NTRU Prime

2020.04 news: A new web-browsing demo takes just 166000 Haswell cycles to generate a new sntrup761 public key for each TLS 1.3 session.

The following Haswell speeds do not include the 166000-cycles-per-key result. These speeds are medians from the official supercop-20210604 benchmarks for hiphop. See the security page for warnings regarding Core-SVP.

System Core-SVP ciphertext bytes public-key bytes enc cycles dec cycles keygen cycles
sntrup653 129 897 994 44155 55778 716209
ntrulpr653 130 1025 897 66749 79327 40775
sntrup761 153 1039 1158 46914 56241 809657
ntrulpr761 155 1167 1039 69103 82071 42515
sntrup857 175 1184 1322 58631 76861 1211563
ntrulpr857 176 1312 1184 88340 107987 54033
sntrup953 196 1349 1505 62704 80654 1523540
ntrulpr953 197 1477 1349 95007 115340 58354
sntrup1013 209 1455 1623 63916 81708 1753602
ntrulpr1013 210 1583 1455 94285 112920 58345
sntrup1277 270 1847 2067 80920 100079 2613358
ntrulpr1277 271 1975 1847 121397 144582 77092

Version: This is version 2021.06.04 of the "Speed" web page.