VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Bonnell (106ca); 2010 Intel Atom N455; 1 x 1000MHz; h2atom, supercop-20251114

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
14.0414.0714.07ascon128av12
20.9821.0021.01ascon128v12
21.2421.2521.26ascon80pqv12
35.4035.4535.45ascon128abi32v12
48.9949.0049.04ascon128bi32v12
55.5355.5955.73T:xoodyakround3
55.8355.8956.63T:giftcofb128v1
62.7662.8162.86T:schwaemm256128v2
79.0979.2479.42T:isapa128v20
82.8182.8483.03T:schwaemm192192v2
86.6986.7186.90T:schwaemm128128v2
88.8888.8988.94T:isapa128av20
89.8089.8189.88T:schwaemm256256v2
100.21101.25102.37T:aes256gcmv1
152.49152.51152.80T:tinyjambu128v2
156.02156.06156.12romulusn
134.10?156.21?158.14?T:grain128aeadv2
180.94181.04181.27T:isapk128av20
195.50195.78196.16T:tinyjambu192v2
216.74216.76216.82T:tinyjambu256v2
238.35240.52242.81T:isapk128v20
257.88258.06259.79romulusm
413.57413.74414.32T:elephant200v2
567.38568.20569.48T!!!romulust
540.87574.12599.71T:isapxv20
1482.811483.511485.49T:aes128gcmv1
40105.6040152.3740226.56T:elephant160v2
43025.1843065.4443143.94T:elephant176v2
50728.8050791.8150919.48aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
13.9213.9413.97ascon128av12
20.8720.8820.88ascon128v12
20.9821.0021.05ascon80pqv12
35.1235.1335.90ascon128abi32v12
47.7447.7547.77ascon128bi32v12
51.9952.0152.37T:xoodyakround3
55.6055.6355.72T:giftcofb128v1
63.0163.0663.07T:schwaemm256128v2
78.5779.2679.93T:isapa128v20
83.0883.0983.15T:schwaemm192192v2
86.6286.9386.98T:schwaemm128128v2
88.8288.9190.01T:isapa128av20
90.4590.4791.56T:schwaemm256256v2
100.86102.00103.60T:aes256gcmv1
152.76152.76152.82T:tinyjambu128v2
155.97156.00156.05romulusn
136.04?158.34?160.12?T:grain128aeadv2
177.46180.94182.20T:isapk128av20
195.25195.27195.89T:tinyjambu192v2
217.01217.01217.07T:tinyjambu256v2
239.67240.60244.53T:isapk128v20
258.00258.17259.57romulusm
413.68413.90414.65T:elephant200v2
567.58568.37569.06T!!!romulust
556.66582.09615.92T:isapxv20
1484.001484.451485.15T:aes128gcmv1
40117.2940209.9740394.60T:elephant160v2
43060.5743086.1943166.17T:elephant176v2
50737.6750806.2750970.23aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
13.9413.9413.95ascon128av12
20.8820.8820.91ascon128v12
21.0021.0021.00ascon80pqv12
35.1235.1335.13ascon128abi32v12
39.2839.3839.47T:isapa128v20
47.7547.7547.76ascon128bi32v12
52.1152.1352.23T:xoodyakround3
55.6255.6355.66T:giftcofb128v1
58.1058.1258.15T:isapa128av20
63.0263.0663.08T:schwaemm256128v2
83.0883.0983.13T:schwaemm192192v2
86.9286.9487.03T:schwaemm128128v2
90.4590.4890.51T:schwaemm256256v2
101.25101.85102.74T:aes256gcmv1
118.46118.49118.53T:isapk128av20
147.67148.18151.42T:isapk128v20
152.72152.76152.80T:tinyjambu128v2
156.00156.00156.72romulusn
135.59?158.34?159.31?T:grain128aeadv2
195.25195.28195.96T:tinyjambu192v2
196.58196.71196.82T!!!romulust
216.97217.01217.07T:tinyjambu256v2
258.06258.44261.09romulusm
318.95331.14343.11T:isapxv20
413.59413.82414.52T:elephant200v2
1427.041427.311427.89T:aes128gcmv1
1456.681459.181460.23aes256gcmv1
40113.6340180.0440407.01T:elephant160v2
43021.4143079.0443123.45T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
13.7313.7613.80ascon128av12
20.6720.6920.72ascon128v12
21.1121.1521.17ascon80pqv12
33.8033.8635.27ascon128abi32v12
41.8841.8941.95T:xoodyakround3
46.4748.4650.03ascon128bi32v12
55.6755.6956.21T:giftcofb128v1
56.7257.2057.95T:aes256gcmv1
59.2359.3860.46T:isapa128v20
62.4462.4862.53T:schwaemm256128v2
73.4873.5173.77T:isapa128av20
82.6482.6582.67T:schwaemm192192v2
86.4286.4586.65T:schwaemm128128v2
88.7288.7588.94T:schwaemm256256v2
122.01125.00125.24T:tinyjambu128v2
128.82128.89129.49romulusn
149.09149.21151.35T:isapk128av20
152.47152.51152.78T:tinyjambu192v2
133.84?156.12?157.71?T:grain128aeadv2
164.12164.16164.37T:tinyjambu256v2
179.73179.89180.67romulusm
191.53193.12194.86T:isapk128v20
306.61306.78307.27T:elephant200v2
381.85382.77383.77T!!!romulust
427.02443.76456.18T:isapxv20
1455.151456.081457.71T:aes128gcmv1
26101.4626166.1826198.13aes256gcmv1
30087.7630131.4630158.20T:elephant160v2
32123.2832198.2932229.01T:elephant176v2
Cycles/byte for long+long decrypt
25%50%75%aead
13.6613.6913.74ascon128av12
20.4920.5020.56ascon80pqv12
20.5420.5620.61ascon128v12
33.4433.4833.55ascon128abi32v12
40.0840.1040.24T:xoodyakround3
45.2847.6747.75ascon128bi32v12
55.5655.5755.65T:giftcofb128v1
56.7257.6358.48T:aes256gcmv1
59.3159.3959.73T:isapa128v20
62.5862.6162.64T:schwaemm256128v2
73.4773.5073.54T:isapa128av20
82.7582.7782.83T:schwaemm192192v2
86.5586.5886.96T:schwaemm128128v2
89.0289.0789.19T:schwaemm256256v2
122.03125.12125.38T:tinyjambu128v2
128.77128.84129.17romulusn
148.47149.21150.07T:isapk128av20
147.42152.57154.63T:tinyjambu192v2
134.81?157.07?158.66?T:grain128aeadv2
164.22164.26164.53T:tinyjambu256v2
179.75179.97181.82romulusm
192.63193.81195.22T:isapk128v20
306.94307.07307.43T:elephant200v2
381.94382.38383.72T!!!romulust
442.42456.12473.85T:isapxv20
1455.361456.041456.48T:aes128gcmv1
26097.5626158.1826203.61aes256gcmv1
30085.2430124.0630145.62T:elephant160v2
32150.4132179.8632230.30T:elephant176v2
Cycles/byte for long+long forgery
25%50%75%aead
13.6913.6913.71ascon128av12
20.5020.5020.51ascon80pqv12
20.5620.5620.58ascon128v12
33.4733.4833.49ascon128abi32v12
39.3939.4539.49T:isapa128v20
40.1540.1640.21T:xoodyakround3
45.2847.6948.40ascon128bi32v12
55.5755.5755.60T:giftcofb128v1
46.86?56.94?57.99?T:aes256gcmv1
58.0858.1258.16T:isapa128av20
62.6062.6262.72T:schwaemm256128v2
82.7782.7883.14T:schwaemm192192v2
86.5586.5686.58T:schwaemm128128v2
89.0489.0889.18T:schwaemm256256v2
117.86117.93119.54T:isapk128av20
121.06125.13125.21T:tinyjambu128v2
128.59128.81129.26romulusn
146.48147.00149.04T:isapk128v20
152.21152.55154.33T:tinyjambu192v2
135.24?157.07?158.87?T:grain128aeadv2
164.24164.28164.63T:tinyjambu256v2
179.84179.94180.65romulusm
196.32196.40197.04T!!!romulust
306.47307.01307.32T:elephant200v2
324.46332.00337.35T:isapxv20
1427.301427.781431.63T:aes128gcmv1
1458.111459.871464.10aes256gcmv1
30089.5030146.3730160.71T:elephant160v2
32128.3132214.3232256.01T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
12.04?13.33?14.55?T:aes256gcmv1
13.4113.4413.45ascon128av12
20.3720.3820.38ascon128v12
20.9921.0021.00ascon80pqv12
28.1628.2028.27T:xoodyakround3
32.1632.2032.20ascon128abi32v12
39.4439.5039.55T:isapa128v20
47.8747.8948.66ascon128bi32v12
55.4855.5858.01T:giftcofb128v1
58.1058.1358.19T:isapa128av20
62.1662.1762.18T:schwaemm256128v2
82.4082.4782.55T:schwaemm192192v2
86.1986.2086.76T:schwaemm128128v2
87.6487.6987.89T:schwaemm256256v2
97.4997.5197.90T:tinyjambu128v2
101.58101.64101.67romulusn
101.57101.67101.71romulusm
109.49109.55109.95T:tinyjambu192v2
111.49111.52111.55T:tinyjambu256v2
117.17117.33119.69T:isapk128av20
145.15145.50147.52T:isapk128v20
133.37?156.04?157.82?T:grain128aeadv2
195.94196.04197.70T!!!romulust
202.21202.33202.53T:elephant200v2
303.57313.11325.73T:isapxv20
1426.10?1428.25?2011.34?T:aes128gcmv1
1458.181459.381465.76aes256gcmv1
20035.9620056.4920071.54T:elephant160v2
21267.6721275.0121373.63T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
13.3913.4413.47ascon128av12
12.28?13.61?22.41?T:aes256gcmv1
19.0919.9920.02ascon80pqv12
20.2420.2520.25ascon128v12
27.9328.2028.23T:xoodyakround3
31.7731.8231.83ascon128abi32v12
39.4539.5039.55T:isapa128v20
47.6247.6247.66ascon128bi32v12
55.4855.5255.61T:giftcofb128v1
58.1158.1358.18T:isapa128av20
62.1762.1762.19T:schwaemm256128v2
82.4582.4782.56T:schwaemm192192v2
86.1986.2086.38T:schwaemm128128v2
87.6087.7588.10T:schwaemm256256v2
97.5097.5097.54T:tinyjambu128v2
101.60101.64101.82romulusm
101.59101.69103.24romulusn
109.50109.50109.52T:tinyjambu192v2
111.41111.52111.65T:tinyjambu256v2
117.19117.28117.36T:isapk128av20
145.23145.34147.45T:isapk128v20
134.15?155.80?157.94?T:grain128aeadv2
195.92196.03196.18T!!!romulust
202.23202.30202.49T:elephant200v2
316.79329.90344.11T:isapxv20
1426.88?1428.10?2011.27?T:aes128gcmv1
1457.681459.671462.31aes256gcmv1
20034.2620056.8920089.65T:elephant160v2
21234.4121288.2821309.01T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
13.4413.4413.45ascon128av12
12.67?13.96?24.16?T:aes256gcmv1
19.9820.0120.20ascon80pqv12
20.2520.2520.25ascon128v12
28.1928.2028.32T:xoodyakround3
31.8131.8231.83ascon128abi32v12
39.4339.5240.22T:isapa128v20
47.6247.6247.65ascon128bi32v12
55.5055.5155.55T:giftcofb128v1
58.1258.1358.16T:isapa128av20
62.1762.1762.19T:schwaemm256128v2
82.4582.4782.49T:schwaemm192192v2
86.1986.1986.39T:schwaemm128128v2
87.6187.6687.89T:schwaemm256256v2
97.4897.5097.53T:tinyjambu128v2
101.62101.63101.65romulusn
101.62101.64101.68romulusm
109.50109.53110.06T:tinyjambu192v2
111.50111.50111.56T:tinyjambu256v2
117.17117.26117.33T:isapk128av20
143.10145.24145.63T:isapk128v20
132.99?155.79?157.67?T:grain128aeadv2
195.97196.03196.11T!!!romulust
202.22202.29202.48T:elephant200v2
316.73329.57343.79T:isapxv20
1434.51?1449.16?2014.40?T:aes128gcmv1
1457.341458.981461.20aes256gcmv1
20038.1120053.3520080.71T:elephant160v2
21268.7021286.2221297.16T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
14.0914.0914.13ascon128av12
21.0121.0121.05ascon128v12
21.4621.4621.51ascon80pqv12
34.5834.5834.63ascon128abi32v12
42.3642.3742.40T:xoodyakround3
49.2449.2449.27ascon128bi32v12
56.4356.4456.86T:giftcofb128v1
64.3064.5264.93T:schwaemm256128v2
70.0470.1571.14T:aes256gcmv1
78.6978.7378.93T:isapa128av20
84.4784.4884.54T:schwaemm192192v2
87.5587.5587.59T:schwaemm128128v2
88.1788.1788.30T:isapa128v20
90.9590.9891.06T:schwaemm256256v2
125.99126.04126.28T:tinyjambu128v2
130.05130.05130.70romulusn
153.67153.72154.06T:tinyjambu192v2
135.93?157.09?157.27?T:grain128aeadv2
165.35165.37165.65T:tinyjambu256v2
181.07181.08181.84romulusm
190.30190.34192.10T:isapk128av20
313.14313.36313.95T:elephant200v2
364.48364.74366.55T:isapk128v20
387.58388.01388.65T!!!romulust
707.79726.93727.49T:isapxv20
1463.131463.441463.89T:aes128gcmv1
26625.1126650.6126739.19aes256gcmv1
30414.5130435.9830488.47T:elephant160v2
32398.1132414.3832483.77T:elephant176v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
14.0414.0414.10ascon128av12
20.8420.8420.92ascon80pqv12
20.8920.8920.94ascon128v12
34.2634.2634.36ascon128abi32v12
40.5640.5640.62T:xoodyakround3
48.4948.4948.58ascon128bi32v12
56.3556.3556.44T:giftcofb128v1
64.4264.4364.46T:schwaemm256128v2
75.6175.6676.69T:aes256gcmv1
78.6978.6978.74T:isapa128av20
84.6184.6284.68T:schwaemm192192v2
87.6887.6987.71T:schwaemm128128v2
87.5688.1090.79T:isapa128v20
91.2791.3991.46T:schwaemm256256v2
126.13126.14126.28T:tinyjambu128v2
130.03130.06130.44romulusn
153.55153.57153.87T:tinyjambu192v2
137.00?158.05?158.16?T:grain128aeadv2
165.49165.51165.63T:tinyjambu256v2
181.43181.45182.54romulusm
190.38190.44192.53T:isapk128av20
313.11313.18313.75T:elephant200v2
364.52364.89366.94T:isapk128v20
387.64388.19388.97T!!!romulust
724.86727.88745.05T:isapxv20
1463.661464.171464.74T:aes128gcmv1
26620.4126665.1426740.84aes256gcmv1
30421.7230447.1630488.38T:elephant160v2
32384.6232423.6432458.38T:elephant176v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
14.0414.0414.05ascon128av12
20.8420.8420.85ascon80pqv12
20.8920.8920.91ascon128v12
34.2634.2634.28ascon128abi32v12
40.6540.6640.69T:xoodyakround3
48.4948.4949.31ascon128bi32v12
53.5653.5653.62T:isapa128v20
56.3556.3656.61T:giftcofb128v1
61.0461.0461.19T:isapa128av20
64.4264.4464.68T:schwaemm256128v2
84.6184.6284.72T:schwaemm192192v2
87.6787.6987.81T:schwaemm128128v2
91.2791.3091.92T:schwaemm256256v2
96.0796.2596.80T:aes256gcmv1
126.13126.13126.15T:tinyjambu128v2
130.04130.04130.49romulusn
146.57146.59146.80T:isapk128av20
153.55153.58153.89T:tinyjambu192v2
136.83?158.05?158.08?T:grain128aeadv2
165.49165.50165.62T:tinyjambu256v2
181.43181.46182.40romulusm
201.91201.96202.97T!!!romulust
240.98241.04242.07T:isapk128v20
313.12313.24314.52T:elephant200v2
467.44468.31475.54T:isapxv20
1435.451435.891436.35T:aes128gcmv1
1979.541980.481983.35aes256gcmv1
30416.8430439.4330479.89T:elephant160v2
32397.7332424.2632481.33T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
21.8421.8422.79ascon128av12
28.2128.2129.25ascon128v12
28.9128.9129.60ascon80pqv12
52.0952.0952.99ascon128abi32v12
62.1662.2463.48T:xoodyakround3
67.3967.3968.28ascon128bi32v12
73.2773.3274.70T:giftcofb128v1
105.70105.70107.05T:schwaemm256128v2
113.01113.01113.84T:schwaemm128128v2
137.34137.45137.75T:schwaemm192192v2
141.62?141.80?158.16?T:schwaemm256256v2
148.62148.62148.89T:tinyjambu128v2
157.50157.50158.75romulusn
153.07?178.47?178.65?T:grain128aeadv2
180.47180.47180.81T:tinyjambu192v2
193.54193.54193.82T:tinyjambu256v2
197.86197.91198.63T:isapa128av20
210.36210.69212.58romulusm
362.05364.23381.13T:aes256gcmv1
441.91442.00443.54T:elephant200v2
520.20520.27522.69T!!!romulust
750.40750.40753.02T:isapa128v20
1106.341106.381107.67T:isapk128av20
1648.80?1650.27?2244.05?T:aes128gcmv1
4271.364271.884282.26T:isapk128v20
6806.707163.347164.66T:isapxv20
38542.4638551.4138701.95aes256gcmv1
40316.3140320.2340337.86T:elephant176v2
40699.0840702.9040772.67T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
22.0922.0923.30ascon128av12
28.2828.2828.99ascon128v12
28.4928.4929.36ascon80pqv12
52.2652.2653.23ascon128abi32v12
59.7959.8460.14T:xoodyakround3
66.6066.6067.60ascon128bi32v12
74.2074.2674.74T:giftcofb128v1
105.95105.95106.41T:schwaemm256128v2
113.12113.12113.49T:schwaemm128128v2
138.06138.17138.27T:schwaemm192192v2
142.20142.31142.52T:schwaemm256256v2
149.02149.02149.12T:tinyjambu128v2
157.82157.82158.88romulusn
153.84?179.89?180.09?T:grain128aeadv2
180.53180.53180.77T:tinyjambu192v2
194.00194.00194.09T:tinyjambu256v2
198.08198.23198.82T:isapa128av20
217.44217.44218.41romulusm
442.08442.12443.12T:elephant200v2
487.61488.59502.50T:aes256gcmv1
520.05520.15522.10T!!!romulust
748.56748.56750.29T:isapa128v20
1107.881108.351114.45T:isapk128av20
1649.72?1650.59?2239.54?T:aes128gcmv1
4272.384273.094298.11T:isapk128v20
6819.766829.107215.44T:isapxv20
38548.0738551.6638707.09aes256gcmv1
40257.7840318.4340337.42T:elephant176v2
40697.6240703.9940785.43T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
22.0922.0922.20ascon128av12
28.2828.2828.28ascon128v12
28.4928.4928.49ascon80pqv12
52.2952.2952.33ascon128abi32v12
60.4260.5060.67T:xoodyakround3
66.6066.6066.71ascon128bi32v12
74.2174.2574.27T:giftcofb128v1
105.95105.95106.09T:schwaemm256128v2
113.17113.39114.27T:schwaemm128128v2
127.89127.97128.24T:isapa128av20
138.06138.17138.34T:schwaemm192192v2
142.21142.28142.45T:schwaemm256256v2
149.09149.09149.09T:tinyjambu128v2
157.86157.86158.00romulusn
153.19?179.89?180.09?T:grain128aeadv2
180.53180.53180.67T:tinyjambu192v2
194.00194.00194.00T:tinyjambu256v2
217.44217.44217.71romulusm
329.42329.52330.86T!!!romulust
378.33378.33379.23T:isapa128v20
442.05442.05442.88T:elephant200v2
781.97781.99782.77T:isapk128av20
988.23993.70998.11T:aes256gcmv1
1621.16?1621.84?2204.98?T:aes128gcmv1
2378.282378.982386.75T:isapk128v20
3555.343566.163750.80T:isapxv20
13938.7213950.5413975.18aes256gcmv1
40313.9840318.6740330.98T:elephant176v2
40698.0940704.0440745.15T:elephant160v2