VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Silvermont (406c4); 2016 Intel Atom x5-Z8350; 4 x 1440MHz; cherry, supercop-20260330

[Page version: 20260422 02:30:39]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
655636718870305
T:
jacfp127i
682457109180040
T:
kumjacfp127g
788008119185603
T:
hecfp127i
806268782596632
T:
prjfp127i
98812101680108382
T:
jacfp128bk
98891102715108893
T:
ecfp256e
105374108470114583
T:
ecfp256h
110106114450123208
T:
curve2251
115414115495115774curve25519
112467116265122976
T:
ecfp256s
116027120891132299
T:
prjfp128bk
120237123755128713
T:
ecfp256q
115367?128563?153120?
T:
hecfp128bk
118814130351142769
T:
hecfp128i
125770133753147445
T:
hecfp128fkt
138380140896143652
T:
gls254
186888189440191457
T:
gls1271
190063190106190208nistp256
201688201981203101
T:
gls254prot
279931280004280234
T:
kumfp127g
287342287475289313
T:
k277taa
302197302598305531
T:
k298
421248421396423501
T:
k277mon
447421447510448290
T:
kumfp128g
516493520077525779
T:
ecfp256i
540694541953543669
T:
kummer
537182551940576905
T:
hector
567646570875579320
T:
surf127eps
583858587439590778
T:
sclaus1024
753192754173759394
T:
ed448goldilocks
110083911100431143036
T:
surf2113
290581329209402943778
T:
sclaus2048
365695636883163700836
T:
ed521gs
389648139090613934221
T:
claus
425871842829154294137
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
133879136659137601
T:
gls254
201475201638202218
T:
gls254prot
282666282831282960
T:
kumfp127g
286563286674286937
T:
kumjacfp127g
287121287204287456
T:
k277taa
301489301857304545
T:
k298
319295320550322900
T:
jacfp128bk
376301377170378586
T:
prjfp128bk
376299377621380808
T:
hecfp128fkt
383075384107388241
T:
hecfp128bk
421033421108421595
T:
k277mon
425802426281428148
T:
curve2251
431811431955432815curve25519
435949439621441120
T:
gls1271
447721449560452144
T:
jacfp127i
457747457887458287
T:
kumfp128g
489638491188492972
T:
ecfp256e
496250498293502020
T:
ecfp256q
503428505315508770
T:
ecfp256i
524810526763531880
T:
prjfp127i
537937538972541649
T:
hecfp127i
540486541606542673
T:
kummer
566449568834574693
T:
surf127eps
586602589101592917
T:
ecfp256h
615241618127623045
T:
ecfp256s
735337738775744716nistp256
767596780845787803
T:
sclaus1024
810402812647821025
T:
hecfp128i
109408511044221119554
T:
surf2113
177760318176861850044
T:
hector
260189326080212622536
T:
ed448goldilocks
364874236690643689904
T:
ed521gs
382611738603903884437
T:
sclaus2048
424715242738494283668
T:
nist521gs
468276546950154711861
T:
claus