VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Zen 5 (b00f21); 2024 AMD EPYC 9555; 64 x 3200MHz; tripwire, supercop-20261004

[Page version: 20261009 01:11:50]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
194631952119580curve25519
23640?26264?30416?
T:
jacfp127i
261852923532464
T:
kumjacfp127g
269943009933376
T:
prjfp127i
280473042233473
T:
jacfp128bk
285553054734647
T:
ecfp256e
309203096831015nistp256
27376?31174?34382?
T:
hecfp127i
335313558439139
T:
hecfp128fkt
332153576339898
T:
prjfp128bk
33716?36190?42348?
T:
ecfp256q
373993768538200
T:
gls254
372453827841650
T:
curve2251
354783912242173
T:
hecfp128bk
34599?39128?48063?
T:
ecfp256s
392003929639374
T:
gls254prot
381404020942396
T:
hecfp128i
440754415144586
T:
k277taa
483894846149820
T:
k298
510145104051087
T:
kummer
609956114261282
T:
k277mon
635246358563647
T:
kumfp127g
795397967379776
T:
kumfp128g
113106113481113863
T:
surf127eps
116888117569118153
T:
sclaus1024
123270124027124947
T:
ecfp256i
141549142248143055
T:
ecfp256h
143485145919154762
T:
hector
153235153732154866
T:
ed448goldilocks
293470294610295630
T:
surf2113
557062557786558533
T:
ed521gs
628793632259635029
T:
sclaus2048
736696736999737487
T:
nist521gs
773178775055777003
T:
claus
Cycles to compute a shared secret
25%50%75%system
356753570735727
T:
gls254
391663922039246
T:
gls254prot
439734400944066
T:
k277taa
481764821348259
T:
k298
509995101451029
T:
kummer
609666109161218
T:
k277mon
642576431464367
T:
kumfp127g
644726462464845
T:
jacfp128bk
654466566165668curve25519
656446570665763
T:
kumjacfp127g
765907674076898
T:
hecfp128fkt
774317756677739
T:
hecfp128bk
834138351683591
T:
kumfp128g
956179573595838
T:
jacfp127i
108952109049109179
T:
ecfp256e
109628109721109830
T:
surf127eps
114778114873115670
T:
prjfp127i
114884115308115487
T:
ecfp256i
118097118233119570nistp256
118113118254119126
T:
hecfp127i
119308119414119549
T:
ecfp256q
133900134012134150
T:
ecfp256h
143946144085144288
T:
prjfp128bk
153190153338153825
T:
sclaus1024
153993154196154401
T:
curve2251
164170164426165048
T:
hecfp128i
169541169659169835
T:
ecfp256s
291625292057292430
T:
surf2113
418215418916419626
T:
ed448goldilocks
497959507189512531
T:
hector
556237556759557282
T:
ed521gs
736294736542736833
T:
nist521gs
817494820077824864
T:
sclaus2048
893395897501899514
T:
claus