VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Silvermont (406c4); 2016 Intel Atom x5-Z8350; 4 x 1440MHz; cherry, supercop-20250922

[Page version: 20251010 17:32:47]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
642956491066018
T:
jacfp127i
687127076974666
T:
kumjacfp127g
716857508980564
T:
prjfp127i
745397630878646
T:
hecfp127i
9687298313100649
T:
jacfp128bk
9663399310102988
T:
ecfp256e
103764106834109705
T:
ecfp256h
110575110950114989
T:
curve2251
107315112890119733
T:
ecfp256s
111659112913116111
T:
prjfp128bk
113084115338116810
T:
hecfp128i
115374115429115489
T:
curve25519
114085115945120239
T:
hecfp128bk
115304117028122767
T:
hecfp128fkt
116581120307125232
T:
ecfp256q
138816141402144229
T:
gls254
187854189875191524
T:
gls1271
190315190398190617nistp256
201711201822202219
T:
gls254prot
279984280055280223
T:
kumfp127g
286966287133287975
T:
k277taa
306918308523311059
T:
k298
421256421372422109
T:
k277mon
447453447675447949
T:
kumfp128g
514110516880520481
T:
ecfp256i
539866540212543271
T:
kummer
538513550767578349
T:
hector
570385572749578304
T:
surf127eps
583246587261588986
T:
sclaus1024
753142754698758089
T:
ed448goldilocks
109833211028491111673
T:
surf2113
289897229123902918507
T:
sclaus2048
364430736489023655823
T:
ed521gs
389829339104203961343
T:
claus
424522042488834252645
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
137225138149139089
T:
gls254
201324201467201788
T:
gls254prot
282890282947283015
T:
kumfp127g
286574286606286655
T:
kumjacfp127g
286748286885287211
T:
k277taa
303848305040306919
T:
k298
318194318795319466
T:
jacfp128bk
373220374263375921
T:
hecfp128bk
375180376509378181
T:
prjfp128bk
385382386613388421
T:
hecfp128fkt
421067421149421417
T:
k277mon
429645429862430003
T:
curve2251
431774431896432144
T:
curve25519
441063442358444444
T:
gls1271
445178446901448433
T:
jacfp127i
457832457927458082
T:
kumfp128g
488338489658491975
T:
ecfp256e
504445507037510474
T:
ecfp256q
512226513173515636
T:
ecfp256i
525012528117531760
T:
prjfp127i
533017533420535266
T:
hecfp127i
539267539559539830
T:
kummer
567659570068575154
T:
surf127eps
594773595723597664
T:
ecfp256h
624982628075631082
T:
ecfp256s
735427737774741992nistp256
760026795293804143
T:
sclaus1024
811114812007817666
T:
hecfp128i
108845110965241104835
T:
surf2113
183725118545921869301
T:
hector
260396926054462613485
T:
ed448goldilocks
364303836467693654706
T:
ed521gs
380784538205743846466
T:
sclaus2048
423913142473644250347
T:
nist521gs
467959246940264727528
T:
claus