VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Airmont (406c3); 2015 Intel Pentium N3700; 4 x 1600MHz; nucnuc, supercop-20240425

[Page version: 20240720 10:46:06]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Implementation notes

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
742338066388835
T:
jacfp127i
834878691590133
T:
kumjacfp127g
9242299378107600
T:
prjfp127i
94075101482108924
T:
hecfp127i
101709108270124434
T:
ecfp256e
107776110688122229
T:
curve2251
108276115392129714
T:
ecfp256h
110673117353137878
T:
ecfp256s
118615126040137536
T:
ecfp256q
138700140633143060
T:
gls254
129410140641156432
T:
prjfp128bk
134353140916163061
T:
hecfp128bk
132749142743159477
T:
jacfp128bk
135269145831168495
T:
hecfp128fkt
135297148114165471
T:
hecfp128i
184774187041188480
T:
gls1271
206079206195206443
T:
gls254prot
280400280420280534
T:
kumfp127g
287559287741289017
T:
k277taa
306040306318308963
T:
k298
422136422154422281
T:
k277mon
447273447361447472
T:
kumfp128g
448546448552448683
T:
curve25519
511895514969518648
T:
ecfp256i
568726568747568987
T:
kummer
567750569637571351
T:
surf127eps
615749617442617699
T:
nistp256
761202761864763401
T:
ed448goldilocks
773168781270788953
T:
sclaus1024
114814111690201190667
T:
surf2113
365853736602103664409
T:
ed521gs
378400738154753845081
T:
sclaus2048
431318443145324317621
T:
nist521gs
465004946582934669761
T:
claus
Cycles to compute a shared secret
25%50%75%system
134313144418144824
T:
gls254
205777205843206059
T:
gls254prot
283279283338283425
T:
kumfp127g
286574286626286708
T:
kumjacfp127g
287447287667287807
T:
k277taa
305175305402305697
T:
k298
318694319268319962
T:
jacfp128bk
370586371037372670
T:
hecfp128bk
374849375915377362
T:
prjfp128bk
384323384795386655
T:
hecfp128fkt
421914421915422001
T:
k277mon
422935424568424658
T:
curve2251
440456441214445729
T:
gls1271
442184442645443381
T:
jacfp127i
448421448443448480
T:
curve25519
457526457593457684
T:
kumfp128g
479903480371481877
T:
ecfp256e
502109502704504357
T:
ecfp256q
510616511715513331
T:
ecfp256i
522677523080525090
T:
prjfp127i
533407533804535576
T:
hecfp127i
565469566754568538
T:
surf127eps
568609568610568676
T:
kummer
599739599881600550
T:
ecfp256h
625065625571627127
T:
ecfp256s
770941782902785641
T:
sclaus1024
808102809012813883
T:
hecfp128i
114790711682831186475
T:
surf2113
208163020840892086012
T:
nistp256
263476126352492637456
T:
ed448goldilocks
365754736589563660996
T:
ed521gs
373109937380893792105
T:
sclaus2048
431181943130384313801
T:
nist521gs
466037746696634687937
T:
claus