VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Coffee Lake (906ea); 2018 Intel Xeon E-2124; 4 x 3300MHz; r24000, supercop-20240808

[Page version: 20240912 11:46:31]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.64?0.68?0.72?T:aes128gcmv1
0.87?0.91?0.98?T:aes256gcmv1
7.447.477.52ascon128av12
10.8310.8810.94ascon128v12
10.9110.9611.00ascon80pqv12
13.7714.0514.09ascon128abi32v12
14.5614.6114.64T:xoodyakround3
17.7017.7517.99T:schwaemm256128v2
20.9721.0321.09ascon128bi32v12
23.3223.6123.64T:schwaemm192192v2
24.2024.2224.31T:grain128aeadv2
24.3024.3524.66T:schwaemm256256v2
25.7525.7725.81T:schwaemm128128v2
33.5133.5533.60T:giftcofb128v1
39.3939.7039.77romulusn
41.0241.0941.13T:isapa128av20
43.0243.1143.21T:isapa128v20
62.9363.0263.10romulusm
67.7767.7867.79T:tinyjambu128v2
67.7868.0868.16T:isapk128av20
82.7283.5083.50T:tinyjambu192v2
89.2889.2989.29T:tinyjambu256v2
90.3790.7090.90T:isapk128v20
131.77131.82131.92romulust
175.88175.92175.95T:elephant200v2
231.16231.23231.30T:isapxv20
304.32304.46304.54aes256gcmv1
8142.728143.158143.56T:elephant176v2
8260.828261.378261.67T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.58?0.66?0.76?T:aes128gcmv1
0.81?0.88?0.96?T:aes256gcmv1
7.407.427.44ascon128av12
10.8810.9310.94ascon80pqv12
10.9510.9811.00ascon128v12
14.0114.0614.07ascon128abi32v12
14.6114.6514.69T:xoodyakround3
17.7517.8317.98T:schwaemm256128v2
20.8020.8320.86ascon128bi32v12
23.6423.6723.71T:schwaemm192192v2
24.3124.3524.68T:schwaemm256256v2
24.7724.8124.86T:grain128aeadv2
25.7725.8425.95T:schwaemm128128v2
33.5533.5833.61T:giftcofb128v1
39.3639.4039.44romulusn
41.0941.1341.19T:isapa128av20
42.9743.0843.20T:isapa128v20
62.8763.0763.33romulusm
68.0068.0068.02T:tinyjambu128v2
67.9368.0668.28T:isapk128av20
82.7583.5083.50T:tinyjambu192v2
89.2589.2689.27T:tinyjambu256v2
90.5390.6890.83T:isapk128v20
131.72131.81131.87romulust
175.91175.95175.97T:elephant200v2
231.12231.19231.31T:isapxv20
305.05305.25305.35aes256gcmv1
8142.548142.938143.38T:elephant176v2
8260.888261.368261.61T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.62?0.66?0.69?T:aes128gcmv1
0.81?0.89?0.95?T:aes256gcmv1
7.417.447.46ascon128av12
10.8910.9210.94ascon80pqv12
10.9410.9711.00ascon128v12
13.9814.0314.07ascon128abi32v12
14.6614.7114.74T:xoodyakround3
17.7417.8217.97T:schwaemm256128v2
20.8220.8320.85ascon128bi32v12
21.5321.6121.66T:isapa128v20
23.6223.6623.70T:schwaemm192192v2
24.3024.3424.63T:schwaemm256256v2
24.7724.8124.87T:grain128aeadv2
25.7825.8325.99T:schwaemm128128v2
27.2727.3227.39T:isapa128av20
33.5633.6233.68T:giftcofb128v1
39.3839.4239.81romulusn
44.9444.9745.03romulust
45.0045.1445.27T:isapk128av20
56.1356.2956.45T:isapk128v20
62.7162.9063.18romulusm
68.0068.0068.02T:tinyjambu128v2
82.7783.5083.50T:tinyjambu192v2
89.2589.2589.26T:tinyjambu256v2
134.49134.54134.61T:isapxv20
175.89175.93175.97T:elephant200v2
292.14292.25292.43aes256gcmv1
8142.918143.228143.57T:elephant176v2
8260.658261.328261.75T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.500.520.53T:aes128gcmv1
0.620.640.67T:aes256gcmv1
7.417.427.45ascon128av12
10.8510.8710.93ascon80pqv12
10.8610.8810.91ascon128v12
11.0011.0211.05T:xoodyakround3
13.9313.9613.98ascon128abi32v12
17.6217.8117.86T:schwaemm256128v2
20.7920.8620.98ascon128bi32v12
23.1323.1623.21T:schwaemm192192v2
24.2024.2424.59T:schwaemm256256v2
24.3324.3524.46T:grain128aeadv2
25.6025.6225.65T:schwaemm128128v2
31.4731.5231.70romulusn
32.3032.3832.44T:isapa128v20
33.5733.6133.64T:giftcofb128v1
34.2034.2334.27T:isapa128av20
43.2543.3443.40romulusm
55.4555.4655.50T:tinyjambu128v2
56.5656.7256.83T:isapk128av20
63.5563.5663.56T:tinyjambu192v2
67.3967.4067.41T:tinyjambu256v2
73.3573.4573.52T:isapk128v20
88.3588.4088.44romulust
131.80131.83131.84T:elephant200v2
183.74183.80183.89T:isapxv20
298.71298.83298.92aes256gcmv1
6084.106084.386084.64T:elephant176v2
6195.406195.896196.06T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.47?0.51?0.53?T:aes128gcmv1
0.57?0.63?0.66?T:aes256gcmv1
7.407.417.43ascon128av12
10.8210.8710.89ascon80pqv12
10.8310.8910.92ascon128v12
11.0311.0611.07T:xoodyakround3
13.9213.9413.97ascon128abi32v12
17.5817.6217.64T:schwaemm256128v2
20.6520.7320.77ascon128bi32v12
23.1823.2223.54T:schwaemm192192v2
24.2124.2524.59T:schwaemm256256v2
24.5124.5424.56T:grain128aeadv2
25.6125.6925.75T:schwaemm128128v2
31.5031.5231.56romulusn
32.3532.4132.45T:isapa128v20
33.5733.6133.67T:giftcofb128v1
34.2134.2334.25T:isapa128av20
43.3443.4043.48romulusm
55.5755.5855.58T:tinyjambu128v2
56.6756.7256.84T:isapk128av20
63.1563.1663.56T:tinyjambu192v2
67.3867.3867.40T:tinyjambu256v2
73.2873.4173.56T:isapk128v20
88.3488.3988.42romulust
131.80131.82131.85T:elephant200v2
183.78183.81183.86T:isapxv20
298.57298.74298.87aes256gcmv1
6084.116084.336084.62T:elephant176v2
6195.066195.576196.14T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.480.500.52T:aes128gcmv1
0.590.630.64T:aes256gcmv1
7.397.407.42ascon128av12
10.8310.8510.88ascon80pqv12
10.8710.8910.91ascon128v12
11.0511.0611.08T:xoodyakround3
13.9413.9613.98ascon128abi32v12
17.5917.6417.68T:schwaemm256128v2
20.6220.6920.77ascon128bi32v12
21.6321.6621.70T:isapa128v20
23.1323.1923.24T:schwaemm192192v2
24.2224.2424.56T:schwaemm256256v2
24.5224.5324.55T:grain128aeadv2
25.6225.6625.75T:schwaemm128128v2
27.3127.3227.35T:isapa128av20
31.4931.5331.58romulusn
33.5733.6133.65T:giftcofb128v1
43.1843.3043.44romulusm
44.9544.9845.02romulust
45.1745.2745.36T:isapk128av20
55.5755.5755.58T:tinyjambu128v2
56.1756.2656.38T:isapk128v20
63.1563.1663.56T:tinyjambu192v2
67.3867.3867.40T:tinyjambu256v2
131.80131.82131.84T:elephant200v2
135.43135.46135.50T:isapxv20
292.10292.23292.32aes256gcmv1
6084.036084.266084.53T:elephant176v2
6195.056195.606195.95T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.34?0.37?0.41?T:aes128gcmv1
0.32?0.39?0.44?T:aes256gcmv1
7.367.397.41ascon128av12
7.477.517.53T:xoodyakround3
10.7910.8110.84ascon80pqv12
10.8710.9010.93ascon128v12
13.7913.8313.84ascon128abi32v12
17.4017.4617.51T:schwaemm256128v2
20.6420.7220.88ascon128bi32v12
21.6321.6721.76T:isapa128v20
22.9623.0023.11T:schwaemm192192v2
23.5823.6623.75romulusm
23.6823.7223.77romulusn
24.0924.1324.48T:schwaemm256256v2
24.4424.4624.57T:grain128aeadv2
25.4225.4525.48T:schwaemm128128v2
27.2927.3327.36T:isapa128av20
33.4933.5833.64T:giftcofb128v1
43.1343.1443.15T:tinyjambu128v2
43.5743.5743.57T:tinyjambu192v2
44.8744.8944.93romulust
45.1345.2745.32T:isapk128av20
45.5045.5145.51T:tinyjambu256v2
56.0656.2056.33T:isapk128v20
87.9888.0088.03T:elephant200v2
136.37136.42136.46T:isapxv20
292.40292.53292.73aes256gcmv1
4024.064024.434024.74T:elephant176v2
4129.124129.374129.58T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.31?0.36?0.42?T:aes128gcmv1
0.28?0.38?0.45?T:aes256gcmv1
7.367.387.39ascon128av12
7.487.507.51T:xoodyakround3
10.7110.8010.83ascon80pqv12
10.7810.8210.84ascon128v12
13.7813.8013.82ascon128abi32v12
17.4417.4717.49T:schwaemm256128v2
20.4520.5420.70ascon128bi32v12
21.6021.6621.72T:isapa128v20
23.0223.3923.44T:schwaemm192192v2
23.6823.7123.76romulusn
23.5723.7223.77romulusm
24.1224.1624.47T:schwaemm256256v2
24.1724.2124.22T:grain128aeadv2
25.3825.4325.48T:schwaemm128128v2
27.2727.3127.35T:isapa128av20
33.4933.5433.60T:giftcofb128v1
43.1343.1443.16T:tinyjambu128v2
43.5643.5743.58T:tinyjambu192v2
44.8944.9344.99romulust
45.1345.2145.41T:isapk128av20
45.5045.5145.51T:tinyjambu256v2
56.0656.2056.34T:isapk128v20
87.9788.0088.01T:elephant200v2
136.35136.41136.49T:isapxv20
292.21292.30292.39aes256gcmv1
4023.924024.294024.65T:elephant176v2
4129.214129.374129.55T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.29?0.37?0.45?T:aes256gcmv1
0.35?0.40?0.43?T:aes128gcmv1
7.357.377.39ascon128av12
7.517.537.55T:xoodyakround3
10.7010.7710.82ascon80pqv12
10.7110.7810.82ascon128v12
13.7813.8113.83ascon128abi32v12
17.4217.4417.49T:schwaemm256128v2
20.3820.5320.70ascon128bi32v12
21.6521.7021.76T:isapa128v20
22.9923.0323.08T:schwaemm192192v2
23.6123.6923.77romulusm
23.7023.7223.77romulusn
24.1224.1424.45T:schwaemm256256v2
24.1824.2124.23T:grain128aeadv2
25.4125.4625.50T:schwaemm128128v2
27.2827.3227.36T:isapa128av20
33.5033.5433.60T:giftcofb128v1
43.1343.1343.14T:tinyjambu128v2
43.5643.5743.57T:tinyjambu192v2
44.8944.9244.98romulust
45.1245.1845.33T:isapk128av20
45.5045.5045.51T:tinyjambu256v2
56.0756.2356.40T:isapk128v20
87.9687.9988.01T:elephant200v2
136.37136.42136.47T:isapxv20
292.06292.31292.46aes256gcmv1
4024.174024.704024.98T:elephant176v2
4129.194129.444129.82T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.651.661.67T:aes128gcmv1
1.781.791.81T:aes256gcmv1
7.607.637.66ascon128av12
11.0411.0511.07ascon80pqv12
11.0611.0911.11ascon128v12
11.1611.1811.20T:xoodyakround3
14.2614.2714.28ascon128abi32v12
18.1718.3518.37T:schwaemm256128v2
21.0121.1421.20ascon128bi32v12
23.7023.7323.76T:schwaemm192192v2
24.7724.7924.89T:grain128aeadv2
24.9124.9225.22T:schwaemm256256v2
25.9725.9926.02T:schwaemm128128v2
31.8031.8431.99romulusn
33.9033.9333.97T:giftcofb128v1
36.3736.3936.41T:isapa128av20
43.6243.6843.72romulusm
47.4447.4647.50T:isapa128v20
55.8855.9055.92T:tinyjambu128v2
63.9863.9963.99T:tinyjambu192v2
64.2364.2864.37T:isapk128av20
67.8967.8967.89T:tinyjambu256v2
89.7489.7889.81romulust
128.15128.18128.23T:isapk128v20
134.59134.62134.64T:elephant200v2
299.94299.95299.99T:isapxv20
300.43300.51300.58aes256gcmv1
6130.436130.566130.87T:elephant176v2
6265.476265.816265.97T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.641.641.66T:aes128gcmv1
1.761.771.80T:aes256gcmv1
7.587.607.61ascon128av12
11.0211.0411.07ascon80pqv12
11.0611.0811.09ascon128v12
11.1611.1711.19T:xoodyakround3
14.2514.2514.27ascon128abi32v12
18.1218.1418.22T:schwaemm256128v2
20.9621.0121.12ascon128bi32v12
23.7223.7423.81T:schwaemm192192v2
24.9024.9325.20T:schwaemm256256v2
24.9424.9624.97T:grain128aeadv2
25.9725.9926.09T:schwaemm128128v2
31.8131.8531.87romulusn
33.9433.9534.00T:giftcofb128v1
36.3636.4136.44T:isapa128av20
43.7943.8843.92romulusm
47.4347.4647.53T:isapa128v20
55.9956.0056.01T:tinyjambu128v2
63.6763.9964.00T:tinyjambu192v2
64.2664.3164.36T:isapk128av20
67.8767.8767.88T:tinyjambu256v2
89.7489.7989.84romulust
128.15128.18128.26T:isapk128v20
134.59134.60134.60T:elephant200v2
299.92299.99300.01T:isapxv20
300.36300.46300.76aes256gcmv1
6130.566130.686131.01T:elephant176v2
6265.296265.676265.95T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.631.641.65T:aes128gcmv1
1.761.771.80T:aes256gcmv1
7.607.617.62ascon128av12
11.0111.0311.06ascon80pqv12
11.0411.0611.07ascon128v12
11.2011.2011.21T:xoodyakround3
14.2414.2614.27ascon128abi32v12
18.1218.1618.20T:schwaemm256128v2
20.9321.0021.05ascon128bi32v12
23.7123.7823.97T:schwaemm192192v2
24.9024.9325.23T:schwaemm256256v2
24.9424.9724.98T:grain128aeadv2
25.9726.0226.11T:schwaemm128128v2
28.5928.6028.62T:isapa128av20
29.3129.3329.35T:isapa128v20
31.8331.8632.06romulusn
33.9433.9734.00T:giftcofb128v1
43.6643.8443.87romulusm
46.2546.2646.32romulust
49.5649.6049.66T:isapk128av20
55.9955.9956.00T:tinyjambu128v2
63.9563.9964.00T:tinyjambu192v2
67.8767.8767.88T:tinyjambu256v2
84.3784.4084.50T:isapk128v20
134.58134.59134.60T:elephant200v2
194.87194.88194.91T:isapxv20
293.88294.01294.16aes256gcmv1
6130.406130.576130.72T:elephant176v2
6265.446265.796266.14T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
11.9012.0212.60ascon128av12
14.8814.9715.10ascon80pqv12
15.0415.2215.33ascon128v12
16.2716.3316.52T:xoodyakround3
21.4521.6621.99ascon128abi32v12
27.5428.0628.31ascon128bi32v12
28.0928.2228.45T:aes128gcmv1
28.8029.0929.64T:aes256gcmv1
29.5229.6830.22T:schwaemm256128v2
33.5333.6534.03T:schwaemm128128v2
34.7434.8334.91T:grain128aeadv2
38.2538.4538.52romulusn
38.2738.6138.97T:schwaemm192192v2
39.5239.8740.08T:schwaemm256256v2
41.9142.0442.17T:giftcofb128v1
51.7351.7752.11romulusm
65.5365.5965.77T:tinyjambu128v2
74.0374.0974.40T:tinyjambu192v2
79.1279.2779.33T:tinyjambu256v2
86.2386.4886.68T:isapa128av20
121.03121.28121.78romulust
190.62190.80191.26T:elephant200v2
223.84225.16226.14T:isapk128av20
339.30339.65339.90aes256gcmv1
393.66393.88395.19T:isapa128v20
1367.031368.511369.79T:isapk128v20
2937.692937.852938.27T:isapxv20
7636.327636.997638.40T:elephant176v2
8391.678392.408393.66T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
11.9612.1612.38ascon128av12
15.0915.1415.40ascon80pqv12
15.2115.4315.79ascon128v12
16.2916.3816.61T:xoodyakround3
21.2021.4121.59ascon128abi32v12
27.9528.1429.16T:aes128gcmv1
28.0828.2228.48ascon128bi32v12
28.5428.9530.08T:aes256gcmv1
29.4529.5229.62T:schwaemm256128v2
33.3833.6633.71T:schwaemm128128v2
34.9335.0335.27T:grain128aeadv2
38.1938.3838.55romulusn
38.3638.6338.87T:schwaemm192192v2
39.7139.8940.21T:schwaemm256256v2
42.0842.3642.57T:giftcofb128v1
53.2453.4453.69romulusm
65.7565.7965.82T:tinyjambu128v2
74.2974.5374.59T:tinyjambu192v2
79.1979.2679.30T:tinyjambu256v2
86.1686.6286.79T:isapa128av20
121.04121.46121.83romulust
190.35190.41190.48T:elephant200v2
225.29226.12226.76T:isapk128av20
339.66339.78340.23aes256gcmv1
393.08393.62394.57T:isapa128v20
1367.101368.051369.39T:isapk128v20
2938.052938.382938.73T:isapxv20
7636.377637.697639.09T:elephant176v2
8391.638392.228394.32T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
11.8711.9112.10ascon128av12
15.0115.1215.36ascon80pqv12
14.9415.1315.34ascon128v12
16.2716.3416.45T:xoodyakround3
21.2321.2721.48ascon128abi32v12
27.7427.9828.29T:aes128gcmv1
27.9028.0828.25ascon128bi32v12
28.1728.5229.44T:aes256gcmv1
29.4229.4829.57T:schwaemm256128v2
33.2933.6233.85T:schwaemm128128v2
34.8934.9635.23T:grain128aeadv2
38.1838.3338.73T:schwaemm192192v2
38.2038.3838.48romulusn
39.5939.7540.04T:schwaemm256256v2
42.0242.2342.40T:giftcofb128v1
53.3453.4153.45romulusm
57.2357.5657.73T:isapa128av20
65.7165.7265.73T:tinyjambu128v2
74.5374.5574.56T:tinyjambu192v2
75.6576.0376.17romulust
79.1679.1779.18T:tinyjambu256v2
138.88139.58140.68T:isapk128av20
190.40190.45190.52T:elephant200v2
205.20205.48205.88T:isapa128v20
332.63332.98333.15aes256gcmv1
715.31715.85717.42T:isapk128v20
1535.451535.551535.88T:isapxv20
7635.177636.667637.69T:elephant176v2
8391.658392.488394.92T:elephant160v2