VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Skylake (506e3); 2015 Intel Core i5-6500T; 4 x 2500MHz; thinksky, supercop-20260217

[Page version: 20260319 20:29:15]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
207502097821838
T:
jacfp127i
214822167022509
T:
kumjacfp127g
239992483126148
T:
prjfp127i
250842535826487
T:
hecfp127i
278712793228005curve25519
301363096832115
T:
jacfp128bk
346143496436115
T:
prjfp128bk
360543621436505
T:
gls254
360143692938209
T:
hecfp128bk
362893714038371
T:
hecfp128i
369453789439172
T:
hecfp128fkt
383563844238681
T:
gls254prot
384873865639456
T:
curve2251
411694185943116
T:
ecfp256e
438114384943900nistp256
456714570145741
T:
k277taa
453604615947869
T:
ecfp256s
462044703348640
T:
ecfp256q
517195177651890
T:
k298
528455291052994
T:
kummer
690606912569192
T:
k277mon
796767992480013
T:
kumfp127g
111545111677112239
T:
kumfp128g
135381136474137165
T:
sclaus1024
151328151645151972
T:
ed448goldilocks
176270177471178645
T:
ecfp256i
181182181835182432
T:
surf127eps
202625203770205071
T:
ecfp256h
240818247528261268
T:
hector
500175502752505046
T:
surf2113
650799653804656007
T:
sclaus2048
791297792744794282
T:
ed521gs
894275895729897294
T:
claus
947474948186948864
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
353633540035442
T:
gls254
382723830738339
T:
gls254prot
454484547345508
T:
k277taa
515725161751667
T:
k298
526015266252724
T:
kummer
689866902369070
T:
k277mon
808968130281418
T:
kumfp127g
827968288382977
T:
kumjacfp127g
837018380783925curve25519
878658795988052
T:
jacfp128bk
107919108012108142
T:
prjfp128bk
112580112690112816
T:
hecfp128fkt
115104115250115414
T:
hecfp128bk
115975116079117228
T:
kumfp128g
124157124247124359
T:
jacfp127i
145102145364149301
T:
curve2251
156382156588156863nistp256
158751158997159257
T:
ecfp256e
165819165946166113
T:
prjfp127i
166567166870167236
T:
ecfp256q
166903167174167526
T:
ecfp256i
168558168722168911
T:
hecfp127i
172433176643176854
T:
sclaus1024
176356177922178539
T:
surf127eps
193736193924194104
T:
ecfp256h
223220223426223697
T:
ecfp256s
246422246683246926
T:
hecfp128i
457148457544457981
T:
ed448goldilocks
484557498501501032
T:
surf2113
790550790870791700
T:
ed521gs
789510796919799932
T:
hector
851887854676866840
T:
sclaus2048
947213948091948826
T:
nist521gs
102768810289251033091
T:
claus