VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: aarch64; Neoverse-N1 (413fd0c1); 2021 Ampere Altra Max M128-30; 64 x 3000MHz; cfarm425, supercop-20261004

[Page version: 20261013 16:31:00]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
1.471.481.49T:aes128gcmv1
1.811.821.83T:aes256gcmv1
5.205.235.25ascon128av12
7.607.647.67ascon128v12
7.627.667.71ascon80pqv12
11.1011.1311.15ascon128abi32v12
16.1516.1716.19ascon128bi32v12
16.5716.6116.65T:schwaemm256128v2
22.0022.0422.09T:schwaemm192192v2
22.7522.7822.82T:schwaemm128128v2
24.3124.6725.01T:schwaemm256256v2
32.2532.3232.39T:isapa128av20
33.9134.0134.09T:isapa128v20
39.3739.4439.49T:giftcofb128v1
40.1140.2640.34T:xoodyakround3
45.4145.4545.53T:romulusn
56.3756.4656.54romulusn
60.1460.2460.76T:tinyjambu128v2
68.9569.0869.14T:tinyjambu192v2
75.2675.6275.69T:tinyjambu256v2
84.4284.5184.60romulusm
87.1987.2887.34T:isapk128av20
115.43115.75116.12T:isapk128v20
166.70166.80166.88T!!!romulust
181.42181.51181.64T:elephant200v2
289.64290.81292.40T:isapxv20
6284.386296.216313.40T:elephant176v2
9379.159380.059381.38T:elephant160v2
20208.5620216.3220222.76aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
1.271.301.31T:aes128gcmv1
1.821.821.83T:aes256gcmv1
5.105.115.13ascon128av12
7.627.637.65ascon128v12
7.637.647.66ascon80pqv12
10.9911.0011.01ascon128abi32v12
16.2116.2416.25ascon128bi32v12
16.5716.6116.64T:schwaemm256128v2
22.0022.0422.10T:schwaemm192192v2
22.7322.8223.49T:schwaemm128128v2
23.4523.5223.59T:schwaemm256256v2
32.3532.4732.55T:isapa128av20
33.9033.9934.07T:isapa128v20
39.1639.2139.26T:giftcofb128v1
39.7939.8239.90T:xoodyakround3
45.5845.6846.33T:romulusn
56.6956.8257.23romulusn
60.2560.3260.45T:tinyjambu128v2
69.1569.3069.62T:tinyjambu192v2
75.4675.7276.01T:tinyjambu256v2
84.7784.9484.98romulusm
87.1987.2687.35T:isapk128av20
115.45115.70115.97T:isapk128v20
166.55166.78166.93T!!!romulust
181.39181.53181.67T:elephant200v2
285.68305.34316.05T:isapxv20
6284.776296.596318.05T:elephant176v2
9379.169380.099381.14T:elephant160v2
20200.4420211.7820283.47aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
1.271.291.31T:aes128gcmv1
1.811.821.83T:aes256gcmv1
5.115.125.14ascon128av12
7.627.637.65ascon128v12
7.627.637.65ascon80pqv12
10.9811.0011.01ascon128abi32v12
16.2016.2316.25ascon128bi32v12
16.5716.6016.63T:schwaemm256128v2
17.0417.1217.18T:isapa128v20
21.4421.4821.54T:isapa128av20
21.9822.0222.07T:schwaemm192192v2
22.7622.8324.37T:schwaemm128128v2
23.4623.5223.59T:schwaemm256256v2
39.1739.2139.26T:giftcofb128v1
39.8239.9640.20T:xoodyakround3
45.5145.6045.67T:romulusn
56.1756.2256.26T!!!romulust
56.4656.6556.67romulusn
57.7957.8457.92T:isapk128av20
60.2660.3461.25T:tinyjambu128v2
69.1169.2169.33T:tinyjambu192v2
72.0672.2872.45T:isapk128v20
75.4975.7275.99T:tinyjambu256v2
84.8084.9585.02romulusm
168.41?181.30?189.45?T:isapxv20
181.39181.52181.65T:elephant200v2
301.01301.61302.18aes256gcmv1
6283.946293.466310.27T:elephant176v2
9379.109380.619382.09T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.970.970.97T:aes128gcmv1
1.151.151.16T:aes256gcmv1
5.055.075.09ascon128av12
7.527.537.55ascon80pqv12
7.567.587.60ascon128v12
10.9210.9811.00ascon128abi32v12
16.2116.2216.23ascon128bi32v12
16.2916.4316.46T:schwaemm256128v2
21.8121.8321.87T:schwaemm192192v2
22.6222.6522.68T:schwaemm128128v2
24.3024.3324.39T:schwaemm256256v2
25.8025.8425.89T:isapa128v20
26.7826.8426.90T:isapa128av20
31.1131.1731.20T:xoodyakround3
39.3339.4041.00T:giftcofb128v1
41.0441.0641.13T:romulusn
42.1542.2142.24romulusn
49.1649.2449.63T:tinyjambu128v2
53.8654.0254.59T:tinyjambu192v2
56.1956.3557.35romulusm
57.1257.1557.21T:tinyjambu256v2
72.4472.5172.59T:isapk128av20
93.7393.9494.14T:isapk128v20
111.21111.30111.36T!!!romulust
136.62136.69138.27T:elephant200v2
233.23233.98235.57T:isapxv20
4696.724704.644715.90T:elephant176v2
7034.157034.937041.87T:elephant160v2
10250.9310258.1010261.68aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
0.860.880.89T:aes128gcmv1
1.151.151.15T:aes256gcmv1
5.065.085.12ascon128av12
7.477.497.51ascon80pqv12
7.497.517.53ascon128v12
10.9110.9210.93ascon128abi32v12
16.2316.2516.26ascon128bi32v12
16.2916.4316.46T:schwaemm256128v2
21.8121.8421.91T:schwaemm192192v2
22.6222.6622.70T:schwaemm128128v2
23.6523.7124.09T:schwaemm256256v2
25.8025.8425.89T:isapa128v20
26.8726.9326.97T:isapa128av20
30.9330.9931.11T:xoodyakround3
39.2239.2539.37T:giftcofb128v1
41.1541.2041.27T:romulusn
42.1942.2342.34romulusn
49.2549.3249.49T:tinyjambu128v2
53.8954.0854.35T:tinyjambu192v2
56.5356.5559.25romulusm
57.1657.1957.22T:tinyjambu256v2
72.4372.5172.57T:isapk128av20
93.7993.9794.22T:isapk128v20
111.05111.24111.32T!!!romulust
136.58136.66136.76T:elephant200v2
230.49242.55251.36T:isapxv20
4696.134705.304719.95T:elephant176v2
7033.677034.427034.98T:elephant160v2
10253.7710256.6610259.02aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
0.860.880.89T:aes128gcmv1
1.151.151.15T:aes256gcmv1
5.055.075.08ascon128av12
7.477.487.51ascon80pqv12
7.467.507.52ascon128v12
10.8610.9210.93ascon128abi32v12
16.1916.2516.27ascon128bi32v12
16.3016.4316.46T:schwaemm256128v2
17.3617.3917.44T:isapa128v20
21.3921.4121.45T:isapa128av20
21.6321.8421.91T:schwaemm192192v2
22.6322.6623.33T:schwaemm128128v2
23.6623.7223.76T:schwaemm256256v2
30.9130.9531.01T:xoodyakround3
39.2139.2439.27T:giftcofb128v1
41.1441.2341.65T:romulusn
42.2042.2542.37romulusn
49.2249.2849.53T:tinyjambu128v2
54.0354.1655.27T:tinyjambu192v2
55.9956.0356.10T!!!romulust
56.5356.9358.24romulusm
57.1857.2257.26T:tinyjambu256v2
57.7657.7957.83T:isapk128av20
72.0472.1572.30T:isapk128v20
136.60136.69137.08T:elephant200v2
176.61184.36188.04T:isapxv20
301.51301.69302.06aes256gcmv1
4698.904710.404739.74T:elephant176v2
7032.347034.207034.70T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.470.480.49T:aes128gcmv1
0.480.490.49T:aes256gcmv1
4.884.945.00ascon128av12
7.387.417.47ascon80pqv12
7.497.517.55ascon128v12
10.8310.8410.86ascon128abi32v12
16.2216.2316.26ascon128bi32v12
16.2516.2816.31T:schwaemm256128v2
17.6017.6517.70T:isapa128v20
21.5221.5421.56T:isapa128av20
21.6121.6621.71T:schwaemm192192v2
21.9421.9922.09T:xoodyakround3
22.4722.5122.55T:schwaemm128128v2
23.5123.5523.62T:schwaemm256256v2
27.9928.0328.77romulusn
28.0228.1028.14romulusm
36.6336.6736.70T:romulusn
38.1838.4039.30T:tinyjambu128v2
38.6638.6938.85T:tinyjambu256v2
38.6739.0939.28T:tinyjambu192v2
39.2439.2839.31T:giftcofb128v1
55.8455.8956.43T!!!romulust
57.5957.7057.77T:isapk128av20
71.8471.9672.17T:isapk128v20
92.0692.1592.23T:elephant200v2
175.69176.08176.83T:isapxv20
301.27301.58301.95aes256gcmv1
3109.653116.063129.19T:elephant176v2
4689.414689.964690.83T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.470.470.48T:aes256gcmv1
0.470.470.48T:aes128gcmv1
4.954.975.00ascon128av12
7.327.347.40ascon80pqv12
7.387.407.44ascon128v12
10.8110.8310.86ascon128abi32v12
16.2316.2516.28ascon128bi32v12
16.2416.2816.32T:schwaemm256128v2
17.5917.6517.70T:isapa128v20
21.5221.5521.59T:isapa128av20
21.6021.6521.69T:schwaemm192192v2
21.9322.0622.10T:xoodyakround3
22.4822.5322.61T:schwaemm128128v2
23.9023.9924.03T:schwaemm256256v2
27.9828.0028.03romulusn
28.0028.1128.14romulusm
36.6836.7337.64T:romulusn
38.1738.3538.70T:tinyjambu128v2
38.6338.6738.71T:tinyjambu256v2
38.5238.9840.18T:tinyjambu192v2
39.2339.2639.30T:giftcofb128v1
55.8255.8655.91T!!!romulust
57.5857.6757.76T:isapk128av20
71.9672.1172.25T:isapk128v20
92.0992.1792.27T:elephant200v2
171.46?186.47?192.64?T:isapxv20
300.95301.20301.71aes256gcmv1
3103.233110.453118.89T:elephant176v2
4689.494689.904690.57T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.470.470.48T:aes256gcmv1
0.460.470.50T:aes128gcmv1
4.954.974.99ascon128av12
7.317.337.36ascon80pqv12
7.357.387.40ascon128v12
10.8210.8410.86ascon128abi32v12
16.1816.2316.27ascon128bi32v12
16.2516.2816.30T:schwaemm256128v2
17.6117.6617.72T:isapa128v20
21.4321.4821.54T:isapa128av20
21.6121.6621.70T:schwaemm192192v2
21.8821.9522.08T:xoodyakround3
22.4822.5222.58T:schwaemm128128v2
23.8823.9724.03T:schwaemm256256v2
27.9828.0028.03romulusn
28.0228.1128.15romulusm
36.6636.7136.76T:romulusn
38.1838.2638.84T:tinyjambu128v2
38.6238.6839.64T:tinyjambu256v2
38.7139.0439.21T:tinyjambu192v2
39.2439.2739.31T:giftcofb128v1
55.8155.8555.89T!!!romulust
57.6557.7157.79T:isapk128av20
71.9572.1474.28T:isapk128v20
92.0592.1592.27T:elephant200v2
172.84185.21191.53T:isapxv20
301.09301.47302.00aes256gcmv1
3101.893109.123116.08T:elephant176v2
4689.414689.824690.27T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.211.221.22T:aes128gcmv1
1.401.401.40T:aes256gcmv1
5.215.225.24ascon128av12
7.667.677.69ascon80pqv12
7.707.717.73ascon128v12
11.2911.3011.31ascon128abi32v12
16.4916.5016.52ascon128bi32v12
16.9516.9717.36T:schwaemm256128v2
22.3422.3622.39T:schwaemm192192v2
22.9622.9823.00T:schwaemm128128v2
24.8924.9425.04T:schwaemm256256v2
29.2529.3029.36T:isapa128av20
31.4031.4832.26T:xoodyakround3
37.6037.6437.67T:isapa128v20
39.7039.7239.74T:giftcofb128v1
41.6041.6341.94T:romulusn
42.5342.5542.58romulusn
49.5449.5950.06T:tinyjambu128v2
54.3654.5454.64T:tinyjambu192v2
56.6556.6756.71romulusm
57.5457.5657.61T:tinyjambu256v2
83.5083.5383.59T:isapk128av20
112.83112.88112.92T!!!romulust
139.49139.55139.61T:elephant200v2
170.02170.20170.91T:isapk128v20
388.56388.94392.17T:isapxv20
4734.794740.654768.02T:elephant176v2
7114.067114.867135.89T:elephant160v2
10464.3910466.7610468.17aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.121.131.13T:aes128gcmv1
1.411.411.41T:aes256gcmv1
5.215.225.25ascon128av12
7.627.637.67ascon80pqv12
7.637.657.66ascon128v12
11.2311.2311.25ascon128abi32v12
16.5216.5416.55ascon128bi32v12
16.9416.9717.08T:schwaemm256128v2
22.3422.3723.62T:schwaemm192192v2
22.9723.0023.04T:schwaemm128128v2
24.2324.3124.40T:schwaemm256256v2
29.3329.3729.41T:isapa128av20
31.3131.4331.49T:xoodyakround3
37.6637.6937.72T:isapa128v20
39.5939.6039.64T:giftcofb128v1
41.7041.7441.79T:romulusn
42.6542.7242.76romulusn
49.6549.7149.89T:tinyjambu128v2
54.4754.5254.64T:tinyjambu192v2
56.8456.9057.46romulusm
57.6157.6457.67T:tinyjambu256v2
83.5483.5683.86T:isapk128av20
112.77112.88112.94T!!!romulust
139.51139.57139.72T:elephant200v2
170.04170.12170.49T:isapk128v20
391.62407.40412.96T:isapxv20
4734.994743.834774.57T:elephant176v2
7113.667114.817159.48T:elephant160v2
10463.6710466.3410476.56aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.131.131.14T:aes128gcmv1
1.411.411.41T:aes256gcmv1
5.205.225.23ascon128av12
7.617.627.66ascon80pqv12
7.637.647.65ascon128v12
11.1811.2211.25ascon128abi32v12
16.5216.5316.55ascon128bi32v12
16.9416.9617.31T:schwaemm256128v2
22.3422.3723.10T:schwaemm192192v2
22.8622.8722.89T:isapa128av20
22.9723.0023.22T:schwaemm128128v2
23.3823.4123.44T:isapa128v20
24.2924.3324.39T:schwaemm256256v2
31.3131.3631.41T:xoodyakround3
39.5939.6239.65T:giftcofb128v1
41.7441.7841.83T:romulusn
42.6542.7342.94romulusn
49.6449.6950.10T:tinyjambu128v2
54.4754.6554.95T:tinyjambu192v2
56.7956.8656.90romulusm
57.5757.6157.67T!!!romulust
57.6157.6457.67T:tinyjambu256v2
64.2664.2864.32T:isapk128av20
111.46111.52111.58T:isapk128v20
139.50139.56139.62T:elephant200v2
256.61267.01269.50T:isapxv20
510.47510.70511.47aes256gcmv1
4733.984741.834759.45T:elephant176v2
7113.797114.847131.36T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
8.388.428.57ascon128av12
10.1310.1910.36T:aes128gcmv1
10.6610.7310.83ascon80pqv12
10.7410.7911.04ascon128v12
10.7910.8811.23T:aes256gcmv1
18.5618.6818.82ascon128abi32v12
22.9823.0523.17ascon128bi32v12
28.5728.7228.91T:schwaemm256128v2
30.3130.4930.70T:schwaemm128128v2
36.7536.9037.18T:schwaemm192192v2
38.9839.1039.29T:schwaemm256256v2
46.1546.2846.41T:xoodyakround3
47.9448.0848.28T:giftcofb128v1
50.1250.2150.45romulusn
54.3754.6559.22T:romulusn
58.1158.3961.98T:tinyjambu128v2
63.4663.6463.80T:tinyjambu192v2
64.4964.6264.76romulusm
67.0067.1967.42T:tinyjambu256v2
85.2785.4485.74T:isapa128av20
148.28148.44148.67T!!!romulust
198.27198.68199.07T:elephant200v2
308.60309.11309.62T:isapa128v20
321.11321.47329.89T:isapk128av20
1902.071903.351904.83T:isapk128v20
3903.513906.583910.66T:isapxv20
5900.545936.215961.21T:elephant176v2
9524.889527.039530.28T:elephant160v2
15273.0115276.1615279.48aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
8.598.649.19ascon128av12
10.1010.1510.28T:aes128gcmv1
10.7310.8010.88ascon128v12
10.7310.8310.98ascon80pqv12
10.8910.9611.19T:aes256gcmv1
18.4518.5418.69ascon128abi32v12
23.1823.2223.34ascon128bi32v12
28.3828.5628.80T:schwaemm256128v2
30.2930.4830.73T:schwaemm128128v2
36.7936.9337.15T:schwaemm192192v2
38.4338.5238.73T:schwaemm256256v2
46.0746.1946.32T:xoodyakround3
48.0748.1448.30T:giftcofb128v1
50.3750.4450.53romulusn
54.5454.9758.70T:romulusn
58.5858.7962.44T:tinyjambu128v2
63.8564.1264.42T:tinyjambu192v2
64.7764.9065.08romulusm
67.5767.7168.69T:tinyjambu256v2
85.2985.4685.64T:isapa128av20
148.55148.73149.00T!!!romulust
198.30198.64199.09T:elephant200v2
309.70310.27310.61T:isapa128v20
321.67324.12329.65T:isapk128av20
1902.321903.441905.06T:isapk128v20
3930.274041.704126.67T:isapxv20
5892.535899.675909.65T:elephant176v2
9525.219527.489529.37T:elephant160v2
15257.1415262.8715269.32aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
8.678.749.07ascon128av12
10.2110.2810.38T:aes128gcmv1
10.7310.8010.95ascon128v12
10.7510.8110.96ascon80pqv12
10.9110.9611.13T:aes256gcmv1
18.6018.6718.76ascon128abi32v12
23.2423.2723.37ascon128bi32v12
28.3528.4728.64T:schwaemm256128v2
30.3430.4730.66T:schwaemm128128v2
36.7136.9137.09T:schwaemm192192v2
38.4038.4938.62T:schwaemm256256v2
46.1346.2246.34T:xoodyakround3
48.1048.2248.38T:giftcofb128v1
50.3150.3850.49romulusn
54.3154.5054.68T:romulusn
56.1056.2256.37T:isapa128av20
58.6358.9060.96T:tinyjambu128v2
63.9464.1364.38T:tinyjambu192v2
64.7064.9566.96romulusm
67.6667.8369.22T:tinyjambu256v2
93.1193.3093.54T!!!romulust
161.54162.00162.42T:isapa128v20
198.24198.74199.12T:elephant200v2
200.92201.34206.84T:isapk128av20
1000.871001.711002.56T:isapk128v20
2057.812115.602157.29T:isapxv20
5312.505314.925318.19aes256gcmv1
5899.895930.115950.93T:elephant176v2
9525.749527.459536.05T:elephant160v2