VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems
ECRYPT II
General information: Introduction eBASH eBASC eBAEAD eBATS SUPERCOP XBX Computers Arch
How to submit new software: Tips hash stream aead dh kem encrypt sign
List of primitives measured: lwc sha3 hash stream lwc caesar aead dh kem encrypt sign
Measurements indexed by machine: lwc sha3 hash stream lwc caesar aead dh kem encrypt sign
List of subroutines: verify decode encode sort core hashblocks scalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems, indexed by machine

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents the benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation.

Each computer name is linked to additional information about the implementations and compilers selected for benchmarking.

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.

Sizes across machines
[show/hide table]
Secret key
bytessystem
20sclaus1024
28sclaus2048
28surf2113
32curve2251
32curve25519
32ecfp256e
32ecfp256h
32ecfp256i
32ecfp256q
32ecfp256s
32gls1271
32gls254
32gls254prot
32hecfp127i
32hecfp128bk
32hecfp128fkt
32hecfp128i
32jacfp127i
32jacfp128bk
32k298
32kumfp127g
32kumfp128g
32kumjacfp127g
32kummer
32nistp256
32prjfp127i
32prjfp128bk
32surf127eps
48k277mon
48k277taa
104nist521gs
130ed521gs
144ed448goldilocks
256claus
Public key
bytessystem
32curve2251
32curve25519
32gls1271
48kumfp127g
48kumfp128g
48kumjacfp127g
48kummer
48surf127eps
48surf2113
56ed448goldilocks
64ecfp256e
64ecfp256h
64ecfp256q
64ecfp256s
64gls254
64gls254prot
64hecfp127i
64hecfp128bk
64hecfp128fkt
64hecfp128i
64jacfp127i
64jacfp128bk
64nistp256
64prjfp127i
64prjfp128bk
80k277mon
80k277taa
96ecfp256i
96k298
128claus
128sclaus1024
144ed521gs
144nist521gs
256sclaus2048
Shared secret
bytessystem
32curve2251
32curve25519
32ecfp256e
32ecfp256h
32ecfp256i
32ecfp256q
32ecfp256s
32gls1271
32gls254prot
32..32..64gls254
40k277mon
40k277taa
48k298
48kumfp127g
48kumfp128g
48kumjacfp127g
48kummer
48surf127eps
48surf2113
64ed448goldilocks
64hecfp127i
64hecfp128bk
64hecfp128fkt
64hecfp128i
64jacfp127i
64jacfp128bk
64nistp256
64prjfp127i
64prjfp128bk
72ed521gs
72nist521gs
128claus
128sclaus1024
256sclaus2048
amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20240107
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
247522580427442
T:
jacfp127i
267302796629657
T:
kumjacfp127g
280402923630526
T:
prjfp127i
289433005831972
T:
hecfp127i
315663176932348
T:
gls254
301363179833972
T:
jacfp128bk
321443219432256
T:
gls254prot
328913454537222
T:
ecfp256e
340573516939566
T:
curve2251
345663611339472
T:
hecfp128fkt
344253621439174
T:
hecfp128i
345993700843083
T:
ecfp256h
363503800639608
T:
prjfp128bk
365013818940108
T:
hecfp128bk
373583933844757
T:
ecfp256s
393774189147429
T:
ecfp256q
421514219642206
T:
kummer
422394229642339
T:
k277taa
477774796848819
T:
k298
569225764358238
T:
gls1271
638556418464308
T:
k277mon
789457904379174
T:
kumfp127g
101410101435101591
T:
curve25519
104250104357104482
T:
kumfp128g
139223139866140437
T:
surf127eps
146216147098148046
T:
ecfp256i
167990168285168470
T:
ed448goldilocks
196142197801199557
T:
sclaus1024
201575201968201998
T:
nistp256
335524336843338064
T:
surf2113
735524737493738933
T:
ed521gs
903230905092906351
T:
nist521gs
99788810053401012074
T:
sclaus2048
117786111804311183373
T:
claus
Cycles to compute a shared secret
25%50%75%system
302643032830358
T:
gls254
319033196132111
T:
gls254prot
421814218542190
T:
kummer
422094223542272
T:
k277taa
477914784147901
T:
k298
639456418464342
T:
k277mon
788367891679056
T:
jacfp128bk
812358127081286
T:
kumfp127g
825678290682942
T:
kumjacfp127g
934429353593609
T:
prjfp128bk
964679665096794
T:
hecfp128bk
99837100117100228
T:
hecfp128fkt
109017109160109275
T:
kumfp128g
109426109444109495
T:
curve25519
120293120367120425
T:
jacfp127i
128819130868131830
T:
gls1271
133854133919133975
T:
ecfp256e
134765136665136796
T:
curve2251
135882136700137148
T:
surf127eps
141400141464141561
T:
ecfp256i
144130144174144227
T:
ecfp256q
149692149762149866
T:
prjfp127i
151631151809151944
T:
hecfp127i
163296163344163416
T:
ecfp256h
197309197329197392
T:
sclaus1024
202863202909202979
T:
ecfp256s
210701210782210919
T:
hecfp128i
335634336222337014
T:
surf2113
518951524067525684
T:
ed448goldilocks
539636540151540641
T:
nistp256
735358736236739632
T:
ed521gs
900274902071904151
T:
nist521gs
96853110097421019476
T:
sclaus2048
117815611796991182547
T:
claus
amd64; Raptor Cove (b06a2); 2023 Intel Core i7-13700H, P cores; 6 x 4800MHz; raptor, supercop-20231107
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
179521886121992
T:
kumjacfp127g
181801981322024
T:
jacfp127i
204612225125039
T:
hecfp127i
206282269525772
T:
prjfp127i
272262836729825
T:
jacfp128bk
270122852230479
T:
prjfp128bk
281782948931338
T:
hecfp128bk
297913014630580
T:
gls254
276603039332864
T:
hecfp128i
273333052233092
T:
hecfp128fkt
309853104831128
T:
gls254prot
317543212032701
T:
ecfp256h
317653215632834
T:
ecfp256e
334003348733646
T:
curve2251
353213583737052
T:
ecfp256s
366423706937810
T:
ecfp256q
383113835238403
T:
k277taa
422024225542317
T:
k298
502735085751311
T:
gls1271
518645190751972
T:
kummer
599776004760135
T:
k277mon
640806434864870
T:
kumfp127g
811908169182182
T:
kumfp128g
105767106785107967
T:
curve25519
118861119982121579
T:
surf127eps
126489126909127602
T:
ed448goldilocks
136764137996139575
T:
ecfp256i
166047167235168983
T:
sclaus1024
166794167256167674
T:
nistp256
357379358890360162
T:
surf2113
589954592131596248
T:
ed521gs
750113753412758158
T:
nist521gs
880863886274893621
T:
sclaus2048
987026989367994673
T:
claus
Cycles to compute a shared secret
25%50%75%system
289972904229088
T:
gls254
309123095931005
T:
gls254prot
381983823738284
T:
k277taa
420154205942113
T:
k298
548875494158175
T:
kummer
599265998960054
T:
k277mon
655586575666629
T:
kumfp127g
661036624466402
T:
jacfp128bk
665356672966900
T:
kumjacfp127g
761007625376435
T:
prjfp128bk
772897741477620
T:
hecfp128bk
804208058880797
T:
hecfp128fkt
848918526785603
T:
kumfp128g
101195101347101608
T:
jacfp127i
105749106150106426
T:
curve25519
110206112823115017
T:
surf127eps
120165120878122164
T:
prjfp127i
120892121213122359
T:
hecfp127i
122888123153123532
T:
ecfp256e
119230123632125855
T:
gls1271
129480129675129956
T:
ecfp256i
133582133805134346
T:
ecfp256q
134326134502134659
T:
curve2251
147021147244147555
T:
ecfp256h
166641168050168836
T:
sclaus1024
167966168380169056
T:
hecfp128i
184012184607185992
T:
ecfp256s
354069354953357355
T:
surf2113
395355396847398187
T:
ed448goldilocks
437485439518441937
T:
nistp256
589637591248594776
T:
ed521gs
749732752965757532
T:
nist521gs
873790876766889667
T:
sclaus2048
989281990655993349
T:
claus
amd64; Golden Cove (906a4-40); 2022 Intel Core i3-1215U, P cores; 2 x 1600MHz; alder2,1f626960,5600000, supercop-20240107
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
170151774818642
T:
jacfp127i
181631869619917
T:
hecfp127i
181461888719664
T:
kumjacfp127g
190091981020918
T:
prjfp127i
225692316123838
T:
jacfp128bk
250712547626540
T:
prjfp128bk
268922785028729
T:
hecfp128i
269432799229201
T:
hecfp128bk
274682824829301
T:
hecfp128fkt
295842981030034
T:
gls254
299523042531140
T:
ecfp256e
301573058731885
T:
ecfp256h
310413108431155
T:
gls254prot
330153313733284
T:
curve2251
339343439134986
T:
ecfp256s
351683559836438
T:
ecfp256q
383143835238415
T:
k277taa
422234227342372
T:
k298
500465075551331
T:
gls1271
511235119251240
T:
kummer
605886067160780
T:
k277mon
636016393164373
T:
kumfp127g
805108085181220
T:
kumfp128g
106084106498109146
T:
curve25519
134672135558136628
T:
ecfp256i
139336139724139999
T:
ed448goldilocks
177257178656179972
T:
nistp256
182721184336185641
T:
sclaus1024
598308602412609190
T:
ed521gs
769123772489777079
T:
nist521gs
922662923363924274
T:
claus
935740942871948496
T:
sclaus2048
Cycles to compute a shared secret
25%50%75%system
290142906329107
T:
gls254
309253097731032
T:
gls254prot
381793823338293
T:
k277taa
420574211842177
T:
k298
510675113651188
T:
kummer
605336059860656
T:
k277mon
659496623966853
T:
kumfp127g
664506661666784
T:
jacfp128bk
667366735267559
T:
kumjacfp127g
760267612576272
T:
prjfp128bk
775267775878043
T:
hecfp128bk
804498073581034
T:
hecfp128fkt
846848503685760
T:
kumfp128g
101187101330101506
T:
jacfp127i
105897106120106327
T:
curve25519
120718120962121199
T:
hecfp127i
119897121013122895
T:
prjfp127i
122542122897123524
T:
ecfp256e
119322126865128129
T:
gls1271
128425128751129284
T:
ecfp256i
133480133754134101
T:
curve2251
134292134892135402
T:
ecfp256q
146300146552146827
T:
ecfp256h
167814168076168236
T:
hecfp128i
184473185417186804
T:
ecfp256s
187781188404194336
T:
sclaus1024
408406409092409800
T:
ed448goldilocks
435699437561439422
T:
nistp256
595580599805606067
T:
ed521gs
769896774729779839
T:
nist521gs
920775921516922257
T:
claus
938760961488963803
T:
sclaus2048
amd64; Gracemont (906a4-20); 2022 Intel Core i3-1215U, E cores; 4 x 1600MHz; alder2,1f626960,3300000, supercop-20240107
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
266072720828074
T:
jacfp127i
273182792928729
T:
kumjacfp127g
301213057631464
T:
prjfp127i
302403092031654
T:
hecfp127i
343963451134728
T:
curve2251
368613697437130
T:
gls254
374683808338837
T:
jacfp128bk
380963815738218
T:
gls254prot
407184118841768
T:
ecfp256e
429944356644451
T:
prjfp128bk
434944414445065
T:
hecfp128fkt
434824422045082
T:
hecfp128i
436844430445309
T:
hecfp128bk
445914498145516
T:
ecfp256h
448844558246427
T:
ecfp256s
481684821848342
T:
k277taa
479414846449561
T:
ecfp256q
528305292653120
T:
k298
684406925370047
T:
gls1271
719317210972195
T:
k277mon
113527114037114863
T:
kumfp127g
117490117686117888
T:
kummer
149466149570149677
T:
kumfp128g
154649154902155192
T:
curve25519
201959203233204619
T:
ecfp256i
241974242942254022
T:
ed448goldilocks
244480246413247083
T:
nistp256
347640350989355111
T:
sclaus1024
136156413644331371861
T:
ed521gs
149288515095751519484
T:
nist521gs
202394320311372038308
T:
claus
226817422815432299963
T:
sclaus2048
Cycles to compute a shared secret
25%50%75%system
362993635036424
T:
gls254
380343809238157
T:
gls254prot
481214815148275
T:
k277taa
526515274352882
T:
k298
719837206672131
T:
k277mon
114975115305115584
T:
jacfp128bk
117198117494117724
T:
kummer
117543117742117879
T:
kumfp127g
119505119739120129
T:
kumjacfp127g
134962137745137881
T:
curve2251
140526141026141400
T:
prjfp128bk
144312144615145087
T:
hecfp128bk
149263149496149943
T:
hecfp128fkt
157399157490157588
T:
kumfp128g
166582166854167286
T:
curve25519
173908174336179157
T:
gls1271
175397175816176215
T:
jacfp127i
189021189245189598
T:
ecfp256e
197341198228199261
T:
ecfp256i
200279200818201340
T:
ecfp256q
220892221576222510
T:
prjfp127i
224040225062226215
T:
hecfp127i
230399230711231283
T:
ecfp256h
266061266699267277
T:
ecfp256s
322255322891323353
T:
hecfp128i
355264361661365736
T:
sclaus1024
839431849658851630
T:
nistp256
862740869320877739
T:
ed448goldilocks
133723713658381368061
T:
ed521gs
149559614986321501052
T:
nist521gs
203039920324862046604
T:
claus
227232023353022349728
T:
sclaus2048
amd64; Golden Cove (90675-00); 2022 Intel Core i3-12100; 4 x 3300MHz; alder, supercop-20240107
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
179451896520440
T:
jacfp127i
183581930621404
T:
hecfp127i
189491986220944
T:
kumjacfp127g
207702180323467
T:
prjfp127i
235682468425416
T:
jacfp128bk
256502637528361
T:
hecfp128i
271972836329914
T:
prjfp128bk
272062856630426
T:
hecfp128bk
276882868230271
T:
hecfp128fkt
297933009330604
T:
gls254
302263074431510
T:
ecfp256e
304473087831534
T:
ecfp256h
310423109631174
T:
gls254prot
330263314133402
T:
curve2251
337683431335292
T:
ecfp256s
353143581436658
T:
ecfp256q
382943835238422
T:
k277taa
422174228142359
T:
k298
500705055151188
T:
gls1271
511155117151243
T:
kummer
606016068460766
T:
k277mon
635746372163945
T:
kumfp127g
802308059381121
T:
kumfp128g
106314106707107851
T:
curve25519
124421129316132462
T:
surf127eps
134917136292140423
T:
ecfp256i
139283139735140151
T:
ed448goldilocks
164565165965167601
T:
sclaus1024
178488179459180731
T:
nistp256
340837342375343680
T:
surf2113
596658601215606689
T:
ed521gs
768174771794776578
T:
nist521gs
877780882965888969
T:
sclaus2048
923021923643924608
T:
claus
Cycles to compute a shared secret
25%50%75%system
290182905929122
T:
gls254
309063095131011
T:
gls254prot
381743821238283
T:
k277taa
420554210642152
T:
k298
510445110951155
T:
kummer
605296060360665
T:
k277mon
654946580766171
T:
kumfp127g
664816659366720
T:
jacfp128bk
665226683267019
T:
kumjacfp127g
756637578275925
T:
prjfp128bk
779667814278266
T:
hecfp128bk
803588051180663
T:
hecfp128fkt
853928583686223
T:
kumfp128g
101140101281101465
T:
jacfp127i
104763106906108151
T:
curve25519
112448115371123342
T:
surf127eps
120509120657120825
T:
hecfp127i
120763121086121749
T:
prjfp127i
122210122806127100
T:
gls1271
122789122971123217
T:
ecfp256e
128491128771129050
T:
ecfp256i
133138133483133661
T:
curve2251
134335134584134951
T:
ecfp256q
146435146716146999
T:
ecfp256h
167306167917169005
T:
sclaus1024
168132168396168948
T:
hecfp128i
184689184940185258
T:
ecfp256s
335817341265341725
T:
surf2113
408457408953409707
T:
ed448goldilocks
437561438150438833
T:
nistp256
595127600093606840
T:
ed521gs
767479772066776400
T:
nist521gs
892059893216896140
T:
sclaus2048
920665921202921960
T:
claus
amd64; Zen 2 (860f01); 2022 AMD Ryzen 5 4500U; 6 x 3600MHz; renoir, supercop-20240107
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
211432284624286
T:
jacfp127i
222792358425545
T:
kumjacfp127g
238822520627212
T:
prjfp127i
247962628327964
T:
hecfp127i
326213364034752
T:
jacfp128bk
331243454436242
T:
prjfp128bk
343283528737505
T:
ecfp256e
337673534937323
T:
hecfp128fkt
337013541637174
T:
hecfp128bk
361483703438196
T:
hecfp128i
362493823841977
T:
ecfp256h
376824003243746
T:
ecfp256s
395614027142330
T:
curve2251
392714111044790
T:
ecfp256q
423054252343137
T:
gls254
438264385643920
T:
gls254prot
536105362453667
T:
k277taa
590795910359982
T:
kummer
600246077761272
T:
gls1271
640356408664170
T:
k298
821548222582338
T:
kumfp127g
865978659986608
T:
k277mon
109172109241109366
T:
kumfp128g
134367134473134789
T:
curve25519
144834145281145729
T:
surf127eps
158694159178159453
T:
ed448goldilocks
159271160080160960
T:
ecfp256i
163302164894166383
T:
sclaus1024
235769236562255605
T:
nistp256
441582443994444999
T:
surf2113
818354819279819924
T:
ed521gs
853219858282865111
T:
sclaus2048
940880942101943292
T:
nist521gs
976103978622982104
T:
claus
Cycles to compute a shared secret
25%50%75%system
413964141041433
T:
gls254
437494374943765
T:
gls254prot
535665360653617
T:
k277taa
590855916960184
T:
kummer
639316396364000
T:
k298
836208362083683
T:
kumfp127g
843898444584710
T:
jacfp128bk
854278584685879
T:
kumjacfp127g
865838658386583
T:
k277mon
989889912699177
T:
prjfp128bk
102096102296102568
T:
hecfp128bk
105766106047106153
T:
hecfp128fkt
114757114814115297
T:
kumfp128g
134091134581135720
T:
curve25519
141440141600141910
T:
surf127eps
146552146582146678
T:
ecfp256e
148861150850154006
T:
gls1271
155531155559155619
T:
ecfp256i
156625156686156754
T:
ecfp256q
155826156957157506
T:
curve2251
159470159824160021
T:
prjfp127i
163298163314163465
T:
hecfp127i
162207168234172411
T:
sclaus1024
171327171440171463
T:
jacfp127i
179618179738179949
T:
ecfp256h
212142212241212372
T:
ecfp256s
227271227306227374
T:
hecfp128i
438259443634444093
T:
surf2113
483535484198484878
T:
ed448goldilocks
598497598961599653
T:
nistp256
818015819222819799
T:
ed521gs
856943859199863706
T:
sclaus2048
941589941826943022
T:
nist521gs
974432978660980579
T:
claus
amd64; Zen 3 (a50f00); 2021 AMD Ryzen 5 PRO 5650G; 6 x 3900MHz; cezanne, supercop-20240107
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
234122499327526
T:
jacfp127i
258952707929311
T:
kumjacfp127g
293653112633202
T:
prjfp127i
299543185533668
T:
hecfp127i
310873288234986
T:
jacfp128bk
324583395637423
T:
ecfp256e
334513512439934
T:
curve2251
357143771340485
T:
prjfp128bk
374443780738367
T:
gls254
382703831138368
T:
gls254prot
365923837840994
T:
hecfp128fkt
368923860541168
T:
hecfp128bk
358423867943693
T:
ecfp256h
369613933941606
T:
hecfp128i
377594023645815
T:
ecfp256s
400254208448785
T:
ecfp256q
473204736147418
T:
kummer
479304805348112
T:
k277taa
531385376254398
T:
gls1271
541305426555114
T:
k298
756217569075758
T:
k277mon
814298150881594
T:
kumfp127g
102461102551102930
T:
curve25519
105371105545105690
T:
kumfp128g
139501140033140493
T:
surf127eps
149304150114151038
T:
ecfp256i
158299158411158654
T:
ed448goldilocks
198562200807202614
T:
sclaus1024
220085220309220799
T:
nistp256
356417357788358894
T:
surf2113
753115753786756168
T:
ed521gs
905553907073908959
T:
nist521gs
100632310137931021242
T:
sclaus2048
102223210258281050832
T:
claus
Cycles to compute a shared secret
25%50%75%system
356723572035779
T:
gls254
381983825238303
T:
gls254prot
475864764058313
T:
kummer
479284792947946
T:
k277taa
539015397554058
T:
k298
755407559775655
T:
k277mon
810808125581289
T:
jacfp128bk
838348394684033
T:
kumfp127g
859108597086029
T:
kumjacfp127g
104501104549104765
T:
prjfp128bk
107272107525107764
T:
hecfp128bk
109802110191110228
T:
kumfp128g
110803110884110972
T:
curve25519
111481111582111742
T:
hecfp128fkt
131026131227131452
T:
curve2251
131641131721131797
T:
jacfp127i
131409132488133669
T:
gls1271
134510135527135588
T:
ecfp256e
136429136814136882
T:
surf127eps
143840143920144114
T:
ecfp256i
146389146502146649
T:
ecfp256q
164112164200164315
T:
ecfp256h
174950175140175242
T:
prjfp127i
178152178239179451
T:
hecfp127i
196830200560202914
T:
sclaus1024
201671202118204282
T:
ecfp256s
237445237849237971
T:
hecfp128i
349603350398352321
T:
surf2113
527641528819529526
T:
ed448goldilocks
581927582604584343
T:
nistp256
753733756321756998
T:
ed521gs
904825905685907054
T:
nist521gs
99113710163121021005
T:
sclaus2048
102059510274061043941
T:
claus
amd64; Zen 3 (a50f00); 2021 AMD Ryzen 5 5560U; 6 x 4062MHz; beelink, supercop-20221122
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
337343515539802
T:
curve2251
378263799538008
T:
gls254prot
372723827438659
T:
gls254
467504677046841
T:
k277taa
476974775247905
T:
kummer
527445287253245
T:
k298
540195499656224
T:
gls1271
736497369373773
T:
k277mon
102507102661102824
T:
curve25519
139792140126140514
T:
surf127eps
156767157050157379
T:
ed448goldilocks
200647202727204578
T:
sclaus1024
209722210036210198
T:
nistp256
367234369072370210
T:
surf2113
757107758860764001
T:
ed521gs
872057875803876158
T:
nist521gs
100644510150731020480
T:
sclaus2048
119862812011361204247
T:
claus
Cycles to compute a shared secret
25%50%75%system
353323536835374
T:
gls254
378513789837931
T:
gls254prot
467024674546836
T:
k277taa
478424789748070
T:
kummer
525905267552753
T:
k298
736187368873725
T:
k277mon
110876110972111112
T:
curve25519
126036129335132317
T:
gls1271
129803131087131198
T:
curve2251
135835136451136730
T:
surf127eps
202626205515206705
T:
sclaus1024
363140363460363827
T:
surf2113
517434518481518742
T:
ed448goldilocks
563375563907564446
T:
nistp256
758675758870760360
T:
ed521gs
872278873146874983
T:
nist521gs
101862610200251021087
T:
sclaus2048
119823611998721202629
T:
claus
amd64; Zen 2 (860f81); 2021 AMD Ryzen 3 5300U; 4 x 2600MHz; lucienne, supercop-20240107
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
201172112823172
T:
jacfp127i
221082322825356
T:
kumjacfp127g
238282522726881
T:
prjfp127i
247462597127764
T:
hecfp127i
321733314533914
T:
jacfp128bk
330093428936425
T:
prjfp128bk
339353520637095
T:
hecfp128fkt
337653525837342
T:
hecfp128bk
343453528137520
T:
ecfp256e
340453536337475
T:
hecfp128i
355723743941302
T:
ecfp256h
379123946342798
T:
ecfp256s
395054005842384
T:
curve2251
396014123844840
T:
ecfp256q
435164386944116
T:
gls254
439094393243951
T:
gls254prot
536395364953678
T:
k277taa
590365906059075
T:
kummer
604406106661780
T:
gls1271
638496389164017
T:
k298
821598223182560
T:
kumfp127g
865978663486634
T:
k277mon
109376109436109521
T:
kumfp128g
134891134958135086
T:
curve25519
144594145094145518
T:
surf127eps
158672159367160450
T:
ed448goldilocks
159141160007160891
T:
ecfp256i
163030164854166502
T:
sclaus1024
236644237714238407
T:
nistp256
442202444367445694
T:
surf2113
818067819365819950
T:
ed521gs
848920855178861916
T:
sclaus2048
942120943284943926
T:
nist521gs
975593979255982344
T:
claus
Cycles to compute a shared secret
25%50%75%system
412884132241336
T:
gls254
438964392743927
T:
gls254prot
536045364553651
T:
k277taa
590255903159165
T:
kummer
637256375463792
T:
k298
835658362083755
T:
kumfp127g
844038455984620
T:
jacfp128bk
854598546585824
T:
kumjacfp127g
865678658386583
T:
k277mon
992989944799515
T:
prjfp128bk
102393102396102799
T:
hecfp128bk
106038106233106311
T:
hecfp128fkt
114739114909115084
T:
kumfp128g
128349128392128494
T:
jacfp127i
134699134987135271
T:
curve25519
141781141919141983
T:
surf127eps
146631146713146792
T:
ecfp256e
150536153767155214
T:
gls1271
155603155673155841
T:
ecfp256i
156063156966157965
T:
curve2251
157147157294157370
T:
ecfp256q
159748160019160688
T:
prjfp127i
163085163286163560
T:
hecfp127i
165565166391170557
T:
sclaus1024
180320180507181278
T:
ecfp256h
212556212670212737
T:
ecfp256s
225588225668225791
T:
hecfp128i
443022443163443737
T:
surf2113
481750482395483261
T:
ed448goldilocks
596636597502598995
T:
nistp256
817668818211820382
T:
ed521gs
853336861369867007
T:
sclaus2048
942603944511945821
T:
nist521gs
976306980860982430
T:
claus
amd64; Tremont (906c0); 2021 Intel Pentium Silver N6000; 4 x 1100MHz; jasper, supercop-20240107
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
354913604837021
T:
jacfp127i
362023678837524
T:
kumjacfp127g
428174336544065
T:
hecfp127i
423704345944926
T:
prjfp127i
490464918650102
T:
curve2251
498175030951007
T:
jacfp128bk
535515369853904
T:
gls254
539285436955197
T:
ecfp256e
553295541055555
T:
gls254prot
597596043961693
T:
ecfp256h
601726096462179
T:
ecfp256s
607006116761743
T:
hecfp128fkt
606226128362599
T:
prjfp128bk
605686156763412
T:
hecfp128bk
609326204563679
T:
hecfp128i
641196496566276
T:
ecfp256q
676456785068131
T:
k277taa
739577539076427
T:
k298
987319901299354
T:
k277mon
99159100608101803
T:
gls1271
153528153636153863
T:
kumfp127g
219477220744221179
T:
kumfp128g
240121240733240992
T:
curve25519
282120283877285234
T:
surf127eps
291801294306296097
T:
ecfp256i
304147304713305433
T:
ed448goldilocks
319692320062320644
T:
kummer
326618330495333230
T:
sclaus1024
341744342097342915
T:
nistp256
597611600066601455
T:
surf2113
174444117471711749721
T:
ed521gs
176236717750551787422
T:
sclaus2048
196977819743291979236
T:
claus
197897819807351982781
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
529415307153157
T:
gls254
552265528455395
T:
gls254prot
675556764467742
T:
k277taa
730767430075152
T:
k298
987129895499120
T:
k277mon
156960157079157285
T:
kumfp127g
158827159008159146
T:
kumjacfp127g
159162159684160176
T:
jacfp128bk
192702192947193435
T:
curve2251
203481203992204609
T:
prjfp128bk
205925206373206972
T:
hecfp128bk
214131214405214809
T:
hecfp128fkt
226954227260228167
T:
kumfp128g
239965240703240977
T:
curve25519
241661242058242547
T:
jacfp127i
239459245591247106
T:
gls1271
266012266338266737
T:
ecfp256e
277770278223278667
T:
ecfp256q
279739281455282588
T:
surf127eps
290064291599291873
T:
ecfp256i
312501313133313644
T:
prjfp127i
319723320206320622
T:
kummer
321205321660322252
T:
hecfp127i
329254331790339007
T:
sclaus1024
340778341022341383
T:
ecfp256h
356042356297356778
T:
ecfp256s
462630462999464590
T:
hecfp128i
590820591882596296
T:
surf2113
100324610038141007220
T:
ed448goldilocks
118497911856441187838
T:
nistp256
174394117467681748753
T:
ed521gs
174625817648361786816
T:
sclaus2048
197480919762461979074
T:
nist521gs
196924219813841985684
T:
claus
amd64; Tremont (906c0); 2021 Intel Celeron N5105; 4 x 2000MHz; jasper3, supercop-20240107
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
361333701638348
T:
jacfp127i
368203776939055
T:
kumjacfp127g
415824264445259
T:
prjfp127i
447924617549165
T:
hecfp127i
489774917750309
T:
curve2251
507245177853178
T:
jacfp128bk
537915399954364
T:
gls254
539125448055575
T:
ecfp256e
551815532055445
T:
gls254prot
598426057262104
T:
ecfp256h
601526127562805
T:
ecfp256s
609796241964552
T:
hecfp128i
615306261263683
T:
hecfp128bk
619736262963852
T:
prjfp128bk
615716265063850
T:
hecfp128fkt
639326482066925
T:
ecfp256q
676686784368150
T:
k277taa
754687665578555
T:
k298
965019769098842
T:
gls1271
987469891899102
T:
k277mon
152944154760155144
T:
kumfp127g
219166220350220935
T:
kumfp128g
239956240701241117
T:
curve25519
281906283885285214
T:
surf127eps
288813290437292274
T:
ecfp256i
303837304689305643
T:
ed448goldilocks
319907320415320776
T:
kummer
327515330329333068
T:
sclaus1024
340892341276342589
T:
nistp256
597238599782600899
T:
surf2113
174143617453291750877
T:
ed521gs
176079317725881785392
T:
sclaus2048
196919719772262025837
T:
claus
197537419772661979709
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
527445278252830
T:
gls254
552115533655459
T:
gls254prot
675646770867825
T:
k277taa
744497522176489
T:
k298
985709878998943
T:
k277mon
157145158413158658
T:
kumfp127g
158944159068159273
T:
kumjacfp127g
159659160153160787
T:
jacfp128bk
190678192344193204
T:
curve2251
200201202278203188
T:
prjfp128bk
206648206825207438
T:
hecfp128bk
214299214598215281
T:
hecfp128fkt
226620226901227454
T:
kumfp128g
240129240448240870
T:
jacfp127i
239843240524240812
T:
curve25519
239894241020241721
T:
gls1271
265786266132266554
T:
ecfp256e
277559278033278342
T:
ecfp256q
278254279696281715
T:
surf127eps
287131287665288390
T:
ecfp256i
312298312749313539
T:
prjfp127i
319470319720320439
T:
kummer
322795323021323540
T:
hecfp127i
328322328726336490
T:
sclaus1024
340649341105341817
T:
ecfp256h
355999356430357265
T:
ecfp256s
462127462620463474
T:
hecfp128i
592224595894598952
T:
surf2113
100288910031031004532
T:
ed448goldilocks
117765611788551186128
T:
nistp256
174171417460111749952
T:
ed521gs
171392617698681783226
T:
sclaus2048
196833219700122026160
T:
claus
197333619754851978776
T:
nist521gs
amd64; Tremont (906c0); 2021 Intel Celeron N4500; 2 x 1100MHz; jasper2, supercop-20240107
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
347173535936118
T:
jacfp127i
369243724038113
T:
kumjacfp127g
411484194643057
T:
prjfp127i
432224404645879
T:
hecfp127i
490634921250060
T:
curve2251
502605076051486
T:
jacfp128bk
524165282553280
T:
gls254
538555447855530
T:
ecfp256e
572625762058050
T:
gls254prot
594356015561218
T:
ecfp256h
593896057362226
T:
prjfp128bk
600946118263217
T:
hecfp128bk
603446126162301
T:
ecfp256s
602866159263607
T:
hecfp128i
605906175663329
T:
hecfp128fkt
641496497865992
T:
ecfp256q
676896786368049
T:
k277taa
745157519475948
T:
k298
987949897499213
T:
k277mon
99059100263100896
T:
gls1271
153520153582153697
T:
kumfp127g
218721220185220771
T:
kumfp128g
240024240744241125
T:
curve25519
277127279053281482
T:
surf127eps
289343290775292857
T:
ecfp256i
304102304618305313
T:
ed448goldilocks
319830320378320971
T:
kummer
325656328709332166
T:
sclaus1024
342174342840343331
T:
nistp256
597810600606602131
T:
surf2113
174773517489151750816
T:
ed521gs
176278317738941786373
T:
sclaus2048
196647319711531977666
T:
claus
197783519799491981595
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
514255181152323
T:
gls254
571855742257869
T:
gls254prot
676236777067920
T:
k277taa
737287431374822
T:
k298
986779887399067
T:
k277mon
156962157031157124
T:
kumfp127g
159362159915160173
T:
kumjacfp127g
160372160772161258
T:
jacfp128bk
191484193138193382
T:
curve2251
202358202873203800
T:
prjfp128bk
205716206053206647
T:
hecfp128bk
213250214593215243
T:
hecfp128fkt
226921227690227899
T:
kumfp128g
240030240745241023
T:
curve25519
240523240760241281
T:
jacfp127i
236526246696247599
T:
gls1271
265930266413266876
T:
ecfp256e
270224274193275101
T:
surf127eps
277844278404278968
T:
ecfp256q
287370287703288067
T:
ecfp256i
311682312156313666
T:
prjfp127i
319801320119320775
T:
kummer
322922323145323646
T:
hecfp127i
330337334205335656
T:
sclaus1024
340887341172341578
T:
ecfp256h
356112356664357082
T:
ecfp256s
462388463070463929
T:
hecfp128i
592915594671598171
T:
surf2113
100314910032091003792
T:
ed448goldilocks
118573611863671187285
T:
nistp256
174905217499411751256
T:
ed521gs
178053717832341790104
T:
sclaus2048
195459119736761980387
T:
claus
197235119741521976409
T:
nist521gs
amd64; Zen 3 (a20f10); 2020 AMD Ryzen 5 5600X; 6 x 3700MHz; unstable; spawn, supercop-20231215
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
200172160823051
T:
jacfp127i
211272227423273
T:
kumjacfp127g
221632349526233
T:
hecfp127i
247532604827306
T:
prjfp127i
272322800928712
T:
jacfp128bk
264552804630044
T:
ecfp256e
283792948932967
T:
curve2251
288973037732486
T:
hecfp128bk
289713071035113
T:
ecfp256h
308953196833189
T:
prjfp128bk
315243259733522
T:
hecfp128i
315243263433670
T:
hecfp128fkt
309693267136741
T:
ecfp256s
328193311533337
T:
gls254
336333385534040
T:
gls254prot
316353392937888
T:
ecfp256q
403304040440478
T:
kummer
404414062640774
T:
k277taa
444374499245473
T:
gls1271
509495113451652
T:
k298
621236227162530
T:
k277mon
672666734067488
T:
kumfp127g
842498439784508
T:
curve25519
867288687686950
T:
kumfp128g
123580124505125171
T:
ecfp256i
148629148962149295
T:
ed448goldilocks
181596183261185333
T:
sclaus1024
199874200133200836
T:
nistp256
620638623191624264
T:
ed521gs
755836757205759203
T:
nist521gs
838198842305850445
T:
claus
912087919228926702
T:
sclaus2048
Cycles to compute a shared secret
25%50%75%system
317833189432042
T:
gls254
337443392934114
T:
gls254prot
403674040440589
T:
kummer
404414051540663
T:
k277taa
509125098651097
T:
k298
620126216062271
T:
k277mon
671186722967377
T:
jacfp128bk
693756952369856
T:
kumfp127g
705967067070892
T:
kumjacfp127g
860258617386469
T:
prjfp128bk
882088857888763
T:
hecfp128bk
908729094690983
T:
kumfp128g
907989127991649
T:
hecfp128fkt
911689131691575
T:
curve25519
107041107411108114
T:
curve2251
107596108151109113
T:
gls1271
108706108891109409
T:
jacfp127i
110778111259111407
T:
ecfp256e
119473119621119695
T:
ecfp256i
120250120842121027
T:
ecfp256q
136530137270139083
T:
ecfp256h
144892145262145743
T:
prjfp127i
147482147630147704
T:
hecfp127i
164243164983165131
T:
ecfp256s
187442191438192289
T:
sclaus1024
195212196137196248
T:
hecfp128i
441817443741444074
T:
ed448goldilocks
555629557331558848
T:
nistp256
620675622525624079
T:
ed521gs
753320756539758056
T:
nist521gs
835275838309846338
T:
claus
930402936877940022
T:
sclaus2048
amd64; Zen (820f01); 2020 AMD Athlon Silver 3050e; 2 x 1400MHz; dali, supercop-20240107
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
264592719627969
T:
jacfp127i
267232729128271
T:
kumjacfp127g
302603088331571
T:
prjfp127i
307693143432126
T:
hecfp127i
353703614937096
T:
jacfp128bk
386773960641180
T:
ecfp256e
388783965040599
T:
prjfp128bk
390433970541021
T:
hecfp128bk
391743984740998
T:
hecfp128fkt
392533993541107
T:
hecfp128i
400684053942306
T:
curve2251
435184391444135
T:
gls254
428744443047506
T:
ecfp256h
445104469744704
T:
gls254prot
442404561648744
T:
ecfp256s
455264674649973
T:
ecfp256q
557985598456534
T:
k277taa
645266458865016
T:
k298
647906557866413
T:
gls1271
897518981989856
T:
k277mon
101102101200101209
T:
kummer
101717101802101876
T:
kumfp127g
132947133042133136
T:
kumfp128g
144527144541144561
T:
curve25519
185567186584187977
T:
ecfp256i
186723187387188018
T:
surf127eps
197988199936201804
T:
sclaus1024
202154202264202621
T:
ed448goldilocks
272821273357273540
T:
nistp256
454181456226457050
T:
surf2113
932111933826935448
T:
ed521gs
9910489983491008467
T:
sclaus2048
110514811065191109868
T:
nist521gs
117713811797791182453
T:
claus
Cycles to compute a shared secret
25%50%75%system
423154234642352
T:
gls254
444344457844626
T:
gls254prot
559835650356607
T:
k277taa
644536452964712
T:
k298
897308978189783
T:
k277mon
101074101180101180
T:
kummer
103546103633103676
T:
jacfp128bk
104460104485104550
T:
kumfp127g
106336106377106401
T:
kumjacfp127g
126489126562126887
T:
prjfp128bk
129456129801129928
T:
hecfp128bk
133745133846134036
T:
hecfp128fkt
139086139099139262
T:
kumfp128g
157236157483159023
T:
curve25519
158420159123159491
T:
curve2251
161137161594165119
T:
gls1271
162115162270162423
T:
jacfp127i
173642173852174319
T:
ecfp256e
183289183356183456
T:
ecfp256q
183437183667185771
T:
ecfp256i
183767184005184196
T:
surf127eps
197129201148204234
T:
sclaus1024
203571203605203767
T:
prjfp127i
207341207480207660
T:
hecfp127i
216042216174216569
T:
ecfp256h
235895236049236325
T:
ecfp256s
285749285870286257
T:
hecfp128i
454524455098455723
T:
surf2113
590953592145597423
T:
ed448goldilocks
672456673283674135
T:
nistp256
930740932416935390
T:
ed521gs
100505310076501009866
T:
sclaus2048
110366211048031106923
T:
nist521gs
117639611789851182924
T:
claus
amd64; Tiger Lake (806c1); 2020 Intel Core i7-1165G7; 4 x 2800MHz; panther, supercop-20240107
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
189561940120732
T:
jacfp127i
209422196923621
T:
kumjacfp127g
237022485526443
T:
prjfp127i
243502542727331
T:
hecfp127i
298513021930930
T:
gls254
307173151333056
T:
jacfp128bk
316263168231756
T:
gls254prot
355623570836510
T:
curve2251
366693767839027
T:
ecfp256e
364253789541548
T:
prjfp128bk
363703795641312
T:
hecfp128i
366733816941682
T:
hecfp128bk
374123827240271
T:
ecfp256h
383023838138453
T:
k277taa
373543882242027
T:
hecfp128fkt
407634145743232
T:
ecfp256s
425074256842649
T:
k298
430004392045585
T:
ecfp256q
485104858848660
T:
kummer
550425511155187
T:
k277mon
622926313364046
T:
gls1271
789027919579454
T:
kumfp127g
116251116375116495
T:
kumfp128g
121237121360121515
T:
curve25519
143896144197144544
T:
ed448goldilocks
170414171518173152
T:
surf127eps
175098175936176885
T:
ecfp256i
209211211494213169
T:
sclaus1024
223119223918224935
T:
nistp256
403584405805406966
T:
surf2113
792101794553796316
T:
ed521gs
967614971827977854
T:
nist521gs
105774310586631059937
T:
claus
107268610823571091040
T:
sclaus2048
Cycles to compute a shared secret
25%50%75%system
288532890528954
T:
gls254
315453158931633
T:
gls254prot
381393823238313
T:
k277taa
422364229742340
T:
k298
483444841948503
T:
kummer
549555501055077
T:
k277mon
816408179282428
T:
kumfp127g
822148232782446
T:
kumjacfp127g
931229336793660
T:
jacfp128bk
111607111871112162
T:
prjfp128bk
114383114652115048
T:
hecfp128bk
118850119040119393
T:
hecfp128fkt
122209122349122483
T:
kumfp128g
122490122806123258
T:
jacfp127i
129935130077130232
T:
curve25519
140461140963141449
T:
curve2251
152781153196153828
T:
prjfp127i
154255154746155470
T:
hecfp127i
156422157524159286
T:
gls1271
160105160374162840
T:
ecfp256e
168714168920169189
T:
ecfp256i
168164169356170274
T:
surf127eps
170008170311170604
T:
ecfp256q
193664194045194402
T:
ecfp256h
210678213245214189
T:
sclaus1024
233319233962234912
T:
ecfp256s
252156252611253233
T:
hecfp128i
408262416400417568
T:
surf2113
458228458930459702
T:
ed448goldilocks
578576580004582936
T:
nistp256
791918794107796011
T:
ed521gs
967859974161976624
T:
nist521gs
105337010541161055110
T:
claus
107163510780061087257
T:
sclaus2048
aarch64; Cortex-A72 (410fd083); 2019 Broadcom BCM2711; 4 x 1500MHz; pi4b, supercop-20240107
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
248182248680248897
T:
kummer
349460349956351196
T:
curve25519
373156373283374120
T:
nistp256
422065424186425626
T:
surf127eps
598722604724609639
T:
sclaus1024
195761019581081967710
T:
ed521gs
240878024091982419245
T:
nist521gs
298325230086913035116
T:
sclaus2048
360053536109763626128
T:
claus
Cycles to compute a shared secret
25%50%75%system
248631248847249087
T:
kummer
349349349696350472
T:
curve25519
406718409362411338
T:
surf127eps
600373603728608152
T:
sclaus1024
130641413075811307829
T:
nistp256
195562519572201965159
T:
ed521gs
240374524086092414251
T:
nist521gs
295569330029933010168
T:
sclaus2048
359162336010203614792
T:
claus
amd64; Zen 2 (830f10); 2019 AMD EPYC 7742; 64 x 2250MHz; rome0, supercop-20240425
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
26478?28112?35078?
T:
kumjacfp127g
289943055034800
T:
hecfp127i
25916?30760?34707?
T:
jacfp127i
345273616041865
T:
jacfp128bk
30280?36775?39178?
T:
prjfp127i
383753928040248
T:
hecfp128fkt
376623992043554
T:
ecfp256e
404594242847575
T:
curve2251
399724276147290
T:
hecfp128i
402884288647196
T:
hecfp128bk
431854345543908
T:
gls254
439024390743908
T:
gls254prot
397074556048865
T:
prjfp128bk
41207?45644?51865?
T:
ecfp256h
42882?46744?54121?
T:
ecfp256s
46308?51350?61682?
T:
ecfp256q
539175405354102
T:
k277taa
589005906059062
T:
kummer
604176106361677
T:
gls1271
633146336564962
T:
k298
820818212582171
T:
kumfp127g
860378603786037
T:
k277mon
109273109320109375
T:
kumfp128g
135118135244135329
T:
curve25519
145061?145586?193477?
T:
surf127eps
158765159098159720
T:
ed448goldilocks
159329160286161292
T:
ecfp256i
163688165758167436
T:
sclaus1024
236655237618238616
T:
nistp256
442292443642444864
T:
surf2113
818077818731819050
T:
ed521gs
847614855138860212
T:
sclaus2048
949904956046956805
T:
nist521gs
973740976650980557
T:
claus
Cycles to compute a shared secret
25%50%75%system
413894139241402
T:
gls254
438544388443900
T:
gls254prot
540005409554095
T:
k277taa
589985902359048
T:
kummer
632186324263274
T:
k298
835658357283620
T:
kumfp127g
844888455184961
T:
jacfp128bk
853838593786185
T:
kumjacfp127g
875158753287539
T:
k277mon
993439937099536
T:
prjfp128bk
102227102248102522
T:
hecfp128bk
114905114972114980
T:
kumfp128g
125120125725125902
T:
hecfp128fkt
128279128440128588
T:
jacfp127i
135174135504136428
T:
curve25519
141942?142179?184235?
T:
surf127eps
146652146875146987
T:
ecfp256e
147419149803150040
T:
gls1271
155653155670155728
T:
ecfp256i
156192158101158159
T:
curve2251
159814160302160390
T:
prjfp127i
163131163184163444
T:
hecfp127i
165960167733168981
T:
sclaus1024
180218180293181032
T:
ecfp256h
184667184725184897
T:
ecfp256q
212474212584212693
T:
ecfp256s
226142226522226751
T:
hecfp128i
439979441333443445
T:
surf2113
482662483057484767
T:
ed448goldilocks
599108599358600520
T:
nistp256
817998819999821125
T:
ed521gs
853843862298869496
T:
sclaus2048
941617954677955015
T:
nist521gs
976813981770982027
T:
claus
amd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; comet, supercop-20240107
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
229592367824577
T:
jacfp127i
239562461625269
T:
kumjacfp127g
262452733029283
T:
hecfp127i
273202844929983
T:
prjfp127i
322723355234713
T:
jacfp128bk
366013684437152
T:
gls254
373893803238883
T:
hecfp128fkt
370523830339305
T:
prjfp128bk
382243836739175
T:
curve2251
386593869938746
T:
gls254prot
377713896741049
T:
hecfp128bk
395554066541606
T:
hecfp128i
448644561346792
T:
ecfp256e
457304576045795
T:
k277taa
475154827850013
T:
ecfp256h
488724975851681
T:
ecfp256s
498794994750013
T:
k298
508995164053751
T:
ecfp256q
530005308653151
T:
kummer
709147098171047
T:
k277mon
731517387074536
T:
gls1271
803078036480438
T:
kumfp127g
111019111060111110
T:
kumfp128g
125358125603125849
T:
curve25519
153299153567153823
T:
ed448goldilocks
178126180381189943
T:
sclaus1024
183499184360185102
T:
surf127eps
193535194461195707
T:
ecfp256i
238951239242239465
T:
nistp256
512836515855517414
T:
surf2113
808697808947809431
T:
ed521gs
887958898135936691
T:
sclaus2048
942142942519942910
T:
nist521gs
980847981240982093
T:
claus
Cycles to compute a shared secret
25%50%75%system
357523578835830
T:
gls254
385553859138634
T:
gls254prot
455244555645594
T:
k277taa
496674971849779
T:
k298
542635442654525
T:
kummer
706637081770886
T:
k277mon
814978162081841
T:
kumfp127g
825788265482723
T:
kumjacfp127g
879708805488133
T:
jacfp128bk
107392107495107628
T:
prjfp128bk
112059112156112295
T:
hecfp128bk
115305115353115409
T:
kumfp128g
116217116506117949
T:
hecfp128fkt
124222124354125685
T:
jacfp127i
134896135353135496
T:
curve25519
144004145403146030
T:
curve2251
165287165433165637
T:
prjfp127i
168213168312168482
T:
hecfp127i
176139176283176472
T:
ecfp256e
176705177037177554
T:
gls1271
176769177410177996
T:
surf127eps
181349184410187348
T:
sclaus1024
186355186505186691
T:
ecfp256q
188105188238188392
T:
ecfp256i
218156218313218439
T:
ecfp256h
243451243632243784
T:
ecfp256s
247182247501252242
T:
hecfp128i
466531467064468107
T:
ed448goldilocks
511470513107514635
T:
surf2113
613410613851614251
T:
nistp256
808741808910809149
T:
ed521gs
884860889644949335
T:
sclaus2048
941949942175942715
T:
nist521gs
977817978087978429
T:
claus
amd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; cubi10, supercop-20240107
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
210532133222498
T:
kumjacfp127g
217352266823561
T:
jacfp127i
240622497126037
T:
prjfp127i
256882654127573
T:
hecfp127i
304363126832234
T:
jacfp128bk
356443645337170
T:
prjfp128bk
365953725638053
T:
hecfp128i
371923736737620
T:
gls254
35873?37882?49011?
T:
hecfp128fkt
379243806438736
T:
curve2251
376373829639165
T:
hecfp128bk
391903924039296
T:
gls254prot
425254322144254
T:
ecfp256e
458204630846370
T:
k277taa
458804645748000
T:
ecfp256h
481224899650213
T:
ecfp256s
502715090751874
T:
ecfp256q
531385323153335
T:
k298
541815458354676
T:
kummer
695277032171133
T:
gls1271
711337224972313
T:
k277mon
797137978579870
T:
kumfp127g
112737112836113069
T:
kumfp128g
125574126483126653
T:
curve25519
152216152473152715
T:
ed448goldilocks
177965179983213642
T:
sclaus1024
186660187361188062
T:
surf127eps
194566195591197144
T:
ecfp256i
234369234963235642
T:
nistp256
506432508662510524
T:
surf2113
822538822899824743
T:
ed521gs
894825905044956440
T:
sclaus2048
955968957160959439
T:
nist521gs
976310978492985317
T:
claus
Cycles to compute a shared secret
25%50%75%system
361803621436264
T:
gls254
389313896739004
T:
gls254prot
455494561946098
T:
k277taa
529685303353115
T:
k298
530015304153110
T:
kummer
721377217972233
T:
k277mon
821008221683254
T:
kumfp127g
839068431984455
T:
kumjacfp127g
876118861488891
T:
jacfp128bk
109810109957110160
T:
prjfp128bk
114125114326114558
T:
hecfp128bk
117762?117990?169847?
T:
hecfp128fkt
118032118111118308
T:
kumfp128g
125306125771125993
T:
jacfp127i
135681135994136434
T:
curve25519
143793144363144494
T:
curve2251
166593166723166865
T:
prjfp127i
168976169120169278
T:
hecfp127i
172292173646175477
T:
gls1271
176778178775179080
T:
ecfp256e
176274183291211734
T:
sclaus1024
183446183693184042
T:
surf127eps
187778187983188223
T:
ecfp256q
190420190612190820
T:
ecfp256i
225096225300225832
T:
ecfp256h
247058247335247963
T:
ecfp256s
253227253450254034
T:
hecfp128i
456926457176457418
T:
ed448goldilocks
504496506142508476
T:
surf2113
588187588748590099
T:
nistp256
822770823668826218
T:
ed521gs
891730894506961729
T:
sclaus2048
955647956226957750
T:
nist521gs
973280974391976660
T:
claus
amd64; Ice Lake (706e5); 2019 Intel Core i3-1035G1; 4 x 1000MHz; icelake2, supercop-20221005
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
294222962629829
T:
gls254
315353159731656
T:
gls254prot
356823592536460
T:
curve2251
383873849338628
T:
k277taa
419144215642522
T:
k298
496314972949925
T:
kummer
551485524155618
T:
k277mon
635416461665455
T:
gls1271
121235121421121705
T:
curve25519
145378145817146240
T:
ed448goldilocks
167451169019171086
T:
surf127eps
210381213080215609
T:
sclaus1024
229401230861233076
T:
nistp256
393994396192398488
T:
surf2113
794593796389798799
T:
ed521gs
960681964206967325
T:
nist521gs
107529210887261104624
T:
sclaus2048
126261112669811272519
T:
claus
Cycles to compute a shared secret
25%50%75%system
288282887928947
T:
gls254
314583151831670
T:
gls254prot
382633836838587
T:
k277taa
415914182342184
T:
k298
495244961549793
T:
kummer
550675515755384
T:
k277mon
130070130318130992
T:
curve25519
140066140553140999
T:
curve2251
158547160294161947
T:
gls1271
163805165182167813
T:
surf127eps
212667213688216268
T:
sclaus1024
391304393743396581
T:
surf2113
469404470206471471
T:
ed448goldilocks
596086598954603025
T:
nistp256
794467795618798066
T:
ed521gs
959187961357964090
T:
nist521gs
108706910915971115555
T:
sclaus2048
126428812689701273171
T:
claus
amd64; Goldmont Plus (706a8); 2019 Intel Celeron N4020; 2 x 1100MHz; gemini, supercop-20240107
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
462884769449615
T:
kumjacfp127g
472714856149865
T:
jacfp127i
518615319755458
T:
prjfp127i
548075631358773
T:
hecfp127i
596376123263235
T:
jacfp128bk
605966128162347
T:
ecfp256e
615056210463339
T:
curve2251
637576434866058
T:
ecfp256h
660276676068085
T:
ecfp256s
705337123272903
T:
ecfp256q
705667196174384
T:
prjfp128bk
713987225273220
T:
gls254
714467270575122
T:
hecfp128i
721207368277225
T:
hecfp128bk
724567413877457
T:
hecfp128fkt
911409115391171
T:
gls254prot
112370113654114520
T:
gls1271
127674127701127796
T:
k277taa
140329140387140638
T:
k298
181191181201181211
T:
k277mon
205322205329205354
T:
kumfp127g
259983259998260033
T:
kumfp128g
267349267397267437
T:
curve25519
320568322004324185
T:
ecfp256i
323689324046324520
T:
ed448goldilocks
364894366135367134
T:
surf127eps
374201377748380991
T:
sclaus1024
378213378751378915
T:
kummer
402089402113402192
T:
nistp256
678503681184682325
T:
surf2113
183158518431101856521
T:
sclaus2048
187697418779821882221
T:
ed521gs
212805921291992129915
T:
nist521gs
224372622488672253025
T:
claus
Cycles to compute a shared secret
25%50%75%system
666806806168412
T:
gls254
909629098290988
T:
gls254prot
127540127628127697
T:
k277taa
139947140014140075
T:
k298
181089181089181089
T:
k277mon
191432191595191693
T:
jacfp128bk
209468209573209596
T:
kumfp127g
211129211266211266
T:
kumjacfp127g
233209233274233408
T:
prjfp128bk
232630234986235689
T:
curve2251
237751237847237982
T:
hecfp128bk
246405246639246761
T:
hecfp128fkt
267282267295267341
T:
curve25519
268045268054268072
T:
kumfp128g
279990280696282472
T:
gls1271
297098297212297391
T:
ecfp256e
310104310164310318
T:
ecfp256q
315618315669315816
T:
jacfp127i
319505319630319768
T:
ecfp256i
357812358762362462
T:
surf127eps
364439364702365013
T:
ecfp256h
377733378039378338
T:
kummer
379586379994382919
T:
sclaus1024
394827395038395422
T:
prjfp127i
396073396251396442
T:
ecfp256s
403725403769404072
T:
hecfp127i
538116538317538567
T:
hecfp128i
675041679625680274
T:
surf2113
108690910869321087800
T:
ed448goldilocks
137385213739291374537
T:
nistp256
183607618520181857628
T:
sclaus2048
187655218768231877398
T:
ed521gs
212376221279072128772
T:
nist521gs
224504522534252254278
T:
claus
aarch64; Skylark (503f0002); 2018 Ampere eMAG 8180; 32 x 3300MHz; unstable; gcc185, supercop-20240107
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
250425250800251550
T:
curve25519
319500319500327900
T:
kummer
359025360525361650
T:
surf127eps
388875388950389025
T:
nistp256
417300422250425850
T:
sclaus1024
152115015305251535475
T:
ed521gs
183352518336001836600
T:
nist521gs
202560020413502060250
T:
sclaus2048
249772525079252524875
T:
claus
Cycles to compute a shared secret
25%50%75%system
250350250350251475
T:
curve25519
319425319425319875
T:
kummer
349950358650359475
T:
surf127eps
414525419775421050
T:
sclaus1024
939825939825945525
T:
nistp256
151635015273751532700
T:
ed521gs
183375018345001834650
T:
nist521gs
204570020596502067300
T:
sclaus2048
249787525021502531925
T:
claus
aarch64; Cortex-A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3aplus, supercop-20240107
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
421721426772427086
T:
kummer
469756475105475327
T:
curve25519
473140478000478445
T:
nistp256
607888612345613736
T:
surf127eps
99286010007711009262
T:
sclaus1024
307806430885693093707
T:
ed521gs
358530835964893601443
T:
nist521gs
488071549188104958426
T:
sclaus2048
540384954070345411729
T:
claus
Cycles to compute a shared secret
25%50%75%system
421335426512426637
T:
kummer
476041481473481663
T:
curve25519
607589611682612386
T:
surf127eps
100636410121621019922
T:
sclaus1024
160004816011671611076
T:
nistp256
307618330876323091962
T:
ed521gs
358166935942693596229
T:
nist521gs
490168449149954965180
T:
sclaus2048
536881453720335380676
T:
claus
aarch64; Cortex-A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3bplus, supercop-20231107
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
464625465500469375
T:
nistp256
475750476500479125
T:
kummer
493375496000500875
T:
curve25519
580625583750592375
T:
surf127eps
102987510432501053250
T:
sclaus1024
322087532256253234500
T:
ed521gs
385637538636253868625
T:
nist521gs
508025051221255152250
T:
sclaus2048
550675055116255521000
T:
claus
Cycles to compute a shared secret
25%50%75%system
476375477125479625
T:
kummer
499500501875502625
T:
curve25519
581000583250588500
T:
surf127eps
103825010483751061250
T:
sclaus1024
155625015651251567875
T:
nistp256
322112532245003231625
T:
ed521gs
385500038620003867875
T:
nist521gs
502175050811255086625
T:
sclaus2048
548212554876255495250
T:
claus
amd64; Coffee Lake (906ea); 2018 Intel Xeon E-2124; 4 x 3300MHz; r24000, supercop-20240107
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
213292230723791
T:
kumjacfp127g
224372327924483
T:
jacfp127i
253472627527291
T:
prjfp127i
266882752928824
T:
hecfp127i
302843130232432
T:
jacfp128bk
357083658937459
T:
prjfp128bk
367713695237610
T:
gls254
363903708838324
T:
hecfp128i
375963839039397
T:
hecfp128fkt
382723872739262
T:
curve2251
378213880539712
T:
hecfp128bk
388363887438919
T:
gls254prot
426854356144947
T:
ecfp256e
452634585647911
T:
ecfp256h
458564588045914
T:
k277taa
485494937551014
T:
ecfp256q
488144945750185
T:
ecfp256s
522455234852503
T:
k298
530485355353630
T:
kummer
695157033671247
T:
gls1271
713067134071381
T:
k277mon
790977920979328
T:
kumfp127g
110376110439110502
T:
kumfp128g
125187125355125688
T:
curve25519
153372153559153834
T:
ed448goldilocks
176526178343179955
T:
sclaus1024
183940184483185112
T:
surf127eps
190061191047192285
T:
ecfp256i
245568245902246421
T:
nistp256
504969506701507782
T:
surf2113
808227808873810014
T:
ed521gs
886820892549899093
T:
sclaus2048
935405935687936144
T:
nist521gs
969477970536973562
T:
claus
Cycles to compute a shared secret
25%50%75%system
357613580335858
T:
gls254
386003864038682
T:
gls254prot
456094564245669
T:
k277taa
520705215752266
T:
k298
528835295753390
T:
kummer
712127124671290
T:
k277mon
813468144881558
T:
kumfp127g
828518292983004
T:
kumjacfp127g
873248739287472
T:
jacfp128bk
108225108348108491
T:
prjfp128bk
112260112403112601
T:
hecfp128bk
115568115615115684
T:
kumfp128g
116346116510116750
T:
hecfp128fkt
123798123911124029
T:
jacfp127i
134897135425135597
T:
curve25519
145421146169149742
T:
curve2251
165451165609165856
T:
prjfp127i
167050167180167321
T:
hecfp127i
170673174050176246
T:
gls1271
175614175770175958
T:
ecfp256e
175341179985180507
T:
sclaus1024
180559180907181315
T:
surf127eps
185298185449185642
T:
ecfp256q
185432185599185825
T:
ecfp256i
217677217875218118
T:
ecfp256h
240038240187240398
T:
ecfp256s
247900248083248308
T:
hecfp128i
455167455471455971
T:
ed448goldilocks
503377505046506138
T:
surf2113
599209599487599781
T:
nistp256
807576808079808961
T:
ed521gs
892871898036905848
T:
sclaus2048
935146935486935892
T:
nist521gs
963140964000966037
T:
claus
riscv64; U54 (sifive,u54-mc); 2017 SiFive Freedom U540; 4 x 1000MHz; riscvunleashed000, supercop-20240107
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
9985389998441018090
T:
curve25519
110469711048661117240
T:
kummer
174988817562921769615
T:
surf127eps
179312317979071817899
T:
nistp256
216821421897742212193
T:
sclaus1024
567348756863325694405
T:
ed521gs
675911467646066770071
T:
nist521gs
109180701098124111069064
T:
sclaus2048
131340961315597313183965
T:
claus
Cycles to compute a shared secret
25%50%75%system
9982529993151015110
T:
curve25519
110455511046721115984
T:
kummer
175174717530661766684
T:
surf127eps
215508421690762199040
T:
sclaus1024
349339534940123494615
T:
nistp256
567119056738775685242
T:
ed521gs
675191767632856765322
T:
nist521gs
109713171115096911183977
T:
sclaus2048
131402261315449613165455
T:
claus
amd64; Zen (800f11); 2017 AMD Ryzen 7 1700; 8 x 3000MHz; rumba7, supercop-20240107
[show/hide table]

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
288093005032172
T:
jacfp127i
296003079732235
T:
kumjacfp127g
330033454635788
T:
hecfp127i
336743463935738
T:
prjfp127i
369763876040331
T:
jacfp128bk
399704059042893
T:
curve2251
407104194044700
T:
ecfp256e
411134217643934
T:
prjfp128bk
410474261544774
T:
hecfp128bk
414094282844925
T:
hecfp128i
440904430744782
T:
gls254
448284506245133
T:
gls254prot
445624557446695
T:
hecfp128fkt
444834679551023
T:
ecfp256h
458624783653161
T:
ecfp256s
479034974953610
T:
ecfp256q
558755626056373
T:
k277taa
641116443764656
T:
k298
654346638267113
T:
gls1271
891198926889356
T:
k277mon
101073101085101098
T:
kummer
102831102909102987
T:
kumfp127g
134118134212134284
T:
kumfp128g
144290144307144355
T:
curve25519
186291187044187564
T:
surf127eps
186722187626188811
T:
ecfp256i
201045201330201535
T:
ed448goldilocks
202813204659206218
T:
sclaus1024
265031265052265129
T:
nistp256
475292477576478327
T:
surf2113
954397956684960596
T:
ed521gs
99681710024581008873
T:
sclaus2048
109203710938161094936
T:
nist521gs
119867812021471206071
T:
claus
Cycles to compute a shared secret
25%50%75%system
428804292443103
T:
gls254
447584500545492
T:
gls254prot
558675627156347
T:
k277taa
640606424964423
T:
k298
889868919989260
T:
k277mon
101040101062101075
T:
kummer
104078104138104195
T:
jacfp128bk
104225104306104489
T:
kumfp127g
106271106354106416
T:
kumjacfp127g
127167127254127360
T:
prjfp128bk
129887129956130057
T:
hecfp128bk
134717134786134872
T:
hecfp128fkt
139053139079139129
T:
kumfp128g
159431159871160453
T:
curve2251
162476162580162778
T:
jacfp127i
158800163139163157
T:
curve25519
165867168625168918
T:
gls1271
174425174497174620
T:
ecfp256e
183405183520183734
T:
ecfp256q
182931183590183832
T:
surf127eps
183513183686183773
T:
ecfp256i
200478201136211340
T:
sclaus1024
204708204951205185
T:
prjfp127i
207124207749209011
T:
hecfp127i
216179216363216607
T:
ecfp256h
235479235643236182
T:
ecfp256s
285982286157286804
T:
hecfp128i
472479472548476580
T:
surf2113
580767583698584006
T:
ed448goldilocks
687041687924688382
T:
nistp256
955592957047959321
T:
ed521gs
100902010110071015643
T:
sclaus2048
109168210924651095377
T:
nist521gs
120218412032561207112
T:
claus
amd64; Zen (800f11); 2017 AMD Ryzen 5 1600; 6 x 3200MHz; rumba5, supercop-20240107
[show/hide table]

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
293493074232571
T:
jacfp127i
302313143133382
T:
kumjacfp127g
327173434735957
T:
prjfp127i
349643615737319
T:
hecfp127i
401214064043862
T:
curve2251
398144076842037
T:
jacfp128bk
408454232345188
T:
ecfp256e
414314294645169
T:
hecfp128fkt
417634306844604
T:
prjfp128bk
415444307545195
T:
hecfp128bk
415554312745308
T:
hecfp128i
445174500445287
T:
gls254
448284507045102
T:
gls254prot
447244707351915
T:
ecfp256h
463584834053613
T:
ecfp256s
478355030655849
T:
ecfp256q
559785622456501
T:
k277taa
640836430464722
T:
k298
655216622567187
T:
gls1271
891868928589387
T:
k277mon
101104101119101137
T:
kummer
102983103574103680
T:
kumfp127g
134287135613137217
T:
kumfp128g
144292144318144354
T:
curve25519
186204186839187417
T:
surf127eps
186973187842189116
T:
ecfp256i
200904201106201351
T:
ed448goldilocks
202869205296215480
T:
sclaus1024
264625264693264994
T:
nistp256
475809477896478575
T:
surf2113
957166960848981481
T:
ed521gs
99621410037621010423
T:
sclaus2048
108883210892321090111
T:
nist521gs
120159512042361206717
T:
claus
Cycles to compute a shared secret
25%50%75%system
423724268542907
T:
gls254
447524498745014
T:
gls254prot
557855596056305
T:
k277taa
640406415464314
T:
k298
891198917589321
T:
k277mon
101079101097101121
T:
kummer
104325104405104483
T:
kumfp127g
104498104596104748
T:
jacfp128bk
106345106396106478
T:
kumjacfp127g
126792126920127190
T:
prjfp128bk
129891130035130303
T:
hecfp128bk
134538134635134783
T:
hecfp128fkt
139205140476142204
T:
kumfp128g
157047157339163159
T:
curve25519
157918158046158503
T:
curve2251
162056162498166717
T:
gls1271
163537163639163732
T:
jacfp127i
174142174266174440
T:
ecfp256e
183380183519183646
T:
ecfp256q
183739183811183980
T:
ecfp256i
184005184228184452
T:
surf127eps
202571203035215075
T:
sclaus1024
203979204381204665
T:
prjfp127i
207462207630207839
T:
hecfp127i
216705216847218061
T:
ecfp256h
235449235660235826
T:
ecfp256s
285847286114286483
T:
hecfp128i
474568477173477787
T:
surf2113
582359583243583931
T:
ed448goldilocks
687345687620688264
T:
nistp256
954281961101975897
T:
ed521gs
100374510053651008429
T:
sclaus2048
108923410896511090308
T:
nist521gs
119769011988391200880
T:
claus
amd64; Zen (800f11); 2017 AMD Ryzen 3 1200; 4 x 3100MHz; rumba3, supercop-20221122
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
399064039241648
T:
curve2251
430004317343315
T:
gls254
447374492044939
T:
gls254prot
558915622856511
T:
k277taa
640776428664529
T:
k298
661346680067503
T:
gls1271
892038927689393
T:
k277mon
101348102336102370
T:
kummer
144317144332144396
T:
curve25519
186208186823187356
T:
surf127eps
200830201112201359
T:
ed448goldilocks
201457203277204818
T:
sclaus1024
265071265110265175
T:
nistp256
474898476975478480
T:
surf2113
954808956760958406
T:
ed521gs
99471310035201010948
T:
sclaus2048
109203910937761095296
T:
nist521gs
120183012051331208382
T:
claus
Cycles to compute a shared secret
25%50%75%system
422804243842475
T:
gls254
446494482644853
T:
gls254prot
557555616656410
T:
k277taa
639146406764346
T:
k298
891318921289256
T:
k277mon
101260101287101316
T:
kummer
157033158303163391
T:
curve25519
159716160689161507
T:
curve2251
165164165960166506
T:
gls1271
181807183608183962
T:
surf127eps
201024201382204739
T:
sclaus1024
475296477122477679
T:
surf2113
582336584503586958
T:
ed448goldilocks
685797687148687995
T:
nistp256
953919955956957987
T:
ed521gs
9962849976781004679
T:
sclaus2048
109090110925561093674
T:
nist521gs
120406712073391212719
T:
claus
amd64; Kaby Lake (906e9); 2017 Intel Xeon E3-1220 v6; 4 x 3000MHz; kizomba, supercop-20240107
[show/hide table]

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
208492196123379
T:
jacfp127i
224722352525485
T:
kumjacfp127g
250742661330252
T:
prjfp127i
270532855430790
T:
hecfp127i
319483318036240
T:
jacfp128bk
349073548439061
T:
prjfp128bk
367623725038373
T:
gls254
387323878538899
T:
gls254prot
374443892943159
T:
hecfp128i
386033905342563
T:
curve2251
386233959442142
T:
hecfp128bk
381274011742844
T:
hecfp128fkt
437104485048109
T:
ecfp256e
457744583549022
T:
k277taa
473594824451871
T:
ecfp256h
502245036254294
T:
k298
486625070057442
T:
ecfp256s
504825134555206
T:
ecfp256q
52980?56416?69333?
T:
kummer
695067061575089
T:
gls1271
709657104477238
T:
k277mon
794097957585847
T:
kumfp127g
111157111244117956
T:
kumfp128g
125311125668135530
T:
curve25519
153349153922163411
T:
ed448goldilocks
177020182008191760
T:
sclaus1024
183701189746201406
T:
surf127eps
192855194959204328
T:
ecfp256i
238319255325265948
T:
nistp256
522084536579551518
T:
surf2113
835189852579879048
T:
ed521gs
912988929107971523
T:
sclaus2048
99720810109541048349
T:
nist521gs
106911710929191136178
T:
claus
Cycles to compute a shared secret
25%50%75%system
356803573135794
T:
gls254
384723851138570
T:
gls254prot
454924557848926
T:
k277taa
498734998653752
T:
k298
538985400660212
T:
kummer
708837098477276
T:
k277mon
810348119084520
T:
kumfp127g
828898302283178
T:
kumjacfp127g
884368856791524
T:
jacfp128bk
108546108867115712
T:
prjfp128bk
112350112633119518
T:
hecfp128bk
115435115550124994
T:
kumfp128g
115903116139123052
T:
hecfp128fkt
124357124537134125
T:
jacfp127i
135173135639142383
T:
curve25519
144373144794157668
T:
curve2251
165500169666182260
T:
prjfp127i
167421173941184444
T:
hecfp127i
175595176385186951
T:
ecfp256e
172669176510192281
T:
gls1271
176623182809194000
T:
surf127eps
178224184437194714
T:
sclaus1024
187282187557194514
T:
ecfp256i
188790195357208169
T:
ecfp256q
219929226336236653
T:
ecfp256h
242944249851263046
T:
ecfp256s
248611255441271869
T:
hecfp128i
467857482902492857
T:
ed448goldilocks
518671533036548057
T:
surf2113
617939634240651205
T:
nistp256
839484855028882879
T:
ed521gs
910188921373954425
T:
sclaus2048
99441310108541043929
T:
nist521gs
107223810925221119578
T:
claus
amd64; Kaby Lake (806e9); 2017 Intel Core i3-7100; 2 x 2400MHz; whosthere, supercop-20221122
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
372803748937771
T:
gls254
392633931439369
T:
gls254prot
416444200442820
T:
curve2251
458134631946401
T:
k277taa
532185360754066
T:
k298
534845387155445
T:
kummer
711287127372399
T:
k277mon
112849114255115628
T:
gls1271
126059127356128223
T:
curve25519
154497155659156258
T:
ed448goldilocks
192916194391196007
T:
surf127eps
197126199570201477
T:
sclaus1024
300445301390302205
T:
nistp256
529936531945534974
T:
surf2113
893927897039900085
T:
ed521gs
100155410131181033949
T:
sclaus2048
104520210486431054813
T:
claus
104926010537761056028
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
360963615236305
T:
gls254
388643895439027
T:
gls254prot
460634610746164
T:
k277taa
527745292853262
T:
k298
534515377355644
T:
kummer
710657227072328
T:
k277mon
135972136643137230
T:
curve25519
144115144493145510
T:
curve2251
186994188482190065
T:
surf127eps
198564201605204874
T:
sclaus1024
273946277886282463
T:
gls1271
461335462594462918
T:
ed448goldilocks
527628529760532633
T:
surf2113
683477687360690652
T:
nistp256
897139900975904698
T:
ed521gs
100738610120281031660
T:
sclaus2048
103689410438611049575
T:
claus
105036910545421056565
T:
nist521gs
armeabi; Cortex-A7 (410fc075); 2016 Broadcom BCM2836; 4 x 900MHz; berry2, supercop-20240107
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
596362602501606749
T:
kummer
926501926977938010
T:
curve25519
134173014099671502255
T:
nistp256
398433841905124434829
T:
sclaus1024
179996541930248819759932
T:
sclaus2048
203242672271013722993179
T:
claus
Cycles to compute a shared secret
25%50%75%system
594729599984603893
T:
kummer
926247926557935392
T:
curve25519
392250740338134169561
T:
sclaus1024
476226948869474982389
T:
nistp256
163071721639787018483718
T:
sclaus2048
230273962343951325384348
T:
claus
amd64; Goldmont (506c9); 2016 Intel Celeron J3455; 4 x 1500MHz; wooden, supercop-20240107
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
450324629647866
T:
jacfp127i
467764823449548
T:
kumjacfp127g
555645712660176
T:
prjfp127i
556085716859688
T:
hecfp127i
615486318664174
T:
ecfp256e
623146365466290
T:
curve2251
626466410865834
T:
jacfp128bk
656946791869708
T:
ecfp256h
682847000672562
T:
ecfp256s
716207254473624
T:
gls254
736787591877876
T:
ecfp256q
751467723478606
T:
prjfp128bk
773407917681188
T:
hecfp128i
777727938881512
T:
hecfp128fkt
790648070683716
T:
hecfp128bk
907829078690792
T:
gls254prot
125110125132125148
T:
k277taa
124132125306126722
T:
gls1271
136598136634139004
T:
k298
181312181322181330
T:
k277mon
201726201746201792
T:
kumfp127g
274600274618274678
T:
kumfp128g
278634278638278648
T:
curve25519
325572327540329828
T:
ecfp256i
352692353242353946
T:
ed448goldilocks
383238384800385676
T:
surf127eps
389928395828404846
T:
sclaus1024
403846403880403906
T:
kummer
424626424772425094
T:
nistp256
729178732206735038
T:
surf2113
189541219144261931712
T:
sclaus2048
200615220089462032492
T:
ed521gs
231980223275642348090
T:
nist521gs
232370423377322356744
T:
claus
Cycles to compute a shared secret
25%50%75%system
664246813870398
T:
gls254
905809058290588
T:
gls254prot
124956124980124994
T:
k277taa
136374136424136460
T:
k298
181194181204181212
T:
k277mon
199458199506199562
T:
jacfp128bk
206604206622206640
T:
kumfp127g
209870209892209908
T:
kumjacfp127g
241192242912242980
T:
curve2251
249784250032250090
T:
prjfp128bk
256042256082256180
T:
hecfp128bk
265238265270265330
T:
hecfp128fkt
278808278812278814
T:
curve25519
283566283570283590
T:
kumfp128g
304512304566304674
T:
ecfp256e
306870314712317944
T:
gls1271
315248315290315420
T:
jacfp127i
318756318834318934
T:
ecfp256q
321346321426321508
T:
ecfp256i
374908375008375236
T:
ecfp256h
378618379878380920
T:
surf127eps
389008395314406212
T:
sclaus1024
403694403734403810
T:
kummer
409326409430409620
T:
ecfp256s
413460413490413590
T:
prjfp127i
426170426206426412
T:
hecfp127i
574254574308575252
T:
hecfp128i
725276730000731098
T:
surf2113
115415611555101166068
T:
ed448goldilocks
146306614631161486230
T:
nistp256
187471018991861903582
T:
sclaus2048
200538220070922028776
T:
ed521gs
231947023295602347518
T:
nist521gs
232745023364102354724
T:
claus
amd64; Broadwell+AES (406f1); 2016 Intel Xeon E5-2609 v4; 8 x 1700MHz; bolero, supercop-20240107
[show/hide table]

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
253882618828928
T:
jacfp127i
270362748429468
T:
prjfp127i
269362824431220
T:
kumjacfp127g
288682945230260
T:
hecfp127i
334083420437264
T:
jacfp128bk
37692?38612?52321?
T:
gls254
374763888441680
T:
prjfp128bk
391363919642432
T:
gls254prot
39160?39856?53380?
T:
hecfp128i
399724120047660
T:
curve2251
41016?43872?56124?
T:
hecfp128fkt
438644543248816
T:
ecfp256e
42732?46860?58169?
T:
hecfp128bk
471364923654876
T:
ecfp256h
492284978455764
T:
k277taa
485725158057120
T:
ecfp256s
524325313257200
T:
ecfp256q
558525604062920
T:
k298
638006448069720
T:
kummer
767887822081548
T:
gls1271
77220?82936?109305?
T:
k277mon
9147292076101440
T:
kumfp127g
129296129568140064
T:
kumfp128g
143128146416157144
T:
curve25519
156816160764173620
T:
ed448goldilocks
197652203960219008
T:
surf127eps
193640211788238396
T:
sclaus1024
209656214652225852
T:
ecfp256i
257116266600280480
T:
nistp256
541144558556584272
T:
surf2113
936212956900992532
T:
ed521gs
97897610172281081560
T:
sclaus2048
104812810738921109484
T:
nist521gs
115082811767201226988
T:
claus
Cycles to compute a shared secret
25%50%75%system
35940?36092?50893?
T:
gls254
390323911242604
T:
gls254prot
491164978855968
T:
k277taa
556725580062656
T:
k298
636606438869980
T:
kummer
77072?83796?109123?
T:
k277mon
9304494548101404
T:
kumfp127g
9645696780106152
T:
jacfp128bk
99496103984112440
T:
kumjacfp127g
117760?125120?166566?
T:
prjfp128bk
120764126848142696
T:
hecfp128bk
125260128244136780
T:
hecfp128fkt
134032136816146376
T:
kumfp128g
144016151376167444
T:
curve25519
152480156344171184
T:
curve2251
153972161200171960
T:
jacfp127i
185264188460204596
T:
prjfp127i
185804189932198268
T:
ecfp256e
186948193852209624
T:
hecfp127i
190444?195208?259752?
T:
gls1271
193680200920210900
T:
ecfp256q
195956202096217312
T:
surf127eps
193540209536227424
T:
sclaus1024
204696213232229804
T:
ecfp256i
229724236116250732
T:
ecfp256h
248764255120269772
T:
ecfp256s
268028275048322820
T:
hecfp128i
478268493836537092
T:
ed448goldilocks
541372555148570976
T:
surf2113
656436670032693048
T:
nistp256
931048947332974004
T:
ed521gs
99648010326961085404
T:
sclaus2048
105238410684321093388
T:
nist521gs
115698411746761211188
T:
claus
amd64; Silvermont (406c4); 2016 Intel Atom x5-Z8350; 4 x 1440MHz; cherry, supercop-20240107
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
650696606668685
T:
jacfp127i
682807039873605
T:
kumjacfp127g
719827356576978
T:
prjfp127i
744827643178964
T:
hecfp127i
9643599287104647
T:
jacfp128bk
98968102539107010
T:
ecfp256e
108464111634116094
T:
curve2251
110077112176115590
T:
ecfp256h
109368112430116552
T:
hecfp128i
113011114604117047
T:
ecfp256s
113906115746122895
T:
hecfp128fkt
113729115997122914
T:
hecfp128bk
114212118916123918
T:
prjfp128bk
121255121972123257
T:
ecfp256q
140206142125145066
T:
gls254
185490187928189829
T:
gls1271
205807206121207163
T:
gls254prot
280575280683280832
T:
kumfp127g
287827288035288683
T:
k277taa
306714309971312368
T:
k298
422203422318422678
T:
k277mon
447494447576447702
T:
kumfp128g
448785448931449358
T:
curve25519
515137520123529641
T:
ecfp256i
569527569939573883
T:
kummer
568694570458574713
T:
surf127eps
613909614536617123
T:
nistp256
763363765315773680
T:
ed448goldilocks
779825788529800051
T:
sclaus1024
114050611493921160563
T:
surf2113
365871436598363662402
T:
ed521gs
381215938411593870341
T:
sclaus2048
432369543286474338043
T:
nist521gs
465676046696194687828
T:
claus
Cycles to compute a shared secret
25%50%75%system
135892140997141624
T:
gls254
205480205593206070
T:
gls254prot
283479283604283725
T:
kumfp127g
286595286660286742
T:
kumjacfp127g
287534287821288124
T:
k277taa
305662307467308797
T:
k298
318066318907320934
T:
jacfp128bk
371800373185374755
T:
hecfp128bk
374845376249379488
T:
prjfp128bk
385624387739390078
T:
hecfp128fkt
422018422103422208
T:
k277mon
426184426464428445
T:
curve2251
438457444646447880
T:
gls1271
444692446330448775
T:
jacfp127i
448634448781448915
T:
curve25519
457713457884463425
T:
kumfp128g
480174481158484368
T:
ecfp256e
502756503201504969
T:
ecfp256q
511948513116516384
T:
ecfp256i
522704524547529198
T:
prjfp127i
533186533684535584
T:
hecfp127i
554473565722568042
T:
surf127eps
569206569536572532
T:
kummer
600801601833604931
T:
ecfp256h
628544629644631762
T:
ecfp256s
780359792150804042
T:
sclaus1024
808619809499814311
T:
hecfp128i
113470011438571154337
T:
surf2113
209920021014532109702
T:
nistp256
263938326434252650268
T:
ed448goldilocks
365851036595833660458
T:
ed521gs
380732238583493907240
T:
sclaus2048
431550443230004327813
T:
nist521gs
466923746717764682420
T:
claus
amd64; Skylake (506e3); 2015 Intel Xeon E3-1220 v5; 4 x 3000MHz; samba, supercop-20240107
[show/hide table]

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
228462394424974
T:
jacfp127i
233522436725732
T:
kumjacfp127g
243542487925769
T:
prjfp127i
264632754828531
T:
hecfp127i
307103108932050
T:
jacfp128bk
345863556237038
T:
prjfp128bk
356323600737273
T:
hecfp128fkt
367723701537350
T:
gls254
374023833639189
T:
hecfp128i
382433843839433
T:
curve2251
387263876738815
T:
gls254prot
388023966340497
T:
hecfp128bk
436554452045824
T:
ecfp256e
457794581745850
T:
k277taa
460334675448378
T:
ecfp256h
471694787049954
T:
ecfp256s
489654975551883
T:
ecfp256q
505025057950666
T:
k298
529795305754086
T:
kummer
707837094471031
T:
k277mon
703947112171961
T:
gls1271
791317918479257
T:
kumfp127g
111128111174111231
T:
kumfp128g
125197125316125664
T:
curve25519
153398153653153927
T:
ed448goldilocks
175631177202178989
T:
sclaus1024
182924183585184108
T:
surf127eps
192471193429194579
T:
ecfp256i
240377240511240723
T:
nistp256
514895517540519283
T:
surf2113
824825825102825752
T:
ed521gs
883640889018895479
T:
sclaus2048
952276952891954503
T:
nist521gs
104606210493011137203
T:
claus
Cycles to compute a shared secret
25%50%75%system
357223575235786
T:
gls254
384863852938580
T:
gls254prot
455394557545602
T:
k277taa
501295018550244
T:
k298
529725386154046
T:
kummer
708367091270974
T:
k277mon
807038078180856
T:
kumfp127g
825858266582755
T:
kumjacfp127g
878208791088004
T:
jacfp128bk
108466108604108767
T:
prjfp128bk
112093112199112303
T:
hecfp128bk
115400115459115503
T:
kumfp128g
115930116035116184
T:
hecfp128fkt
124079124159124243
T:
jacfp127i
134719135150135466
T:
curve25519
142243145881145989
T:
curve2251
165222165415165593
T:
prjfp127i
167326167451167787
T:
hecfp127i
168546170058175455
T:
gls1271
175474175602175776
T:
ecfp256e
178975179355179882
T:
surf127eps
172673179600180039
T:
sclaus1024
185572185738185946
T:
ecfp256q
187044187212187450
T:
ecfp256i
217767217901218096
T:
ecfp256h
239908240086240381
T:
ecfp256s
248653248838249054
T:
hecfp128i
465739466301467143
T:
ed448goldilocks
513507516157518126
T:
surf2113
614915615162615513
T:
nistp256
825525825812826610
T:
ed521gs
869169882537896516
T:
sclaus2048
952105952832954426
T:
nist521gs
105069010529141137546
T:
claus
amd64; Airmont (406c3); 2015 Intel Pentium N3700; 4 x 1600MHz; nucnuc, supercop-20240107
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
801278334686931
T:
jacfp127i
838248631191049
T:
kumjacfp127g
93907100323108791
T:
prjfp127i
94173101311110075
T:
hecfp127i
102175108441122558
T:
ecfp256e
105960108907120578
T:
curve2251
109042115650131591
T:
ecfp256h
110713117355135884
T:
ecfp256s
118905125921138947
T:
ecfp256q
138614141153143479
T:
gls254
131705?143920?164660?
T:
prjfp128bk
135258144532168278
T:
hecfp128fkt
135501?146745?170505?
T:
hecfp128bk
135128148213167662
T:
hecfp128i
134431148390163729
T:
jacfp128bk
184357185796187602
T:
gls1271
205942206194206400
T:
gls254prot
280348280377280518
T:
kumfp127g
287620287740288045
T:
k277taa
305798306171308791
T:
k298
422111422159422257
T:
k277mon
447341447378447494
T:
kumfp128g
448545448594448687
T:
curve25519
512161514560519078
T:
ecfp256i
568722568748568919
T:
kummer
567098569400571282
T:
surf127eps
614939617909621836
T:
nistp256
761361761969763516
T:
ed448goldilocks
775617783197788571
T:
sclaus1024
115464211724481191642
T:
surf2113
365864136600493664329
T:
ed521gs
380192538200233845251
T:
sclaus2048
431304343142204316130
T:
nist521gs
464931846603774670495
T:
claus
Cycles to compute a shared secret
25%50%75%system
130135136557141589
T:
gls254
205514205849205914
T:
gls254prot
283295283321283405
T:
kumfp127g
286606286669286774
T:
kumjacfp127g
287325287422287722
T:
k277taa
305150305400305739
T:
k298
317530318079318751
T:
jacfp128bk
370480371078373507
T:
hecfp128bk
375200376115377586
T:
prjfp128bk
384864385547386958
T:
hecfp128fkt
421914421914421972
T:
k277mon
423056423278426209
T:
curve2251
426258433365441413
T:
gls1271
442333442783444045
T:
jacfp127i
448447448492452017
T:
curve25519
457524457585457675
T:
kumfp128g
480128480514481752
T:
ecfp256e
502123502811504292
T:
ecfp256q
510453511242513848
T:
ecfp256i
520992521294523369
T:
prjfp127i
533278533727535246
T:
hecfp127i
564625566479568397
T:
surf127eps
568609568609568669
T:
kummer
599816600078600786
T:
ecfp256h
625204625618627020
T:
ecfp256s
774591775895796588
T:
sclaus1024
807876808736813699
T:
hecfp128i
114974411610341171624
T:
surf2113
208451520866412088823
T:
nistp256
263470926352922637301
T:
ed448goldilocks
365743836584193659580
T:
ed521gs
378361038145753879717
T:
sclaus2048
431183443129314314010
T:
nist521gs
466232146643094666546
T:
claus
amd64; Broadwell+AES (306d4); 2015 Intel Core i3-5005U; 2 x 1900MHz; shoe, supercop-20240107
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
242982490625507
T:
jacfp127i
255482586026239
T:
kumjacfp127g
276132822128792
T:
prjfp127i
285122917629653
T:
hecfp127i
318763280633629
T:
jacfp128bk
369063712037340
T:
gls254
370573742237966
T:
prjfp128bk
378913831438871
T:
hecfp128fkt
379083837638893
T:
hecfp128bk
387503935939841
T:
hecfp128i
395033959239676
T:
gls254prot
411524198843295
T:
curve2251
440004489646259
T:
ecfp256e
462024741049141
T:
ecfp256h
476034886650367
T:
ecfp256s
492454933649445
T:
k277taa
500655105453146
T:
ecfp256q
548645509855949
T:
k298
645736465564893
T:
kummer
755847658877270
T:
gls1271
767577681376869
T:
k277mon
818308199082148
T:
kumfp127g
128439128515128573
T:
kumfp128g
142834142922143010
T:
curve25519
157503157850158108
T:
ed448goldilocks
187194188973190478
T:
sclaus1024
196919197492198124
T:
surf127eps
199743200660202020
T:
ecfp256i
249815250613250795
T:
nistp256
519051521318523242
T:
surf2113
903020903450904025
T:
ed521gs
937727943047949800
T:
sclaus2048
9914829927931011482
T:
claus
102759510295221030774
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
360473614336230
T:
gls254
392723960639778
T:
gls254prot
491784924049317
T:
k277taa
546965477254860
T:
k298
644436451264745
T:
kummer
767097676076796
T:
k277mon
847578494385214
T:
kumfp127g
876348776687978
T:
kumjacfp127g
964789659196673
T:
jacfp128bk
117214117346117497
T:
prjfp128bk
120494120615120770
T:
hecfp128bk
125062125187125316
T:
hecfp128fkt
133912134002134078
T:
kumfp128g
142754142853142960
T:
curve25519
153336153948155478
T:
curve2251
154802155012155279
T:
jacfp127i
184896185056185261
T:
prjfp127i
185577185714185846
T:
ecfp256e
186571186747186873
T:
hecfp127i
183358187316190421
T:
gls1271
188275191917193155
T:
sclaus1024
192992193154193363
T:
ecfp256q
194138194823195180
T:
surf127eps
196050196155196313
T:
ecfp256i
228685228798228985
T:
ecfp256h
248573248692248832
T:
ecfp256s
267342267652274007
T:
hecfp128i
466997467298467601
T:
ed448goldilocks
520629521280522170
T:
surf2113
627963628221628476
T:
nistp256
903183903471903793
T:
ed521gs
946514949276953690
T:
sclaus2048
988138988654989239
T:
claus
102725610291261030305
T:
nist521gs
armeabi; Cortex-A17 (410fc0d1); 2014 Rockchip RK3288; 4 x 1800MHz; tinker, supercop-20240107
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
247113247979248035
T:
kummer
336991337147337178
T:
curve25519
790246791234791716
T:
nistp256
876075884813892115
T:
sclaus1024
114632411523361155579
T:
surf127eps
437440744168394449138
T:
sclaus2048
529469553110745331027
T:
claus
Cycles to compute a shared secret
25%50%75%system
247005247861247907
T:
kummer
336591336747336749
T:
curve25519
878254882636912150
T:
sclaus1024
114184811439561147658
T:
surf127eps
283055428319572842790
T:
nistp256
443125644532604479227
T:
sclaus2048
532583453412445354003
T:
claus
amd64; Haswell+AES (306c3); 2013 Intel Xeon E3-1275 V3; 4 x 3500MHz; titan0, supercop-20240107
[show/hide table]

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
312663238534569
T:
kumjacfp127g
333413526637436
T:
jacfp127i
357473649937284
T:
prjfp127i
363923694737519
T:
hecfp127i
379553911742262
T:
jacfp128bk
429974447148457
T:
curve2251
448514535645920
T:
gls254
468904797851245
T:
hecfp128fkt
473194805948753
T:
prjfp128bk
477674843149065
T:
hecfp128bk
491044920149335
T:
gls254prot
491825050153460
T:
ecfp256e
504715234054320
T:
hecfp128i
503645323158151
T:
ecfp256h
527155566460388
T:
ecfp256s
554665859963065
T:
ecfp256q
623016236262439
T:
k277taa
641606421964304
T:
kummer
700697016270589
T:
k298
905899156892488
T:
gls1271
951609519695247
T:
k277mon
111583111762111929
T:
kumfp127g
144368144417144482
T:
curve25519
156684157132157300
T:
kumfp128g
174599174853175097
T:
ed448goldilocks
213966214766215371
T:
surf127eps
218193220037221914
T:
sclaus1024
225269226403227744
T:
ecfp256i
282444282716282947
T:
nistp256
536370538776541535
T:
surf2113
101197310128121013543
T:
ed521gs
109880311090471117812
T:
sclaus2048
121584212169461218075
T:
nist521gs
130158413042981308209
T:
claus
Cycles to compute a shared secret
25%50%75%system
401874072241086
T:
gls254
489614901949131
T:
gls254prot
622206226762323
T:
k277taa
640746412964179
T:
kummer
698456989769964
T:
k298
950029503295058
T:
k277mon
113262113426113594
T:
kumfp127g
113595113740114561
T:
jacfp128bk
120160120485120683
T:
kumjacfp127g
141371141932147860
T:
prjfp128bk
145981146131146282
T:
hecfp128bk
151065151237151401
T:
hecfp128fkt
155973156028156074
T:
curve25519
159792160048162883
T:
curve2251
162147162201162274
T:
kumfp128g
186614186717186864
T:
jacfp127i
205415205515205657
T:
ecfp256e
208513208950209552
T:
surf127eps
213732213871214013
T:
ecfp256q
217168220897223243
T:
gls1271
221944222203223527
T:
sclaus1024
222244222351222449
T:
ecfp256i
225032225588229894
T:
prjfp127i
228886229064229288
T:
hecfp127i
248778248919249070
T:
ecfp256h
272654272806272999
T:
ecfp256s
325880326250326696
T:
hecfp128i
530047534889538779
T:
surf2113
540144540298540481
T:
ed448goldilocks
745809746260746690
T:
nistp256
101991610202621020779
T:
ed521gs
109160810959481117659
T:
sclaus2048
121508812162381216930
T:
nist521gs
130476513059131310862
T:
claus
amd64; Haswell+AES (306c3); 2013 Intel Xeon E3-1220 v3; 4 x 3100MHz; hiphop, supercop-20231107
[show/hide table]

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
296593035932246
T:
kumjacfp127g
298963089832269
T:
jacfp127i
319943265234580
T:
prjfp127i
341433484235818
T:
hecfp127i
398604056741340
T:
jacfp128bk
413594173544699
T:
curve2251
449294554046035
T:
gls254
439824573846844
T:
prjfp128bk
462764732948872
T:
hecfp128bk
471994815549062
T:
hecfp128fkt
476414842849626
T:
ecfp256e
489684902349132
T:
gls254prot
485204920552032
T:
ecfp256h
499095119952913
T:
hecfp128i
506745153753998
T:
ecfp256s
541665502157297
T:
ecfp256q
623206241162481
T:
k277taa
641646424665114
T:
kummer
701847024470351
T:
k298
911729209293233
T:
gls1271
952279534795952
T:
k277mon
111448111547111704
T:
kumfp127g
144403144502146672
T:
curve25519
157638157747158105
T:
kumfp128g
174900175058175368
T:
ed448goldilocks
213225214000214768
T:
surf127eps
217738219741221529
T:
sclaus1024
225245226519227530
T:
ecfp256i
281871282103282260
T:
nistp256
534920537134538409
T:
surf2113
101186610125301014000
T:
ed521gs
110180611107661119984
T:
sclaus2048
119524111961411197867
T:
nist521gs
129739813002841303203
T:
claus
Cycles to compute a shared secret
25%50%75%system
404274133942928
T:
gls254
489704907249129
T:
gls254prot
621666225462301
T:
k277taa
640926418965002
T:
kummer
700237007970143
T:
k298
950329510995974
T:
k277mon
113091113226113361
T:
kumfp127g
113390113478113570
T:
jacfp128bk
119900120110120797
T:
kumjacfp127g
141091141400146993
T:
prjfp128bk
145626145791145977
T:
hecfp128bk
151256151394151613
T:
hecfp128fkt
156093157183158020
T:
curve25519
155817157719158304
T:
curve2251
163250163730163826
T:
kumfp128g
185342185547185761
T:
jacfp127i
205426205549205712
T:
ecfp256e
204091206585207793
T:
surf127eps
213790213889214081
T:
ecfp256q
219560221506223319
T:
sclaus1024
222317222476222595
T:
ecfp256i
216146222838223099
T:
gls1271
224935225457232731
T:
prjfp127i
229072229496230531
T:
hecfp127i
248794248915249086
T:
ecfp256h
272761272923273135
T:
ecfp256s
325652325869326187
T:
hecfp128i
533641534568538063
T:
surf2113
540253540408540668
T:
ed448goldilocks
745896746309747490
T:
nistp256
102022710207141021628
T:
ed521gs
111535611229751130929
T:
sclaus2048
119505911960441201480
T:
nist521gs
129459112969771302182
T:
claus
amd64; Haswell+AES (306c3); 2013 Intel Core i7-4770; 4 x 3400MHz; speed2supercop, supercop-20240107
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
277883176033088
T:
jacfp127i
291843287634192
T:
kumjacfp127g
32328?37140?40548?
T:
hecfp127i
361643785239956
T:
prjfp127i
377004085642240
T:
jacfp128bk
417684223644164
T:
curve2251
478044840049760
T:
ecfp256e
438965012052780
T:
prjfp128bk
497845016050520
T:
gls254
495445033251608
T:
ecfp256h
523165238852592
T:
gls254prot
521205281655664
T:
ecfp256s
471845317655584
T:
hecfp128fkt
450845330055564
T:
hecfp128i
467445336855840
T:
hecfp128bk
548685609659248
T:
ecfp256q
634046347663536
T:
kummer
668766691266968
T:
k277taa
770487716877336
T:
k298
883328936890368
T:
gls1271
986929907699376
T:
k277mon
111000111116111236
T:
kumfp127g
144420144504144564
T:
curve25519
157436157508157568
T:
kumfp128g
211588211936212184
T:
ed448goldilocks
225568227052230376
T:
ecfp256i
328596328740328840
T:
nistp256
332064335164338896
T:
sclaus1024
101408810150601034136
T:
ed521gs
115410411544841155220
T:
nist521gs
152703215284721532156
T:
claus
167629616872681700428
T:
sclaus2048
Cycles to compute a shared secret
25%50%75%system
490964914049144
T:
gls254
522605240452488
T:
gls254prot
633406340463464
T:
kummer
667966683666876
T:
k277taa
768527699277160
T:
k298
985769900899204
T:
k277mon
112900113032113624
T:
kumfp127g
113292113368113448
T:
jacfp128bk
119908120104120288
T:
kumjacfp127g
139752139880140072
T:
prjfp128bk
145288145424145620
T:
hecfp128bk
150904151056151216
T:
hecfp128fkt
155948156004156080
T:
curve25519
157436158788159076
T:
curve2251
162976163048163616
T:
kumfp128g
184896185176186400
T:
jacfp127i
204492204604204752
T:
ecfp256e
213240213380213528
T:
ecfp256q
211532214824215968
T:
gls1271
221344221480221612
T:
ecfp256i
224720224968225256
T:
prjfp127i
229452229676230128
T:
hecfp127i
249500249752250072
T:
ecfp256h
275860276016276160
T:
ecfp256s
326168326556335116
T:
hecfp128i
342892351820358192
T:
sclaus1024
616312616572616932
T:
ed448goldilocks
889196889452890112
T:
nistp256
959596960656961780
T:
claus
101355210141281040328
T:
ed521gs
115393611542721154744
T:
nist521gs
168069217164561730932
T:
sclaus2048
armeabi; Cortex-A8 (413fc082); 2012 TI Sitara XAM3359AZCZ100; 1 x 1000MHz; bblack, supercop-20240107
[show/hide table]

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
304864304904305152
T:
kummer
489604491604505812
T:
curve25519
118890811916961221320
T:
nistp256
409978041430284178776
T:
sclaus1024
827681282826848308264
T:
claus
189163481904596819165672
T:
sclaus2048
Cycles to compute a shared secret
25%50%75%system
304776304780304860
T:
kummer
505604505644507352
T:
curve25519
396345239639923966204
T:
nistp256
417394442303604246896
T:
sclaus1024
822664482290168239268
T:
claus
192240881930562019348332
T:
sclaus2048
amd64; Bulldozer (600f20); 2012 AMD FX-8350; 4 x 4000MHz; saber214, supercop-20240107
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
464444757448546
T:
jacfp127i
479564868449606
T:
kumjacfp127g
532955407055058
T:
prjfp127i
535855449255477
T:
hecfp127i
639936463366955
T:
curve2251
691416999471012
T:
jacfp128bk
734827607480981
T:
ecfp256e
796698055181605
T:
prjfp128bk
804508127282361
T:
hecfp128bk
787058142986834
T:
ecfp256h
811718202983213
T:
hecfp128i
811838212483803
T:
hecfp128fkt
800908271187469
T:
ecfp256s
845368683792373
T:
ecfp256q
889188998690975
T:
gls254
103967103984104146
T:
gls254prot
113737115170116101
T:
gls1271
139818139874139937
T:
k277taa
157388157434157520
T:
k298
157628157672157709
T:
kumfp127g
174662174687174711
T:
curve25519
203057203057203089
T:
k277mon
203171203224203686
T:
kummer
257086257100257132
T:
kumfp128g
347631349275352243
T:
ecfp256i
357937358849360707
T:
ed448goldilocks
373874374827375488
T:
surf127eps
425958432284438317
T:
sclaus1024
611890612004612256
T:
nistp256
664432667188668401
T:
surf2113
174411017443281745756
T:
ed521gs
204942820520392055965
T:
nist521gs
210212421222592144788
T:
sclaus2048
254350125582982738457
T:
claus
Cycles to compute a shared secret
25%50%75%system
814338388584543
T:
gls254
103865103915103938
T:
gls254prot
139787139813139864
T:
k277taa
157285157305157332
T:
k298
160261160261160262
T:
kumfp127g
161042161091161180
T:
kumjacfp127g
186620186622186626
T:
curve25519
197017197168197287
T:
jacfp128bk
197328200695200748
T:
kummer
203003203003203003
T:
k277mon
238828242768243654
T:
curve2251
245840246005246166
T:
prjfp128bk
252367252485252673
T:
hecfp128bk
262308262445262482
T:
hecfp128fkt
263812263947264176
T:
jacfp127i
267873267873267874
T:
kumfp128g
275577278132281891
T:
gls1271
321116321349321696
T:
ecfp256e
336676336954337283
T:
ecfp256q
342792343215343695
T:
ecfp256i
354807355205355598
T:
prjfp127i
358086358175358562
T:
hecfp127i
371514372854373399
T:
surf127eps
405692405897406267
T:
ecfp256h
424742424992426258
T:
ecfp256s
422907430121434866
T:
sclaus1024
562627562776562880
T:
hecfp128i
646375661362662343
T:
surf2113
112390811311811142409
T:
ed448goldilocks
131145913115481314990
T:
nistp256
174358117436131743863
T:
ed521gs
204815020517552054376
T:
nist521gs
213715821470012159595
T:
sclaus2048
254326725624762745987
T:
claus
amd64; Ivy Bridge+AES (306a9); 2012 Intel Xeon E3-1275 V2; 4 x 3500MHz; hydra8, supercop-20240107
[show/hide table]

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
306783165433729
T:
kumjacfp127g
318103299134578
T:
jacfp127i
377813879339937
T:
hecfp127i
394534101042677
T:
prjfp127i
439454481745953
T:
jacfp128bk
497465038753062
T:
hecfp128bk
512785207853872
T:
ecfp256e
524415323054176
T:
hecfp128i
528445420955395
T:
hecfp128fkt
541295494057447
T:
ecfp256h
542965579958164
T:
prjfp128bk
555905644959067
T:
ecfp256s
566655826262394
T:
curve2251
590185995063103
T:
ecfp256q
736877492176459
T:
gls254
889148894688998
T:
kummer
948809607497185
T:
gls1271
106319106387106498
T:
gls254prot
120056120087120138
T:
kumfp127g
145135145423145507
T:
curve25519
164798165035165181
T:
kumfp128g
175577176125176194
T:
k277taa
180723180856181561
T:
k298
208383208607208923
T:
ed448goldilocks
236094237112237659
T:
surf127eps
244950246417247823
T:
ecfp256i
256925256931256974
T:
k277mon
266796269169270983
T:
sclaus1024
320010320263320648
T:
nistp256
596085598489608169
T:
surf2113
111160611122761113850
T:
ed521gs
127125612719431273444
T:
nist521gs
136297113744371395977
T:
sclaus2048
159747016012141605352
T:
claus
Cycles to compute a shared secret
25%50%75%system
678747072471316
T:
gls254
886808872188754
T:
kummer
106295106325106361
T:
gls254prot
121814121865121905
T:
kumfp127g
124819124892125038
T:
jacfp128bk
126039126114126203
T:
kumjacfp127g
156809156886157297
T:
curve25519
157019157153157303
T:
prjfp128bk
162055162153162292
T:
hecfp128bk
167815167933168028
T:
hecfp128fkt
170444170778170903
T:
kumfp128g
174340176053176145
T:
k277taa
180506180556180684
T:
k298
191659191928192478
T:
jacfp127i
223353223675224105
T:
curve2251
224878225090225263
T:
ecfp256e
231458232076232621
T:
surf127eps
233499233847234836
T:
gls1271
235705235959236291
T:
ecfp256q
238490238853239096
T:
prjfp127i
240488240619240856
T:
ecfp256i
245052245391245830
T:
hecfp127i
256939256944256945
T:
k277mon
266822271014272961
T:
sclaus1024
276673276736276895
T:
ecfp256h
297239297430297709
T:
ecfp256s
365032365564365974
T:
hecfp128i
596605597169598554
T:
surf2113
630014630448632690
T:
ed448goldilocks
831898832650834088
T:
nistp256
112300511246491125546
T:
ed521gs
127097712714931272363
T:
nist521gs
137643113777951402509
T:
sclaus2048
159538615994691600503
T:
claus
amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3427U; 2 x 1800MHz; hunsnivy, supercop-20240107
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
292962977130440
T:
jacfp127i
308963151731990
T:
kumjacfp127g
331003360034113
T:
prjfp127i
338743435234843
T:
hecfp127i
403564082241413
T:
jacfp128bk
485134902449583
T:
prjfp128bk
487464920849800
T:
hecfp128fkt
487054930549972
T:
hecfp128i
488304943049795
T:
hecfp128bk
503025116452142
T:
ecfp256e
545375546656811
T:
ecfp256h
549495570857294
T:
ecfp256s
572125802859842
T:
curve2251
610436159862298
T:
ecfp256q
739087499776448
T:
gls254
886978888589021
T:
kummer
951469630297175
T:
gls1271
106152106276106692
T:
gls254prot
116462116652116997
T:
kumfp127g
145465145685146056
T:
curve25519
164020164236164498
T:
kumfp128g
176405176569176891
T:
k277taa
181160182208183027
T:
k298
210326210853211799
T:
ed448goldilocks
232275233104233916
T:
surf127eps
243807246141252172
T:
ecfp256i
257298257540258265
T:
k277mon
267001269411271377
T:
sclaus1024
307716308979310496
T:
nistp256
581347583606585417
T:
surf2113
109231710934861096073
T:
ed521gs
126034112626351265827
T:
nist521gs
137428013838341394911
T:
sclaus2048
159291415965121601150
T:
claus
Cycles to compute a shared secret
25%50%75%system
686816903470853
T:
gls254
884558855388768
T:
kummer
106037106188106472
T:
gls254prot
119155119428119664
T:
kumfp127g
124345124629125063
T:
jacfp128bk
126162126206126292
T:
kumjacfp127g
157346157457157697
T:
curve25519
157795158153158886
T:
prjfp128bk
163623164004164488
T:
hecfp128bk
167146167345167824
T:
hecfp128fkt
170653170852171083
T:
kumfp128g
176315176413176707
T:
k277taa
181005181477182076
T:
k298
190921191710194468
T:
jacfp127i
221115224932225311
T:
curve2251
224822225198225850
T:
ecfp256e
229433229820230240
T:
surf127eps
232716234421236909
T:
gls1271
235400235976236743
T:
ecfp256q
238585238938239304
T:
prjfp127i
240015240371240749
T:
ecfp256i
245088245618246531
T:
hecfp127i
257254257291257688
T:
k277mon
270881272099272856
T:
sclaus1024
276740277398278430
T:
ecfp256h
296925297131297650
T:
ecfp256s
365612366566368237
T:
hecfp128i
579220581473584450
T:
surf2113
631368632052632925
T:
ed448goldilocks
778938781036783322
T:
nistp256
108705510908311093698
T:
ed521gs
125979712620951265705
T:
nist521gs
137967013884861403524
T:
sclaus2048
159401915968051600274
T:
claus
armeabi; Cortex-A9+NEON (412fc09a); 2011 Freescale i.MX6 Quad; 4 x 1200MHz; unstable; novena, supercop-20220506
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
383633403235426836
T:
kummer
568432579721605953
T:
curve25519
113609712253061320114
T:
nistp256
317027133190843441142
T:
sclaus1024
103958101067570812763892
T:
claus
13118323?15156764?17482296?
T:
sclaus2048
Cycles to compute a shared secret
25%50%75%system
377632394434418035
T:
kummer
567769587250684860
T:
curve25519
317587233146843482698
T:
sclaus1024
378432441255534561590
T:
nistp256
103845211070227310950137
T:
claus
12688797?16762633?17448692?
T:
sclaus2048
armeabi; ARM1176 (410fb767); 2011 Broadcom BCM2835; 1 x 1000MHz; berry0, supercop-20240107
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
114587011469621152138
T:
kummer
171120317155381730530
T:
nistp256
189192719080971928398
T:
sclaus1024
203415120352272044297
T:
curve25519
205591120634802081751
T:
surf127eps
900895290611759128351
T:
sclaus2048
113553741137698011404861
T:
claus
Cycles to compute a shared secret
25%50%75%system
114491711455861149622
T:
kummer
190772619108771921494
T:
sclaus1024
203385020354412039534
T:
curve25519
205045320576522067117
T:
surf127eps
545138654872605493525
T:
nistp256
901223090558109122425
T:
sclaus2048
113541071137010311388069
T:
claus
mipso32; Octeon II (cnmips64v2); 2011 Cavium Octeon II CN6120; 2 x 2000MHz; gcc23, supercop-20230530
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
147097414710161472676
T:
kummer
199919019991902000622
T:
curve25519
344511234574143461870
T:
nistp256
484243248611724867094
T:
surf127eps
899081490854829171120
T:
sclaus1024
446202184494918645248108
T:
sclaus2048
545050245461244054716466
T:
claus
Cycles to compute a shared secret
25%50%75%system
147062614706301470630
T:
kummer
199890819989081999896
T:
curve25519
483016848424744861988
T:
surf127eps
900581490441769159864
T:
sclaus1024
115423281157057011603418
T:
nistp256
447917484505932645496830
T:
sclaus2048
542802005459834654663778
T:
claus
amd64; Bobcat (500f10); 2011 AMD G-T56N; 2 x 1650MHz; h8bobcat, supercop-20240107
[show/hide table]

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
557795650157214
T:
jacfp127i
577985857259337
T:
kumjacfp127g
622826379265369
T:
hecfp127i
632136444866191
T:
prjfp127i
771217886080750
T:
jacfp128bk
899139099192777
T:
prjfp128bk
907789201294173
T:
hecfp128bk
908969230794259
T:
hecfp128i
921269384695699
T:
hecfp128fkt
103683105887107217
T:
ecfp256e
114618116242118398
T:
ecfp256h
114722116413117791
T:
ecfp256s
119401121994124659
T:
ecfp256q
159116161091162716
T:
gls1271
199077199101199182
T:
kumfp127g
315951315965316042
T:
kumfp128g
363651363679365436
T:
curve25519
433856436074439332
T:
ecfp256i
480681482562483812
T:
surf127eps
504265506977516017
T:
curve2251
508155513304518130
T:
sclaus1024
549884550302551527
T:
ed448goldilocks
752704753274755701
T:
nistp256
799877801277802285
T:
kummer
170770617111021721267
T:
surf2113
239038023946702406008
T:
ed521gs
243306424511672470484
T:
sclaus2048
277390127791352790805
T:
nist521gs
304954230629573380162
T:
claus
Cycles to compute a shared secret
25%50%75%system
201571201571201571
T:
kumfp127g
207114207157207181
T:
kumjacfp127g
236450236541236664
T:
jacfp128bk
293336293484293626
T:
prjfp128bk
297797297844298010
T:
hecfp128bk
308721309382309605
T:
hecfp128fkt
325494325499325655
T:
kumfp128g
346137346166346674
T:
jacfp127i
363598365379365384
T:
curve25519
365546368695369783
T:
gls1271
405939406229406813
T:
ecfp256e
420575420702421245
T:
ecfp256q
427424427628428018
T:
prjfp127i
430103430497430954
T:
ecfp256i
435399435461435594
T:
hecfp127i
476059476610478914
T:
surf127eps
510825510881511608
T:
ecfp256h
505780519351519907
T:
sclaus1024
519527519892520648
T:
ecfp256s
662112662202663034
T:
hecfp128i
799700799705799753
T:
kummer
161946516196311633682
T:
nistp256
162122716219971631307
T:
ed448goldilocks
169802017090551716350
T:
surf2113
206323320708292077308
T:
curve2251
238014423810572391648
T:
ed521gs
243494024656112498172
T:
sclaus2048
276599627702242782674
T:
nist521gs
304137830515903378176
T:
claus
amd64; K10 32nm (300f10); 2011 AMD A8-3850; 4 x 2900MHz; hydra5, supercop-20240107
[show/hide table]

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
299973020930480
T:
jacfp127i
327773297733278
T:
kumjacfp127g
348883511135384
T:
prjfp127i
354483568235919
T:
hecfp127i
472694779448323
T:
jacfp128bk
561605644756853
T:
hecfp128bk
561975646056908
T:
hecfp128fkt
562455656856997
T:
hecfp128i
569825736257757
T:
prjfp128bk
724137374975130
T:
ecfp256e
763357780278822
T:
ecfp256s
778297871280194
T:
ecfp256h
786518037981994
T:
ecfp256q
106540107774108932
T:
gls1271
120075120123120203
T:
kumfp127g
206803206842206934
T:
kumfp128g
214381214384214442
T:
curve25519
265902268453270494
T:
sclaus1024
278901280469282528
T:
ecfp256i
280702281700282184
T:
surf127eps
307933308092308693
T:
ed448goldilocks
414679414712414828
T:
kummer
437253437331437579
T:
nistp256
705696709239710698
T:
surf2113
887364890268891448
T:
curve2251
125209312609461272290
T:
sclaus2048
150365915042091504689
T:
ed521gs
158216815853271588606
T:
claus
176694217673411770203
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
121737121741121745
T:
kumfp127g
122806122826122839
T:
kumjacfp127g
153731153827153880
T:
jacfp128bk
188190188254188317
T:
prjfp128bk
193867193872193917
T:
hecfp128bk
197671197747198601
T:
jacfp127i
201071201119201143
T:
hecfp128fkt
211982211986211995
T:
kumfp128g
214348214364214372
T:
curve25519
253738254905258865
T:
gls1271
257896257989258031
T:
prjfp127i
261077261165261297
T:
ecfp256e
263303263380263452
T:
hecfp127i
271260271292271344
T:
ecfp256q
271195272205272534
T:
sclaus1024
277591277637277699
T:
ecfp256i
276962279081279593
T:
surf127eps
330320330429330643
T:
ecfp256s
337413337431337499
T:
ecfp256h
414625414633414642
T:
kummer
427429428110428146
T:
hecfp128i
703055704035704854
T:
surf2113
880462889568890174
T:
curve2251
938413939843939883
T:
ed448goldilocks
104440010451601045678
T:
nistp256
124913612583891272636
T:
sclaus2048
150334015038851504147
T:
ed521gs
158176315821501584389
T:
claus
176655917668091767358
T:
nist521gs
amd64; K10 32nm (300f10); 2011 AMD A6-3650; 4 x 2600MHz; hydra4, supercop-20240107
[show/hide table]

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
288492903529325
T:
jacfp127i
312963149331744
T:
kumjacfp127g
337023391934147
T:
prjfp127i
349353529235693
T:
hecfp127i
459444645446898
T:
jacfp128bk
546755501355376
T:
prjfp128bk
547715509055547
T:
hecfp128fkt
548095519955546
T:
hecfp128bk
549065520555616
T:
hecfp128i
711437250273994
T:
ecfp256e
752047667877806
T:
ecfp256s
768027787679291
T:
ecfp256h
774407919380896
T:
ecfp256q
105417106565107656
T:
gls1271
118955118959118985
T:
kumfp127g
205299205333205394
T:
kumfp128g
214451214470214556
T:
curve25519
266246268570270905
T:
sclaus1024
277636279545281174
T:
ecfp256i
281011281931282422
T:
surf127eps
299628300189300431
T:
ed448goldilocks
430626430807430908
T:
kummer
442616442661442790
T:
nistp256
731948735054736046
T:
surf2113
908904913213915151
T:
curve2251
125594312653651275336
T:
sclaus2048
149587814964791496823
T:
ed521gs
158146415853471588653
T:
claus
176732017683911769882
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
121602121604121606
T:
kumfp127g
123794123797123813
T:
kumjacfp127g
153389153477153579
T:
jacfp128bk
188847188928189146
T:
prjfp128bk
193274193340193434
T:
hecfp128bk
197312197377197497
T:
jacfp127i
200602200652200686
T:
hecfp128fkt
211531211538211539
T:
kumfp128g
214407214409214412
T:
curve25519
253567256910258531
T:
gls1271
257515257568257663
T:
prjfp127i
261622261695261732
T:
ecfp256e
262247262285262334
T:
hecfp127i
267335268115272422
T:
sclaus1024
269561269675269716
T:
ecfp256q
276720276856276929
T:
ecfp256i
276321280461280746
T:
surf127eps
329623329699329807
T:
ecfp256s
335736335783335857
T:
ecfp256h
427454427509428154
T:
hecfp128i
430600430612430822
T:
kummer
731813734051734292
T:
surf2113
909402909426910026
T:
ed448goldilocks
896881912513914516
T:
curve2251
991226992072993679
T:
nistp256
126265512725901287628
T:
sclaus2048
149565414962371497911
T:
ed521gs
158159615868511593968
T:
claus
176704117680451768901
T:
nist521gs
amd64; Bonnell (30661); 2011 Intel Atom D2500; 2 x 1866MHz; h8atom, supercop-20240107
[show/hide table]

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
128317129381130956
T:
jacfp127i
132825134183135919
T:
kumjacfp127g
141330142247143339
T:
prjfp127i
143815144998146209
T:
hecfp127i
217259218638220255
T:
jacfp128bk
234206235935239442
T:
ecfp256e
245882248220249816
T:
prjfp128bk
247128249858253036
T:
curve2251
248822250026252224
T:
hecfp128i
249501251167252833
T:
hecfp128bk
250061252168254401
T:
hecfp128fkt
256060258797261275
T:
ecfp256s
261387263144266504
T:
ecfp256h
264201267974271530
T:
ecfp256q
315763319060323820
T:
gls1271
543032545223546714
T:
kumfp127g
103722510404101042083
T:
kumfp128g
109599710960881096914
T:
curve25519
112093811256491129499
T:
surf127eps
115652611672991179101
T:
ecfp256i
130379213078101318653
T:
ed448goldilocks
134826313530301376494
T:
nistp256
170266617101491732920
T:
surf2113
174771817566151763727
T:
kummer
175416517755991797607
T:
sclaus1024
706157971115947160132
T:
ed521gs
848851585606088604029
T:
nist521gs
868714087617748845116
T:
sclaus2048
106457681074021210791004
T:
claus
Cycles to compute a shared secret
25%50%75%system
550704553182554638
T:
kumfp127g
552272556640558425
T:
kumjacfp127g
727853732109734027
T:
jacfp128bk
756098768439774984
T:
gls1271
865067867643869169
T:
prjfp128bk
889399893683895923
T:
hecfp128bk
921669924658930524
T:
hecfp128fkt
933569937874939974
T:
jacfp127i
101353010147691030337
T:
curve2251
106288710658831067241
T:
kumfp128g
108761110933301097880
T:
ecfp256e
109583610958431095969
T:
curve25519
111113811130351115394
T:
prjfp127i
110857611223101123311
T:
surf127eps
112809911284561137276
T:
ecfp256q
113657611463691148791
T:
hecfp127i
115622511565191166151
T:
ecfp256i
135401013607581366540
T:
ecfp256s
143878714393051450498
T:
ecfp256h
169136117104571725864
T:
surf2113
174761317559291762810
T:
kummer
175991217759771791384
T:
sclaus1024
195159319666571971697
T:
hecfp128i
449641545100514527215
T:
ed448goldilocks
453919945533044564812
T:
nistp256
706074671297877166866
T:
ed521gs
847028085257488584303
T:
nist521gs
866641388620008939511
T:
sclaus2048
106493591070638110749032
T:
claus
amd64; Sandy Bridge+AES (206a7); 2011 Intel Xeon E3-1225; 4 x 3100MHz; hydra7, supercop-20240107
[show/hide table]

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
323843282133185
T:
jacfp127i
330393351633908
T:
kumjacfp127g
384593914640042
T:
prjfp127i
383343930240709
T:
hecfp127i
465184720250173
T:
jacfp128bk
552925599557000
T:
ecfp256e
562325696458610
T:
hecfp128bk
565535736858266
T:
hecfp128fkt
569815776458459
T:
hecfp128i
564615794859259
T:
prjfp128bk
582155883460089
T:
ecfp256h
602916058662478
T:
curve2251
602966112762023
T:
ecfp256s
640146489966317
T:
ecfp256q
788218015181433
T:
gls254
894518950589610
T:
kummer
103577104660105866
T:
gls1271
114848114975115177
T:
gls254prot
125733125806125885
T:
kumfp127g
147248147379149397
T:
curve25519
178427178455178512
T:
k277taa
185440185583188262
T:
kumfp128g
196914197109197732
T:
k298
267132267209267278
T:
k277mon
267772269102270925
T:
ecfp256i
272827275299276601
T:
surf127eps
287795288199288840
T:
ed448goldilocks
286467289787292287
T:
sclaus1024
382589382853383294
T:
nistp256
629853632600633583
T:
surf2113
121410712160381218252
T:
ed521gs
138963313906051392053
T:
nist521gs
145690914698391479524
T:
sclaus2048
171603617232601753196
T:
claus
Cycles to compute a shared secret
25%50%75%system
732717503176636
T:
gls254
892198926189334
T:
kummer
114832114931115040
T:
gls254prot
127804127872127960
T:
kumfp127g
130630130852141235
T:
kumjacfp127g
140332140520154129
T:
jacfp128bk
159097159168159255
T:
curve25519
178393178433178561
T:
k277taa
178903179412189731
T:
prjfp128bk
183422183750187661
T:
hecfp128bk
189863190260194430
T:
hecfp128fkt
191909192017192153
T:
kumfp128g
196601196745196931
T:
k298
200257200441200655
T:
jacfp127i
227470230387232081
T:
curve2251
248080248391248933
T:
ecfp256e
255009257852260725
T:
gls1271
257863258110258616
T:
ecfp256q
260481260918261609
T:
prjfp127i
263511263749264120
T:
ecfp256i
266220266599267166
T:
hecfp127i
267210267222267238
T:
k277mon
267202271727272317
T:
surf127eps
291905298103298299
T:
sclaus1024
304839305115305620
T:
ecfp256h
326646327167327807
T:
ecfp256s
414620415156415890
T:
hecfp128i
626995631040634885
T:
surf2113
826428826935827750
T:
ed448goldilocks
100553210063731008232
T:
nistp256
122407812253241226788
T:
ed521gs
138956213907161392630
T:
nist521gs
146391714677441493766
T:
sclaus2048
171049617205321745189
T:
claus
amd64; Sandy Bridge (206a7); 2011 Intel Core i3-2310M; 2 x 2100MHz; h6sandy, supercop-20240107
[show/hide table]

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
321363288233688
T:
jacfp127i
337023463235624
T:
kumjacfp127g
368723758138392
T:
prjfp127i
377583847039293
T:
hecfp127i
463454711148050
T:
jacfp128bk
554365621457620
T:
ecfp256e
559415722058661
T:
prjfp128bk
566965767859312
T:
hecfp128fkt
574405836959655
T:
hecfp128bk
572655860460063
T:
hecfp128i
582725896660488
T:
ecfp256h
606296119262389
T:
ecfp256s
590446145264620
T:
curve2251
641956518066781
T:
ecfp256q
892968938589494
T:
kummer
103257104592105693
T:
gls1271
107503107576107721
T:
gls254prot
108623108856109232
T:
gls254
123544123944127585
T:
kumfp127g
147264147482148022
T:
curve25519
176955177051177135
T:
k277taa
183123183391184078
T:
k298
184485185043185302
T:
kumfp128g
215221216986218995
T:
ed448goldilocks
258086258199258361
T:
k277mon
268307269474271210
T:
ecfp256i
269684270910276786
T:
surf127eps
286367289531291657
T:
sclaus1024
342932343402345034
T:
nistp256
631184633993635397
T:
surf2113
121864112232211226965
T:
ed521gs
139331513968071402341
T:
nist521gs
145857014702801482078
T:
sclaus2048
171709817224841728415
T:
claus
Cycles to compute a shared secret
25%50%75%system
890338906989130
T:
kummer
107523107609107760
T:
gls254prot
108091108273108752
T:
gls254
125704125804125999
T:
kumfp127g
130520130688130827
T:
kumjacfp127g
140736140916141063
T:
jacfp128bk
158939159153164934
T:
curve25519
176777176818176934
T:
k277taa
179331179621179873
T:
prjfp128bk
182772182917183611
T:
k298
182720182968187790
T:
hecfp128bk
190130190267190471
T:
hecfp128fkt
191084191626191894
T:
kumfp128g
200926201912219831
T:
jacfp127i
231252231680231950
T:
curve2251
248136248399248672
T:
ecfp256e
249287251282254622
T:
gls1271
257767258039258793
T:
ecfp256q
258041258305259018
T:
k277mon
260862261541277744
T:
prjfp127i
263416263717264029
T:
ecfp256i
265342265678266080
T:
hecfp127i
265581266629272964
T:
surf127eps
288511292334297989
T:
sclaus1024
304789305271306546
T:
ecfp256h
326707327129328053
T:
ecfp256s
414073414429415059
T:
hecfp128i
627005631450632426
T:
surf2113
654784655556657554
T:
ed448goldilocks
892325893403895070
T:
nistp256
122881812298181232847
T:
ed521gs
139311413949721397519
T:
nist521gs
149069914931901497683
T:
sclaus2048
171730117233021729656
T:
claus
amd64; K10 45nm (100f63); 2010 AMD Athlon II Neo K125; 1 x 1700MHz; h3neo, supercop-20240107
[show/hide table]

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
323003255232904
T:
jacfp127i
350383528235627
T:
kumjacfp127g
383563868039016
T:
prjfp127i
385963884539120
T:
hecfp127i
515175232053167
T:
jacfp128bk
592785991760719
T:
prjfp128bk
599336066961605
T:
hecfp128i
603486102261812
T:
hecfp128fkt
604456112561855
T:
hecfp128bk
754127686878472
T:
ecfp256e
791608062182220
T:
ecfp256s
803508159782822
T:
ecfp256h
819388389085908
T:
ecfp256q
112714113814114897
T:
gls1271
131117131127131224
T:
kumfp127g
219969219973219991
T:
curve25519
224566224588224678
T:
kumfp128g
264566267378269918
T:
sclaus1024
293053294424296289
T:
ecfp256i
293395294533294883
T:
surf127eps
342887343582344120
T:
ed448goldilocks
425448425512425643
T:
nistp256
436087436160436222
T:
kummer
108291310884651090512
T:
surf2113
127687912843641293417
T:
sclaus2048
133371613373551340052
T:
curve2251
155551715559581557260
T:
ed521gs
156988915729431576093
T:
claus
181947718225891824957
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
132634132639132642
T:
kumfp127g
134341134347134364
T:
kumjacfp127g
163382163430163502
T:
jacfp128bk
201387201398201411
T:
prjfp128bk
206037206111206125
T:
hecfp128bk
212596212612212931
T:
jacfp127i
213928213940213992
T:
hecfp128fkt
219944219944219945
T:
curve25519
230030230052230063
T:
kumfp128g
264335271538277469
T:
sclaus1024
271985272156272215
T:
prjfp127i
273433273517273764
T:
ecfp256e
270464274593274918
T:
gls1271
281521281560281597
T:
hecfp127i
284145284178284215
T:
ecfp256q
289977290210290758
T:
surf127eps
291558291596291865
T:
ecfp256i
344989345202345293
T:
ecfp256s
353674353774353887
T:
ecfp256h
436038436053436164
T:
kummer
454607454689454808
T:
hecfp128i
944084944292944971
T:
ed448goldilocks
102474210247521025612
T:
nistp256
106370210858331087411
T:
surf2113
128857212992621310538
T:
sclaus2048
132749713387641339168
T:
curve2251
155573315566221557141
T:
ed521gs
156791615692211573067
T:
claus
181904118220801824032
T:
nist521gs
amd64; Bonnell (106ca); 2010 Intel Atom N455; 1 x 1000MHz; h2atom, supercop-20240107
[show/hide table]

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
126540126932127586
T:
jacfp127i
131849132222132799
T:
kumjacfp127g
139368139764140311
T:
prjfp127i
142908143218143829
T:
hecfp127i
217696218044218611
T:
jacfp128bk
234779237792240341
T:
ecfp256e
245742246378247760
T:
hecfp128bk
246353247275248531
T:
prjfp128bk
246697247324248543
T:
hecfp128fkt
248260249020249982
T:
hecfp128i
248629249837253499
T:
curve2251
257088260331263145
T:
ecfp256s
264038265768269673
T:
ecfp256h
266358270070272569
T:
ecfp256q
311963315613318003
T:
gls1271
548841548859550114
T:
kumfp127g
103585510364811037069
T:
kumfp128g
110977611102831110934
T:
curve25519
117397611798921188094
T:
ecfp256i
131496613169531321103
T:
ed448goldilocks
135149313526911354988
T:
nistp256
172921417303691734255
T:
kummer
208158921004322123920
T:
sclaus1024
724726072539907269084
T:
ed521gs
859000585987778613248
T:
nist521gs
107865611086048910939078
T:
sclaus2048
121335461215738612187607
T:
claus
Cycles to compute a shared secret
25%50%75%system
556644556653557561
T:
kumfp127g
559418559454560048
T:
kumjacfp127g
727018727065728203
T:
jacfp128bk
756549768273773441
T:
gls1271
861770861898863639
T:
prjfp128bk
886543886662889466
T:
hecfp128bk
923112924692926246
T:
hecfp128fkt
931979932860934933
T:
jacfp127i
101647310196891022597
T:
curve2251
106163610620441062578
T:
kumfp128g
110557311071861111809
T:
ecfp256e
110805211087141111185
T:
prjfp127i
110958111096981110682
T:
curve25519
114137711417751144106
T:
hecfp127i
114692211487991152413
T:
ecfp256q
117748911791331183574
T:
ecfp256i
138194713831811387390
T:
ecfp256s
145918114596481464756
T:
ecfp256h
172850917286871730867
T:
kummer
195516419562251956769
T:
hecfp128i
215056821653282172459
T:
sclaus1024
447366044748874482682
T:
ed448goldilocks
453600145369164547765
T:
nistp256
724508572471197260412
T:
ed521gs
858856085931668611824
T:
nist521gs
109068781095261710979594
T:
sclaus2048
121759311219419712212527
T:
claus
amd64; Core 2 45nm (1067a); 2009 Intel Core 2 Duo E7600; 2 x 3060MHz; wolfdale, supercop-20240107
[show/hide table]

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
405994127942136
T:
jacfp127i
426474324544027
T:
kumjacfp127g
473084785048555
T:
prjfp127i
487214920649867
T:
hecfp127i
724027310573941
T:
ecfp256e
732767382374490
T:
jacfp128bk
782347908980095
T:
ecfp256h
800188055481260
T:
ecfp256s
857588649187401
T:
ecfp256q
861068710288220
T:
prjfp128bk
866608760288984
T:
hecfp128fkt
868738783389176
T:
hecfp128i
871938819089495
T:
hecfp128bk
123836125260126438
T:
gls1271
126522126935128185
T:
curve2251
179224179403180042
T:
kumfp127g
294119295111296994
T:
curve25519
314789315067315396
T:
kumfp128g
331543332631333758
T:
ed448goldilocks
386130387632390448
T:
ecfp256i
400567401377402133
T:
kummer
416504418261420341
T:
surf127eps
422946428082435243
T:
sclaus1024
497399497974501650
T:
nistp256
759518762948767577
T:
surf2113
166011116610831663342
T:
ed521gs
191327119150151916927
T:
nist521gs
214732221604432176669
T:
sclaus2048
253253725383182543632
T:
claus
Cycles to compute a shared secret
25%50%75%system
183602183746184486
T:
kumfp127g
187573187757188384
T:
kumjacfp127g
242565242702242818
T:
jacfp128bk
292024292077292158
T:
jacfp127i
293979295149296917
T:
curve25519
300677300862301093
T:
prjfp128bk
306122306224306405
T:
hecfp128bk
315476316725318481
T:
gls1271
317205317401317760
T:
hecfp128fkt
326981327253327581
T:
kumfp128g
363840364034364282
T:
ecfp256e
379587379863380383
T:
ecfp256q
380728380980381293
T:
prjfp127i
384852385050385258
T:
ecfp256i
388959389097389331
T:
hecfp127i
415184416661418732
T:
surf127eps
428835431841433535
T:
sclaus1024
458066458257458517
T:
ecfp256h
471365471562471951
T:
ecfp256s
521756525890526226
T:
curve2251
692765692867693558
T:
hecfp128i
406862?702792?705290?
T:
kummer
762625764309767020
T:
surf2113
103029710323761035353
T:
ed448goldilocks
116271611632271166911
T:
nistp256
165260916549371657449
T:
ed521gs
191283619142681916200
T:
nist521gs
217344621793022229701
T:
sclaus2048
253841225429012547707
T:
claus
amd64; Core 2 45nm (10676); 2007 Intel Xeon X5450; 8 x 2992MHz; unstable; gcc14, supercop-20220506
[show/hide table]

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
450734746350135
T:
jacfp127i
470414835249377
T:
kumjacfp127g
517235395157038
T:
prjfp127i
530025517759391
T:
hecfp127i
713697255876668
T:
ecfp256e
774197899684435
T:
ecfp256h
780957935180571
T:
jacfp128bk
796888159186347
T:
ecfp256s
884948908191698
T:
ecfp256q
899879267895313
T:
prjfp128bk
906959309296851
T:
hecfp128fkt
914649368897172
T:
hecfp128i
918849393196811
T:
hecfp128bk
122081124406126622
T:
gls1271
127352128298131045
T:
curve2251
178621178639178774
T:
kumfp127g
299212299279299300
T:
curve25519
314856315067315465
T:
kumfp128g
329748330281330858
T:
ed448goldilocks
384083386835388905
T:
ecfp256i
413326415894420963
T:
surf127eps
422448422696424925
T:
kummer
422389426879430417
T:
sclaus1024
592353599624599809
T:
nistp256
703975707187707993
T:
surf2113
165127616548471665749
T:
ed521gs
196582819681241970593
T:
nist521gs
214164921584622174320
T:
sclaus2048
253159425367742542306
T:
claus
Cycles to compute a shared secret
25%50%75%system
183308183339183401
T:
kumfp127g
187644188022188184
T:
kumjacfp127g
244882244967245135
T:
jacfp128bk
292653292810292871
T:
jacfp127i
298596298922299590
T:
curve25519
301634301818301972
T:
prjfp128bk
307377307524307663
T:
hecfp128bk
315724316398332895
T:
gls1271
318241318313318421
T:
hecfp128fkt
327094327144327284
T:
kumfp128g
362120362446362793
T:
ecfp256e
377991378292378707
T:
ecfp256q
381459381554381707
T:
prjfp127i
383653383881384037
T:
ecfp256i
388709388774388844
T:
hecfp127i
412903415509419428
T:
surf127eps
422428422854424362
T:
kummer
424342428316440575
T:
sclaus1024
455103455540455801
T:
ecfp256h
470134470272470478
T:
ecfp256s
519804523960528188
T:
curve2251
694179694320694727
T:
hecfp128i
701889703404704125
T:
surf2113
102255210230961026174
T:
ed448goldilocks
117578911759971177498
T:
nistp256
165075316546411665087
T:
ed521gs
196526419670891969059
T:
nist521gs
212717521455732206421
T:
sclaus2048
253738125388522573470
T:
claus
amd64; Core 2 65nm (6fb); 2007 Intel Core 2 Quad Q6600; 4 x 2404MHz; margaux, supercop-20240107
[show/hide table]

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
434104454345700
T:
jacfp127i
452504629047544
T:
kumjacfp127g
500855098052353
T:
prjfp127i
514735231053506
T:
hecfp127i
761057708878135
T:
jacfp128bk
835298447886079
T:
ecfp256e
868048741488631
T:
ecfp256h
894549068593248
T:
hecfp128bk
895939087293627
T:
hecfp128i
896229095792888
T:
prjfp128bk
900319144994224
T:
hecfp128fkt
907839215793032
T:
ecfp256s
950599607697327
T:
ecfp256q
126429127795129070
T:
gls1271
131033132570134556
T:
curve2251
180687180689180709
T:
kumfp127g
294881294884295524
T:
curve25519
316301316557318897
T:
kumfp128g
328706329156329822
T:
ed448goldilocks
396822398089400416
T:
ecfp256i
414938417028419166
T:
surf127eps
415694418484418493
T:
kummer
423195426432430541
T:
sclaus1024
511412511527512080
T:
nistp256
769727772978774723
T:
surf2113
170669917070821709163
T:
ed521gs
195897919606101961695
T:
nist521gs
215167221620322175546
T:
sclaus2048
253753625424292549108
T:
claus
Cycles to compute a shared secret
25%50%75%system
183245183265183280
T:
kumfp127g
188093188355188362
T:
kumjacfp127g
243972244028244090
T:
jacfp128bk
292104292218292579
T:
jacfp127i
294772295012295059
T:
curve25519
300095300147300187
T:
prjfp128bk
307265307365307541
T:
hecfp128bk
318445318696319283
T:
hecfp128fkt
315335322444325835
T:
gls1271
326579326598330512
T:
kumfp128g
371911372113372280
T:
ecfp256e
380978381123381287
T:
prjfp127i
386425386711387204
T:
ecfp256q
389379389459389590
T:
hecfp127i
394396394502394701
T:
ecfp256i
414201415701418159
T:
surf127eps
417245417245417252
T:
kummer
417864426061432957
T:
sclaus1024
463553463824464072
T:
ecfp256h
481825482037482336
T:
ecfp256s
553532556090557625
T:
curve2251
693768693856694132
T:
hecfp128i
767714768105770444
T:
surf2113
102681210290451031657
T:
ed448goldilocks
122690112269531227443
T:
nistp256
170818317082091708858
T:
ed521gs
195860119590101959841
T:
nist521gs
213417421812112212090
T:
sclaus2048
254113125421172554898
T:
claus
amd64; Core 2 65nm (6fb); 2007 Intel Core 2 Duo T7300; 2 x 2000MHz; trident, supercop-20240107
[show/hide table]

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
402874086541536
T:
jacfp127i
424604302243675
T:
kumjacfp127g
469364741748014
T:
prjfp127i
487604923349839
T:
hecfp127i
732597376974358
T:
jacfp128bk
805118126382507
T:
ecfp256e
841658480786046
T:
ecfp256h
864598716588415
T:
hecfp128bk
866468740988625
T:
hecfp128fkt
870568764188675
T:
prjfp128bk
868008769088691
T:
hecfp128i
885028975490636
T:
ecfp256s
932449424996086
T:
ecfp256q
127521131251134219
T:
gls1271
132482133562135494
T:
curve2251
179084179197179351
T:
kumfp127g
294526295507297365
T:
curve25519
314572314858315248
T:
kumfp128g
329770330332331783
T:
ed448goldilocks
393354395413398394
T:
ecfp256i
411116412971417364
T:
kummer
416156418646421301
T:
surf127eps
421793426224429826
T:
sclaus1024
500693501705502717
T:
nistp256
767336771184773934
T:
surf2113
165729616576691660149
T:
ed521gs
191345319156731917794
T:
nist521gs
215587521714832191106
T:
sclaus2048
254332225487372553292
T:
claus
Cycles to compute a shared secret
25%50%75%system
183362183548183713
T:
kumfp127g
187586187797188367
T:
kumjacfp127g
242318242448242635
T:
jacfp128bk
291305291524291983
T:
jacfp127i
293845294584295434
T:
curve25519
299409299648299915
T:
prjfp128bk
307228307391307601
T:
hecfp128bk
318230318389319077
T:
hecfp128fkt
317776318576321779
T:
gls1271
326994327250327541
T:
kumfp128g
373850374087374383
T:
ecfp256e
380164380527381282
T:
prjfp127i
386323386704387354
T:
ecfp256q
389410389554389770
T:
hecfp127i
393148393402393832
T:
ecfp256i
410748412208416771
T:
kummer
415171417345419771
T:
surf127eps
420430422606426822
T:
sclaus1024
464563465005465347
T:
ecfp256h
479747480212480749
T:
ecfp256s
549240552525553284
T:
curve2251
693476693762694804
T:
hecfp128i
769749774747777402
T:
surf2113
103310010364531037898
T:
ed448goldilocks
117076611726711173472
T:
nistp256
165789416587101659866
T:
ed521gs
191172519138401916256
T:
nist521gs
215144221978792198860
T:
sclaus2048
254843725513922561821
T:
claus

Version

This is version 2024.04.26 of the results-dh.html web page. This web page is in the public domain.