VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3210M; 2 x 2500MHz; h9ivy, supercop-20260330

[Page version: 20260503 04:12:56]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
297973025430740
T:
jacfp127i
310613144231963
T:
kumjacfp127g
349003536535918
T:
hecfp127i
345873544536411
T:
prjfp127i
409154153942261
T:
jacfp128bk
478964798048057curve25519
478174824748693
T:
prjfp128bk
485654925350258
T:
ecfp256e
502575100752126
T:
hecfp128fkt
508085166552650
T:
hecfp128i
510025180852947
T:
hecfp128bk
525365351355937
T:
ecfp256s
566455866461929
T:
ecfp256q
582155979261293
T:
curve2251
742967547576808
T:
gls254
788707895879053nistp256
886838871088745
T:
kummer
117226117320117442
T:
kumfp127g
119614119706120018
T:
gls254prot
165088165186165274
T:
kumfp128g
174227175181175262
T:
k277taa
181830181924182699
T:
k298
205293206677209260
T:
sclaus1024
207244207564207886
T:
ed448goldilocks
227738230138232498
T:
ecfp256i
232636233790235278
T:
surf127eps
257323257329257583
T:
k277mon
258496260013262681
T:
ecfp256h
275939284607296150
T:
hector
587696590017592113
T:
surf2113
103675910426431045494
T:
sclaus2048
108298710852391090380
T:
ed521gs
131504013159421321246
T:
nist521gs
135511613570921358560
T:
claus
Cycles to compute a shared secret
25%50%75%system
695087017570390
T:
gls254
884128843588481
T:
kummer
118845118936119046
T:
kumfp127g
119446119487119844
T:
gls254prot
123498123596123738
T:
jacfp128bk
127819127910127984
T:
kumjacfp127g
157393157535157728
T:
prjfp128bk
163459163592163793
T:
hecfp128fkt
164826164978165169
T:
hecfp128bk
168706168826168914curve25519
170642170804171005
T:
kumfp128g
173689175022175097
T:
k277taa
181563181631181763
T:
k298
190830190945191287
T:
jacfp127i
205785206043206418
T:
ecfp256e
215263215565215978
T:
ecfp256q
216710216949217305
T:
ecfp256i
222584223844224817
T:
curve2251
230057230834232188
T:
surf127eps
238977239277239638
T:
prjfp127i
246424246711247078
T:
hecfp127i
248702248953249234
T:
ecfp256h
257246257308258733
T:
k277mon
274337275226275881
T:
sclaus1024
279415279652279973
T:
ecfp256s
299570300695301123nistp256
365761366012366363
T:
hecfp128i
581904587206588895
T:
surf2113
626162626589627200
T:
ed448goldilocks
898326905596929168
T:
hector
108176510836511086768
T:
ed521gs
131465613154711319249
T:
nist521gs
136146513791781389128
T:
sclaus2048
159697216036451611664
T:
claus