VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key cryptosystems on one machine: amd64; Broadwell+AES (406f1); 2016 Intel Xeon E5-2609 v4; 8 x 1700MHz; bolero, supercop-20240625

[Page version: 20240720 10:46:07]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key encryption:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol C: means that the current SUPERCOP database does not list IND-CCA2 security as a goal for this public-key cryptosystem. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each public-key cryptosystem and each implementation. Designers and implementors interested in submitting new public-key cryptosystems and new implementations of existing cryptosystems should read the call for submissions.


Implementation notes

Graphs: old (pkcycles,pkbytes) (ccycles,pkbytes) (ccycles,cbytes) (mcycles,cbytes) (pkbytes,cbytes)

Cycles to generate a key pair
25%50%75%system
548525528056128
T:
r5nd1pke5d
732527397675024
T:
r5nd1pke0d
101672103108106648
T:
r5nd3pke0d
102780103272104068
T:
r5nd3pke5d
176196178028181304
T:
r5nd5pke5d
139380?193324?196508?
T:
r5nd5pke0d
532676535252652460
T:
r5n11pke0d
120142012338681406856
T:
r5n13pke0d
161389216617961680248
T:
r5n15pke0d
273834827517762855112
T:
ledapkc1464
360795236249123648852
T:
ledapkc1364
383634438523004165033
T:
ledapkc1264
4560352?4589504?6187008?
T:
ledapkc14sl
4102312?5218488?6501136?
T:
ledapkc13sl
602247260537086709344
T:
ledapkc12sl
6433536?6516124?9217468?
T:
ledapkc3464
753853275514127723597
T:
ledapkc3364
821547282314849285068
T:
ledapkc3264
98429441006994012013376
T:
ledapkc33sl
10062736?10187208?13489908?
T:
ledapkc34sl
108155601144562811461364
T:
lotus128
121809761220537614400731
T:
ledapkc5464
122237681233031613669860
T:
ledapkc32sl
135360201386067213894324
T:
ledapkc5364
152324001528878017471388
T:
ledapkc54sl
200237922013162823720336
T:
ledapkc53sl
196193162076728423021888
T:
ledapkc5264
210254802104947221859964
T:
lotus192
306736683085334431031096
T:
mcnie4q1281
301507203130480832740656
T:
C:mceliece
309830243327259636531001
T:
ledapkc52sl
366857243844686838587384
T:
r5n13pke0smallct
343762963845689238532356
T:
lotus256
523787725279653653694348
T:
mcnie4q1282
725741287347767677561844
T:
mcnie4q1921
740673767483422075877472
T:
mcnie3q1281
855620888566991285877228
T:
mcnie4q2561
881809928877406492847876
T:
mcnie4q1922
107572068108383372109461824
T:
mcnie3q1282
128285476135470040143062030
T:
mcnie4q2562
76161704?141606546?210056540?
T:
rsa2048
143086464144017420146568388
T:
mcnie3q1921
88584392?153311300?210324928?
T:
cargocult2048
197502212203551620208586932
T:
mcnie3q1922
210482680212477428218131024
T:
mcnie3q2561
344995984348395076357285916
T:
mcnie3q2562
412566666042302070564298135744
T:
pqrsa15
Cycles to encrypt 59 bytes
25%50%75%system
257762676427248
T:
rsa2048
262042755229432
T:
cargocult2048
440084447245120
T:
C:mceliece
102244?103576?145051?
T:
r5nd1pke5d
139500140636141896
T:
r5nd1pke0d
144980162632166664
T:
lotus128
183888185284186536
T:
r5nd3pke5d
198420199096206372
T:
r5nd3pke0d
249228254268257736
T:
r5nd5pke0d
271812?274488?379350?
T:
lotus192
280752?283960?375328?
T:
lotus256
296108298192301936
T:
r5nd5pke5d
317144319976321420
T:
mcnie4q1281
430028431220437016
T:
mcnie4q1282
526184?530048?742349?
T:
mcnie4q1921
575572576484577904
T:
mcnie4q1922
597288598180600040
T:
mcnie4q2561
674656675328676416
T:
ledapkc1264
767872?776228?1081040?
T:
r5n11pke0d
802912804672814892
T:
ledapkc12sl
757976?833004?1069509?
T:
mcnie4q2562
834412835740842944
T:
ledapkc1364
870012871604876836
T:
ledapkc1464
942528943856946076
T:
ledapkc13sl
116611611700041176852
T:
ledapkc14sl
124488412461921250624
T:
ledapkc3264
129070413102281323188
T:
mcnie3q1281
154662415483881558528
T:
ledapkc3364
163713216396521651508
T:
ledapkc3464
161717616476561667600
T:
mcnie3q1282
164601216508841662216
T:
r5n13pke0d
165736416835681688688
T:
ledapkc32sl
203370020445162062324
T:
ledapkc33sl
200981220535602069500
T:
mcnie3q1921
209305220994642110012
T:
r5n15pke0d
232595223328802346888
T:
ledapkc34sl
238124823889242401884
T:
ledapkc5264
239510024270242440380
T:
r5n13pke0smallct
243868424832562523680
T:
mcnie3q1922
263856426486962772140
T:
ledapkc5364
288252029261882955348
T:
mcnie3q2561
298592030009963018328
T:
ledapkc5464
319454832951323740320
T:
ledapkc52sl
348181634906683500664
T:
ledapkc54sl
362015636305203646244
T:
ledapkc53sl
367125637172003788112
T:
mcnie3q2562
200344282015554820186660
T:
pqrsa15
Cycles to decrypt 59 bytes
25%50%75%system
116796?120088?155764?
T:
r5nd1pke5d
168744172500175464
T:
r5nd1pke0d
184048185320204040
T:
lotus128
231644234240243476
T:
r5nd3pke5d
251764257104264536
T:
r5nd3pke0d
317376?325100?449429?
T:
lotus192
324124340100381848
T:
r5nd5pke0d
353696?367812?467896?
T:
lotus256
417804420284422608
T:
r5nd5pke5d
858592864108872888
T:
r5n11pke0d
933600945912955364
T:
C:mceliece
9884569975201006364
T:
mcnie4q1281
135130013624801377956
T:
mcnie4q1282
163975216536241743592
T:
mcnie4q1921
168546417011961717240
T:
mcnie3q1281
181342818261721843592
T:
mcnie4q1922
182293618402161870156
T:
mcnie4q2561
207800820958282126224
T:
mcnie3q1282
213167621461202160076
T:
r5n13pke0d
226562422692562279616
T:
rsa2048
225912822712402279316
T:
ledapkc1264
226965622788922331316
T:
cargocult2048
230768823566882404212
T:
mcnie4q2562
250576025123522524876
T:
ledapkc1364
248864825235522556476
T:
mcnie3q1921
256980825802762593036
T:
r5n15pke0d
288672029108722929596
T:
ledapkc1464
299053230239203052444
T:
mcnie3q1922
298886830391363070496
T:
ledapkc13sl
322196432338963251688
T:
ledapkc12sl
346710834999003539844
T:
mcnie3q2561
352061236642763783752
T:
ledapkc14sl
431064443888364465648
T:
mcnie3q2562
649201265112366579564
T:
ledapkc3264
654642866049886696064
T:
ledapkc3464
665566866691646717600
T:
ledapkc3364
860692086555928674344
T:
ledapkc32sl
99928641009519610115928
T:
ledapkc33sl
110376481105353211258676
T:
r5n13pke0smallct
111091521117519611212844
T:
ledapkc34sl
138231161385583213913136
T:
ledapkc5264
153240761569261215813284
T:
ledapkc5364
185403001856775218607524
T:
ledapkc5464
207310282075227620853800
T:
ledapkc53sl
206541482088192021146624
T:
ledapkc52sl
224023722252112022648652
T:
ledapkc54sl
127925024128196980128528892
T:
pqrsa15