VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3210M; 2 x 2500MHz; h9ivy, supercop-20250922

[Page version: 20251001 12:36:28]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
295643014030592
T:
jacfp127i
311073148932033
T:
kumjacfp127g
333503390234442
T:
prjfp127i
348153512235891
T:
hecfp127i
408054116041697
T:
jacfp128bk
477924789447984
T:
curve25519
492294970350170
T:
hecfp128bk
494544985150398
T:
hecfp128fkt
491394989450731
T:
prjfp128bk
488284993551216
T:
ecfp256e
495964994750560
T:
hecfp128i
528645416056096
T:
ecfp256s
572435911960390
T:
curve2251
576406123163678
T:
ecfp256q
738687513976668
T:
gls254
788057888679002nistp256
886808872088780
T:
kummer
119688119761120168
T:
kumfp127g
119724119762119855
T:
gls254prot
165046165176165300
T:
kumfp128g
175158175217175309
T:
k277taa
181848181945182123
T:
k298
204091205634206623
T:
sclaus1024
207234207364207741
T:
ed448goldilocks
226552227682229113
T:
ecfp256i
232623233590234266
T:
surf127eps
257324257326257341
T:
k277mon
258012259300261085
T:
ecfp256h
278390286083301247
T:
hector
587484590145591371
T:
surf2113
103958810443931047041
T:
sclaus2048
108505710867731088742
T:
ed521gs
131537113160121316598
T:
nist521gs
135496913565651358142
T:
claus
Cycles to compute a shared secret
25%50%75%system
702037061570797
T:
gls254
884628848288504
T:
kummer
119460119521119869
T:
gls254prot
121243121290121352
T:
kumfp127g
123343123436123690
T:
jacfp128bk
127829127912127966
T:
kumjacfp127g
156087156224156397
T:
prjfp128bk
160176160335160518
T:
hecfp128bk
166210166327166496
T:
hecfp128fkt
168704168793168870
T:
curve25519
170593170797170963
T:
kumfp128g
175020175078175141
T:
k277taa
181673181729181812
T:
k298
190460190574192783
T:
jacfp127i
206758206998207274
T:
ecfp256e
218882219097219399
T:
ecfp256q
220751221037221419
T:
ecfp256i
224167224507224934
T:
curve2251
229323229985230372
T:
surf127eps
238572238870239222
T:
prjfp127i
244239244546244806
T:
hecfp127i
252410252654252948
T:
ecfp256h
257250257253257277
T:
k277mon
266461271621276841
T:
sclaus1024
284745284919285165
T:
ecfp256s
298786298911299120nistp256
365585365792366124
T:
hecfp128i
582041585448587699
T:
surf2113
626212626416626686
T:
ed448goldilocks
908351913000913989
T:
hector
108508210858451086739
T:
ed521gs
131497513155181315943
T:
nist521gs
136873213824101385765
T:
sclaus2048
160150316056011609904
T:
claus