VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Zen 3 (a50f00); 2021 AMD Ryzen 5 PRO 5650G; 6 x 3900MHz; cezanne, supercop-20250307

[Page version: 20250328 20:57:54]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
251602680428598
T:
jacfp127i
258172762129854
T:
kumjacfp127g
288893086533146
T:
hecfp127i
295053150933530
T:
prjfp127i
309423290434709
T:
jacfp128bk
319163337336673
T:
ecfp256e
343103582340202
T:
curve2251
352013784543316
T:
ecfp256h
362853791040638
T:
prjfp128bk
383203835238402
T:
gls254prot
35600?38416?44587?
T:
ecfp256s
380813875939429
T:
gls254
372243890041638
T:
hecfp128bk
373193919641440
T:
hecfp128fkt
374253927441781
T:
hecfp128i
388504169947715
T:
ecfp256q
474194766247902
T:
kummer
480354810348110
T:
k277taa
531755375554372
T:
gls1271
541835430055072
T:
k298
756447569875767
T:
k277mon
813998148481554
T:
kumfp127g
102402102514102616
T:
curve25519
105213105329105504
T:
kumfp128g
125410126225126768
T:
sclaus1024
139414140079140571
T:
surf127eps
146574147282148049
T:
ecfp256i
157787157987158273
T:
ed448goldilocks
162963164978172283
T:
hector
220041220185220692
T:
nistp256
356662357874358959
T:
surf2113
599791602681604390
T:
sclaus2048
762653763901771878
T:
ed521gs
828003829485830864
T:
claus
904493908131926457
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
357233574235748
T:
gls254
382233826138298
T:
gls254prot
473264739347538
T:
kummer
479114793447974
T:
k277taa
539615404954147
T:
k298
755707562575692
T:
k277mon
811348119681306
T:
jacfp128bk
839288397784038
T:
kumfp127g
859338600786082
T:
kumjacfp127g
104539104617104717
T:
prjfp128bk
107364107656107694
T:
hecfp128bk
109817109946110298
T:
kumfp128g
110774110860110951
T:
curve25519
111654111822111984
T:
hecfp128fkt
129292130086131179
T:
curve2251
131534131640131712
T:
jacfp127i
132398133069133070
T:
ecfp256e
130099134462135116
T:
gls1271
135736136932137485
T:
surf127eps
141405141678141829
T:
ecfp256i
142100142151143109
T:
ecfp256q
158575159514159675
T:
ecfp256h
161922163368166299
T:
sclaus1024
175065175222175308
T:
prjfp127i
178113178187178276
T:
hecfp127i
204253204591205499
T:
ecfp256s
237702238550238777
T:
hecfp128i
351439352454353128
T:
surf2113
525572526945528861
T:
ed448goldilocks
574413575839577744
T:
nistp256
567979577295581486
T:
hector
759341761017770989
T:
ed521gs
772338796785797100
T:
sclaus2048
903770906575909986
T:
nist521gs
959035961673963272
T:
claus