SDAA498 September 2026 AM62L
oqs_speed_kem -d 3 FrodoKEM-640-AES
oqs_speed_kem -d 3 FrodoKEM-976-AES
oqs_speed_kem -d 3 FrodoKEM-1344-AES| Algorithm | keygen/s | encaps/s | decaps/s | Notes |
|---|---|---|---|---|
| FrodoKEM-640-AES | 310 | 270 | 278 | Hardware AES active |
| FrodoKEM-976-AES | 145 | 120 | 126 | Hardware AES active |
| FrodoKEM-1344-AES | 81 | 67 | 67 | Hardware AES active |
FrodoKEM is approximately 25 to 40 times slower
than ML-KEM due to large matrix operations, but benefits directly from hardware AES
(OQS_USE_ARM_AES_INSTRUCTIONS=ON).