VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key cryptosystems on one machine: amd64; Kaby Lake (906e9); 2017 Intel Xeon E3-1220 v6; 4 x 3000MHz; kizomba, supercop-20241011

[Page version: 20241014 13:34:00]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key encryption:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol C: means that the current SUPERCOP database does not list IND-CCA2 security as a goal for this public-key cryptosystem. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each public-key cryptosystem and each implementation. Designers and implementors interested in submitting new public-key cryptosystems and new implementations of existing cryptosystems should read the call for submissions.


Test results

Graphs: old (pkcycles,pkbytes) (ccycles,pkbytes) (ccycles,cbytes) (mcycles,cbytes) (pkbytes,cbytes)

Cycles to generate a key pair
25%50%75%system
537405433555165
T:
r5nd1pke5d
702267111171722
T:
r5nd1pke0d
981099917099771
T:
r5nd3pke5d
100982101960102946
T:
r5nd3pke0d
124241125083126528
T:
r5nd5pke0d
169073170321171919
T:
r5nd5pke5d
529099533444539151
T:
r5n11pke0d
112694611305871135357
T:
r5n13pke0d
141951814292721453897
T:
r5n15pke0d
248849224935632511219
T:
ledapkc1464
328166932898793324492
T:
ledapkc1364
342720634506673671106
T:
ledapkc1264
4228294?4241714?5623013?
T:
ledapkc14sl
3828945?4805488?5829508?
T:
ledapkc13sl
563660156542166297869
T:
ledapkc12sl
5682621?5923292?8118593?
T:
ledapkc3464
705221270638057080144
T:
ledapkc3364
780956378241758260391
T:
ledapkc3264
919892492093889235186
T:
ledapkc33sl
929058593143449569591
T:
ledapkc34sl
871237794245359450022
T:
lotus128
111430941117001211217393
T:
ledapkc5464
112470321143221412621873
T:
ledapkc32sl
119655281197187311996668
T:
ledapkc5364
147305451501948215465391
T:
ledapkc54sl
175721451760298618066957
T:
lotus192
185551271907349321510135
T:
ledapkc53sl
199959312059306922919891
T:
ledapkc5264
265194352659605626692805
T:
mcnie4q1281
289201232913134532539353
T:
lotus256
292507792929464531374287
T:
ledapkc52sl
308943223155673233034174
T:
C:mceliece
345814743463838135810111
T:
r5n13pke0smallct
452510664532789345402849
T:
mcnie4q1282
613853216173960461944478
T:
mcnie4q1921
656277996628642966938564
T:
mcnie3q1281
770630047714120277270905
T:
mcnie4q2561
812739518204322883384025
T:
mcnie4q1922
959039859678376697640437
T:
mcnie3q1282
104886208104996974105171506
T:
mcnie4q2562
75252540?111489458?171698238?
T:
rsa2048
72839470?117784429?182596238?
T:
cargocult2048
127996097128707034129788496
T:
mcnie3q1921
177881602179041105180178631
T:
mcnie3q1922
192934901193939468194992760
T:
mcnie3q2561
319313932320875844322959627
T:
mcnie3q2562
378099829239094230434026662913
T:
pqrsa15
Cycles to encrypt 59 bytes
25%50%75%system
249332546126222
T:
rsa2048
255642651427752
T:
cargocult2048
449304540545942
T:
C:mceliece
100901101348102019
T:
r5nd1pke5d
133667134357134950
T:
r5nd1pke0d
136816146184155078
T:
lotus128
175591176324177213
T:
r5nd3pke5d
188246188966189647
T:
r5nd3pke0d
239038240304241556
T:
r5nd5pke0d
248857250321251073
T:
lotus192
266824269430314963
T:
lotus256
276926277464282931
T:
mcnie4q1281
284609285571287213
T:
r5nd5pke5d
371377372970377665
T:
mcnie4q1282
462125464131466423
T:
mcnie4q1921
541224545047546308
T:
mcnie4q1922
558988559740560796
T:
mcnie4q2561
588895590778592613
T:
ledapkc1264
651375652417654141
T:
mcnie4q2562
705524707375714220
T:
r5n11pke0d
728887729586730260
T:
ledapkc12sl
744486746041753172
T:
ledapkc1364
817377818689819790
T:
ledapkc1464
876238876756877655
T:
ledapkc13sl
108306010841211086891
T:
ledapkc14sl
116889111761601186821
T:
ledapkc3264
117565711901211225143
T:
mcnie3q1281
140458814092751414615
T:
ledapkc3364
145602614577681460708
T:
ledapkc3464
148619414877181494160
T:
ledapkc32sl
153148615358911539865
T:
r5n13pke0d
152207015473711576767
T:
mcnie3q1282
185799618614131878575
T:
ledapkc33sl
185660218778811898199
T:
mcnie3q1921
193042219375161957331
T:
r5n15pke0d
217699621798612182875
T:
ledapkc34sl
222373322269422230651
T:
ledapkc5264
230222323057302311014
T:
ledapkc5364
230003623206732336860
T:
mcnie3q1922
273846727562242778584
T:
mcnie3q2561
275408927564112765173
T:
ledapkc5464
278466527952262816072
T:
r5n13pke0smallct
290880829109162921266
T:
ledapkc52sl
324139332470813254565
T:
ledapkc53sl
341264534197643429574
T:
ledapkc54sl
347657634971373533970
T:
mcnie3q2562
186212921866553418700182
T:
pqrsa15
Cycles to decrypt 59 bytes
25%50%75%system
102258102754104412
T:
r5nd1pke5d
163750164926168060
T:
r5nd1pke0d
158254166687167078
T:
lotus128
213405214977219214
T:
r5nd3pke5d
244572245526248347
T:
r5nd3pke0d
293539294410295621
T:
lotus192
299851303547312746
T:
r5nd5pke0d
337748339077380063
T:
lotus256
396232398863408853
T:
r5nd5pke5d
833439834843849863
T:
r5n11pke0d
841451852306857627
T:
C:mceliece
930538941572963998
T:
mcnie4q1281
123475812443791256567
T:
mcnie4q1282
148652814948931510436
T:
mcnie4q1921
153568515466811560915
T:
mcnie3q1281
174136017505561762895
T:
mcnie4q2561
174508917568271771591
T:
mcnie4q1922
193837119619301998415
T:
mcnie3q1282
198278419883352010236
T:
ledapkc1264
202863320324472037403
T:
r5n13pke0d
205181320666172085447
T:
mcnie4q2562
211531721175282121786
T:
rsa2048
211801221257482152093
T:
cargocult2048
228267023087152333482
T:
mcnie3q1921
234950623565332376732
T:
ledapkc1364
241069624288672485442
T:
r5n15pke0d
247687324788252485627
T:
ledapkc1464
272646727606692793026
T:
mcnie3q1922
279115727975162805343
T:
ledapkc13sl
277176428090872848627
T:
ledapkc12sl
300280030310733059310
T:
mcnie3q2561
342967134387623499889
T:
ledapkc14sl
389962339593294001556
T:
mcnie3q2562
524941652621995273701
T:
ledapkc3264
563567656441175653881
T:
ledapkc3364
602577060374336078154
T:
ledapkc3464
693061169858317012040
T:
ledapkc32sl
824182182582358369966
T:
ledapkc33sl
925793092788059290714
T:
ledapkc34sl
116178241164162711961696
T:
ledapkc5264
116594321171536911721772
T:
r5n13pke0smallct
121343751215030512164768
T:
ledapkc5364
147744801479201414814145
T:
ledapkc5464
166227811684133017268585
T:
ledapkc52sl
168686771690133517309625
T:
ledapkc53sl
175856171761139517646190
T:
ledapkc54sl
119905325120030730120121931
T:
pqrsa15