VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Haswell+AES (306c3); 2013 Intel Core i7-4770; 4 x 3400MHz; speed2supercop, supercop-20251222

[Page version: 20260114 05:57:55]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
264723098432868
T:
jacfp127i
28632?33688?37300?
T:
kumjacfp127g
310563548436844
T:
hecfp127i
358404014041436
T:
jacfp128bk
37984?40772?73585?
T:
prjfp127i
417444212043608
T:
curve2251
444084497646200
T:
ecfp256e
449044500845600curve25519
451324571646428
T:
gls254
448764847249764
T:
hecfp128bk
437684866050068
T:
hecfp128fkt
479204869252096
T:
ecfp256s
417404872851624
T:
prjfp128bk
492604947649628
T:
gls254prot
516405266855508
T:
ecfp256q
465605404856668
T:
hecfp128i
633166336063420
T:
k277taa
683286848868572
T:
kummer
716407172071828
T:
k298
754767559675716nistp256
953329539695484
T:
k277mon
110728110836110972
T:
kumfp127g
157416157836158000
T:
kumfp128g
166760167856168744
T:
sclaus1024
173976174308174496
T:
ed448goldilocks
209676210592212164
T:
ecfp256i
212824213752215092
T:
surf127eps
239628240848242264
T:
ecfp256h
261524268908280924
T:
hector
531992534656543504
T:
surf2113
830924836572838492
T:
sclaus2048
103512010362681040224
T:
ed521gs
111090011122321113880
T:
claus
117780011791561183412
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
394004091641600
T:
gls254
490804918849240
T:
gls254prot
632966335263396
T:
k277taa
682446840868460
T:
kummer
714287151671604
T:
k298
952289528095324
T:
k277mon
112336112424112552
T:
kumfp127g
113112113204113328
T:
jacfp128bk
120472120556120628
T:
kumjacfp127g
139084139244139428
T:
prjfp128bk
145096145288145532
T:
hecfp128bk
150396150536150684
T:
hecfp128fkt
156916158584159936curve25519
158720158956159612
T:
curve2251
162716163080163212
T:
kumfp128g
185916186376196924
T:
jacfp127i
193308193480193660
T:
ecfp256e
200700200852201096
T:
ecfp256q
204572204724204884
T:
ecfp256i
207700208248209128
T:
surf127eps
221264221516223832
T:
sclaus1024
225284?225888?638248?
T:
prjfp127i
229732230004230232
T:
hecfp127i
234236234312234448
T:
ecfp256h
257344257504257708
T:
ecfp256s
294468294552294644nistp256
326068326340326748
T:
hecfp128i
528448531168543912
T:
surf2113
534952535160535368
T:
ed448goldilocks
854304855008864528
T:
hector
103466810353041039592
T:
ed521gs
109469611028641106448
T:
sclaus2048
117734011785721182792
T:
nist521gs
129813212998921308456
T:
claus