VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Zen 2 (830f10); 2019 AMD EPYC 7742; 64 x 2250MHz; rome0, supercop-20260217

[Page version: 20260221 06:44:44]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
268362694027093curve25519
25944?27883?38061?
T:
jacfp127i
314523350836314
T:
kumjacfp127g
31343?41853?48589?
T:
prjfp127i
397514229645323
T:
prjfp128bk
402834233144440
T:
hecfp128bk
404464267048522
T:
curve2251
429384302744112nistp256
432084369144849
T:
gls254
440594407544117
T:
gls254prot
40804?45412?52494?
T:
ecfp256h
40945?45642?53471?
T:
ecfp256e
41045?46023?55265?
T:
ecfp256s
458364797850241
T:
hecfp127i
38069?49013?53774?
T:
jacfp128bk
46749?52616?61184?
T:
ecfp256q
541565418354219
T:
k277taa
42855?55614?58869?
T:
hecfp128i
543285692059027
T:
hecfp128fkt
595935969859855
T:
kummer
605406143562714
T:
gls1271
624776269464769
T:
k298
831908325583322
T:
kumfp127g
852328523585243
T:
k277mon
109936110090111958
T:
kumfp128g
129284130166130904
T:
sclaus1024
144252144775145228
T:
surf127eps
153504154453155513
T:
ecfp256i
156946157527160042
T:
ed448goldilocks
208206213235226325
T:
hector
469773472431473463
T:
surf2113
650362653261655011
T:
sclaus2048
814833818708835667
T:
ed521gs
850498852820854935
T:
claus
918897919160919715
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
414024167941681
T:
gls254
439964400444030
T:
gls254prot
541385415354166
T:
k277taa
595025963463866
T:
kummer
623986243062563
T:
k298
841788462584643
T:
kumfp127g
847698497691093
T:
jacfp128bk
852138521685216
T:
k277mon
853008538886613
T:
kumjacfp127g
927589287994618curve25519
100389100544104306
T:
prjfp128bk
104073104290108665
T:
hecfp128fkt
105877108730112169
T:
hecfp128bk
114521114694114997
T:
kumfp128g
128748128902130636
T:
jacfp127i
139202139268139376
T:
ecfp256e
141153141503141704
T:
surf127eps
145058145215145536
T:
ecfp256i
147228147330147433
T:
ecfp256q
149900150462151532
T:
gls1271
157568158060158105
T:
curve2251
160245160667167554
T:
prjfp127i
164548164718173089
T:
hecfp127i
166755166989169790
T:
sclaus1024
169100169139169241
T:
ecfp256h
204156204263204302
T:
ecfp256s
226271226843229359
T:
hecfp128i
239984241275242596nistp256
471755472035472460
T:
surf2113
472372473195473824
T:
ed448goldilocks
719575729720739843
T:
hector
813044813930817060
T:
ed521gs
839745840679842797
T:
sclaus2048
915269915705916759
T:
nist521gs
976746981267981895
T:
claus