VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Sandy Bridge+AES (206a7); 2011 Intel Xeon E3-1225; 4 x 3100MHz; hydra7, supercop-20260217

[Page version: 20260324 04:05:07]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
317183241533063
T:
jacfp127i
327923339134099
T:
kumjacfp127g
359613654637437
T:
prjfp127i
375083801738690
T:
hecfp127i
456784684549350
T:
jacfp128bk
497644982849905curve25519
533565410455250
T:
ecfp256e
550345568757557
T:
ecfp256h
552775601657020
T:
prjfp128bk
559215666857544
T:
hecfp128bk
559645676558023
T:
hecfp128i
559705685857966
T:
hecfp128fkt
572305812359925
T:
ecfp256s
600256050662194
T:
curve2251
615866240764070
T:
ecfp256q
737497511376217
T:
gls254
819228211082652nistp256
893788942789481
T:
kummer
101207102489103878
T:
gls1271
107506107669107918
T:
gls254prot
124760124922127224
T:
kumfp127g
176859176921177012
T:
k277taa
182768182979183469
T:
k298
184726185385185851
T:
kumfp128g
215027215482215857
T:
ed448goldilocks
220744222164223075
T:
sclaus1024
249623251003252829
T:
ecfp256i
258008258340258844
T:
k277mon
270676271787272510
T:
surf127eps
289107297775310723
T:
hector
631065634018636044
T:
surf2113
113061011366791139948
T:
sclaus2048
121508612250501234431
T:
ed521gs
138920413953701411431
T:
nist521gs
146936714718361477378
T:
claus
Cycles to compute a shared secret
25%50%75%system
694596999572191
T:
gls254
891658920789243
T:
kummer
107314107398107526
T:
gls254prot
126799126937127105
T:
kumfp127g
130677130793130935
T:
kumjacfp127g
141044141440153227
T:
jacfp128bk
174815174999175180curve25519
176709176757176826
T:
k277taa
180614180863181248
T:
prjfp128bk
182564182726183005
T:
k298
186051186300186626
T:
hecfp128fkt
188284188449188674
T:
hecfp128bk
190882191689192024
T:
kumfp128g
200820201206201764
T:
jacfp127i
229319229627230318
T:
ecfp256e
231379231859233000
T:
curve2251
238640239020239721
T:
ecfp256q
239069239369239771
T:
ecfp256i
249170252628253491
T:
gls1271
257992258068258623
T:
k277mon
261025261520262250
T:
prjfp127i
266445267353268277
T:
surf127eps
267570268083268803
T:
hecfp127i
276884277218277656
T:
ecfp256h
287708288446294990
T:
sclaus1024
304341304670305139
T:
ecfp256s
312560312773313098nistp256
414358414838415530
T:
hecfp128i
632219632854634188
T:
surf2113
652493652780653558
T:
ed448goldilocks
9833259892471012742
T:
hector
122516512282561234917
T:
ed521gs
138929313915731395370
T:
nist521gs
147283214948631497107
T:
sclaus2048
173609817407261746110
T:
claus