VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Broadwell+AES (306d4); 2015 Intel Core i3-5005U; 2 x 1900MHz; shoe, supercop-20250307

[Page version: 20250412 06:19:03]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
246272506625489
T:
jacfp127i
252392571126446
T:
kumjacfp127g
276012838429005
T:
prjfp127i
282532881729398
T:
hecfp127i
319103274333509
T:
jacfp128bk
368833706837279
T:
gls254
368493754638255
T:
prjfp128bk
369943784138810
T:
hecfp128bk
377163850139093
T:
hecfp128fkt
386183921239796
T:
hecfp128i
395973972039840
T:
gls254prot
410664133742615
T:
curve2251
414934217843407
T:
ecfp256e
436954461246463
T:
ecfp256h
450694572947557
T:
ecfp256s
478014899750743
T:
ecfp256q
493494942949562
T:
k277taa
548245507055585
T:
k298
671246727768162
T:
kummer
758957671277410
T:
gls1271
768437688076955
T:
k277mon
901289020290276
T:
kumfp127g
128320128421129066
T:
kumfp128g
143108143196143332
T:
curve25519
146473147371148049
T:
sclaus1024
156580156812157126
T:
ed448goldilocks
183393184711185794
T:
ecfp256i
197564198655202725
T:
surf127eps
246413246728247003
T:
nistp256
244257249899261120
T:
hector
519438521939523510
T:
surf2113
692979695539697997
T:
sclaus2048
904072904434905175
T:
ed521gs
9918009934561012958
T:
claus
102029510210151021923
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
361803627536331
T:
gls254
394763960539707
T:
gls254prot
493284939049496
T:
k277taa
546805486455364
T:
k298
669656710867805
T:
kummer
767397678176840
T:
k277mon
873488751187683
T:
kumjacfp127g
927289288292979
T:
kumfp127g
957969589195991
T:
jacfp128bk
116807116912117038
T:
prjfp128bk
120602120836124619
T:
hecfp128bk
125144125354126664
T:
hecfp128fkt
133669133787134048
T:
kumfp128g
143007143088143167
T:
curve25519
153528153888154335
T:
jacfp127i
154727154875155332
T:
curve2251
168574168792169033
T:
ecfp256e
178964179123179295
T:
ecfp256i
181255181595181878
T:
ecfp256q
184278184504184728
T:
prjfp127i
186533186703186898
T:
hecfp127i
190284190668192804
T:
sclaus1024
189464191134191818
T:
gls1271
194923195356199629
T:
surf127eps
212577212787213007
T:
ecfp256h
234859235066235342
T:
ecfp256s
267321267464267672
T:
hecfp128i
467689468009472439
T:
ed448goldilocks
519348519675520846
T:
surf2113
628282628806629455
T:
nistp256
826512846621851485
T:
hector
904406904825905165
T:
ed521gs
916072932841933331
T:
sclaus2048
988495989492990364
T:
claus
101994610207131021616
T:
nist521gs