VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems
ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of key-encapsulation mechanisms on one machine: amd64; Skylake (506e3); 2015 Intel Core i5-6500T; 4 x 2500MHz; thinksky, supercop-20250415

[Page version: 20250828 09:43:45]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for key-encapsulation mechanisms:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol C: means that the current SUPERCOP database does not list IND-CCA2 security as a goal for this key-encapsulation mechanism. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each key-encapsulation mechanism and each implementation. Designers and implementors interested in submitting new key-encapsulation mechanisms and new implementations of existing systems should read the call for submissions.

Test results

Graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

NISTPQC graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

Cycles to generate a key pair
25%50%75%system
168491694517091kyber90s512
197311986523630ntruplus576
224912261322859kyber512
244372446724518ntruplus768
251332527025541kyber90s768
270192707927220ntruplus864
276522779327966
T:
C:nhcompact512cca
326113267332780smaugt1
327323287833658timer
342943459434864
T:
lac128
349523499435091
T:
lightsaber2
356693603436676kyber90s1024
367203740337597ntrulpr653
382133841039197ntrulpr761
384163858638872
T:
C:nhcompact768cca
387973886338986
T:
ntrulpr4591761
386363889939478kyber768
354564190244130ntruplus1152
444674464844918T!!!newhope512cca
482314843348847ntrulpr857
506265089451296
T:
C:nhcompact1024cca
511145121451341smaugt3
510505131651918ntrulpr953
508215156751687ntrulpr1013
539015442354856kyber1024
633436351763782
T:
saber2
664076733267453ntrulpr1277
696007030370460smaugt5
805868103382547
T:
hqc128round4
818888201582261
T:
lac256
858288612586589T!!!newhope1024cca
896609000190325
T:
lac192
982559833198439
T:
firesaber2
155330155672156313ntruhps2048509
164825166070166999
T:
C:hila5
191605192565192984
T:
hqc192round4
187245194873201223threebears624r2cca
193079195369198510C:threebears624r2cpa
255155255938256859
T:
kindi256342
256133256734257639ntruhrss701
269719271378272242ntruhps2048677
271447272264272889
T:
kindi512222
273678274235274964
T:
kindi512241
357319358256362138
T:
hqcrmrs128
360038361660363012ntruhps4096821
392960394066404813
T:
hqc256round4
400863406708422923
T:
hqc128
390526411795419949C:threebears936r2cpa
405757414723420202threebears936r2cca
416599420998424972
T:
ntrukem443
429955431874448528
T:
hqc1281
589165589853591106
T:
C:bikel1
608273609879611254
T:
kindi512321
621423630038633665sntrup653
646274649330654196
T:
kindi256522
687596689298727878C:threebears1248r2cpa
663161690926694641threebears1248r2cca
719666720769726021sntrup761
732191733886739437
T:
hqcrmrs192
748855754068768863
T:
rqc128
784527793005814109
T:
hqc1921
822931827010846263
T:
hqc192
851262852202853346sntrup4591761
832350858246863876
T:
hqc1922
845285859273876615
T:
C:edonk128k16n80nu4l6
942748945262948748
T:
C:rolloi128
942615948973953838
T:
ntrukem743
104900010568681069018sntrup857
109498410956891097033
T:
frodokem640
117268312066431214075
T:
hqcrmrs256
120948112164501247964
T:
hqc2561
125387512888701312977
T:
hqc2562
128708712893561323456sntrup953
129704912992181301800
T:
C:rolloi192
1304081?1308234?1876938?
T:
rqc192
131531613458951355110
T:
hqc256
134533013468871351185
T:
frodokem640aes
137584013803471386806
T:
hqc2563
137800613843321390702
T:
C:edonk128k16n80nu8l6
141673314535041457276sntrup1013
157764415979631616169
T:
C:edonk128k32n96nu4l4
164654516505251654259
T:
C:bikel3
172999617325011735642
T:
C:rolloi256
185791218624131875303
T:
rqc256
189150719167161947661
T:
C:edonk192k32n128nu4l6
199387419990622008466
T:
C:edonk128ref
216974722020142259746sntrup1277
240504524168982437240
T:
C:lake1
242626524354192443427
T:
frodokem976
256348925681402572773
T:
C:lake2
270671227116102717775
T:
C:lake3
287194928898462916608
T:
C:edonk192k48n144nu4l4
288456928934502902219
T:
frodokem976aes
341152035028013553463
T:
frodokem640shake
382950638357933841864
T:
rolloii128
426063942882914305045
T:
locker1
435037143583564374346
T:
rolloii192
476308847793924885304
T:
locker2
480088748060364814226
T:
frodokem1344aes
509697251060065164196
T:
rolloii256
518597652007285609216
T:
locker3
565764356746795719773
T:
locker4
588295958894205977377
T:
sikep434
649897865276436611606
T:
remblem1056
652760065356016543928
T:
locker6
648813765631816598971
T:
remblem928
726557872873237306916
T:
frodokem976shake
770376977254647744742
T:
locker5
809524081210208135598
T:
sikep503
9549804963005210073119
T:
lotus128
9593074974309410501666
T:
sikep434comp
110774871108713511102152
T:
locker7
118871811190130311922481
T:
locker8
127013521271257512726946
T:
locker9
127778041279243313314131
T:
frodokem1344shake
131727361326075414505376
T:
sikep503comp
147252881472863914900173
T:
sikep610
176178331778875117889366
T:
lotus192
199921232004965320435610
T:
mersenne756839
249912562502219925070918
T:
sikep751
255603242567203027752749
T:
sikep610comp
304737223054598430879220
T:
lotus256
300424823063531031631971mceliece348864f
308905363117989531555879mceliece348864pcf
392257503936692942506559
T:
sikep751comp
30143450?41263482?69893816?mceliece348864pc
428906864306290843350727
T:
ntskem1264
39811711?49784693?61078111?mceliece348864
49505430?76263589?128749935?
T:
rsa2048
990611209955945399880091mceliece460896pcf
99805116100212100101673577mceliece460896f
102162934104034587105334801
T:
ntskem1380
96350027?136776206?197849871?mceliece460896pc
101796984?161677112?196870648?mceliece460896
186263851189926193190926142mceliece6960119pcf
187001939190739963191386634mceliece6960119f
230252227232109807233542595mceliece6688128f
232213336232578096233362804mceliece6688128pcf
240866292241934137244170666mceliece8192128f
239713455243197655244779919mceliece8192128pcf
248321295249220698251222218
T:
oddmanhattan128
252438149253443487254472560
T:
ntskem13136
237574769?308992813?448131782?mceliece6688128pc
191833297?315566929?384920213?mceliece6960119pc
191990035?317647101?387426024?mceliece6960119
236718566?380851303?590646827?mceliece6688128
312354536?385169276?531486593?mceliece8192128pc
251518975?387779025?528467586?mceliece8192128
397873395398392546399566132
T:
oddmanhattan192
703512102704611316706319216
T:
oddmanhattan256
861358079868222724877220430
T:
bigquake1
717514178874387292157660548478
T:
bigquake3
129927805401343233091513576860773
T:
bigquake5
Cycles for encapsulation
25%50%75%system
142721508815494
T:
rsa2048
215792160721653smaugt1
216722170821849timer
224372248322599ntruplus576
237822393824616ntruhps2048509
241142423024427ntruhrss701
277192778727905ntruplus768
288112887128948kyber90s512
318163188631981ntruplus864
325313268333369ntruhps2048677
314463273035161mceliece348864f
312113279135449mceliece348864
343063436434472kyber512
373783792038306ntruhps4096821
392383930239413kyber90s768
386643935739495sntrup653
394513970039893sntrup4591761
390594058643144mceliece348864pc
398384091742960mceliece348864pcf
418334191242257ntruplus1152
426134272742912sntrup761
431164317143233smaugt3
461014625446358
T:
C:nhcompact512cca
465694663846706
T:
lightsaber2
515005174351850kyber768
515585228452416sntrup857
530325318754603kyber90s1024
564455652956878sntrup953
566685745957622sntrup1013
609166100361108ntrulpr653
621826241363376smaugt5
631736355063692ntrulpr761
648426488264960
T:
C:nhcompact768cca
634466835878056mceliece460896f
681726841968656
T:
ntrulpr4591761
628996842977812mceliece460896
677526982670832
T:
lac128
720277215373138kyber1024
732057332273440sntrup1277
691387497582912mceliece460896pc
749107500675225T!!!newhope512cca
787297876378818
T:
saber2
709657990488674mceliece460896pcf
792038033794103
T:
ntskem1264
807058119281393ntrulpr857
839738420884365ntrulpr953
840358428584539
T:
C:nhcompact1024cca
848298492985063ntrulpr1013
100794104202112205
T:
C:edonk128k16n80nu4l6
101764106097113138mceliece6688128
106951107366108178
T:
C:bikel1
102279108046118528mceliece6688128f
108734108993109769ntrulpr1277
110200113065118770mceliece6960119
116776116815116906
T:
firesaber2
112365117689124884mceliece6960119f
113943119646128314mceliece6688128pcf
120064122393125305mceliece8192128
119776123446132499mceliece8192128f
122730125244128497
T:
ntrukem443
123608126570132823mceliece6960119pcf
124055127728132358mceliece6960119pc
132371134385136934mceliece8192128pc
135227136924141204mceliece8192128pcf
138434138820139337
T:
lac192
124491140361155158mceliece6688128pc
139726140692156192
T:
lotus128
141852142066142432T!!!newhope1024cca
157262157979158787
T:
C:rolloi128
162420165623168141
T:
lac256
179380180154181058
T:
C:rolloi192
207124207983209609
T:
C:rolloi256
206300208642210970
T:
lotus192
217049217715221336
T:
hqc128round4
223491224382225562
T:
C:hila5
227051229102232687
T:
ntrukem743
235485239009248798
T:
C:edonk128k16n80nu8l6
251287251924252985
T:
C:bikel3
258053265083269904threebears624r2cca
268884269469272650C:threebears624r2cpa
293332296984302056
T:
lotus256
294432297527304588
T:
C:edonk128k32n96nu4l4
305332307619314783
T:
ntskem1380
334667335201335968
T:
kindi256342
324153374274380431
T:
ntskem13136
393563394174395604
T:
kindi512222
395063395492396563
T:
kindi512241
434167438412447820
T:
C:edonk128ref
446821449938457353
T:
C:lake1
495325495754497079
T:
hqc192round4
494108496322498120
T:
C:lake2
506267508074527710
T:
hqcrmrs128
505425520019544896C:threebears936r2cpa
508531521577530260threebears936r2cca
528267530919534204
T:
rolloii128
535801538458541917
T:
rolloii192
546978551318569892
T:
hqc128
557729559629562200
T:
C:lake3
591261592948604248
T:
rolloii256
606341609744613171
T:
C:edonk192k32n128nu4l6
652284671336675542
T:
hqc1281
759373769073773719
T:
locker1
768281774023795221
T:
locker2
774672778568783281
T:
kindi256522
793570794649796043
T:
kindi512321
790381812536817182threebears1248r2cca
821355824208859753C:threebears1248r2cpa
819641826675835019
T:
C:edonk192k48n144nu4l4
872970876538953343
T:
locker3
954447955492956656
T:
hqc256round4
99697010003631006438
T:
locker4
102223410267801056384
T:
rqc128
103853410519661073091
T:
hqcrmrs192
108339010872621091097
T:
locker6
113166011605211170512
T:
hqc192
118067511965431212201
T:
hqc1921
126529612680811273099
T:
locker5
125336112781441293425
T:
hqc1922
163137116328291633991
T:
frodokem640
171057617289511763393
T:
hqcrmrs256
181322318166761818445
T:
frodokem640aes
182474018619401893304
T:
hqc2561
186008618685651888898
T:
locker7
186609318722071911626
T:
hqc256
1868920?1887372?2437255?
T:
rqc192
190811819208961931879
T:
locker8
193560819740371994773
T:
hqc2562
206076020634762068074
T:
locker9
209211221013952142268
T:
hqc2563
235951224254192479650
T:
bigquake1
256538925685562573770
T:
rqc256
327018332896493305571
T:
frodokem976
353872135442333547815
T:
frodokem976aes
369660737570443775403
T:
frodokem640shake
592288859269535934140
T:
frodokem1344aes
694191471519457332941
T:
bigquake3
761611176228557640968
T:
frodokem976shake
961971796276329634951
T:
sikep434
969905397075209829867
T:
remblem1056
963877598124629828688
T:
remblem928
105450621092819411151699
T:
bigquake5
133055871337885013423169
T:
sikep503
134307991352780614098671
T:
frodokem1344shake
150051651507800015197633
T:
sikep434comp
192217271928953519389317
T:
mersenne756839
205504612058023420664567
T:
sikep503comp
270309602705067227705124
T:
sikep610
375137513771063037852514
T:
sikep610comp
404086284044126540612619
T:
sikep751
530098645319914853414709
T:
oddmanhattan128
628236546303847263289063
T:
sikep751comp
102428529102632372102855514
T:
oddmanhattan192
211291322212121168212939001
T:
oddmanhattan256
Cycles for decapsulation
25%50%75%system
158021584315894ntruplus576
191531917519221ntruplus768
204702051720561kyber90s512
227382276722814ntruplus864
268772691727201kyber512
284682850128560kyber90s768
302243027530336ntruplus1152
330363310833274smaugt1
337563388734060timer
382733830838386ntruhps2048509
397464003641628kyber90s1024
410594118641398kyber768
447884488945208
T:
C:nhcompact512cca
456384568045717
T:
lightsaber2
469174716648032
T:
C:hila5
511315123651361sntrup761
528945298653086sntrup653
585045861659148ntruhps2048677
585065869359156smaugt3
587935884058948kyber1024
586945885459578ntruhrss701
640786417464256
T:
C:nhcompact768cca
722137233472538sntrup857
723967261072762ntruhps4096821
730667321373398ntrulpr653
755587570876049ntrulpr761
764617651676568
T:
saber2
771677724477362sntrup953
778687793578052sntrup1013
821608226682566T!!!newhope512cca
834088359383738
T:
C:nhcompact1024cca
826628375183947smaugt5
853308612886280sntrup4591761
8762689506105024
T:
lac128
972669738797584sntrup1277
980709836698653
T:
ntrulpr4591761
988489908699241ntrulpr857
101586101869102244ntrulpr953
101799101872101989ntrulpr1013
114789114876114966
T:
firesaber2
117648118272118646mceliece348864
118095118274119817mceliece348864f
117059118773119045C:threebears624r2cpa
126007126173126851mceliece348864pcf
125556126343132350mceliece348864pc
130528130693131869ntrulpr1277
134697135545135894
T:
ntrukem443
154908155032156002T!!!newhope1024cca
155345160722166253C:threebears936r2cpa
172950176735189202
T:
lotus128
193345193777194564
T:
lac192
189408197070199408C:threebears1248r2cpa
236375236880237160mceliece460896
237372239633241639mceliece460896f
244949245395247590mceliece460896pcf
246791247582248613
T:
lotus192
252270252544253402mceliece460896pc
266643267648270456
T:
ntrukem743
267856268766269839mceliece6960119
268866269705274927mceliece6960119f
279941280495281324mceliece6960119pc
281771282141283028mceliece6960119pcf
286129286768287782mceliece6688128
287374288308290934mceliece6688128f
288223288766289716mceliece8192128
289101289667294908mceliece8192128f
297861298422299344mceliece6688128pcf
300110300476301120mceliece8192128pc
300845301451303224mceliece8192128pcf
228043?303875?317433?
T:
lac256
295793309518329383mceliece6688128pc
313952314552315114
T:
ntskem1264
355120361566370278
T:
lotus256
374991376294382013
T:
hqc128round4
415942417265418316
T:
kindi256342
521899522482524096
T:
kindi512241
521021522550524835
T:
kindi512222
582288582847583994
T:
ntskem1380
584654597372618867threebears624r2cca
797279798018799074
T:
hqc192round4
833588842769879568
T:
hqc128
850213850876852377
T:
hqcrmrs128
894446895973900710
T:
kindi256522
996097997983999863
T:
kindi512321
105089210548951162558threebears936r2cca
112725911302301135316
T:
C:rolloi128
116794411906271193560
T:
hqc1281
120644912096341216218
T:
ntskem13136
136286213653711368921
T:
C:rolloi192
155107715529431556056
T:
hqcrmrs192
155932515606311566880
T:
C:bikel1
156426015665411571725
T:
hqc256round4
159980516112331645970
T:
hqc192
162650316297671639302
T:
frodokem640
174485317472601756574
T:
frodokem640aes
170197817598861766537threebears1248r2cca
182243418361201841769
T:
rolloii128
187598018888241891547
T:
hqc1921
190507519088971960599
T:
hqc1922
192547919279831932082
T:
C:lake1
199266619990392009972
T:
rolloii192
208853720913742103115
T:
rsa2048
218679221907272196637
T:
C:rolloi256
244327824871532517346
T:
hqcrmrs256
255740025677322583080
T:
rolloii256
259515626153362666541
T:
hqc256
268860227521542758551
T:
hqc2561
284497928758862906992
T:
hqc2562
309494931514523158371
T:
hqc2563
320156032618413278032
T:
bigquake1
326323632753093288626
T:
C:lake2
327613332954723302103
T:
frodokem976
338932033914043395504
T:
frodokem976aes
2301853?3531454?5641447?
T:
C:edonk192k48n144nu4l4
354412035531203608355
T:
rqc128
358135035967383619710
T:
frodokem640shake
377820238197263851147
T:
locker1
391448339240724057233
T:
locker2
430343943163774342653
T:
locker4
445283144679094485860
T:
C:lake3
487824548842444894618
T:
C:bikel3
3101152?5279581?8160060?
T:
C:edonk128k32n96nu4l4
573799857484465750039
T:
frodokem1344aes
584141458573976365853
T:
locker3
630288663193366335686
T:
locker6
658968265982066608319
T:
locker5
690472869167398044712
T:
rqc192
705565870752797090700
T:
locker7
721208872252527253404
T:
locker8
738478074032307416283
T:
frodokem976shake
978010597967829817482
T:
locker9
102654161033816510365987
T:
sikep434
108808461090342910932121
T:
rqc256
109108521096215911016605
T:
sikep434comp
129479981305497313217477
T:
remblem1056
129539671309903513205504
T:
remblem928
131537591316574513715043
T:
frodokem1344shake
141582211421972014229842
T:
sikep503
150648661507353215121390
T:
sikep503comp
272571512744666627483077
T:
sikep610
284590002852348428845949
T:
mersenne756839
290132252904759029145796
T:
bigquake3
290351282905301729069405
T:
sikep610comp
21729121?35674943?112582983?
T:
C:edonk128k16n80nu4l6
435378704359410943764761
T:
sikep751
435911214361086943935689
T:
bigquake5
459511824598808546140002
T:
sikep751comp
42718979?53825590?176231777?
T:
C:edonk192k32n128nu4l6
575070445767753458020368
T:
oddmanhattan128
34216281?59011050?68204549?
T:
C:edonk128ref
40315627?80072714?122664894?
T:
C:edonk128k16n80nu8l6
112255665112459459112720081
T:
oddmanhattan192
231978348232899824233858741
T:
oddmanhattan256