In the following speed table, smaller keygen/enc/dec numbers are better. The numbers are interquartile means of single-core cycle counts on various microarchitectures. Overclocking is disabled.

Microarchitectures are listed in reverse chronological order of when they were introduced.

In the libntruprime distribution, command/ntruprime-speed.c measures libntruprime; benchmarks/*-* is the output of ntruprime-speed on various machines; and autogen/md-speed extracts the table from those measurements.

The table reports only interquartile means of cycle counts, not the full distribution of cycle counts. See the full output files for differences between multiple measurements and the interquartile mean.

Faster sntrup software

There has been extensive further work on sntrup software speeds beyond the current libntruprime speeds. libntruprime has a policy of limiting code size, but if there are applications that need these speedups then they can still be considered for inclusion in libntruprime:

• mult3sntrup761/avx2unsigned in SUPERCOP from Ming-Shing Chen: faster multiplications on Intel/AMD.

• invsntrup761/jumpdivsteps in SUPERCOP from Daniel J. Bernstein, Ming-Shing Chen, Gregor Seiler, and Bo-Yin Yang: faster inversions on Intel/AMD.

• "OpenSSLNTRU: Faster post-quantum TLS key exchange" from Daniel J. Bernstein, Billy Bob Brumley, Ming-Shing Chen, and Nicola Tuveri: faster inversions for batch operations.

• "Multi-Parameter Support with NTTs for NTRU and NTRU Prime on Cortex-M4" from Erdem Alkim, Vincent Hwang, and Bo-Yin Yang: faster multiplications on 32-bit ARM.

• "Algorithmic Views of Vectorized Polynomial Multipliers for NTRU and NTRU Prime" from Han-Ting Chen, Yi-Hua Chung, Vincent Hwang, Chi-Ting Liu, and Bo-Yin Yang: faster multiplications on 64-bit ARM.

• "Pushing the Limit of Vectorized Polynomial Multiplication for NTRU Prime" from Vincent Hwang: faster multiplications on 64-bit ARM and Intel/AMD.

• "Algorithmic Views of Vectorized Polynomial Multipliers – NTRU Prime" from Vincent Hwang, Chi-Ting Liu, and Bo-Yin Yang: faster multiplications on 64-bit ARM.

• "A Survey of Polynomial Multiplications for Lattice-Based Cryptosystems" from Vincent Hwang: faster multiplications on Intel/AMD.

• "Jumping for Bernstein-Yang Inversion" from Li-Jie Jian, Ting-Yuan Wang, Bo-Yin Yang, and Ming-Shing Chen: faster inversions on 64-bit ARM.