VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information: Introduction eBASH eBASC eBAEAD eBATS SUPERCOP XBX Computers
How to submit new software: Tips hash stream aead dh kem encrypt sign
List of primitives measured: sha3 hash stream caesar aead dh kem encrypt sign
Measurements indexed by machine: sha3 hash stream caesar aead dh kem encrypt sign

List of key-encapsulation mechanisms measured

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project in ECRYPT's VAMPIRE lab to measure the performance of public-key systems. This page lists the key-encapsulation mechanisms covered by VAMPIRE's benchmarking tool, SUPERCOP. The page then lists implementations of these systems.

There is a separate page that lists machines and, for each machine, the measurements of these systems.

Designers and implementors interested in submitting new key-encapsulation mechanisms and new implementations of existing systems should read the call for submissions.

Which key-encapsulation mechanisms are measured?

PrimitiveDescriptionDesigners
babybear
babybearephem
bigquake1
bigquake3
bigquake5
bike1l1
bike1l1nc
bike1l1sc
bike2l1
bike2l1nc
bike2l1sc
bike3l1
bike3l1nc
bike3l1sc
dags3
dags5
edonk128k08n72nu8l8 An alternative Edon-K KEM proposal in Category 1. Conjectured security requires computational resources comparable to or greater than those required for key search on a block cipher with a 128-bit key (e.g. AES128) - Category 1 Danilo Gligoroski
edonk128k16n80nu4l6 An alternative Edon-K KEM proposal in Category 1. Conjectured security requires computational resources comparable to or greater than those required for key search on a block cipher with a 128-bit key (e.g. AES128) - Category 1 Danilo Gligoroski
edonk128k16n80nu8l6 An alternative Edon-K KEM proposal in Category 1. Conjectured security requires computational resources comparable to or greater than those required for key search on a block cipher with a 128-bit key (e.g. AES128) - Category 1 Danilo Gligoroski
edonk128k32n96nu4l4 An alternative Edon-K KEM proposal in Category 1. Conjectured security requires computational resources comparable to or greater than those required for key search on a block cipher with a 128-bit key (e.g. AES128) - Category 1 Danilo Gligoroski
edonk128ref Reference proposal KEM Edon-K128 in Category 1. Conjectured security requires computational resources comparable to or greater than those required for key search on a block cipher with a 128-bit key (e.g. AES128) - Category 1 Danilo Gligoroski
edonk192k16n112nu4l8 An alternative Edon-K KEM proposal in Category 3. Conjectured security requires computational resources comparable to or greater than those required for key search on a block cipher with a 192-bit key (e.g. AES192) - Category 3 Danilo Gligoroski
edonk192k32n128nu4l6 An alternative Edon-K KEM proposal in Category 3. Conjectured security requires computational resources comparable to or greater than those required for key search on a block cipher with a 192-bit key (e.g. AES192) - Category 3 Danilo Gligoroski
edonk192k48n144nu4l4 An alternative Edon-K KEM proposal in Category 3. Conjectured security requires computational resources comparable to or greater than those required for key search on a block cipher with a 192-bit key (e.g. AES192) - Category 3 Danilo Gligoroski
edonk192ref Reference proposal KEM Edon-K192 in Category 3. Conjectured security requires computational resources comparable to or greater than those required for key search on a block cipher with a 192-bit key (e.g. AES192) - Category 3 Danilo Gligoroski
firesaber
frodokem640
frodokem976
hila5
kindi256342
kindi256522
kindi512222
kindi512241
kindi512321
kyber512
kyber768
kyber1024
lac128
lac192
lac256
lake1
lake2
lake3
ledakem12
ledakem13
ledakem14
ledakem32
ledakem33
ledakem34
ledakem52
ledakem53
ledakem54
lightsaber
lima2p1024cca
lima2p2048cca
limasp1018cca
limasp1306cca
limasp1822cca
limasp2062cca
locker1
locker2
locker3
locker4
locker5
locker6
locker7
locker8
locker9
lotus128
lotus192
lotus256
mamabear
mamabearephem
mceliece6960119
mceliece8192128
mersenne756839
newhope1024cca
newhope512cca
ntruhrss701
ntrukem443
ntrukem743
ntrulpr4591761 NTRU LPRime 4591^761 Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
ntskem1264
ntskem1380
ntskem13136
oddmanhattan128
oddmanhattan192
oddmanhattan256
papabear
papabearephem
pqrsa15
ramstakers216091
ramstakers756839
remblem928
remblem1056
rsa2048 Ronald L. Rivest
Adi Shamir
Leonard M. Adleman
Michael O. Rabin (small exponent)
Victor Shoup (session key is hash of random integer)
saber
sikep503
sntrup4591761 Streamlined NTRU Prime 4591^761 Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
titaniumccahi
titaniumccalite
titaniumccamed
titaniumccastd
titaniumccasuper
titaniumccatoy

Implementations

PrimitiveImplementationAuthors
babybearlowmem
babybearopt
babybearref
babybearvec
babybearephemlowmem
babybearephemopt
babybearephemref
babybearephemvec
bigquake1ref
bigquake3ref
bigquake5ref
bike1l1ref_ntl Nir Drucker (University of Haifa, Israel, and Amazon Web Services, USA),
Shay Gueron (University of Haifa, Israel, and Amazon Web Services, USA),
Rafael Misoczki (Intel Corporation, USA),
Tobias Oder (Ruhr-Universitat Bochum, Germany DFKI, Germany),
Tim Gueneysu (Ruhr-Universitat Bochum, Germany DFKI, Germany).
bike1l1ncavx2_ntl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike1l1ncavx2_ossl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike1l1ncavx512_ntl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike1l1ncavx512_ossl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike1l1ncref_ntl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike1l1ncref_ossl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike1l1scavx2_ntl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike1l1scavx2_ossl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike1l1scavx512_ntl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike1l1scavx512_ossl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike1l1scref_ntl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike1l1scref_ossl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike2l1ref_ntl Nir Drucker (University of Haifa, Israel, and Amazon Web Services, USA),
Shay Gueron (University of Haifa, Israel, and Amazon Web Services, USA),
Rafael Misoczki (Intel Corporation, USA),
Tobias Oder (Ruhr-Universitat Bochum, Germany DFKI, Germany),
Tim Gueneysu (Ruhr-Universitat Bochum, Germany DFKI, Germany).
bike2l1ncavx2_ntl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike2l1ncavx2_ossl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike2l1ncavx512_ntl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike2l1ncavx512_ossl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike2l1ncref_ntl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike2l1ncref_ossl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike2l1scavx2_ntl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike2l1scavx2_ossl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike2l1scavx512_ntl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike2l1scavx512_ossl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike2l1scref_ntl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike2l1scref_ossl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike3l1ref_ntl Nir Drucker (University of Haifa, Israel, and Amazon Web Services, USA),
Shay Gueron (University of Haifa, Israel, and Amazon Web Services, USA),
Rafael Misoczki (Intel Corporation, USA),
Tobias Oder (Ruhr-Universitat Bochum, Germany DFKI, Germany),
Tim Gueneysu (Ruhr-Universitat Bochum, Germany DFKI, Germany).
bike3l1ncavx2_ntl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike3l1ncavx2_ossl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike3l1ncavx512_ntl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike3l1ncavx512_ossl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike3l1ncref_ntl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike3l1ncref_ossl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike3l1scavx2_ntl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike3l1scavx2_ossl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike3l1scavx512_ntl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike3l1scavx512_ossl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike3l1scref_ntl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
bike3l1scref_ossl Nir Drucker (Amazon Web Services and The University of Haifa)
Shay Gueron (Amazon Web Services and The University of Haifa)
dags3ref
dags5ref
edonk128k08n72nu8l8ref Danilo Gligoroski
edonk128k16n80nu4l6ref Danilo Gligoroski
edonk128k16n80nu8l6ref Danilo Gligoroski
edonk128k32n96nu4l4ref Danilo Gligoroski
edonk128refref Danilo Gligoroski
edonk192k16n112nu4l8ref Danilo Gligoroski
edonk192k32n128nu4l6ref Danilo Gligoroski
edonk192k48n144nu4l4ref Danilo Gligoroski
edonk192refref Danilo Gligoroski
firesaberportable
firesaberref
frodokem640optimized
frodokem640reference
frodokem640x64
frodokem976optimized
frodokem976reference
frodokem976x64
hila5avx2
hila5opt
hila5ref
kindi256342ref
kindi256522ref
kindi512222ref
kindi512241ref
kindi512321ref
kyber512avx2
kyber512ref
kyber768avx2
kyber768ref
kyber1024avx2
kyber1024ref
lac128avx2
lac128opt
lac128ref
lac192avx2
lac192opt
lac192ref
lac256avx2
lac256opt
lac256ref
lake1ref
lake2ref
lake3ref
ledakem12ref
ledakem13ref
ledakem14ref
ledakem32ref
ledakem33ref
ledakem34ref
ledakem52ref
ledakem53ref
ledakem54ref
lightsaberportable
lightsaberref
lima2p1024ccaopt
lima2p1024ccaref
lima2p2048ccaopt
lima2p2048ccaref
limasp1018ccaopt
limasp1018ccaref
limasp1306ccaopt
limasp1306ccaref
limasp1822ccaopt
limasp1822ccaref
limasp2062ccaopt
limasp2062ccaref
locker1ref
locker2ref
locker3ref
locker4ref
locker5ref
locker6ref
locker7ref
locker8ref
locker9ref
lotus128avx2 Takuya HAYASHI
lotus128opt Takuya HAYASHI
lotus128ref Takuya HAYASHI
lotus192avx2 Takuya HAYASHI
lotus192opt Takuya HAYASHI
lotus192ref Takuya HAYASHI
lotus256avx2 Takuya HAYASHI
lotus256opt Takuya HAYASHI
lotus256ref Takuya HAYASHI
mamabearlowmem
mamabearopt
mamabearref
mamabearvec
mamabearephemlowmem
mamabearephemopt
mamabearephemref
mamabearephemvec
mceliece6960119avx
mceliece6960119ref
mceliece6960119sse
mceliece8192128avx
mceliece8192128ref
mceliece8192128sse
mersenne756839opt
mersenne756839ref
newhope1024ccaavx2
newhope1024ccaref
newhope512ccaavx2
newhope512ccaref
ntruhrss701avx2
ntruhrss701ref
ntrukem443ref
ntrukem743ref
ntrulpr4591761avx Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
ntrulpr4591761ref Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
ntskem1264avx2
ntskem1264opt
ntskem1264ref
ntskem1264sse2
ntskem1380avx2
ntskem1380opt
ntskem1380ref
ntskem1380sse2
ntskem13136avx2
ntskem13136opt
ntskem13136ref
ntskem13136sse2
oddmanhattan128opt
oddmanhattan128ref
oddmanhattan192opt
oddmanhattan192ref
oddmanhattan256opt
oddmanhattan256ref
papabearlowmem
papabearopt
papabearref
papabearvec
papabearephemlowmem
papabearephemopt
papabearephemref
papabearephemvec
pqrsa15ref
ramstakers216091ref
ramstakers756839ref
remblem928ref
remblem1056ref
rsa2048gmp
rsa2048gmpxx
rsa2048ntl
saberportable
saberref
sikep503ms
sikep503opt
sikep503ref
sikep503x64
sntrup4591761avx Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
sntrup4591761ref Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
titaniumccahiavx2
titaniumccahiopt
titaniumccahiref
titaniumccaliteavx2
titaniumccaliteopt
titaniumccaliteref
titaniumccamedavx2
titaniumccamedopt
titaniumccamedref
titaniumccastdavx2
titaniumccastdopt
titaniumccastdref
titaniumccasuperavx2
titaniumccasuperopt
titaniumccasuperref
titaniumccatoyavx2
titaniumccatoyopt
titaniumccatoyref

Version

This is version 2018.12.12 of the primitives-kem.html web page. This web page is in the public domain.