VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Sandy Bridge+AES (206a7); 2011 Intel Xeon E3-1225; 4 x 3100MHz; hydra7, supercop-20250307

[Page version: 20250328 20:57:54]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
319493265134287
T:
jacfp127i
331893361434062
T:
kumjacfp127g
362203693237732
T:
prjfp127i
379673898440322
T:
hecfp127i
453574587446517
T:
jacfp128bk
530665375455161
T:
ecfp256e
550085540355951
T:
hecfp128i
549945546156249
T:
prjfp128bk
551985570357073
T:
ecfp256h
556635638357353
T:
hecfp128bk
557005655357431
T:
hecfp128fkt
574635823159620
T:
ecfp256s
600846038662164
T:
curve2251
610666189663018
T:
ecfp256q
741047525976208
T:
gls254
894288952089677
T:
kummer
101503102522103541
T:
gls1271
107760107946110814
T:
gls254prot
121530121828123501
T:
kumfp127g
147113147246151074
T:
curve25519
173473173594173748
T:
k277taa
182530182681182936
T:
k298
184460185343185649
T:
kumfp128g
214755215119215573
T:
ed448goldilocks
220468221896222737
T:
sclaus1024
249127250438252020
T:
ecfp256i
256902257086257392
T:
k277mon
268882269773270820
T:
surf127eps
290004295680306050
T:
hector
345923346735347957
T:
nistp256
629920632498634159
T:
surf2113
113193611370581138798
T:
sclaus2048
121274212143501217176
T:
ed521gs
139112713915621392436
T:
nist521gs
146884714709501473064
T:
claus
Cycles to compute a shared secret
25%50%75%system
678566914571128
T:
gls254
891868925589391
T:
kummer
107606107660107740
T:
gls254prot
123501123803125181
T:
kumfp127g
131622131686131830
T:
kumjacfp127g
140718140896141120
T:
jacfp128bk
158810158961159101
T:
curve25519
173200173266173344
T:
k277taa
178741178909179174
T:
prjfp128bk
182395182515182804
T:
k298
183083183295183485
T:
hecfp128bk
190002190156190333
T:
hecfp128fkt
191048192279199640
T:
kumfp128g
200825201141216105
T:
jacfp127i
230782231077231557
T:
ecfp256e
230392232109232430
T:
curve2251
242933243251243746
T:
ecfp256q
243640243895244241
T:
ecfp256i
241088248491251767
T:
gls1271
256738256987257716
T:
k277mon
261203261486262068
T:
prjfp127i
264187264784266086
T:
surf127eps
265412266051272625
T:
hecfp127i
280955281324281829
T:
ecfp256h
291101292154303746
T:
sclaus1024
309931310252310636
T:
ecfp256s
414104414519415120
T:
hecfp128i
625853631898632683
T:
surf2113
653486654471657605
T:
ed448goldilocks
893863894869895704
T:
nistp256
9765709966761012292
T:
hector
122165412238771226001
T:
ed521gs
139084013914681392413
T:
nist521gs
142587914901101498339
T:
sclaus2048
173324617417741745436
T:
claus