VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information: Introduction eBASH eBASC eBAEAD eBATS SUPERCOP XBX Computers
How to submit new software: Tips hash stream aead dh kem encrypt sign
List of primitives measured: lwc sha3 hash stream lwc caesar aead dh kem encrypt sign
Measurements indexed by machine: lwc sha3 hash stream lwc caesar aead dh kem encrypt sign
List of subroutines: verify decode encode sort core hashblocks scalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems, indexed by machine

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents the benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation.

Each computer name is linked to additional information about the implementations and compilers selected for benchmarking.

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.

Sizes across machines

Secret key
bytessystem
20sclaus1024
28sclaus2048
28surf2113
29hector
32curve2251
32curve25519
32ecfp256e
32ecfp256h
32ecfp256i
32ecfp256q
32ecfp256s
32gls1271
32gls254
32gls254prot
32hecfp127i
32hecfp128bk
32hecfp128fkt
32hecfp128i
32jacfp127i
32jacfp128bk
32k298
32kumfp127g
32kumfp128g
32kumjacfp127g
32kummer
32nistp256
32prjfp127i
32prjfp128bk
32surf127eps
48k277mon
48k277taa
104nist521gs
130ed521gs
144ed448goldilocks
256claus
Public key
bytessystem
32curve2251
32curve25519
32gls1271
48kumfp127g
48kumfp128g
48kumjacfp127g
48kummer
48surf127eps
48surf2113
56ed448goldilocks
60hector
64ecfp256e
64ecfp256h
64ecfp256q
64ecfp256s
64gls254
64gls254prot
64hecfp127i
64hecfp128bk
64hecfp128fkt
64hecfp128i
64jacfp127i
64jacfp128bk
64nistp256
64prjfp127i
64prjfp128bk
80k277mon
80k277taa
96ecfp256i
96k298
128claus
128sclaus1024
144ed521gs
144nist521gs
256sclaus2048
Shared secret
bytessystem
32curve2251
32curve25519
32ecfp256e
32ecfp256h
32ecfp256i
32ecfp256q
32ecfp256s
32gls1271
32gls254
32gls254prot
40k277mon
40k277taa
48k298
48kumfp127g
48kumfp128g
48kumjacfp127g
48kummer
48surf127eps
48surf2113
60hector
64ed448goldilocks
64hecfp127i
64hecfp128bk
64hecfp128fkt
64hecfp128i
64jacfp127i
64jacfp128bk
64nistp256
64prjfp127i
64prjfp128bk
72ed521gs
72nist521gs
128claus
128sclaus1024
256sclaus2048

amd64; Zen2 (860f01); 2022 AMD Ryzen 5 4500U; 6 x 3600MHz; renoir, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
210762240624073
T:
jacfp127i
220002318324597
T:
kumjacfp127g
233402457326461
T:
prjfp127i
245432577627608
T:
hecfp127i
296723073532648
T:
jacfp128bk
341843513936828
T:
ecfp256e
338693519836987
T:
hecfp128i
336913530737014
T:
hecfp128bk
350283619337013
T:
prjfp128bk
357603679337550
T:
hecfp128fkt
353043684240653
T:
ecfp256h
375453909441912
T:
ecfp256s
393854008842578
T:
curve2251
391934055443977
T:
ecfp256q
422794253843418
T:
gls254
438454391043973
T:
gls254prot
536495366253673
T:
k277taa
591095913559157
T:
kummer
615306220463034
T:
gls1271
640276406264131
T:
k298
821178217282233
T:
kumfp127g
865988659886608
T:
k277mon
109229109289109345
T:
kumfp128g
134344134429134616
T:
curve25519
144723145257145567
T:
surf127eps
158760159158159794
T:
ed448goldilocks
158774159658160415
T:
ecfp256i
164045165954167199
T:
sclaus1024
235682235879236919
T:
nistp256
441377443259444850
T:
surf2113
848924849277851955
T:
ed521gs
851076856973863798
T:
sclaus2048
941076941795942476
T:
nist521gs
9810359858181110427
T:
claus
Cycles to compute a shared secret
25%50%75%system
413874143941443
T:
gls254
437394380043885
T:
gls254prot
535975359853607
T:
k277taa
590785912259146
T:
kummer
639236397064001
T:
k298
836208362084233
T:
kumfp127g
846368469984796
T:
jacfp128bk
852568540785953
T:
kumjacfp127g
865778658386583
T:
k277mon
992109932299382
T:
prjfp128bk
102195102533102569
T:
hecfp128bk
106141106235106308
T:
hecfp128fkt
114801114874114882
T:
kumfp128g
128360128463128524
T:
jacfp127i
134246134330134450
T:
curve25519
141618141758141917
T:
surf127eps
146442146527146571
T:
ecfp256e
147185152286153078
T:
gls1271
155324155419155572
T:
ecfp256i
154623155617157646
T:
curve2251
156596156632156956
T:
ecfp256q
160093160121160134
T:
prjfp127i
163350163470163764
T:
hecfp127i
159446165876167798
T:
sclaus1024
179532179703179811
T:
ecfp256h
212186212368212714
T:
ecfp256s
225631225828226073
T:
hecfp128i
440838441852443929
T:
surf2113
482708483954485446
T:
ed448goldilocks
598479600925601653
T:
nistp256
848923849281849867
T:
ed521gs
855145857382881542
T:
sclaus2048
941271941579942139
T:
nist521gs
9727059828281113588
T:
claus

amd64; Zen3 (a50f00); 2021 AMD Ryzen 5 PRO 5650G; 6 x 3900MHz; cezanne, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
248322631928320
T:
jacfp127i
255932705729404
T:
kumjacfp127g
284373063432975
T:
hecfp127i
294603107733261
T:
prjfp127i
310693268434644
T:
jacfp128bk
324663409737234
T:
ecfp256e
334383496439777
T:
curve2251
353313752742927
T:
ecfp256h
373403768138240
T:
gls254
365943826040958
T:
hecfp128bk
383043834238410
T:
gls254prot
371153894741175
T:
hecfp128fkt
371013897141023
T:
hecfp128i
380733967141162
T:
prjfp128bk
373913971845088
T:
ecfp256s
396894178147856
T:
ecfp256q
47320?47571?63058?
T:
kummer
478334787947917
T:
k277taa
532615384554545
T:
gls1271
541445428254953
T:
k298
756247568675750
T:
k277mon
814518152281592
T:
kumfp127g
102457102532102636
T:
curve25519
105138105201105291
T:
kumfp128g
139569140222140661
T:
surf127eps
149324150229151132
T:
ecfp256i
158424159015159244
T:
ed448goldilocks
198788200592202561
T:
sclaus1024
219127219451220810
T:
nistp256
356298358577359272
T:
surf2113
754905756019756339
T:
ed521gs
903967905662908918
T:
nist521gs
100698610132041021320
T:
sclaus2048
102177010230281037110
T:
claus
Cycles to compute a shared secret
25%50%75%system
355583573935761
T:
gls254
382423825338369
T:
gls254prot
472084724847668
T:
kummer
477124779047868
T:
k277taa
539535402054091
T:
k298
756027566575704
T:
k277mon
811758137281416
T:
jacfp128bk
839118399384058
T:
kumfp127g
858448593286008
T:
kumjacfp127g
104442104577104705
T:
prjfp128bk
107125107390107463
T:
hecfp128bk
109696109796109803
T:
kumfp128g
110728110809110878
T:
curve25519
111443111638111970
T:
hecfp128fkt
130635130720130819
T:
curve2251
131604131727131823
T:
jacfp127i
129538132653133352
T:
gls1271
134811135322135360
T:
ecfp256e
136028136724137151
T:
surf127eps
143518143643143958
T:
ecfp256i
145950146542146595
T:
ecfp256q
164201165616167003
T:
ecfp256h
174929175381176507
T:
prjfp127i
177921178097178511
T:
hecfp127i
201445202008208793
T:
sclaus1024
202053204348204513
T:
ecfp256s
237788237838239003
T:
hecfp128i
353823353978354225
T:
surf2113
528468528564529054
T:
ed448goldilocks
577368580943581584
T:
nistp256
753753754434755425
T:
ed521gs
907407909076910054
T:
nist521gs
100375910122251025182
T:
sclaus2048
101895610206271032663
T:
claus

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
337343515539802
T:
curve2251
378263799538008
T:
gls254prot
372723827438659
T:
gls254
467504677046841
T:
k277taa
476974775247905
T:
kummer
527445287253245
T:
k298
540195499656224
T:
gls1271
736497369373773
T:
k277mon
102507102661102824
T:
curve25519
139792140126140514
T:
surf127eps
156767157050157379
T:
ed448goldilocks
200647202727204578
T:
sclaus1024
209722210036210198
T:
nistp256
367234369072370210
T:
surf2113
757107758860764001
T:
ed521gs
872057875803876158
T:
nist521gs
100644510150731020480
T:
sclaus2048
119862812011361204247
T:
claus
Cycles to compute a shared secret
25%50%75%system
353323536835374
T:
gls254
378513789837931
T:
gls254prot
467024674546836
T:
k277taa
478424789748070
T:
kummer
525905267552753
T:
k298
736187368873725
T:
k277mon
110876110972111112
T:
curve25519
126036129335132317
T:
gls1271
129803131087131198
T:
curve2251
135835136451136730
T:
surf127eps
202626205515206705
T:
sclaus1024
363140363460363827
T:
surf2113
517434518481518742
T:
ed448goldilocks
563375563907564446
T:
nistp256
758675758870760360
T:
ed521gs
872278873146874983
T:
nist521gs
101862610200251021087
T:
sclaus2048
119823611998721202629
T:
claus

amd64; Zen2 (860f81); 2021 AMD Ryzen 3 5300U; 4 x 2600MHz; lucienne, supercop-20221122

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
394703992641736
T:
curve2251
433634383944150
T:
gls254
438494387143932
T:
gls254prot
536375365553687
T:
k277taa
590295908859119
T:
kummer
603936105461706
T:
gls1271
638336387963983
T:
k298
865958660386633
T:
k277mon
135026135032135242
T:
curve25519
145271145861146219
T:
surf127eps
158951159564160439
T:
ed448goldilocks
164192165878167446
T:
sclaus1024
236364237243237378
T:
nistp256
441227443331444647
T:
surf2113
818008818666819334
T:
ed521gs
847393853072861930
T:
sclaus2048
941990944873945634
T:
nist521gs
976902979240982229
T:
claus
Cycles to compute a shared secret
25%50%75%system
413794138141432
T:
gls254
437554375543765
T:
gls254prot
535985361853625
T:
k277taa
589975902259032
T:
kummer
637386377663822
T:
k298
865678658386583
T:
k277mon
135039135183136289
T:
curve25519
140195142198142396
T:
surf127eps
148418148866151322
T:
gls1271
156901157359157591
T:
curve2251
164715164896166415
T:
sclaus1024
443136443962444956
T:
surf2113
481367481713484137
T:
ed448goldilocks
596033597706598345
T:
nistp256
817237817822818578
T:
ed521gs
844235849161855888
T:
sclaus2048
943541944278945866
T:
nist521gs
979030979226981562
T:
claus

amd64; Tremont (906c0); 2021 Intel Celeron N5105; 4 x 2000MHz; jasper3, supercop-20221122

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
490764952650618
T:
curve2251
537095390854229
T:
gls254
551695523755327
T:
gls254prot
677156788868046
T:
k277taa
805458144882204
T:
k298
986969891299092
T:
k277mon
9786599457101381
T:
gls1271
241342242054242379
T:
curve25519
277117279586281673
T:
surf127eps
303931304566304828
T:
ed448goldilocks
319841320449320918
T:
kummer
326438329496333463
T:
sclaus1024
340613340976341323
T:
nistp256
597267599464601054
T:
surf2113
174189317434401744685
T:
ed521gs
176129317740121784489
T:
sclaus2048
196725619723741977616
T:
claus
197283619740411976229
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
528105286552966
T:
gls254
550745516355218
T:
gls254prot
675916780167963
T:
k277taa
794168008280766
T:
k298
986569883399015
T:
k277mon
188763193138193476
T:
curve2251
241591241883242208
T:
curve25519
239026241961253776
T:
gls1271
267252272677274537
T:
surf127eps
319948320467321178
T:
kummer
329121330011332307
T:
sclaus1024
565508596112598764
T:
surf2113
100241610053191006211
T:
ed448goldilocks
117775211788911179773
T:
nistp256
174279517443961745841
T:
ed521gs
177675217898701808597
T:
sclaus2048
197056919718991973840
T:
nist521gs
197321919806081982872
T:
claus

aarch64; Firestorm (610f0230); 2020 Apple M1; 4 x 3200MHz; unstable; minimac, supercop-20211108

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
103596?106662?191459?
T:
kummer
106662?107063?196792?
T:
curve25519
159594?159860?261590?
T:
nistp256
489848?492114?801969?
T:
ed521gs
667441?668907?980761?
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
103063?103996?168927?
T:
kummer
106662?107062?174526?
T:
curve25519
424383?424783?622109?
T:
nistp256
489847?490248?656374?
T:
ed521gs
666774667574780236
T:
nist521gs

amd64; Zen3 (a20f10); 2020 AMD Ryzen 9 5950X; 16 x 3400MHz; zen3, supercop-20220213

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
335503433637499
T:
curve2251
363653651337501
T:
gls254
379363793737952
T:
gls254prot
467334679546877
T:
k277taa
490954914549182
T:
kummer
538025436254972
T:
gls1271
622176235462808
T:
k298
730897320373278
T:
k277mon
102285102373102495
T:
curve25519
140529141187141634
T:
surf127eps
159195159496159723
T:
ed448goldilocks
207217208665210377
T:
sclaus1024
222820223237223320
T:
nistp256
367798369470370460
T:
surf2113
716599719778729310
T:
ed521gs
880981882015884294
T:
nist521gs
101912710197971023602
T:
claus
101372810214011029771
T:
sclaus2048
Cycles to compute a shared secret
25%50%75%system
352643534135442
T:
gls254
378543788537886
T:
gls254prot
466344671746804
T:
k277taa
491034913949166
T:
kummer
620926218162313
T:
k298
730317308673130
T:
k277mon
110825110904110991
T:
curve25519
129784130071131187
T:
curve2251
129270130535131907
T:
gls1271
137060138423138483
T:
surf127eps
208043208798210458
T:
sclaus1024
364367365479366016
T:
surf2113
525993526466527032
T:
ed448goldilocks
600802602448603146
T:
nistp256
716085717688727485
T:
ed521gs
883003884791887358
T:
nist521gs
101633910172241018546
T:
claus
100114110280561029316
T:
sclaus2048

amd64; TigerLake (806c1); 2020 Intel Core i7-1165G7; 4 x 2800MHz; panther, supercop-20221122

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
297803020130932
T:
gls254
316263167631749
T:
gls254prot
355793580536966
T:
curve2251
382313828238361
T:
k277taa
425574265042804
T:
k298
484854853248579
T:
kummer
550175507355155
T:
k277mon
634826458766248
T:
gls1271
121055121170121269
T:
curve25519
143333143645144097
T:
ed448goldilocks
171244172481173568
T:
surf127eps
209455211804213912
T:
sclaus1024
229555230272231155
T:
nistp256
403400405540406934
T:
surf2113
792366794503797271
T:
ed521gs
965627968639974337
T:
nist521gs
105794110596861082180
T:
claus
107124410787331087295
T:
sclaus2048
Cycles to compute a shared secret
25%50%75%system
288562890428957
T:
gls254
315483159031647
T:
gls254prot
381193825638309
T:
k277taa
422244229442361
T:
k298
484554849948554
T:
kummer
549475501655075
T:
k277mon
130006130155130266
T:
curve25519
139887140246141830
T:
curve2251
159448160370161261
T:
gls1271
162277162933166001
T:
surf127eps
213389214292220380
T:
sclaus1024
406387412814415659
T:
surf2113
457582457921458348
T:
ed448goldilocks
581659584514586334
T:
nistp256
791812793726795821
T:
ed521gs
965893967295973754
T:
nist521gs
105409210553081078076
T:
claus
105383410610551087708
T:
sclaus2048

aarch64; A72 (410fd083); 2019 Broadcom BCM2711; 4 x 1500MHz; pi4b, supercop-20221122

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
248671248718248899
T:
kummer
349428350528350530
T:
curve25519
369706373763373894
T:
nistp256
421516423228424835
T:
surf127eps
596586601454607959
T:
sclaus1024
195658119578831967423
T:
ed521gs
239786524092292436610
T:
nist521gs
298578730084743033932
T:
sclaus2048
359854636082593626566
T:
claus
Cycles to compute a shared secret
25%50%75%system
248844248852249089
T:
kummer
350476351136351136
T:
curve25519
401757407720409762
T:
surf127eps
595686604209604345
T:
sclaus1024
129635213075201307797
T:
nistp256
195722819576121974231
T:
ed521gs
239671324073692430056
T:
nist521gs
295991329935833008120
T:
sclaus2048
360263136109603620952
T:
claus

amd64; Zen2 (830f10); 2019 AMD EPYC 7742; 64 x 2250MHz; rome0, supercop-20221122

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
398434103345574
T:
curve2251
434984372144036
T:
gls254
441004411144137
T:
gls254prot
538325384253875
T:
k277taa
590375909759134
T:
kummer
618976264263258
T:
gls1271
633336338865781
T:
k298
860468604686047
T:
k277mon
135092135487136495
T:
curve25519
144712145169145513
T:
surf127eps
158540158920159307
T:
ed448goldilocks
163948165913167554
T:
sclaus1024
237185237401238241
T:
nistp256
442008443816444732
T:
surf2113
818874820219821358
T:
ed521gs
852563860029865672
T:
sclaus2048
943038943946944925
T:
nist521gs
975682978856982883
T:
claus
Cycles to compute a shared secret
25%50%75%system
413664139841402
T:
gls254
440504405844063
T:
gls254prot
538495389553911
T:
k277taa
589865900959181
T:
kummer
632166324863283
T:
k298
860018600186001
T:
k277mon
135133135175135567
T:
curve25519
141471141692141857
T:
surf127eps
149599150728150974
T:
gls1271
156186156929156983
T:
curve2251
165637166461167104
T:
sclaus1024
440123441818443280
T:
surf2113
479969483163483628
T:
ed448goldilocks
600088600480600761
T:
nistp256
817687818474820028
T:
ed521gs
865114876035877411
T:
sclaus2048
942875944233945197
T:
nist521gs
974645977405985095
T:
claus

amd64; CometLake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; comet, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
220872272923578
T:
kumjacfp127g
229932364824394
T:
jacfp127i
248622582327187
T:
hecfp127i
259532667127450
T:
prjfp127i
305903149132328
T:
jacfp128bk
353203574737053
T:
hecfp128bk
356513622437308
T:
prjfp128bk
354283652137739
T:
hecfp128i
355093665137879
T:
hecfp128fkt
372013747137858
T:
gls254
382693883639693
T:
curve2251
390613909839147
T:
gls254prot
426224325544819
T:
ecfp256e
458864629346331
T:
k277taa
457814651048513
T:
ecfp256h
465354728148865
T:
ecfp256s
485394940451762
T:
ecfp256q
533405340353487
T:
kummer
540865419554408
T:
k298
699217076271611
T:
gls1271
703657172172298
T:
k277mon
801728033480837
T:
kumfp127g
110459112797112885
T:
kumfp128g
126478126705126951
T:
curve25519
153511153752153969
T:
ed448goldilocks
177698179528181105
T:
sclaus1024
184190187033187854
T:
surf127eps
193171194339195384
T:
ecfp256i
235513236319237024
T:
nistp256
257327264420276371
T:
hector
504448506315507508
T:
surf2113
816517817163818623
T:
ed521gs
912497922458965766
T:
sclaus2048
968400969442976609
T:
claus
978281979937982372
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
361393619836292
T:
gls254
388663890538970
T:
gls254prot
456864607046105
T:
k277taa
532145328653350
T:
kummer
533315342253526
T:
k298
716157172072960
T:
k277mon
824138257182926
T:
kumfp127g
837608383283916
T:
kumjacfp127g
877598863888750
T:
jacfp128bk
110049110170110306
T:
prjfp128bk
111754113508113683
T:
hecfp128bk
117705117839118009
T:
hecfp128fkt
115643118020118098
T:
kumfp128g
123877123954124056
T:
jacfp127i
136171136590137443
T:
curve25519
143766144005144139
T:
curve2251
164951165088165284
T:
prjfp127i
167015167139167307
T:
hecfp127i
172057174412176158
T:
gls1271
176261176554176754
T:
ecfp256e
175382179286179682
T:
sclaus1024
179904182356183419
T:
surf127eps
188785188924189112
T:
ecfp256i
189218189401189596
T:
ecfp256q
222261222399222597
T:
ecfp256h
241189241361241534
T:
ecfp256s
252566252783252987
T:
hecfp128i
458517458832459161
T:
ed448goldilocks
504878505329505736
T:
surf2113
584151585057587562
T:
nistp256
817024822628837240
T:
ed521gs
873090878162884112
T:
hector
930086953186968792
T:
sclaus2048
965273965981973616
T:
claus
978963980355982574
T:
nist521gs

amd64; IceLake (706e5); 2019 Intel Core i3-1035G1; 4 x 1000MHz; icelake2, supercop-20221005

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
294222962629829
T:
gls254
315353159731656
T:
gls254prot
356823592536460
T:
curve2251
383873849338628
T:
k277taa
419144215642522
T:
k298
496314972949925
T:
kummer
551485524155618
T:
k277mon
635416461665455
T:
gls1271
121235121421121705
T:
curve25519
145378145817146240
T:
ed448goldilocks
167451169019171086
T:
surf127eps
210381213080215609
T:
sclaus1024
229401230861233076
T:
nistp256
393994396192398488
T:
surf2113
794593796389798799
T:
ed521gs
960681964206967325
T:
nist521gs
107529210887261104624
T:
sclaus2048
126261112669811272519
T:
claus
Cycles to compute a shared secret
25%50%75%system
288282887928947
T:
gls254
314583151831670
T:
gls254prot
382633836838587
T:
k277taa
415914182342184
T:
k298
495244961549793
T:
kummer
550675515755384
T:
k277mon
130070130318130992
T:
curve25519
140066140553140999
T:
curve2251
158547160294161947
T:
gls1271
163805165182167813
T:
surf127eps
212667213688216268
T:
sclaus1024
391304393743396581
T:
surf2113
469404470206471471
T:
ed448goldilocks
596086598954603025
T:
nistp256
794467795618798066
T:
ed521gs
959187961357964090
T:
nist521gs
108706910915971115555
T:
sclaus2048
126428812689701273171
T:
claus

aarch64; Skylark (503f0002); 2018 Ampere eMAG 8180; 32 x 3300MHz; unstable; gcc185, supercop-20221122

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
251475251550251550
T:
curve25519
319800319875319875
T:
kummer
359250360450361950
T:
surf127eps
417525421425424050
T:
sclaus1024
446475446550446700
T:
nistp256
155130015513001552725
T:
ed521gs
189360018936001893825
T:
nist521gs
201180020301002043075
T:
sclaus2048
247260024780752484300
T:
claus
Cycles to compute a shared secret
25%50%75%system
251475251475251475
T:
curve25519
319800319800319800
T:
kummer
351900355200356325
T:
surf127eps
413550422550428775
T:
sclaus1024
999150999150999150
T:
nistp256
155160015516001551600
T:
ed521gs
189330018933001893375
T:
nist521gs
203265020349002041575
T:
sclaus2048
247020024738002476500
T:
claus

aarch64; A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3aplus, supercop-20221122

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
422142427201428401
T:
kummer
469637475131475311
T:
curve25519
473251478043478658
T:
nistp256
609447612861615570
T:
surf127eps
99704510056281019043
T:
sclaus1024
310082831455203160808
T:
ed521gs
360135636491573658747
T:
nist521gs
490959249482554997230
T:
sclaus2048
555312255655325582570
T:
claus
Cycles to compute a shared secret
25%50%75%system
421426426641427379
T:
kummer
475903481449481615
T:
curve25519
606059607071611862
T:
surf127eps
101008410152291020164
T:
sclaus1024
160027316050001613138
T:
nistp256
309919031452383159950
T:
ed521gs
358268135949263602171
T:
nist521gs
490062849466185013522
T:
sclaus2048
548157454983925516280
T:
claus

aarch64; A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3bplus, supercop-20221122

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
442319444043449701
T:
kummer
492069495231503014
T:
curve25519
497812499676510295
T:
nistp256
636257639354649627
T:
surf127eps
103429510478031059053
T:
sclaus1024
327195832774763285880
T:
ed521gs
375476637615403767633
T:
nist521gs
512213351598675187106
T:
sclaus2048
566229356687375677147
T:
claus
Cycles to compute a shared secret
25%50%75%system
441908443565448570
T:
kummer
499040501398509526
T:
curve25519
634002638178646084
T:
surf127eps
102903210433811065578
T:
sclaus1024
167985616836421689166
T:
nistp256
326999932759643281048
T:
ed521gs
375283037589943765772
T:
nist521gs
512658751577365255378
T:
sclaus2048
563212956385815647012
T:
claus

amd64; CoffeeLake (906ea); 2018 Intel Xeon E-2124; 4 x 3300MHz; r24000, supercop-20221019

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
222792384525952
T:
kumjacfp127g
246582603527740
T:
jacfp127i
262282767030368
T:
hecfp127i
275072912831119
T:
prjfp127i
332283456835972
T:
jacfp128bk
368623774638364
T:
gls254
388253887138923
T:
gls254prot
383513975641805
T:
hecfp128i
386893990941350
T:
prjfp128bk
393603999441565
T:
curve2251
402944151443495
T:
hecfp128fkt
407954241243980
T:
hecfp128bk
430884435646963
T:
ecfp256e
458424587945913
T:
k277taa
459184716649806
T:
ecfp256h
488264954850574
T:
ecfp256s
487674980552266
T:
ecfp256q
528465289752956
T:
kummer
545795490655427
T:
k298
689166966870399
T:
gls1271
712957133071389
T:
k277mon
790437916179279
T:
kumfp127g
110371110432110502
T:
kumfp128g
125190125589126077
T:
curve25519
153209153364153629
T:
ed448goldilocks
175757177435178930
T:
sclaus1024
182604183426184131
T:
surf127eps
190163191032192149
T:
ecfp256i
245386245631245917
T:
nistp256
507401509086510570
T:
surf2113
807730807994808337
T:
ed521gs
885610892232898760
T:
sclaus2048
935185935435935850
T:
nist521gs
966959967413968156
T:
claus
Cycles to compute a shared secret
25%50%75%system
357503578835839
T:
gls254
385913863038675
T:
gls254prot
456154564445667
T:
k277taa
533435339153455
T:
kummer
544085464055067
T:
k298
712127124471290
T:
k277mon
813878155882986
T:
kumfp127g
826008267782770
T:
kumjacfp127g
877908786687938
T:
jacfp128bk
108031108148108334
T:
prjfp128bk
112179112333112531
T:
hecfp128bk
115575115640116396
T:
kumfp128g
116342116477116766
T:
hecfp128fkt
123777123859123967
T:
jacfp127i
134847135269136471
T:
curve25519
144346144646144781
T:
curve2251
165137165314165521
T:
prjfp127i
167432167589167785
T:
hecfp127i
175567175735175886
T:
ecfp256e
173122175893178168
T:
gls1271
178601178786180000
T:
sclaus1024
179442179992180338
T:
surf127eps
185231185391185558
T:
ecfp256i
185291185467185655
T:
ecfp256q
220100220316220601
T:
ecfp256h
240029240211240408
T:
ecfp256s
247994248194248427
T:
hecfp128i
455229455604460737
T:
ed448goldilocks
511965512976513920
T:
surf2113
599229599397599590
T:
nistp256
807354807522807841
T:
ed521gs
872594888008888837
T:
sclaus2048
934852935033935316
T:
nist521gs
961474961980962829
T:
claus

amd64; Zen (800f11); 2017 AMD Ryzen 7 1700; 8 x 3000MHz; rumba7, supercop-20230530

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
289953023031909
T:
jacfp127i
306653149432559
T:
kumjacfp127g
325933380635458
T:
prjfp127i
332753476636139
T:
hecfp127i
393454031141551
T:
jacfp128bk
401034065442782
T:
curve2251
406774187144632
T:
ecfp256e
411574241244623
T:
hecfp128fkt
413564247144634
T:
hecfp128i
414314277444882
T:
hecfp128bk
419354333544952
T:
prjfp128bk
436794384544135
T:
gls254
447084489144920
T:
gls254prot
442564643751295
T:
ecfp256h
456914769453055
T:
ecfp256s
476704983454444
T:
ecfp256q
556755594255975
T:
k277taa
641536443664633
T:
k298
668356760968335
T:
gls1271
890978916189264
T:
k277mon
101079101090101117
T:
kummer
102844102893102958
T:
kumfp127g
134167134278135628
T:
kumfp128g
144301144331144359
T:
curve25519
186359186881187322
T:
surf127eps
186755187662188869
T:
ecfp256i
200023200252200537
T:
ed448goldilocks
202674203993205597
T:
sclaus1024
264942265059265212
T:
nistp256
474732477244478457
T:
surf2113
960550961437962177
T:
ed521gs
9911569993661005476
T:
sclaus2048
109109110916821092733
T:
nist521gs
119613611994151203177
T:
claus
Cycles to compute a shared secret
25%50%75%system
423904247342613
T:
gls254
446464477044857
T:
gls254prot
554575567055915
T:
k277taa
640586428064418
T:
k298
888258895189206
T:
k277mon
101064101074101813
T:
kummer
104259104343104456
T:
kumfp127g
106297106375106427
T:
kumjacfp127g
109695109807110224
T:
jacfp128bk
126823127025127214
T:
prjfp128bk
129747129823129929
T:
hecfp128bk
134720134852135034
T:
hecfp128fkt
139023139048141182
T:
kumfp128g
157006157253157569
T:
curve25519
159124160097160803
T:
curve2251
163505163623163738
T:
jacfp127i
159683164603167656
T:
gls1271
174197174293174674
T:
ecfp256e
183634183766184056
T:
ecfp256i
183718183796183897
T:
ecfp256q
182703183945184213
T:
surf127eps
203713203909204221
T:
prjfp127i
207294207379207477
T:
hecfp127i
198341209619210014
T:
sclaus1024
216228216321216561
T:
ecfp256h
235372235448235548
T:
ecfp256s
286172286392288269
T:
hecfp128i
477396477511477628
T:
surf2113
584014585725585835
T:
ed448goldilocks
687512688060690250
T:
nistp256
959667960843961945
T:
ed521gs
100186810025751009193
T:
sclaus2048
109232710932601094041
T:
nist521gs
119641612015101201999
T:
claus

amd64; Zen (800f11); 2017 AMD Ryzen 5 1600; 6 x 3200MHz; rumba5, supercop-20221122

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
401444069844030
T:
curve2251
444964494545299
T:
gls254
448294507245434
T:
gls254prot
558155595656175
T:
k277taa
641096433764576
T:
k298
661516703168073
T:
gls1271
891018914689173
T:
k277mon
100979101731102830
T:
kummer
144555144586150382
T:
curve25519
186261186876187291
T:
surf127eps
200107200227200580
T:
ed448goldilocks
202403204496206106
T:
sclaus1024
264814264947268009
T:
nistp256
475719477154478460
T:
surf2113
952779954445956106
T:
ed521gs
9913489985141005440
T:
sclaus2048
109222310931041094403
T:
nist521gs
120101712042071206911
T:
claus
Cycles to compute a shared secret
25%50%75%system
423724257242619
T:
gls254
447614500845830
T:
gls254prot
557475591956130
T:
k277taa
640226410564301
T:
k298
891008917489252
T:
k277mon
100944101783102789
T:
kummer
157084157348158894
T:
curve25519
159147159595161519
T:
curve2251
166988168028173513
T:
gls1271
184007184495184747
T:
surf127eps
201784201990207975
T:
sclaus1024
463472473161476582
T:
surf2113
582326582592584205
T:
ed448goldilocks
685954687138692302
T:
nistp256
955370958112958830
T:
ed521gs
990002997853998341
T:
sclaus2048
109024310912101093190
T:
nist521gs
1198947?1200178?2980312?
T:
claus

amd64; Zen (800f11); 2017 AMD Ryzen 3 1200; 4 x 3100MHz; rumba3, supercop-20221122

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
399064039241648
T:
curve2251
430004317343315
T:
gls254
447374492044939
T:
gls254prot
558915622856511
T:
k277taa
640776428664529
T:
k298
661346680067503
T:
gls1271
892038927689393
T:
k277mon
101348102336102370
T:
kummer
144317144332144396
T:
curve25519
186208186823187356
T:
surf127eps
200830201112201359
T:
ed448goldilocks
201457203277204818
T:
sclaus1024
265071265110265175
T:
nistp256
474898476975478480
T:
surf2113
954808956760958406
T:
ed521gs
99471310035201010948
T:
sclaus2048
109203910937761095296
T:
nist521gs
120183012051331208382
T:
claus
Cycles to compute a shared secret
25%50%75%system
422804243842475
T:
gls254
446494482644853
T:
gls254prot
557555616656410
T:
k277taa
639146406764346
T:
k298
891318921289256
T:
k277mon
101260101287101316
T:
kummer
157033158303163391
T:
curve25519
159716160689161507
T:
curve2251
165164165960166506
T:
gls1271
181807183608183962
T:
surf127eps
201024201382204739
T:
sclaus1024
475296477122477679
T:
surf2113
582336584503586958
T:
ed448goldilocks
685797687148687995
T:
nistp256
953919955956957987
T:
ed521gs
9962849976781004679
T:
sclaus2048
109090110925561093674
T:
nist521gs
120406712073391212719
T:
claus

amd64; KabyLake (906e9); 2017 Intel Xeon E3-1220 v6; 4 x 3000MHz; kizomba, supercop-20230530

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
220282309225901
T:
jacfp127i
230062443626500
T:
kumjacfp127g
251922577129123
T:
hecfp127i
252022668530250
T:
prjfp127i
297803075034661
T:
jacfp128bk
349343707341538
T:
prjfp128bk
365243708940246
T:
hecfp128bk
367583713238143
T:
gls254
386963875442012
T:
gls254prot
390653926443634
T:
curve2251
381813931443214
T:
hecfp128i
395554107243756
T:
hecfp128fkt
438244494048723
T:
ecfp256e
462424629546597
T:
k277taa
477964849453776
T:
ecfp256h
505635153854903
T:
ecfp256s
512305186357188
T:
ecfp256q
516725189959435
T:
k298
534655355059867
T:
kummer
694927033370975
T:
gls1271
714057150278228
T:
k277mon
794277965489055
T:
kumfp127g
111165111299120895
T:
kumfp128g
125322125667136667
T:
curve25519
153276154238154946
T:
ed448goldilocks
183470184947197871
T:
surf127eps
177726185482200361
T:
sclaus1024
193254199111213557
T:
ecfp256i
240663241403257903
T:
nistp256
524974538711565785
T:
surf2113
832432852933884857
T:
ed521gs
9222129561921003986
T:
sclaus2048
98388310059961041004
T:
nist521gs
108285311041661142232
T:
claus
Cycles to compute a shared secret
25%50%75%system
356903573835853
T:
gls254
384423850041871
T:
gls254prot
459844602949304
T:
k277taa
514185152955613
T:
k298
533735343456537
T:
kummer
711437124281010
T:
k277mon
810548121787869
T:
kumfp127g
828678299189471
T:
kumjacfp127g
880148832797954
T:
jacfp128bk
108800111911122010
T:
prjfp128bk
111982112199121411
T:
hecfp128bk
115460118642125292
T:
kumfp128g
116587118818126943
T:
hecfp128fkt
124460125720138593
T:
jacfp127i
135159135625146662
T:
curve25519
146036150052160133
T:
curve2251
166294169625181764
T:
prjfp127i
167393170979182512
T:
hecfp127i
171175172006179637
T:
gls1271
175684178929190790
T:
ecfp256e
179893180691187915
T:
surf127eps
179077185536198587
T:
sclaus1024
185534192351204575
T:
ecfp256q
187361193887207159
T:
ecfp256i
217676218097234234
T:
ecfp256h
242964249446268294
T:
ecfp256s
248427255097268965
T:
hecfp128i
465143472744488663
T:
ed448goldilocks
511119520679540811
T:
surf2113
620615636421662645
T:
nistp256
833929855659885058
T:
ed521gs
9414409822981019117
T:
sclaus2048
98431510044481029606
T:
nist521gs
107508310971511126115
T:
claus

amd64; KabyLake (806e9); 2017 Intel Core i7-7567U; 2 x 3500MHz; unstable; intelnuci7, supercop-20211108

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
228542402425244
T:
jacfp127i
230762417825666
T:
kumjacfp127g
251382638627910
T:
hecfp127i
262442741629766
T:
prjfp127i
313463240833938
T:
jacfp128bk
360883742439956
T:
hecfp128i
368623812240248
T:
hecfp128fkt
372203823039526
T:
prjfp128bk
380203825038618
T:
gls254
393423945840200
T:
curve2251
383043960641796
T:
hecfp128bk
400444011040194
T:
gls254prot
438544459445714
T:
ecfp256e
472364728847348
T:
k277taa
467684764849566
T:
ecfp256h
470064777649534
T:
ecfp256s
494625044052650
T:
ecfp256q
518945220052956
T:
kummer
542885437054510
T:
k298
722487237872610
T:
k277mon
719947278873588
T:
gls1271
815528164681752
T:
kumfp127g
114092114148114208
T:
kumfp128g
129368129626129896
T:
curve25519
158112158318158604
T:
ed448goldilocks
180542182522184208
T:
sclaus1024
186540187234187858
T:
surf127eps
195688196738197926
T:
ecfp256i
217550226366238000
T:
hector
242064242480270748
T:
nistp256
508152510326511366
T:
surf2113
836516836864837546
T:
ed521gs
913382920252927792
T:
sclaus2048
970706971326972396
T:
nist521gs
100683810084961011858
T:
claus
Cycles to compute a shared secret
25%50%75%system
368503692836980
T:
gls254
397683981439892
T:
gls254prot
469344698047032
T:
k277taa
518045212452280
T:
kummer
540985417654274
T:
k298
723527251874482
T:
k277mon
838868396284030
T:
kumfp127g
852748536285450
T:
kumjacfp127g
908909099091088
T:
jacfp128bk
111918112022112158
T:
prjfp128bk
118500118660118848
T:
hecfp128bk
119418119482119546
T:
kumfp128g
122602122806123004
T:
hecfp128fkt
127970128042128146
T:
jacfp127i
139286139568140018
T:
curve25519
148680149586149718
T:
curve2251
170368170516170720
T:
prjfp127i
173236173498175470
T:
hecfp127i
174868179314179672
T:
gls1271
172194180938185840
T:
sclaus1024
181232181406181554
T:
ecfp256e
183398183722184034
T:
surf127eps
190906191084191228
T:
ecfp256i
191248191408191566
T:
ecfp256q
225138225284225548
T:
ecfp256h
245790246000246200
T:
ecfp256s
256004256202256392
T:
hecfp128i
471048471346471646
T:
ed448goldilocks
505542506108508468
T:
surf2113
595818596138596506
T:
nistp256
740472746538753674
T:
hector
836072836278836634
T:
ed521gs
912476915646935020
T:
sclaus2048
970230970696972034
T:
nist521gs
9913549937981041200
T:
claus

amd64; KabyLake (806e9); 2017 Intel Core i3-7100; 2 x 2400MHz; whosthere, supercop-20221122

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
372803748937771
T:
gls254
392633931439369
T:
gls254prot
416444200442820
T:
curve2251
458134631946401
T:
k277taa
532185360754066
T:
k298
534845387155445
T:
kummer
711287127372399
T:
k277mon
112849114255115628
T:
gls1271
126059127356128223
T:
curve25519
154497155659156258
T:
ed448goldilocks
192916194391196007
T:
surf127eps
197126199570201477
T:
sclaus1024
300445301390302205
T:
nistp256
529936531945534974
T:
surf2113
893927897039900085
T:
ed521gs
100155410131181033949
T:
sclaus2048
104520210486431054813
T:
claus
104926010537761056028
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
360963615236305
T:
gls254
388643895439027
T:
gls254prot
460634610746164
T:
k277taa
527745292853262
T:
k298
534515377355644
T:
kummer
710657227072328
T:
k277mon
135972136643137230
T:
curve25519
144115144493145510
T:
curve2251
186994188482190065
T:
surf127eps
198564201605204874
T:
sclaus1024
273946277886282463
T:
gls1271
461335462594462918
T:
ed448goldilocks
527628529760532633
T:
surf2113
683477687360690652
T:
nistp256
897139900975904698
T:
ed521gs
100738610120281031660
T:
sclaus2048
103689410438611049575
T:
claus
105036910545421056565
T:
nist521gs

armeabi; Cortex-A7 (410fc075); 2016 Broadcom BCM2836; 4 x 900MHz; berry2, supercop-20221122

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
580378580648593158
T:
kummer
926209926618944145
T:
curve25519
125361512550501275609
T:
nistp256
345829334934423534864
T:
sclaus1024
158941151601684516135432
T:
sclaus2048
203993602048336920586323
T:
claus
Cycles to compute a shared secret
25%50%75%system
580098580217580863
T:
kummer
925948926188942821
T:
curve25519
351159836171343642686
T:
sclaus1024
430259843179484319165
T:
nistp256
159815361615849316287307
T:
sclaus2048
204876462057085420779373
T:
claus

amd64; Goldmont (506c9); 2016 Intel Celeron J3455; 4 x 1500MHz; wooden, supercop-20221122

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
623096361266842
T:
curve2251
713507265573570
T:
gls254
907149072090721
T:
gls254prot
125046125049125055
T:
k277taa
124311125540126661
T:
gls1271
136570136604137387
T:
k298
181186181191181195
T:
k277mon
278725278725278730
T:
curve25519
352397352642353306
T:
ed448goldilocks
382920384289384901
T:
surf127eps
386865390043393866
T:
sclaus1024
403520403525403538
T:
kummer
424150424188424284
T:
nistp256
728133731211732169
T:
surf2113
188000918952031906941
T:
sclaus2048
200417820048562005935
T:
ed521gs
231819723192372320026
T:
nist521gs
231940723241602328625
T:
claus
Cycles to compute a shared secret
25%50%75%system
675466835469455
T:
gls254
905429054390546
T:
gls254prot
124919124920124920
T:
k277taa
136350136370136400
T:
k298
181073181073181075
T:
k277mon
240901241987242025
T:
curve2251
278343278343278343
T:
curve25519
312200312677313657
T:
gls1271
377567379316380826
T:
surf127eps
389075390970395286
T:
sclaus1024
403287403434403434
T:
kummer
716229719140725661
T:
surf2113
115328811532961153518
T:
ed448goldilocks
146052114618781462100
T:
nistp256
190316119315141938329
T:
sclaus2048
200368620042302004678
T:
ed521gs
231786423186202319411
T:
nist521gs
231391223227882326946
T:
claus

amd64; BW+AES (406f1); 2016 Intel Xeon E5-2609 v4; 8 x 1700MHz; bolero, supercop-20221122

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
245882542027984
T:
jacfp127i
257922668831012
T:
kumjacfp127g
283602943635376
T:
prjfp127i
28180?32376?37508?
T:
hecfp127i
316283305636380
T:
jacfp128bk
376403792443296
T:
gls254
392803944844140
T:
gls254prot
384563982045752
T:
hecfp128fkt
403004104446316
T:
curve2251
404404127245988
T:
hecfp128bk
381564144045984
T:
prjfp128bk
410004326846268
T:
hecfp128i
435204660851084
T:
ecfp256e
493044958058872
T:
k277taa
494925161259664
T:
ecfp256s
513725287661552
T:
ecfp256q
48252?53236?62840?
T:
ecfp256h
554685928066060
T:
k298
600966080069232
T:
kummer
732887447682648
T:
k277mon
782008265291916
T:
gls1271
827768395695596
T:
kumfp127g
130188135096149968
T:
kumfp128g
143320147952161396
T:
curve25519
157132163572186188
T:
ed448goldilocks
193244200420224812
T:
sclaus1024
198460206984230792
T:
surf127eps
203320210888231428
T:
ecfp256i
248712258988288812
T:
nistp256
628124663608707548
T:
surf2113
9421329797281026328
T:
ed521gs
99435610311321064904
T:
sclaus2048
104285210748001110968
T:
claus
108697211299161172100
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
361563642841940
T:
gls254
391923924039392
T:
gls254prot
492445370458948
T:
k277taa
552845545265836
T:
k298
603646302068968
T:
kummer
731647326483328
T:
k277mon
8670891332103028
T:
kumfp127g
9321696296107356
T:
kumjacfp127g
9603696348105676
T:
jacfp128bk
117200121948132768
T:
prjfp128bk
120876125448135496
T:
hecfp128bk
127920132844150784
T:
hecfp128fkt
135508140492160040
T:
kumfp128g
143008147612166496
T:
curve25519
153812159504172492
T:
curve2251
155180160152180432
T:
jacfp127i
187456192864218240
T:
hecfp127i
185368194672219028
T:
prjfp127i
186184195664214964
T:
ecfp256e
193544199072225748
T:
gls1271
192640199460221920
T:
surf127eps
192904199956221072
T:
ecfp256q
193136202444223864
T:
sclaus1024
201368206128229092
T:
ecfp256i
233548238596263568
T:
ecfp256h
252664262600290032
T:
ecfp256s
276500286984315484
T:
hecfp128i
479064509576532548
T:
ed448goldilocks
631448665560689612
T:
surf2113
632120670704701804
T:
nistp256
9533809894361026480
T:
ed521gs
97388810047561058408
T:
sclaus2048
104048810810681114844
T:
claus
108470811214601167224
T:
nist521gs

aarch64; A53+crypto (410fd034); 2015 NXP QorIQ LS1088; 8 x 1600MHz; ten64, supercop-20210604

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
423808423808423808
T:
kummer
469632470272470464
T:
curve25519
482496482816483392
T:
nistp256
566784569280570752
T:
surf127eps
9820809925121003136
T:
sclaus1024
309625631022723104896
T:
ed521gs
368243236893443690944
T:
nist521gs
482899248649604911872
T:
sclaus2048
518656051886085210560
T:
claus
Cycles to compute a shared secret
25%50%75%system
423488423488423744
T:
kummer
476032476096476352
T:
curve25519
568448569472570112
T:
surf127eps
978944988544999424
T:
sclaus1024
165177616518401658944
T:
nistp256
309670431026563104000
T:
ed521gs
368044836871043687360
T:
nist521gs
478713648380164860352
T:
sclaus2048
517612851774725180032
T:
claus

amd64; Skylake (506e3); 2015 Intel Xeon E3-1220 v5; 4 x 3000MHz; samba, supercop-20221122

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
211282173923303
T:
kumjacfp127g
225492435226418
T:
jacfp127i
256302708429950
T:
prjfp127i
261472795930407
T:
hecfp127i
308343229034796
T:
jacfp128bk
362263691438929
T:
hecfp128i
369003727637920
T:
gls254
367243842141583
T:
prjfp128bk
388283887738916
T:
gls254prot
385013936641663
T:
curve2251
383283975242657
T:
hecfp128bk
387024007543173
T:
hecfp128fkt
434604438046441
T:
ecfp256e
458154584845876
T:
k277taa
453464596348221
T:
ecfp256h
465254756849315
T:
ecfp256s
484744928151393
T:
ecfp256q
521215228655021
T:
k298
535255358053643
T:
kummer
689226973470342
T:
gls1271
712947133171369
T:
k277mon
789097903679151
T:
kumfp127g
110389110452110535
T:
kumfp128g
125270125532125826
T:
curve25519
153174153403153639
T:
ed448goldilocks
175874177366178984
T:
sclaus1024
182693183531183998
T:
surf127eps
190067191017192139
T:
ecfp256i
245451245722245989
T:
nistp256
504771506921508060
T:
surf2113
807892808193808727
T:
ed521gs
888364897943951031
T:
sclaus2048
935211935787939066
T:
nist521gs
967156967858969674
T:
claus
Cycles to compute a shared secret
25%50%75%system
357593579935841
T:
gls254
385953864538672
T:
gls254prot
456224564845672
T:
k277taa
519665208155228
T:
k298
528735292052967
T:
kummer
712097123871277
T:
k277mon
812138130881389
T:
kumfp127g
826198269382777
T:
kumjacfp127g
877848787987956
T:
jacfp128bk
108059108189108326
T:
prjfp128bk
111714111833111989
T:
hecfp128bk
115553115602115659
T:
kumfp128g
115920116041116239
T:
hecfp128fkt
123807123904123991
T:
jacfp127i
134962135329135643
T:
curve25519
144976145273145947
T:
curve2251
165178165330165499
T:
prjfp127i
167190167367170934
T:
hecfp127i
167863172535173876
T:
gls1271
175647175846176090
T:
ecfp256e
174974178767179988
T:
sclaus1024
178766179692180310
T:
surf127eps
185249185399185599
T:
ecfp256q
185303185441185688
T:
ecfp256i
220144220378220627
T:
ecfp256h
239924240093240353
T:
ecfp256s
247986248170248369
T:
hecfp128i
454935455180455479
T:
ed448goldilocks
501901503899505176
T:
surf2113
599209599430599740
T:
nistp256
807442807800808251
T:
ed521gs
889587912617957639
T:
sclaus2048
934874935250938283
T:
nist521gs
961543962604964181
T:
claus

amd64; Airmont (406c3); 2015 Intel Pentium N3700; 4 x 1600MHz; nucnuc, supercop-20221122

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
106155108923118479
T:
curve2251
139961142726145391
T:
gls254
187683189980192188
T:
gls1271
205800205967206582
T:
gls254prot
287770287916288262
T:
k277taa
306831310476312651
T:
k298
422193422329422516
T:
k277mon
448837448923452351
T:
curve25519
568220570122572886
T:
surf127eps
570918573128574388
T:
kummer
607179607718608732
T:
nistp256
762121763073765340
T:
ed448goldilocks
778960787588797657
T:
sclaus1024
113608611430041158181
T:
surf2113
366220436677453674968
T:
ed521gs
379752838252053853584
T:
sclaus2048
431653243234724329736
T:
nist521gs
465994046742664688083
T:
claus
Cycles to compute a shared secret
25%50%75%system
131475139715141919
T:
gls254
205397205569205774
T:
gls254prot
287546287714287874
T:
k277taa
305672307190309195
T:
k298
422001422105422183
T:
k277mon
421674425980426205
T:
curve2251
448784448846452296
T:
curve25519
450443453713456685
T:
gls1271
561374563154567529
T:
surf127eps
570773572870574114
T:
kummer
789598796421819453
T:
sclaus1024
113263811392031150075
T:
surf2113
209278020943382102610
T:
nistp256
263501926367902640510
T:
ed448goldilocks
365984836640813670051
T:
ed521gs
385776138688093871505
T:
sclaus2048
431325243162364323531
T:
nist521gs
466570746784224692484
T:
claus

amd64; BW+AES (306d4); 2015 Intel Core i3-5005U; 2 x 1900MHz; shoe, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
252522555925943
T:
jacfp127i
258452621926594
T:
kumjacfp127g
285632904629565
T:
hecfp127i
288582933730131
T:
prjfp127i
329543346534251
T:
jacfp128bk
375533778338025
T:
gls254
375603805438849
T:
hecfp128bk
380243855939021
T:
hecfp128fkt
381863893939635
T:
prjfp128bk
394873957939684
T:
gls254prot
391913963140051
T:
hecfp128i
418484250844080
T:
curve2251
438504480145787
T:
ecfp256e
461384716948883
T:
ecfp256h
474864856950236
T:
ecfp256s
493284942849595
T:
k277taa
495915048852661
T:
ecfp256q
558495645857290
T:
k298
649046501965259
T:
kummer
768067689276990
T:
k277mon
764127738978104
T:
gls1271
817848194582118
T:
kumfp127g
129672129826130041
T:
kumfp128g
143180143426144330
T:
curve25519
156158156544158143
T:
ed448goldilocks
187138188763190774
T:
sclaus1024
197093197717198700
T:
surf127eps
199751200634201916
T:
ecfp256i
250370251641253135
T:
nistp256
521333523534525029
T:
surf2113
903351903916905148
T:
ed521gs
947083956825968944
T:
sclaus2048
9892779967981003931
T:
claus
103331110362541040012
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
363583662036884
T:
gls254
394063954439728
T:
gls254prot
492794937349501
T:
k277taa
551235543855885
T:
k298
648136491865190
T:
kummer
767317684077027
T:
k277mon
848058511487729
T:
kumfp127g
874928755187743
T:
kumjacfp127g
963559651998488
T:
jacfp128bk
116389116576120876
T:
prjfp128bk
120469120586120713
T:
hecfp128bk
125034125271126111
T:
hecfp128fkt
134974135067135192
T:
kumfp128g
143055143162143309
T:
curve25519
149588154900155919
T:
curve2251
155591155914156101
T:
jacfp127i
184286184498184794
T:
prjfp127i
185655185773185908
T:
ecfp256e
186557186685186895
T:
hecfp127i
187530188309188995
T:
sclaus1024
187355189142194978
T:
gls1271
193025193161193303
T:
ecfp256q
194621195182196155
T:
surf127eps
196027196135196233
T:
ecfp256i
228724228875228998
T:
ecfp256h
248542248691248878
T:
ecfp256s
267273267519267737
T:
hecfp128i
467598467748467981
T:
ed448goldilocks
515924516704517980
T:
surf2113
632149633734635337
T:
nistp256
904807907935910206
T:
ed521gs
9619089680581000528
T:
sclaus2048
9930249987501047885
T:
claus
103102610330851037031
T:
nist521gs

amd64; HW+AES (306c3); 2013 Intel Xeon E3-1275 V3; 4 x 3500MHz; titan0, supercop-20221122

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
435854518350209
T:
curve2251
449164543146003
T:
gls254
490984916349230
T:
gls254prot
622336229062410
T:
k277taa
641526422365403
T:
kummer
700717022770647
T:
k298
906819176792943
T:
gls1271
951529519695260
T:
k277mon
144410144463144541
T:
curve25519
174728175100176701
T:
ed448goldilocks
213739214463215356
T:
surf127eps
217993220031222260
T:
sclaus1024
282490282672282825
T:
nistp256
535851538279539766
T:
surf2113
101181410122531013050
T:
ed521gs
109525411037191110336
T:
sclaus2048
119508811956121196382
T:
nist521gs
130281813064761389820
T:
claus
Cycles to compute a shared secret
25%50%75%system
394704023541466
T:
gls254
489764903749112
T:
gls254prot
620886215962280
T:
k277taa
640426412065315
T:
kummer
698716995570039
T:
k298
949969503795078
T:
k277mon
155981156034156090
T:
curve25519
157524158770160020
T:
curve2251
208001208551209190
T:
surf127eps
216296217819220140
T:
sclaus1024
217119219007220499
T:
gls1271
535820536194537302
T:
surf2113
540312540589544992
T:
ed448goldilocks
746021746320746943
T:
nistp256
101981110200851020447
T:
ed521gs
109805511006791102823
T:
sclaus2048
119438311947621195872
T:
nist521gs
129732613109081392981
T:
claus

amd64; HW+AES (306c3); 2013 Intel Xeon E3-1220 v3; 4 x 3100MHz; hiphop, supercop-20221122

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
288262948131246
T:
kumjacfp127g
304633122831938
T:
jacfp127i
327373353734322
T:
prjfp127i
348403647239029
T:
hecfp127i
385973937940069
T:
jacfp128bk
410734233646073
T:
curve2251
429404333345878
T:
prjfp128bk
447764527745948
T:
gls254
446524539447797
T:
hecfp128fkt
461144677348201
T:
ecfp256e
466474718949438
T:
hecfp128bk
469554845551426
T:
hecfp128i
484064918351128
T:
ecfp256h
495844970149835
T:
gls254prot
491205006752095
T:
ecfp256s
540655496457405
T:
ecfp256q
604326049260570
T:
kummer
632206329163367
T:
k277taa
701417025270450
T:
k298
909049192892638
T:
gls1271
971159719197311
T:
k277mon
109858109962110066
T:
kumfp127g
144456144548147220
T:
curve25519
157097157222157331
T:
kumfp128g
176643176963177382
T:
ed448goldilocks
213351214187215065
T:
surf127eps
218171219732221607
T:
sclaus1024
222921224124225489
T:
ecfp256i
272998273404281510
T:
nistp256
618119620972623686
T:
surf2113
103236510331801034069
T:
ed521gs
110251511130521160846
T:
sclaus2048
118462611860021187676
T:
nist521gs
152254415232221524943
T:
claus
Cycles to compute a shared secret
25%50%75%system
400594056940662
T:
gls254
494344952149608
T:
gls254prot
60408?60506?96147?
T:
kummer
631506318463225
T:
k277taa
699627006270166
T:
k298
969729709197208
T:
k277mon
112345112441112559
T:
kumfp127g
114100114170114261
T:
jacfp128bk
120886120964121072
T:
kumjacfp127g
140899141042141195
T:
prjfp128bk
144967145108145277
T:
hecfp128bk
155673155901156437
T:
hecfp128fkt
155992156071158679
T:
curve25519
158397159272160692
T:
curve2251
163145163214163362
T:
kumfp128g
185198185574186647
T:
jacfp127i
205455205578205896
T:
ecfp256e
207607208324209164
T:
surf127eps
214781214958215182
T:
ecfp256q
218932219315222458
T:
gls1271
219693219816220057
T:
ecfp256i
221215224153225103
T:
sclaus1024
227258227550227800
T:
prjfp127i
230806231008231273
T:
hecfp127i
249957250107250410
T:
ecfp256h
273147273380273744
T:
ecfp256s
325154325544325942
T:
hecfp128i
537140537412537880
T:
ed448goldilocks
615654620964626760
T:
surf2113
680707681249682505
T:
nistp256
956166957096957906
T:
claus
103235410331391034192
T:
ed521gs
111147111230331168502
T:
sclaus2048
118469811861201188217
T:
nist521gs

armeabi; Cortex-A8 (413fc082); 2012 TI Sitara XAM3359AZCZ100; 1 x 1000MHz; bblack, supercop-20221122

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
304573304614304751
T:
kummer
483972489519504025
T:
curve25519
118694111895821219348
T:
nistp256
412536541568024198928
T:
sclaus1024
836896183779918415159
T:
claus
189187491904170819175582
T:
sclaus2048
Cycles to compute a shared secret
25%50%75%system
304374304409304509
T:
kummer
498483505390505423
T:
curve25519
396334139638423965962
T:
nistp256
415264542036434278938
T:
sclaus1024
831631783201088338797
T:
claus
191069151915868019341279
T:
sclaus2048

amd64; Bulldozer (600f20); 2012 AMD FX-8350; 4 x 4000MHz; saber214, supercop-20220506

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
445354542046259
T:
jacfp127i
458144670047602
T:
kumjacfp127g
511845207953162
T:
prjfp127i
518785262553627
T:
hecfp127i
645686515167359
T:
curve2251
673676814969026
T:
jacfp128bk
707987324677900
T:
ecfp256e
747287748481982
T:
ecfp256h
749297766181294
T:
ecfp256s
775227816479324
T:
prjfp128bk
780167886580112
T:
hecfp128bk
780727889079997
T:
hecfp128i
786567952580480
T:
hecfp128fkt
810818360888465
T:
ecfp256q
906949168992844
T:
gls254
104738104739104746
T:
gls254prot
113410114917116103
T:
gls1271
138541138563138579
T:
k277taa
155609155746161545
T:
kumfp127g
167168167212167362
T:
k298
174711174730174763
T:
curve25519
204601204629204667
T:
kummer
211858211870211905
T:
k277mon
254643254723256395
T:
kumfp128g
341461343121345174
T:
ecfp256i
366960367256367994
T:
ed448goldilocks
375876377590379151
T:
surf127eps
423492427877432411
T:
sclaus1024
632720633103633417
T:
nistp256
670940673807675667
T:
surf2113
183735118389641843897
T:
ed521gs
210226621190352138022
T:
sclaus2048
211004121220802150117
T:
nist521gs
254714325538382562927
T:
claus
Cycles to compute a shared secret
25%50%75%system
851578707487496
T:
gls254
104657104710104710
T:
gls254prot
138448138450138454
T:
k277taa
160315160332160380
T:
kumfp127g
161566161806162992
T:
kumjacfp127g
167178167207167232
T:
k298
186758186780186805
T:
curve25519
197239197262197296
T:
kummer
199385199442199554
T:
jacfp128bk
211804211805211809
T:
k277mon
241458241958242807
T:
curve2251
247505247849248027
T:
prjfp128bk
251825251879251979
T:
hecfp128bk
263257263454263563
T:
hecfp128fkt
264219264395264564
T:
jacfp127i
266869266950267057
T:
kumfp128g
273908277064281513
T:
gls1271
320313320423320747
T:
ecfp256e
335580336201337003
T:
ecfp256q
338763338927339239
T:
ecfp256i
357062357242357461
T:
hecfp127i
359231359349359560
T:
prjfp127i
373913374164379026
T:
surf127eps
403004403319403801
T:
ecfp256h
422663422988423410
T:
ecfp256s
427272428426430504
T:
sclaus1024
562251562477562600
T:
hecfp128i
668065671925673795
T:
surf2113
115856811586661158757
T:
ed448goldilocks
124960512496171249753
T:
nistp256
183430718390491844432
T:
ed521gs
209803321012972131841
T:
nist521gs
210871521176882120005
T:
sclaus2048
255368525565442566788
T:
claus

amd64; IB+AES (306a9); 2012 Intel Xeon E3-1275 V2; 4 x 3500MHz; hydra8, supercop-20221122

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
319953319134393
T:
jacfp127i
325093331535003
T:
kumjacfp127g
360663825441045
T:
prjfp127i
407164158143420
T:
jacfp128bk
400314164943406
T:
hecfp127i
507945180953964
T:
ecfp256e
514875224553084
T:
hecfp128fkt
506985324955900
T:
prjfp128bk
536185441557117
T:
ecfp256h
525295544658125
T:
hecfp128bk
547405580357842
T:
ecfp256s
554225731758838
T:
hecfp128i
574205792061234
T:
curve2251
587645994262775
T:
ecfp256q
737697472476141
T:
gls254
887518896189056
T:
kummer
964289747898440
T:
gls1271
106453106511106591
T:
gls254prot
117024117183117270
T:
kumfp127g
145032145107145429
T:
curve25519
164999165207165344
T:
kumfp128g
175113176257176369
T:
k277taa
181230181597183233
T:
k298
235217235903236531
T:
surf127eps
242174243251244692
T:
ecfp256i
257953257955257963
T:
k277mon
266784269074271795
T:
sclaus1024
312040312347313112
T:
nistp256
655672658945660239
T:
surf2113
109921911004081102521
T:
ed521gs
123728012389121241388
T:
nist521gs
136153613685321379654
T:
sclaus2048
159958316031121606529
T:
claus
Cycles to compute a shared secret
25%50%75%system
695787219472546
T:
gls254
884708863888801
T:
kummer
106292106324106375
T:
gls254prot
119460119589119708
T:
kumfp127g
124148124266124448
T:
jacfp128bk
126536126673126829
T:
kumjacfp127g
156716156812157249
T:
curve25519
157900158053158286
T:
prjfp128bk
162349162462162610
T:
hecfp128bk
168485168658168841
T:
hecfp128fkt
171050171173171299
T:
kumfp128g
176001176063176126
T:
k277taa
180884180987181073
T:
k298
190532190859194843
T:
jacfp127i
223138224733225025
T:
curve2251
225093225330225573
T:
ecfp256e
227263228275228920
T:
surf127eps
235470235656235831
T:
ecfp256q
238973239168239496
T:
ecfp256i
239008239407240507
T:
prjfp127i
235393239533241664
T:
gls1271
244890245206245475
T:
hecfp127i
257914257917257932
T:
k277mon
272846273288276524
T:
sclaus1024
275862275927276122
T:
ecfp256h
297915298065298304
T:
ecfp256s
365659365890366333
T:
hecfp128i
653902655593657750
T:
surf2113
770215771170771875
T:
nistp256
110081711018461103443
T:
ed521gs
123627712376191241012
T:
nist521gs
132384813616761366685
T:
sclaus2048
159677615983161600840
T:
claus

amd64; SB+AES (206d7); 2012 Intel Xeon E5-2660; 8 x 2200MHz; unstable; gcc123, supercop-20220213

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
319433270833506
T:
jacfp127i
329533376535040
T:
kumjacfp127g
376083862339513
T:
hecfp127i
390044050442276
T:
prjfp127i
457984660449017
T:
jacfp128bk
545285530656314
T:
ecfp256e
559355709258739
T:
prjfp128bk
565285743958649
T:
hecfp128fkt
573725803860010
T:
ecfp256h
589355935562473
T:
curve2251
581725968661610
T:
hecfp128i
577295969461632
T:
hecfp128bk
592136026262540
T:
ecfp256s
632946411266013
T:
ecfp256q
742677518976426
T:
gls254
892828933389393
T:
kummer
101621102757104070
T:
gls1271
107786107990108100
T:
gls254prot
120356120660120847
T:
kumfp127g
147437149335150231
T:
curve25519
176693176754176821
T:
k277taa
183385183523183801
T:
k298
183493184494184712
T:
kumfp128g
216977217416218118
T:
ed448goldilocks
258378258897259109
T:
k277mon
264599265793267654
T:
ecfp256i
271269272151273008
T:
surf127eps
285659288427291181
T:
sclaus1024
346611347055348467
T:
nistp256
632059635140636537
T:
surf2113
120118312026971213390
T:
ed521gs
143767014388731440254
T:
nist521gs
145392114631991474175
T:
sclaus2048
170762417120691716365
T:
claus
Cycles to compute a shared secret
25%50%75%system
685677064070910
T:
gls254
890538907989114
T:
kummer
107718107843108042
T:
gls254prot
123422123608123778
T:
kumfp127g
131022131115131347
T:
kumjacfp127g
139870140122152456
T:
jacfp128bk
158914159113159230
T:
curve25519
176460176503176544
T:
k277taa
178453178678178968
T:
prjfp128bk
182177182418185208
T:
hecfp128bk
182474182579182699
T:
k298
189273189532200762
T:
hecfp128fkt
190389191431191674
T:
kumfp128g
200096200414213508
T:
jacfp127i
231825232605232832
T:
curve2251
248092248254248472
T:
ecfp256e
249077250480251963
T:
gls1271
257409257555257723
T:
ecfp256q
258321258857259061
T:
k277mon
260327260627261091
T:
prjfp127i
261160261279261406
T:
ecfp256i
264886265400269808
T:
hecfp127i
267683268185269010
T:
surf127eps
290366291197293939
T:
sclaus1024
305106305231305409
T:
ecfp256h
324559324747324996
T:
ecfp256s
412908413317413695
T:
hecfp128i
621379623817629240
T:
surf2113
648753651584670955
T:
ed448goldilocks
826719827216827670
T:
nistp256
120710312106961213881
T:
ed521gs
143747214380621439620
T:
nist521gs
144469914660691478225
T:
sclaus2048
170340017117751715637
T:
claus

armeabi; Cortex-A9+NEON (412fc09a); 2011 Freescale i.MX6 Quad; 4 x 1200MHz; unstable; novena, supercop-20220506

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
383633403235426836
T:
kummer
568432579721605953
T:
curve25519
113609712253061320114
T:
nistp256
317027133190843441142
T:
sclaus1024
103958101067570812763892
T:
claus
13118323?15156764?17482296?
T:
sclaus2048
Cycles to compute a shared secret
25%50%75%system
377632394434418035
T:
kummer
567769587250684860
T:
curve25519
317587233146843482698
T:
sclaus1024
378432441255534561590
T:
nistp256
103845211070227310950137
T:
claus
12688797?16762633?17448692?
T:
sclaus2048

mipso32; Octeon II (cnmips64v2); 2011 Cavium Octeon II CN6120; 2 x 2000MHz; erpro8fsf2, supercop-20220213

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
147099214710061473758
T:
kummer
199978219998222008112
T:
curve25519
346045234641523494426
T:
nistp256
486200849033465012496
T:
surf127eps
901108890886289163840
T:
sclaus1024
447252984499559045330454
T:
sclaus2048
546248485474884454873548
T:
claus
Cycles to compute a shared secret
25%50%75%system
147060014706141470614
T:
kummer
199937019993842001402
T:
curve25519
485861449133245012660
T:
surf127eps
889381890661869103512
T:
sclaus1024
115805481160992411704890
T:
nistp256
448201024498917845145550
T:
sclaus2048
548210825487032654982680
T:
claus

mipso32; Octeon II (cnmips64v2); 2011 Cavium Octeon II CN6120; 2 x 2000MHz; gcc23, supercop-20230530

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
147097414710161472676
T:
kummer
199919019991902000622
T:
curve25519
344511234574143461870
T:
nistp256
484243248611724867094
T:
surf127eps
899081490854829171120
T:
sclaus1024
446202184494918645248108
T:
sclaus2048
545050245461244054716466
T:
claus
Cycles to compute a shared secret
25%50%75%system
147062614706301470630
T:
kummer
199890819989081999896
T:
curve25519
483016848424744861988
T:
surf127eps
900581490441769159864
T:
sclaus1024
115423281157057011603418
T:
nistp256
447917484505932645496830
T:
sclaus2048
542802005459834654663778
T:
claus

amd64; C2 45nm (10676); 2007 Intel Xeon X5450; 8 x 2992MHz; unstable; gcc14, supercop-20220506

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
450734746350135
T:
jacfp127i
470414835249377
T:
kumjacfp127g
517235395157038
T:
prjfp127i
530025517759391
T:
hecfp127i
713697255876668
T:
ecfp256e
774197899684435
T:
ecfp256h
780957935180571
T:
jacfp128bk
796888159186347
T:
ecfp256s
884948908191698
T:
ecfp256q
899879267895313
T:
prjfp128bk
906959309296851
T:
hecfp128fkt
914649368897172
T:
hecfp128i
918849393196811
T:
hecfp128bk
122081124406126622
T:
gls1271
127352128298131045
T:
curve2251
178621178639178774
T:
kumfp127g
299212299279299300
T:
curve25519
314856315067315465
T:
kumfp128g
329748330281330858
T:
ed448goldilocks
384083386835388905
T:
ecfp256i
413326415894420963
T:
surf127eps
422448422696424925
T:
kummer
422389426879430417
T:
sclaus1024
592353599624599809
T:
nistp256
703975707187707993
T:
surf2113
165127616548471665749
T:
ed521gs
196582819681241970593
T:
nist521gs
214164921584622174320
T:
sclaus2048
253159425367742542306
T:
claus
Cycles to compute a shared secret
25%50%75%system
183308183339183401
T:
kumfp127g
187644188022188184
T:
kumjacfp127g
244882244967245135
T:
jacfp128bk
292653292810292871
T:
jacfp127i
298596298922299590
T:
curve25519
301634301818301972
T:
prjfp128bk
307377307524307663
T:
hecfp128bk
315724316398332895
T:
gls1271
318241318313318421
T:
hecfp128fkt
327094327144327284
T:
kumfp128g
362120362446362793
T:
ecfp256e
377991378292378707
T:
ecfp256q
381459381554381707
T:
prjfp127i
383653383881384037
T:
ecfp256i
388709388774388844
T:
hecfp127i
412903415509419428
T:
surf127eps
422428422854424362
T:
kummer
424342428316440575
T:
sclaus1024
455103455540455801
T:
ecfp256h
470134470272470478
T:
ecfp256s
519804523960528188
T:
curve2251
694179694320694727
T:
hecfp128i
701889703404704125
T:
surf2113
102255210230961026174
T:
ed448goldilocks
117578911759971177498
T:
nistp256
165075316546411665087
T:
ed521gs
196526419670891969059
T:
nist521gs
212717521455732206421
T:
sclaus2048
253738125388522573470
T:
claus

amd64; C2 65nm (6fb); 2007 Intel Core 2 Quad Q6600; 4 x 2404MHz; margaux, supercop-20221122

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
418874299644689
T:
jacfp127i
438654517546455
T:
kumjacfp127g
480264931851701
T:
prjfp127i
499195167954236
T:
hecfp127i
749587622277368
T:
jacfp128bk
774857820779759
T:
ecfp256e
828638345885025
T:
ecfp256h
840518491786249
T:
ecfp256s
879818931290934
T:
prjfp128bk
884309055293172
T:
hecfp128bk
889749057093427
T:
hecfp128i
891999077193712
T:
hecfp128fkt
904939152593049
T:
ecfp256q
126201127832129176
T:
gls1271
131760132846135609
T:
curve2251
178795178878178985
T:
kumfp127g
300192301403302425
T:
curve25519
314730314938315180
T:
kumfp128g
345050345724346796
T:
ed448goldilocks
387780389344391450
T:
ecfp256i
421852426405430360
T:
sclaus1024
428379430954431872
T:
kummer
430610432379433903
T:
surf127eps
493841495056497115
T:
nistp256
707495711520713861
T:
surf2113
168465916867841690900
T:
ed521gs
196121619641241966514
T:
nist521gs
215056821697132186433
T:
sclaus2048
254392025512532590229
T:
claus
Cycles to compute a shared secret
25%50%75%system
183326183367183534
T:
kumfp127g
187766188158188287
T:
kumjacfp127g
243799243974244147
T:
jacfp128bk
292249292381292659
T:
jacfp127i
300639301514302074
T:
curve25519
301871301937302075
T:
prjfp128bk
307782307874308088
T:
hecfp128bk
314737317098322188
T:
gls1271
318275318491318792
T:
hecfp128fkt
327017327159327324
T:
kumfp128g
366127366434366882
T:
ecfp256e
381376381552381748
T:
prjfp127i
382271382569383032
T:
ecfp256q
387243387400387571
T:
ecfp256i
389428389624390460
T:
hecfp127i
421353423825442261
T:
sclaus1024
427824429971431287
T:
kummer
427793430637431718
T:
surf127eps
458397458634458912
T:
ecfp256h
474824475181475579
T:
ecfp256s
545868547486551403
T:
curve2251
693928694211694565
T:
hecfp128i
699997709759711290
T:
surf2113
102915910305211031363
T:
ed448goldilocks
116033311611071162255
T:
nistp256
168366416857251687535
T:
ed521gs
195961019621171967104
T:
nist521gs
217020321744192183777
T:
sclaus2048
252674325466762604215
T:
claus

Version

This is version 2023.05.30 of the results-dh.html web page. This web page is in the public domain.