VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Silvermont (406c4); 2016 Intel Atom x5-Z8350; 4 x 1440MHz; cherry, supercop-20260330

[Page version: 20260413 04:20:10]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
8.798.818.83T:aes128gcmv1
10.2110.2110.22aes256gcmv1
16.3816.3916.42ascon128av12
25.1225.1225.13ascon80pqv12
25.1225.1225.13ascon128v12
34.4434.4434.45ascon128abi32v12
49.8449.8449.88T:xoodyakround3
51.4951.5051.54ascon128bi32v12
52.8852.9053.10T:schwaemm256128v2
55.7955.8155.86T:grain128aeadv2
58.5358.5758.59T:giftcofb128v1
65.7565.7565.77T:schwaemm256256v2
70.1370.8571.00T:schwaemm192192v2
72.1972.1972.20T:schwaemm128128v2
89.2789.2989.33T:isapa128av20
90.0090.0090.01T:tinyjambu128v2
97.6597.9298.72T:isapa128v20
118.75118.76118.78T:romulusn
120.50120.73120.78T:tinyjambu192v2
130.00130.00130.02T:tinyjambu256v2
139.23139.28139.33romulusn
178.60178.90179.70T:isapk128av20
223.99224.06224.36romulusm
236.72237.18239.99T:isapk128v20
322.58322.95323.78T:elephant200v2
447.05447.48452.08T:isapxv20
480.32480.40483.16T!!!romulust
18217.8418226.0618234.95T:elephant176v2
20869.1020875.2720885.90T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
8.698.718.73T:aes128gcmv1
10.0210.0310.03aes256gcmv1
16.3816.3816.39ascon128av12
25.0025.0025.01ascon128v12
25.1225.1225.13ascon80pqv12
34.2534.2634.26ascon128abi32v12
47.9547.9648.03T:xoodyakround3
50.3550.3650.42ascon128bi32v12
52.8852.8953.53T:schwaemm256128v2
56.0956.2356.71T:grain128aeadv2
58.9558.9659.00T:giftcofb128v1
66.0366.0466.04T:schwaemm256256v2
70.0970.1470.94T:schwaemm192192v2
72.1972.1972.20T:schwaemm128128v2
89.2789.2989.32T:isapa128av20
90.0090.0090.01T:tinyjambu128v2
96.9497.7098.80T:isapa128v20
118.37118.38118.42T:romulusn
120.30120.46120.53T:tinyjambu192v2
128.74128.75128.89T:tinyjambu256v2
139.20139.22139.34romulusn
178.66178.88179.09T:isapk128av20
223.86223.91224.02romulusm
236.78237.10239.80T:isapk128v20
322.58322.93323.83T:elephant200v2
447.15447.50450.58T:isapxv20
480.30480.43483.07T!!!romulust
18217.0918226.4418234.26T:elephant176v2
20868.3120874.2920881.74T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
8.698.728.73T:aes128gcmv1
10.0310.0310.03aes256gcmv1
16.3816.3916.39ascon128av12
25.0025.0025.00ascon128v12
25.1225.1225.12ascon80pqv12
34.2634.2634.26ascon128abi32v12
48.0448.0548.09T:xoodyakround3
49.2949.3949.50T:isapa128v20
50.3750.3850.38ascon128bi32v12
52.8852.8852.92T:schwaemm256128v2
56.0756.1356.73T:grain128aeadv2
58.9658.9658.97T:giftcofb128v1
60.7860.7960.79T:isapa128av20
66.0366.0366.04T:schwaemm256256v2
70.0870.0870.09T:schwaemm192192v2
72.1972.1972.19T:schwaemm128128v2
90.0090.0090.02T:tinyjambu128v2
118.38118.38118.48T:romulusn
118.56118.66118.75T:isapk128av20
120.32120.50120.59T:tinyjambu192v2
128.74128.75128.82T:tinyjambu256v2
139.14139.24139.44romulusn
147.97148.06148.18T:isapk128v20
167.52167.54167.60T!!!romulust
223.85223.89224.25romulusm
247.92248.18249.47T:isapxv20
322.56322.92323.73T:elephant200v2
18215.5418227.0618235.44T:elephant176v2
20867.5020873.6120882.97T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
5.935.945.95T:aes128gcmv1
6.646.646.64aes256gcmv1
16.2716.2716.27ascon128av12
25.0625.0625.06ascon80pqv12
25.1925.1925.19ascon128v12
34.3334.3434.37ascon128abi32v12
37.7637.8037.87T:xoodyakround3
50.9450.9451.11ascon128bi32v12
52.6152.8453.28T:schwaemm256128v2
55.4555.4855.58T:grain128aeadv2
58.1958.2058.28T:giftcofb128v1
65.3765.3865.40T:schwaemm256256v2
69.8169.8370.60T:schwaemm192192v2
71.6271.6271.93T:tinyjambu128v2
72.0372.0372.09T:schwaemm128128v2
73.1873.4573.92T:isapa128v20
75.0375.0475.12T:isapa128av20
94.2094.3694.41T:tinyjambu192v2
97.2597.2597.36T:tinyjambu256v2
103.77103.77103.91T:romulusn
111.96112.00112.09romulusn
148.70148.85149.58T:isapk128av20
154.32154.36154.94romulusm
192.28192.53194.96T:isapk128v20
242.68243.04244.36T:elephant200v2
323.69323.79325.97T!!!romulust
347.76348.63351.23T:isapxv20
13608.1413612.3913617.78T:elephant176v2
15652.2515656.6415678.73T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
5.875.895.90T:aes128gcmv1
6.546.556.56aes256gcmv1
16.2716.2716.28ascon128av12
24.8724.8824.88ascon128v12
25.1225.1225.17ascon80pqv12
34.2234.2334.24ascon128abi32v12
36.8036.8236.89T:xoodyakround3
50.4350.4450.45ascon128bi32v12
52.5652.6253.22T:schwaemm256128v2
55.5255.6456.11T:grain128aeadv2
58.3758.3758.40T:giftcofb128v1
65.5165.5265.52T:schwaemm256256v2
69.7269.8470.66T:schwaemm192192v2
72.0372.0572.11T:schwaemm128128v2
73.0073.0173.02T:tinyjambu128v2
72.7373.4574.33T:isapa128v20
75.0375.0475.07T:isapa128av20
93.6493.7593.80T:tinyjambu192v2
96.8897.0097.01T:tinyjambu256v2
103.93103.94104.02T:romulusn
111.93111.95112.04romulusn
148.65148.79149.05T:isapk128av20
154.27154.30154.72romulusm
192.31192.50194.78T:isapk128v20
242.67243.03243.86T:elephant200v2
323.62323.75325.61T!!!romulust
347.75348.88351.25T:isapxv20
13606.1513611.3613616.49T:elephant176v2
15652.3515655.5815659.43T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
5.885.895.90T:aes128gcmv1
6.556.556.55aes256gcmv1
16.2716.2716.28ascon128av12
24.8724.8824.88ascon128v12
25.1225.1225.13ascon80pqv12
34.2234.2334.25ascon128abi32v12
36.8336.8636.93T:xoodyakround3
49.0449.1149.37T:isapa128v20
50.4350.4550.56ascon128bi32v12
52.6152.6252.62T:schwaemm256128v2
55.5155.6556.11T:grain128aeadv2
58.3758.3858.38T:giftcofb128v1
60.7960.7960.82T:isapa128av20
65.5165.5265.52T:schwaemm256256v2
69.7969.8870.66T:schwaemm192192v2
72.0372.0472.07T:schwaemm128128v2
73.0073.0173.02T:tinyjambu128v2
93.6193.7493.78T:tinyjambu192v2
96.9997.0097.01T:tinyjambu256v2
103.94103.94104.09T:romulusn
111.92111.96112.05romulusn
118.57118.62118.72T:isapk128av20
147.89147.96148.95T:isapk128v20
154.28154.31154.76romulusm
167.29167.30167.58T!!!romulust
242.60243.07244.03T:elephant200v2
248.17248.63249.97T:isapxv20
13607.2613612.0513617.46T:elephant176v2
15651.4215653.7915656.35T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
3.063.063.06aes256gcmv1
3.053.073.09T:aes128gcmv1
16.1616.1616.17ascon128av12
25.0025.0025.00ascon80pqv12
25.2525.2525.25ascon128v12
25.6525.6525.69T:xoodyakround3
34.1934.1934.20ascon128abi32v12
48.6348.7748.88T:isapa128v20
50.3650.3850.42ascon128bi32v12
52.3452.3552.37T:schwaemm256128v2
53.2553.2553.52T:tinyjambu128v2
55.0355.0655.11T:grain128aeadv2
57.8157.8157.82T:giftcofb128v1
60.7960.7960.81T:isapa128av20
64.4964.5064.60T:tinyjambu256v2
65.0065.0065.01T:schwaemm256256v2
67.9768.0068.01T:tinyjambu192v2
69.5069.5069.52T:schwaemm192192v2
71.8871.8871.88T:schwaemm128128v2
84.6584.6984.74romulusm
84.6884.6984.72romulusn
88.7888.7888.80T:romulusn
118.53118.60118.70T:isapk128av20
147.68147.82148.27T:isapk128v20
163.78163.79163.91T:elephant200v2
167.00167.11167.26T!!!romulust
248.14248.59249.22T:isapxv20
8996.709004.409010.35T:elephant176v2
10430.8010438.3110441.34T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
3.053.063.06T:aes128gcmv1
3.073.083.08aes256gcmv1
16.1616.1616.17ascon128av12
24.7524.7524.76ascon128v12
25.1225.1225.13ascon80pqv12
25.6525.6525.68T:xoodyakround3
34.1934.2034.22ascon128abi32v12
48.5948.7648.94T:isapa128v20
50.5050.5050.55ascon128bi32v12
52.3552.3652.98T:schwaemm256128v2
54.8355.0155.50T:grain128aeadv2
56.0056.0056.00T:tinyjambu128v2
57.8157.8257.87T:giftcofb128v1
60.7960.7960.80T:isapa128av20
65.0065.0065.00T:schwaemm256256v2
65.1865.2565.26T:tinyjambu256v2
66.9867.0067.03T:tinyjambu192v2
69.5069.8270.38T:schwaemm192192v2
71.8871.8871.88T:schwaemm128128v2
84.6684.6884.71romulusm
84.6884.7084.77romulusn
89.5089.5089.53T:romulusn
118.50118.57118.64T:isapk128av20
147.67147.80148.04T:isapk128v20
163.78163.79163.85T:elephant200v2
166.98167.04167.16T!!!romulust
247.58248.41249.27T:isapxv20
8996.569004.349009.22T:elephant176v2
10431.8410439.2210442.17T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
3.063.063.06T:aes128gcmv1
3.083.083.08aes256gcmv1
16.1616.1616.17ascon128av12
24.7524.7524.75ascon128v12
25.1225.1225.13ascon80pqv12
25.6425.6525.69T:xoodyakround3
34.1934.2034.22ascon128abi32v12
48.6848.7348.85T:isapa128v20
50.4550.4950.53ascon128bi32v12
52.3452.3552.41T:schwaemm256128v2
54.8254.9555.48T:grain128aeadv2
56.0056.0056.00T:tinyjambu128v2
57.8157.8157.81T:giftcofb128v1
60.7960.7960.80T:isapa128av20
65.0065.0065.00T:schwaemm256256v2
65.2565.2565.25T:tinyjambu256v2
66.9867.0067.00T:tinyjambu192v2
69.5069.5070.12T:schwaemm192192v2
71.8871.8871.88T:schwaemm128128v2
84.6784.7084.77romulusn
84.6884.7284.78romulusm
89.5089.5089.51T:romulusn
118.50118.57118.66T:isapk128av20
147.64147.79147.95T:isapk128v20
163.77163.78163.85T:elephant200v2
167.02167.03167.06T!!!romulust
247.58248.43248.87T:isapxv20
8997.169005.399010.12T:elephant176v2
10431.0310437.9510441.20T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
6.336.346.34T:aes128gcmv1
6.996.997.00aes256gcmv1
16.6416.6416.64ascon128av12
25.4325.4325.44ascon80pqv12
25.5425.5425.54ascon128v12
35.0535.0535.07ascon128abi32v12
38.1838.1938.23T:xoodyakround3
51.6751.6751.72ascon128bi32v12
54.1254.1254.14T:schwaemm256128v2
56.1556.1856.24T:grain128aeadv2
58.8658.8658.86T:giftcofb128v1
67.0367.0467.05T:schwaemm256256v2
71.3271.3371.57T:schwaemm192192v2
72.2072.2072.62T:tinyjambu128v2
72.9472.9472.94T:schwaemm128128v2
79.9379.9479.95T:isapa128av20
95.0795.0795.08T:tinyjambu192v2
97.9797.9798.06T:tinyjambu256v2
105.10105.11105.19T:romulusn
107.43107.57108.40T:isapa128v20
112.95112.96113.04romulusn
155.37155.38155.49romulusm
186.84186.96187.28T:isapk128av20
248.02248.49249.11T:elephant200v2
328.53328.57329.58T!!!romulust
363.53363.64365.41T:isapk128v20
561.86561.91564.95T:isapxv20
13713.0513716.5613720.32T:elephant176v2
15828.5015831.8915834.81T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
6.296.296.30T:aes128gcmv1
6.936.936.94aes256gcmv1
16.6416.6416.65ascon128av12
25.2325.2325.23ascon128v12
25.4925.4925.50ascon80pqv12
34.9634.9734.98ascon128abi32v12
37.2337.2337.27T:xoodyakround3
51.2451.2551.30ascon128bi32v12
54.1954.7454.75T:schwaemm256128v2
56.2156.2756.79T:grain128aeadv2
59.0759.0759.14T:giftcofb128v1
67.1767.1767.21T:schwaemm256256v2
71.4372.1272.12T:schwaemm192192v2
72.9472.9572.97T:schwaemm128128v2
73.6073.6073.62T:tinyjambu128v2
79.9279.9379.94T:isapa128av20
94.4594.4594.46T:tinyjambu192v2
97.6197.7397.76T:tinyjambu256v2
105.24105.24105.32T:romulusn
107.33107.54108.66T:isapa128v20
112.92112.94113.05romulusn
155.53155.55155.63romulusm
186.88186.97187.18T:isapk128av20
247.88248.07249.00T:elephant200v2
328.51328.56329.54T!!!romulust
363.60363.70365.43T:isapk128v20
561.87561.92564.73T:isapxv20
13712.6513715.7913718.93T:elephant176v2
15829.2415830.7515834.47T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
6.296.296.30T:aes128gcmv1
6.936.936.94aes256gcmv1
16.6416.6416.66ascon128av12
25.2325.2325.23ascon128v12
25.4925.4925.50ascon80pqv12
34.9634.9634.97ascon128abi32v12
37.2837.2837.32T:xoodyakround3
51.2451.2451.38ascon128bi32v12
54.1454.1954.73T:schwaemm256128v2
56.2256.3256.81T:grain128aeadv2
59.0759.0759.07T:giftcofb128v1
63.5763.5763.58T:isapa128av20
66.3366.3666.43T:isapa128v20
67.1767.1767.18T:schwaemm256256v2
71.3171.4372.12T:schwaemm192192v2
72.9472.9472.95T:schwaemm128128v2
73.6073.6073.61T:tinyjambu128v2
94.4594.4594.47T:tinyjambu192v2
97.7297.7397.73T:tinyjambu256v2
105.23105.23105.32T:romulusn
112.95112.97113.03romulusn
145.61145.66145.72T:isapk128av20
155.52155.53155.61romulusm
171.93171.94172.10T!!!romulust
241.94241.99242.09T:isapk128v20
247.87248.13249.47T:elephant200v2
357.76357.78358.80T:isapxv20
13713.5813717.1513721.69T:elephant176v2
15829.3815831.1915834.25T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
21.0921.3121.37T:aes128gcmv1
22.0622.0822.33aes256gcmv1
25.0125.0325.15ascon128av12
33.4133.4133.46ascon128v12
33.5133.5133.62ascon80pqv12
51.8151.8351.96ascon128abi32v12
57.7357.7357.75T:xoodyakround3
68.3968.4068.57ascon128bi32v12
71.9571.9672.19T:grain128aeadv2
73.9173.9173.91T:giftcofb128v1
85.5085.5085.55T:tinyjambu128v2
88.6988.6988.73T:schwaemm256128v2
93.6593.6593.65T:schwaemm128128v2
104.85104.86104.89T:schwaemm256256v2
111.04111.09111.13T:tinyjambu192v2
114.59114.59114.59T:tinyjambu256v2
115.45115.51115.60T:schwaemm192192v2
135.43135.46135.51T:romulusn
135.17135.53136.06romulusn
178.89179.15179.74romulusm
192.22192.51192.60T:isapa128av20
352.48352.75353.05T:elephant200v2
439.15439.67440.66T!!!romulust
889.15893.90901.35T:isapa128v20
1032.891033.981036.04T:isapk128av20
4258.274260.284263.49T:isapk128v20
5419.995420.105425.24T:isapxv20
17043.2117055.8617140.68T:elephant176v2
21160.8621204.0421264.05T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
21.3421.4621.68T:aes128gcmv1
22.9022.9123.03aes256gcmv1
25.0925.2425.57ascon128av12
33.1033.1033.19ascon128v12
33.6733.6733.74ascon80pqv12
51.8251.8451.98ascon128abi32v12
56.5356.5356.56T:xoodyakround3
69.3869.4769.71ascon128bi32v12
72.3272.4273.11T:grain128aeadv2
74.9874.9874.98T:giftcofb128v1
87.2587.2587.39T:tinyjambu128v2
88.8788.8788.89T:schwaemm256128v2
93.8293.8293.82T:schwaemm128128v2
104.91104.93104.98T:schwaemm256256v2
110.58110.59110.63T:tinyjambu192v2
114.59114.59114.59T:tinyjambu256v2
115.67115.70115.80T:schwaemm192192v2
135.23135.23135.30T:romulusn
135.25135.54136.07romulusn
183.50183.77184.20romulusm
192.05192.08192.13T:isapa128av20
354.23354.42354.55T:elephant200v2
439.16439.69440.47T!!!romulust
891.34894.19904.68T:isapa128v20
1033.351034.651036.11T:isapk128av20
4260.084263.134265.50T:isapk128v20
5419.995420.235433.60T:isapxv20
17043.6917054.4317152.89T:elephant176v2
21160.4421196.3221258.64T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
21.2821.3321.68T:aes128gcmv1
22.9122.9122.93aes256gcmv1
25.0825.0925.10ascon128av12
33.1033.1033.11ascon128v12
33.6733.6733.67ascon80pqv12
51.8251.8451.86ascon128abi32v12
56.8856.8856.95T:xoodyakround3
69.3869.4869.82ascon128bi32v12
72.3272.3772.96T:grain128aeadv2
74.9874.9975.00T:giftcofb128v1
87.2587.2687.38T:tinyjambu128v2
88.8788.8788.87T:schwaemm256128v2
93.8293.8293.82T:schwaemm128128v2
104.91104.93105.00T:schwaemm256256v2
110.57110.59110.59T:tinyjambu192v2
114.55114.55114.55T:tinyjambu256v2
115.68115.69115.75T:schwaemm192192v2
127.36127.36127.50T:isapa128av20
135.03135.03135.07T:romulusn
135.27135.54135.99romulusn
183.25183.37183.50romulusm
278.76278.86279.24T!!!romulust
352.61353.28354.39T:elephant200v2
462.29462.78464.31T:isapa128v20
741.39742.09743.40T:isapk128av20
2374.332375.122376.74T:isapk128v20
2827.632830.612842.66T:isapxv20
17043.2317051.5217138.85T:elephant176v2
21160.5721190.8021247.90T:elephant160v2