VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

General information:	Introduction	eBASH	eBASC	eBAEAD	eBATS	SUPERCOP	XBX	Computers	Arch

How to submit new software:	Tips	hash	stream	aead	dh	kem	encrypt	sign

List of primitives measured:	lwc	sha3	hash	stream	lwc	caesar	aead	dh	kem	encrypt	sign

Measurements indexed by machine:	lwc	sha3	hash	stream	lwc	caesar	aead	dh	kem	encrypt	sign

List of subroutines:	verify	decode	encode	sort	core	hashblocks	scalarmult

List of public-key Diffie–Hellman secret-sharing systems measured

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page lists the public-key Diffie–Hellman secret-sharing systems covered by SUPERCOP. The page then lists implementations of these systems.

There is a separate page that lists machines and, for each machine, the measurements of these systems.

Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.

Which Diffie–Hellman systems are measured?

Primitive	Description	Designers
`claus`	Classic Diffie–Hellman secret sharing modulo a 1024-bit prime	Example for eBATS
`curve2251`	Elliptic-curve Diffie–Hellman secret sharing using a curve over a field with 2^251 elements	Pierrick Gaudry (Laboratoire Lorrain de Recherche en Informatique et ses Applications) Emmanuel Thomé (Laboratoire Lorrain de Recherche en Informatique et ses Applications)
`curve25519`	Elliptic-curve Diffie–Hellman secret sharing using the curve y^2=x^3+486662x^2+x modulo 2^255-19	Daniel J. Bernstein
`ecfp256e`	Elliptic-curve Diffie–Hellman secret sharing using the twisted Edwards curve -x^2+y^2=1+dx^2y^2 modulo 2^256-587, where d= 59702978421801250797625733354188749104239349061620892363256064453045589344976	Huseyin Hisil
`ecfp256h`	Elliptic-curve Diffie–Hellman secret sharing using the Hessian curve x^3+y^3+1=53010xy modulo 2^256-587	Huseyin Hisil
`ecfp256i`	Elliptic-curve Diffie–Hellman secret sharing using the Jacobi intersection s^2+c^2=1, 3764s^2+d^2=1 modulo 2^256-587	Huseyin Hisil
`ecfp256q`	Elliptic-curve Diffie–Hellman secret sharing using the twisted Jacobi quartic curve y^2=11x^4-x^2+1 modulo 2^256-587	Huseyin Hisil
`ecfp256s`	Elliptic-curve Diffie–Hellman secret sharing using the short Weierstrass curve y^2=x^3-3x+11 modulo 2^256-587	Huseyin Hisil
`ed448goldilocks`	Ed448-Goldilocks sign and dh	Mike Hamburg
`ed521gs`
`gls254`	Elliptic-curve Diffie–Hellman secret sharing using the GLS binary curve (L^2 + LZ + aZ^2)X^2 = X^4 + bZ^4 defined over GF(2^254) and implemented with lambda-projective coordinates (X, L, Z).	Thomaz Oliveira, Computer Science Department, CINVESTAV-IPN, Mexico Julio López, Institute of Computing, University of Campinas, Brazil Diego de Freitas Aranha, Department of Computer Science, University of Brasília, Brazil Francisco Rodríguez-Henríquez, Computer Science Department, CINVESTAV-IPN, Mexico
`gls1271`	Galbraith, Lin, Scott: Elliptic-curve Diffie–Hellman secret sharing using (in ref3) a twist of the curve y^2=x^3-3x+44 over a field with (2^127-1)^2 elements; or (in ref4) a twist of the Edwards curve x^2+y^2=x^2y^2+42 over a field with (2^127-1)^2 elements	Michael Scott
`gls254prot`	Elliptic-curve Diffie–Hellman secret sharing using the GLS binary curve (L^2 + LZ + aZ^2)X^2 = X^4 + bZ^4 defined over GF(2^254) and implemented with lambda-projective coordinates (X, L, Z).	Thomaz Oliveira, Computer Science Department, CINVESTAV-IPN, Mexico Julio López, Institute of Computing, University of Campinas, Brazil Diego de Freitas Aranha, Department of Computer Science, University of Brasília, Brazil Francisco Rodríguez-Henríquez, Computer Science Department, CINVESTAV-IPN, Mexico
`hecfp127i`
`hecfp128bk`
`hecfp128fkt`
`hecfp128i`
`hecfp61e2bk`
`hecfp61e2i`
`hecfp64e2bk`
`hecfp64e2i`
`hector`	Hyperelliptic Curve with Two-Rank One: Diffie–Hellman secret sharing using a genus-2 hyperelliptic curve of 2-rank 1 over a field of size 2^113	Peter Birkner (Technische Universiteit Eindhoven) Peter Schwabe (Technische Universiteit Eindhoven)
`jacfp127i`
`jacfp128bk`
`k298`	Elliptic-curve Diffie–Hellman secret sharing using a Koblitz curve defined over the field F_2^298	Thomaz Oliveira, Cinvestav-IPN Julio López, University of Campinas Francisco Rodríguez-Henríquez, Cinvestav-IPN
`k277mon`	Elliptic-curve Diffie–Hellman secret sharing using a Koblitz curve defined over the field F_2^277 (Montgomery ladder scalar multiplication)	Thomaz Oliveira, Cinvestav-IPN Julio López, University of Campinas Francisco Rodríguez-Henríquez, Cinvestav-IPN
`k277taa`	Elliptic-curve Diffie–Hellman secret sharing using a Koblitz curve defined over the field F_2^277 (tau-and-add scalar multiplication)	Thomaz Oliveira, Cinvestav-IPN Julio López, University of Campinas Francisco Rodríguez-Henríquez, Cinvestav-IPN
`kumfp127g`
`kumfp128g`
`kumfp61e2g`
`kumfp64e2g`
`kumjacfp127g`
`kummer`
`nist521gs`
`nistp256`	Elliptic-curve Diffie–Hellman secret sharing using the standard NIST P-256 elliptic curve, a curve modulo the prime 2^256-2^224+2^192+2^96-1	Yassir Nawaz (University of Waterloo) Guang Gong (University of Waterloo)
`prjfp127i`
`prjfp128bk`
`sclaus1024`	Variant of CLAUS, using 160-bit exponents and 1024-bit modulus	Wei Dai
`sclaus2048`	Variant of CLAUS, using 224-bit exponents and 2048-bit modulus	Wei Dai
`surf2113`	Hyperelliptic-curve Diffie–Hellman secret sharing using a genus-2 curve over a field with 2^113 elements	Pierrick Gaudry (Laboratoire Lorrain de Recherche en Informatique et ses Applications) Emmanuel Thomé (Laboratoire Lorrain de Recherche en Informatique et ses Applications)
`surf127eps`	Hyperelliptic-curve Diffie–Hellman secret sharing using a genus-2 curve with complex multiplication by Q(i sqrt(5+sqrt(53))) modulo the prime 2^127-735	Pierrick Gaudry (Laboratoire Lorrain de Recherche en Informatique et ses Applications) Thomas Houtmann (École Polytechnique) Emmanuel Thomé (École Polytechnique)

Implementations

Primitive	Implementation	Authors
`claus`	`cryptopp`	Wei Dai (wrapper around Crypto++)
`claus`	`gmp`	Daniel J. Bernstein (wrapper around GMP)
`claus`	`ntl`	Daniel J. Bernstein (wrapper around NTL)
`claus`	`openssl`	Daniel J. Bernstein (wrapper around OpenSSL)
`claus`	`opensslnew`	Daniel J. Bernstein (wrapper around OpenSSL)
`curve2251`	`mpfq`	Pierrick Gaudry, Laboratoire Lorrain de Recherche en Informatique et ses Applications Emmanuel Thomé, Laboratoire Lorrain de Recherche en Informatique et ses Applications
`curve2251`	`relic/amd64-avx`	Diego de Freitas Aranha, Department of Computer Science, University of Brasília, Brazil Jonathan Taverne, Université de Lyon, Université Lyon1, ISFA, France Armando Faz-Hernández, Computer Science Department, CINVESTAV-IPN, Mexico Francisco Rodríguez-Henríquez, Computer Science Department, CINVESTAV-IPN, Mexico Darrel Hankerson, Auburn University, USA Julio López, Institute of Computing, University of Campinas, Brazil
`curve2251`	`relic/amd64-clmul`	Diego de Freitas Aranha, Department of Computer Science, University of Brasília, Brazil Jonathan Taverne, Université de Lyon, Université Lyon1, ISFA, France Armando Faz-Hernández, Computer Science Department, CINVESTAV-IPN, Mexico Francisco Rodríguez-Henríquez, Computer Science Department, CINVESTAV-IPN, Mexico Darrel Hankerson, Auburn University, USA Julio López, Institute of Computing, University of Campinas, Brazil
`curve2251`	`relic/amd64-ssse3`	Diego de Freitas Aranha, Department of Computer Science, University of Brasília, Brazil Julio López, Institute of Computing, University of Campinas, Brazil Darrel Hankerson, Auburn University, USA
`curve25519`	`mpfq`	Pierrick Gaudry, Laboratoire Lorrain de Recherche en Informatique et ses Applications Emmanuel Thomé, Laboratoire Lorrain de Recherche en Informatique et ses Applications
`curve25519`	`ref`	Daniel J. Bernstein (wrapper around crypto_scalarmult/curve25519)
`ecfp256e`	`v01/var`	Huseyin Hisil
`ecfp256e`	`v01/w8s1`	Huseyin Hisil
`ecfp256e`	`v01/w8s2`	Huseyin Hisil
`ecfp256e`	`v01/w8s4`	Huseyin Hisil
`ecfp256e`	`v01/w8s8`	Huseyin Hisil
`ecfp256h`	`v01/var`	Huseyin Hisil
`ecfp256h`	`v01/w8s1`	Huseyin Hisil
`ecfp256h`	`v01/w8s2`	Huseyin Hisil
`ecfp256h`	`v01/w8s4`	Huseyin Hisil
`ecfp256h`	`v01/w8s8`	Huseyin Hisil
`ecfp256i`	`v01/var`	Huseyin Hisil
`ecfp256i`	`v01/w8s1`	Huseyin Hisil
`ecfp256i`	`v01/w8s2`	Huseyin Hisil
`ecfp256i`	`v01/w8s4`	Huseyin Hisil
`ecfp256i`	`v01/w8s8`	Huseyin Hisil
`ecfp256q`	`v01/var`	Huseyin Hisil
`ecfp256q`	`v01/w8s1`	Huseyin Hisil
`ecfp256q`	`v01/w8s2`	Huseyin Hisil
`ecfp256q`	`v01/w8s4`	Huseyin Hisil
`ecfp256q`	`v01/w8s8`	Huseyin Hisil
`ecfp256s`	`v01/var`	Huseyin Hisil
`ecfp256s`	`v01/w8s1`	Huseyin Hisil
`ecfp256s`	`v01/w8s2`	Huseyin Hisil
`ecfp256s`	`v01/w8s4`	Huseyin Hisil
`ecfp256s`	`v01/w8s8`	Huseyin Hisil
`ed448goldilocks`	`32`
`ed448goldilocks`	`64`
`ed448goldilocks`	`amd64`
`ed448goldilocks`	`arm32`
`ed448goldilocks`	`neon`
`ed521gs`	`ref`
`gls254`	`opt`
`gls254`	`prot`	Thomaz Oliveira, Computer Science Department, CINVESTAV-IPN, Mexico Julio López, Institute of Computing, University of Campinas, Brazil Diego de Freitas Aranha, Department of Computer Science, University of Brasília, Brazil Francisco Rodríguez-Henríquez, Computer Science Department, CINVESTAV-IPN, Mexico
`gls254`	`ref`	Thomaz Oliveira, Computer Science Department, CINVESTAV-IPN, Mexico Julio López, Institute of Computing, University of Campinas, Brazil Diego de Freitas Aranha, Department of Computer Science, University of Brasília, Brazil Francisco Rodríguez-Henríquez, Computer Science Department, CINVESTAV-IPN, Mexico
`gls1271`	`ref4`	Michael Scott, Dublin City University
`gls254prot`	`opt`
`gls254prot`	`prot`	Thomaz Oliveira, Computer Science Department, CINVESTAV-IPN, Mexico Julio López, Institute of Computing, University of Campinas, Brazil Diego de Freitas Aranha, Department of Computer Science, University of Brasília, Brazil Francisco Rodríguez-Henríquez, Computer Science Department, CINVESTAV-IPN, Mexico
`hecfp127i`	`v02/var`
`hecfp127i`	`v02/w8s01`
`hecfp127i`	`v02/w8s02`
`hecfp127i`	`v02/w8s04`
`hecfp127i`	`v02/w8s08`
`hecfp127i`	`v02/w8s16`
`hecfp127i`	`v02/w8s32`
`hecfp128bk`	`v02/varglv4`
`hecfp128bk`	`v02/w8s01glv4`
`hecfp128bk`	`v02/w8s02glv4`
`hecfp128bk`	`v02/w8s04glv4`
`hecfp128bk`	`v02/w8s08glv4`
`hecfp128bk`	`v02/w8s16glv4`
`hecfp128bk`	`v02/w8s32glv4`
`hecfp128fkt`	`v02/varglv4`
`hecfp128fkt`	`v02/w8s01glv4`
`hecfp128fkt`	`v02/w8s02glv4`
`hecfp128fkt`	`v02/w8s04glv4`
`hecfp128fkt`	`v02/w8s08glv4`
`hecfp128fkt`	`v02/w8s16glv4`
`hecfp128fkt`	`v02/w8s32glv4`
`hecfp128i`	`v02/var`
`hecfp128i`	`v02/w8s01`
`hecfp128i`	`v02/w8s02`
`hecfp128i`	`v02/w8s04`
`hecfp128i`	`v02/w8s08`
`hecfp128i`	`v02/w8s16`
`hecfp128i`	`v02/w8s32`
`hecfp61e2bk`	`v01/varglv8`
`hecfp61e2bk`	`v01/w8s01glv8`
`hecfp61e2bk`	`v01/w8s02glv8`
`hecfp61e2bk`	`v01/w8s04glv8`
`hecfp61e2bk`	`v01/w8s08glv8`
`hecfp61e2bk`	`v01/w8s16glv8`
`hecfp61e2bk`	`v01/w8s32glv8`
`hecfp61e2i`	`v01/var`
`hecfp61e2i`	`v01/w8s01`
`hecfp61e2i`	`v01/w8s02`
`hecfp61e2i`	`v01/w8s04`
`hecfp61e2i`	`v01/w8s08`
`hecfp61e2i`	`v01/w8s16`
`hecfp61e2i`	`v01/w8s32`
`hecfp64e2bk`	`v01/varglv8`
`hecfp64e2bk`	`v01/w8s01glv8`
`hecfp64e2bk`	`v01/w8s02glv8`
`hecfp64e2bk`	`v01/w8s04glv8`
`hecfp64e2bk`	`v01/w8s08glv8`
`hecfp64e2bk`	`v01/w8s16glv8`
`hecfp64e2bk`	`v01/w8s32glv8`
`hecfp64e2i`	`v01/var`
`hecfp64e2i`	`v01/w8s01`
`hecfp64e2i`	`v01/w8s02`
`hecfp64e2i`	`v01/w8s04`
`hecfp64e2i`	`v01/w8s08`
`hecfp64e2i`	`v01/w8s16`
`hecfp64e2i`	`v01/w8s32`
`hector`	`ref`	Peter Birkner, Technische Universiteit Eindhoven Peter Schwabe, Technische Universiteit Eindhoven
`jacfp127i`	`v01/var`
`jacfp127i`	`v01/w4s01`
`jacfp127i`	`v01/w4s02`
`jacfp127i`	`v01/w4s04`
`jacfp127i`	`v01/w4s08`
`jacfp127i`	`v01/w4s16`
`jacfp127i`	`v01/w4s32`
`jacfp127i`	`v01/w8s01`
`jacfp127i`	`v01/w8s02`
`jacfp127i`	`v01/w8s04`
`jacfp127i`	`v01/w8s08`
`jacfp127i`	`v01/w8s16`
`jacfp127i`	`v01/w8s32`
`jacfp128bk`	`v01/varglv4`
`jacfp128bk`	`v01/w4s01glv4`
`jacfp128bk`	`v01/w4s02glv4`
`jacfp128bk`	`v01/w4s04glv4`
`jacfp128bk`	`v01/w4s08glv4`
`jacfp128bk`	`v01/w4s16glv4`
`jacfp128bk`	`v01/w4s32glv4`
`jacfp128bk`	`v01/w8s01glv4`
`jacfp128bk`	`v01/w8s02glv4`
`jacfp128bk`	`v01/w8s04glv4`
`jacfp128bk`	`v01/w8s08glv4`
`jacfp128bk`	`v01/w8s16glv4`
`jacfp128bk`	`v01/w8s32glv4`
`k298`	`ref`
`k277mon`	`ref`
`k277taa`	`ref`
`kumfp127g`	`v02/var`
`kumfp128g`	`v02/var`
`kumfp61e2g`	`v01/var`
`kumfp64e2g`	`v01/var`
`kumjacfp127g`	`v01/var`
`kumjacfp127g`	`v01/w4s01`
`kumjacfp127g`	`v01/w4s02`
`kumjacfp127g`	`v01/w4s04`
`kumjacfp127g`	`v01/w4s08`
`kumjacfp127g`	`v01/w4s16`
`kumjacfp127g`	`v01/w4s32`
`kumjacfp127g`	`v01/w8s01`
`kumjacfp127g`	`v01/w8s02`
`kumjacfp127g`	`v01/w8s04`
`kumjacfp127g`	`v01/w8s08`
`kumjacfp127g`	`v01/w8s16`
`kumjacfp127g`	`v01/w8s32`
`kummer`	`ref`
`nist521gs`	`ref`
`nistp256`	`nawaz`	Yassir Nawaz, University of Waterloo Guang Gong, University of Waterloo
`nistp256`	`ref`	Jan Mojzis (wrapper around crypto_scalarmult/nistp256)
`nistp256`	`wbl`
`prjfp127i`	`v01/var`
`prjfp127i`	`v01/w4s01`
`prjfp127i`	`v01/w4s02`
`prjfp127i`	`v01/w4s04`
`prjfp127i`	`v01/w4s08`
`prjfp127i`	`v01/w4s16`
`prjfp127i`	`v01/w4s32`
`prjfp127i`	`v01/w8s01`
`prjfp127i`	`v01/w8s02`
`prjfp127i`	`v01/w8s04`
`prjfp127i`	`v01/w8s08`
`prjfp127i`	`v01/w8s16`
`prjfp127i`	`v01/w8s32`
`prjfp128bk`	`v01/varglv4`
`prjfp128bk`	`v01/w4s01glv4`
`prjfp128bk`	`v01/w4s02glv4`
`prjfp128bk`	`v01/w4s04glv4`
`prjfp128bk`	`v01/w4s08glv4`
`prjfp128bk`	`v01/w4s16glv4`
`prjfp128bk`	`v01/w4s32glv4`
`prjfp128bk`	`v01/w8s01glv4`
`prjfp128bk`	`v01/w8s02glv4`
`prjfp128bk`	`v01/w8s04glv4`
`prjfp128bk`	`v01/w8s08glv4`
`prjfp128bk`	`v01/w8s16glv4`
`prjfp128bk`	`v01/w8s32glv4`
`sclaus1024`	`cryptopp`	Wei Dai (wrapper around Crypto++)
`sclaus1024`	`gmp`	Wei Dai (wrapper around GMP)
`sclaus2048`	`cryptopp`	Wei Dai (wrapper around Crypto++)
`sclaus2048`	`gmp`	Wei Dai (wrapper around GMP)
`surf2113`	`mpfq`	Pierrick Gaudry, Laboratoire Lorrain de Recherche en Informatique et ses Applications Emmanuel Thomé, Laboratoire Lorrain de Recherche en Informatique et ses Applications
`surf127eps`	`mpfq`	Pierrick Gaudry, Laboratoire Lorrain de Recherche en Informatique et ses Applications Thomas Houtmann, École Polytechnique Emmanuel Thomé, École Polytechnique

Version

This is version 2024.04.26 of the primitives-dh.html web page. This web page is in the public domain.

eBACS: ECRYPT Benchmarking of Cryptographic Systems

List of public-key Diffie–Hellman secret-sharing systems measured

Which Diffie–Hellman systems are measured?

Implementations

Version