Implementation comparison: crypto_kem/frodokem640shake

Operationcrypto_kem
Primitivefrodokem640shake
Description FrodoKEM-640-SHAKE (NISTPQC round 2)
Designers Erdem Alkim
Joppe W. Bos (NXP Semiconductors)
Léo Ducas (CWI)
Patrick Longa (Microsoft Research)
Ilya Mironov (Google)
Michael Naehrig (Microsoft Research)
Valeria Nikolaenko
Chris Peikert (University of Michigan)
Ananth Raghunathan (Google)
Douglas Stebila (University of Waterloo)
Implementations optimized
x64
amd64 Bobcat amd64 K10 45nm amd64 K10 32nm amd64 Bulldozer amd64 Zen amd64 Zen 2 amd64 Zen 3 amd64 Golden Cove amd64 Tiger Lake amd64 Ice Lake amd64 Comet Lake amd64 Coffee Lake amd64 Kaby Lake amd64 Skylake amd64 Broadwell+AES amd64 Haswell+AES amd64 Ivy Bridge+AES amd64 Sandy Bridge+AES amd64 Sandy Bridge amd64 Core 2 45nm amd64 Core 2 65nm amd64 Gracemont amd64 Tremont amd64 Goldmont Plus amd64 Goldmont amd64 Airmont amd64 Silvermont amd64 Bonnell mipso32 Octeon II armeabi Cortex-A7 armeabi Cortex-A8 aarch64 Cortex-A53 aarch64 Cortex-A72 https://bench.cr.yp.to 20230909 implementations log2(trycycles) h8bobcat; 2 x 1650MHz; 2011 AMD G-T56N; 500f10 20230530 h3neo; 1 x 1700MHz; 2010 AMD Athlon II Neo K125; 100f63 20230530 hydra4; 4 x 2600MHz; 2011 AMD A6-3650; 300f10 20230530 hydra5; 4 x 2900MHz; 2011 AMD A8-3850; 300f10 20230530 saber214; 4 x 4000MHz; 2012 AMD FX-8350; 600f20 20230530 rumba7; 8 x 3000MHz; 2017 AMD Ryzen 7 1700; 800f11 20230530 rumba5; 6 x 3200MHz; 2017 AMD Ryzen 5 1600; 800f11 20230530 rumba3; 4 x 3100MHz; 2017 AMD Ryzen 3 1200; 800f11 20221122 dali; 2 x 1400MHz; 2020 AMD Athlon Silver 3050e; 820f01 20230530 rome0; 64 x 2250MHz; 2019 AMD EPYC 7742; 830f10 20230530 renoir; 6 x 3600MHz; 2022 AMD Ryzen 5 4500U; 860f01 20230530 lucienne; 4 x 2600MHz; 2021 AMD Ryzen 3 5300U; 860f81 20230530 beelink; 6 x 4062MHz; 2021 AMD Ryzen 5 5560U; a50f00 20221122 zen3; 16 x 3400MHz; 2020 AMD Ryzen 9 5950X; a20f10 20220213 cezanne; 6 x 3900MHz; 2021 AMD Ryzen 5 PRO 5650G; a50f00 20230530 alder; 4 x 3300MHz; 2022 Intel Core i3-12100; 90675-00 20230530 alder2,1f626960,5600000; 2 x 1600MHz; 2022 Intel Core i3-1215U, P cores; 906a4-40 20230530 panther; 4 x 2800MHz; 2020 Intel Core i7-1165G7; 806c1 20230530 icelake2; 4 x 1000MHz; 2019 Intel Core i3-1035G1; 706e5 20221005 cubi10; 2 x 2100MHz; 2019 Intel Core i3-10110U; 806ec 20230530 comet; 2 x 2100MHz; 2019 Intel Core i3-10110U; 806ec 20230530 r24000; 4 x 3300MHz; 2018 Intel Xeon E-2124; 906ea 20230530 kizomba; 4 x 3000MHz; 2017 Intel Xeon E3-1220 v6; 906e9 20230530 whosthere; 2 x 2400MHz; 2017 Intel Core i3-7100; 806e9 20221122 samba; 4 x 3000MHz; 2015 Intel Xeon E3-1220 v5; 506e3 20230530 bolero; 8 x 1700MHz; 2016 Intel Xeon E5-2609 v4; 406f1 20230530 shoe; 2 x 1900MHz; 2015 Intel Core i3-5005U; 306d4 20230530 hiphop; 4 x 3100MHz; 2013 Intel Xeon E3-1220 v3; 306c3 20230530 titan0; 4 x 3500MHz; 2013 Intel Xeon E3-1275 V3; 306c3 20230530 hunsnivy; 2 x 1800MHz; 2012 Intel Core i5-3427U; 306a9 20230530 hydra8; 4 x 3500MHz; 2012 Intel Xeon E3-1275 V2; 306a9 20230530 hydra7; 4 x 3100MHz; 2011 Intel Xeon E3-1225; 206a7 20230530 h6sandy; 2 x 2100MHz; 2011 Intel Core i3-2310M; 206a7 20221122 wolfdale; 2 x 3060MHz; 2009 Intel Core 2 Duo E7600; 1067a 20230530 trident; 2 x 2000MHz; 2007 Intel Core 2 Duo T7300; 6fb 20230530 margaux; 4 x 2404MHz; 2007 Intel Core 2 Quad Q6600; 6fb 20230530 alder2,1f626960,3300000; 4 x 1600MHz; 2022 Intel Core i3-1215U, E cores; 906a4-20 20230530 jasper2; 2 x 1100MHz; 2021 Intel Celeron N4500; 906c0 20230530 jasper3; 4 x 2000MHz; 2021 Intel Celeron N5105; 906c0 20230530 jasper; 4 x 1100MHz; 2021 Intel Pentium Silver N6000; 906c0 20230530 gemini; 2 x 1100MHz; 2019 Intel Celeron N4020; 706a8 20230530 wooden; 4 x 1500MHz; 2016 Intel Celeron J3455; 506c9 20230530 nucnuc; 4 x 1600MHz; 2015 Intel Pentium N3700; 406c3 20230530 cherry; 4 x 1440MHz; 2016 Intel Atom x5-Z8350; 406c4 20230530 h8atom; 2 x 1866MHz; 2011 Intel Atom D2500; 30661 20230530 h2atom; 1 x 1000MHz; 2010 Intel Atom N455; 106ca 20230530 gcc23; 2 x 2000MHz; 2011 Cavium Octeon II CN6120; cnmips64v2 20230530 erpro8fsf2; 2 x 2000MHz; 2011 Cavium Octeon II CN6120; cnmips64v2 20220213 berry2; 4 x 900MHz; 2016 Broadcom BCM2836; 410fc075 20230530 bblack; 1 x 1000MHz; 2012 TI Sitara XAM3359AZCZ100; 413fc082 20230530 pi3aplus; 4 x 1400MHz; 2018 Broadcom BCM2837B0; 410fd034 20230530 pi3bplus; 4 x 1400MHz; 2018 Broadcom BCM2837B0; 410fd034 20230530 pi4b; 4 x 1500MHz; 2019 Broadcom BCM2711; 410fd083 20230530 23 24 25 26 27 T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:optimized T:x64 T:x64 T:x64 T:x64 T:x64 T:x64 T:x64 T:x64 T:x64 T:x64 T:x64 T:x64 T:x64 T:x64 T:x64 T:x64 T:x64 T:x64 T:x64 T:x64 T:x64 T:x64 T:x64 T:x64 T:x64 T:x64 crypto_kem frodokem640shake

Details (compiler options, compilation failures, error messages, etc.)

amd64; Bobcat (500f10); 2011 AMD G-T56N; 2 x 1650MHz; h8bobcat, supercop-20230530
amd64; K10 45nm (100f63); 2010 AMD Athlon II Neo K125; 1 x 1700MHz; h3neo, supercop-20230530
amd64; K10 32nm (300f10); 2011 AMD A6-3650; 4 x 2600MHz; hydra4, supercop-20230530
amd64; K10 32nm (300f10); 2011 AMD A8-3850; 4 x 2900MHz; hydra5, supercop-20230530
amd64; Bulldozer (600f20); 2012 AMD FX-8350; 4 x 4000MHz; saber214, supercop-20230530
amd64; Zen (800f11); 2017 AMD Ryzen 7 1700; 8 x 3000MHz; rumba7, supercop-20230530
amd64; Zen (800f11); 2017 AMD Ryzen 5 1600; 6 x 3200MHz; rumba5, supercop-20230530
amd64; Zen (800f11); 2017 AMD Ryzen 3 1200; 4 x 3100MHz; rumba3, supercop-20221122
amd64; Zen (820f01); 2020 AMD Athlon Silver 3050e; 2 x 1400MHz; dali, supercop-20230530
amd64; Zen 2 (830f10); 2019 AMD EPYC 7742; 64 x 2250MHz; rome0, supercop-20230530
amd64; Zen 2 (860f01); 2022 AMD Ryzen 5 4500U; 6 x 3600MHz; renoir, supercop-20230530
amd64; Zen 2 (860f81); 2021 AMD Ryzen 3 5300U; 4 x 2600MHz; lucienne, supercop-20230530
amd64; Zen 3 (a50f00); 2021 AMD Ryzen 5 5560U; 6 x 4062MHz; beelink, supercop-20221122
amd64; Zen 3 (a20f10); 2020 AMD Ryzen 9 5950X; 16 x 3400MHz; zen3, supercop-20220213
amd64; Zen 3 (a50f00); 2021 AMD Ryzen 5 PRO 5650G; 6 x 3900MHz; cezanne, supercop-20230530
amd64; Golden Cove (90675-00); 2022 Intel Core i3-12100; 4 x 3300MHz; alder, supercop-20230530
amd64; Golden Cove (906a4-40); 2022 Intel Core i3-1215U, P cores; 2 x 1600MHz; alder2,1f626960,5600000, supercop-20230530
amd64; Tiger Lake (806c1); 2020 Intel Core i7-1165G7; 4 x 2800MHz; panther, supercop-20230530
amd64; Ice Lake (706e5); 2019 Intel Core i3-1035G1; 4 x 1000MHz; icelake2, supercop-20221005
amd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; cubi10, supercop-20230530
amd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; comet, supercop-20230530
amd64; Coffee Lake (906ea); 2018 Intel Xeon E-2124; 4 x 3300MHz; r24000, supercop-20230530
amd64; Kaby Lake (906e9); 2017 Intel Xeon E3-1220 v6; 4 x 3000MHz; kizomba, supercop-20230530
amd64; Kaby Lake (806e9); 2017 Intel Core i3-7100; 2 x 2400MHz; whosthere, supercop-20221122
amd64; Skylake (506e3); 2015 Intel Xeon E3-1220 v5; 4 x 3000MHz; samba, supercop-20230530
amd64; Broadwell+AES (406f1); 2016 Intel Xeon E5-2609 v4; 8 x 1700MHz; bolero, supercop-20230530
amd64; Broadwell+AES (306d4); 2015 Intel Core i3-5005U; 2 x 1900MHz; shoe, supercop-20230530
amd64; Haswell+AES (306c3); 2013 Intel Xeon E3-1220 v3; 4 x 3100MHz; hiphop, supercop-20230530
amd64; Haswell+AES (306c3); 2013 Intel Xeon E3-1275 V3; 4 x 3500MHz; titan0, supercop-20230530
amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3427U; 2 x 1800MHz; hunsnivy, supercop-20230530
amd64; Ivy Bridge+AES (306a9); 2012 Intel Xeon E3-1275 V2; 4 x 3500MHz; hydra8, supercop-20230530
amd64; Sandy Bridge+AES (206d7); 2012 Intel Xeon E5-2660; 8 x 2200MHz; unstable; gcc123, supercop-20220213
amd64; Sandy Bridge+AES (206a7); 2011 Intel Xeon E3-1225; 4 x 3100MHz; hydra7, supercop-20230530
amd64; Sandy Bridge (206a7); 2011 Intel Core i3-2310M; 2 x 2100MHz; h6sandy, supercop-20221122
amd64; Core 2 45nm (1067a); 2009 Intel Core 2 Duo E7600; 2 x 3060MHz; wolfdale, supercop-20230530
amd64; Core 2 45nm (10676); 2007 Intel Xeon X5450; 8 x 2992MHz; unstable; gcc14, supercop-20220506
amd64; Core 2 65nm (6fb); 2007 Intel Core 2 Duo T7300; 2 x 2000MHz; trident, supercop-20230530
amd64; Core 2 65nm (6fb); 2007 Intel Core 2 Quad Q6600; 4 x 2404MHz; margaux, supercop-20230530
amd64; Gracemont (906a4-20); 2022 Intel Core i3-1215U, E cores; 4 x 1600MHz; alder2,1f626960,3300000, supercop-20230530
amd64; Tremont (906c0); 2021 Intel Celeron N4500; 2 x 1100MHz; jasper2, supercop-20230530
amd64; Tremont (906c0); 2021 Intel Celeron N5105; 4 x 2000MHz; jasper3, supercop-20230530
amd64; Tremont (906c0); 2021 Intel Pentium Silver N6000; 4 x 1100MHz; jasper, supercop-20230530
amd64; Goldmont Plus (706a8); 2019 Intel Celeron N4020; 2 x 1100MHz; gemini, supercop-20230530
amd64; Goldmont (506c9); 2016 Intel Celeron J3455; 4 x 1500MHz; wooden, supercop-20230530
amd64; Airmont (406c3); 2015 Intel Pentium N3700; 4 x 1600MHz; nucnuc, supercop-20230530
amd64; Silvermont (406c4); 2016 Intel Atom x5-Z8350; 4 x 1440MHz; cherry, supercop-20230530
amd64; Bonnell (30661); 2011 Intel Atom D2500; 2 x 1866MHz; h8atom, supercop-20230530
amd64; Bonnell (106ca); 2010 Intel Atom N455; 1 x 1000MHz; h2atom, supercop-20230530
armeabi; Cortex-A7 (410fc075); 2016 Broadcom BCM2836; 4 x 900MHz; berry2, supercop-20230530
armeabi; Cortex-A8 (413fc082); 2012 TI Sitara XAM3359AZCZ100; 1 x 1000MHz; bblack, supercop-20230530
armeabi; Cortex-A9+NEON (412fc09a); 2011 Freescale i.MX6 Quad; 4 x 1200MHz; unstable; novena, supercop-20220506
aarch64; Skylark (503f0002); 2018 Ampere eMAG 8180; 32 x 3300MHz; unstable; gcc185, supercop-20230530
aarch64; Cortex-A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3aplus, supercop-20230530
aarch64; Cortex-A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3bplus, supercop-20230530
aarch64; Cortex-A72 (410fd083); 2019 Broadcom BCM2711; 4 x 1500MHz; pi4b, supercop-20230530