VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; cubi10, supercop-20250307

[Page version: 20250328 20:58:22]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.630.660.69T:aes128gcmv1
0.880.900.92T:aes256gcmv1
1.651.651.66aes256gcmv1
7.747.807.83ascon128av12
10.8510.8810.92ascon80pqv12
10.9710.9811.03ascon128v12
14.2614.3114.37ascon128abi32v12
16.7416.8016.82T:xoodyakround3
19.1119.1819.26T:schwaemm256128v2
21.2921.3221.36T:schwaemm256256v2
21.3421.3721.42ascon128bi32v12
25.0725.1525.18T:grain128aeadv2
25.1425.2725.34T:schwaemm192192v2
27.5327.5627.62T:schwaemm128128v2
38.5738.5938.62romulusn
41.1441.1741.22T:giftcofb128v1
41.3041.3541.39T:isapa128av20
45.4345.5845.69T:isapa128v20
60.1960.2460.28T:tinyjambu128v2
61.9361.9661.98romulusm
68.4368.6368.73T:isapk128av20
72.3372.4072.44T:tinyjambu192v2
78.7178.9379.04T:tinyjambu256v2
91.4191.5591.68T:isapk128v20
124.62124.69124.80romulust
142.43142.56142.70T:elephant200v2
166.96?178.65?189.96?T:isapxv20
7511.057513.287515.34T:elephant176v2
8184.658188.448189.64T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.61?0.66?0.69?T:aes128gcmv1
0.840.890.92T:aes256gcmv1
1.571.591.60aes256gcmv1
7.427.447.50ascon128av12
10.8610.9010.94ascon80pqv12
10.9110.9610.99ascon128v12
14.1114.1614.20ascon128abi32v12
16.2916.3116.36T:xoodyakround3
19.1219.1719.25T:schwaemm256128v2
21.2821.3121.35T:schwaemm256256v2
21.3921.4421.48ascon128bi32v12
25.1725.2525.35T:schwaemm192192v2
25.6625.6625.70T:grain128aeadv2
27.5027.5527.57T:schwaemm128128v2
38.4638.5038.52romulusn
41.2041.2441.29T:giftcofb128v1
41.2541.3341.39T:isapa128av20
45.4845.6545.77T:isapa128v20
60.2260.2960.39T:tinyjambu128v2
61.8961.9561.98romulusm
68.4868.6068.80T:isapk128av20
72.4472.4872.55T:tinyjambu192v2
78.6178.6678.78T:tinyjambu256v2
91.4891.5591.62T:isapk128v20
124.61124.69124.76romulust
142.30142.42142.50T:elephant200v2
166.95?178.60?189.81?T:isapxv20
7512.497515.127517.52T:elephant176v2
8183.618185.778188.90T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.610.640.67T:aes128gcmv1
0.830.860.91T:aes256gcmv1
1.591.591.59aes256gcmv1
7.417.447.46ascon128av12
10.8510.8810.93ascon80pqv12
10.9110.9610.98ascon128v12
14.1214.1614.20ascon128abi32v12
16.3316.3516.39T:xoodyakround3
19.1219.2319.28T:schwaemm256128v2
21.2821.3321.37T:schwaemm256256v2
21.4221.4521.48ascon128bi32v12
22.6022.6722.76T:isapa128v20
25.1725.2725.33T:schwaemm192192v2
25.6725.7025.73T:grain128aeadv2
27.0827.1527.24T:isapa128av20
27.5027.5527.57T:schwaemm128128v2
38.4638.4938.51romulusn
41.2241.2441.28T:giftcofb128v1
42.4842.5542.64romulust
45.8046.0346.17T:isapk128av20
57.4057.4657.52T:isapk128v20
60.2360.3360.40T:tinyjambu128v2
61.9261.9661.99romulusm
72.4672.5072.57T:tinyjambu192v2
78.6178.6478.71T:tinyjambu256v2
106.85106.99107.53T:isapxv20
142.38142.47142.58T:elephant200v2
7512.457514.447516.53T:elephant176v2
8185.558189.428190.60T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.490.520.54T:aes128gcmv1
0.600.610.64T:aes256gcmv1
1.021.031.04aes256gcmv1
7.487.527.54ascon128av12
10.9210.9310.96ascon80pqv12
10.9710.9911.02ascon128v12
12.7112.7212.76T:xoodyakround3
14.3114.3414.38ascon128abi32v12
18.9719.0319.07T:schwaemm256128v2
21.2221.2521.29T:schwaemm256256v2
21.3321.3621.39ascon128bi32v12
25.0825.1825.23T:schwaemm192192v2
25.0925.2125.22T:grain128aeadv2
28.1128.1628.25T:schwaemm128128v2
31.0231.0531.07romulusn
34.1734.2334.29T:isapa128v20
34.2034.2434.28T:isapa128av20
41.3841.4041.43T:giftcofb128v1
42.7142.7442.76romulusm
49.3249.3649.41T:tinyjambu128v2
56.7156.7456.79T:tinyjambu192v2
57.5657.6257.69T:isapk128av20
59.6059.7359.88T:tinyjambu256v2
74.2974.3474.48T:isapk128v20
83.4483.4983.61romulust
107.43107.50107.63T:elephant200v2
136.89142.71148.45T:isapxv20
5608.345611.845612.93T:elephant176v2
6139.756142.236142.73T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.480.500.52T:aes128gcmv1
0.57?0.62?0.64?T:aes256gcmv1
0.991.001.01aes256gcmv1
7.297.317.38ascon128av12
10.7210.7610.91ascon128v12
10.9010.9410.97ascon80pqv12
12.5112.5212.53T:xoodyakround3
14.2914.3314.36ascon128abi32v12
19.0019.0519.11T:schwaemm256128v2
21.2321.2421.27T:schwaemm256256v2
21.4221.4421.46ascon128bi32v12
25.0425.0925.14T:schwaemm192192v2
25.3825.4025.41T:grain128aeadv2
28.1428.1728.20T:schwaemm128128v2
30.9931.0031.03romulusn
34.2234.2834.32T:isapa128av20
34.2134.2934.36T:isapa128v20
41.4241.4541.47T:giftcofb128v1
42.7242.7542.77romulusm
49.3349.3749.42T:tinyjambu128v2
56.7756.8056.84T:tinyjambu192v2
57.4157.5657.61T:isapk128av20
59.6259.6459.66T:tinyjambu256v2
74.2674.3174.37T:isapk128v20
83.4483.5483.64romulust
107.46107.54107.59T:elephant200v2
136.94142.72148.39T:isapxv20
5607.545610.005612.04T:elephant176v2
6139.206141.426142.36T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.480.490.51T:aes128gcmv1
0.57?0.59?0.64?T:aes256gcmv1
1.001.001.01aes256gcmv1
7.307.327.39ascon128av12
10.7310.7510.81ascon128v12
10.9210.9410.96ascon80pqv12
12.5312.5412.56T:xoodyakround3
14.2914.3114.34ascon128abi32v12
18.9119.0319.07T:schwaemm256128v2
21.2321.2421.27T:schwaemm256256v2
21.4321.4421.47ascon128bi32v12
22.7622.8022.86T:isapa128v20
25.0125.0825.15T:schwaemm192192v2
25.3925.4025.43T:grain128aeadv2
27.1227.1527.21T:isapa128av20
28.1328.1728.20T:schwaemm128128v2
30.9831.0031.02romulusn
41.4441.4541.48T:giftcofb128v1
42.3842.4342.50romulust
42.7342.7542.77romulusm
46.1546.2646.34T:isapk128av20
49.3749.3949.44T:tinyjambu128v2
56.7656.8156.83T:tinyjambu192v2
57.2057.2757.39T:isapk128v20
59.6059.6259.64T:tinyjambu256v2
106.15106.92107.01T:isapxv20
107.51107.56107.61T:elephant200v2
5607.925610.125611.25T:elephant176v2
6139.646140.976142.62T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.300.320.33T:aes256gcmv1
0.310.320.33T:aes128gcmv1
0.410.420.43aes256gcmv1
7.237.277.29ascon128av12
8.778.798.82T:xoodyakround3
10.9610.9811.00ascon80pqv12
10.9811.0111.02ascon128v12
14.1614.2814.32ascon128abi32v12
18.8318.8818.99T:schwaemm256128v2
21.0921.1221.16T:schwaemm256256v2
21.2921.3121.35ascon128bi32v12
22.7822.8722.95T:isapa128v20
23.4723.4823.53romulusn
23.5123.5523.58romulusm
24.8925.0025.08T:schwaemm192192v2
25.1125.2025.22T:grain128aeadv2
27.1227.1627.23T:isapa128av20
28.7028.7428.81T:schwaemm128128v2
38.4138.4438.48T:tinyjambu128v2
40.6240.6740.78T:tinyjambu256v2
41.0841.1441.20T:tinyjambu192v2
41.6041.6341.67T:giftcofb128v1
42.3042.3642.44romulust
46.3546.5646.73T:isapk128av20
57.0357.2157.35T:isapk128v20
72.1872.2772.33T:elephant200v2
106.88106.96107.02T:isapxv20
3707.503708.633709.19T:elephant176v2
4091.394093.434094.61T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.310.320.33T:aes256gcmv1
0.300.320.33T:aes128gcmv1
0.410.420.42aes256gcmv1
7.317.337.36ascon128av12
8.788.808.84T:xoodyakround3
10.5210.5410.56ascon128v12
10.9310.9610.98ascon80pqv12
14.2614.4414.47ascon128abi32v12
18.8318.9018.95T:schwaemm256128v2
21.0821.1121.15T:schwaemm256256v2
21.4021.4421.47ascon128bi32v12
22.8122.9222.98T:isapa128v20
23.4723.4923.54romulusn
23.5123.5423.59romulusm
24.8624.9925.03T:schwaemm192192v2
25.0725.0825.10T:grain128aeadv2
27.0727.1427.18T:isapa128av20
28.6828.7328.79T:schwaemm128128v2
38.4438.4938.52T:tinyjambu128v2
40.6540.7040.74T:tinyjambu256v2
41.0641.1441.20T:tinyjambu192v2
41.5841.6341.70T:giftcofb128v1
42.3342.3842.48romulust
46.1946.5346.66T:isapk128av20
57.1057.1557.27T:isapk128v20
72.1872.2672.30T:elephant200v2
106.88106.99107.11T:isapxv20
3706.953707.813708.81T:elephant176v2
4091.414093.564094.65T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.300.320.33T:aes128gcmv1
0.31?0.33?0.40?T:aes256gcmv1
0.420.420.42aes256gcmv1
7.307.347.35ascon128av12
8.798.838.86T:xoodyakround3
10.5210.5610.69ascon128v12
10.9310.9410.99ascon80pqv12
14.2814.4414.47ascon128abi32v12
18.8918.9619.02T:schwaemm256128v2
21.0921.1421.17T:schwaemm256256v2
21.4121.4421.48ascon128bi32v12
22.8022.8722.96T:isapa128v20
23.4923.5123.55romulusn
23.5223.5523.58romulusm
24.8724.9725.06T:schwaemm192192v2
25.0625.0925.12T:grain128aeadv2
27.1027.1527.21T:isapa128av20
28.7228.7728.84T:schwaemm128128v2
38.4538.4838.53T:tinyjambu128v2
40.6540.6840.75T:tinyjambu256v2
41.0741.1541.20T:tinyjambu192v2
41.5941.6341.68T:giftcofb128v1
42.2842.4042.47romulust
46.3946.5446.69T:isapk128av20
57.0857.1757.24T:isapk128v20
72.2272.2772.34T:elephant200v2
106.85106.96107.08T:isapxv20
3706.833707.543709.36T:elephant176v2
4091.044093.244094.15T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.991.001.02T:aes128gcmv1
1.131.131.13T:aes256gcmv1
1.211.221.22aes256gcmv1
7.687.707.72ascon128av12
11.1111.1311.13ascon80pqv12
11.1711.1811.21ascon128v12
12.8812.8912.91T:xoodyakround3
14.6014.6614.70ascon128abi32v12
19.5119.5919.63T:schwaemm256128v2
21.6821.6921.72ascon128bi32v12
21.7521.8421.87T:schwaemm256256v2
25.5025.6025.62T:grain128aeadv2
25.6425.6625.71T:schwaemm192192v2
28.5128.5428.55T:schwaemm128128v2
31.3631.3731.39romulusn
37.7837.8037.85T:isapa128av20
41.8041.8241.83T:giftcofb128v1
43.0743.0943.12romulusm
49.7349.7649.79T:tinyjambu128v2
49.9550.0250.07T:isapa128v20
57.1757.2157.23T:tinyjambu192v2
60.0060.1360.24T:tinyjambu256v2
64.3264.3664.44T:isapk128av20
84.8184.8484.90romulust
109.71109.83109.90T:elephant200v2
128.50128.52128.61T:isapk128v20
234.81234.85241.97T:isapxv20
5650.545653.065655.06T:elephant176v2
6210.496210.766211.47T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.980.991.00T:aes128gcmv1
1.101.111.11T:aes256gcmv1
1.181.181.19aes256gcmv1
7.507.527.56ascon128av12
10.9010.9210.95ascon128v12
11.1011.1111.12ascon80pqv12
12.6612.6712.68T:xoodyakround3
14.5914.6514.69ascon128abi32v12
19.4819.6419.68T:schwaemm256128v2
21.7721.7821.79ascon128bi32v12
21.8021.8421.88T:schwaemm256256v2
25.6625.7025.74T:schwaemm192192v2
25.8025.8125.83T:grain128aeadv2
28.5228.5528.56T:schwaemm128128v2
31.3231.3331.34romulusn
37.7837.8337.84T:isapa128av20
41.8841.9141.92T:giftcofb128v1
43.1643.1743.20romulusm
49.7949.8049.82T:tinyjambu128v2
49.9950.0050.07T:isapa128v20
57.2257.2757.31T:tinyjambu192v2
60.0760.0960.11T:tinyjambu256v2
64.3464.3864.42T:isapk128av20
84.8284.8584.94romulust
109.84109.89109.94T:elephant200v2
128.50128.54128.58T:isapk128v20
233.63234.93242.00T:isapxv20
5651.725653.465654.55T:elephant176v2
6207.086207.566211.26T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.970.991.01T:aes128gcmv1
1.101.111.11T:aes256gcmv1
1.181.191.19aes256gcmv1
7.497.517.54ascon128av12
10.9010.9010.95ascon128v12
11.1011.1111.13ascon80pqv12
12.6712.6912.72T:xoodyakround3
14.5514.6414.67ascon128abi32v12
19.4719.6519.67T:schwaemm256128v2
21.7721.7821.79ascon128bi32v12
21.7521.8321.85T:schwaemm256256v2
25.6425.6925.72T:schwaemm192192v2
25.8025.8125.82T:grain128aeadv2
28.5028.5328.57T:schwaemm128128v2
29.0829.1029.15T:isapa128av20
30.8130.8330.87T:isapa128v20
31.3331.3431.36romulusn
41.8541.8741.90T:giftcofb128v1
43.1743.1943.20romulusm
43.6543.7043.78romulust
49.7349.7749.83T:tinyjambu128v2
50.1950.2250.28T:isapk128av20
57.2557.2857.30T:tinyjambu192v2
60.0860.0860.09T:tinyjambu256v2
85.0485.0785.10T:isapk128v20
109.83109.86109.93T:elephant200v2
154.06154.09154.15T:isapxv20
5649.385653.965656.49T:elephant176v2
6207.876210.786211.43T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
7.447.477.49aes256gcmv1
12.1112.2312.62ascon128av12
12.4512.5912.67T:aes128gcmv1
12.8213.1213.45T:aes256gcmv1
15.0615.2315.79ascon80pqv12
14.9715.3515.68ascon128v12
18.6018.9019.05T:xoodyakround3
21.8822.0922.59ascon128abi32v12
29.0229.1729.38ascon128bi32v12
32.0332.1332.52T:schwaemm256128v2
34.7434.8735.05T:schwaemm256256v2
34.9735.0235.23T:grain128aeadv2
36.0436.2436.33T:schwaemm128128v2
38.5238.6838.80romulusn
41.6342.0242.32T:schwaemm192192v2
50.7850.9551.12romulusm
51.2251.4351.70T:giftcofb128v1
58.7358.9059.00T:tinyjambu128v2
67.3867.4867.63T:tinyjambu192v2
70.4170.5270.66T:tinyjambu256v2
115.12115.31115.68romulust
118.61118.72118.94T:isapa128av20
156.99157.31157.99T:elephant200v2
206.12206.87208.64T:isapk128av20
411.49412.73413.44T:isapa128v20
1358.541358.981359.42T:isapk128v20
2325.952326.242500.00T:isapxv20
7036.707038.567040.39T:elephant176v2
8315.108316.638318.38T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
7.127.147.20aes256gcmv1
12.1112.2112.68ascon128av12
12.2212.3112.48T:aes128gcmv1
12.7612.8813.16T:aes256gcmv1
14.9315.1715.67ascon128v12
15.2115.5415.91ascon80pqv12
18.4118.9619.27T:xoodyakround3
22.1022.1722.37ascon128abi32v12
29.2629.3729.46ascon128bi32v12
31.6232.1232.52T:schwaemm256128v2
34.7934.8835.07T:schwaemm256256v2
35.22?35.30?40.10?T:grain128aeadv2
36.0636.3036.60T:schwaemm128128v2
38.7738.9038.94romulusn
42.4542.7143.07T:schwaemm192192v2
51.6251.7352.01T:giftcofb128v1
52.7352.8853.24romulusm
58.6658.8458.99T:tinyjambu128v2
67.3467.5267.92T:tinyjambu192v2
70.5470.6670.82T:tinyjambu256v2
115.01115.16115.24romulust
118.68119.12119.62T:isapa128av20
157.32157.62157.95T:elephant200v2
206.53207.41210.54T:isapk128av20
412.58412.90413.90T:isapa128v20
1358.611359.221359.98T:isapk128v20
2327.592329.062500.14T:isapxv20
7037.557039.247040.79T:elephant176v2
8314.928316.348319.38T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
7.117.147.16aes256gcmv1
11.9612.1112.14ascon128av12
12.2412.3412.39T:aes128gcmv1
12.8412.8813.05T:aes256gcmv1
14.8515.0215.18ascon128v12
15.0315.1215.24ascon80pqv12
18.4418.7118.81T:xoodyakround3
22.0422.2322.38ascon128abi32v12
29.2529.2829.39ascon128bi32v12
31.7731.8532.27T:schwaemm256128v2
34.7034.7734.90T:schwaemm256256v2
35.1735.2035.33T:grain128aeadv2
36.2036.2336.43T:schwaemm128128v2
38.7238.7738.93romulusn
42.2842.6442.97T:schwaemm192192v2
51.5951.8152.08T:giftcofb128v1
52.7452.8452.90romulusm
58.6658.7858.98T:tinyjambu128v2
67.2067.3467.70T:tinyjambu192v2
70.4070.5170.66T:tinyjambu256v2
71.9972.2072.62romulust
73.4673.7373.96T:isapa128av20
130.12130.77133.72T:isapk128av20
157.00157.33157.52T:elephant200v2
214.64215.03215.50T:isapa128v20
711.24712.27713.48T:isapk128v20
1217.391218.161218.80T:isapxv20
7037.727040.867042.05T:elephant176v2
8316.548317.948319.12T:elephant160v2