VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Kaby Lake (906e9); 2017 Intel Xeon E3-1220 v6; 4 x 3000MHz; kizomba, supercop-20251222

[Page version: 20260114 05:57:55]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
220242301524178
T:
jacfp127i
227852386225223
T:
kumjacfp127g
259252698128836
T:
prjfp127i
268292758629423
T:
hecfp127i
278122788027975curve25519
309443177133004
T:
jacfp128bk
352633561236402
T:
prjfp128bk
366323685137288
T:
gls254
386263867438720
T:
gls254prot
388913907939879
T:
curve2251
379433908841035
T:
hecfp128fkt
378163912040899
T:
hecfp128bk
386473942040391
T:
hecfp128i
422474229642366nistp256
418164263143581
T:
ecfp256e
456974572245741
T:
k277taa
460154671548444
T:
ecfp256s
464174708548598
T:
ecfp256h
468144758049275
T:
ecfp256q
523845250552658
T:
k298
565485662756708
T:
kummer
695987065671327
T:
gls1271
706937072270768
T:
k277mon
804818053380597
T:
kumfp127g
111073111122111180
T:
kumfp128g
137269138389150122
T:
sclaus1024
152955153271153608
T:
ed448goldilocks
175817176736177921
T:
ecfp256i
182141182836183511
T:
surf127eps
244896247645259350
T:
hector
515914517922519248
T:
surf2113
657679660197699919
T:
sclaus2048
806669807159807893
T:
ed521gs
898524899741901466
T:
claus
952672953111953854
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
357623580135836
T:
gls254
385353857338619
T:
gls254prot
454344546445501
T:
k277taa
522005227852362
T:
k298
555195556155645
T:
kummer
706047064270679
T:
k277mon
817148177181847
T:
kumfp127g
829818307483164
T:
kumjacfp127g
844788462584758curve25519
889208901689120
T:
jacfp128bk
107452107565107758
T:
prjfp128bk
112369112513112692
T:
hecfp128bk
115338115390115443
T:
kumfp128g
116410116601116782
T:
hecfp128fkt
124141124263124372
T:
jacfp127i
144680144862145028
T:
curve2251
157267157405157540nistp256
160206160567160828
T:
ecfp256e
165395165592165867
T:
prjfp127i
167491167663167873
T:
hecfp127i
169060169271169574
T:
ecfp256i
170145170431170791
T:
ecfp256q
174036177532178085
T:
gls1271
177549177987178848
T:
surf127eps
177500178103196044
T:
sclaus1024
217371217492217747
T:
ecfp256h
227838228005228289
T:
ecfp256s
251859252091252496
T:
hecfp128i
465238465818466358
T:
ed448goldilocks
516395517200518063
T:
surf2113
795482806032813392
T:
hector
807333807755808451
T:
ed521gs
847982849818920069
T:
sclaus2048
952315952705953477
T:
nist521gs
102874410302081036696
T:
claus