VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Zen (800f11); 2017 AMD Ryzen 3 1200; 4 x 3100MHz; rumba3, supercop-20250415

[Page version: 20250817 05:21:21]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
273792779628275
T:
jacfp127i
279282834128885
T:
kumjacfp127g
310283157532276
T:
prjfp127i
317573238433042
T:
hecfp127i
362043673737310
T:
jacfp128bk
380673900640456
T:
ecfp256e
401814082142158
T:
hecfp128i
401584102042157
T:
hecfp128fkt
406564106842560
T:
curve2251
413524195342716
T:
prjfp128bk
419174237243044
T:
hecfp128bk
411134249945060
T:
ecfp256h
431224334743543
T:
gls254
432624451547038
T:
ecfp256s
447284491344935
T:
gls254prot
445494587748570
T:
ecfp256q
557695595857569
T:
k277taa
641626442664672
T:
k298
658206649567179
T:
gls1271
891568922289297
T:
k277mon
100694100937100950
T:
kummer
102828102905102996
T:
kumfp127g
134155134241134344
T:
kumfp128g
144320144344144508
T:
curve25519
155975156980158047
T:
sclaus1024
178116178985180218
T:
ecfp256i
186352187091187599
T:
surf127eps
200822200988201357
T:
ed448goldilocks
204857212401220632
T:
hector
265399267662310756
T:
nistp256
475903477835478635
T:
surf2113
761210765447768334
T:
sclaus2048
955312956852958900
T:
ed521gs
103022110324721034142
T:
claus
109199010933531098059
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
423674263842653
T:
gls254
446604483844863
T:
gls254prot
555955590457424
T:
k277taa
640446416264425
T:
k298
890658913389198
T:
k277mon
100669100682100916
T:
kummer
103964104060104157
T:
jacfp128bk
104347104447104594
T:
kumfp127g
106307106328106396
T:
kumjacfp127g
127056127206127680
T:
prjfp128bk
130179130291130409
T:
hecfp128bk
134397134485134582
T:
hecfp128fkt
138676139185141922
T:
kumfp128g
157050158807163413
T:
curve25519
159560160353161183
T:
curve2251
162480162793163409
T:
jacfp127i
162876163022163188
T:
ecfp256e
162896165877171471
T:
gls1271
172620172821173265
T:
ecfp256i
173081173181173319
T:
ecfp256q
183540183795184212
T:
surf127eps
202669202799202917
T:
ecfp256h
203366204094206685
T:
sclaus1024
204142204299204681
T:
prjfp127i
207404207682207914
T:
hecfp127i
228444228565228726
T:
ecfp256s
286022286165286493
T:
hecfp128i
468809476811477158
T:
surf2113
582878583741584621
T:
ed448goldilocks
687118691777721008
T:
nistp256
728460753966761463
T:
hector
952620954497957734
T:
ed521gs
98377710040501016084
T:
sclaus2048
109169610931581097383
T:
nist521gs
119900311995681205615
T:
claus