VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Skylake (506e3); 2015 Intel Xeon E3-1220 v5; 4 x 3000MHz; samba, supercop-20260217

[Page version: 20260319 20:29:15]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
216532191723143
T:
kumjacfp127g
223592335424584
T:
jacfp127i
243222462726070
T:
prjfp127i
251062561126997
T:
hecfp127i
277982798228127curve25519
300113029531423
T:
jacfp128bk
354703681138734
T:
prjfp128bk
366063684437292
T:
gls254
365373747338979
T:
hecfp128i
367613790639488
T:
hecfp128bk
377013868739827
T:
hecfp128fkt
386493869238741
T:
gls254prot
392233941140275
T:
curve2251
415684232943884
T:
ecfp256e
422924233842395nistp256
456714570145742
T:
k277taa
455084631048316
T:
ecfp256s
461374712949381
T:
ecfp256h
464974721049293
T:
ecfp256q
526885279152931
T:
k298
565165662856798
T:
kummer
706857072670774
T:
k277mon
708167194573122
T:
gls1271
792817938079493
T:
kumfp127g
111251111296111351
T:
kumfp128g
137813138732139299
T:
sclaus1024
152404152623152901
T:
ed448goldilocks
177099178645180903
T:
ecfp256i
181470182206182955
T:
surf127eps
245805257466276821
T:
hector
521090522979526572
T:
surf2113
658728662500677889
T:
sclaus2048
807654808166814580
T:
ed521gs
898691900568907137
T:
claus
951664952708959919
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
357543578935825
T:
gls254
385513858438621
T:
gls254prot
454384547045500
T:
k277taa
525555260752678
T:
k298
554695553555600
T:
kummer
705927063170673
T:
k277mon
806098069680792
T:
kumfp127g
827108279182873
T:
kumjacfp127g
839608408884203curve25519
876248770187813
T:
jacfp128bk
110084110191110386
T:
prjfp128bk
113969114094114278
T:
hecfp128fkt
115524115575115632
T:
kumfp128g
115486115644115856
T:
hecfp128bk
124409124499124618
T:
jacfp127i
145762145930146101
T:
curve2251
156834157041157250nistp256
159250159477159814
T:
ecfp256e
165659165816166039
T:
prjfp127i
166578166878167333
T:
ecfp256q
166983167244167546
T:
ecfp256i
169097169264169505
T:
hecfp127i
172567173428175289
T:
gls1271
177539178008178880
T:
surf127eps
175958179825180169
T:
sclaus1024
214044214208214454
T:
ecfp256h
223277223468223831
T:
ecfp256s
251430251658252040
T:
hecfp128i
464970465369467146
T:
ed448goldilocks
519452521177523721
T:
surf2113
792736803002833579
T:
hector
807920808387813970
T:
ed521gs
849171852915858071
T:
sclaus2048
951199952352958739
T:
nist521gs
103258710383411043434
T:
claus