqc1922
19226266?23483412?24313605?
T:
hqc1921
220153152417078725679192
T:
limasp2062cca
297846752993177930143991
T:
frodokem640aes
299948463005429630177194
T:
frodokem640
334352953363784835796678
T:
hqc2561
356805153604868542851285
T:
hqc2562
392009363983043746516186
T:
hqc2563
440254774414111944774715
T:
ntrulpr4591761
434389154897015152337608
T:
sntrup4591761
689328356911644669319608
T:
frodokem976aes
696617427036914083981681
T:
frodokem640shake
694688327376509583567249
T:
frodokem976
130214476131808110150713739
T:
frodokem1344aes
157680211158048511189271674
T:
frodokem976shake
283313904283933464304642767
T:
sikep434
233595854291494594291965407
T:
frodokem1344shake
299532696299937805320176546
T:
sikep434comp
435354117435745386455946818
T:
sikep503
462375190462982488463753927
T:
sikep503comp
853374922853819885866078585
T:
sikep610
905690263906033552925276885
T:
sikep610comp
148410727314879955741505993209
T:
sikep751
152281776215352945211538269524
T:
sikep751comp
158140824217576897551894546782
T:
sntrup1277