VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Goldmont (506c9); 2016 Intel Celeron J3455; 4 x 1500MHz; wooden, supercop-20250415

[Page version: 20250523 10:17:42]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
450704649647792
T:
jacfp127i
469444816849414
T:
kumjacfp127g
549785616457670
T:
prjfp127i
553465690458600
T:
hecfp127i
575125900260108
T:
ecfp256e
615586376065422
T:
ecfp256h
625006379465584
T:
jacfp128bk
631606455067256
T:
curve2251
634646522466766
T:
ecfp256s
686247066072868
T:
ecfp256q
715327256873838
T:
gls254
759567736679372
T:
prjfp128bk
779467948881850
T:
hecfp128fkt
774767959281738
T:
hecfp128i
793468113883772
T:
hecfp128bk
907849078690792
T:
gls254prot
125334125356125370
T:
k277taa
125568126610128122
T:
gls1271
136668136706139372
T:
k298
181312181320181326
T:
k277mon
201728201760201798
T:
kumfp127g
274596274610274656
T:
kumfp128g
280414280416280652
T:
curve25519
293444296000296870
T:
sclaus1024
301416303102304858
T:
ecfp256i
329110335230356870
T:
hector
352056352516353138
T:
ed448goldilocks
383404384726385754
T:
surf127eps
403394404336432934
T:
kummer
423730424170425132
T:
nistp256
727574730924735746
T:
surf2113
145807814771001484526
T:
sclaus2048
195444419595261978736
T:
claus
200615820085222030550
T:
ed521gs
232104023298822347678
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
664426874470078
T:
gls254
905789058290586
T:
gls254prot
125200125218125234
T:
k277taa
136460136502136542
T:
k298
181190181200181206
T:
k277mon
199408199438199474
T:
jacfp128bk
206630206652206670
T:
kumfp127g
209870209888209906
T:
kumjacfp127g
241980242638242892
T:
curve2251
249844249868249892
T:
prjfp128bk
256002256024256054
T:
hecfp128bk
265234265262265314
T:
hecfp128fkt
280306280306280380
T:
curve25519
282992283010283070
T:
ecfp256e
283564283568283572
T:
kumfp128g
297160297250297354
T:
ecfp256q
299300299338299398
T:
ecfp256i
301676306436320336
T:
gls1271
315102315138315310
T:
jacfp127i
350558350654350944
T:
ecfp256h
377604378494380898
T:
surf127eps
386354386412386616
T:
ecfp256s
389080390044392792
T:
sclaus1024
403390403762403912
T:
kummer
413876413894414006
T:
prjfp127i
425900425980426062
T:
hecfp127i
574302574330575150
T:
hecfp128i
727196730242733790
T:
surf2113
115410611543241163224
T:
ed448goldilocks
115723011648361176348
T:
hector
146335814692161483928
T:
nistp256
191469419267981938044
T:
sclaus2048
200579620066942027440
T:
ed521gs
231795623225002341964
T:
claus
232050423273662343880
T:
nist521gs