VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems
ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of key-encapsulation mechanisms on one machine: aarch64; Neoverse-N1 (413fd0c1); 2021 Ampere Altra Max M128-30; 64 x 3000MHz; cfarm425, supercop-20261004

[Page version: 20261006 10:05:08]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for key-encapsulation mechanisms:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol C: means that the current SUPERCOP database does not list IND-CCA2 security as a goal for this key-encapsulation mechanism. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each key-encapsulation mechanism and each implementation. Designers and implementors interested in submitting new key-encapsulation mechanisms and new implementations of existing systems should read the call for submissions.

Test results

Graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

NISTPQC graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

Cycles to generate a key pair
25%50%75%system
315133155731660ntruplus768
359813605836231ntruplus864
506495089551417
T:
C:r5nd1kem0d
47833?55283?65058?ntruplus1152
632066382265427
T:
C:r5nd0kem2iot
638506413464598kyber512
641126448665235mlkem512
658976624366916
T:
C:r5nd1kem5d
679916834969686
T:
C:r5nd1kem4longkey
702507035870609smaugt1v5
705507083971482
T:
lightsaber2
854638552385624threebears624r2cca
854908555585668C:threebears624r2cpa
870238715687311C:threebears624r2cpax
882688832888459threebears624r2ccax
908389106191523smaugt1
909559137591824timer
930599323293608timerv5
107352107853108620kyber768
107400108069108869mlkem768
113154113303113545T!!!newhope512cca
118452119243120298
T:
C:r5nd3kem5d
129260129430129769smaugt3v5
131930?132615?167852?ntruplus576
142591143179143657
T:
saber2
167706167779167939threebears936r2cca
169084169799170761kyber1024
169719170815172058mlkem1024
171215171280171426threebears936r2ccax
171868171956172092C:threebears936r2cpa
174138174226174373C:threebears936r2cpax
178220178614179109kyber90s512
187468187906188248smaugt3
190252191467193482
T:
C:r5nd3kem0d
197406197616197993smaugt5v5
220643222477224619
T:
C:r5nd5kem5d
235188236185236904
T:
C:hila5
238999239463240011T!!!newhope1024cca
239340239908240951
T:
firesaber2
245676246743248002
T:
C:r5nd5kem0d
254996255699256309
T:
kindi256342
261034263764269503
T:
ntrulpr653
272335272843273717
T:
kindi512222
275115275505276899
T:
kindi512241
282331282436282693threebears1248r2cca
286618286729287000threebears1248r2ccax
287953288107288345C:threebears1248r2cpa
290962291107291318C:threebears1248r2cpax
305133305782306612smaugt5
320984321527322548kyber90s768
345276347832352588
T:
ntrulpr761
427011430152436243
T:
ntrulpr857
516526519604525430
T:
ntrulpr953
526604527150527982kyber90s1024
564958565571566989
T:
kindi512321
582042584759590493
T:
ntrulpr1013
624020633565643514
T:
ntrukem443
643296644104646320
T:
lima2p1024cca
676570678469679656
T:
kindi256522
856738859659872077
T:
hqc1281
885824888882894053
T:
ntrulpr1277
130428113058161311575
T:
lima2p2048cca
133748913393801343769
T:
limasp1018cca
161700416266621631459
T:
ntrukem743
183772318389021842668
T:
frodokem640
193400519449841966665
T:
hqc1921
205309520692532083207
T:
hqc1922
213286521341512137357
T:
frodokem640aes
243671924397422444244
T:
limasp1306cca
268885926938222702018
T:
limasp1822cca
338805234102853439294
T:
hqc2561
360493936296483657804
T:
hqc2562
377758338043833828548
T:
hqc2563
395879739646083967683
T:
frodokem976
430709443112534317929
T:
frodokem976aes
429799943201454341170ntruhps2048509
476590447740354782256
T:
limasp2062cca
628900262916716296193
T:
C:bikel1
722453372341287241284ntruhps2048677
754554675460537547565
T:
ntrulpr4591761
764944776562017662770ntruhrss701
766843576712437676308
T:
frodokem1344aes
830539683381258343159
T:
frodokem640shake
866071686626688665370
T:
ntruhrss701
880371488081128813217
T:
C:r5n11kem0d
995385599601379964649sntrup653
104009101040723010445373ntruhps4096821
136092281361459813620640sntrup761
145870641462655814757203
T:
C:ledakemcpa14
168131071696205917444162
T:
lotus128
172004881721103217226571sntrup857
182168381828663918486176
T:
C:ledakemcpa13
183467431838403718390164
T:
frodokem976shake
194638241947439119490373sntrup4591761
204030622041066320430795
T:
C:bikel3
211944252120385621249721sntrup953
217458282175213821761196
T:
C:r5n13kem0d
228739512289169822933440sntrup1013
328088373284997833027141
T:
C:ledakemcpa12
331689183325496933297012
T:
frodokem1344shake
341464563419419934211321sntrup1277
340593913439510135209593
T:
lotus192
401063354011988340137727
T:
C:r5n15kem0d
492909254943052650231782
T:
C:ledakemcpa34
498519394992638550052483
T:
ledakem1464
561802955635824957286855
T:
C:ledakemcpa33
588830895889428858902201
T:
sikep434
592159185957651760514779
T:
lotus256
630153726308186163562608
T:
ledakem1364
712936227186419273403142
T:
ledakem14sl
776138597763996577950740mceliece348864f
776157107766933977844916mceliece348864pcf
868126818748523888857599
T:
ledakem13sl
903056359032078190328144
T:
sikep503
9344087194886340102187023
T:
sikep434comp
984075209848208598986354
T:
C:ledakemcpa32
115605869115801894116305735
T:
C:ledakemcpa54
118789686118970021119634137
T:
C:ledakemcpa53
97412362?128597032?181152445?mceliece348864
130331420130411561130682119
T:
ledakem1264
103111071?135286250?210837727?mceliece348864pc
141909988142750584145900442
T:
ledakem3464
143240442146897481156074278
T:
sikep503comp
169494608169506205169517352
T:
sikep610
177274906177486547178019486
T:
ledakem12sl
185268941185547605188320384
T:
ledakem34sl
191389085191468257191597658
T:
ledakem3364
197045231197357415198626992
T:
C:ledakemcpa52
235663049235887630236229380
T:
ledakem5464
241060624241244262242362880
T:
ledakem33sl
255479917257640306269223290mceliece460896pcf
262940552263009890263234432
T:
ledakem3264
258612344270467344274125124mceliece460896f
283290373291798995313636519
T:
sikep610comp
306716425306755993306788606
T:
sikep751
397248389397530799398229913
T:
ledakem5364
336375230?459363523?675969942?mceliece460896
472153957472414848513050733
T:
sikep751comp
474412665475174214481421809
T:
ledakem54sl
521885810522524621524156490
T:
ledakem32sl
574607915576713775580262852
T:
ledakem53sl
392364142?582316677?854577437?mceliece460896pc
584051642585119732587066583
T:
ledakem5264
621216343623239059634662648mceliece6960119f
621783825624021070630542206mceliece6960119pcf
655054469667539597675862542
T:
bigquake1
699845989705096400710523498mceliece6688128f
708596791711760636717675497mceliece6688128pcf
842615318854979761869678748mceliece8192128pcf
848489179860426353871915706mceliece8192128f
730612415?994250554?1510738150?mceliece6960119
803662611?1053363837?1540239219?mceliece6960119pc
117099793211726493761175825346
T:
ledakem52sl
925385431?1313302894?1859771629?mceliece6688128
951977241?1361534567?2024265779?mceliece6688128pc
1063127636?1451561975?2048408660?mceliece8192128pc
1083243033?1562479015?2188163533?mceliece8192128
655658993267143612906950443984
T:
bigquake3
101691617721027007495110361162476
T:
bigquake5
Cycles for encapsulation
25%50%75%system
292712931630150ntruplus768
347513480435311ntruplus864
458224588547045ntruplus1152
552755536455506smaugt1v5
616126504268862mceliece348864
620006532770134mceliece348864f
654616557665699
T:
ntruhrss701
686257126176099mceliece348864pcf
693347256277412mceliece348864pc
780317839878939
T:
C:r5nd1kem0d
791657926179461ntruplus576
856298570185835smaugt1
858118612586314timer
871488726587395timerv5
977619792498284mlkem512
977799846399627
T:
C:r5nd0kem2iot
9980899906100089
T:
lightsaber2
104320104844105476
T:
C:r5nd1kem5d
105736105844106046smaugt3v5
107259107539108068kyber512
107580108106109124
T:
C:r5nd1kem4longkey
116094116171116388threebears624r2cca
116094116178116381threebears624r2ccax
117507117598117806C:threebears624r2cpax
117576117657117815C:threebears624r2cpa
120713120966121473
T:
C:ledakemcpa14
122544132228150590mceliece460896f
123266132673147386mceliece460896
135640135956136548
T:
C:ledakemcpa13
131010140485152280mceliece460896pc
147326150942167145
T:
ntrukem443
154810155148155942mlkem768
145752155781176483mceliece460896pcf
162117165772169537
T:
C:ledakemcpa12
166170166354166668smaugt5v5
167786168079168939kyber768
179253179386179640T!!!newhope512cca
179204180182180438smaugt3
181141181761182919
T:
C:r5nd3kem5d
184889185047185270
T:
saber2
208698208808209073threebears936r2ccax
208750208857209028threebears936r2cca
214918215098215569kyber90s512
215044215137215352C:threebears936r2cpax
215092215195215416C:threebears936r2cpa
224734233264252215mceliece6960119f
228616242173267023mceliece6960119
223410242532270576mceliece6688128f
227258243887273195mceliece6688128
242896244695247235sntrup653
236775245868259898mceliece6960119pcf
244273245908249010mlkem1024
233550246626272122mceliece6688128pcf
234818248213276833mceliece6688128pc
239018250075271566mceliece6960119pc
260038260565262785kyber1024
260366270383288830mceliece8192128
263277274079292131mceliece8192128f
269525279444296413mceliece8192128pcf
271944281644301024mceliece8192128pc
281964284814289892ntruhps2048509
287508290027306171
T:
ntrukem743
282388290051302401
T:
lotus128
293229294041294226
T:
firesaber2
293787294120295066
T:
C:ledakemcpa34
295179296842297075smaugt5
305420307383313125ntruhrss701
317448319818321634
T:
C:hila5
319951320255321144sntrup761
328228329642331268
T:
C:r5nd3kem0d
334470334574334898threebears1248r2cca
334438334592335078threebears1248r2ccax
334049335068335576
T:
kindi256342
333367335182337948
T:
C:r5nd5kem5d
342210342337342613C:threebears1248r2cpa
342227342357342601C:threebears1248r2cpax
343429343975345014
T:
C:ledakemcpa33
368448369258370103kyber90s768
374800375135375953T!!!newhope1024cca
390355392109392452sntrup857
395377395733396610
T:
kindi512222
400918401502402517
T:
kindi512241
409166411300416041ntruhps2048677
408262416668428142
T:
C:ledakemcpa32
414735422761458293
T:
lotus192
428740430233432245
T:
C:r5nd5kem0d
445554446160447432
T:
lima2p1024cca
469089469496471012sntrup953
492897493964495579
T:
ntrulpr653
536969539574544700ntruhps4096821
540670542510545695sntrup1013
559817560855562953
T:
C:bikel1
575751576386578280kyber90s1024
590186592332595524
T:
lotus256
654683656692658820
T:
ntrulpr761
659220660610707926
T:
C:ledakemcpa54
681896682326682876
T:
ledakem1464
743240745459746792
T:
kindi512321
765912766946768937
T:
C:ledakemcpa53
797756798444799210sntrup1277
813268814865817519
T:
kindi256522
814192815525817645
T:
ntrulpr857
817085817578818193
T:
ledakem14sl
813455835463860370
T:
C:ledakemcpa52
898633901724907491
T:
lima2p2048cca
904578904980905712
T:
ledakem1364
989851991412994410
T:
ntrulpr953
111743311192641121916
T:
ntrulpr1013
113444311366591144403
T:
limasp1018cca
115574311562571156893
T:
ledakem13sl
146843315081741542987
T:
ledakem1264
164114816512101663723
T:
hqc1281
169296616947121697557
T:
C:bikel3
171288717147861717398
T:
ntrulpr1277
177601617768251777787
T:
ledakem3464
203397020775622112136
T:
ledakem12sl
215523221582692163772
T:
limasp1306cca
225964922612752262765
T:
frodokem640
228952322939932300644
T:
limasp1822cca
239955224006022401831
T:
ledakem34sl
247438424762032478336
T:
frodokem640aes
250199625045422505597
T:
ledakem3364
306489331130543164230
T:
bigquake1
345922234607303463451
T:
ledakem33sl
372707938092693925221
T:
ledakem3264
384998138701933896101
T:
hqc1921
397684639791003982487
T:
ledakem5464
409170941111784131632
T:
hqc1922
431441643215194330063
T:
limasp2062cca
471690347182544720262
T:
frodokem976
490616749104034914951
T:
frodokem976aes
538414253871935392103
T:
ledakem54sl
540372254052795407303
T:
ledakem5364
580821759167616011947
T:
ledakem32sl
687950169075546945182
T:
hqc2561
702389370318477041563
T:
C:r5n11kem0d
730268173044717306856
T:
ledakem53sl
733089673706327413612
T:
hqc2562
729747374397967631594
T:
bigquake3
757895575793267580637sntrup4591761
762229776609287700275
T:
hqc2563
867757286817848687324
T:
frodokem1344aes
943055294398709473200
T:
frodokem640shake
103414431042228310500438
T:
ledakem5264
105303031069097810934407
T:
bigquake5
108611401109595211389738
T:
ledakem52sl
150759471507686515079396
T:
ntrulpr4591761
177333351774977217761674
T:
C:r5n13kem0d
207046232071992720766080
T:
frodokem976shake
327164803273453232754625
T:
C:r5n15kem0d
376952643780639237823986
T:
frodokem1344shake
964463099645560496465830
T:
sikep434
147210369147365445148165194
T:
sikep434comp
148859154148902653148919188
T:
sikep503
224029026224859084225724936
T:
sikep503comp
312195047312216327312241049
T:
sikep610
420136262421276878423619529
T:
sikep610comp
497790244497819859497864397
T:
sikep751
759195330761916755766581341
T:
sikep751comp
Cycles for decapsulation
25%50%75%system
273542737827415ntruplus768
309243095931024C:threebears624r2cpax
314563170132084
T:
C:r5nd1kem0d
325103257532657ntruplus864
422714230542370C:threebears936r2cpax
416834261143726
T:
C:r5nd0kem2iot
428804292443001ntruplus1152
432704331543381C:threebears624r2cpa
451834558746047
T:
C:r5nd1kem5d
459254601246608
T:
C:r5nd1kem4longkey
535965363853674C:threebears1248r2cpax
600216007260182C:threebears936r2cpa
743947445974555smaugt1v5
746477497276004
T:
C:r5nd3kem5d
767877692177070C:threebears1248r2cpa
779147821778794
T:
C:hila5
109560109671109771ntruplus576
113378113857114757
T:
lightsaber2
115276115407115565smaugt1
116058116275116673timer
116474116618116804timerv5
133109133182133317smaugt3v5
142061144792147220
T:
C:r5nd5kem5d
145364145523145726mlkem512
146585146732146934kyber512
155522155680155928threebears624r2ccax
159234159421159627
T:
ntruhrss701
165448167160170495
T:
C:r5nd3kem0d
184990185748187606
T:
ntrukem443
202180202313202527threebears624r2cca
202135202516204066smaugt5v5
204960205268205595
T:
saber2
211728212184212671T!!!newhope512cca
218281219104222131
T:
C:r5nd5kem0d
221257222766222963smaugt3
223581223896224381mlkem768
224394224566224846kyber768
245486245608245763kyber90s512
262940263036263244threebears936r2ccax
321142322454323118
T:
firesaber2
318966324298325671
T:
C:r5n11kem0d
326857326998327204threebears936r2cca
350212350581354866smaugt5
349863350784352099mlkem1024
351707352040352447kyber1024
365287370409383932
T:
lotus128
401573402409403784mceliece348864f
402488402628402925threebears1248r2ccax
403750405379407476mceliece348864
406841407919408285kyber90s768
408865409989411785mceliece348864pc
406477410194418260ntruhps2048509
409002410334412514mceliece348864pcf
423249425228425798
T:
kindi256342
428372429976433366
T:
ntrukem743
447804448871453475T!!!newhope1024cca
467597469171473830sntrup653
487086487410487828threebears1248r2cca
515562516581517682
T:
C:r5n13kem0d
530988531881533103
T:
kindi512222
537388538207538818
T:
kindi512241
553580555070556452
T:
lima2p1024cca
563213567068621927
T:
lotus192
626232627060627660sntrup761
627800628408629066kyber90s1024
640078643650650440ntruhps2048677
707095709838716255ntruhrss701
714607715451716497
T:
ntrulpr653
781172782010782763sntrup857
825520828749834885
T:
lotus256
884372886781892567ntruhps4096821
943382945715946444
T:
kindi512321
955292957039959865
T:
ntrulpr761
957436957971958993sntrup953
959531961141964296
T:
kindi256522
103834010413021047041mceliece460896f
103888310422621045022mceliece460896
104412510449871047175mceliece460896pc
104531010480151053426mceliece460896pcf
106415710664681074123sntrup1013
111290711174551124942
T:
lima2p2048cca
111648211185571127882mceliece6960119
111748911196651123901mceliece6960119f
112463311257921128265mceliece8192128
112603611272931129314mceliece6960119pc
112574011284971139594mceliece8192128f
112835811302941136565mceliece6960119pcf
113462311357031137222mceliece8192128pcf
113441611376151153422mceliece8192128pc
114686911481141150237mceliece6688128
114773711503731180431mceliece6688128f
115435411571721162096mceliece6688128pc
115750411610241164095mceliece6688128pcf
118915111911521193615
T:
ntrulpr857
145264514538681455055
T:
ntrulpr953
146286914654211469490
T:
limasp1018cca
163168516379711642174
T:
C:r5n15kem0d
163996016417861643260
T:
ntrulpr1013
169054416912631691969sntrup1277
214019621408932141701
T:
C:ledakemcpa12
226696022695302271361
T:
frodokem640
240730724091082412838
T:
frodokem640aes
2460572?2461672?3112424?
T:
C:ledakemcpa14
252365825260452528890
T:
ntrulpr1277
266085326617352662450
T:
C:ledakemcpa13
269800727078642728553
T:
hqc1281
280405928095302814600
T:
limasp1306cca
296047129651402972474
T:
limasp1822cca
400534540294394071432
T:
bigquake1
473292847357964743689
T:
frodokem976
477271647751354778019
T:
frodokem976aes
564728456550465664535
T:
limasp2062cca
590420059067005909997
T:
C:ledakemcpa32
595723259676265986175
T:
hqc1921
601001360447376053530
T:
hqc1922
729684073039997306638
T:
C:ledakemcpa33
847971084843948489669
T:
frodokem1344aes
851539685207808527696
T:
ledakem1264
857950185815028583190
T:
ledakem1364
863213786341798636686
T:
C:ledakemcpa34
936446094006069403985
T:
frodokem640shake
980019398031539848973
T:
ledakem1464
100232101003671810127949
T:
hqc2561
100856471009018110124217
T:
ledakem12sl
105915791061101010630716
T:
hqc2562
110451571105741911082716
T:
hqc2563
113686561141357011421508
T:
ledakem13sl
117979001181696511839101
T:
ledakem14sl
119638891196805411986005
T:
C:bikel1
142619351427665814284632
T:
C:ledakemcpa52
171490851715487917166019
T:
C:ledakemcpa53
201747322017984120198034
T:
C:ledakemcpa54
205668312064815720654849
T:
frodokem976shake
226029532260463222605227
T:
ntrulpr4591761
226145562262666022628108sntrup4591761
237873152379447023803092
T:
ledakem3264
242682742429257924300063
T:
ledakem3364
265382252655200426623906
T:
ledakem3464
307121203072089130728089
T:
ledakem32sl
339648133398043533991032
T:
ledakem33sl
360366203606265736149188
T:
ledakem34sl
375075593762911837644148
T:
frodokem1344shake
380860093809491538105519
T:
C:bikel3
430141834669625847225427
T:
bigquake3
486182904868470348692835
T:
ledakem5264
534244785343980953466443
T:
ledakem5364
619345306195695661979923
T:
ledakem5464
688729016889047268999852
T:
ledakem52sl
688827686990334271800947
T:
bigquake5
730891617310996773133126
T:
ledakem53sl
836026538367123983711105
T:
ledakem54sl
102853873102867994102886592
T:
sikep434
109374091109394011109412069
T:
sikep434comp
158239647158287867158308446
T:
sikep503
168143186168167858168187299
T:
sikep503comp
313831270313853875313892890
T:
sikep610
331838413331894715331916657
T:
sikep610comp
534419939534451833534596623
T:
sikep751
566152196566180428566650630
T:
sikep751comp