VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Kaby Lake (906e9); 2017 Intel Xeon E3-1220 v6; 4 x 3000MHz; kizomba, supercop-20250307

[Page version: 20250328 20:57:54]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
231692430227091
T:
jacfp127i
234092430926224
T:
kumjacfp127g
245302525228560
T:
prjfp127i
251942642029918
T:
hecfp127i
313993257435203
T:
jacfp128bk
367823718040268
T:
gls254
355443724439250
T:
prjfp128bk
374963851639666
T:
hecfp128i
368303866841794
T:
hecfp128bk
387443880139754
T:
gls254prot
384983901045982
T:
curve2251
383304051644365
T:
hecfp128fkt
419944329346983
T:
ecfp256e
426584381848955
T:
ecfp256h
457404579151974
T:
k277taa
445874587351143
T:
ecfp256s
469604924254925
T:
ecfp256q
505085071056893
T:
k298
525815398258938
T:
kummer
693577082372579
T:
gls1271
714077149677750
T:
k277mon
795428076886147
T:
kumfp127g
111182112078118391
T:
kumfp128g
125273125582132167
T:
curve25519
136709138565150096
T:
sclaus1024
153581159373169853
T:
ed448goldilocks
178236184110196325
T:
ecfp256i
183918190633203439
T:
surf127eps
238125244605258119
T:
nistp256
259316276089293260
T:
hector
518685533254547923
T:
surf2113
665643681986709883
T:
sclaus2048
844752858703890385
T:
ed521gs
99511610090911045657
T:
nist521gs
99811910148931051391
T:
claus
Cycles to compute a shared secret
25%50%75%system
356493569735792
T:
gls254
384883853038601
T:
gls254prot
454684550248686
T:
k277taa
500495016454047
T:
k298
536895389054004
T:
kummer
711317120177411
T:
k277mon
810738130287798
T:
kumfp127g
828338295386192
T:
kumjacfp127g
884278860398825
T:
jacfp128bk
108579108831115470
T:
prjfp128bk
111960112127119728
T:
hecfp128bk
115950116133122391
T:
hecfp128fkt
115532117070124998
T:
kumfp128g
124597125032134375
T:
jacfp127i
135234135613142341
T:
curve25519
143131148101157379
T:
curve2251
159729166181179537
T:
ecfp256e
166286170365183385
T:
prjfp127i
167439171470187264
T:
hecfp127i
170204173728187682
T:
ecfp256q
170635177105189649
T:
ecfp256i
173989177471183260
T:
gls1271
176308180794194218
T:
sclaus1024
177188184047194486
T:
surf127eps
194260200891214871
T:
ecfp256h
226619234031248088
T:
ecfp256s
248470251614268911
T:
hecfp128i
471565483800503064
T:
ed448goldilocks
518936531341547230
T:
surf2113
621603635296657765
T:
nistp256
839074854782884581
T:
ed521gs
878502898069921448
T:
hector
877236900857921565
T:
sclaus2048
98705210054671027155
T:
claus
99700410139501037113
T:
nist521gs