VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Bonnell (106ca); 2010 Intel Atom N455; 1 x 1000MHz; h2atom, supercop-20241022

[Page version: 20241215 22:59:49]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
14.0414.0714.09ascon128av12
20.9821.0121.01ascon128v12
21.2421.2521.66ascon80pqv12
35.4035.4535.45ascon128abi32v12
48.9949.0049.04ascon128bi32v12
55.5255.5955.73T:xoodyakround3
55.84?55.94?97.59?T:giftcofb128v1
62.7762.8263.53T:schwaemm256128v2
79.0279.2579.45T:isapa128v20
82.8082.8382.94T:schwaemm192192v2
86.6986.6986.70T:schwaemm128128v2
88.8688.8888.94T:isapa128av20
89.5289.8189.88T:schwaemm256256v2
100.29101.40103.34T:aes256gcmv1
135.18135.21135.40T:grain128aeadv2
152.49152.50152.68T:tinyjambu128v2
156.03156.06156.13romulusn
180.95181.05183.81T:isapk128av20
195.50195.53196.17T:tinyjambu192v2
216.74216.82217.19T:tinyjambu256v2
51.31?238.24?243.68?T:isapk128v20
257.67258.05259.15romulusm
414.17414.32415.10T:elephant200v2
567.54568.11569.54T!!!romulust
538.36?581.22?616.42?T:isapxv20
1483.711484.231485.43T:aes128gcmv1
40129.1140246.1340440.75T:elephant160v2
42958.5843050.3343092.19T:elephant176v2
50761.9150894.2450995.69aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
13.9213.9413.97ascon128av12
20.8720.8820.93ascon128v12
20.9821.0021.02ascon80pqv12
35.1135.1335.13ascon128abi32v12
47.7447.7547.77ascon128bi32v12
51.9952.0152.10T:xoodyakround3
55.62?57.99?99.87?T:giftcofb128v1
63.0363.0463.08T:schwaemm256128v2
78.6479.2581.28T:isapa128v20
83.0883.0983.16T:schwaemm192192v2
86.9486.9486.95T:schwaemm128128v2
88.8788.9289.93T:isapa128av20
90.3690.4590.56T:schwaemm256256v2
101.12?102.29?112.50?T:aes256gcmv1
137.32137.35137.58T:grain128aeadv2
152.76152.76152.81T:tinyjambu128v2
155.98156.00156.05romulusn
180.95181.09183.60T:isapk128av20
195.26195.87200.07T:tinyjambu192v2
216.99217.06217.59T:tinyjambu256v2
63.20?238.40?242.33?T:isapk128v20
258.00258.08258.69romulusm
414.01414.27414.87T:elephant200v2
567.50567.90569.31T!!!romulust
537.91?574.77?616.89?T:isapxv20
1483.851484.231485.50T:aes128gcmv1
40135.5640224.7040328.73T:elephant160v2
42936.8143078.7743130.09T:elephant176v2
50776.9850855.8550959.75aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
13.9413.9413.95ascon128av12
20.8820.8820.88ascon128v12
21.0021.0021.00ascon80pqv12
35.1235.1335.27ascon128abi32v12
39.3139.3839.44T:isapa128v20
47.7547.7547.76ascon128bi32v12
52.1252.1352.25T:xoodyakround3
55.63?55.68?96.83?T:giftcofb128v1
58.0858.1258.17T:isapa128av20
63.0363.0563.08T:schwaemm256128v2
83.0883.0983.12T:schwaemm192192v2
86.9486.9486.95T:schwaemm128128v2
90.3790.4790.50T:schwaemm256256v2
99.18102.13103.70T:aes256gcmv1
118.41118.49118.54T:isapk128av20
137.33137.34137.39T:grain128aeadv2
52.80?148.09?148.95?T:isapk128v20
152.76152.76152.80T:tinyjambu128v2
155.99156.01156.86romulusn
195.26195.30200.07T:tinyjambu192v2
196.58196.67196.77T!!!romulust
217.01217.06217.88T:tinyjambu256v2
258.05258.07258.21romulusm
302.48?315.86?343.74?T:isapxv20
413.55413.97415.79T:elephant200v2
1427.591427.951429.18T:aes128gcmv1
1457.281459.751467.72aes256gcmv1
40120.4740155.4740220.08T:elephant160v2
42997.3443089.9743135.25T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
13.7313.7613.79ascon128av12
20.6720.6920.72ascon128v12
21.1121.1221.17ascon80pqv12
33.8033.8334.75ascon128abi32v12
41.8841.8941.96T:xoodyakround3
48.4348.4549.12ascon128bi32v12
55.6755.7055.75T:giftcofb128v1
55.4456.8657.48T:aes256gcmv1
58.6759.3761.97T:isapa128v20
62.4462.4962.54T:schwaemm256128v2
73.4973.4973.62T:isapa128av20
82.6382.6582.73T:schwaemm192192v2
86.44?86.60?118.30?T:schwaemm128128v2
88.7288.7488.76T:schwaemm256256v2
124.99125.05125.24T:tinyjambu128v2
128.82128.89129.75romulusn
135.04135.17135.37T:grain128aeadv2
149.08149.20149.89T:isapk128av20
152.49152.55152.93T:tinyjambu192v2
164.12164.15164.36T:tinyjambu256v2
179.75179.88180.69romulusm
191.55193.47195.07T:isapk128v20
307.11307.35307.81T:elephant200v2
381.96382.57383.00T!!!romulust
424.76?459.11?474.98?T:isapxv20
1455.351456.051456.89T:aes128gcmv1
26089.5726156.0926231.35aes256gcmv1
30082.4730131.7230165.58T:elephant160v2
32119.6432178.3032252.67T:elephant176v2
Cycles/byte for long+long decrypt
25%50%75%aead
13.6613.7113.75ascon128av12
20.4920.5120.57ascon80pqv12
20.4220.5820.88ascon128v12
33.4433.4833.55ascon128abi32v12
40.0840.0940.16T:xoodyakround3
47.6747.6947.76ascon128bi32v12
55.5555.5755.80T:giftcofb128v1
56.8357.6058.82T:aes256gcmv1
59.1159.5159.77T:isapa128v20
62.5962.6062.64T:schwaemm256128v2
73.4973.5373.74T:isapa128av20
82.7582.7882.82T:schwaemm192192v2
86.56?86.58?120.19?T:schwaemm128128v2
89.0389.0589.14T:schwaemm256256v2
125.12125.16125.46T:tinyjambu128v2
128.77128.85129.73romulusn
135.94136.17136.42T:grain128aeadv2
149.10149.35149.77T:isapk128av20
152.37152.39152.71T:tinyjambu192v2
164.24164.29164.81T:tinyjambu256v2
179.75179.99180.67romulusm
192.19193.30194.98T:isapk128v20
307.00307.31307.97T:elephant200v2
381.94382.57383.71T!!!romulust
430.43445.02474.69T:isapxv20
1455.641456.451460.25T:aes128gcmv1
26093.8526156.7126205.92aes256gcmv1
30096.8230147.3130174.08T:elephant160v2
32114.0432157.7732186.53T:elephant176v2
Cycles/byte for long+long forgery
25%50%75%aead
13.6913.6913.71ascon128av12
20.5020.5020.51ascon80pqv12
20.5620.5620.58ascon128v12
33.4733.4833.49ascon128abi32v12
39.4039.4539.49T:isapa128v20
40.1440.1640.21T:xoodyakround3
47.6947.7048.58ascon128bi32v12
55.5755.5755.60T:giftcofb128v1
56.3857.9258.77T:aes256gcmv1
58.1258.1258.15T:isapa128av20
62.5962.6062.63T:schwaemm256128v2
82.7782.7882.89T:schwaemm192192v2
86.56?86.58?119.14?T:schwaemm128128v2
88.8789.0589.07T:schwaemm256256v2
117.86117.92118.22T:isapk128av20
125.13125.13125.30T:tinyjambu128v2
128.80128.82129.42romulusn
136.00136.08136.36T:grain128aeadv2
146.68146.82148.62T:isapk128v20
152.37152.41152.83T:tinyjambu192v2
164.25164.28164.62T:tinyjambu256v2
179.86180.01181.52romulusm
196.31196.39197.21T!!!romulust
307.06307.38307.84T:elephant200v2
311.91314.14338.99T:isapxv20
1427.341427.711429.41T:aes128gcmv1
1461.371465.521471.14aes256gcmv1
30088.0330136.0430159.83T:elephant160v2
32119.6232154.0632221.27T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
12.18?13.33?14.47?T:aes256gcmv1
13.4113.4413.45ascon128av12
20.3620.3820.38ascon128v12
20.9921.0021.00ascon80pqv12
28.1628.2128.29T:xoodyakround3
32.1732.2032.20ascon128abi32v12
39.4439.5439.58T:isapa128v20
47.8747.8847.91ascon128bi32v12
55.4755.5355.95T:giftcofb128v1
52.7858.1258.14T:isapa128av20
62.1562.1662.18T:schwaemm256128v2
82.4182.4782.55T:schwaemm192192v2
86.1886.2086.23T:schwaemm128128v2
87.6587.6687.70T:schwaemm256256v2
97.4997.5097.54T:tinyjambu128v2
101.59101.64101.68romulusn
101.58101.65101.77romulusm
109.48109.50109.56T:tinyjambu192v2
111.49111.50111.56T:tinyjambu256v2
117.16117.26117.47T:isapk128av20
134.93135.06135.39T:grain128aeadv2
144.86145.50147.64T:isapk128v20
195.93196.04196.61T!!!romulust
202.19202.61203.16T:elephant200v2
301.16?331.25?344.81?T:isapxv20
1427.381428.051429.12T:aes128gcmv1
1457.131459.131461.06aes256gcmv1
20058.0620072.5820112.23T:elephant160v2
21228.8521273.2821316.61T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
12.21?13.40?14.75?T:aes256gcmv1
13.3913.4413.47ascon128av12
19.9720.0020.02ascon80pqv12
20.2420.2520.25ascon128v12
28.1828.2028.23T:xoodyakround3
31.7731.8231.84ascon128abi32v12
39.4339.5139.58T:isapa128v20
47.6247.6247.65ascon128bi32v12
55.4855.5958.23T:giftcofb128v1
52.27?58.12?58.14?T:isapa128av20
62.1662.1662.17T:schwaemm256128v2
82.4682.4782.51T:schwaemm192192v2
86.1986.1986.76T:schwaemm128128v2
87.6087.6287.67T:schwaemm256256v2
97.5097.5097.58T:tinyjambu128v2
101.59101.65101.71romulusm
101.61101.68103.23romulusn
109.50109.50109.54T:tinyjambu192v2
111.50111.50111.56T:tinyjambu256v2
117.18117.28117.37T:isapk128av20
134.71134.81134.90T:grain128aeadv2
145.24145.30146.68T:isapk128v20
195.94196.05196.81T!!!romulust
202.25202.61202.69T:elephant200v2
301.85?316.25?344.19?T:isapxv20
1426.971427.741428.14T:aes128gcmv1
1457.811460.071462.16aes256gcmv1
20041.1720073.9920116.97T:elephant160v2
21216.1221244.9521323.00T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
13.4413.4413.48ascon128av12
12.63?13.46?14.89?T:aes256gcmv1
19.9820.0020.02ascon80pqv12
18.8620.2520.25ascon128v12
28.1928.2028.24T:xoodyakround3
31.8131.8231.83ascon128abi32v12
39.4439.5039.57T:isapa128v20
47.6247.6247.65ascon128bi32v12
55.5055.5255.97T:giftcofb128v1
57.8658.1258.15T:isapa128av20
62.1662.1662.23T:schwaemm256128v2
82.4582.4782.55T:schwaemm192192v2
86.1986.2086.23T:schwaemm128128v2
87.6187.6287.67T:schwaemm256256v2
97.5097.5097.53T:tinyjambu128v2
101.62101.63101.66romulusn
101.62101.64101.82romulusm
109.50109.50109.54T:tinyjambu192v2
111.50111.50111.56T:tinyjambu256v2
117.19117.39119.51T:isapk128av20
134.79134.80134.84T:grain128aeadv2
145.21145.30147.18T:isapk128v20
195.97196.05196.15T!!!romulust
202.06202.61202.66T:elephant200v2
300.74?314.83?344.23?T:isapxv20
1427.451427.941428.68T:aes128gcmv1
1458.411460.271468.35aes256gcmv1
20046.5920059.6620088.55T:elephant160v2
21221.4821276.0321313.21T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
14.0914.0914.14ascon128av12
21.0121.0121.05ascon128v12
21.4621.4621.51ascon80pqv12
34.5834.5834.63ascon128abi32v12
42.3642.3842.69T:xoodyakround3
49.2449.2549.30ascon128bi32v12
56.4356.4356.49T:giftcofb128v1
64.2864.3364.75T:schwaemm256128v2
69.9970.1670.43T:aes256gcmv1
78.6878.6978.73T:isapa128av20
84.4784.4784.55T:schwaemm192192v2
87.5587.5687.59T:schwaemm128128v2
88.1588.1588.26T:isapa128v20
90.9590.9591.07T:schwaemm256256v2
125.99125.99126.20T:tinyjambu128v2
130.05130.11131.87romulusn
135.85135.87136.21T:grain128aeadv2
153.67153.68153.84T:tinyjambu192v2
165.35165.39165.64T:tinyjambu256v2
181.09181.11183.05romulusm
190.30190.35191.76T:isapk128av20
313.55313.64314.14T:elephant200v2
364.49365.02367.04T:isapk128v20
387.67387.96389.77T!!!romulust
723.64729.18750.23T:isapxv20
1463.881464.271464.83T:aes128gcmv1
26643.7026686.0026722.34aes256gcmv1
30446.6930508.5130641.65T:elephant160v2
32348.6032409.5732429.79T:elephant176v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
14.0414.0614.10ascon128av12
20.8420.8520.92ascon80pqv12
20.8920.9120.96ascon128v12
34.2634.2634.36ascon128abi32v12
40.5640.5640.61T:xoodyakround3
48.4948.4948.59ascon128bi32v12
56.3556.3556.44T:giftcofb128v1
64.4164.4364.44T:schwaemm256128v2
75.8175.9976.92T:aes256gcmv1
78.6878.6978.72T:isapa128av20
84.6184.6184.69T:schwaemm192192v2
87.6887.6887.70T:schwaemm128128v2
88.1888.1888.51T:isapa128v20
91.2791.2891.32T:schwaemm256256v2
126.13126.18126.61T:tinyjambu128v2
130.04130.06130.87romulusn
136.81137.03137.28T:grain128aeadv2
153.55153.56153.61T:tinyjambu192v2
165.49165.51165.66T:tinyjambu256v2
181.44181.56183.77romulusm
190.37190.44192.26T:isapk128av20
313.46313.51314.15T:elephant200v2
364.85365.08367.54T:isapk128v20
387.63388.18388.59T!!!romulust
707.94727.33745.07T:isapxv20
1463.411463.961464.14T:aes128gcmv1
26621.8026641.2926738.09aes256gcmv1
30424.3430438.2630520.47T:elephant160v2
32344.2832403.2232482.12T:elephant176v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
14.0414.0414.05ascon128av12
20.8420.8420.85ascon80pqv12
20.8920.8920.91ascon128v12
34.2634.2634.28ascon128abi32v12
40.6540.6540.69T:xoodyakround3
48.4948.4948.51ascon128bi32v12
53.5753.5854.04T:isapa128v20
56.3556.3556.65T:giftcofb128v1
61.0461.0461.06T:isapa128av20
64.4164.4364.66T:schwaemm256128v2
84.6184.6184.85T:schwaemm192192v2
87.6887.6888.36T:schwaemm128128v2
91.2791.2791.30T:schwaemm256256v2
96.2496.4296.80T:aes256gcmv1
126.13126.15126.51T:tinyjambu128v2
130.04130.04130.06romulusn
136.81136.83137.15T:grain128aeadv2
146.58146.61147.67T:isapk128av20
153.55153.56153.61T:tinyjambu192v2
165.50165.54165.85T:tinyjambu256v2
181.43181.44181.75romulusm
201.94201.99203.75T!!!romulust
240.97241.02243.46T:isapk128v20
313.48313.59313.91T:elephant200v2
450.84458.73475.50T:isapxv20
1435.981436.961443.88T:aes128gcmv1
1980.051985.781989.85aes256gcmv1
30444.0230461.4430514.03T:elephant160v2
32333.5932414.2532492.92T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
21.8421.8422.91ascon128av12
28.2128.2129.15ascon128v12
28.9128.9129.60ascon80pqv12
52.09?52.88?90.34?ascon128abi32v12
62.1062.2063.57T:xoodyakround3
67.3967.3968.30ascon128bi32v12
73.27?74.48?123.50?T:giftcofb128v1
105.70105.70106.81T:schwaemm256128v2
113.13113.13113.84T:schwaemm128128v2
137.34137.50137.75T:schwaemm192192v2
141.50141.50142.16T:schwaemm256256v2
148.62148.67148.89T:tinyjambu128v2
151.64151.70152.94T:grain128aeadv2
157.50?158.90?203.93?romulusn
180.47180.47180.67T:tinyjambu192v2
193.54193.54193.82T:tinyjambu256v2
197.84197.84198.63T:isapa128av20
210.36210.48211.47romulusm
361.80364.35376.84T:aes256gcmv1
442.45442.59443.66T:elephant200v2
520.20520.59522.71T!!!romulust
749.66749.68752.06T:isapa128v20
1106.341106.371107.65T:isapk128av20
1649.331649.341669.41T:aes128gcmv1
4270.994271.624308.80T:isapk128v20
6816.036822.107216.37T:isapxv20
38546.8138576.7338746.90aes256gcmv1
40233.3040316.6140359.98T:elephant176v2
40705.0340780.6340904.83T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
22.0922.0923.19ascon128av12
28.2828.2828.88ascon128v12
28.4928.4929.25ascon80pqv12
52.2652.2653.12ascon128abi32v12
59.7359.8360.14T:xoodyakround3
66.6066.6067.60ascon128bi32v12
74.20?74.74?124.59?T:giftcofb128v1
105.95105.95106.41T:schwaemm256128v2
113.22113.22113.33T:schwaemm128128v2
138.06138.06138.27T:schwaemm192192v2
142.20142.20142.48T:schwaemm256256v2
149.02149.02149.12T:tinyjambu128v2
152.98153.04153.87T:grain128aeadv2
157.82?159.15?208.80?romulusn
180.53180.53180.74T:tinyjambu192v2
194.00194.00194.09T:tinyjambu256v2
197.85197.85198.54T:isapa128av20
217.44217.55218.84romulusm
442.76442.76443.49T:elephant200v2
489.59491.25508.09T:aes256gcmv1
520.05520.16521.90T!!!romulust
750.27750.27758.14T:isapa128v20
1107.881108.401120.84T:isapk128av20
1648.911649.701650.14T:aes128gcmv1
4271.784272.884286.43T:isapk128v20
6994.457170.517216.52T:isapxv20
38548.4538558.9838830.12aes256gcmv1
40235.4140306.8040320.78T:elephant176v2
40706.4240736.6340831.34T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
22.0922.0922.20ascon128av12
28.2828.2828.28ascon128v12
28.4928.4928.49ascon80pqv12
52.2952.2952.44ascon128abi32v12
60.3860.4560.67T:xoodyakround3
66.6066.6066.71ascon128bi32v12
74.21?74.25?127.08?T:giftcofb128v1
105.95105.95106.09T:schwaemm256128v2
113.22113.22113.22T:schwaemm128128v2
127.99127.99128.12T:isapa128av20
138.06138.06138.34T:schwaemm192192v2
142.21142.21142.45T:schwaemm256256v2
149.09149.09149.46T:tinyjambu128v2
152.98153.04153.19T:grain128aeadv2
157.86?158.00?204.37?romulusn
180.53180.53180.65T:tinyjambu192v2
194.00194.00194.00T:tinyjambu256v2
217.44217.55217.83romulusm
329.42329.42330.86T!!!romulust
378.30378.34378.96T:isapa128v20
442.73442.73443.26T:elephant200v2
781.97781.98782.66T:isapk128av20
991.91993.721003.73T:aes256gcmv1
1620.341621.371631.09T:aes128gcmv1
2378.382378.682379.56T:isapk128v20
3554.343716.083750.40T:isapxv20
13938.7713945.2113974.66aes256gcmv1
40238.5240318.6640408.88T:elephant176v2
40702.6840705.2140725.06T:elephant160v2