VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: aarch64; Cortex-A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3bplus, supercop-20241022

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
7.74?7.89?10.05?ascon128av12
11.62?13.26?16.80?ascon128v12
11.64?14.37?31.58?ascon80pqv12
17.77?20.51?37.15?ascon128abi32v12
43.25?44.28?49.12?T:aes128gcmv1
36.98?47.35?71.75?T:aes256gcmv1
30.26?47.70?67.69?ascon128bi32v12
48.0648.0850.70T:giftcofb128v1
49.51?49.72?59.90?T:isapa128av20
49.63?51.87?56.02?T:isapa128v20
55.9056.3156.76romulusn
60.1360.1560.46T:xoodyakround3
61.13?62.60?168.29?T:schwaemm256256v2
72.01?72.66?99.81?T:schwaemm192192v2
73.8276.5680.51T:schwaemm128128v2
61.59?76.90?96.95?T:schwaemm256128v2
81.11?81.26?206.91?T:tinyjambu256v2
65.98?85.09?203.76?T:tinyjambu128v2
81.32?90.34?137.43?T:tinyjambu192v2
96.16?98.44?245.20?romulusm
211.72?216.18?240.69?T!!!romulust
217.74231.01241.87T:isapk128av20
310.66328.87334.62T:isapk128v20
330.64345.03352.19T:elephant200v2
404.44?422.82?454.05?T:isapxv20
13402.2413471.8614075.82T:elephant160v2
14267.6614273.9414290.55T:elephant176v2
36938.0236980.3536995.21aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
7.61?7.78?9.68?ascon128av12
11.64?12.99?16.88?ascon80pqv12
11.54?13.05?15.38?ascon128v12
18.30?19.79?41.54?ascon128abi32v12
26.42?43.22?86.60?T:aes256gcmv1
27.89?46.53?60.01?ascon128bi32v12
47.8748.0950.96T:giftcofb128v1
42.95?48.66?53.19?T:aes128gcmv1
49.3749.4050.10T:isapa128av20
48.19?52.49?60.08?T:isapa128v20
55.98?56.77?183.86?romulusn
58.9658.9859.67T:xoodyakround3
61.55?62.19?197.68?T:schwaemm256256v2
73.37?75.27?104.55?T:schwaemm192192v2
75.13?78.13?99.64?T:schwaemm128128v2
81.14?81.42?230.36?T:tinyjambu256v2
58.58?81.47?195.15?T:schwaemm256128v2
59.73?85.56?217.91?T:tinyjambu128v2
95.95?97.03?255.62?romulusm
80.77?97.10?140.29?T:tinyjambu192v2
211.69215.23227.91T!!!romulust
227.97231.49241.92T:isapk128av20
309.76329.37339.72T:isapk128v20
315.42?344.27?355.05?T:elephant200v2
408.94421.70454.20T:isapxv20
13398.8513452.0814070.69T:elephant160v2
14266.0014273.9714287.36T:elephant176v2
36958.5236974.2436996.63aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
7.75?8.00?9.23?ascon128av12
11.61?13.74?30.27?ascon128v12
11.33?13.99?16.50?ascon80pqv12
18.02?20.79?41.61?ascon128abi32v12
25.5626.2128.09T:isapa128v20
27.52?31.54?61.49?ascon128bi32v12
31.9832.0132.25T:isapa128av20
43.52?44.16?52.72?T:aes128gcmv1
47.8848.2349.23T:giftcofb128v1
2.15?49.26?82.32?T:aes256gcmv1
55.98?56.27?181.36?romulusn
59.0559.0859.60T:xoodyakround3
61.64?61.94?124.97?T:schwaemm256256v2
71.33?75.07?103.92?T:schwaemm192192v2
72.52?75.93?98.47?T!!!romulust
75.11?78.21?106.03?T:schwaemm128128v2
55.65?81.10?205.23?T:schwaemm256128v2
81.21?81.43?213.85?T:tinyjambu256v2
96.07?96.93?251.96?romulusm
62.04?100.22?202.72?T:tinyjambu128v2
80.84?106.62?141.17?T:tinyjambu192v2
152.04153.47162.38T:isapk128av20
194.43?202.39?219.23?T:isapk128v20
228.35?239.39?260.57?T:isapxv20
320.53344.87354.14T:elephant200v2
903.02906.53917.60aes256gcmv1
13403.5013467.4414070.33T:elephant160v2
14269.0914310.6014352.70T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
8.69?9.49?14.01?ascon128av12
12.66?15.78?31.42?ascon128v12
12.26?15.84?30.95?ascon80pqv12
26.0626.7228.10ascon128bi32v12
14.71?27.82?35.65?T:aes256gcmv1
30.9631.4634.26T:aes128gcmv1
23.45?32.08?38.26?ascon128abi32v12
36.25?36.75?41.43?T:isapa128v20
40.6940.7040.96T:isapa128av20
45.4545.8846.75T:xoodyakround3
47.6547.8048.60T:giftcofb128v1
47.82?48.00?60.37?romulusn
48.73?54.83?73.66?T:tinyjambu128v2
53.26?55.68?70.55?T:schwaemm256128v2
60.9160.9761.04T:tinyjambu256v2
60.51?61.68?72.72?T:schwaemm256256v2
60.9664.7066.76T:tinyjambu192v2
67.9368.0670.60romulusm
70.0472.7376.74T:schwaemm192192v2
74.3875.0679.56T:schwaemm128128v2
132.59142.63146.80T!!!romulust
187.26194.43199.39T:isapk128av20
231.82248.35256.28T:isapk128v20
248.62258.29265.62T:elephant200v2
326.41331.81358.98T:isapxv20
10053.9210092.9010554.05T:elephant160v2
10669.8910684.3710700.41T:elephant176v2
18933.6818941.1818950.03aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
8.09?9.75?12.04?ascon128av12
12.62?14.34?26.22?ascon80pqv12
12.23?14.95?29.75?ascon128v12
23.98?26.62?35.04?ascon128bi32v12
15.00?29.51?46.26?T:aes256gcmv1
20.66?30.44?34.35?ascon128abi32v12
30.91?31.87?34.44?T:aes128gcmv1
37.0938.6340.29T:isapa128v20
40.6540.7341.10T:isapa128av20
45.0345.2049.39T:xoodyakround3
47.5647.7049.13T:giftcofb128v1
47.7947.8649.51romulusn
47.63?58.57?67.43?T:tinyjambu128v2
51.48?60.46?74.87?T:schwaemm256128v2
60.9060.9761.15T:tinyjambu256v2
60.67?61.98?72.39?T:schwaemm256256v2
63.3664.3467.65T:tinyjambu192v2
67.7168.0271.68romulusm
69.37?72.38?81.07?T:schwaemm192192v2
72.31?75.72?88.91?T:schwaemm128128v2
131.90?144.34?150.22?T!!!romulust
190.75192.23200.62T:isapk128av20
186.00?257.60?266.07?T:elephant200v2
243.92259.80267.96T:isapk128v20
325.43333.02359.39T:isapxv20
10050.9610091.7410551.07T:elephant160v2
10667.3010677.1010701.85T:elephant176v2
18930.6918936.5918950.75aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
8.40?9.40?23.94?ascon128av12
12.32?13.15?31.80?ascon80pqv12
12.80?13.47?32.37?ascon128v12
19.57?23.91?34.91?ascon128abi32v12
24.38?25.88?27.50?T:isapa128v20
26.00?27.40?31.06?ascon128bi32v12
3.71?27.63?48.44?T:aes256gcmv1
30.8731.4533.61T:aes128gcmv1
32.0032.0332.28T:isapa128av20
45.0845.1746.18T:xoodyakround3
47.5647.5948.30T:giftcofb128v1
47.8147.9549.04romulusn
48.86?54.34?67.73?T:tinyjambu128v2
45.93?58.65?76.48?T:schwaemm256128v2
60.9160.9661.08T:tinyjambu256v2
60.94?61.78?74.30?T:schwaemm256256v2
62.54?66.59?73.34?T:tinyjambu192v2
67.9168.0870.29romulusm
72.09?73.36?81.82?T:schwaemm192192v2
70.52?75.41?88.60?T!!!romulust
73.6875.8478.70T:schwaemm128128v2
151.43154.73158.70T:isapk128av20
189.98195.38203.33T:isapk128v20
234.86242.09260.40T:isapxv20
251.97258.04265.56T:elephant200v2
905.97907.71911.83aes256gcmv1
10052.3610092.6910552.51T:elephant160v2
10651.9910676.9110699.25T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
7.64?7.96?11.02?ascon128av12
11.28?12.84?16.86?ascon128v12
11.16?12.92?16.78?ascon80pqv12
2.29?15.81?37.09?T:aes256gcmv1
18.38?19.08?23.16?T:aes128gcmv1
19.78?21.41?42.83?ascon128abi32v12
23.62?25.86?30.34?T:isapa128v20
30.8631.1831.66T:xoodyakround3
31.8932.0032.23T:isapa128av20
26.45?33.40?64.13?ascon128bi32v12
39.6339.6740.71romulusn
39.9339.9540.50romulusm
40.7440.7641.04T:tinyjambu256v2
47.25?47.89?57.77?T:giftcofb128v1
38.33?52.12?77.21?T:tinyjambu128v2
60.39?62.64?189.10?T:schwaemm256256v2
70.32?77.20?113.56?T!!!romulust
65.57?81.69?194.37?T:schwaemm192192v2
45.11?82.34?175.69?T:tinyjambu192v2
51.89?82.78?139.45?T:schwaemm256128v2
72.22?84.53?110.89?T:schwaemm128128v2
152.04152.66166.63T:isapk128av20
168.34177.88180.22T:elephant200v2
179.65?193.75?203.45?T:isapk128v20
234.90?249.78?261.62?T:isapxv20
901.94905.17918.15aes256gcmv1
6699.186725.947051.96T:elephant160v2
7050.437057.107072.36T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
7.64?7.89?11.37?ascon128av12
11.32?12.85?24.80?ascon128v12
11.19?14.19?16.79?ascon80pqv12
-26.88?17.71?35.89?T:aes256gcmv1
18.62?19.22?22.85?T:aes128gcmv1
19.97?23.55?45.55?ascon128abi32v12
25.63?26.00?29.33?T:isapa128v20
31.0931.1331.61T:xoodyakround3
31.9932.0132.28T:isapa128av20
39.6339.6540.02romulusn
39.9439.9740.59romulusm
40.7540.7640.96T:tinyjambu256v2
27.71?45.33?63.67?ascon128bi32v12
47.26?47.83?61.17?T:giftcofb128v1
38.30?60.85?78.69?T:tinyjambu128v2
73.88?76.70?107.09?T!!!romulust
49.48?81.74?218.52?T:tinyjambu192v2
72.19?82.16?138.90?T:schwaemm128128v2
69.17?83.28?153.85?T:schwaemm192192v2
60.58?84.64?171.46?T:schwaemm256256v2
57.46?92.83?194.25?T:schwaemm256128v2
150.09152.95163.60T:isapk128av20
172.01177.71180.53T:elephant200v2
181.17190.73201.25T:isapk128v20
222.33?244.05?262.37?T:isapxv20
901.11906.81920.36aes256gcmv1
6697.616724.247042.28T:elephant160v2
7049.887058.377071.21T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
-64.58?-30.70?54.59?T:aes256gcmv1
7.47?8.02?10.36?ascon128av12
11.15?12.52?16.97?ascon128v12
11.25?13.08?27.93?ascon80pqv12
18.21?19.17?21.82?T:aes128gcmv1
17.86?20.87?45.32?ascon128abi32v12
25.32?25.81?28.40?T:isapa128v20
31.0931.1631.64T:xoodyakround3
32.0032.0432.30T:isapa128av20
39.6339.6839.93romulusn
39.9239.9740.40romulusm
40.7440.7540.84T:tinyjambu256v2
28.09?43.39?66.37?ascon128bi32v12
38.13?44.59?90.20?T:tinyjambu128v2
47.25?47.65?58.95?T:giftcofb128v1
60.35?62.02?107.39?T:schwaemm256256v2
44.90?72.96?87.84?T:tinyjambu192v2
70.64?74.48?120.30?T:schwaemm128128v2
53.82?78.30?205.83?T:schwaemm256128v2
71.44?85.38?102.46?T!!!romulust
71.10?96.53?158.59?T:schwaemm192192v2
148.70152.75161.18T:isapk128av20
170.84178.05181.05T:elephant200v2
182.62197.69199.40T:isapk128v20
233.41?244.98?262.60?T:isapxv20
901.54906.60919.14aes256gcmv1
6695.756725.787062.77T:elephant160v2
7050.987057.657065.74T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
8.13?10.07?17.27?ascon128av12
11.75?13.68?32.97?ascon128v12
12.67?14.76?23.19?ascon80pqv12
20.00?24.38?43.85?ascon128abi32v12
35.46?36.33?40.88?T:aes128gcmv1
30.52?40.38?50.49?ascon128bi32v12
39.28?42.68?62.77?T:aes256gcmv1
44.1644.2044.55T:isapa128av20
45.94?46.18?52.29?T:xoodyakround3
48.1848.2049.28T:giftcofb128v1
48.2348.2649.87romulusn
49.09?52.26?68.73?T:tinyjambu128v2
56.6156.8561.59T:isapa128v20
53.93?57.84?68.17?T:schwaemm256128v2
61.4061.4161.54T:tinyjambu256v2
62.39?63.28?85.53?T:schwaemm256256v2
68.5068.5971.69romulusm
71.60?73.76?81.78?T:schwaemm192192v2
75.1576.5783.50T:schwaemm128128v2
62.04?90.94?126.38?T:tinyjambu192v2
146.75147.44153.63T!!!romulust
221.75222.67226.57T:isapk128av20
260.42265.74270.99T:elephant200v2
449.44452.00458.73T:isapk128v20
539.70543.84576.74T:isapxv20
10199.4610202.5710638.32T:elephant160v2
10748.4410762.5610792.21T:elephant176v2
19318.0119325.3319337.82aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
8.26?9.93?13.28?ascon128av12
11.58?13.36?19.11?ascon80pqv12
12.15?14.85?33.84?ascon128v12
20.42?22.99?46.11?ascon128abi32v12
36.20?39.31?43.28?T:aes128gcmv1
28.35?42.99?53.83?ascon128bi32v12
44.1744.1944.57T:isapa128av20
45.48?45.55?52.39?T:xoodyakround3
43.46?47.66?67.30?T:aes256gcmv1
48.2748.3150.16romulusn
48.1148.3249.34T:giftcofb128v1
47.14?51.51?146.39?T:tinyjambu128v2
56.5657.0958.73T:isapa128v20
55.36?57.76?69.99?T:schwaemm256128v2
61.4061.4161.63T:tinyjambu256v2
62.57?67.25?78.75?T:schwaemm256256v2
68.6668.6971.40romulusm
73.57?75.02?83.14?T:schwaemm192192v2
75.8876.0884.15T:schwaemm128128v2
62.40?87.66?122.15?T:tinyjambu192v2
145.94147.19151.72T!!!romulust
221.84225.68228.79T:isapk128av20
260.42264.32271.16T:elephant200v2
447.46453.00462.92T:isapk128v20
539.62542.19580.77T:isapxv20
10199.4210202.0110646.41T:elephant160v2
10748.7810765.7510792.60T:elephant176v2
19318.3919327.3819337.13aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
7.92?9.86?10.28?ascon128av12
12.31?13.39?19.79?ascon80pqv12
11.80?13.78?37.04?ascon128v12
33.9233.9534.22T:isapa128av20
20.54?34.20?48.07?ascon128abi32v12
34.8735.0536.52T:isapa128v20
35.47?37.88?43.27?T:aes128gcmv1
29.27?41.28?55.18?ascon128bi32v12
45.5245.6846.13T:xoodyakround3
48.1048.1748.91T:giftcofb128v1
48.2748.2948.97romulusn
49.36?55.10?72.18?T:tinyjambu128v2
55.32?56.88?73.37?T:schwaemm256128v2
61.4061.4161.65T:tinyjambu256v2
68.6768.9474.89romulusm
62.80?69.32?83.01?T:schwaemm256256v2
64.57?69.47?90.64?T:tinyjambu192v2
69.18?70.55?101.81?T:aes256gcmv1
72.04?74.39?90.58?T:schwaemm192192v2
74.1976.6382.23T:schwaemm128128v2
76.50?77.37?85.64?T!!!romulust
171.33171.46178.02T:isapk128av20
260.43264.28273.39T:elephant200v2
298.18300.26310.58T:isapk128v20
345.98351.82364.36T:isapxv20
1288.621290.781292.51aes256gcmv1
10200.5310211.3610638.54T:elephant160v2
10745.4710756.1910790.67T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
12.4112.4112.77ascon128av12
15.6615.6615.78ascon128v12
15.6515.7316.40ascon80pqv12
27.4227.4828.16ascon128abi32v12
35.70?35.89?45.34?ascon128bi32v12
55.4955.5456.23T:tinyjambu128v2
59.0959.1059.25romulusn
60.0960.1760.52T:giftcofb128v1
65.2365.2665.45T:xoodyakround3
72.3572.4872.64T:tinyjambu256v2
73.2873.3673.61T:tinyjambu192v2
81.4681.6181.84romulusm
85.32?85.64?123.84?T:schwaemm256128v2
92.3492.5397.45T:schwaemm128128v2
97.6397.8098.71T:schwaemm256256v2
111.51?111.74?162.19?T:schwaemm192192v2
123.79123.90124.09T:isapa128av20
129.86131.34136.88T:aes128gcmv1
192.66?205.27?427.27?T!!!romulust
291.59?327.27?598.08?T:aes256gcmv1
364.08?368.15?414.98?T:elephant200v2
462.50?471.16?544.46?T:isapa128v20
863.84?870.57?1087.16?T:isapk128av20
4789.174906.345245.91T:isapk128v20
5214.665305.915426.95T:isapxv20
13410.8413427.7113470.84T:elephant176v2
13687.2713701.1914272.02T:elephant160v2
28031.9528123.4728183.40aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
12.5912.6512.91ascon128av12
15.5715.5715.73ascon128v12
15.62?15.67?22.11?ascon80pqv12
27.78?30.05?38.37?ascon128abi32v12
35.5935.5936.33ascon128bi32v12
55.9856.0557.43T:tinyjambu128v2
59.1559.1859.28romulusn
60.0960.1060.24T:giftcofb128v1
64.7664.8665.16T:xoodyakround3
72.3072.7073.03T:tinyjambu256v2
73.5573.7474.48T:tinyjambu192v2
85.8185.9288.26T:schwaemm256128v2
85.8385.9586.21romulusm
93.1193.1797.78T:schwaemm128128v2
98.0598.1698.66T:schwaemm256256v2
112.15112.22116.88T:schwaemm192192v2
124.09124.20124.53T:isapa128av20
130.32131.07136.35T:aes128gcmv1
191.82?192.47?225.67?T!!!romulust
366.32?368.27?521.51?T:elephant200v2
462.91?469.40?532.97?T:isapa128v20
440.73?545.00?819.84?T:aes256gcmv1
863.59866.80954.89T:isapk128av20
4791.514803.365140.26T:isapk128v20
5215.135303.585495.04T:isapxv20
13407.2613421.6613453.23T:elephant176v2
13691.5513709.9714185.70T:elephant160v2
28042.3528119.3828143.39aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
12.5312.5412.59ascon128av12
15.5215.5715.84ascon128v12
15.6215.6215.87ascon80pqv12
28.01?31.05?42.91?ascon128abi32v12
35.5935.5936.02ascon128bi32v12
55.9356.2057.80T:tinyjambu128v2
59.1459.1559.19romulusn
60.0960.0960.10T:giftcofb128v1
64.9465.0668.15T:xoodyakround3
72.2872.5072.74T:tinyjambu256v2
74.3076.1977.78T:tinyjambu192v2
77.9578.1278.17T:isapa128av20
85.7785.8085.96romulusm
85.8185.9186.34T:schwaemm256128v2
92.6493.1193.24T:schwaemm128128v2
98.0598.1999.27T:schwaemm256256v2
112.04112.29115.99T:schwaemm192192v2
121.91122.02125.75T!!!romulust
129.95130.81133.62T:aes128gcmv1
241.32241.67249.31T:isapa128v20
367.73368.59404.33T:elephant200v2
566.41569.57584.34T:isapk128av20
1018.07?1502.53?1773.02?T:aes256gcmv1
2559.232645.132730.56T:isapk128v20
2723.862804.942852.95T:isapxv20
9987.5510089.7210151.11aes256gcmv1
13394.0513424.2213437.70T:elephant176v2
13688.6213705.5314283.06T:elephant160v2