VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Airmont (406c3); 2015 Intel Pentium N3700; 4 x 1600MHz; nucnuc, supercop-20250415

[Page version: 20250615 19:27:00]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
822118564488225
T:
jacfp127i
876129051993375
T:
kumjacfp127g
94186100559108984
T:
hecfp127i
94323100760108240
T:
prjfp127i
101998108990122765
T:
ecfp256e
107711110557124650
T:
curve2251
106011113572125669
T:
ecfp256h
108894116365131830
T:
ecfp256s
119046126234138741
T:
ecfp256q
139706141962144759
T:
gls254
132550143295159070
T:
jacfp128bk
135292144547168236
T:
hecfp128bk
132568144663164158
T:
prjfp128bk
135422144692168503
T:
hecfp128fkt
135702148520166315
T:
hecfp128i
184793187197188734
T:
gls1271
205900206129206287
T:
gls254prot
280394280436280532
T:
kumfp127g
287668287824288115
T:
k277taa
305831306221308651
T:
k298
422084422134422264
T:
k277mon
447277447363447471
T:
kumfp128g
448385448435448519
T:
curve25519
502492506446510276
T:
ecfp256i
550397550410550532
T:
kummer
550225560963576467
T:
hector
567719569426571394
T:
surf127eps
582763586596587997
T:
sclaus1024
615572622124624989
T:
nistp256
761079761723763189
T:
ed448goldilocks
115228111670761183878
T:
surf2113
290064129080272916583
T:
sclaus2048
365848736597503662726
T:
ed521gs
388328038875373891089
T:
claus
431256543136384315627
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
135421138100142292
T:
gls254
205653205808205972
T:
gls254prot
283319283334283443
T:
kumfp127g
286578286608286833
T:
kumjacfp127g
287537287698287732
T:
k277taa
305075305356305677
T:
k298
318850319403320205
T:
jacfp128bk
370635371023372626
T:
hecfp128bk
374926376066377261
T:
prjfp128bk
384971385524387260
T:
hecfp128fkt
421914421914421972
T:
k277mon
424553426030426340
T:
curve2251
430226436110441764
T:
gls1271
441819442219443243
T:
jacfp127i
448284448284448292
T:
curve25519
457523457571457653
T:
kumfp128g
480113480534481387
T:
ecfp256e
502349502998504052
T:
ecfp256q
503834504986506226
T:
ecfp256i
520890521233523213
T:
prjfp127i
533283533779535126
T:
hecfp127i
550282550282550303
T:
kummer
556607566453567503
T:
surf127eps
595005596143598269
T:
ecfp256h
626302627498629122
T:
ecfp256s
760152782545783628
T:
sclaus1024
808063808775813218
T:
hecfp128i
115504511695011185692
T:
surf2113
189793719072621927485
T:
hector
208131320831142085610
T:
nistp256
263477326351902636888
T:
ed448goldilocks
365743136585923659188
T:
ed521gs
380538438576393859761
T:
sclaus2048
431136343124114313488
T:
nist521gs
464144746454064647139
T:
claus