VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems
ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of key-encapsulation mechanisms on one machine: amd64; Ice Lake (706e5); 2019 Intel Core i3-1035G1; 4 x 1000MHz; icelake2, supercop-20221005

[Page version: 20240726 23:45:44]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for key-encapsulation mechanisms:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol C: means that the current SUPERCOP database does not list IND-CCA2 security as a goal for this key-encapsulation mechanism. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each key-encapsulation mechanism and each implementation. Designers and implementors interested in submitting new key-encapsulation mechanisms and new implementations of existing systems should read the call for submissions.

Implementation notes

Graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

NISTPQC graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

Cycles to generate a key pair
25%50%75%system
109081102811303kyber90s512
157341585916196kyber90s768
180811821018476kyber512
221842232522705kyber90s1024
265432682127197
T:
C:nhcompact512cca
286122891629263ntrulpr653
298422995130134
T:
ntrulpr4591761
298413029130727ntrulpr761
314703162231878kyber768
328953308233375
T:
lac128
374343758937857ntrulpr857
374443769138080
T:
C:nhcompact768cca
397904010540593ntrulpr953
401734059241224ntrulpr1013
415564176342224kyber1024
423744262943061
T:
newhope512cca
448044526945987
T:
C:r5nd1kem0d
473444785449084
T:
C:nhcompact1024cca
512005142651941ntrulpr1277
613396188262534
T:
C:r5nd1kem5d
618066248563643
T:
C:r5nd0kem2iot
637226422465923
T:
C:r5nd1kem4longkey
735897376973974
T:
lac256
798028006480744
T:
newhope1024cca
797608017680596
T:
lac192
99117100664102426
T:
C:r5nd3kem5d
131652132066132630ntruhps2048509
148620149701150566
T:
C:hila5
155152157405164607C:threebears624r2cpa
157861159676161072
T:
C:r5nd3kem0d
155079166117168287threebears624r2cca
168135168637169445
T:
kindi256342
180240181893184385
T:
C:r5nd5kem5d
184090186219187118
T:
kindi512222
185155187393189909
T:
C:r5nd5kem0d
186204191752197964
T:
kindi512241
204507204828205670ntruhrss701
207273207754209399ntruhps2048677
292528293235296068ntruhps4096821
325077340325345639C:threebears936r2cpa
348612352091361818threebears936r2cca
353582358633372483
T:
hqcrmrs128
382706385102390410
T:
kindi512321
394220396828411815
T:
hqc1281
394867397542414212
T:
hqc128
396930403664411480
T:
ntrukem443
401045404051408644
T:
C:r5n11kem0d
444368446465449660
T:
kindi256522
480791483031485359
T:
C:bikel1
503043511144514049sntrup653
571836572693575746sntrup761
570672575681615089threebears1248r2cca
566803580948614991C:threebears1248r2cpa
585421587262591788
T:
C:ledakemcpa14
616645621903626631
T:
lima2p1024cca
674340676183678321
T:
C:ledakemcpa13
704681707528731682
T:
hqcrmrs192
703673708938720156
T:
hqc1921
709377713708717345
T:
rqc128
749829769715773292
T:
C:r5n13kem0d
763044788683794262
T:
hqc1922
789927793682806906
T:
sntrup4591761
811792812418815269
T:
frodokem640
806680817864827817sntrup857
808156827519832498
T:
hqc192
815072831449835451
T:
titaniumccatoy
879175882171885824
T:
C:ledakemcpa12
912990916052934836
T:
titaniumccalite
907028918198924923
T:
ntrukem743
957517961513966506
T:
C:rolloi128
100544310081661014882
T:
frodokem640aes
101345410177641022779sntrup953
105110610810021095939
T:
hqc2561
110631711130511122882sntrup1013
111419811433711177973
T:
hqc2562
115330211597861164844
T:
C:rolloi192
115415911674521205011
T:
hqcrmrs256
117497711781411206095
T:
titaniumccastd
120415912177401257572
T:
hqc2563
122713712503631265204
T:
rqc192
124798412550261259853
T:
lima2p2048cca
125567012682111296238
T:
hqc256
127671912805111284596
T:
C:ledakemcpa34
128516012887661293075
T:
limasp1018cca
131557613185471344541
T:
titaniumccamed
139752714014751407988
T:
C:bikel3
152153615251691529186
T:
titaniumccahi
159870916018131605966
T:
frodokem976
168466916942191708335sntrup1277
170238717063951710244
T:
C:rolloi256
171907317235741733276
T:
C:r5n15kem0d
174903417592291886499
T:
rqc256
178474217891171794128
T:
titaniumccasuper
181244018172421830864
T:
C:ledakemcpa33
192382219416161967487
T:
C:lake1
195718219608531965519
T:
frodokem976aes
195233519635451975017
T:
C:lake2
204890820572492070195
T:
C:lake3
236813623748932401842
T:
C:ledakemcpa32
241515824216022430454
T:
limasp1306cca
248203524906552496887
T:
C:ledakemcpa53
257544425863352593697
T:
frodokem640shake
258223725922552636317
T:
limasp1822cca
258713925922802603274
T:
ledakem1464
299377130002303007146
T:
C:ledakemcpa54
303356130495703060531
T:
ledakem1364
313823431555053169608
T:
ledakem1264
322921232477453272476
T:
locker1
331398033203283328886
T:
frodokem1344aes
372001737274843768596
T:
rolloii128
3952178?3999658?5709768?
T:
ledakem14sl
3849083?4091636?6320026?
T:
ledakem13sl
412730241386844152373
T:
rolloii192
429733343265094351985
T:
locker4
461715746317324687030
T:
limasp2062cca
474466347546294764480
T:
rolloii256
486192548823734916487
T:
C:ledakemcpa52
503582250668065870045
T:
ledakem12sl
534550953745905405963
T:
frodokem976shake
540808554208415478675
T:
sikep434
5484263?5498240?8163612?
T:
ledakem3464
642555064401936455521
T:
remblem1056
643945964514056473969
T:
remblem928
667694066963186726352
T:
ledakem3364
704761770607127191620
T:
lotus128
715195672396037298764
T:
ramstakers216091
743222074452947461603
T:
sikep503
747906574996137678558
T:
ledakem3264
810157381420588185969
T:
locker7
819393082110698274065
T:
ledakem33sl
888370589153709680410
T:
sikep434comp
9007540?9072368?12616341?
T:
ledakem34sl
941598194332909460348
T:
frodokem1344shake
939393995088439623776
T:
ledakem5464
103380691041798311945327
T:
ledakem32sl
109660841101569511076201
T:
ledakem5364
121008111212408213165039
T:
sikep503comp
130959161322700413460790
T:
ledakem54sl
133208291333806913423365
T:
sikep610
146958521477420315037740
T:
lotus192
164508411655491518796752
T:
ledakem5264
166072661699031120033893
T:
ledakem53sl
222858502231468723039781mceliece348864f
224150872251044722608971
T:
mersenne756839
226512702266878222800189
T:
sikep751
228868702320493425025159
T:
sikep610comp
244135272483358429543665
T:
lotus256
296009123010065832372911
T:
ledakem52sl
306691543077118830907525
T:
ntskem1264
324309853313365234132045
T:
ramstakers756839
360885813619716439160784
T:
sikep751comp
22220477?38989901?47649172?mceliece348864
699841687006843170134649mceliece460896f
9744458597779889106909722
T:
ntskem1380
62060035?109032645?165777951?
T:
rsa2048
70658770?125654536?183178085?mceliece460896
134082140135683178140018044mceliece6960119f
164006704164182249165268819mceliece6688128f
174015576176399334177944347mceliece8192128f
155510273?215218647?381378753?mceliece6688128
135333885?233714769?290811347?mceliece6960119
235060253235501864236162472
T:
ntskem13136
183944873?245411433?359160457?mceliece8192128
252292922252932384253916737
T:
oddmanhattan128
393858880396432982397723870
T:
oddmanhattan192
725992938730911235731646057
T:
oddmanhattan256
403120032141723676234274734764
T:
pqrsa15
Cycles for encapsulation
25%50%75%system
131001365714122
T:
rsa2048
172701737217538kyber90s512
198702003020493ntruhps2048509
209862109521195ntruhrss701
228122379524044kyber90s768
275322781728168ntruhps2048677
293882948029720kyber512
297762983629932kyber90s1024
324033253632841
T:
sntrup4591761
327103303033313ntruhps4096821
348223518335409sntrup653
345583538637755mceliece348864f
357923656838943mceliece348864
376973781738183sntrup761
437324386644112kyber768
448374506145516
T:
C:nhcompact512cca
458304615746360sntrup857
491324926649496ntrulpr653
498144995150479sntrup953
506885108751333sntrup1013
510145114151380ntrulpr761
533585349253792
T:
ntrulpr4591761
587005898259802kyber1024
613136148961873
T:
C:nhcompact768cca
612026240663353
T:
ntskem1264
617166279763400
T:
lac128
638386402764213sntrup1277
638876408964542ntrulpr857
671646734467729ntrulpr953
625486799077970mceliece460896f
681116821568535ntrulpr1013
64036?69667?83290?mceliece460896
703007047170906
T:
newhope512cca
727807332174444
T:
C:r5nd1kem0d
801388042981162
T:
C:nhcompact1024cca
849278536086103
T:
C:ledakemcpa13
854758568186186ntrulpr1277
853528581586329
T:
C:ledakemcpa14
905329148693334
T:
C:ledakemcpa12
9729798453100091
T:
C:r5nd0kem2iot
9813799009100070
T:
C:r5nd1kem5d
102595103518105025
T:
C:r5nd1kem4longkey
107812108566109182
T:
C:bikel1
118005118792119810
T:
lotus128
113396119409130890mceliece6688128f
116146120844132092mceliece6688128
121049124204130443mceliece6960119
122759124982127190
T:
ntrukem443
124107125050125593
T:
lac192
122799125552130790mceliece6960119f
131556131973132854
T:
newhope1024cca
130814132683135535
T:
C:rolloi128
141060142312144628mceliece8192128
141237144116149880mceliece8192128f
148176149059149860
T:
lac256
148229149611151400
T:
C:rolloi192
157148158050159530
T:
C:r5nd3kem5d
169438170723172322
T:
lotus192
177134178480179991
T:
C:rolloi256
189077189569190529
T:
ledakem1264
197271197906198850
T:
C:ledakemcpa34
198603199560201357
T:
C:ledakemcpa33
202124202876204033
T:
C:hila5
202046203997206581
T:
ntskem1380
204030204864205660
T:
ledakem1464
217424219031219859
T:
ledakem1364
215122219236223017
T:
C:ledakemcpa32
217193219904235434C:threebears624r2cpa
222505223874225287
T:
kindi256342
217425225357238161threebears624r2cca
229912233528239796
T:
ntrukem743
244463245049245967
T:
C:bikel3
218187261738262935
T:
lotus256
261397263197265907
T:
C:r5nd3kem0d
266934268434271101
T:
ledakem12sl
272712274603277626
T:
kindi512222
273871274712275777
T:
ledakem13sl
273363276180278269
T:
kindi512241
275296277382280272
T:
C:r5nd5kem5d
297341298637301310
T:
ledakem14sl
260566303041318246
T:
ntskem13136
316951319532321761
T:
C:r5nd5kem0d
371134378077384825
T:
C:lake1
411363413776424684
T:
C:lake2
426694432698448983threebears936r2cca
420417439468452214C:threebears936r2cpa
437823440956443054
T:
rolloii128
440484442223444969
T:
C:ledakemcpa53
442032442757444475
T:
ledakem3464
443948445091447306
T:
C:ledakemcpa54
442523447516453655
T:
C:ledakemcpa52
446680448906450634
T:
lima2p1024cca
448574451482454216
T:
rolloii192
455327457733460144
T:
C:lake3
486301488704491385
T:
rolloii256
489102491966512040
T:
hqcrmrs128
507321512721515987
T:
C:r5n11kem0d
511034513322524073
T:
kindi512321
515767518115520407
T:
ledakem3264
529076531423533107
T:
ledakem3364
528985535477553060
T:
hqc128
534013536136538955
T:
kindi256522
569452581961594107
T:
hqc1281
583443588736595033
T:
locker1
641489656302658148
T:
titaniumccatoy
672424674458676951
T:
ledakem32sl
684885692669748034C:threebears1248r2cpa
693661698371717974threebears1248r2cca
698054699443702134
T:
ledakem33sl
769876777233785552
T:
locker4
813452815721834864
T:
titaniumccalite
864725867990870971
T:
ledakem34sl
904112906388910938
T:
C:r5n13kem0d
904242907214910694
T:
lima2p2048cca
923142929547936107
T:
rqc128
9728159805921003913
T:
titaniumccastd
9828589862871003032
T:
ledakem5364
99098410065751027147
T:
hqcrmrs192
99916710084561035832
T:
hqc1921
101535510183721024799
T:
ledakem5464
110216711136361143117
T:
hqc1922
111683011211041128099
T:
limasp1018cca
110895311429861156247
T:
hqc192
118447011871931190530
T:
ledakem54sl
119593912003371205310
T:
ledakem5264
122244612273921247527
T:
titaniumccamed
125609212570561259876
T:
frodokem640
137743213863571399236
T:
locker7
143040614339711438346
T:
frodokem640aes
143780614404031443541
T:
ledakem53sl
147629014787861481860
T:
titaniumccahi
153504015698381604694
T:
hqc2561
161416516371411667822
T:
hqc2562
162928516444951686703
T:
hqcrmrs256
165952016646521672641
T:
ledakem52sl
170112817391021801319
T:
hqc2563
174528617822171794263
T:
hqc256
179399917958321800471
T:
titaniumccasuper
211788621249142131790
T:
C:r5n15kem0d
217622521849052199004
T:
limasp1306cca
1718299?2252443?2273635?
T:
rqc192
225170922595392266368
T:
limasp1822cca
234217023554282367489
T:
rqc256
240585324088522413773
T:
frodokem976
262830326327442637349
T:
frodokem976aes
282330328321712840738
T:
frodokem640shake
424488342634524280325
T:
limasp2062cca
433659243426174402927
T:
frodokem1344aes
577554257923105827534
T:
frodokem976shake
884521088546929175076
T:
sikep434
949121795430639626543
T:
remblem1056
955089495655839614901
T:
remblem928
100196951006358410098491
T:
frodokem1344shake
122077381222759812242792
T:
sikep503
132929951344346113567306
T:
ramstakers216091
138404251390360213968252
T:
sikep434comp
180937551812252918213532
T:
pqrsa15
187886991884230118959771
T:
sikep503comp
236997002375270923888267
T:
mersenne756839
243995162459104624720215
T:
sikep610
336942233379381933994191
T:
sikep610comp
365288123659434336644746
T:
sikep751
521030815246695752896323
T:
oddmanhattan128
576082415778505658104578
T:
sikep751comp
595067876078922562575274
T:
ramstakers756839
968453909716264497473568
T:
oddmanhattan192
205929975206611367207102513
T:
oddmanhattan256
Cycles for decapsulation
25%50%75%system
136801375114600kyber90s512
184121846918549kyber90s768
223112238823504kyber512
251232527125869kyber90s1024
282322842528587
T:
C:r5nd1kem0d
309963102131115ntruhps2048509
338203391834035kyber768
368923771438207
T:
C:r5nd0kem2iot
385193893239515
T:
C:r5nd1kem5d
397293993540732
T:
C:r5nd1kem4longkey
423964245042680
T:
C:hila5
424474260942849
T:
C:nhcompact512cca
426614274142886sntrup653
438354397044153sntrup761
448744498245098ntruhps2048677
459444611247115kyber1024
471604725447370ntruhrss701
563205641556559ntrulpr653
566445680856964sntrup857
579585809958372ntrulpr761
580235854458807ntruhps4096821
590125914459300
T:
C:nhcompact768cca
598876005960336sntrup953
609646107761322sntrup1013
628756340664539
T:
C:r5nd3kem5d
690766923869514
T:
sntrup4591761
747057487375180ntrulpr857
748987505276182sntrup1277
750987524875473
T:
newhope512cca
759707617676409
T:
ntrulpr4591761
768237698577175
T:
C:nhcompact1024cca
773167749377940ntrulpr953
778107791778176ntrulpr1013
833128371384724
T:
lac128
977069788398289ntrulpr1277
110061110211110390mceliece348864f
112103112258113013mceliece348864
113611114130119448C:threebears624r2cpa
112420114881119283
T:
C:r5nd3kem0d
118532123453129771
T:
C:r5nd5kem5d
124801125801127976
T:
ntrukem443
133025133923135013
T:
lotus128
140487140860141321
T:
newhope1024cca
144110145161149482C:threebears936r2cpa
143109145924151203
T:
C:r5nd5kem0d
172097172489172965C:threebears1248r2cpa
178083179777180939
T:
lac192
195640196804197764
T:
lotus192
199101200804205301
T:
C:r5n11kem0d
222583222982223624mceliece460896f
223438224155224921mceliece460896
238008238770258985
T:
ntskem1264
246781247270248208mceliece6960119
246893247443248282mceliece6960119f
262000262495263330mceliece6688128f
261933262574263914mceliece6688128
264312264879266399
T:
ntrukem743
265803266724267678mceliece8192128f
266121267069267929mceliece8192128
275842277301278709
T:
kindi256342
284098286120287231
T:
C:r5n13kem0d
291602294114300812
T:
lac256
293313320621323729
T:
lotus256
362289364948387161
T:
kindi512222
359214366942368712
T:
kindi512241
414802415432416975
T:
ntskem1380
494240529471532914threebears624r2cca
543316545074547191
T:
lima2p1024cca
547443554032564736
T:
C:ledakemcpa12
620175622152625834
T:
kindi256522
638747645804649948
T:
kindi512321
668093673500682967
T:
C:ledakemcpa14
544396?681071?687380?
T:
C:ledakemcpa13
750492755352766408
T:
titaniumccatoy
797072801681806381
T:
hqcrmrs128
826850835823840078
T:
hqc128
934147936747938005
T:
ntskem13136
951807963043966394
T:
titaniumccalite
965759973438989023
T:
C:rolloi128
937138975308986647threebears936r2cca
102110510285331038694
T:
C:r5n15kem0d
106269310697231076441
T:
hqc1281
108992110954291102424
T:
lima2p2048cca
113232211510801157221
T:
titaniumccastd
116369511691951171869
T:
C:bikel1
117287111929961257165
T:
C:rolloi192
126690912680971270939
T:
frodokem640
136328913697901386328
T:
frodokem640aes
136699613729971387872
T:
ledakem1264
137923713864831396397threebears1248r2cca
139829214172801420972
T:
titaniumccamed
142175714273681432885
T:
limasp1018cca
141321114453451487369
T:
hqcrmrs192
146218214747671480301
T:
ledakem1364
153054115440841562247
T:
rolloii128
151631415464481561239
T:
hqc192
154965315548121566098
T:
C:ledakemcpa32
155269715702051592132
T:
C:lake1
156730515774261585970
T:
ledakem1464
160057916087781637759
T:
hqc1921
167409216834701714722
T:
hqc1922
170090117083441718713
T:
rolloii192
171166417163211722509
T:
titaniumccahi
184266518671521904460
T:
ledakem12sl
190787619141901922948
T:
C:rolloi256
190155219180951927490
T:
C:ledakemcpa33
193285119674632075037
T:
ledakem13sl
205680820646732077857
T:
ledakem14sl
207771220802982085473
T:
titaniumccasuper
217268521852662195148
T:
rolloii256
220549722576932270851
T:
hqcrmrs256
229475123063542319503
T:
C:ledakemcpa34
234450623487382355630
T:
hqc256
222666423546422360550
T:
hqc2561
241222124156542426634
T:
frodokem976
240646324696492491860
T:
hqc2562
250200125036482508400
T:
frodokem976aes
246844825236952546763
T:
hqc2563
253721425404462545660
T:
rsa2048
273258327464142761295
T:
C:lake2
275576727617072770160
T:
frodokem640shake
282011028284972843395
T:
limasp1306cca
288548528945312904177
T:
limasp1822cca
305402530706853085556
T:
locker1
320128132140073234193
T:
rqc128
334968133893063458103
T:
C:bikel3
348063734971253523308
T:
locker4
351752735261933535908
T:
C:ledakemcpa52
371461637460283778622
T:
ledakem3364
376421737764433789182
T:
C:lake3
397146639847324115829
T:
ledakem3464
403252540550644093830
T:
ledakem3264
4024695?4066721?5177005?
T:
C:ledakemcpa54
416454641738184238918
T:
frodokem1344aes
428920143043954316806
T:
C:ledakemcpa53
533526853528805365359
T:
ledakem33sl
548763154966595508106
T:
ledakem32sl
553070055502415572592
T:
limasp2062cca
556583855859835617248
T:
locker7
575448657727205817722
T:
frodokem976shake
617461761908726203702
T:
ledakem34sl
627797773795077432913
T:
rqc192
920398292243169342732
T:
ledakem5364
945133594669369589980
T:
sikep434
947363194943539511704
T:
ledakem5264
967894997134339741410
T:
rqc256
99859481000428610040957
T:
frodokem1344shake
99737791001993810180759
T:
ledakem5464
100617171007473410102247
T:
sikep434comp
127856421280745512847309
T:
ledakem53sl
128285821285360812896069
T:
remblem1056
129013651291359512928020
T:
remblem928
129180071297635112999311
T:
ledakem54sl
130047851302940813044651
T:
sikep503
137908971380508613816308
T:
sikep503comp
138411281388163314012797
T:
ledakem52sl
246225792466215524922641
T:
sikep610
260661532609130826261794
T:
sikep610comp
280454152833378128878806
T:
ramstakers216091
350539383513402235309664
T:
mersenne756839
393461713939721239419113
T:
sikep751
420834434212738542242076
T:
sikep751comp
572269055748442858268377
T:
oddmanhattan128
107450580107769197108143804
T:
oddmanhattan192
118950072120768093120907089
T:
ramstakers756839
141500495141600084141772231
T:
pqrsa15
226704607226896201227209184
T:
oddmanhattan256