VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems
ECRYPT II
General information: Introduction eBASH eBASC eBAEAD eBATS SUPERCOP XBX Computers
How to submit new software: Tips hash stream aead dh kem encrypt sign
List of primitives measured: lwc sha3 hash stream lwc caesar aead dh kem encrypt sign
Measurements indexed by machine: lwc sha3 hash stream lwc caesar aead dh kem encrypt sign
List of subroutines: verify decode encode sort core hashblocks scalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems, indexed by machine

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents the benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation.

Each computer name is linked to additional information about the implementations and compilers selected for benchmarking.

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.

Sizes across machines

Secret key
bytessystem
20sclaus1024
28sclaus2048
28surf2113
29hector
32curve2251
32curve25519
32ecfp256e
32ecfp256h
32ecfp256i
32ecfp256q
32ecfp256s
32gls1271
32gls254
32gls254prot
32hecfp127i
32hecfp128bk
32hecfp128fkt
32hecfp128i
32jacfp127i
32jacfp128bk
32k298
32kumfp127g
32kumfp128g
32kumjacfp127g
32kummer
32nistp256
32prjfp127i
32prjfp128bk
32surf127eps
48k277mon
48k277taa
104nist521gs
130ed521gs
144ed448goldilocks
256claus
Public key
bytessystem
32curve2251
32curve25519
32gls1271
48kumfp127g
48kumfp128g
48kumjacfp127g
48kummer
48surf127eps
48surf2113
56ed448goldilocks
60hector
64ecfp256e
64ecfp256h
64ecfp256q
64ecfp256s
64gls254
64gls254prot
64hecfp127i
64hecfp128bk
64hecfp128fkt
64hecfp128i
64jacfp127i
64jacfp128bk
64nistp256
64prjfp127i
64prjfp128bk
80k277mon
80k277taa
96ecfp256i
96k298
128claus
128sclaus1024
144ed521gs
144nist521gs
256sclaus2048
Shared secret
bytessystem
32curve2251
32curve25519
32ecfp256e
32ecfp256h
32ecfp256i
32ecfp256q
32ecfp256s
32gls1271
32gls254prot
32..32..64gls254
40k277mon
40k277taa
48k298
48kumfp127g
48kumfp128g
48kumjacfp127g
48kummer
48surf127eps
48surf2113
60hector
64ed448goldilocks
64hecfp127i
64hecfp128bk
64hecfp128fkt
64hecfp128i
64jacfp127i
64jacfp128bk
64nistp256
64prjfp127i
64prjfp128bk
72ed521gs
72nist521gs
128claus
128sclaus1024
256sclaus2048

amd64; Golden Cove (906a4-40); 2022 Intel Core i3-1215U, P cores; 2 x 1600MHz; alder2,1f626960,5600000, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
171721798019017
T:
jacfp127i
178031857219482
T:
kumjacfp127g
192131994820845
T:
prjfp127i
195952026121491
T:
hecfp127i
226092334224083
T:
jacfp128bk
261882690227934
T:
prjfp128bk
263712701028193
T:
hecfp128bk
268382774428872
T:
hecfp128i
267592778328811
T:
hecfp128fkt
296432983330067
T:
gls254
303103072531738
T:
ecfp256h
302383087331646
T:
ecfp256e
310303109031156
T:
gls254prot
330123312333241
T:
curve2251
339873457535423
T:
ecfp256s
352633563836251
T:
ecfp256q
383053835238425
T:
k277taa
422424230242378
T:
k298
505085126352364
T:
gls1271
522085226452336
T:
kummer
605886064360733
T:
k277mon
637136398664259
T:
kumfp127g
804558073581083
T:
kumfp128g
107645107908108304
T:
curve25519
134611135535136467
T:
ecfp256i
139439139809140148
T:
ed448goldilocks
177236177890179012
T:
nistp256
183018184757186456
T:
sclaus1024
596991600607607043
T:
ed521gs
771775776974780646
T:
nist521gs
922999923666924403
T:
claus
931479939923946811
T:
sclaus2048
Cycles to compute a shared secret
25%50%75%system
290072905629101
T:
gls254
308873094330998
T:
gls254prot
381823822538274
T:
k277taa
420454209442163
T:
k298
521165216552208
T:
kummer
605306059960649
T:
k277mon
654816563965834
T:
kumfp127g
661846633766479
T:
jacfp128bk
665696690867110
T:
kumjacfp127g
761747637076614
T:
prjfp128bk
777717809878382
T:
hecfp128bk
803468059980901
T:
hecfp128fkt
848618517585778
T:
kumfp128g
100933101070101240
T:
jacfp127i
105993106888107491
T:
curve25519
120544120728120978
T:
hecfp127i
120055122019122871
T:
prjfp127i
121116123180125899
T:
gls1271
123092123481124345
T:
ecfp256e
128616128827129179
T:
ecfp256i
133649133819133976
T:
curve2251
134362134840135917
T:
ecfp256q
146310146521146870
T:
ecfp256h
167830168112169080
T:
hecfp128i
183872184394185234
T:
ecfp256s
190086190824194944
T:
sclaus1024
408451409049409692
T:
ed448goldilocks
435960437026439545
T:
nistp256
595285599063605308
T:
ed521gs
773094776803780608
T:
nist521gs
920033920893921665
T:
claus
956046959477962790
T:
sclaus2048

amd64; Gracemont (906a4-20); 2022 Intel Core i3-1215U, E cores; 4 x 1600MHz; alder2,1f626960,3300000, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
267022733428500
T:
jacfp127i
276572830229440
T:
kumjacfp127g
296333028931216
T:
prjfp127i
307833144732421
T:
hecfp127i
347303482735029
T:
curve2251
368253696837136
T:
gls254
375333797938584
T:
jacfp128bk
381073816238222
T:
gls254prot
405304106141914
T:
ecfp256e
422994278543818
T:
ecfp256h
430164363744310
T:
prjfp128bk
434894411744965
T:
hecfp128fkt
440024475245722
T:
hecfp128i
445274511245769
T:
hecfp128bk
448854539846134
T:
ecfp256s
475024802048912
T:
ecfp256q
481924825248344
T:
k277taa
528245297153163
T:
k298
688586966770398
T:
gls1271
720297211272174
T:
k277mon
114528114818115183
T:
kumfp127g
117448117631117768
T:
kummer
148814149042149678
T:
kumfp128g
154653154850155100
T:
curve25519
202044203150204381
T:
ecfp256i
243797244381246285
T:
nistp256
242737247351249077
T:
ed448goldilocks
347553350454353617
T:
sclaus1024
134672613501941363917
T:
ed521gs
148873315054941524788
T:
nist521gs
199614820038792014918
T:
claus
219861522149512232441
T:
sclaus2048
Cycles to compute a shared secret
25%50%75%system
363233637336445
T:
gls254
380403808738142
T:
gls254prot
481124816548248
T:
k277taa
526345272052807
T:
k298
718987199672095
T:
k277mon
114609114914115260
T:
jacfp128bk
117372117458117654
T:
kummer
117869118138118409
T:
kumfp127g
119346119557119793
T:
kumjacfp127g
136200136304136421
T:
curve2251
139817140493140773
T:
prjfp128bk
144227144683145060
T:
hecfp128bk
149492150086150513
T:
hecfp128fkt
156482157523157675
T:
kumfp128g
166369166680168382
T:
curve25519
170456174389179567
T:
gls1271
175297175689176220
T:
jacfp127i
188927189091189261
T:
ecfp256e
197492198104198472
T:
ecfp256i
200258200519200946
T:
ecfp256q
220099221334222075
T:
prjfp127i
223633224398225414
T:
hecfp127i
230045230294230615
T:
ecfp256h
264611265753266773
T:
ecfp256s
321599322196323865
T:
hecfp128i
351715358880361851
T:
sclaus1024
836241840263847746
T:
nistp256
855852863493867518
T:
ed448goldilocks
134555013596731366804
T:
ed521gs
149677015052051518664
T:
nist521gs
199303920044222011588
T:
claus
224617022517722269898
T:
sclaus2048

amd64; Golden Cove (90675-00); 2022 Intel Core i3-12100; 4 x 3300MHz; alder, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
165541715418632
T:
kumjacfp127g
178731913220606
T:
jacfp127i
206442160222980
T:
prjfp127i
208792197023266
T:
hecfp127i
236822485225609
T:
jacfp128bk
270422833429906
T:
prjfp128bk
275392863530343
T:
hecfp128bk
276262889830471
T:
hecfp128fkt
281412942130789
T:
hecfp128i
296803005930564
T:
gls254
302043066331577
T:
ecfp256h
303013087031703
T:
ecfp256e
310293107531123
T:
gls254prot
330013309633269
T:
curve2251
338303445435406
T:
ecfp256s
353373572936661
T:
ecfp256q
382613831138368
T:
k277taa
421994226942333
T:
k298
501395075751396
T:
gls1271
511055114451223
T:
kummer
606286070560782
T:
k277mon
636476380564009
T:
kumfp127g
799668016480412
T:
kumfp128g
105376105760106060
T:
curve25519
121161126234130975
T:
surf127eps
134468135274136133
T:
ecfp256i
139264139657139962
T:
ed448goldilocks
165829?168400?262328?
T:
sclaus1024
177193178028179834
T:
nistp256
340314342052343470
T:
surf2113
600416604624611611
T:
ed521gs
769937773191777640
T:
nist521gs
876918884215889409
T:
sclaus2048
922652923443924178
T:
claus
Cycles to compute a shared secret
25%50%75%system
290012904329092
T:
gls254
309443098831041
T:
gls254prot
381893823538276
T:
k277taa
420164206542116
T:
k298
510485109951157
T:
kummer
605376060660687
T:
k277mon
659906631666465
T:
kumfp127g
664256662066774
T:
jacfp128bk
668676731967421
T:
kumjacfp127g
757917589576039
T:
prjfp128bk
773777765078110
T:
hecfp128bk
803258049880629
T:
hecfp128fkt
846328494385337
T:
kumfp128g
100947101275101636
T:
jacfp127i
105823106855107893
T:
curve25519
111991116142121509
T:
surf127eps
120277120571123421
T:
prjfp127i
120668120787120895
T:
hecfp127i
122929123238123539
T:
ecfp256e
123258124177126139
T:
gls1271
128431128558128824
T:
ecfp256i
132015133112134033
T:
curve2251
135400135931136536
T:
ecfp256q
146381146672147137
T:
ecfp256h
165754?167234?266560?
T:
sclaus1024
167874168110170018
T:
hecfp128i
184976187762188067
T:
ecfp256s
334385336801339321
T:
surf2113
408515408971409746
T:
ed448goldilocks
438319439835441388
T:
nistp256
599179603498609165
T:
ed521gs
769508774415778048
T:
nist521gs
882759891553895768
T:
sclaus2048
919977920695921335
T:
claus

amd64; Zen 2 (860f01); 2022 AMD Ryzen 5 4500U; 6 x 3600MHz; renoir, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
210762240624073
T:
jacfp127i
220002318324597
T:
kumjacfp127g
233402457326461
T:
prjfp127i
245432577627608
T:
hecfp127i
296723073532648
T:
jacfp128bk
341843513936828
T:
ecfp256e
338693519836987
T:
hecfp128i
336913530737014
T:
hecfp128bk
350283619337013
T:
prjfp128bk
357603679337550
T:
hecfp128fkt
353043684240653
T:
ecfp256h
375453909441912
T:
ecfp256s
393854008842578
T:
curve2251
391934055443977
T:
ecfp256q
422794253843418
T:
gls254
438454391043973
T:
gls254prot
536495366253673
T:
k277taa
591095913559157
T:
kummer
615306220463034
T:
gls1271
640276406264131
T:
k298
821178217282233
T:
kumfp127g
865988659886608
T:
k277mon
109229109289109345
T:
kumfp128g
134344134429134616
T:
curve25519
144723145257145567
T:
surf127eps
158760159158159794
T:
ed448goldilocks
158774159658160415
T:
ecfp256i
164045165954167199
T:
sclaus1024
235682235879236919
T:
nistp256
441377443259444850
T:
surf2113
848924849277851955
T:
ed521gs
851076856973863798
T:
sclaus2048
941076941795942476
T:
nist521gs
9810359858181110427
T:
claus
Cycles to compute a shared secret
25%50%75%system
413874143941443
T:
gls254
437394380043885
T:
gls254prot
535975359853607
T:
k277taa
590785912259146
T:
kummer
639236397064001
T:
k298
836208362084233
T:
kumfp127g
846368469984796
T:
jacfp128bk
852568540785953
T:
kumjacfp127g
865778658386583
T:
k277mon
992109932299382
T:
prjfp128bk
102195102533102569
T:
hecfp128bk
106141106235106308
T:
hecfp128fkt
114801114874114882
T:
kumfp128g
128360128463128524
T:
jacfp127i
134246134330134450
T:
curve25519
141618141758141917
T:
surf127eps
146442146527146571
T:
ecfp256e
147185152286153078
T:
gls1271
155324155419155572
T:
ecfp256i
154623155617157646
T:
curve2251
156596156632156956
T:
ecfp256q
160093160121160134
T:
prjfp127i
163350163470163764
T:
hecfp127i
159446165876167798
T:
sclaus1024
179532179703179811
T:
ecfp256h
212186212368212714
T:
ecfp256s
225631225828226073
T:
hecfp128i
440838441852443929
T:
surf2113
482708483954485446
T:
ed448goldilocks
598479600925601653
T:
nistp256
848923849281849867
T:
ed521gs
855145857382881542
T:
sclaus2048
941271941579942139
T:
nist521gs
9727059828281113588
T:
claus

amd64; Zen 3 (a50f00); 2021 AMD Ryzen 5 PRO 5650G; 6 x 3900MHz; cezanne, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
248322631928320
T:
jacfp127i
255932705729404
T:
kumjacfp127g
284373063432975
T:
hecfp127i
294603107733261
T:
prjfp127i
310693268434644
T:
jacfp128bk
324663409737234
T:
ecfp256e
334383496439777
T:
curve2251
353313752742927
T:
ecfp256h
373403768138240
T:
gls254
365943826040958
T:
hecfp128bk
383043834238410
T:
gls254prot
371153894741175
T:
hecfp128fkt
371013897141023
T:
hecfp128i
380733967141162
T:
prjfp128bk
373913971845088
T:
ecfp256s
396894178147856
T:
ecfp256q
47320?47571?63058?
T:
kummer
478334787947917
T:
k277taa
532615384554545
T:
gls1271
541445428254953
T:
k298
756247568675750
T:
k277mon
814518152281592
T:
kumfp127g
102457102532102636
T:
curve25519
105138105201105291
T:
kumfp128g
139569140222140661
T:
surf127eps
149324150229151132
T:
ecfp256i
158424159015159244
T:
ed448goldilocks
198788200592202561
T:
sclaus1024
219127219451220810
T:
nistp256
356298358577359272
T:
surf2113
754905756019756339
T:
ed521gs
903967905662908918
T:
nist521gs
100698610132041021320
T:
sclaus2048
102177010230281037110
T:
claus
Cycles to compute a shared secret
25%50%75%system
355583573935761
T:
gls254
382423825338369
T:
gls254prot
472084724847668
T:
kummer
477124779047868
T:
k277taa
539535402054091
T:
k298
756027566575704
T:
k277mon
811758137281416
T:
jacfp128bk
839118399384058
T:
kumfp127g
858448593286008
T:
kumjacfp127g
104442104577104705
T:
prjfp128bk
107125107390107463
T:
hecfp128bk
109696109796109803
T:
kumfp128g
110728110809110878
T:
curve25519
111443111638111970
T:
hecfp128fkt
130635130720130819
T:
curve2251
131604131727131823
T:
jacfp127i
129538132653133352
T:
gls1271
134811135322135360
T:
ecfp256e
136028136724137151
T:
surf127eps
143518143643143958
T:
ecfp256i
145950146542146595
T:
ecfp256q
164201165616167003
T:
ecfp256h
174929175381176507
T:
prjfp127i
177921178097178511
T:
hecfp127i
201445202008208793
T:
sclaus1024
202053204348204513
T:
ecfp256s
237788237838239003
T:
hecfp128i
353823353978354225
T:
surf2113
528468528564529054
T:
ed448goldilocks
577368580943581584
T:
nistp256
753753754434755425
T:
ed521gs
907407909076910054
T:
nist521gs
100375910122251025182
T:
sclaus2048
101895610206271032663
T:
claus

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
337343515539802
T:
curve2251
378263799538008
T:
gls254prot
372723827438659
T:
gls254
467504677046841
T:
k277taa
476974775247905
T:
kummer
527445287253245
T:
k298
540195499656224
T:
gls1271
736497369373773
T:
k277mon
102507102661102824
T:
curve25519
139792140126140514
T:
surf127eps
156767157050157379
T:
ed448goldilocks
200647202727204578
T:
sclaus1024
209722210036210198
T:
nistp256
367234369072370210
T:
surf2113
757107758860764001
T:
ed521gs
872057875803876158
T:
nist521gs
100644510150731020480
T:
sclaus2048
119862812011361204247
T:
claus
Cycles to compute a shared secret
25%50%75%system
353323536835374
T:
gls254
378513789837931
T:
gls254prot
467024674546836
T:
k277taa
478424789748070
T:
kummer
525905267552753
T:
k298
736187368873725
T:
k277mon
110876110972111112
T:
curve25519
126036129335132317
T:
gls1271
129803131087131198
T:
curve2251
135835136451136730
T:
surf127eps
202626205515206705
T:
sclaus1024
363140363460363827
T:
surf2113
517434518481518742
T:
ed448goldilocks
563375563907564446
T:
nistp256
758675758870760360
T:
ed521gs
872278873146874983
T:
nist521gs
101862610200251021087
T:
sclaus2048
119823611998721202629
T:
claus

amd64; Zen 2 (860f81); 2021 AMD Ryzen 3 5300U; 4 x 2600MHz; lucienne, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
218602315324865
T:
jacfp127i
221592338125324
T:
kumjacfp127g
238692501127108
T:
prjfp127i
246632611927846
T:
hecfp127i
298573125932988
T:
jacfp128bk
331113424336434
T:
prjfp128bk
338353526237360
T:
hecfp128fkt
345173558838177
T:
ecfp256e
339783561537218
T:
hecfp128bk
341683584937640
T:
hecfp128i
354623688841201
T:
ecfp256h
375823908042620
T:
ecfp256s
394703992641736
T:
curve2251
393604077645535
T:
ecfp256q
433634383944150
T:
gls254
438494387143932
T:
gls254prot
536375365553687
T:
k277taa
590295908859119
T:
kummer
603936105461706
T:
gls1271
638336387963983
T:
k298
821168217982235
T:
kumfp127g
865958660386633
T:
k277mon
109267109318109384
T:
kumfp128g
135026135032135242
T:
curve25519
145271145861146219
T:
surf127eps
158951159564160439
T:
ed448goldilocks
159030159790160748
T:
ecfp256i
164192165878167446
T:
sclaus1024
236364237243237378
T:
nistp256
441227443331444647
T:
surf2113
818008818666819334
T:
ed521gs
847393853072861930
T:
sclaus2048
941990944873945634
T:
nist521gs
976902979240982229
T:
claus
Cycles to compute a shared secret
25%50%75%system
413794138141432
T:
gls254
437554375543765
T:
gls254prot
535985361853625
T:
k277taa
589975902259032
T:
kummer
637386377663822
T:
k298
835728363383743
T:
kumfp127g
843778445084762
T:
jacfp128bk
854248550985988
T:
kumjacfp127g
865678658386583
T:
k277mon
990589914299231
T:
prjfp128bk
102575102674102751
T:
hecfp128bk
106113106175106252
T:
hecfp128fkt
114773114961115016
T:
kumfp128g
128437128502128597
T:
jacfp127i
135039135183136289
T:
curve25519
140195142198142396
T:
surf127eps
146694146718146944
T:
ecfp256e
148418148866151322
T:
gls1271
155527155554156590
T:
ecfp256i
157144157185157344
T:
ecfp256q
156901157359157591
T:
curve2251
159803160176160431
T:
prjfp127i
163135163338163512
T:
hecfp127i
164715164896166415
T:
sclaus1024
180436180913181024
T:
ecfp256h
212586212747212840
T:
ecfp256s
226066226103226255
T:
hecfp128i
443136443962444956
T:
surf2113
481367481713484137
T:
ed448goldilocks
596033597706598345
T:
nistp256
817237817822818578
T:
ed521gs
844235849161855888
T:
sclaus2048
943541944278945866
T:
nist521gs
979030979226981562
T:
claus

amd64; Tremont (906c0); 2021 Intel Pentium Silver N6000; 4 x 1100MHz; jasper, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
352123571036454
T:
jacfp127i
363683678237557
T:
kumjacfp127g
427524332244190
T:
hecfp127i
426314357244893
T:
prjfp127i
490654921049980
T:
curve2251
502445071951387
T:
jacfp128bk
536515382854091
T:
gls254
539685450855226
T:
ecfp256e
553295539355539
T:
gls254prot
598396057061760
T:
ecfp256h
599906101262533
T:
prjfp128bk
602596107262237
T:
ecfp256s
606206113261710
T:
hecfp128fkt
606946165262913
T:
hecfp128bk
610286213963861
T:
hecfp128i
641656477566000
T:
ecfp256q
676886779867957
T:
k277taa
740477514676315
T:
k298
986349891899122
T:
k277mon
100244101430102431
T:
gls1271
153511153595153881
T:
kumfp127g
219062220616221014
T:
kumfp128g
240308240830241214
T:
curve25519
281236283449285457
T:
surf127eps
290180292031293924
T:
ecfp256i
304500304930305390
T:
ed448goldilocks
319545319819320636
T:
kummer
327399330459333953
T:
sclaus1024
342179342695343272
T:
nistp256
597274599956601514
T:
surf2113
174737317493661751054
T:
ed521gs
175988017749121784273
T:
sclaus2048
196616419718631977367
T:
claus
197677519780211980531
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
529075297253045
T:
gls254
552685532355400
T:
gls254prot
675846767067776
T:
k277taa
731037347374870
T:
k298
987389892799074
T:
k277mon
156978157094157290
T:
kumfp127g
158884159014159193
T:
kumjacfp127g
158472159503160140
T:
jacfp128bk
192442192932193633
T:
curve2251
201496202289203276
T:
prjfp128bk
206269206637207222
T:
hecfp128bk
214480214725215270
T:
hecfp128fkt
226665226908227151
T:
kumfp128g
239875240543241406
T:
jacfp127i
240471240776241011
T:
curve25519
246843248837254432
T:
gls1271
265926266382266672
T:
ecfp256e
277880278349279226
T:
ecfp256q
278706281470284386
T:
surf127eps
289974291359291782
T:
ecfp256i
312155312871313651
T:
prjfp127i
319656320635329043
T:
kummer
321578321876322561
T:
hecfp127i
327572332819343996
T:
sclaus1024
340746341017341443
T:
ecfp256h
355887356480356938
T:
ecfp256s
462621462984463871
T:
hecfp128i
597395598354599497
T:
surf2113
100317710038431007591
T:
ed448goldilocks
118591311867831203354
T:
nistp256
174779717488981750281
T:
ed521gs
172737917489921774102
T:
sclaus2048
195905219664181976661
T:
claus
197270819745061976316
T:
nist521gs

amd64; Tremont (906c0); 2021 Intel Celeron N5105; 4 x 2000MHz; jasper3, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
363473700838467
T:
jacfp127i
366933787639122
T:
kumjacfp127g
430964426245444
T:
hecfp127i
463654674447667
T:
prjfp127i
489394914250160
T:
curve2251
524125305553611
T:
gls254
523735323954172
T:
jacfp128bk
539655483456003
T:
ecfp256e
551835526955368
T:
gls254prot
597416075862539
T:
ecfp256h
613456244664730
T:
hecfp128i
606576259664623
T:
prjfp128bk
617996307865072
T:
hecfp128bk
623666415566429
T:
hecfp128fkt
636796446465637
T:
ecfp256s
666296723268282
T:
ecfp256q
676546777167975
T:
k277taa
750547607878012
T:
k298
967419790398921
T:
gls1271
987039893299165
T:
k277mon
153700154108154528
T:
kumfp127g
219498220535221066
T:
kumfp128g
239927240728241080
T:
curve25519
277218279451281250
T:
surf127eps
289304290689292846
T:
ecfp256i
303897304635305469
T:
ed448goldilocks
319636319923320504
T:
kummer
327664330996333729
T:
sclaus1024
340452340781341144
T:
nistp256
597253600361601463
T:
surf2113
174202017444851746580
T:
ed521gs
176211317741741785920
T:
sclaus2048
196946319737061978968
T:
claus
197373619759431977764
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
512775171252394
T:
gls254
551035514555224
T:
gls254prot
674886757967687
T:
k277taa
742047499176160
T:
k298
986829886099027
T:
k277mon
156628157111157596
T:
kumfp127g
158820159357160010
T:
jacfp128bk
159600159855160163
T:
kumjacfp127g
191848192697193570
T:
curve2251
198588199407200742
T:
prjfp128bk
206235207713208098
T:
hecfp128bk
213658214555215632
T:
hecfp128fkt
226868227086227541
T:
kumfp128g
239944240331240880
T:
curve25519
240836241169241744
T:
jacfp127i
243027244024245993
T:
gls1271
265770266184266474
T:
ecfp256e
274153275227275627
T:
surf127eps
277851278092278731
T:
ecfp256q
287134287588288125
T:
ecfp256i
312016313179314736
T:
prjfp127i
319638319848320202
T:
kummer
321853322050322507
T:
hecfp127i
330156331003333257
T:
sclaus1024
340642340821341436
T:
ecfp256h
356034356677357346
T:
ecfp256s
462423462742463410
T:
hecfp128i
596559598236599311
T:
surf2113
100304210031211003592
T:
ed448goldilocks
117661811778281179128
T:
nistp256
174229817449791747320
T:
ed521gs
175705917610351776781
T:
sclaus2048
196952019709181972307
T:
nist521gs
197273719758681977939
T:
claus

amd64; Tremont (906c0); 2021 Intel Celeron N4500; 2 x 1100MHz; jasper2, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
347283533636242
T:
jacfp127i
369783735238118
T:
kumjacfp127g
408694191343244
T:
prjfp127i
430294414945813
T:
hecfp127i
490924920249993
T:
curve2251
500325045051147
T:
jacfp128bk
522005291353567
T:
gls254
541845460155390
T:
ecfp256e
554845609756761
T:
gls254prot
596906046161565
T:
ecfp256h
598446069362252
T:
prjfp128bk
599846097762847
T:
hecfp128bk
602396104862165
T:
ecfp256s
603706136663679
T:
hecfp128i
610866218663343
T:
hecfp128fkt
638506462565666
T:
ecfp256q
677456784267972
T:
k277taa
743357500375731
T:
k298
987239895699207
T:
k277mon
98698100102101146
T:
gls1271
153519153598153672
T:
kumfp127g
218829220673221153
T:
kumfp128g
240066240846241106
T:
curve25519
277112279221281300
T:
surf127eps
288957290437292450
T:
ecfp256i
304177304853305612
T:
ed448goldilocks
319716320223320686
T:
kummer
326929330122333234
T:
sclaus1024
342528344695347433
T:
nistp256
597638600236601493
T:
surf2113
174664017479711749542
T:
ed521gs
176243817759171783537
T:
sclaus2048
196704519756072021002
T:
claus
197599019780951980902
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
514195181452477
T:
gls254
553675585756560
T:
gls254prot
675596764467727
T:
k277taa
737117412374891
T:
k298
987869889299042
T:
k277mon
156955157036157154
T:
kumfp127g
159110159519160050
T:
jacfp128bk
159404159798160060
T:
kumjacfp127g
192998193421193504
T:
curve2251
200478200882201684
T:
prjfp128bk
205007205787206664
T:
hecfp128bk
213221214955215981
T:
hecfp128fkt
226586227061227570
T:
kumfp128g
239944240264240914
T:
curve25519
240523240772241287
T:
jacfp127i
239259244839245563
T:
gls1271
265829266471266916
T:
ecfp256e
270244272024274122
T:
surf127eps
277654278094278684
T:
ecfp256q
287602287773288046
T:
ecfp256i
312082312914313829
T:
prjfp127i
319461319776320285
T:
kummer
322814323043323899
T:
hecfp127i
333681336784338124
T:
sclaus1024
340837340996341405
T:
ecfp256h
355862356492357165
T:
ecfp256s
462209462580463657
T:
hecfp128i
594691598400599302
T:
surf2113
100324310041171004784
T:
ed448goldilocks
118601511912721194543
T:
nistp256
174642017485371750327
T:
ed521gs
176119017630451766312
T:
sclaus2048
197628419770041978977
T:
nist521gs
196753419778602021458
T:
claus

aarch64; Firestorm (610f0230); 2020 Apple M1; 4 x 3200MHz; unstable; minimac, supercop-20211108

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
103596?106662?191459?
T:
kummer
106662?107063?196792?
T:
curve25519
159594?159860?261590?
T:
nistp256
489848?492114?801969?
T:
ed521gs
667441?668907?980761?
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
103063?103996?168927?
T:
kummer
106662?107062?174526?
T:
curve25519
424383?424783?622109?
T:
nistp256
489847?490248?656374?
T:
ed521gs
666774667574780236
T:
nist521gs

amd64; Zen 3 (a20f10); 2020 AMD Ryzen 9 5950X; 16 x 3400MHz; zen3, supercop-20220213

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
335503433637499
T:
curve2251
363653651337501
T:
gls254
379363793737952
T:
gls254prot
467334679546877
T:
k277taa
490954914549182
T:
kummer
538025436254972
T:
gls1271
622176235462808
T:
k298
730897320373278
T:
k277mon
102285102373102495
T:
curve25519
140529141187141634
T:
surf127eps
159195159496159723
T:
ed448goldilocks
207217208665210377
T:
sclaus1024
222820223237223320
T:
nistp256
367798369470370460
T:
surf2113
716599719778729310
T:
ed521gs
880981882015884294
T:
nist521gs
101912710197971023602
T:
claus
101372810214011029771
T:
sclaus2048
Cycles to compute a shared secret
25%50%75%system
352643534135442
T:
gls254
378543788537886
T:
gls254prot
466344671746804
T:
k277taa
491034913949166
T:
kummer
620926218162313
T:
k298
730317308673130
T:
k277mon
110825110904110991
T:
curve25519
129784130071131187
T:
curve2251
129270130535131907
T:
gls1271
137060138423138483
T:
surf127eps
208043208798210458
T:
sclaus1024
364367365479366016
T:
surf2113
525993526466527032
T:
ed448goldilocks
600802602448603146
T:
nistp256
716085717688727485
T:
ed521gs
883003884791887358
T:
nist521gs
101633910172241018546
T:
claus
100114110280561029316
T:
sclaus2048

amd64; Zen (820f01); 2020 AMD Athlon Silver 3050e; 2 x 1400MHz; dali, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
266072724428111
T:
kumjacfp127g
270632775528822
T:
jacfp127i
302283075931536
T:
prjfp127i
307683148232095
T:
hecfp127i
355583647037399
T:
jacfp128bk
386513947441378
T:
ecfp256e
387583961440940
T:
hecfp128fkt
389693969941144
T:
hecfp128bk
389883979040683
T:
prjfp128bk
391834001141136
T:
hecfp128i
399164046442145
T:
curve2251
423154390247011
T:
ecfp256h
439074405944265
T:
gls254
447484478744802
T:
gls254prot
440584523548173
T:
ecfp256s
456514708650338
T:
ecfp256q
557685594856157
T:
k277taa
645286460364957
T:
k298
649316569766476
T:
gls1271
897498981689856
T:
k277mon
101113101214101222
T:
kummer
101689101767101856
T:
kumfp127g
132939133083133194
T:
kumfp128g
144528144540144574
T:
curve25519
185677186691188143
T:
ecfp256i
186370187189187737
T:
surf127eps
198212200288202200
T:
sclaus1024
202514202766203234
T:
ed448goldilocks
272844273150273512
T:
nistp256
454035456379457078
T:
surf2113
929770931778933881
T:
ed521gs
9888639965101002525
T:
sclaus2048
110495911072591109608
T:
nist521gs
117677411791511182408
T:
claus
Cycles to compute a shared secret
25%50%75%system
423234234242357
T:
gls254
446994472144745
T:
gls254prot
557515648356641
T:
k277taa
644706462764808
T:
k298
896978977989781
T:
k277mon
101060101183101184
T:
kummer
103549103680103772
T:
jacfp128bk
104491104509104541
T:
kumfp127g
106261106452106455
T:
kumjacfp127g
126314126413126501
T:
prjfp128bk
129281129379129510
T:
hecfp128bk
134053134112134324
T:
hecfp128fkt
138310138869139190
T:
kumfp128g
157273157519159043
T:
curve25519
160237160523160792
T:
curve2251
162389162959163250
T:
jacfp127i
163376164311166630
T:
gls1271
173565173678173849
T:
ecfp256e
183297183398183534
T:
ecfp256q
183363183566183857
T:
ecfp256i
183671184370184905
T:
surf127eps
198810199549201335
T:
sclaus1024
203399203607203784
T:
prjfp127i
207235207374207644
T:
hecfp127i
215797215915216071
T:
ecfp256h
236050236276236478
T:
ecfp256s
285610285823286117
T:
hecfp128i
451977453532453706
T:
surf2113
590731591961594451
T:
ed448goldilocks
670940671560672718
T:
nistp256
929059931584935268
T:
ed521gs
9843759994181014114
T:
sclaus2048
110550211069831108599
T:
nist521gs
117523211798421187731
T:
claus

amd64; Tiger Lake (806c1); 2020 Intel Core i7-1165G7; 4 x 2800MHz; panther, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
193772052221936
T:
jacfp127i
199972066921698
T:
kumjacfp127g
237392480126792
T:
prjfp127i
241112531027073
T:
hecfp127i
297893028431035
T:
gls254
316753174631839
T:
gls254prot
307433176833089
T:
jacfp128bk
356093582937206
T:
curve2251
353333624938128
T:
prjfp128bk
365903723638908
T:
ecfp256e
365913814942104
T:
hecfp128fkt
363113832041449
T:
hecfp128i
365873838342540
T:
hecfp128bk
376043839140298
T:
ecfp256h
383553843838525
T:
k277taa
405074164843091
T:
ecfp256s
425064256942682
T:
k298
428604383445823
T:
ecfp256q
484664852248594
T:
kummer
549945505655120
T:
k277mon
626466364164511
T:
gls1271
791697932279488
T:
kumfp127g
116284116418116543
T:
kumfp128g
121034121181121623
T:
curve25519
144188144795145160
T:
ed448goldilocks
168660169883170866
T:
surf127eps
175662176672178088
T:
ecfp256i
209961212287214252
T:
sclaus1024
221684223102223905
T:
nistp256
404625406423408608
T:
surf2113
793813795378798193
T:
ed521gs
966663971206974419
T:
nist521gs
105737610589981082541
T:
claus
107036010766171085588
T:
sclaus2048
Cycles to compute a shared secret
25%50%75%system
288612891628962
T:
gls254
315653160631646
T:
gls254prot
381643827038315
T:
k277taa
421604223842327
T:
k298
483384842748511
T:
kummer
549275497855040
T:
k277mon
818938202382204
T:
kumfp127g
821588238982641
T:
kumjacfp127g
930569334693640
T:
jacfp128bk
111748112079112423
T:
prjfp128bk
114349114907115564
T:
hecfp128bk
119132119517119841
T:
hecfp128fkt
122458122606123064
T:
kumfp128g
122342122852123344
T:
jacfp127i
129927130087130463
T:
curve25519
140868141157141382
T:
curve2251
153151153589155638
T:
prjfp127i
153344154337156912
T:
gls1271
154764154993155272
T:
hecfp127i
159665159838160070
T:
ecfp256e
165969167566168352
T:
surf127eps
168370168796169183
T:
ecfp256i
169976170214170495
T:
ecfp256q
193933194317194971
T:
ecfp256h
214906215823217848
T:
sclaus1024
232819233254233833
T:
ecfp256s
252166252508252929
T:
hecfp128i
409562416403418132
T:
surf2113
457039457626458434
T:
ed448goldilocks
577691579522581430
T:
nistp256
793510794828797381
T:
ed521gs
969352975023978790
T:
nist521gs
105348810545291078190
T:
claus
107095910737541081170
T:
sclaus2048

aarch64; Cortex-A72 (410fd083); 2019 Broadcom BCM2711; 4 x 1500MHz; pi4b, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
248671248718248899
T:
kummer
349428350528350530
T:
curve25519
369706373763373894
T:
nistp256
421516423228424835
T:
surf127eps
596586601454607959
T:
sclaus1024
195658119578831967423
T:
ed521gs
239786524092292436610
T:
nist521gs
298578730084743033932
T:
sclaus2048
359854636082593626566
T:
claus
Cycles to compute a shared secret
25%50%75%system
248844248852249089
T:
kummer
350476351136351136
T:
curve25519
401757407720409762
T:
surf127eps
595686604209604345
T:
sclaus1024
129635213075201307797
T:
nistp256
195722819576121974231
T:
ed521gs
239671324073692430056
T:
nist521gs
295991329935833008120
T:
sclaus2048
360263136109603620952
T:
claus

amd64; Zen 2 (830f10); 2019 AMD EPYC 7742; 64 x 2250MHz; rome0, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
233812479426683
T:
jacfp127i
284433149134512
T:
prjfp127i
26642?31927?33957?
T:
kumjacfp127g
290313258435384
T:
hecfp127i
314793278234233
T:
jacfp128bk
364983849440731
T:
hecfp128i
381083971343642
T:
prjfp128bk
376634022544533
T:
ecfp256e
398434103345574
T:
curve2251
434984372144036
T:
gls254
416394376146268
T:
hecfp128fkt
441004411144137
T:
gls254prot
432254475345997
T:
hecfp128bk
40937?45262?52902?
T:
ecfp256h
42957?48292?54783?
T:
ecfp256s
45458?49886?58015?
T:
ecfp256q
538325384253875
T:
k277taa
590375909759134
T:
kummer
618976264263258
T:
gls1271
633336338865781
T:
k298
821378221082278
T:
kumfp127g
860468604686047
T:
k277mon
109269109311109373
T:
kumfp128g
135092135487136495
T:
curve25519
144712145169145513
T:
surf127eps
158540158920159307
T:
ed448goldilocks
159162159978160873
T:
ecfp256i
163948165913167554
T:
sclaus1024
237185237401238241
T:
nistp256
442008443816444732
T:
surf2113
818874820219821358
T:
ed521gs
852563860029865672
T:
sclaus2048
943038943946944925
T:
nist521gs
975682978856982883
T:
claus
Cycles to compute a shared secret
25%50%75%system
413664139841402
T:
gls254
440504405844063
T:
gls254prot
538495389553911
T:
k277taa
589865900959181
T:
kummer
632166324863283
T:
k298
835658362083870
T:
kumfp127g
851698527785324
T:
jacfp128bk
853838546986508
T:
kumjacfp127g
860018600186001
T:
k277mon
992189927199385
T:
prjfp128bk
102376102557102779
T:
hecfp128bk
105792105880106139
T:
hecfp128fkt
114863114941114985
T:
kumfp128g
128309128347128413
T:
jacfp127i
135133135175135567
T:
curve25519
141471141692141857
T:
surf127eps
146988147067147136
T:
ecfp256e
149599150728150974
T:
gls1271
155605155780156684
T:
ecfp256i
156186156929156983
T:
curve2251
157100157126157229
T:
ecfp256q
160031160069160564
T:
prjfp127i
163425163482163584
T:
hecfp127i
165637166461167104
T:
sclaus1024
180325180392180514
T:
ecfp256h
212533212688212845
T:
ecfp256s
226013226281226567
T:
hecfp128i
440123441818443280
T:
surf2113
479969483163483628
T:
ed448goldilocks
600088600480600761
T:
nistp256
817687818474820028
T:
ed521gs
865114876035877411
T:
sclaus2048
942875944233945197
T:
nist521gs
974645977405985095
T:
claus

amd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; comet, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
220872272923578
T:
kumjacfp127g
229932364824394
T:
jacfp127i
248622582327187
T:
hecfp127i
259532667127450
T:
prjfp127i
305903149132328
T:
jacfp128bk
353203574737053
T:
hecfp128bk
356513622437308
T:
prjfp128bk
354283652137739
T:
hecfp128i
355093665137879
T:
hecfp128fkt
372013747137858
T:
gls254
382693883639693
T:
curve2251
390613909839147
T:
gls254prot
426224325544819
T:
ecfp256e
458864629346331
T:
k277taa
457814651048513
T:
ecfp256h
465354728148865
T:
ecfp256s
485394940451762
T:
ecfp256q
533405340353487
T:
kummer
540865419554408
T:
k298
699217076271611
T:
gls1271
703657172172298
T:
k277mon
801728033480837
T:
kumfp127g
110459112797112885
T:
kumfp128g
126478126705126951
T:
curve25519
153511153752153969
T:
ed448goldilocks
177698179528181105
T:
sclaus1024
184190187033187854
T:
surf127eps
193171194339195384
T:
ecfp256i
235513236319237024
T:
nistp256
257327264420276371
T:
hector
504448506315507508
T:
surf2113
816517817163818623
T:
ed521gs
912497922458965766
T:
sclaus2048
968400969442976609
T:
claus
978281979937982372
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
361393619836292
T:
gls254
388663890538970
T:
gls254prot
456864607046105
T:
k277taa
532145328653350
T:
kummer
533315342253526
T:
k298
716157172072960
T:
k277mon
824138257182926
T:
kumfp127g
837608383283916
T:
kumjacfp127g
877598863888750
T:
jacfp128bk
110049110170110306
T:
prjfp128bk
111754113508113683
T:
hecfp128bk
117705117839118009
T:
hecfp128fkt
115643118020118098
T:
kumfp128g
123877123954124056
T:
jacfp127i
136171136590137443
T:
curve25519
143766144005144139
T:
curve2251
164951165088165284
T:
prjfp127i
167015167139167307
T:
hecfp127i
172057174412176158
T:
gls1271
176261176554176754
T:
ecfp256e
175382179286179682
T:
sclaus1024
179904182356183419
T:
surf127eps
188785188924189112
T:
ecfp256i
189218189401189596
T:
ecfp256q
222261222399222597
T:
ecfp256h
241189241361241534
T:
ecfp256s
252566252783252987
T:
hecfp128i
458517458832459161
T:
ed448goldilocks
504878505329505736
T:
surf2113
584151585057587562
T:
nistp256
817024822628837240
T:
ed521gs
873090878162884112
T:
hector
930086953186968792
T:
sclaus2048
965273965981973616
T:
claus
978963980355982574
T:
nist521gs

amd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; cubi10, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
210942133822195
T:
kumjacfp127g
218772255623506
T:
jacfp127i
250032575626747
T:
prjfp127i
258272665327461
T:
hecfp127i
303323125531948
T:
jacfp128bk
360833676937578
T:
prjfp128bk
364213708637900
T:
hecfp128fkt
366173737838025
T:
hecfp128i
371933739337755
T:
gls254
379733821439006
T:
curve2251
376953844739322
T:
hecfp128bk
391753922139276
T:
gls254prot
426774335944504
T:
ecfp256e
463254636546403
T:
k277taa
461414664248155
T:
ecfp256h
467584751548837
T:
ecfp256s
487384958751073
T:
ecfp256q
530075319053458
T:
k298
530905321954032
T:
kummer
695207040671340
T:
gls1271
710797117672250
T:
k277mon
797197978779904
T:
kumfp127g
110563112701112823
T:
kumfp128g
126502126667126864
T:
curve25519
152353152801153184
T:
ed448goldilocks
184763187380188621
T:
surf127eps
195042196263197698
T:
ecfp256i
179273199571212418
T:
sclaus1024
233359233547233856
T:
nistp256
506058508728510759
T:
surf2113
822632823362825364
T:
ed521gs
896315905065943699
T:
sclaus2048
954726955363956700
T:
nist521gs
977057979328983678
T:
claus
Cycles to compute a shared secret
25%50%75%system
361873624036285
T:
gls254
389493899939047
T:
gls254prot
456014610246164
T:
k277taa
528365292653082
T:
k298
530545393854044
T:
kummer
709737105772133
T:
k277mon
821088218482321
T:
kumfp127g
835708418784464
T:
kumjacfp127g
888578896089111
T:
jacfp128bk
110315110601111233
T:
prjfp128bk
113276114239114714
T:
hecfp128bk
117769117903118103
T:
hecfp128fkt
117986118058118208
T:
kumfp128g
125502125711125838
T:
jacfp127i
136032136529136750
T:
curve25519
141908143720144219
T:
curve2251
165515166629166866
T:
prjfp127i
168953169102169366
T:
hecfp127i
175958176463177947
T:
gls1271
176692179148179583
T:
ecfp256e
180782184298184910
T:
surf127eps
187749187980188323
T:
ecfp256q
190579190895191380
T:
ecfp256i
179715191756206319
T:
sclaus1024
225222225456225866
T:
ecfp256h
242629242848243319
T:
ecfp256s
253186253386253810
T:
hecfp128i
456929457198457536
T:
ed448goldilocks
501297507296508561
T:
surf2113
587668588245588824
T:
nistp256
823193825667828477
T:
ed521gs
906627912047939282
T:
sclaus2048
954535955039957274
T:
nist521gs
9735349764141024280
T:
claus

amd64; Ice Lake (706e5); 2019 Intel Core i3-1035G1; 4 x 1000MHz; icelake2, supercop-20221005

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
294222962629829
T:
gls254
315353159731656
T:
gls254prot
356823592536460
T:
curve2251
383873849338628
T:
k277taa
419144215642522
T:
k298
496314972949925
T:
kummer
551485524155618
T:
k277mon
635416461665455
T:
gls1271
121235121421121705
T:
curve25519
145378145817146240
T:
ed448goldilocks
167451169019171086
T:
surf127eps
210381213080215609
T:
sclaus1024
229401230861233076
T:
nistp256
393994396192398488
T:
surf2113
794593796389798799
T:
ed521gs
960681964206967325
T:
nist521gs
107529210887261104624
T:
sclaus2048
126261112669811272519
T:
claus
Cycles to compute a shared secret
25%50%75%system
288282887928947
T:
gls254
314583151831670
T:
gls254prot
382633836838587
T:
k277taa
415914182342184
T:
k298
495244961549793
T:
kummer
550675515755384
T:
k277mon
130070130318130992
T:
curve25519
140066140553140999
T:
curve2251
158547160294161947
T:
gls1271
163805165182167813
T:
surf127eps
212667213688216268
T:
sclaus1024
391304393743396581
T:
surf2113
469404470206471471
T:
ed448goldilocks
596086598954603025
T:
nistp256
794467795618798066
T:
ed521gs
959187961357964090
T:
nist521gs
108706910915971115555
T:
sclaus2048
126428812689701273171
T:
claus

amd64; Goldmont Plus (706a8); 2019 Intel Celeron N4020; 2 x 1100MHz; gemini, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
464124767149237
T:
jacfp127i
483304946850966
T:
kumjacfp127g
532355453456303
T:
prjfp127i
549965609458146
T:
hecfp127i
589735954460654
T:
ecfp256e
605906080162298
T:
curve2251
659366676368968
T:
ecfp256h
663096759169422
T:
jacfp128bk
713157208973029
T:
gls254
717127322475273
T:
hecfp128i
713647325975292
T:
prjfp128bk
728207348375276
T:
ecfp256q
726457424077102
T:
hecfp128fkt
740877531677554
T:
ecfp256s
807138214884540
T:
hecfp128bk
903519039890423
T:
gls254prot
113692114841116091
T:
gls1271
126015126070126346
T:
k277taa
136092136146136441
T:
k298
181138181143181160
T:
k277mon
205380205382205406
T:
kumfp127g
259978259993260059
T:
kumfp128g
267339267339267362
T:
curve25519
316563318457320545
T:
ecfp256i
323702323961324579
T:
ed448goldilocks
364873366013366866
T:
surf127eps
374685377568381061
T:
sclaus1024
377831378146379280
T:
kummer
393850394082394482
T:
nistp256
676828680705681749
T:
surf2113
183306118447881859092
T:
sclaus2048
187834618804691882292
T:
ed521gs
212749221278392129129
T:
nist521gs
224403822480682252132
T:
claus
Cycles to compute a shared secret
25%50%75%system
686316882669079
T:
gls254
901769017690218
T:
gls254prot
125739125776125860
T:
k277taa
135870135928135990
T:
k298
181087181087181087
T:
k277mon
209499209507209665
T:
kumfp127g
209885210915211821
T:
jacfp128bk
211309211320211622
T:
kumjacfp127g
234081234271234522
T:
prjfp128bk
236318237044237378
T:
curve2251
246466246609246806
T:
hecfp128fkt
258700260090261573
T:
hecfp128bk
267241267285267327
T:
curve25519
268049268056268080
T:
kumfp128g
276305281183286294
T:
gls1271
293560293675293903
T:
ecfp256e
314194314316314572
T:
ecfp256q
315601315699315852
T:
ecfp256i
316458316586316799
T:
jacfp127i
355564356216362206
T:
surf127eps
364253364367364563
T:
ecfp256h
377726378814380323
T:
kummer
366424380707383714
T:
sclaus1024
394780394959395295
T:
prjfp127i
403888403983404173
T:
hecfp127i
431563433229436880
T:
ecfp256s
538295538941539401
T:
hecfp128i
668341676473679765
T:
surf2113
108690410869121087589
T:
ed448goldilocks
137372313742461383899
T:
nistp256
186649318756601878231
T:
sclaus2048
187965818816661882169
T:
ed521gs
212721521276542131740
T:
nist521gs
224377322543482254993
T:
claus

aarch64; Skylark (503f0002); 2018 Ampere eMAG 8180; 32 x 3300MHz; unstable; gcc185, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
251475251550251550
T:
curve25519
319800319800319875
T:
kummer
360450361800362850
T:
surf127eps
389700389850390000
T:
nistp256
412950416100420000
T:
sclaus1024
152415015241501528500
T:
ed521gs
184515018455251845900
T:
nist521gs
202005020337002048175
T:
sclaus2048
247117524765002483250
T:
claus
Cycles to compute a shared secret
25%50%75%system
251475251475251475
T:
curve25519
319800319800319800
T:
kummer
354300358425359625
T:
surf127eps
418875419925421650
T:
sclaus1024
940125940125940200
T:
nistp256
152385015239251523925
T:
ed521gs
184545018456001846125
T:
nist521gs
202627520377502039775
T:
sclaus2048
246735024794252489475
T:
claus

aarch64; Cortex-A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3aplus, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
422142427201428401
T:
kummer
469637475131475311
T:
curve25519
473251478043478658
T:
nistp256
609447612861615570
T:
surf127eps
99704510056281019043
T:
sclaus1024
310082831455203160808
T:
ed521gs
360135636491573658747
T:
nist521gs
490959249482554997230
T:
sclaus2048
555312255655325582570
T:
claus
Cycles to compute a shared secret
25%50%75%system
421426426641427379
T:
kummer
475903481449481615
T:
curve25519
606059607071611862
T:
surf127eps
101008410152291020164
T:
sclaus1024
160027316050001613138
T:
nistp256
309919031452383159950
T:
ed521gs
358268135949263602171
T:
nist521gs
490062849466185013522
T:
sclaus2048
548157454983925516280
T:
claus

aarch64; Cortex-A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3bplus, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
442000444125452250
T:
kummer
493000495750503125
T:
curve25519
498500500750510375
T:
nistp256
636625640625651625
T:
surf127eps
103875010500001062000
T:
sclaus1024
326325032711253278625
T:
ed521gs
377262537812503784750
T:
nist521gs
512387551557505197625
T:
sclaus2048
565925056661255676125
T:
claus
Cycles to compute a shared secret
25%50%75%system
441500443500449875
T:
kummer
499750502250509500
T:
curve25519
632625636125646250
T:
surf127eps
104087510506251057625
T:
sclaus1024
167700016822501691375
T:
nistp256
325925032698753277500
T:
ed521gs
377037537791253783500
T:
nist521gs
518125052082505237750
T:
sclaus2048
562800056357505643125
T:
claus

amd64; Coffee Lake (906ea); 2018 Intel Xeon E-2124; 4 x 3300MHz; r24000, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
216962248424050
T:
jacfp127i
222222307724333
T:
kumjacfp127g
252832615127498
T:
prjfp127i
259042696928299
T:
hecfp127i
304493165632709
T:
jacfp128bk
358173650037590
T:
prjfp128bk
368623774638364
T:
gls254
379223868339652
T:
hecfp128bk
388253887138923
T:
gls254prot
384633921740043
T:
hecfp128i
382613922140317
T:
hecfp128fkt
393603999441565
T:
curve2251
426464325144755
T:
ecfp256e
451534572647891
T:
ecfp256h
458424587945913
T:
k277taa
470554776949532
T:
ecfp256s
487654946251019
T:
ecfp256q
528465289752956
T:
kummer
545795490655427
T:
k298
689166966870399
T:
gls1271
712957133071389
T:
k277mon
789037902179109
T:
kumfp127g
110492110550110628
T:
kumfp128g
125190125589126077
T:
curve25519
153209153364153629
T:
ed448goldilocks
175757177435178930
T:
sclaus1024
182604183426184131
T:
surf127eps
190021191063192261
T:
ecfp256i
245386245631245917
T:
nistp256
507401509086510570
T:
surf2113
807730807994808337
T:
ed521gs
885610892232898760
T:
sclaus2048
935185935435935850
T:
nist521gs
966959967413968156
T:
claus
Cycles to compute a shared secret
25%50%75%system
357503578835839
T:
gls254
385913863038675
T:
gls254prot
456154564445667
T:
k277taa
533435339153455
T:
kummer
544085464055067
T:
k298
712127124471290
T:
k277mon
812128130081373
T:
kumfp127g
825638267982772
T:
kumjacfp127g
878078787887960
T:
jacfp128bk
108363108509108752
T:
prjfp128bk
112177112333112513
T:
hecfp128bk
115634115674115721
T:
kumfp128g
115863116044116217
T:
hecfp128fkt
124231124324124436
T:
jacfp127i
134847135269136471
T:
curve25519
144346144646144781
T:
curve2251
165192165364165600
T:
prjfp127i
167461167582167781
T:
hecfp127i
175597175768175980
T:
ecfp256e
173122175893178168
T:
gls1271
178601178786180000
T:
sclaus1024
179442179992180338
T:
surf127eps
185320185470185638
T:
ecfp256i
185395185526185801
T:
ecfp256q
217782217974218171
T:
ecfp256h
244272244417244589
T:
ecfp256s
251739251977252193
T:
hecfp128i
455229455604460737
T:
ed448goldilocks
511965512976513920
T:
surf2113
599229599397599590
T:
nistp256
807354807522807841
T:
ed521gs
872594888008888837
T:
sclaus2048
934852935033935316
T:
nist521gs
961474961980962829
T:
claus

amd64; Zen (800f11); 2017 AMD Ryzen 7 1700; 8 x 3000MHz; rumba7, supercop-20230530

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
289953023031909
T:
jacfp127i
306653149432559
T:
kumjacfp127g
325933380635458
T:
prjfp127i
332753476636139
T:
hecfp127i
393454031141551
T:
jacfp128bk
401034065442782
T:
curve2251
406774187144632
T:
ecfp256e
411574241244623
T:
hecfp128fkt
413564247144634
T:
hecfp128i
414314277444882
T:
hecfp128bk
419354333544952
T:
prjfp128bk
436794384544135
T:
gls254
447084489144920
T:
gls254prot
442564643751295
T:
ecfp256h
456914769453055
T:
ecfp256s
476704983454444
T:
ecfp256q
556755594255975
T:
k277taa
641536443664633
T:
k298
668356760968335
T:
gls1271
890978916189264
T:
k277mon
101079101090101117
T:
kummer
102844102893102958
T:
kumfp127g
134167134278135628
T:
kumfp128g
144301144331144359
T:
curve25519
186359186881187322
T:
surf127eps
186755187662188869
T:
ecfp256i
200023200252200537
T:
ed448goldilocks
202674203993205597
T:
sclaus1024
264942265059265212
T:
nistp256
474732477244478457
T:
surf2113
960550961437962177
T:
ed521gs
9911569993661005476
T:
sclaus2048
109109110916821092733
T:
nist521gs
119613611994151203177
T:
claus
Cycles to compute a shared secret
25%50%75%system
423904247342613
T:
gls254
446464477044857
T:
gls254prot
554575567055915
T:
k277taa
640586428064418
T:
k298
888258895189206
T:
k277mon
101064101074101813
T:
kummer
104259104343104456
T:
kumfp127g
106297106375106427
T:
kumjacfp127g
109695109807110224
T:
jacfp128bk
126823127025127214
T:
prjfp128bk
129747129823129929
T:
hecfp128bk
134720134852135034
T:
hecfp128fkt
139023139048141182
T:
kumfp128g
157006157253157569
T:
curve25519
159124160097160803
T:
curve2251
163505163623163738
T:
jacfp127i
159683164603167656
T:
gls1271
174197174293174674
T:
ecfp256e
183634183766184056
T:
ecfp256i
183718183796183897
T:
ecfp256q
182703183945184213
T:
surf127eps
203713203909204221
T:
prjfp127i
207294207379207477
T:
hecfp127i
198341209619210014
T:
sclaus1024
216228216321216561
T:
ecfp256h
235372235448235548
T:
ecfp256s
286172286392288269
T:
hecfp128i
477396477511477628
T:
surf2113
584014585725585835
T:
ed448goldilocks
687512688060690250
T:
nistp256
959667960843961945
T:
ed521gs
100186810025751009193
T:
sclaus2048
109232710932601094041
T:
nist521gs
119641612015101201999
T:
claus

amd64; Zen (800f11); 2017 AMD Ryzen 5 1600; 6 x 3200MHz; rumba5, supercop-20230530

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
290483091832701
T:
jacfp127i
311893230733598
T:
kumjacfp127g
341483514536721
T:
prjfp127i
338233531137107
T:
hecfp127i
379023945341731
T:
jacfp128bk
401444069844030
T:
curve2251
408924262145641
T:
ecfp256e
414384304744711
T:
prjfp128bk
416644309745518
T:
hecfp128bk
444964494545299
T:
gls254
448294507245434
T:
gls254prot
452194627947901
T:
hecfp128i
452304633947860
T:
hecfp128fkt
447894705852735
T:
ecfp256h
464584861554255
T:
ecfp256s
478025022155692
T:
ecfp256q
558155595656175
T:
k277taa
641096433764576
T:
k298
661516703168073
T:
gls1271
891018914689173
T:
k277mon
100979101731102830
T:
kummer
102883102958103072
T:
kumfp127g
134057134165134233
T:
kumfp128g
144555144586150382
T:
curve25519
186261186876187291
T:
surf127eps
187237188001189302
T:
ecfp256i
200107200227200580
T:
ed448goldilocks
202403204496206106
T:
sclaus1024
264814264947268009
T:
nistp256
475719477154478460
T:
surf2113
952779954445956106
T:
ed521gs
9913489985141005440
T:
sclaus2048
109222310931041094403
T:
nist521gs
120101712042071206911
T:
claus
Cycles to compute a shared secret
25%50%75%system
423724257242619
T:
gls254
447614500845830
T:
gls254prot
557475591956130
T:
k277taa
640226410564301
T:
k298
891008917489252
T:
k277mon
100944101783102789
T:
kummer
104156104261104371
T:
jacfp128bk
104364104425104491
T:
kumfp127g
106323106391106460
T:
kumjacfp127g
127076127209127364
T:
prjfp128bk
129786129879129997
T:
hecfp128bk
134682134773134868
T:
hecfp128fkt
139035139070139105
T:
kumfp128g
157084157348158894
T:
curve25519
159147159595161519
T:
curve2251
162555162877165295
T:
jacfp127i
166988168028173513
T:
gls1271
174387174534174706
T:
ecfp256e
183380183529183762
T:
ecfp256q
183991184080184231
T:
ecfp256i
184007184495184747
T:
surf127eps
201784201990207975
T:
sclaus1024
203970204370204501
T:
prjfp127i
207340207494207769
T:
hecfp127i
216160216263216455
T:
ecfp256h
235470235553235718
T:
ecfp256s
285906286180286492
T:
hecfp128i
463472473161476582
T:
surf2113
582326582592584205
T:
ed448goldilocks
685954687138692302
T:
nistp256
955370958112958830
T:
ed521gs
990002997853998341
T:
sclaus2048
109024310912101093190
T:
nist521gs
1198947?1200178?2980312?
T:
claus

amd64; Zen (800f11); 2017 AMD Ryzen 3 1200; 4 x 3100MHz; rumba3, supercop-20221122

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
399064039241648
T:
curve2251
430004317343315
T:
gls254
447374492044939
T:
gls254prot
558915622856511
T:
k277taa
640776428664529
T:
k298
661346680067503
T:
gls1271
892038927689393
T:
k277mon
101348102336102370
T:
kummer
144317144332144396
T:
curve25519
186208186823187356
T:
surf127eps
200830201112201359
T:
ed448goldilocks
201457203277204818
T:
sclaus1024
265071265110265175
T:
nistp256
474898476975478480
T:
surf2113
954808956760958406
T:
ed521gs
99471310035201010948
T:
sclaus2048
109203910937761095296
T:
nist521gs
120183012051331208382
T:
claus
Cycles to compute a shared secret
25%50%75%system
422804243842475
T:
gls254
446494482644853
T:
gls254prot
557555616656410
T:
k277taa
639146406764346
T:
k298
891318921289256
T:
k277mon
101260101287101316
T:
kummer
157033158303163391
T:
curve25519
159716160689161507
T:
curve2251
165164165960166506
T:
gls1271
181807183608183962
T:
surf127eps
201024201382204739
T:
sclaus1024
475296477122477679
T:
surf2113
582336584503586958
T:
ed448goldilocks
685797687148687995
T:
nistp256
953919955956957987
T:
ed521gs
9962849976781004679
T:
sclaus2048
109090110925561093674
T:
nist521gs
120406712073391212719
T:
claus

amd64; Kaby Lake (906e9); 2017 Intel Xeon E3-1220 v6; 4 x 3000MHz; kizomba, supercop-20230530

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
220282309225901
T:
jacfp127i
230062443626500
T:
kumjacfp127g
251922577129123
T:
hecfp127i
252022668530250
T:
prjfp127i
297803075034661
T:
jacfp128bk
349343707341538
T:
prjfp128bk
365243708940246
T:
hecfp128bk
367583713238143
T:
gls254
386963875442012
T:
gls254prot
390653926443634
T:
curve2251
381813931443214
T:
hecfp128i
395554107243756
T:
hecfp128fkt
438244494048723
T:
ecfp256e
462424629546597
T:
k277taa
477964849453776
T:
ecfp256h
505635153854903
T:
ecfp256s
512305186357188
T:
ecfp256q
516725189959435
T:
k298
534655355059867
T:
kummer
694927033370975
T:
gls1271
714057150278228
T:
k277mon
794277965489055
T:
kumfp127g
111165111299120895
T:
kumfp128g
125322125667136667
T:
curve25519
153276154238154946
T:
ed448goldilocks
183470184947197871
T:
surf127eps
177726185482200361
T:
sclaus1024
193254199111213557
T:
ecfp256i
240663241403257903
T:
nistp256
524974538711565785
T:
surf2113
832432852933884857
T:
ed521gs
9222129561921003986
T:
sclaus2048
98388310059961041004
T:
nist521gs
108285311041661142232
T:
claus
Cycles to compute a shared secret
25%50%75%system
356903573835853
T:
gls254
384423850041871
T:
gls254prot
459844602949304
T:
k277taa
514185152955613
T:
k298
533735343456537
T:
kummer
711437124281010
T:
k277mon
810548121787869
T:
kumfp127g
828678299189471
T:
kumjacfp127g
880148832797954
T:
jacfp128bk
108800111911122010
T:
prjfp128bk
111982112199121411
T:
hecfp128bk
115460118642125292
T:
kumfp128g
116587118818126943
T:
hecfp128fkt
124460125720138593
T:
jacfp127i
135159135625146662
T:
curve25519
146036150052160133
T:
curve2251
166294169625181764
T:
prjfp127i
167393170979182512
T:
hecfp127i
171175172006179637
T:
gls1271
175684178929190790
T:
ecfp256e
179893180691187915
T:
surf127eps
179077185536198587
T:
sclaus1024
185534192351204575
T:
ecfp256q
187361193887207159
T:
ecfp256i
217676218097234234
T:
ecfp256h
242964249446268294
T:
ecfp256s
248427255097268965
T:
hecfp128i
465143472744488663
T:
ed448goldilocks
511119520679540811
T:
surf2113
620615636421662645
T:
nistp256
833929855659885058
T:
ed521gs
9414409822981019117
T:
sclaus2048
98431510044481029606
T:
nist521gs
107508310971511126115
T:
claus

amd64; Kaby Lake (806e9); 2017 Intel Core i7-7567U; 2 x 3500MHz; unstable; intelnuci7, supercop-20211108

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
228542402425244
T:
jacfp127i
230762417825666
T:
kumjacfp127g
251382638627910
T:
hecfp127i
262442741629766
T:
prjfp127i
313463240833938
T:
jacfp128bk
360883742439956
T:
hecfp128i
368623812240248
T:
hecfp128fkt
372203823039526
T:
prjfp128bk
380203825038618
T:
gls254
393423945840200
T:
curve2251
383043960641796
T:
hecfp128bk
400444011040194
T:
gls254prot
438544459445714
T:
ecfp256e
472364728847348
T:
k277taa
467684764849566
T:
ecfp256h
470064777649534
T:
ecfp256s
494625044052650
T:
ecfp256q
518945220052956
T:
kummer
542885437054510
T:
k298
722487237872610
T:
k277mon
719947278873588
T:
gls1271
815528164681752
T:
kumfp127g
114092114148114208
T:
kumfp128g
129368129626129896
T:
curve25519
158112158318158604
T:
ed448goldilocks
180542182522184208
T:
sclaus1024
186540187234187858
T:
surf127eps
195688196738197926
T:
ecfp256i
217550226366238000
T:
hector
242064242480270748
T:
nistp256
508152510326511366
T:
surf2113
836516836864837546
T:
ed521gs
913382920252927792
T:
sclaus2048
970706971326972396
T:
nist521gs
100683810084961011858
T:
claus
Cycles to compute a shared secret
25%50%75%system
368503692836980
T:
gls254
397683981439892
T:
gls254prot
469344698047032
T:
k277taa
518045212452280
T:
kummer
540985417654274
T:
k298
723527251874482
T:
k277mon
838868396284030
T:
kumfp127g
852748536285450
T:
kumjacfp127g
908909099091088
T:
jacfp128bk
111918112022112158
T:
prjfp128bk
118500118660118848
T:
hecfp128bk
119418119482119546
T:
kumfp128g
122602122806123004
T:
hecfp128fkt
127970128042128146
T:
jacfp127i
139286139568140018
T:
curve25519
148680149586149718
T:
curve2251
170368170516170720
T:
prjfp127i
173236173498175470
T:
hecfp127i
174868179314179672
T:
gls1271
172194180938185840
T:
sclaus1024
181232181406181554
T:
ecfp256e
183398183722184034
T:
surf127eps
190906191084191228
T:
ecfp256i
191248191408191566
T:
ecfp256q
225138225284225548
T:
ecfp256h
245790246000246200
T:
ecfp256s
256004256202256392
T:
hecfp128i
471048471346471646
T:
ed448goldilocks
505542506108508468
T:
surf2113
595818596138596506
T:
nistp256
740472746538753674
T:
hector
836072836278836634
T:
ed521gs
912476915646935020
T:
sclaus2048
970230970696972034
T:
nist521gs
9913549937981041200
T:
claus

amd64; Kaby Lake (806e9); 2017 Intel Core i3-7100; 2 x 2400MHz; whosthere, supercop-20221122

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
372803748937771
T:
gls254
392633931439369
T:
gls254prot
416444200442820
T:
curve2251
458134631946401
T:
k277taa
532185360754066
T:
k298
534845387155445
T:
kummer
711287127372399
T:
k277mon
112849114255115628
T:
gls1271
126059127356128223
T:
curve25519
154497155659156258
T:
ed448goldilocks
192916194391196007
T:
surf127eps
197126199570201477
T:
sclaus1024
300445301390302205
T:
nistp256
529936531945534974
T:
surf2113
893927897039900085
T:
ed521gs
100155410131181033949
T:
sclaus2048
104520210486431054813
T:
claus
104926010537761056028
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
360963615236305
T:
gls254
388643895439027
T:
gls254prot
460634610746164
T:
k277taa
527745292853262
T:
k298
534515377355644
T:
kummer
710657227072328
T:
k277mon
135972136643137230
T:
curve25519
144115144493145510
T:
curve2251
186994188482190065
T:
surf127eps
198564201605204874
T:
sclaus1024
273946277886282463
T:
gls1271
461335462594462918
T:
ed448goldilocks
527628529760532633
T:
surf2113
683477687360690652
T:
nistp256
897139900975904698
T:
ed521gs
100738610120281031660
T:
sclaus2048
103689410438611049575
T:
claus
105036910545421056565
T:
nist521gs

armeabi; Cortex-A7 (410fc075); 2016 Broadcom BCM2836; 4 x 900MHz; berry2, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
580378580648593158
T:
kummer
926209926618944145
T:
curve25519
125361512550501275609
T:
nistp256
345829334934423534864
T:
sclaus1024
158941151601684516135432
T:
sclaus2048
203993602048336920586323
T:
claus
Cycles to compute a shared secret
25%50%75%system
580098580217580863
T:
kummer
925948926188942821
T:
curve25519
351159836171343642686
T:
sclaus1024
430259843179484319165
T:
nistp256
159815361615849316287307
T:
sclaus2048
204876462057085420779373
T:
claus

amd64; Goldmont (506c9); 2016 Intel Celeron J3455; 4 x 1500MHz; wooden, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
458264691447944
T:
jacfp127i
475034861749500
T:
kumjacfp127g
545015589857341
T:
prjfp127i
559845721658663
T:
hecfp127i
615306338264172
T:
ecfp256e
623096361266842
T:
curve2251
643566548366754
T:
jacfp128bk
657286789670211
T:
ecfp256h
685177034872102
T:
ecfp256s
713507265573570
T:
gls254
736017582777975
T:
ecfp256q
757317773979905
T:
prjfp128bk
778217970681478
T:
hecfp128fkt
783497983581982
T:
hecfp128bk
782077986583319
T:
hecfp128i
907149072090721
T:
gls254prot
125046125049125055
T:
k277taa
124311125540126661
T:
gls1271
136570136604137387
T:
k298
181186181191181195
T:
k277mon
201591201604201626
T:
kumfp127g
274395274395274432
T:
kumfp128g
278725278725278730
T:
curve25519
324173325883327636
T:
ecfp256i
352397352642353306
T:
ed448goldilocks
382920384289384901
T:
surf127eps
386865390043393866
T:
sclaus1024
403520403525403538
T:
kummer
424150424188424284
T:
nistp256
728133731211732169
T:
surf2113
188000918952031906941
T:
sclaus2048
200417820048562005935
T:
ed521gs
231819723192372320026
T:
nist521gs
231940723241602328625
T:
claus
Cycles to compute a shared secret
25%50%75%system
675466835469455
T:
gls254
905429054390546
T:
gls254prot
124919124920124920
T:
k277taa
136350136370136400
T:
k298
181073181073181075
T:
k277mon
198224198271198276
T:
jacfp128bk
206474206474206475
T:
kumfp127g
209740209740209742
T:
kumjacfp127g
240901241987242025
T:
curve2251
249621249665249735
T:
prjfp128bk
256044256069256097
T:
hecfp128bk
265061265093265153
T:
hecfp128fkt
278343278343278343
T:
curve25519
283387283387283387
T:
kumfp128g
304125304176304208
T:
ecfp256e
312200312677313657
T:
gls1271
315258315304315367
T:
jacfp127i
318552318567318674
T:
ecfp256q
321198321211321274
T:
ecfp256i
374540374609374753
T:
ecfp256h
377567379316380826
T:
surf127eps
389075390970395286
T:
sclaus1024
403287403434403434
T:
kummer
409107409160409203
T:
ecfp256s
413717413767413817
T:
prjfp127i
425814425833425860
T:
hecfp127i
574100574132574349
T:
hecfp128i
716229719140725661
T:
surf2113
115328811532961153518
T:
ed448goldilocks
146052114618781462100
T:
nistp256
190316119315141938329
T:
sclaus2048
200368620042302004678
T:
ed521gs
231786423186202319411
T:
nist521gs
231391223227882326946
T:
claus

amd64; Broadwell+AES (406f1); 2016 Intel Xeon E5-2609 v4; 8 x 1700MHz; bolero, supercop-20230530

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
253362652430736
T:
jacfp127i
267042778830276
T:
kumjacfp127g
287523007634152
T:
prjfp127i
293363036832496
T:
hecfp127i
335243478037856
T:
jacfp128bk
373323785237988
T:
gls254
391643923642432
T:
gls254prot
388684012444920
T:
hecfp128fkt
399964101247152
T:
curve2251
387524118044668
T:
prjfp128bk
388404142047736
T:
hecfp128i
409484316446864
T:
hecfp128bk
470324853654596
T:
ecfp256h
491324923653060
T:
k277taa
482524942454548
T:
ecfp256s
503485202858480
T:
ecfp256q
48318?53460?66091?
T:
ecfp256e
562325647263236
T:
k298
64792?70264?90229?
T:
kummer
772447737285280
T:
k277mon
776287879688072
T:
gls1271
91420101228107272
T:
kumfp127g
130840131296141372
T:
kumfp128g
142776142936151608
T:
curve25519
157176162500175644
T:
ed448goldilocks
202860208428223700
T:
ecfp256i
198600210856224100
T:
surf127eps
194616211340224898
T:
sclaus1024
251128259320276228
T:
nistp256
543332562420599636
T:
surf2113
922356937572970000
T:
ed521gs
9742889958281027328
T:
sclaus2048
105398410854921116528
T:
nist521gs
114702011695601209708
T:
claus
Cycles to compute a shared secret
25%50%75%system
359723603236120
T:
gls254
390003905639164
T:
gls254prot
490364912452652
T:
k277taa
559805612462900
T:
k298
636486453670404
T:
kummer
769927707683892
T:
k277mon
9750099332107048
T:
jacfp128bk
9702899748107292
T:
kumjacfp127g
93076105024111128
T:
kumfp127g
117308117652129644
T:
prjfp128bk
120840121140130816
T:
hecfp128bk
126152126392133404
T:
hecfp128fkt
135360135488144788
T:
kumfp128g
142652142800149460
T:
curve25519
155548158008169404
T:
jacfp127i
152848160240174160
T:
curve2251
187392191608206040
T:
hecfp127i
191468193588206104
T:
gls1271
193592196760212372
T:
ecfp256q
185284?197732?232132?
T:
prjfp127i
194524201160213804
T:
surf127eps
196628206808215844
T:
sclaus1024
197230?210048?263466?
T:
ecfp256e
197896215620232913
T:
ecfp256i
229916236532248392
T:
ecfp256h
248784255412268036
T:
ecfp256s
268184275176292644
T:
hecfp128i
478136492696504896
T:
ed448goldilocks
546028563860593016
T:
surf2113
676656692988746792
T:
nistp256
927196?963148?1312689?
T:
ed521gs
9717689919561024564
T:
sclaus2048
104879610799721115872
T:
nist521gs
114911611770281202524
T:
claus

amd64; Silvermont (406c4); 2016 Intel Atom x5-Z8350; 4 x 1440MHz; cherry, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
648536548966232
T:
jacfp127i
675136819769044
T:
kumjacfp127g
721687263873437
T:
prjfp127i
761867681477608
T:
hecfp127i
957019672398825
T:
jacfp128bk
99171100955102852
T:
ecfp256e
110190111693113784
T:
ecfp256h
106053112429120513
T:
curve2251
112503113299115104
T:
prjfp128bk
115164116167117858
T:
hecfp128bk
113663116274123238
T:
hecfp128fkt
115958117780119384
T:
ecfp256s
113567?118404?148467?
T:
hecfp128i
120502122290124985
T:
ecfp256q
139827142350145476
T:
gls254
187045189275191070
T:
gls1271
205832205929206334
T:
gls254prot
280542280679280810
T:
kumfp127g
287703287904288499
T:
k277taa
306723311996313750
T:
k298
422280422380422680
T:
k277mon
447556447622447724
T:
kumfp128g
448847448916449341
T:
curve25519
514427518176522763
T:
ecfp256i
568463569780573074
T:
surf127eps
569614570363572245
T:
kummer
615577616184620049
T:
nistp256
761989762974765477
T:
ed448goldilocks
771106782460790053
T:
sclaus1024
113838811523521162074
T:
surf2113
366377136692693674334
T:
ed521gs
379071438285373857735
T:
sclaus2048
431560743235604329844
T:
nist521gs
464958746596474667876
T:
claus
Cycles to compute a shared secret
25%50%75%system
136400140913141631
T:
gls254
205475205626205801
T:
gls254prot
283592283647283729
T:
kumfp127g
286954287075287230
T:
kumjacfp127g
287515287677287997
T:
k277taa
305377306806310354
T:
k298
320076321111322206
T:
jacfp128bk
373462374252375695
T:
hecfp128bk
375124376178377839
T:
prjfp128bk
386144386493387846
T:
hecfp128fkt
422034422142422268
T:
k277mon
422713422974426147
T:
curve2251
444345445853456385
T:
gls1271
445257446337448147
T:
jacfp127i
448728448842449025
T:
curve25519
457722457808457885
T:
kumfp128g
480494482264484693
T:
ecfp256e
505029506177508207
T:
ecfp256q
511404512966515116
T:
ecfp256i
524905526321528996
T:
prjfp127i
534081534779536608
T:
hecfp127i
567529568346571060
T:
surf127eps
569628570685573062
T:
kummer
601051601854604423
T:
ecfp256h
629264630536632827
T:
ecfp256s
794607796215798584
T:
sclaus1024
810548812025819465
T:
hecfp128i
113374911417161154661
T:
surf2113
208392420861842091633
T:
nistp256
263539226371402641034
T:
ed448goldilocks
366114236652923671154
T:
ed521gs
380559438719513884492
T:
sclaus2048
431281843146864319008
T:
nist521gs
463729546576394659500
T:
claus

amd64; Skylake (506e3); 2015 Intel Xeon E3-1220 v5; 4 x 3000MHz; samba, supercop-20230530

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
219172218123590
T:
kumjacfp127g
218852250923606
T:
jacfp127i
255302659427954
T:
prjfp127i
272042809329280
T:
hecfp127i
297803011930992
T:
jacfp128bk
357383624437553
T:
hecfp128i
353143642137749
T:
prjfp128bk
367363695037415
T:
gls254
375253831039237
T:
hecfp128bk
381673831438857
T:
curve2251
387173875138793
T:
gls254prot
383873915340235
T:
hecfp128fkt
436264428845127
T:
ecfp256e
462534628246332
T:
k277taa
460144658548595
T:
ecfp256h
470414781549211
T:
ecfp256s
493965025452311
T:
ecfp256q
503575043050532
T:
k298
534885353653577
T:
kummer
693297034971079
T:
gls1271
709767103371090
T:
k277mon
792127935379557
T:
kumfp127g
111158111237111404
T:
kumfp128g
125104125273125486
T:
curve25519
153345153561153819
T:
ed448goldilocks
175721177420178672
T:
sclaus1024
182636183473183981
T:
surf127eps
192868193931195104
T:
ecfp256i
240381240544240732
T:
nistp256
515593517933519633
T:
surf2113
829532829910830558
T:
ed521gs
885049895270946470
T:
sclaus2048
952227952822954724
T:
nist521gs
104389910468281050614
T:
claus
Cycles to compute a shared secret
25%50%75%system
357053574135779
T:
gls254
384553849338529
T:
gls254prot
460294605446087
T:
k277taa
499675002950100
T:
k298
534055345153499
T:
kummer
708437090670975
T:
k277mon
807078085481372
T:
kumfp127g
827078276982854
T:
kumjacfp127g
884168850488585
T:
jacfp128bk
108762108903109039
T:
prjfp128bk
112056112151112266
T:
hecfp128bk
115423115488115953
T:
kumfp128g
116077116193116301
T:
hecfp128fkt
124193124280124365
T:
jacfp127i
134881135217135425
T:
curve25519
144639145918146003
T:
curve2251
165164165285165531
T:
prjfp127i
167348167501167703
T:
hecfp127i
172536173964175373
T:
gls1271
175426175586175795
T:
ecfp256e
178040179160179846
T:
surf127eps
175454181518182461
T:
sclaus1024
185437185589185821
T:
ecfp256q
187154187318187523
T:
ecfp256i
220665220908221258
T:
ecfp256h
239851240003240273
T:
ecfp256s
248794249026249765
T:
hecfp128i
465000465552470949
T:
ed448goldilocks
515056516339517659
T:
surf2113
614897615075615307
T:
nistp256
829451829740830201
T:
ed521gs
878605901428953717
T:
sclaus2048
952067952613954897
T:
nist521gs
104159310468801058376
T:
claus

amd64; Airmont (406c3); 2015 Intel Pentium N3700; 4 x 1600MHz; nucnuc, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
812098437286896
T:
jacfp127i
840848661289378
T:
kumjacfp127g
9315599424107889
T:
prjfp127i
94281101676108973
T:
hecfp127i
101409107590122186
T:
ecfp256e
106155108923118479
T:
curve2251
107811115792131459
T:
ecfp256h
110223117427136288
T:
ecfp256s
118956125918138938
T:
ecfp256q
139961142726145391
T:
gls254
136110?145302?171220?
T:
hecfp128fkt
131253145475163599
T:
prjfp128bk
133793145590161992
T:
jacfp128bk
135157145868168720
T:
hecfp128bk
134659148434165516
T:
hecfp128i
187683189980192188
T:
gls1271
205800205967206582
T:
gls254prot
280420280467280563
T:
kumfp127g
287770287916288262
T:
k277taa
306831310476312651
T:
k298
422193422329422516
T:
k277mon
447274447363447498
T:
kumfp128g
448837448923452351
T:
curve25519
512412515271518928
T:
ecfp256i
568220570122572886
T:
surf127eps
570918573128574388
T:
kummer
607179607718608732
T:
nistp256
762121763073765340
T:
ed448goldilocks
778960787588797657
T:
sclaus1024
113608611430041158181
T:
surf2113
366220436677453674968
T:
ed521gs
379752838252053853584
T:
sclaus2048
431653243234724329736
T:
nist521gs
465994046742664688083
T:
claus
Cycles to compute a shared secret
25%50%75%system
131475139715141919
T:
gls254
205397205569205774
T:
gls254prot
283282283384283425
T:
kumfp127g
286628286661286752
T:
kumjacfp127g
287546287714287874
T:
k277taa
305672307190309195
T:
k298
317399317923318811
T:
jacfp128bk
370940371380372280
T:
hecfp128bk
374415375310376635
T:
prjfp128bk
385975386378387570
T:
hecfp128fkt
422001422105422183
T:
k277mon
421674425980426205
T:
curve2251
442320442745443646
T:
jacfp127i
448784448846452296
T:
curve25519
450443453713456685
T:
gls1271
457526457605457713
T:
kumfp128g
480064480486481342
T:
ecfp256e
502287502863503986
T:
ecfp256q
510217511490513902
T:
ecfp256i
522440522940524736
T:
prjfp127i
533600535324537571
T:
hecfp127i
561374563154567529
T:
surf127eps
570773572870574114
T:
kummer
599762600059600844
T:
ecfp256h
625168625699626807
T:
ecfp256s
789598796421819453
T:
sclaus1024
808312811127814924
T:
hecfp128i
113263811392031150075
T:
surf2113
209278020943382102610
T:
nistp256
263501926367902640510
T:
ed448goldilocks
365984836640813670051
T:
ed521gs
385776138688093871505
T:
sclaus2048
431325243162364323531
T:
nist521gs
466570746784224692484
T:
claus

amd64; Broadwell+AES (306d4); 2015 Intel Core i3-5005U; 2 x 1900MHz; shoe, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
252522555925943
T:
jacfp127i
258452621926594
T:
kumjacfp127g
285632904629565
T:
hecfp127i
288582933730131
T:
prjfp127i
329543346534251
T:
jacfp128bk
375533778338025
T:
gls254
375603805438849
T:
hecfp128bk
380243855939021
T:
hecfp128fkt
381863893939635
T:
prjfp128bk
394873957939684
T:
gls254prot
391913963140051
T:
hecfp128i
418484250844080
T:
curve2251
438504480145787
T:
ecfp256e
461384716948883
T:
ecfp256h
474864856950236
T:
ecfp256s
493284942849595
T:
k277taa
495915048852661
T:
ecfp256q
558495645857290
T:
k298
649046501965259
T:
kummer
768067689276990
T:
k277mon
764127738978104
T:
gls1271
817848194582118
T:
kumfp127g
129672129826130041
T:
kumfp128g
143180143426144330
T:
curve25519
156158156544158143
T:
ed448goldilocks
187138188763190774
T:
sclaus1024
197093197717198700
T:
surf127eps
199751200634201916
T:
ecfp256i
250370251641253135
T:
nistp256
521333523534525029
T:
surf2113
903351903916905148
T:
ed521gs
947083956825968944
T:
sclaus2048
9892779967981003931
T:
claus
103331110362541040012
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
363583662036884
T:
gls254
394063954439728
T:
gls254prot
492794937349501
T:
k277taa
551235543855885
T:
k298
648136491865190
T:
kummer
767317684077027
T:
k277mon
848058511487729
T:
kumfp127g
874928755187743
T:
kumjacfp127g
963559651998488
T:
jacfp128bk
116389116576120876
T:
prjfp128bk
120469120586120713
T:
hecfp128bk
125034125271126111
T:
hecfp128fkt
134974135067135192
T:
kumfp128g
143055143162143309
T:
curve25519
149588154900155919
T:
curve2251
155591155914156101
T:
jacfp127i
184286184498184794
T:
prjfp127i
185655185773185908
T:
ecfp256e
186557186685186895
T:
hecfp127i
187530188309188995
T:
sclaus1024
187355189142194978
T:
gls1271
193025193161193303
T:
ecfp256q
194621195182196155
T:
surf127eps
196027196135196233
T:
ecfp256i
228724228875228998
T:
ecfp256h
248542248691248878
T:
ecfp256s
267273267519267737
T:
hecfp128i
467598467748467981
T:
ed448goldilocks
515924516704517980
T:
surf2113
632149633734635337
T:
nistp256
904807907935910206
T:
ed521gs
9619089680581000528
T:
sclaus2048
9930249987501047885
T:
claus
103102610330851037031
T:
nist521gs

amd64; Haswell+AES (306c3); 2013 Intel Xeon E3-1275 V3; 4 x 3500MHz; titan0, supercop-20230530

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
326983368934366
T:
kumjacfp127g
330523455836912
T:
prjfp127i
361763697937881
T:
hecfp127i
354893702738235
T:
jacfp127i
374453834941084
T:
jacfp128bk
409544163945315
T:
curve2251
447514525045840
T:
gls254
455924629549051
T:
hecfp128i
490324909949175
T:
gls254prot
484884984452836
T:
ecfp256e
478544990052060
T:
prjfp128bk
498995177254466
T:
hecfp128fkt
499795209754547
T:
hecfp128bk
517815254753860
T:
ecfp256h
516555418959491
T:
ecfp256s
550105705262366
T:
ecfp256q
622246227862407
T:
k277taa
641416418264244
T:
kummer
702277040670630
T:
k298
898699107091950
T:
gls1271
951519519395236
T:
k277mon
111440111592111734
T:
kumfp127g
144451144537146119
T:
curve25519
157764158297158422
T:
kumfp128g
174664175123176465
T:
ed448goldilocks
213774214397215089
T:
surf127eps
218540220614222090
T:
sclaus1024
225786227508235249
T:
ecfp256i
282314282500282786
T:
nistp256
534672536836538361
T:
surf2113
101176210121931013221
T:
ed521gs
109375911023571110065
T:
sclaus2048
119527011963061197036
T:
nist521gs
130073313031371305737
T:
claus
Cycles to compute a shared secret
25%50%75%system
399164186742550
T:
gls254
488974893749007
T:
gls254prot
621176217062253
T:
k277taa
640546410464149
T:
kummer
699567005970323
T:
k298
950239506495104
T:
k277mon
113164113292113456
T:
kumfp127g
113563113611113691
T:
jacfp128bk
120088120530120720
T:
kumjacfp127g
139753139943140133
T:
prjfp128bk
145982146195146337
T:
hecfp128bk
151216151474154191
T:
hecfp128fkt
156015156222156380
T:
curve25519
158883159088159152
T:
curve2251
163200163700163860
T:
kumfp128g
185351185716186806
T:
jacfp127i
205333205494205660
T:
ecfp256e
204264207777208331
T:
surf127eps
213817213932214063
T:
ecfp256q
215645221626221935
T:
gls1271
218196222071223519
T:
sclaus1024
222216222329222421
T:
ecfp256i
224986225352226468
T:
prjfp127i
228998229249229574
T:
hecfp127i
250319250515250738
T:
ecfp256h
272681272869273227
T:
ecfp256s
326351326566326888
T:
hecfp128i
524360534988544348
T:
surf2113
540190540378540604
T:
ed448goldilocks
745773746030746674
T:
nistp256
101999310203611020849
T:
ed521gs
109569910973331098467
T:
sclaus2048
119542611972681197928
T:
nist521gs
129887512995451304022
T:
claus

amd64; Haswell+AES (306c3); 2013 Intel Xeon E3-1220 v3; 4 x 3100MHz; hiphop, supercop-20230530

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
299453081632234
T:
jacfp127i
309213198833137
T:
kumjacfp127g
322313294634715
T:
prjfp127i
326023328835414
T:
hecfp127i
375673857940419
T:
jacfp128bk
412714152844516
T:
curve2251
441514466946442
T:
prjfp128bk
449064533547225
T:
hecfp128i
450134556146142
T:
gls254
457304663148419
T:
hecfp128bk
475734842949715
T:
ecfp256e
490354907349102
T:
gls254prot
483944910951507
T:
ecfp256h
481754977852207
T:
hecfp128fkt
539195448955503
T:
ecfp256s
540625495557424
T:
ecfp256q
622026225262307
T:
k277taa
641436421864963
T:
kummer
704397053970701
T:
k298
896479048491211
T:
gls1271
951419517595221
T:
k277mon
111462111600111753
T:
kumfp127g
144379144444144491
T:
curve25519
157597157673157745
T:
kumfp128g
175068175381175732
T:
ed448goldilocks
214230217997221932
T:
surf127eps
218159220334222382
T:
sclaus1024
225221226388227769
T:
ecfp256i
287848288231288591
T:
nistp256
535879538499539728
T:
surf2113
101188510122851012972
T:
ed521gs
110822611170391125675
T:
sclaus2048
118684811876711188776
T:
nist521gs
129746413001621303049
T:
claus
Cycles to compute a shared secret
25%50%75%system
412684161042620
T:
gls254
489914902949093
T:
gls254prot
620896212762172
T:
k277taa
640516413664860
T:
kummer
701427023570375
T:
k298
950069504095062
T:
k277mon
113132113267113447
T:
kumfp127g
113580113649113726
T:
jacfp128bk
120279120547120717
T:
kumjacfp127g
139694139858140042
T:
prjfp128bk
145753146006147292
T:
hecfp128bk
151120151294151477
T:
hecfp128fkt
155954156011156072
T:
curve25519
158915159142160390
T:
curve2251
163094163178164274
T:
kumfp128g
186698186819186988
T:
jacfp127i
205449205619205905
T:
ecfp256e
211290213500215158
T:
surf127eps
213761213864214022
T:
ecfp256q
216819219798224425
T:
gls1271
222160222256222379
T:
ecfp256i
217298224159225349
T:
sclaus1024
225536225751226077
T:
prjfp127i
229036229263229480
T:
hecfp127i
248749248892249050
T:
ecfp256h
273602273915274309
T:
ecfp256s
326193326475326760
T:
hecfp128i
535128535710537738
T:
surf2113
540296540557541429
T:
ed448goldilocks
756720757274757822
T:
nistp256
101997910202741020966
T:
ed521gs
111198811189121124613
T:
sclaus2048
118642011873871188573
T:
nist521gs
129661512987031299862
T:
claus

armeabi; Cortex-A8 (413fc082); 2012 TI Sitara XAM3359AZCZ100; 1 x 1000MHz; bblack, supercop-20230530

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
304864304904305154
T:
kummer
486104488186498144
T:
curve25519
118903411915741223282
T:
nistp256
411020041507804191738
T:
sclaus1024
836035283700608390516
T:
claus
189250601903434819144388
T:
sclaus2048
Cycles to compute a shared secret
25%50%75%system
304778304780304862
T:
kummer
503020505520505686
T:
curve25519
396420639650363968124
T:
nistp256
423577842429444256944
T:
sclaus1024
831014283190188330724
T:
claus
193205501936445819478166
T:
sclaus2048

amd64; Bulldozer (600f20); 2012 AMD FX-8350; 4 x 4000MHz; saber214, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
467124773648499
T:
jacfp127i
483044904049872
T:
kumjacfp127g
536065427155182
T:
prjfp127i
538815456055589
T:
hecfp127i
641206476367058
T:
curve2251
690917027271147
T:
jacfp128bk
738777653181064
T:
ecfp256e
804948127682072
T:
hecfp128fkt
804378137882359
T:
hecfp128bk
787568165686673
T:
ecfp256h
809058186683300
T:
prjfp128bk
814858230583296
T:
hecfp128i
803248295287269
T:
ecfp256s
847028690591901
T:
ecfp256q
887228969290975
T:
gls254
103334103374103515
T:
gls254prot
115227116748118133
T:
gls1271
139826139846139922
T:
k277taa
157434157474157585
T:
k298
157890157950158064
T:
kumfp127g
174744174779174802
T:
curve25519
203057203058203087
T:
k277mon
204643204675204708
T:
kummer
256889257343257379
T:
kumfp128g
348029349900352530
T:
ecfp256i
356187357780358930
T:
ed448goldilocks
374038375085375856
T:
surf127eps
424141429031433180
T:
sclaus1024
614922615104615263
T:
nistp256
664230666872667616
T:
surf2113
174411817442591745614
T:
ed521gs
205194320549102059253
T:
nist521gs
213396922033312229491
T:
sclaus2048
254312325501332559472
T:
claus
Cycles to compute a shared secret
25%50%75%system
809408188786044
T:
gls254
103205103213103322
T:
gls254prot
139797139805139879
T:
k277taa
157286157313157345
T:
k298
160261160262160301
T:
kumfp127g
160943161083161180
T:
kumjacfp127g
186671186697186729
T:
curve25519
197029197165197267
T:
jacfp128bk
197266197297204589
T:
kummer
203003203003203003
T:
k277mon
245820246074247025
T:
curve2251
247362247629248105
T:
prjfp128bk
252246252455252660
T:
hecfp128bk
262152262214262421
T:
hecfp128fkt
263632263848264206
T:
jacfp127i
267874267903268047
T:
kumfp128g
284170285648286603
T:
gls1271
321462321645321844
T:
ecfp256e
336338336606337063
T:
ecfp256q
342791343088343391
T:
ecfp256i
355072355116355266
T:
prjfp127i
358076358209358293
T:
hecfp127i
372197372351372682
T:
surf127eps
405765406118406701
T:
ecfp256h
424839425151425907
T:
ecfp256s
426092431576434191
T:
sclaus1024
563642563857563994
T:
hecfp128i
660818661617665992
T:
surf2113
112805211308801141586
T:
ed448goldilocks
131915513192451319325
T:
nistp256
174359817436721743935
T:
ed521gs
205160220533912058569
T:
nist521gs
211808121346532176805
T:
sclaus2048
254487925462162555946
T:
claus

amd64; Ivy Bridge+AES (306a9); 2012 Intel Xeon E3-1275 V2; 4 x 3500MHz; hydra8, supercop-20230530

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
320603311535147
T:
jacfp127i
341993538036667
T:
kumjacfp127g
378373880139746
T:
hecfp127i
392994087943072
T:
prjfp127i
438914514646447
T:
jacfp128bk
509625170053310
T:
ecfp256e
516765323155683
T:
hecfp128fkt
509695336956419
T:
prjfp128bk
525255376754757
T:
hecfp128i
527705397655359
T:
hecfp128bk
534345415856846
T:
ecfp256h
554045636558273
T:
ecfp256s
564175696860125
T:
curve2251
588985971062813
T:
ecfp256q
735157483475767
T:
gls254
887048873488752
T:
kummer
954959693398010
T:
gls1271
106759106794106838
T:
gls254prot
120059120104120170
T:
kumfp127g
145731146008148610
T:
curve25519
164822165047165181
T:
kumfp128g
172626172698172768
T:
k277taa
180678180761180963
T:
k298
207890208338208886
T:
ed448goldilocks
235390236296237167
T:
surf127eps
245095246943253773
T:
ecfp256i
256982256985257000
T:
k277mon
267134269942272819
T:
sclaus1024
320407320946321316
T:
nistp256
590971593601618692
T:
surf2113
111158111121001113431
T:
ed521gs
127101912718431272803
T:
nist521gs
136036313694111380665
T:
sclaus2048
159654815995281602800
T:
claus
Cycles to compute a shared secret
25%50%75%system
668236806068498
T:
gls254
886638868988715
T:
kummer
106719106744106764
T:
gls254prot
121820121870121925
T:
kumfp127g
124535124667124819
T:
jacfp128bk
125990126060126154
T:
kumjacfp127g
156849156951161639
T:
curve25519
156989157110157282
T:
prjfp128bk
162035162158162323
T:
hecfp128bk
167675167794167926
T:
hecfp128fkt
170396170731170871
T:
kumfp128g
172431172526172598
T:
k277taa
180534180587180671
T:
k298
190709190848191186
T:
jacfp127i
218274222514223642
T:
curve2251
224878225030225233
T:
ecfp256e
232423232960233780
T:
surf127eps
235445235644236029
T:
ecfp256q
235327237911240194
T:
gls1271
238594238809239148
T:
prjfp127i
240399240667240899
T:
ecfp256i
245056245378245762
T:
hecfp127i
256971256974256975
T:
k277mon
270521272318272420
T:
sclaus1024
275362275497275554
T:
ecfp256h
297241297399297691
T:
ecfp256s
365369365590365890
T:
hecfp128i
573288580743588853
T:
surf2113
629792630014630346
T:
ed448goldilocks
821923822413823210
T:
nistp256
112327211242261125294
T:
ed521gs
127074012712131272173
T:
nist521gs
135749513726031381656
T:
sclaus2048
159298516011421604367
T:
claus

amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3427U; 2 x 1800MHz; hunsnivy, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
296292999530471
T:
jacfp127i
315563210032616
T:
kumjacfp127g
333793380234307
T:
prjfp127i
342983467635071
T:
hecfp127i
412564166242055
T:
jacfp128bk
488184931449799
T:
prjfp128bk
491414950749925
T:
hecfp128i
492214966950112
T:
hecfp128bk
494354986450231
T:
hecfp128fkt
502695096852098
T:
ecfp256e
544555515756824
T:
ecfp256h
585655940461160
T:
ecfp256s
588055991561841
T:
ecfp256q
58726?60985?92002?
T:
curve2251
737907496976754
T:
gls254
887338893689144
T:
kummer
954639681797861
T:
gls1271
106108106200106552
T:
gls254prot
116460116610116807
T:
kumfp127g
145101145214145753
T:
curve25519
164096164254164475
T:
kumfp128g
176405176542176809
T:
k277taa
181053181763182609
T:
k298
209699210501211602
T:
ed448goldilocks
232560233373234042
T:
surf127eps
243406244646246096
T:
ecfp256i
257289257323258015
T:
k277mon
266187269001271780
T:
sclaus1024
306720309281309583
T:
nistp256
579827581966583911
T:
surf2113
109106210934671097997
T:
ed521gs
125877712632501266436
T:
nist521gs
137186413838681393997
T:
sclaus2048
159325115975271602754
T:
claus
Cycles to compute a shared secret
25%50%75%system
671867013771483
T:
gls254
881928848988737
T:
kummer
105994106040106118
T:
gls254prot
119247119513119882
T:
kumfp127g
124505124679124975
T:
jacfp128bk
126222126317126511
T:
kumjacfp127g
156697156852159115
T:
curve25519
157813158159158537
T:
prjfp128bk
163370163583163879
T:
hecfp128bk
167148167328167698
T:
hecfp128fkt
170656170848171070
T:
kumfp128g
176298176366176484
T:
k277taa
180672181330181810
T:
k298
191160191599193659
T:
jacfp127i
224230224665225565
T:
curve2251
224636224787224993
T:
ecfp256e
229327229794230314
T:
surf127eps
235312235529235936
T:
ecfp256q
238657239041239560
T:
prjfp127i
239846240133240402
T:
ecfp256i
244091244677246395
T:
gls1271
245184245786246881
T:
hecfp127i
257254257279258105
T:
k277mon
269170269948270791
T:
sclaus1024
276133276479276929
T:
ecfp256h
297179297555298569
T:
ecfp256s
365598366284367012
T:
hecfp128i
572312579686580451
T:
surf2113
629951630187634391
T:
ed448goldilocks
779431781120783518
T:
nistp256
108348210858121096647
T:
ed521gs
125807412591381264525
T:
nist521gs
137192113781721384968
T:
sclaus2048
158603115960101603989
T:
claus

amd64; Sandy Bridge+AES (206d7); 2012 Intel Xeon E5-2660; 8 x 2200MHz; unstable; gcc123, supercop-20220213

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
319433270833506
T:
jacfp127i
329533376535040
T:
kumjacfp127g
376083862339513
T:
hecfp127i
390044050442276
T:
prjfp127i
457984660449017
T:
jacfp128bk
545285530656314
T:
ecfp256e
559355709258739
T:
prjfp128bk
565285743958649
T:
hecfp128fkt
573725803860010
T:
ecfp256h
589355935562473
T:
curve2251
581725968661610
T:
hecfp128i
577295969461632
T:
hecfp128bk
592136026262540
T:
ecfp256s
632946411266013
T:
ecfp256q
742677518976426
T:
gls254
892828933389393
T:
kummer
101621102757104070
T:
gls1271
107786107990108100
T:
gls254prot
120356120660120847
T:
kumfp127g
147437149335150231
T:
curve25519
176693176754176821
T:
k277taa
183385183523183801
T:
k298
183493184494184712
T:
kumfp128g
216977217416218118
T:
ed448goldilocks
258378258897259109
T:
k277mon
264599265793267654
T:
ecfp256i
271269272151273008
T:
surf127eps
285659288427291181
T:
sclaus1024
346611347055348467
T:
nistp256
632059635140636537
T:
surf2113
120118312026971213390
T:
ed521gs
143767014388731440254
T:
nist521gs
145392114631991474175
T:
sclaus2048
170762417120691716365
T:
claus
Cycles to compute a shared secret
25%50%75%system
685677064070910
T:
gls254
890538907989114
T:
kummer
107718107843108042
T:
gls254prot
123422123608123778
T:
kumfp127g
131022131115131347
T:
kumjacfp127g
139870140122152456
T:
jacfp128bk
158914159113159230
T:
curve25519
176460176503176544
T:
k277taa
178453178678178968
T:
prjfp128bk
182177182418185208
T:
hecfp128bk
182474182579182699
T:
k298
189273189532200762
T:
hecfp128fkt
190389191431191674
T:
kumfp128g
200096200414213508
T:
jacfp127i
231825232605232832
T:
curve2251
248092248254248472
T:
ecfp256e
249077250480251963
T:
gls1271
257409257555257723
T:
ecfp256q
258321258857259061
T:
k277mon
260327260627261091
T:
prjfp127i
261160261279261406
T:
ecfp256i
264886265400269808
T:
hecfp127i
267683268185269010
T:
surf127eps
290366291197293939
T:
sclaus1024
305106305231305409
T:
ecfp256h
324559324747324996
T:
ecfp256s
412908413317413695
T:
hecfp128i
621379623817629240
T:
surf2113
648753651584670955
T:
ed448goldilocks
826719827216827670
T:
nistp256
120710312106961213881
T:
ed521gs
143747214380621439620
T:
nist521gs
144469914660691478225
T:
sclaus2048
170340017117751715637
T:
claus

armeabi; Cortex-A9+NEON (412fc09a); 2011 Freescale i.MX6 Quad; 4 x 1200MHz; unstable; novena, supercop-20220506

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
383633403235426836
T:
kummer
568432579721605953
T:
curve25519
113609712253061320114
T:
nistp256
317027133190843441142
T:
sclaus1024
103958101067570812763892
T:
claus
13118323?15156764?17482296?
T:
sclaus2048
Cycles to compute a shared secret
25%50%75%system
377632394434418035
T:
kummer
567769587250684860
T:
curve25519
317587233146843482698
T:
sclaus1024
378432441255534561590
T:
nistp256
103845211070227310950137
T:
claus
12688797?16762633?17448692?
T:
sclaus2048

mipso32; Octeon II (cnmips64v2); 2011 Cavium Octeon II CN6120; 2 x 2000MHz; erpro8fsf2, supercop-20220213

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
147099214710061473758
T:
kummer
199978219998222008112
T:
curve25519
346045234641523494426
T:
nistp256
486200849033465012496
T:
surf127eps
901108890886289163840
T:
sclaus1024
447252984499559045330454
T:
sclaus2048
546248485474884454873548
T:
claus
Cycles to compute a shared secret
25%50%75%system
147060014706141470614
T:
kummer
199937019993842001402
T:
curve25519
485861449133245012660
T:
surf127eps
889381890661869103512
T:
sclaus1024
115805481160992411704890
T:
nistp256
448201024498917845145550
T:
sclaus2048
548210825487032654982680
T:
claus

mipso32; Octeon II (cnmips64v2); 2011 Cavium Octeon II CN6120; 2 x 2000MHz; gcc23, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
147097414710161472676
T:
kummer
199919019991902000622
T:
curve25519
344511234574143461870
T:
nistp256
484243248611724867094
T:
surf127eps
899081490854829171120
T:
sclaus1024
446202184494918645248108
T:
sclaus2048
545050245461244054716466
T:
claus
Cycles to compute a shared secret
25%50%75%system
147062614706301470630
T:
kummer
199890819989081999896
T:
curve25519
483016848424744861988
T:
surf127eps
900581490441769159864
T:
sclaus1024
115423281157057011603418
T:
nistp256
447917484505932645496830
T:
sclaus2048
542802005459834654663778
T:
claus

amd64; Bobcat (500f10); 2011 AMD G-T56N; 2 x 1650MHz; h8bobcat, supercop-20230530

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
557945650657238
T:
jacfp127i
580075861959489
T:
kumjacfp127g
631376386464491
T:
prjfp127i
626206405466125
T:
hecfp127i
762237787679491
T:
jacfp128bk
899569144793513
T:
prjfp128bk
907069195594107
T:
hecfp128fkt
923639373795228
T:
hecfp128bk
922319392295651
T:
hecfp128i
103859106034107212
T:
ecfp256e
115003116389118598
T:
ecfp256h
114527116446117976
T:
ecfp256s
119629122460124925
T:
ecfp256q
161604163661165637
T:
gls1271
199101199182199201
T:
kumfp127g
315936315989319737
T:
kumfp128g
366500366890372708
T:
curve25519
433894435984439099
T:
ecfp256i
480833482439483840
T:
surf127eps
502341504996511799
T:
curve2251
508421515204519864
T:
sclaus1024
551604552748554320
T:
ed448goldilocks
754029754718755449
T:
nistp256
800599801947803434
T:
kummer
170712617155341728787
T:
surf2113
239094124052582419707
T:
ed521gs
244104924638252491670
T:
sclaus2048
278941427941592827879
T:
nist521gs
305483930659683088692
T:
claus
Cycles to compute a shared secret
25%50%75%system
201571201571201571
T:
kumfp127g
207119207181207551
T:
kumjacfp127g
237258237295237400
T:
jacfp128bk
292648292686292828
T:
prjfp128bk
298086298353298827
T:
hecfp128bk
308707308893309168
T:
hecfp128fkt
325451325460329237
T:
kumfp128g
346104346151346398
T:
jacfp127i
366201366481366686
T:
curve25519
368999371535377169
T:
gls1271
406021406206406771
T:
ecfp256e
420612420855421311
T:
ecfp256q
426664426778427272
T:
prjfp127i
430103430839431381
T:
ecfp256i
435394435423435561
T:
hecfp127i
480059480453482296
T:
surf127eps
507158510506515997
T:
sclaus1024
511133511585512031
T:
ecfp256h
519217519422519869
T:
ecfp256s
658592658692659271
T:
hecfp128i
800988801838802897
T:
kummer
162551116267421638256
T:
nistp256
161974016270081632798
T:
ed448goldilocks
169782617098141713487
T:
surf2113
206951320851362098626
T:
curve2251
241000224164352449903
T:
ed521gs
245667624688172492705
T:
sclaus2048
278844027915992826920
T:
nist521gs
305413630636933084802
T:
claus

amd64; K10 32nm (300f10); 2011 AMD A8-3850; 4 x 2900MHz; hydra5, supercop-20230530

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
300233019630454
T:
jacfp127i
327903299633268
T:
kumjacfp127g
347943495235247
T:
prjfp127i
353243553935783
T:
hecfp127i
491534956450000
T:
jacfp128bk
561725648456862
T:
hecfp128fkt
562295653656989
T:
hecfp128i
562765661657028
T:
hecfp128bk
571355748857918
T:
prjfp128bk
723847361175049
T:
ecfp256e
763027786478683
T:
ecfp256s
775987874780141
T:
ecfp256h
787228052282110
T:
ecfp256q
105555106869107913
T:
gls1271
120078120110120212
T:
kumfp127g
206811206920207042
T:
kumfp128g
214379214383214438
T:
curve25519
267506270117272443
T:
sclaus1024
279001280586282563
T:
ecfp256i
281109282054282514
T:
surf127eps
308632309509310586
T:
ed448goldilocks
414456414607414767
T:
kummer
437328437532437848
T:
nistp256
704460709359710275
T:
surf2113
885188889453891427
T:
curve2251
125631512701381293972
T:
sclaus2048
150357015041091507215
T:
ed521gs
158409315873891591146
T:
claus
176699717681851771268
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
121733121739121747
T:
kumfp127g
122802122803122817
T:
kumjacfp127g
152360152437152530
T:
jacfp128bk
189004189064189129
T:
prjfp128bk
193895193933193971
T:
hecfp128bk
197764197812197872
T:
jacfp127i
201087201116201132
T:
hecfp128fkt
211986211989212000
T:
kumfp128g
214361214364216377
T:
curve25519
255024257230261890
T:
gls1271
257851258014258053
T:
prjfp127i
261108261209261423
T:
ecfp256e
263342263413263433
T:
hecfp127i
270457270966273139
T:
sclaus1024
271212271254271319
T:
ecfp256q
277621277643277660
T:
ecfp256i
279665280659280740
T:
surf127eps
330364330452330732
T:
ecfp256s
337421337457337516
T:
ecfp256h
414424414651414705
T:
kummer
427366428161428199
T:
hecfp128i
705936708050708276
T:
surf2113
879001886510889423
T:
curve2251
937659938357939886
T:
ed448goldilocks
104512610457081045987
T:
nistp256
125566412686361273472
T:
sclaus2048
150333315034741503991
T:
ed521gs
158412715870931598940
T:
claus
176698317676251769779
T:
nist521gs

amd64; K10 32nm (300f10); 2011 AMD A6-3650; 4 x 2600MHz; hydra4, supercop-20230530

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
288582908129340
T:
jacfp127i
313693155531807
T:
kumjacfp127g
336523385734099
T:
prjfp127i
353003568736115
T:
hecfp127i
459594645746936
T:
jacfp128bk
547305512155553
T:
prjfp128bk
547965513655582
T:
hecfp128fkt
548325518155541
T:
hecfp128bk
563625670357191
T:
hecfp128i
711527245573892
T:
ecfp256e
752227665777574
T:
ecfp256s
771787810979528
T:
ecfp256h
772967904180731
T:
ecfp256q
105686106817107952
T:
gls1271
118934118979120079
T:
kumfp127g
205313205341205412
T:
kumfp128g
214419214424214486
T:
curve25519
266183268415270865
T:
sclaus1024
276745278368280322
T:
ecfp256i
280957282164282631
T:
surf127eps
298921299597301108
T:
ed448goldilocks
430887430899430999
T:
kummer
442459442731443247
T:
nistp256
732063734986735924
T:
surf2113
910150913504914611
T:
curve2251
125410512641781272749
T:
sclaus2048
149595514964551496888
T:
ed521gs
158300115865021590231
T:
claus
176791517698591770628
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
121605121609122116
T:
kumfp127g
123793123805123813
T:
kumjacfp127g
153358153460153594
T:
jacfp128bk
188658188916189216
T:
prjfp128bk
193358193373193429
T:
hecfp128bk
197291197342197383
T:
jacfp127i
200586200631200724
T:
hecfp128fkt
211539211544211548
T:
kumfp128g
214375214376214380
T:
curve25519
251463257199260181
T:
gls1271
257482257548257575
T:
prjfp127i
261704261771261946
T:
ecfp256e
262089262148262183
T:
hecfp127i
269544269617269746
T:
ecfp256q
269100271003278320
T:
sclaus1024
276681276702276753
T:
ecfp256i
269224278801279540
T:
surf127eps
329607329713329870
T:
ecfp256s
335719335775335955
T:
ecfp256h
426483426636426714
T:
hecfp128i
430814430836430840
T:
kummer
734265734700734989
T:
surf2113
909883910250910974
T:
ed448goldilocks
907894913986914570
T:
curve2251
991209991229992204
T:
nistp256
125728112649271268177
T:
sclaus2048
149560414963091497003
T:
ed521gs
158554115866141593700
T:
claus
176753017690431769897
T:
nist521gs

amd64; Bonnell (30661); 2011 Intel Atom D2500; 2 x 1866MHz; h8atom, supercop-20230530

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
128702129682130893
T:
jacfp127i
135849136927137942
T:
kumjacfp127g
141365142261143353
T:
prjfp127i
143766144984146524
T:
hecfp127i
217819219058220101
T:
jacfp128bk
233786236110239120
T:
ecfp256e
245952248080249970
T:
prjfp128bk
246589248500252392
T:
curve2251
248724250642253008
T:
hecfp128fkt
249144251902253764
T:
hecfp128bk
250194251965254198
T:
hecfp128i
256333259399262850
T:
ecfp256s
262255264936268436
T:
ecfp256h
264131267421270774
T:
ecfp256q
313943317660320467
T:
gls1271
544551545734546875
T:
kumfp127g
103538410395071041453
T:
kumfp128g
109598310959971096865
T:
curve25519
112139311257401136905
T:
surf127eps
115682711651081180158
T:
ecfp256i
130790813164061321670
T:
ed448goldilocks
134908213491731356558
T:
nistp256
171145117306451742419
T:
surf2113
174524017586661765456
T:
kummer
175541817752561797166
T:
sclaus1024
705835270739907138726
T:
ed521gs
855803285817418616832
T:
nist521gs
870480887678228825180
T:
sclaus2048
106196021068967210747940
T:
claus
Cycles to compute a shared secret
25%50%75%system
548198552517554113
T:
kumfp127g
556325557732558565
T:
kumjacfp127g
727804732018733866
T:
jacfp128bk
761614763651779597
T:
gls1271
864332867559869176
T:
prjfp128bk
888146892185894873
T:
hecfp128bk
923699928137930559
T:
hecfp128fkt
936628938140939862
T:
jacfp127i
101748510176951029336
T:
curve2251
106243210659461068095
T:
kumfp128g
108918610936031096529
T:
ecfp256e
109585710958641096116
T:
curve25519
111108211130981114995
T:
prjfp127i
111897811234511133174
T:
surf127eps
113012211374231140972
T:
ecfp256q
113799011456341149169
T:
hecfp127i
115647011653811169357
T:
ecfp256i
135497613614371366379
T:
ecfp256s
143932614496581453998
T:
ecfp256h
172645917338021742314
T:
surf2113
174614317572521763489
T:
kummer
177186117869181799343
T:
sclaus1024
195596119710951979012
T:
hecfp128i
449607245097714515469
T:
ed448goldilocks
453779245467104554466
T:
nistp256
705535671297247145278
T:
ed521gs
846321784783938554301
T:
nist521gs
875630088266018855007
T:
sclaus2048
106246351069666510717028
T:
claus

amd64; Sandy Bridge+AES (206a7); 2011 Intel Xeon E3-1225; 4 x 3100MHz; hydra7, supercop-20230530

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
321523285433501
T:
jacfp127i
332093363234253
T:
kumjacfp127g
385473925440025
T:
prjfp127i
392774017440981
T:
hecfp127i
473964856050085
T:
jacfp128bk
553385610657105
T:
ecfp256e
564095714958170
T:
prjfp128bk
568685745858395
T:
hecfp128fkt
567525754058687
T:
hecfp128bk
573485805059063
T:
hecfp128i
581555876859848
T:
ecfp256h
603356064562172
T:
curve2251
603716123762600
T:
ecfp256s
639646469566101
T:
ecfp256q
793448039581705
T:
gls254
894448947189497
T:
kummer
103498104639105728
T:
gls1271
114843114901114977
T:
gls254prot
121404121563121734
T:
kumfp127g
147175147466151319
T:
curve25519
178418178470178548
T:
k277taa
185379185466185547
T:
kumfp128g
196709197122197839
T:
k298
266955267166267267
T:
k277mon
268432271107279059
T:
ecfp256i
274765276006276821
T:
surf127eps
288144288451288835
T:
ed448goldilocks
286933289182291880
T:
sclaus1024
382564383032384477
T:
nistp256
628851632199633628
T:
surf2113
121454712176651218708
T:
ed521gs
138908413895831390425
T:
nist521gs
145629414669691476425
T:
sclaus2048
171473017179111721360
T:
claus
Cycles to compute a shared secret
25%50%75%system
725667563775812
T:
gls254
892208925089285
T:
kummer
114802114868115034
T:
gls254prot
123413123584123812
T:
kumfp127g
130626130759130885
T:
kumjacfp127g
140540145388152932
T:
jacfp128bk
158857158965161957
T:
curve25519
178364178396178459
T:
k277taa
178725178908179169
T:
prjfp128bk
183089183258183514
T:
hecfp128bk
189962190245191920
T:
hecfp128fkt
191865191961192070
T:
kumfp128g
196576196875197058
T:
k298
200346200552200787
T:
jacfp127i
229241231382231533
T:
curve2251
248074248338248710
T:
ecfp256e
253425257322258115
T:
gls1271
257693257924258248
T:
ecfp256q
261036261358261711
T:
prjfp127i
263610263783264002
T:
ecfp256i
266816267145267589
T:
hecfp127i
267172267216267238
T:
k277mon
270721271298271985
T:
surf127eps
286332291244291501
T:
sclaus1024
304710304904305072
T:
ecfp256h
326432326743327184
T:
ecfp256s
414340415006429598
T:
hecfp128i
625315628770629732
T:
surf2113
826323826942837699
T:
ed448goldilocks
100563910062961007738
T:
nistp256
122435212253761229252
T:
ed521gs
138858813890471389579
T:
nist521gs
144553914510221475047
T:
sclaus2048
171320217165981725522
T:
claus

amd64; Sandy Bridge (206a7); 2011 Intel Core i3-2310M; 2 x 2100MHz; h6sandy, supercop-20221122

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
591685983761944
T:
curve2251
894528958889791
T:
kummer
101250102395103449
T:
gls1271
107452107539107762
T:
gls254
108249108599108883
T:
gls254prot
147094147218147671
T:
curve25519
177040177300178009
T:
k277taa
183491183946184615
T:
k298
214621214989215416
T:
ed448goldilocks
259678260156261179
T:
k277mon
269017269751270653
T:
surf127eps
286353289090292233
T:
sclaus1024
343116344395345955
T:
nistp256
629600632237635362
T:
surf2113
121325812154821219566
T:
ed521gs
139190513946571398430
T:
nist521gs
145974114726091480128
T:
sclaus2048
171594317198271725514
T:
claus
Cycles to compute a shared secret
25%50%75%system
892428941489684
T:
kummer
107356107485107835
T:
gls254
108296108559108801
T:
gls254prot
159097159723164972
T:
curve25519
177025177272177873
T:
k277taa
183226183518184050
T:
k298
231231231676232202
T:
curve2251
252299253214254880
T:
gls1271
259578260036260665
T:
k277mon
265429266340267046
T:
surf127eps
290082291046292165
T:
sclaus1024
624716627074630414
T:
surf2113
654716654985656946
T:
ed448goldilocks
891604892422896895
T:
nistp256
122678912303601233621
T:
ed521gs
138913213901261392126
T:
nist521gs
147117314760331493818
T:
sclaus2048
171804017193941722467
T:
claus

amd64; K10 45nm (100f63); 2010 AMD Athlon II Neo K125; 1 x 1700MHz; h3neo, supercop-20230530

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
328733315533491
T:
jacfp127i
351463538435743
T:
kumjacfp127g
382623854438897
T:
hecfp127i
383973869239006
T:
prjfp127i
527185355254345
T:
jacfp128bk
594395996060788
T:
prjfp128bk
600006075661433
T:
hecfp128i
604996117861946
T:
hecfp128bk
603996118761948
T:
hecfp128fkt
755607706078587
T:
ecfp256e
791708060382277
T:
ecfp256s
804798157383202
T:
ecfp256h
818418371285915
T:
ecfp256q
112435113747114853
T:
gls1271
131097131149131206
T:
kumfp127g
219973219990220053
T:
curve25519
224569224634225168
T:
kumfp128g
264978267615269865
T:
sclaus1024
292765294304296248
T:
ecfp256i
293728294770295221
T:
surf127eps
342671342816343882
T:
ed448goldilocks
425489425554425662
T:
nistp256
436089436158436737
T:
kummer
108358510891491090271
T:
surf2113
127391212838761293873
T:
sclaus2048
133080913355501339697
T:
curve2251
155583115567461559070
T:
ed521gs
157180915763611627882
T:
claus
182242618232951825083
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
132629132631132635
T:
kumfp127g
134339134342134353
T:
kumjacfp127g
162243162615162679
T:
jacfp128bk
201303201325201362
T:
prjfp128bk
206060206180206201
T:
hecfp128bk
212216212358212587
T:
jacfp127i
213948213964213986
T:
hecfp128fkt
219944219944219945
T:
curve25519
230031230041230056
T:
kumfp128g
267233269951271934
T:
sclaus1024
271995272016272068
T:
prjfp127i
267384272987277189
T:
gls1271
273463273472273517
T:
ecfp256e
281511281543281627
T:
hecfp127i
284086284180284215
T:
ecfp256q
291450291480291515
T:
ecfp256i
290820293090293311
T:
surf127eps
344986345066345180
T:
ecfp256s
353734353762353816
T:
ecfp256h
436085436118436142
T:
kummer
454623454680454724
T:
hecfp128i
944579945845946522
T:
ed448goldilocks
102474110247661025624
T:
nistp256
108141410840141087828
T:
surf2113
128851412903211291115
T:
sclaus2048
132347813271791333901
T:
curve2251
155522715557171556757
T:
ed521gs
156038915680511628566
T:
claus
182067118228631824037
T:
nist521gs

amd64; Bonnell (106ca); 2010 Intel Atom N455; 1 x 1000MHz; h2atom, supercop-20230530

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
126630126958127574
T:
jacfp127i
132465132986134605
T:
kumjacfp127g
139876140254140920
T:
prjfp127i
142896143236143996
T:
hecfp127i
216606217001217555
T:
jacfp128bk
234845237563240547
T:
ecfp256e
244424245251246432
T:
prjfp128bk
246189246994247887
T:
hecfp128i
247836248667249888
T:
hecfp128fkt
248013248889250492
T:
hecfp128bk
248710249750253252
T:
curve2251
257027260345262866
T:
ecfp256s
263804265512268899
T:
ecfp256h
266631270337273280
T:
ecfp256q
312033316426319252
T:
gls1271
549218549235550352
T:
kumfp127g
103568610367191038429
T:
kumfp128g
110986311104281111423
T:
curve25519
117326511797671188718
T:
ecfp256i
131359713147861316713
T:
ed448goldilocks
134995313516451354299
T:
nistp256
172915917298821731855
T:
kummer
207872320973692117574
T:
sclaus1024
724717772552327268103
T:
ed521gs
859121586014108624745
T:
nist521gs
107904751085648110937655
T:
sclaus2048
121683131220099112228132
T:
claus
Cycles to compute a shared secret
25%50%75%system
556646556713557507
T:
kumfp127g
559417559468560128
T:
kumjacfp127g
729558729619731185
T:
jacfp128bk
761577763381766351
T:
gls1271
862758862912865082
T:
prjfp128bk
886749888349890151
T:
hecfp128bk
921504921834924129
T:
hecfp128fkt
931980932552934786
T:
jacfp127i
102008310208911026040
T:
curve2251
106134510619471062509
T:
kumfp128g
110552911071871111499
T:
ecfp256e
110829211089011110336
T:
prjfp127i
110964811097591110919
T:
curve25519
114135311417361144040
T:
hecfp127i
114710411491851152698
T:
ecfp256q
117759911790821183583
T:
ecfp256i
138148613827881387024
T:
ecfp256s
145918514596901464368
T:
ecfp256h
172844517287111730879
T:
kummer
195485919559361958540
T:
hecfp128i
212556121563192177099
T:
sclaus1024
447360244745324482761
T:
ed448goldilocks
453772845450914554973
T:
nistp256
724499972494117264531
T:
ed521gs
858969686081098787726
T:
nist521gs
107843481099844911044046
T:
sclaus2048
122149641224158112288188
T:
claus

amd64; Core 2 45nm (1067a); 2009 Intel Core 2 Duo E7600; 2 x 3060MHz; wolfdale, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
406774132242094
T:
jacfp127i
427304327344095
T:
kumjacfp127g
472714778048461
T:
prjfp127i
491174967350436
T:
hecfp127i
725487323674084
T:
ecfp256e
733097388474522
T:
jacfp128bk
799238039281134
T:
ecfp256s
803188158783067
T:
ecfp256h
863628720688261
T:
prjfp128bk
865288751988880
T:
ecfp256q
872878791989310
T:
hecfp128bk
873578805689357
T:
hecfp128i
881498883490280
T:
hecfp128fkt
122881124547125448
T:
gls1271
127265127755128923
T:
curve2251
179188179292179431
T:
kumfp127g
292790294412296646
T:
curve25519
314767314895315098
T:
kumfp128g
330667331571332603
T:
ed448goldilocks
386187388062390498
T:
ecfp256i
401585406463410675
T:
kummer
415452417360419631
T:
surf127eps
421289425425429879
T:
sclaus1024
498488498788500667
T:
nistp256
757827761161763650
T:
surf2113
166172216696691670751
T:
ed521gs
191274019145751916418
T:
nist521gs
215411021796952246243
T:
sclaus2048
253235225372472543049
T:
claus
Cycles to compute a shared secret
25%50%75%system
183557183652183771
T:
kumfp127g
187598187663187781
T:
kumjacfp127g
242678242813243022
T:
jacfp128bk
292024292162292326
T:
jacfp127i
294345295138296218
T:
curve25519
300671300827300930
T:
prjfp128bk
302357305835310088
T:
gls1271
306058306189306366
T:
hecfp128bk
317678317854318172
T:
hecfp128fkt
327133327308327475
T:
kumfp128g
363825363974364258
T:
ecfp256e
379459379925380534
T:
ecfp256q
380620380861381107
T:
prjfp127i
385004385235385448
T:
ecfp256i
388943389097389245
T:
hecfp127i
397531398350401802
T:
kummer
413906415892418409
T:
surf127eps
418994420210422090
T:
sclaus1024
460186460489461651
T:
ecfp256h
471325471581471893
T:
ecfp256s
524874524981526897
T:
curve2251
692707692884693535
T:
hecfp128i
755813756949764190
T:
surf2113
103086310327951039502
T:
ed448goldilocks
116586611663301166780
T:
nistp256
165310216605791664694
T:
ed521gs
191232519147661916326
T:
nist521gs
215613021878772272333
T:
sclaus2048
253856725452522548175
T:
claus

amd64; Core 2 45nm (10676); 2007 Intel Xeon X5450; 8 x 2992MHz; unstable; gcc14, supercop-20220506

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
450734746350135
T:
jacfp127i
470414835249377
T:
kumjacfp127g
517235395157038
T:
prjfp127i
530025517759391
T:
hecfp127i
713697255876668
T:
ecfp256e
774197899684435
T:
ecfp256h
780957935180571
T:
jacfp128bk
796888159186347
T:
ecfp256s
884948908191698
T:
ecfp256q
899879267895313
T:
prjfp128bk
906959309296851
T:
hecfp128fkt
914649368897172
T:
hecfp128i
918849393196811
T:
hecfp128bk
122081124406126622
T:
gls1271
127352128298131045
T:
curve2251
178621178639178774
T:
kumfp127g
299212299279299300
T:
curve25519
314856315067315465
T:
kumfp128g
329748330281330858
T:
ed448goldilocks
384083386835388905
T:
ecfp256i
413326415894420963
T:
surf127eps
422448422696424925
T:
kummer
422389426879430417
T:
sclaus1024
592353599624599809
T:
nistp256
703975707187707993
T:
surf2113
165127616548471665749
T:
ed521gs
196582819681241970593
T:
nist521gs
214164921584622174320
T:
sclaus2048
253159425367742542306
T:
claus
Cycles to compute a shared secret
25%50%75%system
183308183339183401
T:
kumfp127g
187644188022188184
T:
kumjacfp127g
244882244967245135
T:
jacfp128bk
292653292810292871
T:
jacfp127i
298596298922299590
T:
curve25519
301634301818301972
T:
prjfp128bk
307377307524307663
T:
hecfp128bk
315724316398332895
T:
gls1271
318241318313318421
T:
hecfp128fkt
327094327144327284
T:
kumfp128g
362120362446362793
T:
ecfp256e
377991378292378707
T:
ecfp256q
381459381554381707
T:
prjfp127i
383653383881384037
T:
ecfp256i
388709388774388844
T:
hecfp127i
412903415509419428
T:
surf127eps
422428422854424362
T:
kummer
424342428316440575
T:
sclaus1024
455103455540455801
T:
ecfp256h
470134470272470478
T:
ecfp256s
519804523960528188
T:
curve2251
694179694320694727
T:
hecfp128i
701889703404704125
T:
surf2113
102255210230961026174
T:
ed448goldilocks
117578911759971177498
T:
nistp256
165075316546411665087
T:
ed521gs
196526419670891969059
T:
nist521gs
212717521455732206421
T:
sclaus2048
253738125388522573470
T:
claus

amd64; Core 2 65nm (6fb); 2007 Intel Core 2 Quad Q6600; 4 x 2404MHz; margaux, supercop-20230530

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
434804451145858
T:
jacfp127i
453614655347705
T:
kumjacfp127g
500235094952336
T:
prjfp127i
519045283454053
T:
hecfp127i
767577772978693
T:
jacfp128bk
838118488286328
T:
ecfp256e
868538744888816
T:
ecfp256h
893769060593430
T:
hecfp128bk
893089069993267
T:
hecfp128i
893399081692665
T:
prjfp128bk
898919126693894
T:
hecfp128fkt
909469224293429
T:
ecfp256s
948929601697504
T:
ecfp256q
127336129391131515
T:
gls1271
131124131940133886
T:
curve2251
180693180707180739
T:
kumfp127g
294658294879294972
T:
curve25519
316242316421316593
T:
kumfp128g
331145332096337151
T:
ed448goldilocks
397034398743400743
T:
ecfp256i
415274417286419254
T:
surf127eps
417297417304417364
T:
kummer
422554427000430104
T:
sclaus1024
511364512116513660
T:
nistp256
769847773528775771
T:
surf2113
170359217049361707088
T:
ed521gs
195962919605441961531
T:
nist521gs
215853721714572187846
T:
sclaus2048
253828825441752549890
T:
claus
Cycles to compute a shared secret
25%50%75%system
183221183276186303
T:
kumfp127g
187926187929188367
T:
kumjacfp127g
242890243042243202
T:
jacfp128bk
292297292506292626
T:
jacfp127i
294861295283295549
T:
curve25519
300200300388300467
T:
prjfp128bk
307299307417307572
T:
hecfp128bk
318633318919319031
T:
hecfp128fkt
315709320673327859
T:
gls1271
326721326733326733
T:
kumfp128g
371689371932372247
T:
ecfp256e
382320382523382805
T:
prjfp127i
385874386746387319
T:
ecfp256q
388772388936389012
T:
hecfp127i
394416394669394874
T:
ecfp256i
415219416393418449
T:
surf127eps
417312417322417346
T:
kummer
420447421537430000
T:
sclaus1024
463415463725463932
T:
ecfp256h
481802482069482373
T:
ecfp256s
554522555930556856
T:
curve2251
693828693904694072
T:
hecfp128i
769879771269776043
T:
surf2113
102649610301421032710
T:
ed448goldilocks
122690912273791227732
T:
nistp256
170818317082111708833
T:
ed521gs
195882919603951960766
T:
nist521gs
217930721969502200515
T:
sclaus2048
254837325495062553500
T:
claus

amd64; Core 2 65nm (6fb); 2007 Intel Core 2 Duo T7300; 2 x 2000MHz; trident, supercop-20230530

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
401884079041395
T:
jacfp127i
424514304243581
T:
kumjacfp127g
473324784648430
T:
prjfp127i
482924877449276
T:
hecfp127i
728027332173896
T:
jacfp128bk
798028051181306
T:
ecfp256e
865118705888023
T:
prjfp128bk
863228708788400
T:
hecfp128bk
864058711488501
T:
hecfp128i
867118745188728
T:
hecfp128fkt
872828802189224
T:
ecfp256h
886618985690911
T:
ecfp256s
932439403695178
T:
ecfp256q
126256127897131721
T:
gls1271
132542133163135272
T:
curve2251
179058179191179379
T:
kumfp127g
294270294824296432
T:
curve25519
314380314838315118
T:
kumfp128g
329413330064331136
T:
ed448goldilocks
393373395158397443
T:
ecfp256i
412043413946419169
T:
kummer
416062418519421637
T:
surf127eps
425277431811454521
T:
sclaus1024
501201501934502794
T:
nistp256
768058771706774476
T:
surf2113
165761316594741661428
T:
ed521gs
191243019149091916572
T:
nist521gs
214781521654192183433
T:
sclaus2048
254796425572592590138
T:
claus
Cycles to compute a shared secret
25%50%75%system
183297183492183641
T:
kumfp127g
187586187729187980
T:
kumjacfp127g
243010243222243896
T:
jacfp128bk
291272291494291828
T:
jacfp127i
294076294486295412
T:
curve25519
300326300493300857
T:
prjfp128bk
307464307881308934
T:
hecfp128bk
318146318314318768
T:
hecfp128fkt
326712327151327495
T:
kumfp128g
311888329927334181
T:
gls1271
373978374144374467
T:
ecfp256e
380078380275380610
T:
prjfp127i
386347386751387482
T:
ecfp256q
388698388883389139
T:
hecfp127i
393153393454393796
T:
ecfp256i
411986413670417449
T:
kummer
415110417668420195
T:
surf127eps
415582430852464224
T:
sclaus1024
465207465591465818
T:
ecfp256h
479641480129480801
T:
ecfp256s
550656551015558254
T:
curve2251
693624693910696117
T:
hecfp128i
767604773013774924
T:
surf2113
103226310343111037151
T:
ed448goldilocks
116959611726671173392
T:
nistp256
165704916583111659659
T:
ed521gs
191070019123591914401
T:
nist521gs
215304821718682181797
T:
sclaus2048
254932925576072596979
T:
claus

Version

This is version 2023.09.09 of the results-dh.html web page. This web page is in the public domain.