VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems

ECRYPT II

Measurements of public-key cryptosystems, indexed by machine

There is a separate page with more information about each public-key cryptosystem and each implementation. Designers and implementors interested in submitting new public-key cryptosystems and new implementations of existing cryptosystems should read the call for submissions.

What do the graphs and tables mean?

• Time to encrypt a short message.
• Time to decrypt a short message.
• Time to compute a key pair.
• Space for a secret key.
• Space for a public key.
• Ciphertext overhead for a short message: more precisely, the difference between the space used by a short encrypted message and the space used by the original message.
• Ciphertext overhead for a long message.

Each computer also has a series of tables, eight tables for each computer. The first table shows the time, in cycles, to generate a key pair. Each row of the table lists

• the first quartile of many time measurements,
• the median of many time measurements,
• the third quartile of many time measurements, and
• the name of the cryptosystem.

The computer name is linked to additional information about the implementations and compilers selected for benchmarking.

amd64; Haswell (306c3); 2013 Intel Core i5-4570S; 4 x 2900MHz; haswell, supercop-20130419

Cycles to generate a key pair quartile median quartile system 33415130 34267498 36022441 mceliece 48482808 49490198 50538360 ntruees787ep1 35366829? 55583758? 81362742? ronald1024 95229008? 152744535? 230474112? ronald1536 192583577? 302872262? 456004900? ronald2048 511537908? 972203814? 1581141639? ronald3072 1695956395? 2657329947? 3967633863? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 42282 45452 46464 ronald1024 61920 63522 65408 mceliece 65035 65955 68391 ronald1536 90748 96305 102614 ronald2048 162491 165832 168432 ronald3072 247036 251844 255254 ronald4096 321262 322240 333972 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 511092 513852 551836 ntruees787ep1 1102584 1139808 1218768 mceliece 1269600 1288172 1299872 ronald1024 2790260 2825540 2887776 ronald1536 5353806 5416343 5570588 ronald2048 14868640 15181669 15544056 ronald3072 30661912 31211918 31765958 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 1573 ntruees787ep1

armeabi (v7-A, Cortex A8); 2012 TI Sitara XAM3359AZCZ100; 1 x 1000MHz; bblack, supercop-20130419

Cycles to generate a key pair quartile median quartile system 89880117? 96702096? 116948074? mceliece 409318729 411460922 412398062 ntruees787ep1 365880243? 550731966? 830412888? ronald1024 916257520? 1404379509? 2244509028? ronald1536 1725615896? 3548714930? 4680033248? ronald2048 4534778000? 7700360338? 12803862120? ronald3072 13578395980? 24033394488? 33020186384? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 127685 130103 137241 mceliece 237476 239553 243838 ronald1024 389426 393719 408686 ronald1536 599422 607020 625284 ronald2048 1067821 1084086 1085433 ntruees787ep1 1156294 1171616 1181621 ronald3072 1918540 1926227 1930042 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 1497076 1501092 1511334 mceliece 2024719 2025095 2033608 ntruees787ep1 7903805 7946557 8032685 ronald1024 20979263 21032490 21106970 ronald1536 44207026 44301027 44362802 ronald2048 132937016 133090395 133311325 ronald3072 298936778 299157828 299537200 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 1573 ntruees787ep1

armeabi (v7-A, Krait); 2012 Qualcomm Snapdragon S4 APQ8060A; 2 x 1512MHz; h9dragon, supercop-20130126

Cycles to generate a key pair quartile median quartile system 108268786 114377742 121497428 mceliece 239095690 240584317 241132099 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 160933 164525 167964 mceliece 918671 919125 919990 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 1688977 1689390 1690086 ntruees787ep1 2123570 2129110 2192382 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

armeabi (Cortex A15); 2012 Samsung Exynos 5 Dual; 2 x 1700MHz; sachr, supercop-20130126

Cycles to generate a key pair quartile median quartile system 76089295 79155629 82498433 mceliece 186984772 188109241 188586757 ntruees787ep1 327169993? 598928655? 895043724? ronald1024 712177888? 1256333446? 1892772560? ronald1536 1884421477? 3040112567? 5900091958? ronald2048 4789354345? 7358605836? 12905260103? ronald3072 12700351152? 20654271731? 35583120412? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 103510 105466 107967 mceliece 187544 188381 191157 ronald1024 298478 299898 304371 ronald1536 440266 444464 450390 ronald2048 789399 793671 799650 ntruees787ep1 789530 793753 798366 ronald3072 1276310 1282104 1290317 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 1455290 1455853 1457870 ntruees787ep1 1812726 1831910 1834389 mceliece 9069413 9109246 9157798 ronald1024 17073148 17121925 17166789 ronald1536 49855962 49895463 49942087 ronald2048 98692538 98883842 99199423 ronald3072 307836539 308081194 308389881 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 1573 ntruees787ep1

amd64; Piledriver (610f01); 2012 AMD A10-5800K; 2 x 3800MHz; hydra9, supercop-20130126

Cycles to generate a key pair quartile median quartile system 46946984 49104964 51438912 mceliece 53408664? 74565733? 111327746? ronald1024 90271613 90916591 91088386 ntruees787ep1 133525745? 213655072? 273507312? ronald1536 235622494? 395777855? 657836553? ronald2048 817528886? 1578285285? 2201636193? ronald3072 2412587870? 3849942977? 5907959313? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 63696 64461 66671 ronald1024 70045 70799 71762 mceliece 89058 90395 92651 ronald1536 124382 126194 128970 ronald2048 214614 218239 222018 ronald3072 332536 334190 338623 ronald4096 421706 422031 422534 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 737041 737347 738349 ntruees787ep1 1169701 1183568 1217622 mceliece 1640654 1652610 1671978 ronald1024 3855293 3876328 3894100 ronald1536 7649272 7683588 7710105 ronald2048 22415553 22490429 22563657 ronald3072 48852437 48954551 49046057 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 1573 ntruees787ep1

x86; normally amd64; Piledriver (610f01); 2012 AMD A10-5800K; 2 x 3800MHz; hydra9, supercop-20130126

Cycles to generate a key pair quartile median quartile system 47065519 49514675 51669003 mceliece 89626206 90218430 90402759 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 97509 98313 99339 mceliece 455382 455751 456217 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 766348 766561 766920 ntruees787ep1 1054874 1056860 1059634 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

amd64; Piledriver (610f01); 2012 AMD A10-4655M; 2 x 2000MHz; h9trinity, supercop-20130419

Cycles to generate a key pair quartile median quartile system 47201000 49188882 51501449 mceliece 47584452? 74988358? 113649929? ronald1024 90454615 90980033 91390594 ntruees787ep1 102725746? 179384915? 267327079? ronald1536 264685160? 411286258? 601226595? ronald2048 857681217? 1622673683? 2384797356? ronald3072 2367894020? 3954926528? 6204259517? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 62614 64720 67372 ronald1024 70187 71016 72021 mceliece 89702 91618 94048 ronald1536 123184 125251 126657 ronald2048 213285 216021 219739 ronald3072 333031 336557 341853 ronald4096 421627 421973 422446 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 736769 737148 737787 ntruees787ep1 1164064 1167211 1174112 mceliece 1651804 1669339 1680522 ronald1024 3859984 3888852 3917560 ronald1536 7668579 7698437 7744815 ronald2048 22433748 22518910 22607362 ronald3072 48937647 49132854 49359863 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 1573 ntruees787ep1

x86; normally amd64; Piledriver (610f01); 2012 AMD A10-4655M; 2 x 2000MHz; h9trinity, supercop-20130419

Cycles to generate a key pair quartile median quartile system 47134107 49746771 52023898 mceliece 109038914 109754514 110071320 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 97286 98259 99180 mceliece 507252 507914 508929 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 854391 854745 855234 ntruees787ep1 1058006 1062448 1197616 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

amd64; Bulldozer (600f12); 2012 AMD FX-4170; 2 x 4200MHz; pistol, supercop-20121016

Cycles to generate a key pair quartile median quartile system 48135124 50514803 53088438 mceliece 110309293 111063645 111293246 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 71368 72562 73368 mceliece 447385 448021 448683 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 783027 783446 784353 ntruees787ep1 1209269 1220918 1260552 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

x86; normally amd64; Bulldozer (600f12); 2012 AMD FX-4170; 2 x 4200MHz; pistol, supercop-20121016

Cycles to generate a key pair quartile median quartile system 48646925 51306138 53544897 mceliece 109007949 109800995 110037523 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 101672 102969 104490 mceliece 477199 477827 478513 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 803342 803667 805703 ntruees787ep1 1098417 1108247 1148953 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

amd64; IB+AES (306a9); 2012 Intel Xeon E3-1275 V2; 4 x 3500MHz; hydra8, supercop-20130126

Cycles to generate a key pair quartile median quartile system 33404256 34689912 36227852 mceliece 33784608? 59763904? 90545716? ronald1024 71517728 72011552 72145808 ntruees787ep1 84205160? 149161636? 230805540? ronald1536 190571748? 338174520? 481188560? ronald2048 612811128? 1103681036? 1681359164? ronald3072 1544556664? 2504391648? 4021831144? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 46628 47296 48292 ronald1024 60748 61888 62712 mceliece 67060 67908 69640 ronald1536 93888 95764 97752 ronald2048 162304 163544 166200 ronald3072 254784 257244 261204 ronald4096 398456 398732 399272 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 699288 699920 701656 ntruees787ep1 1217652 1218728 1221372 mceliece 1318536 1333564 1345948 ronald1024 2977452 2994880 3013176 ronald1536 5737292 5769176 5788200 ronald2048 15964940 15998668 16055424 ronald3072 34272792 34330672 34429808 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 1573 ntruees787ep1

x86; normally amd64; IB+AES (306a9); 2012 Intel Xeon E3-1275 V2; 4 x 3500MHz; hydra8, supercop-20130126

Cycles to generate a key pair quartile median quartile system 35699140 37437004 39178620 mceliece 71674368 72139456 72316000 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 78148 79236 80224 mceliece 419456 419900 420508 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 718880 719740 721820 ntruees787ep1 1084716 1085684 1089596 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

amd64; IB+AES (306a9); 2012 Intel Core i7-3520M; 2 x 2900MHz; khazaddum, supercop-20120928

Cycles to generate a key pair quartile median quartile system 33645692 34940008 37063452 mceliece 71673396 71987648 72160960 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 59028 59672 60476 mceliece 397484 397968 398268 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 697664 698272 699788 ntruees787ep1 1224376 1226884 1240044 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

amd64; IB+AES (306a9); 2012 Intel Core i5-3210M; 2 x 2500MHz; h9ivy, supercop-20130419

Cycles to generate a key pair quartile median quartile system 33494384 34669948 36218364 mceliece 32667668? 44632908? 74823368? ronald1024 71553388 72022424 72170972 ntruees787ep1 89248436? 124823932? 178789192? ronald1536 151678900? 242714532? 382032116? ronald2048 591906620? 909846984? 1459112316? ronald3072 1755915056? 2971873108? 4119693796? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 46192 46940 48632 ronald1024 60548 61440 62244 mceliece 66812 67740 69152 ronald1536 93776 94464 97100 ronald2048 162336 164320 167052 ronald3072 256340 258728 263008 ronald4096 398528 398912 399304 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 699584 700512 702724 ntruees787ep1 1218380 1219344 1223644 mceliece 1326820 1340040 1354480 ronald1024 2978076 3000748 3022720 ronald1536 5735616 5766752 5790808 ronald2048 16005476 16052564 16095232 ronald3072 34331684 34373392 34436852 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 1573 ntruees787ep1

x86; normally amd64; IB+AES (306a9); 2012 Intel Core i5-3210M; 2 x 2500MHz; h9ivy, supercop-20130419

Cycles to generate a key pair quartile median quartile system 35669444 37439100 39115468 mceliece 72930252 73423216 73575748 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 77952 79060 79996 mceliece 417536 417964 418556 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 713288 714068 715908 ntruees787ep1 1086140 1087132 1091184 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

armeabi (v7-A, Cortex A9); 2011 TI OMAP 4460; 2 x 1000MHz; h5omap, supercop-20130126

Cycles to generate a key pair quartile median quartile system 114070579 118062546 123234843 mceliece 238065976 239700814 240205642 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 147011 151086 155401 mceliece 1025632 1027886 1038152 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 1622700 1624862 1637584 mceliece 1885400 1887352 1896374 ntruees787ep1 Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

armeabi (v7-A, Cortex A8); 2011 TI Sitara AM3359; 1 x 720MHz; h7beagle, supercop-20121016

Cycles to generate a key pair quartile median quartile system 84234554 88190330 92467256 mceliece 226458933 227815642 228326244 ntruees787ep1 447720408? 680975606? 1128501110? ronald1024 1023807822? 1705593788? 2420361903? ronald1536 2952847775? 4052138869? 6096880728? ronald2048 8183044736? 13988676362? 23268766048? ronald3072 28560157218? 40966330754? 61926974390? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 127691 130569 135626 mceliece 287973 288878 290721 ronald1024 499672 502736 511191 ronald1536 747047 751112 754949 ronald2048 1200764 1201389 1202635 ntruees787ep1 1468010 1473675 1481602 ronald3072 2336412 2345156 2353421 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 1473725 1479977 1492613 mceliece 2281902 2282479 2293245 ntruees787ep1 13368936 13417006 13478790 ronald1024 32826437 32879942 32951094 ronald1536 76071326 76142088 76221709 ronald2048 203234558 203446670 203637153 ronald3072 486903765 487156372 487355790 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 1573 ntruees787ep1

armeabi (v7-A, Scorpion); 2011 Qualcomm Snapdragon S3 APQ8060; 2 x 1782MHz; h6dragon, supercop-20130126

Cycles to generate a key pair quartile median quartile system 93095628 98536363 106889267 mceliece 204708912 206106215 206496008 ntruees787ep1 402466854? 688498601? 1139063473? ronald1024 935884440? 1700502688? 2722234678? ronald1536 2219101746? 3148413343? 5303896586? ronald2048 4729384533? 9855505349? 14976772892? ronald3072 16254053397? 29325196173? 45521662501? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 149473 151827 155176 mceliece 275056 276836 279175 ronald1024 411928 414059 421887 ronald1536 603269 609593 617141 ronald2048 969929 971152 972697 ntruees787ep1 1083918 1090401 1097184 ronald3072 1727855 1735554 1747612 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 1786250 1786833 1788321 ntruees787ep1 1827357 1853845 1854977 mceliece 7342571 7373869 7421099 ronald1024 19023400 19073650 19153845 ronald1536 39670474 39746105 39885798 ronald2048 118081057 118211438 118351809 ronald3072 264257523 264462376 264590434 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 1573 ntruees787ep1

armeabi (v7-A, Scorpion); 2011 Qualcomm Snapdragon S3 APQ8060; 2 x 1188MHz; spongebob, supercop-20130126

Cycles to generate a key pair quartile median quartile system 111528192 116611584 126012416 mceliece 292632832 294049280 294785280 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 179712 182016 185344 mceliece 1157120 1160704 1165312 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 1930496 1942272 1946880 mceliece 2142976 2150144 2155008 ntruees787ep1 Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

amd64; Bulldozer (600f12); 2011 AMD FX-8150; 4 x 3600MHz; bulldozer, supercop-20120709

Cycles to generate a key pair quartile median quartile system 48545362 50233003 53266592 mceliece 63749423? 93147617? 133685921? ronald1024 107773989 118688546 119601397 ntruees787ep1 120174331? 189900923? 325257792? ronald1536 253320715? 469067198? 722186321? ronald2048 635387252? 1296329718? 2018925848? ronald3072 2202197664? 4016972328? 5608860359? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 76539 77630 79778 ronald1024 81721 83205 84379 mceliece 102334 105762 109298 ronald1536 138786 141775 144874 ronald2048 233936 236297 240115 ronald3072 333825 357866 362942 ronald4096 492615 494003 494659 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 860124 861574 862042 ntruees787ep1 1151863 1177878 1180052 mceliece 1881153 1903632 1926740 ronald1024 4237478 4276669 4308447 ronald1536 7991950 8054242 8109585 ronald2048 22759090 22884524 22974651 ronald3072 47080424 48898717 49116006 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 1573 ntruees787ep1

x86; normally amd64; Bulldozer (600f12); 2011 AMD FX-8150; 4 x 3600MHz; bulldozer, supercop-20120709

Cycles to generate a key pair quartile median quartile system 47303704 50055812 52659623 mceliece 107837635 118468116 119953391 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 109005 109954 111041 mceliece 518814 519919 520489 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 876218 877628 879533 ntruees787ep1 1041351 1044607 1046914 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

amd64; Bulldozer (600f12); 2011 AMD FX-8120; 4 x 3100MHz; hydra6, supercop-20130419

Cycles to generate a key pair quartile median quartile system 48172898 50567301 53041864 mceliece 55191946? 98031407? 131588222? ronald1024 110681141 111382575 111603831 ntruees787ep1 122099568? 235070985? 361426001? ronald1536 265601932? 485965963? 837426589? ronald2048 922521881? 1398644726? 2298907786? ronald3072 2187707109? 3873419112? 6629658486? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 65041 67336 68548 ronald1024 71458 72548 73502 mceliece 94135 94803 97400 ronald1536 130807 132565 134397 ronald2048 228407 231703 234054 ronald3072 355940 359068 362096 ronald4096 446216 446579 447117 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 780720 781018 781099 ntruees787ep1 1211288 1215549 1219046 mceliece 1793721 1815082 1832719 ronald1024 4205724 4220687 4243782 ronald1536 8171884 8208280 8239943 ronald2048 23355880 23455951 23515538 ronald3072 50783859 50910440 51041326 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 1573 ntruees787ep1

x86; normally amd64; Bulldozer (600f12); 2011 AMD FX-8120; 4 x 3100MHz; hydra6, supercop-20130419

Cycles to generate a key pair quartile median quartile system 48583101 51193337 53501172 mceliece 108112471 108884123 109103880 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 101195 102282 103596 mceliece 478760 479288 480313 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 805312 805707 805814 ntruees787ep1 1094408 1097438 1101824 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

amd64; Bobcat (500f20); 2011 AMD E-450; 2 x 1650MHz; h4e450, supercop-20130419

Cycles to generate a key pair quartile median quartile system 56418912 58877748 61481700 mceliece 161020236 161991744 162387309 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 88020 89115 90294 mceliece 569526 571290 572739 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 1006761 1012098 1013727 ntruees787ep1 1186743 1187127 1188144 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

x86; normally amd64; Bobcat (500f20); 2011 AMD E-450; 2 x 1650MHz; h4e450, supercop-20130419

Cycles to generate a key pair quartile median quartile system 59795700 63352371 67278792 mceliece 174323376 175388190 175745031 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 121569 122739 125085 mceliece 583293 583905 584607 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 1012461 1012989 1016145 ntruees787ep1 1116888 1118835 1123926 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

amd64; Bobcat (500f20); 2011 AMD E-450; 2 x 1650MHz; h5e450, supercop-20130419

Cycles to generate a key pair quartile median quartile system 57448815 59946612 62585760 mceliece 76357062? 144273684? 210359073? ronald1024 161118525 162089097 162396606 ntruees787ep1 202854411? 303601554? 433503210? ronald1536 418104597? 772769922? 1142020770? ronald2048 1070151459? 1781685039? 2904766569? ronald3072 2998848576? 5241121710? 7597159788? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 84198 86463 91884 ronald1024 94014 95436 96492 mceliece 116907 117528 121602 ronald1536 161130 163950 167151 ronald2048 269160 271290 276963 ronald3072 410640 414444 421443 ronald4096 570018 571548 573585 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 1005204 1006188 1013049 ntruees787ep1 1182021 1186710 1190034 mceliece 2145276 2161842 2184903 ronald1024 4825218 4857372 4888074 ronald1536 9346095 9374907 9428907 ronald2048 25907319 25956696 26012802 ronald3072 55511994 55577151 55682652 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 1573 ntruees787ep1

x86; normally amd64; Bobcat (500f20); 2011 AMD E-450; 2 x 1650MHz; h5e450, supercop-20130419

Cycles to generate a key pair quartile median quartile system 59682879 63330198 67180836 mceliece 174329025 175408131 175816914 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 121458 122790 124200 mceliece 583266 583737 584397 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 1012374 1013046 1016133 ntruees787ep1 1117671 1119705 1126902 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

amd64; Bobcat (500f20); 2011 AMD E-350; 2 x 1600MHz; h4e350, supercop-20130419

Cycles to generate a key pair quartile median quartile system 56757561 59303022 62016783 mceliece 161089227 162073737 162465087 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 88152 89415 90270 mceliece 569208 570165 572424 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 1007052 1012689 1014294 ntruees787ep1 1186710 1186920 1189578 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

x86; normally amd64; Bobcat (500f20); 2011 AMD E-350; 2 x 1600MHz; h4e350, supercop-20130419

Cycles to generate a key pair quartile median quartile system 60002442 63332994 67350774 mceliece 177234993 178306629 178683729 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 121356 122502 124743 mceliece 575829 576339 577023 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 1005384 1005750 1009050 ntruees787ep1 1117551 1119030 1127592 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

amd64; Bobcat (500f10); 2011 AMD G-T56N; 2 x 1650MHz; h8bobcat, supercop-20130419

Cycles to generate a key pair quartile median quartile system 55560318 58203645 61026966 mceliece 68027109? 145040910? 215451960? ronald1024 168965691 170014626 170377881 ntruees787ep1 226063107? 334834632? 531983355? ronald1536 394111473? 712568922? 980295888? ronald2048 995988006? 1722338298? 2750314935? ronald3072 2347153953? 4335251517? 6495908172? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 82455 86520 89280 ronald1024 86976 88341 89157 mceliece 115227 116154 119979 ronald1536 156816 160503 163659 ronald2048 268773 271029 275163 ronald3072 408267 413352 418410 ronald4096 613968 615882 618378 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 1119414 1121430 1123995 ntruees787ep1 1182567 1182969 1184298 mceliece 2121672 2144622 2162457 ronald1024 4801023 4824705 4855953 ronald1536 9332298 9365997 9402399 ronald2048 25795011 25876632 25930323 ronald3072 55310022 55384860 55478559 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 1573 ntruees787ep1

x86; normally amd64; Bobcat (500f10); 2011 AMD G-T56N; 2 x 1650MHz; h8bobcat, supercop-20130419

Cycles to generate a key pair quartile median quartile system 59475183 62861658 67019373 mceliece 177108126 178172826 178639986 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 121527 122676 123765 mceliece 575862 576441 576822 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 1004676 1005354 1009170 ntruees787ep1 1125855 1127610 1134363 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

amd64; K10 32nm (300f10); 2011 AMD A8-3850; 4 x 2900MHz; hydra5, supercop-20130419

Cycles to generate a key pair quartile median quartile system 39944923 42308208 44720836 mceliece 67548808 67926212 68123823 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 71225 71731 72745 mceliece 377980 378276 378604 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 660025 660175 660263 ntruees787ep1 1140886 1141169 1141565 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1