VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Gracemont (b06a2-20); 2024 Intel Core 5 210H, E cores; 4 x 1600MHz; freshwrap,little, supercop-20260330

[Page version: 20260503 04:12:56]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
388433999241992
T:
jacfp127i
405064155943018
T:
kumjacfp127g
433014434746173
T:
prjfp127i
456644667948271
T:
hecfp127i
466614681847579
T:
curve2251
523135261352880
T:
gls254
541625424654346
T:
gls254prot
534405448755734
T:
jacfp128bk
546785545456997
T:
ecfp256e
594385952759616curve25519
603216118163443
T:
ecfp256s
614676271964379
T:
prjfp128bk
622796330464746
T:
hecfp128bk
622896335664993
T:
hecfp128fkt
625226362265008
T:
hecfp128i
641086495167105
T:
ecfp256q
707567091171384
T:
k277taa
756467591478369
T:
k298
962149637296703
T:
k277mon
981469825498373nistp256
158478158636158955
T:
kumfp127g
172187172537173084
T:
kummer
206689207307207530
T:
kumfp128g
273035274978277010
T:
ecfp256i
324866326701328640
T:
ecfp256h
338759340272345140
T:
ed448goldilocks
473091478379483637
T:
sclaus1024
182016618266311836108
T:
ed521gs
206478520742872084415
T:
nist521gs
277670127876702801297
T:
claus
308854731101923136237
T:
sclaus2048
Cycles to compute a shared secret
25%50%75%system
512055127751364
T:
gls254
540975417754272
T:
gls254prot
707227087071089
T:
k277taa
753537554575759
T:
k298
961299629096609
T:
k277mon
158132158478158962
T:
jacfp128bk
162571162876163266
T:
kumfp127g
164146164821165126
T:
kumjacfp127g
173207173481173876
T:
kummer
187082187722187929
T:
curve2251
194418194814195685
T:
prjfp128bk
201416202013202710
T:
hecfp128fkt
204721205196205816
T:
hecfp128bk
215433216856217072
T:
kumfp128g
218070218296218627curve25519
242320242982244049
T:
jacfp127i
252425253351254164
T:
ecfp256e
261073262064263052
T:
ecfp256q
262612263324264407
T:
ecfp256i
302802303659304829
T:
prjfp127i
309628311009312531
T:
hecfp127i
313213313659314401
T:
ecfp256h
355050355969357274
T:
ecfp256s
386691387104387442nistp256
442464444086445308
T:
hecfp128i
485371488530492796
T:
sclaus1024
118088911921381202705
T:
ed448goldilocks
180901018166331843539
T:
ed521gs
206399020846392129373
T:
nist521gs
277240527896452806511
T:
claus
315388932007033213752
T:
sclaus2048