Every PQC pair, measured.
7 head-to-head comparisons across ML-KEM, ML-DSA, and SLH-DSA. Each opens a side-by-side detail view with latency, percentiles, and key sizes — measured daily on the same hardware.
- CPU
- Xeon Platinum 8259CL @ 2.50GHz
- Instance
- t3.mediumburstable
- OS / Kernel
- 24.04.4 LTS
- liboqs
- 0.15.0
- Wall clock
- 49m 51s
- CPU steal
- 0.83%
Key encapsulation mechanisms
3 ML-KEM pairs measured daily across NIST security levels.
ML-KEM across security levels
Same lattice scheme, different NIST categories. The cost of higher security.
Digital signatures
4 signature pairs across ML-DSA and SLH-DSA — lattice-based and hash-based schemes side by side.
ML-DSA across security levels
Same lattice scheme, different NIST categories. Higher security means bigger keys and slower signing.
SLH-DSA: fast vs small
The defining SLH-DSA tradeoff — fast signatures with larger signature sizes, or small signatures with much slower signing.
Side by side.
Pick any two PQC algorithms and an operation. Numbers come from the latest daily run, same hardware, same iteration count.
Different families AND different NIST levels. Useful for raw performance intuition, but adjust mentally for the security delta.
ML-DSA-65 is 1.9k× faster than SLH-DSA-SHAKE-128s on keygen.
keygen mean / p95 / p99 (µs)
Full statistics
| Metric | ML-DSA-65 | SLH-DSA-SHAKE-128s |
|---|---|---|
| Mean | 88.0 µs | 170.19 ms |
| Median | 88.0 µs | 168.57 ms |
| p95 | 107.0 µs | 176.57 ms |
| p99 | 123.8 µs | 189.51 ms |
| Stdev | 11.9 µs | 5.42 ms |
| Ops / sec | 11,362 | 5.9 |
| Public key | 1.91 KB | 32 B |
| Signature | 3.23 KB | 7.67 KB |