VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Kaby Lake (906e9); 2017 Intel Xeon E3-1220 v6; 4 x 3000MHz; kizomba, supercop-20260217

[Page version: 20260319 20:29:15]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
217152261824097
T:
kumjacfp127g
219282300724285
T:
jacfp127i
245602549427280
T:
prjfp127i
277752786427943curve25519
272392848930300
T:
hecfp127i
296362995431100
T:
jacfp128bk
355103676338508
T:
prjfp128bk
366533691137453
T:
gls254
374483798839350
T:
hecfp128i
378333853839975
T:
hecfp128bk
386093865538704
T:
gls254prot
387753893839866
T:
curve2251
382453925740350
T:
hecfp128fkt
421394220642264nistp256
421234300944296
T:
ecfp256e
445224526547391
T:
ecfp256s
456864571445749
T:
k277taa
466704750249676
T:
ecfp256q
477624825149454
T:
ecfp256h
518135188752013
T:
k298
706807072070762
T:
k277mon
702477107971931
T:
gls1271
596397117071249
T:
kummer
793007939879505
T:
kumfp127g
111023111073111129
T:
kumfp128g
138596139994151757
T:
sclaus1024
153356153621153964
T:
ed448goldilocks
176734178130179687
T:
ecfp256i
183007183796184632
T:
surf127eps
246526251716264946
T:
hector
520388522862525578
T:
surf2113
656588660106663657
T:
sclaus2048
807246807769813927
T:
ed521gs
899483902219908626
T:
claus
951287952820959883
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
357333577435816
T:
gls254
385173855438586
T:
gls254prot
454264545645480
T:
k277taa
515795165151731
T:
k298
555185557155629
T:
kummer
705957062870664
T:
k277mon
806548077580956
T:
kumfp127g
827318281582924
T:
kumjacfp127g
844078458284717curve25519
886948876288858
T:
jacfp128bk
110070110186110351
T:
prjfp128bk
114086114216114376
T:
hecfp128fkt
115021115119115263
T:
hecfp128bk
115297115350115407
T:
kumfp128g
124458124534124637
T:
jacfp127i
144696145779145982
T:
curve2251
157301157449157578nistp256
159341159580159931
T:
ecfp256e
165877166055166323
T:
prjfp127i
166924167219167519
T:
ecfp256i
166989167267167760
T:
ecfp256q
169034169648172883
T:
hecfp127i
170320172000174693
T:
gls1271
175893176372197437
T:
sclaus1024
179700180057180619
T:
surf127eps
213965214120214351
T:
ecfp256h
222191222391222794
T:
ecfp256s
249825249973250298
T:
hecfp128i
465950468570473254
T:
ed448goldilocks
518949520509523543
T:
surf2113
803459806028813599
T:
hector
807572808047813708
T:
ed521gs
848881855561864034
T:
sclaus2048
951121952705959463
T:
nist521gs
103629110412021045748
T:
claus