VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key signature systems on one machine: armeabi; Cortex-A8 (413fc082); 2012 TI Sitara XAM3359AZCZ100; 1 x 1000MHz; bblack, supercop-20250922

[Page version: 20251028 08:35:44]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key signature systems:

For signature systems that support "message recovery", the space for a signature on a long message is shorter than the space for a signature on a short message.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each signature system and each implementation. Designers and implementors interested in submitting new signature systems and new implementations of existing signature systems should read the call for submissions.


Test results

Graphs: old (pkcycles,pkbytes) (smcycles,sbytes) (mcycles,pkbytes) (mcycles,sbytes) (pkbytes,sbytes)

NISTPQC graphs: (pkcycles,pkbytes) (smcycles,sbytes) (mcycles,pkbytes) (mcycles,sbytes) (pkbytes,sbytes)

Measurement failures: ntrumls401x, ntrumls439x, ntrumls593x, ntrumls743x, qtesla128, qtesla192, qtesla256

Cycles to generate a key pair
25%50%75%system
493284963252048picnicl1full
520325224054112picnic3l1
770727734479504picnic3l3
770087740878496
T:
picnic2l1fs
78256?80192?104576?picnicl3full
806088080081536picnicl1fs
807848107281776picnicl1ur
124880126704148320picnicl5full
133456134896158368picnic3l5
148336148944159408picnicl3fs
148496149296154032picnicl3ur
212976213120213664crossrsdpg128fast
213120213360213952crossrsdpg128small
213184213408213696crossrsdpg128balanced
241952?266432?308480?picnicl5fs
234944?269168?343952?picnicl5ur
406288406560408944crossrsdp128balanced
406560406944407776crossrsdp128small
406576407952460688crossrsdp128fast
451248451808472192crossrsdpg192balanced
452848453056455488crossrsdpg192small
452976453136453936crossrsdpg192fast
519792520016537104aimer128f
521680522640531904aimer128s
543104544448568976
T:
donald512
658864660480698752ed25519
672384?712640?845088?
T:
ecdonaldp256
723088726128772864crossrsdpg256fast
770544771136797328crossrsdpg256small
770672771536792912crossrsdpg256balanced
951552953168983568crossrsdp192fast
9530569543681002336crossrsdp192small
9533769556801003952crossrsdp192balanced
125089612537441285824aimer192s
125540812604641294512aimer192f
139919214149361436304
T:
donald1024
158651215989761632080T!!!dilithium2
167422417014081722080crossrsdp256fast
168662417203361743216crossrsdp256small
169025617212161771120crossrsdp256balanced
286230428876002912992T!!!dilithium3
290257629231042938592T!!!dilithium2aes
309854431046083135952aimer256f
310496031128483139872aimer256s
335593633830723410680
T:
ecdonaldk163
354160835474723571464
T:
ecdonaldp160
353894435508403602456
T:
ecdonaldb163
453847245633924597752
T:
donald2048
469638447066724752192T!!!dilithium5
490999249243684975856
T:
ecdonaldp192
517582451898245240768T!!!dilithium3aes
544819254665525518344
T:
mqdss48
556738455915125643920
T:
ecdonaldk233
599869660090006052312
T:
ecdonaldb233
666145666767686736008
T:
ecdonaldp224
4744560?6923280?11244624?haetae2
3780400?7353312?11873440?haetae5
7957952?8251384?12904856?
T:
qtesla1
888681689379048996064T!!!dilithium5aes
5660416?9177472?15163248?haetae3
945840094784169501792
T:
sphincsf128sha256simple
969856897271209786664
T:
ecdonaldk283
106197121062637610648520
T:
ecdonaldb283
128188241286756012972984
T:
mqdss64
137225601374798413824560
T:
sphincsf192sha256simple
176620801770241619215216
T:
sphincsf128sha256robust
193131281932667219409896
T:
ecdonaldk409
215580482159388821678696
T:
ecdonaldb409
16565088?24329912?32064960?
T:
qtesla3f
247567282480040824902752
T:
ecdonaldp384
262226402624427226287456
T:
sphincsf192sha256robust
298471522986129629914096
T:
sphincs256
30566024?35296568?48481000?
T:
qtesla1p
358373603586416035900656
T:
sphincsf256sha256simple
394315603944099239481192
T:
sphincsf128harakasimple
25473192?41514888?49743304?
T:
qtesla3s
443233444436836044457648
T:
ecdonaldk571
498355124990765650229896
T:
ecdonaldb571
501319205022408050400112
T:
sphincsf128shake256simple
569087605695104857021216
T:
sphincsf128harakarobust
578030165783936057932680
T:
sphincsf192harakasimple
581258725822110458386448
T:
ecdonaldp521
671499366733003267562032
T:
luov4849242
734513287348487273616648
T:
sphincsf192shake256simple
73407008?83573784?95084256?
T:
falcon512tree
846051128479493685112224
T:
sphincsf192harakarobust
889629768914372892884144
T:
rainbow1aclassic363232
80415056?91109288?103154288?
T:
falcon512dyn
930079209323072093516208
T:
luov863256
939920169416608095317888
T:
sphincsf256sha256robust
956030489562776895801560
T:
sphincsf128shake256robust
104413280104808656105411632
T:
rainbow1acompres363232
111463072112080496114022992
T:
rainbow1acyclicc363232
140409856140477120140621024
T:
sphincsf192shake256robust
152727224152858400153376456
T:
sphincsf256harakasimple
193746280194128320194335928
T:
sphincsf256shake256simple
200693504215024608245572968
T:
falcon1024tree
184723232?215806968?245984360?
T:
qtesla3p
223716800224208144224846640
T:
pflash1
226420152226567832227006776
T:
sphincsf256harakarobust
236317856236816000237582064
T:
luov6468330
233878912247040632272771480
T:
falcon1024dyn
192828384?284901256?422433064?
T:
ronald512
297542848297737344298057536
T:
sphincss128sha256simple
369560288369811784370450824
T:
sphincsf256shake256robust
375978864376531536377386592
T:
luov890351
444522160445419504446365216
T:
luov8086399
448030656448420896449209152
T:
sphincss192sha256simple
529252096529724624531042896mqsignlr2567246
569910560570179648570828752
T:
sphincss128sha256robust
575161040576105792592326576
T:
sphincss256sha256simple
650727680651521424652209120
T:
luov8117404
444256768?689456688?1009312656?
T:
ronald768
723551680724163616725077184mqsignrr2567246
742148160743151800744761448
T:
sflashv2
848594432848875200849779072
T:
sphincss192sha256robust
652887000?1073259536?1696768640?
T:
ronald1024
115945094411625277761166042384
T:
rainbow3cclassic683248
125289396812537521441255111336
T:
sphincss128harakasimple
128915955212958667681300526544
T:
rainbow3ccyclicc683248
138049371213823721121383943408
T:
rainbow3ccompres683248
150682310415073673441508127008
T:
sphincss256sha256robust
160571259216064489041607133896
T:
sphincss128shake256simple
236469216023684653442392619920mqsignlr25611272
308413089630854900643088565232mqsignrr25611272
1924768304?3239421296?4466207552?
T:
ronald1536
327568476832824908643292110128
T:
rainbow5cclassic963664
370635264037158934723760887936
T:
rainbow5ccyclicc963664
2805323344?3899320496?6238120632?
T:
ronald2048
391907209639226292483929103056
T:
rainbow5ccompres963664
413111747241329891844134398816
T:
redgemss128v2
641881928064273067046474847296mqsignlr25614896
805174172880562134728058127424mqsignrr25614896
6667919112?10386856720?17703232944?
T:
ronald3072
167637401521693155435217085137496
T:
rainbow1b
188401555281886770662418915855288
T:
gui184
248342443522483670462424841109040
T:
redgemss192v2
18094712216?31782676288?42319378856?
T:
ronald4096
361497402323643030692836463321752
T:
rainbow1c
400196890084003029788840101599336
T:
rainbow1a
Cycles to sign 59 bytes
25%50%75%system
326616328528339400
T:
sflashv2
676144678304696928ed25519
107803210886161149120
T:
donald512
108487211269441217184
T:
ecdonaldp256
111915211301121250336
T:
rainbow1acyclicc363232
111766411424161275728
T:
rainbow1aclassic363232
160942416385441677672
T:
ronald512
210446421258642155288
T:
donald1024
340152034246883476496mqsignlr2567246
357760835841923599088
T:
ecdonaldk163
377496837830483830296
T:
ecdonaldp160
377856037842083794088
T:
ecdonaldb163
2965960?3841504?7374152?
T:
qtesla1
435564043735924401104
T:
ronald768
492641649558724985864
T:
ronald1024
3782416?5056816?7202112?T!!!dilithium2
517586451888245217104
T:
ecdonaldp192
553438456000645656752mqsignrr2567246
584124858592405874112
T:
ecdonaldk233
584025658619925878360
T:
donald2048
602944060586166108488
T:
falcon512tree
4049656?6163864?12618992?
T:
qtesla3f
625277662731046293240
T:
ecdonaldb233
2607264?6749072?12670080?
T:
pflash1
5380224?6751584?11385968?T!!!dilithium2aes
701756870291127058320
T:
ecdonaldp224
5664960?7648000?10625008?T!!!dilithium3
895068089853609039408
T:
rainbow1b
965954496945289734424
T:
falcon512dyn
967144097332809825200
T:
rainbow3ccyclicc683248
964529697680809872368
T:
rainbow3cclassic683248
9926616995494410025320
T:
rainbow1a
102976721031235210348720
T:
ecdonaldk283
8291744?10354096?17641824?T!!!dilithium3aes
103566241047217610596000mqsignlr25611272
112162961122617611262176
T:
ecdonaldb283
112429681129556011372624
T:
ronald1536
8377312?11408968?14436264?
T:
qtesla1p
6980128?11768160?18835984?T!!!dilithium5
126559521271632812834576
T:
falcon1024tree
136200321364108813729200crossrsdpg128fast
7563056?15293584?23635152?
T:
qtesla3s
155164001555420815587456crossrsdp128fast
156026641564287215735912
T:
rainbow1c
15729072?16657264?23615040?T!!!dilithium5aes
169842881706363217170848mqsignrr25611272
204601602051777620625680
T:
falcon1024dyn
208698402090461620989952
T:
ecdonaldk409
211600162120548821292912
T:
rainbow5ccyclicc963664
211653442123662421337488
T:
rainbow5cclassic963664
226245442275322422833224
T:
ronald2048
230144722304786423085320
T:
ecdonaldb409
233324962347252823518368mqsignlr25614896
260697602610632826149696
T:
ecdonaldp384
12436720?28468448?39752032?haetae2
284705762854080028665968crossrsdpg128balanced
302243683032644830428560crossrsdp128balanced
302592163038684830611520aimer128f
345537603462593634735664crossrsdpg192fast
24487856?34876272?58834184?
T:
qtesla3p
18613920?35011248?51889232?haetae3
371710563738609637516336mqsignrr25614896
400767204022512040394256crossrsdp192fast
22813392?43507792?84470384?haetae5
459855524608905646247936crossrsdpg192balanced
478038644786294447989040
T:
ecdonaldk571
535507045360400053699200
T:
ecdonaldb571
550034245511112055379648
T:
rainbow1acompres363232
571283365725230457359168crossrsdpg128small
598876085995318460118264
T:
ronald3072
612500006135101661558328
T:
ecdonaldp521
618025926195430462029328crossrsdp128small
668694566701585667188432crossrsdpg256fast
708135047092956871118560crossrsdp192balanced
710842247122838471394384
T:
luov863256
730162727310200073304704aimer192f
754762087556483275635760crossrsdp256fast
860563368614572886313296crossrsdpg256balanced
880864008814188888258816crossrsdpg192small
919612329212990492421136picnicl1full
102133856102498560102790480picnicl1fs
107055024107147104107296624crossrsdp192small
124749152124965800125153544
T:
ronald4096
124973376125077088125401824crossrsdp256balanced
142451712143573760144133152picnicl1ur
146212672146408800146721712aimer256f
154121216154270720154592208crossrsdpg256small
160551888160738920160954128
T:
mqdss48
188869456192306208198175120picnicl3full
200424672200616848200962368crossrsdp256small
242357824242600464242917216aimer128s
246619600247431744247935008
T:
luov890351
253895904257456528260230992picnicl3fs
259665664266208560267625808
T:
luov4849242
294616928294954112295217456
T:
sphincsf128sha256simple
342994144343831680356866640picnicl5full
370489504376631072390760096picnicl3ur
392180016392470224393391824
T:
sphincsf192sha256simple
419933248421354832424241936
T:
luov8117404
429160992430384784432449520picnic3l1
493914896497726640499848144picnicl5fs
532455152533130304561198944
T:
sphincsf128sha256robust
558497136566720832622024040
T:
mqdss64
570583216570877856571226240aimer192s
604069584604548448605337344
T:
sphincs256
672445376673841600675497456
T:
rainbow3ccompres683248
668310432675090688686562800picnicl5ur
734245536734584208735510944
T:
sphincsf192sha256robust
880700816881272432882299072
T:
sphincsf256sha256simple
952298336954324992957547984picnic3l3
111367019211144043041115464448aimer256s
137647587213792498401383976848
T:
luov6468330
140869979214095952881410778376
T:
sphincsf128harakasimple
158270864815847360001590844232
T:
sphincsf128shake256simple
161110756816156805761633635392picnic3l5
166904798416701726881671158928
T:
sphincsf192harakasimple
188138153618926846401895751840
T:
rainbow5ccompres963664
200020374420014219122002668640
T:
sphincsf192shake256simple
209322506420945589282095944776
T:
sphincsf128harakarobust
219137483221969851682213166928
T:
sphincsf256sha256robust
252542461625266097762536264944
T:
sphincsf192harakarobust
263737294426403793442657088544
T:
luov8086399
2311585696?2777204368?3204923072?
T:
redgemss128v2
287778275228788388482881285432
T:
sphincsf128shake256robust
301252712030143487843015859280
T:
picnic2l1fs
375835544037603905283762327488
T:
sphincsf192shake256robust
411656424841179272084119077424
T:
sphincsf256harakasimple
441658329644186771844426920128
T:
sphincsf256shake256simple
446264665644630914404464530816
T:
sphincss128sha256simple
624264491262453189606248039568
T:
sphincsf256harakarobust
751448019275160934567699560560
T:
sphincss256sha256simple
787497590478759015367877071904
T:
sphincss128sha256robust
816554203281684568408171036992
T:
sphincsf256shake256robust
5048464312?9987420216?23492334432?
T:
gui184
106563171361065830448010660917392
T:
sphincss192sha256simple
9141556416?10958557936?12930688976?
T:
redgemss192v2
184848434721848607038418488229728
T:
sphincss256sha256robust
190964446081909852729619103684512
T:
sphincss192sha256robust
223865105522238820091222389878096
T:
sphincss128harakasimple
238019597682380310115223805404320
T:
sphincss128shake256simple
Cycles to verify 59 bytes
25%50%75%system
124248125320127336
T:
ronald512
147440148904150192
T:
ronald768
183944184984186248
T:
ronald1024
277824278816281984
T:
ronald1536
395496406280407768
T:
falcon512dyn
398768406608420720
T:
sflashv2
406768407816410576
T:
ronald2048
401040411600413152
T:
falcon512tree
689464693352701384
T:
donald512
701632720464742384
T:
rainbow1aclassic363232
746176747936756552
T:
ronald3072
783872789856823808
T:
qtesla1
823912826880868752
T:
falcon1024dyn
835760844952871928
T:
falcon1024tree
103387210398721089088haetae2
120873612123121245856
T:
ronald4096
162630416439281669064
T:
donald1024
160014416485441762176
T:
pflash1
172655217423041779296
T:
qtesla3f
175701617934961814056
T:
qtesla3s
178604818212481837376T!!!dilithium2
190476819393441953280haetae3
211936021382882157088ed25519
235319223946002447696
T:
ecdonaldp256
228232024155042461392
T:
rainbow3cclassic683248
239598424389602455488haetae5
265721627257922743632
T:
rainbow1a
286219228779202891680T!!!dilithium2aes
298721630087203024672T!!!dilithium3
301216831348163225704
T:
gui184
317576032635363366608
T:
redgemss128v2
332956033514963393600
T:
ecdonaldp160
447702445097764551144
T:
ecdonaldp192
481912848580484929704
T:
qtesla1p
496870450060805044320T!!!dilithium3aes
499054450103685051392T!!!dilithium5
496014450799045207312
T:
sphincss128sha256simple
510775251489525190480
T:
donald2048
590709659547846004080
T:
ecdonaldp224
678420068024566817952
T:
ecdonaldk163
712887271597767189352
T:
rainbow1b
718511271941047213912
T:
ecdonaldb163
720787272690567370048
T:
sphincs256
768625677164807754080
T:
rainbow5cclassic963664
784662479000168003184
T:
sphincss192sha256simple
824705682541288282832crossrsdpg128fast
858636885942088644080mqsignlr2567246
859025686024648658656mqsignrr2567246
872904087690408837536T!!!dilithium5aes
903684890547049090016crossrsdp128fast
9669536984324810094576
T:
sphincss128sha256robust
101116481030022410574576
T:
sphincss256sha256simple
104819841088553611167040
T:
redgemss192v2
113196961133105611356552
T:
ecdonaldk233
121456641215315212172280
T:
ecdonaldb233
121757921238446412532928
T:
sphincsf128sha256simple
132327681325717613308352
T:
rainbow1c
154251361560524815812496
T:
sphincss192sha256robust
158670881590795216013984
T:
rainbow1acompres363232
159090721591745615948656mqsignlr25611272
159150721592297615967216mqsignrr25611272
161397121615862416247584crossrsdpg128balanced
163003041645884817005552
T:
rainbow1acyclicc363232
175412801757819217703024crossrsdp128balanced
199410161995520020012680
T:
ecdonaldk283
198854401996592820083864
T:
ecdonaldp384
199214402020254420554112
T:
sphincsf256sha256simple
201619362037918420575312
T:
sphincsf192sha256simple
210542082109979221201360crossrsdpg192fast
217744962180665621925832
T:
ecdonaldb283
224532962247916822566416crossrsdp192fast
235118722363823223769928
T:
qtesla3p
237530562419662425755296
T:
sphincsf128sha256robust
250607282561524825976632
T:
sphincss128harakasimple
263104802633889626466352crossrsdpg192balanced
259115282660991227136672
T:
sphincss128shake256simple
281654882817268828222560aimer128f
279279362842283228799872
T:
sphincss256sha256robust
318870883198584032106928crossrsdpg128small
343442243441019234535136mqsignrr25614896
343030083444529634605600mqsignlr25614896
357358723584683236006752crossrsdp128small
380713283820035238290176crossrsdp192balanced
400759044014692840238720crossrsdpg256fast
396913764015694440413616
T:
sphincsf192sha256robust
402125204025687240339328
T:
ecdonaldk409
427344324283491242949936crossrsdp256fast
445989204467254444829488
T:
ecdonaldb409
451719124537439245543984
T:
ecdonaldp521
476001924772328047783904crossrsdpg256balanced
485856964872776048912048crossrsdpg192small
551644005558252856265664
T:
sphincsf256sha256robust
567211525686267256952848crossrsdp192small
578834405886314460173168
T:
sphincsf128harakasimple
614807366160460861738688
T:
luov863256
641956086472151265880272
T:
sphincsf128shake256simple
671609606740148868549984aimer192f
675799206768171267749184crossrsdp256balanced
676735366786601667972288picnicl1full
792679527938016079577824crossrsdpg256small
798897608038729680756944picnicl1fs
875244008862794489279408
T:
sphincsf128harakarobust
908619929114801691949184
T:
sphincsf192harakasimple
922920809238503292568280
T:
ecdonaldk571
970475289795688098587648
T:
sphincsf256harakasimple
981764649826467298466832
T:
rainbow3ccyclicc683248
101522200102566288103357864
T:
sphincsf192shake256simple
102222912102614656103264320
T:
rainbow3ccompres683248
103491296103628456103747232
T:
ecdonaldb571
102599560104085280106046032
T:
sphincsf256shake256simple
105088112105161184105365504crossrsdp256small
112539600113077472113561312picnicl1ur
111901984113761088114901928
T:
mqdss48
125056472126370488128417032
T:
sphincsf128shake256robust
133178992133496704133706944aimer256f
138300272139826208140979408
T:
sphincsf192harakarobust
144371904146861472152945904picnicl3full
148131712149867328151562136
T:
sphincsf256harakarobust
162739712163447888164940208
T:
luov4849242
199534728201770784202717168
T:
sphincsf192shake256robust
201117992204333736207038368
T:
sphincsf256shake256robust
201041920206481504209761600picnicl3fs
216144416216633872217765936
T:
luov890351
221666880?222207872?283867312?
T:
rainbow5ccyclicc963664
229208400231518944235913904
T:
rainbow5ccompres963664
234641776234722032235100160aimer128s
266265712267634128281112400picnicl5full
296777008301180592316404288picnicl3ur
346514640347397312349702224picnic3l1
373097440373506400373803520
T:
luov8117404
404304752409484416414451808picnicl5fs
411105976417400136422714192
T:
mqdss64
539907024543001504563060624picnicl5ur
551417312551652816552070368aimer192s
638190768640099216641789104
T:
luov6468330
763372512765220048769805536picnic3l3
107096502410716141121072719680aimer256s
115910816011617176801164371600
T:
luov8086399
122019574412231103041240972128picnic3l5
174210715217438971041748090496
T:
picnic2l1fs