VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems
ECRYPT II
General information: Introduction eBASH eBASC eBAEAD eBATS SUPERCOP XBX Computers
How to submit new software: Tips hash stream aead dh kem encrypt sign
List of primitives measured: lwc sha3 hash stream lwc caesar aead dh kem encrypt sign
Measurements indexed by machine: lwc sha3 hash stream lwc caesar aead dh kem encrypt sign
List of subroutines: verify decode encode sort core hashblocks scalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems, indexed by machine

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents the benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation.

Each computer name is linked to additional information about the implementations and compilers selected for benchmarking.

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.

Sizes across machines

Secret key
bytessystem
20sclaus1024
28sclaus2048
28surf2113
29hector
32curve2251
32curve25519
32ecfp256e
32ecfp256h
32ecfp256i
32ecfp256q
32ecfp256s
32gls1271
32gls254
32gls254prot
32hecfp127i
32hecfp128bk
32hecfp128fkt
32hecfp128i
32jacfp127i
32jacfp128bk
32k298
32kumfp127g
32kumfp128g
32kumjacfp127g
32kummer
32nistp256
32prjfp127i
32prjfp128bk
32surf127eps
48k277mon
48k277taa
104nist521gs
130ed521gs
144ed448goldilocks
256claus
Public key
bytessystem
32curve2251
32curve25519
32gls1271
48kumfp127g
48kumfp128g
48kumjacfp127g
48kummer
48surf127eps
48surf2113
56ed448goldilocks
60hector
64ecfp256e
64ecfp256h
64ecfp256q
64ecfp256s
64gls254
64gls254prot
64hecfp127i
64hecfp128bk
64hecfp128fkt
64hecfp128i
64jacfp127i
64jacfp128bk
64nistp256
64prjfp127i
64prjfp128bk
80k277mon
80k277taa
96ecfp256i
96k298
128claus
128sclaus1024
144ed521gs
144nist521gs
256sclaus2048
Shared secret
bytessystem
32curve2251
32curve25519
32ecfp256e
32ecfp256h
32ecfp256i
32ecfp256q
32ecfp256s
32gls1271
32gls254prot
32..32..64gls254
40k277mon
40k277taa
48k298
48kumfp127g
48kumfp128g
48kumjacfp127g
48kummer
48surf127eps
48surf2113
60hector
64ed448goldilocks
64hecfp127i
64hecfp128bk
64hecfp128fkt
64hecfp128i
64jacfp127i
64jacfp128bk
64nistp256
64prjfp127i
64prjfp128bk
72ed521gs
72nist521gs
128claus
128sclaus1024
256sclaus2048

amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20231107

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
213332278824755
T:
jacfp127i
225062414926986
T:
kumjacfp127g
235552555228235
T:
prjfp127i
252542665428592
T:
hecfp127i
285732897631063
T:
ecfp256e
290942965630465
T:
prjfp128bk
283153004432383
T:
jacfp128bk
297013058931704
T:
hecfp128bk
310723152531673
T:
gls254
313143188934574
T:
ecfp256h
321793220832240
T:
gls254prot
328823317733815
T:
ecfp256s
340313414334503
T:
curve2251
325163453737033
T:
hecfp128i
343043458335259
T:
ecfp256q
324903459636962
T:
hecfp128fkt
421924220642213
T:
kummer
423214239842475
T:
k277taa
477874791548040
T:
k298
566575730057980
T:
gls1271
640876408764172
T:
k277mon
790877920979313
T:
kumfp127g
101317101339101467
T:
curve25519
104394104452104531
T:
kumfp128g
139530140055140531
T:
surf127eps
143274144224145020
T:
ecfp256i
167880168067168335
T:
ed448goldilocks
196302198024199591
T:
sclaus1024
200732201711202547
T:
nistp256
335393336968337926
T:
surf2113
736643736838738195
T:
ed521gs
909519911035911785
T:
nist521gs
99672810048011012034
T:
sclaus2048
101220910170251021774
T:
claus
Cycles to compute a shared secret
25%50%75%system
303693038630401
T:
gls254
321153212032157
T:
gls254prot
421954220942232
T:
kummer
422144227742291
T:
k277taa
476554773547866
T:
k298
641686416864231
T:
k277mon
775177885881946
T:
jacfp128bk
814628151981527
T:
kumfp127g
823898272482739
T:
kumjacfp127g
917939370297783
T:
prjfp128bk
960269608796189
T:
hecfp128bk
987069933499969
T:
hecfp128fkt
109210109218109242
T:
kumfp128g
109430109527109589
T:
curve25519
120312120388120975
T:
jacfp127i
125244127986130175
T:
gls1271
129262129580130086
T:
ecfp256e
135601136815136909
T:
curve2251
136022137756137938
T:
surf127eps
138386139168139914
T:
ecfp256i
141716142466142538
T:
ecfp256q
149666149903150791
T:
prjfp127i
151638151747152978
T:
hecfp127i
163972165333165452
T:
ecfp256h
196827198737198914
T:
ecfp256s
199389200639202129
T:
sclaus1024
211259211915212601
T:
hecfp128i
329631330397335830
T:
surf2113
524538525481525977
T:
ed448goldilocks
541868542276542602
T:
nistp256
736659737587738055
T:
ed521gs
910853911509912035
T:
nist521gs
9697359992401005275
T:
sclaus2048
100874010094041010054
T:
claus

amd64; Raptor Cove (b06a2); 2023 Intel Core i7-13700H, P cores; 6 x 4800MHz; raptor, supercop-20231107

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
179521886121992
T:
kumjacfp127g
181801981322024
T:
jacfp127i
204612225125039
T:
hecfp127i
206282269525772
T:
prjfp127i
272262836729825
T:
jacfp128bk
270122852230479
T:
prjfp128bk
281782948931338
T:
hecfp128bk
297913014630580
T:
gls254
276603039332864
T:
hecfp128i
273333052233092
T:
hecfp128fkt
309853104831128
T:
gls254prot
317543212032701
T:
ecfp256h
317653215632834
T:
ecfp256e
334003348733646
T:
curve2251
353213583737052
T:
ecfp256s
366423706937810
T:
ecfp256q
383113835238403
T:
k277taa
422024225542317
T:
k298
502735085751311
T:
gls1271
518645190751972
T:
kummer
599776004760135
T:
k277mon
640806434864870
T:
kumfp127g
811908169182182
T:
kumfp128g
105767106785107967
T:
curve25519
118861119982121579
T:
surf127eps
126489126909127602
T:
ed448goldilocks
136764137996139575
T:
ecfp256i
166047167235168983
T:
sclaus1024
166794167256167674
T:
nistp256
357379358890360162
T:
surf2113
589954592131596248
T:
ed521gs
750113753412758158
T:
nist521gs
880863886274893621
T:
sclaus2048
987026989367994673
T:
claus
Cycles to compute a shared secret
25%50%75%system
289972904229088
T:
gls254
309123095931005
T:
gls254prot
381983823738284
T:
k277taa
420154205942113
T:
k298
548875494158175
T:
kummer
599265998960054
T:
k277mon
655586575666629
T:
kumfp127g
661036624466402
T:
jacfp128bk
665356672966900
T:
kumjacfp127g
761007625376435
T:
prjfp128bk
772897741477620
T:
hecfp128bk
804208058880797
T:
hecfp128fkt
848918526785603
T:
kumfp128g
101195101347101608
T:
jacfp127i
105749106150106426
T:
curve25519
110206112823115017
T:
surf127eps
120165120878122164
T:
prjfp127i
120892121213122359
T:
hecfp127i
122888123153123532
T:
ecfp256e
119230123632125855
T:
gls1271
129480129675129956
T:
ecfp256i
133582133805134346
T:
ecfp256q
134326134502134659
T:
curve2251
147021147244147555
T:
ecfp256h
166641168050168836
T:
sclaus1024
167966168380169056
T:
hecfp128i
184012184607185992
T:
ecfp256s
354069354953357355
T:
surf2113
395355396847398187
T:
ed448goldilocks
437485439518441937
T:
nistp256
589637591248594776
T:
ed521gs
749732752965757532
T:
nist521gs
873790876766889667
T:
sclaus2048
989281990655993349
T:
claus

amd64; Golden Cove (906a4-40); 2022 Intel Core i3-1215U, P cores; 2 x 1600MHz; alder2,1f626960,5600000, supercop-20231107

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
171721798019017
T:
jacfp127i
178031857219482
T:
kumjacfp127g
192131994820845
T:
prjfp127i
195952026121491
T:
hecfp127i
226092334224083
T:
jacfp128bk
261882690227934
T:
prjfp128bk
263712701028193
T:
hecfp128bk
268382774428872
T:
hecfp128i
267592778328811
T:
hecfp128fkt
296432983330067
T:
gls254
303103072531738
T:
ecfp256h
302383087331646
T:
ecfp256e
310303109031156
T:
gls254prot
330123312333241
T:
curve2251
339873457535423
T:
ecfp256s
352633563836251
T:
ecfp256q
383053835238425
T:
k277taa
422424230242378
T:
k298
505085126352364
T:
gls1271
522085226452336
T:
kummer
605886064360733
T:
k277mon
637136398664259
T:
kumfp127g
804558073581083
T:
kumfp128g
107645107908108304
T:
curve25519
134611135535136467
T:
ecfp256i
139439139809140148
T:
ed448goldilocks
177236177890179012
T:
nistp256
183018184757186456
T:
sclaus1024
596991600607607043
T:
ed521gs
771775776974780646
T:
nist521gs
922999923666924403
T:
claus
931479939923946811
T:
sclaus2048
Cycles to compute a shared secret
25%50%75%system
290072905629101
T:
gls254
308873094330998
T:
gls254prot
381823822538274
T:
k277taa
420454209442163
T:
k298
521165216552208
T:
kummer
605306059960649
T:
k277mon
654816563965834
T:
kumfp127g
661846633766479
T:
jacfp128bk
665696690867110
T:
kumjacfp127g
761747637076614
T:
prjfp128bk
777717809878382
T:
hecfp128bk
803468059980901
T:
hecfp128fkt
848618517585778
T:
kumfp128g
100933101070101240
T:
jacfp127i
105993106888107491
T:
curve25519
120544120728120978
T:
hecfp127i
120055122019122871
T:
prjfp127i
121116123180125899
T:
gls1271
123092123481124345
T:
ecfp256e
128616128827129179
T:
ecfp256i
133649133819133976
T:
curve2251
134362134840135917
T:
ecfp256q
146310146521146870
T:
ecfp256h
167830168112169080
T:
hecfp128i
183872184394185234
T:
ecfp256s
190086190824194944
T:
sclaus1024
408451409049409692
T:
ed448goldilocks
435960437026439545
T:
nistp256
595285599063605308
T:
ed521gs
773094776803780608
T:
nist521gs
920033920893921665
T:
claus
956046959477962790
T:
sclaus2048

amd64; Gracemont (906a4-20); 2022 Intel Core i3-1215U, E cores; 4 x 1600MHz; alder2,1f626960,3300000, supercop-20231107

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
267022733428500
T:
jacfp127i
276572830229440
T:
kumjacfp127g
296333028931216
T:
prjfp127i
307833144732421
T:
hecfp127i
347303482735029
T:
curve2251
368253696837136
T:
gls254
375333797938584
T:
jacfp128bk
381073816238222
T:
gls254prot
405304106141914
T:
ecfp256e
422994278543818
T:
ecfp256h
430164363744310
T:
prjfp128bk
434894411744965
T:
hecfp128fkt
440024475245722
T:
hecfp128i
445274511245769
T:
hecfp128bk
448854539846134
T:
ecfp256s
475024802048912
T:
ecfp256q
481924825248344
T:
k277taa
528245297153163
T:
k298
688586966770398
T:
gls1271
720297211272174
T:
k277mon
114528114818115183
T:
kumfp127g
117448117631117768
T:
kummer
148814149042149678
T:
kumfp128g
154653154850155100
T:
curve25519
202044203150204381
T:
ecfp256i
243797244381246285
T:
nistp256
242737247351249077
T:
ed448goldilocks
347553350454353617
T:
sclaus1024
134672613501941363917
T:
ed521gs
148873315054941524788
T:
nist521gs
199614820038792014918
T:
claus
219861522149512232441
T:
sclaus2048
Cycles to compute a shared secret
25%50%75%system
363233637336445
T:
gls254
380403808738142
T:
gls254prot
481124816548248
T:
k277taa
526345272052807
T:
k298
718987199672095
T:
k277mon
114609114914115260
T:
jacfp128bk
117372117458117654
T:
kummer
117869118138118409
T:
kumfp127g
119346119557119793
T:
kumjacfp127g
136200136304136421
T:
curve2251
139817140493140773
T:
prjfp128bk
144227144683145060
T:
hecfp128bk
149492150086150513
T:
hecfp128fkt
156482157523157675
T:
kumfp128g
166369166680168382
T:
curve25519
170456174389179567
T:
gls1271
175297175689176220
T:
jacfp127i
188927189091189261
T:
ecfp256e
197492198104198472
T:
ecfp256i
200258200519200946
T:
ecfp256q
220099221334222075
T:
prjfp127i
223633224398225414
T:
hecfp127i
230045230294230615
T:
ecfp256h
264611265753266773
T:
ecfp256s
321599322196323865
T:
hecfp128i
351715358880361851
T:
sclaus1024
836241840263847746
T:
nistp256
855852863493867518
T:
ed448goldilocks
134555013596731366804
T:
ed521gs
149677015052051518664
T:
nist521gs
199303920044222011588
T:
claus
224617022517722269898
T:
sclaus2048

amd64; Golden Cove (90675-00); 2022 Intel Core i3-12100; 4 x 3300MHz; alder, supercop-20231107

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
165541715418632
T:
kumjacfp127g
178731913220606
T:
jacfp127i
206442160222980
T:
prjfp127i
208792197023266
T:
hecfp127i
236822485225609
T:
jacfp128bk
270422833429906
T:
prjfp128bk
275392863530343
T:
hecfp128bk
276262889830471
T:
hecfp128fkt
281412942130789
T:
hecfp128i
296803005930564
T:
gls254
302043066331577
T:
ecfp256h
303013087031703
T:
ecfp256e
310293107531123
T:
gls254prot
330013309633269
T:
curve2251
338303445435406
T:
ecfp256s
353373572936661
T:
ecfp256q
382613831138368
T:
k277taa
421994226942333
T:
k298
501395075751396
T:
gls1271
511055114451223
T:
kummer
606286070560782
T:
k277mon
636476380564009
T:
kumfp127g
799668016480412
T:
kumfp128g
105376105760106060
T:
curve25519
121161126234130975
T:
surf127eps
134468135274136133
T:
ecfp256i
139264139657139962
T:
ed448goldilocks
165829?168400?262328?
T:
sclaus1024
177193178028179834
T:
nistp256
340314342052343470
T:
surf2113
600416604624611611
T:
ed521gs
769937773191777640
T:
nist521gs
876918884215889409
T:
sclaus2048
922652923443924178
T:
claus
Cycles to compute a shared secret
25%50%75%system
290012904329092
T:
gls254
309443098831041
T:
gls254prot
381893823538276
T:
k277taa
420164206542116
T:
k298
510485109951157
T:
kummer
605376060660687
T:
k277mon
659906631666465
T:
kumfp127g
664256662066774
T:
jacfp128bk
668676731967421
T:
kumjacfp127g
757917589576039
T:
prjfp128bk
773777765078110
T:
hecfp128bk
803258049880629
T:
hecfp128fkt
846328494385337
T:
kumfp128g
100947101275101636
T:
jacfp127i
105823106855107893
T:
curve25519
111991116142121509
T:
surf127eps
120277120571123421
T:
prjfp127i
120668120787120895
T:
hecfp127i
122929123238123539
T:
ecfp256e
123258124177126139
T:
gls1271
128431128558128824
T:
ecfp256i
132015133112134033
T:
curve2251
135400135931136536
T:
ecfp256q
146381146672147137
T:
ecfp256h
165754?167234?266560?
T:
sclaus1024
167874168110170018
T:
hecfp128i
184976187762188067
T:
ecfp256s
334385336801339321
T:
surf2113
408515408971409746
T:
ed448goldilocks
438319439835441388
T:
nistp256
599179603498609165
T:
ed521gs
769508774415778048
T:
nist521gs
882759891553895768
T:
sclaus2048
919977920695921335
T:
claus

amd64; Zen 2 (860f01); 2022 AMD Ryzen 5 4500U; 6 x 3600MHz; renoir, supercop-20231107

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
210762240624073
T:
jacfp127i
220002318324597
T:
kumjacfp127g
233402457326461
T:
prjfp127i
245432577627608
T:
hecfp127i
296723073532648
T:
jacfp128bk
341843513936828
T:
ecfp256e
338693519836987
T:
hecfp128i
336913530737014
T:
hecfp128bk
350283619337013
T:
prjfp128bk
357603679337550
T:
hecfp128fkt
353043684240653
T:
ecfp256h
375453909441912
T:
ecfp256s
393854008842578
T:
curve2251
391934055443977
T:
ecfp256q
422794253843418
T:
gls254
438454391043973
T:
gls254prot
536495366253673
T:
k277taa
591095913559157
T:
kummer
615306220463034
T:
gls1271
640276406264131
T:
k298
821178217282233
T:
kumfp127g
865988659886608
T:
k277mon
109229109289109345
T:
kumfp128g
134344134429134616
T:
curve25519
144723145257145567
T:
surf127eps
158760159158159794
T:
ed448goldilocks
158774159658160415
T:
ecfp256i
164045165954167199
T:
sclaus1024
235682235879236919
T:
nistp256
441377443259444850
T:
surf2113
848924849277851955
T:
ed521gs
851076856973863798
T:
sclaus2048
941076941795942476
T:
nist521gs
9810359858181110427
T:
claus
Cycles to compute a shared secret
25%50%75%system
413874143941443
T:
gls254
437394380043885
T:
gls254prot
535975359853607
T:
k277taa
590785912259146
T:
kummer
639236397064001
T:
k298
836208362084233
T:
kumfp127g
846368469984796
T:
jacfp128bk
852568540785953
T:
kumjacfp127g
865778658386583
T:
k277mon
992109932299382
T:
prjfp128bk
102195102533102569
T:
hecfp128bk
106141106235106308
T:
hecfp128fkt
114801114874114882
T:
kumfp128g
128360128463128524
T:
jacfp127i
134246134330134450
T:
curve25519
141618141758141917
T:
surf127eps
146442146527146571
T:
ecfp256e
147185152286153078
T:
gls1271
155324155419155572
T:
ecfp256i
154623155617157646
T:
curve2251
156596156632156956
T:
ecfp256q
160093160121160134
T:
prjfp127i
163350163470163764
T:
hecfp127i
159446165876167798
T:
sclaus1024
179532179703179811
T:
ecfp256h
212186212368212714
T:
ecfp256s
225631225828226073
T:
hecfp128i
440838441852443929
T:
surf2113
482708483954485446
T:
ed448goldilocks
598479600925601653
T:
nistp256
848923849281849867
T:
ed521gs
855145857382881542
T:
sclaus2048
941271941579942139
T:
nist521gs
9727059828281113588
T:
claus

amd64; Zen 3 (a50f00); 2021 AMD Ryzen 5 PRO 5650G; 6 x 3900MHz; cezanne, supercop-20231107

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
248322631928320
T:
jacfp127i
255932705729404
T:
kumjacfp127g
284373063432975
T:
hecfp127i
294603107733261
T:
prjfp127i
310693268434644
T:
jacfp128bk
324663409737234
T:
ecfp256e
334383496439777
T:
curve2251
353313752742927
T:
ecfp256h
373403768138240
T:
gls254
365943826040958
T:
hecfp128bk
383043834238410
T:
gls254prot
371153894741175
T:
hecfp128fkt
371013897141023
T:
hecfp128i
380733967141162
T:
prjfp128bk
373913971845088
T:
ecfp256s
396894178147856
T:
ecfp256q
47320?47571?63058?
T:
kummer
478334787947917
T:
k277taa
532615384554545
T:
gls1271
541445428254953
T:
k298
756247568675750
T:
k277mon
814518152281592
T:
kumfp127g
102457102532102636
T:
curve25519
105138105201105291
T:
kumfp128g
139569140222140661
T:
surf127eps
149324150229151132
T:
ecfp256i
158424159015159244
T:
ed448goldilocks
198788200592202561
T:
sclaus1024
219127219451220810
T:
nistp256
356298358577359272
T:
surf2113
754905756019756339
T:
ed521gs
903967905662908918
T:
nist521gs
100698610132041021320
T:
sclaus2048
102177010230281037110
T:
claus
Cycles to compute a shared secret
25%50%75%system
355583573935761
T:
gls254
382423825338369
T:
gls254prot
472084724847668
T:
kummer
477124779047868
T:
k277taa
539535402054091
T:
k298
756027566575704
T:
k277mon
811758137281416
T:
jacfp128bk
839118399384058
T:
kumfp127g
858448593286008
T:
kumjacfp127g
104442104577104705
T:
prjfp128bk
107125107390107463
T:
hecfp128bk
109696109796109803
T:
kumfp128g
110728110809110878
T:
curve25519
111443111638111970
T:
hecfp128fkt
130635130720130819
T:
curve2251
131604131727131823
T:
jacfp127i
129538132653133352
T:
gls1271
134811135322135360
T:
ecfp256e
136028136724137151
T:
surf127eps
143518143643143958
T:
ecfp256i
145950146542146595
T:
ecfp256q
164201165616167003
T:
ecfp256h
174929175381176507
T:
prjfp127i
177921178097178511
T:
hecfp127i
201445202008208793
T:
sclaus1024
202053204348204513
T:
ecfp256s
237788237838239003
T:
hecfp128i
353823353978354225
T:
surf2113
528468528564529054
T:
ed448goldilocks
577368580943581584
T:
nistp256
753753754434755425
T:
ed521gs
907407909076910054
T:
nist521gs
100375910122251025182
T:
sclaus2048
101895610206271032663
T:
claus

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
337343515539802
T:
curve2251
378263799538008
T:
gls254prot
372723827438659
T:
gls254
467504677046841
T:
k277taa
476974775247905
T:
kummer
527445287253245
T:
k298
540195499656224
T:
gls1271
736497369373773
T:
k277mon
102507102661102824
T:
curve25519
139792140126140514
T:
surf127eps
156767157050157379
T:
ed448goldilocks
200647202727204578
T:
sclaus1024
209722210036210198
T:
nistp256
367234369072370210
T:
surf2113
757107758860764001
T:
ed521gs
872057875803876158
T:
nist521gs
100644510150731020480
T:
sclaus2048
119862812011361204247
T:
claus
Cycles to compute a shared secret
25%50%75%system
353323536835374
T:
gls254
378513789837931
T:
gls254prot
467024674546836
T:
k277taa
478424789748070
T:
kummer
525905267552753
T:
k298
736187368873725
T:
k277mon
110876110972111112
T:
curve25519
126036129335132317
T:
gls1271
129803131087131198
T:
curve2251
135835136451136730
T:
surf127eps
202626205515206705
T:
sclaus1024
363140363460363827
T:
surf2113
517434518481518742
T:
ed448goldilocks
563375563907564446
T:
nistp256
758675758870760360
T:
ed521gs
872278873146874983
T:
nist521gs
101862610200251021087
T:
sclaus2048
119823611998721202629
T:
claus

amd64; Zen 2 (860f81); 2021 AMD Ryzen 3 5300U; 4 x 2600MHz; lucienne, supercop-20231107

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
218602315324865
T:
jacfp127i
221592338125324
T:
kumjacfp127g
238692501127108
T:
prjfp127i
246632611927846
T:
hecfp127i
298573125932988
T:
jacfp128bk
331113424336434
T:
prjfp128bk
338353526237360
T:
hecfp128fkt
345173558838177
T:
ecfp256e
339783561537218
T:
hecfp128bk
341683584937640
T:
hecfp128i
354623688841201
T:
ecfp256h
375823908042620
T:
ecfp256s
394703992641736
T:
curve2251
393604077645535
T:
ecfp256q
433634383944150
T:
gls254
438494387143932
T:
gls254prot
536375365553687
T:
k277taa
590295908859119
T:
kummer
603936105461706
T:
gls1271
638336387963983
T:
k298
821168217982235
T:
kumfp127g
865958660386633
T:
k277mon
109267109318109384
T:
kumfp128g
135026135032135242
T:
curve25519
145271145861146219
T:
surf127eps
158951159564160439
T:
ed448goldilocks
159030159790160748
T:
ecfp256i
164192165878167446
T:
sclaus1024
236364237243237378
T:
nistp256
441227443331444647
T:
surf2113
818008818666819334
T:
ed521gs
847393853072861930
T:
sclaus2048
941990944873945634
T:
nist521gs
976902979240982229
T:
claus
Cycles to compute a shared secret
25%50%75%system
413794138141432
T:
gls254
437554375543765
T:
gls254prot
535985361853625
T:
k277taa
589975902259032
T:
kummer
637386377663822
T:
k298
835728363383743
T:
kumfp127g
843778445084762
T:
jacfp128bk
854248550985988
T:
kumjacfp127g
865678658386583
T:
k277mon
990589914299231
T:
prjfp128bk
102575102674102751
T:
hecfp128bk
106113106175106252
T:
hecfp128fkt
114773114961115016
T:
kumfp128g
128437128502128597
T:
jacfp127i
135039135183136289
T:
curve25519
140195142198142396
T:
surf127eps
146694146718146944
T:
ecfp256e
148418148866151322
T:
gls1271
155527155554156590
T:
ecfp256i
157144157185157344
T:
ecfp256q
156901157359157591
T:
curve2251
159803160176160431
T:
prjfp127i
163135163338163512
T:
hecfp127i
164715164896166415
T:
sclaus1024
180436180913181024
T:
ecfp256h
212586212747212840
T:
ecfp256s
226066226103226255
T:
hecfp128i
443136443962444956
T:
surf2113
481367481713484137
T:
ed448goldilocks
596033597706598345
T:
nistp256
817237817822818578
T:
ed521gs
844235849161855888
T:
sclaus2048
943541944278945866
T:
nist521gs
979030979226981562
T:
claus

amd64; Tremont (906c0); 2021 Intel Pentium Silver N6000; 4 x 1100MHz; jasper, supercop-20231107

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
352123571036454
T:
jacfp127i
363683678237557
T:
kumjacfp127g
427524332244190
T:
hecfp127i
426314357244893
T:
prjfp127i
490654921049980
T:
curve2251
502445071951387
T:
jacfp128bk
536515382854091
T:
gls254
539685450855226
T:
ecfp256e
553295539355539
T:
gls254prot
598396057061760
T:
ecfp256h
599906101262533
T:
prjfp128bk
602596107262237
T:
ecfp256s
606206113261710
T:
hecfp128fkt
606946165262913
T:
hecfp128bk
610286213963861
T:
hecfp128i
641656477566000
T:
ecfp256q
676886779867957
T:
k277taa
740477514676315
T:
k298
986349891899122
T:
k277mon
100244101430102431
T:
gls1271
153511153595153881
T:
kumfp127g
219062220616221014
T:
kumfp128g
240308240830241214
T:
curve25519
281236283449285457
T:
surf127eps
290180292031293924
T:
ecfp256i
304500304930305390
T:
ed448goldilocks
319545319819320636
T:
kummer
327399330459333953
T:
sclaus1024
342179342695343272
T:
nistp256
597274599956601514
T:
surf2113
174737317493661751054
T:
ed521gs
175988017749121784273
T:
sclaus2048
196616419718631977367
T:
claus
197677519780211980531
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
529075297253045
T:
gls254
552685532355400
T:
gls254prot
675846767067776
T:
k277taa
731037347374870
T:
k298
987389892799074
T:
k277mon
156978157094157290
T:
kumfp127g
158884159014159193
T:
kumjacfp127g
158472159503160140
T:
jacfp128bk
192442192932193633
T:
curve2251
201496202289203276
T:
prjfp128bk
206269206637207222
T:
hecfp128bk
214480214725215270
T:
hecfp128fkt
226665226908227151
T:
kumfp128g
239875240543241406
T:
jacfp127i
240471240776241011
T:
curve25519
246843248837254432
T:
gls1271
265926266382266672
T:
ecfp256e
277880278349279226
T:
ecfp256q
278706281470284386
T:
surf127eps
289974291359291782
T:
ecfp256i
312155312871313651
T:
prjfp127i
319656320635329043
T:
kummer
321578321876322561
T:
hecfp127i
327572332819343996
T:
sclaus1024
340746341017341443
T:
ecfp256h
355887356480356938
T:
ecfp256s
462621462984463871
T:
hecfp128i
597395598354599497
T:
surf2113
100317710038431007591
T:
ed448goldilocks
118591311867831203354
T:
nistp256
174779717488981750281
T:
ed521gs
172737917489921774102
T:
sclaus2048
195905219664181976661
T:
claus
197270819745061976316
T:
nist521gs

amd64; Tremont (906c0); 2021 Intel Celeron N5105; 4 x 2000MHz; jasper3, supercop-20231107

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
363473700838467
T:
jacfp127i
366933787639122
T:
kumjacfp127g
430964426245444
T:
hecfp127i
463654674447667
T:
prjfp127i
489394914250160
T:
curve2251
524125305553611
T:
gls254
523735323954172
T:
jacfp128bk
539655483456003
T:
ecfp256e
551835526955368
T:
gls254prot
597416075862539
T:
ecfp256h
613456244664730
T:
hecfp128i
606576259664623
T:
prjfp128bk
617996307865072
T:
hecfp128bk
623666415566429
T:
hecfp128fkt
636796446465637
T:
ecfp256s
666296723268282
T:
ecfp256q
676546777167975
T:
k277taa
750547607878012
T:
k298
967419790398921
T:
gls1271
987039893299165
T:
k277mon
153700154108154528
T:
kumfp127g
219498220535221066
T:
kumfp128g
239927240728241080
T:
curve25519
277218279451281250
T:
surf127eps
289304290689292846
T:
ecfp256i
303897304635305469
T:
ed448goldilocks
319636319923320504
T:
kummer
327664330996333729
T:
sclaus1024
340452340781341144
T:
nistp256
597253600361601463
T:
surf2113
174202017444851746580
T:
ed521gs
176211317741741785920
T:
sclaus2048
196946319737061978968
T:
claus
197373619759431977764
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
512775171252394
T:
gls254
551035514555224
T:
gls254prot
674886757967687
T:
k277taa
742047499176160
T:
k298
986829886099027
T:
k277mon
156628157111157596
T:
kumfp127g
158820159357160010
T:
jacfp128bk
159600159855160163
T:
kumjacfp127g
191848192697193570
T:
curve2251
198588199407200742
T:
prjfp128bk
206235207713208098
T:
hecfp128bk
213658214555215632
T:
hecfp128fkt
226868227086227541
T:
kumfp128g
239944240331240880
T:
curve25519
240836241169241744
T:
jacfp127i
243027244024245993
T:
gls1271
265770266184266474
T:
ecfp256e
274153275227275627
T:
surf127eps
277851278092278731
T:
ecfp256q
287134287588288125
T:
ecfp256i
312016313179314736
T:
prjfp127i
319638319848320202
T:
kummer
321853322050322507
T:
hecfp127i
330156331003333257
T:
sclaus1024
340642340821341436
T:
ecfp256h
356034356677357346
T:
ecfp256s
462423462742463410
T:
hecfp128i
596559598236599311
T:
surf2113
100304210031211003592
T:
ed448goldilocks
117661811778281179128
T:
nistp256
174229817449791747320
T:
ed521gs
175705917610351776781
T:
sclaus2048
196952019709181972307
T:
nist521gs
197273719758681977939
T:
claus

amd64; Tremont (906c0); 2021 Intel Celeron N4500; 2 x 1100MHz; jasper2, supercop-20231107

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
347283533636242
T:
jacfp127i
369783735238118
T:
kumjacfp127g
408694191343244
T:
prjfp127i
430294414945813
T:
hecfp127i
490924920249993
T:
curve2251
500325045051147
T:
jacfp128bk
522005291353567
T:
gls254
541845460155390
T:
ecfp256e
554845609756761
T:
gls254prot
596906046161565
T:
ecfp256h
598446069362252
T:
prjfp128bk
599846097762847
T:
hecfp128bk
602396104862165
T:
ecfp256s
603706136663679
T:
hecfp128i
610866218663343
T:
hecfp128fkt
638506462565666
T:
ecfp256q
677456784267972
T:
k277taa
743357500375731
T:
k298
987239895699207
T:
k277mon
98698100102101146
T:
gls1271
153519153598153672
T:
kumfp127g
218829220673221153
T:
kumfp128g
240066240846241106
T:
curve25519
277112279221281300
T:
surf127eps
288957290437292450
T:
ecfp256i
304177304853305612
T:
ed448goldilocks
319716320223320686
T:
kummer
326929330122333234
T:
sclaus1024
342528344695347433
T:
nistp256
597638600236601493
T:
surf2113
174664017479711749542
T:
ed521gs
176243817759171783537
T:
sclaus2048
196704519756072021002
T:
claus
197599019780951980902
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
514195181452477
T:
gls254
553675585756560
T:
gls254prot
675596764467727
T:
k277taa
737117412374891
T:
k298
987869889299042
T:
k277mon
156955157036157154
T:
kumfp127g
159110159519160050
T:
jacfp128bk
159404159798160060
T:
kumjacfp127g
192998193421193504
T:
curve2251
200478200882201684
T:
prjfp128bk
205007205787206664
T:
hecfp128bk
213221214955215981
T:
hecfp128fkt
226586227061227570
T:
kumfp128g
239944240264240914
T:
curve25519
240523240772241287
T:
jacfp127i
239259244839245563
T:
gls1271
265829266471266916
T:
ecfp256e
270244272024274122
T:
surf127eps
277654278094278684
T:
ecfp256q
287602287773288046
T:
ecfp256i
312082312914313829
T:
prjfp127i
319461319776320285
T:
kummer
322814323043323899
T:
hecfp127i
333681336784338124
T:
sclaus1024
340837340996341405
T:
ecfp256h
355862356492357165
T:
ecfp256s
462209462580463657
T:
hecfp128i
594691598400599302
T:
surf2113
100324310041171004784
T:
ed448goldilocks
118601511912721194543
T:
nistp256
174642017485371750327
T:
ed521gs
176119017630451766312
T:
sclaus2048
197628419770041978977
T:
nist521gs
196753419778602021458
T:
claus

amd64; Zen 3 (a20f10); 2020 AMD Ryzen 9 5950X; 16 x 3400MHz; zen3, supercop-20220213

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
335503433637499
T:
curve2251
363653651337501
T:
gls254
379363793737952
T:
gls254prot
467334679546877
T:
k277taa
490954914549182
T:
kummer
538025436254972
T:
gls1271
622176235462808
T:
k298
730897320373278
T:
k277mon
102285102373102495
T:
curve25519
140529141187141634
T:
surf127eps
159195159496159723
T:
ed448goldilocks
207217208665210377
T:
sclaus1024
222820223237223320
T:
nistp256
367798369470370460
T:
surf2113
716599719778729310
T:
ed521gs
880981882015884294
T:
nist521gs
101912710197971023602
T:
claus
101372810214011029771
T:
sclaus2048
Cycles to compute a shared secret
25%50%75%system
352643534135442
T:
gls254
378543788537886
T:
gls254prot
466344671746804
T:
k277taa
491034913949166
T:
kummer
620926218162313
T:
k298
730317308673130
T:
k277mon
110825110904110991
T:
curve25519
129784130071131187
T:
curve2251
129270130535131907
T:
gls1271
137060138423138483
T:
surf127eps
208043208798210458
T:
sclaus1024
364367365479366016
T:
surf2113
525993526466527032
T:
ed448goldilocks
600802602448603146
T:
nistp256
716085717688727485
T:
ed521gs
883003884791887358
T:
nist521gs
101633910172241018546
T:
claus
100114110280561029316
T:
sclaus2048

amd64; Zen (820f01); 2020 AMD Athlon Silver 3050e; 2 x 1400MHz; dali, supercop-20231107

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
266072724428111
T:
kumjacfp127g
270632775528822
T:
jacfp127i
302283075931536
T:
prjfp127i
307683148232095
T:
hecfp127i
355583647037399
T:
jacfp128bk
386513947441378
T:
ecfp256e
387583961440940
T:
hecfp128fkt
389693969941144
T:
hecfp128bk
389883979040683
T:
prjfp128bk
391834001141136
T:
hecfp128i
399164046442145
T:
curve2251
423154390247011
T:
ecfp256h
439074405944265
T:
gls254
447484478744802
T:
gls254prot
440584523548173
T:
ecfp256s
456514708650338
T:
ecfp256q
557685594856157
T:
k277taa
645286460364957
T:
k298
649316569766476
T:
gls1271
897498981689856
T:
k277mon
101113101214101222
T:
kummer
101689101767101856
T:
kumfp127g
132939133083133194
T:
kumfp128g
144528144540144574
T:
curve25519
185677186691188143
T:
ecfp256i
186370187189187737
T:
surf127eps
198212200288202200
T:
sclaus1024
202514202766203234
T:
ed448goldilocks
272844273150273512
T:
nistp256
454035456379457078
T:
surf2113
929770931778933881
T:
ed521gs
9888639965101002525
T:
sclaus2048
110495911072591109608
T:
nist521gs
117677411791511182408
T:
claus
Cycles to compute a shared secret
25%50%75%system
423234234242357
T:
gls254
446994472144745
T:
gls254prot
557515648356641
T:
k277taa
644706462764808
T:
k298
896978977989781
T:
k277mon
101060101183101184
T:
kummer
103549103680103772
T:
jacfp128bk
104491104509104541
T:
kumfp127g
106261106452106455
T:
kumjacfp127g
126314126413126501
T:
prjfp128bk
129281129379129510
T:
hecfp128bk
134053134112134324
T:
hecfp128fkt
138310138869139190
T:
kumfp128g
157273157519159043
T:
curve25519
160237160523160792
T:
curve2251
162389162959163250
T:
jacfp127i
163376164311166630
T:
gls1271
173565173678173849
T:
ecfp256e
183297183398183534
T:
ecfp256q
183363183566183857
T:
ecfp256i
183671184370184905
T:
surf127eps
198810199549201335
T:
sclaus1024
203399203607203784
T:
prjfp127i
207235207374207644
T:
hecfp127i
215797215915216071
T:
ecfp256h
236050236276236478
T:
ecfp256s
285610285823286117
T:
hecfp128i
451977453532453706
T:
surf2113
590731591961594451
T:
ed448goldilocks
670940671560672718
T:
nistp256
929059931584935268
T:
ed521gs
9843759994181014114
T:
sclaus2048
110550211069831108599
T:
nist521gs
117523211798421187731
T:
claus

amd64; Tiger Lake (806c1); 2020 Intel Core i7-1165G7; 4 x 2800MHz; panther, supercop-20231107

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
193772052221936
T:
jacfp127i
199972066921698
T:
kumjacfp127g
237392480126792
T:
prjfp127i
241112531027073
T:
hecfp127i
297893028431035
T:
gls254
316753174631839
T:
gls254prot
307433176833089
T:
jacfp128bk
356093582937206
T:
curve2251
353333624938128
T:
prjfp128bk
365903723638908
T:
ecfp256e
365913814942104
T:
hecfp128fkt
363113832041449
T:
hecfp128i
365873838342540
T:
hecfp128bk
376043839140298
T:
ecfp256h
383553843838525
T:
k277taa
405074164843091
T:
ecfp256s
425064256942682
T:
k298
428604383445823
T:
ecfp256q
484664852248594
T:
kummer
549945505655120
T:
k277mon
626466364164511
T:
gls1271
791697932279488
T:
kumfp127g
116284116418116543
T:
kumfp128g
121034121181121623
T:
curve25519
144188144795145160
T:
ed448goldilocks
168660169883170866
T:
surf127eps
175662176672178088
T:
ecfp256i
209961212287214252
T:
sclaus1024
221684223102223905
T:
nistp256
404625406423408608
T:
surf2113
793813795378798193
T:
ed521gs
966663971206974419
T:
nist521gs
105737610589981082541
T:
claus
107036010766171085588
T:
sclaus2048
Cycles to compute a shared secret
25%50%75%system
288612891628962
T:
gls254
315653160631646
T:
gls254prot
381643827038315
T:
k277taa
421604223842327
T:
k298
483384842748511
T:
kummer
549275497855040
T:
k277mon
818938202382204
T:
kumfp127g
821588238982641
T:
kumjacfp127g
930569334693640
T:
jacfp128bk
111748112079112423
T:
prjfp128bk
114349114907115564
T:
hecfp128bk
119132119517119841
T:
hecfp128fkt
122458122606123064
T:
kumfp128g
122342122852123344
T:
jacfp127i
129927130087130463
T:
curve25519
140868141157141382
T:
curve2251
153151153589155638
T:
prjfp127i
153344154337156912
T:
gls1271
154764154993155272
T:
hecfp127i
159665159838160070
T:
ecfp256e
165969167566168352
T:
surf127eps
168370168796169183
T:
ecfp256i
169976170214170495
T:
ecfp256q
193933194317194971
T:
ecfp256h
214906215823217848
T:
sclaus1024
232819233254233833
T:
ecfp256s
252166252508252929
T:
hecfp128i
409562416403418132
T:
surf2113
457039457626458434
T:
ed448goldilocks
577691579522581430
T:
nistp256
793510794828797381
T:
ed521gs
969352975023978790
T:
nist521gs
105348810545291078190
T:
claus
107095910737541081170
T:
sclaus2048

aarch64; Cortex-A72 (410fd083); 2019 Broadcom BCM2711; 4 x 1500MHz; pi4b, supercop-20231107

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
248920249139249166
T:
kummer
349956350526351190
T:
curve25519
369592369643369702
T:
nistp256
422407424006425402
T:
surf127eps
597290603959607994
T:
sclaus1024
195597419579001966781
T:
ed521gs
240203024024822413707
T:
nist521gs
297897230077123035814
T:
sclaus2048
360001936109233630372
T:
claus
Cycles to compute a shared secret
25%50%75%system
248091248092249087
T:
kummer
349351350208351136
T:
curve25519
405632407098409143
T:
surf127eps
600051616114617783
T:
sclaus1024
130654313076481308048
T:
nistp256
195603619562361965441
T:
ed521gs
240167324019752411751
T:
nist521gs
299033530010723029696
T:
sclaus2048
361145436141643624762
T:
claus

amd64; Zen 2 (830f10); 2019 AMD EPYC 7742; 64 x 2250MHz; rome0, supercop-20231107

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
233812479426683
T:
jacfp127i
284433149134512
T:
prjfp127i
26642?31927?33957?
T:
kumjacfp127g
290313258435384
T:
hecfp127i
314793278234233
T:
jacfp128bk
364983849440731
T:
hecfp128i
381083971343642
T:
prjfp128bk
376634022544533
T:
ecfp256e
398434103345574
T:
curve2251
434984372144036
T:
gls254
416394376146268
T:
hecfp128fkt
441004411144137
T:
gls254prot
432254475345997
T:
hecfp128bk
40937?45262?52902?
T:
ecfp256h
42957?48292?54783?
T:
ecfp256s
45458?49886?58015?
T:
ecfp256q
538325384253875
T:
k277taa
590375909759134
T:
kummer
618976264263258
T:
gls1271
633336338865781
T:
k298
821378221082278
T:
kumfp127g
860468604686047
T:
k277mon
109269109311109373
T:
kumfp128g
135092135487136495
T:
curve25519
144712145169145513
T:
surf127eps
158540158920159307
T:
ed448goldilocks
159162159978160873
T:
ecfp256i
163948165913167554
T:
sclaus1024
237185237401238241
T:
nistp256
442008443816444732
T:
surf2113
818874820219821358
T:
ed521gs
852563860029865672
T:
sclaus2048
943038943946944925
T:
nist521gs
975682978856982883
T:
claus
Cycles to compute a shared secret
25%50%75%system
413664139841402
T:
gls254
440504405844063
T:
gls254prot
538495389553911
T:
k277taa
589865900959181
T:
kummer
632166324863283
T:
k298
835658362083870
T:
kumfp127g
851698527785324
T:
jacfp128bk
853838546986508
T:
kumjacfp127g
860018600186001
T:
k277mon
992189927199385
T:
prjfp128bk
102376102557102779
T:
hecfp128bk
105792105880106139
T:
hecfp128fkt
114863114941114985
T:
kumfp128g
128309128347128413
T:
jacfp127i
135133135175135567
T:
curve25519
141471141692141857
T:
surf127eps
146988147067147136
T:
ecfp256e
149599150728150974
T:
gls1271
155605155780156684
T:
ecfp256i
156186156929156983
T:
curve2251
157100157126157229
T:
ecfp256q
160031160069160564
T:
prjfp127i
163425163482163584
T:
hecfp127i
165637166461167104
T:
sclaus1024
180325180392180514
T:
ecfp256h
212533212688212845
T:
ecfp256s
226013226281226567
T:
hecfp128i
440123441818443280
T:
surf2113
479969483163483628
T:
ed448goldilocks
600088600480600761
T:
nistp256
817687818474820028
T:
ed521gs
865114876035877411
T:
sclaus2048
942875944233945197
T:
nist521gs
974645977405985095
T:
claus

amd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; comet, supercop-20231107

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
220872272923578
T:
kumjacfp127g
229932364824394
T:
jacfp127i
248622582327187
T:
hecfp127i
259532667127450
T:
prjfp127i
305903149132328
T:
jacfp128bk
353203574737053
T:
hecfp128bk
356513622437308
T:
prjfp128bk
354283652137739
T:
hecfp128i
355093665137879
T:
hecfp128fkt
372013747137858
T:
gls254
382693883639693
T:
curve2251
390613909839147
T:
gls254prot
426224325544819
T:
ecfp256e
458864629346331
T:
k277taa
457814651048513
T:
ecfp256h
465354728148865
T:
ecfp256s
485394940451762
T:
ecfp256q
533405340353487
T:
kummer
540865419554408
T:
k298
699217076271611
T:
gls1271
703657172172298
T:
k277mon
801728033480837
T:
kumfp127g
110459112797112885
T:
kumfp128g
126478126705126951
T:
curve25519
153511153752153969
T:
ed448goldilocks
177698179528181105
T:
sclaus1024
184190187033187854
T:
surf127eps
193171194339195384
T:
ecfp256i
235513236319237024
T:
nistp256
257327264420276371
T:
hector
504448506315507508
T:
surf2113
816517817163818623
T:
ed521gs
912497922458965766
T:
sclaus2048
968400969442976609
T:
claus
978281979937982372
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
361393619836292
T:
gls254
388663890538970
T:
gls254prot
456864607046105
T:
k277taa
532145328653350
T:
kummer
533315342253526
T:
k298
716157172072960
T:
k277mon
824138257182926
T:
kumfp127g
837608383283916
T:
kumjacfp127g
877598863888750
T:
jacfp128bk
110049110170110306
T:
prjfp128bk
111754113508113683
T:
hecfp128bk
117705117839118009
T:
hecfp128fkt
115643118020118098
T:
kumfp128g
123877123954124056
T:
jacfp127i
136171136590137443
T:
curve25519
143766144005144139
T:
curve2251
164951165088165284
T:
prjfp127i
167015167139167307
T:
hecfp127i
172057174412176158
T:
gls1271
176261176554176754
T:
ecfp256e
175382179286179682
T:
sclaus1024
179904182356183419
T:
surf127eps
188785188924189112
T:
ecfp256i
189218189401189596
T:
ecfp256q
222261222399222597
T:
ecfp256h
241189241361241534
T:
ecfp256s
252566252783252987
T:
hecfp128i
458517458832459161
T:
ed448goldilocks
504878505329505736
T:
surf2113
584151585057587562
T:
nistp256
817024822628837240
T:
ed521gs
873090878162884112
T:
hector
930086953186968792
T:
sclaus2048
965273965981973616
T:
claus
978963980355982574
T:
nist521gs

amd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; cubi10, supercop-20231107

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
210942133822195
T:
kumjacfp127g
218772255623506
T:
jacfp127i
250032575626747
T:
prjfp127i
258272665327461
T:
hecfp127i
303323125531948
T:
jacfp128bk
360833676937578
T:
prjfp128bk
364213708637900
T:
hecfp128fkt
366173737838025
T:
hecfp128i
371933739337755
T:
gls254
379733821439006
T:
curve2251
376953844739322
T:
hecfp128bk
391753922139276
T:
gls254prot
426774335944504
T:
ecfp256e
463254636546403
T:
k277taa
461414664248155
T:
ecfp256h
467584751548837
T:
ecfp256s
487384958751073
T:
ecfp256q
530075319053458
T:
k298
530905321954032
T:
kummer
695207040671340
T:
gls1271
710797117672250
T:
k277mon
797197978779904
T:
kumfp127g
110563112701112823
T:
kumfp128g
126502126667126864
T:
curve25519
152353152801153184
T:
ed448goldilocks
184763187380188621
T:
surf127eps
195042196263197698
T:
ecfp256i
179273199571212418
T:
sclaus1024
233359233547233856
T:
nistp256
506058508728510759
T:
surf2113
822632823362825364
T:
ed521gs
896315905065943699
T:
sclaus2048
954726955363956700
T:
nist521gs
977057979328983678
T:
claus
Cycles to compute a shared secret
25%50%75%system
361873624036285
T:
gls254
389493899939047
T:
gls254prot
456014610246164
T:
k277taa
528365292653082
T:
k298
530545393854044
T:
kummer
709737105772133
T:
k277mon
821088218482321
T:
kumfp127g
835708418784464
T:
kumjacfp127g
888578896089111
T:
jacfp128bk
110315110601111233
T:
prjfp128bk
113276114239114714
T:
hecfp128bk
117769117903118103
T:
hecfp128fkt
117986118058118208
T:
kumfp128g
125502125711125838
T:
jacfp127i
136032136529136750
T:
curve25519
141908143720144219
T:
curve2251
165515166629166866
T:
prjfp127i
168953169102169366
T:
hecfp127i
175958176463177947
T:
gls1271
176692179148179583
T:
ecfp256e
180782184298184910
T:
surf127eps
187749187980188323
T:
ecfp256q
190579190895191380
T:
ecfp256i
179715191756206319
T:
sclaus1024
225222225456225866
T:
ecfp256h
242629242848243319
T:
ecfp256s
253186253386253810
T:
hecfp128i
456929457198457536
T:
ed448goldilocks
501297507296508561
T:
surf2113
587668588245588824
T:
nistp256
823193825667828477
T:
ed521gs
906627912047939282
T:
sclaus2048
954535955039957274
T:
nist521gs
9735349764141024280
T:
claus

amd64; Ice Lake (706e5); 2019 Intel Core i3-1035G1; 4 x 1000MHz; icelake2, supercop-20221005

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
294222962629829
T:
gls254
315353159731656
T:
gls254prot
356823592536460
T:
curve2251
383873849338628
T:
k277taa
419144215642522
T:
k298
496314972949925
T:
kummer
551485524155618
T:
k277mon
635416461665455
T:
gls1271
121235121421121705
T:
curve25519
145378145817146240
T:
ed448goldilocks
167451169019171086
T:
surf127eps
210381213080215609
T:
sclaus1024
229401230861233076
T:
nistp256
393994396192398488
T:
surf2113
794593796389798799
T:
ed521gs
960681964206967325
T:
nist521gs
107529210887261104624
T:
sclaus2048
126261112669811272519
T:
claus
Cycles to compute a shared secret
25%50%75%system
288282887928947
T:
gls254
314583151831670
T:
gls254prot
382633836838587
T:
k277taa
415914182342184
T:
k298
495244961549793
T:
kummer
550675515755384
T:
k277mon
130070130318130992
T:
curve25519
140066140553140999
T:
curve2251
158547160294161947
T:
gls1271
163805165182167813
T:
surf127eps
212667213688216268
T:
sclaus1024
391304393743396581
T:
surf2113
469404470206471471
T:
ed448goldilocks
596086598954603025
T:
nistp256
794467795618798066
T:
ed521gs
959187961357964090
T:
nist521gs
108706910915971115555
T:
sclaus2048
126428812689701273171
T:
claus

amd64; Goldmont Plus (706a8); 2019 Intel Celeron N4020; 2 x 1100MHz; gemini, supercop-20231107

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
464124767149237
T:
jacfp127i
483304946850966
T:
kumjacfp127g
532355453456303
T:
prjfp127i
549965609458146
T:
hecfp127i
589735954460654
T:
ecfp256e
605906080162298
T:
curve2251
659366676368968
T:
ecfp256h
663096759169422
T:
jacfp128bk
713157208973029
T:
gls254
717127322475273
T:
hecfp128i
713647325975292
T:
prjfp128bk
728207348375276
T:
ecfp256q
726457424077102
T:
hecfp128fkt
740877531677554
T:
ecfp256s
807138214884540
T:
hecfp128bk
903519039890423
T:
gls254prot
113692114841116091
T:
gls1271
126015126070126346
T:
k277taa
136092136146136441
T:
k298
181138181143181160
T:
k277mon
205380205382205406
T:
kumfp127g
259978259993260059
T:
kumfp128g
267339267339267362
T:
curve25519
316563318457320545
T:
ecfp256i
323702323961324579
T:
ed448goldilocks
364873366013366866
T:
surf127eps
374685377568381061
T:
sclaus1024
377831378146379280
T:
kummer
393850394082394482
T:
nistp256
676828680705681749
T:
surf2113
183306118447881859092
T:
sclaus2048
187834618804691882292
T:
ed521gs
212749221278392129129
T:
nist521gs
224403822480682252132
T:
claus
Cycles to compute a shared secret
25%50%75%system
686316882669079
T:
gls254
901769017690218
T:
gls254prot
125739125776125860
T:
k277taa
135870135928135990
T:
k298
181087181087181087
T:
k277mon
209499209507209665
T:
kumfp127g
209885210915211821
T:
jacfp128bk
211309211320211622
T:
kumjacfp127g
234081234271234522
T:
prjfp128bk
236318237044237378
T:
curve2251
246466246609246806
T:
hecfp128fkt
258700260090261573
T:
hecfp128bk
267241267285267327
T:
curve25519
268049268056268080
T:
kumfp128g
276305281183286294
T:
gls1271
293560293675293903
T:
ecfp256e
314194314316314572
T:
ecfp256q
315601315699315852
T:
ecfp256i
316458316586316799
T:
jacfp127i
355564356216362206
T:
surf127eps
364253364367364563
T:
ecfp256h
377726378814380323
T:
kummer
366424380707383714
T:
sclaus1024
394780394959395295
T:
prjfp127i
403888403983404173
T:
hecfp127i
431563433229436880
T:
ecfp256s
538295538941539401
T:
hecfp128i
668341676473679765
T:
surf2113
108690410869121087589
T:
ed448goldilocks
137372313742461383899
T:
nistp256
186649318756601878231
T:
sclaus2048
187965818816661882169
T:
ed521gs
212721521276542131740
T:
nist521gs
224377322543482254993
T:
claus

aarch64; Skylark (503f0002); 2018 Ampere eMAG 8180; 32 x 3300MHz; unstable; gcc185, supercop-20231107

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
251550251550251550
T:
curve25519
318600319575326025
T:
kummer
359775361200362175
T:
surf127eps
388050388800389400
T:
nistp256
413100416700420450
T:
sclaus1024
152137515416251542675
T:
ed521gs
183667518369001838250
T:
nist521gs
201142520294252042850
T:
sclaus2048
247327524780752485050
T:
claus
Cycles to compute a shared secret
25%50%75%system
251475251475251475
T:
curve25519
318225318750327300
T:
kummer
357750358425358950
T:
surf127eps
419025419850420750
T:
sclaus1024
939750940575945900
T:
nistp256
151822515414001542150
T:
ed521gs
183667518372751837725
T:
nist521gs
200295020190752060325
T:
sclaus2048
248362524857252490375
T:
claus

aarch64; Cortex-A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3aplus, supercop-20231107

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
422142427201428401
T:
kummer
469637475131475311
T:
curve25519
473251478043478658
T:
nistp256
609447612861615570
T:
surf127eps
99704510056281019043
T:
sclaus1024
310082831455203160808
T:
ed521gs
360135636491573658747
T:
nist521gs
490959249482554997230
T:
sclaus2048
555312255655325582570
T:
claus
Cycles to compute a shared secret
25%50%75%system
421426426641427379
T:
kummer
475903481449481615
T:
curve25519
606059607071611862
T:
surf127eps
101008410152291020164
T:
sclaus1024
160027316050001613138
T:
nistp256
309919031452383159950
T:
ed521gs
358268135949263602171
T:
nist521gs
490062849466185013522
T:
sclaus2048
548157454983925516280
T:
claus

aarch64; Cortex-A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3bplus, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
442000444125452250
T:
kummer
493000495750503125
T:
curve25519
498500500750510375
T:
nistp256
636625640625651625
T:
surf127eps
103875010500001062000
T:
sclaus1024
326325032711253278625
T:
ed521gs
377262537812503784750
T:
nist521gs
512387551557505197625
T:
sclaus2048
565925056661255676125
T:
claus
Cycles to compute a shared secret
25%50%75%system
441500443500449875
T:
kummer
499750502250509500
T:
curve25519
632625636125646250
T:
surf127eps
104087510506251057625
T:
sclaus1024
167700016822501691375
T:
nistp256
325925032698753277500
T:
ed521gs
377037537791253783500
T:
nist521gs
518125052082505237750
T:
sclaus2048
562800056357505643125
T:
claus

amd64; Coffee Lake (906ea); 2018 Intel Xeon E-2124; 4 x 3300MHz; r24000, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
216962248424050
T:
jacfp127i
222222307724333
T:
kumjacfp127g
252832615127498
T:
prjfp127i
259042696928299
T:
hecfp127i
304493165632709
T:
jacfp128bk
358173650037590
T:
prjfp128bk
368623774638364
T:
gls254
379223868339652
T:
hecfp128bk
388253887138923
T:
gls254prot
384633921740043
T:
hecfp128i
382613922140317
T:
hecfp128fkt
393603999441565
T:
curve2251
426464325144755
T:
ecfp256e
451534572647891
T:
ecfp256h
458424587945913
T:
k277taa
470554776949532
T:
ecfp256s
487654946251019
T:
ecfp256q
528465289752956
T:
kummer
545795490655427
T:
k298
689166966870399
T:
gls1271
712957133071389
T:
k277mon
789037902179109
T:
kumfp127g
110492110550110628
T:
kumfp128g
125190125589126077
T:
curve25519
153209153364153629
T:
ed448goldilocks
175757177435178930
T:
sclaus1024
182604183426184131
T:
surf127eps
190021191063192261
T:
ecfp256i
245386245631245917
T:
nistp256
507401509086510570
T:
surf2113
807730807994808337
T:
ed521gs
885610892232898760
T:
sclaus2048
935185935435935850
T:
nist521gs
966959967413968156
T:
claus
Cycles to compute a shared secret
25%50%75%system
357503578835839
T:
gls254
385913863038675
T:
gls254prot
456154564445667
T:
k277taa
533435339153455
T:
kummer
544085464055067
T:
k298
712127124471290
T:
k277mon
812128130081373
T:
kumfp127g
825638267982772
T:
kumjacfp127g
878078787887960
T:
jacfp128bk
108363108509108752
T:
prjfp128bk
112177112333112513
T:
hecfp128bk
115634115674115721
T:
kumfp128g
115863116044116217
T:
hecfp128fkt
124231124324124436
T:
jacfp127i
134847135269136471
T:
curve25519
144346144646144781
T:
curve2251
165192165364165600
T:
prjfp127i
167461167582167781
T:
hecfp127i
175597175768175980
T:
ecfp256e
173122175893178168
T:
gls1271
178601178786180000
T:
sclaus1024
179442179992180338
T:
surf127eps
185320185470185638
T:
ecfp256i
185395185526185801
T:
ecfp256q
217782217974218171
T:
ecfp256h
244272244417244589
T:
ecfp256s
251739251977252193
T:
hecfp128i
455229455604460737
T:
ed448goldilocks
511965512976513920
T:
surf2113
599229599397599590
T:
nistp256
807354807522807841
T:
ed521gs
872594888008888837
T:
sclaus2048
934852935033935316
T:
nist521gs
961474961980962829
T:
claus

amd64; Zen (800f11); 2017 AMD Ryzen 7 1700; 8 x 3000MHz; rumba7, supercop-20231107

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
285612990131666
T:
jacfp127i
290783035132553
T:
prjfp127i
295903079732462
T:
kumjacfp127g
304513143333468
T:
hecfp127i
371973880240695
T:
jacfp128bk
401164058842826
T:
curve2251
406874197944755
T:
ecfp256e
411974233444562
T:
hecfp128fkt
411874251744427
T:
hecfp128bk
414924279744776
T:
hecfp128i
415514293344428
T:
prjfp128bk
435794379744110
T:
gls254
447154490244932
T:
gls254prot
442204655051543
T:
ecfp256h
461364792352906
T:
ecfp256s
476194975754436
T:
ecfp256q
558995622056414
T:
k277taa
641146447064703
T:
k298
658846657367384
T:
gls1271
891958925689296
T:
k277mon
101082101098101151
T:
kummer
102844102916103002
T:
kumfp127g
134109134206134278
T:
kumfp128g
144331144349144369
T:
curve25519
186353186985187606
T:
surf127eps
187127188968211471
T:
ecfp256i
200747201044201345
T:
ed448goldilocks
201097203692205854
T:
sclaus1024
265197266135269346
T:
nistp256
475278477639478793
T:
surf2113
955216959144993382
T:
ed521gs
99594210032961009868
T:
sclaus2048
108960010906431092203
T:
nist521gs
120081112034531205961
T:
claus
Cycles to compute a shared secret
25%50%75%system
422994247142499
T:
gls254
446424477644833
T:
gls254prot
559005616856430
T:
k277taa
640236413264432
T:
k298
890958912289227
T:
k277mon
101059101074102002
T:
kummer
104124104242104297
T:
jacfp128bk
104323104411104437
T:
kumfp127g
106375106416106507
T:
kumjacfp127g
126629126727126898
T:
prjfp128bk
129947130128130311
T:
hecfp128bk
134323134385134472
T:
hecfp128fkt
138213139027139064
T:
kumfp128g
157015157255158784
T:
curve25519
158380159849160407
T:
curve2251
162804162973163245
T:
jacfp127i
158356165199165567
T:
gls1271
174231174348174552
T:
ecfp256e
182847183267184433
T:
surf127eps
183351183516183686
T:
ecfp256q
183613183662183827
T:
ecfp256i
203769204288204457
T:
prjfp127i
205953206333208181
T:
sclaus1024
207348207472209416
T:
hecfp127i
216138216418216568
T:
ecfp256h
235391235491235595
T:
ecfp256s
286350287186287839
T:
hecfp128i
468977476693477023
T:
surf2113
583533584630584727
T:
ed448goldilocks
687683687977702861
T:
nistp256
954750957121962186
T:
ed521gs
100960410115721026264
T:
sclaus2048
108893810899961092419
T:
nist521gs
119129811990881200840
T:
claus

amd64; Zen (800f11); 2017 AMD Ryzen 5 1600; 6 x 3200MHz; rumba5, supercop-20231107

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
293743082332477
T:
jacfp127i
302203128533215
T:
kumjacfp127g
328893438736358
T:
prjfp127i
352973626737676
T:
hecfp127i
380683924141234
T:
jacfp128bk
400164073143612
T:
curve2251
408654226045268
T:
ecfp256e
417794310645272
T:
hecfp128fkt
416504316144851
T:
prjfp128bk
417214337245412
T:
hecfp128i
438214418844546
T:
gls254
448074503145069
T:
gls254prot
446564609449626
T:
ecfp256h
452104637847524
T:
hecfp128bk
460844836453242
T:
ecfp256s
480385019855627
T:
ecfp256q
557375622256506
T:
k277taa
641816438964644
T:
k298
651806601466810
T:
gls1271
891388916994292
T:
k277mon
101093101113101133
T:
kummer
102830102892102967
T:
kumfp127g
134112134202134288
T:
kumfp128g
144590144602144623
T:
curve25519
186416186907187300
T:
surf127eps
186547187646188903
T:
ecfp256i
200196200303200650
T:
ed448goldilocks
202029204095205535
T:
sclaus1024
264993265093265603
T:
nistp256
477503483175490142
T:
surf2113
954650955691957637
T:
ed521gs
99348810017891010886
T:
sclaus2048
109215910927141093571
T:
nist521gs
120227112049531207559
T:
claus
Cycles to compute a shared secret
25%50%75%system
423044244942494
T:
gls254
447524492145008
T:
gls254prot
557235619656372
T:
k277taa
640936420964362
T:
k298
891388926394336
T:
k277mon
101064101077101478
T:
kummer
104028104081104148
T:
jacfp128bk
104333104420104496
T:
kumfp127g
106348106451109148
T:
kumjacfp127g
126665126786127057
T:
prjfp128bk
130213130332130466
T:
hecfp128bk
134324134404134510
T:
hecfp128fkt
138282139074139119
T:
kumfp128g
156129157300159081
T:
curve25519
159583159672160014
T:
curve2251
163509163594163692
T:
jacfp127i
161420165507166670
T:
gls1271
174238174352174507
T:
ecfp256e
182657183183183981
T:
surf127eps
183384183565183780
T:
ecfp256q
183448183676183834
T:
ecfp256i
203825204096204585
T:
prjfp127i
204565204790205523
T:
sclaus1024
207227207369207509
T:
hecfp127i
216006216174216484
T:
ecfp256h
235288235417235602
T:
ecfp256s
285864286053286282
T:
hecfp128i
469565488845581323
T:
surf2113
582715583895584685
T:
ed448goldilocks
686706686946687186
T:
nistp256
953972955080957684
T:
ed521gs
100410810049811018614
T:
sclaus2048
109166810925731093132
T:
nist521gs
119874412008871202049
T:
claus

amd64; Zen (800f11); 2017 AMD Ryzen 3 1200; 4 x 3100MHz; rumba3, supercop-20221122

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
399064039241648
T:
curve2251
430004317343315
T:
gls254
447374492044939
T:
gls254prot
558915622856511
T:
k277taa
640776428664529
T:
k298
661346680067503
T:
gls1271
892038927689393
T:
k277mon
101348102336102370
T:
kummer
144317144332144396
T:
curve25519
186208186823187356
T:
surf127eps
200830201112201359
T:
ed448goldilocks
201457203277204818
T:
sclaus1024
265071265110265175
T:
nistp256
474898476975478480
T:
surf2113
954808956760958406
T:
ed521gs
99471310035201010948
T:
sclaus2048
109203910937761095296
T:
nist521gs
120183012051331208382
T:
claus
Cycles to compute a shared secret
25%50%75%system
422804243842475
T:
gls254
446494482644853
T:
gls254prot
557555616656410
T:
k277taa
639146406764346
T:
k298
891318921289256
T:
k277mon
101260101287101316
T:
kummer
157033158303163391
T:
curve25519
159716160689161507
T:
curve2251
165164165960166506
T:
gls1271
181807183608183962
T:
surf127eps
201024201382204739
T:
sclaus1024
475296477122477679
T:
surf2113
582336584503586958
T:
ed448goldilocks
685797687148687995
T:
nistp256
953919955956957987
T:
ed521gs
9962849976781004679
T:
sclaus2048
109090110925561093674
T:
nist521gs
120406712073391212719
T:
claus

amd64; Kaby Lake (906e9); 2017 Intel Xeon E3-1220 v6; 4 x 3000MHz; kizomba, supercop-20231107

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
225742369625387
T:
jacfp127i
232622431225715
T:
kumjacfp127g
246732605728206
T:
prjfp127i
270582869630819
T:
hecfp127i
314543276234075
T:
jacfp128bk
353243659238617
T:
prjfp128bk
367363705337890
T:
gls254
376633835339740
T:
hecfp128i
387363877238828
T:
gls254prot
389563914942097
T:
curve2251
383494022444335
T:
hecfp128bk
390644030042611
T:
hecfp128fkt
435834483448403
T:
ecfp256e
457724582651972
T:
k277taa
475004825452422
T:
ecfp256h
481554884454430
T:
ecfp256s
503535053657145
T:
k298
527635365558615
T:
ecfp256q
529685371954482
T:
kummer
692187021671849
T:
gls1271
714017146877653
T:
k277mon
795567974686109
T:
kumfp127g
111191111285118045
T:
kumfp128g
125052125248126178
T:
curve25519
152949153299159601
T:
ed448goldilocks
177129180438194413
T:
sclaus1024
181361183062196907
T:
surf127eps
192870194753203847
T:
ecfp256i
238381245367262026
T:
nistp256
518379530557544079
T:
surf2113
833165848915868393
T:
ed521gs
919085953093992925
T:
sclaus2048
9740869903671019762
T:
nist521gs
105940310753591108599
T:
claus
Cycles to compute a shared secret
25%50%75%system
356833572835811
T:
gls254
384683850438537
T:
gls254prot
454714551848942
T:
k277taa
499565009153825
T:
k298
529505400254137
T:
kummer
711157116774313
T:
k277mon
809848112587341
T:
kumfp127g
828998299883133
T:
kumjacfp127g
884078853794988
T:
jacfp128bk
108708108902115002
T:
prjfp128bk
111952112106118651
T:
hecfp128bk
115427115510122614
T:
kumfp128g
116546116810123672
T:
hecfp128fkt
124653124899134805
T:
jacfp127i
135071135293142042
T:
curve25519
144928145375151998
T:
curve2251
165321165635175611
T:
prjfp127i
167411170643184486
T:
hecfp127i
175617175899185582
T:
ecfp256e
172588176402186137
T:
gls1271
177600178879187786
T:
sclaus1024
177881181760193435
T:
surf127eps
187236187563197754
T:
ecfp256i
188853189159201864
T:
ecfp256q
219837220567233158
T:
ecfp256h
247631248373267173
T:
ecfp256s
248308248766261092
T:
hecfp128i
465085471334487169
T:
ed448goldilocks
511115520204540057
T:
surf2113
620867634584654238
T:
nistp256
826222839390859488
T:
ed521gs
918512946764973244
T:
sclaus2048
9686479879821012633
T:
nist521gs
106237110755631109936
T:
claus

amd64; Kaby Lake (806e9); 2017 Intel Core i3-7100; 2 x 2400MHz; whosthere, supercop-20221122

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
372803748937771
T:
gls254
392633931439369
T:
gls254prot
416444200442820
T:
curve2251
458134631946401
T:
k277taa
532185360754066
T:
k298
534845387155445
T:
kummer
711287127372399
T:
k277mon
112849114255115628
T:
gls1271
126059127356128223
T:
curve25519
154497155659156258
T:
ed448goldilocks
192916194391196007
T:
surf127eps
197126199570201477
T:
sclaus1024
300445301390302205
T:
nistp256
529936531945534974
T:
surf2113
893927897039900085
T:
ed521gs
100155410131181033949
T:
sclaus2048
104520210486431054813
T:
claus
104926010537761056028
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
360963615236305
T:
gls254
388643895439027
T:
gls254prot
460634610746164
T:
k277taa
527745292853262
T:
k298
534515377355644
T:
kummer
710657227072328
T:
k277mon
135972136643137230
T:
curve25519
144115144493145510
T:
curve2251
186994188482190065
T:
surf127eps
198564201605204874
T:
sclaus1024
273946277886282463
T:
gls1271
461335462594462918
T:
ed448goldilocks
527628529760532633
T:
surf2113
683477687360690652
T:
nistp256
897139900975904698
T:
ed521gs
100738610120281031660
T:
sclaus2048
103689410438611049575
T:
claus
105036910545421056565
T:
nist521gs

armeabi; Cortex-A7 (410fc075); 2016 Broadcom BCM2836; 4 x 900MHz; berry2, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
580378580648593158
T:
kummer
926209926618944145
T:
curve25519
125361512550501275609
T:
nistp256
345829334934423534864
T:
sclaus1024
158941151601684516135432
T:
sclaus2048
203993602048336920586323
T:
claus
Cycles to compute a shared secret
25%50%75%system
580098580217580863
T:
kummer
925948926188942821
T:
curve25519
351159836171343642686
T:
sclaus1024
430259843179484319165
T:
nistp256
159815361615849316287307
T:
sclaus2048
204876462057085420779373
T:
claus

amd64; Goldmont (506c9); 2016 Intel Celeron J3455; 4 x 1500MHz; wooden, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
458264691447944
T:
jacfp127i
475034861749500
T:
kumjacfp127g
545015589857341
T:
prjfp127i
559845721658663
T:
hecfp127i
615306338264172
T:
ecfp256e
623096361266842
T:
curve2251
643566548366754
T:
jacfp128bk
657286789670211
T:
ecfp256h
685177034872102
T:
ecfp256s
713507265573570
T:
gls254
736017582777975
T:
ecfp256q
757317773979905
T:
prjfp128bk
778217970681478
T:
hecfp128fkt
783497983581982
T:
hecfp128bk
782077986583319
T:
hecfp128i
907149072090721
T:
gls254prot
125046125049125055
T:
k277taa
124311125540126661
T:
gls1271
136570136604137387
T:
k298
181186181191181195
T:
k277mon
201591201604201626
T:
kumfp127g
274395274395274432
T:
kumfp128g
278725278725278730
T:
curve25519
324173325883327636
T:
ecfp256i
352397352642353306
T:
ed448goldilocks
382920384289384901
T:
surf127eps
386865390043393866
T:
sclaus1024
403520403525403538
T:
kummer
424150424188424284
T:
nistp256
728133731211732169
T:
surf2113
188000918952031906941
T:
sclaus2048
200417820048562005935
T:
ed521gs
231819723192372320026
T:
nist521gs
231940723241602328625
T:
claus
Cycles to compute a shared secret
25%50%75%system
675466835469455
T:
gls254
905429054390546
T:
gls254prot
124919124920124920
T:
k277taa
136350136370136400
T:
k298
181073181073181075
T:
k277mon
198224198271198276
T:
jacfp128bk
206474206474206475
T:
kumfp127g
209740209740209742
T:
kumjacfp127g
240901241987242025
T:
curve2251
249621249665249735
T:
prjfp128bk
256044256069256097
T:
hecfp128bk
265061265093265153
T:
hecfp128fkt
278343278343278343
T:
curve25519
283387283387283387
T:
kumfp128g
304125304176304208
T:
ecfp256e
312200312677313657
T:
gls1271
315258315304315367
T:
jacfp127i
318552318567318674
T:
ecfp256q
321198321211321274
T:
ecfp256i
374540374609374753
T:
ecfp256h
377567379316380826
T:
surf127eps
389075390970395286
T:
sclaus1024
403287403434403434
T:
kummer
409107409160409203
T:
ecfp256s
413717413767413817
T:
prjfp127i
425814425833425860
T:
hecfp127i
574100574132574349
T:
hecfp128i
716229719140725661
T:
surf2113
115328811532961153518
T:
ed448goldilocks
146052114618781462100
T:
nistp256
190316119315141938329
T:
sclaus2048
200368620042302004678
T:
ed521gs
231786423186202319411
T:
nist521gs
231391223227882326946
T:
claus

amd64; Broadwell+AES (406f1); 2016 Intel Xeon E5-2609 v4; 8 x 1700MHz; bolero, supercop-20231107

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
248202570027752
T:
jacfp127i
266042763628648
T:
kumjacfp127g
286122935631104
T:
hecfp127i
277282960033060
T:
prjfp127i
332483477638752
T:
jacfp128bk
376763788438240
T:
gls254
391283918439304
T:
gls254prot
391164015644164
T:
hecfp128fkt
387204018443692
T:
hecfp128bk
406084238845532
T:
prjfp128bk
437204473246924
T:
ecfp256e
39988?44748?56311?
T:
curve2251
41068?46280?57868?
T:
hecfp128i
468804826053628
T:
ecfp256h
492444960055204
T:
k277taa
503605215656972
T:
ecfp256s
561685680863220
T:
k298
51228?57108?71871?
T:
ecfp256q
637406389270744
T:
kummer
772087736886480
T:
k277mon
778127901682720
T:
gls1271
913929305298372
T:
kumfp127g
132064133220142228
T:
kumfp128g
143384152532162448
T:
curve25519
157448160388173715
T:
ed448goldilocks
191036196412210720
T:
sclaus1024
197052197900209832
T:
surf127eps
202736205816218592
T:
ecfp256i
254544269428279896
T:
nistp256
545788?578800?776295?
T:
surf2113
924932940616966016
T:
ed521gs
9742489905841020944
T:
sclaus2048
105753610839121146780
T:
nist521gs
114976411956201270996
T:
claus
Cycles to compute a shared secret
25%50%75%system
360003608436248
T:
gls254
390363908439136
T:
gls254prot
490924948455764
T:
k277taa
559285642459352
T:
k298
636126368467400
T:
kummer
770167714483880
T:
k277mon
9298093608100040
T:
kumfp127g
9645696672105844
T:
jacfp128bk
9881699164108212
T:
kumjacfp127g
117308118260125220
T:
prjfp128bk
120896122856130092
T:
hecfp128bk
125300126100144616
T:
hecfp128fkt
136668140348151808
T:
kumfp128g
144204155972162176
T:
curve25519
155960157652171452
T:
jacfp127i
153252?160200?217384?
T:
curve2251
185896186144192556
T:
ecfp256e
187004189752198832
T:
gls1271
186744190592205684
T:
hecfp127i
185560191840204208
T:
prjfp127i
193504196592208792
T:
surf127eps
190708197676209728
T:
sclaus1024
197416197796210796
T:
ecfp256i
193792203584219504
T:
ecfp256q
229700233460247532
T:
ecfp256h
255536258720273076
T:
ecfp256s
269364?287840?389385?
T:
hecfp128i
481520491776506488
T:
ed448goldilocks
536976?556976?768599?
T:
surf2113
671120685176737484
T:
nistp256
917900931084953592
T:
ed521gs
97208410003401056492
T:
sclaus2048
105373210707641107644
T:
nist521gs
114411211860961244708
T:
claus

amd64; Silvermont (406c4); 2016 Intel Atom x5-Z8350; 4 x 1440MHz; cherry, supercop-20231107

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
648536548966232
T:
jacfp127i
675136819769044
T:
kumjacfp127g
721687263873437
T:
prjfp127i
761867681477608
T:
hecfp127i
957019672398825
T:
jacfp128bk
99171100955102852
T:
ecfp256e
110190111693113784
T:
ecfp256h
106053112429120513
T:
curve2251
112503113299115104
T:
prjfp128bk
115164116167117858
T:
hecfp128bk
113663116274123238
T:
hecfp128fkt
115958117780119384
T:
ecfp256s
113567?118404?148467?
T:
hecfp128i
120502122290124985
T:
ecfp256q
139827142350145476
T:
gls254
187045189275191070
T:
gls1271
205832205929206334
T:
gls254prot
280542280679280810
T:
kumfp127g
287703287904288499
T:
k277taa
306723311996313750
T:
k298
422280422380422680
T:
k277mon
447556447622447724
T:
kumfp128g
448847448916449341
T:
curve25519
514427518176522763
T:
ecfp256i
568463569780573074
T:
surf127eps
569614570363572245
T:
kummer
615577616184620049
T:
nistp256
761989762974765477
T:
ed448goldilocks
771106782460790053
T:
sclaus1024
113838811523521162074
T:
surf2113
366377136692693674334
T:
ed521gs
379071438285373857735
T:
sclaus2048
431560743235604329844
T:
nist521gs
464958746596474667876
T:
claus
Cycles to compute a shared secret
25%50%75%system
136400140913141631
T:
gls254
205475205626205801
T:
gls254prot
283592283647283729
T:
kumfp127g
286954287075287230
T:
kumjacfp127g
287515287677287997
T:
k277taa
305377306806310354
T:
k298
320076321111322206
T:
jacfp128bk
373462374252375695
T:
hecfp128bk
375124376178377839
T:
prjfp128bk
386144386493387846
T:
hecfp128fkt
422034422142422268
T:
k277mon
422713422974426147
T:
curve2251
444345445853456385
T:
gls1271
445257446337448147
T:
jacfp127i
448728448842449025
T:
curve25519
457722457808457885
T:
kumfp128g
480494482264484693
T:
ecfp256e
505029506177508207
T:
ecfp256q
511404512966515116
T:
ecfp256i
524905526321528996
T:
prjfp127i
534081534779536608
T:
hecfp127i
567529568346571060
T:
surf127eps
569628570685573062
T:
kummer
601051601854604423
T:
ecfp256h
629264630536632827
T:
ecfp256s
794607796215798584
T:
sclaus1024
810548812025819465
T:
hecfp128i
113374911417161154661
T:
surf2113
208392420861842091633
T:
nistp256
263539226371402641034
T:
ed448goldilocks
366114236652923671154
T:
ed521gs
380559438719513884492
T:
sclaus2048
431281843146864319008
T:
nist521gs
463729546576394659500
T:
claus

amd64; Skylake (506e3); 2015 Intel Xeon E3-1220 v5; 4 x 3000MHz; samba, supercop-20231107

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
221102305424469
T:
kumjacfp127g
223552342524710
T:
jacfp127i
262502734628585
T:
hecfp127i
262832735228701
T:
prjfp127i
297143004730799
T:
jacfp128bk
347643595437295
T:
prjfp128bk
367083694037421
T:
gls254
367743767239463
T:
hecfp128fkt
372903831739981
T:
hecfp128bk
374383836239178
T:
hecfp128i
385853874039576
T:
curve2251
387213875838809
T:
gls254prot
433354398645284
T:
ecfp256e
457264576145795
T:
k277taa
457964645348434
T:
ecfp256h
470214789449607
T:
ecfp256s
489484964851311
T:
ecfp256q
504505055650633
T:
k298
539345399654153
T:
kummer
689976977170684
T:
gls1271
708117093171011
T:
k277mon
791177919579256
T:
kumfp127g
111106111157111203
T:
kumfp128g
125165125410125628
T:
curve25519
153173153383153677
T:
ed448goldilocks
175630177413179029
T:
sclaus1024
183771184499185199
T:
surf127eps
192436193475194753
T:
ecfp256i
239993240204240511
T:
nistp256
515536518213520292
T:
surf2113
824817825103825548
T:
ed521gs
885699892738898807
T:
sclaus2048
951510951844952271
T:
nist521gs
104506510473061049646
T:
claus
Cycles to compute a shared secret
25%50%75%system
357503579135818
T:
gls254
384813851538560
T:
gls254prot
455064553745572
T:
k277taa
501085018650253
T:
k298
528365290152951
T:
kummer
708327091570970
T:
k277mon
807038075880853
T:
kumfp127g
827058278882876
T:
kumjacfp127g
884498851888600
T:
jacfp128bk
107687107784107901
T:
prjfp128bk
112101112192112343
T:
hecfp128bk
115393115434115490
T:
kumfp128g
116124116206116343
T:
hecfp128fkt
124639124741124841
T:
jacfp127i
135053135563135770
T:
curve25519
144331144434144584
T:
curve2251
165365165517165707
T:
prjfp127i
167458167600167794
T:
hecfp127i
170855173843174186
T:
gls1271
175375175530175743
T:
ecfp256e
176216177064179715
T:
sclaus1024
178369178907179500
T:
surf127eps
185474185622185873
T:
ecfp256q
187142187347187491
T:
ecfp256i
220629220817221008
T:
ecfp256h
239811239990240196
T:
ecfp256s
248677248834248998
T:
hecfp128i
464873465328465919
T:
ed448goldilocks
513147514456516406
T:
surf2113
614038614526614790
T:
nistp256
825577825800826020
T:
ed521gs
872840883461911642
T:
sclaus2048
951502951856952253
T:
nist521gs
104089810495571051687
T:
claus

amd64; Airmont (406c3); 2015 Intel Pentium N3700; 4 x 1600MHz; nucnuc, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
812098437286896
T:
jacfp127i
840848661289378
T:
kumjacfp127g
9315599424107889
T:
prjfp127i
94281101676108973
T:
hecfp127i
101409107590122186
T:
ecfp256e
106155108923118479
T:
curve2251
107811115792131459
T:
ecfp256h
110223117427136288
T:
ecfp256s
118956125918138938
T:
ecfp256q
139961142726145391
T:
gls254
136110?145302?171220?
T:
hecfp128fkt
131253145475163599
T:
prjfp128bk
133793145590161992
T:
jacfp128bk
135157145868168720
T:
hecfp128bk
134659148434165516
T:
hecfp128i
187683189980192188
T:
gls1271
205800205967206582
T:
gls254prot
280420280467280563
T:
kumfp127g
287770287916288262
T:
k277taa
306831310476312651
T:
k298
422193422329422516
T:
k277mon
447274447363447498
T:
kumfp128g
448837448923452351
T:
curve25519
512412515271518928
T:
ecfp256i
568220570122572886
T:
surf127eps
570918573128574388
T:
kummer
607179607718608732
T:
nistp256
762121763073765340
T:
ed448goldilocks
778960787588797657
T:
sclaus1024
113608611430041158181
T:
surf2113
366220436677453674968
T:
ed521gs
379752838252053853584
T:
sclaus2048
431653243234724329736
T:
nist521gs
465994046742664688083
T:
claus
Cycles to compute a shared secret
25%50%75%system
131475139715141919
T:
gls254
205397205569205774
T:
gls254prot
283282283384283425
T:
kumfp127g
286628286661286752
T:
kumjacfp127g
287546287714287874
T:
k277taa
305672307190309195
T:
k298
317399317923318811
T:
jacfp128bk
370940371380372280
T:
hecfp128bk
374415375310376635
T:
prjfp128bk
385975386378387570
T:
hecfp128fkt
422001422105422183
T:
k277mon
421674425980426205
T:
curve2251
442320442745443646
T:
jacfp127i
448784448846452296
T:
curve25519
450443453713456685
T:
gls1271
457526457605457713
T:
kumfp128g
480064480486481342
T:
ecfp256e
502287502863503986
T:
ecfp256q
510217511490513902
T:
ecfp256i
522440522940524736
T:
prjfp127i
533600535324537571
T:
hecfp127i
561374563154567529
T:
surf127eps
570773572870574114
T:
kummer
599762600059600844
T:
ecfp256h
625168625699626807
T:
ecfp256s
789598796421819453
T:
sclaus1024
808312811127814924
T:
hecfp128i
113263811392031150075
T:
surf2113
209278020943382102610
T:
nistp256
263501926367902640510
T:
ed448goldilocks
365984836640813670051
T:
ed521gs
385776138688093871505
T:
sclaus2048
431325243162364323531
T:
nist521gs
466570746784224692484
T:
claus

amd64; Broadwell+AES (306d4); 2015 Intel Core i3-5005U; 2 x 1900MHz; shoe, supercop-20231107

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
252522555925943
T:
jacfp127i
258452621926594
T:
kumjacfp127g
285632904629565
T:
hecfp127i
288582933730131
T:
prjfp127i
329543346534251
T:
jacfp128bk
375533778338025
T:
gls254
375603805438849
T:
hecfp128bk
380243855939021
T:
hecfp128fkt
381863893939635
T:
prjfp128bk
394873957939684
T:
gls254prot
391913963140051
T:
hecfp128i
418484250844080
T:
curve2251
438504480145787
T:
ecfp256e
461384716948883
T:
ecfp256h
474864856950236
T:
ecfp256s
493284942849595
T:
k277taa
495915048852661
T:
ecfp256q
558495645857290
T:
k298
649046501965259
T:
kummer
768067689276990
T:
k277mon
764127738978104
T:
gls1271
817848194582118
T:
kumfp127g
129672129826130041
T:
kumfp128g
143180143426144330
T:
curve25519
156158156544158143
T:
ed448goldilocks
187138188763190774
T:
sclaus1024
197093197717198700
T:
surf127eps
199751200634201916
T:
ecfp256i
250370251641253135
T:
nistp256
521333523534525029
T:
surf2113
903351903916905148
T:
ed521gs
947083956825968944
T:
sclaus2048
9892779967981003931
T:
claus
103331110362541040012
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
363583662036884
T:
gls254
394063954439728
T:
gls254prot
492794937349501
T:
k277taa
551235543855885
T:
k298
648136491865190
T:
kummer
767317684077027
T:
k277mon
848058511487729
T:
kumfp127g
874928755187743
T:
kumjacfp127g
963559651998488
T:
jacfp128bk
116389116576120876
T:
prjfp128bk
120469120586120713
T:
hecfp128bk
125034125271126111
T:
hecfp128fkt
134974135067135192
T:
kumfp128g
143055143162143309
T:
curve25519
149588154900155919
T:
curve2251
155591155914156101
T:
jacfp127i
184286184498184794
T:
prjfp127i
185655185773185908
T:
ecfp256e
186557186685186895
T:
hecfp127i
187530188309188995
T:
sclaus1024
187355189142194978
T:
gls1271
193025193161193303
T:
ecfp256q
194621195182196155
T:
surf127eps
196027196135196233
T:
ecfp256i
228724228875228998
T:
ecfp256h
248542248691248878
T:
ecfp256s
267273267519267737
T:
hecfp128i
467598467748467981
T:
ed448goldilocks
515924516704517980
T:
surf2113
632149633734635337
T:
nistp256
904807907935910206
T:
ed521gs
9619089680581000528
T:
sclaus2048
9930249987501047885
T:
claus
103102610330851037031
T:
nist521gs

amd64; Haswell+AES (306c3); 2013 Intel Xeon E3-1275 V3; 4 x 3500MHz; titan0, supercop-20231107

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
330663379034558
T:
kumjacfp127g
344573643938028
T:
jacfp127i
357863702538655
T:
hecfp127i
372123941441069
T:
prjfp127i
424734394749074
T:
curve2251
427814442446075
T:
jacfp128bk
448664542346183
T:
gls254
461564709349304
T:
hecfp128bk
484294905649798
T:
hecfp128i
490764915549262
T:
gls254prot
490394956750410
T:
hecfp128fkt
492605080153186
T:
ecfp256e
489475081352553
T:
prjfp128bk
504125282258236
T:
ecfp256h
554705689859439
T:
ecfp256s
564775914964060
T:
ecfp256q
622616243462675
T:
k277taa
641646429564882
T:
kummer
703927060371577
T:
k298
907379183394123
T:
gls1271
951669523395400
T:
k277mon
111438111613111778
T:
kumfp127g
144401144476144545
T:
curve25519
156863157385157685
T:
kumfp128g
174939175188175416
T:
ed448goldilocks
213471214448215242
T:
surf127eps
217705220423222172
T:
sclaus1024
225413226493227690
T:
ecfp256i
282183282522282877
T:
nistp256
536030538067539744
T:
surf2113
101244410128001013470
T:
ed521gs
109442311052591111811
T:
sclaus2048
119534611962041198057
T:
nist521gs
130059613040581306967
T:
claus
Cycles to compute a shared secret
25%50%75%system
404784168243372
T:
gls254
490634908549126
T:
gls254prot
621476228462549
T:
k277taa
640696416764736
T:
kummer
698726996470108
T:
k298
949999503795093
T:
k277mon
113114113202113317
T:
kumfp127g
113579113644113744
T:
jacfp128bk
119952120152120484
T:
kumjacfp127g
139834140009140279
T:
prjfp128bk
146051146211146349
T:
hecfp128bk
151196151358151511
T:
hecfp128fkt
155995156089156264
T:
curve25519
159117159783160601
T:
curve2251
162745162818163063
T:
kumfp128g
186515186649186859
T:
jacfp127i
205463205554205690
T:
ecfp256e
207228208413209183
T:
surf127eps
213762213847214011
T:
ecfp256q
214556220645221134
T:
gls1271
221269221601222371
T:
sclaus1024
222358222473222615
T:
ecfp256i
225316225516226585
T:
prjfp127i
228878229336231321
T:
hecfp127i
248769249023251600
T:
ecfp256h
273447273606273796
T:
ecfp256s
326151326412326718
T:
hecfp128i
534098537236538973
T:
surf2113
540308540598542456
T:
ed448goldilocks
746259746764747499
T:
nistp256
101999610203581020860
T:
ed521gs
109054910985551127157
T:
sclaus2048
119426511946481195146
T:
nist521gs
130177713033811306664
T:
claus

amd64; Haswell+AES (306c3); 2013 Intel Xeon E3-1220 v3; 4 x 3100MHz; hiphop, supercop-20231107

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
296593035932246
T:
kumjacfp127g
298963089832269
T:
jacfp127i
319943265234580
T:
prjfp127i
341433484235818
T:
hecfp127i
398604056741340
T:
jacfp128bk
413594173544699
T:
curve2251
449294554046035
T:
gls254
439824573846844
T:
prjfp128bk
462764732948872
T:
hecfp128bk
471994815549062
T:
hecfp128fkt
476414842849626
T:
ecfp256e
489684902349132
T:
gls254prot
485204920552032
T:
ecfp256h
499095119952913
T:
hecfp128i
506745153753998
T:
ecfp256s
541665502157297
T:
ecfp256q
623206241162481
T:
k277taa
641646424665114
T:
kummer
701847024470351
T:
k298
911729209293233
T:
gls1271
952279534795952
T:
k277mon
111448111547111704
T:
kumfp127g
144403144502146672
T:
curve25519
157638157747158105
T:
kumfp128g
174900175058175368
T:
ed448goldilocks
213225214000214768
T:
surf127eps
217738219741221529
T:
sclaus1024
225245226519227530
T:
ecfp256i
281871282103282260
T:
nistp256
534920537134538409
T:
surf2113
101186610125301014000
T:
ed521gs
110180611107661119984
T:
sclaus2048
119524111961411197867
T:
nist521gs
129739813002841303203
T:
claus
Cycles to compute a shared secret
25%50%75%system
404274133942928
T:
gls254
489704907249129
T:
gls254prot
621666225462301
T:
k277taa
640926418965002
T:
kummer
700237007970143
T:
k298
950329510995974
T:
k277mon
113091113226113361
T:
kumfp127g
113390113478113570
T:
jacfp128bk
119900120110120797
T:
kumjacfp127g
141091141400146993
T:
prjfp128bk
145626145791145977
T:
hecfp128bk
151256151394151613
T:
hecfp128fkt
156093157183158020
T:
curve25519
155817157719158304
T:
curve2251
163250163730163826
T:
kumfp128g
185342185547185761
T:
jacfp127i
205426205549205712
T:
ecfp256e
204091206585207793
T:
surf127eps
213790213889214081
T:
ecfp256q
219560221506223319
T:
sclaus1024
222317222476222595
T:
ecfp256i
216146222838223099
T:
gls1271
224935225457232731
T:
prjfp127i
229072229496230531
T:
hecfp127i
248794248915249086
T:
ecfp256h
272761272923273135
T:
ecfp256s
325652325869326187
T:
hecfp128i
533641534568538063
T:
surf2113
540253540408540668
T:
ed448goldilocks
745896746309747490
T:
nistp256
102022710207141021628
T:
ed521gs
111535611229751130929
T:
sclaus2048
119505911960441201480
T:
nist521gs
129459112969771302182
T:
claus

armeabi; Cortex-A8 (413fc082); 2012 TI Sitara XAM3359AZCZ100; 1 x 1000MHz; bblack, supercop-20231107

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
304864304904305154
T:
kummer
486104488186498144
T:
curve25519
118903411915741223282
T:
nistp256
411020041507804191738
T:
sclaus1024
836035283700608390516
T:
claus
189250601903434819144388
T:
sclaus2048
Cycles to compute a shared secret
25%50%75%system
304778304780304862
T:
kummer
503020505520505686
T:
curve25519
396420639650363968124
T:
nistp256
423577842429444256944
T:
sclaus1024
831014283190188330724
T:
claus
193205501936445819478166
T:
sclaus2048

amd64; Bulldozer (600f20); 2012 AMD FX-8350; 4 x 4000MHz; saber214, supercop-20231107

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
465584751048456
T:
jacfp127i
481594901049593
T:
kumjacfp127g
532035422355338
T:
prjfp127i
537085453155516
T:
hecfp127i
640646467567592
T:
curve2251
690757012171073
T:
jacfp128bk
739887634681339
T:
ecfp256e
800218094682140
T:
prjfp128bk
803898124482672
T:
hecfp128fkt
804248139882594
T:
hecfp128bk
786948156086842
T:
ecfp256h
815438234283777
T:
hecfp128i
804778280287839
T:
ecfp256s
844638710292101
T:
ecfp256q
884458970891016
T:
gls254
103342103428103536
T:
gls254prot
113440114969115991
T:
gls1271
139812139831139865
T:
k277taa
157397157431157485
T:
k298
157637157697157873
T:
kumfp127g
174751174772174834
T:
curve25519
203058203059203061
T:
k277mon
203215204521204626
T:
kummer
259013259056259256
T:
kumfp128g
347722349482351600
T:
ecfp256i
356843357665358286
T:
ed448goldilocks
373887375436377398
T:
surf127eps
423877428568432197
T:
sclaus1024
611990612065612130
T:
nistp256
664218667058669368
T:
surf2113
174413517443261745693
T:
ed521gs
205132120525842053553
T:
nist521gs
211165221443752204045
T:
sclaus2048
253865425462302556355
T:
claus
Cycles to compute a shared secret
25%50%75%system
819298268484636
T:
gls254
103206103252103296
T:
gls254prot
139802139863139874
T:
k277taa
157327157357157392
T:
k298
160261160261160262
T:
kumfp127g
161040161104161181
T:
kumjacfp127g
186708186724187307
T:
curve25519
196936197077197393
T:
jacfp128bk
197200197325200752
T:
kummer
203001203003203003
T:
k277mon
242861243276244182
T:
curve2251
246637246870247445
T:
prjfp128bk
252619252788252981
T:
hecfp128bk
262131262212262323
T:
hecfp128fkt
263859263958264039
T:
jacfp127i
268013268043268079
T:
kumfp128g
279100283108284082
T:
gls1271
321248321747322061
T:
ecfp256e
336837336972337191
T:
ecfp256q
342803343020343433
T:
ecfp256i
357937358125358219
T:
hecfp127i
358213358439358810
T:
prjfp127i
372434372589374951
T:
surf127eps
405460406174406579
T:
ecfp256h
424890425277426396
T:
ecfp256s
432296432557432969
T:
sclaus1024
563531563846563959
T:
hecfp128i
662969664928667649
T:
surf2113
112395111370071141794
T:
ed448goldilocks
131138113114771311508
T:
nistp256
174358517436411743893
T:
ed521gs
205052120510812053101
T:
nist521gs
210679121383482203516
T:
sclaus2048
253886625415542562689
T:
claus

amd64; Ivy Bridge+AES (306a9); 2012 Intel Xeon E3-1275 V2; 4 x 3500MHz; hydra8, supercop-20231107

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
308823151634076
T:
kumjacfp127g
323843342635241
T:
jacfp127i
369893907842086
T:
prjfp127i
404704191444198
T:
hecfp127i
440374488846160
T:
jacfp128bk
509595170353706
T:
ecfp256e
524075325454201
T:
hecfp128i
528685409055510
T:
hecfp128fkt
533565416857381
T:
ecfp256h
528685417255471
T:
hecfp128bk
520375417357506
T:
prjfp128bk
554535633258527
T:
ecfp256s
564195682260170
T:
curve2251
589475970562312
T:
ecfp256q
735647472075756
T:
gls254
886988889788997
T:
kummer
956849679697646
T:
gls1271
105988106303106431
T:
gls254prot
120062120101120175
T:
kumfp127g
145705145745145799
T:
curve25519
165760166083166280
T:
kumfp128g
175662176152176226
T:
k277taa
180690180772181030
T:
k298
209170209280209567
T:
ed448goldilocks
235424236604237328
T:
surf127eps
244899246382247922
T:
ecfp256i
256905256918256961
T:
k277mon
266846269373271691
T:
sclaus1024
320432320838321216
T:
nistp256
589914592246593650
T:
surf2113
111147411118301113003
T:
ed521gs
127082612714981272401
T:
nist521gs
135754413677761377461
T:
sclaus2048
159742316071601617316
T:
claus
Cycles to compute a shared secret
25%50%75%system
691166966169860
T:
gls254
883868867188714
T:
kummer
106188106205106225
T:
gls254prot
121859121885121934
T:
kumfp127g
124851124955125045
T:
jacfp128bk
126033126093126171
T:
kumjacfp127g
156914156969159763
T:
curve25519
158014158129158261
T:
prjfp128bk
162027162165162287
T:
hecfp128bk
167820167947168079
T:
hecfp128fkt
170539170908171230
T:
kumfp128g
174324176059176115
T:
k277taa
180500180565180702
T:
k298
190845191086192182
T:
jacfp127i
223577223713223885
T:
curve2251
224930225069225234
T:
ecfp256e
230141232756233438
T:
surf127eps
231698234208239540
T:
gls1271
235524235755236071
T:
ecfp256q
238369238670238947
T:
prjfp127i
240544240674240813
T:
ecfp256i
245188245516245932
T:
hecfp127i
256974256975256978
T:
k277mon
266948272575277201
T:
sclaus1024
275314275445275616
T:
ecfp256h
297178297374297622
T:
ecfp256s
364734365117365619
T:
hecfp128i
579525583321590950
T:
surf2113
630036630341631425
T:
ed448goldilocks
821892822507823630
T:
nistp256
112371311251871126096
T:
ed521gs
127053512711561271714
T:
nist521gs
136087813780001388265
T:
sclaus2048
159660515995971602489
T:
claus

amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3427U; 2 x 1800MHz; hunsnivy, supercop-20231107

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
296292999530471
T:
jacfp127i
315563210032616
T:
kumjacfp127g
333793380234307
T:
prjfp127i
342983467635071
T:
hecfp127i
412564166242055
T:
jacfp128bk
488184931449799
T:
prjfp128bk
491414950749925
T:
hecfp128i
492214966950112
T:
hecfp128bk
494354986450231
T:
hecfp128fkt
502695096852098
T:
ecfp256e
544555515756824
T:
ecfp256h
585655940461160
T:
ecfp256s
588055991561841
T:
ecfp256q
58726?60985?92002?
T:
curve2251
737907496976754
T:
gls254
887338893689144
T:
kummer
954639681797861
T:
gls1271
106108106200106552
T:
gls254prot
116460116610116807
T:
kumfp127g
145101145214145753
T:
curve25519
164096164254164475
T:
kumfp128g
176405176542176809
T:
k277taa
181053181763182609
T:
k298
209699210501211602
T:
ed448goldilocks
232560233373234042
T:
surf127eps
243406244646246096
T:
ecfp256i
257289257323258015
T:
k277mon
266187269001271780
T:
sclaus1024
306720309281309583
T:
nistp256
579827581966583911
T:
surf2113
109106210934671097997
T:
ed521gs
125877712632501266436
T:
nist521gs
137186413838681393997
T:
sclaus2048
159325115975271602754
T:
claus
Cycles to compute a shared secret
25%50%75%system
671867013771483
T:
gls254
881928848988737
T:
kummer
105994106040106118
T:
gls254prot
119247119513119882
T:
kumfp127g
124505124679124975
T:
jacfp128bk
126222126317126511
T:
kumjacfp127g
156697156852159115
T:
curve25519
157813158159158537
T:
prjfp128bk
163370163583163879
T:
hecfp128bk
167148167328167698
T:
hecfp128fkt
170656170848171070
T:
kumfp128g
176298176366176484
T:
k277taa
180672181330181810
T:
k298
191160191599193659
T:
jacfp127i
224230224665225565
T:
curve2251
224636224787224993
T:
ecfp256e
229327229794230314
T:
surf127eps
235312235529235936
T:
ecfp256q
238657239041239560
T:
prjfp127i
239846240133240402
T:
ecfp256i
244091244677246395
T:
gls1271
245184245786246881
T:
hecfp127i
257254257279258105
T:
k277mon
269170269948270791
T:
sclaus1024
276133276479276929
T:
ecfp256h
297179297555298569
T:
ecfp256s
365598366284367012
T:
hecfp128i
572312579686580451
T:
surf2113
629951630187634391
T:
ed448goldilocks
779431781120783518
T:
nistp256
108348210858121096647
T:
ed521gs
125807412591381264525
T:
nist521gs
137192113781721384968
T:
sclaus2048
158603115960101603989
T:
claus

amd64; Sandy Bridge+AES (206d7); 2012 Intel Xeon E5-2660; 8 x 2200MHz; unstable; gcc123, supercop-20220213

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
319433270833506
T:
jacfp127i
329533376535040
T:
kumjacfp127g
376083862339513
T:
hecfp127i
390044050442276
T:
prjfp127i
457984660449017
T:
jacfp128bk
545285530656314
T:
ecfp256e
559355709258739
T:
prjfp128bk
565285743958649
T:
hecfp128fkt
573725803860010
T:
ecfp256h
589355935562473
T:
curve2251
581725968661610
T:
hecfp128i
577295969461632
T:
hecfp128bk
592136026262540
T:
ecfp256s
632946411266013
T:
ecfp256q
742677518976426
T:
gls254
892828933389393
T:
kummer
101621102757104070
T:
gls1271
107786107990108100
T:
gls254prot
120356120660120847
T:
kumfp127g
147437149335150231
T:
curve25519
176693176754176821
T:
k277taa
183385183523183801
T:
k298
183493184494184712
T:
kumfp128g
216977217416218118
T:
ed448goldilocks
258378258897259109
T:
k277mon
264599265793267654
T:
ecfp256i
271269272151273008
T:
surf127eps
285659288427291181
T:
sclaus1024
346611347055348467
T:
nistp256
632059635140636537
T:
surf2113
120118312026971213390
T:
ed521gs
143767014388731440254
T:
nist521gs
145392114631991474175
T:
sclaus2048
170762417120691716365
T:
claus
Cycles to compute a shared secret
25%50%75%system
685677064070910
T:
gls254
890538907989114
T:
kummer
107718107843108042
T:
gls254prot
123422123608123778
T:
kumfp127g
131022131115131347
T:
kumjacfp127g
139870140122152456
T:
jacfp128bk
158914159113159230
T:
curve25519
176460176503176544
T:
k277taa
178453178678178968
T:
prjfp128bk
182177182418185208
T:
hecfp128bk
182474182579182699
T:
k298
189273189532200762
T:
hecfp128fkt
190389191431191674
T:
kumfp128g
200096200414213508
T:
jacfp127i
231825232605232832
T:
curve2251
248092248254248472
T:
ecfp256e
249077250480251963
T:
gls1271
257409257555257723
T:
ecfp256q
258321258857259061
T:
k277mon
260327260627261091
T:
prjfp127i
261160261279261406
T:
ecfp256i
264886265400269808
T:
hecfp127i
267683268185269010
T:
surf127eps
290366291197293939
T:
sclaus1024
305106305231305409
T:
ecfp256h
324559324747324996
T:
ecfp256s
412908413317413695
T:
hecfp128i
621379623817629240
T:
surf2113
648753651584670955
T:
ed448goldilocks
826719827216827670
T:
nistp256
120710312106961213881
T:
ed521gs
143747214380621439620
T:
nist521gs
144469914660691478225
T:
sclaus2048
170340017117751715637
T:
claus

armeabi; Cortex-A9+NEON (412fc09a); 2011 Freescale i.MX6 Quad; 4 x 1200MHz; unstable; novena, supercop-20220506

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
383633403235426836
T:
kummer
568432579721605953
T:
curve25519
113609712253061320114
T:
nistp256
317027133190843441142
T:
sclaus1024
103958101067570812763892
T:
claus
13118323?15156764?17482296?
T:
sclaus2048
Cycles to compute a shared secret
25%50%75%system
377632394434418035
T:
kummer
567769587250684860
T:
curve25519
317587233146843482698
T:
sclaus1024
378432441255534561590
T:
nistp256
103845211070227310950137
T:
claus
12688797?16762633?17448692?
T:
sclaus2048

mipso32; Octeon II (cnmips64v2); 2011 Cavium Octeon II CN6120; 2 x 2000MHz; erpro8fsf2, supercop-20220213

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
147099214710061473758
T:
kummer
199978219998222008112
T:
curve25519
346045234641523494426
T:
nistp256
486200849033465012496
T:
surf127eps
901108890886289163840
T:
sclaus1024
447252984499559045330454
T:
sclaus2048
546248485474884454873548
T:
claus
Cycles to compute a shared secret
25%50%75%system
147060014706141470614
T:
kummer
199937019993842001402
T:
curve25519
485861449133245012660
T:
surf127eps
889381890661869103512
T:
sclaus1024
115805481160992411704890
T:
nistp256
448201024498917845145550
T:
sclaus2048
548210825487032654982680
T:
claus

mipso32; Octeon II (cnmips64v2); 2011 Cavium Octeon II CN6120; 2 x 2000MHz; gcc23, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
147097414710161472676
T:
kummer
199919019991902000622
T:
curve25519
344511234574143461870
T:
nistp256
484243248611724867094
T:
surf127eps
899081490854829171120
T:
sclaus1024
446202184494918645248108
T:
sclaus2048
545050245461244054716466
T:
claus
Cycles to compute a shared secret
25%50%75%system
147062614706301470630
T:
kummer
199890819989081999896
T:
curve25519
483016848424744861988
T:
surf127eps
900581490441769159864
T:
sclaus1024
115423281157057011603418
T:
nistp256
447917484505932645496830
T:
sclaus2048
542802005459834654663778
T:
claus

amd64; Bobcat (500f10); 2011 AMD G-T56N; 2 x 1650MHz; h8bobcat, supercop-20231107

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
559265676357456
T:
jacfp127i
573515814058891
T:
kumjacfp127g
610566257164624
T:
prjfp127i
629006357864292
T:
hecfp127i
761007768679401
T:
jacfp128bk
895099106292587
T:
prjfp128bk
906549202794003
T:
hecfp128bk
927589409795931
T:
hecfp128i
920459411696668
T:
hecfp128fkt
103830105902107141
T:
ecfp256e
114485116218118365
T:
ecfp256h
114527116470117733
T:
ecfp256s
119624122369124982
T:
ecfp256q
159296161002162959
T:
gls1271
199082199116199167
T:
kumfp127g
315927315941315989
T:
kumfp128g
365351365365365963
T:
curve25519
434435437432440705
T:
ecfp256i
480144482358483949
T:
surf127eps
503547507500518805
T:
curve2251
508031512667517479
T:
sclaus1024
548834550192551466
T:
ed448goldilocks
752956753146753968
T:
nistp256
799833800076800907
T:
kummer
170227117092161717875
T:
surf2113
238202023834082396422
T:
ed521gs
243399024560962476313
T:
sclaus2048
276705127807122791998
T:
nist521gs
304789930554133066657
T:
claus
Cycles to compute a shared secret
25%50%75%system
201571201571201571
T:
kumfp127g
207114207157207190
T:
kumjacfp127g
237258237305237381
T:
jacfp128bk
293317293460293669
T:
prjfp128bk
297787297835297935
T:
hecfp128bk
308655309120309937
T:
hecfp128fkt
325451325451325456
T:
kumfp128g
346099346271346418
T:
jacfp127i
365284365303365546
T:
curve25519
366377372870374352
T:
gls1271
406053406201406766
T:
ecfp256e
420423420650421411
T:
ecfp256q
427120427201427633
T:
prjfp127i
430321430578431087
T:
ecfp256i
435741435798435964
T:
hecfp127i
478994479479480439
T:
surf127eps
501719504720517816
T:
sclaus1024
510901511076511850
T:
ecfp256h
519379519569520167
T:
ecfp256s
658721658815659338
T:
hecfp128i
799691799691799824
T:
kummer
161949316196891630912
T:
nistp256
162123716214451631349
T:
ed448goldilocks
169877117059201711852
T:
surf2113
206431720734132077337
T:
curve2251
238084723862822392989
T:
ed521gs
243582924392342457189
T:
sclaus2048
276648127737582784930
T:
nist521gs
305368030561883064885
T:
claus

amd64; K10 32nm (300f10); 2011 AMD A8-3850; 4 x 2900MHz; hydra5, supercop-20231107

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
300593025730521
T:
jacfp127i
328053300633277
T:
kumjacfp127g
349153517235406
T:
prjfp127i
354083560735835
T:
hecfp127i
473274782248303
T:
jacfp128bk
561875647956878
T:
hecfp128bk
561845655856899
T:
hecfp128fkt
562205659457008
T:
hecfp128i
570275740357812
T:
prjfp128bk
723897351274990
T:
ecfp256e
762307770478682
T:
ecfp256s
776047851479918
T:
ecfp256h
786988047782368
T:
ecfp256q
105426106562107963
T:
gls1271
120072120103120148
T:
kumfp127g
206810206844206942
T:
kumfp128g
214404214406214462
T:
curve25519
266556268706271186
T:
sclaus1024
278778280358282329
T:
ecfp256i
280907281836282288
T:
surf127eps
308424308912309582
T:
ed448goldilocks
414636414679414759
T:
kummer
437261437361437601
T:
nistp256
706233709229710259
T:
surf2113
886000889892891376
T:
curve2251
125332312643651271265
T:
sclaus2048
150361215040661504370
T:
ed521gs
158245015861321588820
T:
claus
176710117680981769383
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
121732121734121739
T:
kumfp127g
122804122810122828
T:
kumjacfp127g
153722153790153847
T:
jacfp128bk
188319188372188405
T:
prjfp128bk
193876193898193934
T:
hecfp128bk
197637197712197838
T:
jacfp127i
201103201122201137
T:
hecfp128fkt
211968211974211983
T:
kumfp128g
214388214391214393
T:
curve25519
257989258019258279
T:
prjfp127i
256927258270259307
T:
gls1271
261065261128261168
T:
ecfp256e
263333263368263413
T:
hecfp127i
267419269305270405
T:
sclaus1024
271246271305271381
T:
ecfp256q
277715277759277817
T:
ecfp256i
277934280265280300
T:
surf127eps
330430330647330734
T:
ecfp256s
337355337389337458
T:
ecfp256h
414400414638414643
T:
kummer
428082428127428219
T:
hecfp128i
680846702304708324
T:
surf2113
879931887195889273
T:
curve2251
938088938426939889
T:
ed448goldilocks
104439210446961045479
T:
nistp256
128241112842661293259
T:
sclaus2048
150336415034331503968
T:
ed521gs
158427015853751585873
T:
claus
176672017678471770949
T:
nist521gs

amd64; K10 32nm (300f10); 2011 AMD A6-3650; 4 x 2600MHz; hydra4, supercop-20231107

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
288732902829282
T:
jacfp127i
314913166831913
T:
kumjacfp127g
336123379434041
T:
prjfp127i
353253572336142
T:
hecfp127i
458944637246870
T:
jacfp128bk
546935503255400
T:
prjfp128bk
548085513655516
T:
hecfp128bk
548605515555545
T:
hecfp128fkt
548845522555632
T:
hecfp128i
708757223173752
T:
ecfp256e
751187658377870
T:
ecfp256s
767407766379076
T:
ecfp256h
774467905280903
T:
ecfp256q
105628106807108171
T:
gls1271
118960118994119689
T:
kumfp127g
205342205429205523
T:
kumfp128g
214423214425214444
T:
curve25519
266792269375271664
T:
sclaus1024
277125278564280408
T:
ecfp256i
280632281711282159
T:
surf127eps
299799300074300679
T:
ed448goldilocks
430843430902431070
T:
kummer
442634442706442843
T:
nistp256
731945735494736164
T:
surf2113
910213912855914789
T:
curve2251
125956512702661280426
T:
sclaus2048
149589014964741496824
T:
ed521gs
158598515915671616977
T:
claus
176727817679571771020
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
121610121623122602
T:
kumfp127g
123795123799123818
T:
kumjacfp127g
153430153463153546
T:
jacfp128bk
188801188987189023
T:
prjfp128bk
193268193301193315
T:
hecfp128bk
197267197299197359
T:
jacfp127i
200582200621200664
T:
hecfp128fkt
211531211531211536
T:
kumfp128g
214382214383214388
T:
curve25519
250360256451257252
T:
gls1271
257491257515257540
T:
prjfp127i
261638261741261819
T:
ecfp256e
262038262093262556
T:
hecfp127i
269399269641269785
T:
ecfp256q
269517271389272693
T:
sclaus1024
276589276636276712
T:
ecfp256i
277987279364280236
T:
surf127eps
329670329719329911
T:
ecfp256s
335685335751335809
T:
ecfp256h
427393427542428501
T:
hecfp128i
430809430810430826
T:
kummer
721724733939734281
T:
surf2113
909662909895910724
T:
ed448goldilocks
905794910482912307
T:
curve2251
993942994221994693
T:
nistp256
126834012783201282681
T:
sclaus2048
149617914979421498793
T:
ed521gs
158466215902161619747
T:
claus
176678917675771770809
T:
nist521gs

amd64; Bonnell (30661); 2011 Intel Atom D2500; 2 x 1866MHz; h8atom, supercop-20231107

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
127981129409130473
T:
jacfp127i
132909134113135338
T:
kumjacfp127g
140126141596143066
T:
prjfp127i
144242145551146517
T:
hecfp127i
221928222929224420
T:
jacfp128bk
233821236754239827
T:
ecfp256e
247492249739251818
T:
hecfp128i
247828249956251769
T:
hecfp128bk
247359250180252077
T:
hecfp128fkt
248262250978253974
T:
curve2251
250390252000254072
T:
prjfp128bk
256704259469263123
T:
ecfp256s
261576263809267071
T:
ecfp256h
263851267652271880
T:
ecfp256q
316813320635325157
T:
gls1271
541814545251546574
T:
kumfp127g
103646210400321042076
T:
kumfp128g
109633310963541097201
T:
curve25519
112016111246271129653
T:
surf127eps
115429311638341175293
T:
ecfp256i
130267213047791308300
T:
ed448goldilocks
134804613489351362277
T:
nistp256
170229517109471734747
T:
surf2113
174617817548301763615
T:
kummer
175025217737301799609
T:
sclaus1024
705802370639737117733
T:
ed521gs
853819485717738598520
T:
nist521gs
872921787845458863120
T:
sclaus2048
106658861072246010784501
T:
claus
Cycles to compute a shared secret
25%50%75%system
549003552727553945
T:
kumfp127g
552216556696558376
T:
kumjacfp127g
726264727867732277
T:
jacfp128bk
758338775341803782
T:
gls1271
866383868322869589
T:
prjfp128bk
887516891891894152
T:
hecfp128bk
922187926443928781
T:
hecfp128fkt
929712936663939792
T:
jacfp127i
102355410302041039465
T:
curve2251
106314610656661068494
T:
kumfp128g
108812210930711097068
T:
ecfp256e
109616510961651096305
T:
curve25519
110784111126221115338
T:
prjfp127i
112062311216591125649
T:
surf127eps
112816911349101140356
T:
ecfp256q
113991511463971149267
T:
hecfp127i
115639311641981182594
T:
ecfp256i
134979613587631366169
T:
ecfp256s
143894814471031455979
T:
ecfp256h
167580017012521713782
T:
surf2113
174321717554741763132
T:
kummer
177139218011771819734
T:
sclaus1024
195978319673501970766
T:
hecfp128i
449595345095684513859
T:
ed448goldilocks
453570645575814599063
T:
nistp256
713449871605107177058
T:
ed521gs
849109885705348598534
T:
nist521gs
866343887314438776075
T:
sclaus2048
106866481075361710793552
T:
claus

amd64; Sandy Bridge+AES (206a7); 2011 Intel Xeon E3-1225; 4 x 3100MHz; hydra7, supercop-20231107

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
321523285433501
T:
jacfp127i
332093363234253
T:
kumjacfp127g
385473925440025
T:
prjfp127i
392774017440981
T:
hecfp127i
473964856050085
T:
jacfp128bk
553385610657105
T:
ecfp256e
564095714958170
T:
prjfp128bk
568685745858395
T:
hecfp128fkt
567525754058687
T:
hecfp128bk
573485805059063
T:
hecfp128i
581555876859848
T:
ecfp256h
603356064562172
T:
curve2251
603716123762600
T:
ecfp256s
639646469566101
T:
ecfp256q
793448039581705
T:
gls254
894448947189497
T:
kummer
103498104639105728
T:
gls1271
114843114901114977
T:
gls254prot
121404121563121734
T:
kumfp127g
147175147466151319
T:
curve25519
178418178470178548
T:
k277taa
185379185466185547
T:
kumfp128g
196709197122197839
T:
k298
266955267166267267
T:
k277mon
268432271107279059
T:
ecfp256i
274765276006276821
T:
surf127eps
288144288451288835
T:
ed448goldilocks
286933289182291880
T:
sclaus1024
382564383032384477
T:
nistp256
628851632199633628
T:
surf2113
121454712176651218708
T:
ed521gs
138908413895831390425
T:
nist521gs
145629414669691476425
T:
sclaus2048
171473017179111721360
T:
claus
Cycles to compute a shared secret
25%50%75%system
725667563775812
T:
gls254
892208925089285
T:
kummer
114802114868115034
T:
gls254prot
123413123584123812
T:
kumfp127g
130626130759130885
T:
kumjacfp127g
140540145388152932
T:
jacfp128bk
158857158965161957
T:
curve25519
178364178396178459
T:
k277taa
178725178908179169
T:
prjfp128bk
183089183258183514
T:
hecfp128bk
189962190245191920
T:
hecfp128fkt
191865191961192070
T:
kumfp128g
196576196875197058
T:
k298
200346200552200787
T:
jacfp127i
229241231382231533
T:
curve2251
248074248338248710
T:
ecfp256e
253425257322258115
T:
gls1271
257693257924258248
T:
ecfp256q
261036261358261711
T:
prjfp127i
263610263783264002
T:
ecfp256i
266816267145267589
T:
hecfp127i
267172267216267238
T:
k277mon
270721271298271985
T:
surf127eps
286332291244291501
T:
sclaus1024
304710304904305072
T:
ecfp256h
326432326743327184
T:
ecfp256s
414340415006429598
T:
hecfp128i
625315628770629732
T:
surf2113
826323826942837699
T:
ed448goldilocks
100563910062961007738
T:
nistp256
122435212253761229252
T:
ed521gs
138858813890471389579
T:
nist521gs
144553914510221475047
T:
sclaus2048
171320217165981725522
T:
claus

amd64; Sandy Bridge (206a7); 2011 Intel Core i3-2310M; 2 x 2100MHz; h6sandy, supercop-20231107

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
325033333734263
T:
jacfp127i
335323438335195
T:
kumjacfp127g
369023779938457
T:
prjfp127i
377993845239187
T:
hecfp127i
483395104652003
T:
jacfp128bk
553165609757105
T:
ecfp256e
562955739258607
T:
prjfp128bk
570985799559255
T:
hecfp128fkt
572785842259501
T:
hecfp128i
575295849959396
T:
hecfp128bk
582445892660542
T:
ecfp256h
590895991562466
T:
curve2251
605306138762872
T:
ecfp256s
641526499567074
T:
ecfp256q
894368950089637
T:
kummer
101337102976104243
T:
gls1271
107409107500107735
T:
gls254prot
107445107642108235
T:
gls254
124687124845124940
T:
kumfp127g
147317151942154783
T:
curve25519
176878176974177400
T:
k277taa
183332183861184573
T:
k298
185802186126195183
T:
kumfp128g
215320215805216859
T:
ed448goldilocks
256866257029257366
T:
k277mon
268108269719271642
T:
ecfp256i
270491271365272552
T:
surf127eps
286131288544291493
T:
sclaus1024
343655344416345931
T:
nistp256
634478637422641103
T:
surf2113
121427112183961221938
T:
ed521gs
139107913949881397838
T:
nist521gs
145777114678001479569
T:
sclaus2048
171780017226231728461
T:
claus
Cycles to compute a shared secret
25%50%75%system
891688921589268
T:
kummer
107281107434107638
T:
gls254prot
107338107580108125
T:
gls254
126774126940127044
T:
kumfp127g
130626130901140850
T:
kumjacfp127g
140817140987154657
T:
jacfp128bk
158989162652165255
T:
curve25519
176714176794177108
T:
k277taa
179447179715180243
T:
prjfp128bk
182824182953183084
T:
k298
182927183278184109
T:
hecfp128bk
190188190453190921
T:
hecfp128fkt
191544192106194328
T:
kumfp128g
200947201231201629
T:
jacfp127i
231573231981232877
T:
curve2251
248008248145248484
T:
ecfp256e
249425250282253370
T:
gls1271
256978257320257790
T:
k277mon
257672257830258068
T:
ecfp256q
261175262237277996
T:
prjfp127i
263616263812265546
T:
ecfp256i
265560265936266398
T:
hecfp127i
267325268269269375
T:
surf127eps
287894293325298082
T:
sclaus1024
304825305058305429
T:
ecfp256h
326632327061328547
T:
ecfp256s
414758415828416987
T:
hecfp128i
633653636448638964
T:
surf2113
654154654359654806
T:
ed448goldilocks
893050895714897568
T:
nistp256
122730112298471232017
T:
ed521gs
138962213908371395331
T:
nist521gs
146248314762871488234
T:
sclaus2048
171560717180491736354
T:
claus

amd64; K10 45nm (100f63); 2010 AMD Athlon II Neo K125; 1 x 1700MHz; h3neo, supercop-20231107

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
323413260432874
T:
jacfp127i
350913535035650
T:
kumjacfp127g
383093859638934
T:
hecfp127i
387333898439286
T:
prjfp127i
531645387555077
T:
jacfp128bk
592295994560751
T:
prjfp128bk
600436073861517
T:
hecfp128i
603876124861894
T:
hecfp128bk
608996165662329
T:
hecfp128fkt
753727703778329
T:
ecfp256e
800498144282936
T:
ecfp256s
803768154683155
T:
ecfp256h
819598387485832
T:
ecfp256q
113165114334115332
T:
gls1271
131111131122131211
T:
kumfp127g
219972219983220063
T:
curve25519
224568224582224687
T:
kumfp128g
264768267202269585
T:
sclaus1024
292863294335296436
T:
ecfp256i
293559294586295142
T:
surf127eps
342372343318344074
T:
ed448goldilocks
425601425678425824
T:
nistp256
436082436147436257
T:
kummer
108472810890531092013
T:
surf2113
127901812904541299294
T:
sclaus2048
133354713358871339894
T:
curve2251
155547715558071556937
T:
ed521gs
157140215757711580146
T:
claus
182265018233721824162
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
132632132641132682
T:
kumfp127g
134338134340134351
T:
kumjacfp127g
162191162259162557
T:
jacfp128bk
201050201166201319
T:
prjfp128bk
206059206090206145
T:
hecfp128bk
212523212559212588
T:
jacfp127i
214473214515214649
T:
hecfp128fkt
219940219944219945
T:
curve25519
230013230021230036
T:
kumfp128g
262538264229267988
T:
sclaus1024
272004272035272125
T:
prjfp127i
271401272177278517
T:
gls1271
273524273587273732
T:
ecfp256e
281746281753281854
T:
hecfp127i
284083284106284147
T:
ecfp256q
291550291575291619
T:
ecfp256i
291148291603293690
T:
surf127eps
345008345089345394
T:
ecfp256s
353732353856354809
T:
ecfp256h
436077436116436158
T:
kummer
454612454670454761
T:
hecfp128i
943784944511945000
T:
ed448goldilocks
102475810248071025642
T:
nistp256
108823510903271090664
T:
surf2113
127636912772961298282
T:
sclaus2048
131714513238311328785
T:
curve2251
155527915556651557114
T:
ed521gs
156872715689171577073
T:
claus
182204518228251823564
T:
nist521gs

amd64; Bonnell (106ca); 2010 Intel Atom N455; 1 x 1000MHz; h2atom, supercop-20230530

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
126630126958127574
T:
jacfp127i
132465132986134605
T:
kumjacfp127g
139876140254140920
T:
prjfp127i
142896143236143996
T:
hecfp127i
216606217001217555
T:
jacfp128bk
234845237563240547
T:
ecfp256e
244424245251246432
T:
prjfp128bk
246189246994247887
T:
hecfp128i
247836248667249888
T:
hecfp128fkt
248013248889250492
T:
hecfp128bk
248710249750253252
T:
curve2251
257027260345262866
T:
ecfp256s
263804265512268899
T:
ecfp256h
266631270337273280
T:
ecfp256q
312033316426319252
T:
gls1271
549218549235550352
T:
kumfp127g
103568610367191038429
T:
kumfp128g
110986311104281111423
T:
curve25519
117326511797671188718
T:
ecfp256i
131359713147861316713
T:
ed448goldilocks
134995313516451354299
T:
nistp256
172915917298821731855
T:
kummer
207872320973692117574
T:
sclaus1024
724717772552327268103
T:
ed521gs
859121586014108624745
T:
nist521gs
107904751085648110937655
T:
sclaus2048
121683131220099112228132
T:
claus
Cycles to compute a shared secret
25%50%75%system
556646556713557507
T:
kumfp127g
559417559468560128
T:
kumjacfp127g
729558729619731185
T:
jacfp128bk
761577763381766351
T:
gls1271
862758862912865082
T:
prjfp128bk
886749888349890151
T:
hecfp128bk
921504921834924129
T:
hecfp128fkt
931980932552934786
T:
jacfp127i
102008310208911026040
T:
curve2251
106134510619471062509
T:
kumfp128g
110552911071871111499
T:
ecfp256e
110829211089011110336
T:
prjfp127i
110964811097591110919
T:
curve25519
114135311417361144040
T:
hecfp127i
114710411491851152698
T:
ecfp256q
117759911790821183583
T:
ecfp256i
138148613827881387024
T:
ecfp256s
145918514596901464368
T:
ecfp256h
172844517287111730879
T:
kummer
195485919559361958540
T:
hecfp128i
212556121563192177099
T:
sclaus1024
447360244745324482761
T:
ed448goldilocks
453772845450914554973
T:
nistp256
724499972494117264531
T:
ed521gs
858969686081098787726
T:
nist521gs
107843481099844911044046
T:
sclaus2048
122149641224158112288188
T:
claus

amd64; Core 2 45nm (1067a); 2009 Intel Core 2 Duo E7600; 2 x 3060MHz; wolfdale, supercop-20231107

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
406774132242094
T:
jacfp127i
427304327344095
T:
kumjacfp127g
472714778048461
T:
prjfp127i
491174967350436
T:
hecfp127i
725487323674084
T:
ecfp256e
733097388474522
T:
jacfp128bk
799238039281134
T:
ecfp256s
803188158783067
T:
ecfp256h
863628720688261
T:
prjfp128bk
865288751988880
T:
ecfp256q
872878791989310
T:
hecfp128bk
873578805689357
T:
hecfp128i
881498883490280
T:
hecfp128fkt
122881124547125448
T:
gls1271
127265127755128923
T:
curve2251
179188179292179431
T:
kumfp127g
292790294412296646
T:
curve25519
314767314895315098
T:
kumfp128g
330667331571332603
T:
ed448goldilocks
386187388062390498
T:
ecfp256i
401585406463410675
T:
kummer
415452417360419631
T:
surf127eps
421289425425429879
T:
sclaus1024
498488498788500667
T:
nistp256
757827761161763650
T:
surf2113
166172216696691670751
T:
ed521gs
191274019145751916418
T:
nist521gs
215411021796952246243
T:
sclaus2048
253235225372472543049
T:
claus
Cycles to compute a shared secret
25%50%75%system
183557183652183771
T:
kumfp127g
187598187663187781
T:
kumjacfp127g
242678242813243022
T:
jacfp128bk
292024292162292326
T:
jacfp127i
294345295138296218
T:
curve25519
300671300827300930
T:
prjfp128bk
302357305835310088
T:
gls1271
306058306189306366
T:
hecfp128bk
317678317854318172
T:
hecfp128fkt
327133327308327475
T:
kumfp128g
363825363974364258
T:
ecfp256e
379459379925380534
T:
ecfp256q
380620380861381107
T:
prjfp127i
385004385235385448
T:
ecfp256i
388943389097389245
T:
hecfp127i
397531398350401802
T:
kummer
413906415892418409
T:
surf127eps
418994420210422090
T:
sclaus1024
460186460489461651
T:
ecfp256h
471325471581471893
T:
ecfp256s
524874524981526897
T:
curve2251
692707692884693535
T:
hecfp128i
755813756949764190
T:
surf2113
103086310327951039502
T:
ed448goldilocks
116586611663301166780
T:
nistp256
165310216605791664694
T:
ed521gs
191232519147661916326
T:
nist521gs
215613021878772272333
T:
sclaus2048
253856725452522548175
T:
claus

amd64; Core 2 45nm (10676); 2007 Intel Xeon X5450; 8 x 2992MHz; unstable; gcc14, supercop-20220506

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
450734746350135
T:
jacfp127i
470414835249377
T:
kumjacfp127g
517235395157038
T:
prjfp127i
530025517759391
T:
hecfp127i
713697255876668
T:
ecfp256e
774197899684435
T:
ecfp256h
780957935180571
T:
jacfp128bk
796888159186347
T:
ecfp256s
884948908191698
T:
ecfp256q
899879267895313
T:
prjfp128bk
906959309296851
T:
hecfp128fkt
914649368897172
T:
hecfp128i
918849393196811
T:
hecfp128bk
122081124406126622
T:
gls1271
127352128298131045
T:
curve2251
178621178639178774
T:
kumfp127g
299212299279299300
T:
curve25519
314856315067315465
T:
kumfp128g
329748330281330858
T:
ed448goldilocks
384083386835388905
T:
ecfp256i
413326415894420963
T:
surf127eps
422448422696424925
T:
kummer
422389426879430417
T:
sclaus1024
592353599624599809
T:
nistp256
703975707187707993
T:
surf2113
165127616548471665749
T:
ed521gs
196582819681241970593
T:
nist521gs
214164921584622174320
T:
sclaus2048
253159425367742542306
T:
claus
Cycles to compute a shared secret
25%50%75%system
183308183339183401
T:
kumfp127g
187644188022188184
T:
kumjacfp127g
244882244967245135
T:
jacfp128bk
292653292810292871
T:
jacfp127i
298596298922299590
T:
curve25519
301634301818301972
T:
prjfp128bk
307377307524307663
T:
hecfp128bk
315724316398332895
T:
gls1271
318241318313318421
T:
hecfp128fkt
327094327144327284
T:
kumfp128g
362120362446362793
T:
ecfp256e
377991378292378707
T:
ecfp256q
381459381554381707
T:
prjfp127i
383653383881384037
T:
ecfp256i
388709388774388844
T:
hecfp127i
412903415509419428
T:
surf127eps
422428422854424362
T:
kummer
424342428316440575
T:
sclaus1024
455103455540455801
T:
ecfp256h
470134470272470478
T:
ecfp256s
519804523960528188
T:
curve2251
694179694320694727
T:
hecfp128i
701889703404704125
T:
surf2113
102255210230961026174
T:
ed448goldilocks
117578911759971177498
T:
nistp256
165075316546411665087
T:
ed521gs
196526419670891969059
T:
nist521gs
212717521455732206421
T:
sclaus2048
253738125388522573470
T:
claus

amd64; Core 2 65nm (6fb); 2007 Intel Core 2 Quad Q6600; 4 x 2404MHz; margaux, supercop-20231107

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
439924500846328
T:
jacfp127i
453244638247734
T:
kumjacfp127g
500845116252245
T:
prjfp127i
513915219153488
T:
hecfp127i
761317721078288
T:
jacfp128bk
835288447886065
T:
ecfp256e
867528732188832
T:
ecfp256h
893089055693260
T:
hecfp128fkt
894309079493635
T:
hecfp128i
896259101193170
T:
prjfp128bk
899749133193893
T:
hecfp128bk
910369209493267
T:
ecfp256s
951899609697376
T:
ecfp256q
128726130104131363
T:
gls1271
131685132236133973
T:
curve2251
180692180704180720
T:
kumfp127g
294932294992295375
T:
curve25519
316276316434316606
T:
kumfp128g
328978329601330277
T:
ed448goldilocks
396816398028400695
T:
ecfp256i
417305417347418457
T:
kummer
414940417425419203
T:
surf127eps
424395431258452504
T:
sclaus1024
511548512317512663
T:
nistp256
770904774092776353
T:
surf2113
170671717069931707674
T:
ed521gs
195895619609001962209
T:
nist521gs
215451421682882179048
T:
sclaus2048
253862825443772548251
T:
claus
Cycles to compute a shared secret
25%50%75%system
183221183244183286
T:
kumfp127g
188119188415188447
T:
kumjacfp127g
243936244004244126
T:
jacfp128bk
291814291904292012
T:
jacfp127i
294866295546295549
T:
curve25519
300060300181300296
T:
prjfp128bk
307228307375307843
T:
hecfp128bk
318352318436318586
T:
hecfp128fkt
311000319976325263
T:
gls1271
326710326726326733
T:
kumfp128g
371692371851371999
T:
ecfp256e
382008382245382402
T:
prjfp127i
386448386786387180
T:
ecfp256q
389357389536389656
T:
hecfp127i
394349394482394673
T:
ecfp256i
411086414694417007
T:
surf127eps
413614417253417329
T:
kummer
421570431349455041
T:
sclaus1024
463721464002464240
T:
ecfp256h
481899482111482381
T:
ecfp256s
555239556659559709
T:
curve2251
693512694257694594
T:
hecfp128i
770866773755775689
T:
surf2113
102565510284011030838
T:
ed448goldilocks
122688312269041226973
T:
nistp256
170818317081971708911
T:
ed521gs
195898919601651960202
T:
nist521gs
210240321893912197356
T:
sclaus2048
252556325370312538986
T:
claus

amd64; Core 2 65nm (6fb); 2007 Intel Core 2 Duo T7300; 2 x 2000MHz; trident, supercop-20231107

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
401884079041395
T:
jacfp127i
424514304243581
T:
kumjacfp127g
473324784648430
T:
prjfp127i
482924877449276
T:
hecfp127i
728027332173896
T:
jacfp128bk
798028051181306
T:
ecfp256e
865118705888023
T:
prjfp128bk
863228708788400
T:
hecfp128bk
864058711488501
T:
hecfp128i
867118745188728
T:
hecfp128fkt
872828802189224
T:
ecfp256h
886618985690911
T:
ecfp256s
932439403695178
T:
ecfp256q
126256127897131721
T:
gls1271
132542133163135272
T:
curve2251
179058179191179379
T:
kumfp127g
294270294824296432
T:
curve25519
314380314838315118
T:
kumfp128g
329413330064331136
T:
ed448goldilocks
393373395158397443
T:
ecfp256i
412043413946419169
T:
kummer
416062418519421637
T:
surf127eps
425277431811454521
T:
sclaus1024
501201501934502794
T:
nistp256
768058771706774476
T:
surf2113
165761316594741661428
T:
ed521gs
191243019149091916572
T:
nist521gs
214781521654192183433
T:
sclaus2048
254796425572592590138
T:
claus
Cycles to compute a shared secret
25%50%75%system
183297183492183641
T:
kumfp127g
187586187729187980
T:
kumjacfp127g
243010243222243896
T:
jacfp128bk
291272291494291828
T:
jacfp127i
294076294486295412
T:
curve25519
300326300493300857
T:
prjfp128bk
307464307881308934
T:
hecfp128bk
318146318314318768
T:
hecfp128fkt
326712327151327495
T:
kumfp128g
311888329927334181
T:
gls1271
373978374144374467
T:
ecfp256e
380078380275380610
T:
prjfp127i
386347386751387482
T:
ecfp256q
388698388883389139
T:
hecfp127i
393153393454393796
T:
ecfp256i
411986413670417449
T:
kummer
415110417668420195
T:
surf127eps
415582430852464224
T:
sclaus1024
465207465591465818
T:
ecfp256h
479641480129480801
T:
ecfp256s
550656551015558254
T:
curve2251
693624693910696117
T:
hecfp128i
767604773013774924
T:
surf2113
103226310343111037151
T:
ed448goldilocks
116959611726671173392
T:
nistp256
165704916583111659659
T:
ed521gs
191070019123591914401
T:
nist521gs
215304821718682181797
T:
sclaus2048
254932925576072596979
T:
claus

Version

This is version 2023.12.02 of the results-dh.html web page. This web page is in the public domain.