VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key cryptosystems on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3427U; 2 x 1800MHz; hunsnivy, supercop-20240909

[Page version: 20241006 02:11:53]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key encryption:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol C: means that the current SUPERCOP database does not list IND-CCA2 security as a goal for this public-key cryptosystem. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each public-key cryptosystem and each implementation. Designers and implementors interested in submitting new public-key cryptosystems and new implementations of existing cryptosystems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (ccycles,pkbytes) (ccycles,cbytes) (mcycles,cbytes) (pkbytes,cbytes)

Cycles to generate a key pair
25%50%75%system
709247149572283
T:
r5nd1pke5d
96367100850101939
T:
r5nd1pke0d
138728140522142070
T:
r5nd3pke0d
138277140916141964
T:
r5nd3pke5d
174462177219178732
T:
r5nd5pke0d
242430243799245618
T:
r5nd5pke5d
100838481009217910098264
T:
r5n11pke0d
194298831943575519446857
T:
r5n13pke0d
320372413276050934770027
T:
C:mceliece
367852403684806436934226
T:
mcnie4q1281
368949223691249236928874
T:
r5n15pke0d
490531244946623549923933
T:
mcnie3q1281
517287975227189752612638
T:
lotus192
620435766208459162132472
T:
ledapkc1464
628894246298542563104227
T:
mcnie4q1282
709056787136421372353562
T:
mcnie3q1282
754287217558636875994224
T:
ledapkc1364
831317268327717183382644
T:
mcnie4q1921
846182168481023786529980
T:
ledapkc14sl
849854548510267786284204
T:
ledapkc13sl
887117909018061990222848
T:
lotus256
927090859296932193572091
T:
mcnie3q1921
64402867?101856910?149428006?
T:
ronald1024
106229331106355000106542722
T:
mcnie4q2561
111713604111845055111993310
T:
mcnie4q1922
125699175126206201127028232
T:
mcnie3q1922
129945452130226181130619742
T:
mcnie3q2561
145063881145175759145331995
T:
mcnie4q2562
147422543147478629147531155
T:
lotus128
93501977?166741401?254163083?
T:
cargocult2048
166773428166918856167173319
T:
ledapkc1264
94245236?169866171?237664303?
T:
rsa2048
180361086180564566183537409
T:
ledapkc3464
212581625213096817213845369
T:
mcnie3q2562
222184252222874668223033012
T:
ledapkc12sl
232225782232354077234970955
T:
ledapkc3264
234381152234554420238211890
T:
ledapkc34sl
253018135253147002253253828
T:
ledapkc3364
269207578269373639269513476
T:
ledapkc5464
278733227279435911279791628
T:
ledapkc33sl
186867292?301333449?451931755?
T:
ronald1536
308093634308160628308209033
T:
r5n13pke0smallct
541292010541471388541646649
T:
ledapkc5364
390058683?597749969?978351386?
T:
ronald2048
642601334644022975649232829
T:
ledapkc54sl
703297499707108658710706875
T:
ledapkc53sl
709178041710591342711469395
T:
ledapkc32sl
709062751710851227714680445
T:
ledapkc5264
161644114816191986711626611133
T:
ledapkc52sl
1142921201?1738731006?3030441815?
T:
ronald3072
2841736610?4971217237?7665764612?
T:
ronald4096
510564030852176301785409651069
T:
pqrsa15
Cycles to encrypt 59 bytes
25%50%75%system
303493147034089
T:
rsa2048
307753165033326
T:
cargocult2048
469104735948172
T:
ronald1024
494905005150615
T:
C:mceliece
607866196666106
T:
ronald1536
826858574087871
T:
ronald2048
124256124804125660
T:
r5nd1pke5d
142301143910148044
T:
ronald3072
174714175738176626
T:
r5nd1pke0d
215240218913223535
T:
ronald4096
229409234141235152
T:
r5nd3pke5d
256126257534259833
T:
r5nd3pke0d
318870325719330998
T:
r5nd5pke0d
374785375862378773
T:
mcnie4q1281
400423402384405232
T:
r5nd5pke5d
501550505454508338
T:
mcnie4q1282
631073634232636962
T:
mcnie4q1921
743166745920749410
T:
mcnie4q1922
760435763258766692
T:
mcnie4q2561
782724785891788278
T:
mcnie3q1281
889898891489897145
T:
mcnie4q2562
975109975906977108
T:
mcnie3q1282
104112110569501067162
T:
lotus192
121219712144341220698
T:
mcnie3q1921
145098014570251468849
T:
mcnie3q1922
152703815370651548896
T:
lotus256
164447016483171652640
T:
mcnie3q2561
210058321148332146891
T:
mcnie3q2562
262798926350362649000
T:
lotus128
497458050255955035918
T:
r5n13pke0smallct
859973986154038929041
T:
ledapkc1364
865937688312948841933
T:
ledapkc13sl
923961192558429275732
T:
ledapkc1264
919772592893919413869
T:
r5n11pke0d
109830431099667411008291
T:
ledapkc1464
111793601119297311204895
T:
ledapkc12sl
122359761238740012652814
T:
ledapkc3264
127550331277389512801433
T:
ledapkc14sl
176338461770186817789002
T:
r5n13pke0d
235150942354425023568418
T:
ledapkc3364
237437252376226923772502
T:
pqrsa15
269555932698207427004558
T:
ledapkc3464
285761042859804728619862
T:
ledapkc33sl
333320563342622434586229
T:
ledapkc32sl
337068583390650934124080
T:
r5n15pke0d
368719163690015136920008
T:
ledapkc5264
386818363870291138738177
T:
ledapkc34sl
421652644229296042381200
T:
ledapkc5464
518882425191067552018129
T:
ledapkc5364
674895636771596467766500
T:
ledapkc53sl
749039737502500375344376
T:
ledapkc52sl
864530008677780289152422
T:
ledapkc54sl
Cycles to decrypt 59 bytes
25%50%75%system
162558164129167283
T:
r5nd1pke5d
243117244677248599
T:
r5nd1pke0d
322789325406328251
T:
r5nd3pke5d
363852366659370820
T:
r5nd3pke0d
456546461301471670
T:
r5nd5pke0d
584964587718589329
T:
r5nd5pke5d
101436710184551024553
T:
mcnie4q1281
106155310725661093786
T:
C:mceliece
118524911979831216766
T:
ronald1024
139131313974421408088
T:
mcnie4q1282
143586614442181450184
T:
mcnie3q1281
145980114663841472692
T:
lotus192
172433717341021739053
T:
mcnie4q1921
180688018150741823445
T:
mcnie3q1282
202581620324932037437
T:
mcnie4q1922
209303920993822106462
T:
mcnie4q2561
211917621281942179231
T:
mcnie3q1921
216828521994322208319
T:
lotus256
242369624297782435646
T:
mcnie4q2562
253089225384222546429
T:
mcnie3q1922
276329927680942774637
T:
mcnie3q2561
322311032247753232044
T:
cargocult2048
322297132310393241537
T:
rsa2048
326234532804403297547
T:
ronald1536
330427133157353332296
T:
lotus128
360117936054493612781
T:
mcnie3q2562
531216053373715357844
T:
ronald2048
661928866235446628743
T:
ledapkc1264
728885272928937301175
T:
ledapkc1364
774446577789247783151
T:
ledapkc12sl
869259587073968783094
T:
ledapkc1464
942975995201409632281
T:
r5n11pke0d
965393296677429781851
T:
ledapkc13sl
105156561054356410577674
T:
ledapkc14sl
143597731439396614439050
T:
ronald3072
153365151534196415359200
T:
r5n13pke0smallct
178579321787616617973286
T:
ledapkc3264
184739641853751218626821
T:
r5n13pke0d
192264761925500319293132
T:
ledapkc3364
221120102215852422349697
T:
ledapkc3464
223912432249013022668057
T:
ledapkc32sl
276708492784409927906960
T:
ledapkc33sl
291864142923097929377472
T:
ledapkc34sl
304976343055322530605670
T:
ronald4096
341961343422802734277255
T:
ledapkc5264
347970763499638235231703
T:
r5n15pke0d
413619854139179241492546
T:
ledapkc5364
485697314858188848667113
T:
ledapkc52sl
506495935075482350778500
T:
ledapkc5464
545973425464423254709998
T:
ledapkc53sl
658140926593163565978434
T:
ledapkc54sl
169212387169266681169391225
T:
pqrsa15