VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Zen (800f11); 2017 AMD Ryzen 7 1700; 8 x 3000MHz; rumba7, supercop-20260217

[Page version: 20260302 18:25:20]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: old (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
287942999531759
T:
jacfp127i
290473028932438
T:
prjfp127i
303893118632378
T:
kumjacfp127g
335043354533606curve25519
332613443835886
T:
hecfp127i
370143848040472
T:
jacfp128bk
381793946142014
T:
ecfp256e
405904141943990
T:
curve2251
409914204144004
T:
prjfp128bk
408864221944182
T:
hecfp128i
412544251544469
T:
hecfp128fkt
416074368247776
T:
ecfp256h
435264370543940
T:
gls254
428164410246193
T:
hecfp128bk
427084442649267
T:
ecfp256s
447114484744919
T:
gls254prot
455584751251905
T:
ecfp256q
531825321953261nistp256
555215575655958
T:
k277taa
641226437164771
T:
k298
656726642167255
T:
gls1271
891158919189292
T:
k277mon
100737100848100964
T:
kummer
102806102874102944
T:
kumfp127g
134045134187134259
T:
kumfp128g
155501156641157557
T:
sclaus1024
177838178858179938
T:
ecfp256i
186662187331188233
T:
surf127eps
200551200893201202
T:
ed448goldilocks
205567211138220949
T:
hector
473906475984476747
T:
surf2113
760140763776766256
T:
sclaus2048
956835959709962719
T:
ed521gs
102919410302761031603
T:
claus
108832210902251091713
T:
nist521gs
Cycles to compute a shared secret
25%50%75%system
421994239842533
T:
gls254
446424478344909
T:
gls254prot
554705573655909
T:
k277taa
639746408464366
T:
k298
891248920389268
T:
k277mon
100767100849100947
T:
kummer
104388104467104558
T:
jacfp128bk
104424104498104590
T:
kumfp127g
106271106336106412
T:
kumjacfp127g
117638117782118222curve25519
127666127992128178
T:
prjfp128bk
131633131789131953
T:
hecfp128fkt
133392133476133593
T:
hecfp128bk
138651139139139180
T:
kumfp128g
159226159927160568
T:
curve2251
161891161982162139
T:
ecfp256e
162752162827162927
T:
jacfp127i
161018164193167023
T:
gls1271
169433169525169761
T:
ecfp256i
169928170029170220
T:
ecfp256q
182501183268183575
T:
surf127eps
199764199886200075
T:
ecfp256h
204559204817205114
T:
prjfp127i
201106204944205033
T:
sclaus1024
205393205624206425nistp256
209244209367209603
T:
hecfp127i
224405224505224720
T:
ecfp256s
285867286112287228
T:
hecfp128i
474263475369482675
T:
surf2113
582559583180586336
T:
ed448goldilocks
718664726740735043
T:
hector
957065959311961198
T:
ed521gs
99691510024961014903
T:
sclaus2048
108940910913181092336
T:
nist521gs
119955312019411205542
T:
claus