VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key cryptosystems on one machine: amd64; Haswell+AES (306c3); 2013 Intel Xeon E3-1275 V3; 4 x 3500MHz; titan0, supercop-20240625

[Page version: 20240720 10:46:07]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key encryption:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol C: means that the current SUPERCOP database does not list IND-CCA2 security as a goal for this public-key cryptosystem. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each public-key cryptosystem and each implementation. Designers and implementors interested in submitting new public-key cryptosystems and new implementations of existing cryptosystems should read the call for submissions.


Implementation notes

Graphs: old (pkcycles,pkbytes) (ccycles,pkbytes) (ccycles,cbytes) (mcycles,cbytes) (pkbytes,cbytes)

Cycles to generate a key pair
25%50%75%system
551695564256379
T:
r5nd1pke5d
742657510776415
T:
r5nd1pke0d
104766105700110895
T:
r5nd3pke0d
104220105830107865
T:
r5nd3pke5d
129866131298134587
T:
r5nd5pke0d
180141184923186293
T:
r5nd5pke5d
536500549835552371
T:
r5n11pke0d
125337812712941286152
T:
r5n13pke0d
161673316449301685939
T:
r5n15pke0d
284715928555862860558
T:
ledapkc1464
370370437140843759899
T:
ledapkc1364
392405639290583942850
T:
ledapkc1264
4293590?4304051?5963518?
T:
ledapkc13sl
4728838?4769462?6375540?
T:
ledapkc14sl
627234064332527018763
T:
ledapkc12sl
6774700?6800750?9636516?
T:
ledapkc3464
786379178706647878505
T:
ledapkc3364
907752591177169134797
T:
ledapkc3264
10429530?10512583?13866797?
T:
ledapkc34sl
101988261076735512423586
T:
ledapkc33sl
123045901265366012891207
T:
lotus128
128243601286723513036330
T:
ledapkc5464
130284781310561313446437
T:
ledapkc5364
133671881369006914335600
T:
ledapkc32sl
163882101646645817050089
T:
ledapkc54sl
201684522029203322031829
T:
ledapkc5264
204865322067366124107606
T:
ledapkc53sl
211590692117963721912922
T:
lotus192
308582223221560933989111
T:
C:mceliece
323542223247050332587166
T:
mcnie4q1281
312260233334267136069299
T:
ledapkc52sl
382664303866933339515545
T:
r5n13pke0smallct
347234513956459639657438
T:
lotus256
551648755554118155770410
T:
mcnie4q1282
736987707410229774385130
T:
mcnie4q1921
765009547708789877637859
T:
mcnie3q1281
943384099444941694563228
T:
mcnie4q2561
9922015899725143100267483
T:
mcnie4q1922
110751969111625658113500161
T:
mcnie3q1282
75845972?117514308?195507981?
T:
rsa2048
130936867131040726131221577
T:
mcnie4q2562
97963009?150350291?206316291?
T:
cargocult2048
148066910152476191163302517
T:
mcnie3q1921
202930502204005228205260757
T:
mcnie3q1922
220003715222740496224247373
T:
mcnie3q2561
362892894368128870387690327
T:
mcnie3q2562
452074141446738093804784754613
T:
pqrsa15
Cycles to encrypt 59 bytes
25%50%75%system
286002887529906
T:
cargocult2048
288722964130696
T:
rsa2048
461064660047281
T:
C:mceliece
103020103539104172
T:
r5nd1pke5d
139623140211140967
T:
r5nd1pke0d
168794169997184435
T:
lotus128
182223182788183686
T:
r5nd3pke5d
198854200379201305
T:
r5nd3pke0d
243161244125248106
T:
r5nd5pke0d
286132287350288120
T:
lotus192
302136303523305543
T:
r5nd5pke5d
324519326428327872
T:
mcnie4q1281
303700?392834?393822?
T:
lotus256
432194437431439942
T:
mcnie4q1282
540014540823551223
T:
mcnie4q1921
636027636680637868
T:
mcnie4q1922
639101639430640602
T:
ledapkc1264
654231655613676230
T:
mcnie4q2561
763123766869796655
T:
ledapkc12sl
768524769724772092
T:
mcnie4q2562
780201781573782492
T:
r5n11pke0d
824061825166825489
T:
ledapkc1364
870182871068878767
T:
ledapkc1464
934630935264941742
T:
ledapkc13sl
113889811418031151774
T:
ledapkc14sl
128201012833171321820
T:
ledapkc3264
129382613088951320757
T:
mcnie3q1281
149943515094441515726
T:
ledapkc3364
163004716335181634423
T:
ledapkc3464
163409116429091651790
T:
mcnie3q1282
163506916461411675340
T:
ledapkc32sl
168077016868781705537
T:
r5n13pke0d
198478819983892009482
T:
ledapkc33sl
203923120472352059531
T:
mcnie3q1921
216863021715872174081
T:
r5n15pke0d
237247723748312375715
T:
ledapkc34sl
240675024111372469034
T:
ledapkc5264
242367024417882456756
T:
r5n13pke0smallct
246724024837752505720
T:
mcnie3q1922
248700324983182510533
T:
ledapkc5364
292364729354422950333
T:
mcnie3q2561
299507129983663010013
T:
ledapkc5464
320326232159893285586
T:
ledapkc52sl
355441135557523559728
T:
ledapkc53sl
364915136514043653222
T:
ledapkc54sl
372920037452093763028
T:
mcnie3q2562
203409112035396720377118
T:
pqrsa15
Cycles to decrypt 59 bytes
25%50%75%system
113126115877117563
T:
r5nd1pke5d
166463167630170402
T:
r5nd1pke0d
192384193618194576
T:
lotus128
230925232609235946
T:
r5nd3pke5d
266679267956270645
T:
r5nd3pke0d
317031320170342514
T:
r5nd5pke0d
338706339774342828
T:
lotus192
422590423865425411
T:
r5nd5pke5d
383630435541437678
T:
lotus256
875464875855876256
T:
r5n11pke0d
945421948971954039
T:
mcnie4q1281
104928210546491057035
T:
C:mceliece
127306312790631286001
T:
mcnie4q1282
157340015803871601264
T:
mcnie4q1921
163003216653091678524
T:
mcnie3q1281
184216918496421925277
T:
mcnie4q1922
188753118946021901568
T:
mcnie4q2561
196744019930532045648
T:
mcnie3q1282
218673121895972192051
T:
r5n13pke0d
220951222156822221115
T:
mcnie4q2562
221671822585462271562
T:
ledapkc1264
244784024670112488924
T:
mcnie3q1921
251399825229462528595
T:
ledapkc1364
264958926518612652644
T:
cargocult2048
263870326539212674550
T:
rsa2048
264840926595342664676
T:
r5n15pke0d
271168727192912930458
T:
ledapkc1464
290980929410402971536
T:
mcnie3q1922
303241030480343129751
T:
ledapkc13sl
329060232946143298548
T:
ledapkc12sl
338284334285233488880
T:
mcnie3q2561
354362436032253793391
T:
ledapkc14sl
417742442649414342088
T:
mcnie3q2562
656899166499896742296
T:
ledapkc3464
668613767086166849675
T:
ledapkc3264
673117867502866800417
T:
ledapkc3364
865793788212628845358
T:
ledapkc32sl
101208701013143810148612
T:
ledapkc33sl
112009751124475511433978
T:
r5n13pke0smallct
112317781128550811326916
T:
ledapkc34sl
140140591410370614131851
T:
ledapkc5264
152765441536137815391681
T:
ledapkc5364
188421321895386219418711
T:
ledapkc5464
205020062076295420790016
T:
ledapkc52sl
210491532107999821416641
T:
ledapkc53sl
229525732295655422987266
T:
ledapkc54sl
146379084146453250146506987
T:
pqrsa15