VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems
ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of key-encapsulation mechanisms on one machine: aarch64; Neoverse-N1 (413fd0c1); 2021 Ampere Altra Max M128-30; 64 x 3000MHz; cfarm425, supercop-20261018

[Page version: 20261114 11:13:47]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for key-encapsulation mechanisms:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol C: means that the current SUPERCOP database does not list IND-CCA2 security as a goal for this key-encapsulation mechanism. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each key-encapsulation mechanism and each implementation. Designers and implementors interested in submitting new key-encapsulation mechanisms and new implementations of existing systems should read the call for submissions.

Test results

Graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

NISTPQC graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

Cycles to generate a key pair
25%50%75%system
289622902729529T!!!mlkem512
316883173431870ntruplus768
362533633436432ntruplus864
479904827349071
T:
C:r5nd1kem0d
485234860648854T!!!mlkem768
578355822258700kyber512
585995911560450
T:
C:r5nd0kem2iot
49546?59651?66197?ntruplus1152
624236291863771
T:
C:r5nd1kem5d
644016493766697
T:
C:r5nd1kem4longkey
655296558165686smaugt1v5
677186785768522
T:
lightsaber2
713047140471980T!!!mlkem1024
855978564785739C:threebears624r2cpa
855988567285779threebears624r2cca
872698744488317C:threebears624r2cpax
881618827888448smaugt1
888018889489075threebears624r2ccax
899599040990553timer
927139287593161timerv5
981259867999423kyber768
992899948399775T!!!newhope512cca
111242111968113478
T:
C:r5nd3kem5d
119741119885120083smaugt3v5
121936122301150707ntruplus576
137702137868138780
T:
saber2
167244167372167548threebears936r2cca
168757169637170798kyber1024
170971171065171195threebears936r2ccax
172001172256173006C:threebears936r2cpa
172935173323173928kyber90s512
174350174447174649C:threebears936r2cpax
179706179894180139smaugt3
179792181316183234
T:
C:r5nd3kem0d
182542182692182873smaugt5v5
206644206836207187T!!!newhope1024cca
208204209772211347
T:
C:r5nd5kem5d
232564232820233801
T:
firesaber2
234704235834237561
T:
C:r5nd5kem0d
239027240075241094
T:
C:hila5
252997254995258706
T:
ntrulpr653
254262255605257038
T:
kindi256342
269656270735271693
T:
kindi512222
272151272825274545
T:
kindi512241
281024281168281492threebears1248r2cca
285979286086286349threebears1248r2ccax
287619287730287989C:threebears1248r2cpa
290726290822290990C:threebears1248r2cpax
294498294706295023smaugt5
317276317696318550kyber90s768
323264326196331056
T:
ntrulpr761
393762396489400901
T:
ntrulpr857
472529475177479309
T:
ntrulpr953
516003516667517658kyber90s1024
523894526903532037
T:
ntrulpr1013
561090562828565014
T:
kindi512321
618263627244637035
T:
ntrukem443
643033644038646690
T:
lima2p1024cca
677536678502680136
T:
kindi256522
771037774669780383
T:
ntrulpr1277
860925869886882324
T:
hqc1281
130389313050161308829
T:
lima2p2048cca
133641413382061340511
T:
limasp1018cca
156236215731541579498
T:
ntrukem743
173177617396551759929
T:
hqc1921
183787818388691841586
T:
frodokem640
184876618699431895484
T:
hqc1922
197931819815971983902
T:
frodokem640aes
243704224406622443393
T:
limasp1306cca
268778526921892696083
T:
limasp1822cca
311434531375813160113
T:
hqc2561
315876131791623209106
T:
hqc2562
330046933246443349982
T:
hqc2563
396408539679683972434
T:
frodokem976
431299443171934319831
T:
frodokem976aes
476603247715694778706
T:
limasp2062cca
481591948272384841008ntruhps2048509
696813669686806969826
T:
ntrulpr4591761
722731572297827233589
T:
frodokem640shake
766792176720517675513
T:
frodokem1344aes
778490077910067799569
T:
C:r5n11kem0d
840453384118268419503
T:
C:bikel1
847915784973268558450ntruhps2048677
898407690107599024543ntruhrss701
996090699649989969529sntrup653
115583901157865911593579
T:
ntruhrss701
123474641235771012377368ntruhps4096821
136261171363263313637722sntrup761
143065141437114614405692
T:
C:ledakemcpa14
161776971618158116190085
T:
frodokem976shake
161947951623196616285253
T:
C:ledakemcpa13
168113081689178017025316
T:
lotus128
172150291722412117229270sntrup857
188397291884608818860034
T:
C:r5n13kem0d
199801251998648519990958sntrup4591761
211951822120472621225647sntrup953
228700452287779422889693sntrup1013
266717212668726026699476
T:
C:bikel3
293353012934515029354461
T:
frodokem1344shake
339440533395916133972873
T:
C:r5n15kem0d
338385033398123734279235
T:
lotus192
341694493421465534257778sntrup1277
348954533491886734967982
T:
C:ledakemcpa12
355866723573715636517670
T:
ntskem1264
487709654880751148862005
T:
C:ledakemcpa34
501165595019698250308432
T:
ledakem1464
514389975148992551608086
T:
C:ledakemcpa33
522136675222388152259176
T:
sikep434
556651845587522256119378
T:
ledakem1364
590278435985184960003825
T:
lotus256
625686326274483664130447
T:
ledakem14sl
639878996493266465818256
T:
ledakem13sl
721988547224085172275430mceliece348864pcf
722393627225614372290901mceliece348864f
804215618043133280450336
T:
sikep503
830209858637848091820693
T:
sikep434comp
67705659?90952022?163781741?mceliece348864pc
105775863105887639106027045
T:
C:ledakemcpa32
106603868107016822107927335
T:
ntskem1380
68447756?114665628?160121057?mceliece348864
118523778118642814118797297
T:
C:ledakemcpa53
122998429123045165123149457
T:
C:ledakemcpa54
127889789128000632136971192
T:
sikep503comp
130630635130855422131021858
T:
ledakem1264
140226066141173505144083527
T:
ledakem3464
150123613150130101150138362
T:
sikep610
168498158168827611170430448
T:
ledakem34sl
175412565175776153175996459
T:
C:ledakemcpa52
176309145176628064177107440
T:
ledakem12sl
186514411186748371186985543
T:
ledakem3264
187861402188127447188446475
T:
ledakem3364
208816835209126086209776306
T:
ledakem5464
212633465213294409214223380
T:
ledakem33sl
237442851238025344240635445mceliece460896f
238818388239626812246486601mceliece460896pcf
241603343245308085256641456
T:
ntskem13136
251856824251990073266667159
T:
sikep610comp
274759635274779446274798895
T:
sikep751
234672152?364671385?526247884?mceliece460896
279010195?384804874?663735946?mceliece460896pc
419109824419647865420760888
T:
ledakem5364
423911163425626856463995290
T:
sikep751comp
459844590460316451463669269
T:
ledakem54sl
528911181529955122531676671
T:
ledakem5264
538647604539347370540485066
T:
ledakem32sl
540795550541647854543327361mceliece6960119f
552651677554824321557601322
T:
ledakem53sl
607711729608397360609006068mceliece6688128pcf
627940980634914776638173633mceliece6960119pcf
655577671668378723673370648
T:
bigquake1
695639871704378645713737183mceliece6688128f
749919314750494768751065566mceliece8192128f
750094234751626827761659437mceliece8192128pcf
597231304?869088067?1377040437?mceliece6960119pc
804784158?1074164249?1557233902?mceliece6960119
803256323?1115036601?1689223147?mceliece6688128
815385832?1164222063?2062359721?mceliece6688128pc
804402172?1198255168?2003453605?mceliece8192128
838719209?1225773286?1823318875?mceliece8192128pc
122582899312280405711230414983
T:
ledakem52sl
672780263769293210127848466162
T:
bigquake3
103362608851050614957110860187170
T:
bigquake5
Cycles for encapsulation
25%50%75%system
295252958230597ntruplus768
348473487934936T!!!mlkem512
350683509635612ntruplus864
462894632547757ntruplus1152
476295120057023mceliece348864
486285136456560
T:
ntskem1264
515695161951724smaugt1v5
477015203557236mceliece348864f
511175436158666mceliece348864pc
544665457654734T!!!mlkem768
533955722760773mceliece348864pcf
661536624466347
T:
ntruhrss701
675866763067834ntruplus576
770127734477946
T:
C:r5nd1kem0d
795857963479772T!!!mlkem1024
858128594486136smaugt1
874858787688055timerv5
881868832188480timer
957309644697689
T:
C:r5nd0kem2iot
963459652096818
T:
lightsaber2
980409812098258smaugt3v5
987339915699782
T:
C:ledakemcpa14
100750100862101168kyber512
94674102098116824mceliece460896f
101914102450103075
T:
C:r5nd1kem5d
104556105290105952
T:
C:ledakemcpa13
95030?105435?120402?mceliece460896
105342106007107129
T:
C:r5nd1kem4longkey
99997107244117782mceliece460896pcf
103671?114401?130764?mceliece460896pc
116549116641116792threebears624r2cca
116688116811117139threebears624r2ccax
117882117986118261C:threebears624r2cpa
117950118334119332C:threebears624r2cpax
117929120159122790
T:
C:ledakemcpa12
123419124175126421ntruhps2048509
139998143464158968
T:
ntrukem443
153827153919154113smaugt5v5
156912157248157819T!!!newhope512cca
159800160047161151kyber768
175972176232176522smaugt3
176921177608178667
T:
C:r5nd3kem5d
179555179790180090
T:
saber2
197878198761201453ntruhps2048677
208187208300208543threebears936r2cca
208272208387208696threebears936r2ccax
208583208690209120kyber90s512
209601209879210048ntruhrss701
215046215218215500C:threebears936r2cpax
215315215713216662C:threebears936r2cpa
201305?221082?255939?mceliece6688128
206885224310256674mceliece6688128pcf
211543227717254440mceliece6688128pc
218135230664255186mceliece6960119f
232719233473234747
T:
C:ledakemcpa34
223242234162254252mceliece6960119
220821234624255532mceliece6688128f
227294235622258314mceliece6960119pc
232778246413265074mceliece6960119pcf
247053249704255979sntrup653
252253253569254919
T:
C:ledakemcpa33
248279256003272192mceliece8192128
249056258510275018mceliece8192128f
259468260176263005kyber1024
257001266212287322mceliece8192128pcf
256660268170282991mceliece8192128pc
272488273535275758ntruhps4096821
272141275597290909
T:
ntrukem743
280893281838283051
T:
lotus128
286106286962290629
T:
firesaber2
290727291122291692smaugt5
286543292386298488
T:
C:ledakemcpa32
281232296162317731
T:
ntskem1380
299131299974300959
T:
ledakem1464
308010308534309673
T:
C:hila5
318261319474321557
T:
C:r5nd3kem0d
324167324405325561sntrup761
324407324668325306T!!!newhope1024cca
327386328751330160
T:
C:r5nd5kem5d
333136333257333528threebears1248r2ccax
333298333422333788threebears1248r2cca
336638337424338713
T:
kindi256342
341797341921342249C:threebears1248r2cpax
341861341964342330C:threebears1248r2cpa
353563354421355619
T:
ledakem14sl
360266360436361361kyber90s768
366594368054369562
T:
ledakem1364
392981393424394454
T:
kindi512222
395472397856398322sntrup857
396735398921400048
T:
kindi512241
413536414144416595
T:
lotus192
420122421400423072
T:
C:r5nd5kem0d
443039444078445726
T:
ledakem13sl
429204444772486140
T:
ntskem13136
445323445698446450
T:
lima2p1024cca
466762467923470112
T:
ntrulpr653
474117474608476325sntrup953
520613522068523530
T:
C:ledakemcpa54
544363546435548205sntrup1013
538627550101560192
T:
ledakem1264
557091559050561734
T:
C:ledakemcpa53
564095564744566643kyber90s1024
589059592677667833
T:
lotus256
585378594703607500
T:
C:ledakemcpa52
600999602291604635
T:
ntrulpr761
647715648641650116
T:
C:bikel1
709593711384713721
T:
ledakem3464
711571720971729919
T:
ledakem12sl
736433737859740493
T:
ntrulpr857
738331739596742386
T:
kindi512321
805314805997806744sntrup1277
815114816199817494
T:
kindi256522
886610889149892722
T:
ntrulpr953
898831899501901930
T:
lima2p2048cca
901949903445905492
T:
ledakem3364
945589948118950613
T:
ledakem34sl
986674988704991859
T:
ntrulpr1013
113339911351201137226
T:
limasp1018cca
123942512422231244939
T:
ledakem33sl
132988813526541380143
T:
ledakem3264
146626814691831472450
T:
ntrulpr1277
154857315528281558688
T:
ledakem5464
164710616639291681087
T:
hqc1281
191459519162221918733
T:
C:bikel3
194794719523651959514
T:
ledakem5364
196779119969702028401
T:
ledakem32sl
209331220969272100757
T:
ledakem54sl
215367221573782161917
T:
limasp1306cca
225980022609402261843
T:
frodokem640
228813622918182295238
T:
limasp1822cca
246514324662042468974
T:
frodokem640aes
263303626395732644712
T:
ledakem53sl
307351831235253171439
T:
bigquake1
345258234715123494485
T:
ledakem5264
358201336485303701448
T:
ledakem52sl
365810736792223703186
T:
hqc1921
390329439248043946253
T:
hqc1922
431292243190764326110
T:
limasp2062cca
470958347134494715723
T:
frodokem976
490981549133654916318
T:
frodokem976aes
650941365500486590884
T:
hqc2561
660819666514846687660
T:
hqc2562
689507469241106963758
T:
hqc2563
700673670071067008761sntrup4591761
707383370790987084235
T:
C:r5n11kem0d
728400874299507559190
T:
bigquake3
768951876913277694421
T:
frodokem640shake
868094486844948689613
T:
frodokem1344aes
105181641079106910975504
T:
bigquake5
139186781391901913920069
T:
ntrulpr4591761
170352901704253617052528
T:
frodokem976shake
177697721777483517781201
T:
C:r5n13kem0d
308407563085537130870326
T:
frodokem1344shake
333351303334483933356673
T:
C:r5n15kem0d
854135828545156185529006
T:
sikep434
130868079131318145132256412
T:
sikep434comp
132483263132504321132526089
T:
sikep503
199989768200622097201749119
T:
sikep503comp
276430497276439651276453697
T:
sikep610
373164957374688818377214663
T:
sikep610comp
445685291445722128445762724
T:
sikep751
681301499683596188686539315
T:
sikep751comp
Cycles for decapsulation
25%50%75%system
275022752927555ntruplus768
297632978529825C:threebears624r2cpax
300213019230402
T:
C:r5nd1kem0d
327263278132834ntruplus864
399254082542584
T:
C:r5nd0kem2iot
409774100441051C:threebears936r2cpax
423494240342466C:threebears624r2cpa
421594246843019
T:
C:r5nd1kem5d
431154314743190ntruplus1152
435844388644355
T:
C:r5nd1kem4longkey
449114496145066T!!!mlkem512
521725221252296C:threebears1248r2cpax
591265918159245C:threebears936r2cpa
690766922269378T!!!mlkem768
699116996170036smaugt1v5
713707154871997
T:
C:hila5
711457162272850
T:
C:r5nd3kem5d
759637603176099C:threebears1248r2cpa
926999276392868ntruplus576
991099916599236T!!!mlkem1024
111876112044112190
T:
lightsaber2
115735116062116346smaugt1
116712117224117327timerv5
119510119717120749timer
123820123917124078smaugt3v5
136504136601136779kyber512
138337139926141859
T:
C:r5nd5kem5d
154370154479154596
T:
ntruhrss701
154934155014155117threebears624r2ccax
158070159355161365
T:
C:r5nd3kem0d
179459180101181564
T:
ntrukem443
187151187326187611T!!!newhope512cca
187347187526187669smaugt5v5
191255192143197412
T:
C:r5n11kem0d
201672201759201933threebears624r2cca
202387202650202945
T:
saber2
210113212274214961
T:
C:r5nd5kem0d
212040212351212745kyber768
218444218591218900smaugt3
231874231991232185kyber90s512
261180261290261422threebears936r2ccax
285385286602287764
T:
C:r5n13kem0d
317713318113319046
T:
firesaber2
317373318219318695ntruhps2048509
325374325596325884threebears936r2cca
346666347115347569smaugt5
350393350744351275kyber1024
363682366189385186
T:
lotus128
386901387659389135mceliece348864
387635389218416753mceliece348864f
388918389361389773T!!!newhope1024cca
389189389369389700kyber90s768
391219391769392437mceliece348864pcf
392683393391394132mceliece348864pc
399731399824400054threebears1248r2ccax
403240405824409357
T:
ntrukem743
423240424222425511
T:
kindi256342
463326463616464078
T:
ntskem1264
467150468006468742sntrup653
484371484519484803threebears1248r2cca
523060523689524555ntruhps2048677
525868526513528687
T:
kindi512222
529041530253531700
T:
kindi512241
553245553772554752
T:
lima2p1024cca
564118567704616408
T:
lotus192
574318574616575171ntruhrss701
599915600318600801kyber90s1024
625041625306625643sntrup761
675081676376677161
T:
ntrulpr653
734318735472736176ntruhps4096821
780975781319781791sntrup857
820471822106826827
T:
lotus256
872209873626874657
T:
ntrulpr761
931357932001933821
T:
C:r5n15kem0d
935258937285939629
T:
kindi512321
956913957300957765sntrup953
960765962728963307
T:
kindi256522
9723419741391037183mceliece460896
9719959746671030923mceliece460896f
977838979254982873mceliece460896pcf
980540981408982632mceliece460896pc
105128610523761053410
T:
ntskem1380
105878210602321061235mceliece6960119f
106556010674941074052mceliece8192128f
106865310703461096065mceliece6960119pc
106258610715121082551sntrup1013
107124510728361075236
T:
ntrulpr857
107393310751601076915mceliece8192128pcf
107557410765461078284mceliece8192128pc
107456410858101177208mceliece8192128
109472410962951103213mceliece6688128
109913111018391128611mceliece6688128pcf
109948411019781122677mceliece6688128pc
111275111138901117120
T:
lima2p2048cca
111380911163481123736mceliece6960119
112328611250541132249mceliece6960119pcf
114721611485401150648mceliece6688128f
129472312956321297658
T:
ntrulpr953
144266014439461445447
T:
ntrulpr1013
146020414629431465146
T:
limasp1018cca
1535661?1543585?1935694?
T:
C:ledakemcpa13
158920215903701593474
T:
C:ledakemcpa12
168922716899161690676sntrup1277
187280218763621881435
T:
C:ledakemcpa14
215363221546082156703
T:
ntrulpr1277
226955722736212274794
T:
frodokem640
241186924131492415661
T:
frodokem640aes
242500224267272438637
T:
ntskem13136
272080127301652738495
T:
hqc1281
280533928103092813516
T:
limasp1306cca
295831629630512966747
T:
limasp1822cca
309746731127713151199
T:
ledakem1264
339352933984183421161
T:
ledakem1364
361830436354833683215
T:
ledakem12sl
394446239698544021562
T:
ledakem1464
401871740399924051846
T:
bigquake1
429442243041524423661
T:
ledakem13sl
438190843858974395084
T:
C:ledakemcpa32
472483547322424739941
T:
frodokem976
477003747739274777290
T:
frodokem976aes
475095847788184831654
T:
ledakem14sl
542619054346715441725
T:
C:ledakemcpa33
550217255272445553361
T:
hqc1921
564286556509045659089
T:
limasp2062cca
586418059141725926813
T:
hqc1922
520597364995246506804
T:
C:ledakemcpa34
765337076570117660207
T:
frodokem640shake
848130684863958490927
T:
frodokem1344aes
850333885160668661355
T:
ledakem3264
865839987036158715983
T:
ledakem3364
975062497786649794540
T:
hqc2562
967872897788479819997
T:
hqc2561
9815368987108610078545
T:
ledakem3464
100321261003963810046732
T:
C:bikel1
102827951031630710350693
T:
hqc2563
107048481072757810734308
T:
C:ledakemcpa52
108375231085111610892902
T:
ledakem32sl
118867931191936811953708
T:
ledakem33sl
127993371283097312886299
T:
ledakem34sl
10398602?13001572?13007998?
T:
C:ledakemcpa53
152372121524851815267445
T:
C:ledakemcpa54
169572931696631716988148
T:
frodokem976shake
179100741792675817941363
T:
ledakem5264
198168061983621719888515
T:
ledakem5364
208413102084160320842015sntrup4591761
208686742086892020869701
T:
ntrulpr4591761
226959372271385622837767
T:
ledakem5464
238928782395048024054393
T:
ledakem52sl
269650442702293327161162
T:
ledakem53sl
304873043051522630536453
T:
ledakem54sl
307109513072406030755663
T:
frodokem1344shake
309429713096188330986564
T:
C:bikel3
440292984479681050860144
T:
bigquake3
680087607354408477315563
T:
bigquake5
911582999122904391264106
T:
sikep434
969520609696434696973048
T:
sikep434comp
140893235140918873140939962
T:
sikep503
149853639149871203149890072
T:
sikep503comp
277939780277951715277971342
T:
sikep610
294163831294198123294237787
T:
sikep610comp
478626685478650940478708316
T:
sikep751
507440163507468877507506179
T:
sikep751comp