VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Crestmont (a06a4-20); 2023 Intel Core Ultra 5 125H, E cores; 8 x 700MHz; meteor,little, supercop-20260330

[Page version: 20260413 04:19:33]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
275392813029833
T:
jacfp127i
301673084432982
T:
kumjacfp127g
330003333134969
T:
curve2251
328333358134526
T:
prjfp127i
346313565436836
T:
hecfp127i
362183630936513
T:
gls254
373993745337509
T:
gls254prot
387923983441106
T:
jacfp128bk
418224288644674
T:
ecfp256e
432774333743486curve25519
435824449847856
T:
ecfp256s
459964679348455
T:
prjfp128bk
462274735348946
T:
hecfp128bk
469404749347985
T:
hecfp128i
483474922650208
T:
hecfp128fkt
486044959652274
T:
ecfp256q
507955086050941
T:
k277taa
527675292353171
T:
k298
686036866068704
T:
k277mon
717117184171978nistp256
107198107343107718
T:
kummer
114620114882115167
T:
kumfp127g
151741151924152328
T:
kumfp128g
203421204682206252
T:
ecfp256i
236026237297238995
T:
ecfp256h
431386432521434287
T:
ed448goldilocks
584188590197597867
T:
sclaus1024
138164413867021391994
T:
ed521gs
154358815492881554266
T:
nist521gs
380493938114873815963
T:
claus
388878239156973937642
T:
sclaus2048
Cycles to compute a shared secret
25%50%75%system
354653553435608
T:
gls254
373713742537471
T:
gls254prot
507075078850837
T:
k277taa
526375273452844
T:
k298
685806861268644
T:
k277mon
107158107279107719
T:
kummer
113513113656113791
T:
jacfp128bk
117296117393117550
T:
kumfp127g
118987119144119288
T:
kumjacfp127g
132691132776132879
T:
curve2251
141058141344141702
T:
prjfp128bk
146321146481146656
T:
hecfp128fkt
149144149314149561
T:
hecfp128bk
158568158763158994
T:
kumfp128g
160666160776160881curve25519
174316174669175198
T:
jacfp127i
186866187041187254
T:
ecfp256e
193063193403193987
T:
ecfp256q
194500195106195394
T:
ecfp256i
217349218040219167
T:
prjfp127i
223571224258225131
T:
hecfp127i
226973227413228852
T:
ecfp256h
260363260918262032
T:
ecfp256s
281658282002282448nistp256
324234325206326063
T:
hecfp128i
600603609728615201
T:
sclaus1024
138160113883481400710
T:
ed521gs
154610615526891560278
T:
nist521gs
153412315598041570883
T:
ed448goldilocks
379653738024983806468
T:
claus
394898439778724001968
T:
sclaus2048