VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Bonnell (106ca); 2010 Intel Atom N455; 1 x 1000MHz; h2atom, supercop-20240625

[Page version: 20240912 11:46:31]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
14.0514.0714.78ascon128av12
20.9821.0121.55ascon128v12
21.24?21.95?40.28?ascon80pqv12
35.4135.4535.45ascon128abi32v12
48.9949.0049.03ascon128bi32v12
55.5255.5955.73T:xoodyakround3
55.84?55.94?97.59?T:giftcofb128v1
62.7762.8263.53T:schwaemm256128v2
79.0279.2579.45T:isapa128v20
82.8082.8382.94T:schwaemm192192v2
86.6986.6986.70T:schwaemm128128v2
88.8688.8888.94T:isapa128av20
89.5289.8189.88T:schwaemm256256v2
100.35102.18105.13T:aes256gcmv1
135.18135.21135.40T:grain128aeadv2
152.49152.50152.68T:tinyjambu128v2
156.03156.06156.13romulusn
180.95181.05183.81T:isapk128av20
195.50195.53196.17T:tinyjambu192v2
216.74216.82217.19T:tinyjambu256v2
51.31?238.24?243.68?T:isapk128v20
257.67258.05259.15romulusm
414.17414.32415.10T:elephant200v2
567.54568.11569.54T!!!romulust
538.36?581.22?616.42?T:isapxv20
1483.411484.251490.04T:aes128gcmv1
40129.1140246.1340440.75T:elephant160v2
42958.5843050.3343092.19T:elephant176v2
44602.6144657.5944776.38aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
13.9213.9413.96ascon128av12
20.8720.8820.95ascon128v12
20.9921.0121.02ascon80pqv12
35.1135.1335.13ascon128abi32v12
47.7447.7648.73ascon128bi32v12
51.9952.0152.10T:xoodyakround3
55.62?57.99?99.87?T:giftcofb128v1
63.0363.0463.08T:schwaemm256128v2
78.6479.2581.28T:isapa128v20
83.0883.0983.16T:schwaemm192192v2
86.9486.9486.95T:schwaemm128128v2
88.8788.9289.93T:isapa128av20
90.3690.4590.56T:schwaemm256256v2
101.03102.05103.47T:aes256gcmv1
137.32137.35137.58T:grain128aeadv2
152.76152.76152.81T:tinyjambu128v2
155.98156.00156.05romulusn
180.95181.09183.60T:isapk128av20
195.26195.87200.07T:tinyjambu192v2
216.99217.06217.59T:tinyjambu256v2
63.20?238.40?242.33?T:isapk128v20
258.00258.08258.69romulusm
414.01414.27414.87T:elephant200v2
567.50567.90569.31T!!!romulust
537.91?574.77?616.89?T:isapxv20
1483.631484.121485.07T:aes128gcmv1
40135.5640224.7040328.73T:elephant160v2
42936.8143078.7743130.09T:elephant176v2
44527.8044620.8844759.86aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
13.9413.9413.95ascon128av12
20.8820.8820.88ascon128v12
21.0021.0021.00ascon80pqv12
35.1235.1335.13ascon128abi32v12
39.3139.3839.44T:isapa128v20
47.7547.7548.38ascon128bi32v12
52.1252.1352.25T:xoodyakround3
55.63?55.68?96.83?T:giftcofb128v1
58.0858.1258.17T:isapa128av20
63.0363.0563.08T:schwaemm256128v2
83.0883.0983.12T:schwaemm192192v2
86.9486.9486.95T:schwaemm128128v2
90.3790.4790.50T:schwaemm256256v2
100.30101.21102.67T:aes256gcmv1
118.41118.49118.54T:isapk128av20
137.33137.34137.39T:grain128aeadv2
52.80?148.09?148.95?T:isapk128v20
152.76152.76152.80T:tinyjambu128v2
155.99156.01156.86romulusn
195.26195.30200.07T:tinyjambu192v2
196.58196.67196.77T!!!romulust
217.01217.06217.88T:tinyjambu256v2
258.05258.07258.21romulusm
302.48?315.86?343.74?T:isapxv20
413.55413.97415.79T:elephant200v2
1426.711427.161427.43T:aes128gcmv1
1426.601428.651434.43aes256gcmv1
40120.4740155.4740220.08T:elephant160v2
42997.3443089.9743135.25T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
13.7313.7613.79ascon128av12
20.6720.6920.72ascon128v12
21.1121.1221.17ascon80pqv12
33.8033.8635.78ascon128abi32v12
41.8841.8941.96T:xoodyakround3
45.6748.4348.46ascon128bi32v12
55.6755.7055.75T:giftcofb128v1
56.6057.1657.59T:aes256gcmv1
58.6759.3761.97T:isapa128v20
62.4462.4962.54T:schwaemm256128v2
73.4973.4973.62T:isapa128av20
82.6382.6582.73T:schwaemm192192v2
86.44?86.60?118.30?T:schwaemm128128v2
88.7288.7488.76T:schwaemm256256v2
124.99125.05125.24T:tinyjambu128v2
128.82128.89129.75romulusn
135.04135.17135.37T:grain128aeadv2
149.08149.20149.89T:isapk128av20
152.49152.55152.93T:tinyjambu192v2
164.12164.15164.36T:tinyjambu256v2
179.75179.88180.69romulusm
191.55193.47195.07T:isapk128v20
307.11307.35307.81T:elephant200v2
381.96382.57383.00T!!!romulust
424.76?459.11?474.98?T:isapxv20
1455.241456.091459.28T:aes128gcmv1
23017.2623062.3623155.11aes256gcmv1
30082.4730131.7230165.58T:elephant160v2
32119.6432178.3032252.67T:elephant176v2
Cycles/byte for long+long decrypt
25%50%75%aead
13.6613.6913.74ascon128av12
20.5420.5620.63ascon80pqv12
20.5520.5720.61ascon128v12
33.4433.4833.55ascon128abi32v12
40.0840.0940.16T:xoodyakround3
44.8647.6847.77ascon128bi32v12
55.5555.5755.80T:giftcofb128v1
56.7758.1259.32T:aes256gcmv1
59.1159.5159.77T:isapa128v20
62.5962.6062.64T:schwaemm256128v2
73.4973.5373.74T:isapa128av20
82.7582.7882.82T:schwaemm192192v2
86.56?86.58?120.19?T:schwaemm128128v2
89.0389.0589.14T:schwaemm256256v2
125.12125.16125.46T:tinyjambu128v2
128.77128.85129.73romulusn
135.94136.17136.42T:grain128aeadv2
149.10149.35149.77T:isapk128av20
152.37152.39152.71T:tinyjambu192v2
164.24164.29164.81T:tinyjambu256v2
179.75179.99180.67romulusm
192.19193.30194.98T:isapk128v20
307.00307.31307.97T:elephant200v2
381.94382.57383.71T!!!romulust
430.43445.02474.69T:isapxv20
1455.431455.641458.17T:aes128gcmv1
22989.5423014.4323113.82aes256gcmv1
30096.8230147.3130174.08T:elephant160v2
32114.0432157.7732186.53T:elephant176v2
Cycles/byte for long+long forgery
25%50%75%aead
13.6913.6913.71ascon128av12
20.5620.5620.58ascon80pqv12
20.5620.5620.57ascon128v12
33.4733.4833.49ascon128abi32v12
39.4039.4539.49T:isapa128v20
40.1440.1640.21T:xoodyakround3
45.4047.6848.19ascon128bi32v12
55.5755.5755.60T:giftcofb128v1
56.7457.6460.27T:aes256gcmv1
58.1258.1258.15T:isapa128av20
62.5962.6062.63T:schwaemm256128v2
82.7782.7882.89T:schwaemm192192v2
86.56?86.58?119.14?T:schwaemm128128v2
88.8789.0589.07T:schwaemm256256v2
117.86117.92118.22T:isapk128av20
125.13125.13125.30T:tinyjambu128v2
128.80128.82129.42romulusn
136.00136.08136.36T:grain128aeadv2
146.68146.82148.62T:isapk128v20
152.37152.41152.83T:tinyjambu192v2
164.25164.28164.62T:tinyjambu256v2
179.86180.01181.52romulusm
196.31196.39197.21T!!!romulust
307.06307.38307.84T:elephant200v2
311.91314.14338.99T:isapxv20
1425.971427.211428.99aes256gcmv1
1426.951427.351431.90T:aes128gcmv1
30088.0330136.0430159.83T:elephant160v2
32119.6232154.0632221.27T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
12.24?13.36?14.55?T:aes256gcmv1
13.4013.4513.47ascon128av12
20.3620.3820.38ascon128v12
20.9921.0021.00ascon80pqv12
28.1628.2128.29T:xoodyakround3
32.1632.2032.20ascon128abi32v12
39.4439.5439.58T:isapa128v20
47.8747.8847.92ascon128bi32v12
55.4755.5355.95T:giftcofb128v1
52.7858.1258.14T:isapa128av20
62.1562.1662.18T:schwaemm256128v2
82.4182.4782.55T:schwaemm192192v2
86.1886.2086.23T:schwaemm128128v2
87.6587.6687.70T:schwaemm256256v2
97.4997.5097.54T:tinyjambu128v2
101.59101.64101.68romulusn
101.58101.65101.77romulusm
109.48109.50109.56T:tinyjambu192v2
111.49111.50111.56T:tinyjambu256v2
117.16117.26117.47T:isapk128av20
134.93135.06135.39T:grain128aeadv2
144.86145.50147.64T:isapk128v20
195.93196.04196.61T!!!romulust
202.19202.61203.16T:elephant200v2
301.16?331.25?344.81?T:isapxv20
1425.181427.761439.83aes256gcmv1
1427.171428.531435.61T:aes128gcmv1
20058.0620072.5820112.23T:elephant160v2
21228.8521273.2821316.61T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
12.11?13.23?14.45?T:aes256gcmv1
13.3913.4413.47ascon128av12
20.1220.1220.12ascon80pqv12
20.2220.2520.27ascon128v12
28.1828.2028.23T:xoodyakround3
31.7731.8231.88ascon128abi32v12
39.4339.5139.58T:isapa128v20
47.6247.6247.66ascon128bi32v12
55.4855.5958.23T:giftcofb128v1
52.27?58.12?58.14?T:isapa128av20
62.1662.1662.17T:schwaemm256128v2
82.4682.4782.51T:schwaemm192192v2
86.1986.1986.76T:schwaemm128128v2
87.6087.6287.67T:schwaemm256256v2
97.5097.5097.58T:tinyjambu128v2
101.59101.65101.71romulusm
101.61101.68103.23romulusn
109.50109.50109.54T:tinyjambu192v2
111.50111.50111.56T:tinyjambu256v2
117.18117.28117.37T:isapk128av20
134.71134.81134.90T:grain128aeadv2
145.24145.30146.68T:isapk128v20
195.94196.05196.81T!!!romulust
202.25202.61202.69T:elephant200v2
301.85?316.25?344.19?T:isapxv20
1427.021427.321429.88T:aes128gcmv1
1425.891427.441434.62aes256gcmv1
20041.1720073.9920116.97T:elephant160v2
21216.1221244.9521323.00T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
13.4413.4413.47ascon128av12
11.99?13.85?14.64?T:aes256gcmv1
20.1220.1220.17ascon80pqv12
20.2420.2520.26ascon128v12
28.1928.2028.24T:xoodyakround3
31.8131.8231.83ascon128abi32v12
39.4439.5039.57T:isapa128v20
47.62?47.65?82.34?ascon128bi32v12
55.5055.5255.97T:giftcofb128v1
57.8658.1258.15T:isapa128av20
62.1662.1662.23T:schwaemm256128v2
82.4582.4782.55T:schwaemm192192v2
86.1986.2086.23T:schwaemm128128v2
87.6187.6287.67T:schwaemm256256v2
97.5097.5097.53T:tinyjambu128v2
101.62101.63101.66romulusn
101.62101.64101.82romulusm
109.50109.50109.54T:tinyjambu192v2
111.50111.50111.56T:tinyjambu256v2
117.19117.39119.51T:isapk128av20
134.79134.80134.84T:grain128aeadv2
145.21145.30147.18T:isapk128v20
195.97196.05196.15T!!!romulust
202.06202.61202.66T:elephant200v2
300.74?314.83?344.23?T:isapxv20
1426.451427.251427.98T:aes128gcmv1
1426.521428.151430.10aes256gcmv1
20046.5920059.6620088.55T:elephant160v2
21221.4821276.0321313.21T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
14.0914.0914.14ascon128av12
21.0121.0321.06ascon128v12
21.4621.4621.51ascon80pqv12
34.5834.5834.63ascon128abi32v12
42.3642.3842.69T:xoodyakround3
49.2449.2549.27ascon128bi32v12
56.4356.4356.49T:giftcofb128v1
64.2864.3364.75T:schwaemm256128v2
69.9970.0970.55T:aes256gcmv1
78.6878.6978.73T:isapa128av20
84.4784.4784.55T:schwaemm192192v2
87.5587.5687.59T:schwaemm128128v2
88.1588.1588.26T:isapa128v20
90.9590.9591.07T:schwaemm256256v2
125.99125.99126.20T:tinyjambu128v2
130.05130.11131.87romulusn
135.85135.87136.21T:grain128aeadv2
153.67153.68153.84T:tinyjambu192v2
165.35165.39165.64T:tinyjambu256v2
181.09181.11183.05romulusm
190.30190.35191.76T:isapk128av20
313.55313.64314.14T:elephant200v2
364.49365.02367.04T:isapk128v20
387.67387.96389.77T!!!romulust
723.64729.18750.23T:isapxv20
1463.861466.601533.34T:aes128gcmv1
23454.7023482.7623546.73aes256gcmv1
30446.6930508.5130641.65T:elephant160v2
32348.6032409.5732429.79T:elephant176v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
14.0414.0414.11ascon128av12
20.8920.9021.33ascon128v12
20.9020.9321.36ascon80pqv12
34.2634.2934.37ascon128abi32v12
40.5640.5640.61T:xoodyakround3
48.4948.5049.01ascon128bi32v12
56.3556.3556.44T:giftcofb128v1
64.4164.4364.44T:schwaemm256128v2
75.6475.9577.32T:aes256gcmv1
78.6878.6978.72T:isapa128av20
84.6184.6184.69T:schwaemm192192v2
87.6887.6887.70T:schwaemm128128v2
88.1888.1888.51T:isapa128v20
91.2791.2891.32T:schwaemm256256v2
126.13126.18126.61T:tinyjambu128v2
130.04130.06130.87romulusn
136.81137.03137.28T:grain128aeadv2
153.55153.56153.61T:tinyjambu192v2
165.49165.51165.66T:tinyjambu256v2
181.44181.56183.77romulusm
190.37190.44192.26T:isapk128av20
313.46313.51314.15T:elephant200v2
364.85365.08367.54T:isapk128v20
387.63388.18388.59T!!!romulust
707.94727.33745.07T:isapxv20
1463.671464.661473.32T:aes128gcmv1
23463.6123473.5723575.48aes256gcmv1
30424.3430438.2630520.47T:elephant160v2
32344.2832403.2232482.12T:elephant176v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
14.0414.0414.05ascon128av12
20.9020.9020.93ascon80pqv12
20.89?20.90?39.34?ascon128v12
34.2634.2634.28ascon128abi32v12
40.6540.6540.69T:xoodyakround3
48.4848.4848.51ascon128bi32v12
53.5753.5854.04T:isapa128v20
56.3556.3556.65T:giftcofb128v1
61.0461.0461.06T:isapa128av20
64.4164.4364.66T:schwaemm256128v2
84.6184.6184.85T:schwaemm192192v2
87.6887.6888.36T:schwaemm128128v2
91.2791.2791.30T:schwaemm256256v2
96.1396.6297.45T:aes256gcmv1
126.13126.15126.51T:tinyjambu128v2
130.04130.04130.06romulusn
136.81136.83137.15T:grain128aeadv2
146.58146.61147.67T:isapk128av20
153.55153.56153.61T:tinyjambu192v2
165.50165.54165.85T:tinyjambu256v2
181.43181.44181.75romulusm
201.94201.99203.75T!!!romulust
240.97241.02243.46T:isapk128v20
313.48313.59313.91T:elephant200v2
450.84458.73475.50T:isapxv20
1435.021435.321436.71T:aes128gcmv1
1883.161884.091890.17aes256gcmv1
30444.0230461.4430514.03T:elephant160v2
32333.5932414.2532492.92T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
21.8421.8422.88ascon128av12
28.2128.2129.03ascon128v12
28.9128.9129.62ascon80pqv12
52.0952.0953.02ascon128abi32v12
62.1062.2063.57T:xoodyakround3
67.39?68.19?110.92?ascon128bi32v12
73.27?74.48?123.50?T:giftcofb128v1
105.70105.70106.81T:schwaemm256128v2
113.13113.13113.84T:schwaemm128128v2
137.34137.50137.75T:schwaemm192192v2
141.50141.50142.16T:schwaemm256256v2
148.62148.67148.89T:tinyjambu128v2
151.64151.70152.94T:grain128aeadv2
157.50?158.90?203.93?romulusn
180.47180.47180.67T:tinyjambu192v2
193.54193.54193.82T:tinyjambu256v2
197.84197.84198.63T:isapa128av20
210.36210.48211.47romulusm
361.87365.39383.46T:aes256gcmv1
442.45442.59443.66T:elephant200v2
520.20520.59522.71T!!!romulust
749.66749.68752.06T:isapa128v20
1106.341106.371107.65T:isapk128av20
1648.521649.231649.60T:aes128gcmv1
4270.994271.624308.80T:isapk128v20
6816.036822.107216.37T:isapxv20
33909.3033917.8433945.12aes256gcmv1
40233.3040316.6140359.98T:elephant176v2
40705.0340780.6340904.83T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
22.0922.0923.29ascon128av12
28.2828.2828.90ascon128v12
28.6528.6529.48ascon80pqv12
52.2552.2553.02ascon128abi32v12
59.7359.8360.14T:xoodyakround3
66.60?67.71?114.70?ascon128bi32v12
74.20?74.74?124.59?T:giftcofb128v1
105.95105.95106.41T:schwaemm256128v2
113.22113.22113.33T:schwaemm128128v2
138.06138.06138.27T:schwaemm192192v2
142.20142.20142.48T:schwaemm256256v2
149.02149.02149.12T:tinyjambu128v2
152.98153.04153.87T:grain128aeadv2
157.82?159.15?208.80?romulusn
180.53180.53180.74T:tinyjambu192v2
194.00194.00194.09T:tinyjambu256v2
197.85197.85198.54T:isapa128av20
217.44217.55218.84romulusm
442.76442.76443.49T:elephant200v2
490.24492.60506.99T:aes256gcmv1
520.05520.16521.90T!!!romulust
750.27750.27758.14T:isapa128v20
1107.881108.401120.84T:isapk128av20
1648.881649.161650.94T:aes128gcmv1
4271.784272.884286.43T:isapk128v20
6994.457170.517216.52T:isapxv20
33912.9533920.1634212.39aes256gcmv1
40235.4140306.8040320.78T:elephant176v2
40706.4240736.6340831.34T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
22.0922.0922.19ascon128av12
28.2828.2828.38ascon128v12
28.7628.7628.87ascon80pqv12
52.2852.2852.43ascon128abi32v12
60.3860.4560.67T:xoodyakround3
66.59?66.81?115.16?ascon128bi32v12
74.21?74.25?127.08?T:giftcofb128v1
105.95105.95106.09T:schwaemm256128v2
113.22113.22113.22T:schwaemm128128v2
127.99127.99128.12T:isapa128av20
138.06138.06138.34T:schwaemm192192v2
142.21142.21142.45T:schwaemm256256v2
149.09149.09149.46T:tinyjambu128v2
152.98153.04153.19T:grain128aeadv2
157.86?158.00?204.37?romulusn
180.53180.53180.65T:tinyjambu192v2
194.00194.00194.00T:tinyjambu256v2
217.44217.55217.83romulusm
329.42329.42330.86T!!!romulust
378.30378.34378.96T:isapa128v20
442.73442.73443.26T:elephant200v2
781.97781.98782.66T:isapk128av20
989.68998.911038.46T:aes256gcmv1
1620.281620.421620.99T:aes128gcmv1
2378.382378.682379.56T:isapk128v20
3554.343716.083750.40T:isapxv20
12371.1012379.8812400.11aes256gcmv1
40238.5240318.6640408.88T:elephant176v2
40702.6840705.2140725.06T:elephant160v2