VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3427U; 2 x 1800MHz; hunsnivy, supercop-20260831

[Page version: 20260925 12:52:33]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
301533065031168
T:
jacfp127i
306973126732034
T:
kumjacfp127g
339803446034981
T:
prjfp127i
369083764038360
T:
hecfp127i
411034171942252
T:
jacfp128bk
460084609146302curve25519
485304928250629
T:
ecfp256e
491444963550144
T:
prjfp128bk
510675191152541
T:
hecfp128fkt
511225202752671
T:
hecfp128bk
511825202852839
T:
hecfp128i
553705689659245
T:
ecfp256s
568815777759475
T:
ecfp256q
61243?66314?77049?
T:
curve2251
740657536376704
T:
gls254
788087889679098nistp256
887628890289108
T:
kummer
117322117502117948
T:
kumfp127g
119612119689120009
T:
gls254prot
165254165572166288
T:
kumfp128g
174633175360176176
T:
k277taa
181943182600183547
T:
k298
204414206147207265
T:
sclaus1024
207036207247207533
T:
ed448goldilocks
225890227278228519
T:
ecfp256i
232730233752234758
T:
surf127eps
257753258649259047
T:
k277mon
258192259918261582
T:
ecfp256h
276197282513292822
T:
hector
588683590982593657
T:
surf2113
103931410452761049331
T:
sclaus2048
108359410862591089571
T:
ed521gs
131593313206671324309
T:
nist521gs
135600713578521361981
T:
claus
Cycles to compute a shared secret
25%50%75%system
692176997271032
T:
gls254
885718867588820
T:
kummer
118941119119119567
T:
kumfp127g
119441119488119682
T:
gls254prot
124424124569125194
T:
jacfp128bk
127895127967128254
T:
kumjacfp127g
149365149800150179curve25519
159272159446160072
T:
prjfp128bk
164107164409165100
T:
hecfp128fkt
166042166270166715
T:
hecfp128bk
170753171104171858
T:
kumfp128g
174516175127175555
T:
k277taa
181726182328182944
T:
k298
191562192493193649
T:
jacfp127i
206234206492206899
T:
ecfp256e
216482216774217193
T:
ecfp256q
216691217058217912
T:
ecfp256i
223547224761226288
T:
curve2251
228620229376230356
T:
surf127eps
238728239076239863
T:
prjfp127i
247132247537248323
T:
hecfp127i
248603248848249175
T:
ecfp256h
257280257698258493
T:
k277mon
269812274256274817
T:
sclaus1024
282104282333282677
T:
ecfp256s
300048300692300938nistp256
366196367708369165
T:
hecfp128i
576436584992585903
T:
surf2113
626110626397627999
T:
ed448goldilocks
908303911197925485
T:
hector
108166110827061085643
T:
ed521gs
131506313186791322442
T:
nist521gs
136320113694791373407
T:
sclaus2048
160060616074921608927
T:
claus