VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Crestmont (a06a4-20); 2023 Intel Core Ultra 5 125H, LPE cores; 2 x 700MHz; meteor,tiny, supercop-20260330

[Page version: 20260413 04:19:33]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
284133017332464
T:
kumjacfp127g
298553176934858
T:
jacfp127i
330573344835379
T:
curve2251
322483349635869
T:
prjfp127i
343503548436793
T:
hecfp127i
361863634636569
T:
gls254
374053747437548
T:
gls254prot
400014061041588
T:
jacfp128bk
432944334743530curve25519
424934375845299
T:
ecfp256e
443524657049563
T:
ecfp256s
462004690448177
T:
prjfp128bk
469214781848564
T:
hecfp128fkt
477484864549957
T:
hecfp128i
474834900050560
T:
hecfp128bk
508185091451041
T:
k277taa
502555286455931
T:
ecfp256q
528655321753961
T:
k298
686206867068737
T:
k277mon
716157168771785nistp256
107172107266107418
T:
kummer
114275114521114791
T:
kumfp127g
151508151785152162
T:
kumfp128g
203590204868206482
T:
ecfp256i
235999237370239289
T:
ecfp256h
433676435387439340
T:
ed448goldilocks
583438591818601415
T:
sclaus1024
137578213913141458539
T:
ed521gs
153806615486531572380
T:
nist521gs
384018338521613860015
T:
claus
389988139409983971123
T:
sclaus2048
Cycles to compute a shared secret
25%50%75%system
352943540835603
T:
gls254
373383740037455
T:
gls254prot
507155080050890
T:
k277taa
525835281053177
T:
k298
685746861068663
T:
k277mon
107189107270107390
T:
kummer
113968114146114522
T:
jacfp128bk
116987117266117624
T:
kumfp127g
118903119123119347
T:
kumjacfp127g
130939131640132418
T:
curve2251
141333141590142012
T:
prjfp128bk
146219146449146898
T:
hecfp128fkt
148067148382148867
T:
hecfp128bk
158045158420158802
T:
kumfp128g
160546160767161196curve25519
174265174657175425
T:
jacfp127i
186906187084187441
T:
ecfp256e
195126195314195752
T:
ecfp256i
196479196974198395
T:
ecfp256q
217547218331219218
T:
prjfp127i
223904224598225300
T:
hecfp127i
226916227076227370
T:
ecfp256h
260974262614263658
T:
ecfp256s
281915282431282719nistp256
324014325475326896
T:
hecfp128i
604019607058619076
T:
sclaus1024
137808314054001465046
T:
ed521gs
152793315372601555417
T:
ed448goldilocks
153979815559951573070
T:
nist521gs
383326138897943975124
T:
claus
405141540963424174241
T:
sclaus2048