VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Goldmont Plus (706a8); 2019 Intel Celeron N4020; 2 x 1100MHz; gemini, supercop-20260330

[Page version: 20260418 07:15:53]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
472094825450212
T:
kumjacfp127g
472544871050379
T:
jacfp127i
525375431357401
T:
prjfp127i
538535562859216
T:
hecfp127i
568795878860383
T:
ecfp256e
604226189964149
T:
ecfp256h
612306227564914
T:
curve2251
625836430866339
T:
jacfp128bk
627386446766371
T:
ecfp256s
680436979472396
T:
ecfp256q
702257024570434curve25519
702677119572287
T:
gls254
715967335575853
T:
prjfp128bk
745497612679634
T:
hecfp128bk
743787627179852
T:
hecfp128fkt
745037646379891
T:
hecfp128i
862248622486239
T:
gls254prot
113176113186113200nistp256
114839116316118390
T:
gls1271
125289125313125439
T:
k277taa
133983134653136462
T:
k298
172679172684172765
T:
k277mon
205813205826205856
T:
kumfp127g
262159262177262239
T:
kumfp128g
286415288218289319
T:
sclaus1024
297743299331301421
T:
ecfp256i
300216308150322740
T:
hector
329018329316329901
T:
ed448goldilocks
364364365675369334
T:
surf127eps
377811377959378224
T:
kummer
673774676641680776
T:
surf2113
138374113908251397462
T:
sclaus2048
186171818638531872125
T:
ed521gs
190174519041471906123
T:
claus
213110121357402144889
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
680976912769208
T:
gls254
860758607986083
T:
gls254prot
125334125403125418
T:
k277taa
133764133897135203
T:
k298
172626172629172641
T:
k277mon
192832192964193441
T:
jacfp128bk
209483209575209582
T:
kumfp127g
211108211110211126
T:
kumjacfp127g
234856235448235527
T:
curve2251
236971237187238618
T:
prjfp128bk
243624243785244278
T:
hecfp128fkt
245719245730245756curve25519
247261247413247795
T:
hecfp128bk
270015270026270063
T:
kumfp128g
279719284342287033
T:
gls1271
285701285791286747
T:
ecfp256e
287474287605287864
T:
ecfp256i
300756300843301310
T:
ecfp256q
317308317450317917
T:
jacfp127i
332951333118333606
T:
ecfp256h
360470362497372195
T:
surf127eps
364010364273364656
T:
ecfp256s
379369379378379409
T:
kummer
371993380840381582
T:
sclaus1024
395561395864396707
T:
prjfp127i
407374407500407845
T:
hecfp127i
431718431721431764nistp256
542109542218543739
T:
hecfp128i
668849671364674504
T:
surf2113
104122810503801059032
T:
hector
110242811026521103214
T:
ed448goldilocks
179134918277691832061
T:
sclaus2048
186017418616321868598
T:
ed521gs
213100721346972141120
T:
nist521gs
224192422439422245716
T:
claus