NTRU Prime

2020.04 news: A new web-browsing demo takes just 166000 Haswell cycles to generate a new sntrup761 public key for each TLS 1.3 session.

The following Haswell speeds are medians from the official supercop-20200417 benchmarks for hiphop. These benchmarks predate the selection of additional dimensions 953, 1013, and 1277. See the security page for warnings regarding Core-SVP.

System Core-SVP ciphertext bytes public-key bytes enc cycles dec cycles keygen cycles
sntrup653 129 897 994 46620 59324 752904
ntrulpr653 130 1025 897 69400 82732 41756
sntrup761 153 1039 1158 48780 59120 810148
ntrulpr761 155 1167 1039 72372 85908 44092
sntrup857 175 1184 1322 60668 80904 1227380
ntrulpr857 176 1312 1184 91416 112116 55440
sntrup953 196 1349 1505 TBA TBA TBA
ntrulpr953 197 1477 1349 TBA TBA TBA
sntrup1013 209 1455 1623 TBA TBA TBA
ntrulpr1013 210 1583 1455 TBA TBA TBA
sntrup1277 270 1847 2067 TBA TBA TBA
ntrulpr1277 271 1975 1847 TBA TBA TBA

Version: This is version 2020.10.31 of the "Speed" web page.