VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Goldmont Plus (706a8); 2019 Intel Celeron N4020; 2 x 1100MHz; gemini, supercop-20250307

[Page version: 20250425 10:21:13]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
464274776349637
T:
jacfp127i
479554940850905
T:
kumjacfp127g
518575307355397
T:
prjfp127i
552135580057367
T:
ecfp256e
547955632458542
T:
hecfp127i
587745938161065
T:
ecfp256h
614806177863149
T:
curve2251
600736181463985
T:
jacfp128bk
623196309365029
T:
ecfp256s
703837130473067
T:
ecfp256q
713047225473111
T:
gls254
710487315275799
T:
prjfp128bk
724527345476197
T:
hecfp128i
723807396377100
T:
hecfp128bk
724797421777023
T:
hecfp128fkt
928809292292980
T:
gls254prot
113307114776116378
T:
gls1271
124664124667124682
T:
k277taa
136013136061136242
T:
k298
181132181139181170
T:
k277mon
205379205381205403
T:
kumfp127g
259969259988260140
T:
kumfp128g
268327268328268351
T:
curve25519
286287288080289072
T:
sclaus1024
294775296716298523
T:
ecfp256i
307634310576326315
T:
hector
325636329763330294
T:
ed448goldilocks
364712366135367250
T:
surf127eps
377777377811377852
T:
kummer
394620394714394794
T:
nistp256
678035681370682676
T:
surf2113
140621614136781416704
T:
sclaus2048
187712318780601882132
T:
ed521gs
189674818988841900377
T:
claus
212777921284752133526
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
663856759968307
T:
gls254
925099259892667
T:
gls254prot
124550124552124561
T:
k277taa
135870135896135923
T:
k298
181086181086181086
T:
k277mon
191013191098191132
T:
jacfp128bk
209518209654209662
T:
kumfp127g
211135211256211266
T:
kumjacfp127g
233927234063234287
T:
prjfp128bk
233299235462235527
T:
curve2251
237543237649237819
T:
hecfp128bk
246483246643246985
T:
hecfp128fkt
268046268051268078
T:
kumfp128g
268301268301268307
T:
curve25519
282680282920283461
T:
ecfp256e
283877285437288371
T:
gls1271
293637293845294338
T:
ecfp256i
310020310159310373
T:
ecfp256q
315665315782315924
T:
jacfp127i
337077337344337652
T:
ecfp256h
357883360856361431
T:
surf127eps
369421369567369889
T:
ecfp256s
368777376691382934
T:
sclaus1024
377686377778377800
T:
kummer
394411394538394707
T:
prjfp127i
403725403793404074
T:
hecfp127i
540552540875541270
T:
hecfp128i
678615679688680675
T:
surf2113
104669110574281073845
T:
hector
108691410869441087603
T:
ed448goldilocks
137240113724431372950
T:
nistp256
183882318453121852058
T:
sclaus2048
187623818767731877059
T:
ed521gs
212734121278862133112
T:
nist521gs
224438822504042258035
T:
claus