VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems
ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of key-encapsulation mechanisms on one machine: amd64; Zen 3 (a20f10); 2020 AMD Ryzen 5 5600X; 6 x 3700MHz; unstable; spawn, supercop-20231215

[Page version: 20240726 23:45:44]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for key-encapsulation mechanisms:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol C: means that the current SUPERCOP database does not list IND-CCA2 security as a goal for this key-encapsulation mechanism. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each key-encapsulation mechanism and each implementation. Designers and implementors interested in submitting new key-encapsulation mechanisms and new implementations of existing systems should read the call for submissions.

Implementation notes

Graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

NISTPQC graphs: (pkcycles,pkbytes) (ccycles,cbytes) (kcycles,cbytes) (pkbytes,cbytes)

Cycles to generate a key pair
25%50%75%system
873288438991kyber90s512
133941354213764kyber90s768
194251953619684kyber512
197951994320239kyber90s1024
23458?23754?35446?ntrulpr653
251602527125382
T:
lac128
25197?25530?38110?ntrulpr761
263442645526566
T:
ntrulpr4591761
270472712127269
T:
C:nhcompact512cca
305993071030932ntrulpr857
324863263433041ntrulpr953
328193307833263ntrulpr1013
331523344833892
T:
C:r5nd1kem0d
337443392934262kyber768
355943570535890
T:
C:nhcompact768cca
369633703737074threebears624r2cca
37037?37074?60088?C:threebears624r2cpa
380733825838850C:threebears624r2cpax
39368?39442?64306?threebears624r2ccax
422914240242624ntrulpr1277
431424406745769
T:
C:r5nd0kem2iot
444004458544807
T:
newhope512cca
445854521446065
T:
C:r5nd1kem5d
460284625046472
T:
C:nhcompact1024cca
457694647247656
T:
C:r5nd1kem4longkey
476934824848840kyber1024
652686545365749
T:
hqc128round4
662306656367488
T:
lac256
718547215073001
T:
lac192
741117488876183
T:
C:r5nd3kem5d
756287596176072threebears936r2cca
781077818178366threebears936r2ccax
788477921779328C:threebears936r2cpa
806978077180882C:threebears936r2cpax
891338928189503
T:
newhope1024cca
109816110075110260ntruhps2048509
114367114811114959threebears1248r2cca
117845118585119177
T:
C:hila5
118955119510119695threebears1248r2ccax
121249121323121471C:threebears1248r2cpax
122248122285122396C:threebears1248r2cpa
122322123728125356
T:
C:r5nd3kem0d
136012138084139860
T:
C:r5nd5kem5d
148629150183151700
T:
C:r5nd5kem0d
157842162726164465
T:
hqc192round4
199245199578199948ntruhps2048677
198505202464205276
T:
kindi256342
204129204314204536ntruhrss701
203611206904212232
T:
kindi512222
208310214637218115
T:
kindi512241
269434273652280682
T:
hqcrmrs128
292374292781293558ntruhps4096821
302734304584316831
T:
hqc128
300403308025332667
T:
hqc256round4
310245320161332889
T:
ntrukem443
324009328153341436
T:
hqc1281
357309359270361749
T:
C:r5n11kem0d
422688426536438820
T:
kindi512321
434158436082440078
T:
C:bikel1
485958486994488474sntrup761
522995524660526510
T:
lima2p1024cca
530284534502545454
T:
kindi256522
565619567617582787
T:
hqcrmrs192
562733571613574943sntrup653
570540580752588411
T:
C:ledakemcpa14
595404596588598068
T:
rqc128
591038599289611980
T:
hqc1921
611018?614496?957671?
T:
C:r5n13kem0d
633810636807653050
T:
hqc192
629296645909651829
T:
hqc1922
656084658785660302
T:
frodokem640
660043661893664890
T:
C:ledakemcpa13
691789693787697154
T:
titaniumccatoy
719502724645733710
T:
ntrukem743
747511752395755022
T:
sntrup4591761
751100754985759906
T:
C:rolloi128
797609800088803307
T:
titaniumccalite
837051838272842231
T:
frodokem640aes
887519901024920671
T:
hqcrmrs256
913937916971918932
T:
C:ledakemcpa12
956820970473977466sntrup857
963184985828997002
T:
hqc2562
994190996299999999
T:
titaniumccastd
98364510112841024715
T:
hqc2561
99089710116541021866
T:
hqc2563
101298610154281021422
T:
C:rolloi192
99578110167971029340
T:
hqc256
1047544?1052058?1530320?
T:
rqc192
106708010711131076996
T:
lima2p2048cca
111651211308681137565
T:
titaniumccamed
112753811323111139600
T:
limasp1018cca
118747811938051199022sntrup953
123650312400551244643
T:
C:bikel3
126073812618481263476
T:
titaniumccahi
131657113190871479371
T:
frodokem976
133692113429521349501sntrup1013
139967314040021409404
T:
C:ledakemcpa34
144695914538041460501
T:
C:rolloi256
1476818?1498204?2163538?
T:
rqc256
151122815162231520552
T:
titaniumccasuper
159888116080941618454
T:
frodokem976aes
169008617032581718095
T:
C:r5n15kem0d
172923217371871751062
T:
C:ledakemcpa33
204887520670052082138
T:
limasp1306cca
206249120856532104634sntrup1277
229625723023622310724
T:
limasp1822cca
251725825233632532058
T:
C:ledakemcpa32
257183325811942592775
T:
ledakem1464
267054926945252727640
T:
frodokem1344aes
2792834?2819363?4505601?
T:
C:ledakemcpa53
298871230056213726825
T:
ledakem1364
303289030428063060677
T:
C:ledakemcpa54
317400831906583217372
T:
ledakem1264
332885333535323371588
T:
frodokem640shake
3714948?3731117?5143777?
T:
ledakem14sl
389928239073113919521
T:
rolloii128
401897740324824072664
T:
rolloii192
408021240955304112069
T:
limasp2062cca
471465147250484749172
T:
rolloii256
4901760?4970432?6155653?
T:
C:ledakemcpa52
4010837?5041694?6093937?
T:
ledakem13sl
515942851737475191174
T:
remblem1056
524315952737585940276
T:
remblem928
528304552926285315790
T:
sikep434
532666854102146019937
T:
ledakem12sl
6127422?6149807?9307461?
T:
ledakem3464
674391667684106882518
T:
ledakem3364
702200870608587100596
T:
lotus128
726783673066127370437
T:
frodokem976shake
802348780420988074362
T:
sikep503
867069187365519541708
T:
ledakem33sl
879541888382279516141
T:
ledakem3264
888884389226249722601
T:
sikep434comp
9196498?9238974?13250218?
T:
ledakem34sl
105817041062410610760155
T:
ledakem5464
115843301162110812924285
T:
ledakem32sl
121204231216837512346678
T:
ledakem5364
124857981251828412570787
T:
sikep610
126456751271723312815246
T:
frodokem1344shake
130891941315398114265239
T:
sikep503comp
134094291345682613494640
T:
lotus192
143104531434460415333947
T:
ledakem54sl
154190101692968318407278
T:
ledakem5264
17969457?18197377?22584578?
T:
ledakem53sl
215348142157007521624761
T:
sikep751
215551642160763023377747
T:
sikep610comp
219713032203986422158042mceliece348864pcf
220781592210768522133659mceliece348864f
223432642239240022461183
T:
lotus256
256290122588264726241103
T:
ntskem1264
267023452757772832782037
T:
ledakem52sl
341411583432212537450845
T:
sikep751comp
30373300?39701185?50560500?mceliece348864pc
21688549?39713321?57876806?mceliece348864
694157746953077069801203mceliece460896f
695132696964206669790880mceliece460896pcf
769911177721034278644943
T:
ntskem1380
70362789?97279993?151418800?mceliece460896pc
96793517?123805885?204927312?mceliece460896
127005719128218912130017001mceliece6960119pcf
126726998128366209128560533mceliece6960119f
144648651144855740145115739mceliece6688128f
144516857145384322146503054mceliece6688128pcf
162134814162835335163063847mceliece8192128f
163273415163791304164203558mceliece8192128pcf
163119014163813208164385561
T:
ntskem13136
172838803?218571913?265380650?mceliece6960119pc
130296647?218819295?307389118?mceliece6960119
143480524?235017932?351891053?mceliece6688128
218098683?248361427?377101706?mceliece8192128
194625735?248578506?352841028?mceliece6688128pc
217258709?270463340?338674172?mceliece8192128pc
Cycles for encapsulation
25%50%75%system
129501306113098kyber90s512
159471602116317ntruhps2048509
180931820418315kyber90s768
193511942519499ntruhrss701
248272501225271ntruhps2048677
250492512325271kyber90s1024
258632664028379mceliece348864
269362712127306
T:
sntrup4591761
262332734329156mceliece348864f
287122874928897kyber512
288602915629341ntruhps4096821
298593011830303sntrup653
318943204232301sntrup761
318203256034299mceliece348864pc
320053256034225mceliece348864pcf
375923788838036sntrup857
405154062640885sntrup953
40959?41181?63714?ntrulpr653
408854121841477sntrup1013
418104188441958
T:
C:nhcompact512cca
414034199542587
T:
ntskem1264
43660?43882?68043?ntrulpr761
438084395644215kyber768
461024665747878
T:
lac128
491734939550357
T:
ntrulpr4591761
514305154151689sntrup1277
527995291053095ntrulpr857
533175402054649
T:
C:r5nd1kem0d
547605501955093threebears624r2cca
549455516755352
T:
C:nhcompact768cca
551305527855426ntrulpr953
55278?55352?89355?threebears624r2ccax
50912?56240?71484?mceliece460896
560185635157350C:threebears624r2cpax
561665638856573ntrulpr1013
56314?56388?91242?C:threebears624r2cpa
555376005167229mceliece460896f
622346245662641kyber1024
57646?64972?75406?mceliece460896pc
58349?64972?73334?mceliece460896pcf
679326859869449
T:
C:r5nd0kem2iot
708557107771262ntrulpr1277
706707115172002
T:
C:r5nd1kem5d
715217174371891
T:
C:nhcompact1024cca
717437211372409
T:
C:ledakemcpa13
725947274273001
T:
newhope512cca
735197374174037
T:
C:ledakemcpa14
734827437075406
T:
C:r5nd1kem4longkey
740747525876775
T:
C:ledakemcpa12
76331?77182?123136?
T:
C:bikel1
920199250092574threebears936r2ccax
932039324093351threebears936r2cca
943509464694942
T:
lotus128
973479745897606C:threebears936r2cpax
979399797698124C:threebears936r2cpa
113035113701124172
T:
lac192
110482113997120916mceliece6688128
114367115107116735
T:
C:r5nd3kem5d
114293116143125689
T:
ntrukem443
114071117142122655mceliece6960119
113997118326122359mceliece6960119f
117919118807120842mceliece8192128
117956119547121064mceliece8192128f
116291120213128501mceliece6688128pc
119880120768121582
T:
C:rolloi128
117179122285130277mceliece6688128pcf
112739123247137085mceliece6688128f
121545124727130573mceliece6960119pc
121212126688131683mceliece6960119pcf
130425131313132090
T:
lotus192
133089134236135642mceliece8192128pc
132867134606136715mceliece8192128pcf
141044141081141192threebears1248r2cca
142080142228143079
T:
newhope1024cca
142117142709142783threebears1248r2ccax
145632146594148703
T:
lac256
146927146964147112C:threebears1248r2cpax
151145151367151700C:threebears1248r2cpa
151515152070152588
T:
C:rolloi192
161986162541163096
T:
C:hila5
166685168498169904
T:
hqc128round4
170533170792171495
T:
C:ledakemcpa33
173271173604174048
T:
C:ledakemcpa34
174418175084176934
T:
ntskem1380
179635180338181115
T:
C:bikel3
180116180856181707
T:
C:rolloi256
181411181781182891
T:
ledakem1264
182336183261184149
T:
lotus256
193473194250198875
T:
ntskem13136
196507197728199134
T:
C:r5nd3kem0d
196655198801201280
T:
C:ledakemcpa32
197913200762206682
T:
ntrukem743
204647206127206756
T:
ledakem1464
205720207829209346
T:
C:r5nd5kem5d
208125209272210086
T:
ledakem1364
245236246494247715
T:
C:r5nd5kem0d
259444261590263810
T:
kindi256342
267621268583269212
T:
ledakem12sl
268028270063271247
T:
ledakem13sl
288008289451291338
T:
ledakem14sl
300625302401305139
T:
kindi512222
302179304288306508
T:
kindi512241
378140379842381729
T:
lima2p1024cca
381174382321383727
T:
hqc192round4
383246386280401857
T:
hqcrmrs128
413623415177418618
T:
C:ledakemcpa54
409923416139421097
T:
C:ledakemcpa52
416102418988423391
T:
C:ledakemcpa53
428904429903430717
T:
ledakem3464
415880429977433418
T:
hqc128
449957451474452769
T:
rolloii192
463721465053466163
T:
rolloii128
465793471084475524
T:
C:r5n11kem0d
484848487697494246
T:
ledakem3364
493136494135495763
T:
ledakem3264
498686500203501350
T:
rolloii256
498131509416516150
T:
hqc1281
560994562067562696
T:
titaniumccatoy
560661565545569208
T:
kindi512321
617715619306621008
T:
ledakem33sl
635142636215643208
T:
ledakem32sl
642838647833651422
T:
kindi256522
704480706367707514
T:
titaniumccalite
733784734339737225
T:
hqc256round4
759129760794762607
T:
ledakem34sl
765012768527769896
T:
lima2p2048cca
786805788951793206
T:
rqc128
800310805897827431
T:
hqcrmrs192
807377813075820845
T:
C:r5n13kem0d
859436860583862655
T:
titaniumccastd
858437882228886372
T:
hqc192
904428919302933843
T:
hqc1921
972064977170986642
T:
ledakem5464
977318978687984496
T:
limasp1018cca
9542679801671006178
T:
hqc1922
9846079896761001516
T:
ledakem5364
100828710087311012764
T:
frodokem640
100288510102111013689
T:
ledakem5264
105020810516141054796
T:
titaniumccamed
114152411418941142782
T:
frodokem640aes
116165211650931167054
T:
ledakem54sl
121552412172631219150
T:
titaniumccahi
125837012832711298071
T:
hqcrmrs256
138317114047051423057
T:
hqc256
142131814243151456579
T:
ledakem53sl
148851014948001496206
T:
titaniumccasuper
147844615063811524548
T:
hqc2562
151100615193681524585
T:
ledakem52sl
153494515625471578420
T:
hqc2563
171591217514321768489
T:
hqc2561
187708418823011888443
T:
limasp1306cca
194187119525272112071
T:
frodokem976
1487067?1960889?1987862?
T:
rqc192
197783519811651987122
T:
limasp1822cca
205183520604562070927
T:
C:r5n15kem0d
2032336?2082286?3536830?
T:
rqc256
216461121730842177413
T:
frodokem976aes
355714335681323575347
T:
frodokem640shake
349975636752103735113
T:
frodokem1344aes
378284337916493817290
T:
limasp2062cca
760435176305107753720
T:
frodokem976shake
766773276957417718422
T:
remblem1056
776448777903877844407
T:
remblem928
859580386079398620075
T:
sikep434
131292281316541413305237
T:
sikep503
132259831330279513413573
T:
frodokem1344shake
138388881386993113914775
T:
sikep434comp
202015192029968020420559
T:
sikep503comp
229834752304496923148310
T:
sikep610
319255983200022732265961
T:
sikep610comp
348553693488519134941320
T:
sikep751
542178765438234154696767
T:
sikep751comp
Cycles for decapsulation
25%50%75%system
108781091510989kyber90s512
148371491115096C:threebears624r2cpax
156141568815799kyber90s768
195361957319573C:threebears936r2cpax
206092079420868
T:
C:r5nd1kem0d
222742234822422kyber90s1024
230142305123088kyber512
240502408724198C:threebears1248r2cpax
24346?24383?38369?C:threebears624r2cpa
257892582625863ntruhps2048509
261222619628009
T:
C:r5nd0kem2iot
278982867528786
T:
C:r5nd1kem5d
293782948930710
T:
C:r5nd1kem4longkey
305253052530562C:threebears936r2cpa
347063500235039
T:
C:hila5
355943574236038kyber768
360013607536260sntrup653
373333740737481C:threebears1248r2cpa
374073755537666sntrup761
402934066340885
T:
C:nhcompact512cca
435864366043697ntruhps2048677
461024617646361ntruhrss701
463614684247064
T:
C:r5nd3kem5d
46731?46916?70041?ntrulpr653
470274721247323sntrup857
489144913649321sntrup953
49321?49543?74000?ntrulpr761
498024995050061sntrup1013
517635217052355kyber1024
528735291053021
T:
C:nhcompact768cca
570915727657498
T:
sntrup4591761
573135738757498ntruhps4096821
613096149461642ntrulpr857
615686175361901sntrup1277
629006327063455
T:
lac128
633446356663714ntrulpr953
642696452864676ntrulpr1013
690426926469819
T:
ntrulpr4591761
693756944969597
T:
C:nhcompact1024cca
770717729377404
T:
newhope512cca
78773?78884?125208?threebears624r2ccax
815858184482695ntrulpr1277
874688806089207
T:
C:r5nd5kem5d
888378976292019
T:
C:r5nd3kem0d
896888991090169mceliece348864
897999016990465mceliece348864f
952019538695830mceliece348864pc
952759546095571mceliece348864pcf
100418100936101047threebears624r2cca
109187110556114293
T:
lotus128
116698117364117956
T:
ntrukem443
114737117623119325
T:
C:r5nd5kem0d
124912124986125134threebears936r2ccax
152514153069153328
T:
newhope1024cca
153402154068162171
T:
lotus192
155807156140156362threebears936r2cca
159544160284171014
T:
lac192
177415178007178636mceliece460896
178081?178562?269323?mceliece460896f
181559181744182632threebears1248r2ccax
183002183483185074mceliece460896pcf
183409184260184556mceliece460896pc
188774197099198505
T:
C:r5n11kem0d
197321198431199393mceliece6960119
197654198949199356mceliece6960119f
205868206312207052mceliece6960119pcf
205979206904207274mceliece6960119pc
211788212195212972mceliece8192128f
211973212306212898mceliece6688128
212121?213564?322196?mceliece6688128f
213046213786214452mceliece8192128
217190217338218522threebears1248r2cca
218633219669222629mceliece6688128pcf
218744219891220372mceliece6688128pc
220890221297222592mceliece8192128pcf
221371222222222888mceliece8192128pc
221778222407239205
T:
lotus256
241721243534245199
T:
ntrukem743
238983247197249824
T:
lac256
257113258260260184
T:
ntskem1264
275354275687278018
T:
C:r5n13kem0d
303104304177305546
T:
kindi256342
308950309542310689
T:
hqc128round4
371036372849374107
T:
kindi512222
374588375587378769
T:
kindi512241
477633479002480556
T:
lima2p1024cca
483109484182485329
T:
ntskem1380
530802531875533688
T:
C:ledakemcpa12
635179637140640248
T:
C:ledakemcpa14
651940654419655714
T:
titaniumccatoy
653901655899661227
T:
hqc192round4
654863657194675916
T:
hqcrmrs128
656528657860660228
T:
kindi512321
636548663262665852
T:
hqc128
677396682761691160
T:
C:ledakemcpa13
696599697339701483
T:
kindi256522
813260814481815554
T:
titaniumccalite
901209904576907758
T:
C:rolloi128
903392934065942538
T:
hqc1281
957227962333967365
T:
lima2p2048cca
959595967735977318
T:
ntskem13136
986457987271991489
T:
titaniumccastd
99622510013681005253
T:
frodokem640
108003010838411090390
T:
C:rolloi192
108817010888731094349
T:
frodokem640aes
110067611060781111406
T:
C:r5n15kem0d
1092314?1109852?1965255?
T:
C:bikel1
119480411997621202019
T:
titaniumccamed
122037112252921244902
T:
hqc192
125981312632171271172
T:
hqc256round4
124564212633651272874
T:
hqcrmrs192
126136712639201267694
T:
ledakem1264
126543712701731271986
T:
limasp1018cca
139778614106991416471
T:
ledakem1364
142498114278671429162
T:
titaniumccahi
144022514489571507861
T:
hqc1922
147900114827011489028
T:
ledakem1464
148717814956511511672
T:
hqc1921
150519715278411562991
T:
rolloii128
161542016186021625854
T:
rolloii192
164476116506811657489
T:
C:ledakemcpa32
1714395?1724200?2201574?
T:
C:ledakemcpa34
173060117343751740110
T:
titaniumccasuper
183113018394181848261
T:
C:rolloi256
188237518917731900505
T:
ledakem12sl
188426218995801922076
T:
ledakem13sl
191452819215951932029
T:
C:ledakemcpa33
190420519327691958262
T:
hqc256
189713819372091988380
T:
hqcrmrs256
193987319415751950751
T:
frodokem976
199215419997022008730
T:
ledakem14sl
205331520576442058902
T:
frodokem976aes
211321821169182127056
T:
rolloii256
214137521515132199058
T:
hqc2562
244359124475872457244
T:
limasp1306cca
238032124725992478371
T:
hqc2563
252602725626202624299
T:
hqc2561
256783725707602579788
T:
limasp1822cca
290668329171172927514
T:
rqc128
331841933319613336179
T:
frodokem1344aes
343563534447373460647
T:
frodokem640shake
347518835029383535461
T:
C:bikel3
367058536810193700703
T:
ledakem3364
379050238142933843375
T:
ledakem3264
391992839379103954930
T:
C:ledakemcpa52
394057439809784022825
T:
ledakem3464
4094938?4113327?5335992?
T:
C:ledakemcpa54
465064146680314707029
T:
C:ledakemcpa53
495548449646604985454
T:
limasp2062cca
526373152736845295958
T:
ledakem32sl
530332153156795325854
T:
ledakem33sl
591337759415345961107
T:
ledakem34sl
588370368319396878670
T:
rqc192
745575974809197493869
T:
frodokem976shake
791208079346877961808
T:
ledakem5264
815036081715618196240
T:
ledakem5364
894660089851919033328
T:
rqc256
907791391039619178331
T:
ledakem5464
922139992378649249223
T:
sikep434
9860204987999910017417
T:
sikep434comp
103918571041938510437774
T:
remblem1056
104896481051917410552400
T:
remblem928
112931401133202711364069
T:
ledakem52sl
116656931169969611722155
T:
ledakem53sl
117613381178612811810733
T:
ledakem54sl
131371091326228013341904
T:
frodokem1344shake
140117151404024214074911
T:
sikep503
145392981461474114656070
T:
sikep503comp
230556252309425323120486
T:
sikep610
245143132455127624689064
T:
sikep610comp
374559143751685337594812
T:
sikep751
396823153971879739777886
T:
sikep751comp