VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; comet, supercop-20260330

[Page version: 20260609 22:41:26]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
232902417025319
T:
jacfp127i
238812453525236
T:
kumjacfp127g
270782794528914
T:
hecfp127i
272202847529584
T:
prjfp127i
295582959229631curve25519
318323304434298
T:
jacfp128bk
366103684737190
T:
gls254
375693857839681
T:
prjfp128bk
385723861038661
T:
gls254prot
379793894940157
T:
hecfp128fkt
381953914440254
T:
hecfp128bk
386363931840018
T:
hecfp128i
386693945440502
T:
curve2251
414584210243445
T:
ecfp256e
421524223842304nistp256
428694364145685
T:
ecfp256h
444174519246848
T:
ecfp256s
457054577946277
T:
k277taa
463244715249003
T:
ecfp256q
497964986250001
T:
k298
526055266552733
T:
kummer
694637036971216
T:
gls1271
709277106171741
T:
k277mon
791697927279401
T:
kumfp127g
111122111172111236
T:
kumfp128g
138969145955147317
T:
sclaus1024
153185153456153721
T:
ed448goldilocks
176555177763178981
T:
ecfp256i
183267184042184941
T:
surf127eps
250414256965268049
T:
hector
512649515180516919
T:
surf2113
653922658021659947
T:
sclaus2048
808856809127809653
T:
ed521gs
898618900280901622
T:
claus
941808942203942618
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
358153584935881
T:
gls254
384883851738554
T:
gls254prot
455564560946066
T:
k277taa
496084965649714
T:
k298
544205450463668
T:
kummer
708017094071594
T:
k277mon
805518064380739
T:
kumfp127g
826518274882839
T:
kumjacfp127g
840008442484539curve25519
876198776588619
T:
jacfp128bk
108059108170108324
T:
prjfp128bk
113724113824114011
T:
hecfp128fkt
115405115456115515
T:
kumfp128g
115332115462115582
T:
hecfp128bk
124654124749124877
T:
jacfp127i
141795143141145149
T:
curve2251
156421156636156848nistp256
159167159362159638
T:
ecfp256e
165779165923166140
T:
prjfp127i
166738166942167271
T:
ecfp256i
166821167085167432
T:
ecfp256q
168534168668168827
T:
hecfp127i
168609170850171653
T:
gls1271
177350177764178300
T:
surf127eps
180051189679190150
T:
sclaus1024
192365192584192867
T:
ecfp256h
222575222754222994
T:
ecfp256s
246885247047247295
T:
hecfp128i
466270466660467058
T:
ed448goldilocks
510893512309514342
T:
surf2113
808929809158809399
T:
ed521gs
818536842345847499
T:
hector
846805848153857878
T:
sclaus2048
941652941983942347
T:
nist521gs
103448310394661040102
T:
claus