VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Skylake (506e3); 2015 Intel Core i3-6100; 2 x 3700MHz; skydell, supercop-20260330

[Page version: 20260522 07:40:15]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
230402389325476
T:
kumjacfp127g
230412396525067
T:
jacfp127i
261182702728798
T:
prjfp127i
279102889129976
T:
hecfp127i
298492989029925curve25519
329913377834692
T:
jacfp128bk
367633708437488
T:
gls254
375113830139256
T:
prjfp128bk
385933864538726
T:
gls254prot
385593888140192
T:
curve2251
382513951441423
T:
hecfp128i
405284185043140
T:
hecfp128fkt
407384192943441
T:
hecfp128bk
414324254644433
T:
ecfp256e
429204297343031nistp256
445154546948313
T:
ecfp256s
463804642446471
T:
k277taa
465774754350214
T:
ecfp256q
523865244652607
T:
k298
530355323654052
T:
kummer
707787083770907
T:
k277mon
807688094581140
T:
kumfp127g
114228114326114445
T:
kumfp128g
136043137063137699
T:
sclaus1024
151107151311151586
T:
ed448goldilocks
176821177856178978
T:
ecfp256i
182789185796187024
T:
surf127eps
202064203828205223
T:
ecfp256h
242624246748261329
T:
hector
502723506025508470
T:
surf2113
657031660502662713
T:
sclaus2048
792276793689795290
T:
ed521gs
895814897986899672
T:
claus
955394955957956577
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
357183576935827
T:
gls254
384593849838537
T:
gls254prot
461174616646267
T:
k277taa
521565219752245
T:
k298
52985?53883?66420?
T:
kummer
707757082270858
T:
k277mon
818288222982507
T:
kumfp127g
831638379283929
T:
kumjacfp127g
842828435184435curve25519
885228858788664
T:
jacfp128bk
109874109983110119
T:
prjfp128bk
115031115156115292
T:
hecfp128fkt
115352116626116788
T:
hecfp128bk
118547118644118714
T:
kumfp128g
124608125605125749
T:
jacfp127i
143460144608144988
T:
curve2251
158610158784158986nistp256
158467159573159874
T:
ecfp256e
167355167504167678
T:
prjfp127i
167376167602167823
T:
ecfp256i
167416168196168616
T:
ecfp256q
169304170519170734
T:
hecfp127i
176736176961179366
T:
sclaus1024
177230181633182977
T:
surf127eps
192139193837194232
T:
ecfp256h
222548223162223458
T:
ecfp256s
247767251604251928
T:
hecfp128i
457297457578457884
T:
ed448goldilocks
496948501276503926
T:
surf2113
791181796857797228
T:
ed521gs
798836807450810419
T:
hector
864053865870875846
T:
sclaus2048
954702955198956025
T:
nist521gs
102873610345221039642
T:
claus