VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Coffee Lake (906ea); 2018 Intel Xeon E-2124; 4 x 3300MHz; r24000, supercop-20250415

[Page version: 20250506 12:42:45]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
221182311324242
T:
jacfp127i
234982441425609
T:
kumjacfp127g
250442643727642
T:
hecfp127i
270712792329204
T:
prjfp127i
314203247633742
T:
jacfp128bk
356503674738601
T:
prjfp128bk
366093684537628
T:
gls254
368583783739687
T:
hecfp128fkt
384173863839425
T:
curve2251
386403867738708
T:
gls254prot
378653895740417
T:
hecfp128i
383213943441575
T:
hecfp128bk
418164258244037
T:
ecfp256e
457174575045800
T:
k277taa
457734656048043
T:
ecfp256s
458964664349045
T:
ecfp256h
476444836149838
T:
ecfp256q
520655213752244
T:
k298
557575648156567
T:
kummer
707157074970785
T:
k277mon
706477140672549
T:
gls1271
804848053880605
T:
kumfp127g
111045111105111304
T:
kumfp128g
125208125447125643
T:
curve25519
137063138173148804
T:
sclaus1024
153538153766154064
T:
ed448goldilocks
176366177179178281
T:
ecfp256i
181773182446183115
T:
surf127eps
227541227773228284
T:
nistp256
245054255976267244
T:
hector
525303527688529580
T:
surf2113
655456658092659944
T:
sclaus2048
806490807326808887
T:
ed521gs
900386901703903631
T:
claus
954972956033957084
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
357883581435852
T:
gls254
385493858338623
T:
gls254prot
454634548945518
T:
k277taa
518635192051983
T:
k298
554905558356364
T:
kummer
706207066370698
T:
k277mon
817058177481856
T:
kumfp127g
829348301283095
T:
kumjacfp127g
882198829388423
T:
jacfp128bk
109179109300109475
T:
prjfp128bk
112351112460112584
T:
hecfp128bk
115235115293115367
T:
kumfp128g
116500116614116732
T:
hecfp128fkt
124152124241124361
T:
jacfp127i
134671135014135299
T:
curve25519
143816144151145597
T:
curve2251
159982160222160448
T:
ecfp256e
165129165298165511
T:
prjfp127i
167684167881168036
T:
hecfp127i
169390169639169899
T:
ecfp256i
171109171389171718
T:
ecfp256q
175042175932176929
T:
gls1271
176986177538178229
T:
surf127eps
175159181094195934
T:
sclaus1024
217123217254217382
T:
ecfp256h
227748227933228138
T:
ecfp256s
249937250128250330
T:
hecfp128i
464995465494465965
T:
ed448goldilocks
518573521976526371
T:
surf2113
588919589188589501
T:
nistp256
799836804262806071
T:
hector
807605808566809385
T:
ed521gs
858155866127868630
T:
sclaus2048
954252954901956033
T:
nist521gs
103018310340611036378
T:
claus