VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems
ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of key-encapsulation mechanisms on one machine: amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20251114

[Page version: 20251125 18:44:50]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for key-encapsulation mechanisms:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol C: means that the current SUPERCOP database does not list IND-CCA2 security as a goal for this key-encapsulation mechanism. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each key-encapsulation mechanism and each implementation. Designers and implementors interested in submitting new key-encapsulation mechanisms and new implementations of existing systems should read the call for submissions.

Test results

Graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

NISTPQC graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

Cycles to generate a key pair
25%50%75%system
845785468693kyber90s512
11429?11480?14718?ntruplus576
126751282613019kyber90s768
137261375313786ntruplus768
150021504815106ntruplus864
149481512015289kyber512
183581854518843kyber90s1024
187131881418996smaugt1
188151892119052timer
223892255622748
T:
C:nhcompact512cca
242682445824660ntrulpr653
19922?24560?27004?ntruplus1152
244312495125546
T:
ntrulpr4591761
250552518425342
T:
lac128
250042523325503ntrulpr761
261322628426660kyber768
265302657626686
T:
lightsaber2
307803097131220
T:
C:nhcompact768cca
317833199832445smaugt3
325023266132817ntrulpr857
327603290733095newhope512cca
328123298433226ntrulpr1013
343853457434932kyber1024
355843576736127ntrulpr953
409774123241459smaugt5
414444167541908
T:
C:nhcompact1024cca
439854410944566ntrulpr1277
478864794148143
T:
saber2
601486024960407
T:
hqc128round4
620996247062802newhope1024cca
659676619366739
T:
lac256
711577139871830
T:
lac192
743767445174605
T:
firesaber2
102638102769103098ntruhps2048509
144120144412144724
T:
C:hila5
146102146612147834
T:
hqc192round4
154282154520155002
T:
kindi256342
161042161576162243ntruhps2048677
161617161801162229ntruhrss701
161993162157162685
T:
kindi512222
169430169928170249
T:
kindi512241
180049183125190380C:threebears624r2cpa
179739185507197037threebears624r2cca
247499247849248294ntruhps4096821
253967254994258035
T:
hqcrmrs128
283112284590296390
T:
hqc128
286499287382299987
T:
hqc1281
293790294273295017
T:
hqc256round4
331578333345336282
T:
ntrukem443
339372339871340612
T:
kindi512321
361417361882404719threebears936r2cca
361776361986390135C:threebears936r2cpa
409906411145411938
T:
kindi256522
407757413045415641sntrup653
453765456884459291
T:
C:bikel1
467965468471469073sntrup761
511017514360530491
T:
hqc1921
515033517769522541
T:
hqcrmrs192
527641530072581294sntrup4591761
543501559797564823
T:
hqc1922
575909578651595950
T:
hqc192
580305581893583627
T:
rqc128
609188617215624411C:threebears1248r2cpa
639564670862679722threebears1248r2cca
673384687324732550sntrup857
732531734450737338
T:
frodokem640
752080774115784011
T:
hqc2561
800919822616843169
T:
hqc2562
816381830187898564sntrup953
837133855748876173
T:
hqcrmrs256
835059856983883122
T:
hqc2563
859113863451867940
T:
ntrukem743
886707888720893506
T:
C:rolloi128
888017889452892238
T:
frodokem640aes
920573926305948099
T:
hqc256
963810?985718?2272402?sntrup1013
103380710368641043488
T:
rqc192
117387511778301183889
T:
C:rolloi192
125833212614271265836
T:
C:bikel3
1419818?1425182?2076029?
T:
rqc256
136776014307501444556sntrup1277
148821614957441499205
T:
frodokem976
171976817226531727807
T:
C:rolloi256
196856719711011972898
T:
frodokem976aes
224939222528152260710
T:
frodokem640shake
298994129924592994353
T:
frodokem1344aes
352573235301093537273
T:
rolloii128
428800742971394316983
T:
rolloii192
446406844865074537380
T:
remblem1056
448548244975154510901
T:
remblem928
463398646456814676174
T:
frodokem976shake
501743050230825031109
T:
rolloii256
562389856276395632000
T:
sikep434
748937674981887528840
T:
lotus128
762818876326487639568
T:
frodokem1344shake
849434785011148507964
T:
sikep503
9178712920014610016278
T:
sikep434comp
137675471379565515019161
T:
sikep503comp
142790931428744214300746
T:
sikep610
144181301443265114443272
T:
lotus192
171370721727026717372159
T:
ntskem1264
238957862392593525033452mceliece348864pcf
243079682431782224368839
T:
lotus256
243410082447818526495779
T:
sikep610comp
240152152500212225562334mceliece348864f
250358822506034825079410
T:
sikep751
25574935?34163678?60779535?mceliece348864
392095503924362942491764
T:
sikep751comp
32516999?42588221?60572714?mceliece348864pc
524670295269937653016811
T:
ntskem1380
777632417781278477860074mceliece460896f
778012928124882381392827mceliece460896pcf
81141951?104228960?160536913?mceliece460896pc
114397292114625911114988891
T:
ntskem13136
81168537?130449519?160432018?mceliece460896
133490150134230771138227079mceliece6960119f
133703891134333622136607084mceliece6960119pcf
159299292160054144162400759mceliece8192128f
160219195164118838164186863mceliece8192128pcf
167181445170554077170685389mceliece6688128pcf
167409326171097858172599567mceliece6688128f
136859021?180068742?263704522?mceliece6960119pc
137901434?219670431?268547158?mceliece6960119
169788012?262566040?362873987?mceliece8192128pc
211623948?263221255?363244750?mceliece8192128
166977119?266511588?319108314?mceliece6688128
217289243?267738132?371143679?mceliece6688128pc
428346627?612480154?621444180?
T:
bigquake1
432484000650224433345050272388
T:
bigquake3
855350968789342603049056402695
T:
bigquake5
Cycles for encapsulation
25%50%75%system
129291302613109kyber90s512
146571474214945ntruhps2048509
151791521415311ntruplus576
166751677816891ntruhrss701
169221696217204timer
169341696917022smaugt1
175621761617806kyber90s768
180671860620072mceliece348864f
186421868218758ntruplus768
182621924120091mceliece348864
212002128121533ntruhps2048677
215682160021673ntruplus864
236822372123776kyber90s1024
240822417224256kyber512
240522504926069mceliece348864pcf
243272544426912mceliece348864pc
259942635726541ntruhps4096821
280322808328208sntrup4591761
285982908029252ntruplus1152
317763204232225sntrup653
325083261632748smaugt3
340083421634526sntrup761
354263545935523
T:
lightsaber2
358743592536012
T:
C:nhcompact512cca
364563688937056kyber768
35750?40112?48136?mceliece460896
35703?40477?49715?mceliece460896f
405744089341843sntrup857
428204290243029smaugt5
435454383344188sntrup953
435074387844139sntrup1013
41034?43949?53366?
T:
ntskem1264
445604468244932ntrulpr653
453424545445703ntrulpr761
420854642052105mceliece460896pcf
42325?46821?57328?mceliece460896pc
475174765148608
T:
ntrulpr4591761
462344790849553
T:
lac128
483404911149185kyber1024
490344912049346
T:
C:nhcompact768cca
543515461456613sntrup1277
553495547555663newhope512cca
560885622156522ntrulpr857
589225914959428ntrulpr1013
595385962659714
T:
saber2
600146022661215ntrulpr953
651926535965666
T:
C:nhcompact1024cca
652066821175921mceliece6688128f
649147033677652mceliece6688128
703857266476750mceliece6960119
734257359773925ntrulpr1277
709227458578242mceliece6960119f
744777880783836mceliece6688128pcf
757717950887432mceliece6688128pc
773858030985068mceliece6960119pc
783008080983782mceliece6960119pcf
800988110882315mceliece8192128f
813818201083090
T:
C:bikel1
809968215483755mceliece8192128
885398864088764
T:
firesaber2
887409010692957mceliece8192128pc
893569080591857mceliece8192128pcf
101424101926102417
T:
lotus128
103553103985104447newhope1024cca
111416111802113097
T:
ntskem1380
112502114424116209
T:
ntrukem443
109770120132122135
T:
lac192
131133131667132519
T:
C:rolloi128
130531133611148489
T:
lac256
143127143787144617
T:
lotus192
150571151621157865
T:
ntskem13136
167441167738167940
T:
hqc128round4
176728177302178170
T:
C:rolloi192
185048187137189327
T:
ntrukem743
187114187863188701
T:
C:hila5
189823190456191798
T:
C:bikel3
190511191161192019
T:
C:rolloi256
198589199160200374
T:
lotus256
202078202221202508
T:
kindi256342
231120235104258023threebears624r2cca
237035237527257983C:threebears624r2cpa
240760241267241953
T:
kindi512222
245987247229247998
T:
kindi512241
365304366465381317
T:
hqcrmrs128
384665385246385793
T:
hqc192round4
394879408695411422
T:
hqc128
429578431255433091
T:
rolloii128
431557432047481635threebears936r2cca
441209442720444424
T:
rolloii192
431087443818449748
T:
hqc1281
438655444783468086C:threebears936r2cpa
451881455103463107
T:
kindi512321
486881489247491874
T:
rolloii256
494299494740495354
T:
kindi256522
705043710696729340C:threebears1248r2cpa
730664731502732619
T:
hqc256round4
747878751478771727
T:
hqcrmrs192
756844757690759906
T:
rqc128
752514764459788383threebears1248r2cca
743500765029773741
T:
hqc1921
798646814387835546
T:
hqc1922
820585839915845412
T:
hqc192
101898810199821021464
T:
frodokem640
111362311149681116066
T:
frodokem640aes
112161011491891161010
T:
hqc2561
118533312132061221372
T:
hqc2562
123268512396371265451
T:
hqcrmrs256
123401012549431270571
T:
hqc2563
131751913462031353398
T:
hqc256
139867014051781440905
T:
rqc192
187688818876261904007
T:
rqc256
195567419573571959124
T:
frodokem976
229733422996352301143
T:
frodokem976aes
247438124774952480837
T:
frodokem640shake
247050625185452570404
T:
bigquake1
352831235302393554235
T:
frodokem1344aes
496363649679714971727
T:
frodokem976shake
664845266712256697747
T:
remblem928
665616666734436687047
T:
remblem1056
667661068488087044439
T:
bigquake3
816654781722618176071
T:
frodokem1344shake
919806892050299216621
T:
sikep434
99181641014804910368210
T:
bigquake5
139446951395808913964375
T:
sikep503
143349931440122714469109
T:
sikep434comp
214264602148724721604523
T:
sikep503comp
261921362621514426250749
T:
sikep610
362106103634637336523846
T:
sikep610comp
405975974062852540796453
T:
sikep751
627617016284100663240236
T:
sikep751comp
Cycles for decapsulation
25%50%75%system
106711071210823kyber90s512
139221395214260ntruplus576
148411490115220kyber90s768
169731701417044ntruplus768
180401812518182kyber512
198981996020369ntruplus864
206422069220755kyber90s1024
255012553725669ntruhps2048509
266922674826974smaugt1
267512679026823ntruplus1152
273642739928110timer
279912880428883kyber768
334803352433620
T:
lightsaber2
343483444234522
T:
C:nhcompact512cca
372333733637370
T:
C:hila5
376073764437695ntruhps2048677
377363858138637kyber1024
392973937339454ntruhrss701
407654091741149sntrup761
426154276043012sntrup653
462574631546358smaugt3
463114637746473
T:
C:nhcompact768cca
519585212252309ntrulpr761
520255223852469ntrulpr653
523405244652534ntruhps4096821
553755578260729sntrup857
563855643756518
T:
saber2
585875870258872sntrup953
586145873259005newhope512cca
594795976760115sntrup1013
605166075461100smaugt5
616456178162118sntrup4591761
61240?63657?84641?
T:
lac128
636136371963923
T:
C:nhcompact1024cca
664526676267229ntrulpr857
675206758868546
T:
ntrulpr4591761
688756904369251ntrulpr1013
700797020070392ntrulpr953
717967200572256sntrup1277
850098506685135
T:
firesaber2
857088596186225ntrulpr1277
937019387294191mceliece348864
937569390094136mceliece348864f
99821100045100315mceliece348864pcf
99918100158100443mceliece348864pc
103355104713109953C:threebears624r2cpa
109708109832109992newhope1024cca
115953116344116859
T:
lotus128
130262131454139131
T:
ntrukem443
131774143620143955C:threebears936r2cpa
163463165550174747C:threebears1248r2cpa
166410167775168286
T:
lotus192
157717169498170765
T:
lac192
181913182434182732mceliece460896
182169182658183854mceliece460896f
188330188601188894mceliece460896pcf
189791190126190882mceliece460896pc
203729203934204209mceliece6960119
203896204120204399mceliece6960119f
211333211757212162mceliece6960119pcf
211502211832212283mceliece6960119pc
214431214809215189mceliece6688128
214562215017215877mceliece6688128f
215321215855216585mceliece8192128
215648216059216447mceliece8192128f
222569222909223324mceliece6688128pcf
222613223064223483mceliece6688128pc
224678225015225457mceliece8192128pcf
224582225081225416mceliece8192128pc
230061231600233145
T:
ntskem1264
233661234425236680
T:
lotus256
237279239551241005
T:
ntrukem743
255129255417255814
T:
kindi256342
239627255539258266
T:
lac256
290001290212290605
T:
hqc128round4
322652323119324706
T:
kindi512222
327269327663328439
T:
kindi512241
405917406444407376
T:
ntskem1380
539848550478588168threebears624r2cca
569326572805583353
T:
kindi512321
579456580355581063
T:
kindi256522
606478607378608332
T:
hqcrmrs128
615320616089616950
T:
hqc192round4
647970649432651421
T:
hqc128
797339802624821545
T:
C:rolloi128
815269828440909111
T:
hqc1281
830703831955832855
T:
ntskem13136
9592649968511021512threebears936r2cca
102245310243401026294
T:
frodokem640
101637210466561072022
T:
C:rolloi192
106045810622061067919
T:
frodokem640aes
106164710658521079277
T:
C:bikel1
108475710878091109474
T:
hqcrmrs192
115759111605391205331
T:
hqc192
118898811902491191279
T:
hqc256round4
126728112769081294051
T:
hqc1921
123087012797791327503
T:
rolloii128
128809213174451324538
T:
hqc1922
138080714149751470498
T:
rolloii192
150932315144401538353threebears1248r2cca
172222317446621751370
T:
hqcrmrs256
176955517740531785659
T:
hqc2561
180850118127101872255
T:
hqc256
181566318211751836373
T:
C:rolloi256
183030818501521875526
T:
hqc2562
183767819190351933301
T:
hqc2563
195132219525841966067
T:
frodokem976
197987019807081982287
T:
frodokem976aes
198941320138642027914
T:
rolloii256
234217223447532349126
T:
frodokem640shake
280685828314222856633
T:
rqc128
307065131900763194628
T:
bigquake1
331093833132563346866
T:
C:bikel3
336736133690433383799
T:
frodokem1344aes
476400347717604825571
T:
frodokem976shake
597865759925966013364
T:
rqc192
784663078517827856314
T:
frodokem1344shake
875376787796908908744
T:
rqc256
892825989528738974556
T:
remblem1056
897843190068449041719
T:
remblem928
982598498312689976841
T:
sikep434
104578921046524610473323
T:
sikep434comp
148640951487522114889256
T:
sikep503
158076481581754515839015
T:
sikep503comp
250103892540816826076025
T:
bigquake3
263971152641597226432288
T:
sikep610
279734772800984128229286
T:
sikep610comp
382147583834434438514638
T:
bigquake5
435992144362740143650952
T:
sikep751
462626174628593146337235
T:
sikep751comp