VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key signature systems on one machine: amd64; K10 45nm (100f63); 2010 AMD Athlon II Neo K125; 1 x 1700MHz; h3neo, supercop-20250415

[Page version: 20250523 10:17:45]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key signature systems:

For signature systems that support "message recovery", the space for a signature on a long message is shorter than the space for a signature on a short message.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each signature system and each implementation. Designers and implementors interested in submitting new signature systems and new implementations of existing signature systems should read the call for submissions.


Test results

Graphs: old (pkcycles,pkbytes) (smcycles,sbytes) (mcycles,pkbytes) (mcycles,sbytes) (pkbytes,sbytes)

NISTPQC graphs: (pkcycles,pkbytes) (smcycles,sbytes) (mcycles,pkbytes) (mcycles,sbytes) (pkbytes,sbytes)

Measurement failures: ntrumls401x, ntrumls439x, ntrumls593x, ntrumls743x, qtesla128, qtesla192, qtesla256

Cycles to generate a key pair
25%50%75%system
669976709867429crossrsdpg128small
670306717467395crossrsdpg128balanced
671436724267450crossrsdpg128fast
730667321273909ed25519
144725144873145088crossrsdpg192fast
144692144897145233crossrsdpg192balanced
144782144914145221crossrsdpg192small
152725152762152956aimer128f
152839152927153037aimer128s
156094156376156640crossrsdp128balanced
156206156388156632crossrsdp128fast
156225156555157421crossrsdp128small
176510178695180702
T:
ecdonaldp256
248557249070250638
T:
ecdonaldp224
267712267886268737crossrsdpg256small
267939268463268873crossrsdpg256fast
267722268503269774crossrsdpg256balanced
314929315194315446crossrsdp192fast
315219315483315744crossrsdp192balanced
315359315565315822crossrsdp192small
342388343356343992
T:
ed448goldilocks
361906362362363019aimer192f
361699367140367604aimer192s
434882439988440585T!!!dilithium2
438611441951447338nccsign1
470988484348511369
T:
hector
572051574832577011
T:
pass769
570281575108578921nccsign3
576531576766578611crossrsdp256small
576420577282593170crossrsdp256balanced
577902595228621262crossrsdp256fast
686170689473692917
T:
pass863
719367724589734063nccsign1aes
784160788963826791T!!!dilithium3
881018881366882510aimer256f
884142885056889452aimer256s
898959902311905329nccsign5
968057974321981280nccsign3aes
982147986123997131
T:
donald1024
102905210339651038854
T:
ecdonaldp160
110186911073041112417T!!!dilithium2aes
113948511421761144127
T:
ecdonaldp521
120551112132171219791
T:
edons128k08n72nu8l4mu3
121564512172271285085T!!!dilithium5
123960412413581245073
T:
ecdonaldp192
143587014500601463201
T:
donald2048
144263214522451464505nccsign5aes
151235715144851516428
T:
mqdss48
183714318431781848462T!!!dilithium3aes
198175519893181997097
T:
ecdonaldk163
207400020776442098630
T:
ecdonaldb163
1380354?2164085?3654440?haetae2
274596627584352767464
T:
ecdonaldk233
291061829174742934978
T:
ecdonaldb233
2310693?3035986?3765653?
T:
qtesla1
1441624?3086619?5948602?haetae3
309257331106413152911T!!!dilithium5aes
348817235139113558127
T:
edons128ref
351169935141783516666
T:
mqdss64
1733373?3572580?6002233?haetae5
482994048379654846241
T:
ecdonaldp384
575623257762225796112
T:
ecdonaldk283
625424562668386293676
T:
ecdonaldb283
4707670?6910083?6997603?
T:
qtesla3f
9183820?10656270?14777568?
T:
qtesla1p
111554361116325311176969
T:
sphincsf128shake256simple
7136735?11591610?14120004?
T:
qtesla3s
124974471255149312591964
T:
ecdonaldk409
138233861387243913959319
T:
ecdonaldb409
149418021494459914947303
T:
sphincsf128harakasimple
160970781610286616108734
T:
sphincs256
162125141622687116241206
T:
sphincsf192shake256simple
203606042076224820946455
T:
3icp
211299032115190721164563
T:
sphincsf128shake256robust
218849982190312021912730
T:
sphincsf192harakasimple
16021719?23355735?31720259?
T:
rwb0fuz1024
257458332575048825755111
T:
sphincsf128harakarobust
266112512663602126690028
T:
ecdonaldk571
23413001?29539983?40270737?
T:
ronald512
297654852980085929831445
T:
ecdonaldb571
306544323066096930692670
T:
sphincsf192shake256robust
322147093527682339452108
T:
falcon512tree
33297617?37068611?43076507?
T:
falcon512dyn
380315173804009338046232
T:
sphincsf192harakarobust
431650834319689543237754
T:
sphincsf256shake256simple
48239321?52079964?63080435?
T:
qtesla3p
583839615842022858432606
T:
sphincsf256harakasimple
610033086113104961323751
T:
tts6440
653192236558899865703657
T:
rainbow1aclassic363232
713609447180163372039094
T:
rainbow1acompres363232
764114317661812077001257
T:
rainbow1acyclicc363232
52203394?77593739?112784269?
T:
ronald768
806569608069970780756742
T:
sphincsf256shake256robust
101340097101397748101430927
T:
sphincsf256harakarobust
93614099101677161112908887
T:
falcon1024tree
100276555105686950110134994
T:
falcon1024dyn
84754406?112275208?174594712?
T:
ronald1024
148618447149018511149460596
T:
rainbow5640
224475500224708313225552458mqsignlr2567246
279721675279966863280139006mqsignrr2567246
322133165323353456334266238
T:
rainbow6440
356417288356883480357482243
T:
sphincss128shake256simple
382820143?450273556?668692457?
T:
ronald1536
457416513457721010457864444
T:
sflashv2
474668918474747614474864443
T:
sphincss128harakasimple
519972079520238282520441811
T:
sphincss192shake256simple
671512943672700012678088511
T:
rainbow3cclassic683248
673038264673280514673477983
T:
sphincss128shake256robust
686044172686854052687168498
T:
sphincss256shake256simple
701175204701335467701646626
T:
sphincss192harakasimple
722872475723407275724324239
T:
rainbow3ccompres683248
801160299802563575802948356
T:
rainbow3ccyclicc683248
820794766821060211821385567
T:
sphincss128harakarobust
932507333933053146933156835
T:
sphincss256harakasimple
954728111955629986955825863mqsignlr25611272
986775543986984698987720726
T:
sphincss192shake256robust
117053815811711543641171486840mqsignrr25611272
129249835312932280531295016152
T:
sphincss256shake256robust
1335717501?1631479549?2960834635?
T:
ronald2048
184442929118480977751855524727
T:
rainbow5cclassic963664
207473004820757034232076660058
T:
rainbow5ccyclicc963664
211456125821165574752118359060
T:
rainbow5ccompres963664
256929832425705896322571132335mqsignlr25614896
306974596030717986063072384072mqsignrr25614896
4175454062?5674493281?8972682724?
T:
ronald3072
8454489096?11648558587?17120107066?
T:
ronald4096
Cycles to sign 59 bytes
25%50%75%system
660076627266853
T:
tts6440
826548272282778ed25519
167200168461179753
T:
rainbow5640
195318195634196222
T:
sflashv2
247826248511249262
T:
ecdonaldp256
265845267067288309
T:
rainbow6440
354362354606356073
T:
ecdonaldp224
355502355651356079
T:
ed448goldilocks
490088491722493213
T:
rainbow1aclassic363232
497135498246513305
T:
hector
575792584691594173
T:
ronald512
623879625410644879
T:
rainbow1acyclicc363232
734202737258741155
T:
donald1024
883733?947545?1822428?
T:
pass863
496258?954748?2804410?
T:
3icp
108103410835601086762
T:
ecdonaldp160
108623410941981115771
T:
ronald768
486487?1144302?1804864?
T:
qtesla1
113294411462531156368
T:
falcon512tree
1164992?1193503?1838385?nccsign1
122036712280891235337
T:
rwb0fuz1024
130413713095121313660
T:
ecdonaldp192
143995514519341475087
T:
donald2048
744716?1478989?1543168?
T:
pass769
149949915141921526449
T:
ronald1024
1474515?1533557?2238564?nccsign1aes
166100016620851663478mqsignlr2567246
1141555?1739956?3002033?
T:
qtesla3f
173042817546951757965
T:
ecdonaldp521
188472618983941909902
T:
falcon512dyn
1238610?1931164?2424889?T!!!dilithium2
205066720567832074346
T:
ecdonaldk163
214786021504672155703
T:
ecdonaldb163
228562723038572317111
T:
falcon1024tree
1964725?2460124?3752440?T!!!dilithium2aes
1866444?2583836?3504223?nccsign3aes
1449861?2618709?3588935?nccsign3
262846026371952661226
T:
edons128k08n72nu8l4mu3
271592327170972721123mqsignrr2567246
1397674?2785243?3836484?
T:
qtesla1p
284446028505752863263
T:
ecdonaldk233
301717330255113041006
T:
ecdonaldb233
1854505?3223853?4844466?T!!!dilithium3
2368322?3376303?3795402?nccsign5
2016364?3471393?4952926?T!!!dilithium5
1901414?3544506?6783339?
T:
qtesla3s
387171638837753893907
T:
falcon1024dyn
395079039525453954263crossrsdpg128fast
413033141532464165705
T:
ronald1536
418948141987984202405
T:
rainbow3cclassic683248
3075684?4502257?6020976?nccsign5aes
450034345043124506820crossrsdp128fast
3257493?4639872?7150832?T!!!dilithium3aes
476430447763644800801
T:
rainbow3ccyclicc683248
498941249968215037770
T:
ecdonaldp384
500206050046735008378mqsignlr25611272
594026459526475966961
T:
ecdonaldk283
624996762652136278555
T:
edons128ref
641853564307766444812
T:
ecdonaldb283
666385866729986673978aimer128f
2903665?6877755?14778996?haetae2
718443272082347229305
T:
ronald2048
5200902?7230086?10407957?T!!!dilithium5aes
786024678665877871669mqsignrr25611272
795604279616707965388crossrsdpg128balanced
832475883324268372138crossrsdp128balanced
4487212?8549637?16591401?haetae3
896802789755658982397crossrsdpg192fast
900121290033709006489
T:
rainbow5cclassic963664
900063690037309008659
T:
rainbow5ccyclicc963664
7930709?10690360?22825588?haetae5
108975731089974910903209mqsignlr25614896
111468521115108211190596crossrsdp192fast
118828941199572412070215crossrsdpg192balanced
6334306?12819738?20194232?
T:
qtesla3p
127840491286363612928887
T:
ecdonaldk409
141280001418890514229280
T:
ecdonaldb409
158166661581924115826550crossrsdpg128small
167272301676530116984292crossrsdp128small
167793361678516616790918mqsignrr25614896
168192041684723916935736aimer192f
169060401691835916927473crossrsdpg256fast
191965481920906319217942crossrsdp192balanced
198862591991967519960955
T:
ronald3072
202408442038626220620337crossrsdp256fast
213964012141524721433281crossrsdpg256balanced
224090992253877622675086crossrsdpg192small
272726492730950027341156
T:
ecdonaldk571
288909042890905428926575crossrsdp192small
304441503050384330545402
T:
ecdonaldb571
338208843452514134858962crossrsdp256balanced
353338213549393935542161aimer256f
383674593839097238419659crossrsdpg256small
417174124174247941818458
T:
ronald4096
459483874609255946160434
T:
rainbow1acompres363232
525639725260683252750728aimer128s
546314205469191255356472crossrsdp256small
884529028870585688995269
T:
mqdss48
131334661131614339132392352aimer192s
270252599270416907272556680aimer256s
283863500284432284287154450
T:
mqdss64
306356969306478612306827211
T:
sphincs256
353118961353910965354534453
T:
sphincsf128shake256simple
419097972420050876420804724
T:
rainbow3ccompres683248
443228610443515657443921287
T:
sphincsf192shake256simple
551602743551969975552163404
T:
sphincsf128harakasimple
635049792635829271637205367
T:
sphincsf128shake256robust
642061791642455700643023097
T:
sphincsf192harakasimple
819263159819773940820328382
T:
sphincsf192shake256robust
914806014915176018915686275
T:
sphincsf128harakarobust
990395228991985651993232988
T:
sphincsf256shake256simple
111289479711136745441114068103
T:
sphincsf192harakarobust
116586514711688498521179120504
T:
rainbow5ccompres963664
158698550815877309351588175401
T:
sphincsf256harakasimple
178470843117856872731787053295
T:
sphincsf256shake256robust
270047525027021845762705036533
T:
sphincsf256harakarobust
530808723253106770365317204864
T:
sphincss128shake256simple
820247824682055605618211600832
T:
sphincss256shake256simple
885735863788580444208860381790
T:
sphincss128harakasimple
937503873993780054789380272640
T:
sphincss128shake256robust
110177677881102261771911025533349
T:
sphincss192shake256simple
141232227251412994827414131521260
T:
sphincss256harakasimple
144889197491449254184614493726747
T:
sphincss128harakarobust
147217351691472712547414764442010
T:
sphincss256shake256robust
191013303361910610666819109340503
T:
sphincss192shake256robust
198021304321980408804619806246269
T:
sphincss192harakasimple
Cycles to verify 59 bytes
25%50%75%system
112531141111543
T:
rwb0fuz1024
402334041540798
T:
ronald768
406064092841274
T:
ronald512
477574801348281
T:
ronald1024
645016525865757
T:
3icp
666656693367175
T:
ronald1536
822698287283369
T:
rainbow5640
913179180892267
T:
ronald2048
105983106433107032
T:
rainbow6440
108919110327111310
T:
rainbow1aclassic363232
114095115945116589
T:
tts6440
159809160287160772
T:
ronald3072
167035168278169081
T:
falcon512tree
174745175200175449
T:
sflashv2
201608203360204372
T:
falcon512dyn
235621236130241861
T:
qtesla1
259221259917261135
T:
ronald4096
265504267156268219ed25519
330117330585337920haetae2
347823349215350264
T:
falcon1024tree
419233421253422091
T:
falcon1024dyn
524630525201531584T!!!dilithium2
526350532702533760
T:
qtesla3s
530796532822538156
T:
qtesla3f
531521535073538813
T:
rainbow3cclassic683248
538521539261540286
T:
ecdonaldp256
574806577946583096
T:
donald1024
580671581349582188haetae3
677183678027679320
T:
ecdonaldp224
694155710859719314nccsign1
710880722657726831haetae5
831842874260876031T!!!dilithium3
873199877455880717nccsign3
937140938666941995
T:
pass769
945542957208963953nccsign1aes
101183310149921018530
T:
ed448goldilocks
103630710451871050775
T:
ecdonaldp160
109093510929321095775
T:
pass863
108747710967491105421T!!!dilithium2aes
115711611620731165688
T:
rainbow5cclassic963664
113112311809191189599
T:
edons128k08n72nu8l4mu3
120590012111301217374
T:
ecdonaldp192
119889812112471221064nccsign3aes
130003613368521454450
T:
qtesla1p
138910813950461413068T!!!dilithium5
144328314597191501819nccsign5
168125216937501702843
T:
donald2048
178106117844031789679T!!!dilithium3aes
192569919328361940015nccsign5aes
183979619446601951389
T:
edons128ref
209499921117062127075
T:
hector
231386223153092316360crossrsdpg128fast
255092325547972560866mqsignlr2567246
256854525703342576940mqsignrr2567246
265881626604182661561crossrsdp128fast
308936031103433126156T!!!dilithium5aes
331943533416213344777
T:
ecdonaldp521
375726637924493817516
T:
sphincs256
398057740007354006904
T:
ecdonaldk163
403409240644094087451
T:
ecdonaldp384
419253042028244212360
T:
ecdonaldb163
442513844302184433269crossrsdpg128balanced
511236451329185139492crossrsdp128balanced
540939554103365412158crossrsdpg192fast
553874555737555600099
T:
ecdonaldk233
568946457070125721455
T:
qtesla3p
576406659119376081245
T:
sphincss128shake256simple
590554259244635941331
T:
ecdonaldb233
621986662214746246670aimer128f
643427464356856437453crossrsdp192fast
690758269131637030955crossrsdpg192balanced
783303478608797881094mqsignlr25611272
785443878871837904235mqsignrr25611272
853919586610228834102
T:
sphincss192shake256simple
871445087218678727092crossrsdpg128small
933451895765029827058
T:
sphincss128harakasimple
102082911021186010218868crossrsdpg256fast
104474151048436810494401crossrsdp128small
110140041102008111030061crossrsdp192balanced
111935001131979811479464
T:
sphincss256shake256simple
112732011142068211702253
T:
sphincss128shake256robust
116406371164746911700421crossrsdp256fast
116788961169787011714620
T:
ecdonaldk283
120827871208736712092270crossrsdpg256balanced
126352911267616512713739
T:
ecdonaldb283
128842851305657313195189crossrsdpg192small
137485741394845514180672
T:
sphincss192harakasimple
142047071439028114556897
T:
sphincsf128shake256simple
157090611573464115871183aimer192f
162416701624999916274839mqsignlr25614896
162699151628016116578804mqsignrr25614896
164995591650229516510017crossrsdp192small
163064671663532316809917
T:
sphincss128harakarobust
164537271683211017123867
T:
sphincss192shake256robust
190197121906595519604970crossrsdp256balanced
194590481965401219940937
T:
sphincss256harakasimple
206213102062432720633057crossrsdpg256small
213806672166268721973393
T:
sphincss256shake256robust
214463982173583321998988
T:
sphincsf128harakasimple
223944362258303422901380
T:
sphincsf192shake256simple
229498122308274423345428
T:
sphincsf256shake256simple
253105102537345525432544
T:
ecdonaldk409
256769192574900226132940
T:
rainbow1acompres363232
259709572607608726178991
T:
rainbow1acyclicc363232
273647642780117028317376
T:
sphincsf128shake256robust
279990142805670428154290
T:
ecdonaldb409
304096153042351230635769crossrsdp256small
329856093299921733202339aimer256f
330264463327254833517274
T:
sphincsf192harakasimple
358497753625756136690822
T:
sphincsf256harakasimple
377781123811780938967303
T:
sphincsf128harakarobust
434175344392580344222988
T:
sphincsf192shake256robust
438840964439210044890044
T:
sphincsf256shake256robust
521081235217661652386586aimer128s
539294905397974954098532
T:
ecdonaldk571
602533766034509360404748
T:
ecdonaldb571
604145116091955261433061
T:
sphincsf192harakarobust
636851806452736765167322
T:
sphincsf256harakarobust
645862876537561665991319
T:
mqdss48
130311418130841307131635221aimer192s
155950185156788436158956536
T:
rainbow3ccompres683248
156583471156809530157298050
T:
rainbow3ccyclicc683248
211415492212974239216202573
T:
mqdss64
267503849267635973269568071aimer256s
352798847353529331355031080
T:
rainbow5ccyclicc963664
358609729360101448363590640
T:
rainbow5ccompres963664