Implementation comparison: `crypto_scalarmult/curve25519`

Operation	`crypto_scalarmult`
Primitive	`curve25519`
Description	Curve25519 scalar multiplication
Designers	Daniel J. Bernstein
Implementations	`amd64-51`	Daniel J. Bernstein Niels Duif Tanja Lange lead: Peter Schwabe Bo-Yin Yang
	`amd64-64`	Daniel J. Bernstein Niels Duif Tanja Lange lead: Peter Schwabe Bo-Yin Yang
	`athlon`	Daniel J. Bernstein
	`costigan-schwabe/cbe`	Neil Costigan (Dublin City University) Peter Schwabe (Technische Universiteit Eindhoven)
	`donna`	Adam Langley (Google)
	`donna_c64`	Adam Langley (Google)
	`neon2`	Daniel J. Bernstein Peter Schwabe
	`ref10`	D. J. Bernstein
	`ref`	Matthew Dempsky (Mochi Media)
	`rust_crypto`
	`sandy2x`	Tung Chou

Click on graph for high-resolution PDF.

Details (compiler options, compilation failures, error messages, etc.)

amd64; Zen3 (a50f00); 2021 AMD Ryzen 5 5560U; 6 x 4062MHz; beelink, supercop-20221122

amd64; Zen3 (a20f10); 2020 AMD Ryzen 9 5950X; 16 x 3400MHz; zen3, supercop-20220213

amd64; Zen3 (a50f00); 2021 AMD Ryzen 5 PRO 5650G; 6 x 3900MHz; cezanne, supercop-20230530

amd64; Zen2 (830f10); 2019 AMD EPYC 7742; 64 x 2250MHz; unstable; colossus6, supercop-20210125

amd64; Zen2 (830f10); 2019 AMD EPYC 7742; 64 x 2250MHz; rome0, supercop-20230530

amd64; Zen2 (860f01); 2022 AMD Ryzen 5 4500U; 6 x 3600MHz; renoir, supercop-20230530

amd64; Zen2 (860f81); 2021 AMD Ryzen 3 5300U; 4 x 2600MHz; lucienne, supercop-20230530

amd64; Zen2 (830f10); 2019 AMD EPYC 7742; 64 x 2250MHz; unstable; colossus7, supercop-20210125

amd64; Zen2 (830f10); 2019 AMD EPYC 7702; 64 x 2000MHz; genji346, supercop-20191017

amd64; Zen+ (800f82); 2018 AMD Ryzen 7 2700; 8 x 3200MHz; unstable; gcc68, supercop-20191221

amd64; Zen (800f11); 2017 AMD Ryzen 7 1700; 8 x 2994MHz; ryzen, supercop-20170904

amd64; Zen (800f11); 2017 AMD Ryzen 7 1700; 8 x 3000MHz; rumba7, supercop-20230530

amd64; Zen (800f11); 2017 AMD Ryzen 5 1600; 6 x 3200MHz; rumba5, supercop-20230530

amd64; Zen (800f11); 2017 AMD Ryzen 3 1200; 4 x 3100MHz; rumba3, supercop-20221122

amd64; Zen (820f01); 2020 AMD Athlon Silver 3050e; 2 x 1400MHz; dali, supercop-20221122

amd64; Zen (800f12); 2018 AMD EPYC 7371; 16 x 3100MHz; unstable; temp, supercop-20191017

amd64; Zen (800f12); 2017 AMD EPYC 7451; 48 x 2300MHz; unstable; firefly, supercop-20201130

amd64; Zen (810f10); 2018 AMD Ryzen 5 2400G; 4 x 3600MHz; unstable; gcc67, supercop-20210125

amd64; Zen (810f81); 2019 AMD Ryzen Embedded R1606G; 2 x 2600MHz; unstable; ghf51, supercop-20200702

amd64; Zen (800f12); 2017 AMD EPYC 7601; 64 x 2200MHz; unstable; genji262, supercop-20191017

amd64; Zen (800f12); 2017 AMD EPYC 7501; 32 x 2000MHz; unstable; colossus5, supercop-20210125

amd64; KnLanding (50671); 2016 Intel Xeon Phi 7250; 68 x 1400MHz; genji291, supercop-20180818

amd64; KnLanding (50671); 2016 Intel Xeon Phi 7210; 64 x 1300MHz; genji154, supercop-20170228

amd64; CascadeLake (50657); 2019 Intel Xeon Gold 6230; 40 x 2100MHz; unstable; ygritte, supercop-20200525

amd64; CascadeLake (50657); 2019 Intel Core i9-10980XE; 18 x 3000MHz; avx512imath, supercop-20210125

amd64; CascadeLake (50657); 2019 Intel Xeon Gold 6248; 20 x 2500MHz; pmnod076, supercop-20191017

amd64; CascadeLake (50657); 2019 Intel Xeon Gold 6230; 40 x 2100MHz; unstable; cel02, supercop-20201130

amd64; TigerLake (806c1); 2020 Intel Core i7-1165G7; 4 x 2800MHz; panther, supercop-20230530

amd64; TigerLake (806c1); 2020 Intel Core i7-1165G7; 4 x 2800MHz; unstable; pascalinspiron75062n1, supercop-20210125

amd64; SL+512x2 (50654); 2017 Intel Xeon Gold 6150; 18 x 2700MHz; manny1024, supercop-20170904

amd64; SL+512x2 (50654); 2017 Intel Core i7-7800X; 6 x 3500MHz; oki, supercop-20181123

amd64; SL+512x2 (50654); 2017 Intel Xeon Gold 6148; 20 x 2400MHz; pmnod003, supercop-20190910

amd64; SL+512x2 (50654); 2017 Intel Xeon Gold 6148; 40 x 2400MHz; genji548, supercop-20191017

amd64; SL+512x2 (50654); 2017 Intel Xeon Gold 6130; 32 x 2100MHz; genji239, supercop-20191017

amd64; IceLake (706e5); 2019 Intel Core i3-1035G1; 4 x 1000MHz; icelake2, supercop-20221005

amd64; IceLake (706e5); 2020 Intel Core i5-1030NG7; 4 x 1100MHz; icelake, supercop-20200826

amd64; CometLake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; cubi10, supercop-20230530

amd64; CometLake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; comet, supercop-20230530

amd64; CannonLake (60663); 2018 Intel Core i3-8121U; 2 x 2200MHz; cannon, supercop-20190910

amd64; CoffeeLake (906ea); 2018 Intel Xeon E-2124; 4 x 3300MHz; r24000, supercop-20221019

amd64; CoffeeLake (906ea); 2017 Intel Core i7-8700; 6 x 3200MHz; bitvise, supercop-20190910

amd64; KabyLake (906e9); 2017 Intel Xeon E3-1220 v6; 4 x 3000MHz; kizomba, supercop-20230530

amd64; KabyLake (806e9); 2017 Intel Core i3-7100; 2 x 2400MHz; whosthere, supercop-20221122

amd64; KabyLake (806e9); 2017 Intel Core i7-7567U; 2 x 3500MHz; unstable; intelnuci7, supercop-20211108

amd64; KabyLake (906e9); 2018 Intel Core i7-8809G; 4 x 3100MHz; intelnuci8, supercop-20191017

amd64; KabyLake (906e9); 2018 Intel Core i7-8705G; 4 x 3100MHz; unstable; sectionthirtyone, supercop-20191221

amd64; Skylake (506e3); 2015 Intel Pentium G4400; 2 x 3300MHz; sand, supercop-20171218

amd64; Skylake (506e3); 2015 Intel Xeon E3-1220 v5; 4 x 3000MHz; samba, supercop-20230530

amd64; BW+AES (406f1); 2016 Intel Xeon E5-2680 v4; 28 x 2400MHz; genji441, supercop-20180818

amd64; BW+AES (406f1); 2016 Intel Xeon E5-2680 v4; 14 x 2400MHz; manny357, supercop-20170228

amd64; BW+AES (406f1); 2016 Intel Xeon E5-2680 v4; 28 x 2400MHz; genji122, supercop-20171020

amd64; BW+AES (406f1); 2016 Intel Xeon E5-2609 v4; 8 x 1700MHz; bolero, supercop-20230530

amd64; BW+AES (306d4); 2015 Intel Core i3-5005U; 2 x 1900MHz; shoe, supercop-20230530

amd64; BW+AES (306d4); 2015 Intel Core i5-5350U; 2 x 1800MHz; unstable; luft, supercop-20200702

amd64; HW+AES (40651); 2013 Intel Core i7-4600U; 2 x 2100MHz; unstable; cryptothinkx, supercop-20170105

x86; normally amd64; HW+AES (40651); 2013 Intel Core i7-4600U; 2 x 2100MHz; unstable; cryptothinkx, supercop-20170105

amd64; HW+AES (306f2); 2014 Intel Xeon E5-2650 v3; 20 x 2300MHz; genji460, supercop-20180818

amd64; HW+AES (306f2); 2014 Intel Xeon E5-2680 v3; 24 x 2500MHz; genji202, supercop-20171020

amd64; HW+AES (306f2); 2014 Intel Xeon E5-2680 v3; 12 x 2500MHz; robin204, supercop-20170228

amd64; HW+AES (306c3); 2013 Intel Xeon E3-1220 v3; 4 x 3100MHz; hiphop, supercop-20230530

amd64; HW+AES (306c3); 2013 Intel Xeon E3-1275 V3; 4 x 3500MHz; titan0, supercop-20230530

amd64; HW+AES (306f2); 2014 Intel Xeon E5-1630 v3; 4 x 3700MHz; unstable; wyvern1, supercop-20191221

amd64; IB+AES (306e4); 2013 Intel Xeon E5-2697 v2; 12 x 2700MHz; manny613, supercop-20180818

amd64; IB+AES (306e4); 2013 Intel Core i7-4820K; 4 x 3700MHz; unstable; gsm2, supercop-20170725

amd64; IB+AES (306a9); 2012 Intel Core i5-3427U; 2 x 1800MHz; hunsnivy, supercop-20221122

amd64; IB+AES (306a9); 2012 Intel Xeon E3-1275 V2; 4 x 3500MHz; hydra8, supercop-20230530

amd64; IB+AES (306a9); 2012 Intel Xeon E3-1265L V2; 4 x 2500MHz; hedera, supercop-20210326

amd64; SB+AES (206d7); 2012 Intel Xeon E5-4650L; 8 x 2600MHz; robin281, supercop-20170228

amd64; SB+AES (206d7); 2012 Intel Xeon E5-2660; 8 x 2200MHz; unstable; gcc123, supercop-20220213

amd64; SB+AES (206d7); 2012 Intel Core i7-3820; 4 x 3600MHz; unstable; gpu, supercop-20190816

x86; normally amd64; SB+AES (206d7); 2012 Intel Core i7-3820; 4 x 3600MHz; unstable; gpu, supercop-20190816

amd64; Sandy Bridge (206a7); 2011 Intel Core i3-2310M; 2 x 2100MHz; h6sandy, supercop-20221122

amd64; Piledriver (610f01); 2012 AMD A10-5800K; 2 x 3800MHz; hydra9, supercop-20171218

x86; normally amd64; Piledriver (610f01); 2012 AMD A10-5800K; 2 x 3800MHz; hydra9, supercop-20171218

amd64; Piledriver (610f01); 2012 AMD A10-4655M; 2 x 2000MHz; h9trinity, supercop-20200618

amd64; Bulldozer (600f20); 2012 AMD FX-8350; 4 x 4000MHz; hobbes, supercop-20171218

x86; normally amd64; Bulldozer (600f20); 2012 AMD FX-8350; 4 x 4000MHz; hobbes, supercop-20171218

amd64; Bulldozer (600f20); 2012 AMD FX-8350; 4 x 4000MHz; calvin, supercop-20171218

x86; normally amd64; Bulldozer (600f20); 2012 AMD FX-8350; 4 x 4000MHz; calvin, supercop-20171218

amd64; Bulldozer (600f12); 2011 AMD FX-8120; 4 x 3100MHz; hydra6, supercop-20171218

x86; normally amd64; Bulldozer (600f12); 2011 AMD FX-8120; 4 x 3100MHz; hydra6, supercop-20171218

amd64; Bulldozer (600f20); 2012 AMD FX-8350; 4 x 4000MHz; saber214, supercop-20220506

amd64; Westmere+AES (206c2); 2010 Intel Xeon X5650; 6 x 2666MHz; unstable; devoptimis, supercop-20190910

amd64; Westmere (20652); 2010 Intel Core i5-650; 2 x 3200MHz; glyme, supercop-20170105

amd64; C2 45nm (10676); 2007 Intel Xeon X5450; 8 x 2992MHz; unstable; gcc14, supercop-20220506

amd64; C2 65nm (6f6); 2006 Intel Core 2 Duo E6400; 2 x 2137MHz; katana, supercop-20170105

x86; normally amd64; C2 65nm (6f6); 2006 Intel Core 2 Duo E6400; 2 x 2137MHz; katana, supercop-20170105

amd64; C2 65nm (6fb); 2007 Intel Core 2 Quad Q6600; 4 x 2404MHz; margaux, supercop-20221122

amd64; C2 65nm (6fb); 2007 Intel Core 2 Quad Q6600; 4 x 2394MHz; latour, supercop-20201130

amd64; K10 32nm (300f10); 2011 AMD A8-3850; 4 x 2900MHz; hydra5, supercop-20191221

amd64; K10 45nm (100fa0); 2010 AMD Phenom II X6 1100T; 6 x 3300MHz; hydra3, supercop-20171218

amd64; K10 45nm (100f42); 2009 AMD Phenom II X4 955; 4 x 3200MHz; morningstar, supercop-20170904

amd64; K10 45nm (100f63); 2010 AMD Athlon II Neo K125; 1 x 1700MHz; h3neo, supercop-20170105

x86; normally amd64; K10 45nm (100f63); 2010 AMD Athlon II Neo K125; 1 x 1700MHz; h3neo, supercop-20170105

amd64; K10 65nm (100f23); 2008 AMD Opteron 8354; 8 x 2194MHz; gcc16, supercop-20171218

x86; normally amd64; K10 65nm (100f23); 2008 AMD Opteron 8354; 8 x 2194MHz; gcc16, supercop-20171218

amd64; Tremont (906c0); 2021 Intel Celeron N5105; 4 x 2000MHz; jasper3, supercop-20221122

amd64; Tremont (906c0); 2021 Intel Pentium Silver N6000; 4 x 1100MHz; jasper, supercop-20221122

amd64; Goldmont (506c9); 2016 Intel Celeron J3455; 4 x 1500MHz; wooden, supercop-20230530

amd64; Goldmont (506f1); 2017 Intel Atom C3955; 16 x 2100MHz; scw1b63b1, supercop-20191017

amd64; Airmont (406c3); 2015 Intel Pentium N3700; 4 x 1600MHz; nucnuc, supercop-20230530

amd64; Silvermont (406c4); 2016 Intel Atom x5-Z8350; 4 x 1440MHz; cherry, supercop-20230530

amd64; K8 (40fb2); 2006 AMD Athlon 64 X2; 2 x 2000MHz; mace, supercop-20170105

x86; normally amd64; K8 (40fb2); 2006 AMD Athlon 64 X2; 2 x 2000MHz; mace, supercop-20170105

amd64; Bobcat (500f10); 2011 AMD G-T56N; 2 x 1650MHz; h8bobcat, supercop-20230530

amd64; Bobcat (500f20); 2011 AMD E-450; 2 x 1650MHz; h4e450, supercop-20200618

amd64; Atom (30661); 2011 Intel Atom D2500; 2 x 1866MHz; h8atom, supercop-20200618

ppc32; G3 (G3); 2006 IBM PowerPC Broadway; 1 x 729MHz; nintendowiilinuxngx, supercop-20191221

riscv64; U54 (sifive,u54-mc); 2017 SiFive Freedom U540; 4 x 1400MHz; hifiveunleashedriscv, supercop-20191221

riscv64; U54 (sifive,u54-mc); 2017 SiFive Freedom U540; 4 x 1000MHz; riscvunleashed000, supercop-20210326

mipso32; Octeon II (cnmips64v2); 2011 Cavium Octeon II CN6120; 2 x 2000MHz; gcc23, supercop-20230530

mipso32; Octeon II (cnmips64v2); 2011 Cavium Octeon II CN6120; 2 x 2000MHz; erpro8fsf2, supercop-20220213

armeabi; Armada (562f1311); 2010 Marvell Armada 310; 1 x 1200MHz; tonido, supercop-20170718

armeabi; Cortex-A7 (410fc075); 2016 Broadcom BCM2836; 4 x 900MHz; berry2, supercop-20230530

armeabi; Cortex-A8 (413fc082); 2012 TI Sitara XAM3359AZCZ100; 1 x 1000MHz; bblack, supercop-20221122

armeabi; Cortex-A9+NEON (412fc09a); 2011 Freescale i.MX6 Quad; 4 x 1200MHz; unstable; novena, supercop-20220506

armeabi; Cortex-A9+NEON (412fc09a); 2011 Freescale i.MX6 Quad; 4 x 1200MHz; novenablue, supercop-20200702

armeabi; Cortex-A9+NEON (413fc090); 2012 Samsung Exynos 4412?; 4 x 1200MHz; artik, supercop-20191221

armeabi; Cortex-A15 (413fc0f3); 2014 NVIDIA Tegra K1; 4 x 2065MHz; jetsontk1, supercop-20170725

armeabi; Cortex-A17 (410fc0d1); 2014 Rockchip RK3288; 4 x 1800MHz; unstable; tinkerboards, supercop-20191221

armeabi; Cortex-A17 (410fc0d1); 2014 Rockchip RK3288; 4 x 1512MHz; unstable; tinkerboard, supercop-20191221

aarch64; X-Gene (500f0000); 2014 APM 883208-X1; 8 x 1600MHz; gcc116, supercop-20171218

aarch64; Skylark (503f0002); 2018 Ampere eMAG 8180; 32 x 3300MHz; unstable; gcc185, supercop-20221122

aarch64; A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3aplus, supercop-20230530

aarch64; A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3bplus, supercop-20221122

aarch64; A53+crypto (410fd034); 2015 Amlogic S905; 4 x 2000MHz; par3, supercop-20170718

aarch64; A53+crypto (410fd034); 2016 Rockchip RK3399; 4 x 1400MHz; unstable; rockpi4, supercop-20190816

aarch64; A53+crypto (410fd034); 2017 HiSilicon Kirin 970; 8 x 1844MHz; unstable; hikey970, supercop-20191221

aarch64; A53+crypto (410fd034); 2015 NXP QorIQ LS1088; 8 x 1600MHz; ten64, supercop-20210604

aarch64; A53+crypto (410fd034); 2016 HiSilicon Kirin 960; 8 x 1844MHz; unstable; hikey960, supercop-20190816

aarch64; A53+crypto (410fd034); 2016 Amlogic S905X; 4 x 1512MHz; lepotatoamls905xcc, supercop-20191221

aarch64; A53+crypto (410fd034); 2018 NXP i.MX 8M; 4 x 1500MHz; googlecoraldev, supercop-20191221

aarch64; A53+crypto (410fd034); 2017 Rockchip RK3328; 4 x 1512MHz; renegaderocrk3328cc, supercop-20191221

aarch64; A53+crypto (410fd034); 2016 HiSilicon Kirin 960; 8 x 1844MHz; unstable; hikey960spare, supercop-20191221

aarch64; A53+crypto (410fd034); 2016 Marvell ARMADA 3720; 2 x 1000MHz; unstable; supercoplxc, supercop-20190816

aarch64; A57+crypto (418fd071); 2015 NVIDIA Tegra X1; 4 x 1734MHz; jetsontx1, supercop-20191017

aarch64; A57+crypto (411fd072); 2016 AMD Opteron A1100; 8 x 2000MHz; warbear0, supercop-20200826

aarch64; A72 (410fd083); 2019 Broadcom BCM2711; 4 x 1500MHz; pi4b, supercop-20221122

aarch64; A72 (410fd083); 2019 Broadcom BCM2711; 4 x 1500MHz; rpi4ubuntu64, supercop-20191221

aarch64; A72+crypto (418fd080); 2015 Mediatek MT8173; 2 x 2100MHz; a72, supercop-20170904

aarch64; ThunderX2 (431f0af1); 2018 Cavium ThunderX2 CN9980; 64 x 2500MHz; pmnod145, supercop-20191017

aarch64; Firestorm (610f0230); 2020 Apple M1; 4 x 3200MHz; unstable; minimac, supercop-20211108

armeabi; A53 (410fd034); 2016 Broadcom BCM2837; 4 x 1200MHz; unstable; rpi3b, supercop-20191221