VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Sandy Bridge+AES (206a7); 2011 Intel Xeon E3-1225; 4 x 3100MHz; hydra7, supercop-20240909

[Page version: 20240912 11:46:31]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
2.40?2.55?2.77?T:aes128gcmv1
2.752.893.05T:aes256gcmv1
10.1010.1410.17ascon128av12
14.9614.9815.01ascon80pqv12
15.0315.0615.10ascon128v12
18.2018.2918.47T:xoodyakround3
18.8418.8818.90ascon128abi32v12
27.1827.2427.29T:schwaemm256128v2
27.9227.9628.00ascon128bi32v12
28.5228.5528.58T:grain128aeadv2
34.5434.5634.58T:schwaemm256256v2
35.8535.9136.01T:schwaemm192192v2
38.6638.7038.75T:schwaemm128128v2
39.3239.3739.42romulusn
48.3748.4248.48T:giftcofb128v1
56.7156.7856.88T:isapa128v20
59.5159.5459.62T:tinyjambu128v2
61.1961.2361.35T:isapa128av20
63.1463.1963.26romulusm
71.9472.0272.09T:tinyjambu192v2
73.4473.5573.62T:tinyjambu256v2
107.70107.95108.57T:isapk128av20
126.47126.59127.32romulust
143.46143.83144.19T:isapk128v20
195.34195.41195.57T:elephant200v2
193.61?210.92?229.22?T:isapxv20
376.44376.99377.24aes256gcmv1
10863.4510868.2110906.14T:elephant176v2
12737.6912738.9212739.65T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
2.39?2.53?2.82?T:aes128gcmv1
2.722.883.02T:aes256gcmv1
10.0110.0410.06ascon128av12
14.9715.0015.02ascon128v12
14.9615.0115.03ascon80pqv12
18.1118.1618.25T:xoodyakround3
18.2618.2818.31ascon128abi32v12
27.1527.2327.29T:schwaemm256128v2
27.4327.4827.51ascon128bi32v12
30.3430.8531.01T:grain128aeadv2
34.5634.5834.80T:schwaemm256256v2
35.8135.9736.71T:schwaemm192192v2
38.6438.7438.80T:schwaemm128128v2
39.2939.3239.37romulusn
48.4548.5148.60T:giftcofb128v1
56.7056.7756.87T:isapa128v20
59.7559.7859.88T:tinyjambu128v2
61.2361.3261.36T:isapa128av20
63.2763.3163.35romulusm
72.1372.2372.29T:tinyjambu192v2
74.1374.2074.29T:tinyjambu256v2
107.64107.88108.20T:isapk128av20
126.47126.71127.14romulust
143.54143.79143.96T:isapk128v20
195.32195.40195.52T:elephant200v2
200.10?211.31?223.58?T:isapxv20
375.80376.13376.33aes256gcmv1
10863.0310867.4110905.97T:elephant176v2
12738.4712739.2612740.32T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
2.432.562.70T:aes128gcmv1
2.762.883.01T:aes256gcmv1
10.0210.0510.09ascon128av12
14.9614.9815.01ascon80pqv12
14.9714.9915.02ascon128v12
18.1718.2918.38T:xoodyakround3
18.2618.2918.31ascon128abi32v12
27.1527.2427.28T:schwaemm256128v2
27.4527.4627.49ascon128bi32v12
27.8927.9528.03T:isapa128v20
30.2730.8331.02T:grain128aeadv2
34.5534.5734.80T:schwaemm256256v2
35.8935.9836.74T:schwaemm192192v2
38.6438.6838.76T:schwaemm128128v2
39.2839.3239.35romulusn
41.6541.7641.81T:isapa128av20
43.3443.4043.45romulust
48.4848.5648.60T:giftcofb128v1
59.7359.7959.83T:tinyjambu128v2
63.2763.3363.37romulusm
71.1871.4071.53T:isapk128av20
72.1772.2472.37T:tinyjambu192v2
74.1574.2274.25T:tinyjambu256v2
89.2089.2789.45T:isapk128v20
112.54?124.83?138.22?T:isapxv20
195.31195.39195.52T:elephant200v2
365.32365.61365.87aes256gcmv1
10863.6510867.9310905.54T:elephant176v2
12738.4212739.1512739.71T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
2.102.202.30T:aes128gcmv1
2.242.332.43T:aes256gcmv1
10.0110.0310.06ascon128av12
13.7013.7513.86T:xoodyakround3
14.8414.8714.90ascon80pqv12
14.8814.9014.93ascon128v12
18.5518.5618.59ascon128abi32v12
27.0327.0527.09T:schwaemm256128v2
27.6427.6627.67ascon128bi32v12
28.5228.5428.56T:grain128aeadv2
31.6831.7331.76romulusn
34.2134.3734.39T:schwaemm256256v2
35.7435.8135.87T:schwaemm192192v2
38.5938.6238.69T:schwaemm128128v2
42.2642.4342.68T:isapa128v20
43.5843.6243.65romulusm
47.9748.0348.10T:tinyjambu128v2
48.3448.3848.46T:giftcofb128v1
51.4751.5151.58T:isapa128av20
55.3055.3355.36T:tinyjambu256v2
55.9055.9555.98T:tinyjambu192v2
84.7384.8185.19romulust
89.6390.1190.48T:isapk128av20
116.55116.76117.18T:isapk128v20
146.27146.31146.42T:elephant200v2
158.80?167.41?177.49?T:isapxv20
370.59371.20371.56aes256gcmv1
8115.538119.118146.83T:elephant176v2
9551.669552.029552.57T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
2.132.202.30T:aes128gcmv1
2.252.342.45T:aes256gcmv1
9.9910.0010.03ascon128av12
13.6613.7013.74T:xoodyakround3
14.8814.9114.92ascon80pqv12
14.9014.9214.93ascon128v12
18.2518.2618.27ascon128abi32v12
27.0427.0927.11T:schwaemm256128v2
27.4027.4227.43ascon128bi32v12
29.6530.2330.31T:grain128aeadv2
31.6631.6831.72romulusn
34.3334.3734.41T:schwaemm256256v2
35.7235.8136.12T:schwaemm192192v2
38.5138.5438.59T:schwaemm128128v2
42.2242.4542.63T:isapa128v20
43.6743.7143.73romulusm
48.1248.1648.20T:tinyjambu128v2
48.3548.4048.45T:giftcofb128v1
51.5551.5951.69T:isapa128av20
55.6155.6555.70T:tinyjambu256v2
56.1256.1756.21T:tinyjambu192v2
84.7184.8385.06romulust
89.6689.7789.86T:isapk128av20
116.62116.88117.05T:isapk128v20
146.25146.30146.43T:elephant200v2
162.54168.24174.71T:isapxv20
370.41370.68370.98aes256gcmv1
8115.508118.978145.00T:elephant176v2
9551.579552.089552.43T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
2.132.212.27T:aes128gcmv1
2.282.352.43T:aes256gcmv1
9.9810.0010.02ascon128av12
13.6713.7313.77T:xoodyakround3
14.9014.9214.93ascon80pqv12
14.9014.9214.94ascon128v12
18.2518.2618.29ascon128abi32v12
27.0427.0927.12T:schwaemm256128v2
27.4027.4227.43ascon128bi32v12
27.9028.0128.11T:isapa128v20
29.6530.2130.32T:grain128aeadv2
31.6631.6931.72romulusn
34.3534.3734.39T:schwaemm256256v2
35.7535.8436.19T:schwaemm192192v2
38.5038.5538.59T:schwaemm128128v2
41.8041.8441.88T:isapa128av20
43.1543.1843.21romulust
43.6643.6943.73romulusm
48.1048.1448.17T:tinyjambu128v2
48.4048.4248.49T:giftcofb128v1
55.6355.6955.71T:tinyjambu256v2
56.1056.1456.20T:tinyjambu192v2
71.5171.6871.76T:isapk128av20
89.2989.3989.56T:isapk128v20
118.60?125.05?132.10?T:isapxv20
146.23146.27146.32T:elephant200v2
365.30365.48365.85aes256gcmv1
8115.448118.998146.44T:elephant176v2
9551.749552.119552.73T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
1.701.761.88T:aes256gcmv1
1.65?1.79?1.95?T:aes128gcmv1
9.229.279.31T:xoodyakround3
9.919.929.94ascon128av12
14.6914.7114.75ascon128v12
14.7214.7614.79ascon80pqv12
18.2018.2418.27ascon128abi32v12
24.0124.0624.08romulusm
24.0524.0824.10romulusn
26.8026.8626.92T:schwaemm256128v2
27.3127.3427.36ascon128bi32v12
27.9928.0328.07T:isapa128v20
28.5128.5528.58T:grain128aeadv2
33.9733.9833.99T:schwaemm256256v2
35.6035.6935.78T:schwaemm192192v2
36.4636.5036.55T:tinyjambu128v2
37.0937.1337.17T:tinyjambu256v2
38.4538.5038.58T:schwaemm128128v2
39.8739.9339.96T:tinyjambu192v2
41.8641.9142.01T:isapa128av20
42.9843.0243.12romulust
48.2648.3348.39T:giftcofb128v1
71.5271.7072.44T:isapk128av20
89.1589.2689.50T:isapk128v20
97.7897.8097.85T:elephant200v2
108.64?123.99?141.22?T:isapxv20
366.03366.13366.60aes256gcmv1
5366.395368.905387.83T:elephant176v2
6366.136366.646367.51T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
1.68?1.78?1.89?T:aes128gcmv1
1.731.801.90T:aes256gcmv1
9.249.269.28T:xoodyakround3
9.929.949.98ascon128av12
14.7914.8214.85ascon80pqv12
14.8014.8314.84ascon128v12
18.2018.2318.25ascon128abi32v12
24.0124.0424.07romulusm
24.0524.0824.13romulusn
26.8826.9327.00T:schwaemm256128v2
27.3327.3427.36ascon128bi32v12
27.9828.0228.07T:isapa128v20
28.9429.5629.69T:grain128aeadv2
34.1234.1334.16T:schwaemm256256v2
35.5435.6335.68T:schwaemm192192v2
36.4636.5036.52T:tinyjambu128v2
37.1237.1737.26T:tinyjambu256v2
38.3138.3638.41T:schwaemm128128v2
40.0440.0940.13T:tinyjambu192v2
41.8541.9141.95T:isapa128av20
42.9643.0443.10romulust
48.2848.3248.42T:giftcofb128v1
71.5471.7171.88T:isapk128av20
89.2289.3189.50T:isapk128v20
97.7897.8297.87T:elephant200v2
112.58?125.07?138.18?T:isapxv20
365.45365.74366.30aes256gcmv1
5365.525368.565387.39T:elephant176v2
6365.956366.536367.10T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
1.67?1.78?1.90?T:aes128gcmv1
1.711.821.89T:aes256gcmv1
9.219.269.29T:xoodyakround3
9.909.939.97ascon128av12
14.7814.8114.83ascon128v12
14.7914.8214.85ascon80pqv12
18.2118.2318.25ascon128abi32v12
24.0124.0524.09romulusm
24.0424.0824.12romulusn
26.8626.9627.00T:schwaemm256128v2
27.3027.3227.36ascon128bi32v12
27.9828.0128.08T:isapa128v20
28.9629.5829.70T:grain128aeadv2
34.1234.1434.15T:schwaemm256256v2
35.5635.6335.69T:schwaemm192192v2
36.4936.5236.54T:tinyjambu128v2
37.0737.1337.22T:tinyjambu256v2
38.2938.3438.41T:schwaemm128128v2
40.0440.0840.11T:tinyjambu192v2
41.8541.9141.98T:isapa128av20
42.9743.0143.10romulust
48.2748.3248.36T:giftcofb128v1
71.4971.6771.76T:isapk128av20
89.2289.3789.48T:isapk128v20
97.7597.8297.86T:elephant200v2
112.39?124.99?138.19?T:isapxv20
365.12365.56365.80aes256gcmv1
5366.445368.975388.06T:elephant176v2
6365.836366.306367.00T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
3.653.693.71T:aes128gcmv1
3.773.783.89T:aes256gcmv1
10.2710.2910.31ascon128av12
13.9013.9114.00T:xoodyakround3
15.0815.1015.10ascon80pqv12
15.1315.1315.15ascon128v12
18.9919.0119.02ascon128abi32v12
27.8227.8927.92T:schwaemm256128v2
28.0528.0628.07ascon128bi32v12
29.0429.0529.07T:grain128aeadv2
31.9932.0232.03romulusn
35.1835.2835.30T:schwaemm256256v2
36.5936.6136.65T:schwaemm192192v2
39.1039.1439.20T:schwaemm128128v2
43.9043.9443.97romulusm
48.3548.4148.44T:tinyjambu128v2
48.8548.8748.94T:giftcofb128v1
54.8554.8754.89T:isapa128av20
55.7155.7455.78T:tinyjambu256v2
56.3456.3956.42T:tinyjambu192v2
62.1562.2762.40T:isapa128v20
86.0886.2286.48romulust
103.71103.92104.43T:isapk128av20
149.34149.38149.44T:elephant200v2
206.47206.65206.71T:isapk128v20
271.00273.16283.14T:isapxv20
372.43373.56373.65aes256gcmv1
8179.658181.828206.93T:elephant176v2
9659.839660.099660.25T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
3.573.613.70T:aes128gcmv1
3.743.753.85T:aes256gcmv1
10.2410.2410.26ascon128av12
13.8513.8813.89T:xoodyakround3
15.1315.1415.15ascon80pqv12
15.1315.1415.15ascon128v12
18.6918.7018.71ascon128abi32v12
27.8027.8327.85ascon128bi32v12
27.8427.8927.92T:schwaemm256128v2
30.1930.7330.77T:grain128aeadv2
31.9831.9832.02romulusn
35.2635.2935.31T:schwaemm256256v2
36.5436.6036.91T:schwaemm192192v2
39.0039.0239.07T:schwaemm128128v2
44.0244.0544.10romulusm
48.4848.5248.56T:tinyjambu128v2
48.8948.9048.98T:giftcofb128v1
54.8954.9355.00T:isapa128av20
56.0456.0656.12T:tinyjambu256v2
56.5456.5656.61T:tinyjambu192v2
62.1962.2262.39T:isapa128v20
86.0386.1686.35romulust
103.64103.67103.84T:isapk128av20
149.33149.37149.41T:elephant200v2
206.52206.70206.84T:isapk128v20
273.64273.73281.43T:isapxv20
372.72372.98373.14aes256gcmv1
8179.498181.408206.81T:elephant176v2
9659.559659.939660.11T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
3.563.613.65T:aes128gcmv1
3.713.733.80T:aes256gcmv1
10.2310.2410.25ascon128av12
13.8513.8813.93T:xoodyakround3
15.1315.1415.15ascon128v12
15.1215.1415.15ascon80pqv12
18.6818.6918.70ascon128abi32v12
27.8227.8227.84ascon128bi32v12
27.8127.8627.91T:schwaemm256128v2
30.1930.7330.76T:grain128aeadv2
31.9731.9932.01romulusn
35.2635.2735.30T:schwaemm256256v2
36.5836.6336.92T:schwaemm192192v2
38.0238.0338.16T:isapa128v20
39.0139.0439.10T:schwaemm128128v2
43.7043.7643.79T:isapa128av20
44.0244.0644.09romulusm
44.4344.4544.48romulust
48.4848.5248.57T:tinyjambu128v2
48.8548.8948.93T:giftcofb128v1
56.0456.0756.13T:tinyjambu256v2
56.5156.5656.62T:tinyjambu192v2
80.4780.5380.59T:isapk128av20
136.43136.48136.62T:isapk128v20
149.35149.38149.40T:elephant200v2
178.97179.05187.52T:isapxv20
367.48367.70368.05aes256gcmv1
8179.118181.038207.21T:elephant176v2
9659.739659.949660.33T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
15.7815.8416.19ascon128av12
20.0320.1920.55ascon80pqv12
20.0920.2120.34ascon128v12
20.2420.4220.95T:xoodyakround3
28.3928.4928.68ascon128abi32v12
35.7136.4339.06T:aes256gcmv1
37.0637.1737.49ascon128bi32v12
35.9437.5638.79T:aes128gcmv1
38.6438.7738.88romulusn
39.9640.0440.29T:grain128aeadv2
45.3645.5545.70T:schwaemm256128v2
49.9850.2850.77T:schwaemm128128v2
50.6750.8451.29romulusm
55.8155.9856.21T:schwaemm256256v2
56.7556.9057.09T:tinyjambu128v2
59.2059.3259.95T:schwaemm192192v2
59.6959.8760.05T:giftcofb128v1
65.1765.3265.52T:tinyjambu256v2
65.8466.2266.31T:tinyjambu192v2
115.90116.06116.80romulust
130.54130.98131.48T:isapa128av20
211.38211.86212.28T:elephant200v2
401.44401.93402.95T:isapk128av20
420.10420.70421.27aes256gcmv1
516.12517.26520.84T:isapa128v20
2242.932243.642249.56T:isapk128v20
2621.092676.182877.52T:isapxv20
10186.5910189.8110218.11T:elephant176v2
12936.0812938.6312941.71T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
15.8815.9516.41ascon128av12
20.1220.2020.48ascon128v12
20.2220.3120.48ascon80pqv12
20.2020.4120.68T:xoodyakround3
28.2328.4228.74ascon128abi32v12
34.7234.8137.27T:aes256gcmv1
34.4135.1636.27T:aes128gcmv1
37.2737.3737.66ascon128bi32v12
38.7038.8138.95romulusn
41.3042.7042.90T:grain128aeadv2
45.3745.5146.32T:schwaemm256128v2
49.9850.4150.63T:schwaemm128128v2
52.2952.4652.57romulusm
55.7355.7856.00T:schwaemm256256v2
57.1657.2257.47T:tinyjambu128v2
59.3059.5159.88T:schwaemm192192v2
59.6359.9560.48T:giftcofb128v1
65.7766.0366.21T:tinyjambu256v2
66.3466.5566.77T:tinyjambu192v2
116.23116.45116.94romulust
130.71131.00131.38T:isapa128av20
211.20211.38211.48T:elephant200v2
400.34401.73403.43T:isapk128av20
419.97420.86421.28aes256gcmv1
516.09516.50522.25T:isapa128v20
2241.982243.302245.29T:isapk128v20
2669.122669.702837.25T:isapxv20
10183.7910190.4810214.43T:elephant176v2
12936.0212937.3912940.18T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
15.7915.8416.01ascon128av12
20.1220.1920.31ascon128v12
20.1020.3120.46ascon80pqv12
20.2920.5220.80T:xoodyakround3
28.0828.2328.30ascon128abi32v12
34.5734.8035.73T:aes256gcmv1
34.3035.3035.86T:aes128gcmv1
37.0937.2237.31ascon128bi32v12
38.7938.9139.00romulusn
41.2842.7342.88T:grain128aeadv2
45.5145.7446.12T:schwaemm256128v2
49.9150.0550.37T:schwaemm128128v2
52.3052.4752.48romulusm
55.8655.9155.99T:schwaemm256256v2
56.9157.1257.28T:tinyjambu128v2
59.2059.3859.74T:schwaemm192192v2
59.9260.0560.15T:giftcofb128v1
65.4565.5665.75T:tinyjambu256v2
66.1366.2566.38T:tinyjambu192v2
73.0673.2873.77romulust
87.0087.3387.41T:isapa128av20
211.23211.41211.53T:elephant200v2
268.25268.70272.08T:isapa128v20
269.15269.45270.84T:isapk128av20
414.52415.15415.73aes256gcmv1
1198.561199.091199.44T:isapk128v20
1396.09?1397.78?1582.34?T:isapxv20
10185.2710187.8010218.10T:elephant176v2
12934.6312937.3012940.36T:elephant160v2