VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Zen (800f11); 2017 AMD Ryzen 7 1700; 8 x 3000MHz; rumba7, supercop-20250307

[Page version: 20250328 20:57:54]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
288412981331467
T:
jacfp127i
293203024632625
T:
prjfp127i
289453035332011
T:
kumjacfp127g
334713485336075
T:
hecfp127i
379543908040682
T:
jacfp128bk
384493972442386
T:
ecfp256e
406544149844399
T:
curve2251
410384209144035
T:
prjfp128bk
413484227144499
T:
hecfp128bk
414994251844588
T:
hecfp128fkt
411784277944735
T:
hecfp128i
416734380147937
T:
ecfp256h
436354381144109
T:
gls254
448274508345586
T:
gls254prot
442794632750394
T:
ecfp256s
455434759651939
T:
ecfp256q
554925565455913
T:
k277taa
641236444064731
T:
k298
655196636967193
T:
gls1271
892628928589388
T:
k277mon
100740100934100979
T:
kummer
102833102892102953
T:
kumfp127g
134330134387134460
T:
kumfp128g
144581144600144621
T:
curve25519
156105157275158115
T:
sclaus1024
178048179099180415
T:
ecfp256i
186279186967187433
T:
surf127eps
200656200887201118
T:
ed448goldilocks
205191209127221527
T:
hector
264683264876265304
T:
nistp256
475841477974573633
T:
surf2113
759865763042765925
T:
sclaus2048
953577954012955254
T:
ed521gs
102918910305461031897
T:
claus
108939010923851093164
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
423774260942618
T:
gls254
447584500845504
T:
gls254prot
555735577555906
T:
k277taa
640846431964377
T:
k298
890678913389213
T:
k277mon
100899100903100953
T:
kummer
104041104098104316
T:
jacfp128bk
104325104396104436
T:
kumfp127g
106329106381106438
T:
kumjacfp127g
126827127101127194
T:
prjfp128bk
129928130036130185
T:
hecfp128bk
134515134625134764
T:
hecfp128fkt
139265139356139410
T:
kumfp128g
157292157539158825
T:
curve25519
160100160600160891
T:
curve2251
162269162505162644
T:
jacfp127i
162932163081163297
T:
ecfp256e
162832165676167337
T:
gls1271
172635172762172936
T:
ecfp256i
173016173158173339
T:
ecfp256q
181169182987184385
T:
surf127eps
201619201851207822
T:
sclaus1024
202649202820202971
T:
ecfp256h
203460203584203647
T:
prjfp127i
207586207841208139
T:
hecfp127i
228293228367228497
T:
ecfp256s
286058286273286503
T:
hecfp128i
474109476688486558
T:
surf2113
580735582767585778
T:
ed448goldilocks
687063687513688365
T:
nistp256
741497748150751100
T:
hector
954255956556959368
T:
ed521gs
98798710099501013552
T:
sclaus2048
108999610910761092402
T:
nist521gs
119329611972161202741
T:
claus