VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems

ECRYPT II

Measurements of public-key Diffie–Hellman secret-sharing systems, indexed by machine

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.

What do the graphs and tables mean?

• Time to compute a shared secret, given one user's secret key and another user's public key.
• Time to compute a key pair.
• Space for a secret key.
• Space for a public key.
• Space for a shared secret.

Each computer also has a series of tables, five tables for each computer. The first table shows the time, in cycles, to generate a key pair. Each row of the table lists

• the first quartile of many time measurements,
• the median of many time measurements,
• the third quartile of many time measurements, and
• the name of the secret-sharing systems.

The computer name is linked to additional information about the implementations and compilers selected for benchmarking.

amd64; HW+AES (306c3); 2013 Intel Xeon E3-1275 V3; 4 x 3500MHz; titan0, supercop-20141124

Cycles to generate a key pair quartile median quartile system 35208 36052 37292 hecfp127i 45884 46500 48536 ecfp256e 46100 47400 48672 hecfp128fkt 46504 47472 49660 hecfp128i 47032 47800 51788 ecfp256h 46892 48960 52016 hecfp128bk 49028 49444 53652 curve2251 49128 50060 54020 ecfp256s 52036 52636 53256 gls254 53816 54764 58688 ecfp256q 68556 68616 68784 kummer 69736 69824 69996 gls254prot 95992 97496 98152 gls1271 107796 108000 108416 kumfp127g 155176 155268 155352 kumfp128g 169804 169920 178156 curve25519 177040 177432 182436 ed448goldilocks 221388 222812 225380 ecfp256i 221988 222840 223352 surf127eps 223796 226608 235492 sclaus1024 215624 232432 251288 hector 283856 284040 284288 nistp256 476736 478292 480032 surf2113 1117616 1134016 1166388 sclaus2048 1339508 1342364 1345408 claus Cycles to compute a shared secret quartile median quartile system 39552 39596 39628 gls254 60444 60556 68628 kummer 61648 61712 61888 gls254prot 110400 110740 110920 kumfp127g 144732 144880 145068 hecfp128bk 150084 150236 150464 hecfp128fkt 159560 159716 159796 curve2251 161584 161648 161708 curve25519 161332 161836 161888 kumfp128g 204440 204532 204660 ecfp256e 209136 209408 209712 surf127eps 212396 212484 212612 ecfp256q 216588 216868 217288 gls1271 218252 218360 218496 ecfp256i 221088 221112 230056 sclaus1024 230072 230400 232456 hecfp127i 247772 247952 248100 ecfp256h 270412 270672 271072 ecfp256s 327708 328100 328400 hecfp128i 470736 470968 471232 surf2113 531880 532056 532188 ed448goldilocks 705604 706068 706484 nistp256 753432 753840 754256 hector 1128780 1147528 1189528 sclaus2048 1318048 1318232 1318536 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 28 surf2113 29 hector 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 32 gls254 32 gls254prot 32 hecfp127i 32 hecfp128bk 32 hecfp128fkt 32 hecfp128i 32 kumfp127g 32 kumfp128g 32 kummer 32 nistp256 32 surf127eps 144 ed448goldilocks 256 claus Public key bytes system 32 curve2251 32 curve25519 32 gls1271 48 kumfp127g 48 kumfp128g 48 kummer 48 surf127eps 48 surf2113 56 ed448goldilocks 60 hector 64 ecfp256e 64 ecfp256h 64 ecfp256q 64 ecfp256s 64 gls254 64 gls254prot 64 hecfp127i 64 hecfp128bk 64 hecfp128fkt 64 hecfp128i 64 nistp256 96 ecfp256i 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 48 kumfp127g 48 kumfp128g 48 kummer 48 surf127eps 48 surf2113 60 hector 64 ed448goldilocks 64 gls254 64 gls254prot 64 hecfp127i 64 hecfp128bk 64 hecfp128fkt 64 hecfp128i 64 nistp256 128 claus 128 sclaus1024 256 sclaus2048

x86; normally amd64; HW+AES (306c3); 2013 Intel Xeon E3-1275 V3; 4 x 3500MHz; titan0, supercop-20141124

Cycles to generate a key pair quartile median quartile system 420180 420596 420828 curve25519 699896 700304 700672 kummer 870352 871016 872100 nistp256 1267812 1268308 1268892 ed448goldilocks Cycles to compute a shared secret quartile median quartile system 408920 409628 409848 curve25519 686772 687040 688384 kummer 3076340 3077088 3078904 nistp256 4207376 4208752 4210552 ed448goldilocks Secret key bytes system 32 curve25519 32 kummer 32 nistp256 144 ed448goldilocks Public key bytes system 32 curve25519 48 kummer 56 ed448goldilocks 64 nistp256 Shared secret bytes system 32 curve25519 48 kummer 64 ed448goldilocks 64 nistp256

amd64; HW+AES (306c3); 2013 Intel Core i7-4770; 4 x 3400MHz; wintermute, supercop-20140505

Cycles to generate a key pair quartile median quartile system 52812 53264 55108 curve2251 63808 64692 66004 ecfp256h 65120 66012 67272 ecfp256e 68760 69548 70896 ecfp256s 74344 75108 76900 ecfp256q 82512 82572 82660 kummer 172500 172620 172768 curve25519 267176 269452 271080 ecfp256i 254596 272560 292904 hector 294700 297020 299388 sclaus1024 538140 540308 542292 surf2113 1382892 1392060 1400620 sclaus2048 1732556 1736308 1740184 claus Cycles to compute a shared secret quartile median quartile system 72080 72120 72164 kummer 159316 159396 159492 curve2251 163232 163296 163364 curve25519 242636 243068 245500 ecfp256e 245596 245776 246072 ecfp256q 259016 259184 259440 ecfp256i 275380 275704 276064 ecfp256h 291168 291308 291512 sclaus1024 324912 325336 326028 ecfp256s 523040 523140 523320 surf2113 835624 836100 838304 hector 1408056 1408916 1410164 sclaus2048 1705252 1706548 1707376 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 28 surf2113 29 hector 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 kummer 256 claus Public key bytes system 32 curve2251 32 curve25519 48 kummer 48 surf2113 60 hector 64 ecfp256e 64 ecfp256h 64 ecfp256q 64 ecfp256s 96 ecfp256i 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 48 kummer 48 surf2113 60 hector 128 claus 128 sclaus1024 256 sclaus2048

armeabi; Cortex-A9+NEON (413fc090); 2012 VIA WonderMedia 8850; 1 x 1200MHz; h7green, supercop-20141014

Cycles to generate a key pair quartile median quartile system 367028 367087 368050 kummer 578844 578976 580850 curve25519 761306 769225 779604 ed448goldilocks 1437760 1448247 1492590 nistp256 68901978486341632 69019694949990400 69182852167630848 claus Cycles to compute a shared secret quartile median quartile system 355908 356039 357242 kummer 567531 567703 568615 curve25519 2221191 2223601 2261160 ed448goldilocks 4500312 4518710 4546546 nistp256 68685421940310016 68812583037042688 68996111284568064 claus Secret key bytes system 32 curve25519 32 kummer 32 nistp256 144 ed448goldilocks 256 claus Public key bytes system 32 curve25519 48 kummer 56 ed448goldilocks 64 nistp256 128 claus Shared secret bytes system 32 curve25519 48 kummer 64 ed448goldilocks 64 nistp256 128 claus

armeabi; Cortex-A15 (410fc0f4); 2012 Samsung Exynos 5 Dual; 2 x 1700MHz; sachr, supercop-20140514

Cycles to generate a key pair quartile median quartile system 326150 326230 326375 curve25519 5205564 5253380 5305602 sclaus1024 11112071 11123717 11138554 claus 24540055 24698077 24858402 sclaus2048 Cycles to compute a shared secret quartile median quartile system 315247 315284 315329 curve25519 5265355 5282361 5296052 sclaus1024 11084209 11088115 11107628 claus 24790602 24806223 24830060 sclaus2048 Secret key bytes system 20 sclaus1024 28 sclaus2048 32 curve25519 256 claus Public key bytes system 32 curve25519 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve25519 128 claus 128 sclaus1024 256 sclaus2048

amd64; Piledriver (610f01); 2012 AMD A10-5800K; 2 x 3800MHz; hydra9, supercop-20141014

Cycles to generate a key pair quartile median quartile system 52994 53904 57077 hecfp127i 69279 71926 76141 ecfp256e 74361 76925 81654 ecfp256h 76031 78470 82599 ecfp256s 80199 80861 82591 hecfp128bk 80262 80891 82392 hecfp128i 80470 81066 82264 hecfp128fkt 79552 81942 86454 ecfp256q 83896 84540 88260 curve2251 113359 114349 115301 gls254 123741 125287 126595 gls1271 139653 139731 139782 gls254prot 158539 158572 158600 kumfp127g 226312 226362 226462 kummer 260667 260683 260697 kumfp128g 309500 309750 310501 curve25519 344261 346390 348350 ecfp256i 348583 375384 406327 hector 406060 407228 408113 surf127eps 405991 407338 413512 ed448goldilocks 445884 449719 454655 sclaus1024 522666 528060 529248 nistp256 732922 735308 738794 surf2113 2163602 2180093 2195145 sclaus2048 2662524 2670943 2681330 claus Cycles to compute a shared secret quartile median quartile system 92424 92495 92564 gls254 121793 121838 121972 gls254prot 165255 165255 165255 kumfp127g 208022 208434 208528 kummer 247944 248041 248162 curve2251 258583 258650 258937 hecfp128bk 268671 268685 268753 hecfp128fkt 271850 271897 271925 kumfp128g 285333 285670 289248 gls1271 297636 297695 297697 curve25519 324512 324627 324947 ecfp256e 340259 340619 341036 ecfp256q 342348 343010 343357 ecfp256i 366888 367063 367142 hecfp127i 385092 385184 385404 surf127eps 410117 410411 411158 ecfp256h 427538 427808 428117 ecfp256s 438238 438603 439286 sclaus1024 575165 575525 576443 hecfp128i 718588 718756 720109 surf2113 1143365 1144636 1145141 hector 1279832 1282010 1282128 ed448goldilocks 1835546 1838932 1843582 nistp256 2207539 2219857 2221658 sclaus2048 2600048 2603033 2611845 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 28 surf2113 29 hector 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 32 gls254 32 gls254prot 32 hecfp127i 32 hecfp128bk 32 hecfp128fkt 32 hecfp128i 32 kumfp127g 32 kumfp128g 32 kummer 32 nistp256 32 surf127eps 144 ed448goldilocks 256 claus Public key bytes system 32 curve2251 32 curve25519 32 gls1271 48 kumfp127g 48 kumfp128g 48 kummer 48 surf127eps 48 surf2113 56 ed448goldilocks 60 hector 64 ecfp256e 64 ecfp256h 64 ecfp256q 64 ecfp256s 64 gls254 64 gls254prot 64 hecfp127i 64 hecfp128bk 64 hecfp128fkt 64 hecfp128i 64 nistp256 96 ecfp256i 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 48 kumfp127g 48 kumfp128g 48 kummer 48 surf127eps 48 surf2113 60 hector 64 ed448goldilocks 64 gls254 64 gls254prot 64 hecfp127i 64 hecfp128bk 64 hecfp128fkt 64 hecfp128i 64 nistp256 128 claus 128 sclaus1024 256 sclaus2048

x86; normally amd64; Piledriver (610f01); 2012 AMD A10-5800K; 2 x 3800MHz; hydra9, supercop-20141014

Cycles to generate a key pair quartile median quartile system 782452 783502 786022 curve25519 1184876 1186410 1187899 nistp256 1282236 1282698 1283305 kummer 1640352 1644655 1648509 ed448goldilocks Cycles to compute a shared secret quartile median quartile system 761332 766180 766992 curve25519 1261426 1261573 1262292 kummer 4181852 4187031 4191750 nistp256 5185811 5186102 5195127 ed448goldilocks Secret key bytes system 32 curve25519 32 kummer 32 nistp256 144 ed448goldilocks Public key bytes system 32 curve25519 48 kummer 56 ed448goldilocks 64 nistp256 Shared secret bytes system 32 curve25519 48 kummer 64 ed448goldilocks 64 nistp256

amd64; Piledriver (610f01); 2012 AMD A10-4655M; 2 x 2000MHz; h9trinity, supercop-20141014

Cycles to generate a key pair quartile median quartile system 51647 57512 58897 hecfp127i 68788 71368 74253 ecfp256e 73106 75025 77879 ecfp256h 75264 76891 80097 ecfp256s 78657 79302 80290 hecfp128bk 78976 79501 81237 hecfp128fkt 78938 79606 80275 hecfp128i 78725 80799 84252 ecfp256q 83295 83847 86536 curve2251 113281 114075 115458 gls254 131409 133314 134478 gls1271 139631 139775 139897 gls254prot 158422 158477 158548 kumfp127g 226288 226416 226546 kummer 260650 260686 260702 kumfp128g 317663 317840 318075 curve25519 345302 346936 349218 ecfp256i 348636 375618 406814 hector 404576 405694 406792 ed448goldilocks 406121 407572 408499 surf127eps 445629 449395 454457 sclaus1024 526024 529567 532435 nistp256 732964 735116 738631 surf2113 2203083 2235894 2277663 sclaus2048 2666255 2678335 2692101 claus Cycles to compute a shared secret quartile median quartile system 92014 92316 92347 gls254 121794 121865 122019 gls254prot 165207 165340 165387 kumfp127g 208024 208075 208439 kummer 248248 248297 248436 curve2251 258886 258944 259234 hecfp128bk 268652 268729 268910 hecfp128fkt 271802 271853 271907 kumfp128g 286009 287820 289461 gls1271 300120 300322 300602 curve25519 324468 324717 325014 ecfp256e 340333 340469 340786 ecfp256q 342422 342629 342893 ecfp256i 366649 366809 367011 hecfp127i 385217 385418 385777 surf127eps 410631 410871 411471 ecfp256h 427523 427839 428204 ecfp256s 439077 440539 440996 sclaus1024 575383 576101 576456 hecfp128i 718254 718578 719155 surf2113 1144719 1145706 1148200 hector 1285381 1292816 1298468 ed448goldilocks 1842084 1844301 1849424 nistp256 2228445 2313153 2320251 sclaus2048 2615895 2623650 2631789 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 28 surf2113 29 hector 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 32 gls254 32 gls254prot 32 hecfp127i 32 hecfp128bk 32 hecfp128fkt 32 hecfp128i 32 kumfp127g 32 kumfp128g 32 kummer 32 nistp256 32 surf127eps 144 ed448goldilocks 256 claus Public key bytes system 32 curve2251 32 curve25519 32 gls1271 48 kumfp127g 48 kumfp128g 48 kummer 48 surf127eps 48 surf2113 56 ed448goldilocks 60 hector 64 ecfp256e 64 ecfp256h 64 ecfp256q 64 ecfp256s 64 gls254 64 gls254prot 64 hecfp127i 64 hecfp128bk 64 hecfp128fkt 64 hecfp128i 64 nistp256 96 ecfp256i 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 48 kumfp127g 48 kumfp128g 48 kummer 48 surf127eps 48 surf2113 60 hector 64 ed448goldilocks 64 gls254 64 gls254prot 64 hecfp127i 64 hecfp128bk 64 hecfp128fkt 64 hecfp128i 64 nistp256 128 claus 128 sclaus1024 256 sclaus2048

x86; normally amd64; Piledriver (610f01); 2012 AMD A10-4655M; 2 x 2000MHz; h9trinity, supercop-20141014

Cycles to generate a key pair quartile median quartile system 786097 786543 788588 curve25519 1185220 1186352 1188551 nistp256 1282451 1282993 1283803 kummer 1641067 1643642 1647928 ed448goldilocks Cycles to compute a shared secret quartile median quartile system 761759 768022 768082 curve25519 1261878 1262046 1262665 kummer 4180639 4186970 4190568 nistp256 5186521 5195302 5196080 ed448goldilocks Secret key bytes system 32 curve25519 32 kummer 32 nistp256 144 ed448goldilocks Public key bytes system 32 curve25519 48 kummer 56 ed448goldilocks 64 nistp256 Shared secret bytes system 32 curve25519 48 kummer 64 ed448goldilocks 64 nistp256

amd64; IB+AES (306a9); 2012 Intel Xeon E3-1275 V2; 4 x 3500MHz; hydra8, supercop-20141014

Cycles to generate a key pair quartile median quartile system 36892 37724 39460 hecfp127i 49460 50572 52500 ecfp256e 52056 53212 56196 ecfp256h 53700 54644 56952 ecfp256s 55016 56392 59484 hecfp128i 55324 56804 58592 hecfp128bk 55424 56844 59260 hecfp128fkt 56880 57864 61120 ecfp256q 69148 73772 77172 curve2251 89284 90348 91384 gls254 98712 98760 98812 kummer 102660 104152 105288 gls1271 116272 116472 116656 kumfp127g 124000 124080 124156 gls254prot 164972 165248 165388 kumfp128g 192376 192516 192744 curve25519 233884 234248 234864 ed448goldilocks 241400 242512 243904 ecfp256i 252296 253584 254424 surf127eps 274304 276908 279452 sclaus1024 272796 292048 312872 hector 321244 321484 321772 nistp256 542448 544372 546360 surf2113 1350180 1360056 1373012 sclaus2048 1639320 1646036 1656900 claus Cycles to compute a shared secret quartile median quartile system 76184 76256 76360 gls254 88440 88492 88724 kummer 113928 113968 114032 gls254prot 118764 118944 119260 kumfp127g 161724 161812 161928 hecfp128bk 167204 167328 167476 hecfp128fkt 171180 171292 171376 kumfp128g 182424 182544 182664 curve25519 224444 224556 224680 ecfp256e 225416 225652 225928 curve2251 233668 233880 234152 ecfp256q 234748 235016 241136 gls1271 237608 237980 238620 surf127eps 238712 238836 239076 ecfp256i 244848 245124 245448 hecfp127i 270612 270788 278580 sclaus1024 273564 273744 273968 ecfp256h 296896 297036 297196 ecfp256s 364676 364864 365104 hecfp128i 534452 534900 535408 surf2113 689004 689312 689680 ed448goldilocks 871436 873136 876604 hector 1098356 1098680 1099168 nistp256 1373304 1375228 1379460 sclaus2048 1608996 1612772 1625748 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 28 surf2113 29 hector 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 32 gls254 32 gls254prot 32 hecfp127i 32 hecfp128bk 32 hecfp128fkt 32 hecfp128i 32 kumfp127g 32 kumfp128g 32 kummer 32 nistp256 32 surf127eps 144 ed448goldilocks 256 claus Public key bytes system 32 curve2251 32 curve25519 32 gls1271 48 kumfp127g 48 kumfp128g 48 kummer 48 surf127eps 48 surf2113 56 ed448goldilocks 60 hector 64 ecfp256e 64 ecfp256h 64 ecfp256q 64 ecfp256s 64 gls254 64 gls254prot 64 hecfp127i 64 hecfp128bk 64 hecfp128fkt 64 hecfp128i 64 nistp256 96 ecfp256i 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 48 kumfp127g 48 kumfp128g 48 kummer 48 surf127eps 48 surf2113 60 hector 64 ed448goldilocks 64 gls254 64 gls254prot 64 hecfp127i 64 hecfp128bk 64 hecfp128fkt 64 hecfp128i 64 nistp256 128 claus 128 sclaus1024 256 sclaus2048

x86; normally amd64; IB+AES (306a9); 2012 Intel Xeon E3-1275 V2; 4 x 3500MHz; hydra8, supercop-20141014

Cycles to generate a key pair quartile median quartile system 446084 446644 446912 curve25519 814772 815040 815324 kummer 931416 932512 934172 nistp256 1464132 1467756 1471192 ed448goldilocks Cycles to compute a shared secret quartile median quartile system 433496 433560 433872 curve25519 800684 801112 801612 kummer 3271692 3276980 3281792 nistp256 4542704 4548824 4559920 ed448goldilocks Secret key bytes system 32 curve25519 32 kummer 32 nistp256 144 ed448goldilocks Public key bytes system 32 curve25519 48 kummer 56 ed448goldilocks 64 nistp256 Shared secret bytes system 32 curve25519 48 kummer 64 ed448goldilocks 64 nistp256

amd64; IB+AES (306a9); 2012 Intel Core i5-3210M; 2 x 2500MHz; h9ivy, supercop-20141014

Cycles to generate a key pair quartile median quartile system 35584 36152 37204 hecfp127i 50484 52164 53568 ecfp256e 52116 52880 54476 hecfp128bk 51520 52976 55820 ecfp256h 52316 53240 54892 hecfp128i 52808 53540 54852 hecfp128fkt 53856 55184 57244 ecfp256s 56988 58232 60168 ecfp256q 68556 71912 73848 curve2251 89248 90176 91252 gls254 98692 98760 98828 kummer 102344 103852 104668 gls1271 116360 116520 116672 kumfp127g 123992 124032 124088 gls254prot 164912 165160 165304 kumfp128g 192472 192576 192756 curve25519 233940 234324 234756 ed448goldilocks 241564 242732 244068 ecfp256i 249528 250564 251256 surf127eps 273836 276144 278820 sclaus1024 272956 291776 312936 hector 321416 321612 321768 nistp256 540228 542320 544212 surf2113 1345268 1354532 1361848 sclaus2048 1636396 1641776 1653008 claus Cycles to compute a shared secret quartile median quartile system 76124 76212 76308 gls254 88424 88448 88476 kummer 113964 114036 114096 gls254prot 118904 119032 119232 kumfp127g 161580 161688 161804 hecfp128bk 167348 167448 167560 hecfp128fkt 171220 171292 171360 kumfp128g 182460 182708 182832 curve25519 224328 224532 224700 ecfp256e 224660 225484 280304 curve2251 233808 233940 234248 ecfp256q 235016 235248 235848 surf127eps 236444 238580 247940 gls1271 238716 238880 239100 ecfp256i 244700 245012 245384 hecfp127i 270552 270620 270752 sclaus1024 273532 273644 273812 ecfp256h 296768 296908 297068 ecfp256s 364572 364760 365016 hecfp128i 532168 532712 533200 surf2113 688916 689076 689240 ed448goldilocks 869680 870760 872296 hector 1098316 1098800 1099448 nistp256 1370684 1371316 1372020 sclaus2048 1606884 1608748 1609760 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 28 surf2113 29 hector 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 32 gls254 32 gls254prot 32 hecfp127i 32 hecfp128bk 32 hecfp128fkt 32 hecfp128i 32 kumfp127g 32 kumfp128g 32 kummer 32 nistp256 32 surf127eps 144 ed448goldilocks 256 claus Public key bytes system 32 curve2251 32 curve25519 32 gls1271 48 kumfp127g 48 kumfp128g 48 kummer 48 surf127eps 48 surf2113 56 ed448goldilocks 60 hector 64 ecfp256e 64 ecfp256h 64 ecfp256q 64 ecfp256s 64 gls254 64 gls254prot 64 hecfp127i 64 hecfp128bk 64 hecfp128fkt 64 hecfp128i 64 nistp256 96 ecfp256i 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 48 kumfp127g 48 kumfp128g 48 kummer 48 surf127eps 48 surf2113 60 hector 64 ed448goldilocks 64 gls254 64 gls254prot 64 hecfp127i 64 hecfp128bk 64 hecfp128fkt 64 hecfp128i 64 nistp256 128 claus 128 sclaus1024 256 sclaus2048

x86; normally amd64; IB+AES (306a9); 2012 Intel Core i5-3210M; 2 x 2500MHz; h9ivy, supercop-20141014

Cycles to generate a key pair quartile median quartile system 445416 446284 449092 curve25519 815744 816012 816248 kummer 929276 930132 931316 nistp256 1461544 1462912 1464740 ed448goldilocks Cycles to compute a shared secret quartile median quartile system 431864 432120 432612 curve25519 801056 801308 801764 kummer 3267764 3275472 3279560 nistp256 4534140 4536768 4540208 ed448goldilocks Secret key bytes system 32 curve25519 32 kummer 32 nistp256 144 ed448goldilocks Public key bytes system 32 curve25519 48 kummer 56 ed448goldilocks 64 nistp256 Shared secret bytes system 32 curve25519 48 kummer 64 ed448goldilocks 64 nistp256

armeabi; Scorpion (510f02d2); 2011 Qualcomm Snapdragon S3 APQ8060; 2 x 1782MHz; h6dragon, supercop-20141014

Cycles to generate a key pair quartile median quartile system 331167 331191 331216 kummer 424225 424255 424285 curve25519 679149 679519 683974 ed448goldilocks 1367073 1367220 1367543 nistp256 5529522 5578479 5620284 sclaus1024 16749949 16750867 16753305 claus 24072815 24231213 24369150 sclaus2048 Cycles to compute a shared secret quartile median quartile system 318658 318676 318694 kummer 410111 410128 410149 curve25519 1698387 1698441 1699991 ed448goldilocks 4647524 4647923 4665306 nistp256 5652324 5653853 5687948 sclaus1024 16697164 16698214 16700344 claus 24552494 24582559 24589502 sclaus2048 Secret key bytes system 20 sclaus1024 28 sclaus2048 32 curve25519 32 kummer 32 nistp256 144 ed448goldilocks 256 claus Public key bytes system 32 curve25519 48 kummer 56 ed448goldilocks 64 nistp256 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve25519 48 kummer 64 ed448goldilocks 64 nistp256 128 claus 128 sclaus1024 256 sclaus2048

armeabi; Cortex-A8 (413fc082); 2011 TI Sitara AM3359; 1 x 720MHz; flops, supercop-20140622

Cycles to generate a key pair quartile median quartile system 316737 316760 316781 kummer 2158344 2173979 2196642 sclaus1024 2444756 2453378 2458756 surf127eps 2446576 2455837 2464196 curve25519 10505245 10578592 10652559 sclaus2048 12952782 12979346 13011983 claus Cycles to compute a shared secret quartile median quartile system 305369 305385 305407 kummer 2158286 2160016 2169510 sclaus1024 2436098 2437297 2449549 surf127eps 2442493 2444228 2454995 curve25519 10737577 10743138 10751279 sclaus2048 13001405 13008315 13019175 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 32 curve25519 32 kummer 32 surf127eps 256 claus Public key bytes system 32 curve25519 48 kummer 48 surf127eps 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve25519 48 kummer 48 surf127eps 128 claus 128 sclaus1024 256 sclaus2048

armeabi; Cortex-A8 (413fc082); 2011 TI Sitara AM3359; 1 x 720MHz; h7beagle, supercop-20140622

Cycles to generate a key pair quartile median quartile system 316722 316744 316770 kummer 503320 510938 510974 curve25519 18808594 18816559 18841058 claus Cycles to compute a shared secret quartile median quartile system 305380 305395 305413 kummer 497352 497389 498142 curve25519 18774651 18780745 18787096 claus Secret key bytes system 32 curve25519 32 kummer 256 claus Public key bytes system 32 curve25519 48 kummer 128 claus Shared secret bytes system 32 curve25519 48 kummer 128 claus

amd64; Bulldozer (600f12); 2011 AMD FX-8120; 4 x 3100MHz; hydra6, supercop-20140622

Cycles to generate a key pair quartile median quartile system 54284 54859 55870 hecfp127i 82234 82858 86600 hecfp128bk 82752 83672 84612 hecfp128fkt 83382 84088 85107 hecfp128i 86205 87685 91562 ecfp256e 90623 92885 96873 ecfp256h 92593 93173 95286 curve2251 94896 97317 100234 ecfp256s 97066 99561 103088 ecfp256q 119360 120221 121529 gls254 139169 141010 142167 gls1271 164453 164615 165708 kumfp127g 271710 271738 271996 kummer 272958 272964 272968 kumfp128g 326974 329360 332974 curve25519 368984 372040 375673 ecfp256i 378996 408248 441723 hector 423784 425314 426300 surf127eps 457210 461194 465730 sclaus1024 792569 795276 798948 surf2113 2206185 2222950 2238599 sclaus2048 2731764 2743460 2781143 claus Cycles to compute a shared secret quartile median quartile system 99200 99398 99458 gls254 171218 171248 173985 kumfp127g 251504 251524 251596 kummer 265946 266026 266086 curve2251 268548 268620 268688 hecfp128bk 275748 275792 275864 hecfp128fkt 283812 283818 283860 kumfp128g 308102 317636 324470 curve25519 323726 324006 324107 gls1271 351740 351944 359132 ecfp256e 367298 367407 367532 ecfp256q 367466 368506 368808 ecfp256i 385101 385230 385420 hecfp127i 403110 403528 404108 surf127eps 436850 436956 437040 ecfp256h 451223 451349 455690 sclaus1024 460682 460894 462404 ecfp256s 597384 597450 597498 hecfp128i 776786 777282 779451 surf2113 1262850 1263187 1263466 hector 2238413 2241624 2244965 sclaus2048 2675934 2693956 2702881 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 28 surf2113 29 hector 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 32 gls254 32 hecfp127i 32 hecfp128bk 32 hecfp128fkt 32 hecfp128i 32 kumfp127g 32 kumfp128g 32 kummer 32 surf127eps 256 claus Public key bytes system 32 curve2251 32 curve25519 32 gls1271 48 kumfp127g 48 kumfp128g 48 kummer 48 surf127eps 48 surf2113 60 hector 64 ecfp256e 64 ecfp256h 64 ecfp256q 64 ecfp256s 64 gls254 64 hecfp127i 64 hecfp128bk 64 hecfp128fkt 64 hecfp128i 96 ecfp256i 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 48 kumfp127g 48 kumfp128g 48 kummer 48 surf127eps 48 surf2113 60 hector 64 gls254 64 hecfp127i 64 hecfp128bk 64 hecfp128fkt 64 hecfp128i 128 claus 128 sclaus1024 256 sclaus2048

x86; normally amd64; Bulldozer (600f12); 2011 AMD FX-8120; 4 x 3100MHz; hydra6, supercop-20140622

Cycles to generate a key pair quartile median quartile system 797456 797920 798590 curve25519 2020978 2023071 2026647 kummer Cycles to compute a shared secret quartile median quartile system 773752 774598 775274 curve25519 2003617 2005240 2007277 kummer Secret key bytes system 32 curve25519 32 kummer Public key bytes system 32 curve25519 48 kummer Shared secret bytes system 32 curve25519 48 kummer

amd64; Bobcat (500f20); 2011 AMD E-450; 2 x 1650MHz; h4e450, supercop-20141014

Cycles to generate a key pair quartile median quartile system 62106 62781 63495 hecfp127i 89106 90549 92904 hecfp128fkt 90072 90786 91482 hecfp128bk 89499 91071 93114 hecfp128i 99237 100932 102429 ecfp256e 108885 110754 113520 ecfp256h 109560 111591 113277 ecfp256s 112497 115914 119226 ecfp256q 162831 165303 166692 gls1271 197754 197796 197946 kumfp127g 314733 314745 314787 kumfp128g 376476 376521 376800 curve25519 428121 430263 433017 ecfp256i 511440 512550 517551 curve2251 567030 567783 568809 ed448goldilocks 613095 615303 615525 nistp256 697908 703914 710235 sclaus1024 750966 751002 751098 kummer 3339207 3362022 3383823 sclaus2048 3998448 4012539 4029726 claus Cycles to compute a shared secret quartile median quartile system 201504 201525 201561 kumfp127g 297912 297963 298059 hecfp128bk 308085 308130 308274 hecfp128fkt 325545 325560 325599 kumfp128g 363846 364911 367023 gls1271 365007 365031 365250 curve25519 401229 401292 401664 ecfp256e 418713 418788 419520 ecfp256q 426822 426858 427032 ecfp256i 435681 435720 436116 hecfp127i 512727 512787 513216 ecfp256h 513294 513390 513897 ecfp256s 657399 657507 658500 hecfp128i 716787 717936 719880 sclaus1024 738024 738057 738090 kummer 1590810 1590945 1599312 ed448goldilocks 2042445 2046075 2052816 nistp256 2062440 2062998 2074620 curve2251 3384948 3397779 3405210 sclaus2048 3980286 3987669 3993246 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 32 hecfp127i 32 hecfp128bk 32 hecfp128fkt 32 hecfp128i 32 kumfp127g 32 kumfp128g 32 kummer 32 nistp256 144 ed448goldilocks 256 claus Public key bytes system 32 curve2251 32 curve25519 32 gls1271 48 kumfp127g 48 kumfp128g 48 kummer 56 ed448goldilocks 64 ecfp256e 64 ecfp256h 64 ecfp256q 64 ecfp256s 64 hecfp127i 64 hecfp128bk 64 hecfp128fkt 64 hecfp128i 64 nistp256 96 ecfp256i 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 48 kumfp127g 48 kumfp128g 48 kummer 64 ed448goldilocks 64 hecfp127i 64 hecfp128bk 64 hecfp128fkt 64 hecfp128i 64 nistp256 128 claus 128 sclaus1024 256 sclaus2048

x86; normally amd64; Bobcat (500f20); 2011 AMD E-450; 2 x 1650MHz; h4e450, supercop-20141014

Cycles to generate a key pair quartile median quartile system 901857 908634 912162 curve25519 1464645 1464783 1465758 kummer 1695915 1697679 1709043 nistp256 2067618 2070105 2076990 ed448goldilocks Cycles to compute a shared secret quartile median quartile system 876960 877164 879021 curve25519 1439829 1439940 1440153 kummer 5880810 5885364 5893173 nistp256 6821742 6825645 6827928 ed448goldilocks Secret key bytes system 32 curve25519 32 kummer 32 nistp256 144 ed448goldilocks Public key bytes system 32 curve25519 48 kummer 56 ed448goldilocks 64 nistp256 Shared secret bytes system 32 curve25519 48 kummer 64 ed448goldilocks 64 nistp256

amd64; Bobcat (500f20); 2011 AMD E-350; 2 x 1600MHz; h4e350, supercop-20141014

Cycles to generate a key pair quartile median quartile system 62259 62940 63600 hecfp127i 89313 89649 90603 hecfp128bk 90072 90966 91647 hecfp128i 89601 91716 93585 hecfp128fkt 99204 100815 102354 ecfp256e 108387 110694 113529 ecfp256h 109122 111408 113385 ecfp256s 113238 115674 119781 ecfp256q 163032 165363 166797 gls1271 197733 197745 197772 kumfp127g 314736 314763 318777 kumfp128g 376470 376509 376821 curve25519 428022 429996 433089 ecfp256i 511161 512979 519393 curve2251 566178 566772 569004 ed448goldilocks 614496 616647 618114 nistp256 696348 703518 709026 sclaus1024 751209 751242 751404 kummer 3349215 3367182 3386208 sclaus2048 3425025 3434007 3438072 claus Cycles to compute a shared secret quartile median quartile system 201582 201600 201666 kumfp127g 297885 297927 298008 hecfp128bk 308124 308148 308373 hecfp128fkt 325548 325599 329352 kumfp128g 363810 364086 364950 gls1271 365007 365034 365313 curve25519 401088 401172 401553 ecfp256e 418818 418899 419610 ecfp256q 426843 426873 427071 ecfp256i 435723 435984 438723 hecfp127i 512646 512742 513339 ecfp256h 513300 513348 513864 ecfp256s 657222 657324 657825 hecfp128i 719253 719847 725034 sclaus1024 738099 738207 738684 kummer 1590837 1592724 1599255 ed448goldilocks 2043516 2044221 2053404 nistp256 2060205 2061480 2073072 curve2251 3391395 3400863 3405147 sclaus2048 3399942 3409194 3412311 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 32 hecfp127i 32 hecfp128bk 32 hecfp128fkt 32 hecfp128i 32 kumfp127g 32 kumfp128g 32 kummer 32 nistp256 144 ed448goldilocks 256 claus Public key bytes system 32 curve2251 32 curve25519 32 gls1271 48 kumfp127g 48 kumfp128g 48 kummer 56 ed448goldilocks 64 ecfp256e 64 ecfp256h 64 ecfp256q 64 ecfp256s 64 hecfp127i 64 hecfp128bk 64 hecfp128fkt 64 hecfp128i 64 nistp256 96 ecfp256i 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 48 kumfp127g 48 kumfp128g 48 kummer 64 ed448goldilocks 64 hecfp127i 64 hecfp128bk 64 hecfp128fkt 64 hecfp128i 64 nistp256 128 claus 128 sclaus1024 256 sclaus2048

x86; normally amd64; Bobcat (500f20); 2011 AMD E-350; 2 x 1600MHz; h4e350, supercop-20141014

Cycles to generate a key pair quartile median quartile system 901305 901332 901464 curve25519 1465266 1465704 1469025 kummer 1695006 1696962 1706769 nistp256 2068020 2070084 2078148 ed448goldilocks Cycles to compute a shared secret quartile median quartile system 876828 876846 876882 curve25519 1440402 1440534 1440816 kummer 5891988 5893977 5896074 nistp256 6821640 6822126 6823710 ed448goldilocks Secret key bytes system 32 curve25519 32 kummer 32 nistp256 144 ed448goldilocks Public key bytes system 32 curve25519 48 kummer 56 ed448goldilocks 64 nistp256 Shared secret bytes system 32 curve25519 48 kummer 64 ed448goldilocks 64 nistp256

amd64; Bobcat (500f10); 2011 AMD G-T56N; 2 x 1650MHz; h8bobcat, supercop-20141014

Cycles to generate a key pair quartile median quartile system 62811 63492 64287 hecfp127i 90972 91818 94197 hecfp128fkt 90951 91908 94194 hecfp128bk 91104 92652 94212 hecfp128i 100515 102333 103656 ecfp256e 111216 112404 114795 ecfp256h 111096 113040 114876 ecfp256s 115410 117279 119943 ecfp256q 165975 168036 169470 gls1271 197775 197808 197910 kumfp127g 314826 314853 314892 kumfp128g 376554 377319 377766 curve25519 429252 433005 437790 ecfp256i 511980 513774 524322 curve2251 521445 526716 532830 sclaus1024 524472 528231 532077 surf127eps 584205 585516 587385 ed448goldilocks 615015 617028 618417 nistp256 751728 755712 757485 kummer 826284 852522 884343 hector 1813242 1825131 1830876 surf2113 2483013 2511465 2657613 sclaus2048 3102534 3112080 3123555 claus Cycles to compute a shared secret quartile median quartile system 201552 201579 201594 kumfp127g 297732 297786 297930 hecfp128bk 308109 308148 308397 hecfp128fkt 325752 325758 325791 kumfp128g 360564 361650 362217 gls1271 365655 365745 366051 curve25519 401235 401325 401718 ecfp256e 418827 418869 419742 ecfp256q 426975 426996 427203 ecfp256i 436332 436380 436656 hecfp127i 512703 512769 513342 ecfp256h 513261 513375 513882 ecfp256s 509916 514047 516849 surf127eps 516207 517419 519537 sclaus1024 658176 658230 659040 hecfp128i 742095 742860 744498 kummer 1701333 1701483 1713051 ed448goldilocks 1800162 1811259 1817709 surf2113 2052390 2055018 2065764 nistp256 2061042 2062335 2074140 curve2251 2530020 2700513 2706708 sclaus2048 2803518 2817015 2830614 hector 3078189 3081618 3093903 claus Secret key bytes system 20 sclaus1024 28 sclaus2048 28 surf2113 29 hector 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 32 hecfp127i 32 hecfp128bk 32 hecfp128fkt 32 hecfp128i 32 kumfp127g 32 kumfp128g 32 kummer 32 nistp256 32 surf127eps 144 ed448goldilocks 256 claus Public key bytes system 32 curve2251 32 curve25519 32 gls1271 48 kumfp127g 48 kumfp128g 48 kummer 48 surf127eps 48 surf2113 56 ed448goldilocks 60 hector 64 ecfp256e 64 ecfp256h 64 ecfp256q 64 ecfp256s 64 hecfp127i 64 hecfp128bk 64 hecfp128fkt 64 hecfp128i 64 nistp256 96 ecfp256i 128 claus 128 sclaus1024 256 sclaus2048 Shared secret bytes system 32 curve2251 32 curve25519 32 ecfp256e 32 ecfp256h 32 ecfp256i 32 ecfp256q 32 ecfp256s 32 gls1271 48 kumfp127g 48 kumfp128g 48 kummer 48 surf127eps 48 surf2113 60 hector 64 ed448goldilocks 64 hecfp127i 64 hecfp128bk 64 hecfp128fkt 64 hecfp128i 64 nistp256 128 claus 128 sclaus1024 256 sclaus2048