VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems

ECRYPT II

Measurements of public-key signature systems, indexed by machine

There is a separate page with more information about each signature system and each implementation. Designers and implementors interested in submitting new signature systems and new implementations of existing signature systems should read the call for submissions.

What do the graphs and tables mean?

• Time to verify a signed message.
• Time to sign a message.
• Time to compute a key pair.
• Space for a secret key.
• Space for a public key.
• Space for a signature on a short message.
• Space for a signature on a long message: more precisely, the difference between the space used by a long signed message and the space used by the original unsigned message. This can be smaller than the space for a signature on a short message for signature systems that support "message recovery."

Each computer also has a series of tables, eight tables for each computer. The first table shows the time, in cycles, to generate a key pair. Each row of the table lists

• the first quartile of many time measurements,
• the median of many time measurements,
• the third quartile of many time measurements, and
• the name of the signature system.

The computer name is linked to additional information about the implementations and compilers selected for benchmarking.

amd64; Zen (800f12); 2017 AMD EPYC 7601; 64 x 2200MHz; genji262, supercop-20171020

Cycles to generate a key pair quartile median quartile system 25212 25366 25498 lattisigns512 40040? 40106? 71368? ed25519 90024 90200 90882 donald512 230736 233354 258830 donald1024 203236 234696 252384 ed448goldilocks 243826 245608 295394 pass769 293150 296164 342716 pass863 486112 492844 500632 ecdonaldp256 753610 756382 772112 donald2048 3571128 3602522 3782394 sphincs256 3572734 3614380 3670964 ntrumls401x 4565770 4697946 4907122 3icp 5286248 5384038 5593346 ecdonaldp521 6092768 6147394 6237308 ecdonaldp384 8252178 8365962 8551048 ntrumls439x 8551092 8639554 8721174 rainbowbinary256181212 7536738? 10881904? 15095212? ronald512 14771350 15008422 15359322 ntrumls593x 13764102? 17500054? 25718792? ronald768 16290120? 19409236? 24910996? rwb0fuz1024 22865106 23344310 23943172 ntrumls743x 19407740? 32940666? 56689292? ronald1024 32998592 33499620 33955064 rainbow5640 36571018 36878842 37464482 rainbowbinary16242020 64499688 64968376 78679018 pflash1 81801258 87972192 92304696 rainbow6440 59240082? 92741418? 149969424? ronald1536 143197494 146741980 156141876 mqqsig160 103055370? 167120470? 309652552? ronald2048 170572468 170799640 175603494 sflashv2 198996820 204180746 210591678 mqqsig192 291920618 296806598 301937658 mqqsig224 389259662 396972730 408961718 mqqsig256 376489696? 576111866? 945541850? ronald3072 704914892? 1463096052? 2373102842? ronald4096

Cycles to sign 59 bytes quartile median quartile system 1672 1694 1716 mqqsig192 1782 1804 1826 mqqsig224 1870 1870 1892 mqqsig256 3058 3058 3102 mqqsig160 11770 11924 12034 rainbowbinary256181212 23650 24024 24442 rainbowbinary16242020 28666? 28952? 38148? rainbow5640 42988 43296 46046 ed25519 53856 54054 54538 rainbow6440 53834 54208 54890 sflashv2 137544 139964 141680 donald512 153010 154946 157432 ecdonaldp256 215248 226644 255420 ed448goldilocks 283448 289872 301708 donald1024 128392? 291720? 559130? 3icp 332090 339724 348414 ronald512 199144? 411004? 733876? lattisigns512 444686? 460526? 838464? ntrumls439x 292314? 536690? 828784? pass769 552156 559064 567622 ronald768 317790? 622952? 1428086? pflash1 349932? 645282? 969276? pass863 420684? 752862? 1428064? ntrumls401x 746966 755634 769736 ronald1024 748770 762674 766216 rwb0fuz1024 820490 827134 835670 donald2048 953018? 1085150? 1990802? ntrumls743x 723470? 1320880? 1957912? ntrumls593x 1425644 1443244 1513314 ecdonaldp521 1997842 2008402 2027630 ecdonaldp384 2048156 2071872 2101000 ronald1536 3195588 3216664 3253448 ronald2048 8744802 8809856 8975362 ronald3072 18586502 18636178 18706732 ronald4096 64154970 64646450 64734362 sphincs256

Cycles to verify 59 bytes quartile median quartile system 6776 6820 6864 rwb0fuz1024 7502 7634 7722 rainbowbinary256181212 8206 8294 8316 rainbowbinary16242020 12760 12826 13134 3icp 15774 15862 15994 rainbow5640 20592 20636 20724 rainbow6440 22352 22528 22770 ronald512 24442 24662 24948 ronald768 24574 25014 26334 mqqsig160 27544 28182 28468 ronald1024 35662 36124 36806 lattisigns512 36344 36718 37048 ronald1536 47718 48532 52492 ronald2048 49764 51524 53504 mqqsig192 60896 67386 74404 mqqsig224 77572 78496 79200 ronald3072 78628 78914 79970 sflashv2 113740 115698 120252 mqqsig256 120230 120978 122144 ronald4096 126632 127050 128370 donald512 134156? 137258? 190850? pflash1 148522 150194 150986 ed25519 174680 176220 180510 ntrumls401x 198132 200464 204842 ntrumls439x 283338 292688 299310 donald1024 306702 310618 314358 ecdonaldp256 322520 326106 337524 ntrumls593x 376750 381546 385506 pass769 425304 433202 459536 ntrumls743x 454520 460438 466290 pass863 541310 563178 625680 ed448goldilocks 866162 880484 906444 donald2048 1583450 1609828 1628154 sphincs256 2258168 2285910 2325136 ecdonaldp384 2813624 2863828 2935768 ecdonaldp521

Secret key bytes system 64 ed25519 84 donald512 96 ecdonaldp256 144 ecdonaldp384 144 ed448goldilocks 148 donald1024 193 pass769 198 ecdonaldp521 216 pass863 256 lattisigns512 265 rwb0fuz1024 276 donald2048 401 mqqsig160 465 mqqsig192 512 ronald512 529 mqqsig224 593 mqqsig256 768 ronald768 1024 ronald1024 1088 sphincs256 1158 ntrumls401x 1305 ntrumls439x 1536 ronald1536 1742 ntrumls593x 2048 ronald2048 2267 ntrumls743x 2823 sflashv2 3072 ronald3072 4096 ronald4096 5550 pflash1 12768 3icp 23408 rainbowbinary256181212 86240 rainbow5640 94384 rainbowbinary16242020 150512 rainbow6440

Public key bytes system 32 ed25519 56 ed448goldilocks 64 donald512 64 ecdonaldp256 64 ronald512 96 ecdonaldp384 96 ronald768 128 donald1024 128 ronald1024 128 rwb0fuz1024 132 ecdonaldp521 192 ronald1536 256 donald2048 256 ronald2048 384 ronald3072 512 ronald4096 972 ntrumls401x 1056 sphincs256 1112 ntrumls439x 1478 ntrumls593x 1536 lattisigns512 1544 pass769 1776 pass863 1927 ntrumls743x 19266 sflashv2 30240 rainbowbinary256181212 35712 3icp 44160 rainbow5640 57600 rainbow6440 72124 pflash1 102912 rainbowbinary16242020 206112 mqqsig160 333540 mqqsig192 529242 mqqsig224 789552 mqqsig256

Signing 0 bytes bytes system -1? ntrumls401x? ? -1? ntrumls439x? ? -1? ntrumls593x? ? -1? ntrumls743x? ? 20 mqqsig160 24 mqqsig192 28 mqqsig224 32 mqqsig256 32 rainbowbinary16242020 36 3icp 37 pflash1 37 rainbow5640 37 sflashv2 40 donald1024 40 donald2048 40 donald512 42 rainbowbinary256181212 43 rainbow6440 64 ecdonaldp256 64 ed25519 64 ronald512 65 rwb0fuz1024 96 ecdonaldp384 96 ronald768 112 ed448goldilocks 128 ronald1024 132 ecdonaldp521 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1184 lattisigns512 1602 pass769 1790 pass863 41000 sphincs256

Signing 23 bytes bytes system 20 mqqsig160 24 mqqsig192 28 mqqsig224 32 mqqsig256 32 rainbowbinary16242020 36 3icp 37 pflash1 37 rainbow5640 37 sflashv2 40 donald1024 40 donald2048 40 donald512 41 ronald512 42 rainbowbinary256181212 43 rainbow6440 64 ecdonaldp256 64 ed25519 65 rwb0fuz1024 73 ronald768 96 ecdonaldp384 105 ronald1024 112 ed448goldilocks 132 ecdonaldp521 169 ronald1536 233 ronald2048 361 ronald3072 489 ronald4096 853 ntrumls401x 988 ntrumls439x 1184 lattisigns512 1335 ntrumls593x 1602 pass769 1765 ntrumls743x 1790 pass863 41000 sphincs256

Signing many bytes bytes system 20 mqqsig160 24 mqqsig192 28 mqqsig224 32 mqqsig256 32 rainbowbinary16242020 36 3icp 37 pflash1 37 rainbow5640 37 sflashv2 40 donald1024 40 donald2048 40 donald512 42 rainbowbinary256181212 43 rainbow6440 43 ronald1024 43 ronald1536 43 ronald2048 43 ronald3072 43 ronald4096 43 ronald512 43 ronald768 64 ecdonaldp256 64 ed25519 65 rwb0fuz1024 96 ecdonaldp384 112 ed448goldilocks 132 ecdonaldp521 853 ntrumls401x 988 ntrumls439x 1184 lattisigns512 1335 ntrumls593x 1602 pass769 1765 ntrumls743x 1790 pass863 41000 sphincs256

amd64; Zen (800f11); 2017 AMD Ryzen 7 1700; 8 x 2994MHz; ryzen, supercop-20170904

Cycles to generate a key pair quartile median quartile system 45660 45720 45840 ed25519 208470 208560 209010 ed448goldilocks 300030 300840 301770 pass769 360480 361260 362700 pass863 4003230 4047090 4105380 ntrumls401x 5036670 5044350 5050800 sphincs256 5084730 5140050 5194500 ntrumls439x 8346270 8449350 8541420 ntrumls593x 12621330 12732420 12858810 ntrumls743x 18676050? 22547730? 29378910? rwb0fuz1024 74175390 74330460 74536590 pflash1 196403460 196652790 196853220 sflashv2

Cycles to sign 59 bytes quartile median quartile system 48960 48990 49050 ed25519 66000 66090 66210 sflashv2 219240 219360 219480 ed448goldilocks 563730? 578670? 1052400? ntrumls439x 343530? 673950? 698010? pass769 407520? 809400? 1233090? pass863 456120? 844560? 1235610? ntrumls401x 859680 871380 877530 rwb0fuz1024 439380? 1011780? 1730640? pflash1 1107630? 1150830? 2093910? ntrumls743x 843210? 1583610? 2338710? ntrumls593x 83460270 83488380 83552940 sphincs256

Cycles to verify 59 bytes quartile median quartile system 7260 7350 7410 rwb0fuz1024 100440 100800 101130 sflashv2 153660 158760 170490 pflash1 169410 170970 172020 ed25519 202890 203370 206760 ntrumls401x 232710 233280 237330 ntrumls439x 378570 379140 384300 ntrumls593x 476190 483300 485760 pass769 491370 492420 497880 ntrumls743x 560970 562290 563880 pass863 586590 587040 588630 ed448goldilocks 2485200 2517120 2530980 sphincs256

Secret key bytes system 64 ed25519 144 ed448goldilocks 193 pass769 216 pass863 265 rwb0fuz1024 1088 sphincs256 1158 ntrumls401x 1305 ntrumls439x 1742 ntrumls593x 2267 ntrumls743x 2823 sflashv2 5550 pflash1

Public key bytes system 32 ed25519 56 ed448goldilocks 128 rwb0fuz1024 972 ntrumls401x 1056 sphincs256 1112 ntrumls439x 1478 ntrumls593x 1544 pass769 1776 pass863 1927 ntrumls743x 19266 sflashv2 72124 pflash1

Signing 0 bytes bytes system -1? ntrumls401x? ? -1? ntrumls439x? ? -1? ntrumls593x? ? -1? ntrumls743x? ? 37 pflash1 37 sflashv2 64 ed25519 65 rwb0fuz1024 112 ed448goldilocks 1602 pass769 1790 pass863 41000 sphincs256

Signing 23 bytes bytes system 37 pflash1 37 sflashv2 64 ed25519 65 rwb0fuz1024 112 ed448goldilocks 853 ntrumls401x 988 ntrumls439x 1335 ntrumls593x 1602 pass769 1765 ntrumls743x 1790 pass863 41000 sphincs256

Signing many bytes bytes system 37 pflash1 37 sflashv2 64 ed25519 65 rwb0fuz1024 112 ed448goldilocks 853 ntrumls401x 988 ntrumls439x 1335 ntrumls593x 1602 pass769 1765 ntrumls743x 1790 pass863 41000 sphincs256

amd64; KabyLake (906e9); 2017 Intel Xeon E3-1220 v6; 4 x 3000MHz; kizomba, supercop-20171218

Cycles to generate a key pair quartile median quartile system 24332 24391 24443 lattisigns512 45004 45292 45538 ed25519 90379 90911 91405 donald512 89094 91093 93367 ecdonaldp256 144197 145055 146890 ecdonaldp224 152468 152758 153063 ed448goldilocks 213647 214172 215959 donald1024 259384 280148 298113 hector 293258 294079 294990 pass769 359168 359974 360865 pass863 563008 569592 575218 ecdonaldp160 613107 617724 622274 ecdonaldk163 643606 648357 654060 ecdonaldb163 659510 661551 667518 donald2048 664442 671839 678748 ecdonaldp192 699796 701811 704381 ecdonaldp521 769867 776712 794228 edons128k08n72nu8l4mu3 778524 785359 791909 ecdonaldk233 822268 825863 831353 ecdonaldb233 1389042 1398750 1407133 ecdonaldk283 1480352 1491815 1501621 ecdonaldb283 2096780 2112552 2130845 ecdonaldp384 2206321 2222827 2237341 ecdonaldk409 2360080 2371976 2389623 ecdonaldb409 2385449 2398726 2460449 edons128ref 2524887 2525627 2527248 sphincs256 5283918 5298892 5325851 ecdonaldk571 5734211 5747166 5770109 ecdonaldb571 6884507 6972028 7101193 ntrumls401x 8158288 8295466 8399387 ntrumls439x 9375969 9395846 9418282 rainbowbinary256181212 7587978? 11200786? 16286073? ronald512 14325099 14507432 14665893 ntrumls593x 17244016 17514754 17697905 tts6440 17669166? 22464542? 28766984? rwb0fuz1024 22572173 22833031 23042597 ntrumls743x 23521671 23606461 24045859 3icp 16570534? 27141879? 40897042? ronald768 28253496 28483773 28660927 rainbowbinary16242020 35080734 36833935 37759641 rainbow5640 22994042? 41047447? 68699379? ronald1024 84104691 85316844 87591335 rainbow6440 74360610? 151231139? 239307107? ronald1536 170699903 170728950 170754453 sflashv2 151867168? 244412345? 331362762? ronald2048 283855520 295773566 303017129 mqqsig160 442948778 462163813 475254206 mqqsig192 355909133? 577191562? 986507231? ronald3072 669494663 697298506 714179930 mqqsig224 963490533 993395345 1023495571 mqqsig256 893037750? 1437667341? 2629583333? ronald4096 3520467156 3616490095 3700084123 pqrsa15

Cycles to sign 59 bytes quartile median quartile system 1446 1458 1473 mqqsig160 1945 1956 1970 mqqsig192 1982 1990 2002 mqqsig256 2331 2345 2361 mqqsig224 13652 13718 13829 rainbowbinary256181212 19829 19961 20191 tts6440 20239 20428 20746 rainbowbinary16242020 33000 33290 34327 rainbow5640 48240 48464 48635 ed25519 55726 55992 56244 rainbow6440 75067 75180 75327 sflashv2 146081 150042 153513 donald512 160202 160312 160492 ed448goldilocks 161715 163454 165647 ecdonaldp256 208625 210254 211641 ecdonaldp224 134484? 232903? 538405? 3icp 273798 277728 279717 donald1024 277825 283643 296157 hector 321269? 332570? 944175? pass769 389228 394413 400510 ronald512 126369? 412366? 642056? lattisigns512 478044? 481611? 877643? ntrumls439x 608038 613361 620666 ecdonaldp160 654861 657302 663228 ecdonaldk163 672633 681653 688306 ronald768 681488 684325 689278 ecdonaldb163 714532 720474 725564 ecdonaldp192 735109 739619 743895 donald2048 390708? 773895? 1163704? pass863 436572? 784051? 1137790? ntrumls401x 809284 838038 848016 rwb0fuz1024 837101 845649 855078 ronald1024 847373 849954 855387 ecdonaldk233 884680 888760 896468 ecdonaldb233 1011563? 1022127? 1859758? ntrumls743x 1073730 1077641 1081724 ecdonaldp521 1219604 1226161 1243697 edons128k08n72nu8l4mu3 690843? 1246633? 1811674? ntrumls593x 1507032 1510553 1521161 ecdonaldk283 1596562 1605275 1625099 ecdonaldb283 2239708 2248722 2257907 ecdonaldp384 2284044 2302973 2320812 ronald1536 2411927 2426974 2439488 ecdonaldk409 2564435 2574147 2591869 ecdonaldb409 3268431 3285877 3309306 edons128ref 3344450 3362962 3389934 ronald2048 5702504 5721756 5748014 ecdonaldk571 6139260 6144861 6156232 ecdonaldb571 8481836 8518349 8555222 ronald3072 17377171 17429776 17538423 ronald4096 43168911 43256776 43349290 sphincs256 122122026 122195333 122260596 pqrsa15

Cycles to verify 59 bytes quartile median quartile system 7298 7570 7762 rwb0fuz1024 9959 10084 10334 rainbowbinary256181212 11065 11289 11481 rainbowbinary16242020 17306 17363 17472 3icp 18908 18990 20256 rainbow5640 18371 20414 22193 mqqsig160 21921 22589 22756 ronald512 23980 24107 24947 tts6440 23405 24213 25363 ronald768 24337 24840 25008 rainbow6440 27964 28154 28325 ronald1024 31910 31958 32042 lattisigns512 31252? 32536? 40605? mqqsig192 36772 38649 38879 ronald1536 41179 43640 44498 mqqsig224 50921 51093 51789 ronald2048 52016 52426 58490 mqqsig256 84504 84746 85137 ronald3072 96875 96992 97166 sflashv2 121026 121484 123248 donald512 131959 132678 133538 ronald4096 158390 158883 160085 ed25519 202750 203479 204205 ntrumls401x 221732 222338 223363 ntrumls439x 255980 260962 262873 donald1024 309160 311689 314800 ecdonaldp256 323054 325099 327036 ntrumls593x 371375 374730 379038 edons128k08n72nu8l4mu3 401949 405216 408173 ecdonaldp224 413796 418286 421893 pass769 469542 470484 471687 ntrumls743x 494214 496047 503307 pass863 499195 501340 502887 ed448goldilocks 691700 695363 704302 ecdonaldp160 752966 754387 756287 donald2048 822974 836389 842054 ecdonaldp192 912101 921175 933416 edons128ref 1088437 1091520 1094455 hector 1229901 1235583 1251633 ecdonaldk163 1253187 1255504 1267191 sphincs256 1286378 1294220 1299156 ecdonaldb163 1584061 1587539 1594940 ecdonaldk233 1660478 1669825 1680177 ecdonaldb233 1855166 1861315 1867714 ecdonaldp521 2576631 2605026 2615885 ecdonaldp384 2849530 2870637 2886379 ecdonaldk283 3028990 3055449 3064728 ecdonaldb283 4537395 4550607 4577841 ecdonaldk409 4835822 4854953 4876528 ecdonaldb409 10785565 10821691 10876073 ecdonaldk571 11698593 11715057 11756095 ecdonaldb571 17236354 17243101 17253240 pqrsa15

Secret key bytes system 29 hector 32 edons128k08n72nu8l4mu3 32 edons128ref 60 ecdonaldp160 63 ecdonaldb163 63 ecdonaldk163 64 ed25519 72 ecdonaldp192 84 donald512 84 ecdonaldp224 90 ecdonaldb233 90 ecdonaldk233 96 ecdonaldp256 108 ecdonaldb283 108 ecdonaldk283 144 ecdonaldp384 144 ed448goldilocks 148 donald1024 156 ecdonaldb409 156 ecdonaldk409 193 pass769 198 ecdonaldp521 216 ecdonaldb571 216 ecdonaldk571 216 pass863 256 lattisigns512 265 rwb0fuz1024 276 donald2048 401 mqqsig160 465 mqqsig192 512 ronald512 529 mqqsig224 593 mqqsig256 768 ronald768 1024 ronald1024 1088 sphincs256 1158 ntrumls401x 1305 ntrumls439x 1536 ronald1536 1742 ntrumls593x 2048 ronald2048 2267 ntrumls743x 2823 sflashv2 3072 ronald3072 4096 ronald4096 12768 3icp 16608 tts6440 23408 rainbowbinary256181212 86240 rainbow5640 94384 rainbowbinary16242020 98304 pqrsa15 150512 rainbow6440

Public key bytes system 32 ed25519 40 ecdonaldp160 42 ecdonaldb163 42 ecdonaldk163 48 ecdonaldp192 56 ecdonaldp224 56 ed448goldilocks 60 ecdonaldb233 60 ecdonaldk233 60 hector 64 donald512 64 ecdonaldp256 64 ronald512 72 ecdonaldb283 72 ecdonaldk283 96 ecdonaldp384 96 ronald768 104 ecdonaldb409 104 ecdonaldk409 128 donald1024 128 ronald1024 128 rwb0fuz1024 132 ecdonaldp521 144 ecdonaldb571 144 ecdonaldk571 192 ronald1536 256 donald2048 256 ronald2048 384 ronald3072 512 ronald4096 840 edons128k08n72nu8l4mu3 972 ntrumls401x 1056 sphincs256 1112 ntrumls439x 1478 ntrumls593x 1536 lattisigns512 1544 pass769 1776 pass863 1927 ntrumls743x 2576 edons128ref 19266 sflashv2 30240 rainbowbinary256181212 32768 pqrsa15 35712 3icp 44160 rainbow5640 57600 rainbow6440 57600 tts6440 102912 rainbowbinary16242020 206112 mqqsig160 333540 mqqsig192 529242 mqqsig224 789552 mqqsig256

Signing 0 bytes bytes system -1? ntrumls401x? ? -1? ntrumls439x? ? -1? ntrumls593x? ? -1? ntrumls743x? ? 20 mqqsig160 24 mqqsig192 28 mqqsig224 32 mqqsig256 32 rainbowbinary16242020 36 3icp 37 rainbow5640 37 sflashv2 40 donald1024 40 donald2048 40 donald512 40 ecdonaldp160 42 ecdonaldb163 42 ecdonaldk163 42 rainbowbinary256181212 43 rainbow6440 43 tts6440 48 ecdonaldp192 56 ecdonaldp224 60 ecdonaldb233 60 ecdonaldk233 64 ecdonaldp256 64 ed25519 64 ronald512 65 rwb0fuz1024 72 ecdonaldb283 72 ecdonaldk283 87 hector 96 ecdonaldp384 96 ronald768 104 ecdonaldb409 104 ecdonaldk409 112 ed448goldilocks 128 ronald1024 132 ecdonaldp521 144 ecdonaldb571 144 ecdonaldk571 192 ronald1536 232 edons128k08n72nu8l4mu3 256 ronald2048 304 edons128ref 384 ronald3072 512 ronald4096 1184 lattisigns512 1602 pass769 1790 pass863 32800 pqrsa15 41000 sphincs256

Signing 23 bytes bytes system 20 mqqsig160 24 mqqsig192 28 mqqsig224 32 mqqsig256 32 rainbowbinary16242020 36 3icp 37 rainbow5640 37 sflashv2 40 donald1024 40 donald2048 40 donald512 40 ecdonaldp160 41 ronald512 42 ecdonaldb163 42 ecdonaldk163 42 rainbowbinary256181212 43 rainbow6440 43 tts6440 48 ecdonaldp192 56 ecdonaldp224 60 ecdonaldb233 60 ecdonaldk233 64 ecdonaldp256 64 ed25519 65 rwb0fuz1024 72 ecdonaldb283 72 ecdonaldk283 73 ronald768 87 hector 96 ecdonaldp384 104 ecdonaldb409 104 ecdonaldk409 105 ronald1024 112 ed448goldilocks 132 ecdonaldp521 144 ecdonaldb571 144 ecdonaldk571 169 ronald1536 232 edons128k08n72nu8l4mu3 233 ronald2048 304 edons128ref 361 ronald3072 489 ronald4096 853 ntrumls401x 988 ntrumls439x 1184 lattisigns512 1335 ntrumls593x 1602 pass769 1765 ntrumls743x 1790 pass863 32800 pqrsa15 41000 sphincs256

Signing many bytes bytes system 20 mqqsig160 24 mqqsig192 28 mqqsig224 32 mqqsig256 32 rainbowbinary16242020 36 3icp 37 rainbow5640 37 sflashv2 40 donald1024 40 donald2048 40 donald512 40 ecdonaldp160 42 ecdonaldb163 42 ecdonaldk163 42 rainbowbinary256181212 43 rainbow6440 43 ronald1024 43 ronald1536 43 ronald2048 43 ronald3072 43 ronald4096 43 ronald512 43 ronald768 43 tts6440 48 ecdonaldp192 56 ecdonaldp224 60 ecdonaldb233 60 ecdonaldk233 64 ecdonaldp256 64 ed25519 65 rwb0fuz1024 72 ecdonaldb283 72 ecdonaldk283 87 hector 96 ecdonaldp384 104 ecdonaldb409 104 ecdonaldk409 112 ed448goldilocks 132 ecdonaldp521 144 ecdonaldb571 144 ecdonaldk571 232 edons128k08n72nu8l4mu3 304 edons128ref 853 ntrumls401x 988 ntrumls439x 1184 lattisigns512 1335 ntrumls593x 1602 pass769 1765 ntrumls743x 1790 pass863 32800 pqrsa15 41000 sphincs256

x86; normally amd64; KabyLake (906e9); 2017 Intel Xeon E3-1220 v6; 4 x 3000MHz; kizomba, supercop-20171218

Cycles to generate a key pair quartile median quartile system 282266 282575 283436 ed25519 800909 804194 808438 pass769 936331 940272 944857 pass863 1122982 1123800 1143246 ed448goldilocks 419315044 435296916 446244121 mqqsig192 627708043 640289637 658663381 mqqsig160 1750515315 1777249990 1812003221 mqqsig224 2682722381 2722149405 2786077344 mqqsig256

Cycles to sign 59 bytes quartile median quartile system 3742 3762 3792 mqqsig160 5039 5073 5112 mqqsig224 5187 5210 5244 mqqsig256 6772 6796 6829 mqqsig192 293986 294401 294980 ed25519 1150655 1151430 1153613 ed448goldilocks 1002111? 1996750? 3021246? pass769 1165027? 2322672? 2361877? pass863

Cycles to verify 59 bytes quartile median quartile system 44363 48931 51726 mqqsig160 55406 61486 62653 mqqsig192 81307 84476 86728 mqqsig224 97903 100385 108595 mqqsig256 811613 812754 815941 ed25519 1281586 1284202 1287173 pass769 1483954 1486672 1489915 pass863 4131524 4135979 4157038 ed448goldilocks

Secret key bytes system 64 ed25519 144 ed448goldilocks 193 pass769 216 pass863 401 mqqsig160 465 mqqsig192 529 mqqsig224 593 mqqsig256 ntrumls401x 1158 1 ntrumls439x 1305 1 ntrumls593x 1742 1 ntrumls743x 2267 1

Public key bytes system 32 ed25519 56 ed448goldilocks ntrumls401x 972 1 ntrumls439x 1112 1 ntrumls593x 1478 1 1544 pass769 1776 pass863 ntrumls743x 1927 1 206112 mqqsig160 333540 mqqsig192 529242 mqqsig224 789552 mqqsig256

Signing 0 bytes bytes system ntrumls401x -1 1 ntrumls439x -1 1 ntrumls593x -1 1 ntrumls743x -1 1 20 mqqsig160 24 mqqsig192 28 mqqsig224 32 mqqsig256 64 ed25519 112 ed448goldilocks 1602 pass769 1790 pass863

Signing 23 bytes bytes system 20 mqqsig160 24 mqqsig192 28 mqqsig224 32 mqqsig256 64 ed25519 112 ed448goldilocks 1602 pass769 1790 pass863

Signing many bytes bytes system 20 mqqsig160 24 mqqsig192 28 mqqsig224 32 mqqsig256 64 ed25519 112 ed448goldilocks 1602 pass769 1790 pass863

amd64; SL+512x2 (50654); 2017 Intel Xeon Gold 6150; 18 x 2700MHz; manny1024, supercop-20170904

Cycles to generate a key pair quartile median quartile system 38988 39106 39562 lattisigns512 45584 45742 45892 ed25519 110572 110928 111482 donald512 194432 194666 195020 ed448goldilocks 219414 225226 227784 pass769 277544 279938 287188 pass863 310076 311296 325876 donald1024 1079808 1087438 1115928 donald2048 2673218 2677338 2685204 sphincs256 3328984 3340352 3367250 ecdonaldp256 5515930 5528678 5685590 3icp 6864226 6932768 7145180 ecdonaldp384 10961994 10980356 11003460 rainbowbinary256181212 6717940? 11414586? 16502414? ronald512 14527534 14566334 14630868 ecdonaldp521 18203912? 22143076? 28304032? rwb0fuz1024 20635070? 32541240? 46372154? ronald768 42257020 42398784 42931932 rainbow5640 44864474 45135698 46776404 rainbowbinary16242020 31532674? 51979918? 72416956? ronald1024 80390804 80663948 80991184 pflash1 101890336 102589696 102815280 rainbow6440 57002944? 116885702? 184069952? ronald1536 176228524 177644508 179480238 sflashv2 173517670 178337582 186818262 mqqsig160 156869898? 254542368? 375426192? ronald2048 253888388 261677396 267870956 mqqsig192 356627344 366358880 372353064 mqqsig256 482875072 491463864 505731174 mqqsig224 545529424? 1002531554? 1486355490? ronald3072 1346739150? 2088570802? 3363148892? ronald4096

Cycles to sign 59 bytes quartile median quartile system 1654 1656 1658 mqqsig160 2098 2110 2120 mqqsig192 2182 2188 2196 mqqsig224 2184 2192 2214 mqqsig256 15612 15748 15870 rainbowbinary256181212 28620 28950 29726 rainbowbinary16242020 40898 41356 43062 rainbow5640 49106 49280 49406 ed25519 69042 69324 70640 sflashv2 71178 72294 73044 rainbow6440 167420 170904 174874 donald512 202266 202450 202838 ed448goldilocks 126648? 241130? 479558? lattisigns512 237710? 249634? 488772? pass769 300478? 317508? 614540? pass863 373686 376290 380952 donald1024 391634 401904 411778 ronald512 119020? 430236? 685516? 3icp 680204 691106 703232 ronald768 815014 825354 831986 rwb0fuz1024 512420? 1082698? 1946404? pflash1 1072230 1085560 1104532 ronald1024 1096398 1102770 1111332 ecdonaldp256 1161654 1172822 1186148 donald2048 2241312 2255272 2269240 ecdonaldp384 2433420 2448274 2473568 ronald1536 4653170 4668516 4694222 ronald2048 4661890 4685152 4699294 ecdonaldp521 13846868 13893480 14223216 ronald3072 29214562 29319412 29579856 ronald4096 44376602 46233296 46354358 sphincs256

Cycles to verify 59 bytes quartile median quartile system 7374 7502 7564 rwb0fuz1024 11446 11474 11522 rainbowbinary256181212 12500 12802 13082 rainbowbinary16242020 17466 17652 17790 3icp 21544 21666 21800 rainbow5640 21792 22034 22970 ronald512 24514 24742 24994 ronald768 27560 27668 27790 rainbow6440 30902 31568 32322 ronald1024 31770 32960 33884 mqqsig160 35868 35930 36348 lattisigns512 44712 45026 45326 ronald1536 44694 46910 53308 mqqsig192 58090 60006 61506 mqqsig224 63402 63874 64310 ronald2048 96164 96518 97702 sflashv2 99586 105478 117072 mqqsig256 113072 113498 114348 ronald3072 144534 146310 148002 donald512 161844 163948 165350 ed25519 185582 186114 187930 ronald4096 182226 187082 193980 pflash1 348382 349844 351754 pass769 365876 371242 375804 donald1024 435530 437430 441242 pass863 540920 542588 546628 ed448goldilocks 1221962 1233440 1275276 donald2048 1244968 1250662 1260566 ecdonaldp256 1393170 1410838 1433512 sphincs256 2547750 2575842 2586850 ecdonaldp384 5467184 5486788 5513512 ecdonaldp521

Secret key bytes system 64 ed25519 84 donald512 96 ecdonaldp256 144 ecdonaldp384 144 ed448goldilocks 148 donald1024 193 pass769 198 ecdonaldp521 216 pass863 256 lattisigns512 265 rwb0fuz1024 276 donald2048 401 mqqsig160 465 mqqsig192 512 ronald512 529 mqqsig224 593 mqqsig256 768 ronald768 1024 ronald1024 1088 sphincs256 ntrumls401x 1158 1 ntrumls439x 1305 1 1536 ronald1536 ntrumls593x 1742 1 2048 ronald2048 ntrumls743x 2267 1 2823 sflashv2 3072 ronald3072 4096 ronald4096 5550 pflash1 12768 3icp 23408 rainbowbinary256181212 86240 rainbow5640 94384 rainbowbinary16242020 150512 rainbow6440

Public key bytes system 32 ed25519 56 ed448goldilocks 64 donald512 64 ecdonaldp256 64 ronald512 96 ecdonaldp384 96 ronald768 128 donald1024 128 ronald1024 128 rwb0fuz1024 132 ecdonaldp521 192 ronald1536 256 donald2048 256 ronald2048 384 ronald3072 512 ronald4096 ntrumls401x 972 1 1056 sphincs256 ntrumls439x 1112 1 ntrumls593x 1478 1 1536 lattisigns512 1544 pass769 1776 pass863 ntrumls743x 1927 1 19266 sflashv2 30240 rainbowbinary256181212 35712 3icp 44160 rainbow5640 57600 rainbow6440 72124 pflash1 102912 rainbowbinary16242020 206112 mqqsig160 333540 mqqsig192 529242 mqqsig224 789552 mqqsig256

Signing 0 bytes bytes system ntrumls401x -1 1 ntrumls439x -1 1 ntrumls593x -1 1 ntrumls743x -1 1 20 mqqsig160 24 mqqsig192 28 mqqsig224 32 mqqsig256 32 rainbowbinary16242020 36 3icp 37 pflash1 37 rainbow5640 37 sflashv2 40 donald1024 40 donald2048 40 donald512 42 rainbowbinary256181212 43 rainbow6440 64 ecdonaldp256 64 ed25519 64 ronald512 65 rwb0fuz1024 96 ecdonaldp384 96 ronald768 112 ed448goldilocks 128 ronald1024 132 ecdonaldp521 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1184 lattisigns512 1602 pass769 1790 pass863 41000 sphincs256

Signing 23 bytes bytes system 20 mqqsig160 24 mqqsig192 28 mqqsig224 32 mqqsig256 32 rainbowbinary16242020 36 3icp 37 pflash1 37 rainbow5640 37 sflashv2 40 donald1024 40 donald2048 40 donald512 41 ronald512 42 rainbowbinary256181212 43 rainbow6440 64 ecdonaldp256 64 ed25519 65 rwb0fuz1024 73 ronald768 96 ecdonaldp384 105 ronald1024 112 ed448goldilocks 132 ecdonaldp521 169 ronald1536 233 ronald2048 361 ronald3072 489 ronald4096 1184 lattisigns512 1602 pass769 1790 pass863 41000 sphincs256

Signing many bytes bytes system 20 mqqsig160 24 mqqsig192 28 mqqsig224 32 mqqsig256 32 rainbowbinary16242020 36 3icp 37 pflash1 37 rainbow5640 37 sflashv2 40 donald1024 40 donald2048 40 donald512 42 rainbowbinary256181212 43 rainbow6440 43 ronald1024 43 ronald1536 43 ronald2048 43 ronald3072 43 ronald4096 43 ronald512 43 ronald768 64 ecdonaldp256 64 ed25519 65 rwb0fuz1024 96 ecdonaldp384 112 ed448goldilocks 132 ecdonaldp521 1184 lattisigns512 1602 pass769 1790 pass863 41000 sphincs256

amd64; SL+512x2 (50654); 2017 Intel Xeon Gold 6130; 32 x 2100MHz; genji239, supercop-20171020

Cycles to generate a key pair quartile median quartile system 40024 40542 40628 lattisigns512 45858 46032 46162 ed25519 110362 110846 111372 donald512 189210 189472 189808 ed448goldilocks 236066 237450 238606 pass769 309530 309884 312266 donald1024 309362 310566 313306 pass863 1072984 1078354 1086248 donald2048 2456382 2459950 2467388 sphincs256 3326506 3338662 3351258 ecdonaldp256 4945262 4953232 4966506 3icp 6842140 6872684 6975448 ecdonaldp384 9916118 9930870 10007888 rainbowbinary256181212 7647550? 11213868? 16934132? ronald512 14581364 14666412 14927250 ecdonaldp521 17534428? 25310146? 32201912? rwb0fuz1024 17800168? 27395940? 40486930? ronald768 39597126 39728098 39799234 rainbow5640 41738606 41821862 41899182 rainbowbinary16242020 30088614? 47615132? 66725102? ronald1024 78385022 79030132 79889634 pflash1 88768106 88897580 89018446 rainbow6440 88322544? 140607616? 218346526? ronald1536 167123810 172754940 179625680 mqqsig160 178140810 178404364 178630576 sflashv2 150984940? 248353116? 389343202? ronald2048 250736140 255332806 264919838 mqqsig192 395637084 403533400 414124854 mqqsig256 470340762 478462764 487342086 mqqsig224 529412856? 900672950? 1228450796? ronald3072 1161172766? 2007151060? 3808060536? ronald4096

Cycles to sign 59 bytes quartile median quartile system 1618 1624 1636 mqqsig160 2034 2042 2062 mqqsig192 2128 2136 2144 mqqsig256 2382 2396 2428 mqqsig224 14678 14750 14848 rainbowbinary256181212 27614 28112 29316 rainbowbinary16242020 39180? 39320? 49486? rainbow5640 49462 49592 49736 ed25519 60490 60580 60778 sflashv2 66480 66662 66946 rainbow6440 168864 171630 175360 donald512 197004 197234 197438 ed448goldilocks 131692? 357562? 956446? 3icp 372538 375132 378814 donald1024 388458 394168 401880 ronald512 230644? 460352? 668100? lattisigns512 250236? 489216? 720890? pass769 326000? 645218? 955684? pass863 335156? 685494? 1507148? pflash1 678910 686006 693970 ronald768 811826 819016 840978 rwb0fuz1024 1072588 1082418 1099502 ronald1024 1095000 1104512 1111284 ecdonaldp256 1158466 1163294 1170532 donald2048 2233530 2243672 2261380 ecdonaldp384 2423778 2445922 2467176 ronald1536 4649402 4682210 4757246 ronald2048 4665594 4696418 4731298 ecdonaldp521 13822992 13865290 13943696 ronald3072 29136090 29204326 29321062 ronald4096 41847322 41975440 42010416 sphincs256

Cycles to verify 59 bytes quartile median quartile system 7314 7396 7600 rwb0fuz1024 10990 11006 11026 rainbowbinary256181212 12230 12330 12560 rainbowbinary16242020 17346 17380 17420 3icp 20548 20586 20624 rainbow5640 22908 23022 23164 ronald512 25066 25174 25324 ronald768 27086 27204 27608 rainbow6440 30964 31106 31334 ronald1024 29026? 36638? 37540? mqqsig160 43906 44168 44462 lattisigns512 44496 44718 45144 ronald1536 50174 53122 55178 mqqsig192 53040 58348 62126 mqqsig224 62294 62996 63232 ronald2048 83676 84812 86298 mqqsig256 93604 93788 94452 sflashv2 112388 112710 113340 ronald3072 144290 145192 147118 donald512 161808 162806 164108 ed25519 184248 185294 186962 ronald4096 186086 191738 201054 pflash1 362786 364170 366782 pass769 367780 372992 377566 donald1024 455554 457272 459610 pass863 543274 544626 548104 ed448goldilocks 1226836 1231882 1242922 sphincs256 1214994 1234518 1252624 donald2048 1242356 1252256 1262860 ecdonaldp256 2563342 2581376 2604834 ecdonaldp384 5465850 5511840 5568054 ecdonaldp521

Secret key bytes system 64 ed25519 84 donald512 96 ecdonaldp256 144 ecdonaldp384 144 ed448goldilocks 148 donald1024 193 pass769 198 ecdonaldp521 216 pass863 256 lattisigns512 265 rwb0fuz1024 276 donald2048 401 mqqsig160 465 mqqsig192 512 ronald512 529 mqqsig224 593 mqqsig256 768 ronald768 1024 ronald1024 1088 sphincs256 ntrumls401x 1158 1 ntrumls439x 1305 1 1536 ronald1536 ntrumls593x 1742 1 2048 ronald2048 ntrumls743x 2267 1 2823 sflashv2 3072 ronald3072 4096 ronald4096 5550 pflash1 12768 3icp 23408 rainbowbinary256181212 86240 rainbow5640 94384 rainbowbinary16242020 150512 rainbow6440

Public key bytes system 32 ed25519 56 ed448goldilocks 64 donald512 64 ecdonaldp256 64 ronald512 96 ecdonaldp384 96 ronald768 128 donald1024 128 ronald1024 128 rwb0fuz1024 132 ecdonaldp521 192 ronald1536 256 donald2048 256 ronald2048 384 ronald3072 512 ronald4096 ntrumls401x 972 1 1056 sphincs256 ntrumls439x 1112 1 ntrumls593x 1478 1 1536 lattisigns512 1544 pass769 1776 pass863 ntrumls743x 1927 1 19266 sflashv2 30240 rainbowbinary256181212 35712 3icp 44160 rainbow5640 57600 rainbow6440 72124 pflash1 102912 rainbowbinary16242020 206112 mqqsig160 333540 mqqsig192 529242 mqqsig224 789552 mqqsig256

Signing 0 bytes bytes system ntrumls401x -1 1 ntrumls439x -1 1 ntrumls593x -1 1 ntrumls743x -1 1 20 mqqsig160 24 mqqsig192 28 mqqsig224 32 mqqsig256 32 rainbowbinary16242020 36 3icp 37 pflash1 37 rainbow5640 37 sflashv2 40 donald1024 40 donald2048 40 donald512 42 rainbowbinary256181212 43 rainbow6440 64 ecdonaldp256 64 ed25519 64 ronald512 65 rwb0fuz1024 96 ecdonaldp384 96 ronald768 112 ed448goldilocks 128 ronald1024 132 ecdonaldp521 192 ronald1536 256 ronald2048 384 ronald3072 512 ronald4096 1184 lattisigns512 1602 pass769 1790 pass863 41000 sphincs256

Signing 23 bytes bytes system 20 mqqsig160 24 mqqsig192 28 mqqsig224 32 mqqsig256 32 rainbowbinary16242020 36 3icp 37 pflash1 37 rainbow5640 37 sflashv2 40 donald1024 40 donald2048 40 donald512 41 ronald512 42 rainbowbinary256181212 43 rainbow6440 64 ecdonaldp256 64 ed25519 65 rwb0fuz1024 73 ronald768 96 ecdonaldp384 105 ronald1024 112 ed448goldilocks 132 ecdonaldp521 169 ronald1536 233 ronald2048 361 ronald3072 489 ronald4096 1184 lattisigns512 1602 pass769 1790 pass863 41000 sphincs256

Signing many bytes bytes system 20 mqqsig160 24 mqqsig192 28 mqqsig224 32 mqqsig256 32 rainbowbinary16242020 36 3icp 37 pflash1 37 rainbow5640 37 sflashv2 40 donald1024 40 donald2048 40 donald512 42 rainbowbinary256181212 43 rainbow6440 43 ronald1024 43 ronald1536 43 ronald2048 43 ronald3072 43 ronald4096 43 ronald512 43 ronald768 64 ecdonaldp256 64 ed25519 65 rwb0fuz1024 96 ecdonaldp384 112 ed448goldilocks 132 ecdonaldp521 1184 lattisigns512 1602 pass769 1790 pass863 41000 sphincs256

amd64; SL+512x2 (50654); 2017 Intel Core i7-7800X; 6 x 3500MHz; unstable; oki, supercop-20171218

Cycles to generate a key pair quartile median quartile system 23492 23552 23648 lattisigns512 39844 40092 40238 ed25519 134840 135066 135316 ed448goldilocks 273160 274030 274774 pass769 330688 331916 333536 pass863 2462606 2472174 2477310 sphincs256 6266526 6371522 6434724 ntrumls401x 7311542 7456510 7549518 ntrumls439x 12836268 12973896 13135334 ntrumls593x 20016678 20235340 20507990 ntrumls743x 151419298 151455246 151532044 sflashv2 209363944 209572668 209822138 pflash1 291261992 300295966 306310918 mqqsig192 364479480 373385058 384391192 mqqsig160 382573216 388838926 398502274 mqqsig224 1806508822 1836948640 1865323898 mqqsig256

Cycles to sign 59 bytes quartile median quartile system 1276 1284 1294 mqqsig160 1598 1608 1620 mqqsig192 1700 1708 1720 mqqsig224 2324 2334 2346 mqqsig256 42530 42764 42890 ed25519 64754 64856 64962 sflashv2 142132 142298 142456 ed448goldilocks 122604? 291470? 574208? lattisigns512 303018? 322148? 629804? pass769 389346? 392558? 698048? ntrumls439x 363330? 577812? 790642? pass863 372792? 656944? 955634? ntrumls401x 856592? 877242? 2254062? ntrumls743x 579212? 1033216? 1497970? ntrumls593x 1107764? 2455954? 5491112? pflash1 44904900 44949380 45002484 sphincs256

Cycles to verify 59 bytes quartile median quartile system 19642 23622 24276 mqqsig160 30270 30340 30422 lattisigns512 33222 35148 36938 mqqsig192 44904 46716 49346 mqqsig224 61300 62968 64868 mqqsig256 70976 71066 71354 sflashv2 141402 142150 142914 ed25519 159348 160108 160884 ntrumls401x 172308 172796 173598 ntrumls439x 247650 248754 251904 ntrumls593x 385424 387406 391084 ntrumls743x 391166 394502 401302 pass769 441724 443952 448348 ed448goldilocks 450444 455182 459510 pass863 616352 640980 677772 pflash1 1178318 1194936 1200250 sphincs256

Secret key bytes system 64 ed25519 144 ed448goldilocks 193 pass769 216 pass863 256 lattisigns512 401 mqqsig160 465 mqqsig192 529 mqqsig224 593 mqqsig256 1088 sphincs256 1158 ntrumls401x 1305 ntrumls439x 1742 ntrumls593x 2267 ntrumls743x 2823 sflashv2 5550 pflash1

Public key bytes system 32 ed25519 56 ed448goldilocks 972 ntrumls401x 1056 sphincs256 1112 ntrumls439x 1478 ntrumls593x 1536 lattisigns512 1544 pass769 1776 pass863 1927 ntrumls743x 19266 sflashv2 72124 pflash1 206112 mqqsig160 333540 mqqsig192 529242 mqqsig224 789552 mqqsig256

Signing 0 bytes bytes system -1? ntrumls401x? ? -1? ntrumls439x? ? -1? ntrumls593x? ? -1? ntrumls743x? ? 20 mqqsig160 24 mqqsig192 28 mqqsig224 32 mqqsig256 37 pflash1 37 sflashv2 64 ed25519 112 ed448goldilocks 1184 lattisigns512 1602 pass769 1790 pass863 41000 sphincs256

Signing 23 bytes bytes system 20 mqqsig160 24 mqqsig192 28 mqqsig224 32 mqqsig256 37 pflash1 37 sflashv2 64 ed25519 112 ed448goldilocks 853 ntrumls401x 988 ntrumls439x 1184 lattisigns512 1335 ntrumls593x 1602 pass769 1765 ntrumls743x 1790 pass863 41000 sphincs256

Signing many bytes bytes system 20 mqqsig160 24 mqqsig192 28 mqqsig224 32 mqqsig256 37 pflash1 37 sflashv2 64 ed25519 112 ed448goldilocks 853 ntrumls401x 988 ntrumls439x 1184 lattisigns512 1335 ntrumls593x 1602 pass769 1765 ntrumls743x 1790 pass863 41000 sphincs256