VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key cryptosystems on one machine: amd64; Core 2 65nm (6fb); 2007 Intel Core 2 Quad Q6600; 4 x 2404MHz; margaux, supercop-20240425

[Page version: 20240719 07:48:55]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key encryption:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol C: means that the current SUPERCOP database does not list IND-CCA2 security as a goal for this public-key cryptosystem. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each public-key cryptosystem and each implementation. Designers and implementors interested in submitting new public-key cryptosystems and new implementations of existing cryptosystems should read the call for submissions.


Implementation notes

Graphs: old (pkcycles,pkbytes) (ccycles,pkbytes) (ccycles,cbytes) (mcycles,cbytes) (pkbytes,cbytes)

Cycles to generate a key pair
25%50%75%system
224441?240669?315211?
T:
r5nd1pke5d
317816355412359577
T:
r5nd1pke0d
549053551444553365
T:
r5nd3pke0d
559991570756654711
T:
r5nd3pke5d
761187764551767834
T:
r5nd5pke0d
872538877241883260
T:
C:ntruees439ep1
962581967599974036
T:
C:ntruees401ep2
107674412217121234000
T:
r5nd5pke5d
220073922167912230442
T:
C:ntruees593ep1
299376030114163033074
T:
C:ntruees743ep1
182209001822276718225646
T:
r5n11pke0d
350322513504368635052400
T:
r5n13pke0d
453074654534682845475290
T:
lotus128
511253685126851851404526
T:
C:ntruees787ep1
546469635470592554796356
T:
mcnie4q1281
651581566517700765196126
T:
ledapkc1464
668002466680475366808822
T:
r5n15pke0d
729875737321688273639132
T:
mcnie3q1281
836109328363073083676337
T:
ledapkc1364
888485168904734789074053
T:
lotus192
935775069369968293810444
T:
mcnie4q1282
942361099427219996544598
T:
ledapkc14sl
104504382104834729105639934
T:
mcnie3q1282
111043355111203685114015920
T:
ledapkc13sl
121945330122104447122289499
T:
mcnie4q1921
128622942128991068129388882
T:
mcnie3q1921
158028944158189739158384759
T:
mcnie4q2561
164120602164297299164494779
T:
mcnie4q1922
172084453172768520173593013
T:
mcnie3q1922
173039104173072217173109886
T:
ledapkc1264
179080392179153662179350446
T:
lotus256
185443747185905382186374998
T:
mcnie3q2561
187006828187041117191558944
T:
ledapkc3464
200646585201111084201762526
T:
mcnie4q2562
232087179232135099232963580
T:
ledapkc12sl
241794024241846229246990213
T:
ledapkc34sl
122292376?245014678?360791690?
T:
rsa2048
248152476248177261248218102
T:
ledapkc3364
181596201?266915594?427909639?
T:
cargocult2048
297066433297996588298960812
T:
mcnie3q2562
297913383298031948298302749
T:
ledapkc5464
311043990311110287311216098
T:
ledapkc33sl
324930252324995760325119161
T:
ledapkc3264
528040153528097973528176315
T:
ledapkc5364
620121672620302044620828885
T:
ledapkc54sl
686365582686419315686457052
T:
r5n13pke0smallct
687677599687796492689359007
T:
ledapkc32sl
737895153737993570742482770
T:
ledapkc53sl
781650300781858798784026511
T:
ledapkc5264
157694865315796180361582745370
T:
ledapkc52sl
794446761182088551258463965507
T:
pqrsa15
Cycles to encrypt 59 bytes
25%50%75%system
588265936862710
T:
rsa2048
591786181663384
T:
cargocult2048
655296605166668
T:
C:ntruees401ep2
764337743578357
T:
C:ntruees439ep1
110320111026111970
T:
C:ntruees593ep1
154989156294158304
T:
C:ntruees743ep1
299033306541312907
T:
C:ntruees787ep1
368792371224460446
T:
r5nd1pke5d
497190497713500351
T:
mcnie4q1281
677933679252680859
T:
mcnie4q1282
689589690331691472
T:
lotus128
645823?802517?816855?
T:
r5nd1pke0d
829239830659832051
T:
mcnie4q1921
8312908359351011323
T:
r5nd3pke5d
985812987169988475
T:
mcnie4q1922
101941410204871021846
T:
lotus192
102370010250351026302
T:
mcnie4q2561
106101110653351068848
T:
r5nd3pke0d
107890010807791084589
T:
mcnie3q1281
125650012615571263487
T:
mcnie4q2562
135029213519471353870
T:
mcnie3q1282
143637314404911441927
T:
lotus256
147814414844981490035
T:
r5nd5pke0d
166447416658111667614
T:
mcnie3q1921
170257517754381831529
T:
r5nd5pke5d
202192420262382036641
T:
mcnie3q1922
228740522899502291507
T:
mcnie3q2561
296964629732422982642
T:
mcnie3q2562
693607069399776944666
T:
r5n13pke0smallct
953584895519269561715
T:
ledapkc1264
101805521018559510186535
T:
ledapkc1364
110478181105207211075281
T:
ledapkc13sl
113188881133102511342604
T:
ledapkc1464
116497511165195711660507
T:
ledapkc12sl
137155861371697813718483
T:
r5n11pke0d
140584561407852714079560
T:
ledapkc14sl
167582611676995716773388
T:
ledapkc3264
229262212293408722939936
T:
ledapkc3364
264487202645530226464368
T:
r5n13pke0d
274046642741092227412824
T:
ledapkc3464
313788773138708231390772
T:
ledapkc33sl
323025223231973832333381
T:
ledapkc32sl
346137343473401734778490
T:
pqrsa15
392137803923288739239977
T:
ledapkc34sl
407614244079716240808206
T:
ledapkc5264
458122034583372045848573
T:
ledapkc5464
498590834986488549870711
T:
r5n15pke0d
502457955026626050276270
T:
ledapkc5364
702963317030966970349504
T:
ledapkc53sl
730632867308430573090403
T:
ledapkc52sl
824924608251791982526624
T:
ledapkc54sl
Cycles to decrypt 59 bytes
25%50%75%system
987529881199096
T:
C:ntruees401ep2
102417103388104088
T:
C:ntruees439ep1
156452156506157309
T:
C:ntruees593ep1
222153222226224434
T:
C:ntruees743ep1
505424?511910?672700?
T:
r5nd1pke5d
553061586906602490
T:
C:ntruees787ep1
830337830697832425
T:
lotus128
104693711133661123951
T:
r5nd1pke0d
114212811693341331311
T:
r5nd3pke5d
128969712929591294988
T:
lotus192
137785113805031384438
T:
mcnie4q1281
157503415831991609785
T:
r5nd3pke0d
186949718736811874894
T:
lotus256
189263918968591900546
T:
mcnie4q1282
192447919314081938357
T:
mcnie3q1281
218028921895502194331
T:
r5nd5pke0d
228060322900312348655
T:
mcnie4q1921
241964924273582435504
T:
mcnie3q1282
241866124402822557907
T:
r5nd5pke5d
271051927201662766165
T:
mcnie4q1922
276775427723672777711
T:
mcnie4q2561
287858628919852901514
T:
mcnie3q1921
325451932612773265834
T:
mcnie4q2562
340809234205603430507
T:
mcnie3q1922
375124637597843773463
T:
mcnie3q2561
489059948980924914701
T:
mcnie3q2562
514190651468885161050
T:
rsa2048
513296251670015405864
T:
cargocult2048
117748301178179311795014
T:
ledapkc1264
128431311285330112902467
T:
ledapkc1364
139117211400801214104829
T:
ledapkc12sl
141480511415017514151104
T:
r5n11pke0d
153339941533667515340161
T:
ledapkc1464
165927901666506516751329
T:
ledapkc13sl
180881671810303518153854
T:
ledapkc14sl
228383472289763022900774
T:
r5n13pke0smallct
277136322771683727725020
T:
r5n13pke0d
319758523221872332224991
T:
ledapkc3264
355180903561076035620388
T:
ledapkc3364
395398933973499339738416
T:
ledapkc3464
404568474066817640748748
T:
ledapkc32sl
491669774920199149258087
T:
ledapkc33sl
514349975144084851459967
T:
r5n15pke0d
526692605267461653044557
T:
ledapkc34sl
711700647118520571473413
T:
ledapkc5264
861767288618374386345056
T:
ledapkc5364
976963969782796597999527
T:
ledapkc52sl
103293750103361163103377430
T:
ledapkc5464
110602601110610043110616312
T:
ledapkc53sl
130837866130973172131097134
T:
ledapkc54sl
262553776262620216262724456
T:
pqrsa15