VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Tiger Lake (806c1); 2020 Intel Core i7-1165G7; 4 x 2800MHz; panther, supercop-20250307

[Page version: 20250328 20:57:54]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
200712072522055
T:
kumjacfp127g
19413?20781?33266?
T:
jacfp127i
243692544627358
T:
hecfp127i
241852545126716
T:
prjfp127i
297843003330560
T:
gls254
316353168231750
T:
gls254prot
308043187633210
T:
jacfp128bk
332743369035029
T:
ecfp256e
341623455535836
T:
ecfp256h
355483570237009
T:
curve2251
372483772639011
T:
ecfp256s
363653773741252
T:
prjfp128bk
383823842838474
T:
k277taa
368773850842524
T:
hecfp128fkt
369033868642036
T:
hecfp128i
371613895442480
T:
hecfp128bk
394473984541618
T:
ecfp256q
425434261942727
T:
k298
509485100951064
T:
kummer
550035507055177
T:
k277mon
618686272563565
T:
gls1271
788487915779612
T:
kumfp127g
116403116518116624
T:
kumfp128g
121128121307121444
T:
curve25519
123868124806125516
T:
sclaus1024
144004144369144750
T:
ed448goldilocks
168445169304170372
T:
surf127eps
169177170175171218
T:
ecfp256i
195733197533207501
T:
hector
223412223938224447
T:
nistp256
404066406520407946
T:
surf2113
596340600218617348
T:
sclaus2048
793978796227799542
T:
ed521gs
816808818046819847
T:
claus
965947969349972073
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
288472889328952
T:
gls254
315253157931622
T:
gls254prot
383533839238424
T:
k277taa
422774237442452
T:
k298
508195086650924
T:
kummer
549505499655046
T:
k277mon
817188183081994
T:
kumfp127g
820898222982440
T:
kumjacfp127g
932229340893639
T:
jacfp128bk
111790112027112482
T:
prjfp128bk
115244115566115829
T:
hecfp128bk
119074119312119532
T:
hecfp128fkt
122634122737122826
T:
kumfp128g
122518122847123282
T:
jacfp127i
130143130258130378
T:
curve25519
140547141000144353
T:
curve2251
153344153847154379
T:
prjfp127i
154612154937155310
T:
ecfp256e
154498154993156000
T:
hecfp127i
154644158092161063
T:
gls1271
159469161475164256
T:
sclaus1024
164365164971165508
T:
ecfp256i
164781165474166106
T:
ecfp256q
164909166401167177
T:
surf127eps
186190186620187346
T:
ecfp256h
223739224274225006
T:
ecfp256s
252716253019253346
T:
hecfp128i
411438413081414382
T:
surf2113
458361458729459203
T:
ed448goldilocks
580644583465584881
T:
nistp256
673524686531692548
T:
hector
777711789238801766
T:
sclaus2048
792924794697796209
T:
ed521gs
942663944498949223
T:
claus
974258977706979052
T:
nist521gs