VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems
ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of key-encapsulation mechanisms on one machine: amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20250922

[Page version: 20251005 01:31:28]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for key-encapsulation mechanisms:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol C: means that the current SUPERCOP database does not list IND-CCA2 security as a goal for this key-encapsulation mechanism. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each key-encapsulation mechanism and each implementation. Designers and implementors interested in submitting new key-encapsulation mechanisms and new implementations of existing systems should read the call for submissions.

Test results

Graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

NISTPQC graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

Cycles to generate a key pair
25%50%75%system
833984488592kyber90s512
11485?11568?14846?ntruplus576
127251283113033kyber90s768
137001376113895ntruplus768
150301505215089ntruplus864
149661507515254kyber512
183291843318664kyber90s1024
187921888819054timer
188911982420049smaugt1
208682102321189
T:
C:nhcompact512cca
241892438124712ntrulpr653
245522465924754
T:
lac128
249502521325418ntrulpr761
19953?25436?28934?ntruplus1152
243202545525531
T:
ntrulpr4591761
260652648426913kyber768
265432659026652
T:
lightsaber2
311393129731479ntrulpr857
315073177632099smaugt3
321623236432534
T:
C:nhcompact768cca
327343291533231newhope512cca
340463432334583ntrulpr953
344633472435141kyber1024
373783761337953ntrulpr1013
394643967339989
T:
C:nhcompact1024cca
420644221742434ntrulpr1277
411404265342785smaugt5
477084777547868
T:
saber2
600886021660414
T:
hqc128round4
622196262762935newhope1024cca
660116633266716
T:
lac256
711547129171499
T:
lac192
743457442974546
T:
firesaber2
102681102827103078ntruhps2048509
145988146279146507
T:
hqc192round4
156517156735157153
T:
kindi256342
161092161389161921ntruhps2048677
161562161845162148ntruhrss701
162504163251176636
T:
kindi512222
168841169240169582
T:
kindi512241
178220179911180788
T:
C:hila5
179886180231181681C:threebears624r2cpa
179625186597187545threebears624r2cca
250675252671255568
T:
hqcrmrs128
252820253218253734ntruhps4096821
282018282904294839
T:
hqc128
284601285778289494
T:
hqc1281
293708294060294581
T:
hqc256round4
329862331498334481
T:
ntrukem443
336184336497337065
T:
kindi512321
362353362685391387C:threebears936r2cpa
361871367276374957threebears936r2cca
376349395974402279sntrup653
409023410019416736
T:
kindi256522
454596456245457951
T:
C:bikel1
467952468490469191sntrup761
507678510385527894
T:
hqc1921
509848511975528406
T:
hqcrmrs192
550050551539560713sntrup4591761
541217558318561521
T:
hqc1922
577969579472580781
T:
rqc128
573506580256590036
T:
hqc192
608005625080679857threebears1248r2cca
667634694836719562sntrup857
732592734396736753
T:
frodokem640
723197745963753730C:threebears1248r2cpa
754472776739784542
T:
hqc2561
789760792935829778sntrup953
792023815422821437
T:
hqc2562
842752848034868536
T:
hqcrmrs256
830948853571858782
T:
hqc2563
856928859620862639
T:
ntrukem743
884521887170891475
T:
C:rolloi128
887932889860893060
T:
frodokem640aes
909382931054937329
T:
hqc256
9703369782341007843sntrup1013
1000589?1003226?1457484?
T:
rqc192
117166611744831177683
T:
C:rolloi192
125872612640621267135
T:
C:bikel3
136151014059441485521sntrup1277
1404447?1409752?2049878?
T:
rqc256
149015114968271498978
T:
frodokem976
174923617518361755919
T:
C:rolloi256
177924719740391977053
T:
frodokem976aes
224754822533392256698
T:
frodokem640shake
298892029913592996491
T:
frodokem1344aes
352834035427143556724
T:
rolloii128
428467242881634294827
T:
rolloii192
443867444484624463508
T:
remblem1056
446315744793944497104
T:
remblem928
453899245430984572103
T:
frodokem976shake
504002650456575053045
T:
rolloii256
563020156354925646947
T:
sikep434
748547274893497494591
T:
lotus128
765482876606057666350
T:
frodokem1344shake
849421084975258503437
T:
sikep503
9181168920712010004312
T:
sikep434comp
142588041428262214328953
T:
sikep610
144212661442598314437601
T:
lotus192
137466651493101515149577
T:
sikep503comp
171297331721646917342403
T:
ntskem1264
239080062392486725002364mceliece348864pcf
243025872430850824315193
T:
lotus256
243028302436254026301535
T:
sikep610comp
239109352501475825134695mceliece348864f
250370302504712425068574
T:
sikep751
24735808?33727429?51653119?mceliece348864
24734190?33742655?50628173?mceliece348864pc
392749113950237642787888
T:
sikep751comp
523907925260021952963134
T:
ntskem1380
776954387783449181225266mceliece460896f
777838028114283683102050mceliece460896pcf
114040614114361083114633788
T:
ntskem13136
104011726?130446997?183536302?mceliece460896
104139260?130544280?160550657?mceliece460896pc
130637921132085551132389131mceliece6688128pcf
133431741136437486137937190mceliece6960119pcf
134971128137075276137103222mceliece6960119f
158275558160255310164398382mceliece8192128f
162448705162615325163051427mceliece8192128pcf
167375013170772107171262663mceliece6688128f
133455378?187483731?340328997?mceliece6688128
118659512?205046959?292731786?mceliece6960119
120208734?205230591?249216226?mceliece6960119pc
163191588?213233552?308567180?mceliece8192128pc
170266904?220265967?317199715?mceliece6688128pc
211644848?261745488?361828463?mceliece8192128
436018834?619378417?632578912?
T:
bigquake1
484780630448964164474920815349
T:
bigquake3
838169420186975829628858718725
T:
bigquake5
Cycles for encapsulation
25%50%75%system
129251301813211kyber90s512
145461457114839ntruhps2048509
152151524215290ntruplus576
166221669916774ntruhrss701
168851693617133smaugt1
169191699217025timer
176461769417820kyber90s768
182431859721405mceliece348864f
186031863618694ntruplus768
182941969221130mceliece348864
211372120621475ntruhps2048677
215652161721968ntruplus864
237352379123872kyber90s1024
238262424824490kyber512
243182492526344mceliece348864pc
243032496926603mceliece348864pcf
255312569825859ntruhps4096821
278282787428033sntrup4591761
287402880228941ntruplus1152
320233222532465sntrup653
326553272032785smaugt3
341813438634619sntrup761
345483467434752
T:
C:nhcompact512cca
354343551135570
T:
lightsaber2
359023600836314kyber768
35123?40006?48327?mceliece460896
406734085241134sntrup857
415644195244666
T:
ntskem1264
426214302843218smaugt5
434834364443821sntrup953
37110?44683?55265?mceliece460896f
446094475944955ntrulpr653
445624479745162sntrup1013
453064545145644ntrulpr761
445834635448539
T:
lac128
42148?46937?58148?mceliece460896pc
42260?47217?56423?mceliece460896pcf
475334766048572
T:
ntrulpr4591761
477904816348878kyber1024
504025052450639
T:
C:nhcompact768cca
541875432654579sntrup1277
552605540655788newhope512cca
561185633556550ntrulpr857
596605973359968
T:
saber2
600896020060516ntrulpr953
632746334263476
T:
C:nhcompact1024cca
632446351263869ntrulpr1013
642796872472402mceliece6688128
664196872473860mceliece6960119
647856983174378mceliece6688128f
699347291477560mceliece6960119f
734367361473923ntrulpr1277
714747432980260mceliece6688128pcf
749537707283314mceliece6688128pc
757097820580864mceliece6960119pc
787967954481148mceliece8192128f
794898138586668mceliece6960119pcf
800368138783336mceliece8192128
815008197782747
T:
C:bikel1
884658856988681
T:
firesaber2
887588998591324mceliece8192128pc
897579085092145mceliece8192128pcf
102067102461102853
T:
lotus128
103270103530103968newhope1024cca
108055109395121637
T:
lac192
110101111052113929
T:
ntskem1380
112655114710117584
T:
ntrukem443
130678131365132120
T:
C:rolloi128
130374132265135344
T:
lac256
144294144987146254
T:
lotus192
152096159344160306
T:
ntskem13136
167558167991168336
T:
hqc128round4
177219177982179041
T:
C:rolloi192
186630187065187790
T:
C:rolloi256
187043190306193909
T:
ntrukem743
189672190606191488
T:
C:bikel3
199164200813216826
T:
lotus256
204507204708204933
T:
kindi256342
225416226034226473
T:
C:hila5
236363236729242037C:threebears624r2cpa
230862238219246168threebears624r2cca
241697242264255095
T:
kindi512222
246343246637247573
T:
kindi512241
363122365639377813
T:
hqcrmrs128
384965385646386439
T:
hqc192round4
394228408127411328
T:
hqc128
428609430644432496
T:
rolloii128
438666439511485565C:threebears936r2cpa
428959441243445026
T:
hqc1281
431571441374449427threebears936r2cca
440011442200443846
T:
rolloii192
445985447024447584
T:
kindi512321
492730493332505177
T:
kindi256522
495283497221501738
T:
rolloii256
730529731531732468
T:
hqc256round4
697446734688793550threebears1248r2cca
740221747831764481
T:
hqcrmrs192
737100756321762328
T:
hqc1921
756566759343762532
T:
rqc128
801879808665832377
T:
hqc1922
816240836277849706
T:
hqc192
835944879988889817C:threebears1248r2cpa
101899510204001021696
T:
frodokem640
111380611146071116026
T:
frodokem640aes
111926911384231155992
T:
hqc2561
117188411986911205132
T:
hqc2562
122271112276051254930
T:
hqcrmrs256
122200912502691261478
T:
hqc2563
130640913341921359651
T:
hqc256
134541013498691359938
T:
rqc192
195360619560381958207
T:
frodokem976
1864304?2007810?3851639?
T:
rqc256
210868722732642296919
T:
frodokem976aes
247647124992132503049
T:
frodokem640shake
247154325266642558465
T:
bigquake1
352756735315643537263
T:
frodokem1344aes
488188748871584890287
T:
frodokem976shake
657908566063036641442
T:
remblem1056
661564766311756651647
T:
remblem928
656814067968746948268
T:
bigquake3
813841881509488200959
T:
frodokem1344shake
920358092144119221965
T:
sikep434
100839301035348110580083
T:
bigquake5
139468141395561314000016
T:
sikep503
143503721438499914456576
T:
sikep434comp
213442192141429321567054
T:
sikep503comp
262207912623859526257783
T:
sikep610
360031203609564736242590
T:
sikep610comp
404953364052343440600188
T:
sikep751
628060196288311763193766
T:
sikep751comp
Cycles for decapsulation
25%50%75%system
106441068410759kyber90s512
139251398214217ntruplus576
148651491314979kyber90s768
169831700817393ntruplus768
179291801218390kyber512
198641991719985ntruplus864
206322066720698kyber90s1024
255292554725567ntruhps2048509
266602669926731ntruplus1152
268262712427170smaugt1
273042734027382timer
276332766427739kyber768
322513238332521
T:
C:nhcompact512cca
335193356333639
T:
lightsaber2
371763724337272
T:
C:hila5
376613772537806ntruhps2048677
371403779938384kyber1024
385983865938724ntruhrss701
409024119741619sntrup761
427174286242998sntrup653
463364647946576smaugt3
489904919049279
T:
C:nhcompact768cca
519185204252268ntrulpr653
520405213052241ntruhps4096821
519345216052558ntrulpr761
555725577056000sntrup857
563065635156403
T:
saber2
584475853558668sntrup953
586815889559015newhope512cca
599846006660175
T:
C:nhcompact1024cca
600726038560630sntrup1013
606746080360895sntrup4591761
607356168562164smaugt5
609146349264320
T:
lac128
664436659666764ntrulpr857
675006759167760
T:
ntrulpr4591761
700907018970399ntrulpr953
717887198472410sntrup1277
741787440474654ntrulpr1013
849868506185171
T:
firesaber2
855108565786040ntrulpr1277
937859395994198mceliece348864f
938519399694218mceliece348864
9982799944100140mceliece348864pc
99835100169101285mceliece348864pcf
102967103193110930C:threebears624r2cpa
109623109743109928newhope1024cca
115812116210116636
T:
lotus128
132325133513143769C:threebears936r2cpa
133189137197143731
T:
ntrukem443
157896159096169331
T:
lac192
164986165500167332
T:
lotus192
165813166074171313C:threebears1248r2cpa
181572181815182191mceliece460896
183604183855184786mceliece460896f
188158188281188558mceliece460896pcf
189738189934190173mceliece460896pc
203819204000204369mceliece6960119f
208330208760209267mceliece6960119
212232212939213876mceliece6960119pcf
214145214316214746mceliece6688128f
215297215611215969mceliece8192128
215328215902219363mceliece8192128f
217015217434218058mceliece6960119pc
218797219179219695mceliece6688128
222442222910224701mceliece6688128pc
224482224932225881mceliece8192128pcf
224656225139225568mceliece8192128pc
226701227285227967mceliece6688128pcf
230985231937233228
T:
ntskem1264
234232235320261851
T:
lotus256
241408242265244483
T:
ntrukem743
248688253722255604
T:
lac256
258068258770260863
T:
kindi256342
289823290060290457
T:
hqc128round4
323606323985325810
T:
kindi512222
326482327246328382
T:
kindi512241
404229405784410849
T:
ntskem1380
537393557974563056threebears624r2cca
568237570843571515
T:
kindi512321
579278582214602865
T:
kindi256522
604418605941641015
T:
hqcrmrs128
614856615539616105
T:
hqc192round4
620206621817632934
T:
hqc128
797488809206845103
T:
C:rolloi128
824193828899843475
T:
hqc1281
831542832497833427
T:
ntskem13136
9576909586581050995threebears936r2cca
9734099845051012455
T:
C:rolloi192
102353210244351025709
T:
frodokem640
106059010611631062177
T:
C:bikel1
106166810630171064195
T:
frodokem640aes
108280911026891105100
T:
hqcrmrs192
115595011768351192744
T:
hqc192
118799311888231190011
T:
hqc256round4
122147912319081273475
T:
rolloii128
123524312396371261077
T:
hqc1921
128110812946071322204
T:
hqc1922
137306414167381468243
T:
rolloii192
150750415129661573261threebears1248r2cca
168493817375371796910
T:
hqcrmrs256
172652517435851769872
T:
hqc2561
177364317954511902907
T:
C:rolloi256
180281818254561829645
T:
hqc256
182715518354631860216
T:
hqc2562
187518218824071887229
T:
hqc2563
195242419539321955426
T:
frodokem976
194474319598851980550
T:
rolloii256
197492119766141979864
T:
frodokem976aes
234342523466082349299
T:
frodokem640shake
282261428438952879844
T:
rqc128
306401231509303157255
T:
bigquake1
330122333096133315859
T:
C:bikel3
336238433684473372274
T:
frodokem1344aes
464676446521654692315
T:
frodokem976shake
590452259160485934385
T:
rqc192
784259078525897882863
T:
frodokem1344shake
886087988796318900517
T:
remblem1056
891133789276888950164
T:
remblem928
8754013?9152592?12756697?
T:
rqc256
982858598336179838566
T:
sikep434
104606591046433910468550
T:
sikep434comp
148485551487026914888634
T:
sikep503
157676341577837815786510
T:
sikep503comp
252287402534654425753847
T:
bigquake3
264100752645458526581461
T:
sikep610
280016452802532528042293
T:
sikep610comp
384662893862450438672474
T:
bigquake5
435698184360424443775022
T:
sikep751
462871334630782246342604
T:
sikep751comp