VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Goldmont Plus (706a8); 2019 Intel Celeron N4020; 2 x 1100MHz; gemini, supercop-20241022

[Page version: 20241215 22:59:13]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
471344819249714
T:
jacfp127i
480804954050968
T:
kumjacfp127g
530545441956487
T:
prjfp127i
545625588957828
T:
hecfp127i
592735991761816
T:
ecfp256h
597196053968868
T:
ecfp256e
631106560171111
T:
ecfp256s
629926701868475
T:
jacfp128bk
637786755869645
T:
curve2251
674136813469971
T:
ecfp256q
715307249173422
T:
gls254
727347379776094
T:
hecfp128i
714847435478679
T:
prjfp128bk
729097693481436
T:
hecfp128fkt
766368048882795
T:
hecfp128bk
965039657296650
T:
gls254prot
112446113954114918
T:
gls1271
124677124685124694
T:
k277taa
143114143144143236
T:
k298
181140181160181171
T:
k277mon
205379205389205409
T:
kumfp127g
259970259993260044
T:
kumfp128g
268324268376289735
T:
curve25519
296989299742331757
T:
ecfp256i
314453318664330096
T:
hector
323709324319324936
T:
ed448goldilocks
367304368888370248
T:
surf127eps
372312376745381114
T:
sclaus1024
377994378021378049
T:
kummer
401580402017402121
T:
nistp256
678024680850681832
T:
surf2113
182954718432781854891
T:
sclaus2048
187736218780011879572
T:
ed521gs
212741121280012129166
T:
nist521gs
224570722539882295097
T:
claus
Cycles to compute a shared secret
25%50%75%system
669876803968365
T:
gls254
961929625796277
T:
gls254prot
124552124564124567
T:
k277taa
142891142912142961
T:
k298
181086181086181100
T:
k277mon
209504209636209666
T:
kumfp127g
211293211308211318
T:
kumjacfp127g
193370212180213446
T:
jacfp128bk
232917233365254307
T:
prjfp128bk
246491246737268084
T:
hecfp128fkt
235952254189255792
T:
curve2251
238089259215260823
T:
hecfp128bk
268046268053268071
T:
kumfp128g
268301268307288961
T:
curve25519
281868283162321037
T:
ecfp256e
283478284228289926
T:
gls1271
293261294466329803
T:
ecfp256i
311360311853312570
T:
ecfp256q
315882316009316387
T:
jacfp127i
337686339304340517
T:
ecfp256h
361992362752364005
T:
surf127eps
373233374379408175
T:
ecfp256s
377712377735377755
T:
kummer
381073381218381672
T:
sclaus1024
394698394786395015
T:
prjfp127i
403310403346403795
T:
hecfp127i
540842540996542288
T:
hecfp128i
667950679020679347
T:
surf2113
108691610870251087643
T:
ed448goldilocks
106293310880211093980
T:
hector
137366713738081374602
T:
nistp256
181424418377681849593
T:
sclaus2048
187647318769801877421
T:
ed521gs
212700621271882127883
T:
nist521gs
225116222681472285852
T:
claus