VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Bonnell (106ca); 2010 Intel Atom N455; 1 x 1000MHz; h2atom, supercop-20250415

[Page version: 20250828 09:44:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
14.0414.0714.07ascon128av12
20.9821.0021.01ascon128v12
21.2421.2521.26ascon80pqv12
35.4035.4535.45ascon128abi32v12
48.9949.0049.04ascon128bi32v12
55.5355.5955.73T:xoodyakround3
55.8355.8956.63T:giftcofb128v1
62.7662.8162.86T:schwaemm256128v2
79.0979.2479.42T:isapa128v20
82.8182.8483.03T:schwaemm192192v2
86.6986.7186.90T:schwaemm128128v2
88.8888.8988.94T:isapa128av20
89.8089.8189.88T:schwaemm256256v2
100.21101.25102.37T:aes256gcmv1
152.49152.51152.80T:tinyjambu128v2
156.02156.06156.12romulusn
134.10?156.21?158.14?T:grain128aeadv2
180.94181.04181.27T:isapk128av20
195.50195.78196.16T:tinyjambu192v2
216.74216.76216.82T:tinyjambu256v2
238.35240.52242.81T:isapk128v20
257.88258.06259.79romulusm
413.57413.74414.32T:elephant200v2
567.38568.20569.48T!!!romulust
540.87574.12599.71T:isapxv20
1482.811483.511485.49T:aes128gcmv1
40105.6040152.3740226.56T:elephant160v2
43025.1843065.4443143.94T:elephant176v2
50728.8050791.8150919.48aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
13.9213.9413.97ascon128av12
20.8720.8820.88ascon128v12
20.9821.0021.05ascon80pqv12
35.1235.1335.90ascon128abi32v12
47.7447.7547.77ascon128bi32v12
51.9952.0152.37T:xoodyakround3
55.6055.6355.72T:giftcofb128v1
63.0163.0663.07T:schwaemm256128v2
78.5779.2679.93T:isapa128v20
83.0883.0983.15T:schwaemm192192v2
86.6286.9386.98T:schwaemm128128v2
88.8288.9190.01T:isapa128av20
90.4590.4791.56T:schwaemm256256v2
100.86102.00103.60T:aes256gcmv1
152.76152.76152.82T:tinyjambu128v2
155.97156.00156.05romulusn
136.04?158.34?160.12?T:grain128aeadv2
177.46180.94182.20T:isapk128av20
195.25195.27195.89T:tinyjambu192v2
217.01217.01217.07T:tinyjambu256v2
239.67240.60244.53T:isapk128v20
258.00258.17259.57romulusm
413.68413.90414.65T:elephant200v2
567.58568.37569.06T!!!romulust
556.66582.09615.92T:isapxv20
1484.001484.451485.15T:aes128gcmv1
40117.2940209.9740394.60T:elephant160v2
43060.5743086.1943166.17T:elephant176v2
50737.6750806.2750970.23aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
13.9413.9413.95ascon128av12
20.8820.8820.91ascon128v12
21.0021.0021.00ascon80pqv12
35.1235.1335.13ascon128abi32v12
39.2839.3839.47T:isapa128v20
47.7547.7547.76ascon128bi32v12
52.1152.1352.23T:xoodyakround3
55.6255.6355.66T:giftcofb128v1
58.1058.1258.15T:isapa128av20
63.0263.0663.08T:schwaemm256128v2
83.0883.0983.13T:schwaemm192192v2
86.9286.9487.03T:schwaemm128128v2
90.4590.4890.51T:schwaemm256256v2
101.25101.85102.74T:aes256gcmv1
118.46118.49118.53T:isapk128av20
147.67148.18151.42T:isapk128v20
152.72152.76152.80T:tinyjambu128v2
156.00156.00156.72romulusn
135.59?158.34?159.31?T:grain128aeadv2
195.25195.28195.96T:tinyjambu192v2
196.58196.71196.82T!!!romulust
216.97217.01217.07T:tinyjambu256v2
258.06258.44261.09romulusm
318.95331.14343.11T:isapxv20
413.59413.82414.52T:elephant200v2
1427.041427.311427.89T:aes128gcmv1
1456.681459.181460.23aes256gcmv1
40113.6340180.0440407.01T:elephant160v2
43021.4143079.0443123.45T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
13.7313.7613.80ascon128av12
20.6720.6920.72ascon128v12
21.1121.1521.17ascon80pqv12
33.8033.8635.27ascon128abi32v12
41.8841.8941.95T:xoodyakround3
46.4748.4650.03ascon128bi32v12
55.6755.6956.21T:giftcofb128v1
56.7257.2057.95T:aes256gcmv1
59.2359.3860.46T:isapa128v20
62.4462.4862.53T:schwaemm256128v2
73.4873.5173.77T:isapa128av20
82.6482.6582.67T:schwaemm192192v2
86.4286.4586.65T:schwaemm128128v2
88.7288.7588.94T:schwaemm256256v2
122.01125.00125.24T:tinyjambu128v2
128.82128.89129.49romulusn
149.09149.21151.35T:isapk128av20
152.47152.51152.78T:tinyjambu192v2
133.84?156.12?157.71?T:grain128aeadv2
164.12164.16164.37T:tinyjambu256v2
179.73179.89180.67romulusm
191.53193.12194.86T:isapk128v20
306.61306.78307.27T:elephant200v2
381.85382.77383.77T!!!romulust
427.02443.76456.18T:isapxv20
1455.151456.081457.71T:aes128gcmv1
26101.4626166.1826198.13aes256gcmv1
30087.7630131.4630158.20T:elephant160v2
32123.2832198.2932229.01T:elephant176v2
Cycles/byte for long+long decrypt
25%50%75%aead
13.6613.6913.74ascon128av12
20.4920.5020.56ascon80pqv12
20.5420.5620.61ascon128v12
33.4433.4833.55ascon128abi32v12
40.0840.1040.24T:xoodyakround3
45.2847.6747.75ascon128bi32v12
55.5655.5755.65T:giftcofb128v1
56.7257.6358.48T:aes256gcmv1
59.3159.3959.73T:isapa128v20
62.5862.6162.64T:schwaemm256128v2
73.4773.5073.54T:isapa128av20
82.7582.7782.83T:schwaemm192192v2
86.5586.5886.96T:schwaemm128128v2
89.0289.0789.19T:schwaemm256256v2
122.03125.12125.38T:tinyjambu128v2
128.77128.84129.17romulusn
148.47149.21150.07T:isapk128av20
147.42152.57154.63T:tinyjambu192v2
134.81?157.07?158.66?T:grain128aeadv2
164.22164.26164.53T:tinyjambu256v2
179.75179.97181.82romulusm
192.63193.81195.22T:isapk128v20
306.94307.07307.43T:elephant200v2
381.94382.38383.72T!!!romulust
442.42456.12473.85T:isapxv20
1455.361456.041456.48T:aes128gcmv1
26097.5626158.1826203.61aes256gcmv1
30085.2430124.0630145.62T:elephant160v2
32150.4132179.8632230.30T:elephant176v2
Cycles/byte for long+long forgery
25%50%75%aead
13.6913.6913.71ascon128av12
20.5020.5020.51ascon80pqv12
20.5620.5620.58ascon128v12
33.4733.4833.49ascon128abi32v12
39.3939.4539.49T:isapa128v20
40.1540.1640.21T:xoodyakround3
45.2847.6948.40ascon128bi32v12
55.5755.5755.60T:giftcofb128v1
46.86?56.94?57.99?T:aes256gcmv1
58.0858.1258.16T:isapa128av20
62.6062.6262.72T:schwaemm256128v2
82.7782.7883.14T:schwaemm192192v2
86.5586.5686.58T:schwaemm128128v2
89.0489.0889.18T:schwaemm256256v2
117.86117.93119.54T:isapk128av20
121.06125.13125.21T:tinyjambu128v2
128.59128.81129.26romulusn
146.48147.00149.04T:isapk128v20
152.21152.55154.33T:tinyjambu192v2
135.24?157.07?158.87?T:grain128aeadv2
164.24164.28164.63T:tinyjambu256v2
179.84179.94180.65romulusm
196.32196.40197.04T!!!romulust
306.47307.01307.32T:elephant200v2
324.46332.00337.35T:isapxv20
1427.301427.781431.63T:aes128gcmv1
1458.111459.871464.10aes256gcmv1
30089.5030146.3730160.71T:elephant160v2
32128.3132214.3232256.01T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
12.04?13.33?14.55?T:aes256gcmv1
13.4113.4413.45ascon128av12
20.3720.3820.38ascon128v12
20.9921.0021.00ascon80pqv12
28.1628.2028.27T:xoodyakround3
32.1632.2032.20ascon128abi32v12
39.4439.5039.55T:isapa128v20
47.8747.8948.66ascon128bi32v12
55.4855.5858.01T:giftcofb128v1
58.1058.1358.19T:isapa128av20
62.1662.1762.18T:schwaemm256128v2
82.4082.4782.55T:schwaemm192192v2
86.1986.2086.76T:schwaemm128128v2
87.6487.6987.89T:schwaemm256256v2
97.4997.5197.90T:tinyjambu128v2
101.58101.64101.67romulusn
101.57101.67101.71romulusm
109.49109.55109.95T:tinyjambu192v2
111.49111.52111.55T:tinyjambu256v2
117.17117.33119.69T:isapk128av20
145.15145.50147.52T:isapk128v20
133.37?156.04?157.82?T:grain128aeadv2
195.94196.04197.70T!!!romulust
202.21202.33202.53T:elephant200v2
303.57313.11325.73T:isapxv20
1426.10?1428.25?2011.34?T:aes128gcmv1
1458.181459.381465.76aes256gcmv1
20035.9620056.4920071.54T:elephant160v2
21267.6721275.0121373.63T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
13.3913.4413.47ascon128av12
12.28?13.61?22.41?T:aes256gcmv1
19.0919.9920.02ascon80pqv12
20.2420.2520.25ascon128v12
27.9328.2028.23T:xoodyakround3
31.7731.8231.83ascon128abi32v12
39.4539.5039.55T:isapa128v20
47.6247.6247.66ascon128bi32v12
55.4855.5255.61T:giftcofb128v1
58.1158.1358.18T:isapa128av20
62.1762.1762.19T:schwaemm256128v2
82.4582.4782.56T:schwaemm192192v2
86.1986.2086.38T:schwaemm128128v2
87.6087.7588.10T:schwaemm256256v2
97.5097.5097.54T:tinyjambu128v2
101.60101.64101.82romulusm
101.59101.69103.24romulusn
109.50109.50109.52T:tinyjambu192v2
111.41111.52111.65T:tinyjambu256v2
117.19117.28117.36T:isapk128av20
145.23145.34147.45T:isapk128v20
134.15?155.80?157.94?T:grain128aeadv2
195.92196.03196.18T!!!romulust
202.23202.30202.49T:elephant200v2
316.79329.90344.11T:isapxv20
1426.88?1428.10?2011.27?T:aes128gcmv1
1457.681459.671462.31aes256gcmv1
20034.2620056.8920089.65T:elephant160v2
21234.4121288.2821309.01T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
13.4413.4413.45ascon128av12
12.67?13.96?24.16?T:aes256gcmv1
19.9820.0120.20ascon80pqv12
20.2520.2520.25ascon128v12
28.1928.2028.32T:xoodyakround3
31.8131.8231.83ascon128abi32v12
39.4339.5240.22T:isapa128v20
47.6247.6247.65ascon128bi32v12
55.5055.5155.55T:giftcofb128v1
58.1258.1358.16T:isapa128av20
62.1762.1762.19T:schwaemm256128v2
82.4582.4782.49T:schwaemm192192v2
86.1986.1986.39T:schwaemm128128v2
87.6187.6687.89T:schwaemm256256v2
97.4897.5097.53T:tinyjambu128v2
101.62101.63101.65romulusn
101.62101.64101.68romulusm
109.50109.53110.06T:tinyjambu192v2
111.50111.50111.56T:tinyjambu256v2
117.17117.26117.33T:isapk128av20
143.10145.24145.63T:isapk128v20
132.99?155.79?157.67?T:grain128aeadv2
195.97196.03196.11T!!!romulust
202.22202.29202.48T:elephant200v2
316.73329.57343.79T:isapxv20
1434.51?1449.16?2014.40?T:aes128gcmv1
1457.341458.981461.20aes256gcmv1
20038.1120053.3520080.71T:elephant160v2
21268.7021286.2221297.16T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
14.0914.0914.13ascon128av12
21.0121.0121.05ascon128v12
21.4621.4621.51ascon80pqv12
34.5834.5834.63ascon128abi32v12
42.3642.3742.40T:xoodyakround3
49.2449.2449.27ascon128bi32v12
56.4356.4456.86T:giftcofb128v1
64.3064.5264.93T:schwaemm256128v2
70.0470.1571.14T:aes256gcmv1
78.6978.7378.93T:isapa128av20
84.4784.4884.54T:schwaemm192192v2
87.5587.5587.59T:schwaemm128128v2
88.1788.1788.30T:isapa128v20
90.9590.9891.06T:schwaemm256256v2
125.99126.04126.28T:tinyjambu128v2
130.05130.05130.70romulusn
153.67153.72154.06T:tinyjambu192v2
135.93?157.09?157.27?T:grain128aeadv2
165.35165.37165.65T:tinyjambu256v2
181.07181.08181.84romulusm
190.30190.34192.10T:isapk128av20
313.14313.36313.95T:elephant200v2
364.48364.74366.55T:isapk128v20
387.58388.01388.65T!!!romulust
707.79726.93727.49T:isapxv20
1463.131463.441463.89T:aes128gcmv1
26625.1126650.6126739.19aes256gcmv1
30414.5130435.9830488.47T:elephant160v2
32398.1132414.3832483.77T:elephant176v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
14.0414.0414.10ascon128av12
20.8420.8420.92ascon80pqv12
20.8920.8920.94ascon128v12
34.2634.2634.36ascon128abi32v12
40.5640.5640.62T:xoodyakround3
48.4948.4948.58ascon128bi32v12
56.3556.3556.44T:giftcofb128v1
64.4264.4364.46T:schwaemm256128v2
75.6175.6676.69T:aes256gcmv1
78.6978.6978.74T:isapa128av20
84.6184.6284.68T:schwaemm192192v2
87.6887.6987.71T:schwaemm128128v2
87.5688.1090.79T:isapa128v20
91.2791.3991.46T:schwaemm256256v2
126.13126.14126.28T:tinyjambu128v2
130.03130.06130.44romulusn
153.55153.57153.87T:tinyjambu192v2
137.00?158.05?158.16?T:grain128aeadv2
165.49165.51165.63T:tinyjambu256v2
181.43181.45182.54romulusm
190.38190.44192.53T:isapk128av20
313.11313.18313.75T:elephant200v2
364.52364.89366.94T:isapk128v20
387.64388.19388.97T!!!romulust
724.86727.88745.05T:isapxv20
1463.661464.171464.74T:aes128gcmv1
26620.4126665.1426740.84aes256gcmv1
30421.7230447.1630488.38T:elephant160v2
32384.6232423.6432458.38T:elephant176v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
14.0414.0414.05ascon128av12
20.8420.8420.85ascon80pqv12
20.8920.8920.91ascon128v12
34.2634.2634.28ascon128abi32v12
40.6540.6640.69T:xoodyakround3
48.4948.4949.31ascon128bi32v12
53.5653.5653.62T:isapa128v20
56.3556.3656.61T:giftcofb128v1
61.0461.0461.19T:isapa128av20
64.4264.4464.68T:schwaemm256128v2
84.6184.6284.72T:schwaemm192192v2
87.6787.6987.81T:schwaemm128128v2
91.2791.3091.92T:schwaemm256256v2
96.0796.2596.80T:aes256gcmv1
126.13126.13126.15T:tinyjambu128v2
130.04130.04130.49romulusn
146.57146.59146.80T:isapk128av20
153.55153.58153.89T:tinyjambu192v2
136.83?158.05?158.08?T:grain128aeadv2
165.49165.50165.62T:tinyjambu256v2
181.43181.46182.40romulusm
201.91201.96202.97T!!!romulust
240.98241.04242.07T:isapk128v20
313.12313.24314.52T:elephant200v2
467.44468.31475.54T:isapxv20
1435.451435.891436.35T:aes128gcmv1
1979.541980.481983.35aes256gcmv1
30416.8430439.4330479.89T:elephant160v2
32397.7332424.2632481.33T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
21.8421.8422.79ascon128av12
28.2128.2129.25ascon128v12
28.9128.9129.60ascon80pqv12
52.0952.0952.99ascon128abi32v12
62.1662.2463.48T:xoodyakround3
67.3967.3968.28ascon128bi32v12
73.2773.3274.70T:giftcofb128v1
105.70105.70107.05T:schwaemm256128v2
113.01113.01113.84T:schwaemm128128v2
137.34137.45137.75T:schwaemm192192v2
141.62?141.80?158.16?T:schwaemm256256v2
148.62148.62148.89T:tinyjambu128v2
157.50157.50158.75romulusn
153.07?178.47?178.65?T:grain128aeadv2
180.47180.47180.81T:tinyjambu192v2
193.54193.54193.82T:tinyjambu256v2
197.86197.91198.63T:isapa128av20
210.36210.69212.58romulusm
362.05364.23381.13T:aes256gcmv1
441.91442.00443.54T:elephant200v2
520.20520.27522.69T!!!romulust
750.40750.40753.02T:isapa128v20
1106.341106.381107.67T:isapk128av20
1648.80?1650.27?2244.05?T:aes128gcmv1
4271.364271.884282.26T:isapk128v20
6806.707163.347164.66T:isapxv20
38542.4638551.4138701.95aes256gcmv1
40316.3140320.2340337.86T:elephant176v2
40699.0840702.9040772.67T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
22.0922.0923.30ascon128av12
28.2828.2828.99ascon128v12
28.4928.4929.36ascon80pqv12
52.2652.2653.23ascon128abi32v12
59.7959.8460.14T:xoodyakround3
66.6066.6067.60ascon128bi32v12
74.2074.2674.74T:giftcofb128v1
105.95105.95106.41T:schwaemm256128v2
113.12113.12113.49T:schwaemm128128v2
138.06138.17138.27T:schwaemm192192v2
142.20142.31142.52T:schwaemm256256v2
149.02149.02149.12T:tinyjambu128v2
157.82157.82158.88romulusn
153.84?179.89?180.09?T:grain128aeadv2
180.53180.53180.77T:tinyjambu192v2
194.00194.00194.09T:tinyjambu256v2
198.08198.23198.82T:isapa128av20
217.44217.44218.41romulusm
442.08442.12443.12T:elephant200v2
487.61488.59502.50T:aes256gcmv1
520.05520.15522.10T!!!romulust
748.56748.56750.29T:isapa128v20
1107.881108.351114.45T:isapk128av20
1649.72?1650.59?2239.54?T:aes128gcmv1
4272.384273.094298.11T:isapk128v20
6819.766829.107215.44T:isapxv20
38548.0738551.6638707.09aes256gcmv1
40257.7840318.4340337.42T:elephant176v2
40697.6240703.9940785.43T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
22.0922.0922.20ascon128av12
28.2828.2828.28ascon128v12
28.4928.4928.49ascon80pqv12
52.2952.2952.33ascon128abi32v12
60.4260.5060.67T:xoodyakround3
66.6066.6066.71ascon128bi32v12
74.2174.2574.27T:giftcofb128v1
105.95105.95106.09T:schwaemm256128v2
113.17113.39114.27T:schwaemm128128v2
127.89127.97128.24T:isapa128av20
138.06138.17138.34T:schwaemm192192v2
142.21142.28142.45T:schwaemm256256v2
149.09149.09149.09T:tinyjambu128v2
157.86157.86158.00romulusn
153.19?179.89?180.09?T:grain128aeadv2
180.53180.53180.67T:tinyjambu192v2
194.00194.00194.00T:tinyjambu256v2
217.44217.44217.71romulusm
329.42329.52330.86T!!!romulust
378.33378.33379.23T:isapa128v20
442.05442.05442.88T:elephant200v2
781.97781.99782.77T:isapk128av20
988.23993.70998.11T:aes256gcmv1
1621.16?1621.84?2204.98?T:aes128gcmv1
2378.282378.982386.75T:isapk128v20
3555.343566.163750.80T:isapxv20
13938.7213950.5413975.18aes256gcmv1
40313.9840318.6740330.98T:elephant176v2
40698.0940704.0440745.15T:elephant160v2