VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Kaby Lake (906e9); 2017 Intel Xeon E3-1220 v6; 4 x 3000MHz; kizomba, supercop-20240909

[Page version: 20240912 11:46:31]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.660.680.71T:aes128gcmv1
0.870.910.95T:aes256gcmv1
7.417.457.47ascon128av12
10.8211.0011.09ascon128v12
10.9511.0611.10ascon80pqv12
13.78?13.94?15.69?ascon128abi32v12
16.0916.1416.17T:xoodyakround3
17.7217.8217.84T:schwaemm256128v2
20.6421.1121.14ascon128bi32v12
22.5022.5222.74T:schwaemm256256v2
23.4323.4823.58T:schwaemm192192v2
24.7124.7324.85T:grain128aeadv2
25.7025.7625.83T:schwaemm128128v2
39.5139.5239.54romulusn
40.3840.4740.54T:isapa128av20
41.4541.5041.54T:giftcofb128v1
41.8941.9642.08T:isapa128v20
60.3060.3660.42T:tinyjambu128v2
62.9663.0063.09romulusm
68.2368.3168.48T:isapk128av20
72.7872.8472.90T:tinyjambu192v2
79.3979.4579.50T:tinyjambu256v2
90.4890.5490.63T:isapk128v20
124.99125.12125.43romulust
146.51146.61146.86T:elephant200v2
184.19184.41184.82T:isapxv20
311.43313.26325.22aes256gcmv1
7743.807756.847776.07T:elephant176v2
8159.658161.088163.68T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.62?0.66?0.71?T:aes128gcmv1
0.84?0.91?0.95?T:aes256gcmv1
7.377.457.47ascon128av12
10.8910.9310.95ascon80pqv12
10.9710.9911.02ascon128v12
13.8413.8713.92ascon128abi32v12
15.6715.7315.76T:xoodyakround3
17.8517.8817.96T:schwaemm256128v2
20.9220.9420.96ascon128bi32v12
22.5222.6822.81T:schwaemm256256v2
23.3623.4523.51T:schwaemm192192v2
25.3425.3625.39T:grain128aeadv2
25.7225.7625.82T:schwaemm128128v2
39.3739.7539.78romulusn
40.4240.4940.55T:isapa128av20
41.4541.4841.51T:giftcofb128v1
41.8641.9742.09T:isapa128v20
60.2660.3160.38T:tinyjambu128v2
62.7762.8463.03romulusm
68.2168.3068.44T:isapk128av20
72.3772.3972.42T:tinyjambu192v2
79.6079.6879.79T:tinyjambu256v2
90.4590.5590.63T:isapk128v20
125.00125.22125.45romulust
146.47146.54146.68T:elephant200v2
183.58184.23185.33T:isapxv20
307.26313.23327.34aes256gcmv1
7742.597763.117782.71T:elephant176v2
8159.778162.028163.79T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.61?0.65?0.68?T:aes128gcmv1
0.850.880.93T:aes256gcmv1
7.337.447.48ascon128av12
10.9010.9310.97ascon80pqv12
10.9710.9911.01ascon128v12
13.8213.8513.89ascon128abi32v12
15.7515.7815.80T:xoodyakround3
17.8317.8917.94T:schwaemm256128v2
20.4620.5420.60T:isapa128v20
20.9320.9420.96ascon128bi32v12
22.5022.5422.75T:schwaemm256256v2
23.3723.4323.52T:schwaemm192192v2
25.3425.3625.38T:grain128aeadv2
25.7425.7825.81T:schwaemm128128v2
27.3027.3427.38T:isapa128av20
39.3639.4839.76romulusn
41.4441.4941.51T:giftcofb128v1
42.5642.6542.72romulust
45.2345.2945.37T:isapk128av20
56.4756.6056.80T:isapk128v20
60.2860.3160.37T:tinyjambu128v2
62.8062.9563.28romulusm
72.3572.3872.42T:tinyjambu192v2
79.7079.9680.06T:tinyjambu256v2
110.75110.79110.88T:isapxv20
146.50146.60146.67T:elephant200v2
296.65300.25321.84aes256gcmv1
7739.457759.327807.81T:elephant176v2
8158.618162.128164.04T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.510.520.53T:aes128gcmv1
0.61?0.81?1.79?T:aes256gcmv1
7.417.437.46ascon128av12
10.8410.8610.90ascon128v12
10.9210.9510.98ascon80pqv12
11.9912.0112.03T:xoodyakround3
13.8113.8313.97ascon128abi32v12
17.6317.6717.71T:schwaemm256128v2
20.5620.6320.84ascon128bi32v12
22.4122.4422.65T:schwaemm256256v2
23.3123.3523.41T:schwaemm192192v2
24.7324.7724.89T:grain128aeadv2
25.6225.6725.72T:schwaemm128128v2
31.0131.0931.18T:isapa128v20
31.4231.4731.52romulusn
33.7533.8733.90T:isapa128av20
41.3941.4341.45T:giftcofb128v1
43.2543.3443.40romulusm
49.3549.3849.41T:tinyjambu128v2
56.6756.6956.77T:isapk128av20
56.8356.9357.09T:tinyjambu192v2
59.9159.9760.02T:tinyjambu256v2
73.4773.5473.59T:isapk128v20
83.6983.8483.97romulust
110.27110.36110.44T:elephant200v2
147.14147.25147.44T:isapxv20
293.60294.62295.66aes256gcmv1
5625.985626.865628.93T:elephant176v2
6119.506120.276122.58T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.470.500.51T:aes128gcmv1
0.590.610.64T:aes256gcmv1
7.257.267.46ascon128av12
10.8710.8910.93ascon80pqv12
10.9210.9510.97ascon128v12
11.7911.8111.84T:xoodyakround3
13.8013.8213.84ascon128abi32v12
17.6917.7317.78T:schwaemm256128v2
20.6820.7120.75ascon128bi32v12
22.4022.6122.66T:schwaemm256256v2
23.1923.2623.31T:schwaemm192192v2
25.0825.1025.13T:grain128aeadv2
25.6225.6725.75T:schwaemm128128v2
31.0131.0631.17T:isapa128v20
31.5531.5931.65romulusn
33.8033.8833.91T:isapa128av20
41.3941.4241.44T:giftcofb128v1
43.2243.3943.51romulusm
49.3349.3849.43T:tinyjambu128v2
56.6256.7056.84T:isapk128av20
56.7756.7956.91T:tinyjambu192v2
60.1160.1560.26T:tinyjambu256v2
73.3973.4873.55T:isapk128v20
83.6883.7983.93romulust
110.25110.30110.38T:elephant200v2
146.86147.54148.11T:isapxv20
293.40294.06294.43aes256gcmv1
5625.645627.165627.76T:elephant176v2
6117.836120.986122.20T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.480.500.52T:aes128gcmv1
0.590.620.65T:aes256gcmv1
7.247.267.49ascon128av12
10.8710.9010.91ascon80pqv12
10.9310.9710.99ascon128v12
11.8011.8311.85T:xoodyakround3
13.8013.8313.85ascon128abi32v12
17.68?17.85?20.58?T:schwaemm256128v2
20.3220.4020.50T:isapa128v20
20.6920.7220.76ascon128bi32v12
22.4022.6422.67T:schwaemm256256v2
23.2323.3023.33T:schwaemm192192v2
25.0825.1025.27T:grain128aeadv2
25.6425.6725.73T:schwaemm128128v2
27.2227.2427.27T:isapa128av20
31.5331.5631.58romulusn
41.4041.4241.45T:giftcofb128v1
42.4642.4942.53romulust
43.2143.4443.52romulusm
45.1445.2145.27T:isapk128av20
49.3049.3449.37T:tinyjambu128v2
56.5056.5756.78T:isapk128v20
56.7856.7956.91T:tinyjambu192v2
60.0860.1160.14T:tinyjambu256v2
110.27110.33110.38T:elephant200v2
110.43110.48110.51T:isapxv20
286.55288.20288.45aes256gcmv1
5625.405626.285627.77T:elephant176v2
6119.266119.856121.04T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.33?0.35?0.37?T:aes128gcmv1
0.33?0.36?0.38?T:aes256gcmv1
7.427.447.47ascon128av12
7.947.987.99T:xoodyakround3
10.8810.8910.94ascon128v12
10.9110.9510.96ascon80pqv12
13.79?13.84?15.56?ascon128abi32v12
17.4917.5417.59T:schwaemm256128v2
20.0220.0820.17T:isapa128v20
20.4820.5821.04ascon128bi32v12
22.2822.5122.56T:schwaemm256256v2
23.0423.0923.15T:schwaemm192192v2
23.4723.6323.71romulusn
23.5823.6323.69romulusm
24.7324.7624.87T:grain128aeadv2
25.4425.5125.59T:schwaemm128128v2
27.3127.3527.37T:isapa128av20
38.3338.3838.43T:tinyjambu128v2
40.4640.5040.52T:tinyjambu256v2
41.2041.2341.44T:tinyjambu192v2
41.3341.3641.39T:giftcofb128v1
42.3042.3742.43romulust
45.0345.1245.28T:isapk128av20
56.3356.5556.64T:isapk128v20
74.4174.4774.54T:elephant200v2
110.02110.15110.20T:isapxv20
294.76300.00311.48aes256gcmv1
3700.353712.723720.57T:elephant176v2
4078.744080.864083.05T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.33?0.36?0.39?T:aes128gcmv1
0.33?0.36?0.38?T:aes256gcmv1
7.027.057.07ascon128av12
7.937.957.98T:xoodyakround3
10.8110.8410.86ascon80pqv12
10.8910.9110.93ascon128v12
13.7813.8113.85ascon128abi32v12
17.5017.5317.58T:schwaemm256128v2
20.0220.0720.18T:isapa128v20
20.4620.5020.52ascon128bi32v12
22.2822.4922.55T:schwaemm256256v2
23.0523.1323.18T:schwaemm192192v2
23.4923.5323.57romulusn
23.5923.6523.71romulusm
24.7724.7924.87T:grain128aeadv2
25.5125.5525.60T:schwaemm128128v2
27.2527.2927.34T:isapa128av20
38.2638.3338.37T:tinyjambu128v2
40.4940.5240.55T:tinyjambu256v2
41.2041.2241.27T:tinyjambu192v2
41.3241.3541.37T:giftcofb128v1
42.3642.3942.45romulust
45.0645.1345.23T:isapk128av20
56.4656.5556.66T:isapk128v20
74.4174.4974.56T:elephant200v2
110.06110.16110.20T:isapxv20
298.29304.04314.62aes256gcmv1
3702.573710.773720.36T:elephant176v2
4078.724080.974082.20T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.34?0.35?0.38?T:aes256gcmv1
0.34?0.35?0.38?T:aes128gcmv1
7.047.077.36ascon128av12
7.947.968.00T:xoodyakround3
10.7910.8310.84ascon80pqv12
10.8910.9010.93ascon128v12
13.79?13.83?15.62?ascon128abi32v12
17.5117.5417.59T:schwaemm256128v2
20.0920.1220.18T:isapa128v20
20.4620.5120.58ascon128bi32v12
22.29?22.54?25.66?T:schwaemm256256v2
23.0323.1123.19T:schwaemm192192v2
23.4723.5123.55romulusn
23.5923.6823.73romulusm
24.7724.7924.87T:grain128aeadv2
25.5025.5625.62T:schwaemm128128v2
27.3027.3127.37T:isapa128av20
38.3238.3738.42T:tinyjambu128v2
40.4940.5340.55T:tinyjambu256v2
41.2041.2341.41T:tinyjambu192v2
41.3341.3541.36T:giftcofb128v1
42.3142.3542.39romulust
45.0745.1545.23T:isapk128av20
56.3656.5656.74T:isapk128v20
74.4274.4674.51T:elephant200v2
110.08110.16110.24T:isapxv20
290.07296.90305.94aes256gcmv1
3703.953712.153721.19T:elephant176v2
4079.644080.834082.52T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.60?1.60?1.79?T:aes128gcmv1
1.731.741.75T:aes256gcmv1
7.627.637.64ascon128av12
11.0311.0411.07ascon128v12
11.1211.1411.15ascon80pqv12
12.1312.1412.15T:xoodyakround3
14.1114.1314.18ascon128abi32v12
18.2018.2218.28T:schwaemm256128v2
20.8720.9121.10ascon128bi32v12
23.0323.0523.25T:schwaemm256256v2
23.7423.7923.85T:schwaemm192192v2
25.1525.1625.29T:grain128aeadv2
26.0026.0126.12T:schwaemm128128v2
31.7731.8031.83romulusn
36.2936.3536.40T:isapa128av20
41.7241.7641.78T:giftcofb128v1
43.6543.7243.76romulusm
45.7445.7745.83T:isapa128v20
49.7449.8251.92T:tinyjambu128v2
57.3657.4357.63T:tinyjambu192v2
60.4560.4660.55T:tinyjambu256v2
63.3763.4363.53T:isapk128av20
85.0085.0485.19romulust
112.70112.73112.82T:elephant200v2
127.33127.34127.36T:isapk128v20
242.47242.63242.71T:isapxv20
297.12297.16297.26aes256gcmv1
5745.045819.645834.89T:elephant176v2
6187.886191.086191.52T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.571.581.61T:aes128gcmv1
1.701.701.74T:aes256gcmv1
7.447.467.64ascon128av12
11.0411.0711.08ascon80pqv12
11.1111.1311.14ascon128v12
11.9211.9411.97T:xoodyakround3
14.1214.1414.15ascon128abi32v12
18.2418.2718.28T:schwaemm256128v2
21.0121.0321.04ascon128bi32v12
23.0323.0523.22T:schwaemm256256v2
23.7323.7923.85T:schwaemm192192v2
25.5025.5325.55T:grain128aeadv2
25.9726.0026.04T:schwaemm128128v2
31.8831.9231.98romulusn
36.3436.3736.40T:isapa128av20
41.7441.7541.77T:giftcofb128v1
43.5743.6343.72romulusm
45.7445.7945.92T:isapa128v20
49.7549.7849.93T:tinyjambu128v2
57.2457.2857.59T:tinyjambu192v2
60.5360.5860.76T:tinyjambu256v2
63.4263.4563.52T:isapk128av20
85.0385.1085.23romulust
112.70112.72112.78T:elephant200v2
127.36127.40127.49T:isapk128v20
242.43242.50242.88T:isapxv20
296.06296.09296.29aes256gcmv1
5672.105818.035836.85T:elephant176v2
6188.126189.726191.04T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.56?1.57?1.75?T:aes128gcmv1
1.691.711.73T:aes256gcmv1
7.457.457.46ascon128av12
11.0511.0711.09ascon80pqv12
11.1111.1311.14ascon128v12
11.9511.9611.98T:xoodyakround3
14.1314.1414.15ascon128abi32v12
18.2418.2718.30T:schwaemm256128v2
21.0021.0221.25ascon128bi32v12
23.0323.0623.24T:schwaemm256256v2
23.7123.7723.78T:schwaemm192192v2
25.4925.5125.53T:grain128aeadv2
25.9726.0126.07T:schwaemm128128v2
27.9427.9728.06T:isapa128v20
28.6528.6728.70T:isapa128av20
31.8831.9231.98romulusn
41.7541.7741.79T:giftcofb128v1
43.5943.6543.73romulusm
43.7243.7443.78romulust
49.1249.1649.18T:isapk128av20
49.7249.7549.83T:tinyjambu128v2
57.2457.3459.38T:tinyjambu192v2
60.5460.5760.61T:tinyjambu256v2
84.1284.2084.26T:isapk128v20
112.69112.72112.76T:elephant200v2
159.18159.21159.26T:isapxv20
289.87289.90290.00aes256gcmv1
5671.185825.495838.85T:elephant176v2
6187.686190.696191.38T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
11.6711.9412.42ascon128av12
14.7915.0115.12ascon128v12
14.7415.0215.36ascon80pqv12
17.2017.2717.38T:xoodyakround3
20.9521.0321.59ascon128abi32v12
26.7326.9827.08T:aes128gcmv1
27.4527.6628.05ascon128bi32v12
27.4127.7327.90T:aes256gcmv1
29.5529.7529.90T:schwaemm256128v2
32.9233.3133.79T:schwaemm128128v2
34.3734.4534.51T:grain128aeadv2
36.6736.7436.92T:schwaemm256256v2
37.8937.9638.10romulusn
37.9538.3838.59T:schwaemm192192v2
49.5349.6849.77T:giftcofb128v1
51.1651.3251.47romulusm
58.3058.6158.78T:tinyjambu128v2
67.2067.3067.52T:tinyjambu192v2
70.5770.7570.94T:tinyjambu256v2
92.3894.0594.41T:isapa128av20
114.88115.04115.20romulust
161.45161.90162.63T:elephant200v2
205.02205.45206.13T:isapk128av20
336.17336.54361.68aes256gcmv1
382.30383.03383.21T:isapa128v20
1349.221349.541352.34T:isapk128v20
2406.252406.962407.70T:isapxv20
7055.417056.967061.00T:elephant176v2
8283.588285.068291.80T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
11.5511.8912.23ascon128av12
14.9215.0115.48ascon128v12
14.8715.0715.41ascon80pqv12
17.3017.3617.53T:xoodyakround3
21.0221.1621.67ascon128abi32v12
26.3226.5126.78T:aes128gcmv1
26.9527.2027.66T:aes256gcmv1
27.5627.6628.35ascon128bi32v12
29.4729.6630.15T:schwaemm256128v2
32.9233.3333.58T:schwaemm128128v2
34.6734.8135.06T:grain128aeadv2
36.7536.9237.08T:schwaemm256256v2
37.9838.0938.34romulusn
37.9338.1338.67T:schwaemm192192v2
49.5549.6349.80T:giftcofb128v1
52.5352.6752.78romulusm
58.3358.4758.77T:tinyjambu128v2
67.2767.4867.66T:tinyjambu192v2
70.8771.0171.29T:tinyjambu256v2
92.0293.9894.28T:isapa128av20
114.91115.16115.41romulust
161.38161.57161.98T:elephant200v2
205.56206.31206.84T:isapk128av20
335.26?336.54?384.47?aes256gcmv1
382.25382.88383.96T:isapa128v20
1350.101350.551351.99T:isapk128v20
2406.342408.142416.82T:isapxv20
7055.467057.517060.64T:elephant176v2
8282.698284.808291.17T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
11.5011.7311.95ascon128av12
14.8714.9315.03ascon80pqv12
14.8414.9615.16ascon128v12
17.1217.3617.47T:xoodyakround3
20.9821.1421.31ascon128abi32v12
26.2726.3826.45T:aes128gcmv1
26.8227.0027.12T:aes256gcmv1
27.6327.9228.05ascon128bi32v12
29.3329.4829.92T:schwaemm256128v2
32.8933.2033.51T:schwaemm128128v2
34.7034.7734.83T:grain128aeadv2
36.7236.8036.97T:schwaemm256256v2
37.9338.0538.13romulusn
37.9838.2238.37T:schwaemm192192v2
49.5549.7149.82T:giftcofb128v1
52.4152.5552.73romulusm
58.2258.3158.48T:tinyjambu128v2
59.8760.2060.44T:isapa128av20
67.2367.2667.43T:tinyjambu192v2
70.6870.8471.11T:tinyjambu256v2
71.3071.7371.97romulust
129.15129.64130.26T:isapk128av20
161.20161.73162.05T:elephant200v2
201.27201.63201.98T:isapa128v20
329.46?331.16?377.56?aes256gcmv1
705.79706.45707.06T:isapk128v20
1258.131258.641259.12T:isapxv20
7052.057056.427058.64T:elephant176v2
8282.838284.278287.61T:elephant160v2