VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems
ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of key-encapsulation mechanisms on one machine: amd64; Golden Cove (906a4-40); 2022 Intel Core i3-1215U, P cores; 2 x 1600MHz; alder2,1f626960,5600000, supercop-20240625

[Page version: 20240726 23:45:44]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for key-encapsulation mechanisms:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol C: means that the current SUPERCOP database does not list IND-CCA2 security as a goal for this key-encapsulation mechanism. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each key-encapsulation mechanism and each implementation. Designers and implementors interested in submitting new key-encapsulation mechanisms and new implementations of existing systems should read the call for submissions.

Implementation notes

Graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

NISTPQC graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

Cycles to generate a key pair
25%50%75%system
753076487778kyber90s512
118141197712193kyber90s768
176611776417902kyber512
176231786718134kyber90s1024
233142349023800
T:
C:nhcompact512cca
23838?23879?44811?ntruplus576
243372459524943ntrulpr653
252742540025708ntrulpr761
256142575825948
T:
lac128
269272729427744
T:
ntrulpr4591761
300383018330456kyber768
306743086031155threebears624r2cca
308753099231202C:threebears624r2cpa
323603253032890C:threebears624r2cpax
324343257732716ntrulpr857
332953342733571threebears624r2ccax
336963404434347
T:
C:nhcompact768cca
347023486635203ntrulpr953
352843550435827ntrulpr1013
361913622036256ntruplus864
381463844238851
T:
newhope512cca
409604126441629
T:
C:nhcompact1024cca
425534300143397
T:
lightsaber2
428394307943452kyber1024
436404400144533
T:
C:r5nd1kem0d
456614582745964ntrulpr1277
47616?48363?131483?ntruplus1152
603436103362036
T:
C:r5nd1kem5d
612256195563616
T:
C:r5nd0kem2iot
618286207262412threebears936r2cca
624166311063959
T:
C:r5nd1kem4longkey
643876458465196C:threebears936r2cpa
644316486465174
T:
lac256
652386545866203threebears936r2ccax
667766694267172C:threebears936r2cpax
680716826868624
T:
hqc128round4
705787110471432
T:
lac192
739247438074941
T:
newhope1024cca
800688012680191ntruplus768
835108409590317
T:
saber2
903839065291302threebears1248r2cca
944439470495328threebears1248r2ccax
943539477795348C:threebears1248r2cpa
970729752498266C:threebears1248r2cpax
102221103108104144
T:
C:r5nd3kem5d
106685107136107989
T:
C:hila5
112212112474112900ntruhps2048509
128775131341134642
T:
hqcrmrs128
141349144271147641
T:
hqc128
138561146343151567
T:
firesaber2
145983148149150919
T:
hqc1281
148125148498148649
T:
saberx4
160834162001163062
T:
hqc192round4
162685163729165800
T:
C:r5nd3kem0d
170115170503173480
T:
kindi256342
180189180518181125
T:
kindi512222
184190184500184954
T:
kindi512241
189772192073194089
T:
C:r5nd5kem5d
195054195237195501ntruhrss701
195729197267198558
T:
C:r5nd5kem0d
200301200648201113ntruhps2048677
272383272998273514ntruhps4096821
289087292248297283
T:
hqc1921
289337293178296712
T:
hqcrmrs192
307999314087319322
T:
hqc1922
318725322154327248
T:
hqc192
323152326156330287
T:
hqc256round4
364995375916383429
T:
C:r5n11kem0d
377954379244380718
T:
kindi512321
392507395736398212
T:
rqc128
394820396839398167
T:
C:bikel1
453523454586469271
T:
kindi256522
475205480729485669
T:
hqc2561
491235492885495916
T:
lima2p1024cca
494758500616510092
T:
hqcrmrs256
502433506447513734
T:
hqc2562
528634531193534597
T:
C:ledakemcpa14
525665531963539805
T:
hqc2563
537293546506550717
T:
hqc256
555739556657558291sntrup761
556491557034558370sntrup653
629166632228636159
T:
C:ledakemcpa13
664128666318671107
T:
C:r5n13kem0d
692662?699547?1020326?
T:
rqc192
685839702439712975
T:
ntrukem443
716337717144720608
T:
sntrup4591761
704593720672723792
T:
frodokem640
755990757989763737
T:
titaniumccatoy
797518802564807330
T:
C:ledakemcpa12
847011849362852215
T:
titaniumccalite
889962892591896263
T:
C:rolloi128
899761907689920016
T:
frodokem640aes
934975935945936905sntrup857
991647?998156?1469467?
T:
rqc256
99844310030221006695
T:
lima2p2048cca
107764910813081086979
T:
limasp1018cca
108535310873621090544
T:
titaniumccastd
110571511090961112001
T:
C:rolloi192
112668411358031140436sntrup953
116486311668371188442
T:
C:bikel3
120537212196731227675
T:
C:ledakemcpa34
121730112202381225882
T:
titaniumccamed
126427912657971267217sntrup1013
134502613502871355509
T:
titaniumccahi
139426414050881418144
T:
ntrukem743
144579314544941461353
T:
frodokem976
151527415201561524417
T:
C:rolloi256
156728815729961580678
T:
C:r5n15kem0d
163270316370911651100
T:
titaniumccasuper
168571716954201704634
T:
C:ledakemcpa33
178801517945201805327
T:
frodokem976aes
183998518554081901092
T:
remblem928
189957519182491930515
T:
remblem1056
193742219400191952869sntrup1277
202490820380842050727
T:
limasp1306cca
218007621878462194938
T:
limasp1822cca
232971023373952343064
T:
C:ledakemcpa32
239205224047512420172
T:
C:ledakemcpa53
241298224269842441131
T:
ledakem1464
280148528059312820001
T:
frodokem640shake
281038928240082849197
T:
ledakem1264
283654328560672879989
T:
ledakem1364
285854028763322910718
T:
C:ledakemcpa54
296625429738832983952
T:
frodokem1344aes
336057233669873379108
T:
rolloii128
373047637380313744453
T:
rolloii192
3790053?3816411?5374867?
T:
ledakem14sl
404520040591234070696
T:
limasp2062cca
430200343087844315848
T:
rolloii256
467762146856574692091
T:
sikep434
3634418?4751036?4794929?
T:
ledakem13sl
474880247689925042340
T:
ledakem12sl
505144150725225096516
T:
C:ledakemcpa52
5124933?5159736?7651827?
T:
ledakem3464
593063559447855959557
T:
frodokem976shake
621019962230896242001
T:
ledakem3364
673270467514666768704
T:
sikep503
728803673272197434384
T:
ledakem3264
768535077414537779053
T:
lotus128
780170079421728608804
T:
sikep434comp
817199881989978235585
T:
ledakem33sl
831665083418648390429
T:
ledakem34sl
985952598877499925995
T:
ledakem5464
97969891000263211442871
T:
ledakem32sl
102934081032313310342716
T:
frodokem1344shake
110642221111547311157685
T:
ledakem5364
111190141115869812123263
T:
sikep503comp
120679251209353712173551
T:
ledakem54sl
121257081213531212151264
T:
sikep610
149653821505744116721570
T:
ledakem5264
153257961536788615466185
T:
lotus192
161059321619942819782566
T:
ledakem53sl
203121652032259620332195
T:
sikep751
210152122105776422854126
T:
sikep610comp
250958132512816425175593mceliece348864f
257499912581869028230777
T:
ledakem52sl
278963412794318928003229
T:
ntskem1264
266007672903743829194227
T:
lotus256
305817933060336630624822mceliece348864pcf
322030923225271834928433
T:
sikep751comp
24041146?32573010?49290281?mceliece348864
28286153?40654923?57413643?mceliece348864pc
759217997607272576173999mceliece460896f
759703027608035476210523mceliece460896pcf
900339539075103591785385
T:
ntskem1380
75902057?103150167?157859261?mceliece460896
75926767?130139146?185327842?mceliece460896pc
161874718162056817163051498mceliece6960119pcf
162088204162408706162617833mceliece6960119f
167040874167275119183078354mceliece6688128f
187401190187773101188507195mceliece8192128f
189937680190305093191255304mceliece8192128pcf
189604048191124274192992697mceliece6688128pcf
167278270?228659842?411009337?mceliece6688128
189672611?252575764?378360309?mceliece6688128pc
149814052?255757826?362073583?mceliece6960119pc
161824484?270224370?379231420?mceliece6960119
185877825?307632569?370906864?mceliece8192128pc
246347354?308038642?370906765?mceliece8192128
364388837367582370377197116
T:
ntskem13136
Cycles for encapsulation
25%50%75%system
771577537848ntruplus576
973197749852kyber90s512
105061056510649ntruplus768
124261245612701ntruplus864
145211457514631kyber90s768
148591489615293ntruplus1152
151971535015586ntruhps2048509
172881737617457ntruhrss701
207142079920899kyber90s1024
216102183222081ntruhps2048677
248652545127134mceliece348864
257722586926003kyber512
258362602426256ntruhps4096821
246882607527450mceliece348864f
281092825528392
T:
sntrup4591761
301303039430644sntrup653
299653086432054mceliece348864pcf
302703120333119mceliece348864pc
320753219932402sntrup761
377103801738614
T:
C:nhcompact512cca
388403894739078kyber768
393503960639769sntrup857
423994255042815sntrup953
424634256243089ntrulpr653
436654398745029sntrup1013
447194512045300ntrulpr761
457874610146458threebears624r2ccax
458614621946786threebears624r2cca
466714684747121
T:
lac128
469774712047330C:threebears624r2cpa
469934734147658C:threebears624r2cpax
495504969949967
T:
ntrulpr4591761
511965152351866
T:
C:nhcompact768cca
48883?53449?63162?mceliece460896f
49379?54046?62711?mceliece460896
548795497255181kyber1024
557305597456337sntrup1277
568025690757509ntrulpr857
538215834464537mceliece460896pcf
595015959859749ntrulpr953
606196071460815ntrulpr1013
605026073860953
T:
lightsaber2
612066155161822
T:
newhope512cca
580036214368141mceliece460896pc
659046613666681
T:
C:nhcompact1024cca
641186709368670
T:
ntskem1264
685506914570020
T:
C:r5nd1kem0d
736807390574480threebears936r2cca
736517411974495threebears936r2ccax
777157785178060ntrulpr1277
780117824878833C:threebears936r2cpa
780457837478817C:threebears936r2cpax
849068515785463
T:
C:ledakemcpa14
859588638086946
T:
C:ledakemcpa13
865738767888605
T:
C:bikel1
884419320699784mceliece6688128
902529353498132mceliece6960119f
9081293931100367mceliece6960119
9172695060104038mceliece6688128pcf
940889544096875
T:
C:ledakemcpa12
9257395988102185mceliece6688128pc
955679691898119
T:
C:r5nd0kem2iot
970529793999081
T:
C:r5nd1kem5d
9164198643108041mceliece6688128f
99957100814101973
T:
C:r5nd1kem4longkey
99119101324106372mceliece6960119pcf
106178106834107505
T:
lac192
104358107153112395mceliece6960119pc
107261108643110088mceliece8192128
106814108921110959mceliece8192128f
109435109902115358
T:
saber2
110287110655110901threebears1248r2ccax
110338110728111666threebears1248r2cca
112914114866123786mceliece8192128pcf
115103115311115696C:threebears1248r2cpa
115174115569115834C:threebears1248r2cpax
114848116164116991
T:
newhope1024cca
115930117426119035mceliece8192128pc
121117121975123250
T:
C:rolloi128
123681125305126114
T:
lotus128
126880127416128161
T:
lac256
131930135096138085
T:
ntrukem443
137348138228139920
T:
C:rolloi192
155353156479158106
T:
C:hila5
155971157246159402
T:
C:rolloi256
156438157862158946
T:
C:r5nd3kem5d
173848174952175754
T:
hqc128round4
177755177856178204
T:
saberx4
172295181246181681
T:
firesaber2
185535186006186697
T:
lotus192
189564190471191000
T:
ledakem1464
190406193353197500
T:
ntrukem743
198025198797199497
T:
ledakem1264
201069202619204514
T:
C:bikel3
202674203464204168
T:
C:ledakemcpa33
202975203726204726
T:
C:ledakemcpa34
204079?210441?284067?
T:
lotus256
215111215754216584
T:
ledakem1364
221845222556223860
T:
kindi256342
223366226386228169
T:
ntskem1380
232358235110237198
T:
C:ledakemcpa32
234456237177241054
T:
hqcrmrs128
244839247175250550
T:
hqc128
256019257808259894
T:
C:r5nd3kem0d
262065262401263251
T:
kindi512222
266494267112267685
T:
kindi512241
267856268947269524
T:
ledakem12sl
270295270709271424
T:
ledakem13sl
280565281472289081
T:
ntskem13136
287601289546292845
T:
C:r5nd5kem5d
315620317011317585
T:
ledakem14sl
314424317292321622
T:
hqc1281
317589318906320510
T:
C:r5nd5kem0d
363958365298367110
T:
rolloii128
375335377473379708
T:
rolloii192
378843379742380534
T:
lima2p1024cca
393235394352397646
T:
hqc192round4
405132407115409362
T:
rolloii256
419569420784425281
T:
ledakem3464
456070457062457946
T:
C:ledakemcpa54
461105462378464748
T:
C:ledakemcpa53
462130464131469211
T:
C:r5n11kem0d
475718481908488291
T:
C:ledakemcpa52
495768496741497879
T:
kindi512321
506795507513508327
T:
ledakem3264
507439508071508798
T:
ledakem3364
524997527423533695
T:
hqcrmrs192
543897544636554142
T:
kindi256522
560174563884570606
T:
hqc192
565316569452576490
T:
rqc128
595133598596604834
T:
hqc1921
602287604086608550
T:
titaniumccatoy
636495640730648441
T:
hqc1922
648149649073650057
T:
ledakem32sl
703605707085710077
T:
ledakem33sl
763400764369767989
T:
lima2p2048cca
761817765441771188
T:
hqc256round4
764804766744773044
T:
titaniumccalite
775104775985776866
T:
ledakem34sl
831893834791837129
T:
C:r5n13kem0d
880180889779896217
T:
hqcrmrs256
905737907251909919
T:
titaniumccastd
931682940238948872
T:
hqc256
960057966684976605
T:
hqc2561
968483972428975859
T:
limasp1018cca
101527910226741029156
T:
hqc2562
102184410337331050484
T:
frodokem640
104370710449891046185
T:
ledakem5464
105172210537041057739
T:
ledakem5364
105161210635001073538
T:
hqc2563
110864511111271115995
T:
ledakem5264
111510911168581118205
T:
ledakem54sl
114522111487411157303
T:
titaniumccamed
122638812450751260511
T:
frodokem640aes
129168912942851301108
T:
titaniumccahi
1060750?1397735?1720346?
T:
rqc192
148849715102881552001
T:
ledakem53sl
160856816109501616298
T:
titaniumccasuper
164494116478741650285
T:
ledakem52sl
184346318489101857432
T:
limasp1306cca
188871018941731901120
T:
C:r5n15kem0d
1907842?1922183?2404683?
T:
rqc256
192568819411351949483
T:
limasp1822cca
200651320190082033466
T:
frodokem976
227774322861002299538
T:
frodokem976aes
263219526498432684524
T:
remblem928
269708827154882729087
T:
remblem1056
302842930320813038629
T:
frodokem640shake
373375037390583748171
T:
frodokem1344aes
376132437755383789079
T:
limasp2062cca
626396762949376306122
T:
frodokem976shake
761925476313077649013
T:
sikep434
108769761090709310925524
T:
frodokem1344shake
110531691107051811089195
T:
sikep503
120486221208733012156890
T:
sikep434comp
171022941716049517236315
T:
sikep503comp
222773482229083522308455
T:
sikep610
307703103093000531791352
T:
sikep610comp
328472373286562832884332
T:
sikep751
512555675137756751677881
T:
sikep751comp
Cycles for decapsulation
25%50%75%system
815581858229ntruplus576
875587978857kyber90s512
105991063210676ntruplus768
117161178511998C:threebears624r2cpax
125161265512685ntruplus864
130411311513174kyber90s768
146841473614800C:threebears936r2cpax
150081507715255ntruplus1152
175811766317742C:threebears1248r2cpax
190051906619143kyber90s1024
208072089520982kyber512
209562104921149C:threebears624r2cpa
250752520625312ntruhps2048509
251932531825570C:threebears936r2cpa
259702616926716
T:
C:r5nd1kem0d
291962929529484C:threebears1248r2cpa
317763184931910kyber768
364363651636676
T:
C:hila5
366013678537047
T:
C:nhcompact512cca
372363788238388
T:
C:r5nd1kem5d
381843827538379ntruhps2048677
383253838538523sntrup653
376263920339679
T:
C:r5nd0kem2iot
383993921040532
T:
C:r5nd1kem4longkey
394053947239568sntrup761
395723977039930ntruhrss701
458474591146030kyber1024
491134924949385ntruhps4096821
498965000650086ntrulpr653
503415058951121
T:
C:nhcompact768cca
510705117451290ntrulpr761
517945191551999sntrup857
544195456654797sntrup953
556085573955901sntrup1013
611006142061682
T:
C:r5nd3kem5d
620606241663687
T:
lac128
634986357863781
T:
sntrup4591761
647556497765222
T:
C:nhcompact1024cca
661206640566873threebears624r2ccax
677106802168376
T:
newhope512cca
683726844068557ntrulpr857
688466909169333
T:
lightsaber2
698246994070064ntrulpr953
700777033271271sntrup1277
704147055670665ntrulpr1013
722957251573023
T:
ntrulpr4591761
855828598686619threebears624r2cca
905869071890876ntrulpr1277
981419839798790mceliece348864f
982279840298659mceliece348864
100796101102101425threebears936r2ccax
103220103573103806mceliece348864pc
106223106595107210mceliece348864pcf
116206117660118759
T:
C:r5nd5kem5d
121478122277126364
T:
C:r5nd3kem0d
122797125083138983
T:
saber2
126171127735129103
T:
newhope1024cca
127501127992128504threebears936r2cca
137917138262144587
T:
lotus128
138882141755144935
T:
ntrukem443
142781143272143542threebears1248r2ccax
150338151004151498
T:
lac192
157899160262163077
T:
C:r5nd5kem0d
165779167534170625
T:
C:r5n11kem0d
173499174224174885threebears1248r2cca
188264188445188832
T:
saberx4
188010195787198138
T:
firesaber2
210919211736212921
T:
ntrukem743
227234228321235090
T:
lotus192
237063240219243051
T:
lac256
244245244558245030mceliece460896f
244276244704245021mceliece460896
249453249764250423mceliece460896pc
249455249966250563mceliece460896pcf
249183252106252980
T:
C:r5n13kem0d
271722272240272839mceliece6960119f
271969272404273025mceliece6960119
277849278456279021mceliece8192128f
278124278741279521mceliece6960119pc
278495279041279635mceliece6688128
278262279221303363mceliece6688128f
278274279225281006mceliece8192128
280158280671281358mceliece6960119pcf
280304281326287165
T:
kindi256342
285939286424287119mceliece8192128pc
289452290132292231mceliece8192128pcf
290512290868291404mceliece6688128pcf
290531290957291555mceliece6688128pc
300576300983301446
T:
ntskem1264
307674308549309832
T:
hqc128round4
259262?310503?328351?
T:
lotus256
350252350771352764
T:
kindi512222
356148356515357067
T:
kindi512241
442287447853452543
T:
hqc128
475961478898480519
T:
lima2p1024cca
490299496243498968
T:
hqcrmrs128
586477587983589939
T:
ntskem1380
583437?589909?754809?
T:
C:ledakemcpa13
625482627143629694
T:
kindi512321
626257628569631685
T:
C:ledakemcpa12
638675639288641652
T:
kindi256522
645918648451650616
T:
hqc192round4
670552673088675442
T:
hqc1281
707086708659710224
T:
titaniumccatoy
726093730421738758
T:
C:ledakemcpa14
840598859168863532
T:
C:r5n15kem0d
860141868528881840
T:
hqc192
875751886359927400
T:
C:rolloi128
891103895607901020
T:
titaniumccalite
913036916220918667
T:
hqcrmrs192
955587958617962585
T:
lima2p2048cca
102984010356301044435
T:
frodokem640
102929210381241051173
T:
C:rolloi192
104715710505601059300
T:
titaniumccastd
108782210911311095590
T:
ntskem13136
109567111049461111399
T:
hqc1921
110971611201721128348
T:
hqc1922
117972711928051208570
T:
frodokem640aes
123153612400261250977
T:
limasp1018cca
126038812641291267397
T:
hqc256round4
131113213166571327985
T:
titaniumccamed
134155813497951356651
T:
rolloii128
135423713572041443209
T:
C:bikel1
139680614053191415536
T:
hqc256
143968614520881473114
T:
rolloii192
145041914542711460357
T:
ledakem1264
145695414744191485408
T:
hqcrmrs256
150636515140631521857
T:
titaniumccahi
154072515457031550202
T:
ledakem1364
156541115816821668507
T:
ledakem1464
158922315957501606412
T:
hqc2561
168051016849481691847
T:
hqc2562
170715717128761717938
T:
C:ledakemcpa32
172012817257401737259
T:
C:rolloi256
173550517455781758931
T:
hqc2563
186984218735191879223
T:
titaniumccasuper
188507118977531916343
T:
rolloii256
195949119791131986637
T:
ledakem12sl
200871920441512080138
T:
ledakem13sl
206399420719172084186
T:
frodokem976
210773021168862131661
T:
C:ledakemcpa33
217474122353252252367
T:
ledakem14sl
224728522500442255547
T:
frodokem976aes
235371123635562383721
T:
rqc128
240334824144982424285
T:
limasp1306cca
244694524634202480151
T:
limasp1822cca
248921125064692516117
T:
C:ledakemcpa34
298845430053343017995
T:
frodokem640shake
363618936705673729049
T:
remblem928
369108237012173712612
T:
frodokem1344aes
374346337749753812276
T:
remblem1056
406829640803544091329
T:
C:ledakemcpa52
410815541470484163825
T:
ledakem3364
428846042944994312851
T:
C:bikel3
438186144224294634331
T:
ledakem3464
459276046015734630681
T:
ledakem3264
483741948472854859698
T:
C:ledakemcpa53
487023649018654923588
T:
limasp2062cca
4669478?5297270?5984476?
T:
rqc192
586996658786585890790
T:
C:ledakemcpa54
609784061191596170193
T:
ledakem33sl
615988861684116174748
T:
ledakem32sl
620839962149026228375
T:
frodokem976shake
647835764925166511185
T:
ledakem34sl
816606881803518193760
T:
sikep434
821737482541829183812
T:
rqc256
869277287122228730150
T:
sikep434comp
101831541024578310287866
T:
ledakem5264
107308761074263610765773
T:
ledakem5364
108059701081921910840761
T:
frodokem1344shake
113763111155995311601836
T:
ledakem5464
118004021181773211836804
T:
sikep503
125525001257527012595605
T:
sikep503comp
149108111494653414971970
T:
ledakem53sl
150171041504445915066029
T:
ledakem54sl
151266751517872615377266
T:
ledakem52sl
224398782245614322476184
T:
sikep610
237731372378450623801497
T:
sikep610comp
353532193537489735387624
T:
sikep751
374791813753537137559353
T:
sikep751comp