VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Zen (820f01); 2020 AMD Athlon Silver 3050e; 2 x 1400MHz; dali, supercop-20260217

[Page version: 20260405 18:00:55]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
276412821628802
T:
jacfp127i
280802877029724
T:
kumjacfp127g
287642969330910
T:
prjfp127i
295243051731698
T:
hecfp127i
336423370833753curve25519
368543742938131
T:
jacfp128bk
382633908040846
T:
ecfp256e
409434168843321
T:
curve2251
417014229343178
T:
prjfp128bk
408134248645529
T:
ecfp256h
422204283543599
T:
hecfp128bk
422404286443549
T:
hecfp128fkt
422934298243706
T:
hecfp128i
435064377844072
T:
gls254
427614431347366
T:
ecfp256s
448444504245139
T:
gls254prot
450344651849888
T:
ecfp256q
531355320553273nistp256
555865568155828
T:
k277taa
640736427664616
T:
k298
651856595566623
T:
gls1271
892098934689922
T:
k277mon
100703100784100953
T:
kummer
103182103241103339
T:
kumfp127g
134111134185134250
T:
kumfp128g
155938156948157943
T:
sclaus1024
178435179453180729
T:
ecfp256i
186579187343187904
T:
surf127eps
199917200161200481
T:
ed448goldilocks
211397218595230846
T:
hector
464263466679471129
T:
surf2113
752657756568759578
T:
sclaus2048
958197960555962914
T:
ed521gs
102433010276111030272
T:
claus
108976410915131094007
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
424384258542712
T:
gls254
447764495445143
T:
gls254prot
556075574155876
T:
k277taa
637946401364248
T:
k298
891678928489871
T:
k277mon
100821100876100892
T:
kummer
104387104400104452
T:
kumfp127g
104881104971105098
T:
jacfp128bk
106326106359106387
T:
kumjacfp127g
117987118247118462curve25519
127978128125128221
T:
prjfp128bk
131985132083132158
T:
hecfp128fkt
133696133819134016
T:
hecfp128bk
138734138810138825
T:
kumfp128g
159118159757160368
T:
curve2251
161838161964162241
T:
ecfp256e
161283162487164835
T:
gls1271
162797163001163456
T:
jacfp127i
169290169616169833
T:
ecfp256i
170009170171170459
T:
ecfp256q
183424184399184936
T:
surf127eps
199679199801200224
T:
ecfp256h
200735204458205102
T:
sclaus1024
204704204823205075
T:
prjfp127i
206022206100206721nistp256
209927210214210468
T:
hecfp127i
224683224798224987
T:
ecfp256s
286240286332286802
T:
hecfp128i
464997465074465562
T:
surf2113
582657583946585824
T:
ed448goldilocks
732022738200752336
T:
hector
958447961317963211
T:
ed521gs
983939993899996554
T:
sclaus2048
108824410902601093097
T:
nist521gs
117808411866501188968
T:
claus