VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Zen 2 (860f01); 2022 AMD Ryzen 5 4500U; 6 x 3600MHz; renoir, supercop-20250307

[Page version: 20250328 20:57:54]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
226642388425434
T:
kumjacfp127g
232092417725112
T:
jacfp127i
248612610528016
T:
hecfp127i
258032679828006
T:
prjfp127i
322853338634530
T:
jacfp128bk
335453449436720
T:
ecfp256e
330263480036415
T:
prjfp128bk
346293676040913
T:
ecfp256h
359393687837955
T:
hecfp128fkt
361293701837950
T:
hecfp128i
360113712338274
T:
hecfp128bk
372943933043141
T:
ecfp256s
387564048043893
T:
ecfp256q
397574049642848
T:
curve2251
438554394343943
T:
gls254prot
425424409744724
T:
gls254
535915364153658
T:
k277taa
599696066661192
T:
gls1271
609026090960936
T:
kummer
640226405464102
T:
k298
821128214882202
T:
kumfp127g
865988659886598
T:
k277mon
109294109357109455
T:
kumfp128g
128264129240130171
T:
sclaus1024
134386134479134520
T:
curve25519
144899145384145847
T:
surf127eps
152509153183154283
T:
ecfp256i
159637160206160555
T:
ed448goldilocks
203456207376215395
T:
hector
235969236080236463
T:
nistp256
439865442759444790
T:
surf2113
647456651193652491
T:
sclaus2048
804054805223806706
T:
ed521gs
853345856237857973
T:
claus
939110942494950364
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
412464129941304
T:
gls254
437484374843841
T:
gls254prot
536085361053613
T:
k277taa
606126076160807
T:
kummer
639506398464015
T:
k298
835418362383680
T:
kumfp127g
843698444484540
T:
jacfp128bk
853818541485469
T:
kumjacfp127g
865838658386584
T:
k277mon
991869922199292
T:
prjfp128bk
102263102298102405
T:
hecfp128bk
105834105970106254
T:
hecfp128fkt
114767114859114862
T:
kumfp128g
128444128532129216
T:
jacfp127i
134266134406134434
T:
curve25519
139428139659139745
T:
ecfp256e
141465141579141782
T:
surf127eps
147097147203147705
T:
ecfp256i
149779149853149870
T:
ecfp256q
149172151542154805
T:
gls1271
156877158016158178
T:
curve2251
159578159624159714
T:
prjfp127i
163116163496163554
T:
hecfp127i
166916167592170539
T:
sclaus1024
170467170593170710
T:
ecfp256h
207705207780207883
T:
ecfp256s
225986226051226089
T:
hecfp128i
431583442318443467
T:
surf2113
482381483098483348
T:
ed448goldilocks
598748599152601305
T:
nistp256
708309710406713195
T:
hector
803645804284805542
T:
ed521gs
848718852155852386
T:
sclaus2048
950924951975953100
T:
nist521gs
973504980484981983
T:
claus