Implementation comparison: crypto_kem/frodokem640shake

Operationcrypto_kem
Primitivefrodokem640shake
Description FrodoKEM-640-SHAKE (NISTPQC round 2)
Designers Erdem Alkim
Joppe W. Bos (NXP Semiconductors)
Léo Ducas (CWI)
Patrick Longa (Microsoft Research)
Ilya Mironov (Google)
Michael Naehrig (Microsoft Research)
Valeria Nikolaenko
Chris Peikert (University of Michigan)
Ananth Raghunathan (Google)
Douglas Stebila (University of Waterloo)
Implementations optimized
x64

Click on graph for high-resolution PDF.

Details (compiler options, compilation failures, error messages, etc.)

amd64; Zen3 (a50f00); 2021 AMD Ryzen 5 5560U; 6 x 4062MHz; beelink, supercop-20221122
amd64; Zen3 (a20f10); 2020 AMD Ryzen 9 5950X; 16 x 3400MHz; zen3, supercop-20220213
amd64; Zen3 (a50f00); 2021 AMD Ryzen 5 PRO 5650G; 6 x 3900MHz; cezanne, supercop-20230530
amd64; Zen2 (830f10); 2019 AMD EPYC 7742; 64 x 2250MHz; unstable; colossus6, supercop-20210125
amd64; Zen2 (830f10); 2019 AMD EPYC 7742; 64 x 2250MHz; rome0, supercop-20230530
amd64; Zen2 (860f01); 2022 AMD Ryzen 5 4500U; 6 x 3600MHz; renoir, supercop-20230530
amd64; Zen2 (860f81); 2021 AMD Ryzen 3 5300U; 4 x 2600MHz; lucienne, supercop-20230530
amd64; Zen2 (830f10); 2019 AMD EPYC 7742; 64 x 2250MHz; unstable; colossus7, supercop-20210125
amd64; Zen2 (830f10); 2019 AMD EPYC 7702; 64 x 2000MHz; genji346, supercop-20191017
amd64; Zen+ (800f82); 2018 AMD Ryzen 7 2700; 8 x 3200MHz; unstable; gcc68, supercop-20191221
amd64; Zen (800f11); 2017 AMD Ryzen 7 1700; 8 x 3000MHz; rumba7, supercop-20230530
amd64; Zen (800f11); 2017 AMD Ryzen 5 1600; 6 x 3200MHz; rumba5, supercop-20230530
amd64; Zen (800f11); 2017 AMD Ryzen 3 1200; 4 x 3100MHz; rumba3, supercop-20221122
amd64; Zen (800f12); 2017 AMD EPYC 7451; 48 x 2300MHz; unstable; firefly, supercop-20201130
amd64; Zen (810f10); 2018 AMD Ryzen 5 2400G; 4 x 3600MHz; unstable; gcc67, supercop-20210125
amd64; Zen (810f81); 2019 AMD Ryzen Embedded R1606G; 2 x 2600MHz; unstable; ghf51, supercop-20200702
amd64; Zen (800f12); 2017 AMD EPYC 7601; 64 x 2200MHz; unstable; genji262, supercop-20191017
amd64; Zen (800f12); 2017 AMD EPYC 7501; 32 x 2000MHz; unstable; colossus5, supercop-20210125
amd64; CascadeLake (50657); 2019 Intel Xeon Gold 6230; 40 x 2100MHz; unstable; ygritte, supercop-20200525
amd64; CascadeLake (50657); 2019 Intel Core i9-10980XE; 18 x 3000MHz; avx512imath, supercop-20210125
amd64; CascadeLake (50657); 2019 Intel Xeon Gold 6248; 20 x 2500MHz; pmnod076, supercop-20191017
amd64; CascadeLake (50657); 2019 Intel Xeon Gold 6230; 40 x 2100MHz; unstable; cel02, supercop-20201130
amd64; TigerLake (806c1); 2020 Intel Core i7-1165G7; 4 x 2800MHz; panther, supercop-20221122
amd64; TigerLake (806c1); 2020 Intel Core i7-1165G7; 4 x 2800MHz; unstable; pascalinspiron75062n1, supercop-20210125
amd64; SL+512x2 (50654); 2017 Intel Xeon Gold 6148; 40 x 2400MHz; genji548, supercop-20191017
amd64; SL+512x2 (50654); 2017 Intel Xeon Gold 6130; 32 x 2100MHz; genji239, supercop-20191017
amd64; IceLake (706e5); 2019 Intel Core i3-1035G1; 4 x 1000MHz; icelake2, supercop-20221005
amd64; IceLake (706e5); 2020 Intel Core i5-1030NG7; 4 x 1100MHz; icelake, supercop-20200826
amd64; CometLake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; cubi10, supercop-20221122
amd64; CometLake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; comet, supercop-20230530
amd64; CoffeeLake (906ea); 2018 Intel Xeon E-2124; 4 x 3300MHz; r24000, supercop-20221019
amd64; KabyLake (906e9); 2017 Intel Xeon E3-1220 v6; 4 x 3000MHz; kizomba, supercop-20230530
amd64; KabyLake (806e9); 2017 Intel Core i3-7100; 2 x 2400MHz; whosthere, supercop-20221122
amd64; KabyLake (806e9); 2017 Intel Core i7-7567U; 2 x 3500MHz; unstable; intelnuci7, supercop-20211108
amd64; KabyLake (906e9); 2018 Intel Core i7-8809G; 4 x 3100MHz; intelnuci8, supercop-20191017
amd64; KabyLake (906e9); 2018 Intel Core i7-8705G; 4 x 3100MHz; unstable; sectionthirtyone, supercop-20191221
amd64; Skylake (506e3); 2015 Intel Xeon E3-1220 v5; 4 x 3000MHz; samba, supercop-20221122
amd64; BW+AES (306d4); 2015 Intel Core i3-5005U; 2 x 1900MHz; shoe, supercop-20230530
amd64; BW+AES (406f1); 2016 Intel Xeon E5-2609 v4; 8 x 1700MHz; bolero, supercop-20221122
amd64; BW+AES (306d4); 2015 Intel Core i5-5350U; 2 x 1800MHz; unstable; luft, supercop-20200702
amd64; HW+AES (306c3); 2013 Intel Xeon E3-1275 V3; 4 x 3500MHz; titan0, supercop-20221122
amd64; HW+AES (306c3); 2013 Intel Xeon E3-1220 v3; 4 x 3100MHz; hiphop, supercop-20221122
amd64; HW+AES (306f2); 2014 Intel Xeon E5-1630 v3; 4 x 3700MHz; unstable; wyvern1, supercop-20191221
amd64; IB+AES (306a9); 2012 Intel Xeon E3-1275 V2; 4 x 3500MHz; hydra8, supercop-20221122
amd64; IB+AES (306a9); 2012 Intel Xeon E3-1265L V2; 4 x 2500MHz; hedera, supercop-20210326
amd64; SB+AES (206d7); 2012 Intel Xeon E5-2660; 8 x 2200MHz; unstable; gcc123, supercop-20220213
amd64; Sandy Bridge (206a7); 2011 Intel Core i3-2310M; 2 x 2100MHz; h6sandy, supercop-20221122
amd64; Piledriver (610f01); 2012 AMD A10-4655M; 2 x 2000MHz; h9trinity, supercop-20200618
amd64; Bulldozer (600f20); 2012 AMD FX-8350; 4 x 4000MHz; saber214, supercop-20220506
amd64; C2 45nm (10676); 2007 Intel Xeon X5450; 8 x 2992MHz; unstable; gcc14, supercop-20220506
amd64; C2 65nm (6fb); 2007 Intel Core 2 Quad Q6600; 4 x 2404MHz; margaux, supercop-20221122
amd64; C2 65nm (6fb); 2007 Intel Core 2 Quad Q6600; 4 x 2394MHz; latour, supercop-20201130
amd64; K10 32nm (300f10); 2011 AMD A8-3850; 4 x 2900MHz; hydra5, supercop-20191221
amd64; Tremont (906c0); 2021 Intel Celeron N5105; 4 x 2000MHz; jasper3, supercop-20221122
amd64; Tremont (906c0); 2021 Intel Pentium Silver N6000; 4 x 1100MHz; jasper, supercop-20221122
amd64; Goldmont (506c9); 2016 Intel Celeron J3455; 4 x 1500MHz; wooden, supercop-20230530
amd64; Goldmont (506f1); 2017 Intel Atom C3955; 16 x 2100MHz; scw1b63b1, supercop-20191017
amd64; Airmont (406c3); 2015 Intel Pentium N3700; 4 x 1600MHz; nucnuc, supercop-20230530
amd64; Bobcat (500f10); 2011 AMD G-T56N; 2 x 1650MHz; h8bobcat, supercop-20221122
amd64; Bobcat (500f20); 2011 AMD E-450; 2 x 1650MHz; h4e450, supercop-20200618
amd64; Atom (30661); 2011 Intel Atom D2500; 2 x 1866MHz; h8atom, supercop-20200618
riscv64; U54 (sifive,u54-mc); 2017 SiFive Freedom U540; 4 x 1400MHz; hifiveunleashedriscv, supercop-20191221
riscv64; U54 (sifive,u54-mc); 2017 SiFive Freedom U540; 4 x 1000MHz; riscvunleashed000, supercop-20210326
armeabi; Cortex-A7 (410fc075); 2016 Broadcom BCM2836; 4 x 900MHz; berry2, supercop-20230530
armeabi; Cortex-A8 (413fc082); 2012 TI Sitara XAM3359AZCZ100; 1 x 1000MHz; bblack, supercop-20221122
armeabi; Cortex-A9+NEON (412fc09a); 2011 Freescale i.MX6 Quad; 4 x 1200MHz; unstable; novena, supercop-20220506
armeabi; Cortex-A9+NEON (412fc09a); 2011 Freescale i.MX6 Quad; 4 x 1200MHz; novenablue, supercop-20200702
armeabi; Cortex-A9+NEON (413fc090); 2012 Samsung Exynos 4412?; 4 x 1200MHz; artik, supercop-20191221
armeabi; Cortex-A17 (410fc0d1); 2014 Rockchip RK3288; 4 x 1800MHz; unstable; tinkerboards, supercop-20191221
armeabi; Cortex-A17 (410fc0d1); 2014 Rockchip RK3288; 4 x 1512MHz; unstable; tinkerboard, supercop-20191221
aarch64; Skylark (503f0002); 2018 Ampere eMAG 8180; 32 x 3300MHz; unstable; gcc185, supercop-20221122
aarch64; A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3aplus, supercop-20230530
aarch64; A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3bplus, supercop-20221122
aarch64; A53+crypto (410fd034); 2017 HiSilicon Kirin 970; 8 x 1844MHz; unstable; hikey970, supercop-20191221
aarch64; A53+crypto (410fd034); 2015 NXP QorIQ LS1088; 8 x 1600MHz; ten64, supercop-20210604
aarch64; A53+crypto (410fd034); 2016 Amlogic S905X; 4 x 1512MHz; lepotatoamls905xcc, supercop-20191221
aarch64; A53+crypto (410fd034); 2018 NXP i.MX 8M; 4 x 1500MHz; googlecoraldev, supercop-20191221
aarch64; A53+crypto (410fd034); 2017 Rockchip RK3328; 4 x 1512MHz; renegaderocrk3328cc, supercop-20191221
aarch64; A53+crypto (410fd034); 2016 HiSilicon Kirin 960; 8 x 1844MHz; unstable; hikey960spare, supercop-20191221
aarch64; A57+crypto (418fd071); 2015 NVIDIA Tegra X1; 4 x 1734MHz; jetsontx1, supercop-20191017
aarch64; A57+crypto (411fd072); 2016 AMD Opteron A1100; 8 x 2000MHz; warbear0, supercop-20200826
aarch64; A72 (410fd083); 2019 Broadcom BCM2711; 4 x 1500MHz; pi4b, supercop-20221122
aarch64; A72 (410fd083); 2019 Broadcom BCM2711; 4 x 1500MHz; rpi4ubuntu64, supercop-20191221
aarch64; ThunderX2 (431f0af1); 2018 Cavium ThunderX2 CN9980; 64 x 2500MHz; pmnod145, supercop-20191017
aarch64; Firestorm (610f0230); 2020 Apple M1; 4 x 3200MHz; unstable; minimac, supercop-20211108
armeabi; A53 (410fd034); 2016 Broadcom BCM2837; 4 x 1200MHz; unstable; rpi3b, supercop-20191221