VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Coffee Lake (806ea); 2018 Intel Core i3-8109U; 2 x 3000MHz; like, supercop-20260217

[Page version: 20260319 20:29:15]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
215482192623366
T:
kumjacfp127g
228792409925869
T:
jacfp127i
280072807328132curve25519
271992867131237
T:
prjfp127i
277712935631552
T:
hecfp127i
315783291034785
T:
jacfp128bk
366423687937232
T:
gls254
367313815140298
T:
prjfp128bk
385803862438666
T:
gls254prot
378113889140550
T:
hecfp128i
394083953440635
T:
curve2251
390774007641353
T:
hecfp128bk
391334008041244
T:
hecfp128fkt
410164165943123
T:
ecfp256e
441324416644215nistp256
444524528347205
T:
ecfp256s
463124674046787
T:
k277taa
461784693148959
T:
ecfp256q
515835195652664
T:
k298
526305280652915
T:
kummer
691276925870705
T:
k277mon
798268003280609
T:
kumfp127g
112129113993114135
T:
kumfp128g
136480137449138211
T:
sclaus1024
151179151412151680
T:
ed448goldilocks
176341177459178711
T:
ecfp256i
182713185618186867
T:
surf127eps
204335205500206731
T:
ecfp256h
242284247586259088
T:
hector
502891506568509290
T:
surf2113
655277659629662243
T:
sclaus2048
792481793891795512
T:
ed521gs
893807896848900864
T:
claus
951806952914955812
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
357063574535786
T:
gls254
382463846338521
T:
gls254prot
460074646946517
T:
k277taa
513675168752383
T:
k298
528845301453115
T:
kummer
690496910570475
T:
k277mon
811838141181870
T:
kumfp127g
831558377383912
T:
kumjacfp127g
842978435784430curve25519
885058925489371
T:
jacfp128bk
110328111508111675
T:
prjfp128bk
113914115143115320
T:
hecfp128fkt
116915117026117170
T:
hecfp128bk
116457118178118351
T:
kumfp128g
124761125726125912
T:
jacfp127i
143902145873146359
T:
curve2251
157709157894158111nistp256
160205160410160672
T:
ecfp256e
165859166914167246
T:
prjfp127i
166240167280167623
T:
ecfp256i
168813169063169359
T:
ecfp256q
169406170701170882
T:
hecfp127i
174785176617177708
T:
sclaus1024
179400182771183348
T:
surf127eps
195327195522195736
T:
ecfp256h
225173225382225605
T:
ecfp256s
249146252608252890
T:
hecfp128i
457577457900458305
T:
ed448goldilocks
502919505015507169
T:
surf2113
790492791029795357
T:
ed521gs
804553811203814258
T:
hector
840595864548877080
T:
sclaus2048
951839952483955426
T:
nist521gs
103061510350951040372
T:
claus