VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; know, supercop-20260217

[Page version: 20260319 20:29:15]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
219702225523392
T:
kumjacfp127g
219612278323890
T:
jacfp127i
244762541826794
T:
prjfp127i
269672771128666
T:
hecfp127i
277622799928190curve25519
306363145932725
T:
jacfp128bk
354373654838314
T:
hecfp128bk
367653700437369
T:
gls254
360113707938755
T:
prjfp128bk
371963812339875
T:
hecfp128i
388923893038977
T:
gls254prot
383983895839790
T:
curve2251
384203961141303
T:
hecfp128fkt
415344220443308
T:
ecfp256e
423694249342556nistp256
429044359145213
T:
ecfp256h
453894624247815
T:
ecfp256s
458984625146307
T:
k277taa
466694740548979
T:
ecfp256q
518355229752438
T:
k298
529325299153046
T:
kummer
697117054371404
T:
gls1271
717517183971903
T:
k277mon
802958037580479
T:
kumfp127g
113333113380113440
T:
kumfp128g
136709137556138202
T:
sclaus1024
153410153691154008
T:
ed448goldilocks
177608178943180418
T:
ecfp256i
187978188823189530
T:
surf127eps
244281250497262939
T:
hector
514627517042518750
T:
surf2113
810894814097910124
T:
ed521gs
900784902559904326
T:
claus
943139943613944306
T:
nist521gs
114612711556981166142
T:
sclaus2048
Cycles to compute a shared secret
25%50%75%system
359233617036220
T:
gls254
387963883338871
T:
gls254prot
456654610546152
T:
k277taa
521735230652383
T:
k298
541995427854716
T:
kummer
717097178871830
T:
k277mon
814228177281917
T:
kumfp127g
836538374983846
T:
kumjacfp127g
845148477485028curve25519
895248959389684
T:
jacfp128bk
111799111894112022
T:
prjfp128bk
114486115873116037
T:
hecfp128fkt
115828117207117395
T:
hecfp128bk
117691117755117818
T:
kumfp128g
124717124933126151
T:
jacfp127i
142682144394147897
T:
curve2251
156865157775158102nistp256
160327160571160834
T:
ecfp256e
167256167405167599
T:
prjfp127i
168266168553168883
T:
ecfp256i
168712168963169248
T:
ecfp256q
169565170809171013
T:
hecfp127i
172841174091175125
T:
gls1271
176970178347179735
T:
sclaus1024
183283183878184646
T:
surf127eps
193824194737195044
T:
ecfp256h
224862225066225351
T:
ecfp256s
253088253325253553
T:
hecfp128i
465865466300466669
T:
ed448goldilocks
515315516278517253
T:
surf2113
810715812476912900
T:
ed521gs
819900824982835158
T:
hector
942863943269943936
T:
nist521gs
103741610387551039717
T:
claus
117328011794051186471
T:
sclaus2048