VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Zen 2 (860f01); 2022 AMD Ryzen 5 4500U; 6 x 3600MHz; renoir, supercop-20260217

[Page version: 20260302 18:25:20]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
220062329625215
T:
jacfp127i
226692398625670
T:
kumjacfp127g
240592549027568
T:
prjfp127i
245672625128253
T:
hecfp127i
266212672026902curve25519
305423217133994
T:
jacfp128bk
343583526237472
T:
ecfp256e
345123605237960
T:
hecfp128bk
350573631538089
T:
hecfp128i
348563646538559
T:
hecfp128fkt
361343721738322
T:
prjfp128bk
351533732841197
T:
ecfp256h
380524041544362
T:
ecfp256s
398224047042824
T:
curve2251
396394237746382
T:
ecfp256q
431984326343341nistp256
439324397644182
T:
gls254prot
444234497145152
T:
gls254
536145365753711
T:
k277taa
597226001860031
T:
kummer
595716044861098
T:
gls1271
627566312963541
T:
k298
831918326683529
T:
kumfp127g
856678568488617
T:
k277mon
109700109777109905
T:
kumfp128g
128689129782130607
T:
sclaus1024
144220144772145127
T:
surf127eps
153307154332155377
T:
ecfp256i
156677156978157311
T:
ed448goldilocks
207828211783221261
T:
hector
469337471394472683
T:
surf2113
648380652477655532
T:
sclaus2048
813549816390818247
T:
ed521gs
848719851597854816
T:
claus
913124915348916329
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
416114161741674
T:
gls254
439044392043920
T:
gls254prot
535885365353670
T:
k277taa
590505949159655
T:
kummer
628696322663331
T:
k298
839788403184077
T:
kumfp127g
844238449584608
T:
jacfp128bk
853788592486645
T:
kumjacfp127g
857468997289972
T:
k277mon
935639387593875curve25519
100198100228100295
T:
prjfp128bk
104024104168104225
T:
hecfp128fkt
105542105723105975
T:
hecfp128bk
114680114687114860
T:
kumfp128g
128695128871129126
T:
jacfp127i
139348139403139510
T:
ecfp256e
140653141089141451
T:
surf127eps
144695144762144841
T:
ecfp256i
146455146569146679
T:
ecfp256q
150965151771151997
T:
gls1271
156971157302158113
T:
curve2251
160225160598161088
T:
prjfp127i
164690164775164975
T:
hecfp127i
167449167467167481nistp256
167615167827168043
T:
ecfp256h
165754169548170359
T:
sclaus1024
204251204486204588
T:
ecfp256s
225634225819225913
T:
hecfp128i
467383469289471591
T:
surf2113
470559472112473050
T:
ed448goldilocks
722373723176727554
T:
hector
812708813365814172
T:
ed521gs
849757861011862567
T:
sclaus2048
911811913274914476
T:
nist521gs
979303980605982658
T:
claus