VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems
ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of key-encapsulation mechanisms on one machine: riscv64; U54 (sifive,u54-mc); 2017 SiFive Freedom U540; 4 x 1000MHz; riscvunleashed000, supercop-20240107

[Page version: 20241215 22:59:15]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for key-encapsulation mechanisms:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol C: means that the current SUPERCOP database does not list IND-CCA2 security as a goal for this key-encapsulation mechanism. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each key-encapsulation mechanism and each implementation. Designers and implementors interested in submitting new key-encapsulation mechanisms and new implementations of existing systems should read the call for submissions.

Test results

Graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

NISTPQC graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

Cycles to generate a key pair
25%50%75%system
600249600940608502kyber512
683267683467698247
T:
newhope512cca
870547873670896812kyber90s512
102023010226461050223kyber768
111751011180501134023
T:
lightsaber2
139814913994391416899
T:
newhope1024cca
140589614114551427833
T:
C:hila5
152844715308771553767
T:
kindi256342
155372615788661617908kyber90s768
158773615959401646470kyber1024
190004819224701926362
T:
kindi512241
191913119406011946119
T:
kindi512222
242359224386302443842
T:
saber2
249480025139952612509kyber90s1024
392289239260883936308
T:
kindi512321
410387441062724125790
T:
kindi256522
421563242168514226075
T:
firesaber2
616704461781396180076threebears624r2cca
612020262571026426648
T:
hqc1281
631839363299036343842
T:
ntrulpr653
654020065506206554668C:threebears624r2cpa
868185086844638704927
T:
ntrulpr761
108922621090454210910297
T:
ntrulpr857
133337941335319413362436
T:
ntrulpr953
139356061398736214041184
T:
C:lake1
144481221445792014461849threebears936r2cca
144615101447037114474294C:threebears936r2cpa
144994011451393714530002
T:
ntrulpr1013
145680061472817414900430
T:
hqc1921
153969021562082215854314
T:
hqc1922
167699261678439816806966
T:
C:lake3
184440401846225618485446
T:
C:lake2
207134302071995020733383
T:
ntrulpr4591761
226397382264561422654266
T:
ntrulpr1277
224227702291285423563370
T:
hqc2561
239666402397030023987357threebears1248r2cca
251382042523774525303879
T:
ntrukem443
254969442550678025529377C:threebears1248r2cpa
264598602667495026854790
T:
hqc2562
283645282838798628420906
T:
locker1
300855663010782830136188
T:
locker2
299553543014864430414912
T:
hqc2563
332379523325726033291030
T:
locker3
392240263924475039276958
T:
locker4
414182414144655841491830
T:
locker5
427501384278209242823946
T:
locker6
467058824671722846745860
T:
C:bikel1
704141957050113170598463
T:
ntrukem743
790619767909532279140942
T:
locker7
813841908142804681469586
T:
locker8
879257248797793288009310
T:
locker9
881174268813457688192742
T:
frodokem640shake
917940309181156491864742
T:
frodokem640
931496749318061093217034
T:
frodokem640aes
935187989354238493594133
T:
ntruhps2048509
936374299366225893703391ntruhps2048509
137674472137705815137757634
T:
sntrup653
137890089137942290138048933sntrup653
154463613154527052154884785
T:
C:bikel3
155075370155355088155569306
T:
mersenne756839
163290296163326427163380308
T:
ntruhps2048677
163486870163524668163580502ntruhps2048677
176641510176684491176834296ntruhrss701
176796624176847724176940222
T:
sntrup4591761
199677080199705516199749824
T:
frodokem976shake
206965105207071931207188862
T:
sntrup761
207788869207830308207884506sntrup761
212934960212975040213040608
T:
frodokem976
217019352217053160217090836
T:
frodokem976aes
231978959232075890232217096
T:
sntrup857
232249977232364042232507371sntrup857
233788321233820730233872964
T:
sikep434
239521660239559660239623112
T:
ntruhps4096821
277215600277881322278940770
T:
ntskem1264
288123364288208784288330093
T:
sntrup953
288434527288563301288683476sntrup953
315451358315504792315570940ntruhps4096821
324619818324782013324965277
T:
sntrup1013
324942826325168844325435352sntrup1013
360383666360450670360560918
T:
sikep503
371399382371451216371545066
T:
frodokem1344shake
370894083371741825405149333
T:
sikep434comp
410225282410281978410372234
T:
frodokem1344aes
512450730512674576513170456
T:
lotus128
570123114570576002619495515
T:
sikep503comp
669704252669759044669832272
T:
sikep610
714623268714711320714829290
T:
sntrup1277
715072078715135834715217350sntrup1277
859579855862075108866891294
T:
ntskem1380
109370061810939347981094440878
T:
lotus192
112469179811275733391230548960
T:
sikep610comp
121343154912135305201213668908
T:
sikep751
862626546?1498596782?2621231786?
T:
rsa2048
154951238015500751201550870074
T:
oddmanhattan128
187108175718738648992053819442
T:
sikep751comp
191838351019430919501950405856
T:
ntskem13136
199558696619958283001996468430
T:
lotus256
251092039425159937692521402857
T:
oddmanhattan192
454045747445427719924545467798
T:
oddmanhattan256
Cycles for encapsulation
25%50%75%system
153794179103185897
T:
rsa2048
734408736198765282
T:
ntskem1264
849043849928868266kyber512
108092510812951096822
T:
newhope512cca
110765411109401137082kyber90s512
134491413491001387433kyber768
164264016439251660234
T:
lightsaber2
178793818014191812959
T:
C:hila5
185232118812221929140kyber90s768
195964019790842024549kyber1024
201797220389632042608
T:
kindi256342
214562621572902175474
T:
C:lake1
218333421996312202236
T:
newhope1024cca
268509227034882714204
T:
C:lake2
274279427926062900190
T:
ntskem1380
282426028432882847050
T:
kindi512241
283400928532932856612
T:
kindi512222
285631928792402982861kyber90s1024
290726429203502928186
T:
C:lake3
303189730398723166802
T:
ntrukem443
314491031504653155027
T:
C:bikel1
321228232132103214478
T:
saber2
391015839244923972480
T:
locker1
405302240609984067540
T:
locker2
424974942509924274963
T:
ntruhps2048509
438119243831134406222ntruhps2048509
454641045542344563044
T:
locker3
495444649583384977660
T:
kindi256522
519211651991505216218
T:
kindi512321
523069252346875246879
T:
firesaber2
523852252505245265274
T:
locker4
568929757010995722569
T:
locker5
575892857782205792288
T:
locker6
605216660911526199372
T:
ntskem13136
617990261899566202562
T:
sntrup653
637693263874006401799sntrup653
742608074344357451883
T:
ntruhps2048677
763107476362787655532ntruhps2048677
788083578815967883533ntruhrss701
790746079224078040402
T:
ntrukem743
809040180932668104541
T:
sntrup761
817875281864328205632
T:
lotus128
832831083297548345193sntrup761
901966590208479032204threebears624r2cca
947823095035969531484
T:
locker7
961797296257979632478C:threebears624r2cpa
967451296898449699332
T:
C:bikel3
968574697052529727102
T:
locker8
103748221038848110401821
T:
sntrup857
103991881043132410463110
T:
locker9
106651161068269510690932sntrup857
108349641084145910865490
T:
ntruhps4096821
111106491111416411136218ntruhps4096821
116940241181962612049214
T:
hqc1281
123724151237503212384012
T:
ntrulpr653
123684721240085612436122
T:
lotus192
136369531364766713658995
T:
sntrup953
139653681397534213989288sntrup953
153474781536624015378595
T:
sntrup1013
157035471572522415731526sntrup1013
170455481705503317065810
T:
ntrulpr761
177628581781083217890186
T:
lotus256
189781431898321618997471threebears936r2cca
190239811902558819041366C:threebears936r2cpa
196572581966403119699452
T:
sntrup4591761
214114522142290221442503
T:
ntrulpr857
224997742251414322533110
T:
sntrup1277
229923582300257423012722sntrup1277
262694642628084426292399
T:
ntrulpr953
274689002773186227991668
T:
hqc1921
285613142856918528589158
T:
ntrulpr1013
289324492933203729842486
T:
hqc1922
295823312959088029600055threebears1248r2cca
315400283154666331568944C:threebears1248r2cpa
405950564060699040632786
T:
ntrulpr4591761
422452844290244643631026
T:
hqc2561
447261844474010044766300
T:
ntrulpr1277
501236605043866050892492
T:
hqc2562
568250825717919057562646
T:
hqc2563
952368569525812995306480
T:
frodokem640shake
965760029661905696690470
T:
frodokem640
978385989785790897902971
T:
frodokem640aes
196619334196978504197535650
T:
mersenne756839
214920330214959386215019094
T:
frodokem976shake
222456536222488884222574344
T:
frodokem976
223734772223774676223808300
T:
frodokem976aes
370066618371225264372612378
T:
oddmanhattan128
383100630383157944383209080
T:
sikep434
399166954399206916399287296
T:
frodokem1344shake
428355308428412104428549048
T:
frodokem1344aes
584964928587790842591245462
T:
sikep434comp
594097800594157582594218634
T:
sikep503
716603918717037730717770400
T:
oddmanhattan192
891766658892506200897100746
T:
sikep503comp
123235762012324603681232583504
T:
sikep610
158493184015870922321590881038
T:
oddmanhattan256
166802726616758788421684266384
T:
sikep610comp
196747284619675579361967682436
T:
sikep751
300828455230228655623025973816
T:
sikep751comp
Cycles for decapsulation
25%50%75%system
421656421861422720
T:
C:hila5
106195310631701083749kyber512
117731511778111192644
T:
newhope512cca
128121512849991319156kyber90s512
162141416261111657468kyber768
207969820939972095335
T:
lightsaber2
207103321016722153052kyber90s768
231222823392862396326kyber1024
241258024300752431402
T:
newhope1024cca
247573824987442502112
T:
kindi256342
265123226777672678902
T:
ntskem1264
3126996?3137260?4543494?kyber90s1024
323791932384013240007C:threebears624r2cpa
371727437197763722354
T:
kindi512241
375251837552183757874
T:
kindi512222
385582438567383858095
T:
saber2
477734747779874787055C:threebears936r2cpa
531971453211585340514
T:
ntskem1380
560007456038415620803
T:
ntrukem443
570131057072165724152
T:
kindi256522
609837461132626115878
T:
firesaber2
631670163285396329767C:threebears1248r2cpa
648212665004346505746
T:
kindi512321
652296165415716550087
T:
C:lake1
101246381014510010154460
T:
lotus128
110209851107150811103514
T:
C:lake2
121390881214227012152681
T:
ntskem13136
123088071230947812314152
T:
ntruhps2048509
123095311231179512314648ntruhps2048509
136120911365544013703112
T:
C:lake3
145087841455468014584564
T:
locker1
150444121513449015176646
T:
locker2
151711661518084515189253
T:
ntrukem743
158905541590919615961910
T:
lotus192
163494971635240716360682
T:
sntrup761
163502111635344816363553sntrup761
171418961728113617313752
T:
locker4
176287961763809817646853
T:
sntrup653
176292581763988017647118sntrup653
180957811810840218115842
T:
ntrulpr653
180310361825069018851782
T:
hqc1281
183704221837758818383398threebears624r2cca
203994342050434620609408
T:
locker3
216703542168080621685030ntruhps2048677
216733972168150021688929
T:
ntruhps2048677
226182962264918422683456
T:
locker5
229692762302200423055022
T:
locker6
232918182329539423307249ntruhrss701
233152802336567223472798
T:
lotus256
250406582504928625064136
T:
ntrulpr761
264850752649110026535318
T:
rsa2048
285323342857676628634228
T:
locker7
292251842927320829330214
T:
locker8
301524743016025830168864
T:
sntrup857
301515523016081430191068sntrup857
315382403154356431554828
T:
ntrulpr857
317878953179358031806355
T:
ntruhps4096821
318062183181161931815461ntruhps4096821
363834863643845836507098
T:
locker9
383890863839764638405536threebears936r2cca
387580943876635638776696
T:
ntrulpr953
390225623903055039045686
T:
sntrup953
390232303903096439046750sntrup953
407219874170524242011514
T:
hqc1921
421490464215805042173292
T:
ntrulpr1013
430134564302089443059318
T:
sntrup1013
430115704302107843058914sntrup1013
433611744367898444130882
T:
hqc1922
556310115566985855754862
T:
sntrup4591761
597141925972422459760394threebears1248r2cca
604702146048354060531038
T:
ntrulpr4591761
626373866431553065178388
T:
hqc2561
652540006527479865307618
T:
C:bikel1
662259686623514866265530
T:
ntrulpr1277
664931146650352266537394sntrup1277
664930186650391466570862
T:
sntrup1277
743875887560596675947712
T:
hqc2562
848869838521590585327906
T:
hqc2563
951498509517082095213906
T:
frodokem640shake
972013049722696197268402
T:
frodokem640
979937749801443298065992
T:
frodokem640aes
214475140214505740214556684
T:
frodokem976shake
219344600219391756219447776
T:
C:bikel3
223368376223404786223429746
T:
frodokem976
223862608223895806223946792
T:
frodokem976aes
298150920298462638298849368
T:
mersenne756839
398970348399013566399095794
T:
frodokem1344shake
408525578408565934408635034
T:
sikep434
416437276418282272419441740
T:
oddmanhattan128
428658234428706310428777404
T:
frodokem1344aes
434255080434314150434373130
T:
sikep434comp
631603744631659258631709304
T:
sikep503
669205480669271133669360868
T:
sikep503comp
816534454817684392818196631
T:
oddmanhattan192
123941275612394834341239576402
T:
sikep610
131452874013146304981314775160
T:
sikep610comp
178927379017912715021794414080
T:
oddmanhattan256
211339530821135004082113660056
T:
sikep751
223844961722385452242238990398
T:
sikep751comp