VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Coffee Lake (806ea); 2018 Intel Core i3-8109U; 2 x 3000MHz; like, supercop-20250307

[Page version: 20250331 22:49:56]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
209622127322111
T:
kumjacfp127g
223402339924341
T:
jacfp127i
243672564927650
T:
prjfp127i
268202792029090
T:
hecfp127i
309773196133415
T:
jacfp128bk
356563686938395
T:
hecfp128i
363673747039567
T:
hecfp128bk
372823752637851
T:
gls254
370653801638992
T:
prjfp128bk
384073863639519
T:
curve2251
391243917839230
T:
gls254prot
387623960640772
T:
hecfp128fkt
407104142642663
T:
ecfp256e
420764271744447
T:
ecfp256h
452934572046442
T:
ecfp256s
463184639946470
T:
k277taa
466854766149408
T:
ecfp256q
530815319053402
T:
k298
537045394354328
T:
kummer
706987157172629
T:
gls1271
723427239772441
T:
k277mon
798608002180148
T:
kumfp127g
112629112706112785
T:
kumfp128g
126688126989127678
T:
curve25519
137474138426139283
T:
sclaus1024
152592152789153058
T:
ed448goldilocks
175579176702177918
T:
ecfp256i
186536187071187681
T:
surf127eps
234236234457234804
T:
nistp256
233964244177257227
T:
hector
507314509387510803
T:
surf2113
659700662853664708
T:
sclaus2048
821570821873822918
T:
ed521gs
900251901921903710
T:
claus
959909960819962178
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
360263608036138
T:
gls254
388483888938933
T:
gls254prot
460794611946177
T:
k277taa
528995299353122
T:
k298
532415334254345
T:
kummer
710727228472343
T:
k277mon
817068233982495
T:
kumfp127g
833628386584331
T:
kumjacfp127g
890798913789235
T:
jacfp128bk
110176110310110542
T:
prjfp128bk
111990112120112313
T:
hecfp128bk
117958118027118131
T:
kumfp128g
118282118460118598
T:
hecfp128fkt
125686125828126004
T:
jacfp127i
136312136680137630
T:
curve25519
143663143798144274
T:
curve2251
161727162020162322
T:
ecfp256e
166595166809167008
T:
prjfp127i
168959169122169264
T:
hecfp127i
170515170737170955
T:
ecfp256i
172078172421172888
T:
ecfp256q
174658175687176381
T:
sclaus1024
173941176655177218
T:
gls1271
180640181249182964
T:
surf127eps
199629199870200138
T:
ecfp256h
227638227856228370
T:
ecfp256s
250189253323253879
T:
hecfp128i
456788457051457308
T:
ed448goldilocks
506860509092509972
T:
surf2113
589012589247589501
T:
nistp256
795325804597813372
T:
hector
821602821938823082
T:
ed521gs
842711848018864796
T:
sclaus2048
960136960910961983
T:
nist521gs
103393210369561040933
T:
claus