VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Goldmont (506c9); 2016 Intel Celeron J3455; 4 x 1500MHz; wooden, supercop-20240425

[Page version: 20240726 23:45:37]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Implementation notes

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
457904717448500
T:
jacfp127i
468384821449588
T:
kumjacfp127g
544545635458350
T:
prjfp127i
578565943461774
T:
hecfp127i
615246286264330
T:
ecfp256e
627106417465756
T:
jacfp128bk
658286775470244
T:
curve2251
660126798670256
T:
ecfp256h
688187051273370
T:
ecfp256s
716847270473686
T:
gls254
739747555877708
T:
ecfp256q
745247675478822
T:
prjfp128bk
774007920681358
T:
hecfp128i
776767948281694
T:
hecfp128bk
778747950482048
T:
hecfp128fkt
907849078890792
T:
gls254prot
125106125126125144
T:
k277taa
123864125390126258
T:
gls1271
136606136644139158
T:
k298
181314181322181330
T:
k277mon
201738201760201796
T:
kumfp127g
274596274612274664
T:
kumfp128g
275674275682275762
T:
curve25519
324548326350328908
T:
ecfp256i
352658352816353650
T:
ed448goldilocks
383622384942386134
T:
surf127eps
387736390906395954
T:
sclaus1024
403854403906404024
T:
kummer
424624424638424860
T:
nistp256
728902732180735836
T:
surf2113
189589019140841933432
T:
sclaus2048
200638420147502039666
T:
ed521gs
232291223305382353510
T:
nist521gs
232693623425762363096
T:
claus
Cycles to compute a shared secret
25%50%75%system
687546891469124
T:
gls254
905809058490588
T:
gls254prot
124964124980124998
T:
k277taa
136370136400136444
T:
k298
181192181202181210
T:
k277mon
199426199456199486
T:
jacfp128bk
206632206658206672
T:
kumfp127g
209954209996210810
T:
kumjacfp127g
241714241808242236
T:
curve2251
249914249966250060
T:
prjfp128bk
256034256068256142
T:
hecfp128bk
265240265268265340
T:
hecfp128fkt
275576275584275590
T:
curve25519
283564283568283630
T:
kumfp128g
304416304474304538
T:
ecfp256e
306438314426316170
T:
gls1271
315678315710316296
T:
jacfp127i
318764318802318852
T:
ecfp256q
321266321326321642
T:
ecfp256i
374848374924375176
T:
ecfp256h
380132380566382626
T:
surf127eps
383048390956391694
T:
sclaus1024
403678403710403792
T:
kummer
409344409398409844
T:
ecfp256s
413436413500413908
T:
prjfp127i
425962426026426170
T:
hecfp127i
574252574306575356
T:
hecfp128i
719592726224732438
T:
surf2113
115410411543321166122
T:
ed448goldilocks
146318814633181485672
T:
nistp256
190820819218601938260
T:
sclaus2048
200588620120422034744
T:
ed521gs
232148423309782351716
T:
claus
232031223329842351202
T:
nist521gs