VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; cubi10, supercop-20250307

[Page version: 20250331 22:49:56]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
214582214523374
T:
kumjacfp127g
215162244023395
T:
jacfp127i
250102602926967
T:
prjfp127i
258132673027686
T:
hecfp127i
290532997031134
T:
jacfp128bk
346833551836750
T:
prjfp128bk
352393599037304
T:
hecfp128i
371643736237706
T:
gls254
376723832238919
T:
hecfp128bk
36921?38968?51273?
T:
hecfp128fkt
389983917239244
T:
gls254prot
395613978340389
T:
curve2251
400294063441873
T:
ecfp256e
419674244844260
T:
ecfp256h
441884493946186
T:
ecfp256s
448284568947101
T:
ecfp256q
462784632346385
T:
k277taa
529635309053380
T:
k298
534415431754850
T:
kummer
696847059571217
T:
gls1271
722397227972335
T:
k277mon
795197960679717
T:
kumfp127g
112592112679112818
T:
kumfp128g
125559126400126623
T:
curve25519
136934137874138548
T:
sclaus1024
152462152665152943
T:
ed448goldilocks
175218176183177355
T:
ecfp256i
186822187383187953
T:
surf127eps
233491234502235633
T:
nistp256
233286236147249179
T:
hector
505237508151510122
T:
surf2113
658424662609665475
T:
sclaus2048
822778823723824599
T:
ed521gs
900050902411904837
T:
claus
954047955833957714
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
361593622036262
T:
gls254
387283893139009
T:
gls254prot
461034614046179
T:
k277taa
528445293153127
T:
k298
532835339254174
T:
kummer
721627221072302
T:
k277mon
820988217282263
T:
kumfp127g
837228381483912
T:
kumjacfp127g
886448872888891
T:
jacfp128bk
109812109952110158
T:
prjfp128bk
114287114495114760
T:
hecfp128bk
118009118066118176
T:
kumfp128g
117930118139137239
T:
hecfp128fkt
125689125839126050
T:
jacfp127i
135599136038136506
T:
curve25519
144638144819145648
T:
curve2251
161312161569161925
T:
ecfp256e
166976167107167364
T:
prjfp127i
168942169104169234
T:
hecfp127i
170418170651171040
T:
ecfp256i
172458172773173107
T:
ecfp256q
173072173483178103
T:
sclaus1024
175511176817178096
T:
gls1271
181620182487183175
T:
surf127eps
200290200517200764
T:
ecfp256h
229148229464230241
T:
ecfp256s
253199253565256604
T:
hecfp128i
457069457320459353
T:
ed448goldilocks
500736505545506716
T:
surf2113
588186589301590948
T:
nistp256
822920823725826121
T:
ed521gs
815247825538833175
T:
hector
853820858945864398
T:
sclaus2048
955377956027958152
T:
nist521gs
103734910426311046286
T:
claus