Performance
Software performance
- Experimental environment
- Processor: AMD EPYC 9654P
- Clock Speed: Boost Clock : Up to 3.7GHz, Base Clock: 2.4GHz
- Memory: 32GB (16GB RDIMM, 4800MT/s, Single Rank)
- Operating System: Linux 5.15.0-112-generic, gcc version 11.4.0
- Linux Distribution: Ubuntu 22.04.5 LTS
- Compiler: gcc version 11.4.0
- Library: OpenSSL 3.0.2 15 Mar 2022
- Measured by: supercop-20221122
Timing data for C optimized code with AES PRG (Mcycles)
| Security Level | (q,v,m,l) | KeyGen | Sign | Verify |
|---|
| I |
(127,156,54,3) | 21.491 | 1.636 | 1.341 |
| (7,740,100,10) | 115.025 | 33.986 | 29.850 |
| (31,165,60,3) | 30.483 | 2.359 | 1.984 |
| (31,600,70,10) | 39.790 | 11.084 | 8.943 |
| III |
(127,228,78,3) | 95.017 | 4.700 | 3.883 |
| (7,1100,140,10) | 469.162 | 98.253 | 86.640 |
| (31,246,87,3) | 140.115 | 6.882 | 5.755 |
| (31,890,100,10) | 170.002 | 35.817 | 29.750 |
| V |
(127,306,105,3) | 311.355 | 11.080 | 9.228 |
| (7,1490,190,10) | 1506.767 | 235.123 | 207.230 |
| (31,324,114,3) | 418.352 | 16.020 | 13.515 |
| (31,1120,120,10) | 380.859 | 63.165 | 52.604 |
Timing data for C optimized code with SHAKE PRG (Mcycles)
| Security Level | (q,v,m,l) | KeyGen | Sign | Verify |
|---|
| I |
(127,156,54,3) | 22.923 | 3.145 | 2.864 |
| (7,740,100,10) | 125.204 | 44.492 | 40.469 |
| (31,165,60,3) | 32.360 | 4.270 | 3.861 |
| (31,600,70,10) | 45.509 | 16.874 | 14.722 |
| III |
(127,228,78,3) | 100.160 | 9.926 | 9.079 |
| (7,1100,140,10) | 519.508 | 148.382 | 137.174 |
| (31,246,87,3) | 147.834 | 14.635 | 13.466 |
| (31,890,100,10) | 190.692 | 56.523 | 50.449 |
| V |
(127,306,105,3) | 324.808 | 24.810 | 22.727 |
| (7,1490,190,10) | 1647.667 | 378.988 | 350.925 |
| (31,324,114,3) | 433.932 | 31.584 | 28.995 |
| (31,1120,120,10) | 421.961 | 104.666 | 94.098 |
Timing data for C reference code with AES PRG (Mcycles)
| Security Level | (q,v,m,l) | KeyGen | Sign | Verify |
|---|
| I |
(127,156,54,3) | 17.402 | 2.233 | 1.695 |
| (7,740,100,10) | 198.527 | 37.963 | 37.817 |
| (31,165,60,3) | 25.841 | 3.001 | 2.226 |
| (31,600,70,10) | 75.705 | 15.669 | 15.423 |
| III |
(127,228,78,3) | 62.897 | 5.935 | 4.442 |
| (7,1100,140,10) | 837.812 | 118.583 | 113.917 |
| (31,246,87,3) | 123.594 | 9.701 | 7.204 |
| (31,890,100,10) | 540.562 | 70.899 | 66.663 |
| V |
(127,306,105,3) | 214.724 | 15.524 | 10.966 |
| (7,1490,190,10) | 2931.010 | 319.581 | 292.849 |
| (31,324,114,3) | 279.161 | 19.549 | 13.868 |
| (31,1120,120,10) | 593.219 | 80.677 | 81.371 |
Timing data for C reference code with SHAKE PRG (Mcycles)
| Security Level | (q,v,m,l) | KeyGen | Sign | Verify |
|---|
| I |
(127,156,54,3) | 18.646 | 3.573 | 3.025 |
| (7,740,100,10) | 213.867 | 53.300 | 53.099 |
| (31,165,60,3) | 27.746 | 4.972 | 4.235 |
| (31,600,70,10) | 82.319 | 22.397 | 22.012 |
| III |
(127,228,78,3) | 68.168 | 11.279 | 9.731 |
| (7,1100,140,10) | 901.254 | 182.183 | 177.605 |
| (31,246,87,3) | 135.621 | 16.928 | 14.243 |
| (31,890,100,10) | 563.553 | 94.408 | 89.261 |
| V |
(127,306,105,3) | 226.526 | 27.091 | 22.513 |
| (7,1490,190,10) | 3253.714 | 458.374 | 430.449 |
| (31,324,114,3) | 296.113 | 36.755 | 30.987 |
| (31,1120,120,10) | 636.598 | 125.017 | 124.697 |
Timing data for C code with AVX2 intrinsics and AES PRG (Mcycles)
| Security Level | (q,v,m,l) | KeyGen | Sign | Verify |
|---|
| I |
(127,156,54,3) | 8.587 | 1.586 | 1.224 |
| (7,740,100,10) | 77.115 | 26.924 | 25.242 |
| (31,165,60,3) | 11.929 | 2.230 | 1.715 |
| (31,600,70,10) | 28.855 | 9.518 | 9.484 |
| III |
(127,228,78,3) | 32.311 | 4.599 | 3.410 |
| (7,1100,140,10) | 249.400 | 79.160 | 72.424 |
| (31,246,87,3) | 46.554 | 6.679 | 4.991 |
| (31,890,100,10) | 86.827 | 25.656 | 24.592 |
| V |
(127,306,105,3) | 95.579 | 10.504 | 7.463 |
| (7,1490,190,10) | 721.608 | 200.626 | 181.458 |
| (31,324,114,3) | 127.786 | 15.577 | 11.624 |
| (31,1120,120,10) | 168.875 | 47.262 | 44.696 |
Timing data for C code with AVX2 intrinsics and SHAKE PRG (Mcycles)
| Security Level | (q,v,m,l) | KeyGen | Sign | Verify |
|---|
| I |
(127,156,54,3) | 10.077 | 3.118 | 2.741 |
| (7,740,100,10) | 95.983 | 45.832 | 44.330 |
| (31,165,60,3) | 13.739 | 4.083 | 3.550 |
| (31,600,70,10) | 34.704 | 15.449 | 15.368 |
| III |
(127,228,78,3) | 37.508 | 9.861 | 8.678 |
| (7,1100,140,10) | 305.856 | 135.653 | 128.685 |
| (31,246,87,3) | 54.579 | 14.785 | 13.052 |
| (31,890,100,10) | 109.697 | 48.765 | 47.599 |
| V |
(127,306,105,3) | 109.125 | 24.067 | 20.992 |
| (7,1490,190,10) | 844.478 | 322.614 | 303.588 |
| (31,324,114,3) | 142.099 | 30.352 | 26.327 |
| (31,1120,120,10) | 212.364 | 91.098 | 87.995 |
Timing data for C code with AVX512 intrinsics and AES PRG (Mcycles)
| Security Level | (q,v,m,l) | KeyGen | Sign | Verify |
|---|
| I |
(127,156,54,3) | 8.542 | 1.597 | 1.226 |
| (7,740,100,10) | 79.799 | 27.868 | 25.922 |
| (31,165,60,3) | 11.842 | 2.237 | 1.718 |
| (31,600,70,10) | 25.602 | 9.077 | 9.191 |
| III |
(127,228,78,3) | 31.643 | 4.621 | 3.424 |
| (7,1100,140,10) | 246.281 | 78.941 | 72.336 |
| (31,246,87,3) | 45.758 | 6.738 | 5.033 |
| (31,890,100,10) | 88.485 | 26.668 | 25.560 |
| V |
(127,306,105,3) | 88.518 | 10.289 | 7.334 |
| (7,1490,190,10) | 693.961 | 193.768 | 175.021 |
| (31,324,114,3) | 118.992 | 15.289 | 11.431 |
| (31,1120,120,10) | 164.299 | 47.124 | 44.623 |
Timing data for C code with AVX512 intrinsics and SHAKE PRG (Mcycles)
| Security Level | (q,v,m,l) | KeyGen | Sign | Verify |
|---|
| I |
(127,156,54,3) | 9.985 | 3.130 | 2.748 |
| (7,740,100,10) | 98.667 | 46.819 | 44.924 |
| (31,165,60,3) | 13.794 | 4.222 | 3.691 |
| (31,600,70,10) | 31.841 | 15.010 | 15.113 |
| III |
(127,228,78,3) | 36.717 | 9.824 | 8.604 |
| (7,1100,140,10) | 302.556 | 134.929 | 128.632 |
| (31,246,87,3) | 53.540 | 14.469 | 12.736 |
| (31,890,100,10) | 111.722 | 49.818 | 48.728 |
| V |
(127,306,105,3) | 102.334 | 23.880 | 20.950 |
| (7,1490,190,10) | 847.914 | 347.789 | 329.495 |
| (31,324,114,3) | 133.457 | 30.072 | 26.157 |
| (31,1120,120,10) | 207.629 | 90.682 | 87.848 |
Hardware performance