VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems

ECRYPT II

Measurements of public-key cryptosystems, indexed by machine

There is a separate page with more information about each public-key cryptosystem and each implementation. Designers and implementors interested in submitting new public-key cryptosystems and new implementations of existing cryptosystems should read the call for submissions.

What do the graphs and tables mean?

• Time to encrypt a short message.
• Time to decrypt a short message.
• Time to compute a key pair.
• Space for a secret key.
• Space for a public key.
• Ciphertext overhead for a short message: more precisely, the difference between the space used by a short encrypted message and the space used by the original message.
• Ciphertext overhead for a long message.

Each computer also has a series of tables, eight tables for each computer. The first table shows the time, in cycles, to generate a key pair. Each row of the table lists

• the first quartile of many time measurements,
• the median of many time measurements,
• the third quartile of many time measurements, and
• the name of the cryptosystem.

The computer name is linked to additional information about the implementations and compilers selected for benchmarking.

amd64; HW+AES (306c3); 2013 Intel Xeon E3-1275 V3; 4 x 3500MHz; titan0, supercop-20140622

Cycles to generate a key pair quartile median quartile system 28281546 29274929 30268059 mceliece 42554066 42791531 42883045 ntruees787ep1 27235618? 49843971? 74219222? ronald1024 94379144? 134329675? 223721996? ronald1536 164290375? 287190400? 463668824? ronald2048 456038610? 730544422? 1037997487? ronald3072 1195011732? 2024399705? 3474980755? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 34291 36057 36388 ronald1024 50704 51344 52071 mceliece 51901 52608 54034 ronald1536 72863 73801 75317 ronald2048 128169 129369 130713 ronald3072 203438 204772 207200 ronald4096 259065 259441 259858 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 424909 425052 425412 ntruees787ep1 979556 979970 982341 mceliece 1046830 1057191 1066422 ronald1024 2375892 2388519 2405268 ronald1536 4588017 4602983 4621084 ronald2048 12735597 12771625 12816866 ronald3072 27311227 27363896 27436867 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 1573 ntruees787ep1

x86; normally amd64; HW+AES (306c3); 2013 Intel Xeon E3-1275 V3; 4 x 3500MHz; titan0, supercop-20140622

Cycles to generate a key pair quartile median quartile system 65675391 66145442 66307238 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 310458 310737 311006 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 522004 522328 523707 ntruees787ep1 Secret key bytes system 1854 ntruees787ep1 Public key bytes system 1574 ntruees787ep1 Encrypting 0 bytes bytes system 1574 ntruees787ep1 Encrypting 23 bytes bytes system 1551 ntruees787ep1 Encrypting many bytes bytes system 1573 ntruees787ep1

amd64; HW+AES (306c3); 2013 Intel Core i7-4770; 4 x 3400MHz; wintermute, supercop-20140505

Cycles to generate a key pair quartile median quartile system 44321608 44575472 44681288 ntruees787ep1 32863544? 48150376? 75259076? ronald1024 94474916? 153646200? 218767856? ronald1536 190327156? 288115872? 424387180? ronald2048 664690696? 1091068856? 1533632400? ronald3072 1396910040? 2646806816? 3806585836? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 64276 66860 73368 ronald1024 91924 95652 102660 ronald1536 125644 132052 140124 ronald2048 197052 201000 209264 ronald3072 288688 289028 289512 ntruees787ep1 288772 293212 300240 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 474284 474468 475568 ntruees787ep1 1394908 1413532 1434696 ronald1024 2984188 3000540 3025664 ronald1536 5539228 5563884 5588692 ronald2048 14877916 14915832 14958252 ronald3072 31688900 31753908 31820208 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 1573 ntruees787ep1

amd64; HW+AES (306c3); 2013 Intel Core i5-4570S; 4 x 2900MHz; haswell, supercop-20130419

Cycles to generate a key pair quartile median quartile system 33415130 34267498 36022441 mceliece 48482808 49490198 50538360 ntruees787ep1 35366829? 55583758? 81362742? ronald1024 95229008? 152744535? 230474112? ronald1536 192583577? 302872262? 456004900? ronald2048 511537908? 972203814? 1581141639? ronald3072 1695956395? 2657329947? 3967633863? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 42282 45452 46464 ronald1024 61920 63522 65408 mceliece 65035 65955 68391 ronald1536 90748 96305 102614 ronald2048 162491 165832 168432 ronald3072 247036 251844 255254 ronald4096 321262 322240 333972 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 511092 513852 551836 ntruees787ep1 1102584 1139808 1218768 mceliece 1269600 1288172 1299872 ronald1024 2790260 2825540 2887776 ronald1536 5353806 5416343 5570588 ronald2048 14868640 15181669 15544056 ronald3072 30661912 31211918 31765958 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 1573 ntruees787ep1

armeabi; Krait (511f04d3); 2012 Qualcomm Snapdragon S4 APQ8060A; 2 x 1512MHz; h9dragon, supercop-20130126

Cycles to generate a key pair quartile median quartile system 108268786 114377742 121497428 mceliece 239095690 240584317 241132099 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 160933 164525 167964 mceliece 918671 919125 919990 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 1688977 1689390 1690086 ntruees787ep1 2123570 2129110 2192382 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

armeabi; Cortex-A9+NEON (413fc090); 2012 VIA WonderMedia 8850; 1 x 1200MHz; h7green, supercop-20140622

Cycles to generate a key pair quartile median quartile system 205273164 206549752 207012493 ntruees787ep1 309696575? 529097316? 899495854? ronald1024 791168674? 1454480964? 2261173342? ronald1536 1893700038? 3363692254? 5456937194? ronald2048 5115689490? 8829711136? 16719055802? ronald3072 12267608866? 23851661362? 39562196536? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 224570 226396 232227 ronald1024 354140 358005 363071 ronald1536 524298 531415 539136 ronald2048 867710 870364 882459 ntruees787ep1 972708 982076 1011459 ronald3072 1585861 1599483 1625452 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 1604801 1613564 1648863 ntruees787ep1 7149437 7199158 7255162 ronald1024 18633546 18724298 18805654 ronald1536 38465899 38553974 38687758 ronald2048 113775542 113932044 114088492 ronald3072 254064726 254273716 254557588 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 1573 ntruees787ep1

armeabi; Cortex-A8 (413fc082); 2012 TI Sitara XAM3359AZCZ100; 1 x 1000MHz; bblack, supercop-20130419

Cycles to generate a key pair quartile median quartile system 89880117? 96702096? 116948074? mceliece 409318729 411460922 412398062 ntruees787ep1 365880243? 550731966? 830412888? ronald1024 916257520? 1404379509? 2244509028? ronald1536 1725615896? 3548714930? 4680033248? ronald2048 4534778000? 7700360338? 12803862120? ronald3072 13578395980? 24033394488? 33020186384? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 127685 130103 137241 mceliece 237476 239553 243838 ronald1024 389426 393719 408686 ronald1536 599422 607020 625284 ronald2048 1067821 1084086 1085433 ntruees787ep1 1156294 1171616 1181621 ronald3072 1918540 1926227 1930042 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 1497076 1501092 1511334 mceliece 2024719 2025095 2033608 ntruees787ep1 7903805 7946557 8032685 ronald1024 20979263 21032490 21106970 ronald1536 44207026 44301027 44362802 ronald2048 132937016 133090395 133311325 ronald3072 298936778 299157828 299537200 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 1573 ntruees787ep1

armeabi; Cortex-A15 (410fc0f4); 2012 Samsung Exynos 5 Dual; 2 x 1700MHz; sachr, supercop-20140514

Cycles to generate a key pair quartile median quartile system 168231432 169694414 170083000 ntruees787ep1 289875921? 465923194? 816495706? ronald1024 815965241? 1337730714? 1932125705? ronald1536 1059273730? 2210946359? 3722084803? ronald2048 5024978304? 8570572798? 13429510379? ronald3072 12458808708? 18484484148? 29790561854? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 160238 161435 164782 ronald1024 252892 255029 258602 ronald1536 373451 376777 381473 ronald2048 542550 543297 543922 ntruees787ep1 694183 697225 700943 ronald3072 1114382 1118318 1126446 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 962190 962777 965370 ntruees787ep1 5413924 5439136 5468679 ronald1024 12821279 12852439 12896228 ronald1536 26601059 26647648 26700815 ronald2048 79789297 79888238 79993198 ronald3072 181061582 181327140 181662921 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 1573 ntruees787ep1

amd64; Piledriver (610f01); 2012 AMD A10-5800K; 2 x 3800MHz; hydra9, supercop-20140622

Cycles to generate a key pair quartile median quartile system 43029404 45218805 47822932 mceliece 47543278? 71889659? 111443145? ronald1024 90250880 90898524 91076770 ntruees787ep1 116647648? 179098059? 291924101? ronald1536 224282623? 375579438? 623536370? ronald2048 905186217? 1450180066? 2132953292? ronald3072 2371551899? 4162314674? 7198451089? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 64233 64858 66936 ronald1024 86016 86875 87971 mceliece 91403 93274 95677 ronald1536 127140 128530 131819 ronald2048 215230 216872 220022 ronald3072 337684 341792 346153 ronald4096 421888 422591 424678 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 736834 737270 742629 ntruees787ep1 1123372 1125803 1395269 mceliece 1653858 1669936 1685024 ronald1024 3861546 3878673 3897710 ronald1536 7657138 7689665 7731457 ronald2048 22334992 22430032 22488342 ronald3072 48869147 49014261 49158593 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 1573 ntruees787ep1

x86; normally amd64; Piledriver (610f01); 2012 AMD A10-5800K; 2 x 3800MHz; hydra9, supercop-20140622

Cycles to generate a key pair quartile median quartile system 88966428 89477114 89688009 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 453721 454170 454639 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 761224 761450 761765 ntruees787ep1 Secret key bytes system 1854 ntruees787ep1 Public key bytes system 1574 ntruees787ep1 Encrypting 0 bytes bytes system 1574 ntruees787ep1 Encrypting 23 bytes bytes system 1551 ntruees787ep1 Encrypting many bytes bytes system 1573 ntruees787ep1

amd64; Piledriver (610f01); 2012 AMD A10-4655M; 2 x 2000MHz; boost; h9trinity, supercop-20140525

Cycles to generate a key pair quartile median quartile system 33006331 34647905 36481994 mceliece 32587083? 47452010? 71453752? ronald1024 70196424 70537327 70709362 ntruees787ep1 114932685? 168959602? 222596209? ronald1536 189481889? 352920322? 523705143? ronald2048 664530603? 1094732807? 1775962518? ronald3072 2005029439? 3404835870? 4887622017? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 45978 47904 54834 ronald1024 64505 65365 66853 mceliece 69384 78511 80559 ronald1536 90584 92539 110335 ronald2048 152835 156596 187286 ronald3072 240832 244488 292220 ronald4096 301393 301935 366993 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 526441 527136 640635 ntruees787ep1 796512 803509 967908 mceliece 1186048 1226493 1431426 ronald1024 2778484 2977642 3243014 ronald1536 5801004 5972351 6257885 ronald2048 17216435 17438862 17572003 ronald3072 38041782 38221576 38635428 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 1573 ntruees787ep1

x86; normally amd64; Piledriver (610f01); 2012 AMD A10-4655M; 2 x 2000MHz; boost; h9trinity, supercop-20140525

Cycles to generate a key pair quartile median quartile system 69031835 69436213 69727921 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 324270 325041 394943 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 543955 544935 661995 ntruees787ep1 Secret key bytes system 1854 ntruees787ep1 Public key bytes system 1574 ntruees787ep1 Encrypting 0 bytes bytes system 1574 ntruees787ep1 Encrypting 23 bytes bytes system 1551 ntruees787ep1 Encrypting many bytes bytes system 1573 ntruees787ep1

amd64; IB+AES (306a9); 2012 Intel Xeon E3-1275 V2; 4 x 3500MHz; hydra8, supercop-20140622

Cycles to generate a key pair quartile median quartile system 32399264 33876380 35533256 mceliece 32483484? 57115076? 93677440? ronald1024 74552288 75029272 75165688 ntruees787ep1 102378664? 157062924? 256849068? ronald1536 173754436? 277639872? 545297972? ronald2048 657559444? 995566596? 1716192696? ronald3072 1393910884? 2567717520? 3952244400? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 46240 46804 48232 ronald1024 65964 66540 68404 ronald1536 71844 73424 74652 mceliece 92496 93760 95500 ronald2048 161760 163892 166020 ronald3072 253508 256544 259708 ronald4096 388176 388600 389288 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 678816 680872 682300 ntruees787ep1 1129644 1130188 1132748 mceliece 1310644 1321844 1337148 ronald1024 2956676 2974096 3001940 ronald1536 5713720 5736792 5759872 ronald2048 15945008 15984932 16020508 ronald3072 34246780 34313200 34379388 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 1573 ntruees787ep1

x86; normally amd64; IB+AES (306a9); 2012 Intel Xeon E3-1275 V2; 4 x 3500MHz; hydra8, supercop-20140622

Cycles to generate a key pair quartile median quartile system 73173152 73694004 73835684 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 404372 404736 405344 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 688128 688540 690280 ntruees787ep1 Secret key bytes system 1854 ntruees787ep1 Public key bytes system 1574 ntruees787ep1 Encrypting 0 bytes bytes system 1574 ntruees787ep1 Encrypting 23 bytes bytes system 1551 ntruees787ep1 Encrypting many bytes bytes system 1573 ntruees787ep1

amd64; IB+AES (306a9); 2012 Intel Core i7-3770; 4 x 3392MHz; ares, supercop-20130419

Cycles to generate a key pair quartile median quartile system 34230480 35672864 37715660 mceliece 80816320 81172996 81372936 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 59392 59952 61028 mceliece 398820 400460 402720 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 695332 697528 700380 ntruees787ep1 1228676 1243492 1245660 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

x86; normally amd64; IB+AES (306a9); 2012 Intel Core i7-3770; 4 x 3392MHz; ares, supercop-20130419

Cycles to generate a key pair quartile median quartile system 36285784 38034688 40784180 mceliece 87143068 87532136 87723392 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 77572 78696 80060 mceliece 410720 412512 414568 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 698456 700280 703276 ntruees787ep1 1086968 1100280 1104260 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

amd64; IB+AES (306a9); 2012 Intel Core i5-3210M; 2 x 2500MHz; h9ivy, supercop-20140622

Cycles to generate a key pair quartile median quartile system 32478376 33887032 35531760 mceliece 35431544? 58456188? 90158668? ronald1024 74538140 75019444 75187136 ntruees787ep1 89442716? 153944064? 213840720? ronald1536 204430348? 285842996? 450911668? ronald2048 523739320? 938536308? 1536327972? ronald3072 1792406140? 2802895072? 4084267692? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 45692 45984 47552 ronald1024 66440 67572 68896 ronald1536 70868 73092 74336 mceliece 93176 95160 97392 ronald2048 162280 163260 165352 ronald3072 254704 257152 259924 ronald4096 388120 388428 388920 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 678240 678736 680104 ntruees787ep1 1130128 1130908 1134740 mceliece 1303152 1313324 1331808 ronald1024 2964800 2979140 2994140 ronald1536 5713752 5730260 5753556 ronald2048 15957748 16005504 16053336 ronald3072 34255412 34300904 34356296 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 1573 ntruees787ep1

x86; normally amd64; IB+AES (306a9); 2012 Intel Core i5-3210M; 2 x 2500MHz; h9ivy, supercop-20140622

Cycles to generate a key pair quartile median quartile system 88577232 89153804 89357432 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 409752 410988 412792 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 691244 691960 692428 ntruees787ep1 Secret key bytes system 1854 ntruees787ep1 Public key bytes system 1574 ntruees787ep1 Encrypting 0 bytes bytes system 1574 ntruees787ep1 Encrypting 23 bytes bytes system 1551 ntruees787ep1 Encrypting many bytes bytes system 1573 ntruees787ep1

armeabi; Scorpion (510f02d2); 2011 Qualcomm Snapdragon S3 APQ8060; 2 x 1782MHz; h6dragon, supercop-20140622

Cycles to generate a key pair quartile median quartile system 228764951 230119990 230773355 ntruees787ep1 384813140? 691080738? 1014464685? ronald1024 1166629148? 1838548118? 2509773351? ronald1536 2034111841? 3948197840? 6006909083? ronald2048 5447617258? 9070650276? 16219212789? ronald3072 16832572682? 23473930111? 40057226370? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 282132 282673 287623 ronald1024 450086 452053 458518 ronald1536 681531 689000 695840 ronald2048 989922 991274 993347 ntruees787ep1 1291593 1300137 1307432 ronald3072 2117853 2126992 2142420 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 1799774 1800062 1800550 ntruees787ep1 7544467 7599764 7641051 ronald1024 19482514 19534856 19587401 ronald1536 40420270 40541041 40602460 ronald2048 119642895 119797219 119982570 ronald3072 267063900 267197600 267411738 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 1573 ntruees787ep1

armeabi; Scorpion (510f02d2); 2011 Qualcomm Snapdragon S3 APQ8060; 2 x 1188MHz; spongebob, supercop-20130126

Cycles to generate a key pair quartile median quartile system 111528192 116611584 126012416 mceliece 292632832 294049280 294785280 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 179712 182016 185344 mceliece 1157120 1160704 1165312 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 1930496 1942272 1946880 mceliece 2142976 2150144 2155008 ntruees787ep1 Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

armeabi; Cortex-A8 (413fc082); 2011 TI Sitara AM3359; 1 x 720MHz; flops, supercop-20140622

Cycles to generate a key pair quartile median quartile system 198577150 199794618 200354136 ntruees787ep1 332464830? 592903218? 870220802? ronald1024 694450862? 1125494692? 2284908054? ronald1536 1712985728? 3267274005? 5606616506? ronald2048 5359485968? 8504531066? 15937104276? ronald3072 14957678098? 28554819996? 47640499490? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 237139 238282 242631 ronald1024 390273 394800 398760 ronald1536 599096 603864 610012 ronald2048 881872 883084 890339 ntruees787ep1 1149890 1155628 1162922 ronald3072 1904027 1909354 1923234 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 1634666 1642239 1645561 ntruees787ep1 7840819 7884259 7921286 ronald1024 20840183 20889681 20951848 ronald1536 43946691 44017213 44108753 ronald2048 132013103 132136874 132269487 ronald3072 296755898 296921979 297270507 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 1573 ntruees787ep1

armeabi; Cortex-A8 (413fc082); 2011 TI Sitara AM3359; 1 x 720MHz; h7beagle, supercop-20140529

Cycles to generate a key pair quartile median quartile system 198575241 199851208 200490120 ntruees787ep1 301597540? 501098895? 715090148? ronald1024 1018350106? 1529274233? 2282288829? ronald1536 1671097294? 3222901168? 4819675362? ronald2048 5454753196? 8505422294? 13285791280? ronald3072 16250705777? 24609351978? 39561605758? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 236918 239469 253447 ronald1024 391779 396281 398193 ronald1536 595949 601063 605566 ronald2048 881539 882308 883520 ntruees787ep1 1152670 1157521 1166709 ronald3072 1904762 1913574 1924291 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 1634506 1635180 1641716 ntruees787ep1 7854045 7889496 7926895 ronald1024 20803221 20875180 20963056 ronald1536 43941300 44013008 44114445 ronald2048 132004050 132157413 132338554 ronald3072 296719282 296945949 297161434 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 1573 ntruees787ep1

armeabi; Cortex-A9+NEON (411fc092); 2011 TI OMAP 4460; 2 x 1000MHz; h5omap, supercop-20130126

Cycles to generate a key pair quartile median quartile system 114070579 118062546 123234843 mceliece 238065976 239700814 240205642 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 147011 151086 155401 mceliece 1025632 1027886 1038152 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 1622700 1624862 1637584 mceliece 1885400 1887352 1896374 ntruees787ep1 Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

amd64; Bulldozer (600f12); 2011 AMD FX-8120; 4 x 3100MHz; boost; hydra6, supercop-20140529

Cycles to generate a key pair quartile median quartile system 44688140 46976358 49491144 mceliece 57452396? 88426452? 133864763? ronald1024 110291172 111096363 111317256 ntruees787ep1 135003520? 189321038? 295349401? ronald1536 333407156? 487746502? 718094994? ronald2048 835448551? 1468904961? 2418831903? ronald3072 2185015473? 3869200218? 5244022567? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 67558 68280 69841 ronald1024 83793 84649 85500 mceliece 95340 97069 100092 ronald1536 131421 133817 134956 ronald2048 229189 231359 234174 ronald3072 358980 361199 365228 ronald4096 454189 454852 455571 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 780366 781716 786634 ntruees787ep1 1125896 1126848 1129146 mceliece 1794853 1813975 1835206 ronald1024 4177089 4204725 4231198 ronald1536 8161660 8195786 8223051 ronald2048 23461926 23529231 23601680 ronald3072 50766086 50934474 51020973 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 1573 ntruees787ep1

x86; normally amd64; Bulldozer (600f12); 2011 AMD FX-8120; 4 x 3100MHz; boost; hydra6, supercop-20140529

Cycles to generate a key pair quartile median quartile system 108346794 109089362 109330666 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 476138 476597 477189 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 800904 801326 801503 ntruees787ep1 Secret key bytes system 1854 ntruees787ep1 Public key bytes system 1574 ntruees787ep1 Encrypting 0 bytes bytes system 1574 ntruees787ep1 Encrypting 23 bytes bytes system 1551 ntruees787ep1 Encrypting many bytes bytes system 1573 ntruees787ep1

amd64; Bobcat (500f20); 2011 AMD E-450; 2 x 1650MHz; h4e450, supercop-20140525

Cycles to generate a key pair quartile median quartile system 56164248 58568457 61438155 mceliece 160981992 162012276 162348273 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 87975 89304 90234 mceliece 567666 568587 570582 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 1003800 1005633 1009788 ntruees787ep1 1187253 1187469 1188078 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

x86; normally amd64; Bobcat (500f20); 2011 AMD E-450; 2 x 1650MHz; h4e450, supercop-20140525

Cycles to generate a key pair quartile median quartile system 177942861 179048355 179447397 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 567975 568866 569988 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 991815 992484 995772 ntruees787ep1 Secret key bytes system 1854 ntruees787ep1 Public key bytes system 1574 ntruees787ep1 Encrypting 0 bytes bytes system 1574 ntruees787ep1 Encrypting 23 bytes bytes system 1551 ntruees787ep1 Encrypting many bytes bytes system 1573 ntruees787ep1

amd64; Bobcat (500f20); 2011 AMD E-450; 2 x 1650MHz; h5e450, supercop-20130419

Cycles to generate a key pair quartile median quartile system 57448815 59946612 62585760 mceliece 76357062? 144273684? 210359073? ronald1024 161118525 162089097 162396606 ntruees787ep1 202854411? 303601554? 433503210? ronald1536 418104597? 772769922? 1142020770? ronald2048 1070151459? 1781685039? 2904766569? ronald3072 2998848576? 5241121710? 7597159788? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 84198 86463 91884 ronald1024 94014 95436 96492 mceliece 116907 117528 121602 ronald1536 161130 163950 167151 ronald2048 269160 271290 276963 ronald3072 410640 414444 421443 ronald4096 570018 571548 573585 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 1005204 1006188 1013049 ntruees787ep1 1182021 1186710 1190034 mceliece 2145276 2161842 2184903 ronald1024 4825218 4857372 4888074 ronald1536 9346095 9374907 9428907 ronald2048 25907319 25956696 26012802 ronald3072 55511994 55577151 55682652 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 1573 ntruees787ep1

x86; normally amd64; Bobcat (500f20); 2011 AMD E-450; 2 x 1650MHz; h5e450, supercop-20130419

Cycles to generate a key pair quartile median quartile system 59682879 63330198 67180836 mceliece 174329025 175408131 175816914 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 121458 122790 124200 mceliece 583266 583737 584397 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 1012374 1013046 1016133 ntruees787ep1 1117671 1119705 1126902 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

amd64; Bobcat (500f20); 2011 AMD E-350; 2 x 1600MHz; h4e350, supercop-20140525

Cycles to generate a key pair quartile median quartile system 55640118 58214262 60858054 mceliece 79058019? 123952431? 199104801? ronald1024 160975272 161954430 162284115 ntruees787ep1 198648324? 363390084? 544970898? ronald1536 393565896? 622451559? 973872432? ronald2048 1384651749? 2337176679? 3235664730? ronald3072 2281527291? 4922123565? 7979327271? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 80739 84474 86793 ronald1024 87303 88554 89802 mceliece 116277 117192 120861 ronald1536 158262 160431 164364 ronald2048 267282 272544 276108 ronald3072 408597 413523 421317 ronald4096 568236 569358 572118 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 1006632 1010910 1013004 ntruees787ep1 1182216 1182945 1184400 mceliece 2132442 2158830 2174133 ronald1024 4816083 4860255 4939386 ronald1536 9327696 9355578 9389187 ronald2048 25853865 25898424 26006310 ronald3072 55358937 55438350 55547244 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 1573 ntruees787ep1

x86; normally amd64; Bobcat (500f20); 2011 AMD E-350; 2 x 1600MHz; h4e350, supercop-20140525

Cycles to generate a key pair quartile median quartile system 179272551 180352857 180774534 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 567885 568305 568938 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 991872 992340 994986 ntruees787ep1 Secret key bytes system 1854 ntruees787ep1 Public key bytes system 1574 ntruees787ep1 Encrypting 0 bytes bytes system 1574 ntruees787ep1 Encrypting 23 bytes bytes system 1551 ntruees787ep1 Encrypting many bytes bytes system 1573 ntruees787ep1

amd64; Bobcat (500f10); 2011 AMD G-T56N; 2 x 1650MHz; h8bobcat, supercop-20140622

Cycles to generate a key pair quartile median quartile system 55791612 58211871 61116096 mceliece 78725937? 138593643? 189939549? ronald1024 168994173 170093229 170464320 ntruees787ep1 212598831? 346084125? 471198963? ronald1536 384161964? 566021691? 927982884? ronald2048 1087476384? 1851959982? 3293302932? ronald3072 2624880330? 4721448162? 7982028336? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 83136 87114 90624 ronald1024 87651 88965 89913 mceliece 116325 118143 121590 ronald1536 158760 161817 165246 ronald2048 268911 271800 277023 ronald3072 408249 412512 418131 ronald4096 607599 609075 611952 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 1104612 1106205 1109928 ntruees787ep1 1187352 1187775 1188351 mceliece 2139666 2162088 2179431 ronald1024 4830015 4858008 4888494 ronald1536 9331524 9376833 9417789 ronald2048 25842000 25923165 25999953 ronald3072 55359108 55427505 55526943 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 1573 ntruees787ep1