VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; cubi10, supercop-20260217

[Page version: 20260319 20:29:15]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
219642227223448
T:
kumjacfp127g
218202274623742
T:
jacfp127i
253692582626987
T:
hecfp127i
262402706627988
T:
prjfp127i
279222810928202curve25519
306633150932684
T:
jacfp128bk
354883642138233
T:
hecfp128fkt
354293645638091
T:
hecfp128bk
357883689438599
T:
prjfp128bk
368693710537515
T:
gls254
379253808838888
T:
curve2251
380693887440027
T:
hecfp128i
389053894539004
T:
gls254prot
413714201043189
T:
ecfp256e
423524240342479nistp256
429524361145907
T:
ecfp256h
444904521646746
T:
ecfp256s
462744631246355
T:
k277taa
472974800749614
T:
ecfp256q
517635230852420
T:
k298
532465430754864
T:
kummer
693567017870887
T:
gls1271
711797175571872
T:
k277mon
802308033880447
T:
kumfp127g
112915113285113333
T:
kumfp128g
136106137189137808
T:
sclaus1024
153281153577153892
T:
ed448goldilocks
177502178467179613
T:
ecfp256i
185576187005187666
T:
surf127eps
244902251625263905
T:
hector
514950517688519860
T:
surf2113
664462675225713723
T:
sclaus2048
810473810849811580
T:
ed521gs
895304897704900167
T:
claus
942759943623944959
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
361313617136217
T:
gls254
388063885038888
T:
gls254prot
460964612346160
T:
k277taa
513395209652203
T:
k298
528215290054478
T:
kummer
710057172371797
T:
k277mon
817798186981975
T:
kumfp127g
836548373883826
T:
kumjacfp127g
844798476585002curve25519
883528907789522
T:
jacfp128bk
110306111497111686
T:
prjfp128bk
115541115644115786
T:
hecfp128fkt
117142117231117362
T:
hecfp128bk
117357117653117715
T:
kumfp128g
125985126077126189
T:
jacfp127i
144127144282144906
T:
curve2251
158404158587158753nistp256
160315160561160857
T:
ecfp256e
166256167365167629
T:
prjfp127i
168252168550168931
T:
ecfp256i
169713170015170453
T:
ecfp256q
170642170776170952
T:
hecfp127i
172312175598176459
T:
gls1271
175381176044177067
T:
sclaus1024
182136183150183733
T:
surf127eps
194759194997195333
T:
ecfp256h
223775224018224340
T:
ecfp256s
252108252294252545
T:
hecfp128i
465866466293466839
T:
ed448goldilocks
513310516496518019
T:
surf2113
810472810664810844
T:
ed521gs
842736845272848746
T:
hector
872265880665930427
T:
sclaus2048
942576943387944263
T:
nist521gs
103760110409021042315
T:
claus