VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Bobcat (500f20); 2011 AMD E-450; 2 x 1650MHz; h4e450, supercop-20250922

[Page version: 20251015 23:20:01]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
13.3013.3113.32ascon128av12
19.8619.8719.88ascon128v12
19.8619.8819.88ascon80pqv12
27.3227.3327.34ascon128abi32v12
39.0039.0039.01ascon128bi32v12
41.7941.8041.82T:schwaemm256128v2
42.9642.9842.99T:xoodyakround3
54.3054.3154.39T:giftcofb128v1
55.2355.3055.92T:schwaemm192192v2
58.5058.5158.51T:schwaemm128128v2
58.1258.7259.28T:aes256gcmv1
61.0261.1761.24T:schwaemm256256v2
77.4977.5178.92T:isapa128v20
78.9979.0179.06T:isapa128av20
93.0193.0293.07T:grain128aeadv2
109.75109.76109.80T:tinyjambu128v2
116.31116.36116.46romulusn
135.13135.14135.58T:tinyjambu192v2
144.00144.00144.01T:tinyjambu256v2
156.27156.33156.78T:isapk128av20
192.12192.27192.88romulusm
206.91207.59208.21T:isapk128v20
317.27318.58319.42T:elephant200v2
393.05393.41394.07T!!!romulust
528.13537.00540.81T:isapxv20
779.19779.77780.10T:aes128gcmv1
18108.7118115.4618116.97T:elephant160v2
18855.3418856.9818862.76T:elephant176v2
37922.0337925.7837931.53aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
13.2713.2713.29ascon128av12
19.8019.8119.82ascon80pqv12
19.8619.8819.98ascon128v12
26.1926.2026.22ascon128abi32v12
39.1139.1239.12ascon128bi32v12
41.1641.2241.39T:xoodyakround3
41.9741.9841.98T:schwaemm256128v2
54.3854.4054.47T:giftcofb128v1
55.2455.2756.08T:schwaemm192192v2
58.5158.5158.52T:schwaemm128128v2
58.0459.0659.96T:aes256gcmv1
61.0261.1261.23T:schwaemm256256v2
77.4777.5077.98T:isapa128v20
79.0079.0379.05T:isapa128av20
99.6399.6799.86T:grain128aeadv2
109.75109.75109.75T:tinyjambu128v2
116.38116.42116.44romulusn
135.01135.01135.03T:tinyjambu192v2
144.00144.00144.01T:tinyjambu256v2
156.27156.34156.74T:isapk128av20
192.02192.16192.70romulusm
206.53207.62208.58T:isapk128v20
318.10318.54319.27T:elephant200v2
393.09393.76394.12T!!!romulust
531.35539.19541.03T:isapxv20
779.71780.25780.38T:aes128gcmv1
18093.1018099.9418102.55T:elephant160v2
18855.4218861.9518864.19T:elephant176v2
37921.9337923.3137929.44aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
13.2713.2913.31ascon128av12
19.8019.8319.83ascon80pqv12
19.8819.8919.90ascon128v12
26.2126.2226.23ascon128abi32v12
38.8638.8738.88T:isapa128v20
39.1339.1339.13ascon128bi32v12
41.3841.4141.46T:xoodyakround3
41.9841.9841.98T:schwaemm256128v2
53.2553.2653.44T:isapa128av20
54.3954.3954.64T:giftcofb128v1
55.2455.2755.99T:schwaemm192192v2
58.5058.5158.51T:schwaemm128128v2
57.3358.9560.36T:aes256gcmv1
61.1261.1361.23T:schwaemm256256v2
99.6399.6499.68T:grain128aeadv2
103.68103.71103.75T:isapk128av20
109.75109.75109.83T:tinyjambu128v2
116.36116.39116.53romulusn
129.48129.56130.55T:isapk128v20
135.00135.02135.50T:tinyjambu192v2
137.12137.18137.96T!!!romulust
144.00144.00144.01T:tinyjambu256v2
191.98192.18192.94romulusm
300.25301.51306.64T:isapxv20
317.23318.76320.08T:elephant200v2
745.82746.15746.59T:aes128gcmv1
745.79746.76755.68aes256gcmv1
18092.9918099.1618100.70T:elephant160v2
18856.4418862.3518865.17T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
13.1813.2013.20ascon128av12
19.8019.8119.82ascon128v12
19.8119.8219.83ascon80pqv12
26.6026.6226.63ascon128abi32v12
32.6232.7132.83T:xoodyakround3
34.3834.5834.80T:aes256gcmv1
38.8038.8138.85ascon128bi32v12
41.5441.5942.33T:schwaemm256128v2
53.9353.9654.12T:giftcofb128v1
54.9654.9755.00T:schwaemm192192v2
58.1058.1358.57T:isapa128v20
58.1958.2558.78T:schwaemm128128v2
60.8760.9261.13T:schwaemm256256v2
66.1166.1366.16T:isapa128av20
88.7488.7688.96T:tinyjambu128v2
91.7492.0192.19T:grain128aeadv2
96.0796.3696.56romulusn
105.29105.32105.35T:tinyjambu192v2
108.09108.32108.48T:tinyjambu256v2
129.98130.01130.63T:isapk128av20
133.93133.97134.38romulusm
168.21168.61169.12T:isapk128v20
238.45238.56238.93T:elephant200v2
265.22265.61266.03T!!!romulust
414.32419.25422.07T:isapxv20
761.99762.77763.14T:aes128gcmv1
13573.5613574.1313582.48T:elephant160v2
14088.5814089.5314093.47T:elephant176v2
19333.7619336.7319344.64aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
13.2013.2113.23ascon128av12
19.8119.8119.84ascon128v12
19.9019.9119.91ascon80pqv12
26.1426.3826.40ascon128abi32v12
31.7131.7431.83T:xoodyakround3
34.5034.9035.38T:aes256gcmv1
39.0639.0639.07ascon128bi32v12
41.6341.6542.25T:schwaemm256128v2
53.9854.0054.12T:giftcofb128v1
54.9654.9755.07T:schwaemm192192v2
58.1358.1458.59T:isapa128v20
58.2258.2258.23T:schwaemm128128v2
60.8560.8760.92T:schwaemm256256v2
66.1366.1566.16T:isapa128av20
88.8788.8989.14T:tinyjambu128v2
95.3195.4995.65T:grain128aeadv2
96.0996.4196.48romulusn
105.50105.52105.55T:tinyjambu192v2
108.13108.15108.29T:tinyjambu256v2
130.00130.03130.30T:isapk128av20
133.83133.92134.20romulusm
168.40168.64168.93T:isapk128v20
238.46238.58239.32T:elephant200v2
265.30265.89266.25T!!!romulust
415.84419.10423.79T:isapxv20
763.01763.12763.37T:aes128gcmv1
13570.3813574.4113578.34T:elephant160v2
14088.5014089.8214093.45T:elephant176v2
19333.5219337.5419342.80aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
13.2113.2113.22ascon128av12
19.8219.8319.86ascon128v12
19.9119.9119.92ascon80pqv12
26.1526.3926.41ascon128abi32v12
31.8331.8631.91T:xoodyakround3
34.1434.6435.19T:aes256gcmv1
38.8138.8238.83T:isapa128v20
39.0639.0739.07ascon128bi32v12
41.6742.0142.13T:schwaemm256128v2
53.2453.2753.29T:isapa128av20
54.0054.0354.12T:giftcofb128v1
54.9554.9755.08T:schwaemm192192v2
58.2258.2558.42T:schwaemm128128v2
60.8660.8660.93T:schwaemm256256v2
88.8788.8889.10T:tinyjambu128v2
95.3395.3695.52T:grain128aeadv2
96.0996.3996.43romulusn
103.66103.70103.85T:isapk128av20
105.49105.51105.73T:tinyjambu192v2
108.12108.13108.18T:tinyjambu256v2
129.52129.54130.05T:isapk128v20
133.86133.94134.35romulusm
137.19137.42137.75T!!!romulust
238.46238.58239.27T:elephant200v2
300.59301.67306.60T:isapxv20
746.05746.13746.41T:aes128gcmv1
746.43747.30755.45aes256gcmv1
13571.4613573.6413574.57T:elephant160v2
14088.9014089.7114093.84T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
10.4710.6811.29T:aes256gcmv1
13.0413.0613.07ascon128av12
19.7419.7519.76ascon128v12
19.7419.7519.76ascon80pqv12
22.3422.4322.46T:xoodyakround3
25.8925.9025.92ascon128abi32v12
38.6238.6238.62ascon128bi32v12
38.7138.7338.79T:isapa128v20
41.2741.2841.31T:schwaemm256128v2
53.2453.2553.27T:isapa128av20
53.5653.6053.62T:giftcofb128v1
54.5654.6554.75T:schwaemm192192v2
57.8757.9459.07T:schwaemm128128v2
60.5960.6060.63T:schwaemm256256v2
67.7567.7567.76T:tinyjambu128v2
72.2572.2572.30T:tinyjambu256v2
75.4975.5175.52T:tinyjambu192v2
75.6775.7175.77romulusm
75.8075.8375.91romulusn
90.9891.0191.16T:grain128aeadv2
103.62103.68103.81T:isapk128av20
129.48129.54130.27T:isapk128v20
136.80137.16137.53T!!!romulust
159.72159.74160.00T:elephant200v2
302.16303.89304.79T:isapxv20
745.15746.07746.37T:aes128gcmv1
745.36746.38756.74aes256gcmv1
9046.729048.099057.09T:elephant160v2
9321.409323.779325.67T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
10.4410.8611.28T:aes256gcmv1
13.1013.1313.15ascon128av12
19.7419.7419.75ascon128v12
20.0020.0020.01ascon80pqv12
22.2522.2722.45T:xoodyakround3
26.5426.5526.58ascon128abi32v12
38.7338.7538.80T:isapa128v20
38.9838.9939.00ascon128bi32v12
41.2741.2841.28T:schwaemm256128v2
53.2553.2853.31T:isapa128av20
53.5753.5953.62T:giftcofb128v1
54.5854.6654.70T:schwaemm192192v2
57.9357.9357.94T:schwaemm128128v2
60.5860.6360.64T:schwaemm256256v2
68.0068.0068.01T:tinyjambu128v2
72.2572.2572.26T:tinyjambu256v2
75.5075.5175.53T:tinyjambu192v2
75.6675.7975.84romulusm
75.8375.9075.99romulusn
90.9991.0291.04T:grain128aeadv2
103.62103.69104.05T:isapk128av20
129.46129.49130.24T:isapk128v20
136.74136.84138.32T!!!romulust
159.77159.81159.81T:elephant200v2
300.39301.60306.73T:isapxv20
745.88746.20746.49T:aes128gcmv1
745.45746.31756.06aes256gcmv1
9045.799047.969050.97T:elephant160v2
9320.979323.279324.35T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
10.04?10.98?11.87?T:aes256gcmv1
13.1213.1413.15ascon128av12
19.7419.7519.77ascon128v12
20.0020.0120.02ascon80pqv12
22.4322.4422.45T:xoodyakround3
26.1126.5726.60ascon128abi32v12
38.7538.7638.81T:isapa128v20
39.0039.0139.01ascon128bi32v12
41.2741.2841.28T:schwaemm256128v2
53.2553.2753.29T:isapa128av20
53.5953.6053.62T:giftcofb128v1
54.6054.6654.67T:schwaemm192192v2
57.9357.9357.94T:schwaemm128128v2
60.5660.5960.59T:schwaemm256256v2
68.0068.0068.00T:tinyjambu128v2
72.2572.2572.25T:tinyjambu256v2
75.5175.5275.53T:tinyjambu192v2
75.6475.7475.81romulusm
75.8275.8375.97romulusn
91.0391.0591.14T:grain128aeadv2
103.66103.68103.73T:isapk128av20
129.44129.52130.53T:isapk128v20
136.75136.84137.57T!!!romulust
159.77159.81159.82T:elephant200v2
300.37301.78306.71T:isapxv20
745.84746.14746.35T:aes128gcmv1
745.59747.08755.93aes256gcmv1
9047.829048.399048.93T:elephant160v2
9320.949322.689324.09T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
13.5113.5213.53ascon128av12
20.1020.1120.12ascon128v12
20.1120.1220.43ascon80pqv12
27.2127.2227.23ascon128abi32v12
32.9933.0533.06T:xoodyakround3
39.4339.4539.45ascon128bi32v12
42.8042.8542.87T:schwaemm256128v2
43.4743.5743.62T:aes256gcmv1
54.6054.6054.64T:giftcofb128v1
56.2056.2256.29T:schwaemm192192v2
58.9959.0161.84T:schwaemm128128v2
62.5262.5362.59T:schwaemm256256v2
70.6470.6570.67T:isapa128av20
84.8684.8885.38T:isapa128v20
89.4489.4589.46T:tinyjambu128v2
92.3692.3792.62T:grain128aeadv2
96.9896.9897.13romulusn
106.11106.12106.39T:tinyjambu192v2
108.93108.94109.38T:tinyjambu256v2
134.91134.94134.99romulusm
155.61155.62155.87T:isapk128av20
243.54243.61244.07T:elephant200v2
269.04269.38269.57T!!!romulust
307.27307.33308.16T:isapk128v20
679.56682.77685.77T:isapxv20
766.41767.04767.80T:aes128gcmv1
13723.9613727.0713728.36T:elephant160v2
14196.7914197.3514200.99T:elephant176v2
19725.0419728.8919734.20aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
13.5213.5313.53ascon128av12
20.1120.1220.12ascon128v12
20.2120.2120.21ascon80pqv12
26.7726.9826.99ascon128abi32v12
32.0932.1032.12T:xoodyakround3
39.6939.6939.70ascon128bi32v12
42.9542.9542.98T:schwaemm256128v2
47.6148.1548.43T:aes256gcmv1
54.6454.6454.66T:giftcofb128v1
56.2056.2456.29T:schwaemm192192v2
59.0159.0362.20T:schwaemm128128v2
62.5362.5462.56T:schwaemm256256v2
70.6370.6470.67T:isapa128av20
84.8884.8885.20T:isapa128v20
89.5789.5889.61T:tinyjambu128v2
95.9295.9396.36T:grain128aeadv2
97.0397.0697.13romulusn
106.31106.33106.37T:tinyjambu192v2
108.95108.96109.01T:tinyjambu256v2
135.06135.10135.14romulusm
155.63155.64155.69T:isapk128av20
243.54243.61244.59T:elephant200v2
269.02269.41269.72T!!!romulust
307.32307.35307.88T:isapk128v20
680.84683.22687.40T:isapxv20
767.35767.45767.69T:aes128gcmv1
13727.7213728.7413735.67T:elephant160v2
14196.7114197.2614202.55T:elephant176v2
19725.2219729.8119734.39aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
13.5213.5213.52ascon128av12
20.1120.1120.12ascon128v12
20.2120.2120.21ascon80pqv12
26.7726.9826.99ascon128abi32v12
32.1932.2132.22T:xoodyakround3
39.6839.6839.69ascon128bi32v12
42.8742.9542.95T:schwaemm256128v2
52.4052.4052.43T:isapa128v20
54.6454.6454.67T:giftcofb128v1
55.8655.8655.87T:isapa128av20
56.2056.2056.28T:schwaemm192192v2
59.0059.0160.51T:schwaemm128128v2
60.4860.7961.18T:aes256gcmv1
62.5362.5462.61T:schwaemm256256v2
89.5789.5789.68T:tinyjambu128v2
95.9195.9396.27T:grain128aeadv2
97.0397.1397.17romulusn
106.30106.31106.33T:tinyjambu192v2
108.94108.94108.97T:tinyjambu256v2
121.40121.43121.57T:isapk128av20
135.05135.10135.43romulusm
140.89141.42141.60T!!!romulust
204.13204.15204.60T:isapk128v20
243.54244.03244.63T:elephant200v2
436.37436.83441.46T:isapxv20
750.39750.46750.91T:aes128gcmv1
1138.011138.521146.11aes256gcmv1
13727.0213727.5913730.29T:elephant160v2
14196.7614197.0314201.05T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
20.6520.8121.16ascon128av12
26.8826.9527.27ascon80pqv12
26.8927.0527.13ascon128v12
40.6540.8741.04ascon128abi32v12
49.4449.7350.11T:xoodyakround3
53.6553.8154.09ascon128bi32v12
69.0869.3069.88T:giftcofb128v1
70.9371.1771.26T:schwaemm256128v2
76.6276.8477.15T:schwaemm128128v2
91.9592.0792.08T:schwaemm192192v2
100.35100.41100.49T:schwaemm256256v2
105.35105.52105.69T:grain128aeadv2
105.48105.59105.70T:tinyjambu128v2
117.57117.78118.10romulusn
124.23124.34124.72T:tinyjambu192v2
127.45127.58127.88T:tinyjambu256v2
156.09156.96157.68romulusm
173.49173.77174.05T:isapa128av20
245.44247.74251.28T:aes256gcmv1
345.12345.25346.11T:elephant200v2
362.51363.68364.67T!!!romulust
699.52699.94700.63T:isapa128v20
717.53717.81718.47T:isapk128av20
865.18865.60865.70T:aes128gcmv1
3463.303463.663472.72T:isapk128v20
6664.456676.246713.88T:isapxv20
17685.0917694.8617697.41T:elephant176v2
18388.2018393.6018405.13T:elephant160v2
28730.0528734.7128744.84aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
20.5420.7821.10ascon128av12
27.0127.1327.27ascon128v12
27.1527.3827.65ascon80pqv12
40.5941.0241.38ascon128abi32v12
48.0948.3448.51T:xoodyakround3
54.1154.3054.55ascon128bi32v12
69.1869.4069.80T:giftcofb128v1
71.1671.2171.27T:schwaemm256128v2
76.9076.9477.05T:schwaemm128128v2
92.1492.1694.29T:schwaemm192192v2
100.69100.77100.88T:schwaemm256256v2
105.60105.60105.86T:tinyjambu128v2
108.69108.90109.12T:grain128aeadv2
117.80118.05118.39romulusn
124.47124.61124.79T:tinyjambu192v2
127.68127.98128.01T:tinyjambu256v2
161.19161.79162.62romulusm
173.18173.44173.54T:isapa128av20
340.22345.10349.39T:aes256gcmv1
344.84345.70345.75T:elephant200v2
361.70362.62363.59T!!!romulust
699.59699.88713.25T:isapa128v20
717.47717.70718.56T:isapk128av20
865.80866.06866.37T:aes128gcmv1
3463.583464.363475.33T:isapk128v20
6684.176695.136696.73T:isapxv20
17682.4717688.2217693.01T:elephant176v2
18389.7818392.3718402.31T:elephant160v2
28723.9728730.7028735.91aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
20.3220.5220.67ascon128av12
26.7026.7726.92ascon128v12
26.7926.8027.01ascon80pqv12
40.2040.3440.34ascon128abi32v12
48.3848.4048.57T:xoodyakround3
53.7553.7753.90ascon128bi32v12
69.1869.1869.59T:giftcofb128v1
71.1271.1571.20T:schwaemm256128v2
76.7876.9376.94T:schwaemm128128v2
92.0292.1694.12T:schwaemm192192v2
100.69100.69100.77T:schwaemm256256v2
105.60105.60106.05T:tinyjambu128v2
108.60108.77109.26T:grain128aeadv2
115.05115.31115.57T:isapa128av20
117.89117.91117.99romulusn
124.41124.45124.47T:tinyjambu192v2
127.66127.66127.68T:tinyjambu256v2
161.14161.26162.40romulusm
229.80230.16231.08T!!!romulust
344.84345.12345.70T:elephant200v2
364.70364.88365.06T:isapa128v20
507.42508.03508.45T:isapk128av20
650.72655.55687.59T:aes256gcmv1
848.60848.96850.26T:aes128gcmv1
1893.071893.171903.23T:isapk128v20
3488.063490.473496.23T:isapxv20
10132.8810140.0910148.49aes256gcmv1
17685.1117688.3117694.32T:elephant176v2
18391.3718397.7318402.24T:elephant160v2