VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Goldmont Plus (706a8); 2019 Intel Celeron N4020; 2 x 1100MHz; gemini, supercop-20240425

[Page version: 20240726 23:45:37]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Implementation notes

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
462654756549481
T:
kumjacfp127g
462884766749385
T:
jacfp127i
533155440256643
T:
prjfp127i
548395606258303
T:
hecfp127i
590515962361007
T:
ecfp256e
595066112363403
T:
jacfp128bk
614756165163242
T:
curve2251
658796652067991
T:
ecfp256h
659706670968075
T:
ecfp256s
705727210874339
T:
prjfp128bk
718387241773246
T:
gls254
715687289875346
T:
hecfp128i
727497346975268
T:
ecfp256q
720987355176661
T:
hecfp128bk
724907387277289
T:
hecfp128fkt
910779109191094
T:
gls254prot
112215113595114457
T:
gls1271
124493124525124570
T:
k277taa
140100140168140535
T:
k298
181135181157181179
T:
k277mon
205380205394205405
T:
kumfp127g
259970259989260026
T:
kumfp128g
267377267378267394
T:
curve25519
316867318478320836
T:
ecfp256i
324193324444324849
T:
ed448goldilocks
365088366263367390
T:
surf127eps
374307377870380904
T:
sclaus1024
378002378237378635
T:
kummer
400120400236401173
T:
nistp256
678748681426682318
T:
surf2113
183111818421191855848
T:
sclaus2048
187718918824171884239
T:
ed521gs
212746521278252128484
T:
nist521gs
224256622467302252153
T:
claus
Cycles to compute a shared secret
25%50%75%system
651056684868993
T:
gls254
909409095290953
T:
gls254prot
124405124420124428
T:
k277taa
139889139929139978
T:
k298
181087181089181101
T:
k277mon
191595191668191743
T:
jacfp128bk
209654209679209682
T:
kumfp127g
211132211266211270
T:
kumjacfp127g
232689233585235441
T:
curve2251
234637234764234908
T:
prjfp128bk
237728237772237858
T:
hecfp128bk
246491246569246624
T:
hecfp128fkt
267243267285267326
T:
curve25519
268053268087269038
T:
kumfp128g
275158277117283261
T:
gls1271
293371293455293639
T:
ecfp256e
314558314685314911
T:
ecfp256q
315624315818316068
T:
ecfp256i
316256316399316564
T:
jacfp127i
359630360207361380
T:
surf127eps
364283364420364637
T:
ecfp256h
374948377827379147
T:
sclaus1024
377944378150378574
T:
kummer
394643394738394932
T:
prjfp127i
396184396318396696
T:
ecfp256s
403325403436404080
T:
hecfp127i
538255538733539141
T:
hecfp128i
668553679871680236
T:
surf2113
108700910876801088630
T:
ed448goldilocks
137383813739221374458
T:
nistp256
185744718579581862353
T:
sclaus2048
187621718766291877097
T:
ed521gs
212713421275732127845
T:
nist521gs
224370822461472257896
T:
claus