VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Zen 5 (b00f21); 2024 AMD EPYC 9555; 64 x 3200MHz; tripwire, supercop-20260831

[Page version: 20261004 23:38:44]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
194841951419551curve25519
21092?23438?26971?
T:
jacfp127i
235672527127138
T:
hecfp127i
22116?25818?30682?
T:
prjfp127i
281933037033243
T:
jacfp128bk
309373097931022nistp256
29461?32162?36848?
T:
ecfp256e
306283293435070
T:
kumjacfp127g
310453356036959
T:
hecfp128bk
327973498838907
T:
prjfp128bk
337313636640409
T:
hecfp128fkt
371073803241084
T:
curve2251
377173816938484
T:
gls254
348993881641803
T:
hecfp128i
34590?39217?48164?
T:
ecfp256s
391913924439320
T:
gls254prot
36498?41227?50663?
T:
ecfp256q
440504411344187
T:
k277taa
483454843849851
T:
k298
510295105751105
T:
kummer
610086113561288
T:
k277mon
635516359763649
T:
kumfp127g
792627933479457
T:
kumfp128g
112921113349113772
T:
surf127eps
116793117579118150
T:
sclaus1024
122810123570124456
T:
ecfp256i
141328142048142876
T:
ecfp256h
142843147935156685
T:
hector
153021153216153609
T:
ed448goldilocks
292934294332295596
T:
surf2113
558117559421561992
T:
ed521gs
631978635048637223
T:
sclaus2048
736765737747738203
T:
nist521gs
774596776314778211
T:
claus
Cycles to compute a shared secret
25%50%75%system
357183575435818
T:
gls254
391403918939244
T:
gls254prot
440084405144094
T:
k277taa
481184818248240
T:
k298
510015101751035
T:
kummer
609536110361211
T:
k277mon
642606430864373
T:
kumfp127g
646936489165096
T:
jacfp128bk
653686541365673curve25519
656706571965768
T:
kumjacfp127g
739677414374330
T:
prjfp128bk
763957657476724
T:
hecfp128fkt
774247756777712
T:
hecfp128bk
835028359283709
T:
kumfp128g
956059570095810
T:
jacfp127i
108457108640109203
T:
surf127eps
108983109094109245
T:
ecfp256e
114478114715114850
T:
ecfp256i
114767114922115187
T:
prjfp127i
118087118240119552nistp256
118165118368118719
T:
hecfp127i
118709118803118949
T:
ecfp256q
133525133805134184
T:
ecfp256h
151576151863153527
T:
sclaus1024
153909154365154542
T:
curve2251
164147164333164549
T:
hecfp128i
169452169552169666
T:
ecfp256s
292936293545293994
T:
surf2113
418478419221420043
T:
ed448goldilocks
507775509822514029
T:
hector
556863557873562785
T:
ed521gs
736470736792737706
T:
nist521gs
818536835281838986
T:
sclaus2048
896428900838907390
T:
claus