VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems

ECRYPT II

Measurements of public-key cryptosystems, indexed by machine

There is a separate page with more information about each public-key cryptosystem and each implementation. Designers and implementors interested in submitting new public-key cryptosystems and new implementations of existing cryptosystems should read the call for submissions.

What do the graphs and tables mean?

• Time to encrypt a short message.
• Time to decrypt a short message.
• Time to compute a key pair.
• Space for a secret key.
• Space for a public key.
• Ciphertext overhead for a short message: more precisely, the difference between the space used by a short encrypted message and the space used by the original message.
• Ciphertext overhead for a long message.

Each computer also has a series of tables, eight tables for each computer. The first table shows the time, in cycles, to generate a key pair. Each row of the table lists

• the first quartile of many time measurements,
• the median of many time measurements,
• the third quartile of many time measurements, and
• the name of the cryptosystem.

The computer name is linked to additional information about the implementations and compilers selected for benchmarking.

amd64; KnLanding (50671); 2016 Intel Xeon Phi 7250; 68 x 1400MHz; unstable; pluton1mn, supercop-20160806

Cycles to generate a key pair quartile median quartile system 1144892 1159200 1174894 ntruees401ep2 1321768 1338848 1359092 ntruees439ep1 2278542 2310924 2362430 ntruees593ep1 3381616 3432800 3553928 ntruees743ep1 70245700 70968184 71674288 ntruees787ep1 77908684? 111424838? 161791000? ronald1024 178268552? 253608712? 478603706? ronald1536 438816994? 985281038? 1402450742? ronald2048 1444536800? 2696404354? 4232009082? ronald3072 5420618882? 8731861628? 12732692868? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 96404 97902 98686 ntruees401ep2 108360 109270 111244 ntruees439ep1 119490 123242 131628 ronald1024 155400 156604 158396 ntruees593ep1 179228 185262 195062 ronald1536 193676 195328 201152 ntruees743ep1 195916 197316 203322 ntruees787ep1 279482 284648 296828 ronald2048 509642 518308 532182 ronald3072 823802 833728 842562 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 119392 119966 121212 ntruees401ep2 131950 132650 134512 ntruees439ep1 188734 189854 196336 ntruees593ep1 241500 243320 252014 ntruees743ep1 277060 277970 290752 ntruees787ep1 3371382 3419486 3495212 ronald1024 8706922 8755628 8857338 ronald1536 18721094 18781672 18844490 ronald2048 55544678 55639094 55718306 ronald3072 123128446 123215512 123361448 ronald4096 Secret key bytes system 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 ronald2048 361 ronald3072 489 ronald4096 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

aarch64; Cortex-A57 (418fd071); 2015 NVIDIA Tegra X1; 4 x 1734MHz; lionheart30, supercop-20160806

Cycles to generate a key pair quartile median quartile system 3430899 3448681 3466617 ntruees401ep2 4087743 4112084 4131526 ntruees439ep1 7309900 7337942 7365390 ntruees593ep1 11354020 11392088 11434424 ntruees743ep1 56402598 56777228 56912162 ntruees787ep1 60994713? 83980577? 132794191? ronald1024 178511409? 313208724? 462958366? ronald1536 488638187? 777215624? 1206520407? ronald2048 2054051871? 3328198350? 5244445734? ronald3072 4137119875? 8779847252? 14959591915? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 70809 71536 71763 ntruees401ep2 80390 80619 80913 ntruees439ep1 107383 107759 108132 ntruees593ep1 113867 114719 118881 ronald1024 140918 141841 142599 ntruees743ep1 182152 183969 187720 ronald1536 256582 259944 263801 ronald2048 328954 332186 335941 ntruees787ep1 472337 477480 482777 ronald3072 724605 729541 734858 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 89904 90168 90682 ntruees401ep2 100548 101008 101592 ntruees439ep1 137917 138178 138571 ntruees593ep1 188400 188864 189454 ntruees743ep1 572574 573754 574072 ntruees787ep1 4242173 4269218 4284088 ronald1024 10165403 10196263 10231664 ronald1536 22386674 22456576 22524451 ronald2048 60744458 60852098 60967250 ronald3072 136467377 136615508 136736389 ronald4096 Secret key bytes system 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 ronald2048 361 ronald3072 489 ronald4096 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

aarch64; Cortex-A53 (410fd034); 2015 Amlogic S905; 4 x 2000MHz; par3, supercop-20160910

Cycles to generate a key pair quartile median quartile system 2256656 2298610 2438612 ntruees401ep2 3065660 3119122 3250443 ntruees439ep1 4615827 4683696 4789010 ntruees593ep1 7062002 7179226 7314470 ntruees743ep1 72053842 72341081 73654378 ntruees787ep1 54449010? 91359777? 136019235? ronald1024 181482021? 296692460? 450162034? ronald1536 351622698? 549722663? 884480828? ronald2048 2097604665? 3050695095? 4879265349? ronald3072 5241098861? 7441675787? 12628096277? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 108047 108513 109191 ntruees401ep2 122823 123088 124777 ntruees439ep1 135641 136618 142362 ronald1024 171689 172165 177216 ntruees593ep1 206014 210469 213528 ronald1536 229102 229697 235882 ntruees743ep1 271156 276148 282377 ronald2048 323328 323868 333093 ntruees787ep1 486146 490426 494206 ronald3072 709545 718923 733192 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 147985 148224 153540 ntruees401ep2 167099 167245 173289 ntruees439ep1 237812 238241 243644 ntruees593ep1 330244 330835 342040 ntruees743ep1 546304 546601 562078 ntruees787ep1 4501009 4534548 4620961 ronald1024 11304399 11371483 11668369 ronald1536 21701156 21794163 22213942 ronald2048 63524412 63610993 63719546 ronald3072 127065840 127238532 130644710 ronald4096 Secret key bytes system 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 ronald2048 361 ronald3072 489 ronald4096 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

armeabi; Cortex-A7 (410fc075); 2015 Broadcom BCM2836; 4 x 900MHz; pi2, supercop-20160731

Cycles to generate a key pair quartile median quartile system 2779710 2796886 2810490 ntruees401ep2 3256605 3272135 3287511 ntruees439ep1 5636686 5656309 5675158 ntruees593ep1 8621503 8650621 8683004 ntruees743ep1 91304604 91832119 92144634 ntruees787ep1 275083921? 492884431? 793230146? ronald1024 814387756? 1586656771? 2388019923? ronald1536 1566906721? 2466803061? 3812513171? ronald2048 6259028323? 9446176047? 15977215154? ronald3072 13699687087? 21929335813? 29990604119? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 172283 173696 176382 ntruees401ep2 194871 196112 197701 ntruees439ep1 204192 210540 217759 ronald1024 287857 289409 291680 ntruees593ep1 326055 332016 341458 ronald1536 402793 405795 424989 ntruees743ep1 477907 487415 497946 ronald2048 573744 576728 579340 ntruees787ep1 879180 898499 912659 ronald3072 1402006 1439793 1459628 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 256603 258399 260199 ntruees401ep2 285714 287620 289553 ntruees439ep1 436298 437019 439169 ntruees593ep1 642102 643540 696592 ntruees743ep1 965063 968669 973289 ntruees787ep1 7267788 7290669 7334811 ronald1024 18159991 18217776 18308793 ronald1536 38107376 38211174 38398473 ronald2048 109222302 109880866 110692156 ronald3072 241889791 250836229 253122475 ronald4096 Secret key bytes system 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 ronald2048 361 ronald3072 489 ronald4096 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

amd64; Skylake (506e3); 2015 Intel Core i5-6600; 4 x 3310MHz; skylake, supercop-20160910

Cycles to generate a key pair quartile median quartile system 408312 411716 413894 ntruees401ep2 471082 473630 477826 ntruees439ep1 781104 785590 788766 ntruees593ep1 1134798 1139388 1145530 ntruees743ep1 29399732? 43913342? 64400184? ronald1024 60138498 60641422 60797692 ntruees787ep1 74225808? 114983408? 201844762? ronald1536 158647910? 226257822? 355816918? ronald2048 378685816? 614546420? 954742756? ronald3072 819856624? 1414976024? 2448823578? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 36094 36408 37810 ronald1024 48880 49802 50162 ntruees401ep2 51382 52052 53304 ronald1536 55526 55830 56212 ntruees439ep1 70076 71558 72874 ronald2048 80172 80558 81042 ntruees593ep1 101626 101972 102380 ntruees743ep1 115504 116894 118564 ronald3072 126608 126898 127262 ntruees787ep1 179166 180972 185160 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 48212 48574 49340 ntruees401ep2 54330 54698 55426 ntruees439ep1 81692 82078 82906 ntruees593ep1 109322 109720 110702 ntruees743ep1 158930 160558 163762 ntruees787ep1 861798 876638 887174 ronald1024 2335856 2358920 2376776 ronald1536 3463262 3488268 3514310 ronald2048 8742174 8776864 8807518 ronald3072 17858772 17899292 17954530 ronald4096 Secret key bytes system 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 ronald2048 361 ronald3072 489 ronald4096 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

amd64; Airmont (406c3); 2015 Intel Celeron N3150; 4 x 1600MHz; par, supercop-20160910

Cycles to generate a key pair quartile median quartile system 893340 901580 983740 ntruees401ep2 1064000 1077240 1165480 ntruees439ep1 1775020 1790700 1872040 ntruees593ep1 2698640 2723060 2826040 ntruees743ep1 91153420 91758560 91998200 ntruees787ep1 63312240? 104694860? 162409140? ronald1024 185856080? 301982420? 474722520? ronald1536 323434880? 587660100? 917314620? ronald2048 1723925560? 2756952500? 3979084220? ronald3072 2909709020? 6504870860? 9388299740? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 96800 97600 98660 ntruees401ep2 107900 108680 111840 ronald1024 108180 108880 109860 ntruees439ep1 157380 159240 164920 ronald1536 166920 167680 173780 ntruees593ep1 210660 212380 214600 ntruees743ep1 222680 226280 230900 ronald2048 288380 289440 292660 ntruees787ep1 391180 395640 402660 ronald3072 623620 628000 647440 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 121160 121480 122060 ntruees401ep2 134540 136280 136880 ntruees439ep1 207080 207720 214080 ntruees593ep1 271120 272560 274540 ntruees743ep1 427840 428700 435320 ntruees787ep1 2730280 2769700 2810240 ronald1024 8364020 8401420 8444460 ronald1536 14574840 14627540 14674880 ronald2048 42419080 42531480 42589940 ronald3072 93161680 93321340 93522680 ronald4096 Secret key bytes system 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 ronald2048 361 ronald3072 489 ronald4096 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

aarch64; Cortex-A53 (410fd030); 2014 HiSilicon Hi6220V100; 8 x 1200MHz; unstable; a53, supercop-20160731

Cycles to generate a key pair quartile median quartile system 3653505 3677805 3711825 ntruees401ep2 4358205 4393440 4423815 ntruees439ep1 5955930? 7766280? 7802730? ntruees593ep1 12023640? 12148785? 15842400? ntruees743ep1 57904470? 63686655? 76666400? mceliece 77150070? 77623920? 101195200? ntruees787ep1 54090585? 80832735? 115575660? ronald1024 202894065? 317396880? 515570400? ronald1536 379330290? 617981805? 1018872270? ronald2048 2282502645? 3748351545? 5603976090? ronald3072 4244190615? 7145897355? 11669871200? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 89910? 92340? 118400? mceliece 114210 115425 116640 ntruees401ep2 127575 128790 130005 ntruees439ep1 140940? 143370? 186400? ronald1024 187110 188325 189540 ntruees593ep1 210195? 215055? 275200? ronald1536 253935? 256365? 333600? ntruees743ep1 273375? 277020? 357600? ronald2048 386370? 390015? 508800? ntruees787ep1 425250? 431325? 696800? ronald4096 481140? 489645? 637600? ronald3072 Cycles to decrypt 59 bytes quartile median quartile system 127575? 166455? 167670? ntruees401ep2 185895 185895 187110 ntruees439ep1 273375 274590 275805 ntruees593ep1 386370? 388800? 509600? ntruees743ep1 659745? 668250? 868800? ntruees787ep1 1490805? 1501740? 1962400? mceliece 4644945? 4700835? 6063200? ronald1024 11759985? 11807370? 15576800? ronald1536 22422825? 22537035? 29600000? ronald2048 55382130? 65072970? 85509600? ronald3072 79661475? 79769610? 131258400? ronald4096 Secret key bytes system 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

armeabi; Cortex-A15 (413fc0f3); 2014 NVIDIA Tegra K1; 4 x 2065MHz; jetsontk1, supercop-20160806

Cycles to generate a key pair quartile median quartile system 2965319 2973355 2979267 ntruees401ep2 3479147 3485824 3492286 ntruees439ep1 6186978 6195877 6205498 ntruees593ep1 9550458 9561252 9580201 ntruees743ep1 156449367 157688687 157978082 ntruees787ep1 280531790? 512223556? 878404753? ronald1024 909614403? 1228394526? 2180579123? ronald1536 1561296246? 2522812040? 4108947841? ronald2048 3949765360? 7747892765? 11696949946? ronald3072 11631709222? 21438837192? 35785181063? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 129805 130402 130795 ntruees401ep2 142980 143423 143893 ntruees439ep1 153792 154969 157851 ronald1024 217674 218055 218810 ntruees593ep1 254356 256769 261297 ronald1536 305632 306478 307682 ntruees743ep1 384208 386813 393012 ronald2048 611350 612136 621205 ntruees787ep1 731166 736431 745159 ronald3072 1203335 1208026 1212988 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 215462 215785 216370 ntruees401ep2 236884 237303 238247 ntruees439ep1 363696 364118 365593 ntruees593ep1 527480 528203 537720 ntruees743ep1 1114554 1122353 1125847 ntruees787ep1 5055311 5079343 5098616 ronald1024 13507523 13550637 13597647 ronald1536 28822033 28889727 28952113 ronald2048 82891093 82980765 83402399 ronald3072 185878859 185987309 186155695 ronald4096 Secret key bytes system 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 ronald2048 361 ronald3072 489 ronald4096 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

amd64; HW+AES (40651); 2014 Intel Core i5-4210U; 2 x 1700MHz; slide, supercop-20160806

Cycles to generate a key pair quartile median quartile system 538220 542500 545776 ntruees439ep1 962432 966656 970780 ntruees593ep1 1409204 1414032 1422444 ntruees743ep1 38182732 39368988 40855244 mceliece 77696000 78216484 78360264 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 58068 58460 58804 ntruees439ep1 63044 64124 64880 mceliece 78564 78956 79376 ntruees593ep1 99740 100056 100432 ntruees743ep1 357868 358736 359912 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 58484 58620 58864 ntruees439ep1 85600 85732 86236 ntruees593ep1 113356 113852 114488 ntruees743ep1 624176 624332 624652 ntruees787ep1 1185980 1186396 1187412 mceliece Secret key bytes system 659 ntruees439ep1 891 ntruees593ep1 1120 ntruees743ep1 1854 ntruees787ep1 137282 mceliece Public key bytes system 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

amd64; HW+AES (40651); 2014 Intel Core i5-4210U; 2 x 1700MHz; unstable; sliver, supercop-20160731

Cycles to generate a key pair quartile median quartile system 1231782 1242054 1259418 ntruees401ep2 2270244 2284104 2329968 ntruees593ep1 7798068 7819704 7839006 ntruees439ep1 21070938 21441414 22048290 ntruees743ep1 70562400? 125400924? 192927342? ronald1024 203454342? 341641704? 481300554? ronald1536 445578972? 665512338? 999613944? ronald2048 1401588030? 2646181638? 3662798064? ronald3072 3211760556? 5671042260? 8406738396? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 142206 143676 144726 ntruees401ep2 175074 177732 193650 ronald1024 208278 211596 229038 ronald1536 223080 225462 231054 ntruees593ep1 230448 231234 232086 ntruees439ep1 261918 264888 283698 ronald2048 390906 405480 411984 ronald3072 453018 454350 455556 ntruees743ep1 349386? 579252? 587760? ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 161922 162924 164778 ntruees401ep2 255162 256548 257454 ntruees593ep1 305244 306678 310350 ntruees439ep1 657900 666432 672888 ntruees743ep1 3923670 3967812 4010712 ronald1024 8353068 8411970 8473734 ronald1536 15359208 15451458 15544170 ronald2048 41032950 41108850 41196240 ronald3072 46687794? 85653966? 85888698? ronald4096 Secret key bytes system 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 2048 ronald2048 3072 ronald3072 4096 ronald4096 Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 ronald2048 361 ronald3072 489 ronald4096 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1

amd64; HW+AES (306f2); 2014 Intel Xeon E5-2670 v3; 12 x 2300MHz; unstable; tueisecgern, supercop-20160724

Cycles to generate a key pair quartile median quartile system 895967 919893 927608 ntruees439ep1 722581? 1081892? 1114188? ntruees593ep1 1198254? 2168798? 2195405? ntruees743ep1 35103410? 36874992? 47982465? mceliece 98567496 103882588 104665128 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 48239? 49116? 64737? mceliece 81147 84778 85330 ntruees439ep1 70950? 110302? 114203? ntruees593ep1 92515? 152410? 153563? ntruees743ep1 588561 591774 594470 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 90587 96999 97575 ntruees439ep1 73876? 124884? 133280? ntruees593ep1 115279? 192740? 194317? ntruees743ep1 1040480 1052597 1053661 ntruees787ep1 1053492 1053980 1245564 mceliece Secret key bytes system 659 ntruees439ep1 891 ntruees593ep1 1120 ntruees743ep1 1854 ntruees787ep1 137282 mceliece Public key bytes system 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

amd64; HW+AES (306c3); 2013 Intel Xeon E3-1275 V3; 4 x 3500MHz; titan0, supercop-20160806

Cycles to generate a key pair quartile median quartile system 431804 435644 438300 ntruees401ep2 499912 502732 506236 ntruees439ep1 821264 824688 826916 ntruees593ep1 1189812 1194132 1200352 ntruees743ep1 37182160 38324008 39614932 mceliece 41323680 41618868 41716632 ntruees787ep1 33482708? 51745720? 86564628? ronald1024 86761960? 137939312? 245044984? ronald1536 207720404? 329230480? 429545752? ronald2048 571364192? 1040262628? 1574055740? ronald3072 1894051640? 3218585868? 4726600688? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 39240 39380 41048 ronald1024 48312 49084 49432 ntruees401ep2 54864 55304 55616 ntruees439ep1 55156 55872 56620 mceliece 57460 58300 59704 ronald1536 78188 78592 79116 ntruees593ep1 80096 81160 82400 ronald2048 99184 99404 99912 ntruees743ep1 132552 133784 134256 ntruees787ep1 140716 142492 144432 ronald3072 222708 224864 226980 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 50560 50704 50856 ntruees401ep2 57424 57700 57860 ntruees439ep1 83784 83964 84312 ntruees593ep1 110444 110720 111388 ntruees743ep1 173880 175756 185156 ntruees787ep1 1198176 1198732 1199400 mceliece 1197900 1210164 1217636 ronald1024 2716852 2733544 2747548 ronald1536 5201604 5230268 5248040 ronald2048 15346216 15396176 15461920 ronald3072 32444480 32521344 32626116 ronald4096 Secret key bytes system 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

amd64; HW+AES (306c3); 2013 Intel Core i7-4770; 4 x 3400MHz; wintermute, supercop-20140505

Cycles to generate a key pair quartile median quartile system 44321608 44575472 44681288 ntruees787ep1 32863544? 48150376? 75259076? ronald1024 94474916? 153646200? 218767856? ronald1536 190327156? 288115872? 424387180? ronald2048 664690696? 1091068856? 1533632400? ronald3072 1396910040? 2646806816? 3806585836? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 64276 66860 73368 ronald1024 91924 95652 102660 ronald1536 125644 132052 140124 ronald2048 197052 201000 209264 ronald3072 288688 289028 289512 ntruees787ep1 288772 293212 300240 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 474284 474468 475568 ntruees787ep1 1394908 1413532 1434696 ronald1024 2984188 3000540 3025664 ronald1536 5539228 5563884 5588692 ronald2048 14877916 14915832 14958252 ronald3072 31688900 31753908 31820208 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 1573 ntruees787ep1

armeabi; Cortex-A9+NEON (413fc090); 2012 Samsung Exynos 4412; 4 x 1704MHz; odroid, supercop-20160806

Cycles to generate a key pair quartile median quartile system 2895889 2908544 2922694 ntruees401ep2 3375635 3390850 3409867 ntruees439ep1 5924289 5950815 5968177 ntruees593ep1 9167876 9214033 9253020 ntruees743ep1 190306629 191611233 192790400 ntruees787ep1 361215097? 621803670? 946562832? ronald1024 796594437? 1375510492? 2190373810? ronald1536 1922796971? 3122976640? 4991252666? ronald2048 4609114984? 9934652679? 14893631432? ronald3072 16218189717? 23065939795? 42308775894? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 177317 179873 181875 ntruees401ep2 182862 184035 187224 ronald1024 196876 198962 200641 ntruees439ep1 292773 295509 298799 ronald1536 301527 304342 306020 ntruees593ep1 440365 441692 447832 ntruees743ep1 448838 452930 458133 ronald2048 609092 610138 610934 ntruees787ep1 850348 855103 860588 ronald3072 1395315 1401961 1411101 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 291750 292169 293777 ntruees401ep2 325271 325843 327060 ntruees439ep1 499390 500297 501055 ntruees593ep1 765900 767779 769888 ntruees743ep1 1107527 1108057 1111068 ntruees787ep1 6935732 6961191 6988220 ronald1024 18478091 18518708 18553841 ronald1536 40053862 40102240 40179252 ronald2048 119367418 119463684 119562314 ronald3072 266720413 266873550 267044586 ronald4096 Secret key bytes system 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 ronald2048 361 ronald3072 489 ronald4096 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

armeabi; Cortex-A8 (413fc082); 2012 TI Sitara XAM3359AZCZ100; 1 x 1000MHz; bblack, supercop-20160806

Cycles to generate a key pair quartile median quartile system 9101450 9119206 9143723 ntruees401ep2 10797194 10813445 10838771 ntruees439ep1 19373199 19409763 19456133 ntruees593ep1 30300290 30358927 30423887 ntruees743ep1 225557947 227069415 227660607 ntruees787ep1 380814739? 565870491? 812194316? ronald1024 1024602739? 1567866775? 2325405956? ronald1536 2115756858? 3461907694? 5304389122? ronald2048 5396692464? 9816663206? 17976257716? ronald3072 18044453608? 27630727352? 42985011002? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 235156 235980 239721 ronald1024 264121 267253 271231 ntruees401ep2 291789 294533 298495 ntruees439ep1 388977 392430 398081 ronald1536 449332 453841 460930 ntruees593ep1 595354 602089 616092 ronald2048 675971 685054 693370 ntruees743ep1 1064914 1076635 1082656 ntruees787ep1 1156870 1172447 1178763 ronald3072 1921566 1926980 1932432 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 474543 477092 493659 ntruees401ep2 524065 527999 542435 ntruees439ep1 815490 816945 833776 ntruees593ep1 1270635 1287566 1288424 ntruees743ep1 1999252 2001894 2003893 ntruees787ep1 7880482 7926491 7971862 ronald1024 20972140 21033594 21107871 ronald1536 44218202 44330324 44426774 ronald2048 132978669 133146186 133329026 ronald3072 299079668 299274214 299656518 ronald4096 Secret key bytes system 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 ronald2048 361 ronald3072 489 ronald4096 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

armeabi; Cortex-A15 (410fc0f4); 2012 Samsung Exynos 5 Dual; 2 x 1700MHz; sachr, supercop-20140514

Cycles to generate a key pair quartile median quartile system 7836499 7853383 7872892 ntruees401ep2 9330762 9350485 9373378 ntruees439ep1 16810106 16834258 16864885 ntruees593ep1 26186969 26221421 26257813 ntruees743ep1 168231432 169694414 170083000 ntruees787ep1 289875921? 465923194? 816495706? ronald1024 815965241? 1337730714? 1932125705? ronald1536 1059273730? 2210946359? 3722084803? ronald2048 5024978304? 8570572798? 13429510379? ronald3072 12458808708? 18484484148? 29790561854? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 160238 161435 164782 ronald1024 217381 219268 219938 ntruees401ep2 238883 239438 240172 ntruees439ep1 252892 255029 258602 ronald1536 330572 331945 333745 ntruees593ep1 373451 376777 381473 ronald2048 457665 458760 459924 ntruees743ep1 542550 543297 543922 ntruees787ep1 694183 697225 700943 ronald3072 1114382 1118318 1126446 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 237388 238523 240190 ntruees401ep2 258821 259725 261644 ntruees439ep1 415469 416159 417420 ntruees593ep1 629333 630489 634062 ntruees743ep1 962190 962777 965370 ntruees787ep1 5413924 5439136 5468679 ronald1024 12821279 12852439 12896228 ronald1536 26601059 26647648 26700815 ronald2048 79789297 79888238 79993198 ronald3072 181061582 181327140 181662921 ronald4096 Secret key bytes system 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 ronald2048 361 ronald3072 489 ronald4096 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

amd64; Piledriver (610f01); 2012 AMD A10-5800K; 2 x 3800MHz; hydra9, supercop-20160806

Cycles to generate a key pair quartile median quartile system 666354 670537 678253 ntruees401ep2 757635 765814 775869 ntruees439ep1 1234460 1246863 1258279 ntruees593ep1 1807995 1816849 1831357 ntruees743ep1 57308389 59644746 62957959 mceliece 47722097? 74604512? 113778526? ronald1024 100790114 101466348 101701481 ntruees787ep1 113402217? 217231097? 339265090? ronald1536 252906161? 412898095? 655145440? ronald2048 667722956? 1357004342? 2047350965? ronald3072 2076529020? 3595197771? 5043067009? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 63690 65110 66928 ronald1024 75963 77825 78266 ntruees401ep2 84630 85409 86027 mceliece 87512 87861 88211 ntruees439ep1 88526 89824 92307 ronald1536 116904 117764 118471 ntruees593ep1 125050 126492 128725 ronald2048 148577 149258 150240 ntruees743ep1 211817 214489 217176 ronald3072 332466 335537 338182 ronald4096 470735 471470 528403 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 92620 93048 93487 ntruees401ep2 103673 103898 104956 ntruees439ep1 140287 140603 141935 ntruees593ep1 183038 183807 189668 ntruees743ep1 817747 818227 818515 ntruees787ep1 1304451 1306515 1310772 mceliece 1717772 1731933 1745264 ronald1024 3993944 4021514 4055902 ronald1536 7934526 7965055 7997396 ronald2048 24293170 24374721 24500831 ronald3072 52428688 52519807 52635271 ronald4096 Secret key bytes system 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

amd64; Piledriver (610f01); 2012 AMD A10-4655M; 2 x 2000MHz; h9trinity, supercop-20160806

Cycles to generate a key pair quartile median quartile system 586458 592408 602136 ntruees401ep2 670916 677202 685560 ntruees439ep1 1117721 1123537 1129303 ntruees593ep1 1640177 1662781 1693502 ntruees743ep1 41807532? 63100465? 91682473? ronald1024 98401944 99013441 99208337 ntruees787ep1 113257199? 209230406? 323394725? ronald1536 255980551? 416002708? 705478242? ronald2048 986263663? 1402752016? 2039687830? ronald3072 2324739523? 3829011255? 6010199300? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 61332 62661 64698 ronald1024 66992 68500 68984 ntruees401ep2 76665 77162 77544 ntruees439ep1 87406 89179 91154 ronald1536 113720 114331 114974 ntruees593ep1 121586 124248 126903 ronald2048 144683 145181 146021 ntruees743ep1 201414 204389 206559 ronald3072 314521 317234 320559 ronald4096 391780 393560 395569 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 87952 88540 88925 ntruees401ep2 98057 98957 99763 ntruees439ep1 145055 145490 146187 ntruees593ep1 192113 194371 194998 ntruees743ep1 668661 668797 669279 ntruees787ep1 1571977 1584150 1600055 ronald1024 4455309 4479454 4510995 ronald1536 7783000 7817615 7844795 ronald2048 22301516 22380127 22498433 ronald3072 48524354 48635024 48725527 ronald4096 Secret key bytes system 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 ronald2048 361 ronald3072 489 ronald4096 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1