VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems

ECRYPT II

Measurements of public-key Diffie–Hellman secret-sharing systems, indexed by machine

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.

What do the graphs and tables mean?

• Time to compute a shared secret, given one user's secret key and another user's public key.
• Time to compute a key pair.
• Space for a secret key.
• Space for a public key.
• Space for a shared secret.

Each computer also has a series of tables, five tables for each computer. The first table shows the time, in cycles, to generate a key pair. Each row of the table lists

• the first quartile of many time measurements,
• the median of many time measurements,
• the third quartile of many time measurements, and
• the name of the secret-sharing systems.

The computer name is linked to additional information about the implementations and compilers selected for benchmarking.

amd64; KnLanding (50671); 2016 Intel Xeon Phi 7250; 68 x 1400MHz; unstable; pluton1mn, supercop-20160806

Cycles to generate a key pair quartile median quartile system 91686 92386 93730 gls254 90720 92778 94892 curve2251 96026 96068 96096 kummer 105980 107142 108640 ecfp256e 117474 118594 122304 ecfp256h 118566 118608 118678 gls254prot 118286 120078 122514 ecfp256s 125762 129136 132034 ecfp256q 282674 282758 286748 curve25519 523558 525000 541646 nistp256 590534 597660 611618 ecfp256i 675052 684306 693294 surf127eps 805798 817810 824642 ed448goldilocks 948892 968702 975870 surf2113 1701224 1717352 1738450 sclaus1024 3985464 3990098 4003986 ed521gs 4786656 4802602 4917626 nist521gs 6990004 6996920 7010626 claus 8350034 8411396 8490902 sclaus2048 Cycles to compute a shared secret quartile median quartile system 77644 77728 78078 gls254 83930 83930 84014 kummer 106092 106092 106120 gls254prot 254604 254716 255486 curve2251 282114 282128 287812 curve25519 551754 554848 574518 ecfp256e 588686 590002 609742 ecfp256i 578606 590268 604226 ecfp256q 656026 664384 672140 surf127eps 706034 723534 728826 ecfp256h 711564 729302 734412 ecfp256s 932330 955514 958734 surf2113 1690430 1694154 1699600 sclaus1024 1812342 1827756 1841126 nistp256 2824710 2828630 2834846 ed448goldilocks 3935554 3941126 3946740 ed521gs 4747624 4759748 4848046 nist521gs 6951560 6957230 6962508 claus 8517362 8522654 8529094 sclaus2048 Secret key bytes system 20 sclaus1024 28 sclaus2048 28 surf2113 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls254 32 gls254prot 32 kummer 32 nistp256 32 surf127eps 104 nist521gs 130 ed521gs 144 ed448goldilocks 256 claus Public key bytes system 32 curve2251 32 curve25519 48 kummer 48 surf127eps 48 surf2113 56 ed448goldilocks 64 ecfp256e 64 ecfp256h 64 ecfp256q 64 ecfp256s 64 gls254 64 gls254prot 64 nistp256 96 ecfp256i 128 claus 128 sclaus1024 144 ed521gs 144 nist521gs 256 sclaus2048 Shared secret bytes system 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 48 kummer 48 surf127eps 48 surf2113 64 ed448goldilocks 64 gls254 64 gls254prot 64 nistp256 72 ed521gs 72 nist521gs 128 claus 128 sclaus1024 256 sclaus2048

aarch64; Cortex-A57 (418fd071); 2015 NVIDIA Tegra X1; 4 x 1734MHz; lionheart30, supercop-20160806

Cycles to generate a key pair quartile median quartile system 245555 245587 245806 kummer 372415 372418 373175 curve25519 393267 393541 393556 nistp256 517636 518620 522321 ed448goldilocks 1921543 1923084 1925078 ed521gs 2401387 2402603 2403152 nist521gs 9797357 9810335 9823942 claus Cycles to compute a shared secret quartile median quartile system 237028 237437 237723 kummer 364506 364556 364561 curve25519 1286087 1286098 1286102 nistp256 1571043 1571837 1571840 ed448goldilocks 1888396 1888429 1889043 ed521gs 2375025 2375693 2376697 nist521gs 9718579 9731965 9745990 claus Secret key bytes system 32 curve25519 32 kummer 32 nistp256 104 nist521gs 130 ed521gs 144 ed448goldilocks 256 claus Public key bytes system 32 curve25519 48 kummer 56 ed448goldilocks 64 nistp256 128 claus 144 ed521gs 144 nist521gs Shared secret bytes system 32 curve25519 48 kummer 64 ed448goldilocks 64 nistp256 72 ed521gs 72 nist521gs 128 claus

aarch64; Cortex-A53 (410fd034); 2015 Amlogic S905; 4 x 2000MHz; par3, supercop-20160910

Cycles to generate a key pair quartile median quartile system 383959 384656 384681 kummer 476090 476186 477880 curve25519 503933 504320 505261 nistp256 666382 669081 681813 surf127eps 680058 681152 688786 ed448goldilocks 1061230 1071598 1090570 sclaus1024 2824847 2842722 2864371 ed521gs 3469621 3493340 3539982 nist521gs 5199509 5249370 5303957 sclaus2048 6416541 6437436 6459536 claus Cycles to compute a shared secret quartile median quartile system 375830 375938 376304 kummer 474224 474248 474467 curve25519 658470 658882 660259 surf127eps 1058670 1059759 1061141 sclaus1024 1636030 1636675 1636964 nistp256 1851314 1852169 1853513 ed448goldilocks 2791145 2806222 2820398 ed521gs 3440888 3454327 3494575 nist521gs 5292343 5310291 5355910 sclaus2048 6418736 6429729 6441428 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 32 curve25519 32 kummer 32 nistp256 32 surf127eps 104 nist521gs 130 ed521gs 144 ed448goldilocks 256 claus Public key bytes system 32 curve25519 48 kummer 48 surf127eps 56 ed448goldilocks 64 nistp256 128 claus 128 sclaus1024 144 ed521gs 144 nist521gs 256 sclaus2048 Shared secret bytes system 32 curve25519 48 kummer 48 surf127eps 64 ed448goldilocks 64 nistp256 72 ed521gs 72 nist521gs 128 claus 128 sclaus1024 256 sclaus2048

armeabi; Cortex-A7 (410fc075); 2015 Broadcom BCM2836; 4 x 900MHz; pi2, supercop-20160731

Cycles to generate a key pair quartile median quartile system 591246 591250 592066 kummer 937910 937922 938422 curve25519 940986 941799 944272 ed448goldilocks 1722592 1723856 1730400 nistp256 16300841 16311976 16332894 claus Cycles to compute a shared secret quartile median quartile system 579282 579329 579354 kummer 925896 925896 925938 curve25519 2507001 2507718 2519928 ed448goldilocks 5825146 5838487 5840704 nistp256 16252692 16258062 16283031 claus Secret key bytes system 32 curve25519 32 kummer 32 nistp256 144 ed448goldilocks 256 claus Public key bytes system 32 curve25519 48 kummer 56 ed448goldilocks 64 nistp256 128 claus Shared secret bytes system 32 curve25519 48 kummer 64 ed448goldilocks 64 nistp256 128 claus

amd64; Skylake (506e3); 2015 Intel Core i5-6600; 4 x 3310MHz; skylake, supercop-20160910

Cycles to generate a key pair quartile median quartile system 41384 41974 43348 ecfp256e 43600 44406 46088 ecfp256h 45842 45972 46540 curve2251 46132 46854 48690 ecfp256s 46996 47826 49770 ecfp256q 49408 49870 50318 gls254 56756 56834 57426 kummer 61720 61852 61988 gls254prot 153186 153440 153752 ed448goldilocks 163068 163200 163306 curve25519 187866 188602 189326 surf127eps 187840 189626 191264 sclaus1024 188850 190026 191192 ecfp256i 324738 324856 324996 nistp256 595932 598054 600304 surf2113 826016 826304 827788 ed521gs 919234 929774 950694 sclaus2048 956074 956380 956632 nist521gs 973296 1022056 1023128 claus Cycles to compute a shared secret quartile median quartile system 36734 36836 37008 gls254 48718 49186 49310 kummer 53356 53548 53730 gls254prot 146628 146702 146768 curve2251 165642 165816 166488 curve25519 173728 173856 174000 ecfp256e 176760 177154 177666 surf127eps 185466 185584 185794 ecfp256q 185396 185798 186106 sclaus1024 185652 185808 185990 ecfp256i 216000 216194 216416 ecfp256h 239772 239946 240268 ecfp256s 460278 460582 460938 ed448goldilocks 580090 580270 580538 nistp256 588774 588944 589138 surf2113 794926 795102 795238 ed521gs 930960 931140 931338 nist521gs 933264 934716 954888 sclaus2048 986092 1033580 1034356 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 28 surf2113 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls254 32 gls254prot 32 kummer 32 nistp256 32 surf127eps 104 nist521gs 130 ed521gs 144 ed448goldilocks 256 claus Public key bytes system 32 curve2251 32 curve25519 48 kummer 48 surf127eps 48 surf2113 56 ed448goldilocks 64 ecfp256e 64 ecfp256h 64 ecfp256q 64 ecfp256s 64 gls254 64 gls254prot 64 nistp256 96 ecfp256i 128 claus 128 sclaus1024 144 ed521gs 144 nist521gs 256 sclaus2048 Shared secret bytes system 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 48 kummer 48 surf127eps 48 surf2113 64 ed448goldilocks 64 gls254 64 gls254prot 64 nistp256 72 ed521gs 72 nist521gs 128 claus 128 sclaus1024 256 sclaus2048

amd64; Airmont (406c3); 2015 Intel Celeron N3150; 4 x 1600MHz; par, supercop-20160910

Cycles to generate a key pair quartile median quartile system 102320 108440 120380 ecfp256e 112200 116540 124580 ecfp256s 112720 119160 130780 ecfp256h 120100 127080 138500 ecfp256q 122460 129340 147240 curve2251 149960 152120 154440 gls254 213640 213800 216080 gls254prot 459780 459900 463460 curve25519 510560 514680 522120 ecfp256i 568200 568320 569280 kummer 578440 581100 596540 surf127eps 628560 629140 640780 nistp256 731380 733760 745720 ed448goldilocks 897980 907060 927720 sclaus1024 1151000 1154960 1167120 surf2113 3487900 3495940 3514300 ed521gs 4156240 4157840 4173100 nist521gs 4285340 4320440 4350700 sclaus2048 5406020 5419160 5437360 claus Cycles to compute a shared secret quartile median quartile system 136020 136180 136400 gls254 201960 202100 202520 gls254prot 425460 425660 429000 curve2251 448160 448200 448320 curve25519 473560 474760 483720 ecfp256e 501780 504640 516640 ecfp256q 507460 508020 510700 ecfp256i 556560 556640 556860 kummer 562980 564100 569580 surf127eps 596660 597580 602060 ecfp256h 626860 628520 647660 ecfp256s 890580 891160 897940 sclaus1024 1139300 1140140 1142600 surf2113 1989700 1995060 2003680 nistp256 2262960 2267000 2278360 ed448goldilocks 3433680 3442620 3445500 ed521gs 4113900 4115760 4119940 nist521gs 4369900 4371660 4375780 sclaus2048 5393040 5394580 5403080 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 28 surf2113 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls254 32 gls254prot 32 kummer 32 nistp256 32 surf127eps 104 nist521gs 130 ed521gs 144 ed448goldilocks 256 claus Public key bytes system 32 curve2251 32 curve25519 48 kummer 48 surf127eps 48 surf2113 56 ed448goldilocks 64 ecfp256e 64 ecfp256h 64 ecfp256q 64 ecfp256s 64 gls254 64 gls254prot 64 nistp256 96 ecfp256i 128 claus 128 sclaus1024 144 ed521gs 144 nist521gs 256 sclaus2048 Shared secret bytes system 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 48 kummer 48 surf127eps 48 surf2113 64 ed448goldilocks 64 gls254 64 gls254prot 64 nistp256 72 ed521gs 72 nist521gs 128 claus 128 sclaus1024 256 sclaus2048

aarch64; Cortex-A53 (410fd030); 2014 HiSilicon Hi6220V100; 8 x 1200MHz; unstable; a53, supercop-20160731

Cycles to generate a key pair quartile median quartile system 391230? 423200? 516000? kummer 688905 690120 697410 curve25519 697410? 700800? 916110? nistp256 744795? 747225? 987200? ed448goldilocks 2003535 2025600 2058210 sclaus1024 3245265? 3257415? 4269600? ed521gs 4258575? 4269510? 5615200? nist521gs 9373725? 9400455? 12337600? claus 9356715 9462420 9624800 sclaus2048 Cycles to compute a shared secret quartile median quartile system 382725? 502400? 503200? kummer 681615 681615 681615 curve25519 1449495? 1456785? 1906400? nistp256 2047275 2056995 2067930 sclaus1024 2145690? 2157840? 2831200? ed448goldilocks 3210030? 3223395? 4226400? ed521gs 3217320? 4213620? 5546400? nist521gs 9376155 9388800 9441765 claus 9621585? 9632520? 12669600? sclaus2048 Secret key bytes system 20 sclaus1024 28 sclaus2048 32 curve25519 32 kummer 32 nistp256 104 nist521gs 130 ed521gs 144 ed448goldilocks 256 claus Public key bytes system 32 curve25519 48 kummer 56 ed448goldilocks 64 nistp256 128 claus 128 sclaus1024 144 ed521gs 144 nist521gs 256 sclaus2048 Shared secret bytes system 32 curve25519 48 kummer 64 ed448goldilocks 64 nistp256 72 ed521gs 72 nist521gs 128 claus 128 sclaus1024 256 sclaus2048

armeabi; Cortex-A15 (413fc0f3); 2014 NVIDIA Tegra K1; 4 x 2065MHz; jetsontk1, supercop-20160806

Cycles to generate a key pair quartile median quartile system 247602 247865 248379 kummer 342789 343931 344232 curve25519 406925 423046 433492 ed448goldilocks 942649 943993 953453 nistp256 2544955 2566740 2587546 sclaus1024 11815539 11899267 11967232 sclaus2048 12390562 12393519 12398831 claus Cycles to compute a shared secret quartile median quartile system 238315 238363 238823 kummer 330971 332168 332342 curve25519 1110875 1119329 1120231 ed448goldilocks 2600742 2610729 2614044 sclaus1024 3170656 3178019 3179661 nistp256 12031597 12043407 12093823 sclaus2048 12368817 12370670 12375094 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 32 curve25519 32 kummer 32 nistp256 144 ed448goldilocks 256 claus Public key bytes system 32 curve25519 48 kummer 56 ed448goldilocks 64 nistp256 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve25519 48 kummer 64 ed448goldilocks 64 nistp256 128 claus 128 sclaus1024 256 sclaus2048

amd64; HW+AES (40651); 2014 Intel Core i5-4210U; 2 x 1700MHz; slide, supercop-20160806

Cycles to generate a key pair quartile median quartile system 29632 30076 30528 jacfp127i 30840 31264 31740 kumjacfp127g 32892 33516 34096 prjfp127i 34184 34804 35320 hecfp127i 39304 40052 40976 jacfp128bk 45192 45716 46304 prjfp128bk 47592 48152 48648 hecfp128fkt 47776 48180 48744 hecfp128bk 47932 48444 48828 hecfp128i 47268 48720 52596 ecfp256h 48192 49092 51304 ecfp256e 49932 50576 53832 curve2251 50277 52320 54912 ecfp256s 56332 57596 62388 ecfp256q 69696 69760 69868 kummer 70096 70180 70260 gls254prot 93556 94932 95600 gls1271 110416 110564 110832 kumfp127g 151760 152044 153880 curve25519 156504 156568 156628 kumfp128g 204516 204856 205952 ed448goldilocks 220016 221016 222228 ecfp256i 354044 354132 354240 nistp256 1107212 1108092 1109708 ed521gs 1271716 1272380 1273580 nist521gs Cycles to compute a shared secret quartile median quartile system 61072 61144 61220 kummer 61600 61660 61724 gls254prot 112488 112620 112912 kumjacfp127g 113172 113336 113680 kumfp127g 114632 114788 119324 jacfp128bk 141624 141812 141964 prjfp128bk 150416 150572 150728 hecfp128bk 155800 156076 157832 hecfp128fkt 156184 156748 156876 curve25519 160404 160440 160492 curve2251 162892 162980 163048 kumfp128g 185180 185676 186916 jacfp127i 210232 210364 210520 ecfp256e 215328 215524 215748 gls1271 217248 217412 217956 ecfp256q 217456 217608 217808 ecfp256i 224140 224380 224760 prjfp127i 230024 230224 230520 hecfp127i 220284 247652 247836 ecfp256h 281660 281868 282168 ecfp256s 334752 335008 335360 hecfp128i 595832 596052 596584 ed448goldilocks 866348 866552 866792 nistp256 1073828 1074344 1075164 ed521gs 1244628 1245156 1246036 nist521gs Secret key bytes system 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 32 gls254prot 32 hecfp127i 32 hecfp128bk 32 hecfp128fkt 32 hecfp128i 32 jacfp127i 32 jacfp128bk 32 kumfp127g 32 kumfp128g 32 kumjacfp127g 32 kummer 32 nistp256 32 prjfp127i 32 prjfp128bk gls254 32 1 104 nist521gs 130 ed521gs 144 ed448goldilocks Public key bytes system 32 curve2251 32 curve25519 32 gls1271 48 kumfp127g 48 kumfp128g 48 kumjacfp127g 48 kummer 56 ed448goldilocks 64 ecfp256e 64 ecfp256h 64 ecfp256q 64 ecfp256s 64 gls254prot 64 hecfp127i 64 hecfp128bk 64 hecfp128fkt 64 hecfp128i 64 jacfp127i 64 jacfp128bk 64 nistp256 64 prjfp127i 64 prjfp128bk gls254 64 1 96 ecfp256i 144 ed521gs 144 nist521gs Shared secret bytes system 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 48 kumfp127g 48 kumfp128g 48 kumjacfp127g 48 kummer 64 ed448goldilocks 64 gls254prot 64 hecfp127i 64 hecfp128bk 64 hecfp128fkt 64 hecfp128i 64 jacfp127i 64 jacfp128bk 64 nistp256 64 prjfp127i 64 prjfp128bk gls254 64 1 72 ed521gs 72 nist521gs

amd64; HW+AES (40651); 2014 Intel Core i5-4210U; 2 x 1700MHz; unstable; sliver, supercop-20160731

Cycles to generate a key pair quartile median quartile system 75804 79728 82998 jacfp127i 86580 89436 102702 prjfp127i 91662 93966 110796 hecfp127i 105366 107280 110016 gls254 106644 108402 111096 curve2251 108060 108654 119142 jacfp128bk 68892? 113268? 118338? hecfp128bk 110628 115566 123000 hecfp128fkt 119982 127344 134772 ecfp256h 118542 129258 132210 ecfp256e 128754 133644 143286 ecfp256s 137514 143304 148440 kumjacfp127g 140286 143736 152802 ecfp256q 139134 147996 155034 hecfp128i 166056 168234 168666 kummer 178842 197862 205692 prjfp128bk 236316 278286 285048 gls1271 349056 349632 353004 kumfp127g 458334 463794 479904 kumfp128g 602274 616392 636612 ecfp256i 440904? 631158? 683382? hector 631668 633678 635682 surf127eps 412254? 716970? 753786? curve25519 828372 854532 897972 sclaus1024 1444728 1462482 1499334 surf2113 1711116 1810452 1856604 nistp256 3456702 4101858 4176834 sclaus2048 4977516 5066370 5204844 claus Cycles to compute a shared secret quartile median quartile system 82908 84414 87078 gls254 151386 153696 156666 kummer 305688 315024 318420 jacfp128bk 334278 335916 336954 curve2251 352872 353454 357852 kumfp127g 356970 361764 370578 kumjacfp127g 226572? 382980? 387270? hecfp128bk 228558? 388908? 401436? hecfp128fkt 364104 390918 396306 prjfp128bk 466560 467604 473172 kumfp128g 481866 524670 535908 jacfp127i 567552 568818 581982 ecfp256e 572028 582084 599838 ecfp256q 556752 591582 607926 ecfp256i 608592 609276 610224 surf127eps 339252? 646800? 660894? gls1271 652758 654348 666150 prjfp127i 643722 681834 684432 ecfp256h 683574 687342 690612 hecfp127i 380544? 720750? 761850? curve25519 700884 736836 745584 ecfp256s 780138 833328 860448 hecfp128i 802494 851352 880536 sclaus1024 1430184 1444344 1459056 surf2113 1155456? 2167962? 2229030? hector 3666108 3807330 3857922 nistp256 4172430 4247484 4310946 sclaus2048 4975788 5055300 5165772 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 28 surf2113 29 hector 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 32 gls254 32 hecfp127i 32 hecfp128bk 32 hecfp128fkt 32 hecfp128i 32 jacfp127i 32 jacfp128bk 32 kumfp127g 32 kumfp128g 32 kumjacfp127g 32 kummer 32 nistp256 32 prjfp127i 32 prjfp128bk 32 surf127eps 256 claus Public key bytes system 32 curve2251 32 curve25519 32 gls1271 48 kumfp127g 48 kumfp128g 48 kumjacfp127g 48 kummer 48 surf127eps 48 surf2113 60 hector 64 ecfp256e 64 ecfp256h 64 ecfp256q 64 ecfp256s 64 gls254 64 hecfp127i 64 hecfp128bk 64 hecfp128fkt 64 hecfp128i 64 jacfp127i 64 jacfp128bk 64 nistp256 64 prjfp127i 64 prjfp128bk 96 ecfp256i 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 48 kumfp127g 48 kumfp128g 48 kumjacfp127g 48 kummer 48 surf127eps 48 surf2113 60 hector 64 gls254 64 hecfp127i 64 hecfp128bk 64 hecfp128fkt 64 hecfp128i 64 jacfp127i 64 jacfp128bk 64 nistp256 64 prjfp127i 64 prjfp128bk 128 claus 128 sclaus1024 256 sclaus2048

amd64; HW+AES (306f2); 2014 Intel Xeon E5-2670 v3; 12 x 2300MHz; unstable; tueisecgern, supercop-20160724

Cycles to generate a key pair quartile median quartile system 47009 48202 50576 jacfp127i 51947 52397 53354 kumjacfp127g 52519 52879 54669 prjfp127i 54396 55568 57196 hecfp127i 58509 59662 61702 jacfp128bk 64492 65808 67739 ecfp256e 67503 68270 71736 hecfp128fkt 67599 69984 73376 prjfp128bk 69991 70528 73115 hecfp128bk 69408 70616 72514 ecfp256h 73048 73533 74036 hecfp128i 72935 74069 79918 curve2251 73505 74520 75302 gls254 83840 83953 85177 gls254prot 87538 88185 88789 ecfp256s 91386 91534 93932 kummer 91221 91917 93070 ecfp256q 175509 177953 179741 gls1271 206276 207153 207580 kumfp127g 237541 238326 238618 curve25519 279045 280922 281032 kumfp128g 338057 342071 344396 ecfp256i 348778 349774 352642 ed448goldilocks 615931 621684 626864 sclaus1024 968226 970717 974026 nistp256 1901260 1935919 1939820 ed521gs 2280128 2297617 2429407 nist521gs 3051928 3079200 3254092 sclaus2048 3565448 3598098 3780069 claus Cycles to compute a shared secret quartile median quartile system 62652 63799 64001 gls254 75811 75909 76985 gls254prot 83508 83616 85551 kummer 185484 186294 186628 jacfp128bk 209009 209453 209714 kumfp127g 213045 213765 215700 kumjacfp127g 223137 223333 224753 prjfp128bk 230491 231083 232640 hecfp128bk 236094 237167 238160 hecfp128fkt 243104 243408 244898 curve2251 252178 252396 252602 curve25519 284663 286491 286555 kumfp128g 321411 321862 322384 jacfp127i 325652 328878 331344 ecfp256e 334306 337585 340624 ecfp256i 348674 349039 354136 ecfp256q 367448 367779 379218 ecfp256h 392953 393229 393552 prjfp127i 401755 404944 405619 hecfp127i 405880 406469 410326 gls1271 436074 438236 438824 ecfp256s 503948 504295 506782 hecfp128i 639406 639590 639878 sclaus1024 1109326 1111449 1121075 ed448goldilocks 1868526 1901251 1903612 ed521gs 1968610 1974044 1978644 nistp256 2260081 2268398 2411437 nist521gs 3109913 3135925 3313383 sclaus2048 3558649 3590858 3775809 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 32 gls254 32 gls254prot 32 hecfp127i 32 hecfp128bk 32 hecfp128fkt 32 hecfp128i 32 jacfp127i 32 jacfp128bk 32 kumfp127g 32 kumfp128g 32 kumjacfp127g 32 kummer 32 nistp256 32 prjfp127i 32 prjfp128bk 104 nist521gs 130 ed521gs 144 ed448goldilocks 256 claus Public key bytes system 32 curve2251 32 curve25519 32 gls1271 48 kumfp127g 48 kumfp128g 48 kumjacfp127g 48 kummer 56 ed448goldilocks 64 ecfp256e 64 ecfp256h 64 ecfp256q 64 ecfp256s 64 gls254 64 gls254prot 64 hecfp127i 64 hecfp128bk 64 hecfp128fkt 64 hecfp128i 64 jacfp127i 64 jacfp128bk 64 nistp256 64 prjfp127i 64 prjfp128bk 96 ecfp256i 128 claus 128 sclaus1024 144 ed521gs 144 nist521gs 256 sclaus2048 Shared secret bytes system 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 48 kumfp127g 48 kumfp128g 48 kumjacfp127g 48 kummer 64 ed448goldilocks 64 gls254 64 gls254prot 64 hecfp127i 64 hecfp128bk 64 hecfp128fkt 64 hecfp128i 64 jacfp127i 64 jacfp128bk 64 nistp256 64 prjfp127i 64 prjfp128bk 72 ed521gs 72 nist521gs 128 claus 128 sclaus1024 256 sclaus2048

amd64; HW+AES (306c3); 2013 Intel Xeon E3-1275 V3; 4 x 3500MHz; titan0, supercop-20160806

Cycles to generate a key pair quartile median quartile system 30620 31428 33080 jacfp127i 31620 32364 34252 kumjacfp127g 33976 34736 36136 prjfp127i 33860 34984 36036 hecfp127i 37400 38288 40060 jacfp128bk 44004 44912 46856 prjfp128bk 44720 45640 48088 hecfp128i 46092 47092 48536 ecfp256e 46696 47576 49816 hecfp128bk 47372 48072 50816 ecfp256h 49608 51076 54008 ecfp256s 49572 51624 54504 hecfp128fkt 50480 51660 55848 curve2251 52360 53032 53676 gls254 52876 53888 57548 ecfp256q 68696 68780 69076 kummer 69696 69748 69800 gls254prot 95840 97088 98096 gls1271 110584 110704 110812 kumfp127g 152188 152264 152536 curve25519 156296 156472 156628 kumfp128g 177276 177468 177732 ed448goldilocks 220668 221480 222084 surf127eps 220664 222272 225636 ecfp256i 223788 225420 227556 sclaus1024 215376 232012 250408 hector 283920 284132 284320 nistp256 476664 478580 480332 surf2113 1088452 1090096 1091580 ed521gs 1104036 1112600 1119532 sclaus2048 1231248 1232620 1233968 nist521gs 1336448 1342412 1438680 claus Cycles to compute a shared secret quartile median quartile system 39532 39580 39628 gls254 61676 61712 61752 gls254prot 60376 64172 69796 kummer 112460 112616 113344 kumjacfp127g 112544 112880 113660 kumfp127g 113540 113636 113724 jacfp128bk 139940 140296 146864 prjfp128bk 144656 144784 144924 hecfp128bk 149680 149852 150004 hecfp128fkt 156048 156092 156172 curve25519 159280 159332 159376 curve2251 162552 162628 162856 kumfp128g 186316 186536 186804 jacfp127i 203376 203584 204064 ecfp256e 207552 208056 208464 surf127eps 211960 212088 212232 ecfp256q 213504 213688 217172 gls1271 217532 217692 217876 ecfp256i 220844 221020 221148 sclaus1024 226424 226696 227028 prjfp127i 229184 229400 229664 hecfp127i 247880 248004 248220 ecfp256h 271140 271264 271436 ecfp256s 327440 327668 327932 hecfp128i 471004 471424 471552 surf2113 531904 532212 534832 ed448goldilocks 705112 705580 706100 nistp256 750460 750912 751356 hector 1058196 1058656 1061748 ed521gs 1126212 1126496 1126916 sclaus2048 1204660 1206924 1211152 nist521gs 1309464 1315144 1392836 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 28 surf2113 29 hector 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 32 gls254 32 gls254prot 32 hecfp127i 32 hecfp128bk 32 hecfp128fkt 32 hecfp128i 32 jacfp127i 32 jacfp128bk 32 kumfp127g 32 kumfp128g 32 kumjacfp127g 32 kummer 32 nistp256 32 prjfp127i 32 prjfp128bk 32 surf127eps 104 nist521gs 130 ed521gs 144 ed448goldilocks 256 claus Public key bytes system 32 curve2251 32 curve25519 32 gls1271 48 kumfp127g 48 kumfp128g 48 kumjacfp127g 48 kummer 48 surf127eps 48 surf2113 56 ed448goldilocks 60 hector 64 ecfp256e 64 ecfp256h 64 ecfp256q 64 ecfp256s 64 gls254 64 gls254prot 64 hecfp127i 64 hecfp128bk 64 hecfp128fkt 64 hecfp128i 64 jacfp127i 64 jacfp128bk 64 nistp256 64 prjfp127i 64 prjfp128bk 96 ecfp256i 128 claus 128 sclaus1024 144 ed521gs 144 nist521gs 256 sclaus2048 Shared secret bytes system 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 48 kumfp127g 48 kumfp128g 48 kumjacfp127g 48 kummer 48 surf127eps 48 surf2113 60 hector 64 ed448goldilocks 64 gls254 64 gls254prot 64 hecfp127i 64 hecfp128bk 64 hecfp128fkt 64 hecfp128i 64 jacfp127i 64 jacfp128bk 64 nistp256 64 prjfp127i 64 prjfp128bk 72 ed521gs 72 nist521gs 128 claus 128 sclaus1024 256 sclaus2048

amd64; HW+AES (306c3); 2013 Intel Core i7-4770; 4 x 3400MHz; wintermute, supercop-20140505

Cycles to generate a key pair quartile median quartile system 52812 53264 55108 curve2251 63808 64692 66004 ecfp256h 65120 66012 67272 ecfp256e 68760 69548 70896 ecfp256s 74344 75108 76900 ecfp256q 82512 82572 82660 kummer 172500 172620 172768 curve25519 267176 269452 271080 ecfp256i 254596 272560 292904 hector 294700 297020 299388 sclaus1024 538140 540308 542292 surf2113 1382892 1392060 1400620 sclaus2048 1732556 1736308 1740184 claus Cycles to compute a shared secret quartile median quartile system 72080 72120 72164 kummer 159316 159396 159492 curve2251 163232 163296 163364 curve25519 242636 243068 245500 ecfp256e 245596 245776 246072 ecfp256q 259016 259184 259440 ecfp256i 275380 275704 276064 ecfp256h 291168 291308 291512 sclaus1024 324912 325336 326028 ecfp256s 523040 523140 523320 surf2113 835624 836100 838304 hector 1408056 1408916 1410164 sclaus2048 1705252 1706548 1707376 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 28 surf2113 29 hector 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 kummer 256 claus Public key bytes system 32 curve2251 32 curve25519 48 kummer 48 surf2113 60 hector 64 ecfp256e 64 ecfp256h 64 ecfp256q 64 ecfp256s 96 ecfp256i 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 48 kummer 48 surf2113 60 hector 128 claus 128 sclaus1024 256 sclaus2048

armeabi; Cortex-A9+NEON (413fc090); 2012 Samsung Exynos 4412; 4 x 1704MHz; odroid, supercop-20160806

Cycles to generate a key pair quartile median quartile system 365587 365595 365617 kummer 577024 577032 577066 curve25519 682636 683349 685268 ed448goldilocks 1394307 1397094 1400832 nistp256 7887222 7898159 7907609 claus Cycles to compute a shared secret quartile median quartile system 355820 355829 355848 kummer 567263 567267 567293 curve25519 1918886 1919069 1919821 ed448goldilocks 4673813 4686061 4689509 nistp256 9440392 9445183 9449742 claus Secret key bytes system 32 curve25519 32 kummer 32 nistp256 144 ed448goldilocks 256 claus Public key bytes system 32 curve25519 48 kummer 56 ed448goldilocks 64 nistp256 128 claus Shared secret bytes system 32 curve25519 48 kummer 64 ed448goldilocks 64 nistp256 128 claus

armeabi; Cortex-A8 (413fc082); 2012 TI Sitara XAM3359AZCZ100; 1 x 1000MHz; bblack, supercop-20160806

Cycles to generate a key pair quartile median quartile system 315909 315993 316683 kummer 509237 509560 523482 curve25519 2085538 2086189 2094047 nistp256 2933884 2948373 2953091 ed448goldilocks 4621673 4667380 4707244 sclaus1024 18963062 18971201 19010491 claus 20746878 20883117 20987039 sclaus2048 Cycles to compute a shared secret quartile median quartile system 305341 305385 305882 kummer 498085 498284 512187 curve25519 4720186 4736757 4743360 sclaus1024 7260902 7262081 7282994 nistp256 8430070 8438907 8452915 ed448goldilocks 18929915 18935300 18962765 claus 21121992 21137654 21176481 sclaus2048 Secret key bytes system 20 sclaus1024 28 sclaus2048 32 curve25519 32 kummer 32 nistp256 144 ed448goldilocks 256 claus Public key bytes system 32 curve25519 48 kummer 56 ed448goldilocks 64 nistp256 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve25519 48 kummer 64 ed448goldilocks 64 nistp256 128 claus 128 sclaus1024 256 sclaus2048

armeabi; Cortex-A15 (410fc0f4); 2012 Samsung Exynos 5 Dual; 2 x 1700MHz; sachr, supercop-20140514

Cycles to generate a key pair quartile median quartile system 326150 326230 326375 curve25519 5205564 5253380 5305602 sclaus1024 11112071 11123717 11138554 claus 24540055 24698077 24858402 sclaus2048 Cycles to compute a shared secret quartile median quartile system 315247 315284 315329 curve25519 5265355 5282361 5296052 sclaus1024 11084209 11088115 11107628 claus 24790602 24806223 24830060 sclaus2048 Secret key bytes system 20 sclaus1024 28 sclaus2048 32 curve25519 256 claus Public key bytes system 32 curve25519 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve25519 128 claus 128 sclaus1024 256 sclaus2048

amd64; Piledriver (610f01); 2012 AMD A10-5800K; 2 x 3800MHz; hydra9, supercop-20160806

Cycles to generate a key pair quartile median quartile system 45868 46869 48515 jacfp127i 47217 48039 51765 kumjacfp127g 52731 53656 54878 prjfp127i 52872 53803 55317 hecfp127i 68445 69178 70457 jacfp128bk 69981 72498 77080 ecfp256e 75538 78255 82373 ecfp256h 77076 79132 83675 ecfp256s 79469 80346 82028 prjfp128bk 80109 80861 82138 hecfp128fkt 80290 80959 82064 hecfp128bk 80431 80985 84786 hecfp128i 81077 83733 88544 ecfp256q 83921 84513 88025 curve2251 113477 114258 115612 gls254 132513 134258 135634 gls1271 139489 139559 139757 gls254prot 159431 159494 159561 kumfp127g 197840 197964 198842 curve25519 226042 226064 226138 kummer 262047 262065 262097 kumfp128g 347365 349465 351627 ecfp256i 349220 376506 407860 hector 406908 407750 408323 ed448goldilocks 417968 419421 420337 surf127eps 445995 449383 454273 sclaus1024 734600 736792 740574 surf2113 1045767 1045999 1046145 nistp256 2176924 2191109 2205803 sclaus2048 2304978 2305366 2309388 ed521gs 2662380 2671651 2680718 claus 2679387 2680653 2686602 nist521gs Cycles to compute a shared secret quartile median quartile system 92371 92451 93145 gls254 121759 121775 121791 gls254prot 165142 165211 165412 kumjacfp127g 165845 165948 165949 kumfp127g 191651 191656 191934 curve25519 203175 203293 203367 jacfp128bk 208024 208132 208404 kummer 248299 248347 248471 curve2251 252063 252173 252369 prjfp128bk 259201 259299 259589 hecfp128bk 269388 269798 270048 hecfp128fkt 271004 271402 271579 jacfp127i 273350 273404 273404 kumfp128g 287386 290511 291163 gls1271 325768 325873 326201 ecfp256e 340022 340235 341045 ecfp256q 343998 344228 344383 ecfp256i 367146 367317 372327 hecfp127i 367326 367478 367725 prjfp127i 398647 398792 399023 surf127eps 409217 409473 409862 ecfp256h 426688 427032 427346 ecfp256s 437112 438347 439362 sclaus1024 576625 576807 576929 hecfp128i 720864 721118 721641 surf2113 1140338 1141627 1143566 hector 1279811 1283026 1285760 ed448goldilocks 1776293 1776345 1776398 nistp256 2214041 2216384 2220520 sclaus2048 2234479 2234512 2234652 ed521gs 2606435 2607807 2622693 claus 2624120 2624320 2624542 nist521gs Secret key bytes system 20 sclaus1024 28 sclaus2048 28 surf2113 29 hector 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 32 gls254 32 gls254prot 32 hecfp127i 32 hecfp128bk 32 hecfp128fkt 32 hecfp128i 32 jacfp127i 32 jacfp128bk 32 kumfp127g 32 kumfp128g 32 kumjacfp127g 32 kummer 32 nistp256 32 prjfp127i 32 prjfp128bk 32 surf127eps 104 nist521gs 130 ed521gs 144 ed448goldilocks 256 claus Public key bytes system 32 curve2251 32 curve25519 32 gls1271 48 kumfp127g 48 kumfp128g 48 kumjacfp127g 48 kummer 48 surf127eps 48 surf2113 56 ed448goldilocks 60 hector 64 ecfp256e 64 ecfp256h 64 ecfp256q 64 ecfp256s 64 gls254 64 gls254prot 64 hecfp127i 64 hecfp128bk 64 hecfp128fkt 64 hecfp128i 64 jacfp127i 64 jacfp128bk 64 nistp256 64 prjfp127i 64 prjfp128bk 96 ecfp256i 128 claus 128 sclaus1024 144 ed521gs 144 nist521gs 256 sclaus2048 Shared secret bytes system 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 48 kumfp127g 48 kumfp128g 48 kumjacfp127g 48 kummer 48 surf127eps 48 surf2113 60 hector 64 ed448goldilocks 64 gls254 64 gls254prot 64 hecfp127i 64 hecfp128bk 64 hecfp128fkt 64 hecfp128i 64 jacfp127i 64 jacfp128bk 64 nistp256 64 prjfp127i 64 prjfp128bk 72 ed521gs 72 nist521gs 128 claus 128 sclaus1024 256 sclaus2048

amd64; Piledriver (610f01); 2012 AMD A10-4655M; 2 x 2000MHz; h9trinity, supercop-20160806

Cycles to generate a key pair quartile median quartile system 69830 71311 75117 ecfp256e 75672 76171 78691 curve2251 75165 77352 81422 ecfp256h 76525 78826 81661 ecfp256s 81947 83450 87487 ecfp256q 102479 103388 104456 gls254 129181 129210 129346 gls254prot 190137 190359 194145 curve25519 211966 212078 212268 kummer 349142 351499 354726 ecfp256i 393082 394634 395979 surf127eps 443455 446631 451407 sclaus1024 716470 716870 719576 nistp256 723991 726137 729449 surf2113 1961148 1964642 1967489 ed521gs 2175665 2191126 2206041 sclaus2048 2297172 2301261 2447910 nist521gs 2651043 2658015 2665162 claus Cycles to compute a shared secret quartile median quartile system 89887 89987 90029 gls254 119517 119526 119535 gls254prot 191841 191846 192988 curve25519 202142 202143 202604 kummer 248098 248343 248546 curve2251 326907 327199 327529 ecfp256e 342606 343040 343291 ecfp256q 344957 345309 345692 ecfp256i 380988 381268 381822 surf127eps 410810 411200 411685 ecfp256h 430376 430604 430900 ecfp256s 440346 441022 453632 sclaus1024 713297 713734 715643 surf2113 1269137 1269184 1269412 nistp256 1921060 1924661 1926156 ed521gs 2219871 2221348 2226187 sclaus2048 2265706 2276296 2483652 nist521gs 2632609 2635846 2643160 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 28 surf2113 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls254 32 gls254prot 32 kummer 32 nistp256 32 surf127eps 104 nist521gs 130 ed521gs 256 claus Public key bytes system 32 curve2251 32 curve25519 48 kummer 48 surf127eps 48 surf2113 64 ecfp256e 64 ecfp256h 64 ecfp256q 64 ecfp256s 64 gls254 64 gls254prot 64 nistp256 96 ecfp256i 128 claus 128 sclaus1024 144 ed521gs 144 nist521gs 256 sclaus2048 Shared secret bytes system 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 48 kummer 48 surf127eps 48 surf2113 64 gls254 64 gls254prot 64 nistp256 72 ed521gs 72 nist521gs 128 claus 128 sclaus1024 256 sclaus2048