VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Tremont (906c0); 2021 Intel Celeron N4500; 2 x 1100MHz; jasper2, supercop-20250307

[Page version: 20250425 10:21:13]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
348963544036335
T:
jacfp127i
362753691237727
T:
kumjacfp127g
406884138342593
T:
prjfp127i
433674420445906
T:
hecfp127i
501095055851269
T:
jacfp128bk
508535152652453
T:
ecfp256e
518595200552668
T:
curve2251
522275282153406
T:
gls254
542405492156207
T:
ecfp256h
553165538855476
T:
gls254prot
559675657057947
T:
ecfp256s
598216096862993
T:
hecfp128bk
604106110162615
T:
ecfp256q
601936121862521
T:
prjfp128bk
605226176463641
T:
hecfp128i
607946183063476
T:
hecfp128fkt
676956784968020
T:
k277taa
734037434675369
T:
k298
983219856598790
T:
k277mon
99995101379102640
T:
gls1271
153532153611153720
T:
kumfp127g
219041220725220984
T:
kumfp128g
239961240605241197
T:
curve25519
258508261277262692
T:
sclaus1024
268983270982273138
T:
ecfp256i
275592277237280632
T:
surf127eps
275602279365288208
T:
hector
304175304637305366
T:
ed448goldilocks
319575319928320276
T:
kummer
341912342132342365
T:
nistp256
596494599147600699
T:
surf2113
133535413415531347376
T:
sclaus2048
171815417363471741088
T:
claus
174725317486201750921
T:
ed521gs
197523819765181978212
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
513995172252330
T:
gls254
552255528055359
T:
gls254prot
675876767567876
T:
k277taa
732317405874797
T:
k298
981399838698576
T:
k277mon
156996157087157240
T:
kumfp127g
159531159944160190
T:
kumjacfp127g
162032162621163301
T:
jacfp128bk
192996193790194275
T:
curve2251
200981202014203084
T:
prjfp128bk
204921205167205800
T:
hecfp128bk
213249214203216144
T:
hecfp128fkt
226771227004227276
T:
kumfp128g
239762240537240980
T:
curve25519
240486241049241436
T:
jacfp127i
241761245584246288
T:
gls1271
247976249069249694
T:
ecfp256e
262736264577265676
T:
ecfp256q
266755268040268972
T:
ecfp256i
270442271903275767
T:
surf127eps
312214312755313256
T:
prjfp127i
311479312975314291
T:
ecfp256h
319773320013320202
T:
kummer
322748322934323246
T:
hecfp127i
338261340772342258
T:
ecfp256s
344132345187355537
T:
sclaus1024
462456462887463788
T:
hecfp128i
588333589918595082
T:
surf2113
939763945404951452
T:
hector
100322610037531007186
T:
ed448goldilocks
118477211858981187902
T:
nistp256
174718617481921750184
T:
ed521gs
173281817511541761669
T:
sclaus2048
197380819757901978398
T:
nist521gs
202874620618642067726
T:
claus