VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key cryptosystems on one machine: amd64; Bonnell (106ca); 2010 Intel Atom N455; 1 x 1000MHz; h2atom, supercop-20240107

[Page version: 20240720 10:46:07]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key encryption:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol C: means that the current SUPERCOP database does not list IND-CCA2 security as a goal for this public-key cryptosystem. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each public-key cryptosystem and each implementation. Designers and implementors interested in submitting new public-key cryptosystems and new implementations of existing cryptosystems should read the call for submissions.


Implementation notes

Graphs: old (pkcycles,pkbytes) (ccycles,pkbytes) (ccycles,cbytes) (mcycles,cbytes) (pkbytes,cbytes)

Cycles to generate a key pair
25%50%75%system
155104615622511575127
T:
C:ntruees439ep1
265599026694712688922
T:
C:ntruees593ep1
395587639878614170820
T:
C:ntruees743ep1
782430927840755378650671
T:
mcnie4q1281
104578698105301319106157104
T:
mcnie3q1281
119702553119886261120049166
T:
ledapkc1464
134375783134703476136120508
T:
mcnie4q1282
150354828151914508160525186
T:
mcnie3q1282
154422988154599386154905077
T:
ledapkc1364
168310068168960436169477645
T:
C:ntruees787ep1
173417019173711985174521095
T:
mcnie4q1921
175800152176132723184597304
T:
ledapkc14sl
194354255195338888196381661
T:
mcnie3q1921
220812935221183105221524491
T:
mcnie4q2561
233634428234372196235692831
T:
mcnie4q1922
235545082240218909245273367
T:
ledapkc13sl
263878526264797541266370815
T:
mcnie3q1922
274273579274936529276670734
T:
mcnie3q2561
300522926300856328301826167
T:
ledapkc1264
304809317305398918308768570
T:
mcnie4q2562
333308335333864474350806458
T:
ledapkc3464
408853822409368648410695285
T:
ledapkc12sl
436684337437006059437360284
T:
ledapkc3364
439722833440091415458691421
T:
ledapkc34sl
449969633451435385455341492
T:
mcnie3q2562
568546757568841881569236792
T:
ledapkc5464
573407017573736122575135060
T:
ledapkc33sl
697488430697845269698365044
T:
ledapkc3264
900339363900788034901216464
T:
ledapkc5364
107692052510774255031078533759
T:
ledapkc54sl
116756097811687294811176343181
T:
ledapkc32sl
131306424113138442001330946284
T:
ledapkc53sl
134581635513469058381353807169
T:
ledapkc5264
265066804026587816472662361243
T:
ledapkc52sl
Cycles to encrypt 59 bytes
25%50%75%system
140223140715141609
T:
C:ntruees439ep1
216960217619218984
T:
C:ntruees593ep1
284536285913288942
T:
C:ntruees743ep1
433763434680436619
T:
C:ntruees787ep1
837213839241843572
T:
mcnie4q1281
1115959?1121715?1622213?
T:
mcnie4q1282
1356209?1359555?1966908?
T:
mcnie4q1921
159334015964111602447
T:
mcnie4q1922
166350716656451668239
T:
mcnie4q2561
169268216960801701420
T:
mcnie3q1281
193844619419141952216
T:
mcnie4q2562
2084581?2095473?3079041?
T:
mcnie3q1282
254859425517152559269
T:
mcnie3q1921
304951830554753067442
T:
mcnie3q1922
3471102?3484992?5075313?
T:
mcnie3q2561
445193944606304472150
T:
mcnie3q2562
172429231726862617317069
T:
ledapkc1264
173364921737042017400208
T:
ledapkc1364
202934512030993320352826
T:
ledapkc1464
212524612128250621304552
T:
ledapkc12sl
236971552374411723992738
T:
ledapkc13sl
254884882554581825657667
T:
ledapkc14sl
372755483729334837343539
T:
ledapkc3264
408612254091286941011052
T:
ledapkc3364
480487874808929848199802
T:
ledapkc3464
569038745695739557156886
T:
ledapkc32sl
582424575830941058449902
T:
ledapkc33sl
695715506965769269839888
T:
ledapkc34sl
733172607350424173730761
T:
ledapkc5264
855309088561904185848066
T:
ledapkc5464
868748758696813787181138
T:
ledapkc5364
126403381126649770126805264
T:
ledapkc53sl
127172448127351884127475912
T:
ledapkc52sl
141987419142194124142345278
T:
ledapkc54sl
Cycles to decrypt 59 bytes
25%50%75%system
199401199634200408
T:
C:ntruees439ep1
309370310186312856
T:
C:ntruees593ep1
425119427319438879
T:
C:ntruees743ep1
758340759087766236
T:
C:ntruees787ep1
220668822168252239466
T:
mcnie4q1281
3013018?3049769?4328183?
T:
mcnie4q1282
317123131902913215764
T:
mcnie3q1281
3573176?3616303?5170074?
T:
mcnie4q1921
3962899?4026787?5751339?
T:
mcnie3q1282
423534242547154278969
T:
mcnie4q1922
425787042770134301890
T:
mcnie4q2561
471139747467404787578
T:
mcnie3q1921
507075850976105116022
T:
mcnie4q2562
526300152995925323797
T:
mcnie3q1922
6032996?6095848?8716675?
T:
mcnie3q2561
824832282773848343098
T:
mcnie3q2562
296334482980209729968324
T:
ledapkc1264
319234053201397532107394
T:
ledapkc1364
347085693477529634983721
T:
ledapkc12sl
378233623786166837937743
T:
ledapkc1464
452061924535557545566244
T:
ledapkc14sl
493144494952476149686962
T:
ledapkc13sl
798369458014466080286709
T:
ledapkc3264
873065588756630488007803
T:
ledapkc3364
100654031100855252101060044
T:
ledapkc3464
101072149101614003102033527
T:
ledapkc32sl
121234563121597708122045042
T:
ledapkc33sl
132460756133038287133396307
T:
ledapkc34sl
161360565161559758161945494
T:
ledapkc5264
190789681190941990191239524
T:
ledapkc5364
231185337231358332231732521
T:
ledapkc5464
232357491232807145233896970
T:
ledapkc52sl
256461298256642339257046955
T:
ledapkc53sl
301494633301700379302143042
T:
ledapkc54sl