VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems

ECRYPT II

Measurements of public-key Diffie–Hellman secret-sharing systems, indexed by machine

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.

What do the graphs and tables mean?

• Time to compute a shared secret, given one user's secret key and another user's public key.
• Time to compute a key pair.
• Space for a secret key.
• Space for a public key.
• Space for a shared secret.

Each computer also has a series of tables, five tables for each computer. The first table shows the time, in cycles, to generate a key pair. Each row of the table lists

• the first quartile of many time measurements,
• the median of many time measurements,
• the third quartile of many time measurements, and
• the name of the secret-sharing systems.

The computer name is linked to additional information about the implementations and compilers selected for benchmarking.

amd64; Bobcat (500f20); 2011 AMD E-450; 2 x 1650MHz; h4e450, supercop-20120120

Cycles to generate a key pair quartile median quartile system 99363 100878 102342 ecfp256e 108351 110247 112809 ecfp256h 108654 110742 112953 ecfp256s 112539 115542 118995 ecfp256q 116772 118665 121125 ecfp256i 164847 166572 168435 gls1271 367434 367461 367500 curve25519 689349 697104 707706 sclaus1024 3349314 3376122 3456060 sclaus2048 3989682 4001739 4019697 claus Cycles to compute a shared secret quartile median quartile system 355986 356055 356088 curve25519 360081 360909 365019 gls1271 401448 401496 401829 ecfp256e 418932 418971 419271 ecfp256q 427383 427596 430365 ecfp256i 513030 513075 513513 ecfp256s 512871 513099 514029 ecfp256h 710082 711351 722358 sclaus1024 3413007 3422964 3532842 sclaus2048 3981318 3995022 4009488 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 256 claus Public key bytes system 32 curve25519 32 gls1271 64 ecfp256e 64 ecfp256h 64 ecfp256i 64 ecfp256q 64 ecfp256s 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 128 claus 128 sclaus1024 256 sclaus2048

x86; normally amd64; Bobcat (500f20); 2011 AMD E-450; 2 x 1650MHz; h4e450, supercop-20120120

Cycles to generate a key pair quartile median quartile system 899868 899901 900069 curve25519 Cycles to compute a shared secret quartile median quartile system 876783 876798 876852 curve25519 Secret key bytes system 32 curve25519 Public key bytes system 32 curve25519 Shared secret bytes system 32 curve25519

amd64; Bobcat (500f20); 2011 AMD E-450; 2 x 1650MHz; h5e450, supercop-20111120

Cycles to generate a key pair quartile median quartile system 98700 100437 101883 ecfp256e 107904 110373 112875 ecfp256h 108807 110754 112932 ecfp256s 112716 115212 119358 ecfp256q 116589 118542 120627 ecfp256i 163302 165459 166854 gls1271 367440 367449 367662 curve25519 698628 704721 713784 sclaus1024 3385470 3456069 3487638 sclaus2048 3991860 4055544 4071447 claus Cycles to compute a shared secret quartile median quartile system 354279 356034 356073 curve25519 359646 360021 361461 gls1271 400902 400944 401286 ecfp256e 418671 418827 419415 ecfp256q 426744 426786 427206 ecfp256i 513075 513123 513681 ecfp256s 513198 513606 513771 ecfp256h 712224 723951 724542 sclaus1024 3422469 3540792 3547053 sclaus2048 3973902 4042617 4054926 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 256 claus Public key bytes system 32 curve25519 32 gls1271 64 ecfp256e 64 ecfp256h 64 ecfp256i 64 ecfp256q 64 ecfp256s 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 128 claus 128 sclaus1024 256 sclaus2048

x86; normally amd64; Bobcat (500f20); 2011 AMD E-450; 2 x 1650MHz; h5e450, supercop-20111120

Cycles to generate a key pair quartile median quartile system 899907 899943 900723 curve25519 Cycles to compute a shared secret quartile median quartile system 876837 876888 881181 curve25519 Secret key bytes system 32 curve25519 Public key bytes system 32 curve25519 Shared secret bytes system 32 curve25519

amd64; Bobcat (500f20); 2011 AMD E-350; 2 x 1600MHz; h4e350, supercop-20120120

Cycles to generate a key pair quartile median quartile system 99570 101091 102759 ecfp256e 108438 110730 113640 ecfp256h 108861 111273 113460 ecfp256s 112668 116169 119667 ecfp256q 116694 118668 121140 ecfp256i 163239 165333 166758 gls1271 367293 367308 367353 curve25519 699951 706740 714234 sclaus1024 3348342 3373116 3393549 sclaus2048 3986286 4003020 4040130 claus Cycles to compute a shared secret quartile median quartile system 355872 355896 355950 curve25519 360069 361146 363357 gls1271 401316 401361 401763 ecfp256e 418872 418941 419385 ecfp256q 426966 427017 427398 ecfp256i 512889 513123 513582 ecfp256h 513219 513276 513723 ecfp256s 719043 721959 722913 sclaus1024 3405804 3415182 3458664 sclaus2048 3984567 3998517 4002159 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 256 claus Public key bytes system 32 curve25519 32 gls1271 64 ecfp256e 64 ecfp256h 64 ecfp256i 64 ecfp256q 64 ecfp256s 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 128 claus 128 sclaus1024 256 sclaus2048

x86; normally amd64; Bobcat (500f20); 2011 AMD E-350; 2 x 1600MHz; h4e350, supercop-20120120

Cycles to generate a key pair quartile median quartile system 899907 900090 900276 curve25519 Cycles to compute a shared secret quartile median quartile system 877020 877047 877083 curve25519 Secret key bytes system 32 curve25519 Public key bytes system 32 curve25519 Shared secret bytes system 32 curve25519

amd64; K10 32nm (300f10); 2011 AMD A8-3850; 4 x 2900MHz; hydra5, supercop-20120207

Cycles to generate a key pair quartile median quartile system 53606 55781 59272 ecfp256e 58151 59760 63348 ecfp256s 59002 60734 64363 ecfp256h 60659 62705 66255 ecfp256q 66919 69630 75014 ecfp256i 96884 98248 99227 gls1271 215006 215006 215011 curve25519 372552 375361 378400 sclaus1024 1819402 1831025 1842588 sclaus2048 2160959 2167685 2175252 claus Cycles to compute a shared secret quartile median quartile system 206553 206557 206571 curve25519 224452 224505 225887 gls1271 244700 244735 244740 ecfp256e 251554 251793 252068 ecfp256q 257846 257889 258115 ecfp256i 310910 311092 311344 ecfp256s 319736 319775 319793 ecfp256h 389933 390740 391289 sclaus1024 1853496 1864245 1866292 sclaus2048 2141784 2144663 2145399 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 256 claus Public key bytes system 32 curve25519 32 gls1271 64 ecfp256e 64 ecfp256h 64 ecfp256i 64 ecfp256q 64 ecfp256s 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 128 claus 128 sclaus1024 256 sclaus2048

x86; normally amd64; K10 32nm (300f10); 2011 AMD A8-3850; 4 x 2900MHz; hydra5, supercop-20120207

Cycles to generate a key pair quartile median quartile system 562207 562636 562645 curve25519 Cycles to compute a shared secret quartile median quartile system 548269 548472 548503 curve25519 Secret key bytes system 32 curve25519 Public key bytes system 32 curve25519 Shared secret bytes system 32 curve25519

amd64; K10 32nm (300f10); 2011 AMD A6-3650; 4 x 2600MHz; hydra4, supercop-20120207

Cycles to generate a key pair quartile median quartile system 53419 55057 58414 ecfp256e 58110 59795 62946 ecfp256s 58586 60208 64053 ecfp256h 60232 61936 65219 ecfp256q 66292 69260 73308 ecfp256i 96673 98015 98916 gls1271 215003 215003 215027 curve25519 372836 375855 378889 sclaus1024 1818375 1834732 1848896 sclaus2048 2162397 2168205 2175300 claus Cycles to compute a shared secret quartile median quartile system 206548 206552 206567 curve25519 224616 225244 227682 gls1271 244705 244725 244729 ecfp256e 250926 250945 251082 ecfp256q 257779 257899 258402 ecfp256i 309816 310019 310436 ecfp256s 319722 319757 319796 ecfp256h 387212 390024 391611 sclaus1024 1877768 1882896 1883919 sclaus2048 2142750 2145440 2146279 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 256 claus Public key bytes system 32 curve25519 32 gls1271 64 ecfp256e 64 ecfp256h 64 ecfp256i 64 ecfp256q 64 ecfp256s 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 128 claus 128 sclaus1024 256 sclaus2048

x86; normally amd64; K10 32nm (300f10); 2011 AMD A6-3650; 4 x 2600MHz; hydra4, supercop-20120207

Cycles to generate a key pair quartile median quartile system 562673 562805 563429 curve25519 Cycles to compute a shared secret quartile median quartile system 547872 547911 548426 curve25519 Secret key bytes system 32 curve25519 Public key bytes system 32 curve25519 Shared secret bytes system 32 curve25519

amd64; Sandy Bridge (206a7); 2011 Intel Xeon E3-1220L; 2 x 2200MHz; threads; boost; backup, supercop-20111120

Cycles to generate a key pair quartile median quartile system 35992? 36938? 77435? ecfp256h 40728? 50521? 86482? ecfp256q 47520? 59258? 100623? curve2251 36216? 64850? 75052? ecfp256e 36644? 77000? 78012? ecfp256s 40702? 85162? 86218? ecfp256i 136320? 136468? 289689? curve25519 74196? 154692? 157723? gls1271 186072? 186926? 394922? surf127eps 189608? 215666? 403238? hector 239466? 242684? 506572? sclaus1024 389290 391292 393030 surf2113 1112008 1120894 1131926 sclaus2048 1322504 1325396 1329922 claus Cycles to compute a shared secret quartile median quartile system 125440? 125554? 266442? curve25519 149228? 149524? 317235? curve2251 149508? 149992? 317775? ecfp256e 159416? 159754? 338756? ecfp256q 161788? 162168? 342425? ecfp256i 163254? 165674? 348886? gls1271 176288? 176866? 253862? surf127eps 183610? 183988? 386887? ecfp256h 223736 224436 224754 sclaus1024 384410 384620 384898 surf2113 201648? 424629? 426949? ecfp256s 620130 621588 622842 hector 1104852 1133206 1140860 sclaus2048 1298188 1299584 1304880 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 28 surf2113 29 hector 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 32 surf127eps 256 claus Public key bytes system 32 curve2251 32 curve25519 32 gls1271 48 surf127eps 48 surf2113 60 hector 64 ecfp256e 64 ecfp256h 64 ecfp256i 64 ecfp256q 64 ecfp256s 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 48 surf127eps 48 surf2113 60 hector 128 claus 128 sclaus1024 256 sclaus2048

amd64; Sandy Bridge (206a7); 2011 Intel Core i7-2600K; 4 x 3400MHz; threads; sandy0, supercop-20110708

Cycles to generate a key pair quartile median quartile system 50696 51012 51728 ecfp256e 53032 53588 54128 ecfp256h 55304 55928 56464 ecfp256s 59296 59884 60520 ecfp256q 59792 60392 61556 ecfp256i 111140 112372 113464 gls1271 203204 203328 203460 curve25519 367388 371060 374456 sclaus1024 1835500 1853616 1869024 sclaus2048 2099852 2107116 2116380 claus Cycles to compute a shared secret quartile median quartile system 193708 193836 193948 curve25519 230260 230600 231012 ecfp256e 243184 243524 243904 ecfp256q 248492 248972 249408 ecfp256i 254952 256124 258064 gls1271 282476 282800 283184 ecfp256h 313036 314736 315224 ecfp256s 377412 378784 379940 sclaus1024 1837240 1853284 1860584 sclaus2048 2070060 2079884 2088780 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 256 claus Public key bytes system 32 curve25519 32 gls1271 64 ecfp256e 64 ecfp256h 64 ecfp256i 64 ecfp256q 64 ecfp256s 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 128 claus 128 sclaus1024 256 sclaus2048

amd64; Sandy Bridge (206a7); 2011 Intel Core i5-2500K; 4 x 3293MHz; elroy, supercop-20110106

Cycles to generate a key pair quartile median quartile system 51072 51840 53192 ecfp256e 59864 60832 63072 ecfp256q 79292 79896 80472 ecfp256h 116408 117804 118820 gls1271 252044 253696 254836 ecfp256i 313320 315420 317216 ecfp256s 373124 373448 373884 curve25519 Cycles to compute a shared secret quartile median quartile system 230580 230872 231320 ecfp256e 243552 244340 246704 ecfp256q 248268 248632 249220 ecfp256i 257832 258956 260676 gls1271 283440 283888 284556 ecfp256h 309948 310496 311544 ecfp256s 360952 361192 361884 curve25519 Secret key bytes system 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 Public key bytes system 32 curve25519 32 gls1271 64 ecfp256e 64 ecfp256h 64 ecfp256q 64 ecfp256s 96 ecfp256i Shared secret bytes system 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271

amd64; Sandy Bridge (206a7); 2011 Intel Core i5-2400; 4 x 3100MHz; boost; mangetsu, supercop-20120120

Cycles to generate a key pair quartile median quartile system 49860 50507 52546 ecfp256e 52506 53057 55295 ecfp256h 54669 55337 57197 ecfp256s 58020 59526 61610 ecfp256q 59241 61008 64776 ecfp256i 67831 68490 70828 curve2251 103147 104644 105512 gls1271 191111 191302 191619 curve25519 269385 270556 272150 surf127eps 273402 292189 314833 hector 321112 324720 327792 sclaus1024 559679 561859 564433 surf2113 1617761 1628495 1641243 sclaus2048 1928469 1933366 1938471 claus Cycles to compute a shared secret quartile median quartile system 181999 182380 184149 curve25519 216038 216298 218007 curve2251 231744 232385 233692 ecfp256e 234542 235944 238141 gls1271 239659 240025 245904 ecfp256q 244349 244637 245242 ecfp256i 255116 256015 258537 surf127eps 283155 283513 284686 ecfp256h 306298 307033 307895 ecfp256s 316820 317016 317785 sclaus1024 550560 551509 552638 surf2113 890976 892954 899496 hector 1643983 1647688 1650630 sclaus2048 1897883 1900766 1905423 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 28 surf2113 29 hector 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 32 surf127eps 256 claus Public key bytes system 32 curve2251 32 curve25519 32 gls1271 48 surf127eps 48 surf2113 60 hector 64 ecfp256e 64 ecfp256h 64 ecfp256i 64 ecfp256q 64 ecfp256s 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 48 surf127eps 48 surf2113 60 hector 128 claus 128 sclaus1024 256 sclaus2048

amd64; Sandy Bridge (206a7); 2011 Intel Core i3-2310M; 2 x 2100MHz; bridge, supercop-20120207

Cycles to generate a key pair quartile median quartile system 52296 53000 53608 ecfp256e 55128 55716 56492 ecfp256h 57316 57924 58808 ecfp256s 60964 61712 62712 ecfp256q 61900 62576 64388 ecfp256i 69964 70372 71640 curve2251 112932 114196 115320 gls1271 203588 203764 203912 curve25519 285576 286696 287348 surf127eps 295508 315544 340968 hector 339864 342380 345556 sclaus1024 590992 592880 595352 surf2113 1719100 1730316 1741048 sclaus2048 2035484 2040332 2045216 claus Cycles to compute a shared secret quartile median quartile system 193980 194208 196264 curve25519 231312 231576 231768 curve2251 246224 246348 246528 ecfp256e 248032 248504 249052 gls1271 255116 255380 255720 ecfp256q 259788 260120 260508 ecfp256i 272216 272508 272936 surf127eps 300300 300432 300604 ecfp256h 322736 323152 325056 ecfp256s 336696 336820 336992 sclaus1024 581856 582328 582816 surf2113 950944 953108 959756 hector 1749236 1750500 1756340 sclaus2048 2011464 2012344 2015724 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 28 surf2113 29 hector 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 32 surf127eps 256 claus Public key bytes system 32 curve2251 32 curve25519 32 gls1271 48 surf127eps 48 surf2113 60 hector 64 ecfp256e 64 ecfp256h 64 ecfp256i 64 ecfp256q 64 ecfp256s 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 48 surf127eps 48 surf2113 60 hector 128 claus 128 sclaus1024 256 sclaus2048

x86; normally amd64; Sandy Bridge (206a7); 2011 Intel Core i3-2310M; 2 x 2100MHz; bridge, supercop-20120207

Cycles to generate a key pair quartile median quartile system 452188 453324 454724 curve25519 Cycles to compute a shared secret quartile median quartile system 436744 437920 448484 curve25519 Secret key bytes system 32 curve25519 Public key bytes system 32 curve25519 Shared secret bytes system 32 curve25519

armeabi (v7-A, Tegra 2); 2010 NVIDIA Tegra 2; 2 x 1000MHz; h5tegra, supercop-20120120

Cycles to generate a key pair quartile median quartile system 1485823 1486217 1495542 curve25519 Cycles to compute a shared secret quartile median quartile system 1476687 1477541 1478022 curve25519 Secret key bytes system 32 curve25519 Public key bytes system 32 curve25519 Shared secret bytes system 32 curve25519

ppc64; 2010 POWER7; 64 x 3550MHz; gcc1power7, supercop-20120120

Cycles to generate a key pair quartile median quartile system 1313025 1348970 1468376 sclaus1024 1826265 1882062 1949997 surf127eps 1887809 1946623 1987825 curve25519 5987996 6124552 6256628 sclaus2048 9808680 9934561 10422755 claus Cycles to compute a shared secret quartile median quartile system 1323280 1357888 1540000 sclaus1024 1814736 1871142 1915501 surf127eps 1852445 1921864 1961148 curve25519 6166566 6893936 7311696 sclaus2048 9837177 10176341 10499475 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 32 curve25519 32 surf127eps 256 claus Public key bytes system 32 curve25519 48 surf127eps 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve25519 48 surf127eps 128 claus 128 sclaus1024 256 sclaus2048

ppc32; normally ppc64; 2010 POWER7; 64 x 3550MHz; gcc1power7, supercop-20120120

Cycles to generate a key pair quartile median quartile system 4407669 4558960 4801664 curve25519 4832639 5217072 5499081 surf127eps 5138693 5470304 5904206 sclaus1024 28577843 30601935 31786272 sclaus2048 29915823 30773701 32938843 claus Cycles to compute a shared secret quartile median quartile system 4375728 4599735 4782624 curve25519 4841088 5000464 5618928 sclaus1024 5093235 5302080 5503904 surf127eps 29899324 30982672 31916143 sclaus2048 30716728 33463311 35524237 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 32 curve25519 32 surf127eps 256 claus Public key bytes system 32 curve25519 48 surf127eps 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve25519 48 surf127eps 128 claus 128 sclaus1024 256 sclaus2048

amd64; K10 45nm (100fa0); 2010 AMD Phenom II X6 1100T; 6 x 3300MHz; hydra3, supercop-20120207

Cycles to generate a key pair quartile median quartile system 77573 79755 83353 ecfp256e 80199 83178 86821 ecfp256s 82953 85148 89496 ecfp256h 83382 86752 91231 ecfp256q 90571 93842 100236 ecfp256i 113898 115428 116743 gls1271 224198 224259 224961 curve25519 292448 295026 297208 sclaus1024 307581 311112 311951 surf127eps 387992 407441 431989 hector 779658 799699 803972 surf2113 936373 959465 961052 curve2251 1341952 1351967 1366797 sclaus2048 1694705 1742059 1747233 claus Cycles to compute a shared secret quartile median quartile system 213100 213105 213363 curve25519 259390 259808 260063 gls1271 277791 277900 278822 ecfp256e 286236 286290 286338 ecfp256q 289055 289550 289794 sclaus1024 292949 293648 293649 ecfp256i 297415 297578 297678 surf127eps 348940 348990 349021 ecfp256s 359452 359502 359952 ecfp256h 759668 791650 791837 surf2113 948899 949111 950012 curve2251 1264261 1264929 1268635 hector 1366847 1367596 1368175 sclaus2048 1681687 1708857 1710629 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 28 surf2113 29 hector 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 32 surf127eps 256 claus Public key bytes system 32 curve2251 32 curve25519 32 gls1271 48 surf127eps 48 surf2113 60 hector 64 ecfp256e 64 ecfp256h 64 ecfp256i 64 ecfp256q 64 ecfp256s 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 48 surf127eps 48 surf2113 60 hector 128 claus 128 sclaus1024 256 sclaus2048

x86; normally amd64; K10 45nm (100fa0); 2010 AMD Phenom II X6 1100T; 6 x 3300MHz; hydra3, supercop-20120207

Cycles to generate a key pair quartile median quartile system 584173 584367 586640 curve25519 Cycles to compute a shared secret quartile median quartile system 570195 570278 571128 curve25519 Secret key bytes system 32 curve25519 Public key bytes system 32 curve25519 Shared secret bytes system 32 curve25519

amd64; K10 45nm (100fa0); 2010 AMD Phenom II X6 1090T; 6 x 3200MHz; agamemnon, supercop-20111120

Cycles to generate a key pair quartile median quartile system 72813 74280 79073 ecfp256h 300960 305459 310517 ecfp256s 306776 310944 316160 ecfp256e 322080 326731 330413 ecfp256q 368624 372680 377261 ecfp256i 515008 520264 525563 gls1271 1170528 1179760 1189653 sclaus1024 1219203 1223168 1225544 surf127eps 1221872 1226752 1229296 curve25519 1421696 1462035 1573192 hector 1497619 1504699 1510538 surf2113 3876283 3890147 3896576 curve2251 5389696 5426896 5463296 sclaus2048 8794480 8810867 8832704 claus Cycles to compute a shared secret quartile median quartile system 303098 304053 306505 ecfp256h 1070448 1071152 1072616 ecfp256e 1128936 1133349 1140440 gls1271 1135435 1139920 1140341 ecfp256q 1140944 1145859 1148269 ecfp256i 1158051 1169088 1171440 sclaus1024 1175531 1176248 1177016 curve25519 1177845 1179981 1181528 surf127eps 1337531 1348659 1349936 ecfp256s 1483637 1485065 1486686 surf2113 3840592 3842216 3846064 curve2251 4755936 4764565 4778723 hector 5368424 5492661 5526536 sclaus2048 8650059 8667104 8700040 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 28 surf2113 29 hector 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 32 surf127eps 256 claus Public key bytes system 32 curve2251 32 curve25519 32 gls1271 48 surf127eps 48 surf2113 60 hector 64 ecfp256e 64 ecfp256h 64 ecfp256i 64 ecfp256q 64 ecfp256s 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 48 surf127eps 48 surf2113 60 hector 128 claus 128 sclaus1024 256 sclaus2048

amd64; K10 45nm (100fa0); 2010 AMD Phenom II X6 1090T; 6 x 3200MHz; hydra1, supercop-20120120

Cycles to generate a key pair quartile median quartile system 75320 77460 80740 ecfp256e 78208 80650 83848 ecfp256s 79120 81769 85709 ecfp256h 81781 84588 88188 ecfp256q 88813 92312 97744 ecfp256i 121846 123580 124947 gls1271 220996 221011 221043 curve25519 293055 295472 298384 sclaus1024 305587 306652 307116 surf127eps 382339 400608 421128 hector 824088 827045 830009 surf2113 1018560 1022512 1023916 curve2251 1339018 1347522 1356016 sclaus2048 1737024 1741255 1745822 claus Cycles to compute a shared secret quartile median quartile system 212192 212194 212231 curve25519 263784 263952 264636 ecfp256e 265709 266187 268653 gls1271 272641 272739 273385 ecfp256q 280755 280826 280994 ecfp256i 289299 289920 291072 sclaus1024 294213 294282 294539 surf127eps 333472 333572 333755 ecfp256s 338010 338071 338326 ecfp256h 816872 817666 817780 surf2113 1009215 1009874 1009948 curve2251 1292246 1292770 1292876 hector 1365313 1365758 1366961 sclaus2048 1707672 1708370 1717209 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 28 surf2113 29 hector 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 32 surf127eps 256 claus Public key bytes system 32 curve2251 32 curve25519 32 gls1271 48 surf127eps 48 surf2113 60 hector 64 ecfp256e 64 ecfp256h 64 ecfp256i 64 ecfp256q 64 ecfp256s 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 48 surf127eps 48 surf2113 60 hector 128 claus 128 sclaus1024 256 sclaus2048

x86; normally amd64; K10 45nm (100fa0); 2010 AMD Phenom II X6 1090T; 6 x 3200MHz; hydra1, supercop-20120120

Cycles to generate a key pair quartile median quartile system 584899 585800 587893 curve25519 Cycles to compute a shared secret quartile median quartile system 568594 568720 570392 curve25519 Secret key bytes system 32 curve25519 Public key bytes system 32 curve25519 Shared secret bytes system 32 curve25519

amd64; K10 45nm (100fa0); 2010 AMD Phenom II X6 1055T; 6 x 2800MHz; phenom, supercop-20110106

Cycles to generate a key pair quartile median quartile system 287147 291018 296856 ecfp256h 294470? 299353? 1035793? sclaus1024 301609 306124 315245 ecfp256i 306131 310611 315007 ecfp256s 310411? 312234? 1088367? curve25519 310658? 312324? 1087397? surf127eps 346248 350371 353815 ecfp256q 383774? 422749? 1347087? hector 440440 446554 452249 gls1271 849709 852638 855758 surf2113 265774? 921077? 934553? ecfp256e 1053701 1062871 1065278 curve2251 1350181 1364559 1396084 sclaus2048 1506743 1737797 1757765 claus Cycles to compute a shared secret quartile median quartile system 262092 262120 262166 ecfp256e 272559 272601 272674 ecfp256q 281368? 281440? 984823? ecfp256i 282459 282565 282972 gls1271 289464 290069 290756 sclaus1024 297427 297479 297715 curve25519 297893 297984 298430 surf127eps 335858 335902 336353 ecfp256s 338639 338723 338913 ecfp256h 841075 842492 842592 surf2113 1051971 1052174 1052337 curve2251 1292753 1292972 1293562 hector 1368164 1370743 1400416 sclaus2048 1550656 1701684 1714029 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 28 surf2113 29 hector 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 32 surf127eps 256 claus Public key bytes system 32 curve2251 32 curve25519 32 gls1271 48 surf127eps 48 surf2113 60 hector 64 ecfp256e 64 ecfp256h 64 ecfp256i 64 ecfp256q 64 ecfp256s 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 48 surf127eps 48 surf2113 60 hector 128 claus 128 sclaus1024 256 sclaus2048

x86; normally amd64; K10 45nm (100fa0); 2010 AMD Phenom II X6 1055T; 6 x 2800MHz; phenom, supercop-20110106

Cycles to generate a key pair quartile median quartile system 528705? 566671? 1839292? hector 586982 587667 596044 curve25519 895593 909374 920399 sclaus1024 1251822 1255399 1259405 surf2113 1291179 1300423 1307307 surf127eps 1593630 1599472 1604390 curve2251 4458222 4496714 4532063 sclaus2048 5197800 5213809 5230709 claus Cycles to compute a shared secret quartile median quartile system 569742 570822 570945 curve25519 940021 942116 944496 sclaus1024 1241381 1242181 1243165 surf2113 1277851 1278696 1279127 surf127eps 1581330 1583670 1588913 curve2251 1784205 1784724 1791932 hector 4619848 4626405 4635978 sclaus2048 5202084 5212282 5228531 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 28 surf2113 29 hector 32 curve2251 32 curve25519 32 surf127eps 256 claus Public key bytes system 32 curve2251 32 curve25519 48 surf127eps 48 surf2113 60 hector 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve2251 32 curve25519 48 surf127eps 48 surf2113 60 hector 128 claus 128 sclaus1024 256 sclaus2048

amd64; Nehalem (206e6); 2010 Intel Xeon X7560; 32 x 2266MHz; threads; boost; bigmem, supercop-20110825

Cycles to generate a key pair quartile median quartile system 62115 63766 67775 ecfp256e 67750 68251 70197 ecfp256h 67172 69851 76951 ecfp256s 73557 75035 78942 ecfp256q 74052 77060 85374 ecfp256i 114410 116042 117182 gls1271 126131 130950 136595 curve2251 227785 227828 228106 curve25519 303985? 331234? 393871? hector 371973 373116 374553 surf127eps 410287 414596 418614 sclaus1024 626209 628706 631262 surf2113 1975119 1991754 2071232 sclaus2048 2451452 2463727 2532192 claus Cycles to compute a shared secret quartile median quartile system 216240 216827 218023 curve25519 268652 270625 281783 gls1271 287210 287587 288175 ecfp256e 302161 303314 304927 ecfp256q 305805 306256 307357 ecfp256i 355943 356400 357859 ecfp256h 359300 359995 361485 surf127eps 384432 384930 386509 ecfp256s 404365 405110 406650 sclaus1024 451951 474140 476807 curve2251 618018 618809 620176 surf2113 1004669 1014582 1133748 hector 2004368 2016308 2144899 sclaus2048 2421431 2434514 2499633 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 28 surf2113 29 hector 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 32 surf127eps 256 claus Public key bytes system 32 curve2251 32 curve25519 32 gls1271 48 surf127eps 48 surf2113 60 hector 64 ecfp256e 64 ecfp256h 64 ecfp256i 64 ecfp256q 64 ecfp256s 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 48 surf127eps 48 surf2113 60 hector 128 claus 128 sclaus1024 256 sclaus2048

amd64; Westmere (206c2); 2010 Intel Xeon X5680; 12 x 3325MHz; threads; boost; cryptologic, supercop-20120120

Cycles to generate a key pair quartile median quartile system 115445 117506 120871 gls1271 136417 137917 141050 ecfp256e 144875 146508 149075 ecfp256h 147100 148400 151158 ecfp256s 158692 160300 162775 ecfp256q 166975 168375 171800 ecfp256i 285816 287167 293509 curve2251 499450 499959 502425 curve25519 660442 697175 753533 hector 823459 826383 832409 surf127eps 1051342 1062292 1073409 sclaus1024 1363351 1373979 1450875 surf2113 4990159 5017066 5052734 sclaus2048 6048192 6074833 6088392 claus Cycles to compute a shared secret quartile median quartile system 263309 266900 275300 gls1271 474567 474650 475991 curve25519 658275 659433 661791 ecfp256e 670875 671934 676492 ecfp256q 683992 686775 696367 ecfp256i 796866 798725 811325 ecfp256h 797550 798792 804725 surf127eps 856742 857833 866408 ecfp256s 1051067 1062725 1069075 curve2251 1072175 1076025 1092759 sclaus1024 1340149 1345077 1362993 surf2113 2210941 2218434 2230942 hector 5055866 5098117 5104892 sclaus2048 5979975 5986650 6011517 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 28 surf2113 29 hector 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 32 surf127eps 256 claus Public key bytes system 32 curve2251 32 curve25519 32 gls1271 48 surf127eps 48 surf2113 60 hector 64 ecfp256e 64 ecfp256h 64 ecfp256i 64 ecfp256q 64 ecfp256s 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 48 surf127eps 48 surf2113 60 hector 128 claus 128 sclaus1024 256 sclaus2048

x86; normally amd64; Westmere (206c2); 2010 Intel Xeon X5680; 12 x 3325MHz; threads; boost; cryptologic, supercop-20120120

Cycles to generate a key pair quartile median quartile system 933275 958625 1032475 hector 1195133 1195359 1210000 curve25519 1519434 1533091 1549284 sclaus1024 2432358 2446975 2458325 surf2113 2632858 2642691 2652491 curve2251 3105442 3113391 3122150 surf127eps 3408909? 3437724? 5014830? sclaus2048 3943003? 8745875? 8806442? claus Cycles to compute a shared secret quartile median quartile system 1172567 1172716 1187409 curve25519 1595591 1610483 1621975 sclaus1024 2407883 2424834 2428150 surf2113 2617091 2624075 2627683 curve2251 2851921 3078091 3089150 surf127eps 3223258 3239484 3249250 hector 3527491? 3541148? 7774292? sclaus2048 3922321? 8744975? 8809266? claus Secret key bytes system 20 sclaus1024 28 sclaus2048 28 surf2113 29 hector 32 curve2251 32 curve25519 32 surf127eps 256 claus Public key bytes system 32 curve2251 32 curve25519 48 surf127eps 48 surf2113 60 hector 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve2251 32 curve25519 48 surf127eps 48 surf2113 60 hector 128 claus 128 sclaus1024 256 sclaus2048

amd64; Westmere (206c2); 2010 Intel Xeon E5620; 8 x 2401MHz; threads; boost; giant4, supercop-20120207

Cycles to generate a key pair quartile median quartile system 62478? 65733? 92517? ecfp256e 64920 66891 71928 ecfp256h 67233? 70821? 102687? ecfp256s 71472 73011 77208 ecfp256q 75513? 90204? 106353? ecfp256i 115581? 118110? 196383? gls1271 228429? 229185? 294117? curve25519 436512 441819 450021 sclaus1024 2245107 2353182 2541945 sclaus2048 2517657 2540703 2799036 claus Cycles to compute a shared secret quartile median quartile system 216048? 216900? 290322? curve25519 291708? 299154? 434142? ecfp256e 302850 303141 303570 ecfp256q 308469? 357093? 460986? ecfp256i 358128 358362 364857 ecfp256h 386808 387669 460233 ecfp256s 272793? 413526? 465090? gls1271 447504? 458133? 612543? sclaus1024 2226654 2284551 2491626 sclaus2048 2492103 2511471 2842590 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 256 claus Public key bytes system 32 curve25519 32 gls1271 64 ecfp256e 64 ecfp256h 64 ecfp256i 64 ecfp256q 64 ecfp256s 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 128 claus 128 sclaus1024 256 sclaus2048

amd64; Westmere (206c2); 2010 Intel Xeon E5620; 4 x 2400MHz; threads; db01, supercop-20111120

Cycles to generate a key pair quartile median quartile system 76440 77220 78388 ecfp256i 96270 97164 98616 ecfp256e 103926 105012 106356 ecfp256s 107472 108168 109170 ecfp256h 114414 115260 116568 ecfp256q 119394 119898 120888 curve2251 183876 185850 187548 gls1271 313860 328524 358876 hector 438696 438990 439266 curve25519 606006 608208 609486 surf127eps 692592 699510 705684 sclaus1024 706812 709920 712676 surf2113 2069560? 2093936? 3097002? sclaus2048 2568768 2574332 2580496 claus Cycles to compute a shared secret quartile median quartile system 324472 326784 328464 ecfp256i 394260 394494 394722 curve2251 411228 414582 416814 gls1271 420570 420792 421104 curve25519 457650 459516 460206 ecfp256e 477744 480000 480498 ecfp256q 569226 574566 575544 ecfp256h 586716 588642 589194 surf127eps 612048 617064 618270 ecfp256s 698300 698732 699408 surf2113 707316 710034 712062 sclaus1024 1050504 1053732 1057708 hector 2053552 2120948 2126352 sclaus2048 2520820 2524684 2530844 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 28 surf2113 29 hector 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 32 surf127eps 256 claus Public key bytes system 32 curve2251 32 curve25519 32 gls1271 48 surf127eps 48 surf2113 60 hector 64 ecfp256e 64 ecfp256h 64 ecfp256i 64 ecfp256q 64 ecfp256s 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 48 surf127eps 48 surf2113 60 hector 128 claus 128 sclaus1024 256 sclaus2048