VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Zen (820f01); 2020 AMD Athlon Silver 3050e; 2 x 1400MHz; dali, supercop-20250307

[Page version: 20250328 20:57:54]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
262332681627485
T:
jacfp127i
262802714428084
T:
kumjacfp127g
301163073431446
T:
prjfp127i
307473140132267
T:
hecfp127i
351893584936596
T:
jacfp128bk
369543777439433
T:
ecfp256e
387803951940613
T:
prjfp128bk
387893963440663
T:
hecfp128fkt
389193963640846
T:
hecfp128bk
391894002840948
T:
hecfp128i
404614107642847
T:
curve2251
399624153144342
T:
ecfp256h
422044359746497
T:
ecfp256s
434494375144141
T:
gls254
444954467844697
T:
gls254prot
435124483347939
T:
ecfp256q
559075615056178
T:
k277taa
645876478065231
T:
k298
647486558166225
T:
gls1271
897528981889858
T:
k277mon
101699101768101852
T:
kumfp127g
105295105723105757
T:
kummer
132975133060133260
T:
kumfp128g
144534144544144576
T:
curve25519
155743156753157515
T:
sclaus1024
177194178095179396
T:
ecfp256i
186524187110187817
T:
surf127eps
202110202679202922
T:
ed448goldilocks
210721212077230331
T:
hector
273069273362274109
T:
nistp256
454386456510457148
T:
surf2113
760058763607766240
T:
sclaus2048
923510927274930276
T:
ed521gs
101989910222861024711
T:
claus
110557411079651110630
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
422974231242343
T:
gls254
444264456144618
T:
gls254prot
558385604356131
T:
k277taa
644406457564718
T:
k298
897818978189783
T:
k277mon
103658103688103888
T:
jacfp128bk
104513104549104617
T:
kumfp127g
105795105804105813
T:
kummer
106261106289106302
T:
kumjacfp127g
126052126113126172
T:
prjfp128bk
129222129404129597
T:
hecfp128bk
134205134367134521
T:
hecfp128fkt
139144139158139771
T:
kumfp128g
157253157500159018
T:
curve25519
160433160819161463
T:
curve2251
162154162241162982
T:
jacfp127i
162950163028163123
T:
ecfp256e
161945163636164501
T:
gls1271
172514172701172987
T:
ecfp256i
173169173237173563
T:
ecfp256q
182497183184183650
T:
surf127eps
201176201476202127
T:
sclaus1024
203290204015204203
T:
prjfp127i
204493204610204760
T:
ecfp256h
207008207128207288
T:
hecfp127i
228642228720229010
T:
ecfp256s
285468285703286071
T:
hecfp128i
442280455033455473
T:
surf2113
590977591239592364
T:
ed448goldilocks
672604673182673516
T:
nistp256
724240728346740853
T:
hector
925776928259931556
T:
ed521gs
98599310010881011727
T:
sclaus2048
110549511079511111252
T:
nist521gs
117430511833861184782
T:
claus