VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3427U; 2 x 1800MHz; hunsnivy, supercop-20250307

[Page version: 20250328 20:57:54]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
293882980530383
T:
jacfp127i
310203176732361
T:
kumjacfp127g
331023358734010
T:
prjfp127i
338813439334786
T:
hecfp127i
402224067941173
T:
jacfp128bk
483604904449584
T:
prjfp128bk
485304907549710
T:
hecfp128bk
487014914949796
T:
hecfp128i
488314946049931
T:
hecfp128fkt
485334949750474
T:
ecfp256e
516755264354058
T:
ecfp256h
536945472556253
T:
ecfp256s
573635822259877
T:
curve2251
585625999962326
T:
ecfp256q
736267493276308
T:
gls254
887348885188995
T:
kummer
950789634097475
T:
gls1271
106097106394106507
T:
gls254prot
116463116696116899
T:
kumfp127g
145119145535147680
T:
curve25519
163988164139164391
T:
kumfp128g
176445176626176804
T:
k277taa
180882181176182418
T:
k298
205642207077208357
T:
sclaus1024
209645210178210980
T:
ed448goldilocks
224830225989227403
T:
ecfp256i
232256233086233771
T:
surf127eps
257370257740258465
T:
k277mon
281154286382300858
T:
hector
306901307547309184
T:
nistp256
580850582985584905
T:
surf2113
104679210513981055870
T:
sclaus2048
109216110933251095005
T:
ed521gs
126174112638921266572
T:
nist521gs
136006113623331365002
T:
claus
Cycles to compute a shared secret
25%50%75%system
678797270473313
T:
gls254
884858851988600
T:
kummer
106213106266106380
T:
gls254prot
119217119482119788
T:
kumfp127g
124367124556124883
T:
jacfp128bk
126150126193126326
T:
kumjacfp127g
156967157320157426
T:
curve25519
157686158030158630
T:
prjfp128bk
163469163671164045
T:
hecfp128bk
167125167264167504
T:
hecfp128fkt
170604170805171014
T:
kumfp128g
176376176443176546
T:
k277taa
180689180943181441
T:
k298
190856191214193805
T:
jacfp127i
208721209039209538
T:
ecfp256e
220511220952221398
T:
ecfp256i
221769222083222582
T:
ecfp256q
224682224935225080
T:
curve2251
228552229155230058
T:
surf127eps
229972236484239895
T:
gls1271
238618238993239349
T:
prjfp127i
244726245156245647
T:
hecfp127i
254635255090255751
T:
ecfp256h
257382257664258296
T:
k277mon
267108267679272362
T:
sclaus1024
286686287121287584
T:
ecfp256s
365883366832367813
T:
hecfp128i
577689582086583237
T:
surf2113
630478631018632081
T:
ed448goldilocks
781344783038785242
T:
nistp256
928690939377964557
T:
hector
108502210866041089221
T:
ed521gs
125985212618521265849
T:
nist521gs
135504013611071373593
T:
sclaus2048
159905716019581604696
T:
claus