VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Gracemont (906a4-20); 2022 Intel Core i3-1215U, E cores; 4 x 1600MHz; alder2,1f626960,3300000, supercop-20250307

[Page version: 20250328 20:58:22]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.44?0.56?0.62?T:aes128gcmv1
0.60?0.66?0.71?T:aes256gcmv1
1.371.391.42aes256gcmv1
6.166.186.43ascon128av12
8.908.918.94ascon80pqv12
8.938.948.96ascon128v12
11.1411.1611.18ascon128abi32v12
16.6216.6616.68ascon128bi32v12
16.9516.9716.99T:schwaemm256128v2
17.1217.1417.18T:xoodyakround3
21.6321.7922.36T:schwaemm256256v2
22.0122.2422.56T:schwaemm192192v2
23.3823.4323.84T:schwaemm128128v2
27.2427.3327.39T:grain128aeadv2
36.5436.5736.63romulusn
36.8036.8536.90T:isapa128v20
37.0237.1538.48T:isapa128av20
38.8138.8338.85T:giftcofb128v1
51.4251.4651.50T:tinyjambu128v2
58.5359.3959.54T:tinyjambu192v2
59.5359.8663.98romulusm
60.4460.5860.72T:isapk128av20
62.9463.1363.27T:tinyjambu256v2
79.7780.0980.48T:isapk128v20
114.66114.72114.99romulust
145.11146.56148.41T:elephant200v2
158.81159.44160.02T:isapxv20
6433.176440.646441.35T:elephant176v2
7698.767724.137786.16T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.43?0.56?0.60?T:aes128gcmv1
0.56?0.67?0.70?T:aes256gcmv1
1.401.421.44aes256gcmv1
6.036.046.07ascon128av12
8.908.928.94ascon128v12
8.928.948.96ascon80pqv12
11.1011.1211.13ascon128abi32v12
16.7716.8016.83ascon128bi32v12
16.9416.9817.00T:schwaemm256128v2
17.4717.5817.64T:xoodyakround3
21.6221.7522.35T:schwaemm256256v2
21.9922.2522.53T:schwaemm192192v2
23.4223.4823.85T:schwaemm128128v2
27.0127.0927.21T:grain128aeadv2
36.3936.7036.72romulusn
36.7836.8436.93T:isapa128v20
36.9537.1238.46T:isapa128av20
38.8238.9138.97T:giftcofb128v1
51.4351.4851.52T:tinyjambu128v2
58.0959.0959.30T:tinyjambu192v2
59.5360.0763.92romulusm
60.3760.5060.59T:isapk128av20
62.0862.3163.70T:tinyjambu256v2
79.8580.0280.24T:isapk128v20
114.68114.70115.02romulust
144.64146.17148.21T:elephant200v2
159.13159.38160.78T:isapxv20
6435.066440.636442.15T:elephant176v2
7759.267777.837783.26T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.47?0.54?0.62?T:aes128gcmv1
0.59?0.66?0.69?T:aes256gcmv1
1.411.421.42aes256gcmv1
6.026.056.07ascon128av12
8.908.928.94ascon128v12
8.938.948.96ascon80pqv12
11.1111.1211.14ascon128abi32v12
16.7616.7816.81ascon128bi32v12
16.9316.9616.98T:schwaemm256128v2
16.9917.2217.72T:xoodyakround3
18.2618.3318.39T:isapa128v20
21.6321.7522.35T:schwaemm256256v2
22.1222.2622.58T:schwaemm192192v2
23.4123.4623.83T:schwaemm128128v2
24.3924.4725.25T:isapa128av20
26.9927.0427.07T:grain128aeadv2
36.4136.5836.71romulusn
38.8338.9538.98T:giftcofb128v1
39.2139.2539.27romulust
40.0240.2440.40T:isapk128av20
49.7349.9050.46T:isapk128v20
51.4051.4651.49T:tinyjambu128v2
57.9658.2359.23T:tinyjambu192v2
59.4359.9463.89romulusm
62.0762.2362.38T:tinyjambu256v2
92.9893.2194.28T:isapxv20
144.70146.17148.10T:elephant200v2
6419.756440.716441.76T:elephant176v2
7694.617720.117781.37T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.38?0.42?0.45?T:aes128gcmv1
0.44?0.48?0.52?T:aes256gcmv1
0.920.940.95aes256gcmv1
6.106.216.35ascon128av12
8.898.918.93ascon128v12
8.898.928.93ascon80pqv12
11.0311.0511.07ascon128abi32v12
13.0913.1214.15T:xoodyakround3
16.5916.6116.63ascon128bi32v12
16.8916.9116.94T:schwaemm256128v2
21.5621.7522.30T:schwaemm256256v2
22.0122.1322.21T:schwaemm192192v2
22.9523.2623.33T:schwaemm128128v2
27.2727.3627.44T:grain128aeadv2
27.6427.6727.73T:isapa128v20
29.8929.9229.92romulusn
31.7532.6733.14T:isapa128av20
38.7938.8138.83T:giftcofb128v1
41.3341.6645.56romulusm
42.2342.2742.30T:tinyjambu128v2
46.5146.6247.16T:tinyjambu192v2
47.7149.0649.52T:tinyjambu256v2
50.2850.4050.45T:isapk128av20
65.0665.2565.39T:isapk128v20
76.8977.0177.05romulust
110.18110.35111.48T:elephant200v2
125.25126.29127.20T:isapxv20
4773.054807.234837.47T:elephant176v2
5779.695798.285831.58T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.34?0.42?0.47?T:aes128gcmv1
0.41?0.46?0.52?T:aes256gcmv1
0.910.930.95aes256gcmv1
5.986.006.10ascon128av12
8.848.878.88ascon128v12
8.898.908.93ascon80pqv12
11.0011.0211.04ascon128abi32v12
13.0213.0713.39T:xoodyakround3
16.6216.6416.66ascon128bi32v12
16.8916.9116.93T:schwaemm256128v2
21.5921.7222.31T:schwaemm256256v2
21.9222.1222.40T:schwaemm192192v2
23.0223.3523.55T:schwaemm128128v2
27.1727.2127.28T:grain128aeadv2
27.6227.6627.71T:isapa128v20
29.8329.9829.99romulusn
31.7732.6833.17T:isapa128av20
38.7538.8138.87T:giftcofb128v1
41.4041.7445.55romulusm
42.2642.3142.34T:tinyjambu128v2
46.4046.4646.52T:tinyjambu192v2
48.0548.2248.39T:tinyjambu256v2
50.2550.3850.48T:isapk128av20
65.0265.2465.36T:isapk128v20
76.8876.9477.04romulust
110.03110.23111.34T:elephant200v2
125.41126.91127.00T:isapxv20
4772.894807.084828.69T:elephant176v2
5816.135826.935840.16T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.40?0.43?0.47?T:aes128gcmv1
0.44?0.48?0.50?T:aes256gcmv1
0.920.930.94aes256gcmv1
5.996.006.10ascon128av12
8.858.868.89ascon128v12
8.898.908.91ascon80pqv12
11.0011.0111.03ascon128abi32v12
13.3613.3813.42T:xoodyakround3
16.6216.6416.65ascon128bi32v12
16.8816.9016.93T:schwaemm256128v2
18.3418.4118.45T:isapa128v20
21.5921.7222.30T:schwaemm256256v2
21.9322.1322.52T:schwaemm192192v2
23.2823.3723.54T:schwaemm128128v2
25.2725.9526.43T:isapa128av20
27.1427.1727.22T:grain128aeadv2
29.8429.9829.99romulusn
38.7838.8438.88T:giftcofb128v1
39.1339.1539.18romulust
40.1240.2840.34T:isapk128av20
41.3541.7545.54romulusm
42.2542.2942.33T:tinyjambu128v2
46.3946.4446.56T:tinyjambu192v2
47.8248.1548.49T:tinyjambu256v2
50.0350.1350.28T:isapk128v20
92.7893.3593.98T:isapxv20
110.01110.22111.29T:elephant200v2
4773.334804.074811.81T:elephant176v2
5817.215827.105840.04T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.19?0.22?0.27?T:aes128gcmv1
0.21?0.24?0.26?T:aes256gcmv1
0.460.480.49aes256gcmv1
5.956.246.27ascon128av12
8.818.838.86ascon128v12
8.858.878.87ascon80pqv12
9.039.079.10T:xoodyakround3
10.8910.9110.94ascon128abi32v12
16.5316.5516.57ascon128bi32v12
16.7616.8216.84T:schwaemm256128v2
18.4218.4618.51T:isapa128v20
21.5021.7122.28T:schwaemm256256v2
21.8322.0522.23T:schwaemm192192v2
23.2123.2223.23romulusn
23.02?23.33?27.30?romulusm
23.1423.4323.66T:schwaemm128128v2
24.5624.7225.28T:isapa128av20
27.3427.3727.52T:grain128aeadv2
32.0532.8432.91T:tinyjambu256v2
33.0333.0733.10T:tinyjambu128v2
33.5133.6533.87T:tinyjambu192v2
38.7338.7938.83T:giftcofb128v1
39.0639.1339.34romulust
39.8340.1740.33T:isapk128av20
50.0950.4050.57T:isapk128v20
72.9873.7874.77T:elephant200v2
92.5493.6194.78T:isapxv20
3173.023186.873209.35T:elephant176v2
3842.583886.383946.86T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.23?0.25?0.28?T:aes256gcmv1
0.23?0.26?0.28?T:aes128gcmv1
0.440.450.47aes256gcmv1
5.955.986.16ascon128av12
8.818.848.85ascon128v12
8.858.878.90ascon80pqv12
9.039.049.12T:xoodyakround3
10.8910.9210.94ascon128abi32v12
16.4616.4816.51ascon128bi32v12
16.7916.8216.85T:schwaemm256128v2
18.4218.4418.51T:isapa128v20
21.5121.6822.33T:schwaemm256256v2
21.8722.0522.27T:schwaemm192192v2
23.1923.2223.27romulusn
22.97?23.32?27.30?romulusm
23.2523.4123.68T:schwaemm128128v2
24.6024.7325.24T:isapa128av20
27.2627.3427.37T:grain128aeadv2
32.2232.8833.09T:tinyjambu256v2
33.0733.1033.13T:tinyjambu128v2
32.3433.8834.98T:tinyjambu192v2
38.7438.7738.83T:giftcofb128v1
39.0939.1239.32romulust
39.8239.9240.29T:isapk128av20
49.9650.3450.52T:isapk128v20
73.0273.7974.77T:elephant200v2
92.7193.2293.53T:isapxv20
3172.783184.983209.21T:elephant176v2
3841.643904.793944.40T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.21?0.24?0.28?T:aes128gcmv1
0.21?0.25?0.30?T:aes256gcmv1
0.440.450.46aes256gcmv1
5.966.006.17ascon128av12
8.828.838.86ascon128v12
8.858.878.89ascon80pqv12
9.049.079.12T:xoodyakround3
10.8910.9110.94ascon128abi32v12
16.4716.4816.50ascon128bi32v12
16.8016.8316.86T:schwaemm256128v2
18.3918.4418.51T:isapa128v20
21.5121.6722.31T:schwaemm256256v2
21.8622.0422.39T:schwaemm192192v2
23.2323.2623.28romulusn
22.98?23.32?27.29?romulusm
23.1623.4323.66T:schwaemm128128v2
24.5724.7525.27T:isapa128av20
27.2027.2627.38T:grain128aeadv2
32.0332.9033.11T:tinyjambu256v2
33.0233.0533.10T:tinyjambu128v2
33.5833.7634.99T:tinyjambu192v2
38.7438.7838.83T:giftcofb128v1
39.0539.1139.18romulust
39.8139.9840.27T:isapk128av20
49.9450.2350.46T:isapk128v20
73.0073.7374.77T:elephant200v2
92.7593.6594.00T:isapxv20
3176.483180.813209.50T:elephant176v2
3841.663883.483944.17T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.840.880.92T:aes128gcmv1
0.900.930.94T:aes256gcmv1
1.041.041.05aes256gcmv1
6.276.386.50ascon128av12
9.059.059.06ascon128v12
9.059.069.07ascon80pqv12
11.2911.3011.32ascon128abi32v12
13.2313.2513.26T:xoodyakround3
16.8716.8816.89ascon128bi32v12
17.3817.3917.41T:schwaemm256128v2
22.2222.3322.85T:schwaemm256256v2
22.1322.6522.68T:schwaemm192192v2
23.4723.6423.83T:schwaemm128128v2
27.5927.6527.72T:grain128aeadv2
30.2030.2330.24romulusn
34.3734.4336.05T:isapa128av20
39.1539.1639.18T:giftcofb128v1
40.4140.4340.44T:isapa128v20
41.9542.0345.74romulusm
42.5442.5742.60T:tinyjambu128v2
46.0547.0747.19T:tinyjambu192v2
48.1749.1449.34T:tinyjambu256v2
58.3258.3758.58T:isapk128av20
78.0678.1578.19romulust
111.57112.63113.68T:elephant200v2
115.30115.35115.51T:isapk128v20
205.24205.92207.33T:isapxv20
4768.004832.064843.75T:elephant176v2
5844.185844.765926.43T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.850.890.93T:aes128gcmv1
0.900.900.95T:aes256gcmv1
1.041.051.06aes256gcmv1
6.166.176.25ascon128av12
9.009.029.02ascon128v12
9.039.059.06ascon80pqv12
11.2811.2911.30ascon128abi32v12
13.4513.4713.49T:xoodyakround3
16.9016.9116.94ascon128bi32v12
17.3717.3817.41T:schwaemm256128v2
22.2322.3322.86T:schwaemm256256v2
22.1422.6622.89T:schwaemm192192v2
23.4723.6723.85T:schwaemm128128v2
27.4727.5027.57T:grain128aeadv2
30.2230.2730.28romulusn
34.4734.4936.15T:isapa128av20
39.1739.2339.26T:giftcofb128v1
40.4340.4440.48T:isapa128v20
42.0842.2345.78romulusm
42.5842.6042.62T:tinyjambu128v2
46.7546.9147.28T:tinyjambu192v2
47.8248.1348.36T:tinyjambu256v2
58.3658.3958.65T:isapk128av20
78.0678.0778.19romulust
111.53112.44113.54T:elephant200v2
115.28115.44115.55T:isapk128v20
205.65205.79207.26T:isapxv20
4831.894837.784843.68T:elephant176v2
5844.935926.635961.30T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.840.860.89T:aes128gcmv1
0.900.900.90T:aes256gcmv1
1.031.041.04aes256gcmv1
6.156.176.25ascon128av12
9.009.019.03ascon128v12
9.049.059.06ascon80pqv12
11.2811.2811.30ascon128abi32v12
13.2213.2613.45T:xoodyakround3
16.9116.9216.93ascon128bi32v12
17.3817.3917.40T:schwaemm256128v2
22.2722.3322.85T:schwaemm256256v2
22.1122.6422.86T:schwaemm192192v2
23.4923.6623.83T:schwaemm128128v2
24.8624.8724.91T:isapa128v20
26.6726.7128.03T:isapa128av20
27.4527.4927.55T:grain128aeadv2
30.2230.2730.28romulusn
39.1739.2239.23T:giftcofb128v1
40.2940.3140.33romulust
42.0642.1245.76romulusm
42.5942.6242.65T:tinyjambu128v2
45.4145.4345.52T:isapk128av20
46.8546.9547.34T:tinyjambu192v2
47.7648.1348.35T:tinyjambu256v2
76.7876.8576.93T:isapk128v20
111.52112.44113.47T:elephant200v2
133.86134.05134.21T:isapxv20
4832.014837.684843.66T:elephant176v2
5844.965880.345974.53T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
5.215.335.38aes256gcmv1
9.839.8710.56ascon128av12
10.99?11.35?12.23?T:aes128gcmv1
11.3411.7212.45T:aes256gcmv1
11.9512.2012.61ascon128v12
12.2612.6812.81ascon80pqv12
16.9417.0217.71ascon128abi32v12
19.1619.4019.60T:xoodyakround3
22.7722.8823.17ascon128bi32v12
28.3528.6028.87T:schwaemm256128v2
30.4130.6931.11T:schwaemm128128v2
34.4634.7034.96T:grain128aeadv2
35.5235.8636.58T:schwaemm256256v2
36.4036.7737.34T:schwaemm192192v2
37.9438.0538.34romulusn
47.0447.1647.53T:giftcofb128v1
49.8650.1650.31T:tinyjambu128v2
50.0350.8454.63romulusm
55.3855.8256.15T:tinyjambu192v2
56.2056.7056.93T:tinyjambu256v2
104.49104.71105.63romulust
107.12108.02108.73T:isapa128av20
158.70159.55161.20T:elephant200v2
231.91232.77234.15T:isapk128av20
333.35333.45333.82T:isapa128v20
1253.201254.301257.09T:isapk128v20
2008.652010.322020.95T:isapxv20
5992.416038.746073.77T:elephant176v2
7845.647898.097964.73T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
5.035.085.27aes256gcmv1
9.579.8310.07ascon128av12
11.1611.3012.13T:aes128gcmv1
11.4211.5311.79T:aes256gcmv1
12.1212.2912.52ascon80pqv12
12.2812.4212.73ascon128v12
17.0917.2017.66ascon128abi32v12
19.1619.2719.79T:xoodyakround3
22.9723.2623.65ascon128bi32v12
28.3428.5528.77T:schwaemm256128v2
30.3630.5230.70T:schwaemm128128v2
34.2334.4834.66T:grain128aeadv2
35.6235.7836.66T:schwaemm256256v2
36.4136.8837.24T:schwaemm192192v2
38.1338.1638.23romulusn
47.4547.5247.72T:giftcofb128v1
49.9550.1650.24T:tinyjambu128v2
52.3952.7557.54romulusm
54.7755.0655.55T:tinyjambu192v2
56.5456.9957.12T:tinyjambu256v2
104.67104.89105.23romulust
109.80110.38111.30T:isapa128av20
157.92159.25160.73T:elephant200v2
232.59234.20235.15T:isapk128av20
333.34333.76334.09T:isapa128v20
1253.821255.421257.23T:isapk128v20
2011.082012.732013.26T:isapxv20
5991.886041.186077.11T:elephant176v2
7844.527935.987963.69T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
5.005.075.10aes256gcmv1
9.589.709.81ascon128av12
11.2211.3111.84T:aes128gcmv1
11.4611.5411.62T:aes256gcmv1
12.1212.2012.29ascon80pqv12
12.0312.2912.48ascon128v12
17.0917.1717.23ascon128abi32v12
19.4119.8019.87T:xoodyakround3
22.9022.9823.30ascon128bi32v12
28.2528.3428.41T:schwaemm256128v2
30.2830.5630.80T:schwaemm128128v2
34.2634.3334.41T:grain128aeadv2
35.5535.8736.55T:schwaemm256256v2
35.7236.6636.84T:schwaemm192192v2
38.0338.1338.21romulusn
47.4147.4647.62T:giftcofb128v1
49.8349.9750.09T:tinyjambu128v2
52.4352.7558.05romulusm
54.4854.7755.05T:tinyjambu192v2
55.7856.2756.76T:tinyjambu256v2
65.7965.8866.09romulust
68.3268.7769.07T:isapa128av20
156.78157.34157.98T:isapk128av20
158.05159.05160.76T:elephant200v2
173.72174.16174.38T:isapa128v20
678.60678.98679.50T:isapk128v20
1051.431053.271054.71T:isapxv20
5992.766073.356084.86T:elephant176v2
7843.787897.247965.09T:elephant160v2