VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Haswell+AES (306c3); 2013 Intel Core i7-4770; 4 x 3400MHz; speed2supercop, supercop-20250307

[Page version: 20250328 20:57:54]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
269243188832912
T:
jacfp127i
281443281634072
T:
kumjacfp127g
305363501236192
T:
prjfp127i
31424?38128?40492?
T:
hecfp127i
354884065641844
T:
jacfp128bk
418324208044212
T:
curve2251
445444520846588
T:
ecfp256e
447924544046032
T:
gls254
434284854449536
T:
hecfp128bk
480404861249832
T:
ecfp256s
436204868449836
T:
hecfp128fkt
490644915249272
T:
gls254prot
419244921251340
T:
prjfp128bk
462285119252640
T:
hecfp128i
515885223653576
T:
ecfp256q
634326350463612
T:
k277taa
692326931669480
T:
kummer
720287247672700
T:
k298
953489548895552
T:
k277mon
110908111008111144
T:
kumfp127g
144384144448145632
T:
curve25519
157508157596159140
T:
kumfp128g
167184168072168672
T:
sclaus1024
173920174088174360
T:
ed448goldilocks
211524212580213944
T:
ecfp256i
212572213500214100
T:
surf127eps
240344241624242908
T:
ecfp256h
261312269332283812
T:
hector
278668278796279008
T:
nistp256
530064532932537940
T:
surf2113
833516836792838452
T:
sclaus2048
104350410443681045300
T:
ed521gs
111107611127521115220
T:
claus
117469611759041184024
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
401484147641756
T:
gls254
489164894848992
T:
gls254prot
631406330063364
T:
k277taa
691046918869324
T:
kummer
714287179672336
T:
k298
952169528895392
T:
k277mon
112360112440112540
T:
kumfp127g
112600112692112768
T:
jacfp128bk
120040120236120404
T:
kumjacfp127g
139088139412147892
T:
prjfp128bk
145032145212145380
T:
hecfp128bk
150168150304150476
T:
hecfp128fkt
155960156032156092
T:
curve25519
158160159596160836
T:
curve2251
162776162888162984
T:
kumfp128g
185792186076187180
T:
jacfp127i
193896193980194092
T:
ecfp256e
200848201016201196
T:
ecfp256q
206276206476206704
T:
ecfp256i
206188207312207888
T:
surf127eps
220112222156224188
T:
sclaus1024
225564225880226200
T:
prjfp127i
229796230024230264
T:
hecfp127i
234784234864234984
T:
ecfp256h
257508257660257848
T:
ecfp256s
325988326296326592
T:
hecfp128i
519464528820535604
T:
surf2113
534944535088535324
T:
ed448goldilocks
731816732052732636
T:
nistp256
844956849624857804
T:
hector
104295210435561044396
T:
ed521gs
109441211044121107736
T:
sclaus2048
117455611754601183368
T:
nist521gs
129908812996841302392
T:
claus