VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems

ECRYPT II

Measurements of public-key cryptosystems, indexed by machine

There is a separate page with more information about each public-key cryptosystem and each implementation. Designers and implementors interested in submitting new public-key cryptosystems and new implementations of existing cryptosystems should read the call for submissions.

What do the graphs and tables mean?

• Time to encrypt a short message.
• Time to decrypt a short message.
• Time to compute a key pair.
• Space for a secret key.
• Space for a public key.
• Ciphertext overhead for a short message: more precisely, the difference between the space used by a short encrypted message and the space used by the original message.
• Ciphertext overhead for a long message.

Each computer also has a series of tables, eight tables for each computer. The first table shows the time, in cycles, to generate a key pair. Each row of the table lists

• the first quartile of many time measurements,
• the median of many time measurements,
• the third quartile of many time measurements, and
• the name of the cryptosystem.

The computer name is linked to additional information about the implementations and compilers selected for benchmarking.

amd64; Zen (800f12); 2017 AMD EPYC 7601; 64 x 2200MHz; genji262, supercop-20171020

Cycles to generate a key pair quartile median quartile system 330770 334092 338206 ntruees401ep2 386782 392480 398508 ntruees439ep1 623480? 633754? 948244? ntruees593ep1 897732 912142 945318 ntruees743ep1 22265650 22414612 22559878 ntruees787ep1 26885210? 41163672? 54661464? ronald1024 47712478? 102476044? 145697794? ronald1536 79992220? 114794658? 186335028? rsa2048 75594310? 125145504? 191305686? cargocult2048 143320958? 214429820? 280893690? ronald2048 308667282? 546403638? 904088042? ronald3072 862527292? 1350530918? 2249597064? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 17754 18128 18656 rsa2048 18920 19448 21274 cargocult2048 32450 32692 33638 ronald1024 38786 39204 39666 ntruees401ep2 41712 42790 43604 ronald1536 44198 45056 45672 ntruees439ep1 55308 56320 57728 ronald2048 59730? 60434? 88132? ntruees593ep1 74426 74866 76890 ntruees743ep1 89716 91036 92686 ronald3072 112530 113124 113718 ntruees787ep1 136950 138732 140932 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 41316 41844 43340 ntruees401ep2 47916 48268 50226 ntruees439ep1 66418? 70268? 102498? ntruees593ep1 86394 87978 101068 ntruees743ep1 169092 170192 171974 ntruees787ep1 750200 765644 773872 ronald1024 2029720 2047540 2067318 ronald1536 2294578 2301354 2328260 cargocult2048 2292180 2301420 2316710 rsa2048 3193168 3220602 3381268 ronald2048 8725178 8762424 8831702 ronald3072 18585754 18627444 18720746 ronald4096 Secret key bytes system 384 cargocult2048 384 rsa2048 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 Public key bytes system 128 ronald1024 192 ronald1536 256 cargocult2048 256 ronald2048 256 rsa2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 ronald2048 272 rsa2048 284 cargocult2048 384 ronald3072 512 ronald4096 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 ronald2048 272 rsa2048 284 cargocult2048 361 ronald3072 489 ronald4096 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 272 rsa2048 284 cargocult2048 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

amd64; Zen (800f11); 2017 AMD Ryzen 7 1700; 8 x 2994MHz; ryzen, supercop-20170904

Cycles to generate a key pair quartile median quartile system 1885410 1888590 1894050 ntruees401ep2 2221110 2227620 2232990 ntruees439ep1 3944820 3954180 3961200 ntruees593ep1 6077910 6086340 6096660 ntruees743ep1 61454970 61707060 61897050 ntruees787ep1 73750290? 139838850? 189982320? rsa2048 79537380? 149267610? 221860560? cargocult2048 Cycles to encrypt 59 bytes quartile median quartile system 20190 21240 22560 cargocult2048 20850 21660 22470 rsa2048 68700 69120 69570 ntruees401ep2 77190 77640 78060 ntruees439ep1 122820 123420 123840 ntruees593ep1 164100 164640 165390 ntruees743ep1 192780 193230 193740 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 90690 90960 92220 ntruees401ep2 102000 102570 103890 ntruees439ep1 165240 165540 167340 ntruees593ep1 233550 234210 236490 ntruees743ep1 269130 269430 271020 ntruees787ep1 2621010 2623110 2625930 cargocult2048 2619870 2625390 2628720 rsa2048 Secret key bytes system 384 cargocult2048 384 rsa2048 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1120 ntruees743ep1 1854 ntruees787ep1 Public key bytes system 256 cargocult2048 256 rsa2048 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 Encrypting 0 bytes bytes system 272 rsa2048 284 cargocult2048 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 272 rsa2048 284 cargocult2048 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 272 rsa2048 284 cargocult2048 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

amd64; KabyLake (906e9); 2017 Intel Xeon E3-1220 v6; 4 x 3000MHz; kizomba, supercop-20171218

Cycles to generate a key pair quartile median quartile system 383465 385145 388074 ntruees401ep2 443829 447635 461192 ntruees439ep1 746849 751112 754496 ntruees593ep1 1089056 1094966 1105028 ntruees743ep1 1340375 1341988 1343772 3hfe 28302258? 44834520? 69656857? ronald1024 67243866 67473479 67665551 ntruees787ep1 55722579? 123993395? 176727590? rsa2048 70121851? 124967649? 172901220? cargocult2048 67334645? 137315734? 201386750? ronald1536 125782935? 199588553? 334782502? ronald2048 397042802? 645832536? 942261272? ronald3072 867597363? 1562258107? 2172903345? ronald4096 3585247525 3667267901 3752781103 pqrsa15 Cycles to encrypt 59 bytes quartile median quartile system 3324 3333 3345 3hfe 21202 21792 22535 rsa2048 21111 22186 23402 cargocult2048 32801 33284 34300 ronald1024 41524 41867 42343 ntruees401ep2 46660 47162 47542 ntruees439ep1 45782 47233 48939 ronald1536 62457 63885 65369 ronald2048 68522 69018 69431 ntruees593ep1 86066 86605 87256 ntruees743ep1 103226 105020 107728 ronald3072 159488 161895 163936 ronald4096 281998 283574 285019 ntruees787ep1 18077381 18088300 18101947 pqrsa15 Cycles to decrypt 59 bytes quartile median quartile system 42850 43145 43538 ntruees401ep2 47750 48052 48427 ntruees439ep1 73190 73440 74101 ntruees593ep1 93547 93799 105137 3hfe 97525 97859 98883 ntruees743ep1 482748 484784 488395 ntruees787ep1 838176 848252 858439 ronald1024 2144921 2148447 2154488 cargocult2048 2144034 2151797 2235297 rsa2048 2285111 2300715 2323562 ronald1536 3338169 3357859 3377923 ronald2048 8490167 8521312 8542675 ronald3072 17351401 17411246 17470123 ronald4096 122894790 122942357 123020035 pqrsa15 Secret key bytes system 384 cargocult2048 384 rsa2048 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 5184 3hfe 98304 pqrsa15 Public key bytes system 128 ronald1024 192 ronald1536 256 cargocult2048 256 ronald2048 256 rsa2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 7616 3hfe 32768 pqrsa15 Encrypting 0 bytes bytes system 67 3hfe 128 ronald1024 192 ronald1536 256 ronald2048 272 rsa2048 284 cargocult2048 384 ronald3072 512 ronald4096 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 32768 pqrsa15 Encrypting 23 bytes bytes system 44 3hfe 105 ronald1024 169 ronald1536 233 ronald2048 272 rsa2048 284 cargocult2048 361 ronald3072 489 ronald4096 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 32745 pqrsa15 Encrypting many bytes bytes system 67 3hfe 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 141 pqrsa15 272 rsa2048 284 cargocult2048 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

x86; normally amd64; KabyLake (906e9); 2017 Intel Xeon E3-1220 v6; 4 x 3000MHz; kizomba, supercop-20171218

Cycles to generate a key pair quartile median quartile system 790867 795984 798832 ntruees439ep1 1282429 1288074 1292748 ntruees593ep1 1896542 1906730 1915539 ntruees743ep1 67197732 67463965 67660344 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 72572 73004 73586 ntruees439ep1 111605 112207 112845 ntruees593ep1 150310 150832 151758 ntruees743ep1 291760 293172 294400 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 85637 85917 87359 ntruees439ep1 140778 141326 144234 ntruees593ep1 208067 208881 216805 ntruees743ep1 491266 492174 493881 ntruees787ep1 Secret key bytes system 659 ntruees439ep1 891 ntruees593ep1 1120 ntruees743ep1 1854 ntruees787ep1 Public key bytes system 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 Encrypting 0 bytes bytes system 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

amd64; SL+512x2 (50654); 2017 Intel Xeon Gold 6150; 18 x 2700MHz; manny1024, supercop-20170904

Cycles to generate a key pair quartile median quartile system 480254 485066 493388 ntruees401ep2 558644 562332 570388 ntruees439ep1 921720 928438 938334 ntruees593ep1 1364850 1377726 1402320 ntruees743ep1 34273550? 50817622? 68856474? ronald1024 53963340 54181282 54447836 ntruees787ep1 79682964? 120677954? 180949838? cargocult2048 66966558? 121035492? 165241278? ronald1536 82652992? 130454234? 208064104? rsa2048 186733572? 281081436? 453997576? ronald2048 390792558? 851836682? 1402669636? ronald3072 952195616? 1878419364? 3222421340? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 21124 21524 22496 cargocult2048 21886 22670 24178 rsa2048 36474 36930 38288 ronald1024 50138 50522 50936 ntruees401ep2 54468 55996 58070 ronald1536 57050 57416 57872 ntruees439ep1 76614 77036 77596 ntruees593ep1 77042 78840 80410 ronald2048 98556 99040 99894 ntruees743ep1 101900 102314 102828 ntruees787ep1 135950 137430 140494 ronald3072 216178 217686 220964 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 54832 55216 56008 ntruees401ep2 61066 61520 62724 ntruees439ep1 86546 86926 88420 ntruees593ep1 118616 119946 122222 ntruees743ep1 120790 122926 124844 ntruees787ep1 1074944 1085542 1095750 ronald1024 2199326 2203728 2211114 cargocult2048 2214826 2229430 2409966 rsa2048 2439494 2455564 2485790 ronald1536 4644530 4667700 4702230 ronald2048 13820392 13862504 13918874 ronald3072 29241680 29296186 29352952 ronald4096 Secret key bytes system 384 cargocult2048 384 rsa2048 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 Public key bytes system 128 ronald1024 192 ronald1536 256 cargocult2048 256 ronald2048 256 rsa2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 ronald2048 272 rsa2048 284 cargocult2048 384 ronald3072 512 ronald4096 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 ronald2048 272 rsa2048 284 cargocult2048 361 ronald3072 489 ronald4096 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 272 rsa2048 284 cargocult2048 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

amd64; SL+512x2 (50654); 2017 Intel Xeon Gold 6130; 32 x 2100MHz; genji239, supercop-20171020

Cycles to generate a key pair quartile median quartile system 452170 456868 463900 ntruees401ep2 524892 529046 536562 ntruees439ep1 858040 865872 882096 ntruees593ep1 1264330 1273200 1285974 ntruees743ep1 20811648 20899960 20975190 ntruees787ep1 34025532? 54731758? 75201316? ronald1024 62503774? 102017696? 166537658? cargocult2048 73709114? 126315256? 219018796? ronald1536 71079448? 128870474? 198434610? rsa2048 153889266? 239794000? 384964610? ronald2048 465209938? 749759910? 1434760294? ronald3072 1160260114? 2007461798? 3501793670? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 20804 21442 22888 rsa2048 21056 21784 22650 cargocult2048 37278 37772 39580 ronald1024 48622 48942 49246 ntruees401ep2 54378 55146 56392 ronald1536 55116 55440 55708 ntruees439ep1 74562 74930 75530 ntruees593ep1 76832 78452 80546 ronald2048 96820 97328 97884 ntruees743ep1 119300 119954 120588 ntruees787ep1 135588 136268 139490 ronald3072 213142 215632 219142 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 50816 51060 51982 ntruees401ep2 58062 58466 58976 ntruees439ep1 83292 83732 84990 ntruees593ep1 114584 115106 116980 ntruees743ep1 149228 149876 154236 ntruees787ep1 1066752 1079066 1092168 ronald1024 2158046 2165812 2168860 cargocult2048 2167330 2174018 2384074 rsa2048 2416872 2433728 2460684 ronald1536 4643778 4671192 4731578 ronald2048 13832558 13878648 14008834 ronald3072 29140486 29192370 29323560 ronald4096 Secret key bytes system 384 cargocult2048 384 rsa2048 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 Public key bytes system 128 ronald1024 192 ronald1536 256 cargocult2048 256 ronald2048 256 rsa2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 ronald2048 272 rsa2048 284 cargocult2048 384 ronald3072 512 ronald4096 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 ronald2048 272 rsa2048 284 cargocult2048 361 ronald3072 489 ronald4096 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 272 rsa2048 284 cargocult2048 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

amd64; SL+512x2 (50654); 2017 Intel Core i7-7800X; 6 x 3500MHz; unstable; oki, supercop-20171218

Cycles to generate a key pair quartile median quartile system 323526 325102 326538 ntruees401ep2 455442 459214 461836 ntruees439ep1 764830 768172 771994 ntruees593ep1 1121384 1125874 1129878 ntruees743ep1 21635232 21713920 21818480 ntruees787ep1 82260018 87850758 99667126 mceliece Cycles to encrypt 59 bytes quartile median quartile system 36700 36940 37306 ntruees401ep2 41258 41482 41686 ntruees439ep1 57578 57872 58174 ntruees593ep1 72628 73004 73370 ntruees743ep1 81924 83206 85698 mceliece 98624 99080 99590 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 36110 36276 36446 ntruees401ep2 43954 44136 44376 ntruees439ep1 63358 63608 64218 ntruees593ep1 83806 84132 84676 ntruees743ep1 124106 124638 126842 ntruees787ep1 1797992 1806384 1887756 mceliece Secret key bytes system 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1120 ntruees743ep1 1854 ntruees787ep1 137282 mceliece Public key bytes system 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

amd64; KnLanding (50671); 2016 Intel Xeon Phi 7250; 68 x 1400MHz; unstable; pluton1mn, supercop-20160806

Cycles to generate a key pair quartile median quartile system 1144892 1159200 1174894 ntruees401ep2 1321768 1338848 1359092 ntruees439ep1 2278542 2310924 2362430 ntruees593ep1 3381616 3432800 3553928 ntruees743ep1 70245700 70968184 71674288 ntruees787ep1 77908684? 111424838? 161791000? ronald1024 178268552? 253608712? 478603706? ronald1536 438816994? 985281038? 1402450742? ronald2048 1444536800? 2696404354? 4232009082? ronald3072 5420618882? 8731861628? 12732692868? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 96404 97902 98686 ntruees401ep2 108360 109270 111244 ntruees439ep1 119490 123242 131628 ronald1024 155400 156604 158396 ntruees593ep1 179228 185262 195062 ronald1536 193676 195328 201152 ntruees743ep1 195916 197316 203322 ntruees787ep1 279482 284648 296828 ronald2048 509642 518308 532182 ronald3072 823802 833728 842562 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 119392 119966 121212 ntruees401ep2 131950 132650 134512 ntruees439ep1 188734 189854 196336 ntruees593ep1 241500 243320 252014 ntruees743ep1 277060 277970 290752 ntruees787ep1 3371382 3419486 3495212 ronald1024 8706922 8755628 8857338 ronald1536 18721094 18781672 18844490 ronald2048 55544678 55639094 55718306 ronald3072 123128446 123215512 123361448 ronald4096 Secret key bytes system 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 ronald2048 361 ronald3072 489 ronald4096 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

amd64; KnLanding (50671); 2016 Intel Xeon Phi 7210; 64 x 1300MHz; genji154, supercop-20170228

Cycles to generate a key pair quartile median quartile system 981708 994513 1016002 ntruees401ep2 1393301 1410071 1430117 ntruees439ep1 2395445 2418182 2434263 ntruees593ep1 3609242 3645057 3691155 ntruees743ep1 77735268 78296582 78701467 ntruees787ep1 73424104? 111566637? 173395300? ronald1024 184257684? 329453293? 567481720? ronald1536 491779717? 842581363? 1119680848? ronald2048 1959306973? 3042304122? 4980875302? ronald3072 5854086784? 8757956896? 14443687557? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 92677 93158 93795 ntruees401ep2 113451 114179 118430 ntruees439ep1 127166 128336 134797 ronald1024 162916 163787 166231 ntruees593ep1 191750 195910 204542 ronald1536 203944 205725 211211 ntruees743ep1 210041 211120 214370 ntruees787ep1 277823 285831 295230 ronald2048 509054 517543 528385 ronald3072 820391 829504 839254 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 117754 117897 118573 ntruees401ep2 136669 137410 140218 ntruees439ep1 195312 196235 198263 ntruees593ep1 251524 253383 267176 ntruees743ep1 296517 297206 309439 ntruees787ep1 3561467 3598569 3623880 ronald1024 9290320 9331361 9375821 ronald1536 18769101 18844761 18892939 ronald2048 55636529 55699514 55815903 ronald3072 123228001 123364241 123512935 ronald4096 Secret key bytes system 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 ronald2048 361 ronald3072 489 ronald4096 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

amd64; BW+AES (406f1); 2016 Intel Xeon E5-2680 v4; 28 x 2400MHz; genji122, supercop-20171020

Cycles to generate a key pair quartile median quartile system 458108 460796 465744 ntruees401ep2 530900 535328 539032 ntruees439ep1 873836 878032 883316 ntruees593ep1 1281312 1287472 1292644 ntruees743ep1 1412164 1419924 1431288 3hfe 24689472 24781464 24871136 ntruees787ep1 31337984? 46317660? 82586916? ronald1024 62333228? 111810792? 170788304? cargocult2048 71252776? 127428408? 219290848? ronald1536 81529156? 148480280? 229740224? rsa2048 142957876? 287946084? 444367720? ronald2048 503964092? 945940236? 1421487480? ronald3072 1129574704? 2035396788? 3152003900? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 5340 5348 5356 3hfe 22028 22708 23732 cargocult2048 21876 22772 23436 rsa2048 37996 39140 39924 ronald1024 49680 49900 50200 ntruees401ep2 55772 57244 58212 ronald1536 56968 57344 57744 ntruees439ep1 76472 76912 77324 ntruees593ep1 78460 79244 82188 ronald2048 98272 98628 99092 ntruees743ep1 121208 121900 123616 ntruees787ep1 137660 139396 142300 ronald3072 217196 219184 221740 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 55224 55496 56036 ntruees401ep2 62584 63200 63912 ntruees439ep1 88284 88936 89932 ntruees593ep1 107944 108100 108288 3hfe 119988 120852 122448 ntruees743ep1 162416 163536 166320 ntruees787ep1 1126212 1137036 1153384 ronald1024 2326888 2329428 2336272 cargocult2048 2329188 2335192 2502868 rsa2048 2518780 2533868 2557284 ronald1536 4799300 4828664 4884640 ronald2048 14193788 14241256 14360472 ronald3072 29812532 29866556 29947592 ronald4096 Secret key bytes system 384 cargocult2048 384 rsa2048 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 5184 3hfe Public key bytes system 128 ronald1024 192 ronald1536 256 cargocult2048 256 ronald2048 256 rsa2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 7616 3hfe Encrypting 0 bytes bytes system 67 3hfe 128 ronald1024 192 ronald1536 256 ronald2048 272 rsa2048 284 cargocult2048 384 ronald3072 512 ronald4096 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 44 3hfe 105 ronald1024 169 ronald1536 233 ronald2048 272 rsa2048 284 cargocult2048 361 ronald3072 489 ronald4096 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 67 3hfe 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 272 rsa2048 284 cargocult2048 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

amd64; BW+AES (406f1); 2016 Intel Xeon E5-2680 v4; 14 x 2400MHz; manny357, supercop-20170228

Cycles to generate a key pair quartile median quartile system 510240 514760 520116 ntruees401ep2 580348 585196 590052 ntruees439ep1 964748 970244 976072 ntruees593ep1 1418056? 1429556? 2133712? ntruees743ep1 36557432? 51662152? 83452300? ronald1024 52883296 53332392 53509200 ntruees787ep1 84164164? 140944848? 207233276? ronald1536 200514852? 303815876? 500659764? ronald2048 529819640? 854878708? 1434481520? ronald3072 1351936320? 2819957444? 4284652576? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 39112 39272 40984 ronald1024 53416 55432 55832 ntruees401ep2 56644 58400 59124 ronald1536 62960 63300 63624 ntruees439ep1 78824 80020 82196 ronald2048 86016 86316 86700 ntruees593ep1 111792? 112240? 165956? ntruees743ep1 132632 134396 135212 ntruees787ep1 137280 140520 144472 ronald3072 217244 219588 223404 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 55900 56240 56816 ntruees401ep2 63732 63892 64544 ntruees439ep1 86948 87132 87840 ntruees593ep1 118596? 120080? 184780? ntruees743ep1 164488 165396 168404 ntruees787ep1 1128332 1142720 1154640 ronald1024 2530328 2546368 2564692 ronald1536 4816048 4835760 4862616 ronald2048 14258068 14305380 14430320 ronald3072 29952992 30026992 30128236 ronald4096 Secret key bytes system 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 ronald2048 361 ronald3072 489 ronald4096 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

amd64; BW+AES (406f1); 2016 Intel Xeon E5-2609 v4; 8 x 1700MHz; bolero, supercop-20171218

Cycles to generate a key pair quartile median quartile system 403540 405448 409196 ntruees401ep2 460848 463712 467636 ntruees439ep1 765884 770928 773976 ntruees593ep1 1123900 1129636 1137744 ntruees743ep1 1426564 1432992 1483768 3hfe 6263220 6339112 6527456 4hfe 28890472? 50710096? 72386688? ronald1024 69838032 70073220 70268384 ntruees787ep1 62479820? 115500536? 218987832? cargocult2048 68866492? 118317200? 179294832? rsa2048 82055104? 128562860? 189924824? ronald1536 181857544? 272164172? 425206920? ronald2048 421330880? 671240748? 1056660752? ronald3072 986698272? 1420004280? 2168484964? ronald4096 3983266176 4129665380 4222218280 pqrsa15 Cycles to encrypt 59 bytes quartile median quartile system 5480 5492 5524 3hfe 16148 16180 16204 4hfe 21956 22752 23208 rsa2048 22176 23140 23784 cargocult2048 35176 35900 38560 ronald1024 42160 42404 42704 ntruees401ep2 47424 47756 48000 ntruees439ep1 50900 52188 53796 ronald1536 67700 69372 70952 ronald2048 69176 69692 70096 ntruees593ep1 86460 86796 87192 ntruees743ep1 109904 111100 112884 ronald3072 170932 173524 177428 ronald4096 292388 293988 295552 ntruees787ep1 19100764 19118308 19135240 pqrsa15 Cycles to decrypt 59 bytes quartile median quartile system 47672 47904 48492 ntruees401ep2 53772 53948 54660 ntruees439ep1 79360 79892 80596 ntruees593ep1 104344 104992 107280 ntruees743ep1 99608? 114144? 209380? 3hfe 504592 505924 507996 ntruees787ep1 901416 914736 925156 ronald1024 1302092 1314040 1368924 4hfe 2277844 2280516 2289232 rsa2048 2283020 2286320 2289332 cargocult2048 2439864 2464688 2486612 ronald1536 3531176 3554124 3577568 ronald2048 8854896 8898400 8974524 ronald3072 17926032 17965060 18016704 ronald4096 131508040 131553292 131617632 pqrsa15 Secret key bytes system 384 cargocult2048 384 rsa2048 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 5184 3hfe 8480 4hfe 98304 pqrsa15 Public key bytes system 128 ronald1024 192 ronald1536 256 cargocult2048 256 ronald2048 256 rsa2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 7616 3hfe 23040 4hfe 32768 pqrsa15 Encrypting 0 bytes bytes system 67 3hfe 68 4hfe 128 ronald1024 192 ronald1536 256 ronald2048 272 rsa2048 284 cargocult2048 384 ronald3072 512 ronald4096 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 32768 pqrsa15 Encrypting 23 bytes bytes system 44 3hfe 45 4hfe 105 ronald1024 169 ronald1536 233 ronald2048 272 rsa2048 284 cargocult2048 361 ronald3072 489 ronald4096 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 32745 pqrsa15 Encrypting many bytes bytes system 67 3hfe 68 4hfe 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 141 pqrsa15 272 rsa2048 284 cargocult2048 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

x86; normally amd64; BW+AES (406f1); 2016 Intel Xeon E5-2609 v4; 8 x 1700MHz; bolero, supercop-20171218

Cycles to generate a key pair quartile median quartile system 806720 812408 819248 ntruees439ep1 1308600 1314356 1318696 ntruees593ep1 1997956 2007012 2015136 ntruees743ep1 70728632 70961940 71243840 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 73396 73684 74052 ntruees439ep1 112804 113300 113836 ntruees593ep1 153384 153804 154436 ntruees743ep1 295432 296708 298188 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 91980 92660 94264 ntruees439ep1 148348 149332 151056 ntruees593ep1 217920 219300 221832 ntruees743ep1 499400 500316 502616 ntruees787ep1 Secret key bytes system 659 ntruees439ep1 891 ntruees593ep1 1120 ntruees743ep1 1854 ntruees787ep1 Public key bytes system 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 Encrypting 0 bytes bytes system 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

aarch64; Cortex-A72 (418fd080); 2015 Mediatek MT8173; 2 x 2100MHz; a72, supercop-20170904

Cycles to generate a key pair quartile median quartile system 707155 711264 715854 ntruees401ep2 822451 826256 830766 ntruees439ep1 1292464 1297084 1301488 ntruees593ep1 1881893 1890925 1898619 ntruees743ep1 21787834 21876984 21941855 ntruees787ep1 199117313? 310875555? 586612092? cargocult2048 219066116? 405525755? 625015447? rsa2048 Cycles to encrypt 59 bytes quartile median quartile system 44533 47225 49863 rsa2048 44440 49565 52131 cargocult2048 62950 63257 63644 ntruees401ep2 71217 71587 71955 ntruees439ep1 94050 94482 94760 ntruees593ep1 122400 122726 123300 ntruees743ep1 176632 176908 177348 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 69555 70075 72654 ntruees401ep2 81046 81555 82789 ntruees439ep1 111563 112262 114257 ntruees593ep1 156171 157614 162270 ntruees743ep1 276661 278049 279275 ntruees787ep1 7547436 7560136 7566184 rsa2048 7563553 7583854 7590100 cargocult2048 Secret key bytes system 384 cargocult2048 384 rsa2048 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1120 ntruees743ep1 1854 ntruees787ep1 Public key bytes system 256 cargocult2048 256 rsa2048 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 Encrypting 0 bytes bytes system 272 rsa2048 284 cargocult2048 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 272 rsa2048 284 cargocult2048 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 272 rsa2048 284 cargocult2048 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

aarch64; Cortex-A57 (418fd071); 2015 NVIDIA Tegra X1; 4 x 1734MHz; jetsontx1, supercop-20170904

Cycles to generate a key pair quartile median quartile system 818989 824109 833045 ntruees401ep2 957552 966333 984600 ntruees439ep1 1478448 1492795 1594309 ntruees593ep1 2152724 2162063 2179887 ntruees743ep1 27080940 27247102 27345689 ntruees787ep1 38113049? 61729284? 93534284? ronald1024 116472174? 197859697? 298921121? ronald1536 221644363? 345348854? 533881648? rsa2048 228337376? 383440973? 614698207? cargocult2048 267772965? 455729999? 725139754? ronald2048 1179874521? 1914450555? 2886628040? ronald3072 2633740250? 4796049719? 7195862285? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 46649 49380 52271 rsa2048 47225 49856 52889 cargocult2048 66836 67295 67871 ntruees401ep2 75565 76157 76973 ntruees439ep1 82066 82537 84666 ronald1024 98863 99414 100290 ntruees593ep1 123498 125237 127498 ronald1536 128356 129237 130041 ntruees743ep1 158497 160104 162304 ronald2048 179169 179622 180351 ntruees787ep1 277228 280219 283382 ronald3072 398438 399803 403429 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 83487 83741 84156 ntruees401ep2 94496 95460 96669 ntruees439ep1 128680 129266 129934 ntruees593ep1 175894 177285 178264 ntruees743ep1 288726 289331 290167 ntruees787ep1 2586315 2608606 2622816 ronald1024 6412230 6446048 6470133 ronald1536 7592345 7606981 7614847 cargocult2048 7617845 7622608 7626146 rsa2048 12467274 12515667 12572184 ronald2048 35293711 35356795 35513809 ronald3072 71795519 71924391 78606614 ronald4096 Secret key bytes system 384 cargocult2048 384 rsa2048 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 Public key bytes system 128 ronald1024 192 ronald1536 256 cargocult2048 256 ronald2048 256 rsa2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 ronald2048 272 rsa2048 284 cargocult2048 384 ronald3072 512 ronald4096 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 ronald2048 272 rsa2048 284 cargocult2048 361 ronald3072 489 ronald4096 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 272 rsa2048 284 cargocult2048 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

aarch64; Cortex-A57 (418fd071); 2015 NVIDIA Tegra X1; 4 x 1734MHz; lionheart30, supercop-20161026

Cycles to generate a key pair quartile median quartile system 3430899 3448681 3466617 ntruees401ep2 4087743 4112084 4131526 ntruees439ep1 7309900 7337942 7365390 ntruees593ep1 11354020 11392088 11434424 ntruees743ep1 56402598 56777228 56912162 ntruees787ep1 60994713? 83980577? 132794191? ronald1024 178511409? 313208724? 462958366? ronald1536 488638187? 777215624? 1206520407? ronald2048 2054051871? 3328198350? 5244445734? ronald3072 4137119875? 8779847252? 14959591915? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 70809 71536 71763 ntruees401ep2 80390 80619 80913 ntruees439ep1 107383 107759 108132 ntruees593ep1 113867 114719 118881 ronald1024 140918 141841 142599 ntruees743ep1 182152 183969 187720 ronald1536 256582 259944 263801 ronald2048 328954 332186 335941 ntruees787ep1 472337 477480 482777 ronald3072 724605 729541 734858 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 89904 90168 90682 ntruees401ep2 100548 101008 101592 ntruees439ep1 137917 138178 138571 ntruees593ep1 188400 188864 189454 ntruees743ep1 572574 573754 574072 ntruees787ep1 4242173 4269218 4284088 ronald1024 10165403 10196263 10231664 ronald1536 22386674 22456576 22524451 ronald2048 60744458 60852098 60967250 ronald3072 136467377 136615508 136736389 ronald4096 Secret key bytes system 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 ronald2048 361 ronald3072 489 ronald4096 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

aarch64; Cortex-A53 (410fd034); 2015 Amlogic S905; 4 x 2000MHz; par3, supercop-20170718

Cycles to generate a key pair quartile median quartile system 327525028? 631599266? 1077616606? rsa2048 Cycles to encrypt 59 bytes quartile median quartile system 144830 150383 155967 rsa2048 Cycles to decrypt 59 bytes quartile median quartile system 12791033 12831051 13138564 rsa2048 Secret key bytes system 384 rsa2048 Public key bytes system 256 rsa2048 Encrypting 0 bytes bytes system 272 rsa2048 Encrypting 23 bytes bytes system 272 rsa2048 Encrypting many bytes bytes system 272 rsa2048

armeabi; Cortex-A7 (410fc075); 2015 Broadcom BCM2836; 4 x 900MHz; pi2, supercop-20160731

Cycles to generate a key pair quartile median quartile system 2779710 2796886 2810490 ntruees401ep2 3256605 3272135 3287511 ntruees439ep1 5636686 5656309 5675158 ntruees593ep1 8621503 8650621 8683004 ntruees743ep1 91304604 91832119 92144634 ntruees787ep1 275083921? 492884431? 793230146? ronald1024 814387756? 1586656771? 2388019923? ronald1536 1566906721? 2466803061? 3812513171? ronald2048 6259028323? 9446176047? 15977215154? ronald3072 13699687087? 21929335813? 29990604119? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 172283 173696 176382 ntruees401ep2 194871 196112 197701 ntruees439ep1 204192 210540 217759 ronald1024 287857 289409 291680 ntruees593ep1 326055 332016 341458 ronald1536 402793 405795 424989 ntruees743ep1 477907 487415 497946 ronald2048 573744 576728 579340 ntruees787ep1 879180 898499 912659 ronald3072 1402006 1439793 1459628 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 256603 258399 260199 ntruees401ep2 285714 287620 289553 ntruees439ep1 436298 437019 439169 ntruees593ep1 642102 643540 696592 ntruees743ep1 965063 968669 973289 ntruees787ep1 7267788 7290669 7334811 ronald1024 18159991 18217776 18308793 ronald1536 38107376 38211174 38398473 ronald2048 109222302 109880866 110692156 ronald3072 241889791 250836229 253122475 ronald4096 Secret key bytes system 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 ronald2048 361 ronald3072 489 ronald4096 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1