VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Skylake (506e3); 2015 Intel Xeon E3-1220 v5; 4 x 3000MHz; samba, supercop-20240909

[Page version: 20240912 11:46:31]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.650.680.70T:aes128gcmv1
0.890.920.94T:aes256gcmv1
7.407.437.45ascon128av12
10.8011.0411.08ascon128v12
10.9511.0511.09ascon80pqv12
13.7714.0714.10ascon128abi32v12
16.0716.1016.14T:xoodyakround3
17.8417.9218.52T:schwaemm256128v2
21.0821.1221.15ascon128bi32v12
22.5022.5322.53T:schwaemm256256v2
23.5023.5623.62T:schwaemm192192v2
24.9024.9225.02T:grain128aeadv2
25.7025.7625.82T:schwaemm128128v2
39.4239.4539.47romulusn
40.1140.3440.48T:isapa128av20
41.4741.5341.59T:giftcofb128v1
41.9341.9842.16T:isapa128v20
60.7660.8160.87T:tinyjambu128v2
62.9062.9563.09romulusm
68.2368.3268.42T:isapk128av20
72.7772.8072.85T:tinyjambu192v2
79.0379.0679.09T:tinyjambu256v2
90.3790.5490.67T:isapk128v20
124.96125.01125.08romulust
146.53146.59146.70T:elephant200v2
189.36189.50189.68T:isapxv20
323.98324.08324.29aes256gcmv1
7525.247526.207549.73T:elephant176v2
8154.628156.058296.57T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.60?0.68?0.70?T:aes128gcmv1
0.82?0.89?0.93?T:aes256gcmv1
7.427.447.47ascon128av12
10.9110.9410.97ascon80pqv12
10.9510.9711.01ascon128v12
14.0014.0514.09ascon128abi32v12
15.9215.9816.00T:xoodyakround3
17.9217.9918.78T:schwaemm256128v2
20.7020.7521.03ascon128bi32v12
22.5022.5222.54T:schwaemm256256v2
23.3923.4523.56T:schwaemm192192v2
25.3525.3725.39T:grain128aeadv2
25.7125.7925.84T:schwaemm128128v2
39.4939.5239.53romulusn
40.0340.1940.38T:isapa128av20
41.4541.5041.56T:giftcofb128v1
41.8641.9442.05T:isapa128v20
60.6360.6860.74T:tinyjambu128v2
63.0863.1363.32romulusm
68.2168.2868.37T:isapk128av20
72.4072.6372.96T:tinyjambu192v2
78.9678.9979.02T:tinyjambu256v2
90.3890.5190.60T:isapk128v20
124.99125.09125.21romulust
146.52146.64146.75T:elephant200v2
189.35189.44189.74T:isapxv20
324.23324.40324.64aes256gcmv1
7525.577526.077526.57T:elephant176v2
8154.868156.278294.57T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.630.660.68T:aes128gcmv1
0.820.860.91T:aes256gcmv1
7.447.467.49ascon128av12
10.9210.9310.97ascon80pqv12
10.9611.0011.02ascon128v12
13.9714.0414.09ascon128abi32v12
15.9615.9916.03T:xoodyakround3
17.8517.9118.70T:schwaemm256128v2
20.4620.5620.62T:isapa128v20
20.7120.7520.93ascon128bi32v12
22.5022.5122.53T:schwaemm256256v2
23.4123.5023.61T:schwaemm192192v2
25.3725.3825.40T:grain128aeadv2
25.7225.7925.87T:schwaemm128128v2
27.2727.3027.35T:isapa128av20
39.5039.5239.55romulusn
41.4241.4541.49T:giftcofb128v1
42.5742.6442.68romulust
45.2545.2945.33T:isapk128av20
56.5656.6556.75T:isapk128v20
60.5960.6660.70T:tinyjambu128v2
63.0863.2063.33romulusm
72.4072.8373.07T:tinyjambu192v2
78.9979.0379.06T:tinyjambu256v2
111.08111.16111.23T:isapxv20
146.53146.64146.74T:elephant200v2
311.63311.86312.09aes256gcmv1
7524.947525.587526.27T:elephant176v2
8154.998156.738295.58T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.510.510.52T:aes128gcmv1
0.57?0.63?0.70?T:aes256gcmv1
7.447.457.47ascon128av12
10.8410.8710.89ascon128v12
10.9310.9510.98ascon80pqv12
12.2712.2912.31T:xoodyakround3
13.7913.8113.83ascon128abi32v12
17.7117.7617.80T:schwaemm256128v2
20.5520.7920.83ascon128bi32v12
22.4022.4222.44T:schwaemm256256v2
23.3323.3923.43T:schwaemm192192v2
24.8824.9125.00T:grain128aeadv2
25.6525.6825.74T:schwaemm128128v2
31.0131.0631.14T:isapa128v20
31.4031.4331.45romulusn
33.7633.8233.92T:isapa128av20
41.3841.4141.45T:giftcofb128v1
43.1943.2443.42romulusm
49.6349.7049.76T:tinyjambu128v2
56.6556.7156.76T:isapk128av20
57.0357.0657.08T:tinyjambu192v2
59.7559.7859.81T:tinyjambu256v2
73.4473.4873.57T:isapk128v20
83.6883.7383.77romulust
110.21110.27110.33T:elephant200v2
150.64150.78150.84T:isapxv20
317.80317.87317.91aes256gcmv1
5619.995620.595620.90T:elephant176v2
6115.506115.826116.18T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.480.510.52T:aes128gcmv1
0.56?0.63?0.67?T:aes256gcmv1
7.237.267.47ascon128av12
10.8610.8910.91ascon80pqv12
10.9310.9510.96ascon128v12
12.0812.1212.14T:xoodyakround3
13.8713.9213.94ascon128abi32v12
17.7217.7617.79T:schwaemm256128v2
20.6220.7120.85ascon128bi32v12
22.4022.4422.45T:schwaemm256256v2
23.2723.3323.39T:schwaemm192192v2
25.1125.1225.14T:grain128aeadv2
25.6525.7025.75T:schwaemm128128v2
30.9931.0431.09T:isapa128v20
31.4431.4631.50romulusn
33.7533.8333.89T:isapa128av20
41.4041.4141.45T:giftcofb128v1
43.3643.3943.52romulusm
49.5349.5949.65T:tinyjambu128v2
56.6756.7256.95T:isapk128av20
56.9857.1457.17T:tinyjambu192v2
59.7559.7659.77T:tinyjambu256v2
73.3973.4473.52T:isapk128v20
83.6883.7283.74romulust
110.23110.26110.29T:elephant200v2
150.62150.73150.82T:isapxv20
317.81317.90317.98aes256gcmv1
5620.175620.475620.82T:elephant176v2
6115.566115.806116.02T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.480.500.52T:aes128gcmv1
0.58?0.62?0.66?T:aes256gcmv1
7.257.267.45ascon128av12
10.8710.9010.91ascon80pqv12
10.9310.9510.98ascon128v12
12.1012.1112.15T:xoodyakround3
13.8813.9313.95ascon128abi32v12
17.7217.7417.81T:schwaemm256128v2
20.3220.3820.49T:isapa128v20
20.6320.7720.86ascon128bi32v12
22.4122.4422.45T:schwaemm256256v2
23.2723.3223.40T:schwaemm192192v2
25.1125.1125.13T:grain128aeadv2
25.6425.7025.74T:schwaemm128128v2
27.2127.2427.27T:isapa128av20
31.4331.4631.50romulusn
41.4141.4241.46T:giftcofb128v1
42.4742.5042.53romulust
43.3143.3543.56romulusm
45.1745.2145.25T:isapk128av20
49.5549.6449.68T:tinyjambu128v2
56.5056.5356.58T:isapk128v20
56.8657.0657.17T:tinyjambu192v2
59.7659.7859.81T:tinyjambu256v2
110.22110.26110.43T:elephant200v2
111.47111.56111.69T:isapxv20
311.48311.58311.69aes256gcmv1
5620.155620.555621.09T:elephant176v2
6115.386115.826116.15T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.26?0.36?0.45?T:aes256gcmv1
0.34?0.37?0.39?T:aes128gcmv1
7.427.457.47ascon128av12
8.318.368.38T:xoodyakround3
10.8710.8910.92ascon128v12
10.9210.9410.98ascon80pqv12
13.7913.8113.83ascon128abi32v12
17.5017.5817.64T:schwaemm256128v2
20.0320.1120.19T:isapa128v20
20.4720.5120.53ascon128bi32v12
22.2822.3022.32T:schwaemm256256v2
23.1323.1723.20T:schwaemm192192v2
23.4423.4723.63romulusn
23.5823.6423.77romulusm
24.8024.8324.93T:grain128aeadv2
25.5125.5425.59T:schwaemm128128v2
27.2627.3227.35T:isapa128av20
38.4838.5938.76T:tinyjambu128v2
40.4740.4840.51T:tinyjambu256v2
41.3041.3241.33T:tinyjambu192v2
41.3141.3541.39T:giftcofb128v1
42.3642.3942.45romulust
45.0845.1845.23T:isapk128av20
56.4356.5156.58T:isapk128v20
74.4374.4674.57T:elephant200v2
112.19112.23112.34T:isapxv20
311.67311.77311.88aes256gcmv1
3716.563717.003717.35T:elephant176v2
4068.404075.184076.14T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.30?0.36?0.43?T:aes256gcmv1
0.33?0.36?0.39?T:aes128gcmv1
7.037.067.10ascon128av12
8.288.348.37T:xoodyakround3
10.8110.8310.84ascon80pqv12
10.8710.9210.94ascon128v12
13.7813.8113.82ascon128abi32v12
17.5117.5717.63T:schwaemm256128v2
20.0320.0820.14T:isapa128v20
20.4720.5320.98ascon128bi32v12
22.2822.3022.32T:schwaemm256256v2
23.0823.1623.23T:schwaemm192192v2
23.4323.4623.49romulusn
23.5723.6523.79romulusm
24.7924.8224.84T:grain128aeadv2
25.4825.5525.59T:schwaemm128128v2
27.2527.3127.34T:isapa128av20
38.4238.5738.72T:tinyjambu128v2
40.4840.5040.53T:tinyjambu256v2
41.3241.3341.35T:tinyjambu192v2
41.3241.3741.40T:giftcofb128v1
42.3342.3842.41romulust
45.1245.1745.23T:isapk128av20
56.4856.5756.70T:isapk128v20
74.4674.4974.54T:elephant200v2
112.17112.28112.32T:isapxv20
311.50311.62311.80aes256gcmv1
3716.683716.913717.43T:elephant176v2
4068.434075.544076.41T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.29?0.34?0.40?T:aes256gcmv1
0.340.350.37T:aes128gcmv1
7.037.077.10ascon128av12
8.318.378.40T:xoodyakround3
10.8210.8410.86ascon80pqv12
10.9010.9110.93ascon128v12
13.7813.8213.83ascon128abi32v12
17.5217.5917.64T:schwaemm256128v2
20.0420.1020.18T:isapa128v20
20.5820.7620.97ascon128bi32v12
22.2922.3022.31T:schwaemm256256v2
23.0523.1323.20T:schwaemm192192v2
23.4323.4723.57romulusn
23.5623.6323.75romulusm
24.8124.8324.84T:grain128aeadv2
25.4625.5425.59T:schwaemm128128v2
27.2927.3327.36T:isapa128av20
38.4038.5538.71T:tinyjambu128v2
40.4740.4940.50T:tinyjambu256v2
41.3241.3441.35T:tinyjambu192v2
41.3341.3641.40T:giftcofb128v1
42.3142.3842.44romulust
45.0945.1745.22T:isapk128av20
56.4556.5656.65T:isapk128v20
74.4774.5074.55T:elephant200v2
112.24112.28112.32T:isapxv20
311.56311.69311.84aes256gcmv1
3716.603717.083717.56T:elephant176v2
4068.584075.634076.26T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.601.611.61T:aes128gcmv1
1.751.761.82T:aes256gcmv1
7.627.637.66ascon128av12
11.0411.0511.07ascon128v12
11.1211.1311.14ascon80pqv12
12.4312.4512.47T:xoodyakround3
14.1214.1414.15ascon128abi32v12
18.3018.3318.36T:schwaemm256128v2
20.8821.1121.13ascon128bi32v12
23.0323.0523.07T:schwaemm256256v2
23.8223.8823.92T:schwaemm192192v2
25.2825.3125.38T:grain128aeadv2
25.9726.0426.08T:schwaemm128128v2
31.7331.7831.81romulusn
36.2236.3436.36T:isapa128av20
41.7541.7841.80T:giftcofb128v1
43.5943.6143.74romulusm
45.7445.7745.82T:isapa128v20
50.0350.1450.17T:tinyjambu128v2
57.5057.5157.54T:tinyjambu192v2
60.2660.2860.33T:tinyjambu256v2
63.4063.4263.49T:isapk128av20
85.0385.0585.11romulust
112.64112.70112.74T:elephant200v2
127.27127.32127.44T:isapk128v20
246.15246.31246.38T:isapxv20
319.60319.64319.70aes256gcmv1
5663.845678.985679.70T:elephant176v2
6184.616185.076293.40T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.571.581.59T:aes128gcmv1
1.721.741.78T:aes256gcmv1
7.457.467.59ascon128av12
11.0511.0711.10ascon80pqv12
11.1311.1411.15ascon128v12
12.2512.2612.28T:xoodyakround3
14.2114.2314.26ascon128abi32v12
18.2418.2618.31T:schwaemm256128v2
20.9821.0121.16ascon128bi32v12
23.0423.0623.07T:schwaemm256256v2
23.8123.8523.89T:schwaemm192192v2
25.5125.5225.55T:grain128aeadv2
26.0226.0426.07T:schwaemm128128v2
31.7931.8131.84romulusn
36.2136.3336.38T:isapa128av20
41.7641.8041.82T:giftcofb128v1
43.7743.8043.89romulusm
45.7445.8045.83T:isapa128v20
49.9250.0150.09T:tinyjambu128v2
57.3257.4757.51T:tinyjambu192v2
60.2260.2360.30T:tinyjambu256v2
63.4663.4763.54T:isapk128av20
85.0185.0485.05romulust
112.65112.70112.74T:elephant200v2
127.29127.34127.40T:isapk128v20
246.16246.23246.36T:isapxv20
319.68319.72319.80aes256gcmv1
5663.725678.575679.11T:elephant176v2
6184.546185.066293.29T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.571.571.58T:aes128gcmv1
1.711.721.75T:aes256gcmv1
7.447.457.46ascon128av12
11.0611.0811.09ascon80pqv12
11.1211.1311.14ascon128v12
12.2812.2912.31T:xoodyakround3
14.2114.2414.26ascon128abi32v12
18.2618.2918.32T:schwaemm256128v2
21.1321.1521.17ascon128bi32v12
23.0223.0523.06T:schwaemm256256v2
23.8123.8623.88T:schwaemm192192v2
25.5225.5325.55T:grain128aeadv2
26.0026.0326.09T:schwaemm128128v2
27.9427.9528.01T:isapa128v20
28.6628.6928.71T:isapa128av20
31.7831.8031.85romulusn
41.7641.7941.82T:giftcofb128v1
43.7343.7643.80romulust
43.7243.7943.93romulusm
49.1149.1349.16T:isapk128av20
49.9350.0350.07T:tinyjambu128v2
57.3357.5157.61T:tinyjambu192v2
60.2360.2660.29T:tinyjambu256v2
84.1284.1884.21T:isapk128v20
112.62112.66112.75T:elephant200v2
160.50160.53160.55T:isapxv20
313.38313.44313.50aes256gcmv1
5663.625679.005679.44T:elephant176v2
6184.256184.996293.41T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
11.8812.0012.41ascon128av12
15.1815.2215.52ascon80pqv12
15.1915.3815.75ascon128v12
17.9118.0718.42T:xoodyakround3
21.1621.3921.80ascon128abi32v12
27.0927.2327.45T:aes128gcmv1
27.5927.7428.07ascon128bi32v12
27.9528.3530.46T:aes256gcmv1
29.8630.0130.25T:schwaemm256128v2
33.5833.8634.24T:schwaemm128128v2
34.4834.5434.66T:grain128aeadv2
36.8236.8636.93T:schwaemm256256v2
38.1238.2238.34romulusn
38.3438.7639.25T:schwaemm192192v2
49.7249.8850.11T:giftcofb128v1
51.3851.6852.05romulusm
58.9259.0859.29T:tinyjambu128v2
67.7967.9068.12T:tinyjambu192v2
70.6870.8471.08T:tinyjambu256v2
94.0294.2194.33T:isapa128av20
114.70115.06115.66romulust
161.23161.67162.19T:elephant200v2
204.81205.05205.41T:isapk128av20
360.89361.16361.40aes256gcmv1
382.59383.02383.37T:isapa128v20
1348.551348.771349.17T:isapk128v20
2414.652414.832415.45T:isapxv20
7052.647055.247056.23T:elephant176v2
8285.468285.738287.46T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
11.9912.0812.55ascon128av12
15.0915.1915.48ascon80pqv12
15.0615.3415.65ascon128v12
17.9718.1818.39T:xoodyakround3
21.2721.4521.73ascon128abi32v12
26.3826.9027.09T:aes128gcmv1
27.5227.8829.02T:aes256gcmv1
27.8828.0228.34ascon128bi32v12
29.9130.2030.52T:schwaemm256128v2
33.3433.4533.88T:schwaemm128128v2
34.7234.8334.91T:grain128aeadv2
36.9336.9736.99T:schwaemm256256v2
38.3338.4138.62romulusn
38.4738.6939.12T:schwaemm192192v2
49.9650.0750.24T:giftcofb128v1
52.6852.8353.09romulusm
58.8859.0259.24T:tinyjambu128v2
67.7767.8868.27T:tinyjambu192v2
70.6570.7470.88T:tinyjambu256v2
93.7093.9994.10T:isapa128av20
114.51114.90115.31romulust
161.83162.30162.49T:elephant200v2
205.14205.50206.26T:isapk128av20
360.91361.45362.32aes256gcmv1
382.81383.50384.64T:isapa128v20
1350.251350.481350.78T:isapk128v20
2414.702415.552415.95T:isapxv20
7053.397054.447055.87T:elephant176v2
8285.798287.108289.02T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
11.8311.9512.15ascon128av12
15.1015.1715.34ascon128v12
15.1115.1815.30ascon80pqv12
18.0118.1218.30T:xoodyakround3
21.3021.4121.62ascon128abi32v12
26.6026.6727.05T:aes128gcmv1
27.4727.5928.45T:aes256gcmv1
27.8428.1128.20ascon128bi32v12
29.7829.9930.16T:schwaemm256128v2
33.2333.4733.88T:schwaemm128128v2
34.6934.7034.79T:grain128aeadv2
36.8736.9236.93T:schwaemm256256v2
38.1938.3238.51romulusn
38.3738.5438.69T:schwaemm192192v2
49.8849.9450.05T:giftcofb128v1
52.6552.7752.96romulusm
58.8058.8959.12T:tinyjambu128v2
60.4460.5860.78T:isapa128av20
67.7567.8067.94T:tinyjambu192v2
70.6470.7070.73T:tinyjambu256v2
71.8171.9472.05romulust
128.63129.05129.51T:isapk128av20
161.13161.62162.10T:elephant200v2
201.25201.91202.66T:isapa128v20
354.87355.19355.84aes256gcmv1
706.03706.57707.07T:isapk128v20
1262.511262.681263.38T:isapxv20
7052.847054.957055.99T:elephant176v2
8285.348286.478288.85T:elephant160v2