VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Zen 3 (a50f00); 2021 AMD Ryzen 5 PRO 5650G; 6 x 3900MHz; cezanne, supercop-20260217

[Page version: 20260319 20:29:15]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
261192621226227curve25519
249282664028813
T:
jacfp127i
257252744329593
T:
kumjacfp127g
279482986632555
T:
prjfp127i
287383064733175
T:
hecfp127i
308493260834660
T:
jacfp128bk
314943286836366
T:
ecfp256e
340713548040132
T:
curve2251
341723689142361
T:
ecfp256h
357993756340212
T:
prjfp128bk
379273795337985
T:
gls254prot
377703830638860
T:
gls254
367083841441070
T:
hecfp128bk
368153857241156
T:
hecfp128i
370343886941393
T:
hecfp128fkt
362873899245304
T:
ecfp256s
388484149548242
T:
ecfp256q
418264183241841nistp256
467844682746872
T:
k277taa
477994787448176
T:
kummer
527755290153718
T:
k298
536015427454731
T:
gls1271
736717373673816
T:
k277mon
814278164481760
T:
kumfp127g
105370105506105579
T:
kumfp128g
125218126046126755
T:
sclaus1024
139727140386140827
T:
surf127eps
146566147514148466
T:
ecfp256i
156310156581156814
T:
ed448goldilocks
174722179541189521
T:
hector
375056376916378055
T:
surf2113
593507596055597555
T:
sclaus2048
741459742572744570
T:
ed521gs
827079828771830867
T:
claus
874213876772882949
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
354053542235466
T:
gls254
379083792737965
T:
gls254prot
466764673646765
T:
k277taa
478334797548030
T:
kummer
526165269952790
T:
k298
736447371273813
T:
k277mon
815688164581759
T:
jacfp128bk
841508422184307
T:
kumfp127g
858258590985993
T:
kumjacfp127g
889448915889846curve25519
105556105648105771
T:
prjfp128bk
109049109229109482
T:
hecfp128fkt
110039110156110252
T:
kumfp128g
110476111064111497
T:
hecfp128bk
129913130714131786
T:
gls1271
129904130989131114
T:
curve2251
131485131520131575
T:
ecfp256e
132101132136132299
T:
jacfp127i
137021137427137688
T:
surf127eps
139338139567139652
T:
ecfp256i
140245140311140455
T:
ecfp256q
156301156821156930
T:
ecfp256h
157698157745157779nistp256
162089162503164687
T:
sclaus1024
175706175810175996
T:
prjfp127i
179552179691179799
T:
hecfp127i
197862198025198312
T:
ecfp256s
237802237909237949
T:
hecfp128i
368378371878372305
T:
surf2113
513781516836517952
T:
ed448goldilocks
611580612278614971
T:
hector
741133741752743588
T:
ed521gs
767701795266798201
T:
sclaus2048
874053876369882666
T:
nist521gs
950775955030956570
T:
claus