VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Ice Lake (706e5); 2020 Intel Core i3-1000NG4; 2 x 1100MHz; puddle, supercop-20261018

[Page version: 20261105 21:27:07]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
197282033621423
T:
jacfp127i
206412125722431
T:
kumjacfp127g
235222415925480
T:
hecfp127i
235292416225383
T:
prjfp127i
262112636427614curve25519
295712970729900
T:
gls254
302133081331821
T:
jacfp128bk
316933173831827
T:
gls254prot
352173571136574
T:
ecfp256e
356273574836391
T:
curve2251
356273659238717
T:
prjfp128bk
362323714639465
T:
hecfp128fkt
365473732838586
T:
hecfp128i
365703741739299
T:
hecfp128bk
385243857538648
T:
k277taa
387233918340208
T:
ecfp256s
399794009040252nistp256
406944115142308
T:
ecfp256q
414694156442058
T:
k298
515145156951659
T:
kummer
536615372054453
T:
k277mon
794157963179886
T:
kumfp127g
116502116767117131
T:
kumfp128g
123677124679125533
T:
sclaus1024
144361?145641?186195?
T:
ed448goldilocks
167431168984170760
T:
surf127eps
172115173467175146
T:
ecfp256i
185918192261201979
T:
hector
191814193152194644
T:
ecfp256h
388640391678394699
T:
surf2113
598948602885636654
T:
sclaus2048
763497765754770821
T:
ed521gs
818551821426826505
T:
claus
954186957877962616
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
289752902229067
T:
gls254
315963163231679
T:
gls254prot
384503849238547
T:
k277taa
411744122541284
T:
k298
514305149151537
T:
kummer
535755363053689
T:
k277mon
641976426764338curve25519
812358156081797
T:
kumfp127g
823568267183110
T:
kumjacfp127g
920759226492463
T:
jacfp128bk
111670111876112154
T:
prjfp128bk
115432115629115904
T:
hecfp128fkt
117380117518117767
T:
hecfp128bk
121703121905122088
T:
kumfp128g
121738121971122506
T:
jacfp127i
139714140418140805
T:
curve2251
150707150927151175nistp256
152304152697153505
T:
prjfp127i
153242153535153934
T:
ecfp256e
155369155771156272
T:
hecfp127i
158179159650162177
T:
sclaus1024
161015161422162150
T:
ecfp256q
161298162023162762
T:
ecfp256i
162891164307166564
T:
surf127eps
182058182586183536
T:
ecfp256h
218966219946220880
T:
ecfp256s
251545251909252653
T:
hecfp128i
385742388311390712
T:
surf2113
464506465697538329
T:
ed448goldilocks
649324654651659575
T:
hector
761397762289764299
T:
ed521gs
781494785832829541
T:
sclaus2048
942972946390949583
T:
claus
952988956010960103
T:
nist521gs