VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Haswell+AES (306c3); 2013 Intel Core i7-4765T; 4 x 2000MHz; prodesk, supercop-20260330

[Page version: 20260503 04:12:56]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
303453091431431
T:
jacfp127i
330583367034199
T:
kumjacfp127g
332823415535274
T:
prjfp127i
366833784938924
T:
hecfp127i
390883995641026
T:
jacfp128bk
414184203644495
T:
curve2251
446074532247478
T:
ecfp256e
448044534245922
T:
gls254
453564552545694curve25519
470404818349274
T:
prjfp128bk
477924910850768
T:
hecfp128fkt
494084948249536
T:
gls254prot
487984968650772
T:
hecfp128bk
497905097952356
T:
hecfp128i
507145257455931
T:
ecfp256s
529285417858167
T:
ecfp256q
632276331963503
T:
k277taa
691156925069348
T:
kummer
714827156971739
T:
k298
755787565075740nistp256
953079543495562
T:
k277mon
110782110923111087
T:
kumfp127g
157462157577158527
T:
kumfp128g
166917168265168910
T:
sclaus1024
174620174941175849
T:
ed448goldilocks
209793211037212325
T:
ecfp256i
212803213631214352
T:
surf127eps
239786240994242470
T:
ecfp256h
251646258906270292
T:
hector
531089533884538120
T:
surf2113
833738836715838449
T:
sclaus2048
102925110317481036666
T:
ed521gs
111035611120061114492
T:
claus
117675911784121181813
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
407814106142035
T:
gls254
492524929849371
T:
gls254prot
631016317363325
T:
k277taa
690356912369197
T:
kummer
712987136371428
T:
k298
952649535895502
T:
k277mon
112235112404112512
T:
kumfp127g
112760112851112952
T:
jacfp128bk
120403120520120703
T:
kumjacfp127g
141883142086142289
T:
prjfp128bk
147225147495151916
T:
hecfp128fkt
149246149396149592
T:
hecfp128bk
159918160324162012curve25519
160205160550160858
T:
curve2251
162783162900163293
T:
kumfp128g
186217186463186736
T:
jacfp127i
192682192777192905
T:
ecfp256e
198326198483198701
T:
ecfp256q
200865201030201251
T:
ecfp256i
206014207670208228
T:
surf127eps
219931222010223650
T:
sclaus1024
227788228152228593
T:
prjfp127i
230688230834231086
T:
ecfp256h
231385231592231899
T:
hecfp127i
254806254966255176
T:
ecfp256s
296741296816297242nistp256
325522325780326081
T:
hecfp128i
529551532969537185
T:
surf2113
534958535138535367
T:
ed448goldilocks
856329877614879240
T:
hector
102883710306431035938
T:
ed521gs
111106511138001116458
T:
sclaus2048
117626511780911181066
T:
nist521gs
129747312990641301552
T:
claus