VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Golden Cove (90675-00); 2022 Intel Core i3-12100; 4 x 3300MHz; alder, supercop-20260217

[Page version: 20260319 20:29:15]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
188491984621248
T:
jacfp127i
193992037221810
T:
kumjacfp127g
212342241624051
T:
hecfp127i
225272371225211
T:
prjfp127i
236922382724042curve25519
252802626027266
T:
jacfp128bk
281592852029220
T:
ecfp256e
285982982131273
T:
prjfp128bk
288893013631584
T:
hecfp128i
290573025431574
T:
hecfp128fkt
301003039330810
T:
gls254
29043?31292?43579?
T:
hecfp128bk
315843164631719
T:
gls254prot
315823192832642
T:
ecfp256s
334383351533795
T:
curve2251
331453353234305
T:
ecfp256q
371653726337425nistp256
387283878238838
T:
k277taa
429824306643186
T:
k298
520115210552242
T:
kummer
609116100661154
T:
k277mon
643846459564833
T:
kumfp127g
812508175483043
T:
kumfp128g
102673103530104098
T:
sclaus1024
121365122267123236
T:
ed448goldilocks
123416128202134956
T:
surf127eps
132439133302134231
T:
ecfp256i
149901151016152069
T:
ecfp256h
164138169426179323
T:
hector
348653350502352684
T:
surf2113
483560485972487749
T:
sclaus2048
578551580200582076
T:
ed521gs
676064677392678698
T:
claus
767140769260771967
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
294642951829574
T:
gls254
314723151531574
T:
gls254prot
386133866738714
T:
k277taa
427804285342909
T:
k298
519535203952165
T:
kummer
607896086960967
T:
k277mon
656826589366157
T:
kumfp127g
661876641266567
T:
jacfp128bk
664036663166779
T:
kumjacfp127g
753707567976325curve25519
761357624976415
T:
prjfp128bk
785767880778982
T:
hecfp128fkt
79850?80087?129651?
T:
hecfp128bk
854268587186232
T:
kumfp128g
101719101966102193
T:
jacfp127i
117176117615118298
T:
ecfp256e
120486120973123623
T:
prjfp127i
121969122154122315
T:
hecfp127i
116578122511127265
T:
surf127eps
122228122596123095
T:
ecfp256i
125755125956126298
T:
ecfp256q
132860133361135410
T:
sclaus1024
132527134255134437
T:
curve2251
138911139505140071
T:
ecfp256h
139120140038141278nistp256
168969169478171221
T:
hecfp128i
170859171460172196
T:
ecfp256s
345667348418351072
T:
surf2113
411981421447433058
T:
ed448goldilocks
577806579964581786
T:
ed521gs
587900590104597175
T:
hector
635970637898647356
T:
sclaus2048
768570770487772678
T:
nist521gs
784021785193786859
T:
claus