VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

General information:	Introduction	eBASH	eBASC	eBAEAD	eBATS	SUPERCOP	XBX	Computers

How to submit new software:	Tips	hash	stream	aead	dh	kem	encrypt	sign

List of primitives measured:	lwc	sha3	hash	stream	lwc	caesar	aead	dh	kem	encrypt	sign

Measurements indexed by machine:	lwc	sha3	hash	stream	lwc	caesar	aead	dh	kem	encrypt	sign

List of subroutines:	verify	decode	encode	sort	core	hashblocks	scalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems, indexed by machine

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents the benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Time (cycles) to generate a key pair: a secret key and a corresponding public key.
Time to compute a shared secret, given one user's secret key and another user's public key.
Space (bytes) for a secret key.
Space for a public key.
Space for a shared secret.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation.

Each computer name is linked to additional information about the implementations and compilers selected for benchmarking.

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.

Sizes across machines

Secret key
bytes	system
20	sclaus1024
28	sclaus2048
28	surf2113
29	hector
32	curve2251
32	curve25519
32	ecfp256e
32	ecfp256h
32	ecfp256i
32	ecfp256q
32	ecfp256s
32	gls1271
32	gls254
32	gls254prot
32	hecfp127i
32	hecfp128bk
32	hecfp128fkt
32	hecfp128i
32	jacfp127i
32	jacfp128bk
32	k298
32	kumfp127g
32	kumfp128g
32	kumjacfp127g
32	kummer
32	nistp256
32	prjfp127i
32	prjfp128bk
32	surf127eps
48	k277mon
48	k277taa
104	nist521gs
130	ed521gs
144	ed448goldilocks
256	claus

Public key
bytes	system
32	curve2251
32	curve25519
32	gls1271
48	kumfp127g
48	kumfp128g
48	kumjacfp127g
48	kummer
48	surf127eps
48	surf2113
56	ed448goldilocks
60	hector
64	ecfp256e
64	ecfp256h
64	ecfp256q
64	ecfp256s
64	gls254
64	gls254prot
64	hecfp127i
64	hecfp128bk
64	hecfp128fkt
64	hecfp128i
64	jacfp127i
64	jacfp128bk
64	nistp256
64	prjfp127i
64	prjfp128bk
80	k277mon
80	k277taa
96	ecfp256i
96	k298
128	claus
128	sclaus1024
144	ed521gs
144	nist521gs
256	sclaus2048

Shared secret
bytes	system
32	curve2251
32	curve25519
32	ecfp256e
32	ecfp256h
32	ecfp256i
32	ecfp256q
32	ecfp256s
32	gls1271
32	gls254prot
32..32..64	gls254
40	k277mon
40	k277taa
48	k298
48	kumfp127g
48	kumfp128g
48	kumjacfp127g
48	kummer
48	surf127eps
48	surf2113
60	hector
64	ed448goldilocks
64	hecfp127i
64	hecfp128bk
64	hecfp128fkt
64	hecfp128i
64	jacfp127i
64	jacfp128bk
64	nistp256
64	prjfp127i
64	prjfp128bk
72	ed521gs
72	nist521gs
128	claus
128	sclaus1024
256	sclaus2048

amd64; Zen3 (a50f00); 2021 AMD Ryzen 5 5560U; 6 x 4062MHz; `beelink`, `supercop-20221122`

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
33734	35155	39802	T: curve2251
37826	37995	38008	T: gls254prot
37272	38274	38659	T: gls254
46750	46770	46841	T: k277taa
47697	47752	47905	T: kummer
52744	52872	53245	T: k298
54019	54996	56224	T: gls1271
73649	73693	73773	T: k277mon
102507	102661	102824	T: curve25519
139792	140126	140514	T: surf127eps
156767	157050	157379	T: ed448goldilocks
200647	202727	204578	T: sclaus1024
209722	210036	210198	T: nistp256
367234	369072	370210	T: surf2113
757107	758860	764001	T: ed521gs
872057	875803	876158	T: nist521gs
1006445	1015073	1020480	T: sclaus2048
1198628	1201136	1204247	T: claus

Cycles to compute a shared secret
25%	50%	75%	system
35332	35368	35374	T: gls254
37851	37898	37931	T: gls254prot
46702	46745	46836	T: k277taa
47842	47897	48070	T: kummer
52590	52675	52753	T: k298
73618	73688	73725	T: k277mon
110876	110972	111112	T: curve25519
126036	129335	132317	T: gls1271
129803	131087	131198	T: curve2251
135835	136451	136730	T: surf127eps
202626	205515	206705	T: sclaus1024
363140	363460	363827	T: surf2113
517434	518481	518742	T: ed448goldilocks
563375	563907	564446	T: nistp256
758675	758870	760360	T: ed521gs
872278	873146	874983	T: nist521gs
1018626	1020025	1021087	T: sclaus2048
1198236	1199872	1202629	T: claus

aarch64; Firestorm (610f0230); 2020 Apple M1; 4 x 3200MHz; unstable; `minimac`, `supercop-20211108`

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
103596?	106662?	191459?	T: kummer
106662?	107063?	196792?	T: curve25519
159594?	159860?	261590?	T: nistp256
489848?	492114?	801969?	T: ed521gs
667441?	668907?	980761?	T: nist521gs

Cycles to compute a shared secret
25%	50%	75%	system
103063?	103996?	168927?	T: kummer
106662?	107062?	174526?	T: curve25519
424383?	424783?	622109?	T: nistp256
489847?	490248?	656374?	T: ed521gs
666774	667574	780236	T: nist521gs

amd64; Zen3 (a20f10); 2020 AMD Ryzen 9 5950X; 16 x 3400MHz; `zen3`, `supercop-20220213`

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
33550	34336	37499	T: curve2251
36365	36513	37501	T: gls254
37936	37937	37952	T: gls254prot
46733	46795	46877	T: k277taa
49095	49145	49182	T: kummer
53802	54362	54972	T: gls1271
62217	62354	62808	T: k298
73089	73203	73278	T: k277mon
102285	102373	102495	T: curve25519
140529	141187	141634	T: surf127eps
159195	159496	159723	T: ed448goldilocks
207217	208665	210377	T: sclaus1024
222820	223237	223320	T: nistp256
367798	369470	370460	T: surf2113
716599	719778	729310	T: ed521gs
880981	882015	884294	T: nist521gs
1019127	1019797	1023602	T: claus
1013728	1021401	1029771	T: sclaus2048

Cycles to compute a shared secret
25%	50%	75%	system
35264	35341	35442	T: gls254
37854	37885	37886	T: gls254prot
46634	46717	46804	T: k277taa
49103	49139	49166	T: kummer
62092	62181	62313	T: k298
73031	73086	73130	T: k277mon
110825	110904	110991	T: curve25519
129784	130071	131187	T: curve2251
129270	130535	131907	T: gls1271
137060	138423	138483	T: surf127eps
208043	208798	210458	T: sclaus1024
364367	365479	366016	T: surf2113
525993	526466	527032	T: ed448goldilocks
600802	602448	603146	T: nistp256
716085	717688	727485	T: ed521gs
883003	884791	887358	T: nist521gs
1016339	1017224	1018546	T: claus
1001141	1028056	1029316	T: sclaus2048

amd64; TigerLake (806c1); 2020 Intel Core i7-1165G7; 4 x 2800MHz; unstable; `pascalinspiron75062n1`, `supercop-20210125`

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
34713	35424	35982	T: gls254
44020?	44122?	62494?	T: k277taa
40251?	48857?	52389?	T: curve2251
40731?	55280?	55846?	T: gls254prot
48486?	59179?	66204?	T: kummer
66531?	66652?	90521?	T: k277mon
68058	68503	70155	T: k298
85612?	143849?	148600?	T: gls1271
121691?	167095?	168975?	T: curve25519
201555?	202390?	349382?	T: ed448goldilocks
413114?	682870?	684613?	T: nistp256
817128?	820394?	1420902?	T: ed521gs
1057456	1080821	1081832	T: claus
966532?	1605510?	1671940?	T: nist521gs

Cycles to compute a shared secret
25%	50%	75%	system
33932	34009	34088	T: gls254
43953?	44086?	62441?	T: k277taa
40617?	55032?	55657?	T: gls254prot
48345?	58817?	66103?	T: kummer
66462?	66666?	90539?	T: k277mon
67516	68008	69718	T: k298
142970?	165794?	180848?	T: curve2251
130971?	181117?	181710?	T: curve25519
193504?	325432?	352758?	T: gls1271
618730?	621789?	1130834?	T: ed448goldilocks
824258?	827097?	1419341?	T: ed521gs
1050336	1052075	1074540	T: claus
909142?	1420240?	1423559?	T: nistp256
975478?	1596616?	1671468?	T: nist521gs

aarch64; A72 (410fd083); 2019 Broadcom BCM2711; 4 x 1500MHz; `pi4b`, `supercop-20221122`

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
248671	248718	248899	T: kummer
349428	350528	350530	T: curve25519
369706	373763	373894	T: nistp256
421516	423228	424835	T: surf127eps
596586	601454	607959	T: sclaus1024
1956581	1957883	1967423	T: ed521gs
2397865	2409229	2436610	T: nist521gs
2985787	3008474	3033932	T: sclaus2048
3598546	3608259	3626566	T: claus

Cycles to compute a shared secret
25%	50%	75%	system
248844	248852	249089	T: kummer
350476	351136	351136	T: curve25519
401757	407720	409762	T: surf127eps
595686	604209	604345	T: sclaus1024
1296352	1307520	1307797	T: nistp256
1957228	1957612	1974231	T: ed521gs
2396713	2407369	2430056	T: nist521gs
2959913	2993583	3008120	T: sclaus2048
3602631	3610960	3620952	T: claus

ppc64; POWER9 (004e1203); 2019? IBM 02CY642; 22 x 3800MHz; `power9`, `supercop-20210326`

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
153845	153989	154567	T: curve25519
219096	221593	236369	T: sclaus1024
233761	234189	239890	T: kummer
324530	324909	325258	T: nistp256
380449	381816	383291	T: surf127eps
939493	947857	967568	T: sclaus2048
990417	991668	1005008	T: ed521gs
1260583	1261379	1293254	T: nist521gs
1300860	1350527	1401659	T: claus

Cycles to compute a shared secret
25%	50%	75%	system
153687	153861	157772	T: curve25519
224841	226275	237648	T: sclaus1024
233518	235179	243935	T: kummer
368934	370377	372535	T: surf127eps
876979	877598	878065	T: nistp256
949847	953575	968856	T: sclaus2048
989193	989902	1006598	T: ed521gs
1260082	1260694	1262851	T: nist521gs
1301062	1351044	1401612	T: claus

amd64; Zen2 (830f10); 2019 AMD EPYC 7742; 64 x 2250MHz; unstable; `colossus6`, `supercop-20210125`

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
20205?	23107?	26212?	T: hecfp127i
24525	27045	30307	T: jacfp128bk
22860?	28553?	31410?	T: jacfp127i
27945	29745	33840	T: curve2251
27405	29925	32895	T: ecfp256e
30082	30375	30735	T: gls254
30397	30420	30442	T: gls254prot
27630	30555	32895	T: kumjacfp127g
24615?	30713?	34020?	T: prjfp127i
30127?	31342?	39713?	T: hecfp128fkt
29273	31523	34493	T: hecfp128bk
31275?	33907?	39262?	T: ecfp256s
30915?	35123?	42075?	T: ecfp256h
32760	36292	39758	T: hecfp128i
36968	37012	37057	T: k277taa
31433?	37372?	40410?	T: prjfp128bk
34650?	39105?	45608?	T: ecfp256q
38880	39172	39195	T: kummer
42863	43583	44370	T: gls1271
43942	44528	46395	T: k298
57690	57690	57758	T: kumfp127g
58860	58860	59310	T: k277mon
75713	75758	75870	T: kumfp128g
93780	94297	94635	T: curve25519
100058	100620	101542	T: surf127eps
109597	109958	113400	T: ed448goldilocks
109597	110385	111330	T: ecfp256i
114255	116370	123750	T: sclaus1024
148297	153675	161032	T: hector
164115	165510	170685	T: nistp256
367988	369720	372420	T: surf2113
550237	551745	556538	T: ed521gs
585697	590580	596588	T: sclaus2048
652050	652522	658372	T: nist521gs
678690	682830	689355	T: claus

Cycles to compute a shared secret
25%	50%	75%	system
28710	28755	28868	T: gls254
30330	30330	30330	T: gls254prot
36653	36923	37215	T: k277taa
38902	39150	39172	T: kummer
43785	43807	43830	T: k298
58657	58658	59107	T: kumfp127g
58770	58815	59625	T: jacfp128bk
58815	58815	59265	T: k277mon
59153	59288	59940	T: kumjacfp127g
69570	69615	70178	T: prjfp128bk
71167	71348	71730	T: hecfp128bk
73643	73733	73935	T: hecfp128fkt
79672	79673	80167	T: kumfp128g
90000	90315	91013	T: jacfp127i
93780	94342	94590	T: curve25519
97110	97312	97920	T: surf127eps
101160	101183	101812	T: ecfp256e
104310	105300	108112	T: gls1271
106493	106830	107325	T: ecfp256i
107775	107933	108720	T: curve2251
110677	110767	111555	T: ecfp256q
110723	110835	112095	T: prjfp127i
112995	113062	113490	T: hecfp127i
115808	116303	117382	T: sclaus1024
124605	124740	125662	T: ecfp256h
147622	147735	148725	T: ecfp256s
156398	156555	156623	T: hecfp128i
336465	337275	339795	T: ed448goldilocks
369292	369788	372442	T: surf2113
402075	402817	405608	T: nistp256
512842	515498	525915	T: hector
548887	549562	551115	T: ed521gs
583065	586597	590220	T: sclaus2048
647505	648517	649778	T: nist521gs
677453	679455	685845	T: claus

amd64; Zen2 (830f10); 2019 AMD EPYC 7742; 64 x 2250MHz; unstable; `colossus7`, `supercop-20210125`

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
25695	26460	27630	T: jacfp127i
25492	26752	28305	T: prjfp127i
29430	30352	33142	T: curve2251
29610	31410	33030	T: jacfp128bk
29970	31725	32625	T: hecfp127i
31972	32288	32422	T: gls254
32423	33053	33120	T: gls254prot
32625	33480	35843	T: hecfp128i
32895	34380	36518	T: prjfp128bk
38115	39128	40702	T: hecfp128bk
39218	39577	40163	T: k277taa
39060	40297	41377	T: hecfp128fkt
44573	45428	46328	T: kummer
47002	47632	48330	T: k298
61065	62550	63158	T: k277mon
58095	67612	72022	T: gls1271
92835	95895	106673	T: kumfp128g
109283	117697	130838	T: curve25519
126540	134618	154553	T: ed448goldilocks
192578	203738	224820	T: nistp256
594360	606397	680602	T: ed521gs
708638	719528	745133	T: nist521gs

Cycles to compute a shared secret
25%	50%	75%	system
30420	30757	30803	T: gls254
31905	32625	32647	T: gls254prot
38610	38745	39150	T: k277taa
43897	43965	44325	T: kummer
46102	46373	46553	T: k298
61515	63000	63090	T: k277mon
83700	84578	90068	T: kumfp128g
85973	86963	94500	T: jacfp128bk
98145	102015	116797	T: hecfp128bk
101273	102038	102420	T: curve25519
98325	108068	112207	T: prjfp128bk
105705	110677	118170	T: hecfp128fkt
113985	115042	115065	T: curve2251
112500	117653	124200	T: gls1271
118080	125663	131355	T: jacfp127i
135113	143505	162900	T: hecfp127i
176332	182205	193028	T: prjfp127i
178830	184050	193612	T: hecfp128i
362632	365220	372420	T: ed448goldilocks
438840	441315	444060	T: nistp256
581535	595035	604237	T: ed521gs
701910	711248	719055	T: nist521gs

amd64; CometLake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; `comet`, `supercop-20221025`

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
20961	21454	22270	T: kumjacfp127g
21572	22576	23315	T: jacfp127i
25261	26053	26949	T: prjfp127i
25996	26854	27832	T: hecfp127i
30267	31328	32259	T: jacfp128bk
35808	36454	37276	T: prjfp128bk
37201	37471	37858	T: gls254
36964	37929	39196	T: hecfp128i
37548	38244	39122	T: hecfp128fkt
37744	38410	39173	T: hecfp128bk
38269	38836	39693	T: curve2251
39061	39098	39147	T: gls254prot
45139	45656	46463	T: ecfp256e
45886	46293	46331	T: k277taa
46023	46898	48889	T: ecfp256h
49317	49825	50475	T: ecfp256s
51387	51941	52956	T: ecfp256q
53340	53403	53487	T: kummer
54086	54195	54408	T: k298
69921	70762	71611	T: gls1271
70365	71721	72298	T: k277mon
79226	79395	80104	T: kumfp127g
112736	112804	112916	T: kumfp128g
126478	126705	126951	T: curve25519
153511	153752	153969	T: ed448goldilocks
177698	179528	181105	T: sclaus1024
184190	187033	187854	T: surf127eps
192971	196204	203161	T: ecfp256i
235513	236319	237024	T: nistp256
257327	264420	276371	T: hector
504448	506315	507508	T: surf2113
816517	817163	818623	T: ed521gs
912497	922458	965766	T: sclaus2048
968400	969442	976609	T: claus
978281	979937	982372	T: nist521gs

Cycles to compute a shared secret
25%	50%	75%	system
36139	36198	36292	T: gls254
38866	38905	38970	T: gls254prot
45686	46070	46105	T: k277taa
53214	53286	53350	T: kummer
53331	53422	53526	T: k298
71615	71720	72960	T: k277mon
81649	82198	82607	T: kumfp127g
82941	83819	83961	T: kumjacfp127g
89129	89199	89325	T: jacfp128bk
108668	109210	110174	T: prjfp128bk
114237	114522	114879	T: hecfp128bk
117916	118031	118231	T: hecfp128fkt
118063	118162	118348	T: kumfp128g
124483	125615	125928	T: jacfp127i
136171	136590	137443	T: curve25519
143766	144005	144139	T: curve2251
166194	166810	167329	T: prjfp127i
167692	168961	169421	T: hecfp127i
172057	174412	176158	T: gls1271
175382	179286	179682	T: sclaus1024
179396	179749	180622	T: ecfp256e
179904	182356	183419	T: surf127eps
188871	189145	189754	T: ecfp256i
189274	189591	190288	T: ecfp256q
222509	222824	223451	T: ecfp256h
241566	242083	242672	T: ecfp256s
254453	255188	255860	T: hecfp128i
458517	458832	459161	T: ed448goldilocks
504878	505329	505736	T: surf2113
584151	585057	587562	T: nistp256
817024	822628	837240	T: ed521gs
873090	878162	884112	T: hector
930086	953186	968792	T: sclaus2048
965273	965981	973616	T: claus
978963	980355	982574	T: nist521gs

amd64; IceLake (706e5); 2019 Intel Core i3-1035G1; 4 x 1000MHz; `icelake2`, `supercop-20221005`

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
29422	29626	29829	T: gls254
31535	31597	31656	T: gls254prot
35682	35925	36460	T: curve2251
38387	38493	38628	T: k277taa
41914	42156	42522	T: k298
49631	49729	49925	T: kummer
55148	55241	55618	T: k277mon
63541	64616	65455	T: gls1271
121235	121421	121705	T: curve25519
145378	145817	146240	T: ed448goldilocks
167451	169019	171086	T: surf127eps
210381	213080	215609	T: sclaus1024
229401	230861	233076	T: nistp256
393994	396192	398488	T: surf2113
794593	796389	798799	T: ed521gs
960681	964206	967325	T: nist521gs
1075292	1088726	1104624	T: sclaus2048
1262611	1266981	1272519	T: claus

Cycles to compute a shared secret
25%	50%	75%	system
28828	28879	28947	T: gls254
31458	31518	31670	T: gls254prot
38263	38368	38587	T: k277taa
41591	41823	42184	T: k298
49524	49615	49793	T: kummer
55067	55157	55384	T: k277mon
130070	130318	130992	T: curve25519
140066	140553	140999	T: curve2251
158547	160294	161947	T: gls1271
163805	165182	167813	T: surf127eps
212667	213688	216268	T: sclaus1024
391304	393743	396581	T: surf2113
469404	470206	471471	T: ed448goldilocks
596086	598954	603025	T: nistp256
794467	795618	798066	T: ed521gs
959187	961357	964090	T: nist521gs
1087069	1091597	1115555	T: sclaus2048
1264288	1268970	1273171	T: claus

amd64; CascadeLake (50657); 2019 Intel Core i9-10980XE; 18 x 3000MHz; `avx512imath`, `supercop-20210125`

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
22942	23920	25532	T: jacfp127i
24521	25508	26466	T: kumjacfp127g
30537	32391	34632	T: prjfp127i
31488	33166	35239	T: hecfp127i
33309	34366	35420	T: jacfp128bk
35112	35712	37647	T: prjfp128bk
38459	38763	41612	T: curve2251
38696	39119	39493	T: gls254
40378	40410	40446	T: gls254prot
41277	43173	46538	T: hecfp128bk
41880	43460	46879	T: hecfp128fkt
43162	44302	47228	T: ecfp256e
43205	44922	46417	T: hecfp128i
45616	46857	50701	T: ecfp256h
47040	48039	51942	T: ecfp256s
48533	48578	48625	T: kummer
50011	50042	50100	T: k277taa
50836	51368	52401	T: ecfp256q
69976	71077	72303	T: gls1271
74181	74401	74479	T: k277mon
79992	80102	80227	T: kumfp127g
113033	113138	113281	T: kumfp128g
126053	127104	127295	T: curve25519
180867	181318	181751	T: ed448goldilocks
192604	193530	195076	T: ecfp256i
230062	232318	234278	T: sclaus1024
274593	274830	286603	T: nistp256
815460	816320	817222	T: ed521gs
945603	946034	946657	T: nist521gs
976164	976586	977059	T: claus
1149504	1158740	1167421	T: sclaus2048

Cycles to compute a shared secret
25%	50%	75%	system
37542	37566	37600	T: gls254
40277	40303	40335	T: gls254prot
48451	48495	48544	T: kummer
49946	49981	50031	T: k277taa
74104	74343	74414	T: k277mon
82293	82388	82513	T: kumfp127g
83670	83756	83833	T: kumjacfp127g
89241	89321	89393	T: jacfp128bk
109675	109801	109973	T: prjfp128bk
117523	117687	117840	T: hecfp128bk
118274	118346	118798	T: kumfp128g
120759	120853	120965	T: hecfp128fkt
125607	125699	125818	T: jacfp127i
136236	136787	137606	T: curve25519
142402	144055	144380	T: curve2251
166911	167038	167186	T: prjfp127i
170436	170638	174190	T: hecfp127i
171219	173467	179102	T: gls1271
177659	177835	178025	T: ecfp256e
187333	187569	187788	T: ecfp256q
188174	188325	188525	T: ecfp256i
221385	221564	221721	T: ecfp256h
241705	241876	242093	T: ecfp256s
244691	246341	249729	T: sclaus1024
258262	258759	259196	T: hecfp128i
509021	509336	509626	T: ed448goldilocks
686877	687235	687513	T: nistp256
815272	815800	816798	T: ed521gs
945263	945700	946329	T: nist521gs
970505	970866	971374	T: claus
1175498	1186144	1192945	T: sclaus2048

aarch64; Skylark (503f0002); 2018 Ampere eMAG 8180; 32 x 3300MHz; unstable; `gcc185`, `supercop-20221122`

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
251475	251550	251550	T: curve25519
319800	319875	319875	T: kummer
359250	360450	361950	T: surf127eps
417525	421425	424050	T: sclaus1024
446475	446550	446700	T: nistp256
1551300	1551300	1552725	T: ed521gs
1893600	1893600	1893825	T: nist521gs
2011800	2030100	2043075	T: sclaus2048
2472600	2478075	2484300	T: claus

Cycles to compute a shared secret
25%	50%	75%	system
251475	251475	251475	T: curve25519
319800	319800	319800	T: kummer
351900	355200	356325	T: surf127eps
413550	422550	428775	T: sclaus1024
999150	999150	999150	T: nistp256
1551600	1551600	1551600	T: ed521gs
1893300	1893300	1893375	T: nist521gs
2032650	2034900	2041575	T: sclaus2048
2470200	2473800	2476500	T: claus

aarch64; A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; `pi3aplus`, `supercop-20221122`

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
422142	427201	428401	T: kummer
469637	475131	475311	T: curve25519
473251	478043	478658	T: nistp256
609447	612861	615570	T: surf127eps
997045	1005628	1019043	T: sclaus1024
3100828	3145520	3160808	T: ed521gs
3601356	3649157	3658747	T: nist521gs
4909592	4948255	4997230	T: sclaus2048
5553122	5565532	5582570	T: claus

Cycles to compute a shared secret
25%	50%	75%	system
421426	426641	427379	T: kummer
475903	481449	481615	T: curve25519
606059	607071	611862	T: surf127eps
1010084	1015229	1020164	T: sclaus1024
1600273	1605000	1613138	T: nistp256
3099190	3145238	3159950	T: ed521gs
3582681	3594926	3602171	T: nist521gs
4900628	4946618	5013522	T: sclaus2048
5481574	5498392	5516280	T: claus

aarch64; A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; `pi3bplus`, `supercop-20221122`

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
442319	444043	449701	T: kummer
492069	495231	503014	T: curve25519
497812	499676	510295	T: nistp256
636257	639354	649627	T: surf127eps
1034295	1047803	1059053	T: sclaus1024
3271958	3277476	3285880	T: ed521gs
3754766	3761540	3767633	T: nist521gs
5122133	5159867	5187106	T: sclaus2048
5662293	5668737	5677147	T: claus

Cycles to compute a shared secret
25%	50%	75%	system
441908	443565	448570	T: kummer
499040	501398	509526	T: curve25519
634002	638178	646084	T: surf127eps
1029032	1043381	1065578	T: sclaus1024
1679856	1683642	1689166	T: nistp256
3269999	3275964	3281048	T: ed521gs
3752830	3758994	3765772	T: nist521gs
5126587	5157736	5255378	T: sclaus2048
5632129	5638581	5647012	T: claus

amd64; Zen (810f10); 2018 AMD Ryzen 5 2400G; 4 x 3600MHz; unstable; `gcc67`, `supercop-20210125`

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
26100	28887	30179	T: jacfp127i
27798	29148	31092	T: prjfp127i
28176	29450	30679	T: kumjacfp127g
31042	33271	34776	T: hecfp127i
35417	38204	39641	T: jacfp128bk
38816	39290	39867	T: prjfp128bk
38636	39626	41575	T: ecfp256e
39229	40837	42683	T: hecfp128bk
40174	40878	41505	T: hecfp128fkt
41275	41674	43237	T: curve2251
41120	43241	44824	T: hecfp128i
41835	43622	46974	T: ecfp256h
44795	45128	45436	T: gls254
43529	45452	48952	T: ecfp256s
45971	46031	46102	T: gls254prot
45924	46771	49560	T: ecfp256q
56790	56836	57064	T: k277taa
66249	66755	67447	T: gls1271
74196	74339	74542	T: k298
90249	90287	91185	T: k277mon
93088	95119	95502	T: kummer
101568	101636	101729	T: kumfp127g
133240	133311	133411	T: kumfp128g
143961	144006	144021	T: curve25519
183938	184827	186105	T: ecfp256i
189608	190564	193164	T: surf127eps
201021	203066	204964	T: sclaus1024
210045	210207	210545	T: ed448goldilocks
369991	370321	370625	T: nistp256
513214	515401	524601	T: surf2113
971495	972254	973966	T: ed521gs
996317	1004779	1015192	T: sclaus2048
1191690	1194896	1198080	T: claus
1197072	1198680	1200438	T: nist521gs

Cycles to compute a shared secret
25%	50%	75%	system
43843	43888	43905	T: gls254
45912	45973	46030	T: gls254prot
56606	56708	56743	T: k277taa
74122	74233	74354	T: k298
87582	90181	90219	T: k277mon
93049	95106	95464	T: kummer
104235	104338	104366	T: kumfp127g
104572	104619	104740	T: jacfp128bk
106352	106428	106486	T: kumjacfp127g
126596	126715	126881	T: prjfp128bk
129908	130080	130174	T: hecfp128bk
134371	134529	134739	T: hecfp128fkt
139257	139309	140127	T: kumfp128g
156686	156933	158458	T: curve25519
160599	161303	169512	T: gls1271
162311	162476	163170	T: jacfp127i
162533	163305	163972	T: curve2251
174075	174244	174585	T: ecfp256e
182367	182586	183086	T: ecfp256i
183685	183800	183967	T: ecfp256q
183883	184106	188444	T: surf127eps
203613	203710	204185	T: prjfp127i
195600	204265	206569	T: sclaus1024
207468	207758	208062	T: hecfp127i
215646	215720	215883	T: ecfp256h
235825	236173	236390	T: ecfp256s
285708	285886	286139	T: hecfp128i
507678	514240	515933	T: surf2113
641513	643332	645617	T: ed448goldilocks
676527	677324	677905	T: nistp256
969593	970968	972690	T: ed521gs
990477	996065	998992	T: sclaus2048
1196328	1197132	1199707	T: nist521gs
1193789	1197872	1199786	T: claus

amd64; CoffeeLake (906ea); 2018 Intel Xeon E-2124; 4 x 3300MHz; `r24000`, `supercop-20221019`

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
22279	23845	25952	T: kumjacfp127g
24658	26035	27740	T: jacfp127i
26228	27670	30368	T: hecfp127i
27507	29128	31119	T: prjfp127i
33228	34568	35972	T: jacfp128bk
36862	37746	38364	T: gls254
38825	38871	38923	T: gls254prot
38351	39756	41805	T: hecfp128i
38689	39909	41350	T: prjfp128bk
39360	39994	41565	T: curve2251
40294	41514	43495	T: hecfp128fkt
40795	42412	43980	T: hecfp128bk
43088	44356	46963	T: ecfp256e
45842	45879	45913	T: k277taa
45918	47166	49806	T: ecfp256h
48826	49548	50574	T: ecfp256s
48767	49805	52266	T: ecfp256q
52846	52897	52956	T: kummer
54579	54906	55427	T: k298
68916	69668	70399	T: gls1271
71295	71330	71389	T: k277mon
79043	79161	79279	T: kumfp127g
110371	110432	110502	T: kumfp128g
125190	125589	126077	T: curve25519
153209	153364	153629	T: ed448goldilocks
175757	177435	178930	T: sclaus1024
182604	183426	184131	T: surf127eps
190163	191032	192149	T: ecfp256i
245386	245631	245917	T: nistp256
507401	509086	510570	T: surf2113
807730	807994	808337	T: ed521gs
885610	892232	898760	T: sclaus2048
935185	935435	935850	T: nist521gs
966959	967413	968156	T: claus

Cycles to compute a shared secret
25%	50%	75%	system
35750	35788	35839	T: gls254
38591	38630	38675	T: gls254prot
45615	45644	45667	T: k277taa
53343	53391	53455	T: kummer
54408	54640	55067	T: k298
71212	71244	71290	T: k277mon
81387	81558	82986	T: kumfp127g
82600	82677	82770	T: kumjacfp127g
87790	87866	87938	T: jacfp128bk
108031	108148	108334	T: prjfp128bk
112179	112333	112531	T: hecfp128bk
115575	115640	116396	T: kumfp128g
116342	116477	116766	T: hecfp128fkt
123777	123859	123967	T: jacfp127i
134847	135269	136471	T: curve25519
144346	144646	144781	T: curve2251
165137	165314	165521	T: prjfp127i
167432	167589	167785	T: hecfp127i
175567	175735	175886	T: ecfp256e
173122	175893	178168	T: gls1271
178601	178786	180000	T: sclaus1024
179442	179992	180338	T: surf127eps
185231	185391	185558	T: ecfp256i
185291	185467	185655	T: ecfp256q
220100	220316	220601	T: ecfp256h
240029	240211	240408	T: ecfp256s
247994	248194	248427	T: hecfp128i
455229	455604	460737	T: ed448goldilocks
511965	512976	513920	T: surf2113
599229	599397	599590	T: nistp256
807354	807522	807841	T: ed521gs
872594	888008	888837	T: sclaus2048
934852	935033	935316	T: nist521gs
961474	961980	962829	T: claus

riscv64; U54 (sifive,u54-mc); 2017 SiFive Freedom U540; 4 x 1000MHz; `riscvunleashed000`, `supercop-20210326`

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
1176291	1176624	1191114	T: kummer
1332777	1333831	1350970	T: curve25519
1792948	1797783	1817687	T: nistp256
6035312	6051076	6062589	T: ed521gs
7185443	7186713	7198473	T: nist521gs
13742830	13754983	13762774	T: claus

Cycles to compute a shared secret
25%	50%	75%	system
1176017	1176157	1189878	T: kummer
1331496	1332360	1349154	T: curve25519
3494268	3494893	3495869	T: nistp256
6033781	6048489	6050121	T: ed521gs
7183650	7184938	7186026	T: nist521gs
13675066	13687602	13699928	T: claus

amd64; Zen (800f12); 2017 AMD EPYC 7501; 32 x 2000MHz; unstable; `colossus5`, `supercop-20210125`

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
27500	28060	28680	T: kumjacfp127g
27980?	30540?	36080?	T: jacfp127i
29920	30940	31840	T: prjfp127i
36520	38720	41680	T: hecfp127i
41440	42600	45240	T: ecfp256e
42420	44540	47160	T: hecfp128fkt
43660	44880	46180	T: hecfp128i
42980	45060	49220	T: prjfp128bk
43980	45720	50540	T: hecfp128bk
44400	45940	47600	T: jacfp128bk
45140	46300	50160	T: curve2251
46260	49380	57780	T: ecfp256s
45940?	50680?	59540?	T: ecfp256h
48240	51640	59280	T: ecfp256q
51640	51940	52500	T: gls254
53080	53200	54420	T: gls254prot
64800	64820	65360	T: k277taa
64900	65600	66500	T: gls1271
76360	76540	77280	T: k298
93480	93840	93940	T: k277mon
101720	101960	102080	T: kummer
101980	102060	102140	T: kumfp127g
133380	133440	133520	T: kumfp128g
144340	144440	150280	T: curve25519
185480	186320	187800	T: ecfp256i
236760	237420	239040	T: ed448goldilocks
266280	268740	271400	T: sclaus1024
337600	338140	346520	T: nistp256
1025440	1028200	1040120	T: ed521gs
1193560	1196640	1206080	T: nist521gs
1339820	1343540	1349060	T: claus
1346920	1359380	1369280	T: sclaus2048

Cycles to compute a shared secret
25%	50%	75%	system
49660	49680	49860	T: gls254
53080	53200	54240	T: gls254prot
64720	64800	65180	T: k277taa
76260	76320	76440	T: k298
93140	93420	93620	T: k277mon
101680	101820	102020	T: kummer
104480	104500	104540	T: kumfp127g
104920	105000	105220	T: jacfp128bk
106340	106380	106480	T: kumjacfp127g
126760	126820	126920	T: prjfp128bk
130100	130340	130840	T: hecfp128bk
135280	135360	135460	T: hecfp128fkt
139280	139300	139360	T: kumfp128g
156840	157400	158900	T: curve25519
162580	162720	162880	T: jacfp127i
162320	163500	164540	T: curve2251
165780	167580	170840	T: gls1271
173760	173920	174100	T: ecfp256e
183020	183120	183360	T: ecfp256i
183760	184040	184560	T: ecfp256q
203900	204020	204440	T: prjfp127i
207240	207320	207400	T: hecfp127i
216180	216320	216420	T: ecfp256h
235780	235960	236260	T: ecfp256s
279440	280420	281360	T: sclaus1024
285800	286040	286440	T: hecfp128i
687360	688840	688980	T: ed448goldilocks
865500	865780	866200	T: nistp256
1024780	1025700	1041580	T: ed521gs
1192620	1195240	1213300	T: nist521gs
1334160	1335540	1340600	T: claus
1371360	1377440	1387380	T: sclaus2048

amd64; Zen (800f11); 2017 AMD Ryzen 7 1700; 8 x 3000MHz; `rumba7`, `supercop-20220506`

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
28522	29448	30465	T: jacfp127i
29235	30018	30923	T: kumjacfp127g
32500	33641	35048	T: prjfp127i
32873	33826	35155	T: hecfp127i
37869	38838	39785	T: jacfp128bk
39958	40907	43432	T: curve2251
40097	41164	43930	T: ecfp256e
40965	42352	44282	T: hecfp128i
43562	43674	43903	T: gls254
42913	43973	44931	T: prjfp128bk
43272	44391	45405	T: hecfp128fkt
43852	44572	45593	T: hecfp128bk
44791	44813	44879	T: gls254prot
43700	45950	51371	T: ecfp256h
44664	46737	51654	T: ecfp256s
47112	49230	53959	T: ecfp256q
55680	55904	55975	T: k277taa
66971	67174	67423	T: k298
67243	67966	68535	T: gls1271
87075	87223	87260	T: k277mon
95119	95211	95691	T: kummer
101898	101961	102028	T: kumfp127g
133273	133326	133386	T: kumfp128g
144498	144528	149366	T: curve25519
184708	185586	186939	T: ecfp256i
186957	187598	187931	T: surf127eps
199453	199615	199901	T: ed448goldilocks
201458	203043	204976	T: sclaus1024
272760	272901	273454	T: nistp256
530694	533435	534721	T: surf2113
896534	897672	899498	T: ed521gs
988744	997326	1006009	T: sclaus2048
1094801	1096097	1140749	T: nist521gs
1191652	1195375	1198766	T: claus

Cycles to compute a shared secret
25%	50%	75%	system
42435	42447	42464	T: gls254
44745	44773	44820	T: gls254prot
55740	55829	55899	T: k277taa
67006	67098	67182	T: k298
87159	87199	87221	T: k277mon
95066	95110	95659	T: kummer
103827	103928	104014	T: jacfp128bk
104383	104447	104566	T: kumfp127g
106275	106395	106493	T: kumjacfp127g
126640	126716	126887	T: prjfp128bk
129849	129963	130091	T: hecfp128bk
134558	134718	134839	T: hecfp128fkt
139129	139171	139210	T: kumfp128g
157200	158972	172551	T: curve25519
159523	160098	160800	T: curve2251
162475	162546	162826	T: jacfp127i
163447	163711	167613	T: gls1271
173433	173525	173602	T: ecfp256e
181951	182171	182296	T: ecfp256i
183317	183597	183685	T: ecfp256q
183372	183765	184261	T: surf127eps
197493	203312	204718	T: sclaus1024
203515	203813	204255	T: prjfp127i
207447	207622	209398	T: hecfp127i
216350	216397	216500	T: ecfp256h
235470	235809	236609	T: ecfp256s
285827	286103	287064	T: hecfp128i
527494	532035	532498	T: surf2113
586294	586995	589535	T: ed448goldilocks
663841	664045	664435	T: nistp256
895604	897628	899323	T: ed521gs
985451	989803	1004919	T: sclaus2048
1095547	1096742	1143434	T: nist521gs
1185630	1194512	1200167	T: claus

amd64; Zen (800f11); 2017 AMD Ryzen 5 1600; 6 x 3200MHz; `rumba5`, `supercop-20220506`

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
29820	30575	31661	T: jacfp127i
29890	30910	32174	T: kumjacfp127g
32881	34168	35893	T: prjfp127i
33820	34964	36552	T: hecfp127i
38198	39529	40743	T: jacfp128bk
39855	41197	44646	T: curve2251
40587	41807	44913	T: ecfp256e
43536	44423	45548	T: prjfp128bk
44791	44813	44879	T: gls254prot
44716	44879	45045	T: gls254
43949	45104	46195	T: hecfp128bk
44240	45297	46076	T: hecfp128fkt
44406	45384	46225	T: hecfp128i
44464	46640	52357	T: ecfp256h
45227	47437	52715	T: ecfp256s
47746	50177	55743	T: ecfp256q
55670	55824	55956	T: k277taa
64847	65443	65725	T: k298
66231	66938	67681	T: gls1271
87097	87190	87290	T: k277mon
95114	95656	95690	T: kummer
101854	101937	102021	T: kumfp127g
133254	133321	133375	T: kumfp128g
144562	144581	144616	T: curve25519
184723	185692	186967	T: ecfp256i
187228	187899	188320	T: surf127eps
199328	199526	199805	T: ed448goldilocks
201041	202596	204636	T: sclaus1024
273658	273821	273974	T: nistp256
531504	533908	536114	T: surf2113
895508	896733	899010	T: ed521gs
990003	998299	1006779	T: sclaus2048
1095713	1096749	1097764	T: nist521gs
1190513	1194051	1197808	T: claus

Cycles to compute a shared secret
25%	50%	75%	system
42165	42183	42201	T: gls254
44736	44764	44814	T: gls254prot
55718	55815	55906	T: k277taa
64674	64723	64777	T: k298
87071	87140	87216	T: k277mon
95017	95637	95640	T: kummer
104400	104463	104516	T: kumfp127g
104390	104489	104617	T: jacfp128bk
106331	106396	106466	T: kumjacfp127g
126456	126512	126600	T: prjfp128bk
130022	130152	130321	T: hecfp128bk
134518	134612	134757	T: hecfp128fkt
139092	139122	139313	T: kumfp128g
157260	157515	159050	T: curve25519
159897	161339	161986	T: curve2251
162475	162670	162797	T: jacfp127i
159990	164133	165312	T: gls1271
173521	173761	174755	T: ecfp256e
181997	182175	182346	T: ecfp256i
183262	183355	183501	T: ecfp256q
183564	184818	185061	T: surf127eps
197840	201320	202203	T: sclaus1024
203935	204135	205185	T: prjfp127i
207366	207491	207692	T: hecfp127i
216169	216277	216409	T: ecfp256h
235661	235744	235977	T: ecfp256s
285464	285708	286026	T: hecfp128i
532518	533309	535304	T: surf2113
588527	590392	590617	T: ed448goldilocks
664008	664208	665032	T: nistp256
895079	896875	897726	T: ed521gs
981121	1000432	1015455	T: sclaus2048
1093802	1094939	1095910	T: nist521gs
1191120	1192145	1200226	T: claus

amd64; KabyLake (906e9); 2017 Intel Xeon E3-1220 v6; 4 x 3000MHz; `kizomba`, `supercop-20220506`

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
20851	21905	23770	T: kumjacfp127g
22036	23085	24459	T: jacfp127i
26111	27143	28889	T: prjfp127i
25792	27405	30594	T: hecfp127i
30881	32228	34799	T: jacfp128bk
35002	36536	38685	T: prjfp128bk
36873	37170	42381	T: gls254
38099	38258	39401	T: curve2251
37567	38663	41037	T: hecfp128bk
37716	38750	39881	T: hecfp128i
38797	38859	38929	T: gls254prot
37448	38905	42046	T: hecfp128fkt
42740	43700	48925	T: ecfp256e
45748	45901	46000	T: k277taa
45272	46051	50689	T: ecfp256h
47411	48044	50655	T: ecfp256s
48104	49067	54722	T: ecfp256q
50220	50478	50621	T: kummer
52500	52621	52822	T: k298
69947	70170	70414	T: k277mon
69669	70559	74691	T: gls1271
79186	79307	79410	T: kumfp127g
110575	110654	115361	T: kumfp128g
125299	127466	130839	T: curve25519
153137	153645	159359	T: ed448goldilocks
175730	177926	182206	T: sclaus1024
180933	181688	186841	T: surf127eps
189793	191131	196818	T: ecfp256i
234534	235076	240404	T: nistp256
492555	495274	515714	T: surf2113
810139	815290	854933	T: ed521gs
903210	953304	986315	T: sclaus2048
944671	960199	997258	T: nist521gs
980736	994998	1035344	T: claus

Cycles to compute a shared secret
25%	50%	75%	system
35685	35734	35786	T: gls254
38482	38528	38587	T: gls254prot
45477	45552	45762	T: k277taa
50047	50214	50711	T: kummer
52204	52294	52379	T: k298
69907	70103	70298	T: k277mon
81385	81494	86327	T: kumfp127g
82822	82925	87703	T: kumjacfp127g
88004	88081	88213	T: jacfp128bk
108696	108881	109298	T: prjfp128bk
112387	112521	117323	T: hecfp128bk
115789	115855	120804	T: kumfp128g
119224	119557	124262	T: hecfp128fkt
124360	124494	129690	T: jacfp127i
135216	137258	140010	T: curve25519
144609	144792	150490	T: curve2251
165054	165224	165556	T: prjfp127i
167161	167326	168416	T: hecfp127i
171686	172744	176702	T: gls1271
175597	175847	181095	T: ecfp256e
176345	177919	183298	T: surf127eps
174165	178496	183189	T: sclaus1024
184776	185024	190282	T: ecfp256i
185274	185635	192729	T: ecfp256q
217976	218307	223321	T: ecfp256h
237461	237744	243424	T: ecfp256s
251448	251812	257952	T: hecfp128i
456494	457581	476097	T: ed448goldilocks
491102	493428	513579	T: surf2113
577334	583032	617388	T: nistp256
810129	820489	858772	T: ed521gs
943736	953557	992889	T: nist521gs
913989	955709	983087	T: sclaus2048
965851	978851	1017369	T: claus

amd64; KabyLake (806e9); 2017 Intel Core i7-7567U; 2 x 3500MHz; unstable; `intelnuci7`, `supercop-20211108`

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
22854	24024	25244	T: jacfp127i
23076	24178	25666	T: kumjacfp127g
25138	26386	27910	T: hecfp127i
26244	27416	29766	T: prjfp127i
31346	32408	33938	T: jacfp128bk
36088	37424	39956	T: hecfp128i
36862	38122	40248	T: hecfp128fkt
37220	38230	39526	T: prjfp128bk
38020	38250	38618	T: gls254
39342	39458	40200	T: curve2251
38304	39606	41796	T: hecfp128bk
40044	40110	40194	T: gls254prot
43854	44594	45714	T: ecfp256e
47236	47288	47348	T: k277taa
46768	47648	49566	T: ecfp256h
47006	47776	49534	T: ecfp256s
49462	50440	52650	T: ecfp256q
51894	52200	52956	T: kummer
54288	54370	54510	T: k298
72248	72378	72610	T: k277mon
71994	72788	73588	T: gls1271
81552	81646	81752	T: kumfp127g
114092	114148	114208	T: kumfp128g
129368	129626	129896	T: curve25519
158112	158318	158604	T: ed448goldilocks
180542	182522	184208	T: sclaus1024
186540	187234	187858	T: surf127eps
195688	196738	197926	T: ecfp256i
217550	226366	238000	T: hector
242064	242480	270748	T: nistp256
508152	510326	511366	T: surf2113
836516	836864	837546	T: ed521gs
913382	920252	927792	T: sclaus2048
970706	971326	972396	T: nist521gs
1006838	1008496	1011858	T: claus

Cycles to compute a shared secret
25%	50%	75%	system
36850	36928	36980	T: gls254
39768	39814	39892	T: gls254prot
46934	46980	47032	T: k277taa
51804	52124	52280	T: kummer
54098	54176	54274	T: k298
72352	72518	74482	T: k277mon
83886	83962	84030	T: kumfp127g
85274	85362	85450	T: kumjacfp127g
90890	90990	91088	T: jacfp128bk
111918	112022	112158	T: prjfp128bk
118500	118660	118848	T: hecfp128bk
119418	119482	119546	T: kumfp128g
122602	122806	123004	T: hecfp128fkt
127970	128042	128146	T: jacfp127i
139286	139568	140018	T: curve25519
148680	149586	149718	T: curve2251
170368	170516	170720	T: prjfp127i
173236	173498	175470	T: hecfp127i
174868	179314	179672	T: gls1271
172194	180938	185840	T: sclaus1024
181232	181406	181554	T: ecfp256e
183398	183722	184034	T: surf127eps
190906	191084	191228	T: ecfp256i
191248	191408	191566	T: ecfp256q
225138	225284	225548	T: ecfp256h
245790	246000	246200	T: ecfp256s
256004	256202	256392	T: hecfp128i
471048	471346	471646	T: ed448goldilocks
505542	506108	508468	T: surf2113
595818	596138	596506	T: nistp256
740472	746538	753674	T: hector
836072	836278	836634	T: ed521gs
912476	915646	935020	T: sclaus2048
970230	970696	972034	T: nist521gs
991354	993798	1041200	T: claus

amd64; KabyLake (806e9); 2017 Intel Core i3-7100; 2 x 2400MHz; `whosthere`, `supercop-20221122`

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
37280	37489	37771	T: gls254
39263	39314	39369	T: gls254prot
41644	42004	42820	T: curve2251
45813	46319	46401	T: k277taa
53218	53607	54066	T: k298
53484	53871	55445	T: kummer
71128	71273	72399	T: k277mon
112849	114255	115628	T: gls1271
126059	127356	128223	T: curve25519
154497	155659	156258	T: ed448goldilocks
192916	194391	196007	T: surf127eps
197126	199570	201477	T: sclaus1024
300445	301390	302205	T: nistp256
529936	531945	534974	T: surf2113
893927	897039	900085	T: ed521gs
1001554	1013118	1033949	T: sclaus2048
1045202	1048643	1054813	T: claus
1049260	1053776	1056028	T: nist521gs

Cycles to compute a shared secret
25%	50%	75%	system
36096	36152	36305	T: gls254
38864	38954	39027	T: gls254prot
46063	46107	46164	T: k277taa
52774	52928	53262	T: k298
53451	53773	55644	T: kummer
71065	72270	72328	T: k277mon
135972	136643	137230	T: curve25519
144115	144493	145510	T: curve2251
186994	188482	190065	T: surf127eps
198564	201605	204874	T: sclaus1024
273946	277886	282463	T: gls1271
461335	462594	462918	T: ed448goldilocks
527628	529760	532633	T: surf2113
683477	687360	690652	T: nistp256
897139	900975	904698	T: ed521gs
1007386	1012028	1031660	T: sclaus2048
1036894	1043861	1049575	T: claus
1050369	1054542	1056565	T: nist521gs

armeabi; Cortex-A7 (410fc075); 2016 Broadcom BCM2836; 4 x 900MHz; `berry2`, `supercop-20221122`

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
580378	580648	593158	T: kummer
926209	926618	944145	T: curve25519
1253615	1255050	1275609	T: nistp256
3458293	3493442	3534864	T: sclaus1024
15894115	16016845	16135432	T: sclaus2048
20399360	20483369	20586323	T: claus

Cycles to compute a shared secret
25%	50%	75%	system
580098	580217	580863	T: kummer
925948	926188	942821	T: curve25519
3511598	3617134	3642686	T: sclaus1024
4302598	4317948	4319165	T: nistp256
15981536	16158493	16287307	T: sclaus2048
20487646	20570854	20779373	T: claus

amd64; Goldmont (506c9); 2016 Intel Celeron J3455; 4 x 1500MHz; `wooden`, `supercop-20221122`

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
62309	63612	66842	T: curve2251
71350	72655	73570	T: gls254
90714	90720	90721	T: gls254prot
125046	125049	125055	T: k277taa
124311	125540	126661	T: gls1271
136570	136604	137387	T: k298
181186	181191	181195	T: k277mon
278725	278725	278730	T: curve25519
352397	352642	353306	T: ed448goldilocks
382920	384289	384901	T: surf127eps
386865	390043	393866	T: sclaus1024
403520	403525	403538	T: kummer
424150	424188	424284	T: nistp256
728133	731211	732169	T: surf2113
1880009	1895203	1906941	T: sclaus2048
2004178	2004856	2005935	T: ed521gs
2318197	2319237	2320026	T: nist521gs
2319407	2324160	2328625	T: claus

Cycles to compute a shared secret
25%	50%	75%	system
67546	68354	69455	T: gls254
90542	90543	90546	T: gls254prot
124919	124920	124920	T: k277taa
136350	136370	136400	T: k298
181073	181073	181075	T: k277mon
240901	241987	242025	T: curve2251
278343	278343	278343	T: curve25519
312200	312677	313657	T: gls1271
377567	379316	380826	T: surf127eps
389075	390970	395286	T: sclaus1024
403287	403434	403434	T: kummer
716229	719140	725661	T: surf2113
1153288	1153296	1153518	T: ed448goldilocks
1460521	1461878	1462100	T: nistp256
1903161	1931514	1938329	T: sclaus2048
2003686	2004230	2004678	T: ed521gs
2317864	2318620	2319411	T: nist521gs
2313912	2322788	2326946	T: claus

amd64; BW+AES (406f1); 2016 Intel Xeon E5-2609 v4; 8 x 1700MHz; `bolero`, `supercop-20221122`

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
24588	25420	27984	T: jacfp127i
25792	26688	31012	T: kumjacfp127g
28360	29436	35376	T: prjfp127i
28180?	32376?	37508?	T: hecfp127i
31628	33056	36380	T: jacfp128bk
37640	37924	43296	T: gls254
39280	39448	44140	T: gls254prot
38456	39820	45752	T: hecfp128fkt
40300	41044	46316	T: curve2251
40440	41272	45988	T: hecfp128bk
38156	41440	45984	T: prjfp128bk
41000	43268	46268	T: hecfp128i
43520	46608	51084	T: ecfp256e
49304	49580	58872	T: k277taa
49492	51612	59664	T: ecfp256s
51372	52876	61552	T: ecfp256q
48252?	53236?	62840?	T: ecfp256h
55468	59280	66060	T: k298
60096	60800	69232	T: kummer
73288	74476	82648	T: k277mon
78200	82652	91916	T: gls1271
82776	83956	95596	T: kumfp127g
130188	135096	149968	T: kumfp128g
143320	147952	161396	T: curve25519
157132	163572	186188	T: ed448goldilocks
193244	200420	224812	T: sclaus1024
198460	206984	230792	T: surf127eps
203320	210888	231428	T: ecfp256i
248712	258988	288812	T: nistp256
628124	663608	707548	T: surf2113
942132	979728	1026328	T: ed521gs
994356	1031132	1064904	T: sclaus2048
1042852	1074800	1110968	T: claus
1086972	1129916	1172100	T: nist521gs

Cycles to compute a shared secret
25%	50%	75%	system
36156	36428	41940	T: gls254
39192	39240	39392	T: gls254prot
49244	53704	58948	T: k277taa
55284	55452	65836	T: k298
60364	63020	68968	T: kummer
73164	73264	83328	T: k277mon
86708	91332	103028	T: kumfp127g
93216	96296	107356	T: kumjacfp127g
96036	96348	105676	T: jacfp128bk
117200	121948	132768	T: prjfp128bk
120876	125448	135496	T: hecfp128bk
127920	132844	150784	T: hecfp128fkt
135508	140492	160040	T: kumfp128g
143008	147612	166496	T: curve25519
153812	159504	172492	T: curve2251
155180	160152	180432	T: jacfp127i
187456	192864	218240	T: hecfp127i
185368	194672	219028	T: prjfp127i
186184	195664	214964	T: ecfp256e
193544	199072	225748	T: gls1271
192640	199460	221920	T: surf127eps
192904	199956	221072	T: ecfp256q
193136	202444	223864	T: sclaus1024
201368	206128	229092	T: ecfp256i
233548	238596	263568	T: ecfp256h
252664	262600	290032	T: ecfp256s
276500	286984	315484	T: hecfp128i
479064	509576	532548	T: ed448goldilocks
631448	665560	689612	T: surf2113
632120	670704	701804	T: nistp256
953380	989436	1026480	T: ed521gs
973888	1004756	1058408	T: sclaus2048
1040488	1081068	1114844	T: claus
1084708	1121460	1167224	T: nist521gs

aarch64; A53+crypto (410fd034); 2015 NXP QorIQ LS1088; 8 x 1600MHz; `ten64`, `supercop-20210604`

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
423808	423808	423808	T: kummer
469632	470272	470464	T: curve25519
482496	482816	483392	T: nistp256
566784	569280	570752	T: surf127eps
982080	992512	1003136	T: sclaus1024
3096256	3102272	3104896	T: ed521gs
3682432	3689344	3690944	T: nist521gs
4828992	4864960	4911872	T: sclaus2048
5186560	5188608	5210560	T: claus

Cycles to compute a shared secret
25%	50%	75%	system
423488	423488	423744	T: kummer
476032	476096	476352	T: curve25519
568448	569472	570112	T: surf127eps
978944	988544	999424	T: sclaus1024
1651776	1651840	1658944	T: nistp256
3096704	3102656	3104000	T: ed521gs
3680448	3687104	3687360	T: nist521gs
4787136	4838016	4860352	T: sclaus2048
5176128	5177472	5180032	T: claus

amd64; Skylake (506e3); 2015 Intel Xeon E3-1220 v5; 4 x 3000MHz; `samba`, `supercop-20221122`

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
21128	21739	23303	T: kumjacfp127g
22549	24352	26418	T: jacfp127i
25630	27084	29950	T: prjfp127i
26147	27959	30407	T: hecfp127i
30834	32290	34796	T: jacfp128bk
36226	36914	38929	T: hecfp128i
36900	37276	37920	T: gls254
36724	38421	41583	T: prjfp128bk
38828	38877	38916	T: gls254prot
38501	39366	41663	T: curve2251
38328	39752	42657	T: hecfp128bk
38702	40075	43173	T: hecfp128fkt
43460	44380	46441	T: ecfp256e
45815	45848	45876	T: k277taa
45346	45963	48221	T: ecfp256h
46525	47568	49315	T: ecfp256s
48474	49281	51393	T: ecfp256q
52121	52286	55021	T: k298
53525	53580	53643	T: kummer
68922	69734	70342	T: gls1271
71294	71331	71369	T: k277mon
78909	79036	79151	T: kumfp127g
110389	110452	110535	T: kumfp128g
125270	125532	125826	T: curve25519
153174	153403	153639	T: ed448goldilocks
175874	177366	178984	T: sclaus1024
182693	183531	183998	T: surf127eps
190067	191017	192139	T: ecfp256i
245451	245722	245989	T: nistp256
504771	506921	508060	T: surf2113
807892	808193	808727	T: ed521gs
888364	897943	951031	T: sclaus2048
935211	935787	939066	T: nist521gs
967156	967858	969674	T: claus

Cycles to compute a shared secret
25%	50%	75%	system
35759	35799	35841	T: gls254
38595	38645	38672	T: gls254prot
45622	45648	45672	T: k277taa
51966	52081	55228	T: k298
52873	52920	52967	T: kummer
71209	71238	71277	T: k277mon
81213	81308	81389	T: kumfp127g
82619	82693	82777	T: kumjacfp127g
87784	87879	87956	T: jacfp128bk
108059	108189	108326	T: prjfp128bk
111714	111833	111989	T: hecfp128bk
115553	115602	115659	T: kumfp128g
115920	116041	116239	T: hecfp128fkt
123807	123904	123991	T: jacfp127i
134962	135329	135643	T: curve25519
144976	145273	145947	T: curve2251
165178	165330	165499	T: prjfp127i
167190	167367	170934	T: hecfp127i
167863	172535	173876	T: gls1271
175647	175846	176090	T: ecfp256e
174974	178767	179988	T: sclaus1024
178766	179692	180310	T: surf127eps
185249	185399	185599	T: ecfp256q
185303	185441	185688	T: ecfp256i
220144	220378	220627	T: ecfp256h
239924	240093	240353	T: ecfp256s
247986	248170	248369	T: hecfp128i
454935	455180	455479	T: ed448goldilocks
501901	503899	505176	T: surf2113
599209	599430	599740	T: nistp256
807442	807800	808251	T: ed521gs
889587	912617	957639	T: sclaus2048
934874	935250	938283	T: nist521gs
961543	962604	964181	T: claus

amd64; Airmont (406c3); 2015 Intel Pentium N3700; 4 x 1600MHz; `nucnuc`, `supercop-20221122`

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
106155	108923	118479	T: curve2251
139961	142726	145391	T: gls254
187683	189980	192188	T: gls1271
205800	205967	206582	T: gls254prot
287770	287916	288262	T: k277taa
306831	310476	312651	T: k298
422193	422329	422516	T: k277mon
448837	448923	452351	T: curve25519
568220	570122	572886	T: surf127eps
570918	573128	574388	T: kummer
607179	607718	608732	T: nistp256
762121	763073	765340	T: ed448goldilocks
778960	787588	797657	T: sclaus1024
1136086	1143004	1158181	T: surf2113
3662204	3667745	3674968	T: ed521gs
3797528	3825205	3853584	T: sclaus2048
4316532	4323472	4329736	T: nist521gs
4659940	4674266	4688083	T: claus

Cycles to compute a shared secret
25%	50%	75%	system
131475	139715	141919	T: gls254
205397	205569	205774	T: gls254prot
287546	287714	287874	T: k277taa
305672	307190	309195	T: k298
422001	422105	422183	T: k277mon
421674	425980	426205	T: curve2251
448784	448846	452296	T: curve25519
450443	453713	456685	T: gls1271
561374	563154	567529	T: surf127eps
570773	572870	574114	T: kummer
789598	796421	819453	T: sclaus1024
1132638	1139203	1150075	T: surf2113
2092780	2094338	2102610	T: nistp256
2635019	2636790	2640510	T: ed448goldilocks
3659848	3664081	3670051	T: ed521gs
3857761	3868809	3871505	T: sclaus2048
4313252	4316236	4323531	T: nist521gs
4665707	4678422	4692484	T: claus

amd64; BW+AES (306d4); 2015 Intel Core i3-5005U; 2 x 1900MHz; `shoe`, `supercop-20221122`

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
37553	37783	38025	T: gls254
39487	39579	39684	T: gls254prot
41848	42508	44080	T: curve2251
49328	49428	49595	T: k277taa
55849	56458	57290	T: k298
64904	65019	65259	T: kummer
76806	76892	76990	T: k277mon
76412	77389	78104	T: gls1271
143180	143426	144330	T: curve25519
156158	156544	158143	T: ed448goldilocks
187138	188763	190774	T: sclaus1024
197093	197717	198700	T: surf127eps
250370	251641	253135	T: nistp256
521333	523534	525029	T: surf2113
903351	903916	905148	T: ed521gs
947083	956825	968944	T: sclaus2048
989277	996798	1003931	T: claus
1033311	1036254	1040012	T: nist521gs

Cycles to compute a shared secret
25%	50%	75%	system
36358	36620	36884	T: gls254
39406	39544	39728	T: gls254prot
49279	49373	49501	T: k277taa
55123	55438	55885	T: k298
64813	64918	65190	T: kummer
76731	76840	77027	T: k277mon
143055	143162	143309	T: curve25519
149588	154900	155919	T: curve2251
187530	188309	188995	T: sclaus1024
187355	189142	194978	T: gls1271
194621	195182	196155	T: surf127eps
467598	467748	467981	T: ed448goldilocks
515924	516704	517980	T: surf2113
632149	633734	635337	T: nistp256
904807	907935	910206	T: ed521gs
961908	968058	1000528	T: sclaus2048
993024	998750	1047885	T: claus
1031026	1033085	1037031	T: nist521gs

amd64; HW+AES (306c3); 2013 Intel Xeon E3-1275 V3; 4 x 3500MHz; `titan0`, `supercop-20221122`

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
43585	45183	50209	T: curve2251
44916	45431	46003	T: gls254
49098	49163	49230	T: gls254prot
62233	62290	62410	T: k277taa
64152	64223	65403	T: kummer
70071	70227	70647	T: k298
90681	91767	92943	T: gls1271
95152	95196	95260	T: k277mon
144410	144463	144541	T: curve25519
174728	175100	176701	T: ed448goldilocks
213739	214463	215356	T: surf127eps
217993	220031	222260	T: sclaus1024
282490	282672	282825	T: nistp256
535851	538279	539766	T: surf2113
1011814	1012253	1013050	T: ed521gs
1095254	1103719	1110336	T: sclaus2048
1195088	1195612	1196382	T: nist521gs
1302818	1306476	1389820	T: claus

Cycles to compute a shared secret
25%	50%	75%	system
39470	40235	41466	T: gls254
48976	49037	49112	T: gls254prot
62088	62159	62280	T: k277taa
64042	64120	65315	T: kummer
69871	69955	70039	T: k298
94996	95037	95078	T: k277mon
155981	156034	156090	T: curve25519
157524	158770	160020	T: curve2251
208001	208551	209190	T: surf127eps
216296	217819	220140	T: sclaus1024
217119	219007	220499	T: gls1271
535820	536194	537302	T: surf2113
540312	540589	544992	T: ed448goldilocks
746021	746320	746943	T: nistp256
1019811	1020085	1020447	T: ed521gs
1098055	1100679	1102823	T: sclaus2048
1194383	1194762	1195872	T: nist521gs
1297326	1310908	1392981	T: claus

amd64; HW+AES (306c3); 2013 Intel Xeon E3-1220 v3; 4 x 3100MHz; `hiphop`, `supercop-20221122`

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
28826	29481	31246	T: kumjacfp127g
30463	31228	31938	T: jacfp127i
32737	33537	34322	T: prjfp127i
34840	36472	39029	T: hecfp127i
38597	39379	40069	T: jacfp128bk
41073	42336	46073	T: curve2251
42940	43333	45878	T: prjfp128bk
44776	45277	45948	T: gls254
44652	45394	47797	T: hecfp128fkt
46114	46773	48201	T: ecfp256e
46647	47189	49438	T: hecfp128bk
46955	48455	51426	T: hecfp128i
48406	49183	51128	T: ecfp256h
49584	49701	49835	T: gls254prot
49120	50067	52095	T: ecfp256s
54065	54964	57405	T: ecfp256q
60432	60492	60570	T: kummer
63220	63291	63367	T: k277taa
70141	70252	70450	T: k298
90904	91928	92638	T: gls1271
97115	97191	97311	T: k277mon
109858	109962	110066	T: kumfp127g
144456	144548	147220	T: curve25519
157097	157222	157331	T: kumfp128g
176643	176963	177382	T: ed448goldilocks
213351	214187	215065	T: surf127eps
218171	219732	221607	T: sclaus1024
222921	224124	225489	T: ecfp256i
272998	273404	281510	T: nistp256
618119	620972	623686	T: surf2113
1032365	1033180	1034069	T: ed521gs
1102515	1113052	1160846	T: sclaus2048
1184626	1186002	1187676	T: nist521gs
1522544	1523222	1524943	T: claus

Cycles to compute a shared secret
25%	50%	75%	system
40059	40569	40662	T: gls254
49434	49521	49608	T: gls254prot
60408?	60506?	96147?	T: kummer
63150	63184	63225	T: k277taa
69962	70062	70166	T: k298
96972	97091	97208	T: k277mon
112345	112441	112559	T: kumfp127g
114100	114170	114261	T: jacfp128bk
120886	120964	121072	T: kumjacfp127g
140899	141042	141195	T: prjfp128bk
144967	145108	145277	T: hecfp128bk
155673	155901	156437	T: hecfp128fkt
155992	156071	158679	T: curve25519
158397	159272	160692	T: curve2251
163145	163214	163362	T: kumfp128g
185198	185574	186647	T: jacfp127i
205455	205578	205896	T: ecfp256e
207607	208324	209164	T: surf127eps
214781	214958	215182	T: ecfp256q
218932	219315	222458	T: gls1271
219693	219816	220057	T: ecfp256i
221215	224153	225103	T: sclaus1024
227258	227550	227800	T: prjfp127i
230806	231008	231273	T: hecfp127i
249957	250107	250410	T: ecfp256h
273147	273380	273744	T: ecfp256s
325154	325544	325942	T: hecfp128i
537140	537412	537880	T: ed448goldilocks
615654	620964	626760	T: surf2113
680707	681249	682505	T: nistp256
956166	957096	957906	T: claus
1032354	1033139	1034192	T: ed521gs
1111471	1123033	1168502	T: sclaus2048
1184698	1186120	1188217	T: nist521gs

armeabi; Cortex-A8 (413fc082); 2012 TI Sitara XAM3359AZCZ100; 1 x 1000MHz; `bblack`, `supercop-20221005`

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
304573	304614	304751	T: kummer
483972	489519	504025	T: curve25519
1187817	1190738	1221306	T: nistp256
4125365	4156802	4198928	T: sclaus1024
8368961	8377991	8415159	T: claus
18918749	19041708	19175582	T: sclaus2048

Cycles to compute a shared secret
25%	50%	75%	system
304374	304409	304509	T: kummer
498483	505390	505423	T: curve25519
3964475	3965138	3969014	T: nistp256
4152645	4203643	4278938	T: sclaus1024
8316317	8320108	8338797	T: claus
19106915	19158680	19341279	T: sclaus2048

amd64; Bulldozer (600f20); 2012 AMD FX-8350; 4 x 4000MHz; `saber214`, `supercop-20220506`

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
44535	45420	46259	T: jacfp127i
45814	46700	47602	T: kumjacfp127g
51184	52079	53162	T: prjfp127i
51878	52625	53627	T: hecfp127i
64568	65151	67359	T: curve2251
67367	68149	69026	T: jacfp128bk
70798	73246	77900	T: ecfp256e
74728	77484	81982	T: ecfp256h
74929	77661	81294	T: ecfp256s
77522	78164	79324	T: prjfp128bk
78016	78865	80112	T: hecfp128bk
78072	78890	79997	T: hecfp128i
78656	79525	80480	T: hecfp128fkt
81081	83608	88465	T: ecfp256q
90694	91689	92844	T: gls254
104738	104739	104746	T: gls254prot
113410	114917	116103	T: gls1271
138541	138563	138579	T: k277taa
155609	155746	161545	T: kumfp127g
167168	167212	167362	T: k298
174711	174730	174763	T: curve25519
204601	204629	204667	T: kummer
211858	211870	211905	T: k277mon
254643	254723	256395	T: kumfp128g
341461	343121	345174	T: ecfp256i
366960	367256	367994	T: ed448goldilocks
375876	377590	379151	T: surf127eps
423492	427877	432411	T: sclaus1024
632720	633103	633417	T: nistp256
670940	673807	675667	T: surf2113
1837351	1838964	1843897	T: ed521gs
2102266	2119035	2138022	T: sclaus2048
2110041	2122080	2150117	T: nist521gs
2547143	2553838	2562927	T: claus

Cycles to compute a shared secret
25%	50%	75%	system
85157	87074	87496	T: gls254
104657	104710	104710	T: gls254prot
138448	138450	138454	T: k277taa
160315	160332	160380	T: kumfp127g
161566	161806	162992	T: kumjacfp127g
167178	167207	167232	T: k298
186758	186780	186805	T: curve25519
197239	197262	197296	T: kummer
199385	199442	199554	T: jacfp128bk
211804	211805	211809	T: k277mon
241458	241958	242807	T: curve2251
247505	247849	248027	T: prjfp128bk
251825	251879	251979	T: hecfp128bk
263257	263454	263563	T: hecfp128fkt
264219	264395	264564	T: jacfp127i
266869	266950	267057	T: kumfp128g
273908	277064	281513	T: gls1271
320313	320423	320747	T: ecfp256e
335580	336201	337003	T: ecfp256q
338763	338927	339239	T: ecfp256i
357062	357242	357461	T: hecfp127i
359231	359349	359560	T: prjfp127i
373913	374164	379026	T: surf127eps
403004	403319	403801	T: ecfp256h
422663	422988	423410	T: ecfp256s
427272	428426	430504	T: sclaus1024
562251	562477	562600	T: hecfp128i
668065	671925	673795	T: surf2113
1158568	1158666	1158757	T: ed448goldilocks
1249605	1249617	1249753	T: nistp256
1834307	1839049	1844432	T: ed521gs
2098033	2101297	2131841	T: nist521gs
2108715	2117688	2120005	T: sclaus2048
2553685	2556544	2566788	T: claus

amd64; IB+AES (306a9); 2012 Intel Xeon E3-1275 V2; 4 x 3500MHz; `hydra8`, `supercop-20221122`

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
31995	33191	34393	T: jacfp127i
32509	33315	35003	T: kumjacfp127g
36066	38254	41045	T: prjfp127i
40716	41581	43420	T: jacfp128bk
40031	41649	43406	T: hecfp127i
50794	51809	53964	T: ecfp256e
51487	52245	53084	T: hecfp128fkt
50698	53249	55900	T: prjfp128bk
53618	54415	57117	T: ecfp256h
52529	55446	58125	T: hecfp128bk
54740	55803	57842	T: ecfp256s
55422	57317	58838	T: hecfp128i
57420	57920	61234	T: curve2251
58764	59942	62775	T: ecfp256q
73769	74724	76141	T: gls254
88751	88961	89056	T: kummer
96428	97478	98440	T: gls1271
106453	106511	106591	T: gls254prot
117024	117183	117270	T: kumfp127g
145032	145107	145429	T: curve25519
164999	165207	165344	T: kumfp128g
175113	176257	176369	T: k277taa
181230	181597	183233	T: k298
235217	235903	236531	T: surf127eps
242174	243251	244692	T: ecfp256i
257953	257955	257963	T: k277mon
266784	269074	271795	T: sclaus1024
312040	312347	313112	T: nistp256
655672	658945	660239	T: surf2113
1099219	1100408	1102521	T: ed521gs
1237280	1238912	1241388	T: nist521gs
1361536	1368532	1379654	T: sclaus2048
1599583	1603112	1606529	T: claus

Cycles to compute a shared secret
25%	50%	75%	system
69578	72194	72546	T: gls254
88470	88638	88801	T: kummer
106292	106324	106375	T: gls254prot
119460	119589	119708	T: kumfp127g
124148	124266	124448	T: jacfp128bk
126536	126673	126829	T: kumjacfp127g
156716	156812	157249	T: curve25519
157900	158053	158286	T: prjfp128bk
162349	162462	162610	T: hecfp128bk
168485	168658	168841	T: hecfp128fkt
171050	171173	171299	T: kumfp128g
176001	176063	176126	T: k277taa
180884	180987	181073	T: k298
190532	190859	194843	T: jacfp127i
223138	224733	225025	T: curve2251
225093	225330	225573	T: ecfp256e
227263	228275	228920	T: surf127eps
235470	235656	235831	T: ecfp256q
238973	239168	239496	T: ecfp256i
239008	239407	240507	T: prjfp127i
235393	239533	241664	T: gls1271
244890	245206	245475	T: hecfp127i
257914	257917	257932	T: k277mon
272846	273288	276524	T: sclaus1024
275862	275927	276122	T: ecfp256h
297915	298065	298304	T: ecfp256s
365659	365890	366333	T: hecfp128i
653902	655593	657750	T: surf2113
770215	771170	771875	T: nistp256
1100817	1101846	1103443	T: ed521gs
1236277	1237619	1241012	T: nist521gs
1323848	1361676	1366685	T: sclaus2048
1596776	1598316	1600840	T: claus

amd64; IB+AES (306a9); 2012 Intel Xeon E3-1265L V2; 4 x 2500MHz; `hedera`, `supercop-20210326`

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
28909	29396	31004	T: jacfp127i
30070	30732	32520	T: kumjacfp127g
33819	34472	36539	T: hecfp127i
36486	37438	38776	T: prjfp127i
41201	42070	43565	T: jacfp128bk
48201	49198	50624	T: prjfp128bk
49217	50263	51237	T: hecfp128bk
49911	50717	51482	T: hecfp128fkt
49789	50753	51723	T: hecfp128i
50197	50808	51753	T: ecfp256e
53146	53791	55988	T: ecfp256h
56683	57098	59815	T: curve2251
57747	58279	59159	T: ecfp256s
58064	58899	61154	T: ecfp256q
74721	75804	76899	T: gls254
88697	88780	88991	T: kummer
96271	97485	99181	T: gls1271
106336	106406	106484	T: gls254prot
114137	114399	115068	T: kumfp127g
145078	145412	145504	T: curve25519
164848	164924	165097	T: kumfp128g
174548	175860	175937	T: k277taa
180998	181074	181254	T: k298
210970	211547	211882	T: ed448goldilocks
235920	236652	237958	T: surf127eps
242156	243312	244798	T: ecfp256i
257518	257522	257546	T: k277mon
265772	268328	270886	T: sclaus1024
291564	300634	312125	T: hector
319923	321152	322178	T: nistp256
578681	581128	582779	T: surf2113
1130495	1130900	1131611	T: ed521gs
1317678	1317847	1318914	T: nist521gs
1356204	1369352	1381427	T: sclaus2048
1594291	1596763	1600250	T: claus

Cycles to compute a shared secret
25%	50%	75%	system
69962	70177	72435	T: gls254
88481	88569	88771	T: kummer
106240	106267	106320	T: gls254prot
116592	116673	116728	T: kumfp127g
124508	124588	124676	T: jacfp128bk
126848	126978	127086	T: kumjacfp127g
157341	157509	157688	T: prjfp128bk
156807	159451	160595	T: curve25519
161145	161262	161395	T: hecfp128bk
167278	167388	167502	T: hecfp128fkt
170626	170736	170839	T: kumfp128g
174307	175485	175560	T: k277taa
180306	180349	180412	T: k298
190558	190724	191176	T: jacfp127i
222999	223430	224790	T: curve2251
225426	225598	225763	T: ecfp256e
230305	230733	231179	T: surf127eps
234913	235082	235332	T: ecfp256q
234605	236070	239408	T: gls1271
238259	238493	238847	T: prjfp127i
238952	239103	239309	T: ecfp256i
244592	244829	245150	T: hecfp127i
257491	257500	257501	T: k277mon
268418	272793	274235	T: sclaus1024
276317	276426	276529	T: ecfp256h
297445	297545	297702	T: ecfp256s
365520	365678	365977	T: hecfp128i
579552	580206	580761	T: surf2113
628898	629615	631385	T: ed448goldilocks
765125	767126	769017	T: nistp256
996635	1034721	1045662	T: hector
1125008	1125449	1130459	T: ed521gs
1317314	1317449	1317705	T: nist521gs
1356801	1382093	1391271	T: sclaus2048
1594837	1595309	1596323	T: claus

amd64; SB+AES (206d7); 2012 Intel Xeon E5-2660; 8 x 2200MHz; unstable; `gcc123`, `supercop-20220213`

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
31943	32708	33506	T: jacfp127i
32953	33765	35040	T: kumjacfp127g
37608	38623	39513	T: hecfp127i
39004	40504	42276	T: prjfp127i
45798	46604	49017	T: jacfp128bk
54528	55306	56314	T: ecfp256e
55935	57092	58739	T: prjfp128bk
56528	57439	58649	T: hecfp128fkt
57372	58038	60010	T: ecfp256h
58935	59355	62473	T: curve2251
58172	59686	61610	T: hecfp128i
57729	59694	61632	T: hecfp128bk
59213	60262	62540	T: ecfp256s
63294	64112	66013	T: ecfp256q
74267	75189	76426	T: gls254
89282	89333	89393	T: kummer
101621	102757	104070	T: gls1271
107786	107990	108100	T: gls254prot
120356	120660	120847	T: kumfp127g
147437	149335	150231	T: curve25519
176693	176754	176821	T: k277taa
183385	183523	183801	T: k298
183493	184494	184712	T: kumfp128g
216977	217416	218118	T: ed448goldilocks
258378	258897	259109	T: k277mon
264599	265793	267654	T: ecfp256i
271269	272151	273008	T: surf127eps
285659	288427	291181	T: sclaus1024
346611	347055	348467	T: nistp256
632059	635140	636537	T: surf2113
1201183	1202697	1213390	T: ed521gs
1437670	1438873	1440254	T: nist521gs
1453921	1463199	1474175	T: sclaus2048
1707624	1712069	1716365	T: claus

Cycles to compute a shared secret
25%	50%	75%	system
68567	70640	70910	T: gls254
89053	89079	89114	T: kummer
107718	107843	108042	T: gls254prot
123422	123608	123778	T: kumfp127g
131022	131115	131347	T: kumjacfp127g
139870	140122	152456	T: jacfp128bk
158914	159113	159230	T: curve25519
176460	176503	176544	T: k277taa
178453	178678	178968	T: prjfp128bk
182177	182418	185208	T: hecfp128bk
182474	182579	182699	T: k298
189273	189532	200762	T: hecfp128fkt
190389	191431	191674	T: kumfp128g
200096	200414	213508	T: jacfp127i
231825	232605	232832	T: curve2251
248092	248254	248472	T: ecfp256e
249077	250480	251963	T: gls1271
257409	257555	257723	T: ecfp256q
258321	258857	259061	T: k277mon
260327	260627	261091	T: prjfp127i
261160	261279	261406	T: ecfp256i
264886	265400	269808	T: hecfp127i
267683	268185	269010	T: surf127eps
290366	291197	293939	T: sclaus1024
305106	305231	305409	T: ecfp256h
324559	324747	324996	T: ecfp256s
412908	413317	413695	T: hecfp128i
621379	623817	629240	T: surf2113
648753	651584	670955	T: ed448goldilocks
826719	827216	827670	T: nistp256
1207103	1210696	1213881	T: ed521gs
1437472	1438062	1439620	T: nist521gs
1444699	1466069	1478225	T: sclaus2048
1703400	1711775	1715637	T: claus

armeabi; Cortex-A9+NEON (412fc09a); 2011 Freescale i.MX6 Quad; 4 x 1200MHz; unstable; `novena`, `supercop-20220506`

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
383633	403235	426836	T: kummer
568432	579721	605953	T: curve25519
1136097	1225306	1320114	T: nistp256
3170271	3319084	3441142	T: sclaus1024
10395810	10675708	12763892	T: claus
13118323?	15156764?	17482296?	T: sclaus2048

Cycles to compute a shared secret
25%	50%	75%	system
377632	394434	418035	T: kummer
567769	587250	684860	T: curve25519
3175872	3314684	3482698	T: sclaus1024
3784324	4125553	4561590	T: nistp256
10384521	10702273	10950137	T: claus
12688797?	16762633?	17448692?	T: sclaus2048

mipso32; Octeon II (cnmips64v2); 2011 Cavium Octeon II CN6120; 2 x 2000MHz; `erpro8fsf2`, `supercop-20220213`

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
1470992	1471006	1473758	T: kummer
1999782	1999822	2008112	T: curve25519
3460452	3464152	3494426	T: nistp256
4862008	4903346	5012496	T: surf127eps
9011088	9088628	9163840	T: sclaus1024
44725298	44995590	45330454	T: sclaus2048
54624848	54748844	54873548	T: claus

Cycles to compute a shared secret
25%	50%	75%	system
1470600	1470614	1470614	T: kummer
1999370	1999384	2001402	T: curve25519
4858614	4913324	5012660	T: surf127eps
8893818	9066186	9103512	T: sclaus1024
11580548	11609924	11704890	T: nistp256
44820102	44989178	45145550	T: sclaus2048
54821082	54870326	54982680	T: claus

mipso32; Octeon II (cnmips64v2); 2011 Cavium Octeon II CN6120; 2 x 2000MHz; `gcc23`, `supercop-20221122`

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
1470974	1471016	1472676	T: kummer
1999190	1999190	2000622	T: curve25519
3445112	3457414	3461870	T: nistp256
4842432	4861172	4867094	T: surf127eps
8990814	9085482	9171120	T: sclaus1024
44620218	44949186	45248108	T: sclaus2048
54505024	54612440	54716466	T: claus

Cycles to compute a shared secret
25%	50%	75%	system
1470626	1470630	1470630	T: kummer
1998908	1998908	1999896	T: curve25519
4830168	4842474	4861988	T: surf127eps
9005814	9044176	9159864	T: sclaus1024
11542328	11570570	11603418	T: nistp256
44791748	45059326	45496830	T: sclaus2048
54280200	54598346	54663778	T: claus

amd64; C2 45nm (10676); 2007 Intel Xeon X5450; 8 x 2992MHz; unstable; `gcc14`, `supercop-20220506`

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
45073	47463	50135	T: jacfp127i
47041	48352	49377	T: kumjacfp127g
51723	53951	57038	T: prjfp127i
53002	55177	59391	T: hecfp127i
71369	72558	76668	T: ecfp256e
77419	78996	84435	T: ecfp256h
78095	79351	80571	T: jacfp128bk
79688	81591	86347	T: ecfp256s
88494	89081	91698	T: ecfp256q
89987	92678	95313	T: prjfp128bk
90695	93092	96851	T: hecfp128fkt
91464	93688	97172	T: hecfp128i
91884	93931	96811	T: hecfp128bk
122081	124406	126622	T: gls1271
127352	128298	131045	T: curve2251
178621	178639	178774	T: kumfp127g
299212	299279	299300	T: curve25519
314856	315067	315465	T: kumfp128g
329748	330281	330858	T: ed448goldilocks
384083	386835	388905	T: ecfp256i
413326	415894	420963	T: surf127eps
422448	422696	424925	T: kummer
422389	426879	430417	T: sclaus1024
592353	599624	599809	T: nistp256
703975	707187	707993	T: surf2113
1651276	1654847	1665749	T: ed521gs
1965828	1968124	1970593	T: nist521gs
2141649	2158462	2174320	T: sclaus2048
2531594	2536774	2542306	T: claus

Cycles to compute a shared secret
25%	50%	75%	system
183308	183339	183401	T: kumfp127g
187644	188022	188184	T: kumjacfp127g
244882	244967	245135	T: jacfp128bk
292653	292810	292871	T: jacfp127i
298596	298922	299590	T: curve25519
301634	301818	301972	T: prjfp128bk
307377	307524	307663	T: hecfp128bk
315724	316398	332895	T: gls1271
318241	318313	318421	T: hecfp128fkt
327094	327144	327284	T: kumfp128g
362120	362446	362793	T: ecfp256e
377991	378292	378707	T: ecfp256q
381459	381554	381707	T: prjfp127i
383653	383881	384037	T: ecfp256i
388709	388774	388844	T: hecfp127i
412903	415509	419428	T: surf127eps
422428	422854	424362	T: kummer
424342	428316	440575	T: sclaus1024
455103	455540	455801	T: ecfp256h
470134	470272	470478	T: ecfp256s
519804	523960	528188	T: curve2251
694179	694320	694727	T: hecfp128i
701889	703404	704125	T: surf2113
1022552	1023096	1026174	T: ed448goldilocks
1175789	1175997	1177498	T: nistp256
1650753	1654641	1665087	T: ed521gs
1965264	1967089	1969059	T: nist521gs
2127175	2145573	2206421	T: sclaus2048
2537381	2538852	2573470	T: claus

amd64; C2 65nm (6fb); 2007 Intel Core 2 Quad Q6600; 4 x 2404MHz; `margaux`, `supercop-20221122`

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%	50%	75%	system
41887	42996	44689	T: jacfp127i
43865	45175	46455	T: kumjacfp127g
48026	49318	51701	T: prjfp127i
49919	51679	54236	T: hecfp127i
74958	76222	77368	T: jacfp128bk
77485	78207	79759	T: ecfp256e
82863	83458	85025	T: ecfp256h
84051	84917	86249	T: ecfp256s
87981	89312	90934	T: prjfp128bk
88430	90552	93172	T: hecfp128bk
88974	90570	93427	T: hecfp128i
89199	90771	93712	T: hecfp128fkt
90493	91525	93049	T: ecfp256q
126201	127832	129176	T: gls1271
131760	132846	135609	T: curve2251
178795	178878	178985	T: kumfp127g
300192	301403	302425	T: curve25519
314730	314938	315180	T: kumfp128g
345050	345724	346796	T: ed448goldilocks
387780	389344	391450	T: ecfp256i
421852	426405	430360	T: sclaus1024
428379	430954	431872	T: kummer
430610	432379	433903	T: surf127eps
493841	495056	497115	T: nistp256
707495	711520	713861	T: surf2113
1684659	1686784	1690900	T: ed521gs
1961216	1964124	1966514	T: nist521gs
2150568	2169713	2186433	T: sclaus2048
2543920	2551253	2590229	T: claus

Cycles to compute a shared secret
25%	50%	75%	system
183326	183367	183534	T: kumfp127g
187766	188158	188287	T: kumjacfp127g
243799	243974	244147	T: jacfp128bk
292249	292381	292659	T: jacfp127i
300639	301514	302074	T: curve25519
301871	301937	302075	T: prjfp128bk
307782	307874	308088	T: hecfp128bk
314737	317098	322188	T: gls1271
318275	318491	318792	T: hecfp128fkt
327017	327159	327324	T: kumfp128g
366127	366434	366882	T: ecfp256e
381376	381552	381748	T: prjfp127i
382271	382569	383032	T: ecfp256q
387243	387400	387571	T: ecfp256i
389428	389624	390460	T: hecfp127i
421353	423825	442261	T: sclaus1024
427824	429971	431287	T: kummer
427793	430637	431718	T: surf127eps
458397	458634	458912	T: ecfp256h
474824	475181	475579	T: ecfp256s
545868	547486	551403	T: curve2251
693928	694211	694565	T: hecfp128i
699997	709759	711290	T: surf2113
1029159	1030521	1031363	T: ed448goldilocks
1160333	1161107	1162255	T: nistp256
1683664	1685725	1687535	T: ed521gs
1959610	1962117	1967104	T: nist521gs
2170203	2174419	2183777	T: sclaus2048
2526743	2546676	2604215	T: claus

Version

This is version 2023.01.13 of the results-dh.html web page. This web page is in the public domain.

eBACS: ECRYPT Benchmarking of Cryptographic Systems

Measurements of public-key Diffie–Hellman secret-sharing systems, indexed by machine

Sizes across machines

amd64; Zen3 (a50f00); 2021 AMD Ryzen 5 5560U; 6 x 4062MHz; beelink, supercop-20221122

aarch64; Firestorm (610f0230); 2020 Apple M1; 4 x 3200MHz; unstable; minimac, supercop-20211108

amd64; Zen3 (a20f10); 2020 AMD Ryzen 9 5950X; 16 x 3400MHz; zen3, supercop-20220213

amd64; TigerLake (806c1); 2020 Intel Core i7-1165G7; 4 x 2800MHz; unstable; pascalinspiron75062n1, supercop-20210125

aarch64; A72 (410fd083); 2019 Broadcom BCM2711; 4 x 1500MHz; pi4b, supercop-20221122

ppc64; POWER9 (004e1203); 2019? IBM 02CY642; 22 x 3800MHz; power9, supercop-20210326

amd64; Zen2 (830f10); 2019 AMD EPYC 7742; 64 x 2250MHz; unstable; colossus6, supercop-20210125

amd64; Zen2 (830f10); 2019 AMD EPYC 7742; 64 x 2250MHz; unstable; colossus7, supercop-20210125

amd64; CometLake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; comet, supercop-20221025

amd64; IceLake (706e5); 2019 Intel Core i3-1035G1; 4 x 1000MHz; icelake2, supercop-20221005

amd64; CascadeLake (50657); 2019 Intel Core i9-10980XE; 18 x 3000MHz; avx512imath, supercop-20210125

aarch64; Skylark (503f0002); 2018 Ampere eMAG 8180; 32 x 3300MHz; unstable; gcc185, supercop-20221122

aarch64; A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3aplus, supercop-20221122

aarch64; A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3bplus, supercop-20221122

amd64; Zen (810f10); 2018 AMD Ryzen 5 2400G; 4 x 3600MHz; unstable; gcc67, supercop-20210125

amd64; CoffeeLake (906ea); 2018 Intel Xeon E-2124; 4 x 3300MHz; r24000, supercop-20221019

riscv64; U54 (sifive,u54-mc); 2017 SiFive Freedom U540; 4 x 1000MHz; riscvunleashed000, supercop-20210326

amd64; Zen (800f12); 2017 AMD EPYC 7501; 32 x 2000MHz; unstable; colossus5, supercop-20210125

amd64; Zen (800f11); 2017 AMD Ryzen 7 1700; 8 x 3000MHz; rumba7, supercop-20220506

amd64; Zen (800f11); 2017 AMD Ryzen 5 1600; 6 x 3200MHz; rumba5, supercop-20220506

amd64; KabyLake (906e9); 2017 Intel Xeon E3-1220 v6; 4 x 3000MHz; kizomba, supercop-20220506

amd64; KabyLake (806e9); 2017 Intel Core i7-7567U; 2 x 3500MHz; unstable; intelnuci7, supercop-20211108

amd64; KabyLake (806e9); 2017 Intel Core i3-7100; 2 x 2400MHz; whosthere, supercop-20221122

armeabi; Cortex-A7 (410fc075); 2016 Broadcom BCM2836; 4 x 900MHz; berry2, supercop-20221122

amd64; Goldmont (506c9); 2016 Intel Celeron J3455; 4 x 1500MHz; wooden, supercop-20221122

amd64; BW+AES (406f1); 2016 Intel Xeon E5-2609 v4; 8 x 1700MHz; bolero, supercop-20221122

aarch64; A53+crypto (410fd034); 2015 NXP QorIQ LS1088; 8 x 1600MHz; ten64, supercop-20210604

amd64; Skylake (506e3); 2015 Intel Xeon E3-1220 v5; 4 x 3000MHz; samba, supercop-20221122

amd64; Airmont (406c3); 2015 Intel Pentium N3700; 4 x 1600MHz; nucnuc, supercop-20221122

amd64; BW+AES (306d4); 2015 Intel Core i3-5005U; 2 x 1900MHz; shoe, supercop-20221122

amd64; HW+AES (306c3); 2013 Intel Xeon E3-1275 V3; 4 x 3500MHz; titan0, supercop-20221122

amd64; HW+AES (306c3); 2013 Intel Xeon E3-1220 v3; 4 x 3100MHz; hiphop, supercop-20221122

armeabi; Cortex-A8 (413fc082); 2012 TI Sitara XAM3359AZCZ100; 1 x 1000MHz; bblack, supercop-20221005

amd64; Bulldozer (600f20); 2012 AMD FX-8350; 4 x 4000MHz; saber214, supercop-20220506

amd64; IB+AES (306a9); 2012 Intel Xeon E3-1275 V2; 4 x 3500MHz; hydra8, supercop-20221122

amd64; IB+AES (306a9); 2012 Intel Xeon E3-1265L V2; 4 x 2500MHz; hedera, supercop-20210326

amd64; SB+AES (206d7); 2012 Intel Xeon E5-2660; 8 x 2200MHz; unstable; gcc123, supercop-20220213

armeabi; Cortex-A9+NEON (412fc09a); 2011 Freescale i.MX6 Quad; 4 x 1200MHz; unstable; novena, supercop-20220506

mipso32; Octeon II (cnmips64v2); 2011 Cavium Octeon II CN6120; 2 x 2000MHz; erpro8fsf2, supercop-20220213

mipso32; Octeon II (cnmips64v2); 2011 Cavium Octeon II CN6120; 2 x 2000MHz; gcc23, supercop-20221122

amd64; C2 45nm (10676); 2007 Intel Xeon X5450; 8 x 2992MHz; unstable; gcc14, supercop-20220506

amd64; C2 65nm (6fb); 2007 Intel Core 2 Quad Q6600; 4 x 2404MHz; margaux, supercop-20221122

Version

amd64; Zen3 (a50f00); 2021 AMD Ryzen 5 5560U; 6 x 4062MHz; `beelink`, `supercop-20221122`

aarch64; Firestorm (610f0230); 2020 Apple M1; 4 x 3200MHz; unstable; `minimac`, `supercop-20211108`

amd64; Zen3 (a20f10); 2020 AMD Ryzen 9 5950X; 16 x 3400MHz; `zen3`, `supercop-20220213`

amd64; TigerLake (806c1); 2020 Intel Core i7-1165G7; 4 x 2800MHz; unstable; `pascalinspiron75062n1`, `supercop-20210125`

aarch64; A72 (410fd083); 2019 Broadcom BCM2711; 4 x 1500MHz; `pi4b`, `supercop-20221122`

ppc64; POWER9 (004e1203); 2019? IBM 02CY642; 22 x 3800MHz; `power9`, `supercop-20210326`

amd64; Zen2 (830f10); 2019 AMD EPYC 7742; 64 x 2250MHz; unstable; `colossus6`, `supercop-20210125`

amd64; Zen2 (830f10); 2019 AMD EPYC 7742; 64 x 2250MHz; unstable; `colossus7`, `supercop-20210125`

amd64; CometLake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; `comet`, `supercop-20221025`

amd64; IceLake (706e5); 2019 Intel Core i3-1035G1; 4 x 1000MHz; `icelake2`, `supercop-20221005`

amd64; CascadeLake (50657); 2019 Intel Core i9-10980XE; 18 x 3000MHz; `avx512imath`, `supercop-20210125`

aarch64; Skylark (503f0002); 2018 Ampere eMAG 8180; 32 x 3300MHz; unstable; `gcc185`, `supercop-20221122`

aarch64; A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; `pi3aplus`, `supercop-20221122`

aarch64; A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; `pi3bplus`, `supercop-20221122`

amd64; Zen (810f10); 2018 AMD Ryzen 5 2400G; 4 x 3600MHz; unstable; `gcc67`, `supercop-20210125`

amd64; CoffeeLake (906ea); 2018 Intel Xeon E-2124; 4 x 3300MHz; `r24000`, `supercop-20221019`

riscv64; U54 (sifive,u54-mc); 2017 SiFive Freedom U540; 4 x 1000MHz; `riscvunleashed000`, `supercop-20210326`

amd64; Zen (800f12); 2017 AMD EPYC 7501; 32 x 2000MHz; unstable; `colossus5`, `supercop-20210125`

amd64; Zen (800f11); 2017 AMD Ryzen 7 1700; 8 x 3000MHz; `rumba7`, `supercop-20220506`

amd64; Zen (800f11); 2017 AMD Ryzen 5 1600; 6 x 3200MHz; `rumba5`, `supercop-20220506`

amd64; KabyLake (906e9); 2017 Intel Xeon E3-1220 v6; 4 x 3000MHz; `kizomba`, `supercop-20220506`

amd64; KabyLake (806e9); 2017 Intel Core i7-7567U; 2 x 3500MHz; unstable; `intelnuci7`, `supercop-20211108`

amd64; KabyLake (806e9); 2017 Intel Core i3-7100; 2 x 2400MHz; `whosthere`, `supercop-20221122`

armeabi; Cortex-A7 (410fc075); 2016 Broadcom BCM2836; 4 x 900MHz; `berry2`, `supercop-20221122`

amd64; Goldmont (506c9); 2016 Intel Celeron J3455; 4 x 1500MHz; `wooden`, `supercop-20221122`

amd64; BW+AES (406f1); 2016 Intel Xeon E5-2609 v4; 8 x 1700MHz; `bolero`, `supercop-20221122`

aarch64; A53+crypto (410fd034); 2015 NXP QorIQ LS1088; 8 x 1600MHz; `ten64`, `supercop-20210604`

amd64; Skylake (506e3); 2015 Intel Xeon E3-1220 v5; 4 x 3000MHz; `samba`, `supercop-20221122`

amd64; Airmont (406c3); 2015 Intel Pentium N3700; 4 x 1600MHz; `nucnuc`, `supercop-20221122`

amd64; BW+AES (306d4); 2015 Intel Core i3-5005U; 2 x 1900MHz; `shoe`, `supercop-20221122`

amd64; HW+AES (306c3); 2013 Intel Xeon E3-1275 V3; 4 x 3500MHz; `titan0`, `supercop-20221122`

amd64; HW+AES (306c3); 2013 Intel Xeon E3-1220 v3; 4 x 3100MHz; `hiphop`, `supercop-20221122`

armeabi; Cortex-A8 (413fc082); 2012 TI Sitara XAM3359AZCZ100; 1 x 1000MHz; `bblack`, `supercop-20221005`

amd64; Bulldozer (600f20); 2012 AMD FX-8350; 4 x 4000MHz; `saber214`, `supercop-20220506`

amd64; IB+AES (306a9); 2012 Intel Xeon E3-1275 V2; 4 x 3500MHz; `hydra8`, `supercop-20221122`

amd64; IB+AES (306a9); 2012 Intel Xeon E3-1265L V2; 4 x 2500MHz; `hedera`, `supercop-20210326`

amd64; SB+AES (206d7); 2012 Intel Xeon E5-2660; 8 x 2200MHz; unstable; `gcc123`, `supercop-20220213`

armeabi; Cortex-A9+NEON (412fc09a); 2011 Freescale i.MX6 Quad; 4 x 1200MHz; unstable; `novena`, `supercop-20220506`

mipso32; Octeon II (cnmips64v2); 2011 Cavium Octeon II CN6120; 2 x 2000MHz; `erpro8fsf2`, `supercop-20220213`

mipso32; Octeon II (cnmips64v2); 2011 Cavium Octeon II CN6120; 2 x 2000MHz; `gcc23`, `supercop-20221122`

amd64; C2 45nm (10676); 2007 Intel Xeon X5450; 8 x 2992MHz; unstable; `gcc14`, `supercop-20220506`

amd64; C2 65nm (6fb); 2007 Intel Core 2 Quad Q6600; 4 x 2404MHz; `margaux`, `supercop-20221122`