VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20240909

[Page version: 20240912 11:46:31]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.37?0.43?0.47?T:aes128gcmv1
0.42?0.47?0.51?T:aes256gcmv1
5.315.315.31ascon128av12
7.497.517.51ascon80pqv12
7.757.757.76ascon128v12
11.6911.7111.75T:xoodyakround3
12.3712.3812.39ascon128abi32v12
17.3717.4117.48T:schwaemm256128v2
17.5617.5717.59T:grain128aeadv2
18.4518.5118.58ascon128bi32v12
23.7823.8523.89T:schwaemm192192v2
24.5024.5424.62T:schwaemm256256v2
25.6825.6925.75T:isapa128av20
27.0127.1527.24T:schwaemm128128v2
30.7430.7530.77T:giftcofb128v1
33.6133.6433.66T:isapa128v20
41.1642.0942.12romulusn
46.1847.9648.69T:isapk128av20
64.0864.3264.83romulusm
71.9471.9972.18T:isapk128v20
73.2473.2573.25T:tinyjambu128v2
82.7482.7482.75T:tinyjambu192v2
91.2491.2591.26T:tinyjambu256v2
133.64133.88134.01romulust
140.35141.05141.25T:isapxv20
188.64188.87191.02T:elephant200v2
298.16299.82319.24aes256gcmv1
6386.896387.706388.40T:elephant176v2
7245.017258.857277.28T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.41?0.44?0.50?T:aes128gcmv1
0.45?0.51?0.55?T:aes256gcmv1
5.305.315.32ascon128av12
7.617.627.64ascon128v12
8.008.018.01ascon80pqv12
11.6811.7011.78T:xoodyakround3
12.4412.4412.46ascon128abi32v12
17.3917.4517.56T:schwaemm256128v2
17.6117.6217.66T:grain128aeadv2
18.4818.5018.52ascon128bi32v12
23.7623.8123.95T:schwaemm192192v2
24.4224.4624.50T:schwaemm256256v2
26.6626.7026.75T:isapa128av20
27.0127.1627.29T:schwaemm128128v2
31.0631.0731.08T:giftcofb128v1
33.6033.6433.68T:isapa128v20
41.5041.5141.68romulusn
46.1646.5546.63T:isapk128av20
64.4865.2365.61romulusm
71.5571.6371.87T:isapk128v20
73.4973.4973.51T:tinyjambu128v2
82.9982.9983.00T:tinyjambu192v2
91.4991.5091.51T:tinyjambu256v2
133.73133.90134.03romulust
140.53140.88141.23T:isapxv20
188.69188.98190.91T:elephant200v2
295.20317.33320.07aes256gcmv1
6387.546387.996389.49T:elephant176v2
7269.587274.997282.54T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.41?0.44?0.48?T:aes128gcmv1
0.45?0.48?0.52?T:aes256gcmv1
5.315.315.32ascon128av12
7.637.637.64ascon128v12
8.018.018.01ascon80pqv12
11.7111.7811.80T:xoodyakround3
12.4312.4512.45ascon128abi32v12
15.8515.9015.91T:isapa128v20
17.4417.5017.55T:schwaemm256128v2
17.6017.6217.64T:grain128aeadv2
17.7217.7317.80T:isapa128av20
18.5018.5018.50ascon128bi32v12
23.7223.8224.01T:schwaemm192192v2
24.3924.4324.93T:schwaemm256256v2
27.0527.1927.33T:schwaemm128128v2
30.7430.8932.10T:isapk128av20
31.0631.0631.08T:giftcofb128v1
41.4841.5942.48romulusn
44.4044.4844.61romulust
45.0145.1845.27T:isapk128v20
65.0665.4565.53romulusm
73.5073.5073.51T:tinyjambu128v2
83.0083.0083.00T:tinyjambu192v2
84.1584.6184.71T:isapxv20
91.5091.5091.51T:tinyjambu256v2
188.64188.93190.98T:elephant200v2
288.98?304.56?325.11?aes256gcmv1
6386.816388.466393.32T:elephant176v2
7254.217262.677273.91T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.330.350.36T:aes128gcmv1
0.350.370.38T:aes256gcmv1
5.285.295.30ascon128av12
7.507.517.51ascon80pqv12
7.637.637.64ascon128v12
8.818.848.85T:xoodyakround3
12.4412.4612.46ascon128abi32v12
17.3117.3417.37T:schwaemm256128v2
17.5017.5117.54T:grain128aeadv2
18.3718.3918.43ascon128bi32v12
21.7121.7721.79T:isapa128av20
23.7623.8223.89T:schwaemm192192v2
24.4824.5424.92T:schwaemm256256v2
24.9524.9624.96T:isapa128v20
26.9227.0027.05T:schwaemm128128v2
30.9831.0031.03T:giftcofb128v1
32.4032.4732.72romulusn
38.4938.7740.10T:isapk128av20
44.0444.0744.11romulusm
57.5757.6157.69T:isapk128v20
59.7559.7559.75T:tinyjambu128v2
64.7564.7664.78T:tinyjambu192v2
68.7468.7568.76T:tinyjambu256v2
89.1589.2289.28romulust
112.63112.68113.00T:isapxv20
141.48141.66143.36T:elephant200v2
296.90301.08316.61aes256gcmv1
4764.434770.794771.09T:elephant176v2
5436.875462.915472.18T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.31?0.35?0.38?T:aes128gcmv1
0.35?0.37?0.40?T:aes256gcmv1
5.275.285.30ascon128av12
7.627.637.64ascon128v12
7.817.827.82ascon80pqv12
8.778.818.84T:xoodyakround3
12.4712.4712.48ascon128abi32v12
17.3517.4317.50T:schwaemm256128v2
17.5517.5717.58T:grain128aeadv2
18.5118.5318.56ascon128bi32v12
22.2122.2122.24T:isapa128av20
23.7723.8423.88T:schwaemm192192v2
24.4624.5224.56T:schwaemm256256v2
24.9424.9624.97T:isapa128v20
26.9727.0527.13T:schwaemm128128v2
31.1731.1731.18T:giftcofb128v1
32.5732.6732.85romulusn
39.8640.1040.35T:isapk128av20
43.7443.8243.97romulusm
57.4757.5957.65T:isapk128v20
59.8759.8859.89T:tinyjambu128v2
64.8864.8964.89T:tinyjambu192v2
68.8668.8868.90T:tinyjambu256v2
89.1789.2289.30romulust
112.05112.59112.74T:isapxv20
141.54141.66143.27T:elephant200v2
291.09292.38298.58aes256gcmv1
4760.554771.054773.84T:elephant176v2
5461.565465.645466.48T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.350.360.37T:aes256gcmv1
0.33?0.36?0.37?T:aes128gcmv1
5.285.285.29ascon128av12
7.637.637.64ascon128v12
7.827.827.82ascon80pqv12
8.798.838.87T:xoodyakround3
12.4712.4712.48ascon128abi32v12
16.0516.0616.09T:isapa128v20
17.3817.4117.46T:schwaemm256128v2
17.5417.5517.58T:grain128aeadv2
17.7517.7717.79T:isapa128av20
18.5318.5318.56ascon128bi32v12
23.7823.8223.91T:schwaemm192192v2
24.3824.7224.86T:schwaemm256256v2
27.0127.0927.17T:schwaemm128128v2
31.1431.1631.17T:giftcofb128v1
30.9532.0332.30T:isapk128av20
32.6132.6732.83romulusn
43.7444.1344.31romulusm
44.2544.2944.33T:isapk128v20
44.4344.4944.53romulust
59.8859.8859.89T:tinyjambu128v2
64.8864.8964.90T:tinyjambu192v2
68.8768.8868.89T:tinyjambu256v2
84.0684.6484.80T:isapxv20
141.49141.64143.24T:elephant200v2
289.64290.94304.19aes256gcmv1
4771.034771.564773.84T:elephant176v2
5448.775481.525539.15T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.26?0.28?0.30?T:aes256gcmv1
0.26?0.29?0.31?T:aes128gcmv1
5.255.255.25ascon128av12
5.835.975.99T:xoodyakround3
7.497.507.51ascon80pqv12
7.497.507.50ascon128v12
12.5012.5012.50ascon128abi32v12
16.2416.2516.28T:isapa128v20
17.1917.2417.28T:schwaemm256128v2
17.4317.4517.48T:grain128aeadv2
17.8717.8817.89T:isapa128av20
18.1618.2518.34ascon128bi32v12
22.8922.9923.06romulusm
22.9423.0023.02romulusn
23.7023.7723.84T:schwaemm192192v2
24.3824.5124.60T:schwaemm256256v2
26.8727.0827.62T:schwaemm128128v2
30.8131.0331.99T:isapk128av20
31.2031.2831.28T:giftcofb128v1
43.3643.5043.61T:isapk128v20
44.4344.4544.48romulust
46.2446.2446.24T:tinyjambu256v2
46.2446.2546.25T:tinyjambu128v2
46.7446.7446.74T:tinyjambu192v2
84.3684.5184.60T:isapxv20
94.5694.9495.67T:elephant200v2
286.75289.99314.45aes256gcmv1
3154.663155.283155.75T:elephant176v2
3610.843619.023642.67T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.25?0.27?0.29?T:aes128gcmv1
0.26?0.27?0.31?T:aes256gcmv1
5.255.255.26ascon128av12
5.915.935.97T:xoodyakround3
7.627.627.63ascon128v12
7.627.637.63ascon80pqv12
12.5012.5012.51ascon128abi32v12
16.2416.2716.29T:isapa128v20
17.1717.2317.27T:schwaemm256128v2
17.4517.4717.48T:grain128aeadv2
17.7417.7617.79T:isapa128av20
18.5218.5718.61ascon128bi32v12
22.8823.0023.01romulusn
22.8723.0223.04romulusm
23.7223.7723.80T:schwaemm192192v2
24.2624.4024.58T:schwaemm256256v2
26.8126.9027.00T:schwaemm128128v2
30.6830.7932.07T:isapk128av20
31.2331.2831.29T:giftcofb128v1
43.3843.4343.49T:isapk128v20
44.4144.4844.51romulust
46.2446.2546.26T:tinyjambu256v2
46.2546.2546.27T:tinyjambu128v2
46.7446.7446.76T:tinyjambu192v2
84.0784.5584.58T:isapxv20
94.6894.9895.65T:elephant200v2
289.23290.45292.11aes256gcmv1
3154.913155.333162.74T:elephant176v2
3603.683606.693643.11T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.24?0.26?0.28?T:aes256gcmv1
0.25?0.28?0.31?T:aes128gcmv1
5.255.265.26ascon128av12
5.895.945.98T:xoodyakround3
7.627.627.62ascon128v12
7.637.637.63ascon80pqv12
12.5012.5012.50ascon128abi32v12
16.2216.2316.28T:isapa128v20
17.1717.2517.30T:schwaemm256128v2
17.4417.4617.47T:grain128aeadv2
17.7117.7517.79T:isapa128av20
18.5618.5718.57ascon128bi32v12
22.8822.8923.01romulusn
22.8022.9723.03romulusm
23.7823.8723.97T:schwaemm192192v2
24.1524.3624.59T:schwaemm256256v2
26.7627.0027.65T:schwaemm128128v2
31.2231.2331.30T:giftcofb128v1
30.8231.8432.07T:isapk128av20
43.4143.4943.62T:isapk128v20
44.3944.4544.58romulust
46.2446.2546.26T:tinyjambu256v2
46.2546.2546.27T:tinyjambu128v2
46.7546.7546.77T:tinyjambu192v2
84.0684.5684.68T:isapxv20
94.5795.0095.64T:elephant200v2
287.78290.99292.17aes256gcmv1
3155.313155.773161.45T:elephant176v2
3616.543643.403653.09T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.161.171.19T:aes128gcmv1
1.201.211.22T:aes256gcmv1
5.415.425.44ascon128av12
7.637.647.64ascon80pqv12
7.757.767.76ascon128v12
8.928.948.94T:xoodyakround3
12.7312.7412.75ascon128abi32v12
17.8317.8417.85T:grain128aeadv2
17.8717.9117.96T:schwaemm256128v2
18.7818.7818.83ascon128bi32v12
23.2523.2923.32T:isapa128av20
24.2724.3024.32T:schwaemm192192v2
25.1625.3825.61T:schwaemm256256v2
27.2527.2927.37T:schwaemm128128v2
31.2331.2531.26T:giftcofb128v1
32.7832.8232.84romulusn
36.6536.6636.66T:isapa128v20
43.8244.2244.38romulusm
43.0544.3444.54T:isapk128av20
60.2260.2260.23T:tinyjambu128v2
65.2465.2565.25T:tinyjambu192v2
69.2769.2769.27T:tinyjambu256v2
90.4590.5390.58romulust
97.9197.9898.08T:isapk128v20
144.70145.09146.10T:elephant200v2
185.90186.12186.19T:isapxv20
298.63299.85307.55aes256gcmv1
4807.014807.174807.36T:elephant176v2
5469.885496.225509.33T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.211.221.23T:aes128gcmv1
1.221.241.24T:aes256gcmv1
5.415.415.42ascon128av12
7.757.757.76ascon128v12
7.937.937.93ascon80pqv12
8.878.918.92T:xoodyakround3
12.7612.7612.77ascon128abi32v12
17.8617.9017.91T:grain128aeadv2
17.9017.9618.01T:schwaemm256128v2
18.9718.9718.99ascon128bi32v12
23.7423.7423.75T:isapa128av20
24.2724.3124.37T:schwaemm192192v2
25.0625.1325.28T:schwaemm256256v2
27.3027.3627.41T:schwaemm128128v2
31.3831.4131.41T:giftcofb128v1
32.9033.0733.08romulusn
36.6536.6536.67T:isapa128v20
42.9843.0544.31T:isapk128av20
44.0544.1044.58romulusm
60.3460.3460.34T:tinyjambu128v2
65.3765.3765.37T:tinyjambu192v2
69.3969.3969.40T:tinyjambu256v2
90.4090.5790.63romulust
98.0198.0398.08T:isapk128v20
144.57144.68146.11T:elephant200v2
185.59185.86186.11T:isapxv20
295.82301.13308.06aes256gcmv1
4807.084807.324812.94T:elephant176v2
5507.275514.945522.74T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.191.201.21T:aes128gcmv1
1.221.241.25T:aes256gcmv1
5.415.415.41ascon128av12
7.757.757.75ascon128v12
7.937.937.93ascon80pqv12
8.908.918.95T:xoodyakround3
12.7612.7612.76ascon128abi32v12
17.8717.8917.90T:grain128aeadv2
17.9017.9217.96T:schwaemm256128v2
18.5918.6018.63T:isapa128av20
18.9718.9718.98ascon128bi32v12
22.0222.0422.04T:isapa128v20
24.2924.3224.34T:schwaemm192192v2
25.1025.2525.27T:schwaemm256256v2
27.3127.3927.44T:schwaemm128128v2
31.3831.3931.41T:giftcofb128v1
32.8732.9133.08romulusn
33.5034.4534.65T:isapk128av20
44.0544.3344.54romulusm
45.7845.8145.93romulust
60.3460.3460.36T:tinyjambu128v2
65.3265.3265.37T:isapk128v20
65.3765.3765.37T:tinyjambu192v2
69.3869.3969.39T:tinyjambu256v2
121.56121.96122.12T:isapxv20
144.68145.13146.10T:elephant200v2
297.14298.44319.03aes256gcmv1
4794.834806.914810.85T:elephant176v2
5502.685507.715525.05T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
8.448.448.88ascon128av12
10.3810.3810.64ascon80pqv12
10.4510.4510.70ascon128v12
12.8412.8612.97T:xoodyakround3
19.2519.2919.49ascon128abi32v12
20.0520.4220.91T:aes128gcmv1
20.4120.7021.15T:aes256gcmv1
25.0225.0825.22T:grain128aeadv2
27.6627.9729.02ascon128bi32v12
29.6129.8830.07T:schwaemm256128v2
34.4134.9836.12T:schwaemm128128v2
36.7036.7136.75T:giftcofb128v1
38.3538.5738.73romulusn
38.5038.8338.97T:schwaemm192192v2
39.9540.1840.41T:schwaemm256256v2
50.6050.9351.41romulusm
58.5658.6158.62T:isapa128av20
70.8270.9571.07T:tinyjambu128v2
76.7876.7876.78T:tinyjambu192v2
80.9481.0881.21T:tinyjambu256v2
120.96121.27121.41romulust
132.96137.48138.12T:isapk128av20
205.07205.34206.50T:elephant200v2
305.62305.73305.73T:isapa128v20
333.01364.30366.91aes256gcmv1
1013.051013.091013.23T:isapk128v20
1850.281852.871854.17T:isapxv20
5976.605984.395985.59T:elephant176v2
7361.877371.297380.89T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
8.348.348.59ascon128av12
10.4510.4610.90ascon128v12
10.5210.5610.73ascon80pqv12
12.9012.9413.00T:xoodyakround3
19.2619.3519.41ascon128abi32v12
19.6620.0420.32T:aes128gcmv1
20.0520.1620.45T:aes256gcmv1
25.0625.1825.32T:grain128aeadv2
28.9128.9229.46ascon128bi32v12
29.5729.8229.99T:schwaemm256128v2
34.6635.3736.12T:schwaemm128128v2
36.8036.8136.83T:giftcofb128v1
38.3838.4538.46romulusn
38.6538.8439.04T:schwaemm192192v2
40.1840.3740.65T:schwaemm256256v2
51.3251.5652.27romulusm
58.3858.6058.82T:isapa128av20
70.8270.9471.08T:tinyjambu128v2
76.7976.9477.09T:tinyjambu192v2
80.9581.1081.24T:tinyjambu256v2
121.10121.26121.45romulust
132.55136.66138.02T:isapk128av20
204.43204.76205.88T:elephant200v2
305.72305.99306.38T:isapa128v20
330.40332.46337.27aes256gcmv1
1014.801015.451017.35T:isapk128v20
1847.551850.031852.88T:isapxv20
5984.385985.005986.62T:elephant176v2
7364.127366.527400.77T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
8.348.348.34ascon128av12
10.4510.4510.45ascon128v12
10.5210.5210.55ascon80pqv12
12.8713.0113.49T:xoodyakround3
19.2219.3219.35ascon128abi32v12
19.4819.6619.88T:aes128gcmv1
20.2420.4620.68T:aes256gcmv1
25.0925.1825.30T:grain128aeadv2
28.8828.9128.93ascon128bi32v12
29.4729.7929.90T:schwaemm256128v2
35.3035.4335.94T:schwaemm128128v2
36.8036.8236.83T:giftcofb128v1
37.9338.1338.51T:isapa128av20
38.3838.4538.45romulusn
38.4438.6638.80T:schwaemm192192v2
40.1640.4140.59T:schwaemm256256v2
51.3251.4852.27romulusm
70.7770.9070.95T:tinyjambu128v2
75.4175.7076.20romulust
76.4576.6276.80T:tinyjambu192v2
80.7780.9281.07T:tinyjambu256v2
84.4387.6088.05T:isapk128av20
159.03159.34159.45T:isapa128v20
204.54205.13206.78T:elephant200v2
329.02329.77336.42aes256gcmv1
538.81538.98539.49T:isapk128v20
965.66968.05968.51T:isapxv20
5984.065984.525985.94T:elephant176v2
7349.207367.407369.88T:elephant160v2