Re: [Cfrg] Timing of libsodium, curve25519-donna, MSR ECCLib, and openssl-master

[Andrey Jivsov <[e-mail]>]

Now that the P-256 enhancements are in the OpenSSL tree, let commands 
speak for themselves.

Type in a Linux terminal on a Haswell machine (no HT, no 
SpeedStep/Turboboost) and observe:

1. P-256:

$ git clone git://git.openssl.org/openssl.git A
$ cd A
$ ./config
$ make && apps/openssl speed ecdhp256

15078.1 op/s

2. X25519:

$ git clone https://github.com/brainhub/curve25519-donna.git B
$ cd B
$ make speed-curve25519-donna-c64 && ./speed-curve25519-donna-c64

17289.4 op/s

-----------------------------

17383.6 / 15168.1 = 14.6% faster

The difference is about the cost of point decompression/coordinate 
conversion (e.g. Edwards coordinate conversion to Montgomery + point 
multiplication would have about the same performance as P-256 point 
multiplication).