VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems

ECRYPT II

Measurements of public-key signature systems, indexed by machine

There is a separate page with more information about each signature system and each implementation. Designers and implementors interested in submitting new signature systems and new implementations of existing signature systems should read the call for submissions.

What do the graphs and tables mean?

• Time to verify a signed message.
• Time to sign a message.
• Time to compute a key pair.
• Space for a secret key.
• Space for a public key.
• Space for a signature on a short message.
• Space for a signature on a long message: more precisely, the difference between the space used by a long signed message and the space used by the original unsigned message. This can be smaller than the space for a signature on a short message for signature systems that support "message recovery."

Each computer also has a series of tables, eight tables for each computer. The first table shows the time, in cycles, to generate a key pair. Each row of the table lists

• the first quartile of many time measurements,
• the median of many time measurements,
• the third quartile of many time measurements, and
• the name of the signature system.

The computer name is linked to additional information about the implementations and compilers selected for benchmarking.

amd64; Zen (800f11); 2017 AMD Ryzen 7 1700; 8 x 2994MHz; ryzen, supercop-20170718

Cycles to generate a key pair quartile median quartile system 30060 30120 30180 lattisigns512 45450 45570 45630 ed25519 214230 214410 214710 ed448goldilocks 294120 294960 295860 pass769 352830 353970 355680 pass863 4011570 4054500 4111230 ntrumls401x 4709310 4768320 4839240 ntrumls439x 5037120 5039790 5044410 sphincs256 8357040 8438220 8532600 ntrumls593x 12624030 12708240 12870900 ntrumls743x 18427440? 22413000? 30826590? rwb0fuz1024 74329680 74532240 74743470 pflash1 165397410 171217710 178284330 mqqsig160 195855960 195925380 196466880 sflashv2 236067990 240875700 251392110 mqqsig192 329793390 339923430 346303140 mqqsig224 450468690 459567150 470420520 mqqsig256

Cycles to sign 59 bytes quartile median quartile system 3540 3540 4380 mqqsig160 4140 4140 4170 mqqsig192 4830 4860 4890 mqqsig224 5070 5100 5100 mqqsig256 48840 48900 48960 ed25519 65760 65940 66090 sflashv2 225330 225450 225570 ed448goldilocks 248310? 406710? 796980? lattisigns512 400740? 422790? 819390? pass863 516720? 528930? 960450? ntrumls439x 297210? 654150? 1235100? pflash1 340350? 668940? 1000830? pass769 458040? 836790? 1231530? ntrumls401x 853230 875970 881340 rwb0fuz1024 843960? 1573800? 2318880? ntrumls593x 1111980? 2083920? 2103900? ntrumls743x 83630790 83927820 83974650 sphincs256

Cycles to verify 59 bytes quartile median quartile system 7530 7620 7710 rwb0fuz1024 25890 27300 28920 mqqsig160 47040 47190 47820 lattisigns512 50760 52590 59730 mqqsig192 63900 65670 67200 mqqsig224 94800 95190 95520 sflashv2 99270 101550 118740 mqqsig256 167670 167940 172320 pflash1 170940 171870 172140 ed25519 203670 204030 206730 ntrumls401x 231000 232110 234750 ntrumls439x 378960 379950 385320 ntrumls593x 469770 474750 475650 pass769 491580 492900 498870 ntrumls743x 549000 550860 552450 pass863 587220 588330 588630 ed448goldilocks 2450340 2469480 2518170 sphincs256

Secret key bytes system 64 ed25519 144 ed448goldilocks 193 pass769 216 pass863 256 lattisigns512 265 rwb0fuz1024 401 mqqsig160 465 mqqsig192 529 mqqsig224 593 mqqsig256 1088 sphincs256 1158 ntrumls401x 1305 ntrumls439x 1742 ntrumls593x 2267 ntrumls743x 2823 sflashv2 5550 pflash1

Public key bytes system 32 ed25519 56 ed448goldilocks 128 rwb0fuz1024 972 ntrumls401x 1056 sphincs256 1112 ntrumls439x 1478 ntrumls593x 1536 lattisigns512 1544 pass769 1776 pass863 1927 ntrumls743x 19266 sflashv2 72124 pflash1 206112 mqqsig160 333540 mqqsig192 529242 mqqsig224 789552 mqqsig256

Signing 0 bytes bytes system -1? ntrumls401x? ? -1? ntrumls439x? ? -1? ntrumls593x? ? -1? ntrumls743x? ? 20 mqqsig160 24 mqqsig192 28 mqqsig224 32 mqqsig256 37 pflash1 37 sflashv2 64 ed25519 65 rwb0fuz1024 112 ed448goldilocks 1184 lattisigns512 1602 pass769 1790 pass863 41000 sphincs256

Signing 23 bytes bytes system 20 mqqsig160 24 mqqsig192 28 mqqsig224 32 mqqsig256 37 pflash1 37 sflashv2 64 ed25519 65 rwb0fuz1024 112 ed448goldilocks 853 ntrumls401x 988 ntrumls439x 1184 lattisigns512 1335 ntrumls593x 1602 pass769 1765 ntrumls743x 1790 pass863 41000 sphincs256

Signing many bytes bytes system 20 mqqsig160 24 mqqsig192 28 mqqsig224 32 mqqsig256 37 pflash1 37 sflashv2 64 ed25519 65 rwb0fuz1024 112 ed448goldilocks 853 ntrumls401x 988 ntrumls439x 1184 lattisigns512 1335 ntrumls593x 1602 pass769 1765 ntrumls743x 1790 pass863 41000 sphincs256

amd64; SL+512x2 (50654); 2017 Intel Xeon Gold 6150; 18 x 2700MHz; manny1024, supercop-20170228

Cycles to generate a key pair quartile median quartile system 39130 39234 39322 lattisigns512 53352 53514 53664 ed25519 110644 111592 132122 donald512 192900 193130 193548 ed448goldilocks 212830 215540 217552 pass769 278970 280382 283240 pass863 310040 310434 312108 donald1024 918332 938818 964816 hector 1073210 1083534 1092350 donald2048 3007358 3017028 3026512 sphincs256 3333980 3348348 3383846 ecdonaldp256 5591364 5613844 5642196 3icp 6842284 6873980 6984512 ecdonaldp384 7607306? 11648022? 17459942? ronald512 14544864 14648120 14824192 ecdonaldp521 21060596? 24496944? 40175146? rwb0fuz1024 15864306? 25636650? 45322380? ronald768 27574818 27597170 27619942 tts6440 26307188? 46681432? 68730534? ronald1024 50634194 50718958 50853312 pflash1 55235306 55270094 55544934 rainbow5640 101459230 102506694 103369374 rainbow6440 73674996? 109251600? 204534520? ronald1536 171811202 171857052 172031206 sflashv2 120365150? 186825332? 311218878? ronald2048 276679288? 365181798? 511342994? mqqsig160 353208566? 459195872? 662079312? mqqsig192 783037666 869934254 916652190 mqqsig224 544023196? 895644142? 1358309106? ronald3072 1133170222? 1810830142? 2981877168? ronald4096 2349395668 2394323936 2467425028 mqqsig256

Cycles to sign 59 bytes quartile median quartile system 1680 1684 1690 mqqsig160 1948 1954 1960 mqqsig192 2482 2490 2498 mqqsig224 3248 3266 3286 mqqsig256 27784 27894 28074 tts6440 49120 49300 49412 ed25519 51086? 52184? 65660? rainbow5640 71994 72494 73748 rainbow6440 74476 74604 74696 sflashv2 169496 173428 203966 donald512 200710 200852 201072 ed448goldilocks 181780? 350034? 519958? lattisigns512 372566 375852 380892 donald1024 392508 397842 406058 ronald512 243318? 478662? 713874? pass769 309854? 605412? 914784? pass863 242922? 610904? 820032? 3icp 676916 686442 697624 ronald768 828790 830074 838716 rwb0fuz1024 944658 968918 1009804 hector 606874? 1046768? 1935448? pflash1 1069682 1082672 1092852 ronald1024 1095806 1103718 1113400 ecdonaldp256 1159488 1165744 1173478 donald2048 2230296 2242994 2259728 ecdonaldp384 2435292 2451592 2471146 ronald1536 4651572 4672736 4705694 ronald2048 4660690 4686840 4714618 ecdonaldp521 13833672 13887772 13962640 ronald3072 29268316 29326344 29398696 ronald4096 44444104 44487142 46526952 sphincs256

Cycles to verify 59 bytes quartile median quartile system 7546 7580 7652 rwb0fuz1024 17364 17816 18242 3icp 22896 23232 24204 rainbow5640 22950 23414 23790 ronald512 24958 25198 25448 ronald768 28094 28204 28368 rainbow6440 28044 28232 28360 tts6440 28930 29418 31430 mqqsig160 31140 31358 31642 ronald1024 35720 35800 35886 lattisigns512 38498 38758 39792 mqqsig192 44722 44902 45210 ronald1536 51138 51488 52478 mqqsig224 60608 61810 64282 mqqsig256 62792 62956 63334 ronald2048 87002 87108 87190 sflashv2 113152 113402 113934 ronald3072 146646 150122 173712 donald512 162896 163032 163292 ed25519 184484 185108 186500 ronald4096 192394 193784 195924 pflash1 344032 345302 348990 pass769 360968 364376 369242 donald1024 433512 437258 439846 pass863 539426 540008 543506 ed448goldilocks 1231702 1243198 1258802 donald2048 1254950 1264170 1272232 ecdonaldp256 1382770 1390072 1395914 sphincs256 2574742 2592154 2630026 ecdonaldp384 3744230 3752926 3777198 hector 5487042 5507758 5529872 ecdonaldp521

Secret key bytes system 29 hector 64 ed25519 84 donald512 96 ecdonaldp256 144 ecdonaldp384 144 ed448goldilocks 148 donald1024 193 pass769 198 ecdonaldp521 216 pass863 256 lattisigns512 265 rwb0fuz1024 276 donald2048 401 mqqsig160 465 mqqsig192 512 ronald512 529 mqqsig224 593 mqqsig256 768 ronald768 1024 ronald1024 1088 sphincs256 ntrumls401x 1158 1 ntrumls439x 1305 1 1536 ronald1536 ntrumls593x 1742 1 2048 ronald2048 ntrumls743x 2267 1 2823 sflashv2 3072 ronald3072 4096 ronald4096 5550 pflash1 12768 3icp 16608 tts6440 86240 rainbow5640 150512 rainbow6440

Public key bytes system 32 ed25519 56 ed448goldilocks 60 hector 64 donald512 64 ecdonaldp256 64 ronald512 96 ecdonaldp384 96 ronald768 128 donald1024 128 ronald1024 128 rwb0fuz1024 132 ecdonaldp521 192 ronald1536 256 donald2048 256 ronald2048 384 ronald3072 512 ronald4096 ntrumls401x 972 1 1056 sphincs256 ntrumls439x 1112 1 ntrumls593x 1478 1 1536 lattisigns512 1544 pass769 1776 pass863 ntrumls743x 1927 1 19266 sflashv2 35712 3icp 44160 rainbow5640 57600 rainbow6440 57600 tts6440 72124 pflash1 206112 mqqsig160 333540 mqqsig192 529242 mqqsig224 789552 mqqsig256

Signing 0 bytes bytes system ntrumls401x -1 1 ntrumls439x -1 1 ntrumls593x -1 1 ntrumls743x -1 1 20 mqqsig160 24 mqqsig192 28 mqqsig224 32 mqqsig256 36 3icp 37 pflash1 37 rainbow5640 37 sflashv2 40 donald1024 40 donald2048 40 donald512 43 rainbow6440 43 tts6440 64 ecdonaldp256 64 ed25519 64 ronald512 65 rwb0fuz1024 87 hector 96 ecdonaldp384 96 ronald768 112 ed448goldilocks 128 ronald1024 132 ecdonaldp521 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1184 lattisigns512 1602 pass769 1790 pass863 41000 sphincs256

Signing 23 bytes bytes system 20 mqqsig160 24 mqqsig192 28 mqqsig224 32 mqqsig256 36 3icp 37 pflash1 37 rainbow5640 37 sflashv2 40 donald1024 40 donald2048 40 donald512 41 ronald512 43 rainbow6440 43 tts6440 64 ecdonaldp256 64 ed25519 65 rwb0fuz1024 73 ronald768 87 hector 96 ecdonaldp384 105 ronald1024 112 ed448goldilocks 132 ecdonaldp521 169 ronald1536 233 ronald2048 361 ronald3072 489 ronald4096 1184 lattisigns512 1602 pass769 1790 pass863 41000 sphincs256

Signing many bytes bytes system 20 mqqsig160 24 mqqsig192 28 mqqsig224 32 mqqsig256 36 3icp 37 pflash1 37 rainbow5640 37 sflashv2 40 donald1024 40 donald2048 40 donald512 43 rainbow6440 43 ronald1024 43 ronald1536 43 ronald2048 43 ronald3072 43 ronald4096 43 ronald512 43 ronald768 43 tts6440 64 ecdonaldp256 64 ed25519 65 rwb0fuz1024 87 hector 96 ecdonaldp384 112 ed448goldilocks 132 ecdonaldp521 1184 lattisigns512 1602 pass769 1790 pass863 41000 sphincs256

amd64; KnLanding (50671); 2016 Intel Xeon Phi 7250; 68 x 1400MHz; unstable; pluton1mn, supercop-20160806

Cycles to generate a key pair quartile median quartile system 82992 83216 84616 lattisigns512 189504 189588 193088 ed25519 383516 388150 417130 pass769 408954 412216 430654 donald512 551222 558642 583730 pass863 806204 821968 830312 ed448goldilocks 1310638 1318408 1331848 donald1024 4722942 4748534 5134766 donald2048 8904588 9017638 9317210 ecdonaldp256 10969658 10980018 11443264 sphincs256 16942618 17093482 17557862 3icp 20667542 20732698 21089614 ecdonaldp384 17116974? 23944564? 33462870? ronald512 42805014 42880530 42976164 rainbowbinary256181212 49159614 49256984 49432866 ecdonaldp521 32974088? 53973710? 84973000? ronald768 73273732? 108470992? 140389354? ronald1024 125336064 125724928 130904942 rainbow5640 149456468 149598596 149781856 pflash1 154126392? 169339702? 254164806? rwb0fuz1024 178454724 178589558 178773518 rainbowbinary16242020 286747538 291373544 292585440 rainbow6440 200650366? 337704556? 574307636? ronald1536 745382568 745832612 746276272 sflashv2 470145900? 747749142? 1066415840? ronald2048 970411190 1098080494 1181808586 mqqsig256 2028710264? 3152271500? 4849120346? ronald3072 3789154012? 7446051676? 12708813264? ronald4096

Cycles to sign 59 bytes quartile median quartile system 6216 6230 6230 mqqsig256 54334 54376 54488 rainbowbinary256181212 103166 104972 106176 rainbowbinary16242020 104902? 111944? 178136? rainbow5640 175532 176134 177324 ed25519 181608 191688 207480 rainbow6440 269514 271166 277802 sflashv2 505834 519778 528150 donald512 339962? 662536? 1003674? lattisigns512 826882 842870 849142 ed448goldilocks 511546? 972972? 1446886? pass769 1076600 1089200 1112286 ronald512 660072? 1296736? 1966706? pass863 1338750 1351224 1365028 donald1024 897932? 1542856? 2008370? 3icp 2091418 2111592 2149238 ronald768 2904762 2925958 2959110 ecdonaldp256 3350802 3417022 3525564 ronald1024 2111704? 3886232? 6490904? pflash1 4491130 4555306 4600610 donald2048 6377784 6388410 6403698 rwb0fuz1024 6634222 6664882 6697768 ecdonaldp384 8685880 8727362 8796830 ronald1536 15557234 15635802 15723988 ecdonaldp521 17530954 17606778 17679424 ronald2048 52112760 52204992 52282482 ronald3072 115188598 115358222 115507658 ronald4096 177666986 177734382 177811522 sphincs256

Cycles to verify 59 bytes quartile median quartile system 28994 29190 29260 rwb0fuz1024 50512 50512 50512 rainbowbinary256181212 54348 54642 55300 3icp 62818 65758 66052 lattisigns512 66206 66752 67256 rainbow5640 70518 70798 71414 ronald512 74396 74704 75474 ronald768 75054 75054 75068 rainbowbinary16242020 87290 87794 88214 rainbow6440 94794 96138 98882 ronald1024 143262 143906 147294 ronald1536 208964 210000 215894 ronald2048 236110 248192 256676 mqqsig256 309190 316778 324968 sflashv2 399112 402752 420966 ronald3072 460502 470554 475132 pflash1 515886 522130 536158 donald512 649264 652148 668514 ed25519 652106 669018 703780 pass769 663096 677614 685258 ronald4096 892038 911176 930510 pass863 1538642 1542730 1549198 donald1024 3059308 3066910 3080588 ed448goldilocks 3357004 3370500 3409252 ecdonaldp256 4526676 4531618 4543420 sphincs256 5451222 5487482 5600574 donald2048 7795886 7830830 7898282 ecdonaldp384 18410322 18511010 18547648 ecdonaldp521

Secret key bytes system 64 ed25519 84 donald512 96 ecdonaldp256 144 ecdonaldp384 144 ed448goldilocks 148 donald1024 193 pass769 198 ecdonaldp521 216 pass863 256 lattisigns512 265 rwb0fuz1024 276 donald2048 512 ronald512 593 mqqsig256 768 ronald768 1024 ronald1024 1088 sphincs256 ntrumls401x 1158 1 ntrumls439x 1305 1 1536 ronald1536 ntrumls593x 1742 1 2048 ronald2048 ntrumls743x 2267 1 2823 sflashv2 3072 ronald3072 4096 ronald4096 5550 pflash1 12768 3icp 23408 rainbowbinary256181212 86240 rainbow5640 94384 rainbowbinary16242020 150512 rainbow6440

Public key bytes system 32 ed25519 56 ed448goldilocks 64 donald512 64 ecdonaldp256 64 ronald512 96 ecdonaldp384 96 ronald768 128 donald1024 128 ronald1024 128 rwb0fuz1024 132 ecdonaldp521 192 ronald1536 256 donald2048 256 ronald2048 384 ronald3072 512 ronald4096 ntrumls401x 972 1 1056 sphincs256 ntrumls439x 1112 1 ntrumls593x 1478 1 1536 lattisigns512 1544 pass769 1776 pass863 ntrumls743x 1927 1 19266 sflashv2 30240 rainbowbinary256181212 35712 3icp 44160 rainbow5640 57600 rainbow6440 72124 pflash1 102912 rainbowbinary16242020 789552 mqqsig256

Signing 0 bytes bytes system ntrumls401x -1 1 ntrumls439x -1 1 ntrumls593x -1 1 ntrumls743x -1 1 32 mqqsig256 32 rainbowbinary16242020 36 3icp 37 pflash1 37 rainbow5640 37 sflashv2 40 donald1024 40 donald2048 40 donald512 42 rainbowbinary256181212 43 rainbow6440 64 ecdonaldp256 64 ed25519 64 ronald512 65 rwb0fuz1024 96 ecdonaldp384 96 ronald768 112 ed448goldilocks 128 ronald1024 132 ecdonaldp521 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1184 lattisigns512 1602 pass769 1790 pass863 41000 sphincs256

Signing 23 bytes bytes system 32 mqqsig256 32 rainbowbinary16242020 36 3icp 37 pflash1 37 rainbow5640 37 sflashv2 40 donald1024 40 donald2048 40 donald512 41 ronald512 42 rainbowbinary256181212 43 rainbow6440 64 ecdonaldp256 64 ed25519 65 rwb0fuz1024 73 ronald768 96 ecdonaldp384 105 ronald1024 112 ed448goldilocks 132 ecdonaldp521 169 ronald1536 233 ronald2048 361 ronald3072 489 ronald4096 1184 lattisigns512 1602 pass769 1790 pass863 41000 sphincs256

Signing many bytes bytes system 32 mqqsig256 32 rainbowbinary16242020 36 3icp 37 pflash1 37 rainbow5640 37 sflashv2 40 donald1024 40 donald2048 40 donald512 42 rainbowbinary256181212 43 rainbow6440 43 ronald1024 43 ronald1536 43 ronald2048 43 ronald3072 43 ronald4096 43 ronald512 43 ronald768 64 ecdonaldp256 64 ed25519 65 rwb0fuz1024 96 ecdonaldp384 112 ed448goldilocks 132 ecdonaldp521 1184 lattisigns512 1602 pass769 1790 pass863 41000 sphincs256

amd64; KnLanding (50671); 2016 Intel Xeon Phi 7210; 64 x 1300MHz; genji154, supercop-20170228

Cycles to generate a key pair quartile median quartile system 88465 88946 90298 lattisigns512 201058 201552 210561 ed25519 389584 394316 410969 pass769 437242 440180 460343 donald512 564356 579254 598377 pass863 733005 747643 771238 ed448goldilocks 1404364 1407081 1416571 donald1024 5058118 5066425 5078203 donald2048 9525074 9556950 9593285 ecdonaldp256 10500334 10533588 10611471 sphincs256 12709268 12724686 13893191 3icp 22206288 22255415 22360169 ecdonaldp384 16006822? 23292854? 34169239? ronald512 45984614 46009951 46033442 rainbowbinary256181212 52614991 52703404 52817492 ecdonaldp521 39685880? 57590494? 90522692? ronald768 79851343 80256566 80629835 rainbow5640 67119871? 102993150? 184289950? ronald1024 160250389 160382014 160526067 pflash1 182573001 184295280 184842437 rainbow6440 168761268? 184483767? 273204529? rwb0fuz1024 195902694 196045369 196215955 rainbowbinary16242020 221010075? 362246989? 500568523? ronald1536 537913857? 767878813? 1194066393? ronald2048 870816713 871058578 871528060 sflashv2 1081688491? 1251103919? 1362829286? mqqsig256 2109727373? 3423626622? 4787640403? ronald3072 5077160920? 8229217724? 13072857876? ronald4096

Cycles to sign 59 bytes quartile median quartile system 6669 6682 6682 mqqsig256 58292 58344 58422 rainbowbinary256181212 76128? 76375? 110968? rainbow5640 112775 114127 116168 rainbowbinary16242020 138359 140127 155298 rainbow6440 165373 165594 170820 sflashv2 187460 187746 192400 ed25519 552656 565448 579917 donald512 343239? 700895? 1018147? lattisigns512 756639 769106 789464 ed448goldilocks 497263? 969826? 1456910? pass769 1147705 1163669 1181466 ronald512 701597? 1363401? 2202083? pass863 1436331 1448954 1457963 donald1024 787813? 1697384? 2265900? 3icp 2229877 2251002 2272374 ronald768 3102515 3120806 3135743 ecdonaldp256 3567031 3605628 3650244 ronald1024 2273765? 4194983? 6977451? pflash1 4815278 4848883 4897971 donald2048 6827210 6835556 6844461 rwb0fuz1024 7119502 7173283 7317713 ecdonaldp384 9278009 9312680 9368333 ronald1536 16658915 16725397 16802708 ecdonaldp521 18793346 18856110 18924269 ronald2048 55746769 55822546 55917186 ronald3072 123452082 123552390 123674018 ronald4096 172824444 173775498 175370234 sphincs256

Cycles to verify 59 bytes quartile median quartile system 30030 30108 30277 rwb0fuz1024 52286 52364 55445 3icp 54119 54119 54132 rainbowbinary256181212 62322 62413 62673 rainbow5640 66937 67223 67808 lattisigns512 74971 75374 77090 ronald512 80262 80392 80964 rainbow6440 80392 80392 80405 rainbowbinary16242020 80392 80821 82797 ronald768 101218 101855 104455 ronald1024 152984 153725 156832 ronald1536 223847 226486 231296 ronald2048 247910 251160 263939 mqqsig256 306176 306514 313040 sflashv2 425971 429234 445549 ronald3072 494338 494936 505271 pflash1 557271 562705 580541 donald512 649623 667199 684593 pass769 695981 709644 735761 ed25519 711152 724360 728260 ronald4096 897676? 919633? 1265563? pass863 1659619 1669005 1675440 donald1024 2415504 2428205 2472743 ed448goldilocks 3577769 3590873 3606668 ecdonaldp256 4237324 4255823 4291560 sphincs256 5771480 5818007 5837481 donald2048 8339396 8363459 8582366 ecdonaldp384 19773845 19798753 19833970 ecdonaldp521

Secret key bytes system 64 ed25519 84 donald512 96 ecdonaldp256 144 ecdonaldp384 144 ed448goldilocks 148 donald1024 193 pass769 198 ecdonaldp521 216 pass863 256 lattisigns512 265 rwb0fuz1024 276 donald2048 512 ronald512 593 mqqsig256 768 ronald768 1024 ronald1024 1088 sphincs256 ntrumls401x 1158 1 ntrumls439x 1305 1 1536 ronald1536 ntrumls593x 1742 1 2048 ronald2048 ntrumls743x 2267 1 2823 sflashv2 3072 ronald3072 4096 ronald4096 5550 pflash1 12768 3icp 23408 rainbowbinary256181212 86240 rainbow5640 94384 rainbowbinary16242020 150512 rainbow6440

Public key bytes system 32 ed25519 56 ed448goldilocks 64 donald512 64 ecdonaldp256 64 ronald512 96 ecdonaldp384 96 ronald768 128 donald1024 128 ronald1024 128 rwb0fuz1024 132 ecdonaldp521 192 ronald1536 256 donald2048 256 ronald2048 384 ronald3072 512 ronald4096 ntrumls401x 972 1 1056 sphincs256 ntrumls439x 1112 1 ntrumls593x 1478 1 1536 lattisigns512 1544 pass769 1776 pass863 ntrumls743x 1927 1 19266 sflashv2 30240 rainbowbinary256181212 35712 3icp 44160 rainbow5640 57600 rainbow6440 72124 pflash1 102912 rainbowbinary16242020 789552 mqqsig256

Signing 0 bytes bytes system ntrumls401x -1 1 ntrumls439x -1 1 ntrumls593x -1 1 ntrumls743x -1 1 32 mqqsig256 32 rainbowbinary16242020 36 3icp 37 pflash1 37 rainbow5640 37 sflashv2 40 donald1024 40 donald2048 40 donald512 42 rainbowbinary256181212 43 rainbow6440 64 ecdonaldp256 64 ed25519 64 ronald512 65 rwb0fuz1024 96 ecdonaldp384 96 ronald768 112 ed448goldilocks 128 ronald1024 132 ecdonaldp521 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1184 lattisigns512 1602 pass769 1790 pass863 41000 sphincs256

Signing 23 bytes bytes system 32 mqqsig256 32 rainbowbinary16242020 36 3icp 37 pflash1 37 rainbow5640 37 sflashv2 40 donald1024 40 donald2048 40 donald512 41 ronald512 42 rainbowbinary256181212 43 rainbow6440 64 ecdonaldp256 64 ed25519 65 rwb0fuz1024 73 ronald768 96 ecdonaldp384 105 ronald1024 112 ed448goldilocks 132 ecdonaldp521 169 ronald1536 233 ronald2048 361 ronald3072 489 ronald4096 1184 lattisigns512 1602 pass769 1790 pass863 41000 sphincs256

Signing many bytes bytes system 32 mqqsig256 32 rainbowbinary16242020 36 3icp 37 pflash1 37 rainbow5640 37 sflashv2 40 donald1024 40 donald2048 40 donald512 42 rainbowbinary256181212 43 rainbow6440 43 ronald1024 43 ronald1536 43 ronald2048 43 ronald3072 43 ronald4096 43 ronald512 43 ronald768 64 ecdonaldp256 64 ed25519 65 rwb0fuz1024 96 ecdonaldp384 112 ed448goldilocks 132 ecdonaldp521 1184 lattisigns512 1602 pass769 1790 pass863 41000 sphincs256

amd64; BW+AES (406f1); 2016 Intel Xeon E5-2680 v4; 14 x 2400MHz; manny357, supercop-20170228

Cycles to generate a key pair quartile median quartile system 39364 39444 39548 lattisigns512 56552 56688 56840 ed25519 115144 115324 115652 donald512 199860 200180 200528 ed448goldilocks 271688 272912 274544 pass769 319248 321108 342552 donald1024 354220 358120 363464 pass863 1093132 1103388 1110008 donald2048 3361660 3366016 3372632 sphincs256 3474964 3498408 3585720 ecdonaldp256 7069656 7092312 7131236 ecdonaldp384 6972824? 12847972? 19918092? ronald512 14991524 15037972 15128740 ecdonaldp521 22081128? 25809548? 43053792? rwb0fuz1024 21203168? 33467788? 47869040? ronald768 33899312? 56257404? 83680764? ronald1024 83899288 84465012 84992608 pflash1 84394856? 128651968? 204032332? ronald1536 186941656 186994480 187086660 sflashv2 151144396? 285024776? 408121032? ronald2048 470149864? 611274068? 675115116? mqqsig224 552854844? 655450200? 760318596? mqqsig256 427236944? 797074292? 1354352660? ronald3072 1208986384? 2077352892? 3639807096? ronald4096

Cycles to sign 59 bytes quartile median quartile system 2300 2312 2324 mqqsig256 2416 2424 2432 mqqsig224 49928 50076 50160 ed25519 78760 79104 79292 sflashv2 176300 178880 181112 donald512 208400 208504 208792 ed448goldilocks 387276 391272 400252 donald1024 413972 424336 430356 ronald512 194600? 438272? 682644? lattisigns512 317436? 630840? 945436? pass769 723392 732952 745500 ronald768 413068? 820712? 1245236? pass863 886016 925428 942156 rwb0fuz1024 1125840 1140000 1150904 ronald1024 1143612 1147616 1157976 ecdonaldp256 1181684 1187744 1194100 donald2048 801812? 1353988? 2394944? pflash1 2309616 2323452 2382848 ecdonaldp384 2531784 2546892 2565368 ronald1536 4811224 4835616 4880696 ronald2048 4815852 4848824 4874096 ecdonaldp521 14270752 14340548 15944872 ronald3072 29936028 30032152 30152340 ronald4096 51817380 51848484 51949140 sphincs256

Cycles to verify 59 bytes quartile median quartile system 8200 8232 8276 rwb0fuz1024 24316 24544 24892 ronald512 25944 26704 26880 ronald768 31176 32352 32628 ronald1024 37740 37888 38048 lattisigns512 46296 47016 47568 ronald1536 62036 62356 64096 mqqsig224 63488 63888 65104 ronald2048 87704 89108 90516 mqqsig256 93532 93956 94528 sflashv2 114568 114988 115640 ronald3072 149240 152612 154200 donald512 166244 166400 166744 ed25519 185376 186928 188324 ronald4096 218512 218672 219488 pflash1 379352 383164 393260 donald1024 420052 420780 424284 pass769 543828 547528 551124 pass863 549184 549804 554364 ed448goldilocks 1236500 1241820 1249712 donald2048 1295096 1302532 1310320 ecdonaldp256 1705952 1710940 1712680 sphincs256 2657116 2662844 2682428 ecdonaldp384 5643544 5682128 5725660 ecdonaldp521

Secret key bytes system 64 ed25519 84 donald512 96 ecdonaldp256 144 ecdonaldp384 144 ed448goldilocks 148 donald1024 193 pass769 198 ecdonaldp521 216 pass863 256 lattisigns512 265 rwb0fuz1024 276 donald2048 512 ronald512 529 mqqsig224 593 mqqsig256 768 ronald768 1024 ronald1024 1088 sphincs256 ntrumls401x 1158 1 ntrumls439x 1305 1 1536 ronald1536 ntrumls593x 1742 1 2048 ronald2048 ntrumls743x 2267 1 2823 sflashv2 3072 ronald3072 4096 ronald4096 5550 pflash1

Public key bytes system 32 ed25519 56 ed448goldilocks 64 donald512 64 ecdonaldp256 64 ronald512 96 ecdonaldp384 96 ronald768 128 donald1024 128 ronald1024 128 rwb0fuz1024 132 ecdonaldp521 192 ronald1536 256 donald2048 256 ronald2048 384 ronald3072 512 ronald4096 ntrumls401x 972 1 1056 sphincs256 ntrumls439x 1112 1 ntrumls593x 1478 1 1536 lattisigns512 1544 pass769 1776 pass863 ntrumls743x 1927 1 19266 sflashv2 72124 pflash1 529242 mqqsig224 789552 mqqsig256

Signing 0 bytes bytes system ntrumls401x -1 1 ntrumls439x -1 1 ntrumls593x -1 1 ntrumls743x -1 1 28 mqqsig224 32 mqqsig256 37 pflash1 37 sflashv2 40 donald1024 40 donald2048 40 donald512 64 ecdonaldp256 64 ed25519 64 ronald512 65 rwb0fuz1024 96 ecdonaldp384 96 ronald768 112 ed448goldilocks 128 ronald1024 132 ecdonaldp521 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1184 lattisigns512 1602 pass769 1790 pass863 41000 sphincs256

Signing 23 bytes bytes system 28 mqqsig224 32 mqqsig256 37 pflash1 37 sflashv2 40 donald1024 40 donald2048 40 donald512 41 ronald512 64 ecdonaldp256 64 ed25519 65 rwb0fuz1024 73 ronald768 96 ecdonaldp384 105 ronald1024 112 ed448goldilocks 132 ecdonaldp521 169 ronald1536 233 ronald2048 361 ronald3072 489 ronald4096 1184 lattisigns512 1602 pass769 1790 pass863 41000 sphincs256

Signing many bytes bytes system 28 mqqsig224 32 mqqsig256 37 pflash1 37 sflashv2 40 donald1024 40 donald2048 40 donald512 43 ronald1024 43 ronald1536 43 ronald2048 43 ronald3072 43 ronald4096 43 ronald512 43 ronald768 64 ecdonaldp256 64 ed25519 65 rwb0fuz1024 96 ecdonaldp384 112 ed448goldilocks 132 ecdonaldp521 1184 lattisigns512 1602 pass769 1790 pass863 41000 sphincs256

aarch64; Cortex-A72 (418fd080); 2015 Mediatek MT8173; 2 x 2100MHz; a72, supercop-20170718

Cycles to generate a key pair quartile median quartile system 132350 132367 132442 ed25519 245662847 252846186 267519817 mqqsig160 319948894 320028315 320111753 sflashv2 365119262 378682296 392100973 mqqsig192 561751668 574994254 589053866 mqqsig224 826279797 840408935 854589345 mqqsig256

Cycles to sign 59 bytes quartile median quartile system 3739 3741 3809 mqqsig160 4484 4532 4563 mqqsig192 4983 5012 5028 mqqsig224 5546 5548 5561 mqqsig256 117107 117287 117855 sflashv2 137149 137158 137178 ed25519

Cycles to verify 59 bytes quartile median quartile system 76798 84971 91106 mqqsig192 102825? 113753? 150971? mqqsig160 128163 130354 135294 mqqsig224 139985 140235 140317 sflashv2 205270 232408 250036 mqqsig256 423922 424802 425824 ed25519

Secret key bytes system 64 ed25519 401 mqqsig160 465 mqqsig192 529 mqqsig224 593 mqqsig256 2823 sflashv2

Public key bytes system 32 ed25519 19266 sflashv2 206112 mqqsig160 333540 mqqsig192 529242 mqqsig224 789552 mqqsig256

Signing 0 bytes bytes system 20 mqqsig160 24 mqqsig192 28 mqqsig224 32 mqqsig256 37 sflashv2 64 ed25519

Signing 23 bytes bytes system 20 mqqsig160 24 mqqsig192 28 mqqsig224 32 mqqsig256 37 sflashv2 64 ed25519

Signing many bytes bytes system 20 mqqsig160 24 mqqsig192 28 mqqsig224 32 mqqsig256 37 sflashv2 64 ed25519

aarch64; Cortex-A57 (418fd071); 2015 NVIDIA Tegra X1; 4 x 1734MHz; lionheart30, supercop-20161026

Cycles to generate a key pair quartile median quartile system 162703 163552 164434 ed25519 517219 518316 519239 ed448goldilocks 558684 560967 563735 donald512 1659572 1661701 1665496 donald1024 1660321 1676840 1692766 ecdonaldp192 1750698 1762502 1774888 ecdonaldk163 1789382 1812934 1835781 ecdonaldp160 1820672 1834870 1846659 ecdonaldb163 2271448 2302382 2329036 ecdonaldp224 2342103 2353351 2368269 ecdonaldk233 2461990 2481570 2506771 ecdonaldb233 2537712 2557925 2586659 ecdonaldp256 5265569 5292400 5318267 ecdonaldk283 5251805 5294791 5349624 ecdonaldp384 5533245 5546577 5567365 donald2048 5680545 5698322 5718830 ecdonaldb283 10493968 10545439 10637418 ecdonaldp521 11387835 11412921 11449241 ecdonaldk409 12581479 12621332 12664638 ecdonaldb409 15977980 15981115 15994249 sphincs256 14955654? 19788340? 25940024? ronald512 24542593 24608996 24658568 ecdonaldk571 27279888 27322174 27379838 ecdonaldb571 35016808? 49622120? 70639970? ronald768 78310057 78423103 78568120 pflash1 57706341? 98243905? 149400812? ronald1024 183295072? 260642028? 420579025? ronald1536 352390344 354483617 358506360 sflashv2 662648384? 759287800? 961368387? mqqsig192 454985038? 793921163? 1223785133? ronald2048 955995144? 1045262071? 1214087368? mqqsig160 1056388035 1133131402 1178358111 mqqsig224 1480843833 1531741387 1629332569 mqqsig256 1805403523? 2947511771? 4540245874? ronald3072 6078297106? 10240457450? 15333813765? ronald4096

Cycles to sign 59 bytes quartile median quartile system 4620 4629 4635 mqqsig192 5522 5531 5538 mqqsig256 5674 5677 5763 mqqsig224 6034 6038 6070 mqqsig160 160486 160758 162214 ed25519 218938 219571 220183 sflashv2 527971 528720 531461 ed448goldilocks 634757 642846 649012 donald512 1092916 1104387 1126495 ronald512 1678520 1691504 1705428 donald1024 993895? 1720983? 3036698? pflash1 1740101 1761874 1782310 ecdonaldp192 1824177 1835098 1869797 ecdonaldk163 1884817 1889840 1899256 ecdonaldb163 1885217 1903112 1932175 ecdonaldp160 2323723 2342500 2358544 ronald768 2365364 2382577 2399898 ecdonaldp224 2407962 2420285 2441031 ecdonaldk233 2529251 2541748 2562890 ecdonaldb233 2658843 2681655 2706964 ecdonaldp256 4253235 4273675 4290938 ronald1024 5330468 5367521 5407760 donald2048 5370401 5394504 5416698 ecdonaldk283 5407556 5441743 5478834 ecdonaldp384 5777243 5798573 5819403 ecdonaldb283 10165088 10191330 10237720 ronald1536 10751357 10792902 10860245 ecdonaldp521 11568620 11586373 11629098 ecdonaldk409 12728837 12783912 12828663 ecdonaldb409 22442716 22497180 22541731 ronald2048 24851760 24886603 24937205 ecdonaldk571 27504735 27563517 27633013 ecdonaldb571 60768307 60870122 61031984 ronald3072 137188045 137828311 138143063 ronald4096 301194601 301356560 301466972 sphincs256

Cycles to verify 59 bytes quartile median quartile system 63179 63313 63493 ronald512 74445 74798 75001 ronald768 97553 98022 98843 ronald1024 123929 124405 125331 mqqsig160 158824 159487 160304 ronald1536 169025 173347 174034 sflashv2 181771 182780 183632 mqqsig192 217135 218182 220004 ronald2048 270586 272192 273963 mqqsig224 377645 384218 391514 pflash1 395381 397983 402786 mqqsig256 419935 421418 422867 ronald3072 422577 422958 423635 ed25519 645882 647287 649133 ronald4096 667659 673535 677810 donald512 1699537 1700753 1702819 ed448goldilocks 1904522 1913475 1925663 donald1024 2033838 2046018 2057015 ecdonaldp192 2177562 2198220 2208110 ecdonaldp160 2791888 2832498 2845120 ecdonaldp224 3158224 3178832 3208625 ecdonaldp256 3439295 3447130 3466223 ecdonaldk163 3586362 3599713 3609494 ecdonaldb163 3670928 3673780 3677004 sphincs256 4612342 4627474 4640872 ecdonaldk233 4825906 4840929 4860008 ecdonaldb233 6275294 6336850 6446338 donald2048 6417514 6443697 6483882 ecdonaldp384 10512345 10533589 10569329 ecdonaldk283 11283859 11307149 11334929 ecdonaldb283 12874932 12934828 12973066 ecdonaldp521 22731326 22804416 22870060 ecdonaldk409 25058044 25205305 25249885 ecdonaldb409 49203342 49284710 49440934 ecdonaldk571 54456280 54646142 54748084 ecdonaldb571

Secret key bytes system 60 ecdonaldp160 63 ecdonaldb163 63 ecdonaldk163 64 ed25519 72 ecdonaldp192 84 donald512 84 ecdonaldp224 90 ecdonaldb233 90 ecdonaldk233 96 ecdonaldp256 108 ecdonaldb283 108 ecdonaldk283 144 ecdonaldp384 144 ed448goldilocks 148 donald1024 156 ecdonaldb409 156 ecdonaldk409 198 ecdonaldp521 216 ecdonaldb571 216 ecdonaldk571 276 donald2048 401 mqqsig160 465 mqqsig192 512 ronald512 529 mqqsig224 593 mqqsig256 768 ronald768 1024 ronald1024 1088 sphincs256 ntrumls401x 1158 1 ntrumls439x 1305 1 1536 ronald1536 ntrumls593x 1742 1 2048 ronald2048 ntrumls743x 2267 1 2823 sflashv2 3072 ronald3072 4096 ronald4096 5550 pflash1

Public key bytes system 32 ed25519 40 ecdonaldp160 42 ecdonaldb163 42 ecdonaldk163 48 ecdonaldp192 56 ecdonaldp224 56 ed448goldilocks 60 ecdonaldb233 60 ecdonaldk233 64 donald512 64 ecdonaldp256 64 ronald512 72 ecdonaldb283 72 ecdonaldk283 96 ecdonaldp384 96 ronald768 104 ecdonaldb409 104 ecdonaldk409 128 donald1024 128 ronald1024 132 ecdonaldp521 144 ecdonaldb571 144 ecdonaldk571 192 ronald1536 256 donald2048 256 ronald2048 384 ronald3072 512 ronald4096 ntrumls401x 972 1 1056 sphincs256 ntrumls439x 1112 1 ntrumls593x 1478 1 ntrumls743x 1927 1 19266 sflashv2 72124 pflash1 206112 mqqsig160 333540 mqqsig192 529242 mqqsig224 789552 mqqsig256

Signing 0 bytes bytes system ntrumls401x -1 1 ntrumls439x -1 1 ntrumls593x -1 1 ntrumls743x -1 1 20 mqqsig160 24 mqqsig192 28 mqqsig224 32 mqqsig256 37 pflash1 37 sflashv2 40 donald1024 40 donald2048 40 donald512 40 ecdonaldp160 42 ecdonaldb163 42 ecdonaldk163 48 ecdonaldp192 56 ecdonaldp224 60 ecdonaldb233 60 ecdonaldk233 64 ecdonaldp256 64 ed25519 64 ronald512 72 ecdonaldb283 72 ecdonaldk283 96 ecdonaldp384 96 ronald768 104 ecdonaldb409 104 ecdonaldk409 112 ed448goldilocks 128 ronald1024 132 ecdonaldp521 144 ecdonaldb571 144 ecdonaldk571 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 41000 sphincs256

Signing 23 bytes bytes system 20 mqqsig160 24 mqqsig192 28 mqqsig224 32 mqqsig256 37 pflash1 37 sflashv2 40 donald1024 40 donald2048 40 donald512 40 ecdonaldp160 41 ronald512 42 ecdonaldb163 42 ecdonaldk163 48 ecdonaldp192 56 ecdonaldp224 60 ecdonaldb233 60 ecdonaldk233 64 ecdonaldp256 64 ed25519 72 ecdonaldb283 72 ecdonaldk283 73 ronald768 96 ecdonaldp384 104 ecdonaldb409 104 ecdonaldk409 105 ronald1024 112 ed448goldilocks 132 ecdonaldp521 144 ecdonaldb571 144 ecdonaldk571 169 ronald1536 233 ronald2048 361 ronald3072 489 ronald4096 41000 sphincs256

Signing many bytes bytes system 20 mqqsig160 24 mqqsig192 28 mqqsig224 32 mqqsig256 37 pflash1 37 sflashv2 40 donald1024 40 donald2048 40 donald512 40 ecdonaldp160 42 ecdonaldb163 42 ecdonaldk163 43 ronald1024 43 ronald1536 43 ronald2048 43 ronald3072 43 ronald4096 43 ronald512 43 ronald768 48 ecdonaldp192 56 ecdonaldp224 60 ecdonaldb233 60 ecdonaldk233 64 ecdonaldp256 64 ed25519 72 ecdonaldb283 72 ecdonaldk283 96 ecdonaldp384 104 ecdonaldb409 104 ecdonaldk409 112 ed448goldilocks 132 ecdonaldp521 144 ecdonaldb571 144 ecdonaldk571 41000 sphincs256

aarch64; Cortex-A53 (410fd034); 2015 Amlogic S905; 4 x 2000MHz; par3, supercop-20170718

Cycles to generate a key pair quartile median quartile system 197919 199497 203445 ed25519 93109422? 113933505? 146055998? rwb0fuz1024 403807502 431118107 481972199 mqqsig160 632562738 634784773 671407464 sflashv2 687349320 744742371 797276067 mqqsig192 1148732286 1219571037 1328506331 mqqsig224 1675317303 1784833789 2048951570 mqqsig256

Cycles to sign 59 bytes quartile median quartile system 5241 5266 5290 mqqsig160 5985 5999 6033 mqqsig192 6641 6683 6728 mqqsig224 7581 7589 7604 mqqsig256 204318 205171 209710 ed25519 235952 236928 260635 sflashv2 4186154 4217276 4282180 rwb0fuz1024

Cycles to verify 59 bytes quartile median quartile system 22796 22976 23143 rwb0fuz1024 223293 224991 237060 sflashv2 242459 249787 258601 mqqsig192 289988? 296344? 369982? mqqsig160 358393? 422899? 463307? mqqsig224 586570 590403 602459 ed25519 525298? 704995? 853307? mqqsig256

Secret key bytes system 64 ed25519 265 rwb0fuz1024 401 mqqsig160 465 mqqsig192 529 mqqsig224 593 mqqsig256 2823 sflashv2

Public key bytes system 32 ed25519 128 rwb0fuz1024 19266 sflashv2 206112 mqqsig160 333540 mqqsig192 529242 mqqsig224 789552 mqqsig256

Signing 0 bytes bytes system 20 mqqsig160 24 mqqsig192 28 mqqsig224 32 mqqsig256 37 sflashv2 64 ed25519 65 rwb0fuz1024

Signing 23 bytes bytes system 20 mqqsig160 24 mqqsig192 28 mqqsig224 32 mqqsig256 37 sflashv2 64 ed25519 65 rwb0fuz1024

Signing many bytes bytes system 20 mqqsig160 24 mqqsig192 28 mqqsig224 32 mqqsig256 37 sflashv2 64 ed25519 65 rwb0fuz1024