Key Exchange

Performance benchmarks for isogeny-based key exchange protocols (CSIDH, CTIDH, and related schemes). Click a paper name to view its abstract.

View the isogeny Group Action Zoo →

Filters ({{nikeActiveFilterCount}})
Scheme
Clear
Operations
Size (bytes)
Clear
Keyspace
Clear
Platform
Clear
Security
Clear
Sort:

{{filteredNikeBenchmarks.length}} result{{filteredNikeBenchmarks.length!==1?'s':''}}

Paper Implementation Size (bytes){{nikeSortKey==='size'?(nikeSortDir==='asc'?'▲':'▼'):'⇅'}} Keyspace (bits) NIST Ops (Fp){{nikeSortKey==='ops'?(nikeSortDir==='asc'?'▲':'▼'):'⇅'}} Cycles{{nikeSortKey==='cycles'?(nikeSortDir==='asc'?'▲':'▼'):'⇅'}} CT Det DF
{{b.paper.short}} {{b.name}} {{b.size}} {{b.keyspace}} {{b.nist_level}} {{weightedOps(b.operations)}}
{{c.platform}} {{c.value.toLocaleString()}} {{c.unit}}
{{b.constant_time?'✓':'✗'}} {{b.deterministic?'✓':'✗'}} {{b.dummy_free?'✓':'✗'}}
CT {{b.constant_time?'✓':'✗'}} Det {{b.deterministic?'✓':'✗'}} DF {{b.dummy_free?'✓':'✗'}}
No benchmarks match the selected filters.
{{paper.short}} {{paper.scheme}} {{fmtDate(paper.date)}} {{paper.authors}}
Implementation Size (bytes) Keyspace (bits) NIST Ops (Fp) Cycles CT Det DF
{{b.name}} {{b.size}} {{b.keyspace}} {{b.nist_level}} {{weightedOps(b.operations)}}
{{c.platform}} {{c.value.toLocaleString()}} {{c.unit}}
{{b.constant_time?'✓':'✗'}} {{b.deterministic?'✓':'✗'}} {{b.dummy_free?'✓':'✗'}}
CT {{b.constant_time?'✓':'✗'}} Det {{b.deterministic?'✓':'✗'}} DF {{b.dummy_free?'✓':'✗'}}

Signatures

Performance benchmarks for isogeny-based signature schemes (SQIsign and variants). Click a paper name to view its abstract.

Filters ({{sigActiveFilterCount}})
Scheme
Clear
NIST Level
Clear
Platform
Clear
Security
Clear
Sort:

{{filteredSigBenchmarks.length}} result{{filteredSigBenchmarks.length!==1?'s':''}}

Paper Variant NIST PK{{sigSortKey==='pk'?(sigSortDir==='asc'?'▲':'▼'):'⇅'}} SK{{sigSortKey==='sk'?(sigSortDir==='asc'?'▲':'▼'):'⇅'}} Sig{{sigSortKey==='sig'?(sigSortDir==='asc'?'▲':'▼'):'⇅'}} KeyGen{{sigSortKey==='keygen'?(sigSortDir==='asc'?'▲':'▼'):'⇅'}} Sign{{sigSortKey==='sign'?(sigSortDir==='asc'?'▲':'▼'):'⇅'}} Verify{{sigSortKey==='verify'?(sigSortDir==='asc'?'▲':'▼'):'⇅'}} CT Det DF
{{b.paper.short}} {{b.variant||b.name}} {{b.nist_level}} {{b.pk_size}} {{b.sk_size}} {{b.sig_size}}
{{c.platform}} {{c.keygen.value.toLocaleString()}} {{c.keygen.unit}}
{{c.platform}} {{c.sign.value.toLocaleString()}} {{c.sign.unit}}
{{c.platform}} {{c.verify.value.toLocaleString()}} {{c.verify.unit}}
{{b.constant_time?'✓':'✗'}} {{b.deterministic?'✓':'✗'}} {{b.dummy_free?'✓':'✗'}}
CT {{b.constant_time?'✓':'✗'}} Det {{b.deterministic?'✓':'✗'}} DF {{b.dummy_free?'✓':'✗'}}
No benchmarks match the selected filters.
{{paper.short}} {{paper.scheme}} {{fmtDate(paper.date)}} {{paper.authors}}
Variant NIST PK (bytes) SK (bytes) Sig (bytes) KeyGen Sign Verify CT Det DF
{{b.variant||b.name}} {{b.nist_level}} {{b.pk_size}} {{b.sk_size}} {{b.sig_size}}
{{c.platform}} {{c.keygen.value.toLocaleString()}} {{c.keygen.unit}}
{{c.platform}} {{c.sign.value.toLocaleString()}} {{c.sign.unit}}
{{c.platform}} {{c.verify.value.toLocaleString()}} {{c.verify.unit}}
{{b.constant_time?'✓':'✗'}} {{b.deterministic?'✓':'✗'}} {{b.dummy_free?'✓':'✗'}}
CT {{b.constant_time?'✓':'✗'}} Det {{b.deterministic?'✓':'✗'}} DF {{b.dummy_free?'✓':'✗'}}