VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems

ECRYPT II

Measurements of public-key cryptosystems, indexed by machine

There is a separate page with more information about each public-key cryptosystem and each implementation. Designers and implementors interested in submitting new public-key cryptosystems and new implementations of existing cryptosystems should read the call for submissions.

What do the graphs and tables mean?

• Time to encrypt a short message.
• Time to decrypt a short message.
• Time to compute a key pair.
• Space for a secret key.
• Space for a public key.
• Ciphertext overhead for a short message: more precisely, the difference between the space used by a short encrypted message and the space used by the original message.
• Ciphertext overhead for a long message.

Each computer also has a series of tables, eight tables for each computer. The first table shows the time, in cycles, to generate a key pair. Each row of the table lists

• the first quartile of many time measurements,
• the median of many time measurements,
• the third quartile of many time measurements, and
• the name of the cryptosystem.

The computer name is linked to additional information about the implementations and compilers selected for benchmarking.

amd64; Bobcat (500f20); 2011 AMD E-450; 2 x 1650MHz; h4e450, supercop-20120120

Cycles to generate a key pair quartile median quartile system 55452276 58006143 60771933 mceliece 168943146 169966635 170327073 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 86862 88443 89241 mceliece 613845 615495 618627 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 1119954 1120374 1124571 ntruees787ep1 1181487 1181709 1182525 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

x86; normally amd64; Bobcat (500f20); 2011 AMD E-450; 2 x 1650MHz; h4e450, supercop-20120120

Cycles to generate a key pair quartile median quartile system 59531043 62966172 67009575 mceliece 174579735 175407357 175949490 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 121512 122640 124002 mceliece 583245 583701 584364 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 1011519 1012497 1016100 ntruees787ep1 1123179 1124832 1126506 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

amd64; Bobcat (500f20); 2011 AMD E-450; 2 x 1650MHz; h5e450, supercop-20111120

Cycles to generate a key pair quartile median quartile system 55652622 58290531 61018533 mceliece 169203876 170262150 170701413 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 86715 88026 89115 mceliece 613737 615540 619098 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 1119954 1120458 1124874 ntruees787ep1 1181550 1181868 1183341 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

x86; normally amd64; Bobcat (500f20); 2011 AMD E-450; 2 x 1650MHz; h5e450, supercop-20111120

Cycles to generate a key pair quartile median quartile system 59939976 63419352 67263270 mceliece 174745245 175751460 176269353 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 121101 122292 123687 mceliece 583221 583758 584580 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 1011408 1012707 1016655 ntruees787ep1 1121307 1123194 1129164 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

amd64; Bobcat (500f20); 2011 AMD E-350; 2 x 1600MHz; h4e350, supercop-20120120

Cycles to generate a key pair quartile median quartile system 55711911 58199046 60795135 mceliece 168943983 170020917 170368077 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 86850 88269 89349 mceliece 613932 615351 618816 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 1119873 1120332 1124337 ntruees787ep1 1181616 1181994 1183020 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

x86; normally amd64; Bobcat (500f20); 2011 AMD E-350; 2 x 1600MHz; h4e350, supercop-20120120

Cycles to generate a key pair quartile median quartile system 59445669 62881791 67000299 mceliece 174583260 175441764 175949424 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 121050 122343 123831 mceliece 583281 583764 584400 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 1011450 1012416 1016481 ntruees787ep1 1122807 1123962 1126914 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

amd64; K10 32nm (300f10); 2011 AMD A8-3850; 4 x 2900MHz; hydra5, supercop-20120207

Cycles to generate a key pair quartile median quartile system 40175055 42304229 44449713 mceliece 69456615 70000922 70147489 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 58231 58794 59529 mceliece 357431 357817 358308 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 614341 614505 614589 ntruees787ep1 1261078 1264401 1266501 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

x86; normally amd64; K10 32nm (300f10); 2011 AMD A8-3850; 4 x 2900MHz; hydra5, supercop-20120207

Cycles to generate a key pair quartile median quartile system 44007827 46711835 49210641 mceliece 65939386 66380067 66506064 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 80361 81203 82284 mceliece 385428 385689 386075 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 654154 656365 656648 ntruees787ep1 1081322 1082911 1083926 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

amd64; K10 32nm (300f10); 2011 AMD A6-3650; 4 x 2600MHz; hydra4, supercop-20120207

Cycles to generate a key pair quartile median quartile system 40003084 42417114 44579617 mceliece 69451575 69851859 70028587 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 58394 59108 59838 mceliece 357318 357747 358250 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 614792 614819 614894 ntruees787ep1 1262547 1264883 1269330 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

x86; normally amd64; K10 32nm (300f10); 2011 AMD A6-3650; 4 x 2600MHz; hydra4, supercop-20120207

Cycles to generate a key pair quartile median quartile system 43976330 46589755 49125473 mceliece 65938818 66382621 66507994 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 80449 81526 83055 mceliece 385249 385628 386002 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 654132 656433 656487 ntruees787ep1 1081365 1082936 1084071 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

amd64; Sandy Bridge (206a7); 2011 Intel Xeon E3-1220L; 2 x 2200MHz; threads; boost; backup, supercop-20111120

Cycles to generate a key pair quartile median quartile system 25701214 26647680 28496824 mceliece 49971682 50174764 50328254 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 40716 41432 48937 mceliece 269884 270194 270622 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 465622 466130 467018 ntruees787ep1 824146 827864 834998 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

amd64; Sandy Bridge (206a7); 2011 Intel Core i7-2600K; 4 x 3400MHz; threads; sandy0, supercop-20110708

Cycles to generate a key pair quartile median quartile system 39700952 41152512 43319388 mceliece 40500220? 63795244? 89887856? ronald1024 77149788 77517204 77682716 ntruees787ep1 120939284? 171970436? 305502832? ronald1536 246392812? 375126444? 568453176? ronald2048 711053188? 1117317060? 1888600556? ronald3072 2446599056? 4212878832? 5187758056? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 56176 56592 58744 ronald1024 61856 62832 64104 mceliece 82028 82952 85012 ronald1536 115444 117936 120412 ronald2048 206992 208180 211412 ronald3072 322636 325732 329032 ronald4096 416984 417616 418064 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 719092 720180 721476 ntruees787ep1 1275656 1279572 1290276 mceliece 1629996 1640960 1663032 ronald1024 3893876 3923772 3948956 ronald1536 7705444 7780156 7823612 ronald2048 21611392 21738784 21983532 ronald3072 47040880 47136904 47272860 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 1573 ntruees787ep1

amd64; Sandy Bridge (206a7); 2011 Intel Core i5-2500K; 4 x 3293MHz; elroy, supercop-20110106

Cycles to generate a key pair quartile median quartile system 41026088 42444808 44273256 mceliece 78135564 78618280 78765276 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 67700 68368 69204 mceliece 412148 412952 413808 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 705260 706460 709388 ntruees787ep1 1219676 1221680 1229272 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

amd64; Sandy Bridge (206a7); 2011 Intel Core i5-2400; 4 x 3100MHz; boost; mangetsu, supercop-20120120

Cycles to generate a key pair quartile median quartile system 34801735 36149330 37603287 mceliece 31838422? 56248837? 85632808? ronald1024 73041358 73517533 73740109 ntruees787ep1 92473511? 162851139? 222839849? ronald1536 183775760? 305190930? 435025220? ronald2048 671013666? 1212763609? 1896278765? ronald3072 1765581144? 2974776371? 4884270709? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 47120 47740 49533 ronald1024 60116 61005 62079 mceliece 72005 74582 76435 ronald1536 102270 103788 106337 ronald2048 185803 188534 191998 ronald3072 292516 294542 298008 ronald4096 388589 389006 390479 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 671681 672954 675570 ntruees787ep1 1211803 1213654 1216655 mceliece 1515915 1537146 1551878 ronald1024 3638459 3670044 3726651 ronald1536 7180302 7232386 7311361 ronald2048 20265613 20397217 20596808 ronald3072 44339699 44576666 45043038 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 1573 ntruees787ep1

amd64; Sandy Bridge (206a7); 2011 Intel Core i3-2310M; 2 x 2100MHz; bridge, supercop-20120207

Cycles to generate a key pair quartile median quartile system 35421508 36558420 38095972 mceliece 44413316? 68901564? 98022044? ronald1024 76134100 76615220 76758400 ntruees787ep1 94332888? 141049452? 262420052? ronald1536 249209604? 409077400? 631161612? ronald2048 799760328? 1285601540? 2067259812? ronald3072 2379156980? 3530042260? 5788071636? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 50724 51120 51868 ronald1024 64152 64884 66140 mceliece 74940 76548 77804 ronald1536 106168 108056 110060 ronald2048 195288 196828 199540 ronald3072 306264 310400 312752 ronald4096 416792 417236 417636 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 722372 723072 725044 ntruees787ep1 1280624 1281864 1284784 mceliece 1608228 1625580 1650936 ronald1024 3848612 3872368 3896544 ronald1536 7629412 7686616 7738224 ronald2048 21525200 21650312 21888664 ronald3072 47168620 47484664 47785840 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 1573 ntruees787ep1

x86; normally amd64; Sandy Bridge (206a7); 2011 Intel Core i3-2310M; 2 x 2100MHz; bridge, supercop-20120207

Cycles to generate a key pair quartile median quartile system 38453468 40420860 42152884 mceliece 76326264 76833504 77007152 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 93500 94452 95672 mceliece 430848 431432 431996 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 732520 733692 736816 ntruees787ep1 1169220 1172016 1174836 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

armeabi (v7-A, Tegra 2); 2010 NVIDIA Tegra 2; 2 x 1000MHz; h5tegra, supercop-20120120

Cycles to generate a key pair quartile median quartile system 126108375 133518411 140281940 mceliece 223023150 224553260 225107004 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 174631 176955 181374 mceliece 875412 876589 878240 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 1592170 1595851 1602201 ntruees787ep1 1829392 1831478 1834630 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

amd64; K10 45nm (100fa0); 2010 AMD Phenom II X6 1100T; 6 x 3300MHz; hydra3, supercop-20120207

Cycles to generate a key pair quartile median quartile system 42795699 44794601 47043760 mceliece 115266718 115709476 116710535 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 61235 61651 62764 mceliece 402114 402466 402867 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 719608 720180 720504 ntruees787ep1 1247948 1255081 1265429 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

x86; normally amd64; K10 45nm (100fa0); 2010 AMD Phenom II X6 1100T; 6 x 3300MHz; hydra3, supercop-20120207

Cycles to generate a key pair quartile median quartile system 46663810 48604595 51957242 mceliece 121240170 122394832 122729488 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 82993 83870 84826 mceliece 358643 400863 401311 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 683320 702976 703010 ntruees787ep1 1090203 1091569 1110057 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

amd64; K10 45nm (100fa0); 2010 AMD Phenom II X6 1090T; 6 x 3200MHz; agamemnon, supercop-20111120

Cycles to generate a key pair quartile median quartile system 61359232 64922016 74484600 mceliece 49100148? 82367411? 113716265? ronald1024 114908344 115283913 115891436 ntruees787ep1 131251632? 201116929? 296174829? ronald1536 342536038? 612005731? 973098454? ronald2048 1000923288? 1866690422? 2931593786? ronald3072 1919649664? 3307967864? 5912169671? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 62173 62812 63686 mceliece 66703 66790 69693 ronald1024 92188 95130 104428 ronald1536 127162 128864 131195 ronald2048 209961 211865 214021 ronald3072 326525 328611 331520 ronald4096 430202 430432 430765 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 774864 774912 775199 ntruees787ep1 1235096 1243950 1248889 mceliece 1858154 1877261 1916081 ronald1024 4273290 4302310 4337565 ronald1536 8817036 8867421 8920112 ronald2048 23958320 24027790 24110352 ronald3072 51420032 51539171 51726741 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 1573 ntruees787ep1

amd64; K10 45nm (100fa0); 2010 AMD Phenom II X6 1090T; 6 x 3200MHz; hydra1, supercop-20120120

Cycles to generate a key pair quartile median quartile system 46570279 48619664 51238338 mceliece 116442445 117080690 117534275 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 61504 62249 63209 mceliece 396856 397445 398514 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 707490 707894 709174 ntruees787ep1 1209317 1214254 1219498 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

x86; normally amd64; K10 45nm (100fa0); 2010 AMD Phenom II X6 1090T; 6 x 3200MHz; hydra1, supercop-20120120

Cycles to generate a key pair quartile median quartile system 67578496 70383742 73795323 mceliece 121434786 122220048 122466051 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 75654 76539 77461 mceliece 404654 404978 405429 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 700942 701176 701208 ntruees787ep1 1126805 1166487 1167782 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

amd64; K10 45nm (100fa0); 2010 AMD Phenom II X6 1055T; 6 x 2800MHz; phenom, supercop-20110106

Cycles to generate a key pair quartile median quartile system 46389606 49899580 53025560 mceliece 121791223 123138197 124003624 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 66083 66731 67659 mceliece 383011 383268 383512 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 676321 676475 677634 ntruees787ep1 1147374 1147727 1148657 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

x86; normally amd64; K10 45nm (100fa0); 2010 AMD Phenom II X6 1055T; 6 x 2800MHz; phenom, supercop-20110106

Cycles to generate a key pair quartile median quartile system 67415926 70329258 74034163 mceliece 120975372 121968640 122450644 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 75353 76198 77180 mceliece 410221 410663 411281 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 707899 707956 708015 ntruees787ep1 1123609 1166525 1167340 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

amd64; Nehalem (206e6); 2010 Intel Xeon X7560; 32 x 2266MHz; threads; boost; bigmem, supercop-20110825

Cycles to generate a key pair quartile median quartile system 41353383 43591336 48881386 mceliece 65510364? 66397716? 130800736? ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 65862 66794 67917 mceliece 337048 353482 354576 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 606323 607281 608857 ntruees787ep1 938774 953703 953940 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

amd64; Westmere (206c2); 2010 Intel Xeon X5680; 12 x 3325MHz; threads; boost; cryptologic, supercop-20120120

Cycles to generate a key pair quartile median quartile system 36469512? 39409707? 53049915? mceliece 68945458 69212342 69490527 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 72278 73421 75532 mceliece 347443 347888 352130 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 581773 582285 594303 ntruees787ep1 1058737 1069400 1100023 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

x86; normally amd64; Westmere (206c2); 2010 Intel Xeon X5680; 12 x 3325MHz; threads; boost; cryptologic, supercop-20120120

Cycles to generate a key pair quartile median quartile system 40525049? 43176553? 61770591? mceliece 70438476 70726212 70918824 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 71657? 73815? 93751? mceliece 368530 368948 377406 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 613209 613691 628788 ntruees787ep1 1022091 1031152 1046071 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

amd64; Westmere (206c2); 2010 Intel Xeon E5620; 8 x 2401MHz; threads; boost; giant4, supercop-20120207

Cycles to generate a key pair quartile median quartile system 42770802 44357694 46292238 mceliece 68623047 69030795 69176946 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 70137 71022 71649 mceliece 376758 377133 377580 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 644430 644565 644616 ntruees787ep1 1009059 1009620 1010085 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

amd64; Westmere (206c2); 2010 Intel Xeon E5620; 4 x 2400MHz; threads; db01, supercop-20111120

Cycles to generate a key pair quartile median quartile system 42269421 46366620 49747308 mceliece 65451594 65821764 72611976 ntruees787ep1 49496244? 83479206? 121811598? ronald1024 110132271? 172246520? 309453219? ronald1536 262703436? 395363067? 708483384? ronald2048 898543308? 1588335726? 2477168628? ronald3072 2576237040? 3983614395? 7520970141? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 64980 66267 73128 mceliece 66465 68916 73092 ronald1024 96345 97218 99660 ronald1536 135561 137625 138828 ronald2048 238863 240978 244044 ronald3072 357978 358704 397728 ntruees787ep1 377352 379932 384066 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 611490 612108 679032 ntruees787ep1 964293 974421 1068264 mceliece 1963494 2000298 2167492 ronald1024 4842213 4860489 4881996 ronald1536 9821895 9843006 9870930 ronald2048 28397535 28453566 28522824 ronald3072 62532870 62594667 62759595 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 1573 ntruees787ep1

amd64; Westmere (206c2); 2010 Intel Xeon E5620; 4 x 2400MHz; threads; db02, supercop-20111120

Cycles to generate a key pair quartile median quartile system 41198937 42788997 47622981 mceliece 65344380 65647926 65877057 ntruees787ep1 46084110? 67461348? 107488065? ronald1024 109943727? 189020733? 268059096? ronald1536 227071587? 425899341? 643625550? ronald2048 900199236? 1629659346? 2339902884? ronald3072 1874953197? 3311299209? 6279349671? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 64641 65454 66258 mceliece 66510 66858 68790 ronald1024 96591 96948 99510 ronald1536 135666 137352 138804 ronald2048 239085 240648 243543 ronald3072 357870 358176 358596 ntruees787ep1 377676 380076 382992 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 611430 611607 611910 ntruees787ep1 962247 963171 975711 mceliece 1961895 1976442 1997199 ronald1024 4829958 4851336 4878717 ronald1536 9808791 9837093 9863172 ronald2048 28377633 28431171 28508904 ronald3072 62478648 62531055 62699736 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 1573 ntruees787ep1

amd64; Westmere (206c2); 2010 Intel Xeon E5620; 4 x 2400MHz; hydra2, supercop-20120207

Cycles to generate a key pair quartile median quartile system 45387068 47090356 48987004 mceliece 72156196 72591876 72748284 ntruees787ep1 52925432? 74574728? 110134332? ronald1024 125644132? 209489476? 354022132? ronald1536 304818356? 498547280? 731994364? ronald2048 962771680? 1645830412? 2984779228? ronald3072 3423525172? 4908496016? 7207869356? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 67324 68924 69708 ronald1024 72216 72968 74140 mceliece 102656 103656 106400 ronald1536 145348 147632 148836 ronald2048 263380 265956 268736 ronald3072 395596 395848 396352 ntruees787ep1 413412 416248 419832 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 678364 678472 678592 ntruees787ep1 1042048 1042324 1042916 mceliece 2163828 2176368 2190628 ronald1024 5353536 5379700 5406476 ronald1536 10875332 10898744 10924952 ronald2048 31420852 31460920 31539412 ronald3072 69563672 69626596 69682796 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 1573 ntruees787ep1

x86; normally amd64; Westmere (206c2); 2010 Intel Xeon E5620; 4 x 2400MHz; hydra2, supercop-20120207

Cycles to generate a key pair quartile median quartile system 55404972 57275744 59705540 mceliece 71907700 72385632 72515436 ntruees787ep1 195047476? 289707340? 392192484? ronald1024 722808220? 1142397000? 1602558900? ronald1536 1550506928? 3145249036? 5215749008? ronald2048 6988121908? 13017240644? 21574035192? ronald3072 21918710860? 40492868000? 75461647380? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 90696 91940 92864 mceliece 238368 240556 242352 ronald1024 423116 423332 423768 ntruees787ep1 472044 473672 476524 ronald1536 744768 747332 749976 ronald2048 1595496 1599952 1604840 ronald3072 2592064 2599336 2606964 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 710792 710856 711000 ntruees787ep1 1021960 1082776 1084260 mceliece 13874268 13899884 13945632 ronald1024 39646548 39724884 39775816 ronald1536 86931464 87014372 87140400 ronald2048 264837712 265061436 265365388 ronald3072 585764644 585920748 586067772 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 1573 ntruees787ep1

amd64; Westmere (20655); 2010 Intel Core i5 M 520; 2 x 2400MHz; johndoe, supercop-20110106

Cycles to generate a key pair quartile median quartile system 38591067 41297850 43811781 mceliece 60241608 60695637 62706375 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 59061 59907 61098 mceliece 323115 323406 323709 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 554808 554886 555057 ntruees787ep1 852765 854031 854580 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

amd64; Westmere (20655); 2010 Intel Core i5 M 520; 2 x 2400MHz; boost; wideload, supercop-20101204

Cycles to generate a key pair quartile median quartile system 45983715? 57428841? 63718425? mceliece 81147780 84311124 89413593 ntruees787ep1 Cycles to encrypt 59 bytes quartile median quartile system 66174 67350 68370 mceliece 357414 357984 359802 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 611772 614481 676830 ntruees787ep1 959478 962016 1172004 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

x86; normally amd64; Westmere (20655); 2010 Intel Core i5 M 520; 2 x 2400MHz; boost; wideload, supercop-20101204

Cycles to generate a key pair quartile median quartile system 70847028? 72175515? 89608788? ntruees787ep1 67482759 72263982 81715626 mceliece Cycles to encrypt 59 bytes quartile median quartile system 77001 77904 78819 mceliece 401055 401736 404178 ntruees787ep1 Cycles to decrypt 59 bytes quartile median quartile system 666417 667758 673686 ntruees787ep1 1017636 1019943 1051983 mceliece Secret key bytes system 1854 ntruees787ep1 137282 mceliece Public key bytes system 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 256 mceliece 1574 ntruees787ep1 Encrypting 23 bytes bytes system 233 mceliece 1551 ntruees787ep1 Encrypting many bytes bytes system 110 mceliece 1573 ntruees787ep1

amd64; Westmere (20655); 2010 Intel Core i3-540; 2 x 3059MHz; threads; lbl01, supercop-20111120

Cycles to generate a key pair quartile median quartile system 45333340 47024812 49877800 mceliece 40118200? 64863320? 115770332? ronald1024 72906596 73199944 73381552 ntruees787ep1 125774392? 206324816? 382661188? ronald1536 278539020? 480737700? 788145292? ronald2048 980585384? 1608677988? 3121341800? ronald3072 2724164080? 5346326896? 8223201360? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 72364 73408 74464 mceliece 73404 73820 74616 ronald1024 106688 109736 114128 ronald1536 149416 151124 153408 ronald2048 265896 268012 269508 ronald3072 397628 397984 398492 ntruees787ep1 419172 421984 425308 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 679900 680240 681012 ntruees787ep1 1070520 1070780 1083576 mceliece 2170316 2188120 2208616 ronald1024 5367524 5390416 5414924 ronald1536 10911532 10947712 10973500 ronald2048 31553404 31601940 31668484 ronald3072 69399796 69476352 69551052 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 1573 ntruees787ep1

amd64; Westmere (20652); 2010 Intel Pentium G6950; 2 x 2800MHz; bazinga, supercop-20111120

Cycles to generate a key pair quartile median quartile system 46522684 48238700 51808860 mceliece 73059580 73384124 73573308 ntruees787ep1 49539600? 78771012? 110094304? ronald1024 118713012? 191517960? 284742876? ronald1536 246485468? 428190880? 720811184? ronald2048 1276050084? 2145823112? 2981623208? ronald3072 2237005148? 4016878604? 6905961448? ronald4096 Cycles to encrypt 59 bytes quartile median quartile system 72064 73096 74044 mceliece 73364 73900 75768 ronald1024 107728 108316 111124 ronald1536 151232 151876 154520 ronald2048 267300 269272 272132 ronald3072 400620 401048 401424 ntruees787ep1 420784 423388 428196 ronald4096 Cycles to decrypt 59 bytes quartile median quartile system 681904 682404 682752 ntruees787ep1 1069700 1070336 1084304 mceliece 2253828 2267000 2287988 ronald1024 5475196 5506040 5535232 ronald1536 11118592 11144276 11181248 ronald2048 32059604 32134048 32355204 ronald3072 70590284 70650480 70725388 ronald4096 Secret key bytes system 1024 ronald1024 1536 ronald1536 1854 ntruees787ep1 2048 ronald2048 3072 ronald3072 4096 ronald4096 137282 mceliece Public key bytes system 128 ronald1024 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 81408 mceliece Encrypting 0 bytes bytes system 128 ronald1024 192 ronald1536 256 mceliece 256 ronald2048 384 ronald3072 512 ronald4096 1574 ntruees787ep1 Encrypting 23 bytes bytes system 105 ronald1024 169 ronald1536 233 mceliece 233 ronald2048 361 ronald3072 489 ronald4096 1551 ntruees787ep1 Encrypting many bytes bytes system 75 ronald1024 75 ronald1536 75 ronald2048 75 ronald3072 75 ronald4096 110 mceliece 1573 ntruees787ep1