VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Tiger Lake (806c1); 2020 Intel Core i7-1165G7; 4 x 2800MHz; panther, supercop-20260217

[Page version: 20260319 20:29:15]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
205322151223284
T:
jacfp127i
219982308524859
T:
kumjacfp127g
236352486026772
T:
prjfp127i
243352554727890
T:
hecfp127i
259712610326267curve25519
298773036630961
T:
gls254
315423159931679
T:
gls254prot
320963323334756
T:
jacfp128bk
351173559636893
T:
ecfp256e
355693579937461
T:
curve2251
363603710138413
T:
ecfp256h
380323810938230
T:
k277taa
379843934441225
T:
hecfp128fkt
382293936941479
T:
hecfp128i
378433957042976
T:
prjfp128bk
381803993143155
T:
hecfp128bk
393924001441631
T:
ecfp256s
400054013340270nistp256
410734115241412
T:
k298
413194204844091
T:
ecfp256q
521565221052290
T:
kummer
549185497955055
T:
k277mon
642476503265832
T:
gls1271
801928043580776
T:
kumfp127g
117058117208117364
T:
kumfp128g
124075125068125850
T:
sclaus1024
145713146020146285
T:
ed448goldilocks
168642170662172138
T:
surf127eps
171328172532173756
T:
ecfp256i
192059198410208922
T:
hector
389292391654393434
T:
surf2113
596876600096602606
T:
sclaus2048
793896795215797301
T:
ed521gs
817425819886822554
T:
claus
955044958158963348
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
287442880828882
T:
gls254
314313148031537
T:
gls254prot
379053794337985
T:
k277taa
408214088440957
T:
k298
520985215052216
T:
kummer
548535490454959
T:
k277mon
814718167881882
T:
kumfp127g
824148258082754
T:
kumjacfp127g
829098317583479curve25519
933169351493791
T:
jacfp128bk
113052113415113786
T:
prjfp128bk
117039117288117594
T:
hecfp128fkt
118290118524118822
T:
hecfp128bk
122217122355122491
T:
kumfp128g
122251122636123009
T:
jacfp127i
139323140805141292
T:
curve2251
150778150920151096nistp256
153014153283153659
T:
prjfp127i
153960154298154709
T:
ecfp256e
156489156824157206
T:
hecfp127i
156667157762159336
T:
gls1271
158535161327161723
T:
sclaus1024
161322161817162593
T:
ecfp256i
161594161931162381
T:
ecfp256q
164763165819168655
T:
surf127eps
182294182510182757
T:
ecfp256h
220351220811221354
T:
ecfp256s
252634253005253507
T:
hecfp128i
386751388604390839
T:
surf2113
469204469652470121
T:
ed448goldilocks
653704656045659526
T:
hector
787779789851794095
T:
sclaus2048
793460794603796166
T:
ed521gs
939849944701946295
T:
claus
960597966899970957
T:
nist521gs