VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems

ECRYPT II

Measurements of public-key cryptosystems, indexed by machine

There is a separate page with more information about each public-key cryptosystem and each implementation. Designers and implementors interested in submitting new public-key cryptosystems and new implementations of existing cryptosystems should read the call for submissions.

What do the graphs and tables mean?

• Time to encrypt a short message.
• Time to decrypt a short message.
• Time to compute a key pair.
• Space for a secret key.
• Space for a public key.
• Ciphertext overhead for a short message: more precisely, the difference between the space used by a short encrypted message and the space used by the original message.
• Ciphertext overhead for a long message.

Each computer also has a series of tables, eight tables for each computer. The first table shows the time, in cycles, to generate a key pair. Each row of the table lists

• the first quartile of many time measurements,
• the median of many time measurements,
• the third quartile of many time measurements, and
• the name of the cryptosystem.

The computer name is linked to additional information about the implementations and compilers selected for benchmarking.

amd64; HW+AES (306c3); 2013 Intel Xeon E3-1275 V3; 4 x 3500MHz; titan0, supercop-20141124

Cycles to generate a key pair quartile median quartile system 427540 430784 433560 ntruees401ep2 487628 490352 493936 ntruees439ep1 801364 804444 807536 ntruees593ep1 1164356 1170260 1177164 ntruees743ep1 31208224 32277664 33568840 mceliece 41348596 41583080 41667144 ntruees787ep1 33098532? 52669288? 82509680? ronald1024 92042472? 173607980? 236375952? ronald1536 190811596? 316096676? 499470376? ronald2048 525567372? 850811144? 1439694404? ronald3072 1399171764? 2551525868? 4182142284? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 39992 41188 41812 ronald1024 47880 48948 49396 ntruees401ep2 54692 54940 55356 ntruees439ep1 56672 57324 57912 mceliece 57520 58168 59444 ronald1536 77144 77552 77936 ntruees593ep1 80596 81928 83892 ronald2048 98600 98904 99272 ntruees743ep1 132952 134136 134936 ntruees787ep1 142388 143924 145916 ronald3072 226112 227792 229880 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 51020 51280 51464 ntruees401ep2 56860 57008 57192 ntruees439ep1 83152 83516 84684 ntruees593ep1 109968 110368 110840 ntruees743ep1 174032 176664 179252 ntruees787ep1 1091220 1092536 1095928 mceliece 1175252 1185244 1195600 ronald1024 2650284 2672440 2689336 ronald1536 5110156 5136624 5165496 ronald2048 14146944 14181984 14208336 ronald3072 30324628 30391120 30451736 ronald4096 Secret key bytes system 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

x86; normally amd64; HW+AES (306c3); 2013 Intel Xeon E3-1275 V3; 4 x 3500MHz; titan0, supercop-20141124

Cycles to generate a key pair quartile median quartile system 1144932 1150508 1157204 ntruees439ep1 1923304 1928780 1935480 ntruees593ep1 2890160 2897708 2909420 ntruees743ep1 73142012 73671916 73869332 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 105960 106292 106756 ntruees439ep1 153476 153928 154500 ntruees593ep1 218124 218596 219136 ntruees743ep1 345960 346320 346672 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 137108 137932 139368 ntruees439ep1 211284 212440 214220 ntruees593ep1 324488 325824 328896 ntruees743ep1 581864 582380 584176 ntruees787ep1 Secret key bytes system 659 ntruees439ep1 891 ntruees593ep1 1120 ntruees743ep1 1854 ntruees787ep1 Public key bytes system 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 Encrypting 0 bytes bytes system 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

amd64; HW+AES (306c3); 2013 Intel Core i7-4770; 4 x 3400MHz; wintermute, supercop-20140505

Cycles to generate a key pair quartile median quartile system 44321608 44575472 44681288 ntruees787ep1 32863544? 48150376? 75259076? ronald1024 94474916? 153646200? 218767856? ronald1536 190327156? 288115872? 424387180? ronald2048 664690696? 1091068856? 1533632400? ronald3072 1396910040? 2646806816? 3806585836? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 64276 66860 73368 ronald1024 91924 95652 102660 ronald1536 125644 132052 140124 ronald2048 197052 201000 209264 ronald3072 288688 289028 289512 ntruees787ep1 288772 293212 300240 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 474284 474468 475568 ntruees787ep1 1394908 1413532 1434696 ronald1024 2984188 3000540 3025664 ronald1536 5539228 5563884 5588692 ronald2048 14877916 14915832 14958252 ronald3072 31688900 31753908 31820208 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 1573 ntruees787ep1

armeabi; Cortex-A9+NEON (413fc090); 2012 VIA WonderMedia 8850; 1 x 1200MHz; h7green, supercop-20141014

Cycles to generate a key pair quartile median quartile system 205273164 206549752 207012493 ntruees787ep1 40824690645663744 41023088069967872 41208669311860736 ntruees401ep2 48025662878908416 48190572443205632 48420963078897664 ntruees439ep1 86635348695711744 86798067826688000 87016578582839296 ntruees593ep1 135479881449340928 135757929042149376 136272363044995072 ntruees743ep1 -4931954849152499712? 248925438208901124? 3337383103038488577? ronald3072 -4152356952795512818? 312164433595990024? 4015566453485862916? ronald4096 -4183692149423865856? 1114690334257840128? 4484264191410044929? ronald2048 1549721958147424256? 2492751267152003072? 3723341388381683712? ronald1024 1296504821112635392? 3168939098484244480? 4890885469925015552? ronald1536 Cycles to encrypt 59 bytes quartile median quartile system 867710 870364 882459 ntruees787ep1 955746187476992 965238065201152 982181711183872 ronald1024 1450053973573632 1456573733928960 1463342602387456 ntruees401ep2 1502242121187328 1526946773073920 1566262903701504 ronald1536 1575819205935104 1579323899248640 1596920380260352 ntruees439ep1 2240465394991104 2262167864737792 2307144762261504 ronald2048 2550982940557312 2563068978528256 2593417217441792 ntruees593ep1 3889135836200960 3907934908055552 3953225338191872 ntruees743ep1 4186609566089216 4222622866866176 4354714586054656 ronald3072 6786812831858688 6834585753092096 7002974240899072 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 1604801 1613564 1648863 ntruees787ep1 2517271742251008 2525672698281984 2566255844261888 ntruees401ep2 2747997385392128 2754113418821632 2781702044386407 ntruees439ep1 4491960265998336 4511455122554880 4569475835756544 ntruees593ep1 7048277555937280 7092777712091136 7249629917741056 ntruees743ep1 29830394706657280 30080473472434176 30328013967362737 ronald1024 78761617080188928 79087974465142784 79346918043418624 ronald1536 163450804424933376 163771389373841408 164281983675924480 ronald2048 485879514073661440 486624476151152640 487431899938029568 ronald3072 1088356532556398592 1089432172755943424 1090711368635514880 ronald4096 Secret key bytes system 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 Encrypting 0 bytes bytes system 1574 ntruees787ep1 549755813888 ronald1024 824633720832 ronald1536 1099511627776 ronald2048 1649267441664 ronald3072 2199023255552 ronald4096 2370821947392 ntruees401ep2 2594160246784 ntruees439ep1 3504693313536 ntruees593ep1 4389456576512 ntruees743ep1 Encrypting 23 bytes bytes system 1551 ntruees787ep1 549755813865 ronald1024 824633720809 ronald1536 1099511627753 ronald2048 1649267441641 ronald3072 2199023255529 ronald4096 2370821947369 ntruees401ep2 2594160246761 ntruees439ep1 3504693313513 ntruees593ep1 4389456576489 ntruees743ep1 Encrypting many bytes bytes system 1573 ntruees787ep1 414344084883315 ronald1024 414344084883315 ronald1536 414344084883315 ronald2048 414344084883315 ronald3072 414344084883315 ronald4096 416358424545139 ntruees401ep2 416611827615603 ntruees439ep1 417432166369139 ntruees593ep1 418231030286195 ntruees743ep1

armeabi; Cortex-A15 (410fc0f4); 2012 Samsung Exynos 5 Dual; 2 x 1700MHz; sachr, supercop-20140514

Cycles to generate a key pair quartile median quartile system 7836499 7853383 7872892 ntruees401ep2 9330762 9350485 9373378 ntruees439ep1 16810106 16834258 16864885 ntruees593ep1 26186969 26221421 26257813 ntruees743ep1 168231432 169694414 170083000 ntruees787ep1 289875921? 465923194? 816495706? ronald1024 815965241? 1337730714? 1932125705? ronald1536 1059273730? 2210946359? 3722084803? ronald2048 5024978304? 8570572798? 13429510379? ronald3072 12458808708? 18484484148? 29790561854? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 160238 161435 164782 ronald1024 217381 219268 219938 ntruees401ep2 238883 239438 240172 ntruees439ep1 252892 255029 258602 ronald1536 330572 331945 333745 ntruees593ep1 373451 376777 381473 ronald2048 457665 458760 459924 ntruees743ep1 542550 543297 543922 ntruees787ep1 694183 697225 700943 ronald3072 1114382 1118318 1126446 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 237388 238523 240190 ntruees401ep2 258821 259725 261644 ntruees439ep1 415469 416159 417420 ntruees593ep1 629333 630489 634062 ntruees743ep1 962190 962777 965370 ntruees787ep1 5413924 5439136 5468679 ronald1024 12821279 12852439 12896228 ronald1536 26601059 26647648 26700815 ronald2048 79789297 79888238 79993198 ronald3072 181061582 181327140 181662921 ronald4096 Secret key bytes system 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 ronald2048 361 ronald3072 489 ronald4096 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

amd64; Piledriver (610f01); 2012 AMD A10-5800K; 2 x 3800MHz; hydra9, supercop-20141014

Cycles to generate a key pair quartile median quartile system 654103 660363 665901 ntruees401ep2 750009 756813 764219 ntruees439ep1 1229565 1239497 1251171 ntruees593ep1 1786980 1801544 1816676 ntruees743ep1 43029404 45218805 47822932 mceliece 47543278? 71889659? 111443145? ronald1024 90250880 90898524 91076770 ntruees787ep1 116647648? 179098059? 291924101? ronald1536 224282623? 375579438? 623536370? ronald2048 905186217? 1450180066? 2132953292? ronald3072 2371551899? 4162314674? 7198451089? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 64233 64858 66936 ronald1024 75314 77990 78477 ntruees401ep2 86016 86875 87971 mceliece 87255 87670 88166 ntruees439ep1 91403 93274 95677 ronald1536 117480 118200 118814 ntruees593ep1 127140 128530 131819 ronald2048 149540 150006 150646 ntruees743ep1 215230 216872 220022 ronald3072 337684 341792 346153 ronald4096 421888 422591 424678 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 91462 91994 92250 ntruees401ep2 102004 102432 103589 ntruees439ep1 141262 141529 141866 ntruees593ep1 185377 186668 187394 ntruees743ep1 736834 737270 742629 ntruees787ep1 1123372 1125803 1395269 mceliece 1653858 1669936 1685024 ronald1024 3861546 3878673 3897710 ronald1536 7657138 7689665 7731457 ronald2048 22334992 22430032 22488342 ronald3072 48869147 49014261 49158593 ronald4096 Secret key bytes system 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

x86; normally amd64; Piledriver (610f01); 2012 AMD A10-5800K; 2 x 3800MHz; hydra9, supercop-20141014

Cycles to generate a key pair quartile median quartile system 3710090 3731605 3752458 ntruees439ep1 5907371 5928044 5942557 ntruees593ep1 9148270 9167247 9197766 ntruees743ep1 88966428 89477114 89688009 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 152119 152450 152902 ntruees439ep1 228660 229314 229948 ntruees593ep1 324286 325209 327555 ntruees743ep1 453721 454170 454639 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 223982 224732 225399 ntruees439ep1 353813 356536 357033 ntruees593ep1 524233 524838 529729 ntruees743ep1 761224 761450 761765 ntruees787ep1 Secret key bytes system 659 ntruees439ep1 891 ntruees593ep1 1120 ntruees743ep1 1854 ntruees787ep1 Public key bytes system 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 Encrypting 0 bytes bytes system 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

amd64; Piledriver (610f01); 2012 AMD A10-4655M; 2 x 2000MHz; h9trinity, supercop-20141014

Cycles to generate a key pair quartile median quartile system 665188 671997 682821 ntruees401ep2 738379 749086 761103 ntruees439ep1 1229327 1235822 1246002 ntruees593ep1 1787138 1799806 1815130 ntruees743ep1 43044791 45280392 47869783 mceliece 43522667? 76780927? 113699536? ronald1024 90329347 90922582 91104516 ntruees787ep1 109954855? 171942388? 290927023? ronald1536 225472534? 360648534? 618687467? ronald2048 816197825? 1348035713? 2315390729? ronald3072 2229032938? 3571694353? 5813597119? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 64124 65379 66944 ronald1024 74162 77879 78112 ntruees401ep2 85899 86863 88309 mceliece 87330 88125 97415 ntruees439ep1 89793 91608 93869 ronald1536 117434 117905 118430 ntruees593ep1 127344 130031 132684 ronald2048 150273 150770 151665 ntruees743ep1 215587 218523 221743 ronald3072 339509 343551 363454 ronald4096 421674 421972 422332 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 91234 91370 91604 ntruees401ep2 98698 99195 109875 ntruees439ep1 140097 140783 141603 ntruees593ep1 185090 188624 189903 ntruees743ep1 736966 737124 737632 ntruees787ep1 1122719 1124720 1128312 mceliece 1644557 1657965 1668734 ronald1024 3860394 3882832 3903555 ronald1536 7694646 7737800 7803575 ronald2048 22385809 22489833 22579082 ronald3072 48900718 49015946 49232004 ronald4096 Secret key bytes system 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

x86; normally amd64; Piledriver (610f01); 2012 AMD A10-4655M; 2 x 2000MHz; h9trinity, supercop-20141014

Cycles to generate a key pair quartile median quartile system 3714362 3732285 3758933 ntruees439ep1 5889321 5904696 5918819 ntruees593ep1 9139799 9160651 9194108 ntruees743ep1 88761148 89308353 89514499 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 152602 153118 153657 ntruees439ep1 228273 228973 229537 ntruees593ep1 324760 325419 326641 ntruees743ep1 453553 454006 454434 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 224528 225138 226453 ntruees439ep1 353597 353946 354566 ntruees593ep1 524801 525554 526368 ntruees743ep1 761305 761604 762212 ntruees787ep1 Secret key bytes system 659 ntruees439ep1 891 ntruees593ep1 1120 ntruees743ep1 1854 ntruees787ep1 Public key bytes system 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 Encrypting 0 bytes bytes system 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

amd64; IB+AES (306a9); 2012 Intel Xeon E3-1275 V2; 4 x 3500MHz; hydra8, supercop-20141014

Cycles to generate a key pair quartile median quartile system 524928 530012 533252 ntruees401ep2 592428 596128 601848 ntruees439ep1 976892 982176 986324 ntruees593ep1 1428372 1437344 1447756 ntruees743ep1 32399264 33876380 35533256 mceliece 32483484? 57115076? 93677440? ronald1024 74552288 75029272 75165688 ntruees787ep1 102378664? 157062924? 256849068? ronald1536 173754436? 277639872? 545297972? ronald2048 657559444? 995566596? 1716192696? ronald3072 1393910884? 2567717520? 3952244400? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 46240 46804 48232 ronald1024 56504 57120 57968 ntruees401ep2 64076 64416 64824 ntruees439ep1 65964 66540 68404 ronald1536 71844 73424 74652 mceliece 87904 88436 89212 ntruees593ep1 92496 93760 95500 ronald2048 111452 112200 112968 ntruees743ep1 161760 163892 166020 ronald3072 253508 256544 259708 ronald4096 388176 388600 389288 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 62952 63496 67652 ntruees401ep2 69988 70196 71144 ntruees439ep1 99588 100108 101280 ntruees593ep1 132512 133016 136220 ntruees743ep1 678816 680872 682300 ntruees787ep1 1129644 1130188 1132748 mceliece 1310644 1321844 1337148 ronald1024 2956676 2974096 3001940 ronald1536 5713720 5736792 5759872 ronald2048 15945008 15984932 16020508 ronald3072 34246780 34313200 34379388 ronald4096 Secret key bytes system 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

x86; normally amd64; IB+AES (306a9); 2012 Intel Xeon E3-1275 V2; 4 x 3500MHz; hydra8, supercop-20141014

Cycles to generate a key pair quartile median quartile system 3031748 3045752 3065268 ntruees439ep1 5357976 5397824 5420604 ntruees593ep1 8483980 8511008 8536876 ntruees743ep1 73173152 73694004 73835684 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 111656 112276 113080 ntruees439ep1 166284 166752 167428 ntruees593ep1 236448 237148 237644 ntruees743ep1 404372 404736 405344 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 150784 151484 153104 ntruees439ep1 236304 237488 240408 ntruees593ep1 360420 361332 364532 ntruees743ep1 688128 688540 690280 ntruees787ep1 Secret key bytes system 659 ntruees439ep1 891 ntruees593ep1 1120 ntruees743ep1 1854 ntruees787ep1 Public key bytes system 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 Encrypting 0 bytes bytes system 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

amd64; IB+AES (306a9); 2012 Intel Core i5-3210M; 2 x 2500MHz; h9ivy, supercop-20141014

Cycles to generate a key pair quartile median quartile system 32478376 33887032 35531760 mceliece 35431544? 58456188? 90158668? ronald1024 74538140 75019444 75187136 ntruees787ep1 89442716? 153944064? 213840720? ronald1536 204430348? 285842996? 450911668? ronald2048 523739320? 938536308? 1536327972? ronald3072 1792406140? 2802895072? 4084267692? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 45692 45984 47552 ronald1024 66440 67572 68896 ronald1536 70868 73092 74336 mceliece 93176 95160 97392 ronald2048 162280 163260 165352 ronald3072 254704 257152 259924 ronald4096 388120 388428 388920 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 678240 678736 680104 ntruees787ep1 1130128 1130908 1134740 mceliece 1303152 1313324 1331808 ronald1024 2964800 2979140 2994140 ronald1536 5713752 5730260 5753556 ronald2048 15957748 16005504 16053336 ronald3072 34255412 34300904 34356296 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 1573 ntruees787ep1

x86; normally amd64; IB+AES (306a9); 2012 Intel Core i5-3210M; 2 x 2500MHz; h9ivy, supercop-20141014

Cycles to generate a key pair quartile median quartile system 88577232 89153804 89357432 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 409752 410988 412792 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 691244 691960 692428 ntruees787ep1 Secret key bytes system 1854 ntruees787ep1 Public key bytes system 1574 ntruees787ep1 Encrypting 0 bytes bytes system 1574 ntruees787ep1 Encrypting 23 bytes bytes system 1551 ntruees787ep1 Encrypting many bytes bytes system 1573 ntruees787ep1

armeabi; Scorpion (510f02d2); 2011 Qualcomm Snapdragon S3 APQ8060; 2 x 1782MHz; h6dragon, supercop-20141014

Cycles to generate a key pair quartile median quartile system 3923631 3935621 3960443 ntruees401ep2 4645495 4668250 4689023 ntruees439ep1 8156187 8175886 8197706 ntruees593ep1 15539820 15590411 15653286 ntruees743ep1 228660966 229993530 230742218 ntruees787ep1 367306485? 668800611? 1031980564? ronald1024 940371941? 1682653229? 2474759824? ronald1536 2079293443? 3847254565? 5761776332? ronald2048 4638173429? 8664519105? 15513765084? ronald3072 15907302253? 27700190933? 47214868090? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 235738 236466 237264 ntruees401ep2 264756 265223 265492 ntruees439ep1 282514 283778 290336 ronald1024 395162 396062 396921 ntruees593ep1 448836 451314 456525 ronald1536 558473 558904 559834 ntruees743ep1 679637 686109 688295 ronald2048 990025 991681 993936 ntruees787ep1 1294056 1298340 1306442 ronald3072 2118872 2126330 2141056 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 387355 387377 387395 ntruees401ep2 430867 430896 430918 ntruees439ep1 659487 659499 659539 ntruees593ep1 973976 974256 974452 ntruees743ep1 1799470 1799583 1800628 ntruees787ep1 7552370 7602092 7637852 ronald1024 19487233 19544017 19601861 ronald1536 40443441 40533786 40628880 ronald2048 119677596 119800127 119966546 ronald3072 266966192 267136920 267405763 ronald4096 Secret key bytes system 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 ronald2048 361 ronald3072 489 ronald4096 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

armeabi; Cortex-A8 (413fc082); 2011 TI Sitara AM3359; 1 x 720MHz; flops, supercop-20140622

Cycles to generate a key pair quartile median quartile system 18290511 18325638 18340311 ntruees401ep2 21837434 21871291 21903963 ntruees439ep1 39483542 39512522 39590453 ntruees593ep1 61825989 61872927 61957452 ntruees743ep1 198577150 199794618 200354136 ntruees787ep1 332464830? 592903218? 870220802? ronald1024 694450862? 1125494692? 2284908054? ronald1536 1712985728? 3267274005? 5606616506? ronald2048 5359485968? 8504531066? 15937104276? ronald3072 14957678098? 28554819996? 47640499490? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 237139 238282 242631 ronald1024 345958 347173 350419 ntruees401ep2 378727 379061 379555 ntruees439ep1 390273 394800 398760 ronald1536 539704 541583 551584 ntruees593ep1 599096 603864 610012 ronald2048 777611 778334 779583 ntruees743ep1 881872 883084 890339 ntruees787ep1 1149890 1155628 1162922 ronald3072 1904027 1909354 1923234 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 444590 445134 448917 ntruees401ep2 490636 490751 490968 ntruees439ep1 782781 784270 788460 ntruees593ep1 1221003 1221407 1223620 ntruees743ep1 1634666 1642239 1645561 ntruees787ep1 7840819 7884259 7921286 ronald1024 20840183 20889681 20951848 ronald1536 43946691 44017213 44108753 ronald2048 132013103 132136874 132269487 ronald3072 296755898 296921979 297270507 ronald4096 Secret key bytes system 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 ronald2048 361 ronald3072 489 ronald4096 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

armeabi; Cortex-A8 (413fc082); 2011 TI Sitara AM3359; 1 x 720MHz; h7beagle, supercop-20140622

Cycles to generate a key pair quartile median quartile system 18289213 18327832 18350318 ntruees401ep2 21846973 21880764 21905416 ntruees439ep1 39483749 39528087 39592336 ntruees593ep1 61833262 61891695 62008780 ntruees743ep1 198677274 199801884 200370189 ntruees787ep1 424390168? 607446916? 886478664? ronald1024 1018040194? 1717993754? 2583350327? ronald1536 1626866066? 2760386940? 4645785324? ronald2048 5843343842? 10035256889? 13652884622? ronald3072 13858112354? 23701714971? 37944426353? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 237926 240709 260598 ronald1024 344360 346509 347034 ntruees401ep2 378645 379016 379583 ntruees439ep1 389201 390715 397390 ronald1536 538098 540092 541508 ntruees593ep1 596090 601570 612359 ronald2048 777532 778540 780034 ntruees743ep1 881961 883462 890250 ntruees787ep1 1149271 1156968 1166246 ronald3072 1905383 1909352 1919101 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 444496 444617 444836 ntruees401ep2 490511 490680 491058 ntruees439ep1 782643 782896 783958 ntruees593ep1 1220996 1221241 1223382 ntruees743ep1 1634593 1642203 1646061 ntruees787ep1 7835315 7899285 7951700 ronald1024 20802826 20848660 20936184 ronald1536 43946374 44069130 44225468 ronald2048 132005506 132133001 132334360 ronald3072 296617558 296867105 297107464 ronald4096 Secret key bytes system 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 ronald2048 361 ronald3072 489 ronald4096 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

amd64; Bulldozer (600f12); 2011 AMD FX-8120; 4 x 3100MHz; hydra6, supercop-20140622

Cycles to generate a key pair quartile median quartile system 10306287 10328854 10349044 ntruees401ep2 11545477 11567990 11587422 ntruees439ep1 22177401 22207044 22236813 ntruees593ep1 32503133 32532082 32560158 ntruees743ep1 44260223 46557774 49048166 mceliece 51068229? 76528367? 119558554? ronald1024 110177275 110831876 111058972 ntruees787ep1 147716173? 274883550? 405647461? ronald1536 326936643? 528024956? 766362738? ronald2048 996261179? 1657050945? 2501933633? ronald3072 2159676015? 3298968100? 5349567349? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 67323 68423 70073 ronald1024 89575 90646 91602 mceliece 93751 94741 96808 ronald1536 131333 133057 135417 ronald2048 188674 191293 193151 ntruees401ep2 208080 208946 209474 ntruees439ep1 227046 229673 232766 ronald3072 279217 282058 283764 ntruees593ep1 356013 359483 362554 ronald4096 379866 381079 382452 ntruees743ep1 454351 454980 455695 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 182276 183633 183883 ntruees401ep2 202064 202715 203569 ntruees439ep1 310773 311151 311310 ntruees593ep1 460646 461716 462448 ntruees743ep1 779832 781102 781222 ntruees787ep1 1153724 1155200 1156709 mceliece 1774172 1790358 1811370 ronald1024 4192658 4213004 4242533 ronald1536 8161297 8198562 8235979 ronald2048 23422143 23556662 23680727 ronald3072 50741441 50892056 51026254 ronald4096 Secret key bytes system 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

x86; normally amd64; Bulldozer (600f12); 2011 AMD FX-8120; 4 x 3100MHz; hydra6, supercop-20140622

Cycles to generate a key pair quartile median quartile system 13007008 13028379 13046408 ntruees439ep1 19330198 19359213 19387059 ntruees593ep1 30243786 30272276 30291219 ntruees743ep1 108302711 109087746 109311808 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 229276 229904 230575 ntruees439ep1 302153 305847 307741 ntruees593ep1 409849 410612 411877 ntruees743ep1 476481 477168 478858 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 213640 213784 214060 ntruees439ep1 327812 327981 328824 ntruees593ep1 488552 488740 489064 ntruees743ep1 800870 801323 801852 ntruees787ep1 Secret key bytes system 659 ntruees439ep1 891 ntruees593ep1 1120 ntruees743ep1 1854 ntruees787ep1 Public key bytes system 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 Encrypting 0 bytes bytes system 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

amd64; Bobcat (500f20); 2011 AMD E-450; 2 x 1650MHz; h4e450, supercop-20141014

Cycles to generate a key pair quartile median quartile system 3162375 3183867 3204360 ntruees439ep1 5748177 5773584 5788560 ntruees593ep1 8783862 8812305 8862996 ntruees743ep1 56134596 58615509 61316916 mceliece 160948308 161927379 162242391 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 87870 89145 90282 mceliece 113550 114570 115455 ntruees439ep1 167175 168498 169296 ntruees593ep1 221016 222504 224430 ntruees743ep1 541812 542109 542886 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 160188 160764 162717 ntruees439ep1 242721 243846 244362 ntruees593ep1 328884 329586 330162 ntruees743ep1 956580 956862 958686 ntruees787ep1 1187082 1187610 1188369 mceliece Secret key bytes system 659 ntruees439ep1 891 ntruees593ep1 1120 ntruees743ep1 1854 ntruees787ep1 137282 mceliece Public key bytes system 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

x86; normally amd64; Bobcat (500f20); 2011 AMD E-450; 2 x 1650MHz; h4e450, supercop-20141014

Cycles to generate a key pair quartile median quartile system 5632623 5660592 5695110 ntruees439ep1 10059408 10091049 10111470 ntruees593ep1 32542245 32586054 32643582 ntruees743ep1 177946812 179005611 179448669 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 218706 219318 219852 ntruees439ep1 333093 333813 334569 ntruees593ep1 483021 484113 485628 ntruees743ep1 568284 568701 569316 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 348792 349353 351282 ntruees439ep1 546531 548046 551376 ntruees593ep1 835008 836952 838467 ntruees743ep1 991917 995157 1094457 ntruees787ep1 Secret key bytes system 659 ntruees439ep1 891 ntruees593ep1 1120 ntruees743ep1 1854 ntruees787ep1 Public key bytes system 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 Encrypting 0 bytes bytes system 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1

amd64; Bobcat (500f20); 2011 AMD E-350; 2 x 1600MHz; h4e350, supercop-20141014

Cycles to generate a key pair quartile median quartile system 2747226 2759616 2775132 ntruees401ep2 3204303 3221430 3240291 ntruees439ep1 5749494 5769168 5789685 ntruees593ep1 8779257 8811351 8865351 ntruees743ep1 55727946 58243800 61119666 mceliece 78661422? 137335908? 185621598? ronald1024 160916871 161871732 162281607 ntruees787ep1 214499016? 366801540? 520691511? ronald1536 383959812? 614246823? 1002180651? ronald2048 1366167585? 1966398168? 3031880979? ronald3072 2831481534? 5097172653? 6841847397? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 82611 83547 86241 ronald1024 86988 88305 89766 mceliece 103359 104895 105657 ntruees401ep2 115632 116499 120069 ronald1536 116418 117294 118299 ntruees439ep1 159111 161601 164562 ronald2048 167367 168270 169281 ntruees593ep1 220830 222687 224253 ntruees743ep1 266550 270222 275247 ronald3072 408924 413367 418869 ronald4096 563787 564708 565842 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 145602 146265 146763 ntruees401ep2 159615 160260 161133 ntruees439ep1 239490 240717 241263 ntruees593ep1 324849 325722 327078 ntruees743ep1 1004496 1004979 1006458 ntruees787ep1 1182264 1182942 1183635 mceliece 2147226 2172606 2192277 ronald1024 4816722 4856712 4886058 ronald1536 9326067 9364254 9403320 ronald2048 25796061 25860597 25953033 ronald3072 55401741 55491531 55670163 ronald4096 Secret key bytes system 607 ntruees401ep2 659 ntruees439ep1 891 ntruees593ep1 1024 ronald1024 1120 ntruees743ep1 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 557 ntruees401ep2 609 ntruees439ep1 821 ntruees593ep1 1027 ntruees743ep1 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 552 ntruees401ep2 604 ntruees439ep1 816 ntruees593ep1 1022 ntruees743ep1 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 529 ntruees401ep2 581 ntruees439ep1 793 ntruees593ep1 999 ntruees743ep1 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 544 ntruees401ep2 603 ntruees439ep1 794 ntruees593ep1 980 ntruees743ep1 1573 ntruees787ep1