VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Zen 2 (860f81); 2021 AMD Ryzen 3 5300U; 4 x 2600MHz; lucienne, supercop-20260217

[Page version: 20260319 20:29:15]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
208462197924274
T:
jacfp127i
228662406626123
T:
kumjacfp127g
242362565227620
T:
prjfp127i
248882625928272
T:
hecfp127i
267682694626994curve25519
307563219533892
T:
jacfp128bk
341233500637330
T:
ecfp256e
335513517037067
T:
prjfp128bk
347803601737932
T:
hecfp128fkt
349003621638376
T:
hecfp128bk
348633636039902
T:
ecfp256h
350803641238026
T:
hecfp128i
373933894742923
T:
ecfp256s
401364083042860
T:
curve2251
393414092545254
T:
ecfp256q
429154298043052nistp256
439704399644000
T:
gls254prot
436764415344419
T:
gls254
538025382853833
T:
k277taa
600396013860178
T:
kummer
597016036260961
T:
gls1271
627416277762935
T:
k298
831768322683277
T:
kumfp127g
859808598286001
T:
k277mon
110009110104110172
T:
kumfp128g
128507129570130434
T:
sclaus1024
144225144953145512
T:
surf127eps
153688154680155696
T:
ecfp256i
156272156938157469
T:
ed448goldilocks
208264213494232732
T:
hector
470432472144473364
T:
surf2113
648721651306654661
T:
sclaus2048
814816817559819073
T:
ed521gs
850274853172856688
T:
claus
914759916003917507
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
416684167541712
T:
gls254
439224392343930
T:
gls254prot
537435374553821
T:
k277taa
590315903159593
T:
kummer
626226266262696
T:
k298
839688404484309
T:
kumfp127g
847718480184887
T:
jacfp128bk
854348596386041
T:
kumjacfp127g
859298598386013
T:
k277mon
938149466294678curve25519
100298100380100457
T:
prjfp128bk
104684104781104849
T:
hecfp128fkt
105584105712105813
T:
hecfp128bk
114703114842114982
T:
kumfp128g
128850128992129254
T:
jacfp127i
139135139183139368
T:
ecfp256e
140972141435141897
T:
surf127eps
145043145082145164
T:
ecfp256i
147036147140147169
T:
ecfp256q
149290149541152515
T:
gls1271
156570157911157970
T:
curve2251
160222160338160584
T:
prjfp127i
164671164725164815
T:
hecfp127i
165828165920166698
T:
sclaus1024
166034167154167212nistp256
168682168859169004
T:
ecfp256h
204316204347204483
T:
ecfp256s
225762225882226255
T:
hecfp128i
468232469981471712
T:
surf2113
472606473668474437
T:
ed448goldilocks
729631732467742560
T:
hector
813330813727814474
T:
ed521gs
844127845962847304
T:
sclaus2048
914813916228917489
T:
nist521gs
976632981561991449
T:
claus