VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Tremont (906c0); 2021 Intel Celeron N4500; 2 x 1100MHz; jasper2, supercop-20260330

[Page version: 20260415 05:36:53]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
357373629037154
T:
jacfp127i
376683809939009
T:
kumjacfp127g
430584387945560
T:
prjfp127i
434694390744745
T:
hecfp127i
496544996651002
T:
curve2251
511205176252715
T:
ecfp256e
513095181952588
T:
jacfp128bk
531995386054571
T:
gls254prot
536955386454068
T:
gls254
545195539456967
T:
ecfp256h
568635762159190
T:
ecfp256s
614826238663857
T:
prjfp128bk
613546260764612
T:
hecfp128i
614826268064539
T:
hecfp128bk
617206281665027
T:
ecfp256q
617896283264516
T:
hecfp128fkt
628156291663339curve25519
671726727867649
T:
k277taa
720797485276377
T:
k298
970819829999211
T:
gls1271
992269949999832
T:
k277mon
102326102431102676nistp256
153801154208154538
T:
kumfp127g
220059220273220564
T:
kumfp128g
256527258210259672
T:
sclaus1024
270280272152274580
T:
ecfp256i
276461277939279307
T:
surf127eps
297797302789317227
T:
hector
306782307097307597
T:
ed448goldilocks
323292323561323882
T:
kummer
654337656942660455
T:
surf2113
132145313279061336987
T:
sclaus2048
171106817140661719114
T:
claus
174882117536051767053
T:
ed521gs
198590519905582005692
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
530375309453166
T:
gls254
530735372254337
T:
gls254prot
670926715767250
T:
k277taa
738387516376276
T:
k298
990599939099813
T:
k277mon
155888156629157228
T:
kumfp127g
158745159028159225
T:
kumjacfp127g
159574160504161484
T:
jacfp128bk
192636193023193873
T:
curve2251
202909203415204157
T:
prjfp128bk
209289210016210769
T:
hecfp128fkt
212045212726213534
T:
hecfp128bk
214158214922215959curve25519
227466227945228456
T:
kumfp128g
237309238666239621
T:
gls1271
241272241726242283
T:
jacfp127i
242712243537244880
T:
ecfp256e
260882261382262509
T:
ecfp256i
260479261514263394
T:
ecfp256q
271416272931274271
T:
surf127eps
299636301224302665
T:
ecfp256h
313667313915314541
T:
prjfp127i
323237323544323816
T:
kummer
323854324172325330
T:
hecfp127i
331439332470334180
T:
ecfp256s
341791347912348982
T:
sclaus1024
400508400566400614nistp256
462696463264465053
T:
hecfp128i
646807649885652649
T:
surf2113
101571610164691019941
T:
ed448goldilocks
104401710571741065314
T:
hector
174771317514291767183
T:
ed521gs
174404917530441757535
T:
sclaus2048
198493919886082002643
T:
nist521gs
202352720354602065189
T:
claus