VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Broadwell+AES (406f1); 2016 Intel Xeon E5-2609 v4; 8 x 1700MHz; bolero, supercop-20260217

[Page version: 20260319 20:29:15]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
258562653327780
T:
jacfp127i
281042916132675
T:
hecfp127i
294822956732137curve25519
285012964433063
T:
kumjacfp127g
28903?32658?39049?
T:
prjfp127i
327263399236930
T:
jacfp128bk
373933785941265
T:
gls254
372813856143274
T:
prjfp128bk
397614107648036
T:
hecfp128i
399964138244785
T:
hecfp128fkt
39288?41825?55003?
T:
gls254prot
425824371048433
T:
curve2251
424104383247674
T:
ecfp256e
446654482648308nistp256
40354?45501?56642?
T:
hecfp128bk
468734815553379
T:
ecfp256h
479264889554440
T:
ecfp256s
500295044656096
T:
k277taa
489185084157086
T:
ecfp256q
560905657764360
T:
k298
759927710281451
T:
gls1271
69018?79244?95940?
T:
kummer
833968375194848
T:
kumfp127g
77089?88692?106607?
T:
k277mon
128659133482145950
T:
kumfp128g
147120152557168338
T:
sclaus1024
155491?163712?212929?
T:
ed448goldilocks
185640191209205751
T:
ecfp256i
198087204696220431
T:
surf127eps
278017?297718?351420?
T:
hector
544586566118604216
T:
surf2113
731047?868642?1141432?
T:
sclaus2048
899813924154987550
T:
ed521gs
101215910379681084936
T:
claus
106175210991081237884
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
360633611536853
T:
gls254
39135?40638?55197?
T:
gls254prot
499025004253456
T:
k277taa
557925597762651
T:
k298
67729?76484?95188?
T:
kummer
77238?87291?106803?
T:
k277mon
877448790895794curve25519
860858926598907
T:
kumfp127g
9632197489107653
T:
jacfp128bk
99314100473111376
T:
kumjacfp127g
118658120379133536
T:
prjfp128bk
124560127200142603
T:
hecfp128bk
122966127212138728
T:
hecfp128fkt
134687?151679?194175?
T:
kumfp128g
153574155310165746
T:
curve2251
155474163462176215
T:
jacfp127i
166670168876182140
T:
ecfp256e
165711169714181866nistp256
176536179645193011
T:
ecfp256i
177993181949196784
T:
ecfp256q
184786186910198977
T:
gls1271
188127196260210731
T:
hecfp127i
192246198999217122
T:
sclaus1024
194987201831216440
T:
surf127eps
190294?209814?261656?
T:
prjfp127i
225375230182247756
T:
ecfp256h
229337233942248050
T:
ecfp256s
271031282287298027
T:
hecfp128i
470912484962507574
T:
ed448goldilocks
551043573900621057
T:
surf2113
897552920728959375
T:
hector
902060927161968692
T:
ed521gs
9484949964731056131
T:
sclaus2048
100691110478381108461
T:
claus
106271210969781172328
T:
nist521gs