VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Xeon E3-1275 V2; 4 x 3500MHz; hydra8, supercop-20240909

[Page version: 20240912 11:46:31]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
2.50?2.76?2.89?T:aes128gcmv1
2.66?2.89?3.11?T:aes256gcmv1
8.578.608.63ascon128av12
12.7212.7512.80ascon80pqv12
12.8112.8312.85ascon128v12
16.4316.6216.67ascon128abi32v12
17.3917.5117.73T:xoodyakround3
23.3823.4724.14T:schwaemm256128v2
24.3924.4324.45ascon128bi32v12
27.9228.1828.45T:grain128aeadv2
30.8430.9230.98T:schwaemm192192v2
33.2433.2833.40T:schwaemm128128v2
33.8533.8834.08T:schwaemm256256v2
38.7538.7739.10romulusn
44.7444.7644.79T:giftcofb128v1
47.8447.8947.91T:isapa128v20
50.7150.7650.83T:isapa128av20
50.7850.8350.87T:tinyjambu128v2
57.1657.2157.30T:tinyjambu192v2
59.2559.3159.34T:tinyjambu256v2
62.6962.7662.81romulusm
90.9491.0991.21T:isapk128av20
120.82121.94122.09T:isapk128v20
126.28126.40126.51romulust
182.97183.20184.43T:elephant200v2
186.34191.23194.73T:isapxv20
335.04?362.48?745.53?aes256gcmv1
9229.749231.129233.45T:elephant176v2
10530.1310531.5010532.83T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
2.24?2.70?2.96?T:aes128gcmv1
2.58?3.07?3.17?T:aes256gcmv1
8.518.578.62ascon128av12
12.7812.7912.81ascon128v12
12.7512.8012.84ascon80pqv12
16.6316.7216.76ascon128abi32v12
17.1817.3417.42T:xoodyakround3
23.3323.3823.44T:schwaemm256128v2
24.1124.1524.18ascon128bi32v12
29.1229.1529.18T:grain128aeadv2
30.7730.8831.71T:schwaemm192192v2
33.5033.5733.68T:schwaemm128128v2
33.9934.0334.29T:schwaemm256256v2
39.0739.1239.15romulusn
44.7544.7944.86T:giftcofb128v1
47.8547.9448.02T:isapa128v20
50.6850.7250.80T:isapa128av20
50.9851.0051.04T:tinyjambu128v2
57.8157.8857.92T:tinyjambu192v2
59.9259.9760.02T:tinyjambu256v2
62.9363.1163.16romulusm
91.0791.2291.34T:isapk128av20
120.81121.32121.50T:isapk128v20
126.29126.38126.48romulust
182.99183.15184.42T:elephant200v2
189.14190.56192.49T:isapxv20
343.87?361.64?610.05?aes256gcmv1
9229.509230.859233.18T:elephant176v2
10530.2310531.4910532.60T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
2.31?2.75?2.87?T:aes128gcmv1
2.61?3.05?3.28?T:aes256gcmv1
8.498.578.63ascon128av12
12.7312.7712.84ascon80pqv12
12.7812.8012.81ascon128v12
16.6516.6716.79ascon128abi32v12
17.2617.3217.42T:xoodyakround3
23.3423.3823.41T:schwaemm256128v2
23.5423.5723.60T:isapa128v20
24.1224.1424.16ascon128bi32v12
29.1329.1729.19T:grain128aeadv2
30.7930.9031.70T:schwaemm192192v2
33.4433.5433.60T:schwaemm128128v2
33.9934.0434.33T:schwaemm256256v2
34.3534.3934.43T:isapa128av20
39.0539.1139.13romulusn
43.2143.2643.31romulust
44.7344.7844.80T:giftcofb128v1
50.9751.0251.07T:tinyjambu128v2
57.8157.8657.90T:tinyjambu192v2
59.9259.9660.04T:tinyjambu256v2
60.9361.0761.15T:isapk128av20
63.0363.1063.15romulusm
75.0775.5675.70T:isapk128v20
111.82112.33113.59T:isapxv20
182.96183.18184.38T:elephant200v2
333.66?351.10?599.27?aes256gcmv1
9230.189231.239233.67T:elephant176v2
10529.9510531.2810532.79T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
2.152.182.29T:aes128gcmv1
2.362.412.47T:aes256gcmv1
8.568.588.59ascon128av12
12.6912.7212.72ascon128v12
12.7512.7812.85ascon80pqv12
13.1813.2313.28T:xoodyakround3
16.5216.5816.60ascon128abi32v12
23.2023.2623.61T:schwaemm256128v2
24.2024.2224.24ascon128bi32v12
27.9428.0828.18T:grain128aeadv2
30.6830.7030.76T:schwaemm192192v2
31.3031.3431.39romulusn
33.1633.2033.24T:schwaemm128128v2
33.6133.6633.88T:schwaemm256256v2
35.7436.0636.65T:isapa128v20
40.8740.9240.94T:tinyjambu128v2
42.5542.5842.60T:isapa128av20
43.2843.3243.38romulusm
44.4544.4944.52T:tinyjambu192v2
44.5244.5544.57T:tinyjambu256v2
44.6944.7144.73T:giftcofb128v1
75.9776.0176.08T:isapk128av20
84.6084.6584.73romulust
98.2398.5298.89T:isapk128v20
136.63136.79137.71T:elephant200v2
149.44152.01153.78T:isapxv20
331.15?356.77?739.08?aes256gcmv1
6894.086894.906896.25T:elephant176v2
7892.237892.917893.58T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
2.202.262.30T:aes128gcmv1
2.262.412.48T:aes256gcmv1
8.548.568.58ascon128av12
12.7012.7212.74ascon128v12
12.7612.7812.80ascon80pqv12
13.0813.1313.17T:xoodyakround3
16.8216.8516.89ascon128abi32v12
23.2223.2523.28T:schwaemm256128v2
24.1024.1424.17ascon128bi32v12
28.3928.4328.46T:grain128aeadv2
30.6930.7631.14T:schwaemm192192v2
31.4831.5131.54romulusn
33.2033.2433.31T:schwaemm128128v2
33.7033.7333.98T:schwaemm256256v2
35.5535.8536.02T:isapa128v20
40.9640.9941.01T:tinyjambu128v2
42.5242.5642.62T:isapa128av20
43.4643.5043.51romulusm
44.6944.7344.76T:giftcofb128v1
44.8344.8844.90T:tinyjambu256v2
44.8544.8944.93T:tinyjambu192v2
75.9976.0876.13T:isapk128av20
84.5684.6284.67romulust
98.4598.5398.62T:isapk128v20
136.66136.76137.70T:elephant200v2
151.15151.65152.73T:isapxv20
339.84?356.52?603.86?aes256gcmv1
6894.236895.086896.28T:elephant176v2
7891.557892.817893.75T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
2.142.192.29T:aes128gcmv1
2.292.392.48T:aes256gcmv1
8.548.578.60ascon128av12
12.6912.7112.72ascon128v12
12.7612.7712.81ascon80pqv12
13.1213.1813.22T:xoodyakround3
16.8416.8616.88ascon128abi32v12
23.2123.2423.28T:schwaemm256128v2
23.3023.5223.69T:isapa128v20
24.1424.3224.34ascon128bi32v12
28.4128.4328.45T:grain128aeadv2
30.6830.7331.11T:schwaemm192192v2
31.5131.5331.57romulusn
33.1833.2333.30T:schwaemm128128v2
33.7133.7333.98T:schwaemm256256v2
34.3434.3634.39T:isapa128av20
40.9640.9941.01T:tinyjambu128v2
43.0543.0843.14romulust
43.4543.4743.50romulusm
44.7044.7244.77T:giftcofb128v1
44.8644.8844.91T:tinyjambu256v2
44.8644.9044.93T:tinyjambu192v2
60.9260.9561.05T:isapk128av20
75.5975.6475.72T:isapk128v20
112.49112.56113.13T:isapxv20
136.61136.87137.70T:elephant200v2
334.56?351.01?598.58?aes256gcmv1
6894.276894.816895.95T:elephant176v2
7891.897893.047893.56T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
1.701.791.88T:aes128gcmv1
1.70?1.80?1.89?T:aes256gcmv1
8.508.518.53ascon128av12
8.898.938.98T:xoodyakround3
12.5312.5512.61ascon128v12
12.7312.7712.80ascon80pqv12
16.4816.4916.53ascon128abi32v12
23.0323.0523.08T:schwaemm256128v2
23.5923.6523.65T:isapa128v20
23.8323.9023.94romulusn
23.8223.9123.99romulusm
23.9524.0024.02ascon128bi32v12
27.6627.8928.16T:grain128aeadv2
29.7829.8129.84T:tinyjambu256v2
30.5530.5830.64T:schwaemm192192v2
30.9230.9530.97T:tinyjambu128v2
31.7031.7431.76T:tinyjambu192v2
33.0233.1233.21T:schwaemm128128v2
33.3733.4033.68T:schwaemm256256v2
34.2834.3534.43T:isapa128av20
42.9042.9742.99romulust
44.6344.6644.72T:giftcofb128v1
60.7760.9661.06T:isapk128av20
75.4975.6175.71T:isapk128v20
92.3092.3592.71T:elephant200v2
110.55112.84114.57T:isapxv20
324.17?351.29?734.52?aes256gcmv1
4558.744559.854561.02T:elephant176v2
5259.325260.115260.91T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
1.67?1.77?1.88?T:aes128gcmv1
1.741.811.88T:aes256gcmv1
8.448.478.60ascon128av12
8.888.928.96T:xoodyakround3
12.5712.6112.64ascon128v12
12.7312.7512.76ascon80pqv12
17.0017.0217.04ascon128abi32v12
23.0723.1023.18T:schwaemm256128v2
23.4523.6223.69T:isapa128v20
23.8123.8623.96romulusn
23.8423.9023.96romulusm
24.1124.1524.50ascon128bi32v12
27.6827.7027.74T:grain128aeadv2
29.7729.8029.84T:tinyjambu256v2
30.4730.5430.62T:schwaemm192192v2
30.9330.9530.98T:tinyjambu128v2
31.8931.9531.98T:tinyjambu192v2
32.8832.9433.00T:schwaemm128128v2
33.4233.4633.67T:schwaemm256256v2
34.3234.3634.40T:isapa128av20
42.9042.9543.01romulust
44.6044.6844.73T:giftcofb128v1
60.7660.8861.05T:isapk128av20
75.4875.5675.72T:isapk128v20
92.3192.4192.71T:elephant200v2
112.02112.62113.83T:isapxv20
333.49?351.33?599.41?aes256gcmv1
4559.124559.594560.39T:elephant176v2
5258.965259.685260.17T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
1.711.751.84T:aes256gcmv1
1.741.811.88T:aes128gcmv1
8.448.488.52ascon128av12
8.908.938.99T:xoodyakround3
12.5812.6012.62ascon128v12
12.7312.7412.76ascon80pqv12
17.0017.0117.04ascon128abi32v12
23.0823.1223.13T:schwaemm256128v2
23.4523.4823.72T:isapa128v20
23.8023.8524.01romulusn
23.8923.9824.01romulusm
24.0924.1224.50ascon128bi32v12
27.6827.7127.74T:grain128aeadv2
29.7929.8329.85T:tinyjambu256v2
30.5230.5730.60T:schwaemm192192v2
30.9030.9530.97T:tinyjambu128v2
31.9231.9731.98T:tinyjambu192v2
32.9332.9933.07T:schwaemm128128v2
33.4333.4533.67T:schwaemm256256v2
34.3134.3534.40T:isapa128av20
42.8942.9643.00romulust
44.6444.6944.72T:giftcofb128v1
60.7260.9161.02T:isapk128av20
75.5075.5975.66T:isapk128v20
92.3292.3992.71T:elephant200v2
112.01112.45113.43T:isapxv20
333.64?351.27?599.54?aes256gcmv1
4559.474560.394560.95T:elephant176v2
5258.965259.575260.68T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
3.623.723.74T:aes128gcmv1
3.803.873.89T:aes256gcmv1
8.788.798.80ascon128av12
12.8712.9012.92ascon128v12
12.9513.0213.06ascon80pqv12
13.3613.3713.42T:xoodyakround3
16.9316.9416.96ascon128abi32v12
23.8923.9224.25T:schwaemm256128v2
24.6024.6124.63ascon128bi32v12
28.5428.5728.68T:grain128aeadv2
31.4031.4331.47T:schwaemm192192v2
31.5831.6131.68romulusn
33.6433.7033.74T:schwaemm128128v2
34.5334.5734.77T:schwaemm256256v2
41.2241.2441.29T:tinyjambu128v2
43.6143.6543.74romulusm
44.7844.8344.85T:tinyjambu192v2
44.9144.9244.95T:tinyjambu256v2
45.0745.1045.12T:giftcofb128v1
45.4145.4645.50T:isapa128av20
52.6452.7352.93T:isapa128v20
85.9285.9786.01romulust
87.1587.2187.31T:isapk128av20
139.63139.74140.52T:elephant200v2
173.88174.17174.23T:isapk128v20
244.28246.78246.83T:isapxv20
358.60?359.52?717.44?aes256gcmv1
6947.066947.496948.61T:elephant176v2
7981.567981.837982.30T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
3.653.663.69T:aes128gcmv1
3.733.793.88T:aes256gcmv1
8.748.768.81ascon128av12
12.9012.9112.92ascon128v12
12.9712.9813.00ascon80pqv12
13.2913.3113.32T:xoodyakround3
17.2417.2517.26ascon128abi32v12
23.8923.9123.95T:schwaemm256128v2
24.5424.5624.57ascon128bi32v12
28.8728.8828.90T:grain128aeadv2
31.3931.4631.77T:schwaemm192192v2
31.7831.8031.85romulusn
33.6733.7033.73T:schwaemm128128v2
34.6234.6534.86T:schwaemm256256v2
41.2941.3341.36T:tinyjambu128v2
43.8343.8443.85romulusm
45.1145.1345.16T:giftcofb128v1
45.2245.2345.29T:tinyjambu192v2
45.2045.2445.28T:tinyjambu256v2
45.4345.4445.50T:isapa128av20
52.6852.7153.01T:isapa128v20
85.9185.9385.95romulust
87.1787.2187.28T:isapk128av20
139.59139.70140.52T:elephant200v2
173.93174.01174.13T:isapk128v20
245.27245.86246.15T:isapxv20
358.12?358.37?590.76?aes256gcmv1
6946.986947.436948.69T:elephant176v2
7981.197981.647982.88T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
3.653.673.71T:aes128gcmv1
3.733.803.85T:aes256gcmv1
8.738.758.78ascon128av12
12.8912.9112.92ascon128v12
12.9712.9813.01ascon80pqv12
13.2613.3013.35T:xoodyakround3
17.2317.2517.27ascon128abi32v12
23.8823.9223.94T:schwaemm256128v2
24.7324.7424.75ascon128bi32v12
28.8828.8928.92T:grain128aeadv2
31.4231.4531.77T:schwaemm192192v2
31.7831.8131.85romulusn
32.3132.3332.50T:isapa128v20
33.6433.6733.76T:schwaemm128128v2
34.6234.6334.86T:schwaemm256256v2
36.0236.0436.07T:isapa128av20
41.3241.3641.41T:tinyjambu128v2
43.8043.8443.87romulusm
44.3144.3544.37romulust
45.0945.1145.13T:giftcofb128v1
45.2245.2545.28T:tinyjambu192v2
45.2245.2545.27T:tinyjambu256v2
68.0168.0868.15T:isapk128av20
114.94114.99115.02T:isapk128v20
139.59139.74140.55T:elephant200v2
160.71160.74160.95T:isapxv20
352.96?353.29?585.38?aes256gcmv1
6946.946947.266948.51T:elephant176v2
7981.017982.057983.90T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
13.7314.0514.46ascon128av12
17.1617.1717.53ascon128v12
17.4117.5217.67ascon80pqv12
19.4219.6220.38T:xoodyakround3
25.2825.3625.66ascon128abi32v12
34.1234.1934.40ascon128bi32v12
35.8836.2537.73T:aes256gcmv1
36.0636.3436.90T:aes128gcmv1
38.3838.4438.73romulusn
38.9139.1539.38T:schwaemm256128v2
39.1339.8042.84T:grain128aeadv2
43.0343.4344.58T:schwaemm128128v2
48.5148.7048.90T:tinyjambu128v2
50.3950.5551.09romulusm
50.5250.9151.12T:schwaemm192192v2
52.6152.9053.04T:tinyjambu192v2
52.9053.1353.47T:tinyjambu256v2
53.5753.8053.92T:giftcofb128v1
54.8355.0655.23T:schwaemm256256v2
111.08111.46112.36T:isapa128av20
115.51115.68115.98romulust
198.07198.81199.53T:elephant200v2
326.48326.70328.00T:isapk128av20
404.02?404.66?805.84?aes256gcmv1
441.16441.85445.24T:isapa128v20
1887.151892.911893.75T:isapk128v20
2349.692400.172407.17T:isapxv20
8649.958651.918654.66T:elephant176v2
10687.3510692.2110695.73T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
13.6313.9014.27ascon128av12
17.3117.3417.65ascon128v12
17.4217.4817.67ascon80pqv12
19.4419.9520.31T:xoodyakround3
25.9426.0226.45ascon128abi32v12
34.1534.2534.51ascon128bi32v12
35.0235.2736.91T:aes128gcmv1
34.8435.5436.69T:aes256gcmv1
38.3738.5838.70romulusn
39.0339.1339.34T:schwaemm256128v2
39.2439.5439.73T:grain128aeadv2
43.2543.4344.19T:schwaemm128128v2
48.7348.7749.11T:tinyjambu128v2
50.8851.0151.41T:schwaemm192192v2
51.9552.0152.16romulusm
53.0553.2353.62T:tinyjambu192v2
53.2053.3353.60T:tinyjambu256v2
53.6453.7654.02T:giftcofb128v1
54.7355.0155.16T:schwaemm256256v2
111.60111.80112.09T:isapa128av20
115.58115.77116.03romulust
197.76198.10199.09T:elephant200v2
324.11325.23326.84T:isapk128av20
403.69?404.73?663.77?aes256gcmv1
441.73442.19448.31T:isapa128v20
1885.961886.731897.19T:isapk128v20
2360.952391.612397.40T:isapxv20
8650.308652.648655.28T:elephant176v2
10687.2010689.8010693.29T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
13.5613.6613.74ascon128av12
17.2817.3317.39ascon128v12
17.3717.4117.59ascon80pqv12
19.5519.9520.11T:xoodyakround3
25.9826.0226.13ascon128abi32v12
34.0534.2734.39ascon128bi32v12
34.9235.3136.47T:aes256gcmv1
35.1235.3236.07T:aes128gcmv1
38.3238.4238.51romulusn
39.0339.1439.21T:schwaemm256128v2
39.2139.2839.45T:grain128aeadv2
43.2443.3443.50T:schwaemm128128v2
48.5948.7348.82T:tinyjambu128v2
50.9251.1751.54T:schwaemm192192v2
51.8952.0252.16romulusm
53.0453.1053.23T:tinyjambu256v2
53.1753.2553.40T:tinyjambu192v2
53.6253.8554.02T:giftcofb128v1
54.8555.0455.23T:schwaemm256256v2
72.8873.0273.30romulust
73.8574.1374.50T:isapa128av20
197.88198.22199.38T:elephant200v2
217.51217.61218.32T:isapk128av20
234.21234.49236.95T:isapa128v20
398.38?399.34?658.05?aes256gcmv1
1003.031003.341004.05T:isapk128v20
1237.051250.361254.32T:isapxv20
8648.258651.268655.38T:elephant176v2
10685.6410692.5010695.59T:elephant160v2