VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information: Introduction eBASH eBASC eBAEAD eBATS SUPERCOP XBX Computers
How to submit new software: Tips hash stream aead dh kem encrypt sign
List of primitives measured: sha3 hash stream caesar aead dh kem encrypt sign
Measurements indexed by machine: sha3 hash stream caesar aead dh kem encrypt sign

List of key-encapsulation mechanisms measured

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project in ECRYPT's VAMPIRE lab to measure the performance of public-key systems. This page lists the key-encapsulation mechanisms covered by VAMPIRE's benchmarking tool, SUPERCOP. The page then lists implementations of these systems.

There is a separate page that lists machines and, for each machine, the measurements of these systems.

Designers and implementors interested in submitting new key-encapsulation mechanisms and new implementations of existing systems should read the call for submissions.

Which key-encapsulation mechanisms are measured?

PrimitiveDescriptionDesigners
babybear
babybearephem
bigquake1
bigquake3
bigquake5
dags3
dags5
edonk128k08n72nu8l8 An alternative Edon-K KEM proposal in Category 1. Conjectured security requires computational resources comparable to or greater than those required for key search on a block cipher with a 128-bit key (e.g. AES128) - Category 1 Danilo Gligoroski
edonk128k16n80nu4l6 An alternative Edon-K KEM proposal in Category 1. Conjectured security requires computational resources comparable to or greater than those required for key search on a block cipher with a 128-bit key (e.g. AES128) - Category 1 Danilo Gligoroski
edonk128k16n80nu8l6 An alternative Edon-K KEM proposal in Category 1. Conjectured security requires computational resources comparable to or greater than those required for key search on a block cipher with a 128-bit key (e.g. AES128) - Category 1 Danilo Gligoroski
edonk128k32n96nu4l4 An alternative Edon-K KEM proposal in Category 1. Conjectured security requires computational resources comparable to or greater than those required for key search on a block cipher with a 128-bit key (e.g. AES128) - Category 1 Danilo Gligoroski
edonk128ref Reference proposal KEM Edon-K128 in Category 1. Conjectured security requires computational resources comparable to or greater than those required for key search on a block cipher with a 128-bit key (e.g. AES128) - Category 1 Danilo Gligoroski
edonk192k16n112nu4l8 An alternative Edon-K KEM proposal in Category 3. Conjectured security requires computational resources comparable to or greater than those required for key search on a block cipher with a 192-bit key (e.g. AES192) - Category 3 Danilo Gligoroski
edonk192k32n128nu4l6 An alternative Edon-K KEM proposal in Category 3. Conjectured security requires computational resources comparable to or greater than those required for key search on a block cipher with a 192-bit key (e.g. AES192) - Category 3 Danilo Gligoroski
edonk192k48n144nu4l4 An alternative Edon-K KEM proposal in Category 3. Conjectured security requires computational resources comparable to or greater than those required for key search on a block cipher with a 192-bit key (e.g. AES192) - Category 3 Danilo Gligoroski
edonk192ref Reference proposal KEM Edon-K192 in Category 3. Conjectured security requires computational resources comparable to or greater than those required for key search on a block cipher with a 192-bit key (e.g. AES192) - Category 3 Danilo Gligoroski
firesaber
frodokem640
frodokem976
kindi256342
kindi256522
kindi512222
kindi512241
kindi512321
kyber512
kyber768
kyber1024
lightsaber
mamabear
mamabearephem
mceliece6960119
mceliece8192128
newhope1024cca
newhope512cca
ntruhrss701
ntrulpr4591761 NTRU LPRime 4591^761 Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
papabear
papabearephem
pqrsa15
ramstakers216091
ramstakers756839
rsa2048 Ronald L. Rivest
Adi Shamir
Leonard M. Adleman
Michael O. Rabin (small exponent)
Victor Shoup (session key is hash of random integer)
saber
sntrup4591761 Streamlined NTRU Prime 4591^761 Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal

Implementations

PrimitiveImplementationAuthors
babybearlowmem
babybearopt
babybearref
babybearvec
babybearephemlowmem
babybearephemopt
babybearephemref
babybearephemvec
bigquake1ref
bigquake3ref
bigquake5ref
dags3ref
dags5ref
edonk128k08n72nu8l8ref Danilo Gligoroski
edonk128k16n80nu4l6ref Danilo Gligoroski
edonk128k16n80nu8l6ref Danilo Gligoroski
edonk128k32n96nu4l4ref Danilo Gligoroski
edonk128refref Danilo Gligoroski
edonk192k16n112nu4l8ref Danilo Gligoroski
edonk192k32n128nu4l6ref Danilo Gligoroski
edonk192k48n144nu4l4ref Danilo Gligoroski
edonk192refref Danilo Gligoroski
firesaberportable
firesaberref
frodokem640optimized
frodokem640reference
frodokem640x64
frodokem976optimized
frodokem976reference
frodokem976x64
kindi256342ref
kindi256522ref
kindi512222ref
kindi512241ref
kindi512321ref
kyber512avx2
kyber512ref
kyber768avx2
kyber768ref
kyber1024avx2
kyber1024ref
lightsaberportable
lightsaberref
mamabearlowmem
mamabearopt
mamabearref
mamabearvec
mamabearephemlowmem
mamabearephemopt
mamabearephemref
mamabearephemvec
mceliece6960119avx
mceliece6960119ref
mceliece6960119sse
mceliece8192128avx
mceliece8192128ref
mceliece8192128sse
newhope1024ccaavx2
newhope1024ccaref
newhope512ccaavx2
newhope512ccaref
ntruhrss701avx2
ntruhrss701ref
ntrulpr4591761avx Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
ntrulpr4591761ref Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
papabearlowmem
papabearopt
papabearref
papabearvec
papabearephemlowmem
papabearephemopt
papabearephemref
papabearephemvec
pqrsa15ref
ramstakers216091ref
ramstakers756839ref
rsa2048gmp
rsa2048gmpxx
rsa2048ntl
saberportable
saberref
sntrup4591761avx Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
sntrup4591761ref Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal

Version

This is version 2018.10.05 of the primitives-kem.html web page. This web page is in the public domain.