VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key signature systems on one machine: armeabi; Cortex-A8 (413fc082); 2012 TI Sitara XAM3359AZCZ100; 1 x 1000MHz; bblack, supercop-20250415

[Page version: 20251005 01:31:31]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key signature systems:

For signature systems that support "message recovery", the space for a signature on a long message is shorter than the space for a signature on a short message.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each signature system and each implementation. Designers and implementors interested in submitting new signature systems and new implementations of existing signature systems should read the call for submissions.


Test results

Graphs: old (pkcycles,pkbytes) (smcycles,sbytes) (mcycles,pkbytes) (mcycles,sbytes) (pkbytes,sbytes)

NISTPQC graphs: (pkcycles,pkbytes) (smcycles,sbytes) (mcycles,pkbytes) (mcycles,sbytes) (pkbytes,sbytes)

Measurement failures: mqqsig160, mqqsig192, mqqsig224, mqqsig256, ntrumls401x, ntrumls439x, ntrumls593x, ntrumls743x, qtesla128, qtesla192, qtesla256

Cycles to generate a key pair
25%50%75%system
515365179253040picnic3l1
518405211253664picnicl1full
763207665679232picnic3l3
770087740878496
T:
picnic2l1fs
774567779280368picnicl3full
805448067281456picnicl1ur
809288124884304picnicl1fs
124688125488152416picnic3l5
124416125568144240picnicl5full
148544149200162288picnicl3fs
148656149856169184picnicl3ur
212976213120213696crossrsdpg128fast
213024213232213488crossrsdpg128small
213216213408214288crossrsdpg128balanced
233648?242864?301072?picnicl5ur
281392286688325344picnicl5fs
406256406448410112crossrsdp128fast
406240406528408032crossrsdp128balanced
406448406736408144crossrsdp128small
450976451264454480crossrsdpg192balanced
451152451696455024crossrsdpg192fast
452816453024454768crossrsdpg192small
519792520016537104aimer128f
521680522640531904aimer128s
543104544448568976
T:
donald512
658864660480698752ed25519
672384?712640?845088?
T:
ecdonaldp256
723424725808777376crossrsdpg256fast
766736770016810752crossrsdpg256balanced
770720773056808176crossrsdpg256small
952608953552985088crossrsdp192small
953072954496989472crossrsdp192balanced
951872954928997472crossrsdp192fast
125089612537441285824aimer192s
125540812604641294512aimer192f
139919214149361436304
T:
donald1024
158651215989761632080T!!!dilithium2
167396816889281726880crossrsdp256fast
168880017149601758080crossrsdp256small
169134417247201753760crossrsdp256balanced
286230428876002912992T!!!dilithium3
290257629231042938592T!!!dilithium2aes
309854431046083135952aimer256f
310496031128483139872aimer256s
335593633830723410680
T:
ecdonaldk163
354160835474723571464
T:
ecdonaldp160
353894435508403602456
T:
ecdonaldb163
453847245633924597752
T:
donald2048
469638447066724752192T!!!dilithium5
490999249243684975856
T:
ecdonaldp192
517582451898245240768T!!!dilithium3aes
544819254665525518344
T:
mqdss48
556738455915125643920
T:
ecdonaldk233
599869660090006052312
T:
ecdonaldb233
666145666767686736008
T:
ecdonaldp224
4744560?6923280?11244624?haetae2
3780400?7353312?11873440?haetae5
7957952?8251384?12904856?
T:
qtesla1
888681689379048996064T!!!dilithium5aes
5660416?9177472?15163248?haetae3
946163294798489511392
T:
sphincsf128sha256simple
969856897271209786664
T:
ecdonaldk283
106197121062637610648520
T:
ecdonaldb283
128188241286756012972984
T:
mqdss64
137225361374457613768624
T:
sphincsf192sha256simple
176404881766500017715800
T:
sphincsf128sha256robust
193131281932667219409896
T:
ecdonaldk409
215580482159388821678696
T:
ecdonaldb409
16565088?24329912?32064960?
T:
qtesla3f
247567282480040824902752
T:
ecdonaldp384
262238802623916826295408
T:
sphincsf192sha256robust
298471522986129629914096
T:
sphincs256
30566024?35296568?48481000?
T:
qtesla1p
358396323586737635941680
T:
sphincsf256sha256simple
394315603944099239481192
T:
sphincsf128harakasimple
25473192?41514888?49743304?
T:
qtesla3s
443233444436836044457648
T:
ecdonaldk571
498355124990765650229896
T:
ecdonaldb571
501319205022408050400112
T:
sphincsf128shake256simple
569087605695104857021216
T:
sphincsf128harakarobust
578030165783936057932680
T:
sphincsf192harakasimple
581258725822110458386448
T:
ecdonaldp521
671499366733003267562032
T:
luov4849242
734513287348487273616648
T:
sphincsf192shake256simple
73407008?83573784?95084256?
T:
falcon512tree
846051128479493685112224
T:
sphincsf192harakarobust
889629768914372892884144
T:
rainbow1aclassic363232
80415056?91109288?103154288?
T:
falcon512dyn
930079209323072093516208
T:
luov863256
938718729395873696351072
T:
sphincsf256sha256robust
956030489562776895801560
T:
sphincsf128shake256robust
104413280104808656105411632
T:
rainbow1acompres363232
111463072112080496114022992
T:
rainbow1acyclicc363232
140409856140477120140621024
T:
sphincsf192shake256robust
152727224152858400153376456
T:
sphincsf256harakasimple
193746280194128320194335928
T:
sphincsf256shake256simple
200693504215024608245572968
T:
falcon1024tree
184723232?215806968?245984360?
T:
qtesla3p
226420152226567832227006776
T:
sphincsf256harakarobust
236317856236816000237582064
T:
luov6468330
233878912247040632272771480
T:
falcon1024dyn
192828384?284901256?422433064?
T:
ronald512
297536672297713400298508664
T:
sphincss128sha256simple
369560288369811784370450824
T:
sphincsf256shake256robust
375978864376531536377386592
T:
luov890351
444522160445419504446365216
T:
luov8086399
447998848448288088449037656
T:
sphincss192sha256simple
529252096529724624531042896mqsignlr2567246
569908976570027128570676544
T:
sphincss128sha256robust
575121872575331512576037304
T:
sphincss256sha256simple
650727680651521424652209120
T:
luov8117404
444256768?689456688?1009312656?
T:
ronald768
723551680724163616725077184mqsignrr2567246
742148160743151800744761448
T:
sflashv2
848443880848832696849704072
T:
sphincss192sha256robust
652887000?1073259536?1696768640?
T:
ronald1024
115945094411625277761166042384
T:
rainbow3cclassic683248
125289396812537521441255111336
T:
sphincss128harakasimple
128915955212958667681300526544
T:
rainbow3ccyclicc683248
138049371213823721121383943408
T:
rainbow3ccompres683248
150707624815079807041534350232
T:
sphincss256sha256robust
160571259216064489041607133896
T:
sphincss128shake256simple
236469216023684653442392619920mqsignlr25611272
308413089630854900643088565232mqsignrr25611272
1924768304?3239421296?4466207552?
T:
ronald1536
327568476832824908643292110128
T:
rainbow5cclassic963664
370635264037158934723760887936
T:
rainbow5ccyclicc963664
2805323344?3899320496?6238120632?
T:
ronald2048
391907209639226292483929103056
T:
rainbow5ccompres963664
413111747241329891844134398816
T:
redgemss128v2
641881928064273067046474847296mqsignlr25614896
805174172880562134728058127424mqsignrr25614896
6667919112?10386856720?17703232944?
T:
ronald3072
167637401521693155435217085137496
T:
rainbow1b
188401555281886770662418915855288
T:
gui184
248342443522483670462424841109040
T:
redgemss192v2
18094712216?31782676288?42319378856?
T:
ronald4096
361497402323643030692836463321752
T:
rainbow1c
400196890084003029788840101599336
T:
rainbow1a
Cycles to sign 59 bytes
25%50%75%system
326616328528339400
T:
sflashv2
676144678304696928ed25519
107803210886161149120
T:
donald512
108487211269441217184
T:
ecdonaldp256
111915211301121250336
T:
rainbow1acyclicc363232
111766411424161275728
T:
rainbow1aclassic363232
160942416385441677672
T:
ronald512
210446421258642155288
T:
donald1024
340152034246883476496mqsignlr2567246
357760835841923599088
T:
ecdonaldk163
377496837830483830296
T:
ecdonaldp160
377856037842083794088
T:
ecdonaldb163
2965960?3841504?7374152?
T:
qtesla1
435564043735924401104
T:
ronald768
492641649558724985864
T:
ronald1024
3782416?5056816?7202112?T!!!dilithium2
517586451888245217104
T:
ecdonaldp192
553438456000645656752mqsignrr2567246
584124858592405874112
T:
ecdonaldk233
584025658619925878360
T:
donald2048
602944060586166108488
T:
falcon512tree
4049656?6163864?12618992?
T:
qtesla3f
625277662731046293240
T:
ecdonaldb233
5380224?6751584?11385968?T!!!dilithium2aes
701756870291127058320
T:
ecdonaldp224
5664960?7648000?10625008?T!!!dilithium3
895068089853609039408
T:
rainbow1b
965954496945289734424
T:
falcon512dyn
967144097332809825200
T:
rainbow3ccyclicc683248
964529697680809872368
T:
rainbow3cclassic683248
9926616995494410025320
T:
rainbow1a
102976721031235210348720
T:
ecdonaldk283
8291744?10354096?17641824?T!!!dilithium3aes
103566241047217610596000mqsignlr25611272
112162961122617611262176
T:
ecdonaldb283
112429681129556011372624
T:
ronald1536
8377312?11408968?14436264?
T:
qtesla1p
6980128?11768160?18835984?T!!!dilithium5
126559521271632812834576
T:
falcon1024tree
136219681368076813753728crossrsdpg128fast
7563056?15293584?23635152?
T:
qtesla3s
155327681558224015704480crossrsdp128fast
156026641564287215735912
T:
rainbow1c
15729072?16657264?23615040?T!!!dilithium5aes
169842881706363217170848mqsignrr25611272
204601602051777620625680
T:
falcon1024dyn
208698402090461620989952
T:
ecdonaldk409
211600162120548821292912
T:
rainbow5ccyclicc963664
211653442123662421337488
T:
rainbow5cclassic963664
226245442275322422833224
T:
ronald2048
230144722304786423085320
T:
ecdonaldb409
233324962347252823518368mqsignlr25614896
260697602610632826149696
T:
ecdonaldp384
12436720?28468448?39752032?haetae2
284473602851110428626368crossrsdpg128balanced
301231363021182430382336crossrsdp128balanced
302592163038684830611520aimer128f
344728003453414434740608crossrsdpg192fast
24487856?34876272?58834184?
T:
qtesla3p
18613920?35011248?51889232?haetae3
371710563738609637516336mqsignrr25614896
400936164021364840343680crossrsdp192fast
22813392?43507792?84470384?haetae5
460183044613260846277520crossrsdpg192balanced
478038644786294447989040
T:
ecdonaldk571
535507045360400053699200
T:
ecdonaldb571
550034245511112055379648
T:
rainbow1acompres363232
570875685722995257326864crossrsdpg128small
598876085995318460118264
T:
ronald3072
612500006135101661558328
T:
ecdonaldp521
617984646189785662143344crossrsdp128small
668632006703404867132016crossrsdpg256fast
707619047087163271063744crossrsdp192balanced
710842247122838471394384
T:
luov863256
730162727310200073304704aimer192f
755035367555524875655664crossrsdp256fast
859998088603702486307248crossrsdpg256balanced
880796328817780888279824crossrsdpg192small
917485609214073692543536picnicl1full
101967600102158272102492544picnicl1fs
107082864107152944107328672crossrsdp192small
124749152124965800125153544
T:
ronald4096
124971808125027536125184256crossrsdp256balanced
141715616141932064142314544picnicl1ur
146212672146408800146721712aimer256f
154134384154266080154457728crossrsdpg256small
160551888160738920160954128
T:
mqdss48
186313424186578480187011616picnicl3full
200352672200528288200775040crossrsdp256small
242357824242600464242917216aimer128s
246619600247431744247935008
T:
luov890351
256728720257620688258302816picnicl3fs
259665664266208560267625808
T:
luov4849242
294499384294758872295172464
T:
sphincsf128sha256simple
342873600344125728345287632picnicl5full
373974976374506352375382992picnicl3ur
392163648392490040392955968
T:
sphincsf192sha256simple
419933248421354832424241936
T:
luov8117404
432833344433441552435119440picnic3l1
524439920527521408529689568picnicl5fs
532397792532953632533727928
T:
sphincsf128sha256robust
558497136566720832622024040
T:
mqdss64
570583216570877856571226240aimer192s
604069584604548448605337344
T:
sphincs256
672445376673841600675497456
T:
rainbow3ccompres683248
696025840697526352699169664picnicl5ur
733953664734626840735434104
T:
sphincsf192sha256robust
880763424881393984882071424
T:
sphincsf256sha256simple
950774048951988480953171920picnic3l3
111367019211144043041115464448aimer256s
137647587213792498401383976848
T:
luov6468330
140869979214095952881410778376
T:
sphincsf128harakasimple
158270864815847360001590844232
T:
sphincsf128shake256simple
159821180816008584961602805024picnic3l5
166904798416701726881671158928
T:
sphincsf192harakasimple
188138153618926846401895751840
T:
rainbow5ccompres963664
200020374420014219122002668640
T:
sphincsf192shake256simple
209322506420945589282095944776
T:
sphincsf128harakarobust
218954056821912613202249512760
T:
sphincsf256sha256robust
252542461625266097762536264944
T:
sphincsf192harakarobust
263737294426403793442657088544
T:
luov8086399
2311585696?2777204368?3204923072?
T:
redgemss128v2
287778275228788388482881285432
T:
sphincsf128shake256robust
301252712030143487843015859280
T:
picnic2l1fs
375835544037603905283762327488
T:
sphincsf192shake256robust
411656424841179272084119077424
T:
sphincsf256harakasimple
441658329644186771844426920128
T:
sphincsf256shake256simple
446316202444638193844464820760
T:
sphincss128sha256simple
624264491262453189606248039568
T:
sphincsf256harakarobust
751520868875158242807516938312
T:
sphincss256sha256simple
787478731278756710327876231536
T:
sphincss128sha256robust
816554203281684568408171036992
T:
sphincsf256shake256robust
5048464312?9987420216?23492334432?
T:
gui184
106546779281065615017610657285840
T:
sphincss192sha256simple
9141556416?10958557936?12930688976?
T:
redgemss192v2
184822142481848532504018808435544
T:
sphincss256sha256robust
190964094961909773043219100183640
T:
sphincss192sha256robust
223865105522238820091222389878096
T:
sphincss128harakasimple
238019597682380310115223805404320
T:
sphincss128shake256simple
Cycles to verify 59 bytes
25%50%75%system
124248125320127336
T:
ronald512
147440148904150192
T:
ronald768
183944184984186248
T:
ronald1024
277824278816281984
T:
ronald1536
395496406280407768
T:
falcon512dyn
398768406608420720
T:
sflashv2
406768407816410576
T:
ronald2048
401040411600413152
T:
falcon512tree
689464693352701384
T:
donald512
701632720464742384
T:
rainbow1aclassic363232
746176747936756552
T:
ronald3072
783872789856823808
T:
qtesla1
823912826880868752
T:
falcon1024dyn
835760844952871928
T:
falcon1024tree
103387210398721089088haetae2
120873612123121245856
T:
ronald4096
162630416439281669064
T:
donald1024
172655217423041779296
T:
qtesla3f
175701617934961814056
T:
qtesla3s
178604818212481837376T!!!dilithium2
190476819393441953280haetae3
211936021382882157088ed25519
235319223946002447696
T:
ecdonaldp256
228232024155042461392
T:
rainbow3cclassic683248
239598424389602455488haetae5
265721627257922743632
T:
rainbow1a
286219228779202891680T!!!dilithium2aes
298721630087203024672T!!!dilithium3
301216831348163225704
T:
gui184
317576032635363366608
T:
redgemss128v2
332956033514963393600
T:
ecdonaldp160
447702445097764551144
T:
ecdonaldp192
481912848580484929704
T:
qtesla1p
496870450060805044320T!!!dilithium3aes
499054450103685051392T!!!dilithium5
501832050818325235656
T:
sphincss128sha256simple
510775251489525190480
T:
donald2048
590709659547846004080
T:
ecdonaldp224
678420068024566817952
T:
ecdonaldk163
712887271597767189352
T:
rainbow1b
718511271941047213912
T:
ecdonaldb163
720787272690567370048
T:
sphincs256
768625677164807754080
T:
rainbow5cclassic963664
777870479271208019584
T:
sphincss192sha256simple
824878482597288286736crossrsdpg128fast
858636885942088644080mqsignlr2567246
859025686024648658656mqsignrr2567246
872904087690408837536T!!!dilithium5aes
902177690492009080320crossrsdp128fast
9503400977467210004744
T:
sphincss128sha256robust
101126401025825610456304
T:
sphincss256sha256simple
104819841088553611167040
T:
redgemss192v2
113196961133105611356552
T:
ecdonaldk233
121456641215315212172280
T:
ecdonaldb233
122527121242996812651792
T:
sphincsf128sha256simple
132327681325717613308352
T:
rainbow1c
152467361553852015758696
T:
sphincss192sha256robust
158670881590795216013984
T:
rainbow1acompres363232
159090721591745615948656mqsignlr25611272
159150721592297615967216mqsignrr25611272
161461441617704016218448crossrsdpg128balanced
163003041645884817005552
T:
rainbow1acyclicc363232
174880801753316817600064crossrsdp128balanced
199410161995520020012680
T:
ecdonaldk283
198854401996592820083864
T:
ecdonaldp384
200646802030712820496784
T:
sphincsf256sha256simple
200521522036588020452848
T:
sphincsf192sha256simple
209523362098555221151088crossrsdpg192fast
217744962180665621925832
T:
ecdonaldb283
225029122255516822682096crossrsdp192fast
233052962353820024201928
T:
sphincsf128sha256robust
235118722363823223769928
T:
qtesla3p
250607282561524825976632
T:
sphincss128harakasimple
262728322635041626486160crossrsdpg192balanced
259115282660991227136672
T:
sphincss128shake256simple
281654882817268828222560aimer128f
278884722843432028936432
T:
sphincss256sha256robust
318892163201766432093712crossrsdpg128small
343442243441019234535136mqsignrr25614896
343030083444529634605600mqsignlr25614896
357386883580723235930528crossrsdp128small
380761123812868838288928crossrsdp192balanced
396990484014460840448976
T:
sphincsf192sha256robust
402125204025687240339328
T:
ecdonaldk409
401324804027230440465168crossrsdpg256fast
427288324283320043032816crossrsdp256fast
445989204467254444829488
T:
ecdonaldb409
451719124537439245543984
T:
ecdonaldp521
475817924772478447956192crossrsdpg256balanced
485616644871960048825600crossrsdpg192small
555231765610931256605624
T:
sphincsf256sha256robust
567322565688976056990784crossrsdp192small
578834405886314460173168
T:
sphincsf128harakasimple
614807366160460861738688
T:
luov863256
641956086472151265880272
T:
sphincsf128shake256simple
671609606740148868549984aimer192f
675624806770563267812256crossrsdp256balanced
682188006843022468708144picnicl1full
792628487939038479600240crossrsdpg256small
796439367984052880055728picnicl1fs
875244008862794489279408
T:
sphincsf128harakarobust
908619929114801691949184
T:
sphincsf192harakasimple
922920809238503292568280
T:
ecdonaldk571
970475289795688098587648
T:
sphincsf256harakasimple
981764649826467298466832
T:
rainbow3ccyclicc683248
101522200102566288103357864
T:
sphincsf192shake256simple
102222912102614656103264320
T:
rainbow3ccompres683248
103491296103628456103747232
T:
ecdonaldb571
102599560104085280106046032
T:
sphincsf256shake256simple
104980224105115744105297808crossrsdp256small
111645120111905312112092048picnicl1ur
111901984113761088114901928
T:
mqdss48
125056472126370488128417032
T:
sphincsf128shake256robust
133178992133496704133706944aimer256f
138300272139826208140979408
T:
sphincsf192harakarobust
141323552141494352141782320picnicl3full
148131712149867328151562136
T:
sphincsf256harakarobust
162739712163447888164940208
T:
luov4849242
199534728201770784202717168
T:
sphincsf192shake256robust
201117992204333736207038368
T:
sphincsf256shake256robust
205547296205961808206828656picnicl3fs
216144416216633872217765936
T:
luov890351
221666880?222207872?283867312?
T:
rainbow5ccyclicc963664
229208400231518944235913904
T:
rainbow5ccompres963664
234641776234722032235100160aimer128s
268417872269301952270728688picnicl5full
300029312300582032301046768picnicl3ur
349144064349729472350479216picnic3l1
373097440373506400373803520
T:
luov8117404
411105976417400136422714192
T:
mqdss64
437918016440057328441099904picnicl5fs
551417312551652816552070368aimer192s
565415968569724080573662832picnicl5ur
638190768640099216641789104
T:
luov6468330
760087120761254512763541200picnic3l3
107096502410716141121072719680aimer256s
115910816011617176801164371600
T:
luov8086399
120635820812084572161211987440picnic3l5
174210715217438971041748090496
T:
picnic2l1fs