VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Bulldozer (600f20); 2012 AMD FX-8350; 4 x 4000MHz; saber214, supercop-20250307

[Page version: 20250328 20:57:54]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
468474782148776
T:
jacfp127i
482524909150048
T:
kumjacfp127g
537225454255390
T:
prjfp127i
543095507956205
T:
hecfp127i
677346836871502
T:
curve2251
667336971474001
T:
ecfp256e
694277027971316
T:
jacfp128bk
695487196076186
T:
ecfp256h
743257665981845
T:
ecfp256s
757617831682828
T:
ecfp256q
799678083081633
T:
prjfp128bk
810728184182757
T:
hecfp128bk
811038193382947
T:
hecfp128fkt
813468235283310
T:
hecfp128i
889329001591098
T:
gls254
103345103484103537
T:
gls254prot
113695115160116443
T:
gls1271
139819139841139874
T:
k277taa
157407157456157575
T:
k298
157876157931157980
T:
kumfp127g
174651174684174702
T:
curve25519
203061203066203095
T:
k277mon
204649204719204748
T:
kummer
256888257343257398
T:
kumfp128g
312999315748317649
T:
ecfp256i
320800323128325432
T:
sclaus1024
318811325938335728
T:
hector
356743357233357806
T:
ed448goldilocks
374376375525376187
T:
surf127eps
612169612234612524
T:
nistp256
663409666973668164
T:
surf2113
160592416144201622724
T:
sclaus2048
174408517442581745676
T:
ed521gs
205261920617132074144
T:
nist521gs
211413821279852137308
T:
claus
Cycles to compute a shared secret
25%50%75%system
825608327484556
T:
gls254
103208103215103298
T:
gls254prot
139797139819139867
T:
k277taa
157303157339157378
T:
k298
160261160262160262
T:
kumfp127g
160851161022161091
T:
kumjacfp127g
186656186661186700
T:
curve25519
196998197204197334
T:
jacfp128bk
197297197321197370
T:
kummer
203010203010203010
T:
k277mon
241513243437244026
T:
curve2251
245890246006246240
T:
prjfp128bk
252690252751252845
T:
hecfp128bk
262287262497262741
T:
hecfp128fkt
263964264076264265
T:
jacfp127i
267873267874268048
T:
kumfp128g
278793281669282525
T:
gls1271
295721295976296204
T:
ecfp256e
307205307417307601
T:
ecfp256i
308942309154309419
T:
ecfp256q
355051355353355637
T:
prjfp127i
357898358064358411
T:
hecfp127i
364609365087365468
T:
ecfp256h
370391372479373787
T:
surf127eps
396184396706397179
T:
ecfp256s
428752430197433540
T:
sclaus1024
562792562888563112
T:
hecfp128i
661180663975664576
T:
surf2113
106819810723011081311
T:
hector
113693811418291142075
T:
ed448goldilocks
131134413113751311450
T:
nistp256
174361717436651743871
T:
ed521gs
205209020532962061441
T:
nist521gs
212421421405732149625
T:
sclaus2048
254980725606902567257
T:
claus