VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; comet, supercop-20250415

[Page version: 20250707 22:37:04]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
234612416425103
T:
kumjacfp127g
235372418624893
T:
jacfp127i
257662681828319
T:
prjfp127i
265202752128507
T:
hecfp127i
319983272033505
T:
jacfp128bk
366503693137323
T:
gls254
367003746838144
T:
prjfp128bk
371783793138770
T:
hecfp128bk
384983865239452
T:
curve2251
386443868638738
T:
gls254prot
394464021041396
T:
hecfp128i
396624073341979
T:
hecfp128fkt
413834208743555
T:
ecfp256e
432004399746020
T:
ecfp256h
446214558747542
T:
ecfp256s
457104573745777
T:
k277taa
464634725649467
T:
ecfp256q
501405020950290
T:
k298
527645391758901
T:
kummer
713827142271473
T:
k277mon
717477253873224
T:
gls1271
801738032580390
T:
kumfp127g
111033111094111277
T:
kumfp128g
125404125697125889
T:
curve25519
137504138295139005
T:
sclaus1024
153186153516153886
T:
ed448goldilocks
176558177532178738
T:
ecfp256i
183657184423185151
T:
surf127eps
238935239296239578
T:
nistp256
249106252799261962
T:
hector
512369515484517119
T:
surf2113
654233657272710523
T:
sclaus2048
808756808952809506
T:
ed521gs
897049898121899495
T:
claus
941733942052942493
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
357813582235876
T:
gls254
385433858938627
T:
gls254prot
455324555545582
T:
k277taa
497294980049865
T:
k298
526195270053801
T:
kummer
711617119671238
T:
k277mon
807508158481670
T:
kumfp127g
825648265082730
T:
kumjacfp127g
879768805788156
T:
jacfp128bk
107326107457107575
T:
prjfp128bk
112302112455112640
T:
hecfp128bk
115324115399115988
T:
kumfp128g
115974116067116171
T:
hecfp128fkt
124232124363125636
T:
jacfp127i
135030135406135655
T:
curve25519
144015144399145126
T:
curve2251
159730159951160160
T:
ecfp256e
165322165590166835
T:
prjfp127i
167345167455167637
T:
hecfp127i
169698169913170223
T:
ecfp256i
170063170279170589
T:
ecfp256q
175623177103177937
T:
sclaus1024
176940177311180426
T:
gls1271
176724177366178118
T:
surf127eps
194899195103195372
T:
ecfp256h
226728226957227175
T:
ecfp256s
247061247248247437
T:
hecfp128i
466320466792467167
T:
ed448goldilocks
514036514793515541
T:
surf2113
613632614014614296
T:
nistp256
808746808891809097
T:
ed521gs
813270827037830135
T:
hector
844378869612928289
T:
sclaus2048
941575941867942248
T:
nist521gs
103468010386471044120
T:
claus