Implementation comparison: crypto_kem/sntrup1277

Operationcrypto_kem
Primitivesntrup1277
Description Streamlined NTRU Prime 7879^1277 (NISTPQC round 3, same as in round 2)
Designers
Implementations avx
compact
factored Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
ref Alphabetical order:
Daniel J. Bernstein
Chitchanok Chuengsatiansup
Tanja Lange
Christine van Vredendaal
amd64 Bobcat amd64 K10 45nm amd64 K10 32nm amd64 Bulldozer amd64 Zen amd64 Zen 2 amd64 Zen 3 amd64 Zen 4 amd64 Raptor Cove amd64 Golden Cove amd64 Tiger Lake amd64 Ice Lake amd64 Comet Lake amd64 Coffee Lake amd64 Kaby Lake amd64 Skylake amd64 Broadwell+AES amd64 Haswell+AES amd64 Ivy Bridge+AES amd64 Sandy Bridge+AES amd64 Sandy Bridge amd64 Core 2 45nm amd64 Core 2 65nm amd64 Gracemont amd64 Tremont amd64 Goldmont Plus amd64 Goldmont amd64 Airmont amd64 Silvermont amd64 Bonnell riscv64 U54 mipso32 Octeon II armeabi ARM1176 armeabi Cortex-A7 armeabi Cortex-A8 armeabi Cortex-A17 aarch64 Cortex-A53 aarch64 Cortex-A72 https://bench.cr.yp.to 20250506 implementations log2(trycycles) h8bobcat; 2 x 1650MHz; 2011 AMD G-T56N; 500f10 20241022 h3neo; 1 x 1700MHz; 2010 AMD Athlon II Neo K125; 100f63 20241022 hydra4; 4 x 2600MHz; 2011 AMD A6-3650; 300f10 20250415 hydra5; 4 x 2900MHz; 2011 AMD A8-3850; 300f10 20250415 saber214; 4 x 4000MHz; 2012 AMD FX-8350; 600f20 20250415 rumba5; 6 x 3200MHz; 2017 AMD Ryzen 5 1600; 800f11 20241022 rumba7; 8 x 3000MHz; 2017 AMD Ryzen 7 1700; 800f11 20250415 dali; 2 x 1400MHz; 2020 AMD Athlon Silver 3050e; 820f01 20250415 rumba3; 4 x 3100MHz; 2017 AMD Ryzen 3 1200; 800f11 20221122 renoir; 6 x 3600MHz; 2022 AMD Ryzen 5 4500U; 860f01 20250415 lucienne; 4 x 2600MHz; 2021 AMD Ryzen 3 5300U; 860f81 20250415 rome0; 64 x 2250MHz; 2019 AMD EPYC 7742; 830f10 20250415 beelink; 6 x 4062MHz; 2021 AMD Ryzen 5 5560U; a50f00 20221122 cezanne; 6 x 3900MHz; 2021 AMD Ryzen 5 PRO 5650G; a50f00 20250415 zen3; 16 x 3400MHz; 2020 AMD Ryzen 9 5950X; a20f10 20220213 hertz; 8 x 3800MHz; 2023 AMD Ryzen 7 7700; a60f12 20250415 raptor; 6 x 4800MHz; 2023 Intel Core i7-13700H, P cores; b06a2 20231107 alder2,1f626960,5600000; 2 x 1600MHz; 2022 Intel Core i3-1215U, P cores; 906a4-40 20250415 alder; 4 x 3300MHz; 2022 Intel Core i3-12100; 90675-00 20250415 panther; 4 x 2800MHz; 2020 Intel Core i7-1165G7; 806c1 20250415 icelake2; 4 x 1000MHz; 2019 Intel Core i3-1035G1; 706e5 20221005 know; 2 x 2100MHz; 2019 Intel Core i3-10110U; 806ec 20250415 comet; 2 x 2100MHz; 2019 Intel Core i3-10110U; 806ec 20241022 cubi10; 2 x 2100MHz; 2019 Intel Core i3-10110U; 806ec 20250415 r24000; 4 x 3300MHz; 2018 Intel Xeon E-2124; 906ea 20250415 like; 2 x 3000MHz; 2018 Intel Core i3-8109U; 806ea 20250415 kizomba; 4 x 3000MHz; 2017 Intel Xeon E3-1220 v6; 906e9 20250415 whosthere; 2 x 2400MHz; 2017 Intel Core i3-7100; 806e9 20221122 samba; 4 x 3000MHz; 2015 Intel Xeon E3-1220 v5; 506e3 20250415 bolero; 8 x 1700MHz; 2016 Intel Xeon E5-2609 v4; 406f1 20250415 shoe; 2 x 1900MHz; 2015 Intel Core i3-5005U; 306d4 20250415 prodesk; 4 x 2000MHz; 2013 Intel Core i7-4765T; 306c3 20241022 speed2supercop; 4 x 3400MHz; 2013 Intel Core i7-4770; 306c3 20250415 hiphop; 4 x 3100MHz; 2013 Intel Xeon E3-1220 v3; 306c3 20231107 titan0; 4 x 3500MHz; 2013 Intel Xeon E3-1275 V3; 306c3 20250415 hunsnivy; 2 x 1800MHz; 2012 Intel Core i5-3427U; 306a9 20250415 hydra8; 4 x 3500MHz; 2012 Intel Xeon E3-1275 V2; 306a9 20250415 hydra7; 4 x 3100MHz; 2011 Intel Xeon E3-1225; 206a7 20250415 h6sandy; 2 x 2100MHz; 2011 Intel Core i3-2310M; 206a7 20241022 wolfdale; 2 x 3060MHz; 2009 Intel Core 2 Duo E7600; 1067a 20250415 trident; 2 x 2000MHz; 2007 Intel Core 2 Duo T7300; 6fb 20250307 margaux; 4 x 2404MHz; 2007 Intel Core 2 Quad Q6600; 6fb 20250415 alder2,1f626960,3300000; 4 x 1600MHz; 2022 Intel Core i3-1215U, E cores; 906a4-20 20250415 jasper2; 2 x 1100MHz; 2021 Intel Celeron N4500; 906c0 20250415 jasper; 4 x 1100MHz; 2021 Intel Pentium Silver N6000; 906c0 20250415 jasper3; 4 x 2000MHz; 2021 Intel Celeron N5105; 906c0 20250415 gemini; 2 x 1100MHz; 2019 Intel Celeron N4020; 706a8 20250307 wooden; 4 x 1500MHz; 2016 Intel Celeron J3455; 506c9 20241022 nucnuc; 4 x 1600MHz; 2015 Intel Pentium N3700; 406c3 20241022 cherry; 4 x 1440MHz; 2016 Intel Atom x5-Z8350; 406c4 20250415 h8atom; 2 x 1866MHz; 2011 Intel Atom D2500; 30661 20250415 h2atom; 1 x 1000MHz; 2010 Intel Atom N455; 106ca 20241022 riscvunleashed000; 4 x 1000MHz; 2017 SiFive Freedom U540; sifive,u54-mc 20240107 gcc23; 2 x 2000MHz; 2011 Cavium Octeon II CN6120; cnmips64v2 20230530 erpro8fsf2; 2 x 2000MHz; 2011 Cavium Octeon II CN6120; cnmips64v2 20220213 berry0; 1 x 1000MHz; 2011 Broadcom BCM2835; 410fb767 20240909 berry2; 4 x 900MHz; 2016 Broadcom BCM2836; 410fc075 20240909 bblack; 1 x 1000MHz; 2012 TI Sitara XAM3359AZCZ100; 413fc082 20241022 tinker; 4 x 1800MHz; 2014 Rockchip RK3288; 410fc0d1 20241022 pi3aplus; 4 x 1400MHz; 2018 Broadcom BCM2837B0; 410fd034 20240808 pi3bplus; 4 x 1400MHz; 2018 Broadcom BCM2837B0; 410fd034 20241022 pi4b; 4 x 1500MHz; 2019 Broadcom BCM2711; 410fd083 20241022 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref ref ref ref ref ref ref ref ref ref ref ref ref ref ref ref ref ref ref ref ref ref ref ref ref ref ref ref ref ref ref ref ref ref ref ref ref ref ref ref ref ref ref T!!!compact T!!!compact T!!!compact T!!!factored T!!!factored T:compact T:compact T:compact T:compact T:compact T:compact T:compact T:compact T:compact T:compact T:compact T:compact T:compact T:compact T:compact T:compact T:compact T:compact T:compact T:compact T:compact T:compact T:compact T:compact T:compact T:compact T:compact T:compact T:compact T:compact T:factored T:factored T:factored T:factored T:factored T:factored T:factored T:factored T:factored T:factored T:factored T:factored T:factored T:factored T:factored T:factored T:factored T:factored T:factored T:factored T:factored T:factored T:factored T:factored T:factored T:factored T:factored T:factored compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact compact factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored factored avx avx avx avx avx avx avx avx avx avx avx avx avx avx avx avx avx avx avx avx avx avx avx avx avx avx avx avx avx avx avx avx crypto_kem sntrup1277

Details (compiler options, compilation failures, error messages, etc.)

amd64; Bobcat (500f10); 2011 AMD G-T56N; 2 x 1650MHz; h8bobcat, supercop-20241022: 18x test failure, 18x passed TIMECOP
amd64; K10 45nm (100f63); 2010 AMD Athlon II Neo K125; 1 x 1700MHz; h3neo, supercop-20241022: 18x test failure, 18x passed TIMECOP
amd64; K10 32nm (300f10); 2011 AMD A6-3650; 4 x 2600MHz; hydra4, supercop-20250415: 8x test failure, 10x compiler output, 18x passed TIMECOP
amd64; K10 32nm (300f10); 2011 AMD A8-3850; 4 x 2900MHz; hydra5, supercop-20250415: 18x test failure, 18x passed TIMECOP
amd64; Bulldozer (600f20); 2012 AMD FX-8350; 4 x 4000MHz; saber214, supercop-20250415: 18x test failure, 27x TIMECOP error
amd64; Zen (800f11); 2017 AMD Ryzen 5 1600; 6 x 3200MHz; rumba5, supercop-20241022: 36x passed TIMECOP
amd64; Zen (800f11); 2017 AMD Ryzen 7 1700; 8 x 3000MHz; rumba7, supercop-20250415: 36x passed TIMECOP
amd64; Zen (820f01); 2020 AMD Athlon Silver 3050e; 2 x 1400MHz; dali, supercop-20250415: 5x compiler output, 31x passed TIMECOP
amd64; Zen (800f11); 2017 AMD Ryzen 3 1200; 4 x 3100MHz; rumba3, supercop-20221122
amd64; Zen 2 (860f01); 2022 AMD Ryzen 5 4500U; 6 x 3600MHz; renoir, supercop-20250415: 5x compiler output, 31x passed TIMECOP
amd64; Zen 2 (860f81); 2021 AMD Ryzen 3 5300U; 4 x 2600MHz; lucienne, supercop-20250415: 5x compiler output, 31x passed TIMECOP
amd64; Zen 2 (830f10); 2019 AMD EPYC 7742; 64 x 2250MHz; rome0, supercop-20250415: 5x compiler output, 31x passed TIMECOP
amd64; Zen 3 (a20f10); 2020 AMD Ryzen 5 5600X; 6 x 3700MHz; unstable; spawn, supercop-20231215
amd64; Zen 3 (a50f00); 2021 AMD Ryzen 5 5560U; 6 x 4062MHz; beelink, supercop-20221122
amd64; Zen 3 (a50f00); 2021 AMD Ryzen 5 PRO 5650G; 6 x 3900MHz; cezanne, supercop-20250415: 5x compiler output, 31x passed TIMECOP
amd64; Zen 3 (a20f10); 2020 AMD Ryzen 9 5950X; 16 x 3400MHz; zen3, supercop-20220213
amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20250415: 24x TIMECOP error
amd64; Raptor Cove (b06a2); 2023 Intel Core i7-13700H, P cores; 6 x 4800MHz; raptor, supercop-20231107
amd64; Golden Cove (906a4-40); 2022 Intel Core i3-1215U, P cores; 2 x 1600MHz; alder2,1f626960,5600000, supercop-20250415: 5x compiler output, 31x passed TIMECOP
amd64; Golden Cove (90675-00); 2022 Intel Core i3-12100; 4 x 3300MHz; alder, supercop-20250415: 12x passed TIMECOP, 24x TIMECOP error
amd64; Tiger Lake (806c1); 2020 Intel Core i7-1165G7; 4 x 2800MHz; panther, supercop-20250415: 5x compiler output, 31x TIMECOP error
amd64; Ice Lake (706e5); 2019 Intel Core i3-1035G1; 4 x 1000MHz; icelake2, supercop-20221005
amd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; know, supercop-20250415: 36x passed TIMECOP
amd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; comet, supercop-20241022: 36x passed TIMECOP
amd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; cubi10, supercop-20250415: 5x compiler output, 31x passed TIMECOP
amd64; Coffee Lake (906ea); 2018 Intel Xeon E-2124; 4 x 3300MHz; r24000, supercop-20250415: 36x passed TIMECOP
amd64; Coffee Lake (806ea); 2018 Intel Core i3-8109U; 2 x 3000MHz; like, supercop-20250415: 36x passed TIMECOP
amd64; Kaby Lake (906e9); 2017 Intel Xeon E3-1220 v6; 4 x 3000MHz; kizomba, supercop-20250415: 36x passed TIMECOP
amd64; Kaby Lake (806e9); 2017 Intel Core i3-7100; 2 x 2400MHz; whosthere, supercop-20221122
amd64; Skylake (506e3); 2015 Intel Xeon E3-1220 v5; 4 x 3000MHz; samba, supercop-20250415: 36x passed TIMECOP
amd64; Broadwell+AES (406f1); 2016 Intel Xeon E5-2609 v4; 8 x 1700MHz; bolero, supercop-20250415: 36x passed TIMECOP
amd64; Broadwell+AES (306d4); 2015 Intel Core i3-5005U; 2 x 1900MHz; shoe, supercop-20250415: 5x compiler output, 31x passed TIMECOP
amd64; Haswell+AES (306c3); 2013 Intel Core i7-4765T; 4 x 2000MHz; prodesk, supercop-20241022: 36x passed TIMECOP
amd64; Haswell+AES (306c3); 2013 Intel Core i7-4770; 4 x 3400MHz; speed2supercop, supercop-20250415: 36x passed TIMECOP
amd64; Haswell+AES (306c3); 2013 Intel Xeon E3-1220 v3; 4 x 3100MHz; hiphop, supercop-20231107
amd64; Haswell+AES (306c3); 2013 Intel Xeon E3-1275 V3; 4 x 3500MHz; titan0, supercop-20250415: 36x passed TIMECOP
amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3427U; 2 x 1800MHz; hunsnivy, supercop-20250415: 8x test failure, 10x compiler output, 27x passed TIMECOP
amd64; Ivy Bridge+AES (306a9); 2012 Intel Xeon E3-1275 V2; 4 x 3500MHz; hydra8, supercop-20250415: 18x test failure, 27x passed TIMECOP
amd64; Sandy Bridge+AES (206a7); 2011 Intel Xeon E3-1225; 4 x 3100MHz; hydra7, supercop-20250415: 18x test failure, 27x passed TIMECOP
amd64; Sandy Bridge+AES (206d7); 2012 Intel Xeon E5-2660; 8 x 2200MHz; unstable; gcc123, supercop-20220213
amd64; Sandy Bridge (206a7); 2011 Intel Core i3-2310M; 2 x 2100MHz; h6sandy, supercop-20241022: 18x test failure, 18x passed TIMECOP
amd64; Core 2 45nm (1067a); 2009 Intel Core 2 Duo E7600; 2 x 3060MHz; wolfdale, supercop-20250415: 8x test failure, 10x compiler output, 18x passed TIMECOP
amd64; Core 2 45nm (10676); 2007 Intel Xeon X5450; 8 x 2992MHz; unstable; gcc14, supercop-20220506
amd64; Core 2 65nm (6fb); 2007 Intel Core 2 Duo T7300; 2 x 2000MHz; trident, supercop-20250307: 8x test failure, 10x compiler output, 18x passed TIMECOP
amd64; Core 2 65nm (6fb); 2007 Intel Core 2 Quad Q6600; 4 x 2404MHz; margaux, supercop-20250415: 18x test failure, 18x passed TIMECOP
amd64; Gracemont (906a4-20); 2022 Intel Core i3-1215U, E cores; 4 x 1600MHz; alder2,1f626960,3300000, supercop-20250415: 5x compiler output, 31x passed TIMECOP
amd64; Tremont (906c0); 2021 Intel Celeron N4500; 2 x 1100MHz; jasper2, supercop-20250415: 8x test failure, 10x compiler output, 27x passed TIMECOP
amd64; Tremont (906c0); 2021 Intel Pentium Silver N6000; 4 x 1100MHz; jasper, supercop-20250415: 8x test failure, 10x compiler output, 27x passed TIMECOP
amd64; Tremont (906c0); 2021 Intel Celeron N5105; 4 x 2000MHz; jasper3, supercop-20250415: 8x test failure, 10x compiler output, 27x passed TIMECOP
amd64; Goldmont Plus (706a8); 2019 Intel Celeron N4020; 2 x 1100MHz; gemini, supercop-20250307: 8x test failure, 10x compiler output, 27x passed TIMECOP
amd64; Goldmont (506c9); 2016 Intel Celeron J3455; 4 x 1500MHz; wooden, supercop-20241022: 8x test failure, 10x compiler output, 27x passed TIMECOP
amd64; Airmont (406c3); 2015 Intel Pentium N3700; 4 x 1600MHz; nucnuc, supercop-20241022: 8x test failure, 10x compiler output, 27x passed TIMECOP
amd64; Silvermont (406c4); 2016 Intel Atom x5-Z8350; 4 x 1440MHz; cherry, supercop-20250415: 8x test failure, 10x compiler output, 27x passed TIMECOP
amd64; Bonnell (30661); 2011 Intel Atom D2500; 2 x 1866MHz; h8atom, supercop-20250415: 18x test failure, 18x passed TIMECOP
amd64; Bonnell (106ca); 2010 Intel Atom N455; 1 x 1000MHz; h2atom, supercop-20241022: 18x test failure, 18x passed TIMECOP
riscv64; U54 (sifive,u54-mc); 2017 SiFive Freedom U540; 4 x 1000MHz; riscvunleashed000, supercop-20240107
mipso32; Octeon II (cnmips64v2); 2011 Cavium Octeon II CN6120; 2 x 2000MHz; gcc23, supercop-20230530
mipso32; Octeon II (cnmips64v2); 2011 Cavium Octeon II CN6120; 2 x 2000MHz; erpro8fsf2, supercop-20220213
armeabi; ARM1176 (410fb767); 2011 Broadcom BCM2835; 1 x 1000MHz; berry0, supercop-20240909: 25x namespace violation, 18x failed TIMECOP
armeabi; Cortex-A7 (410fc075); 2016 Broadcom BCM2836; 4 x 900MHz; berry2, supercop-20240909: 4x compiler output, 4x failed TIMECOP
armeabi; Cortex-A8 (413fc082); 2012 TI Sitara XAM3359AZCZ100; 1 x 1000MHz; bblack, supercop-20241022: 25x namespace violation, 18x passed TIMECOP
armeabi; Cortex-A9+NEON (412fc09a); 2011 Freescale i.MX6 Quad; 4 x 1200MHz; unstable; novena, supercop-20220506
armeabi; Cortex-A17 (410fc0d1); 2014 Rockchip RK3288; 4 x 1800MHz; tinker, supercop-20241022: 10x TIMECOP error
aarch64; Skylark (503f0002); 2018 Ampere eMAG 8180; 32 x 3300MHz; unstable; gcc185, supercop-20240107
aarch64; Cortex-A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3aplus, supercop-20240808: 5x passed TIMECOP, 5x TIMECOP error
aarch64; Cortex-A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3bplus, supercop-20241022: 8x passed TIMECOP
aarch64; Cortex-A72 (410fd083); 2019 Broadcom BCM2711; 4 x 1500MHz; pi4b, supercop-20241022: 10x passed TIMECOP