VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Tremont (906c0); 2021 Intel Celeron N5105; 4 x 2000MHz; jasper3, supercop-20250307

[Page version: 20250328 20:57:54]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
366663754738704
T:
jacfp127i
373653835639805
T:
kumjacfp127g
425754398245705
T:
prjfp127i
454534683849281
T:
hecfp127i
497445009851714
T:
curve2251
501685082852527
T:
ecfp256e
505895187352934
T:
jacfp128bk
526235306353498
T:
gls254
552215528055381
T:
gls254prot
549855562457868
T:
ecfp256h
564475717059167
T:
ecfp256s
605076142263724
T:
ecfp256q
611126283565279
T:
hecfp128i
614476288965058
T:
prjfp128bk
616456333566402
T:
hecfp128bk
633976482867020
T:
hecfp128fkt
675956777068141
T:
k277taa
734797515976664
T:
k298
983489851698635
T:
k277mon
9822099450100510
T:
gls1271
153488153885154221
T:
kumfp127g
219049220110220771
T:
kumfp128g
241471241644241930
T:
curve25519
260419261978263311
T:
sclaus1024
268905271055273235
T:
ecfp256i
268389277550287770
T:
hector
276465278419280820
T:
surf127eps
304192304826305523
T:
ed448goldilocks
319714320047320701
T:
kummer
340200340643342271
T:
nistp256
596808599553601838
T:
surf2113
133169913391061342900
T:
sclaus2048
173681117421871756708
T:
claus
174318517448831746373
T:
ed521gs
197231919751161978084
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
514535185452224
T:
gls254
551275518655251
T:
gls254prot
674896756467639
T:
k277taa
737447497875923
T:
k298
983529847598726
T:
k277mon
156629157321157765
T:
kumfp127g
158769159813160781
T:
jacfp128bk
159718160032160343
T:
kumjacfp127g
192478193197193929
T:
curve2251
201977202700203764
T:
prjfp128bk
205891206617207334
T:
hecfp128bk
213006214848215596
T:
hecfp128fkt
227183227489227945
T:
kumfp128g
240464240708241079
T:
jacfp127i
241404241529241699
T:
curve25519
238740242480248475
T:
gls1271
246615247198248135
T:
ecfp256e
264559265584266803
T:
ecfp256i
267918268431269190
T:
ecfp256q
269879272556273942
T:
surf127eps
309682310664311876
T:
ecfp256h
312074312546313794
T:
prjfp127i
319540319772320553
T:
kummer
321273322142322663
T:
hecfp127i
340582342098343332
T:
ecfp256s
347641349296353651
T:
sclaus1024
461872462501463265
T:
hecfp128i
595983598221599377
T:
surf2113
940391943767949609
T:
hector
100352110041491007518
T:
ed448goldilocks
117714811789371179629
T:
nistp256
174363917449041746406
T:
ed521gs
175677017636951781677
T:
sclaus2048
196851119724641978770
T:
nist521gs
203196220721052094504
T:
claus