VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Zen 4 (a70f41); 2023 AMD Ryzen 5 7640HS; 6 x 4300MHz; phoenix, supercop-20260217

[Page version: 20260221 06:44:44]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
222022398127212
T:
kumjacfp127g
242592583227840
T:
jacfp127i
264802648726500curve25519
275092919831229
T:
prjfp127i
288213074133710
T:
jacfp128bk
291583076232362
T:
hecfp127i
316633180331837
T:
gls254prot
325033289133251
T:
gls254
316703370937501
T:
ecfp256e
326993478037785
T:
prjfp128bk
330333503938322
T:
hecfp128fkt
341793613540942
T:
curve2251
349563688342709
T:
ecfp256s
355373745939674
T:
hecfp128bk
362473825940477
T:
hecfp128i
406804072640805nistp256
37578?40997?47765?
T:
ecfp256q
425024254542593
T:
kummer
425574261642668
T:
k277taa
485194862850200
T:
k298
601136012960296
T:
k277mon
790517912179194
T:
kumfp127g
104067104131104215
T:
kumfp128g
125247126188126902
T:
sclaus1024
139286139821140235
T:
surf127eps
143926144646145711
T:
ecfp256i
157179157466158044
T:
ed448goldilocks
163604164476165552
T:
ecfp256h
159993165407173978
T:
hector
322826324307324976
T:
surf2113
591886595000596352
T:
sclaus2048
675136676308677893
T:
ed521gs
827846829730831344
T:
claus
880131883174894806
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
297172988929983
T:
gls254
316923175231790
T:
gls254prot
425164254142583
T:
k277taa
425064255742562
T:
kummer
483724844348510
T:
k298
600696009760279
T:
k277mon
788797896879278
T:
jacfp128bk
813678145781458
T:
kumfp127g
822468227782290
T:
kumjacfp127g
879238792389054curve25519
938749410894511
T:
prjfp128bk
973989746497564
T:
hecfp128fkt
984499865998777
T:
hecfp128bk
108835108849108869
T:
kumfp128g
120490120523120577
T:
jacfp127i
129266129393129496
T:
ecfp256e
132509135104136462
T:
curve2251
136735136885136907
T:
ecfp256i
136459137140137266
T:
surf127eps
138864138937139007
T:
ecfp256q
150031150129150214
T:
prjfp127i
153055153143153234
T:
hecfp127i
153907154122154220nistp256
155644155722155744
T:
ecfp256h
158697158995161869
T:
sclaus1024
192963193053193145
T:
ecfp256s
210395210548210971
T:
hecfp128i
318576322521323284
T:
surf2113
510802515459522224
T:
ed448goldilocks
571592575937578397
T:
hector
669942672395673469
T:
ed521gs
771608775196777418
T:
sclaus2048
880127881303891885
T:
nist521gs
953638954421957164
T:
claus