VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key signature systems on one machine: amd64; Golden Cove (90675-00); 2022 Intel Core i3-12100; 4 x 3300MHz; alder, supercop-20250415

[Page version: 20250424 15:53:59]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key signature systems:

For signature systems that support "message recovery", the space for a signature on a long message is shorter than the space for a signature on a short message.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each signature system and each implementation. Designers and implementors interested in submitting new signature systems and new implementations of existing signature systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (smcycles,sbytes) (mcycles,pkbytes) (mcycles,sbytes) (pkbytes,sbytes)

NISTPQC graphs: (pkcycles,pkbytes) (smcycles,sbytes) (mcycles,pkbytes) (mcycles,sbytes) (pkbytes,sbytes)

Measurement failures: ntrumls401x, ntrumls439x, ntrumls593x, ntrumls743x, qtesla128, qtesla192, qtesla256

Cycles to generate a key pair
25%50%75%system
173841746317526
T:
lattisigns512
337553396934266dilithium2aes
350553519535537crossrsdpg128fast
351593535135634crossrsdpg128small
353773552235864crossrsdpg128balanced
384473941540214T!!!ed25519
398054072140924aimer128f
471424728147595aimer128s
524165292653517dilithium3aes
580825826158751
T:
ecdonaldp256
612606234163354crossrsdp128fast
616256243263614crossrsdp128balanced
621306265063541crossrsdp128small
649006510265435dilithium2
735667379674314crossrsdpg192fast
738927403874285crossrsdpg192balanced
738787410874314crossrsdpg192small
774057829080274dilithium5aes
106146106432107473aimer192f
106283107115109656aimer192s
110269111643113229
T:
ecdonaldp224
121138121641122395dilithium3
125423126443126789crossrsdpg256balanced
125692126633126984crossrsdpg256fast
125016126707127143crossrsdpg256small
129852130268130851
T:
ed448goldilocks
132454133323134613crossrsdp192fast
132698133461134374crossrsdp192small
133127133590134523crossrsdp192balanced
135132136248139159nccsign1aes
164126166464168813
T:
pass769
161791169571182746
T:
hector
168617170422172794nccsign1
178767180979182831nccsign3aes
186084186646187320dilithium5
187997189481190260
T:
pass863
220979222788225311nccsign3
241848242390243252crossrsdp256fast
241551242619243502crossrsdp256balanced
242052243048244273crossrsdp256small
260624260856261488aimer256s
260177260991261647aimer256f
274709278526280599nccsign5aes
342262346538350910nccsign5
391256392097394001
T:
donald1024
413192415805418739
T:
sphincsf128harakasimple
233190?471604?863815?haetae2
498639501565507682
T:
ecdonaldp160
530486534320539735
T:
ecdonaldp521
536751540207544871
T:
ecdonaldk163
538236547806555452
T:
ecdonaldp384
547414549116554979
T:
ecdonaldb163
547499549353552507
T:
mqdss48
358556?575891?722013?haetae3
609399612209616713
T:
ecdonaldp192
622657623826625076
T:
sphincsf128harakarobust
414255?649554?1259208?haetae5
659875662797679695
T:
sphincsf192harakasimple
701078702726709702
T:
ecdonaldk233
697366708208712637
T:
donald2048
717868723597737362
T:
ecdonaldb233
948992952008956349
T:
sphincsf192harakarobust
637366?1212105?1805625?
T:
qtesla1
123332812446621250715
T:
ecdonaldk283
129485212978711301301
T:
mqdss64
129361412993831309980
T:
ecdonaldb283
165916516635081667032
T:
sphincsf256harakasimple
204500320694172088505
T:
ecdonaldk409
214695521648662181451
T:
ecdonaldb409
216309821763632190160
T:
sphincsf256harakarobust
231510323159452316595
T:
sphincs256
297250329742432975667
T:
sphincsf128shake256simple
2083832?3071589?4059305?
T:
qtesla3f
3111982?4132604?7139591?
T:
qtesla3s
448916945196294554309
T:
ecdonaldk571
473535047674884862541
T:
ecdonaldb571
476866347775864794446
T:
sphincsf192shake256simple
3752058?4827090?5980866?
T:
qtesla1p
568643956927145704725
T:
sphincsf128shake256robust
576703857765225796630
T:
mqsignlr2567246
577679757810485796743mqsignlr2567246
681350668401626883818
T:
3icp
699592970357397070108
T:
rainbowbinary256181212
823610882410288253761
T:
sphincsf192shake256robust
838148283875098402023mqsignrr2567246
837672583958398418265
T:
mqsignrr2567246
7076555?11318847?14048154?
T:
rwb0fuz1024
116722341172065911811898
T:
rainbow1aclassic363232
117787321180403811832018
T:
rainbow1acyclicc363232
121310721215926312196614
T:
rainbow1acompres363232
122301931224886612276470
T:
sphincsf256shake256simple
127516021293333513245317
T:
sphincss128harakasimple
9348548?14850751?22487380?
T:
ronald512
149488601554862516319400
T:
falcon512tree
150033761565637817615302
T:
falcon512dyn
172696991732327717387036
T:
sphincss128harakarobust
223470402243012022544515
T:
sphincss192harakasimple
223987702257147922637345
T:
sphincsf256shake256robust
241106652412962824228400
T:
tts6440
254033092543557225542103
T:
mqsignlr25611272
254225622547216325694707mqsignlr25611272
23914633?25878481?35139335?
T:
qtesla3p
19683446?29261829?37466182?
T:
ronald768
330570783307762933119089
T:
sphincss256harakasimple
342485423432400534408874
T:
mqsignrr25611272
342745123434077834426416
T:
sphincss192harakarobust
341215463434578134561703mqsignrr25611272
357103423587152636169014
T:
rainbowbinary16242020
358458513609549036501148
T:
rainbow5640
370685223724254837272435
T:
sphincss256harakarobust
34625382?47037333?58217005?
T:
ronald1024
483585435000235552782079
T:
falcon1024dyn
488377835108367254157198
T:
falcon1024tree
609558136142708662049582
T:
mqsignlr25614896
600565086147744562340509mqsignlr25614896
636338846372547463810395
T:
rainbow3cclassic683248
665067676658502666621112
T:
rainbow3ccompres683248
672992386745262367565167
T:
rainbow3ccyclicc683248
705266697076753570909773
T:
rainbow6440
902684289079342590958274
T:
mqsignrr25614896
903078929092875191716909mqsignrr25614896
989836189909876699638141
T:
sphincss128shake256simple
144162968144340038144676089
T:
sphincss192shake256simple
157308834157317581157333562
T:
sflashv2
172480948172543613172591457
T:
sphincss128shake256robust
193148957193287053193457742
T:
rainbow5cclassic963664
193895244194049126195151907
T:
sphincss256shake256simple
196946080197160051197527141
T:
rainbow5ccyclicc963664
199596854199973672200389574
T:
rainbow5ccompres963664
148967029?215012274?298402910?
T:
ronald1536
274870153275780053277874256
T:
sphincss192shake256robust
356491450360094313367024547
T:
sphincss256shake256robust
231302659?369958722?525373619?
T:
ronald2048
792719929792801957792846153
T:
gravitysphincss
796820973?1369750377?2020945370?
T:
ronald3072
2368574326?3631543727?5750433662?
T:
ronald4096
126963002451269661565312727287376
T:
gravitysphincsl
253703746632537114394225372354924
T:
gravitysphincsm
Cycles to sign 59 bytes
25%50%75%system
102101046111020
T:
rainbowbinary256181212
221872252422918
T:
tts6440
239722420824680
T:
rainbowbinary16242020
411994173442481
T:
rainbow5640
413564202642633T!!!ed25519
530065319253666
T:
rainbow1acyclicc363232
532215346553665
T:
rainbow1aclassic363232
554605567956044
T:
rainbow6440
601246065561145
T:
sflashv2
636806404872280
T:
mqsignlr2567246
792848004481282mqsignlr2567246
85094?86483?115210?
T:
mqsignrr2567246
897639002290431
T:
ecdonaldp256
100735101643107408mqsignrr2567246
62001?106073?156085?dilithium2aes
134912135825136324
T:
ed448goldilocks
107160?156813?223852?dilithium3aes
163174165087168254
T:
ecdonaldp224
156223?166184?233829?dilithium5aes
170739174168186886
T:
hector
157063?193264?321153?dilithium2
202273212485233163
T:
mqsignlr25611272
199365?212961?406583?
T:
pass769
139099?226721?399896?
T:
lattisigns512
245955249175256899mqsignlr25611272
160079?262823?559257?
T:
qtesla1
266008270602273597
T:
ronald512
192203?270764?416043?dilithium3
274740279583282268
T:
rainbow3cclassic683248
270470?279613?508173?nccsign1
282005286289289128
T:
rainbow3ccyclicc683248
302624304167305614
T:
donald1024
301627309044317692
T:
mqsignrr25611272
223591?311094?336613?nccsign1aes
108771?320354?545102?
T:
3icp
318955321318325218
T:
falcon512tree
359984368562419177mqsignrr25611272
286068?398052?457679?dilithium5
291463?414467?554343?nccsign3aes
413642421140429048
T:
mqsignlr25614896
228441?456172?673758?
T:
pass863
469501474888479396
T:
ronald768
479658487947543044mqsignlr25614896
532394536825541017
T:
ecdonaldp160
570643573754577249
T:
ecdonaldk163
574470579676582867
T:
rwb0fuz1024
575604580252582832
T:
falcon512dyn
580326582432585569
T:
ecdonaldb163
346627?594768?769248?nccsign3
608545616587634751
T:
mqsignrr25614896
635925641040649639
T:
falcon1024tree
642849644958648303
T:
ecdonaldp192
640518649210654498
T:
ronald1024
650059653871661139
T:
ecdonaldp384
450026?658259?962764?nccsign5aes
660231667255670794
T:
rainbow5cclassic963664
671344681124699321mqsignrr25614896
702108706500711154
T:
donald2048
390899?735416?1143661?
T:
qtesla1p
754610757494764900
T:
ecdonaldk233
553225?765120?1028097?nccsign5
768795770795775827
T:
ecdonaldb233
485060?810974?1084162?
T:
qtesla3f
825116830133837126
T:
ecdonaldp521
845973849960853861
T:
rainbow5ccyclicc963664
953609956431959642crossrsdpg128fast
551680?968442?1771853?
T:
qtesla3s
112666711277331128608aimer128f
116369411695371173767
T:
falcon1024dyn
130753813138391320511
T:
ecdonaldk283
136720613724081376709
T:
ecdonaldb283
775995?1415585?2388655?haetae3
538519?1453421?2140149?haetae2
154644315519901561937crossrsdp128fast
171709917207361731939
T:
ronald1536
857664?1911256?4014626?haetae5
206059820678382081135crossrsdpg128balanced
219285821993282205503crossrsdpg192fast
218077422187762225505
T:
ecdonaldk409
229759623135212335113
T:
ecdonaldb409
278138127832952787103aimer192f
280868228185932831378
T:
ronald2048
288906929035142912709crossrsdp128balanced
306515530742763088456crossrsdpg192balanced
2573478?3348174?5189338?
T:
qtesla3p
338708234015683415142crossrsdp192fast
354313235585103653554
T:
mqdss48
370302537102403718108crossrsdpg256fast
406600640774544092933crossrsdpg128small
479979348125274828607
T:
ecdonaldk571
490092449285164951074crossrsdpg256balanced
510348251251745150259
T:
ecdonaldb571
576016157730785800749crossrsdpg192small
578846457931885798167
T:
gravitysphincss
581747858467035880917crossrsdp128small
607243060881026127954crossrsdp192balanced
610658061109266114064aimer256f
617032261877776225350crossrsdp256fast
757184375874337613405
T:
ronald3072
859129985981778621352aimer128s
876193587865028803934crossrsdpg256small
885160288932099151558
T:
mqdss64
910239891514579197299crossrsdp192small
922914292793529338524
T:
rainbow1acompres363232
105338211056740310614008crossrsdp256balanced
110190831103926311510188
T:
gravitysphincsm
131912801320480813215929
T:
gravitysphincsl
153968941548682215556821
T:
sphincsf128harakasimple
162499371626488616290189
T:
ronald4096
170423001709223917158044crossrsdp256small
196267141972312419816435
T:
sphincsf192harakasimple
207723362079463220799974aimer192s
227096412277368122855124
T:
sphincsf128harakarobust
286745342876464928913427
T:
sphincsf192harakarobust
417293474175294341800731
T:
sphincs256
437963704383039643932269aimer256s
438804174399273544110843
T:
sphincsf256harakasimple
539006575400915954102028
T:
rainbow3ccompres683248
576977935782280657918941
T:
sphincsf256harakarobust
982358499837101198457631
T:
sphincsf128shake256simple
131660510131790879131867923
T:
sphincsf192shake256simple
132096368132350713132758841
T:
rainbow5ccompres963664
175059382175250319175530209
T:
sphincsf128shake256robust
226818685227214716227565879
T:
sphincsf192shake256robust
257857727258492493259118833
T:
sphincss128harakasimple
288268793288559244289300375
T:
sphincsf256shake256simple
335233093335969621336301059
T:
sphincss128harakarobust
452671957452895719453431193
T:
sphincss256harakasimple
503737339506793699508286379
T:
sphincsf256shake256robust
529303071530110805530568695
T:
sphincss256harakarobust
623795936624986239626193234
T:
sphincss192harakasimple
971530598979380371987916367
T:
sphincss192harakarobust
158913610015911167031593997285
T:
sphincss128shake256simple
240434383424061539532419055760
T:
sphincss256shake256simple
257882785525805158502581538064
T:
sphincss128shake256robust
333065522933327930853334613752
T:
sphincss192shake256simple
412838126241620371124177032811
T:
sphincss256shake256robust
570786049957242420275746012469
T:
sphincss192shake256robust
Cycles to verify 59 bytes
25%50%75%system
557357085902
T:
rwb0fuz1024
762077437971
T:
rainbowbinary256181212
166281698617139
T:
3icp
171281744117665
T:
rainbowbinary16242020
181751833418438
T:
rainbow5640
198292015220418
T:
ronald512
220592234322682
T:
ronald768
227562328124112
T:
rainbow1aclassic363232
233992347823591
T:
rainbow6440
251262533625841
T:
ronald1024
268822717427403
T:
tts6440
289042930229618
T:
lattisigns512
328943316033609
T:
ronald1536
413994212543139mqsignlr2567246
41483?42414?61321?
T:
mqsignlr2567246
430954326443707dilithium2aes
428194368048638mqsignrr2567246
43226?44225?83752?
T:
mqsignrr2567246
441944459845052
T:
ronald2048
474934782447937
T:
sflashv2
525025352954785
T:
gravitysphincss
562845722157903
T:
falcon512tree
607746100961252dilithium3aes
629306414064873
T:
qtesla1
681086915869732
T:
falcon512dyn
717507189572042dilithium2
748737545175998
T:
ronald3072
880178820788918dilithium5aes
976309807698291haetae2
114191115169115746
T:
falcon1024tree
117939119212120126
T:
ronald4096
119600119894120187dilithium3
131631132286133055T!!!ed25519
131724132666133561
T:
qtesla3f
131928133048134193
T:
qtesla3s
137036138114138627
T:
falcon1024dyn
134220140090143943
T:
rainbow3cclassic683248
152191152667153305haetae3
156234157677159758nccsign1aes
181909182408183126haetae5
185048188257189865nccsign1
189837190184191040dilithium5
201761204589207732nccsign3aes
223883229547246755mqsignlr25611272
222942229860278161
T:
mqsignlr25611272
229540235658240647
T:
mqsignrr25611272
230250?236522?291955?mqsignrr25611272
233790239953242810
T:
gravitysphincsm
237337241016242761nccsign3
242166244944248761
T:
pass769
245416247053248510
T:
donald1024
247262247819248572
T:
ecdonaldp256
279954281891283304
T:
pass863
299418300220301484
T:
qtesla1p
303526306089309843
T:
ecdonaldp224
312183313769318110nccsign5aes
313318317879320514
T:
gravitysphincsl
324695331717334468
T:
rainbow5cclassic963664
364027371793377167
T:
sphincss128harakasimple
371634375121378646nccsign5
452053455225458907
T:
ed448goldilocks
512082522095534492
T:
mqsignlr25614896
517908523292646907mqsignlr25614896
520793527986572725
T:
mqsignrr25614896
517683528031553670mqsignrr25614896
542324550754557596
T:
sphincss192harakasimple
567778573774576748
T:
ecdonaldp160
591578593540597254crossrsdpg128fast
607202620461633649
T:
sphincss128harakarobust
667935672922675415
T:
ecdonaldp192
720087726431734900
T:
hector
793881802005814012
T:
sphincss256harakasimple
830024837185840455
T:
donald2048
854842861005874670
T:
sphincsf128harakasimple
956409963649972926crossrsdp128fast
977607989051999964
T:
sphincss192harakarobust
109314310968071101674
T:
ecdonaldk163
111437611151381115900aimer128f
111291911164751119765
T:
ecdonaldb163
132051513405821361180
T:
sphincss256harakarobust
134058513534361370592
T:
sphincsf192harakasimple
137464713790031388410crossrsdpg192fast
137561713798541385284crossrsdpg128balanced
141389614227281437558
T:
ecdonaldp384
144022114451101450368
T:
ecdonaldk233
142129014471601465790
T:
sphincsf128harakarobust
147269414764731483667
T:
ecdonaldb233
151315515272891547435
T:
sphincsf256harakasimple
152901815395921546155
T:
qtesla3p
154923815567091564139
T:
ecdonaldp521
169503917042871711936
T:
sphincs256
197547619825271989207crossrsdp128balanced
200297820166732030782crossrsdpg192balanced
217854121877722202989crossrsdp192fast
226327422729402291719
T:
mqdss48
232489223326342349621crossrsdpg256fast
228960223417612422010
T:
sphincss128shake256simple
236513523801082403424
T:
sphincsf192harakarobust
253293925538752560799
T:
ecdonaldk283
253489025666822592182
T:
sphincsf256harakarobust
265405626615282669866
T:
ecdonaldb283
272939527301162732056aimer192f
277575327945472804052crossrsdpg128small
322531632340333251168crossrsdpg256balanced
329440433725553469628
T:
sphincss192shake256simple
383589438456243854721crossrsdp256fast
402030640409114065064crossrsdpg192small
407965740914534103973crossrsdp128small
418433841987114215940crossrsdp192balanced
422189342905754309275
T:
ecdonaldk409
426416543231454400519
T:
sphincss256shake256simple
443682644476344515223
T:
ecdonaldb409
439132844872334557409
T:
sphincss128shake256robust
538412954926805602259
T:
sphincsf128shake256simple
592343359850606180644
T:
mqdss64
604970960515116053700aimer256f
605277260623866075385crossrsdpg256small
644184664658936492740crossrsdp192small
646050066287206760474
T:
sphincss192shake256robust
687830969011296934554
T:
rainbow1acyclicc363232
698008869953817008632
T:
rainbow1acompres363232
723287372490867266299crossrsdp256balanced
847630184875378494065aimer128s
854544786558648763656
T:
sphincss256shake256robust
858018986938298914384
T:
sphincsf192shake256simple
872549988508419104109
T:
sphincsf256shake256simple
931538793343569357677
T:
ecdonaldk571
9941342996861210034057
T:
ecdonaldb571
106298511075941410924784
T:
sphincsf128shake256robust
118083881185414111892668crossrsdp256small
169237271714118017359057
T:
sphincsf192shake256robust
173844071754392517865773
T:
sphincsf256shake256robust
205477602055649420681616aimer192s
414243734149223641582263
T:
rainbow3ccompres683248
415064254158904841669041
T:
rainbow3ccyclicc683248
436105564362975743656803aimer256s
930914599330542793653002
T:
rainbow5ccyclicc963664
951341109528354395367144
T:
rainbow5ccompres963664