VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Xeon E3-1275 V2; 4 x 3500MHz; hydra8, supercop-20260217

[Page version: 20260313 02:51:11]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
308953172234250
T:
kumjacfp127g
323923362935268
T:
jacfp127i
366733768138806
T:
prjfp127i
405124213044182
T:
hecfp127i
437704488046093
T:
jacfp128bk
484014849248568curve25519
483454896651168
T:
ecfp256e
508635193154692
T:
hecfp128i
520915316154658
T:
hecfp128fkt
526725368354586
T:
hecfp128bk
528195368556422
T:
ecfp256h
537655552557796
T:
prjfp128bk
560445712461566
T:
ecfp256q
556825787663552
T:
ecfp256s
574485809661887
T:
curve2251
740417508076181
T:
gls254
787587883778927nistp256
886598868888728
T:
kummer
951859644897513
T:
gls1271
112999113055113132
T:
gls254prot
115862116180116411
T:
kumfp127g
164861165024165188
T:
kumfp128g
173562173674173830
T:
k277taa
181679181793182389
T:
k298
205081206384207400
T:
sclaus1024
209147209556210011
T:
ed448goldilocks
226520227913229523
T:
ecfp256i
234822235832236677
T:
surf127eps
255383255457255693
T:
k277mon
281781289546300662
T:
hector
580075582627586151
T:
surf2113
104374810491971054952
T:
sclaus2048
111249911137651122049
T:
ed521gs
128681412882721296711
T:
nist521gs
137466913779541386136
T:
claus
Cycles to compute a shared secret
25%50%75%system
698257101871651
T:
gls254
884318847488510
T:
kummer
112927112962113013
T:
gls254prot
118040118497119668
T:
kumfp127g
124800124905125090
T:
jacfp128bk
127817127926128033
T:
kumjacfp127g
159410159585159852
T:
prjfp128bk
163515163675163853
T:
hecfp128fkt
165276165412165664
T:
hecfp128bk
168594168696168886curve25519
170666171018171309
T:
kumfp128g
173372173507173602
T:
k277taa
181409181490181673
T:
k298
190684190992192235
T:
jacfp127i
206396206686207135
T:
ecfp256e
214978215290215784
T:
ecfp256q
217105217391217685
T:
ecfp256i
221052223516225073
T:
curve2251
232281232826233602
T:
surf127eps
235840237787238865
T:
gls1271
238922239233239697
T:
prjfp127i
246972247297247747
T:
hecfp127i
255305255411255478
T:
k277mon
267826269863274867
T:
sclaus1024
271373271525271824
T:
ecfp256h
281907282272282760
T:
ecfp256s
298692299609300708nistp256
365355365613366350
T:
hecfp128i
575984578201581516
T:
surf2113
635911636140638732
T:
ed448goldilocks
905701914776928145
T:
hector
112363011241821130779
T:
ed521gs
128672012879271295327
T:
nist521gs
138513213951991402366
T:
sclaus2048
161856816291111638507
T:
claus