VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key cryptosystems on one machine: amd64; Zen 3 (a20f10); 2020 AMD Ryzen 5 5600X; 6 x 3700MHz; unstable; spawn, supercop-20231215

[Page version: 20241006 02:11:53]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key encryption:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol C: means that the current SUPERCOP database does not list IND-CCA2 security as a goal for this public-key cryptosystem. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each public-key cryptosystem and each implementation. Designers and implementors interested in submitting new public-key cryptosystems and new implementations of existing cryptosystems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (ccycles,pkbytes) (ccycles,cbytes) (mcycles,cbytes) (pkbytes,cbytes)

Cycles to generate a key pair
25%50%75%system
389613966440330
T:
r5nd1pke5d
519115257753539
T:
r5nd1pke0d
727427348274407
T:
r5nd3pke0d
740007466675369
T:
r5nd3pke5d
924639342594165
T:
r5nd5pke0d
128612129500130610
T:
r5nd5pke5d
290450292855295704
T:
C:ntruees401ep2
370555372442375032
T:
C:ntruees439ep1
382839384763386539
T:
r5n11pke0d
648573653198658304
T:
C:ntruees593ep1
924482930550935323
T:
r5n13pke0d
952047957412962000
T:
C:ntruees743ep1
125899912639571267694
T:
r5n15pke0d
255329625650622580972
T:
ledapkc1464
295766929652542991006
T:
ledapkc1364
315672931831103908051
T:
ledapkc1264
3735520?3765120?5205419?
T:
ledapkc14sl
3982051?4997368?6087906?
T:
ledapkc13sl
532578053546036037364
T:
ledapkc12sl
668168267046966738810
T:
ledapkc3364
6174449?6723307?9408101?
T:
ledapkc3464
700195470514607111955
T:
lotus128
866332887719979725894
T:
ledapkc33sl
876160088008949679533
T:
ledapkc3264
9148694919161411386232
T:
ledapkc34sl
105721211062173810653817
T:
ledapkc5464
116362781172097113108175
T:
ledapkc32sl
120779841213015412372134
T:
ledapkc5364
134028431348820213657921
T:
lotus192
134081341349438113560833
T:
C:ntruees787ep1
143842681445271815135812
T:
ledapkc54sl
154053941646814518169072
T:
ledapkc5264
17968273?18292837?22711451?
T:
ledapkc53sl
218251162203449922160669
T:
mcnie4q1281
223982462251150322688659
T:
lotus256
257964742596896826949283
T:
r5n13pke0smallct
267933652830022730007703
T:
ledapkc52sl
296451772991831130318392
T:
mcnie3q1281
374983903774592037916305
T:
mcnie4q1282
418107404225252042785616
T:
mcnie3q1282
495353784993568150066513
T:
mcnie4q1921
551876465544294655871369
T:
mcnie3q1921
665097206676394766994827
T:
mcnie4q2561
666422176682943767054508
T:
mcnie4q1922
745261777497717075461130
T:
mcnie3q1922
821062568270428783002248
T:
mcnie3q2561
891526848945815689773729
T:
mcnie4q2562
130514207131401023132067134
T:
mcnie3q2562
Cycles to encrypt 59 bytes
25%50%75%system
298593008130340
T:
C:ntruees401ep2
331523337433596
T:
C:ntruees439ep1
488774921049432
T:
C:ntruees593ep1
619016227162715
T:
C:ntruees743ep1
712257178072446
T:
r5nd1pke5d
775897807078514
T:
C:ntruees787ep1
954979594196755
T:
r5nd1pke0d
963489690397458
T:
lotus128
125504126466127465
T:
r5nd3pke5d
134717135753137455
T:
r5nd3pke0d
145743146113147704
T:
lotus192
172198173086174048
T:
r5nd5pke0d
186665190069194620
T:
lotus256
207496209013211751
T:
r5nd5pke5d
221112?221852?328301?
T:
mcnie4q1281
295482296888298479
T:
mcnie4q1282
367484370333372405
T:
mcnie4q1921
434010435823437599
T:
mcnie4q1922
465312466940469493
T:
mcnie3q1281
467088469789470973
T:
mcnie4q2561
538424540015541310
T:
mcnie4q2562
551707553705555925
T:
ledapkc1264
568875569837571169
T:
mcnie3q1282
577422578088583342
T:
r5n11pke0d
620416621970754578
T:
ledapkc1364
671217674584676582
T:
ledapkc12sl
678617680726682835
T:
ledapkc1464
703629707144710733
T:
mcnie3q1921
737040741258744773
T:
ledapkc13sl
813223815665819328
T:
ledapkc14sl
843304847115849224
T:
mcnie3q1922
9883079997771001960
T:
mcnie3q2561
108595010914631097309
T:
ledapkc3264
115477011617261177192
T:
ledapkc3364
118189111845181191770
T:
ledapkc3464
121371112217771251599
T:
r5n13pke0d
125441112621441265992
T:
mcnie3q2562
130055013069511312871
T:
ledapkc32sl
140681414123271420467
T:
ledapkc33sl
167432416869041699188
T:
r5n15pke0d
170440517122491718983
T:
ledapkc34sl
179498118009751812186
T:
ledapkc5264
192414819326951942611
T:
r5n13pke0smallct
193650619436471953674
T:
ledapkc5364
206567320754042121950
T:
ledapkc5464
243086324539142465680
T:
ledapkc52sl
252802525463772559401
T:
ledapkc54sl
262170926387292652715
T:
ledapkc53sl
Cycles to decrypt 59 bytes
25%50%75%system
332633341133559
T:
C:ntruees401ep2
365563663036704
T:
C:ntruees439ep1
550935538955537
T:
C:ntruees593ep1
723727314973519
T:
C:ntruees743ep1
732977385274074
T:
r5nd1pke5d
953129553496126
T:
C:ntruees787ep1
106560106819107189
T:
r5nd1pke0d
110001110963111703
T:
lotus128
136900137640138269
T:
r5nd3pke5d
154327157916159877
T:
r5nd3pke0d
169497169941171643
T:
lotus192
216191217264222851
T:
r5nd5pke0d
224109228253228845
T:
lotus256
236800242424248825
T:
r5nd5pke5d
582195?604913?923890?
T:
mcnie4q1281
672586679283681873
T:
r5n11pke0d
820253827098841861
T:
mcnie3q1281
826617834905850815
T:
mcnie4q1282
99522610064741021940
T:
mcnie4q1921
103836810478031063269
T:
mcnie3q1282
121515412272161239204
T:
mcnie4q1922
125052612652891278979
T:
mcnie4q2561
130843113247111350167
T:
mcnie3q1921
150512315159271526953
T:
mcnie4q2562
154082815678011590704
T:
mcnie3q1922
159525515978451602285
T:
ledapkc1264
160435716204891640506
T:
r5n13pke0d
175158017604601775519
T:
mcnie3q2561
183560718466701877713
T:
ledapkc1364
210655821191012129868
T:
ledapkc1464
220523722328022243273
T:
r5n15pke0d
229814423044342317384
T:
ledapkc12sl
233029723688512387684
T:
mcnie3q2562
253024525374232545970
T:
ledapkc13sl
257101925996202610239
T:
ledapkc14sl
446678844766304491393
T:
ledapkc3264
468782647194614770484
T:
ledapkc3364
466118647284154816401
T:
ledapkc3464
553838255618405590996
T:
ledapkc32sl
621884962443796266579
T:
ledapkc33sl
690190669293976962142
T:
ledapkc34sl
877884288064448838264
T:
ledapkc5264
949257295327919565795
T:
ledapkc5364
105375631059916810871414
T:
ledapkc5464
106946281073617910801521
T:
r5n13pke0smallct
128303791293708713055561
T:
ledapkc52sl
134024361351254813654517
T:
ledapkc53sl
145728571472385414774100
T:
ledapkc54sl