VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Haswell+AES (306c3); 2013 Intel Core i7-4765T; 4 x 2000MHz; prodesk, supercop-20241022

[Page version: 20241120 00:41:13]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
290562990031544
T:
jacfp127i
319323240432788
T:
kumjacfp127g
341363464035200
T:
prjfp127i
346843533236108
T:
hecfp127i
406484178843008
T:
jacfp128bk
423924299645120
T:
curve2251
452364604446852
T:
gls254
465284755649224
T:
ecfp256e
468604775650032
T:
hecfp128fkt
480324892450064
T:
prjfp128bk
490204906449108
T:
gls254prot
484284992453500
T:
ecfp256h
497605071251324
T:
hecfp128i
502565116852020
T:
hecfp128bk
506325226455232
T:
ecfp256s
540925611659416
T:
ecfp256q
622526233262424
T:
k277taa
670806795268012
T:
kummer
701007037670980
T:
k298
884208950490228
T:
gls1271
950969516495284
T:
k277mon
110904111052111184
T:
kumfp127g
144432144504144916
T:
curve25519
157320157484157548
T:
kumfp128g
174924175128175432
T:
ed448goldilocks
210812211808213208
T:
ecfp256i
213564214412215444
T:
surf127eps
216736218936220588
T:
sclaus1024
254644258068274808
T:
hector
291572291852292360
T:
nistp256
540764543280544296
T:
surf2113
102272010238001025332
T:
ed521gs
111408811237881129816
T:
sclaus2048
121315212152561217248
T:
nist521gs
153731215406721550464
T:
claus
Cycles to compute a shared secret
25%50%75%system
404724072841748
T:
gls254
489364896849008
T:
gls254prot
621326221662280
T:
k277taa
669766781267904
T:
kummer
698486994870312
T:
k298
949769502495208
T:
k277mon
112356112488112940
T:
kumfp127g
113572113652113764
T:
jacfp128bk
119880120016120252
T:
kumjacfp127g
141048141360146700
T:
prjfp128bk
145928146060146232
T:
hecfp128bk
151112151296151436
T:
hecfp128fkt
156004156116156292
T:
curve25519
159952160412160628
T:
curve2251
162936162988163028
T:
kumfp128g
185932186064186256
T:
jacfp127i
194232194312194416
T:
ecfp256e
201284201460201656
T:
ecfp256q
205360205592205840
T:
ecfp256i
207492208168208976
T:
surf127eps
205276213252213840
T:
gls1271
218064221200222920
T:
sclaus1024
226012226292226812
T:
prjfp127i
229032229284229580
T:
hecfp127i
235348235476235628
T:
ecfp256h
259188259328259544
T:
ecfp256s
325612325828326080
T:
hecfp128i
533784538004541832
T:
surf2113
539228539368539560
T:
ed448goldilocks
756116756700757348
T:
nistp256
889868897892903076
T:
hector
960820961236962212
T:
claus
102239610233241024996
T:
ed521gs
109828411241201134256
T:
sclaus2048
121220412140761216320
T:
nist521gs