VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Silvermont (406c4); 2016 Intel Atom x5-Z8350; 4 x 1440MHz; cherry, supercop-20250307

[Page version: 20250403 08:57:19]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
654816892072372
T:
jacfp127i
680086917372658
T:
kumjacfp127g
711367308078045
T:
prjfp127i
733497459077702
T:
hecfp127i
98878100694102588
T:
ecfp256e
99837107424118394
T:
jacfp128bk
107746108737115832
T:
curve2251
106742109254113655
T:
ecfp256h
108880112223117950
T:
ecfp256s
113756115638118860
T:
hecfp128bk
111339116144121559
T:
hecfp128i
114080118277124482
T:
prjfp128bk
115291118866127198
T:
hecfp128fkt
121466122532127374
T:
ecfp256q
140217142906145529
T:
gls254
185514188186190659
T:
gls1271
205699205956206880
T:
gls254prot
280606280716280832
T:
kumfp127g
287837288093289009
T:
k277taa
305920308410312469
T:
k298
422215422303422554
T:
k277mon
447603447682447864
T:
kumfp128g
448449448494449372
T:
curve25519
504010507396512450
T:
ecfp256i
551573554068554892
T:
kummer
550797563949582071
T:
hector
568069570073572803
T:
surf127eps
583921587700591268
T:
sclaus1024
616517617134619710
T:
nistp256
766058767800772483
T:
ed448goldilocks
114181011499001158625
T:
surf2113
290680729213642927366
T:
sclaus2048
366011336623593667559
T:
ed521gs
388875738979973906864
T:
claus
431498543206204327487
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
138649139589140034
T:
gls254
205391205524206053
T:
gls254prot
283453283569283686
T:
kumfp127g
286631286733286946
T:
kumjacfp127g
287617287798288222
T:
k277taa
305452306766309991
T:
k298
317300317879318594
T:
jacfp128bk
370785371812373742
T:
hecfp128bk
373712374539375903
T:
prjfp128bk
385870387069389309
T:
hecfp128fkt
421984422064422176
T:
k277mon
425941426429426687
T:
curve2251
435229438028450637
T:
gls1271
442665443929446492
T:
jacfp127i
448334448376448486
T:
curve25519
457856457925458039
T:
kumfp128g
479883480638481938
T:
ecfp256e
502780503517505185
T:
ecfp256q
504738506470508330
T:
ecfp256i
522430522927525078
T:
prjfp127i
534565536203539338
T:
hecfp127i
551153553683554666
T:
kummer
567177569632572214
T:
surf127eps
600536602651605946
T:
ecfp256h
629368630660633559
T:
ecfp256s
775354786026792696
T:
sclaus1024
808972810069814983
T:
hecfp128i
112954811362231145391
T:
surf2113
190888419282521955778
T:
hector
209089820951912101239
T:
nistp256
264757426492752655801
T:
ed448goldilocks
365881936601193663586
T:
ed521gs
385445638629863872072
T:
sclaus2048
431322743169944324445
T:
nist521gs
465570246604674672381
T:
claus