VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Tremont (906c0); 2021 Intel Pentium Silver N6000; 4 x 1100MHz; jasper, supercop-20250307

[Page version: 20250328 20:57:54]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
356743632937206
T:
jacfp127i
361363677837632
T:
kumjacfp127g
416874235243606
T:
prjfp127i
432474414545319
T:
hecfp127i
500625065351641
T:
ecfp256e
499585073051600
T:
jacfp128bk
505585127751990
T:
curve2251
538395444756218
T:
ecfp256h
547235530655999
T:
gls254
554995555955649
T:
gls254prot
554555622257064
T:
ecfp256s
602786124362512
T:
prjfp128bk
606696153163043
T:
ecfp256q
617436255964160
T:
hecfp128bk
616996259864062
T:
hecfp128fkt
621446300764412
T:
hecfp128i
678176794068162
T:
k277taa
736137706178798
T:
k298
972579748697858
T:
k277mon
100292102132105310
T:
gls1271
154104154603154861
T:
kumfp127g
219206219485219763
T:
kumfp128g
244558244830245225
T:
curve25519
262450264074265167
T:
sclaus1024
268584270066272491
T:
ecfp256i
278299280766282496
T:
surf127eps
276712283063296153
T:
hector
305641306289307574
T:
ed448goldilocks
320436320740321226
T:
kummer
344780346299347529
T:
nistp256
597892600578602867
T:
surf2113
134179513470451353403
T:
sclaus2048
174451417515581807384
T:
claus
174942017518471755957
T:
ed521gs
197971719825881985721
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
536785409854448
T:
gls254
552975535255396
T:
gls254prot
676636775067827
T:
k277taa
751767641577556
T:
k298
968839722697497
T:
k277mon
157121157691158259
T:
kumfp127g
159556159942160201
T:
kumjacfp127g
160168161765162889
T:
jacfp128bk
194460194738202274
T:
curve2251
201917202543203253
T:
prjfp128bk
206413206814207563
T:
hecfp128bk
214550215570216567
T:
hecfp128fkt
227421227859228257
T:
kumfp128g
241476241673241849
T:
curve25519
240891242144243689
T:
jacfp127i
245320246263247999
T:
ecfp256e
243822247455250889
T:
gls1271
264643266290268343
T:
ecfp256q
265300266457268952
T:
ecfp256i
272929274723276676
T:
surf127eps
307365307980309120
T:
ecfp256h
311963312305313177
T:
prjfp127i
319888320117320460
T:
kummer
322405322656323281
T:
hecfp127i
338209339417341515
T:
ecfp256s
343690349128357571
T:
sclaus1024
461878462750463997
T:
hecfp128i
598817599597601180
T:
surf2113
941800946554960665
T:
hector
100714610082671010281
T:
ed448goldilocks
119012511915401193318
T:
nistp256
174965317522291754923
T:
ed521gs
176752917767421792062
T:
sclaus2048
197616419794291982548
T:
nist521gs
206893920730122135126
T:
claus