VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Coffee Lake (906ea); 2018 Intel Xeon E-2124; 4 x 3300MHz; r24000, supercop-20260214

[Page version: 20260319 20:29:15]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
213942238123637
T:
jacfp127i
220382282024188
T:
kumjacfp127g
250432550926943
T:
hecfp127i
245952574827323
T:
prjfp127i
284532851728598curve25519
307903190833361
T:
jacfp128bk
355593670038514
T:
prjfp128bk
366103680037457
T:
gls254
375703823039583
T:
hecfp128i
374043851440044
T:
hecfp128bk
375583859540198
T:
hecfp128fkt
386463869938745
T:
gls254prot
386083885239759
T:
curve2251
422434228942344nistp256
418684268344193
T:
ecfp256e
457004572445762
T:
k277taa
456604644348253
T:
ecfp256s
478534832249393
T:
ecfp256h
475674839950293
T:
ecfp256q
520995217452298
T:
k298
559285663156720
T:
kummer
707017073070771
T:
k277mon
708617184472705
T:
gls1271
793307942879525
T:
kumfp127g
111059111116111168
T:
kumfp128g
138033138802139615
T:
sclaus1024
152711152979153275
T:
ed448goldilocks
176710177866179090
T:
ecfp256i
182984183562184222
T:
surf127eps
245671250274262767
T:
hector
519912522208523474
T:
surf2113
656469659835661494
T:
sclaus2048
807423807927808837
T:
ed521gs
898430900056901544
T:
claus
952726953745955747
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
357693580735848
T:
gls254
385293856538607
T:
gls254prot
454314545845488
T:
k277taa
518045186051923
T:
k298
555875566656354
T:
kummer
706057063570673
T:
k277mon
806148070780786
T:
kumfp127g
827308281682901
T:
kumjacfp127g
844588462284755curve25519
877388782687912
T:
jacfp128bk
110094110232110379
T:
prjfp128bk
113413113528113649
T:
hecfp128fkt
115009115116115258
T:
hecfp128bk
115299115354115404
T:
kumfp128g
124430124526124624
T:
jacfp127i
144731144856145151
T:
curve2251
157346157476157607nistp256
159503159683159930
T:
ecfp256e
165914166059166261
T:
prjfp127i
167139167354167607
T:
ecfp256i
168170168448168788
T:
ecfp256q
169178169341169510
T:
hecfp127i
174066175837181327
T:
gls1271
176995178209178789
T:
surf127eps
177350178957179155
T:
sclaus1024
214049214230214438
T:
ecfp256h
223607223788223982
T:
ecfp256s
249836249982250232
T:
hecfp128i
465143465765467236
T:
ed448goldilocks
520269520783521462
T:
surf2113
790672793465819896
T:
hector
807982808477810168
T:
ed521gs
847379848688866655
T:
sclaus2048
952611953698955571
T:
nist521gs
103688610376471038419
T:
claus