VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3427U; 2 x 1800MHz; hunsnivy, supercop-20260217

[Page version: 20260326 06:31:59]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
304753091531461
T:
jacfp127i
311183179932924
T:
kumjacfp127g
341583449234923
T:
prjfp127i
347583522535762
T:
hecfp127i
414104181342292
T:
jacfp128bk
484704856648957curve25519
504775100251566
T:
prjfp128bk
504735126852638
T:
ecfp256e
510985172252321
T:
hecfp128bk
515805205352504
T:
hecfp128i
515565208452653
T:
hecfp128fkt
522875350456240
T:
ecfp256h
550945697058852
T:
ecfp256s
577835854960147
T:
curve2251
579635975962407
T:
ecfp256q
740347530676689
T:
gls254
789027905479343nistp256
885518860088693
T:
kummer
950519632697265
T:
gls1271
106367106440106575
T:
gls254prot
117618117747117974
T:
kumfp127g
165010165206165439
T:
kumfp128g
172632172824173454
T:
k277taa
180809181387182406
T:
k298
205844207279208448
T:
sclaus1024
208201208466208871
T:
ed448goldilocks
227213228673230266
T:
ecfp256i
233558234513235189
T:
surf127eps
258222258449259335
T:
k277mon
275861282115297470
T:
hector
588181591211593464
T:
surf2113
111040111113211116239
T:
ed521gs
129809113000071308115
T:
nist521gs
136160013642031374103
T:
claus
175736517719761789889
T:
sclaus2048
Cycles to compute a shared secret
25%50%75%system
679926824268776
T:
gls254
884628849188543
T:
kummer
106231106287106410
T:
gls254prot
119192119479119790
T:
kumfp127g
125025125177125449
T:
jacfp128bk
128065128378128576
T:
kumjacfp127g
159302159500159841
T:
prjfp128bk
164486164722165039
T:
hecfp128fkt
166736166927167312
T:
hecfp128bk
169033169159169484curve25519
170741170964171193
T:
kumfp128g
172489172577172787
T:
k277taa
180520180843181237
T:
k298
191275191545192393
T:
jacfp127i
206767207057207432
T:
ecfp256e
215676215935216445
T:
ecfp256q
217530218257219366
T:
ecfp256i
223627224226225472
T:
curve2251
230893231460232377
T:
surf127eps
236191238485242751
T:
gls1271
239288239646240138
T:
prjfp127i
247674248091248938
T:
hecfp127i
249029249325249782
T:
ecfp256h
258178258506259072
T:
k277mon
268421269152271095
T:
sclaus1024
281657282336283347
T:
ecfp256s
299266300043300726nistp256
366359367177368643
T:
hecfp128i
587088589058591491
T:
surf2113
630952632635633180
T:
ed448goldilocks
926228938213942283
T:
hector
110792811101531115414
T:
ed521gs
129698312986031306080
T:
nist521gs
160098416039811613177
T:
claus
178904817972851811908
T:
sclaus2048