VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Zen 3 (a50f00); 2021 AMD Ryzen 5 PRO 5650G; 6 x 3900MHz; cezanne, supercop-20250307

[Page version: 20250328 20:58:22]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.720.750.78T:aes128gcmv1
0.80?0.88?0.89?T:aes256gcmv1
1.831.841.84aes256gcmv1
6.216.256.30ascon128av12
8.508.508.51ascon80pqv12
8.638.668.67ascon128v12
12.5512.5712.58ascon128abi32v12
16.6216.6516.69T:xoodyakround3
19.0619.1319.19ascon128bi32v12
19.2619.3219.42T:schwaemm256128v2
23.0323.0823.10T:grain128aeadv2
23.8424.5424.75T:schwaemm256256v2
25.9425.9926.08T:schwaemm192192v2
28.9529.0529.18T:schwaemm128128v2
34.1434.1434.14T:isapa128v20
35.1635.6835.69T:isapa128av20
37.0837.1037.14romulusn
38.4438.4438.44T:giftcofb128v1
58.4658.4758.48T:tinyjambu128v2
59.3159.3559.40romulusm
60.3060.5660.88T:isapk128av20
65.3065.6265.62T:tinyjambu256v2
66.0566.0566.05T:tinyjambu192v2
78.3478.5879.66T:isapk128v20
114.51114.57114.61romulust
128.21?149.22?171.07?T:isapxv20
233.04?255.16?258.96?T:elephant200v2
6701.006718.266738.31T:elephant176v2
7844.037844.747846.54T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.68?0.73?0.77?T:aes128gcmv1
0.73?0.79?0.83?T:aes256gcmv1
1.821.821.83aes256gcmv1
5.745.775.79ascon128av12
8.378.388.38ascon128v12
8.438.448.45ascon80pqv12
12.6612.6912.73ascon128abi32v12
16.4116.4816.53T:xoodyakround3
18.4218.5018.58ascon128bi32v12
19.3419.4019.47T:schwaemm256128v2
22.9722.9823.12T:grain128aeadv2
24.2624.3424.37T:schwaemm256256v2
26.0726.2326.30T:schwaemm192192v2
29.0429.1429.21T:schwaemm128128v2
34.1134.1534.18T:isapa128v20
35.6435.7035.71T:isapa128av20
37.2737.3137.36romulusn
38.4938.5038.51T:giftcofb128v1
58.5758.5858.59T:tinyjambu128v2
59.7159.7659.81romulusm
60.4060.8461.35T:isapk128av20
64.7464.7564.76T:tinyjambu192v2
65.5065.7565.75T:tinyjambu256v2
77.2778.5779.35T:isapk128v20
114.45114.52114.62romulust
149.03149.73150.15T:isapxv20
232.53?255.07?258.72?T:elephant200v2
6700.226702.016717.49T:elephant176v2
7844.977845.627845.94T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.68?0.73?0.78?T:aes128gcmv1
0.77?0.80?0.95?T:aes256gcmv1
1.821.821.83aes256gcmv1
5.745.775.79ascon128av12
8.388.388.38ascon128v12
8.448.458.45ascon80pqv12
12.6812.6912.72ascon128abi32v12
16.4716.5216.55T:xoodyakround3
16.8516.8816.93T:isapa128v20
18.4518.5018.56ascon128bi32v12
19.3219.3719.43T:schwaemm256128v2
22.9722.9923.09T:grain128aeadv2
23.6123.6423.65T:isapa128av20
24.2324.3724.45T:schwaemm256256v2
26.0626.1426.23T:schwaemm192192v2
29.0429.1929.27T:schwaemm128128v2
37.2937.3237.35romulusn
38.5038.5038.51T:giftcofb128v1
38.7538.8538.94romulust
40.4540.7841.03T:isapk128av20
49.9650.0850.43T:isapk128v20
58.5858.5858.59T:tinyjambu128v2
59.6959.7459.78romulusm
64.7464.7564.76T:tinyjambu192v2
65.4965.5565.75T:tinyjambu256v2
87.5087.8888.01T:isapxv20
232.52?255.06?258.94?T:elephant200v2
6704.556706.836717.33T:elephant176v2
7843.177843.877844.86T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.570.590.62T:aes128gcmv1
0.58?0.63?0.65?T:aes256gcmv1
1.141.141.15aes256gcmv1
5.855.876.09ascon128av12
8.378.388.39ascon80pqv12
8.458.468.46ascon128v12
12.4012.4112.44ascon128abi32v12
12.6512.6612.69T:xoodyakround3
18.8418.8618.87ascon128bi32v12
19.0819.1819.27T:schwaemm256128v2
23.0023.0223.03T:grain128aeadv2
23.8424.5024.70T:schwaemm256256v2
25.5825.5925.60T:isapa128v20
25.8925.9526.27T:schwaemm192192v2
29.0229.0929.13T:schwaemm128128v2
29.4029.6429.65T:isapa128av20
29.6829.7029.72romulusn
38.3938.4138.42T:giftcofb128v1
40.7940.8140.84romulusm
47.5447.6147.62T:tinyjambu128v2
48.3848.5849.04T:isapk128av20
49.2449.2549.26T:tinyjambu256v2
51.2951.3051.31T:tinyjambu192v2
64.2464.4864.77T:isapk128v20
76.6676.7076.76romulust
108.35?118.68?128.96?T:isapxv20
173.77?190.94?193.17?T:elephant200v2
5005.555015.435031.47T:elephant176v2
5883.175883.965901.49T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.570.590.59T:aes128gcmv1
0.590.610.63T:aes256gcmv1
1.131.131.14aes256gcmv1
5.815.825.83ascon128av12
8.318.318.35ascon128v12
8.348.358.35ascon80pqv12
12.4312.4512.46ascon128abi32v12
12.5612.5812.60T:xoodyakround3
18.4818.5018.53ascon128bi32v12
19.1219.1819.28T:schwaemm256128v2
22.9322.9723.11T:grain128aeadv2
24.1724.2824.30T:schwaemm256256v2
25.5625.5825.59T:isapa128v20
25.9926.4326.48T:schwaemm192192v2
29.1029.1629.23T:schwaemm128128v2
29.3729.4229.64T:isapa128av20
29.7929.8129.82romulusn
38.4338.4338.44T:giftcofb128v1
41.0041.0241.04romulusm
47.6647.6747.67T:tinyjambu128v2
48.6648.8348.95T:isapk128av20
49.3549.3749.39T:tinyjambu256v2
50.6050.6250.66T:tinyjambu192v2
64.2864.6064.78T:isapk128v20
76.6876.7376.78romulust
117.83118.29118.90T:isapxv20
173.59?191.27?193.00?T:elephant200v2
5007.285026.915027.43T:elephant176v2
5883.415883.845884.10T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.570.590.61T:aes128gcmv1
0.59?0.63?0.69?T:aes256gcmv1
1.121.131.13aes256gcmv1
5.815.825.83ascon128av12
8.318.318.33ascon128v12
8.358.358.35ascon80pqv12
12.4312.4412.46ascon128abi32v12
12.5712.5912.64T:xoodyakround3
16.9216.9516.97T:isapa128v20
18.5018.5018.51ascon128bi32v12
19.1119.1619.30T:schwaemm256128v2
22.9522.9623.08T:grain128aeadv2
23.6323.6323.64T:isapa128av20
24.2724.3024.31T:schwaemm256256v2
25.9526.0126.05T:schwaemm192192v2
29.1129.1629.23T:schwaemm128128v2
29.8029.8129.84romulusn
38.4338.4438.45T:giftcofb128v1
38.6938.7638.79T:isapk128av20
38.8238.8738.90romulust
40.9941.0241.05romulusm
47.6647.6747.67T:tinyjambu128v2
49.3449.3849.41T:tinyjambu256v2
50.3050.4551.05T:isapk128v20
50.6550.6550.67T:tinyjambu192v2
86.3086.6087.16T:isapxv20
173.76190.60192.65T:elephant200v2
5007.095007.965016.49T:elephant176v2
5883.045883.405883.90T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.36?0.40?0.42?T:aes128gcmv1
0.410.420.43T:aes256gcmv1
0.430.450.46aes256gcmv1
5.865.875.88ascon128av12
8.258.258.25ascon128v12
8.258.258.26ascon80pqv12
8.668.688.70T:xoodyakround3
12.2512.2612.29ascon128abi32v12
17.0017.0117.01T:isapa128v20
18.5518.5718.59ascon128bi32v12
18.9118.9518.99T:schwaemm256128v2
22.2722.2922.34romulusn
22.2722.3122.35romulusm
22.9322.9722.99T:grain128aeadv2
23.6123.6423.66T:isapa128av20
23.8124.4424.51T:schwaemm256256v2
25.8225.8725.95T:schwaemm192192v2
29.0329.1429.27T:schwaemm128128v2
33.2433.2533.26T:tinyjambu256v2
36.2236.4136.66T:isapk128av20
36.5436.5536.55T:tinyjambu192v2
36.6136.6236.64T:tinyjambu128v2
38.3538.3638.37T:giftcofb128v1
38.7938.8638.93romulust
49.4749.9251.43T:isapk128v20
65.65?86.99?108.01?T:isapxv20
114.63?126.55?128.11?T:elephant200v2
3319.223323.693326.36T:elephant176v2
3922.183922.753922.95T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.410.430.43T:aes128gcmv1
0.420.440.45aes256gcmv1
0.41?0.46?0.51?T:aes256gcmv1
5.865.875.87ascon128av12
8.258.258.26ascon80pqv12
8.258.258.26ascon128v12
8.628.698.75T:xoodyakround3
12.1612.1912.23ascon128abi32v12
16.9717.0117.05T:isapa128v20
18.4918.5018.52ascon128bi32v12
18.8918.9318.97T:schwaemm256128v2
22.2622.3122.33romulusm
22.2922.3122.34romulusn
22.8822.9223.06T:grain128aeadv2
23.6223.6323.64T:isapa128av20
24.0824.2224.25T:schwaemm256256v2
25.8325.9126.01T:schwaemm192192v2
29.0529.1629.31T:schwaemm128128v2
33.2533.2533.26T:tinyjambu256v2
36.5436.5536.55T:tinyjambu192v2
36.1636.6036.75T:isapk128av20
36.7436.7536.75T:tinyjambu128v2
38.3538.3638.39T:giftcofb128v1
38.8038.8638.92romulust
50.0650.4050.71T:isapk128v20
85.6187.2488.08T:isapxv20
112.49?126.43?127.74?T:elephant200v2
3311.443312.823323.56T:elephant176v2
3922.233922.853933.93T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.37?0.43?0.48?T:aes128gcmv1
0.430.440.44aes256gcmv1
0.41?0.44?0.50?T:aes256gcmv1
5.865.875.87ascon128av12
8.258.258.26ascon80pqv12
8.258.258.26ascon128v12
8.628.668.76T:xoodyakround3
12.1612.1912.22ascon128abi32v12
16.9717.0517.05T:isapa128v20
18.4818.5018.53ascon128bi32v12
18.9118.9419.28T:schwaemm256128v2
22.2622.3122.33romulusn
22.2822.3122.34romulusm
22.8722.9023.13T:grain128aeadv2
23.6323.6423.66T:isapa128av20
24.1024.2224.24T:schwaemm256256v2
25.8325.8926.36T:schwaemm192192v2
29.0529.1829.25T:schwaemm128128v2
32.9733.2533.28T:tinyjambu256v2
36.5536.5536.56T:tinyjambu192v2
36.6136.7536.77T:tinyjambu128v2
36.3436.7936.89T:isapk128av20
38.3538.3638.38T:giftcofb128v1
38.8038.8638.90romulust
50.3350.6750.88T:isapk128v20
85.7086.7086.81T:isapxv20
114.75125.28127.42T:elephant200v2
3311.123312.653316.81T:elephant176v2
3922.363922.633922.88T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.990.991.00T:aes128gcmv1
1.031.031.05T:aes256gcmv1
1.271.271.28aes256gcmv1
6.046.226.26ascon128av12
8.518.518.53ascon80pqv12
8.578.588.59ascon128v12
12.7012.7112.74ascon128abi32v12
12.7912.8012.83T:xoodyakround3
19.1719.1819.20ascon128bi32v12
19.7219.7619.79T:schwaemm256128v2
23.3323.3623.38T:grain128aeadv2
24.5225.1525.16T:schwaemm256256v2
26.5226.5926.82T:schwaemm192192v2
29.4829.5029.56T:schwaemm128128v2
29.9329.9529.96romulusn
33.5833.5933.81T:isapa128av20
37.2137.2237.24T:isapa128v20
38.7438.7638.76T:giftcofb128v1
41.0641.0941.09romulusm
47.9948.0048.03T:tinyjambu128v2
49.6449.6449.65T:tinyjambu256v2
51.7051.7151.72T:tinyjambu192v2
54.3954.5855.25T:isapk128av20
77.7577.8377.88romulust
108.64108.80108.85T:isapk128v20
192.06192.71206.01T:isapxv20
178.42195.28196.54T:elephant200v2
5044.505045.775053.95T:elephant176v2
5949.905950.225950.41T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.990.991.01T:aes128gcmv1
1.031.041.06T:aes256gcmv1
1.261.261.27aes256gcmv1
5.975.985.99ascon128av12
8.448.448.48ascon128v12
8.478.478.48ascon80pqv12
12.7112.7312.74T:xoodyakround3
12.7212.7312.75ascon128abi32v12
18.8418.8418.87ascon128bi32v12
19.7119.7519.78T:schwaemm256128v2
23.3123.3523.44T:grain128aeadv2
24.8524.9624.97T:schwaemm256256v2
26.6526.6926.86T:schwaemm192192v2
29.5129.5429.61T:schwaemm128128v2
30.0630.0730.10romulusn
33.5833.5933.82T:isapa128av20
37.2137.2137.23T:isapa128v20
38.7938.8038.80T:giftcofb128v1
41.3141.3341.35romulusm
48.0848.0848.09T:tinyjambu128v2
49.7749.7749.81T:tinyjambu256v2
51.0851.1351.13T:tinyjambu192v2
54.5054.8055.99T:isapk128av20
77.8277.8777.91romulust
109.85109.92110.35T:isapk128v20
192.47192.89193.32T:isapxv20
178.35194.08195.49T:elephant200v2
5045.345055.125070.25T:elephant176v2
5949.805949.955951.04T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.990.991.01T:aes128gcmv1
1.031.041.05T:aes256gcmv1
1.261.261.26aes256gcmv1
5.975.985.99ascon128av12
8.448.448.48ascon128v12
8.478.478.48ascon80pqv12
12.7212.7312.74ascon128abi32v12
12.7312.7412.76T:xoodyakround3
18.8518.8518.86ascon128bi32v12
19.7219.7319.76T:schwaemm256128v2
22.8622.8622.88T:isapa128v20
23.2923.3123.44T:grain128aeadv2
24.8724.9725.10T:schwaemm256256v2
25.9225.9225.92T:isapa128av20
26.6626.8427.01T:schwaemm192192v2
29.4829.5329.64T:schwaemm128128v2
30.0530.0630.07romulusn
38.7938.7938.81T:giftcofb128v1
39.9339.9540.00romulust
41.3141.3441.36romulusm
42.2542.2642.28T:isapk128av20
48.0848.0948.09T:tinyjambu128v2
49.7749.8149.81T:tinyjambu256v2
51.1351.1451.14T:tinyjambu192v2
73.5473.6273.69T:isapk128v20
124.39125.36127.19T:isapxv20
178.83194.23195.38T:elephant200v2
5044.935048.135054.15T:elephant176v2
5949.535950.015950.22T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
6.086.146.18aes256gcmv1
9.799.889.90ascon128av12
10.4410.6610.95T:aes128gcmv1
10.6610.7711.38T:aes256gcmv1
11.4011.4011.48ascon128v12
11.4011.4411.71ascon80pqv12
18.3818.4818.67T:xoodyakround3
19.5519.6419.94ascon128abi32v12
26.5326.5326.91ascon128bi32v12
31.4831.5931.61T:grain128aeadv2
32.7532.9533.47T:schwaemm256128v2
35.6635.8135.90romulusn
38.4238.6638.89T:schwaemm128128v2
39.7340.3340.51T:schwaemm256256v2
43.3243.6343.83T:schwaemm192192v2
46.4646.6646.81T:giftcofb128v1
46.7646.9247.12romulusm
56.6757.6958.05T:tinyjambu128v2
58.4658.5858.73T:tinyjambu256v2
61.0461.0961.23T:tinyjambu192v2
103.25103.48103.69romulust
128.83128.85128.94T:isapa128av20
183.97186.49189.06T:isapk128av20
250.08272.03273.38T:elephant200v2
304.56304.69304.77T:isapa128v20
1111.591116.381123.33T:isapk128v20
1880.95?1896.44?2203.83?T:isapxv20
6285.486292.596298.04T:elephant176v2
7969.267971.057987.03T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
5.655.695.76aes256gcmv1
9.489.619.71ascon128av12
10.1210.2110.55T:aes128gcmv1
10.8811.2311.34T:aes256gcmv1
11.3611.3611.43ascon128v12
11.3411.4111.62ascon80pqv12
18.3418.4618.59T:xoodyakround3
19.3319.4519.91ascon128abi32v12
26.6126.6327.08ascon128bi32v12
31.3231.4632.17T:grain128aeadv2
32.7733.0533.91T:schwaemm256128v2
35.9936.1436.29romulusn
38.6339.0539.55T:schwaemm128128v2
39.9640.4540.57T:schwaemm256256v2
43.0443.1943.93T:schwaemm192192v2
46.8647.1247.29T:giftcofb128v1
48.3748.4648.63romulusm
57.4857.5758.52T:tinyjambu128v2
58.9059.7059.79T:tinyjambu256v2
62.0462.3562.40T:tinyjambu192v2
103.67103.84104.02romulust
129.01129.02129.55T:isapa128av20
184.22184.54188.39T:isapk128av20
250.24271.88272.66T:elephant200v2
304.65305.13305.30T:isapa128v20
1138.671141.661141.98T:isapk128v20
1888.731891.561891.62T:isapxv20
6281.886286.846290.52T:elephant176v2
7968.457969.697986.27T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
5.625.665.72aes256gcmv1
9.479.619.66ascon128av12
10.2010.3010.69T:aes128gcmv1
11.0611.1511.45T:aes256gcmv1
11.3411.3411.41ascon80pqv12
11.3611.3611.38ascon128v12
18.3418.4819.12T:xoodyakround3
19.3419.4419.74ascon128abi32v12
26.6226.6426.91ascon128bi32v12
31.5331.7032.03T:grain128aeadv2
32.7633.0933.47T:schwaemm256128v2
36.0136.0736.19romulusn
38.4838.8539.38T:schwaemm128128v2
39.9040.4540.50T:schwaemm256256v2
43.0543.2743.68T:schwaemm192192v2
46.9047.1047.20T:giftcofb128v1
48.3148.4648.66romulusm
57.4957.5257.58T:tinyjambu128v2
58.8459.6059.72T:tinyjambu256v2
60.7062.2462.27T:tinyjambu192v2
64.7265.1265.23romulust
77.2777.2877.53T:isapa128av20
115.70116.53117.44T:isapk128av20
158.71158.71159.31T:isapa128v20
249.93271.69272.77T:elephant200v2
599.93600.56602.12T:isapk128v20
981.49985.06985.51T:isapxv20
6283.546284.316292.84T:elephant176v2
7967.017968.557970.36T:elephant160v2