VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems
ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of key-encapsulation mechanisms on one machine: amd64; Skylake (506e3); 2015 Intel Core i5-6500T; 4 x 2500MHz; thinksky, supercop-20251222

[Page version: 20260101 17:24:07]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for key-encapsulation mechanisms:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol C: means that the current SUPERCOP database does not list IND-CCA2 security as a goal for this key-encapsulation mechanism. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each key-encapsulation mechanism and each implementation. Designers and implementors interested in submitting new key-encapsulation mechanisms and new implementations of existing systems should read the call for submissions.

Test results

Graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

NISTPQC graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

Cycles to generate a key pair
25%50%75%system
168401698317192kyber90s512
197491980423715ntruplus576
225492268822920mlkem512
226232281423015kyber512
244372452124662ntruplus768
249232519125388kyber90s768
271042714827246ntruplus864
276522779327966
T:
C:nhcompact512cca
342943459434864
T:
lac128
349523499435091
T:
lightsaber2
355333578436039kyber90s1024
370843727037478smaugt1
372513731737465timer
384163858638872
T:
C:nhcompact768cca
385433868239217mlkem768
386983885439290kyber768
387973886338986
T:
ntrulpr4591761
382283900839211ntrulpr653
398663993740732ntrulpr761
354764082044099ntruplus1152
455034567145972T!!!newhope512cca
505915073650878ntrulpr857
506265089451296
T:
C:nhcompact1024cca
532025342154291ntrulpr953
538085401854508mlkem1024
533885407454455ntrulpr1013
539515423254575kyber1024
562015656257002smaugt3
633436351763782
T:
saber2
698687001070207ntrulpr1277
760407634776849smaugt5
805868103382547
T:
hqc128round4
818888201582261
T:
lac256
879018819188665T!!!newhope1024cca
896609000190325
T:
lac192
982559833198439
T:
firesaber2
158440158832159535ntruhps2048509
164825166070166999
T:
C:hila5
186721186901191664threebears624r2cca
186032190821203717C:threebears624r2cpa
191605192565192984
T:
hqc192round4
255155255938256859
T:
kindi256342
258273258793259254ntruhrss701
271447272264272889
T:
kindi512222
272442273562275328ntruhps2048677
273678274235274964
T:
kindi512241
357319358256362138
T:
hqcrmrs128
388989389340430324threebears936r2cca
391437392295393585ntruhps4096821
392960394066404813
T:
hqc256round4
390149402582410463C:threebears936r2cpa
400863406708422923
T:
hqc128
416599420998424972
T:
ntrukem443
429955431874448528
T:
hqc1281
589165589853591106
T:
C:bikel1
608273609879611254
T:
kindi512321
621423630038633665sntrup653
646274649330654196
T:
kindi256522
674680683114716454C:threebears1248r2cpa
663234695549734661threebears1248r2cca
716687719674722619sntrup761
732191733886739437
T:
hqcrmrs192
748855754068768863
T:
rqc128
784527793005814109
T:
hqc1921
822931827010846263
T:
hqc192
832350858246863876
T:
hqc1922
845285859273876615
T:
C:edonk128k16n80nu4l6
858966866984889790sntrup4591761
942748945262948748
T:
C:rolloi128
942615948973953838
T:
ntrukem743
104900010568681069018sntrup857
109498410956891097033
T:
frodokem640
117268312066431214075
T:
hqcrmrs256
120948112164501247964
T:
hqc2561
125387512888701312977
T:
hqc2562
128708712893561323456sntrup953
129704912992181301800
T:
C:rolloi192
1304081?1308234?1876938?
T:
rqc192
131531613458951355110
T:
hqc256
134533013468871351185
T:
frodokem640aes
137584013803471386806
T:
hqc2563
137800613843321390702
T:
C:edonk128k16n80nu8l6
141673314535041457276sntrup1013
157764415979631616169
T:
C:edonk128k32n96nu4l4
164654516505251654259
T:
C:bikel3
172999617325011735642
T:
C:rolloi256
185791218624131875303
T:
rqc256
189150719167161947661
T:
C:edonk192k32n128nu4l6
199387419990622008466
T:
C:edonk128ref
216974722020142259746sntrup1277
240504524168982437240
T:
C:lake1
242626524354192443427
T:
frodokem976
256348925681402572773
T:
C:lake2
270671227116102717775
T:
C:lake3
287194928898462916608
T:
C:edonk192k48n144nu4l4
288456928934502902219
T:
frodokem976aes
341152035028013553463
T:
frodokem640shake
382950638357933841864
T:
rolloii128
426063942882914305045
T:
locker1
435037143583564374346
T:
rolloii192
476308847793924885304
T:
locker2
480088748060364814226
T:
frodokem1344aes
509697251060065164196
T:
rolloii256
518597652007285609216
T:
locker3
565764356746795719773
T:
locker4
588295958894205977377
T:
sikep434
649897865276436611606
T:
remblem1056
652760065356016543928
T:
locker6
648813765631816598971
T:
remblem928
726557872873237306916
T:
frodokem976shake
770376977254647744742
T:
locker5
809524081210208135598
T:
sikep503
9549804963005210073119
T:
lotus128
9593074974309410501666
T:
sikep434comp
110774871108713511102152
T:
locker7
118871811190130311922481
T:
locker8
127013521271257512726946
T:
locker9
127778041279243313314131
T:
frodokem1344shake
131727361326075414505376
T:
sikep503comp
147252881472863914900173
T:
sikep610
176178331778875117889366
T:
lotus192
199921232004965320435610
T:
mersenne756839
249912562502219925070918
T:
sikep751
255603242567203027752749
T:
sikep610comp
304737223054598430879220
T:
lotus256
300424823063531031631971mceliece348864f
308905363117989531555879mceliece348864pcf
392257503936692942506559
T:
sikep751comp
30143450?41263482?69893816?mceliece348864pc
428906864306290843350727
T:
ntskem1264
39811711?49784693?61078111?mceliece348864
49505430?76263589?128749935?
T:
rsa2048
990611209955945399880091mceliece460896pcf
99805116100212100101673577mceliece460896f
102162934104034587105334801
T:
ntskem1380
96350027?136776206?197849871?mceliece460896pc
101796984?161677112?196870648?mceliece460896
186263851189926193190926142mceliece6960119pcf
187001939190739963191386634mceliece6960119f
230252227232109807233542595mceliece6688128f
232213336232578096233362804mceliece6688128pcf
240866292241934137244170666mceliece8192128f
239713455243197655244779919mceliece8192128pcf
248321295249220698251222218
T:
oddmanhattan128
252438149253443487254472560
T:
ntskem13136
237574769?308992813?448131782?mceliece6688128pc
191833297?315566929?384920213?mceliece6960119pc
191990035?317647101?387426024?mceliece6960119
236718566?380851303?590646827?mceliece6688128
312354536?385169276?531486593?mceliece8192128pc
251518975?387779025?528467586?mceliece8192128
397873395398392546399566132
T:
oddmanhattan192
703512102704611316706319216
T:
oddmanhattan256
861358079868222724877220430
T:
bigquake1
717514178874387292157660548478
T:
bigquake3
129927805401343233091513576860773
T:
bigquake5
Cycles for encapsulation
25%50%75%system
142721508815494
T:
rsa2048
216732178621972smaugt1
219572198722057timer
219452203222783ntruhps2048509
223652241522457ntruplus576
236522372923829ntruhrss701
242752433724540mlkem512
277152785627982ntruplus768
288222887128940kyber90s512
318223189532141ntruplus864
321153243033015ntruhps2048677
314463273035161mceliece348864f
312113279135449mceliece348864
344043454635042kyber512
378883800038672ntruhps4096821
383893863139024mlkem768
386643935739495sntrup653
393703947939645kyber90s768
397374006640312sntrup4591761
390594058643144mceliece348864pc
398384091742960mceliece348864pcf
419194200242512ntruplus1152
423454246142626sntrup761
453634546245846smaugt3
461014625446358
T:
C:nhcompact512cca
465694663846706
T:
lightsaber2
517675193252194kyber768
515585228452416sntrup857
528905294853153kyber90s1024
551595531256914mlkem1024
564455652956878sntrup953
566685745957622sntrup1013
619826208062350smaugt5
624196255062674ntrulpr653
648426488264960
T:
C:nhcompact768cca
648456496065076ntrulpr761
634466835878056mceliece460896f
681726841968656
T:
ntrulpr4591761
628996842977812mceliece460896
677526982670832
T:
lac128
722937262073276kyber1024
732057332273440sntrup1277
691387497582912mceliece460896pc
768267705477683T!!!newhope512cca
787297876378818
T:
saber2
709657990488674mceliece460896pcf
792038033794103
T:
ntskem1264
830728320683457ntrulpr857
840358428584539
T:
C:nhcompact1024cca
867348693787159ntrulpr953
875588764587753ntrulpr1013
100794104202112205
T:
C:edonk128k16n80nu4l6
101764106097113138mceliece6688128
106951107366108178
T:
C:bikel1
102279108046118528mceliece6688128f
112522112654112831ntrulpr1277
110200113065118770mceliece6960119
116776116815116906
T:
firesaber2
112365117689124884mceliece6960119f
113943119646128314mceliece6688128pcf
120064122393125305mceliece8192128
119776123446132499mceliece8192128f
122730125244128497
T:
ntrukem443
123608126570132823mceliece6960119pcf
124055127728132358mceliece6960119pc
132371134385136934mceliece8192128pc
135227136924141204mceliece8192128pcf
138434138820139337
T:
lac192
124491140361155158mceliece6688128pc
139726140692156192
T:
lotus128
145314146582148264T!!!newhope1024cca
157262157979158787
T:
C:rolloi128
162420165623168141
T:
lac256
179380180154181058
T:
C:rolloi192
207124207983209609
T:
C:rolloi256
206300208642210970
T:
lotus192
217049217715221336
T:
hqc128round4
223491224382225562
T:
C:hila5
227051229102232687
T:
ntrukem743
235485239009248798
T:
C:edonk128k16n80nu8l6
251287251924252985
T:
C:bikel3
256799262613265886threebears624r2cca
259207266671277995C:threebears624r2cpa
293332296984302056
T:
lotus256
294432297527304588
T:
C:edonk128k32n96nu4l4
305332307619314783
T:
ntskem1380
334667335201335968
T:
kindi256342
324153374274380431
T:
ntskem13136
393563394174395604
T:
kindi512222
395063395492396563
T:
kindi512241
434167438412447820
T:
C:edonk128ref
446821449938457353
T:
C:lake1
488662489839550412threebears936r2cca
495325495754497079
T:
hqc192round4
494108496322498120
T:
C:lake2
506267508074527710
T:
hqcrmrs128
492376509751517958C:threebears936r2cpa
528267530919534204
T:
rolloii128
535801538458541917
T:
rolloii192
546978551318569892
T:
hqc128
557729559629562200
T:
C:lake3
591261592948604248
T:
rolloii256
606341609744613171
T:
C:edonk192k32n128nu4l6
652284671336675542
T:
hqc1281
759373769073773719
T:
locker1
768281774023795221
T:
locker2
774672778568783281
T:
kindi256522
793570794649796043
T:
kindi512321
817587823052873247C:threebears1248r2cpa
819641826675835019
T:
C:edonk192k48n144nu4l4
790897844196892103threebears1248r2cca
872970876538953343
T:
locker3
954447955492956656
T:
hqc256round4
99697010003631006438
T:
locker4
102223410267801056384
T:
rqc128
103853410519661073091
T:
hqcrmrs192
108339010872621091097
T:
locker6
113166011605211170512
T:
hqc192
118067511965431212201
T:
hqc1921
126529612680811273099
T:
locker5
125336112781441293425
T:
hqc1922
163137116328291633991
T:
frodokem640
171057617289511763393
T:
hqcrmrs256
181322318166761818445
T:
frodokem640aes
182474018619401893304
T:
hqc2561
186008618685651888898
T:
locker7
186609318722071911626
T:
hqc256
1868920?1887372?2437255?
T:
rqc192
190811819208961931879
T:
locker8
193560819740371994773
T:
hqc2562
206076020634762068074
T:
locker9
209211221013952142268
T:
hqc2563
235951224254192479650
T:
bigquake1
256538925685562573770
T:
rqc256
327018332896493305571
T:
frodokem976
353872135442333547815
T:
frodokem976aes
369660737570443775403
T:
frodokem640shake
592288859269535934140
T:
frodokem1344aes
694191471519457332941
T:
bigquake3
761611176228557640968
T:
frodokem976shake
961971796276329634951
T:
sikep434
969905397075209829867
T:
remblem1056
963877598124629828688
T:
remblem928
105450621092819411151699
T:
bigquake5
133055871337885013423169
T:
sikep503
134307991352780614098671
T:
frodokem1344shake
150051651507800015197633
T:
sikep434comp
192217271928953519389317
T:
mersenne756839
205504612058023420664567
T:
sikep503comp
270309602705067227705124
T:
sikep610
375137513771063037852514
T:
sikep610comp
404086284044126540612619
T:
sikep751
530098645319914853414709
T:
oddmanhattan128
628236546303847263289063
T:
sikep751comp
102428529102632372102855514
T:
oddmanhattan192
211291322212121168212939001
T:
oddmanhattan256
Cycles for decapsulation
25%50%75%system
205142056320620kyber90s512
213142136721452ntruplus576
257932600026072mlkem512
265082654126596ntruplus768
270222716627276kyber512
284692850028568kyber90s768
309173100231133ntruplus864
332093329933406smaugt1
349373504235223timer
377393775737795ntruhps2048509
396223968139756kyber90s1024
401474026441322mlkem768
410144120641351kyber768
412254138341506ntruplus1152
447884488945208
T:
C:nhcompact512cca
456384568045717
T:
lightsaber2
469174716648032
T:
C:hila5
504815058050861sntrup761
528945298653086sntrup653
577885792658036ntruhps2048677
578565794358050ntruhrss701
578905817359947mlkem1024
588545889958990kyber1024
611336162762387smaugt3
640786417464256
T:
C:nhcompact768cca
705407080071558ntruhps4096821
722137233472538sntrup857
764617651676568
T:
saber2
770817720777433ntrulpr653
771677724477362sntrup953
778687793578052sntrup1013
795437972179978ntrulpr761
827208287483184smaugt5
834088359383738
T:
C:nhcompact1024cca
844498478685544T!!!newhope512cca
852078591486554sntrup4591761
8762689506105024
T:
lac128
972669738797584sntrup1277
980709836698653
T:
ntrulpr4591761
103438103664103912ntrulpr857
107059107214107411ntrulpr1013
107197107504108132ntrulpr953
114789114876114966
T:
firesaber2
117648118272118646mceliece348864
118095118274119817mceliece348864f
116886121847122652C:threebears624r2cpa
126007126173126851mceliece348864pcf
125556126343132350mceliece348864pc
134697135545135894
T:
ntrukem443
136943137203137623ntrulpr1277
159374159835161738T!!!newhope1024cca
160896166580166797C:threebears936r2cpa
172950176735189202
T:
lotus128
192940193629206405C:threebears1248r2cpa
193345193777194564
T:
lac192
236375236880237160mceliece460896
237372239633241639mceliece460896f
244949245395247590mceliece460896pcf
246791247582248613
T:
lotus192
252270252544253402mceliece460896pc
266643267648270456
T:
ntrukem743
267856268766269839mceliece6960119
268866269705274927mceliece6960119f
279941280495281324mceliece6960119pc
281771282141283028mceliece6960119pcf
286129286768287782mceliece6688128
287374288308290934mceliece6688128f
288223288766289716mceliece8192128
289101289667294908mceliece8192128f
297861298422299344mceliece6688128pcf
300110300476301120mceliece8192128pc
300845301451303224mceliece8192128pcf
228043?303875?317433?
T:
lac256
295793309518329383mceliece6688128pc
313952314552315114
T:
ntskem1264
355120361566370278
T:
lotus256
374991376294382013
T:
hqc128round4
415942417265418316
T:
kindi256342
521899522482524096
T:
kindi512241
521021522550524835
T:
kindi512222
582288582847583994
T:
ntskem1380
579083583078584415threebears624r2cca
797279798018799074
T:
hqc192round4
833588842769879568
T:
hqc128
850213850876852377
T:
hqcrmrs128
894446895973900710
T:
kindi256522
996097997983999863
T:
kindi512321
107901910809471120431threebears936r2cca
112725911302301135316
T:
C:rolloi128
116794411906271193560
T:
hqc1281
120644912096341216218
T:
ntskem13136
136286213653711368921
T:
C:rolloi192
155107715529431556056
T:
hqcrmrs192
155932515606311566880
T:
C:bikel1
156426015665411571725
T:
hqc256round4
159980516112331645970
T:
hqc192
162650316297671639302
T:
frodokem640
170437417223741835844threebears1248r2cca
174485317472601756574
T:
frodokem640aes
182243418361201841769
T:
rolloii128
187598018888241891547
T:
hqc1921
190507519088971960599
T:
hqc1922
192547919279831932082
T:
C:lake1
199266619990392009972
T:
rolloii192
208853720913742103115
T:
rsa2048
218679221907272196637
T:
C:rolloi256
244327824871532517346
T:
hqcrmrs256
255740025677322583080
T:
rolloii256
259515626153362666541
T:
hqc256
268860227521542758551
T:
hqc2561
284497928758862906992
T:
hqc2562
309494931514523158371
T:
hqc2563
320156032618413278032
T:
bigquake1
326323632753093288626
T:
C:lake2
327613332954723302103
T:
frodokem976
338932033914043395504
T:
frodokem976aes
2301853?3531454?5641447?
T:
C:edonk192k48n144nu4l4
354412035531203608355
T:
rqc128
358135035967383619710
T:
frodokem640shake
377820238197263851147
T:
locker1
391448339240724057233
T:
locker2
430343943163774342653
T:
locker4
445283144679094485860
T:
C:lake3
487824548842444894618
T:
C:bikel3
3101152?5279581?8160060?
T:
C:edonk128k32n96nu4l4
573799857484465750039
T:
frodokem1344aes
584141458573976365853
T:
locker3
630288663193366335686
T:
locker6
658968265982066608319
T:
locker5
690472869167398044712
T:
rqc192
705565870752797090700
T:
locker7
721208872252527253404
T:
locker8
738478074032307416283
T:
frodokem976shake
978010597967829817482
T:
locker9
102654161033816510365987
T:
sikep434
108808461090342910932121
T:
rqc256
109108521096215911016605
T:
sikep434comp
129479981305497313217477
T:
remblem1056
129539671309903513205504
T:
remblem928
131537591316574513715043
T:
frodokem1344shake
141582211421972014229842
T:
sikep503
150648661507353215121390
T:
sikep503comp
272571512744666627483077
T:
sikep610
284590002852348428845949
T:
mersenne756839
290132252904759029145796
T:
bigquake3
290351282905301729069405
T:
sikep610comp
21729121?35674943?112582983?
T:
C:edonk128k16n80nu4l6
435378704359410943764761
T:
sikep751
435911214361086943935689
T:
bigquake5
459511824598808546140002
T:
sikep751comp
42718979?53825590?176231777?
T:
C:edonk192k32n128nu4l6
575070445767753458020368
T:
oddmanhattan128
34216281?59011050?68204549?
T:
C:edonk128ref
40315627?80072714?122664894?
T:
C:edonk128k16n80nu8l6
112255665112459459112720081
T:
oddmanhattan192
231978348232899824233858741
T:
oddmanhattan256