VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Gracemont (906a4-20); 2022 Intel Core i3-1215U, E cores; 4 x 1600MHz; alder2,little, supercop-20261018

[Page version: 20261105 21:27:07]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
274192810429185
T:
jacfp127i
283212903930235
T:
kumjacfp127g
306163127532419
T:
prjfp127i
313213179832905
T:
hecfp127i
339723405134324
T:
curve2251
364053659037024curve25519
377913796838161
T:
gls254
379153860939478
T:
jacfp128bk
394463949639551
T:
gls254prot
394823985740536
T:
ecfp256e
438334429545150
T:
ecfp256s
438144430345335
T:
prjfp128bk
439404460845567
T:
hecfp128bk
442424486445984
T:
hecfp128fkt
443224503246072
T:
hecfp128i
453354571346163
T:
ecfp256h
461384663247536
T:
ecfp256q
478524792448030
T:
k277taa
537775386553962
T:
k298
679986882669764
T:
gls1271
711277121571306nistp256
738037387173949
T:
k277mon
114706115014115405
T:
kumfp127g
122016122187122304
T:
kummer
150132150248150386
T:
kumfp128g
198127199346200824
T:
ecfp256i
244245247412248883
T:
ed448goldilocks
344336348168351457
T:
sclaus1024
134870313546831379915
T:
ed521gs
148616014879821496318
T:
nist521gs
201391920197992024793
T:
claus
219897722168242231930
T:
sclaus2048
Cycles to compute a shared secret
25%50%75%system
373693740937469
T:
gls254
394063944439485
T:
gls254prot
476974780647885
T:
k277taa
536935376953870
T:
k298
737867386173925
T:
k277mon
115247115426115757
T:
jacfp128bk
117720117920118210
T:
kumfp127g
118939119125119468
T:
kumjacfp127g
122020122148122270
T:
kummer
136280136409136525
T:
curve2251
139038139677140208curve25519
142120142547143421
T:
prjfp128bk
146384146638147141
T:
hecfp128fkt
149021149399149744
T:
hecfp128bk
156902157004157138
T:
kumfp128g
169892170661175601
T:
gls1271
175837176351176869
T:
jacfp127i
183720184179185012
T:
ecfp256e
189005189248189663
T:
ecfp256i
189389189795190322
T:
ecfp256q
220859221820222591
T:
prjfp127i
226644226807227063
T:
ecfp256h
226627227510228289
T:
hecfp127i
255095255966257743
T:
ecfp256s
280566280849281506nistp256
323494324144324672
T:
hecfp128i
356899361606362863
T:
sclaus1024
854886859845877382
T:
ed448goldilocks
135020913543621359728
T:
ed521gs
150616515072481511945
T:
nist521gs
202106120240292031616
T:
claus
223538422532092256973
T:
sclaus2048