VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Skylake (506e3); 2015 Intel Core i5-6500T; 4 x 2500MHz; thinksky, supercop-20261018

[Page version: 20261107 07:58:40]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
208282151922499
T:
jacfp127i
221852300423941
T:
kumjacfp127g
237142457226133
T:
prjfp127i
271532725927373curve25519
264322739428749
T:
hecfp127i
292673011931538
T:
jacfp128bk
350763589136887
T:
prjfp128bk
362203639736754
T:
gls254
364783723838475
T:
hecfp128i
370223793939732
T:
hecfp128fkt
382733832138370
T:
gls254prot
384943869339652
T:
curve2251
380063891440339
T:
hecfp128bk
410104163542570
T:
ecfp256e
438074384943909nistp256
442244504046441
T:
ecfp256s
456714569845736
T:
k277taa
459094666548137
T:
ecfp256q
518205189252047
T:
k298
528345289552972
T:
kummer
690916913369190
T:
k277mon
797877993480032
T:
kumfp127g
111536111619111718
T:
kumfp128g
135688136714137366
T:
sclaus1024
151523152176153169
T:
ed448goldilocks
175053176050177157
T:
ecfp256i
181026181751182388
T:
surf127eps
201215202438203603
T:
ecfp256h
244494252011269197
T:
hector
501665503954505626
T:
surf2113
651722654884656696
T:
sclaus2048
792566793949795719
T:
ed521gs
894714895799897099
T:
claus
947321947740948379
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
355823562235655
T:
gls254
381593819638238
T:
gls254prot
454314545945495
T:
k277taa
516175167251741
T:
k298
525985266752748
T:
kummer
690076904969106
T:
k277mon
810508133581443
T:
kumfp127g
824678265282839curve25519
827878288282979
T:
kumjacfp127g
879128799988107
T:
jacfp128bk
109514109642109799
T:
prjfp128bk
113534113651113800
T:
hecfp128fkt
115081115268115511
T:
hecfp128bk
115914115998116082
T:
kumfp128g
124515124604124709
T:
jacfp127i
143953144172145206
T:
curve2251
156422156639156905nistp256
158576158864159196
T:
ecfp256e
165543165741165988
T:
ecfp256i
165794165943166153
T:
prjfp127i
167048167349167694
T:
ecfp256q
168882169024169213
T:
hecfp127i
176998178008178688
T:
sclaus1024
176492178092178628
T:
surf127eps
191802192043192391
T:
ecfp256h
221956222136222391
T:
ecfp256s
246519246768247099
T:
hecfp128i
457273457701458185
T:
ed448goldilocks
500685502024503643
T:
surf2113
786460788902798310
T:
hector
790196790918792369
T:
ed521gs
842123851223866326
T:
sclaus2048
947058947553948136
T:
nist521gs
103261510338711036452
T:
claus