VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

General information:	Introduction	eBASH	eBASC	eBAEAD	eBATS	SUPERCOP	XBX	Computers	Arch

How to submit new software:	Tips	hash	stream	aead	dh	kem	encrypt	sign

List of primitives measured:	lwc	sha3	hash	stream	lwc	caesar	aead	dh	kem	encrypt	sign

Measurements:	lwc	sha3	hash	stream	lwc	caesar	aead	dh	kem	encrypt	sign

List of subroutines:	verify	decode	encode	sort	core	hashblocks	xof	scalarmult

List of NISTLWC cipher candidates measured

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt from the full list of authenticated ciphers covered by SUPERCOP; the excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists. The page then lists implementations of these ciphers.

There is a separate page that lists machines and, for each machine, the measurements of these ciphers.

Which authenticated ciphers are measured? (NISTLWC excerpt)

Primitive	Description	Designers
`aes128gcmv1`		David A. McGrew John Viega
`aes256gcmv1`		David A. McGrew John Viega
`ascon128abi32v12`
`ascon128av12`		Christoph Dobraunig Maria Eichlseder Florian Mendel Martin Schläffer
`ascon128bi32v12`
`ascon128v12`		Christoph Dobraunig Maria Eichlseder Florian Mendel Martin Schläffer
`ascon80pqv12`
`elephant160v2`
`elephant176v2`
`elephant200v2`
`giftcofb128v1`
`grain128aeadv2`
`isapa128av20`
`isapa128v20`
`isapk128av20`
`isapk128v20`
`isapxv20`
`romulusm`		Chun Guo Tetsu Iwata Mustafa Khairallah Kazuhiko Minematsu Thomas Peyrin
`romulusn`		Chun Guo Tetsu Iwata Mustafa Khairallah Kazuhiko Minematsu Thomas Peyrin
`romulust`		Chun Guo Tetsu Iwata Mustafa Khairallah Kazuhiko Minematsu Thomas Peyrin
`schwaemm128128v2`
`schwaemm192192v2`
`schwaemm256128v2`
`schwaemm256256v2`
`tinyjambu128v2`
`tinyjambu192v2`
`tinyjambu256v2`
`xoodyakround3`

Implementations

Primitive	Implementation	Authors
`aes128gcmv1`	`dolbeau/aesenc-int`	Romain Dolbeau
`aes128gcmv1`	`dolbeau/armv8crypto`	Romain Dolbeau
`aes128gcmv1`	`openssl`	Daniel J. Bernstein (wrapper around OpenSSL)
`aes128gcmv1`	`opensslnew`	Daniel J. Bernstein (wrapper around OpenSSL)
`aes128gcmv1`	`ref`	Daniel J. Bernstein
`aes128gcmv1`	`rust_aes_gcm`
`aes128gcmv1`	`rust_crypto`
`aes256gcmv1`	`cryptopp`	Romain Dolbeau (wrapper around Crypto++)
`aes256gcmv1`	`dolbeau/aesenc-int`	Romain Dolbeau
`aes256gcmv1`	`dolbeau/armv8crypto`	Romain Dolbeau
`aes256gcmv1`	`dolbeau/vaesenc-int`	Romain Dolbeau
`aes256gcmv1`	`openssl`	Daniel J. Bernstein (wrapper around OpenSSL)
`aes256gcmv1`	`opensslnew`	Daniel J. Bernstein (wrapper around OpenSSL)
`aes256gcmv1`	`ref`
`ascon128abi32v12`	`bi32`	Christoph Dobraunig Martin Schläffer
`ascon128abi32v12`	`bi32_armv6`	Christoph Dobraunig Martin Schläffer
`ascon128abi32v12`	`bi32_armv6m`	Christoph Dobraunig Martin Schläffer
`ascon128abi32v12`	`bi32_armv7m`	Christoph Dobraunig Martin Schläffer
`ascon128abi32v12`	`bi32_armv7m_small`	Christoph Dobraunig Martin Schläffer
`ascon128abi32v12`	`bi32_lowreg`	Christoph Dobraunig Martin Schläffer
`ascon128abi32v12`	`bi32_lowsize`	Christoph Dobraunig Martin Schläffer
`ascon128abi32v12`	`ref`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`armv6`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`armv6_lowsize`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`armv6m`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`armv6m_lowsize`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`armv7m`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`armv7m_lowsize`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`armv7m_small`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`asm_bi32_rv32b`	Ferdinand Bachmann
`ascon128av12`	`asm_esp32`	Ferdinand Bachmann
`ascon128av12`	`asm_fsr_rv32b`	Ferdinand Bachmann
`ascon128av12`	`asm_rv32b`	Ferdinand Bachmann
`ascon128av12`	`asm_rv32i`	Ferdinand Bachmann
`ascon128av12`	`avr`	Luan Cardoso dos Santos Johann Großschädl Christoph Dobraunig Martin Schläffer
`ascon128av12`	`avr_lowsize`	Luan Cardoso dos Santos Johann Großschädl Christoph Dobraunig Martin Schläffer
`ascon128av12`	`avx512`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`bi32`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`bi32_armv6`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`bi32_armv6m`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`bi32_armv7m`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`bi32_armv7m_small`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`bi32_lowreg`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`bi32_lowsize`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`bi8`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`esp32`	Christoph Dobraunig Martin Schläffer Ferdinand Bachmann
`ascon128av12`	`neon`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`opt32`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`opt32_lowsize`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`opt64`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`opt64_lowsize`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`opt8`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`opt8_lowsize`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`protected_bi32_armv6_leveled`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`ref`	Christoph Dobraunig Martin Schläffer
`ascon128bi32v12`	`bi32`	Christoph Dobraunig Martin Schläffer
`ascon128bi32v12`	`bi32_armv6`	Christoph Dobraunig Martin Schläffer
`ascon128bi32v12`	`bi32_armv6m`	Christoph Dobraunig Martin Schläffer
`ascon128bi32v12`	`bi32_armv7m`	Christoph Dobraunig Martin Schläffer
`ascon128bi32v12`	`bi32_armv7m_small`	Christoph Dobraunig Martin Schläffer
`ascon128bi32v12`	`bi32_lowreg`	Christoph Dobraunig Martin Schläffer
`ascon128bi32v12`	`bi32_lowsize`	Christoph Dobraunig Martin Schläffer
`ascon128bi32v12`	`ref`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`armv6`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`armv6_lowsize`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`armv6m`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`armv6m_lowsize`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`armv7m`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`armv7m_lowsize`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`armv7m_small`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`asm_bi32_rv32b`	Ferdinand Bachmann
`ascon128v12`	`asm_esp32`	Ferdinand Bachmann
`ascon128v12`	`asm_fsr_rv32b`	Ferdinand Bachmann
`ascon128v12`	`asm_rv32b`	Ferdinand Bachmann
`ascon128v12`	`asm_rv32i`	Ferdinand Bachmann
`ascon128v12`	`avr`	Luan Cardoso dos Santos Johann Großschädl Christoph Dobraunig Martin Schläffer
`ascon128v12`	`avr_lowsize`	Luan Cardoso dos Santos Johann Großschädl Christoph Dobraunig Martin Schläffer
`ascon128v12`	`avx512`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`bi32`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`bi32_armv6`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`bi32_armv6m`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`bi32_armv7m`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`bi32_armv7m_small`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`bi32_lowreg`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`bi32_lowsize`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`bi8`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`esp32`	Christoph Dobraunig Martin Schläffer Ferdinand Bachmann
`ascon128v12`	`neon`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`opt32`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`opt32_lowsize`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`opt64`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`opt64_lowsize`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`opt8`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`opt8_lowsize`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`protected_bi32_armv6`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`protected_bi32_armv6_leveled`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`ref`	Christoph Dobraunig Martin Schläffer
`ascon80pqv12`	`armv6`	Christoph Dobraunig Martin Schläffer
`ascon80pqv12`	`armv6_lowsize`	Christoph Dobraunig Martin Schläffer
`ascon80pqv12`	`armv6m`	Christoph Dobraunig Martin Schläffer
`ascon80pqv12`	`armv6m_lowsize`	Christoph Dobraunig Martin Schläffer
`ascon80pqv12`	`armv7m`	Christoph Dobraunig Martin Schläffer
`ascon80pqv12`	`armv7m_lowsize`	Christoph Dobraunig Martin Schläffer
`ascon80pqv12`	`armv7m_small`	Christoph Dobraunig Martin Schläffer
`ascon80pqv12`	`asm_esp32`	Ferdinand Bachmann
`ascon80pqv12`	`avr`	Luan Cardoso dos Santos Johann Großschädl Christoph Dobraunig Martin Schläffer
`ascon80pqv12`	`avr_lowsize`	Luan Cardoso dos Santos Johann Großschädl Christoph Dobraunig Martin Schläffer
`ascon80pqv12`	`bi32`	Christoph Dobraunig Martin Schläffer
`ascon80pqv12`	`bi32_armv6`	Christoph Dobraunig Martin Schläffer
`ascon80pqv12`	`bi32_armv6m`	Christoph Dobraunig Martin Schläffer
`ascon80pqv12`	`bi32_armv7m`	Christoph Dobraunig Martin Schläffer
`ascon80pqv12`	`bi32_armv7m_small`	Christoph Dobraunig Martin Schläffer
`ascon80pqv12`	`bi32_lowreg`	Christoph Dobraunig Martin Schläffer
`ascon80pqv12`	`bi32_lowsize`	Christoph Dobraunig Martin Schläffer
`ascon80pqv12`	`bi8`	Christoph Dobraunig Martin Schläffer
`ascon80pqv12`	`esp32`	Christoph Dobraunig Martin Schläffer Ferdinand Bachmann
`ascon80pqv12`	`opt32`	Christoph Dobraunig Martin Schläffer
`ascon80pqv12`	`opt32_lowsize`	Christoph Dobraunig Martin Schläffer
`ascon80pqv12`	`opt64`	Christoph Dobraunig Martin Schläffer
`ascon80pqv12`	`opt64_lowsize`	Christoph Dobraunig Martin Schläffer
`ascon80pqv12`	`opt8`	Christoph Dobraunig Martin Schläffer
`ascon80pqv12`	`opt8_lowsize`	Christoph Dobraunig Martin Schläffer
`ascon80pqv12`	`ref`	Christoph Dobraunig Martin Schläffer
`elephant160v2`	`ref`	Tim Beyne
`elephant176v2`	`ref`	Tim Beyne
`elephant200v2`	`ref`	Tim Beyne
`giftcofb128v1`	`aadomn/opt32`	Alexandre Adomnicai
`giftcofb128v1`	`ref`
`grain128aeadv2`	`avx512`
`grain128aeadv2`	`gf2`
`grain128aeadv2`	`ref`
`grain128aeadv2`	`sse`
`grain128aeadv2`	`x64`
`isapa128av20`	`avx_512`
`isapa128av20`	`bi_32`
`isapa128av20`	`bi_32_armv6`
`isapa128av20`	`bi_32_armv6m`
`isapa128av20`	`bi_32_armv6m_compact`
`isapa128av20`	`bi_32_armv6m_stp`
`isapa128av20`	`bi_32_armv7m`
`isapa128av20`	`bi_32_compact`
`isapa128av20`	`bi_32_stp`
`isapa128av20`	`bi_8`
`isapa128av20`	`opt_32`
`isapa128av20`	`opt_32_armv67m`
`isapa128av20`	`opt_32_compact`
`isapa128av20`	`opt_32_stp`
`isapa128av20`	`opt_32_tiny`
`isapa128av20`	`opt_64`
`isapa128av20`	`opt_8`
`isapa128av20`	`opt_8_tiny`
`isapa128av20`	`ref`
`isapa128v20`	`opt_32`
`isapa128v20`	`opt_32_armv67m`
`isapa128v20`	`opt_64`
`isapa128v20`	`ref`
`isapk128av20`	`avx512`
`isapk128av20`	`opt_32_armv6m`
`isapk128av20`	`opt_32_armv7m`
`isapk128av20`	`opt_64`
`isapk128av20`	`ref`
`isapk128v20`	`opt_32_armv6m`
`isapk128v20`	`opt_32_armv7m`
`isapk128v20`	`opt_64`
`isapk128v20`	`ref`
`isapxv20`	`ref`
`romulusm`	`aadomn/armv7a`	Alexandre Adomnicai
`romulusm`	`aadomn/armv7m`	Alexandre Adomnicai
`romulusm`	`aadomn/armv8a/onthefly`	Alexandre Adomnicai
`romulusm`	`aadomn/armv8a/precalculate`	Alexandre Adomnicai
`romulusm`	`aadomn/opt32`	Alexandre Adomnicai
`romulusm`	`aadomn/x86`	Alexandre Adomnicai Kazuhiko Minematsu Maki Shigeri
`romulusm`	`arm_asm_fixslice_cortexm`
`romulusm`	`arm_inline_asm`
`romulusm`	`fixslice_opt32`
`romulusm`	`opt32t`
`romulusm`	`ref`
`romulusn`	`aadomn/armv7a`	Alexandre Adomnicai
`romulusn`	`aadomn/armv7m`	Alexandre Adomnicai
`romulusn`	`aadomn/armv8a/onthefly`	Alexandre Adomnicai
`romulusn`	`aadomn/armv8a/precalculate`	Alexandre Adomnicai
`romulusn`	`aadomn/opt32`	Alexandre Adomnicai
`romulusn`	`aadomn/x86`	Alexandre Adomnicai Kazuhiko Minematsu Maki Shigeri
`romulusn`	`arm_asm_fixslice_cortexm`
`romulusn`	`arm_inline_asm`
`romulusn`	`fixslice_opt32`
`romulusn`	`opt32t`
`romulusn`	`ref`
`romulust`	`aadomn/armv7a`	Alexandre Adomnicai
`romulust`	`aadomn/armv7m`	Alexandre Adomnicai
`romulust`	`aadomn/armv8a/onthefly`	Alexandre Adomnicai
`romulust`	`aadomn/armv8a/precalculate`	Alexandre Adomnicai
`romulust`	`aadomn/opt32`	Alexandre Adomnicai
`romulust`	`aadomn/x86`	Alexandre Adomnicai Kazuhiko Minematsu Maki Shigeri
`romulust`	`ref`
`schwaemm128128v2`	`add_armv7m_fast`
`schwaemm128128v2`	`add_armv7m_small`
`schwaemm128128v2`	`add_avr`
`schwaemm128128v2`	`opt`
`schwaemm128128v2`	`ref`
`schwaemm192192v2`	`add_armv7m_fast`
`schwaemm192192v2`	`add_armv7m_small`
`schwaemm192192v2`	`add_avr`
`schwaemm192192v2`	`opt`
`schwaemm192192v2`	`ref`
`schwaemm256128v2`	`add_armv6m`
`schwaemm256128v2`	`add_armv7m_fast`
`schwaemm256128v2`	`add_armv7m_small`
`schwaemm256128v2`	`add_avr`
`schwaemm256128v2`	`opt`
`schwaemm256128v2`	`ref`
`schwaemm256256v2`	`add_armv7m_fast`
`schwaemm256256v2`	`add_armv7m_small`
`schwaemm256256v2`	`add_avr`
`schwaemm256256v2`	`opt`
`schwaemm256256v2`	`ref`
`tinyjambu128v2`	`opt`
`tinyjambu128v2`	`ref`
`tinyjambu192v2`	`opt`
`tinyjambu192v2`	`ref`
`tinyjambu256v2`	`opt`
`tinyjambu256v2`	`ref`
`xoodyakround3`	`ref`
`xoodyakround3`	`refcpp`

Version

This is version 2025.11.03 of the primitives-nistlwc-aead.html web page. This web page is in the public domain.

eBACS: ECRYPT Benchmarking of Cryptographic Systems

List of NISTLWC cipher candidates measured

Which authenticated ciphers are measured? (NISTLWC excerpt)

Implementations

Version