-r--r--r-- 16995 libntruprime-20260717/doc/html/speed.html raw
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<style type="text/css">
html{overflow-y:scroll;background-color:#004591}
body{font-family:"Noto Sans","Droid Sans","DejaVu Sans","Arial",sans-serif;line-height:1.5}
tt,code{background-color:#f0f0f0;font-family:Consolas,Monaco,"Noto Sans Mono","DejaVu Sans Mono",monospace,sans-serif;font-size:1em;}
pre{margin-left:3em}
p,ul,ol,blockquote,pre{font-size:1.0em;line-height:1.6}
li p{font-size:1.0em}
blockquote p{font-size:1.0em}
h1{font-size:1.5em}
h2{font-size:1.3em}
h3{font-size:1.0em}
h1 a{text-decoration:none}
table{border-collapse:collapse}
th,td{border:1px solid black}
table a{text-decoration:none}
table tr{font-size:1.0em;line-height:1.6em}
table tr{font-size:1.0em;line-height:1.5}
tbody tr:nth-child(12n+1){background-color:#f0ffff}
tbody tr:nth-child(12n+2){background-color:#f0ffff}
tbody tr:nth-child(12n+3){background-color:#f0ffff}
tbody tr:nth-child(12n+4){background-color:#f0ffff}
tbody tr:nth-child(12n+5){background-color:#f0ffff}
tbody tr:nth-child(12n+6){background-color:#f0ffff}
tbody tr:nth-child(12n+7){background-color:#fffff0}
tbody tr:nth-child(12n+8){background-color:#fffff0}
tbody tr:nth-child(12n+9){background-color:#fffff0}
tbody tr:nth-child(12n+10){background-color:#fffff0}
tbody tr:nth-child(12n+11){background-color:#fffff0}
tbody tr:nth-child(12n+12){background-color:#fffff0}
#headline{display:block;margin:0;padding:0;color:#ffffff;background-color:#004591}
#headline .text{font-weight:bold;font-size:1.0em}
#headline input{display:none}
#nav ul{margin:0;padding:0}
#nav li{list-style-type:none;margin:0;padding:0}
.navtop{padding-bottom:0.5em;font-weight:bold;font-size:1.0em}
.navtop{background-color:#004591;color:#ffffff}
#nav .here{background-color:#004591;color:#ffffff}
#nav .away{background-color:#004591;color:#ffffff}
#nav .away a{text-decoration:none;display:block;color:#ffffff}
#nav .away a:hover,.away a:active{text-decoration:underline}
#hidemenu{visibility:hidden;display:none;overflow:hidden;position:fixed;top:0;left:0;height:100%;width:100%}
.main{padding:5px}
.main{background-color:#ffffff}
.pagetitle{font-size:1.4em;font-weight:bold}
@media only screen and (min-width:512px) {
.navtop{padding-top:5px}
#headline{top:0;margin:0;width:160px;height:100%;position:fixed;overflow:auto}
#headline .noselect{display:none}
#headline #nav{visibility:visible;display:block;width:auto;height:auto}
.main{margin-left:170px}
#headline #hidemenu{visibility:hidden}
}
@media not screen and (min-width:512px) {
#headline .noselect{-webkit-user-select:none;-ms-user-select:none;user-select:none;}
#headline #nav #navbot{visibility:hidden;position:fixed;top:0;left:-70%;z-index:2;transition:0.2s;margin:0;padding:0}
#headline input:checked ~ #nav #navbot{height:100%;position:fixed;top:0;left:0;visibility:visible;display:block;box-sizing:border-box;-moz-box-sizing:border-box;-webkit-box-sizing:border-box;vertical-align:center;font-size:1.0em;width:70%;overflow:auto}
#headline input:checked ~ #hidemenu{visibility:visible;display:block;background:black;opacity:0.3;z-index:1}
}
</style>
<title>
libntruprime: Speed</title>
</head>
<body>
<label id=headline>
<input type=checkbox />
<nav id=nav>
<div class=navtop>
<span class=noselect>≡</span>
libntruprime</div>
<ul id=navbot>
<li class=away><a href=index.html>Intro</a>
</li><li class=away><a href=download.html>Download</a>
</li><li class=away><a href=install.html>Install</a>
</li><li class=away><a href=test.html>Test</a>
</li><li class=away><a href=api.html>API</a>
</li><li class=away><a href=cli.html>CLI</a>
</li><li class=away><a href=security.html>Security</a>
</li><li class=away><a href=verification.html>Verification</a>
</li><li class=here>Speed
</li><li class=away><a href=internals.html>Internals</a>
</li><li class=away><a href=people.html>People</a>
</li><li class=away><a href=license.html>License</a>
</li></ul></nav>
<div id=hidemenu></div>
</label>
<div class=main>
<div class=pagetitle>libntruprime: Speed</div>
<p>In the following speed table, smaller keypair/enc/dec numbers are better.
The numbers are interquartile means of single-core cycle counts on various microarchitectures.
Overclocking is disabled.</p>
<table>
<thead>
<tr>
<th style="text-align: left;">μarch</th>
<th style="text-align: left;">KEM</th>
<th style="text-align: right;">keypair</th>
<th style="text-align: right;">enc</th>
<th style="text-align: right;">dec</th>
</tr>
</thead>
<tbody>
<tr>
<td style="text-align: left;">AMD Zen 4 (2022)</td>
<td style="text-align: left;">sntrup653</td>
<td style="text-align: right;">472498</td>
<td style="text-align: right;">43724</td>
<td style="text-align: right;">44631</td>
</tr>
<tr>
<td style="text-align: left;"></td>
<td style="text-align: left;">sntrup761</td>
<td style="text-align: right;">608120</td>
<td style="text-align: right;">48639</td>
<td style="text-align: right;">46445</td>
</tr>
<tr>
<td style="text-align: left;"></td>
<td style="text-align: left;">sntrup857</td>
<td style="text-align: right;">784562</td>
<td style="text-align: right;">57332</td>
<td style="text-align: right;">57644</td>
</tr>
<tr>
<td style="text-align: left;"></td>
<td style="text-align: left;">sntrup953</td>
<td style="text-align: right;">939743</td>
<td style="text-align: right;">61808</td>
<td style="text-align: right;">61349</td>
</tr>
<tr>
<td style="text-align: left;"></td>
<td style="text-align: left;">sntrup1013</td>
<td style="text-align: right;">1043922</td>
<td style="text-align: right;">64861</td>
<td style="text-align: right;">62977</td>
</tr>
<tr>
<td style="text-align: left;"></td>
<td style="text-align: left;">sntrup1277</td>
<td style="text-align: right;">1617255</td>
<td style="text-align: right;">81657</td>
<td style="text-align: right;">78140</td>
</tr>
<tr>
<td style="text-align: left;">Intel Golden Cove (2021)</td>
<td style="text-align: left;">sntrup653</td>
<td style="text-align: right;">594917</td>
<td style="text-align: right;">46239</td>
<td style="text-align: right;">46367</td>
</tr>
<tr>
<td style="text-align: left;"></td>
<td style="text-align: left;">sntrup761</td>
<td style="text-align: right;">771216</td>
<td style="text-align: right;">51385</td>
<td style="text-align: right;">47701</td>
</tr>
<tr>
<td style="text-align: left;"></td>
<td style="text-align: left;">sntrup857</td>
<td style="text-align: right;">969718</td>
<td style="text-align: right;">61253</td>
<td style="text-align: right;">61278</td>
</tr>
<tr>
<td style="text-align: left;"></td>
<td style="text-align: left;">sntrup953</td>
<td style="text-align: right;">1161906</td>
<td style="text-align: right;">65659</td>
<td style="text-align: right;">64860</td>
</tr>
<tr>
<td style="text-align: left;"></td>
<td style="text-align: left;">sntrup1013</td>
<td style="text-align: right;">1311768</td>
<td style="text-align: right;">68702</td>
<td style="text-align: right;">65903</td>
</tr>
<tr>
<td style="text-align: left;"></td>
<td style="text-align: left;">sntrup1277</td>
<td style="text-align: right;">1998523</td>
<td style="text-align: right;">87186</td>
<td style="text-align: right;">82694</td>
</tr>
<tr>
<td style="text-align: left;">AMD Zen 3 (2020)</td>
<td style="text-align: left;">sntrup653</td>
<td style="text-align: right;">600658</td>
<td style="text-align: right;">33212</td>
<td style="text-align: right;">47310</td>
</tr>
<tr>
<td style="text-align: left;"></td>
<td style="text-align: left;">sntrup761</td>
<td style="text-align: right;">845401</td>
<td style="text-align: right;">35836</td>
<td style="text-align: right;">49834</td>
</tr>
<tr>
<td style="text-align: left;"></td>
<td style="text-align: left;">sntrup857</td>
<td style="text-align: right;">1046895</td>
<td style="text-align: right;">43526</td>
<td style="text-align: right;">63892</td>
</tr>
<tr>
<td style="text-align: left;"></td>
<td style="text-align: left;">sntrup953</td>
<td style="text-align: right;">1314800</td>
<td style="text-align: right;">46219</td>
<td style="text-align: right;">66291</td>
</tr>
<tr>
<td style="text-align: left;"></td>
<td style="text-align: left;">sntrup1013</td>
<td style="text-align: right;">1360689</td>
<td style="text-align: right;">48195</td>
<td style="text-align: right;">70045</td>
</tr>
<tr>
<td style="text-align: left;"></td>
<td style="text-align: left;">sntrup1277</td>
<td style="text-align: right;">2280261</td>
<td style="text-align: right;">60056</td>
<td style="text-align: right;">85755</td>
</tr>
<tr>
<td style="text-align: left;">AMD Zen 2 (2019)</td>
<td style="text-align: left;">sntrup653</td>
<td style="text-align: right;">942426</td>
<td style="text-align: right;">38838</td>
<td style="text-align: right;">62292</td>
</tr>
<tr>
<td style="text-align: left;"></td>
<td style="text-align: left;">sntrup761</td>
<td style="text-align: right;">1273658</td>
<td style="text-align: right;">41695</td>
<td style="text-align: right;">65703</td>
</tr>
<tr>
<td style="text-align: left;"></td>
<td style="text-align: left;">sntrup857</td>
<td style="text-align: right;">1606572</td>
<td style="text-align: right;">51807</td>
<td style="text-align: right;">85816</td>
</tr>
<tr>
<td style="text-align: left;"></td>
<td style="text-align: left;">sntrup953</td>
<td style="text-align: right;">1959064</td>
<td style="text-align: right;">55008</td>
<td style="text-align: right;">89553</td>
</tr>
<tr>
<td style="text-align: left;"></td>
<td style="text-align: left;">sntrup1013</td>
<td style="text-align: right;">2201203</td>
<td style="text-align: right;">56717</td>
<td style="text-align: right;">92402</td>
</tr>
<tr>
<td style="text-align: left;"></td>
<td style="text-align: left;">sntrup1277</td>
<td style="text-align: right;">3457022</td>
<td style="text-align: right;">71125</td>
<td style="text-align: right;">113944</td>
</tr>
<tr>
<td style="text-align: left;">ARM Cortex-A72 (2016)</td>
<td style="text-align: left;">sntrup653</td>
<td style="text-align: right;">10996127</td>
<td style="text-align: right;">591430</td>
<td style="text-align: right;">1065501</td>
</tr>
<tr>
<td style="text-align: left;"></td>
<td style="text-align: left;">sntrup761</td>
<td style="text-align: right;">14495715</td>
<td style="text-align: right;">776809</td>
<td style="text-align: right;">1473851</td>
</tr>
<tr>
<td style="text-align: left;"></td>
<td style="text-align: left;">sntrup857</td>
<td style="text-align: right;">18303406</td>
<td style="text-align: right;">952167</td>
<td style="text-align: right;">1810466</td>
</tr>
<tr>
<td style="text-align: left;"></td>
<td style="text-align: left;">sntrup953</td>
<td style="text-align: right;">22735272</td>
<td style="text-align: right;">1142719</td>
<td style="text-align: right;">2225182</td>
</tr>
<tr>
<td style="text-align: left;"></td>
<td style="text-align: left;">sntrup1013</td>
<td style="text-align: right;">25426626</td>
<td style="text-align: right;">1246530</td>
<td style="text-align: right;">2457552</td>
</tr>
<tr>
<td style="text-align: left;"></td>
<td style="text-align: left;">sntrup1277</td>
<td style="text-align: right;">40968862</td>
<td style="text-align: right;">2041696</td>
<td style="text-align: right;">4202939</td>
</tr>
<tr>
<td style="text-align: left;">Intel Skylake (2015)</td>
<td style="text-align: left;">sntrup653</td>
<td style="text-align: right;">639907</td>
<td style="text-align: right;">37271</td>
<td style="text-align: right;">58228</td>
</tr>
<tr>
<td style="text-align: left;"></td>
<td style="text-align: left;">sntrup761</td>
<td style="text-align: right;">840180</td>
<td style="text-align: right;">41311</td>
<td style="text-align: right;">60983</td>
</tr>
<tr>
<td style="text-align: left;"></td>
<td style="text-align: left;">sntrup857</td>
<td style="text-align: right;">1073742</td>
<td style="text-align: right;">51265</td>
<td style="text-align: right;">79972</td>
</tr>
<tr>
<td style="text-align: left;"></td>
<td style="text-align: left;">sntrup953</td>
<td style="text-align: right;">1308756</td>
<td style="text-align: right;">54176</td>
<td style="text-align: right;">84599</td>
</tr>
<tr>
<td style="text-align: left;"></td>
<td style="text-align: left;">sntrup1013</td>
<td style="text-align: right;">1437568</td>
<td style="text-align: right;">56207</td>
<td style="text-align: right;">86531</td>
</tr>
<tr>
<td style="text-align: left;"></td>
<td style="text-align: left;">sntrup1277</td>
<td style="text-align: right;">2247072</td>
<td style="text-align: right;">69997</td>
<td style="text-align: right;">106453</td>
</tr>
<tr>
<td style="text-align: left;">Intel Haswell (2013)</td>
<td style="text-align: left;">sntrup653</td>
<td style="text-align: right;">754581</td>
<td style="text-align: right;">44675</td>
<td style="text-align: right;">68364</td>
</tr>
<tr>
<td style="text-align: left;"></td>
<td style="text-align: left;">sntrup761</td>
<td style="text-align: right;">949559</td>
<td style="text-align: right;">48431</td>
<td style="text-align: right;">70484</td>
</tr>
<tr>
<td style="text-align: left;"></td>
<td style="text-align: left;">sntrup857</td>
<td style="text-align: right;">1212954</td>
<td style="text-align: right;">60079</td>
<td style="text-align: right;">92129</td>
</tr>
<tr>
<td style="text-align: left;"></td>
<td style="text-align: left;">sntrup953</td>
<td style="text-align: right;">1560476</td>
<td style="text-align: right;">64166</td>
<td style="text-align: right;">96758</td>
</tr>
<tr>
<td style="text-align: left;"></td>
<td style="text-align: left;">sntrup1013</td>
<td style="text-align: right;">1610182</td>
<td style="text-align: right;">66102</td>
<td style="text-align: right;">100144</td>
</tr>
<tr>
<td style="text-align: left;"></td>
<td style="text-align: left;">sntrup1277</td>
<td style="text-align: right;">2685981</td>
<td style="text-align: right;">84125</td>
<td style="text-align: right;">126213</td>
</tr>
</tbody>
</table>
<p>Microarchitectures are listed in reverse chronological order of when they were introduced.</p>
<p>In the libntruprime distribution,
<code>command/ntruprime-speed.c</code> measures libntruprime;
<code>benchmarks/*-*</code> is the output of <code>ntruprime-speed</code> on various machines;
and <code>autogen/md-speed</code> extracts the table from those measurements.</p>
<p>The table reports only interquartile means of cycle counts, not the full distribution of cycle counts.
See the full output files
for differences between multiple measurements and the interquartile mean.</p>
<h3><a name="faster">Faster <code>sntrup</code> software</h3>
<p>There has been extensive further work on <code>sntrup</code> software speeds
beyond the current libntruprime speeds.
libntruprime has a policy of <a href="security.html#bugs">limiting code size</a>,
but if there are applications that need these speedups
then they can still be considered for inclusion in libntruprime:</p>
<ul>
<li>
<p><code>mult3sntrup761/avx2unsigned</code> in SUPERCOP
from Ming-Shing Chen:
faster multiplications on Intel/AMD.</p>
</li>
<li>
<p><code>invsntrup761/jumpdivsteps</code> in SUPERCOP
from Daniel J. Bernstein, Ming-Shing Chen, Gregor Seiler, and Bo-Yin Yang:
faster inversions on Intel/AMD.</p>
</li>
<li>
<p><a href="https://eprint.iacr.org/2021/826">"OpenSSLNTRU: Faster post-quantum TLS key exchange"</a>
from Daniel J. Bernstein, Billy Bob Brumley, Ming-Shing Chen, and Nicola Tuveri:
faster inversions for batch operations.</p>
</li>
<li>
<p><a href="https://eprint.iacr.org/2022/930">"Multi-Parameter Support with NTTs for NTRU and NTRU Prime on Cortex-M4"</a>
from Erdem Alkim, Vincent Hwang, and Bo-Yin Yang:
faster multiplications on 32-bit ARM.</p>
</li>
<li>
<p><a href="https://eprint.iacr.org/2023/541">"Algorithmic Views of Vectorized Polynomial Multipliers for NTRU and NTRU Prime"</a>
from Han-Ting Chen, Yi-Hua Chung, Vincent Hwang, Chi-Ting Liu, and Bo-Yin Yang:
faster multiplications on 64-bit ARM.</p>
</li>
<li>
<p><a href="https://eprint.iacr.org/2023/604">"Pushing the Limit of Vectorized Polynomial Multiplication for NTRU Prime"</a>
from Vincent Hwang:
faster multiplications on 64-bit ARM and Intel/AMD.</p>
</li>
<li>
<p><a href="https://eprint.iacr.org/2023/1580">"Algorithmic Views of Vectorized Polynomial Multipliers – NTRU Prime"</a>
from Vincent Hwang, Chi-Ting Liu, and Bo-Yin Yang:
faster multiplications on 64-bit ARM.</p>
</li>
<li>
<p><a href="https://eprint.iacr.org/2023/1962">"A Survey of Polynomial Multiplications for Lattice-Based Cryptosystems"</a>
from Vincent Hwang:
faster multiplications on Intel/AMD.</p>
</li>
<li>
<p><a href="https://eprint.iacr.org/2024/644">"Jumping for Bernstein-Yang Inversion"</a>
from Li-Jie Jian, Ting-Yuan Wang, Bo-Yin Yang, and Ming-Shing Chen:
faster inversions on 64-bit ARM.</p>
</li>
</ul><hr><font size=1><b>Version:</b>
This is version 2026.07.17 of the "Speed" web page.
</font>
</div>
</body>
</html>