VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Silvermont (406c4); 2016 Intel Atom x5-Z8350; 4 x 1440MHz; cherry, supercop-20251222

[Page version: 20260112 15:28:56]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
8.758.818.84T:aes128gcmv1
8.868.949.00aes256gcmv1
16.8616.8816.90ascon128av12
24.6224.6324.65ascon128v12
25.1025.1325.17ascon80pqv12
34.4034.4334.46ascon128abi32v12
51.3751.3851.40ascon128bi32v12
52.9352.9452.98T:xoodyakround3
53.9253.9454.04T:grain128aeadv2
57.2957.3257.34T:giftcofb128v1
58.1558.1758.19T:schwaemm256128v2
65.9065.9265.92T:schwaemm256256v2
77.3577.3877.40T:schwaemm192192v2
80.7680.7780.79T:schwaemm128128v2
92.2592.2892.29T:isapa128av20
105.71105.76105.96T:tinyjambu128v2
112.56113.74115.34T:isapa128v20
118.38118.42118.46T:romulusn
127.25127.26127.36T:tinyjambu192v2
139.20139.25139.36romulusn
139.21139.28139.37T:tinyjambu256v2
183.21184.07184.87T:isapk128av20
223.96224.05224.28romulusm
245.07245.51247.58T:isapk128v20
299.69300.09300.11T:elephant200v2
441.43441.54442.24T:isapxv20
480.30480.45481.84T!!!romulust
17774.5517775.8617793.53T:elephant176v2
19390.1719391.7919393.47T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
8.648.708.73T:aes128gcmv1
9.889.959.98aes256gcmv1
16.4816.5116.53ascon128av12
24.8724.8724.88ascon128v12
25.2425.2525.27ascon80pqv12
34.2434.2634.27ascon128abi32v12
51.0951.0951.12T:xoodyakround3
51.2551.2751.29ascon128bi32v12
54.8354.8954.89T:grain128aeadv2
56.9957.0157.05T:giftcofb128v1
58.3358.3658.38T:schwaemm256128v2
65.8165.8265.83T:schwaemm256256v2
77.9077.9277.95T:schwaemm192192v2
80.6480.6581.07T:schwaemm128128v2
92.2592.2692.32T:isapa128av20
107.50107.57107.58T:tinyjambu128v2
113.07115.25117.42T:isapa128v20
117.68117.77117.98T:romulusn
128.50128.50128.53T:tinyjambu192v2
139.11139.18139.34romulusn
140.50140.51140.61T:tinyjambu256v2
183.91184.05184.53T:isapk128av20
223.85223.93224.17romulusm
245.01245.68246.45T:isapk128v20
299.70300.09300.14T:elephant200v2
441.46441.55442.10T:isapxv20
480.30480.51481.81T!!!romulust
17774.6117776.7917793.41T:elephant176v2
19390.2819391.0319393.15T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
8.698.718.73T:aes128gcmv1
9.919.979.98aes256gcmv1
16.5116.5116.52ascon128av12
24.8724.8824.88ascon128v12
25.2425.2425.26ascon80pqv12
34.2634.2634.27ascon128abi32v12
51.1351.1751.19T:xoodyakround3
51.2651.2751.29ascon128bi32v12
54.8454.8954.89T:grain128aeadv2
57.0157.0157.03T:giftcofb128v1
56.1357.1558.14T:isapa128v20
58.3458.3758.41T:schwaemm256128v2
60.6160.6460.68T:isapa128av20
65.8165.8265.87T:schwaemm256256v2
77.9277.9277.93T:schwaemm192192v2
80.6480.6580.66T:schwaemm128128v2
107.48107.52107.58T:tinyjambu128v2
117.68117.71117.82T:romulusn
122.41122.55122.67T:isapk128av20
128.50128.50128.52T:tinyjambu192v2
139.13139.16139.26romulusn
140.50140.50140.55T:tinyjambu256v2
153.22153.38154.04T:isapk128v20
167.49167.56167.63T!!!romulust
223.86223.99224.35romulusm
244.02244.11244.22T:isapxv20
299.70300.09300.14T:elephant200v2
17773.6517775.3117793.04T:elephant176v2
19390.4619391.0519393.96T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
5.915.945.96T:aes128gcmv1
6.046.076.09aes256gcmv1
16.7316.7616.79ascon128av12
24.7424.7524.79ascon128v12
24.9925.0125.03ascon80pqv12
34.3134.3434.46ascon128abi32v12
39.2239.2339.28T:xoodyakround3
51.1851.1951.22ascon128bi32v12
53.5153.5553.63T:grain128aeadv2
57.1657.1857.33T:giftcofb128v1
57.9958.0058.08T:schwaemm256128v2
65.5965.6065.63T:schwaemm256256v2
76.4476.4576.46T:isapa128av20
76.3976.4876.52T:schwaemm192192v2
80.4180.4280.42T:schwaemm128128v2
84.8985.8486.66T:isapa128v20
86.1186.2686.31T:tinyjambu128v2
99.99100.00100.10T:tinyjambu192v2
105.61105.66105.69T:romulusn
105.87105.88105.91T:tinyjambu256v2
111.92111.98112.31romulusn
153.31153.41153.78T:isapk128av20
154.30154.33154.45romulusm
199.13199.26200.38T:isapk128v20
222.74222.78223.16T:elephant200v2
323.69323.87326.79T!!!romulust
343.85343.96344.25T:isapxv20
13276.3213277.1113290.11T:elephant176v2
14540.5414541.1814541.98T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
5.855.885.91T:aes128gcmv1
6.446.486.53aes256gcmv1
16.4716.5416.55ascon128av12
24.7924.8124.84ascon80pqv12
24.9925.0025.04ascon128v12
34.2134.2334.25ascon128abi32v12
38.3238.3338.36T:xoodyakround3
51.1351.1451.16ascon128bi32v12
54.1554.2354.38T:grain128aeadv2
57.0357.0557.06T:giftcofb128v1
58.0758.0858.16T:schwaemm256128v2
65.5365.5565.58T:schwaemm256256v2
76.4376.4476.69T:isapa128av20
76.6776.7576.82T:schwaemm192192v2
80.3480.3580.36T:schwaemm128128v2
84.6486.0288.00T:isapa128v20
87.0087.0787.15T:tinyjambu128v2
100.60100.63100.71T:tinyjambu192v2
105.32105.35105.62T:romulusn
106.49106.51106.57T:tinyjambu256v2
111.63111.95112.28romulusn
153.26153.36153.68T:isapk128av20
154.25154.29154.39romulusm
199.03199.36199.67T:isapk128v20
222.74222.76223.12T:elephant200v2
323.73324.29327.86T!!!romulust
343.86344.01344.27T:isapxv20
13276.2613277.5413290.76T:elephant176v2
14540.4814540.8414542.60T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
5.885.895.90T:aes128gcmv1
6.486.496.50aes256gcmv1
16.5216.5316.55ascon128av12
24.8024.8224.83ascon80pqv12
24.9925.0025.03ascon128v12
34.2234.2334.25ascon128abi32v12
38.3538.3638.37T:xoodyakround3
51.1451.1451.16ascon128bi32v12
54.2654.3254.34T:grain128aeadv2
57.0157.0457.05T:giftcofb128v1
56.4457.3057.96T:isapa128v20
58.0858.0858.18T:schwaemm256128v2
60.6260.6360.65T:isapa128av20
65.5465.5565.57T:schwaemm256256v2
76.6776.7776.78T:schwaemm192192v2
80.3480.3580.36T:schwaemm128128v2
87.0087.0287.09T:tinyjambu128v2
100.61100.62100.64T:tinyjambu192v2
105.32105.37105.80T:romulusn
106.48106.50106.51T:tinyjambu256v2
111.91111.92111.97romulusn
122.54122.61122.71T:isapk128av20
153.09153.14153.36T:isapk128v20
154.27154.29154.36romulusm
167.19167.30168.63T!!!romulust
222.74222.77223.17T:elephant200v2
244.89245.22245.49T:isapxv20
13276.1113277.2913290.04T:elephant176v2
14540.7914541.3914542.50T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
3.013.073.08T:aes128gcmv1
3.173.183.21aes256gcmv1
16.6116.6416.67ascon128av12
24.8324.8824.92ascon80pqv12
24.8724.8824.90ascon128v12
25.5725.5825.59T:xoodyakround3
34.1734.2134.58ascon128abi32v12
51.0051.0151.10ascon128bi32v12
53.1553.2053.30T:grain128aeadv2
56.9857.0357.12T:giftcofb128v1
56.6057.1957.76T:isapa128v20
57.8357.8357.92T:schwaemm256128v2
60.6260.6360.69T:isapa128av20
65.2865.2865.28T:schwaemm256256v2
66.4966.5366.60T:tinyjambu128v2
72.5072.5072.52T:tinyjambu256v2
72.7672.7872.84T:tinyjambu192v2
75.6175.6275.63T:schwaemm192192v2
80.0880.0880.08T:schwaemm128128v2
84.6384.6984.78romulusn
84.6884.6984.91romulusm
92.8992.9192.99T:romulusn
122.62122.73122.85T:isapk128av20
147.04147.06147.08T:elephant200v2
152.85152.98153.09T:isapk128v20
167.07167.08167.20T!!!romulust
246.27246.36247.00T:isapxv20
8780.588781.698790.09T:elephant176v2
9689.649690.569691.25T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
2.983.013.04aes256gcmv1
3.013.063.07T:aes128gcmv1
16.5016.5516.59ascon128av12
24.3624.3824.39ascon80pqv12
25.1225.1225.14ascon128v12
25.5525.5825.74T:xoodyakround3
34.1634.2034.22ascon128abi32v12
51.0051.0151.03ascon128bi32v12
53.5653.5953.62T:grain128aeadv2
56.9757.0357.05T:giftcofb128v1
56.3357.1858.26T:isapa128v20
57.8357.8357.88T:schwaemm256128v2
60.6160.6360.69T:isapa128av20
65.2765.2965.30T:schwaemm256256v2
66.4866.5566.63T:tinyjambu128v2
72.5072.5072.51T:tinyjambu256v2
72.7672.7972.81T:tinyjambu192v2
75.6275.6475.69T:schwaemm192192v2
80.0780.0880.12T:schwaemm128128v2
84.6684.6884.75romulusm
84.6584.7084.74romulusn
92.9092.9793.06T:romulusn
122.63122.72122.84T:isapk128av20
147.04147.08147.11T:elephant200v2
152.84152.94153.11T:isapk128v20
167.02167.10167.20T!!!romulust
246.28246.62246.67T:isapxv20
8780.408781.118790.04T:elephant176v2
9689.609690.399691.02T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
3.013.013.01aes256gcmv1
3.063.063.07T:aes128gcmv1
16.5416.5516.58ascon128av12
24.3824.3824.39ascon80pqv12
25.1225.1225.12ascon128v12
25.5625.5825.59T:xoodyakround3
34.1934.2034.21ascon128abi32v12
51.0051.0151.03ascon128bi32v12
53.5953.6053.70T:grain128aeadv2
56.9957.0257.03T:giftcofb128v1
56.2257.1458.10T:isapa128v20
57.8257.8357.87T:schwaemm256128v2
60.6260.6460.69T:isapa128av20
65.2865.2865.28T:schwaemm256256v2
66.5066.5166.53T:tinyjambu128v2
72.5072.5072.50T:tinyjambu256v2
72.7572.7972.87T:tinyjambu192v2
75.6275.6275.65T:schwaemm192192v2
80.0880.0880.12T:schwaemm128128v2
84.6784.7184.86romulusm
84.6984.7284.74romulusn
92.9192.9492.99T:romulusn
122.54122.69122.81T:isapk128av20
147.04147.06147.09T:elephant200v2
152.86152.97153.72T:isapk128v20
167.07167.08167.18T!!!romulust
246.22246.36247.00T:isapxv20
8780.338781.388790.07T:elephant176v2
9689.609690.459691.55T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
6.336.336.35T:aes128gcmv1
6.446.446.48aes256gcmv1
17.1317.1317.15ascon128av12
25.1025.1025.13ascon128v12
25.3725.3725.40ascon80pqv12
35.0535.0635.10ascon128abi32v12
39.6139.6139.62T:xoodyakround3
51.8851.8951.90ascon128bi32v12
54.2754.3354.33T:grain128aeadv2
57.8457.8557.86T:giftcofb128v1
59.6659.6759.68T:schwaemm256128v2
67.2767.2767.28T:schwaemm256256v2
78.0878.1078.14T:schwaemm192192v2
81.4381.4381.43T:schwaemm128128v2
81.6981.6981.72T:isapa128av20
86.9087.1787.22T:tinyjambu128v2
100.76100.81100.90T:tinyjambu192v2
106.68106.69106.85T:tinyjambu256v2
107.03107.03107.27T:romulusn
112.95112.97113.36romulusn
125.17125.48126.19T:isapa128v20
155.41155.41155.57romulusm
192.19192.25192.45T:isapk128av20
227.32227.47227.50T:elephant200v2
328.58328.61329.88T!!!romulust
375.25375.43375.93T:isapk128v20
554.78554.82555.21T:isapxv20
13378.0013379.1213390.21T:elephant176v2
14704.9114705.6214706.33T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
6.296.296.32T:aes128gcmv1
6.866.866.93aes256gcmv1
16.9216.9316.96ascon128av12
25.1825.1925.21ascon80pqv12
25.3625.3625.40ascon128v12
34.9734.9735.01ascon128abi32v12
38.7238.7338.76T:xoodyakround3
51.8451.8451.86ascon128bi32v12
54.9654.9955.13T:grain128aeadv2
57.7257.7757.92T:giftcofb128v1
59.7659.7659.78T:schwaemm256128v2
67.2167.2167.22T:schwaemm256256v2
78.3678.3678.36T:schwaemm192192v2
81.3781.3781.38T:schwaemm128128v2
81.9181.9181.93T:isapa128av20
87.7387.7887.91T:tinyjambu128v2
101.40101.43101.47T:tinyjambu192v2
106.72106.74106.78T:romulusn
107.32107.32107.34T:tinyjambu256v2
112.93112.95113.01romulusn
125.20125.60126.74T:isapa128v20
155.52155.61156.75romulusm
192.23192.32192.49T:isapk128av20
227.47227.49227.54T:elephant200v2
328.55328.63330.40T!!!romulust
375.29375.41375.66T:isapk128v20
554.80554.85555.19T:isapxv20
13378.0113379.2813390.26T:elephant176v2
14704.9114705.5214707.07T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
6.296.296.30T:aes128gcmv1
6.866.866.87aes256gcmv1
16.9216.9216.92ascon128av12
25.1925.1925.23ascon80pqv12
25.3625.3625.38ascon128v12
34.9734.9734.99ascon128abi32v12
38.7738.7738.79T:xoodyakround3
51.8451.8451.88ascon128bi32v12
54.9355.0155.11T:grain128aeadv2
57.7157.7357.75T:giftcofb128v1
59.7659.7659.76T:schwaemm256128v2
63.8063.8063.82T:isapa128av20
67.2167.2167.25T:schwaemm256256v2
77.0877.3777.98T:isapa128v20
78.3678.3678.37T:schwaemm192192v2
81.3781.3781.37T:schwaemm128128v2
87.7287.8187.91T:tinyjambu128v2
101.40101.42101.44T:tinyjambu192v2
106.71106.73106.79T:romulusn
107.32107.32107.33T:tinyjambu256v2
112.93112.93113.20romulusn
150.01150.05150.10T:isapk128av20
155.51155.53155.62romulusm
171.94171.96172.08T!!!romulust
227.47227.48227.51T:elephant200v2
249.74249.77250.21T:isapk128v20
353.14353.17353.54T:isapxv20
13378.0813378.3613390.22T:elephant176v2
14705.0114705.5414706.05T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
21.2021.3721.95T:aes128gcmv1
22.4122.5923.25aes256gcmv1
25.6525.9127.15ascon128av12
33.0233.1234.09ascon128v12
33.3233.3634.39ascon80pqv12
51.8851.9252.85ascon128abi32v12
58.1958.3758.52T:xoodyakround3
67.6667.8568.30ascon128bi32v12
70.5570.5971.74T:grain128aeadv2
73.0173.0174.12T:giftcofb128v1
97.7397.7898.00T:schwaemm256128v2
102.55102.55102.99T:tinyjambu128v2
104.62104.64105.03T:schwaemm128128v2
105.14105.14105.62T:schwaemm256256v2
118.30118.46118.70T:tinyjambu192v2
124.27124.38125.15T:schwaemm192192v2
125.10125.10125.23T:tinyjambu256v2
135.34135.70136.41romulusn
138.90139.00139.27T:romulusn
178.63178.69180.53romulusm
202.24202.30202.91T:isapa128av20
321.15321.20321.52T:elephant200v2
439.47439.82441.91T!!!romulust
1031.681036.121055.52T:isapa128v20
1054.201055.321058.29T:isapk128av20
4384.984388.004400.67T:isapk128v20
5344.715345.125345.90T:isapxv20
16658.3316668.3016672.43T:elephant176v2
19686.2519691.2319701.90T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
21.5021.6421.89T:aes128gcmv1
22.2822.4523.02aes256gcmv1
25.6225.7427.27ascon128av12
33.3633.3834.12ascon128v12
33.4533.5034.07ascon80pqv12
51.9852.0952.93ascon128abi32v12
57.1757.4258.05T:xoodyakround3
67.7167.7668.23ascon128bi32v12
71.3071.4174.30T:grain128aeadv2
73.5273.6174.07T:giftcofb128v1
97.8897.9598.04T:schwaemm256128v2
103.68103.68103.73T:tinyjambu128v2
104.65104.75104.84T:schwaemm128128v2
105.05105.05105.59T:schwaemm256256v2
119.20119.37119.41T:tinyjambu192v2
124.92124.99125.48T:schwaemm192192v2
126.07126.07126.22T:tinyjambu256v2
135.41135.50135.88romulusn
138.41138.47139.25T:romulusn
183.26183.33184.88romulusm
207.50207.66207.80T:isapa128av20
321.17321.27321.31T:elephant200v2
439.85441.16441.80T!!!romulust
1035.071044.611068.69T:isapa128v20
1055.791056.111058.12T:isapk128av20
4384.554389.014392.09T:isapk128v20
5345.275345.775346.65T:isapxv20
16658.3016668.9116675.62T:elephant176v2
19686.0519692.4419698.46T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
21.4221.5021.73T:aes128gcmv1
22.2822.4522.45aes256gcmv1
25.6125.6226.02ascon128av12
33.3533.3833.41ascon80pqv12
33.3633.3833.44ascon128v12
51.9651.9952.04ascon128abi32v12
57.4657.7058.33T:xoodyakround3
67.7267.7367.79ascon128bi32v12
70.8770.8771.17T:grain128aeadv2
73.5273.5273.61T:giftcofb128v1
97.8697.8897.95T:schwaemm256128v2
103.66103.66103.66T:tinyjambu128v2
104.63104.69104.84T:schwaemm128128v2
105.04105.04105.05T:schwaemm256256v2
119.19119.28119.41T:tinyjambu192v2
124.88125.07125.14T:schwaemm192192v2
126.07126.07126.07T:tinyjambu256v2
135.35135.48136.05romulusn
136.52136.58136.84T:isapa128av20
138.16138.20138.37T:romulusn
183.17183.29183.41romulusm
278.94278.94279.80T!!!romulust
321.17321.22321.28T:elephant200v2
534.45537.55552.72T:isapa128v20
756.35756.62757.28T:isapk128av20
2439.622440.732441.48T:isapk128v20
2789.272789.302789.96T:isapxv20
16659.2816666.9316675.41T:elephant176v2
19686.9819694.6619699.13T:elephant160v2