VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Bonnell (106ca); 2010 Intel Atom N455; 1 x 1000MHz; h2atom, supercop-20260330

[Page version: 20260922 09:01:03]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
14.0014.0114.09ascon128av12
20.7520.7520.94ascon80pqv12
21.0021.0021.34ascon128v12
33.1933.2033.24ascon128abi32v12
49.7449.7550.00ascon128bi32v12
55.5655.5656.09T:giftcofb128v1
56.3956.4256.66T:xoodyakround3
61.2061.2361.42T:schwaemm256128v2
81.0881.1081.46T:schwaemm192192v2
83.1083.1783.73T:schwaemm256256v2
81.6483.5987.17T:isapa128v20
81.8583.9484.20T:schwaemm128128v2
84.2384.3485.23T:isapa128av20
102.15103.81105.81T:aes256gcmv1
181.29181.50181.90T:grain128aeadv2
187.23187.70188.25romulusn
193.63195.68197.31T:isapk128av20
207.86208.11208.34T:tinyjambu128v2
262.07262.30262.69T:tinyjambu192v2
266.71?269.80?358.83?T:isapk128v20
271.37271.54271.92T:tinyjambu256v2
304.52305.26305.87romulusm
444.01444.32445.10T:elephant200v2
503.93504.14504.58T:isapxv20
601.53602.26603.24T!!!romulust
1376.881383.601385.69T:aes128gcmv1
43992.3144082.2344109.07T:elephant176v2
49661.4849702.1649780.25aes256gcmv1
-281324.55?277902.61?278033.19?T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
13.6613.9413.97ascon128av12
20.6220.6320.92ascon80pqv12
20.8820.8821.05ascon128v12
32.8232.8333.72ascon128abi32v12
49.2549.2650.13ascon128bi32v12
54.1654.1754.41T:xoodyakround3
55.3255.3255.88T:giftcofb128v1
61.1661.2161.44T:schwaemm256128v2
81.0881.1281.53T:schwaemm192192v2
81.7881.7982.23T:schwaemm256256v2
83.6183.9784.30T:schwaemm128128v2
84.2084.2985.18T:isapa128av20
81.1984.5387.15T:isapa128v20
102.09104.48108.22T:aes256gcmv1
181.98183.69190.06T:grain128aeadv2
187.52187.92188.98romulusn
193.55195.20197.16T:isapk128av20
208.58208.85209.59T:tinyjambu128v2
261.79262.04262.27T:tinyjambu192v2
265.67269.96282.60T:isapk128v20
270.52270.82271.33T:tinyjambu256v2
304.54305.69306.13romulusm
444.07444.32444.54T:elephant200v2
503.66504.13505.15T:isapxv20
601.35602.48604.28T!!!romulust
1381.971382.541383.12T:aes128gcmv1
43999.9944084.2044128.40T:elephant176v2
49666.1449709.7849796.55aes256gcmv1
-467726.25?277864.63?277970.62?T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
13.9413.9414.00ascon128av12
20.6220.6220.69ascon80pqv12
20.8720.8820.92ascon128v12
32.8232.8233.02ascon128abi32v12
40.5141.3843.50T:isapa128v20
49.2549.2549.95ascon128bi32v12
54.2854.3054.54T:xoodyakround3
55.3255.3255.87T:giftcofb128v1
56.7456.7557.02T:isapa128av20
61.1861.2261.44T:schwaemm256128v2
81.0981.1281.52T:schwaemm192192v2
81.7781.8182.32T:schwaemm256256v2
83.9383.9884.43T:schwaemm128128v2
95.99102.96106.30T:aes256gcmv1
124.40124.87126.87T:isapk128av20
166.46169.81172.81T:isapk128v20
181.89182.66188.93T:grain128aeadv2
187.19187.81188.52romulusn
207.69208.55209.41T!!!romulust
208.57208.75208.93T:tinyjambu128v2
261.60262.05262.19T:tinyjambu192v2
270.56270.83271.16T:tinyjambu256v2
275.05275.43275.86T:isapxv20
304.78305.76306.86romulusm
444.15444.38444.65T:elephant200v2
1332.261332.901334.92T:aes128gcmv1
1450.001454.901462.09aes256gcmv1
43986.8844080.0144114.12T:elephant176v2
-281198.42?277861.46?277973.91?T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
13.8013.8213.91ascon128av12
20.4420.8120.98ascon80pqv12
20.62?21.30?31.09?ascon128v12
32.2732.2932.84ascon128abi32v12
42.4242.4542.79T:xoodyakround3
48.6248.9949.61ascon128bi32v12
55.6455.8256.32T:giftcofb128v1
57.9058.7259.63T:aes256gcmv1
61.0161.0961.32T:schwaemm256128v2
61.1262.5864.31T:isapa128v20
70.4470.7271.11T:isapa128av20
80.8480.9281.17T:schwaemm192192v2
81.4781.6181.82T:schwaemm256256v2
83.6183.7483.92T:schwaemm128128v2
152.16152.50152.82romulusn
161.21162.28162.96T:isapk128av20
171.01171.12171.15T:tinyjambu128v2
180.41180.69180.86T:grain128aeadv2
198.67198.85198.90T:tinyjambu192v2
202.27202.50202.69T:tinyjambu256v2
211.20211.32211.49romulusm
211.93212.82214.51T:isapk128v20
332.22332.64332.83T:elephant200v2
389.32390.18391.38T:isapxv20
404.50405.24405.97T!!!romulust
1357.021358.371362.28T:aes128gcmv1
25555.9325582.0025624.54aes256gcmv1
32875.0832938.7132963.64T:elephant176v2
-350771.65?115226.58?208473.46?T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
13.7813.7813.80ascon128av12
20.6820.6920.87ascon80pqv12
20.55?21.10?29.97?ascon128v12
32.3232.3332.85ascon128abi32v12
41.2741.3041.54T:xoodyakround3
48.5648.6849.34ascon128bi32v12
55.5455.6956.19T:giftcofb128v1
57.3158.5759.66T:aes256gcmv1
61.0261.0761.30T:schwaemm256128v2
60.6363.7166.14T:isapa128v20
70.3870.5971.15T:isapa128av20
80.7880.8781.20T:schwaemm256256v2
80.8480.9781.24T:schwaemm192192v2
83.6483.7683.98T:schwaemm128128v2
152.32152.59152.98romulusn
160.58162.27162.50T:isapk128av20
171.37171.50171.57T:tinyjambu128v2
180.69182.32188.53T:grain128aeadv2
197.68197.84198.05T:tinyjambu192v2
201.75201.88202.03T:tinyjambu256v2
211.25211.39211.52romulusm
211.96213.11214.40T:isapk128v20
332.42332.80333.70T:elephant200v2
389.95390.26392.67T:isapxv20
404.33405.09405.19T!!!romulust
1357.261357.571359.78T:aes128gcmv1
25550.0025574.3825600.65aes256gcmv1
32872.1132931.1332957.24T:elephant176v2
-350124.55?208401.31?208498.00?T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
13.7813.7813.98ascon128av12
20.6920.6920.94ascon80pqv12
20.56?20.92?31.62?ascon128v12
32.3232.3232.75ascon128abi32v12
40.8641.0042.49T:isapa128v20
41.3441.3641.61T:xoodyakround3
48.5648.7449.28ascon128bi32v12
55.5455.6456.08T:giftcofb128v1
56.7456.8057.23T:isapa128av20
57.1258.5859.85T:aes256gcmv1
61.0261.0861.30T:schwaemm256128v2
80.7880.9281.18T:schwaemm256256v2
80.8481.0081.27T:schwaemm192192v2
83.6383.7483.94T:schwaemm128128v2
126.07127.50127.73T:isapk128av20
152.03152.55152.84romulusn
161.93163.53164.35T:isapk128v20
171.39171.51171.55T:tinyjambu128v2
180.69181.72188.74T:grain128aeadv2
197.67197.77197.85T:tinyjambu192v2
201.77201.94202.21T:tinyjambu256v2
208.03208.10208.35T!!!romulust
211.20211.39211.51romulusm
275.50275.84276.33T:isapxv20
332.26332.73333.69T:elephant200v2
1332.441332.781335.72T:aes128gcmv1
1453.441454.291455.58aes256gcmv1
32873.9432936.9332957.62T:elephant176v2
-350775.01?161801.24?208462.28?T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
12.9513.4214.22T:aes256gcmv1
13.6213.6313.63ascon128av12
20.2520.2520.30ascon128v12
20.8720.8821.05ascon80pqv12
28.4028.4128.59T:xoodyakround3
31.3831.3831.63ascon128abi32v12
40.1940.3841.95T:isapa128v20
47.3747.5048.16ascon128bi32v12
55.7555.7656.04T:giftcofb128v1
56.7556.7557.21T:isapa128av20
60.8460.8561.06T:schwaemm256128v2
79.7779.8180.08T:schwaemm256256v2
80.5580.6180.88T:schwaemm192192v2
83.3183.3383.59T:schwaemm128128v2
116.75116.78117.91romulusn
116.78116.88118.29romulusm
126.98127.53129.64T:isapk128av20
132.98133.30133.56T:tinyjambu256v2
134.00134.09134.38T:tinyjambu128v2
135.00135.33135.56T:tinyjambu192v2
155.09157.89160.06T:isapk128v20
179.69179.92180.22T:grain128aeadv2
207.04207.71208.30T!!!romulust
222.14222.53222.77T:elephant200v2
275.63276.26277.29T:isapxv20
1331.651332.751334.33T:aes128gcmv1
1452.701453.561458.54aes256gcmv1
21742.5221775.9821795.95T:elephant176v2
138888.50138939.26139018.09T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
12.67?13.47?14.64?T:aes256gcmv1
13.6213.6313.76ascon128av12
20.2520.2520.31ascon128v12
20.7520.7520.75ascon80pqv12
28.4028.4028.45T:xoodyakround3
31.8231.8231.89ascon128abi32v12
40.3640.3842.26T:isapa128v20
47.8747.8848.64ascon128bi32v12
55.7655.7756.63T:giftcofb128v1
56.7556.7557.08T:isapa128av20
60.8460.8561.02T:schwaemm256128v2
79.7479.7780.15T:schwaemm256256v2
80.5880.6180.89T:schwaemm192192v2
83.3183.3283.55T:schwaemm128128v2
116.74116.80117.98romulusn
116.77116.92118.02romulusm
126.97127.46129.37T:isapk128av20
132.75132.99133.31T:tinyjambu256v2
133.25133.69134.40T:tinyjambu192v2
134.02134.21134.57T:tinyjambu128v2
155.04158.73161.78T:isapk128v20
179.22180.07186.49T:grain128aeadv2
205.62207.93209.06T!!!romulust
222.20222.57222.88T:elephant200v2
275.70276.18276.52T:isapxv20
1332.491332.931333.57T:aes128gcmv1
1453.171454.641458.60aes256gcmv1
21732.2821774.6021800.07T:elephant176v2
45688.31?138930.82?138999.73?T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
10.63?13.43?15.67?T:aes256gcmv1
13.6313.6313.64ascon128av12
20.2520.2520.25ascon128v12
20.7520.7520.75ascon80pqv12
28.4028.4028.68T:xoodyakround3
31.8231.8232.04ascon128abi32v12
40.0440.3842.01T:isapa128v20
47.8747.8848.53ascon128bi32v12
55.7555.7656.27T:giftcofb128v1
56.7056.7557.05T:isapa128av20
60.8460.8561.03T:schwaemm256128v2
78.8679.7880.19T:schwaemm256256v2
80.5880.6180.92T:schwaemm192192v2
83.3183.3483.63T:schwaemm128128v2
116.76116.82118.44romulusn
116.79116.95118.30romulusm
126.80127.47130.15T:isapk128av20
132.76132.98133.32T:tinyjambu256v2
133.27133.57133.84T:tinyjambu192v2
134.00134.11134.45T:tinyjambu128v2
154.14158.00160.24T:isapk128v20
179.27180.25186.96T:grain128aeadv2
206.73207.58208.43T!!!romulust
222.11222.56222.87T:elephant200v2
275.88276.20277.06T:isapxv20
1332.281332.901333.61T:aes128gcmv1
1453.051454.641459.57aes256gcmv1
21736.4521773.5221791.75T:elephant176v2
138880.35138932.62139029.28T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
14.1514.1514.17ascon128av12
20.9420.9421.05ascon128v12
21.1321.1321.28ascon80pqv12
33.0433.0433.43ascon128abi32v12
42.9042.9143.18T:xoodyakround3
49.4049.4850.43ascon128bi32v12
56.3956.4657.10T:giftcofb128v1
62.7962.8163.05T:schwaemm256128v2
70.7071.2072.58T:aes256gcmv1
75.4675.7076.34T:isapa128av20
82.6282.6582.93T:schwaemm192192v2
83.46?83.82?116.32?T:schwaemm256256v2
84.7084.7785.04T:schwaemm128128v2
90.4191.7394.31T:isapa128v20
153.57153.85154.22romulusn
172.27172.45172.51T:tinyjambu128v2
181.31181.45181.91T:grain128aeadv2
200.14200.21200.40T:tinyjambu192v2
201.00202.14202.64T:isapk128av20
203.85203.98204.36T:tinyjambu256v2
212.42212.72213.10romulusm
339.59339.64339.98T:elephant200v2
390.48391.09392.39T:isapk128v20
410.85411.14412.31T!!!romulust
625.30625.33625.51T:isapxv20
1364.751365.461367.35T:aes128gcmv1
26067.6326088.7026125.83aes256gcmv1
33121.0633182.0233203.08T:elephant176v2
-255205.00?210747.47?210813.09?T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
14.1214.1214.14ascon128av12
20.8820.8821.02ascon128v12
21.0221.0221.12ascon80pqv12
33.0833.0833.54ascon128abi32v12
41.7841.7841.98T:xoodyakround3
49.3549.3650.27ascon128bi32v12
56.3156.3656.86T:giftcofb128v1
62.7962.8163.13T:schwaemm256128v2
75.4775.5376.29T:isapa128av20
76.0376.6678.28T:aes256gcmv1
82.6382.7183.04T:schwaemm192192v2
82.83?83.22?119.81?T:schwaemm256256v2
84.7184.7885.04T:schwaemm128128v2
90.3991.7393.85T:isapa128v20
153.58153.89154.19romulusn
172.69172.86172.94T:tinyjambu128v2
181.92186.91192.71T:grain128aeadv2
199.12199.25199.41T:tinyjambu192v2
200.84201.93202.67T:isapk128av20
203.26203.43203.66T:tinyjambu256v2
212.75213.27213.63romulusm
339.63339.70339.84T:elephant200v2
389.53390.63391.99T:isapk128v20
410.82411.07411.48T!!!romulust
625.30625.34625.70T:isapxv20
1365.011365.211367.46T:aes128gcmv1
26063.0126074.8926095.49aes256gcmv1
33112.2233185.6533204.53T:elephant176v2
-255218.35?210736.25?210815.27?T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
14.1214.1214.16ascon128av12
20.8820.8821.06ascon128v12
21.0221.0221.11ascon80pqv12
33.0833.0833.76ascon128abi32v12
41.8641.8642.08T:xoodyakround3
49.3549.4050.21ascon128bi32v12
55.4155.4256.96T:isapa128v20
56.3156.3756.97T:giftcofb128v1
59.5659.6060.17T:isapa128av20
62.7962.8063.04T:schwaemm256128v2
82.6382.7183.14T:schwaemm192192v2
82.83?83.22?120.14?T:schwaemm256256v2
84.7084.7685.10T:schwaemm128128v2
95.3096.2597.91T:aes256gcmv1
153.34153.90154.37romulusn
154.69154.94156.17T:isapk128av20
172.68172.86172.92T:tinyjambu128v2
181.94183.58189.02T:grain128aeadv2
199.06199.19199.36T:tinyjambu192v2
203.29203.41203.58T:tinyjambu256v2
212.60213.24213.33romulusm
213.50214.09214.52T!!!romulust
261.00262.26263.16T:isapk128v20
339.64339.70339.89T:elephant200v2
396.07396.18396.78T:isapxv20
1340.271340.531346.10T:aes128gcmv1
1963.461964.111968.73aes256gcmv1
33126.5133181.2733202.00T:elephant176v2
-313481.29?210748.41?210835.05?T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
21.8421.8421.95ascon128av12
27.9827.9828.12ascon128v12
28.2728.2728.44ascon80pqv12
50.2550.2652.33ascon128abi32v12
63.5963.6563.69T:xoodyakround3
66.9266.9267.32ascon128bi32v12
73.0373.0373.18T:giftcofb128v1
103.02103.02103.23T:schwaemm256128v2
109.32109.32109.55T:schwaemm128128v2
129.02129.02129.33T:schwaemm256256v2
134.52134.52134.61T:schwaemm192192v2
184.16184.17187.33romulusn
189.42189.42189.53T:isapa128av20
195.68195.68209.20T:grain128aeadv2
202.59202.59202.89T:tinyjambu128v2
232.55232.55233.69T:tinyjambu192v2
237.47237.47241.12T:tinyjambu256v2
244.62244.62247.83romulusm
351.09354.04366.72T:aes256gcmv1
480.79480.84482.74T:elephant200v2
548.09548.28551.00T!!!romulust
748.99757.85788.75T:isapa128v20
1082.531082.771098.05T:isapk128av20
1536.391537.571542.66T:aes128gcmv1
4415.984437.724449.88T:isapk128v20
5964.845968.625970.29T:isapxv20
37753.3937755.9337835.69aes256gcmv1
41265.5841300.0941337.61T:elephant176v2
282032.96282152.68282304.26T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
21.8021.8021.98ascon128av12
28.0128.0128.18ascon128v12
28.4128.4128.46ascon80pqv12
50.5250.5250.64ascon128abi32v12
62.1462.2062.24T:xoodyakround3
67.2067.2067.28ascon128bi32v12
73.9273.9274.12T:giftcofb128v1
103.04103.04103.04T:schwaemm256128v2
109.40109.40109.55T:schwaemm128128v2
129.44129.47129.76T:schwaemm256256v2
134.74134.78134.92T:schwaemm192192v2
184.33184.33184.74romulusn
189.63189.64192.37T:isapa128av20
196.87201.81207.84T:grain128aeadv2
203.31203.31204.19T:tinyjambu128v2
231.86231.86232.23T:tinyjambu192v2
236.99236.99237.26T:tinyjambu256v2
251.75251.75252.09romulusm
480.95481.02484.26T:elephant200v2
482.50485.98522.47T:aes256gcmv1
548.37548.47552.28T!!!romulust
751.25758.93795.27T:isapa128v20
1083.361083.581096.98T:isapk128av20
1537.121537.741545.38T:aes128gcmv1
4417.354433.924450.14T:isapk128v20
5966.855969.995972.17T:isapxv20
37748.0237751.1537839.49aes256gcmv1
41265.1841299.2241335.32T:elephant176v2
282022.78282106.26282307.53T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
21.8021.8021.80ascon128av12
28.0128.0128.02ascon128v12
28.4128.4128.41ascon80pqv12
50.5250.5250.52ascon128abi32v12
62.6462.7162.71T:xoodyakround3
67.2067.2067.20ascon128bi32v12
73.9273.9273.92T:giftcofb128v1
103.04103.04103.04T:schwaemm256128v2
109.40109.40109.47T:schwaemm128128v2
124.06124.06124.07T:isapa128av20
129.34129.38129.45T:schwaemm256256v2
134.74134.78134.79T:schwaemm192192v2
184.33184.33184.57romulusn
203.31203.31203.49T:tinyjambu128v2
196.46?204.36?233.77?T:grain128aeadv2
231.86231.86233.23T:tinyjambu192v2
236.99236.99237.46T:tinyjambu256v2
251.94251.94252.17romulusm
346.97346.97348.71T!!!romulust
389.46389.50389.98T:isapa128v20
481.07481.14482.24T:elephant200v2
787.83787.87792.05T:isapk128av20
951.77956.20977.74T:aes256gcmv1
1512.191514.681523.14T:aes128gcmv1
2484.532486.242514.48T:isapk128v20
3108.683112.773118.26T:isapxv20
13677.5913679.6013683.21aes256gcmv1
41269.8241301.1741369.91T:elephant176v2
282040.27282183.10282345.78T:elephant160v2