VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Sandy Bridge (206a7); 2011 Intel Core i3-2310M; 2 x 2100MHz; h6sandy, supercop-20240909

[Page version: 20240912 11:46:31]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
8.238.458.57T:aes128gcmv1
10.1310.1410.16ascon128av12
10.5810.9311.07T:aes256gcmv1
14.9514.9915.01ascon80pqv12
14.9714.9915.02ascon128v12
18.1718.2218.27T:xoodyakround3
18.8718.9018.93ascon128abi32v12
27.2027.2827.33T:schwaemm256128v2
27.9427.9928.33ascon128bi32v12
28.9528.9829.01T:grain128aeadv2
34.9234.9735.00T:schwaemm256256v2
35.9035.9536.03T:schwaemm192192v2
38.7038.7638.85T:schwaemm128128v2
39.0239.0839.13romulusn
48.5748.6048.64T:giftcofb128v1
56.7656.8557.18T:isapa128v20
59.5259.5759.60T:tinyjambu128v2
61.1861.2361.46T:isapa128av20
63.1663.1963.25romulusm
71.9572.0072.03T:tinyjambu192v2
73.5173.5573.61T:tinyjambu256v2
107.52107.87108.01T:isapk128av20
126.40126.52126.67romulust
143.56144.08144.34T:isapk128v20
195.27195.39195.52T:elephant200v2
197.95?210.77?225.71?T:isapxv20
11121.7211123.8511152.25T:elephant176v2
12776.1912777.2112778.00T:elephant160v2
25733.2025739.2825750.91aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
8.348.488.55T:aes128gcmv1
10.0110.0410.07ascon128av12
10.6310.9411.07T:aes256gcmv1
14.9614.9915.03ascon80pqv12
15.0015.0315.06ascon128v12
18.1518.1818.24T:xoodyakround3
18.2518.2718.31ascon128abi32v12
27.1627.2327.33T:schwaemm256128v2
27.4827.5027.53ascon128bi32v12
29.9830.0430.07T:grain128aeadv2
35.0235.0335.22T:schwaemm256256v2
35.8635.9236.02T:schwaemm192192v2
38.6838.7538.84T:schwaemm128128v2
39.2539.3039.33romulusn
48.6248.6848.74T:giftcofb128v1
56.6656.7556.89T:isapa128v20
59.6859.8059.89T:tinyjambu128v2
61.2561.3461.39T:isapa128av20
63.2763.3563.40romulusm
72.1772.2372.34T:tinyjambu192v2
74.1174.1974.27T:tinyjambu256v2
107.55107.82108.10T:isapk128av20
126.46126.58126.67romulust
143.47143.75144.23T:isapk128v20
195.33195.42195.53T:elephant200v2
210.70211.45211.56T:isapxv20
11122.0211124.9711151.69T:elephant176v2
12776.0312776.9012777.83T:elephant160v2
25737.4325738.2925751.71aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
8.358.478.55T:aes128gcmv1
10.0210.0410.06ascon128av12
10.8310.9611.41T:aes256gcmv1
14.9614.9915.01ascon80pqv12
14.9915.0115.03ascon128v12
18.2018.2718.37T:xoodyakround3
18.2418.2718.32ascon128abi32v12
27.1727.2527.29T:schwaemm256128v2
27.4527.4827.51ascon128bi32v12
27.8927.9828.02T:isapa128v20
29.9930.0230.06T:grain128aeadv2
35.0235.0335.17T:schwaemm256256v2
35.8835.9436.04T:schwaemm192192v2
38.6938.7438.84T:schwaemm128128v2
39.2839.3339.37romulusn
41.6741.7341.83T:isapa128av20
43.3543.4243.50romulust
48.6248.6748.75T:giftcofb128v1
59.7759.8159.85T:tinyjambu128v2
63.3263.3663.40romulusm
71.2171.4371.90T:isapk128av20
72.1772.2472.30T:tinyjambu192v2
74.1174.1674.31T:tinyjambu256v2
89.1489.3389.83T:isapk128v20
124.10124.86124.97T:isapxv20
195.33195.42195.66T:elephant200v2
364.07364.82365.40aes256gcmv1
11122.5011125.4911151.99T:elephant176v2
12776.1612777.1312778.08T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
5.135.215.29T:aes128gcmv1
6.206.356.57T:aes256gcmv1
10.0210.0410.06ascon128av12
13.7113.8013.97T:xoodyakround3
14.8614.8714.89ascon80pqv12
14.9514.9614.97ascon128v12
18.5418.5718.58ascon128abi32v12
27.0327.0827.12T:schwaemm256128v2
27.6327.6727.85ascon128bi32v12
28.9328.9728.98T:grain128aeadv2
31.5831.6931.85romulusn
34.6934.7734.80T:schwaemm256256v2
35.7435.8335.91T:schwaemm192192v2
38.6238.6638.73T:schwaemm128128v2
42.2742.4542.62T:isapa128v20
43.5943.6043.65romulusm
48.0248.0548.07T:tinyjambu128v2
48.5448.5748.64T:giftcofb128v1
51.5051.5351.58T:isapa128av20
55.3055.3455.37T:tinyjambu256v2
55.9355.9555.98T:tinyjambu192v2
84.7684.8385.03romulust
89.6489.8089.89T:isapk128av20
116.55116.80116.98T:isapk128v20
146.22146.28146.43T:elephant200v2
160.93167.39175.41T:isapxv20
8310.658312.188332.28T:elephant176v2
9580.569581.149581.62T:elephant160v2
13051.3013051.6013052.36aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
5.075.165.31T:aes128gcmv1
6.266.376.58T:aes256gcmv1
9.9810.0010.03ascon128av12
13.7313.7913.85T:xoodyakround3
14.9014.9114.93ascon80pqv12
14.9214.9414.97ascon128v12
18.2418.2618.28ascon128abi32v12
27.0427.0927.15T:schwaemm256128v2
27.3927.4127.44ascon128bi32v12
29.3029.3429.38T:grain128aeadv2
31.6931.7931.98romulusn
34.7434.7634.79T:schwaemm256256v2
35.7135.7635.87T:schwaemm192192v2
38.4738.5538.63T:schwaemm128128v2
42.2242.4442.60T:isapa128v20
43.6443.6943.72romulusm
48.1048.1548.20T:tinyjambu128v2
48.5648.6348.69T:giftcofb128v1
51.5751.6551.71T:isapa128av20
55.6255.6755.72T:tinyjambu256v2
56.1256.1656.21T:tinyjambu192v2
84.7284.8684.90romulust
89.6789.8089.94T:isapk128av20
116.55116.82117.16T:isapk128v20
146.23146.29146.34T:elephant200v2
167.51167.96168.20T:isapxv20
8310.538312.158332.82T:elephant176v2
9580.579581.119582.06T:elephant160v2
13051.0313051.4513052.26aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
5.085.145.29T:aes128gcmv1
6.296.386.57T:aes256gcmv1
9.9910.0010.02ascon128av12
13.7213.8213.87T:xoodyakround3
14.8814.9114.93ascon80pqv12
14.9314.9414.99ascon128v12
18.2418.2618.28ascon128abi32v12
27.0227.0627.12T:schwaemm256128v2
27.3927.4227.44ascon128bi32v12
27.8828.0128.14T:isapa128v20
29.3329.3629.38T:grain128aeadv2
31.6831.8032.01romulusn
34.7434.7734.78T:schwaemm256256v2
35.7335.7635.83T:schwaemm192192v2
38.5138.5438.60T:schwaemm128128v2
41.7841.8241.87T:isapa128av20
43.1743.2343.32romulust
43.6443.6643.69romulusm
48.0948.1548.19T:tinyjambu128v2
48.5448.5848.64T:giftcofb128v1
55.5955.6455.71T:tinyjambu256v2
56.1456.1856.22T:tinyjambu192v2
71.5371.6071.70T:isapk128av20
89.2489.3589.48T:isapk128v20
124.08124.84124.88T:isapxv20
146.24146.28146.34T:elephant200v2
364.28364.67365.40aes256gcmv1
8310.808312.528332.89T:elephant176v2
9580.739581.129581.70T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
1.721.801.87T:aes256gcmv1
1.701.821.87T:aes128gcmv1
9.179.249.30T:xoodyakround3
9.899.929.94ascon128av12
14.7314.7614.78ascon80pqv12
14.8814.8914.93ascon128v12
18.2218.2318.26ascon128abi32v12
24.0124.0324.08romulusm
24.0724.3124.67romulusn
26.8026.8326.91T:schwaemm256128v2
27.3227.3727.39ascon128bi32v12
27.9328.0128.04T:isapa128v20
28.9128.9428.98T:grain128aeadv2
34.4334.4634.49T:schwaemm256256v2
35.5935.7235.75T:schwaemm192192v2
36.4936.5336.57T:tinyjambu128v2
37.1037.1437.18T:tinyjambu256v2
38.4538.5238.71T:schwaemm128128v2
39.8939.9339.96T:tinyjambu192v2
41.8841.9241.99T:isapa128av20
43.0043.0843.27romulust
48.5148.5548.61T:giftcofb128v1
71.5171.6471.76T:isapk128av20
89.2489.4189.54T:isapk128v20
97.7897.8297.95T:elephant200v2
123.97124.03124.87T:isapxv20
364.34365.47366.29aes256gcmv1
5495.715498.405510.57T:elephant176v2
6384.846385.406386.16T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
1.731.801.85T:aes256gcmv1
1.721.821.90T:aes128gcmv1
9.179.239.29T:xoodyakround3
9.919.939.97ascon128av12
14.7814.8114.83ascon80pqv12
14.8514.8814.90ascon128v12
18.2118.2318.25ascon128abi32v12
24.0224.0424.09romulusm
24.0124.2624.62romulusn
26.8626.8826.96T:schwaemm256128v2
27.3327.3727.40ascon128bi32v12
27.9428.0228.07T:isapa128v20
28.6628.7028.74T:grain128aeadv2
34.4334.4834.49T:schwaemm256256v2
35.5635.6335.70T:schwaemm192192v2
36.4836.5136.55T:tinyjambu128v2
37.1037.1537.17T:tinyjambu256v2
38.2838.3538.54T:schwaemm128128v2
40.0140.0840.12T:tinyjambu192v2
41.8741.9141.96T:isapa128av20
42.9643.0743.18romulust
48.5348.5648.62T:giftcofb128v1
71.4671.5771.83T:isapk128av20
89.1989.3989.52T:isapk128v20
97.7797.8197.87T:elephant200v2
124.11124.76124.85T:isapxv20
364.23364.83365.79aes256gcmv1
5495.395496.895510.26T:elephant176v2
6384.836385.606386.15T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
1.731.791.87T:aes256gcmv1
1.701.791.83T:aes128gcmv1
9.219.279.33T:xoodyakround3
9.929.949.97ascon128av12
14.7814.8114.83ascon80pqv12
14.8814.9014.92ascon128v12
18.2018.2218.24ascon128abi32v12
24.0124.0424.07romulusm
24.0524.2824.67romulusn
26.8727.0427.09T:schwaemm256128v2
27.3327.3727.40ascon128bi32v12
27.9728.0228.09T:isapa128v20
28.6728.6928.86T:grain128aeadv2
34.4634.4834.50T:schwaemm256256v2
35.5935.6735.74T:schwaemm192192v2
36.4236.4736.55T:tinyjambu128v2
37.1337.1737.21T:tinyjambu256v2
38.3638.4038.49T:schwaemm128128v2
40.0340.0940.12T:tinyjambu192v2
41.8641.9141.95T:isapa128av20
43.0243.0743.15romulust
48.5248.5648.62T:giftcofb128v1
71.4471.6271.71T:isapk128av20
89.1789.3089.53T:isapk128v20
97.7697.8297.90T:elephant200v2
124.53124.82124.88T:isapxv20
364.34364.92365.38aes256gcmv1
5494.745497.625510.96T:elephant176v2
6384.836385.446386.32T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
6.957.047.06T:aes128gcmv1
8.348.368.64T:aes256gcmv1
10.2810.2810.30ascon128av12
13.9314.0614.09T:xoodyakround3
15.0915.1015.11ascon80pqv12
15.1815.1915.19ascon128v12
18.9919.0019.02ascon128abi32v12
27.8527.8727.89T:schwaemm256128v2
28.0528.0928.24ascon128bi32v12
29.4329.4529.47T:grain128aeadv2
31.8731.9932.18romulusn
35.6535.6935.72T:schwaemm256256v2
36.5936.6336.67T:schwaemm192192v2
39.0939.1139.19T:schwaemm128128v2
43.9043.9343.97romulusm
48.4148.4248.45T:tinyjambu128v2
49.0549.0949.11T:giftcofb128v1
54.8354.8554.89T:isapa128av20
55.7155.7655.78T:tinyjambu256v2
56.3656.3856.41T:tinyjambu192v2
62.2162.2862.46T:isapa128v20
86.1086.1486.24romulust
103.58103.64103.72T:isapk128av20
149.36149.38149.48T:elephant200v2
206.61206.70206.90T:isapk128v20
273.48273.74282.75T:isapxv20
8374.928375.698394.31T:elephant176v2
9688.649689.069689.71T:elephant160v2
13318.9913343.4613348.47aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
6.977.027.05T:aes128gcmv1
8.368.398.62T:aes256gcmv1
10.2310.2410.30ascon128av12
13.9013.9513.98T:xoodyakround3
15.1315.1415.15ascon80pqv12
15.1615.1815.19ascon128v12
18.6818.7018.72ascon128abi32v12
27.8027.8127.83ascon128bi32v12
27.8527.8927.94T:schwaemm256128v2
29.8129.8329.86T:grain128aeadv2
32.0032.1032.30romulusn
35.6835.6935.72T:schwaemm256256v2
36.5536.5836.61T:schwaemm192192v2
39.0039.0539.12T:schwaemm128128v2
44.0344.0544.07romulusm
48.5148.5448.57T:tinyjambu128v2
49.0849.1149.17T:giftcofb128v1
54.8954.9655.00T:isapa128av20
56.0556.0856.14T:tinyjambu256v2
56.5656.6356.67T:tinyjambu192v2
62.2062.2562.42T:isapa128v20
86.0786.1286.29romulust
103.64103.67103.74T:isapk128av20
149.32149.38149.42T:elephant200v2
206.59206.71206.85T:isapk128v20
273.29273.39273.67T:isapxv20
8374.418375.418394.55T:elephant176v2
9689.049689.389689.56T:elephant160v2
13318.5613342.4113346.30aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
6.987.027.25T:aes128gcmv1
8.358.428.63T:aes256gcmv1
10.2310.2410.26ascon128av12
13.8513.9013.97T:xoodyakround3
15.1115.1315.15ascon80pqv12
15.1515.1715.20ascon128v12
18.6818.6918.71ascon128abi32v12
27.8027.8127.83ascon128bi32v12
27.8327.8727.93T:schwaemm256128v2
29.8129.8329.88T:grain128aeadv2
32.0232.0932.32romulusn
35.6735.6935.72T:schwaemm256256v2
36.6036.6436.69T:schwaemm192192v2
38.0138.0538.16T:isapa128v20
38.9939.0439.11T:schwaemm128128v2
43.7043.7343.76T:isapa128av20
44.0144.0444.05romulusm
44.4544.4944.54romulust
48.5048.5248.55T:tinyjambu128v2
49.0949.1249.17T:giftcofb128v1
56.0656.1056.13T:tinyjambu256v2
56.5656.6056.65T:tinyjambu192v2
80.4280.4580.53T:isapk128av20
136.41136.50136.62T:isapk128v20
149.35149.38149.41T:elephant200v2
178.31178.73178.77T:isapxv20
630.84632.15632.79aes256gcmv1
8375.188375.568394.27T:elephant176v2
9688.949689.089689.62T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
15.8415.9916.28ascon128av12
20.1320.1720.38ascon128v12
20.0920.2020.44ascon80pqv12
20.2420.6820.80T:xoodyakround3
28.3828.6228.99ascon128abi32v12
36.7736.9837.67ascon128bi32v12
38.7138.9639.16romulusn
40.2040.2840.50T:grain128aeadv2
45.2845.4546.05T:schwaemm256128v2
50.1350.3050.73T:schwaemm128128v2
50.8851.0551.27romulusm
56.4756.6056.79T:schwaemm256256v2
56.7956.9857.27T:tinyjambu128v2
59.2259.5560.06T:schwaemm192192v2
59.0259.8061.12T:aes128gcmv1
60.2960.4060.80T:giftcofb128v1
65.0965.2365.41T:tinyjambu256v2
65.8966.3366.58T:tinyjambu192v2
67.0267.3869.50T:aes256gcmv1
115.64115.79116.77romulust
130.38131.02131.42T:isapa128av20
211.42211.62212.12T:elephant200v2
401.06402.73404.69T:isapk128av20
517.01519.48522.20T:isapa128v20
2242.212244.392246.48T:isapk128v20
2679.132690.662876.78T:isapxv20
10429.0010432.9610450.43T:elephant176v2
12972.1512974.5212978.81T:elephant160v2
19440.4919446.7519457.74aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
15.8516.0316.43ascon128av12
20.0920.2420.61ascon80pqv12
20.2520.3420.48ascon128v12
20.3920.6220.91T:xoodyakround3
28.3028.5728.85ascon128abi32v12
36.7836.8737.59ascon128bi32v12
38.8338.9939.09romulusn
40.6640.7741.09T:grain128aeadv2
45.5545.6446.08T:schwaemm256128v2
50.1250.3650.67T:schwaemm128128v2
52.2752.4852.77romulusm
56.4356.5956.78T:schwaemm256256v2
57.1757.4157.56T:tinyjambu128v2
58.4558.9660.73T:aes128gcmv1
59.1759.3059.59T:schwaemm192192v2
60.6660.9161.07T:giftcofb128v1
65.7066.0366.09T:tinyjambu256v2
66.2066.3366.52T:tinyjambu192v2
66.6467.1268.41T:aes256gcmv1
115.73116.00116.30romulust
130.55130.91131.14T:isapa128av20
211.33211.53211.77T:elephant200v2
399.98401.19403.52T:isapk128av20
516.32516.95522.40T:isapa128v20
2242.012244.452247.06T:isapk128v20
2668.452668.922675.00T:isapxv20
10429.2010432.8010450.20T:elephant176v2
12974.1412975.3412981.05T:elephant160v2
19440.7719442.6519448.50aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
15.7515.8315.93ascon128av12
20.1320.2020.58ascon80pqv12
20.1820.2620.45ascon128v12
20.3420.4820.82T:xoodyakround3
28.1528.2428.38ascon128abi32v12
36.7336.8937.22ascon128bi32v12
38.6838.8439.20romulusn
40.5240.6440.76T:grain128aeadv2
45.3545.5145.84T:schwaemm256128v2
50.0750.2250.66T:schwaemm128128v2
52.1652.2652.39romulusm
56.6256.6656.70T:schwaemm256256v2
57.1157.2657.40T:tinyjambu128v2
58.0958.7759.41T:aes128gcmv1
59.0859.2359.36T:schwaemm192192v2
60.7060.8460.98T:giftcofb128v1
65.5565.7565.78T:tinyjambu256v2
66.0866.2766.37T:tinyjambu192v2
66.8467.6668.22T:aes256gcmv1
73.2973.4673.73romulust
86.8487.2787.57T:isapa128av20
211.22211.47212.25T:elephant200v2
268.27268.88272.16T:isapa128v20
268.45269.23269.64T:isapk128av20
1198.521199.191199.80T:isapk128v20
1395.841396.061396.59T:isapxv20
6754.456755.086755.92aes256gcmv1
10430.2110432.1210449.22T:elephant176v2
12973.4412977.6912981.06T:elephant160v2