VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Gracemont (906a4-20); 2022 Intel Core i3-1215U, E cores; 4 x 1600MHz; alder2,little, supercop-20260627

[Page version: 20260805 22:01:51]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
373613856340661
T:
jacfp127i
375423904541700
T:
kumjacfp127g
408424207245116
T:
prjfp127i
429694405246022
T:
hecfp127i
454154563146272
T:
curve2251
485424872949115curve25519
507545101751337
T:
gls254
515935247954019
T:
jacfp128bk
527305282852900
T:
gls254prot
529185367155187
T:
ecfp256e
582355924560992
T:
prjfp128bk
586555952961363
T:
ecfp256s
589046005662266
T:
hecfp128fkt
591036034462583
T:
hecfp128bk
609556153762376
T:
ecfp256h
615516258564500
T:
hecfp128i
619176278864680
T:
ecfp256q
639836409364314
T:
k277taa
718437194972101
T:
k298
912489252593843
T:
gls1271
948859498795104nistp256
986429874499045
T:
k277mon
153744154162154806
T:
kumfp127g
163111163302163594
T:
kummer
200122200495200694
T:
kumfp128g
263512265356267557
T:
ecfp256i
324065328012330964
T:
ed448goldilocks
460810464711469602
T:
sclaus1024
183708318436881852076
T:
ed521gs
198302619908132004588
T:
nist521gs
269349327042532719924
T:
claus
302787630487973071564
T:
sclaus2048
Cycles to compute a shared secret
25%50%75%system
499475001850093
T:
gls254
526845275652816
T:
gls254prot
639216400464096
T:
k277taa
717067183071994
T:
k298
986149875898815
T:
k277mon
153813154005154694
T:
jacfp128bk
157747158127158552
T:
kumfp127g
158684159153159721
T:
kumjacfp127g
162946163153163441
T:
kummer
181667182276183016
T:
curve2251
185260185978186271curve25519
189551190037190442
T:
prjfp128bk
195833196044196351
T:
hecfp128fkt
199054199537200970
T:
hecfp128bk
207793208097209626
T:
kumfp128g
234985235650236439
T:
jacfp127i
232896235947239011
T:
gls1271
245405246081247505
T:
ecfp256e
251369252431253308
T:
ecfp256i
253199253777254525
T:
ecfp256q
294787296047297370
T:
prjfp127i
303040303478304605
T:
ecfp256h
302987304303306083
T:
hecfp127i
344102345110346079
T:
ecfp256s
375236376024376395nistp256
430688431209432019
T:
hecfp128i
473372476410480041
T:
sclaus1024
114727611533101166882
T:
ed448goldilocks
180755418218391826681
T:
ed521gs
198145919872251998736
T:
nist521gs
270569727154092745210
T:
claus
303659030959573108039
T:
sclaus2048