VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key Diffie–Hellman secret-sharing systems on one machine: amd64; Goldmont (506c9); 2016 Intel Celeron J3455; 4 x 1500MHz; wooden, supercop-20241022

[Page version: 20241120 00:41:13]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key Diffie–Hellman secret-sharing systems:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each Diffie–Hellman system and each implementation. Designers and implementors interested in submitting new Diffie–Hellman systems and new implementations of existing systems should read the call for submissions.


Test results

Graphs: (pkcycles,pkbytes) (scycles,pkbytes)

Cycles to generate a key pair
25%50%75%system
450404635047824
T:
jacfp127i
468964785649468
T:
kumjacfp127g
537805517056900
T:
prjfp127i
555265699458694
T:
hecfp127i
577125883460152
T:
ecfp256e
611706306664922
T:
ecfp256h
628146413066006
T:
jacfp128bk
631586492267316
T:
curve2251
635726567067316
T:
ecfp256s
691247076873304
T:
ecfp256q
716167252674082
T:
gls254
754147769879752
T:
prjfp128bk
768987899681318
T:
hecfp128i
776887985681814
T:
hecfp128fkt
786508038682792
T:
hecfp128bk
907869078890794
T:
gls254prot
125346?125364?171978?
T:
k277taa
124520?126912?234274?
T:
gls1271
136658136704138746
T:
k298
181314181324181666
T:
k277mon
201736201756201796
T:
kumfp127g
274598274608274658
T:
kumfp128g
280412280412280420
T:
curve25519
301198303424306124
T:
ecfp256i
329644343516358460
T:
hector
352092352992353962
T:
ed448goldilocks
383524384966385854
T:
surf127eps
389204?394004?723050?
T:
sclaus1024
403560403864404022
T:
kummer
425892425930426278
T:
nistp256
727550730868735750
T:
surf2113
189215619120801936018
T:
sclaus2048
200614420162862041688
T:
ed521gs
231997623383002355126
T:
nist521gs
232775423424342361462
T:
claus
Cycles to compute a shared secret
25%50%75%system
661186807869276
T:
gls254
905789058490588
T:
gls254prot
125202125222125236
T:
k277taa
136500136554136606
T:
k298
181194181202181214
T:
k277mon
199410199454199484
T:
jacfp128bk
206630206656206672
T:
kumfp127g
209866209890209906
T:
kumjacfp127g
241802242808242906
T:
curve2251
249700249746249800
T:
prjfp128bk
256204256258256396
T:
hecfp128bk
265260265324265456
T:
hecfp128fkt
280322280322280398
T:
curve25519
282984283040283092
T:
ecfp256e
283562283566283572
T:
kumfp128g
297312297380298020
T:
ecfp256q
297720297782297896
T:
ecfp256i
315094315134315294
T:
jacfp127i
308552318380320478
T:
gls1271
350524350606350914
T:
ecfp256h
378202378692380826
T:
surf127eps
386600386664387212
T:
ecfp256s
395598396186396424
T:
sclaus1024
403948403976404024
T:
kummer
413926413968414200
T:
prjfp127i
426084426232426318
T:
hecfp127i
574256574438575430
T:
hecfp128i
725024725354731552
T:
surf2113
115412011545561168506
T:
ed448goldilocks
115064411615241176768
T:
hector
146329014635901487072
T:
nistp256
191509419307001953588
T:
sclaus2048
200554420149142031248
T:
ed521gs
231957023342062349164
T:
nist521gs
232864423409922360214
T:
claus