VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; K10 45nm (100f63); 2010 AMD Athlon II Neo K125; 1 x 1700MHz; h3neo, supercop-20260330

[Page version: 20260624 14:36:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
9.759.769.77ascon128av12
14.1214.1314.13ascon128v12
14.1214.1314.13ascon80pqv12
18.6518.6618.66ascon128abi32v12
27.3627.4027.52T:xoodyakround3
28.1428.1528.17ascon128bi32v12
35.6435.7035.74T:schwaemm256128v2
38.6938.8539.33T:aes256gcmv1
39.4239.7740.17T:aes128gcmv1
41.6841.7041.74T:giftcofb128v1
46.7747.0348.60T:schwaemm192192v2
48.4348.5048.65T:schwaemm128128v2
51.1351.2951.73T:schwaemm256256v2
57.9858.0158.11T:isapa128av20
59.4459.4659.51T:isapa128v20
61.1561.1761.24T:grain128aeadv2
79.0079.0079.11T:tinyjambu128v2
88.7588.7888.92T:romulusn
97.5097.5197.70T:tinyjambu192v2
101.00101.02101.24T:tinyjambu256v2
108.96109.12109.61T:isapk128av20
145.89146.40146.68T:isapk128v20
194.99195.22195.42romulusn
292.34292.84297.87T:elephant200v2
350.31353.48355.36T:isapxv20
371.90373.10376.93romulusm
805.83807.92815.45T!!!romulust
13382.0313382.3213382.77T:elephant176v2
15274.5015274.9415275.37T:elephant160v2
25231.7225241.6225248.75aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
9.699.709.70ascon128av12
14.1214.1214.13ascon80pqv12
14.1214.1314.13ascon128v12
18.6618.6718.67ascon128abi32v12
27.0827.2127.58T:xoodyakround3
28.0228.0228.05ascon128bi32v12
35.4835.5635.61T:schwaemm256128v2
38.4639.0339.64T:aes256gcmv1
39.3039.4839.74T:aes128gcmv1
41.6541.6741.73T:giftcofb128v1
46.9247.1948.70T:schwaemm192192v2
48.4848.5848.72T:schwaemm128128v2
51.1351.2551.75T:schwaemm256256v2
57.9958.0058.10T:isapa128av20
59.3259.4659.55T:isapa128v20
62.2562.2862.37T:grain128aeadv2
79.5079.5079.61T:tinyjambu128v2
89.2689.3889.48T:romulusn
97.7597.7697.92T:tinyjambu192v2
101.00101.01101.17T:tinyjambu256v2
108.95109.19109.53T:isapk128av20
145.73146.39146.72T:isapk128v20
194.79195.00195.26romulusn
292.34292.86297.92T:elephant200v2
351.36354.14355.29T:isapxv20
371.86373.38376.34romulusm
805.13807.12807.91T!!!romulust
13381.9913382.2513382.66T:elephant176v2
15274.6915275.1415275.49T:elephant160v2
25231.2625235.6625250.39aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
9.709.709.70ascon128av12
14.1214.1214.13ascon80pqv12
14.1214.1314.13ascon128v12
18.6618.6718.67ascon128abi32v12
27.2127.2827.54T:xoodyakround3
28.0128.0228.03ascon128bi32v12
28.9729.0029.04T:isapa128v20
35.4735.5635.60T:schwaemm256128v2
38.1038.8239.50T:aes256gcmv1
39.3739.4939.80T:aes128gcmv1
39.4939.5039.54T:isapa128av20
41.6541.6741.71T:giftcofb128v1
46.9147.1948.71T:schwaemm192192v2
48.4948.5848.72T:schwaemm128128v2
51.1351.2651.71T:schwaemm256256v2
62.2662.2862.37T:grain128aeadv2
69.7969.9070.17T:isapk128av20
79.5079.5079.61T:tinyjambu128v2
89.2389.3689.48T:romulusn
90.9891.2191.46T:isapk128v20
97.7597.7597.92T:tinyjambu192v2
101.00101.01101.17T:tinyjambu256v2
194.82195.12195.43romulusn
207.57209.64212.92T:isapxv20
254.80255.37255.62T!!!romulust
292.37292.86297.88T:elephant200v2
372.50373.56376.54romulusm
670.07671.27677.78aes256gcmv1
13381.9713382.2513382.65T:elephant176v2
15274.7415275.0415275.39T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
9.699.709.71ascon128av12
14.1914.1914.20ascon128v12
14.2514.2514.27ascon80pqv12
18.5618.5718.60ascon128abi32v12
21.1321.1821.42T:xoodyakround3
23.4923.6323.98T:aes256gcmv1
23.5223.6823.85T:aes128gcmv1
28.0728.0828.12ascon128bi32v12
35.3735.4335.46T:schwaemm256128v2
41.4541.4641.54T:giftcofb128v1
44.3344.3744.42T:isapa128v20
46.5846.8048.33T:schwaemm192192v2
48.3348.4548.56T:schwaemm128128v2
48.7448.7648.83T:isapa128av20
51.0451.1651.61T:schwaemm256256v2
61.0961.1161.20T:grain128aeadv2
64.1364.1564.22T:tinyjambu128v2
72.7572.7872.86T:tinyjambu192v2
74.7574.8074.87T:tinyjambu256v2
76.5276.5776.64T:romulusn
89.2589.4989.59T:isapk128av20
118.13118.24118.41T:isapk128v20
185.77185.97186.30romulusn
219.93220.26224.02T:elephant200v2
274.32275.40278.21romulusm
278.79281.14283.31T:isapxv20
529.43530.39535.40T!!!romulust
9996.439996.879997.22T:elephant176v2
11454.0111454.2911454.67T:elephant160v2
12950.7312952.4412962.87aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
9.639.639.64ascon128av12
14.1914.1914.20ascon128v12
14.1914.1914.19ascon80pqv12
18.5618.5718.58ascon128abi32v12
20.9220.9721.10T:xoodyakround3
23.4723.5123.73T:aes128gcmv1
23.3423.8124.05T:aes256gcmv1
28.0128.0228.06ascon128bi32v12
35.3035.3635.41T:schwaemm256128v2
41.4441.4641.53T:giftcofb128v1
44.3444.3744.45T:isapa128v20
46.6546.8848.41T:schwaemm192192v2
48.3648.4748.58T:schwaemm128128v2
48.7548.7548.83T:isapa128av20
51.0351.1651.60T:schwaemm256256v2
61.6461.6661.74T:grain128aeadv2
64.3764.4064.49T:tinyjambu128v2
73.2673.2973.36T:tinyjambu192v2
74.6274.6574.72T:tinyjambu256v2
76.9977.0777.15T:romulusn
89.2789.4789.59T:isapk128av20
118.01118.22118.38T:isapk128v20
185.55185.87185.97romulusn
219.92220.27224.01T:elephant200v2
274.66275.82278.82romulusm
279.58281.95282.92T:isapxv20
529.12529.86530.07T!!!romulust
9996.399996.829997.26T:elephant176v2
11454.0511454.3311454.64T:elephant160v2
12950.8612952.3612962.13aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
9.639.639.63ascon128av12
14.1914.1914.20ascon80pqv12
14.1914.1914.20ascon128v12
18.5718.5718.59ascon128abi32v12
20.9621.0321.08T:xoodyakround3
23.4723.5223.70T:aes128gcmv1
23.5323.7824.21T:aes256gcmv1
28.0128.0228.06ascon128bi32v12
29.1229.1329.19T:isapa128v20
35.3035.3635.41T:schwaemm256128v2
39.5039.5039.56T:isapa128av20
41.4441.4541.51T:giftcofb128v1
46.6646.8848.38T:schwaemm192192v2
48.3648.4748.59T:schwaemm128128v2
51.0151.1451.58T:schwaemm256256v2
61.6461.6661.74T:grain128aeadv2
64.3764.3964.49T:tinyjambu128v2
69.7369.9070.00T:isapk128av20
73.2673.2973.36T:tinyjambu192v2
74.6274.6774.72T:tinyjambu256v2
77.0177.0877.15T:romulusn
90.6090.7790.81T:isapk128v20
185.62185.94186.04romulusn
207.63209.56212.07T:isapxv20
219.92220.31224.04T:elephant200v2
254.10254.47254.60T!!!romulust
274.59275.74278.50romulusm
670.52677.78688.41aes256gcmv1
9996.419996.789997.19T:elephant176v2
11454.0111454.4511454.76T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
7.567.597.70T:aes128gcmv1
8.408.508.62T:aes256gcmv1
9.699.709.70ascon128av12
14.2514.2514.25ascon128v12
14.3714.3714.38ascon80pqv12
14.6614.8014.91T:xoodyakround3
18.4718.4718.48ascon128abi32v12
28.0028.0128.04ascon128bi32v12
29.2429.2529.33T:isapa128v20
35.0835.1635.19T:schwaemm256128v2
39.5039.5039.54T:isapa128av20
41.2241.2341.27T:giftcofb128v1
46.3546.5948.08T:schwaemm192192v2
48.0048.0048.11T:tinyjambu192v2
48.2448.3148.46T:schwaemm128128v2
48.5048.5048.57T:tinyjambu256v2
49.2549.2549.32T:tinyjambu128v2
50.8751.0251.45T:schwaemm256256v2
60.9961.0361.09T:grain128aeadv2
64.2564.2864.36T:romulusn
69.4869.6470.24T:isapk128av20
89.9790.2790.46T:isapk128v20
148.02148.44150.79T:elephant200v2
176.63176.85177.15romulusn
176.57178.38180.65romulusm
207.19209.68211.08T:isapxv20
254.03255.14258.42T!!!romulust
670.42671.62671.90aes256gcmv1
6611.436611.826612.39T:elephant176v2
7634.457634.837635.26T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
7.517.597.69T:aes128gcmv1
8.278.578.89T:aes256gcmv1
9.579.579.57ascon128av12
14.2514.2514.27ascon80pqv12
14.2514.2514.25ascon128v12
14.6614.8014.88T:xoodyakround3
18.4618.4618.47ascon128abi32v12
28.0028.0128.04ascon128bi32v12
29.2429.2529.29T:isapa128v20
35.0835.1635.18T:schwaemm256128v2
39.5039.5039.53T:isapa128av20
41.2241.2341.26T:giftcofb128v1
46.3346.5848.24T:schwaemm192192v2
48.2548.2548.31T:tinyjambu256v2
48.2448.3248.46T:schwaemm128128v2
48.7548.7548.81T:tinyjambu192v2
49.2549.2549.30T:tinyjambu128v2
50.8751.0251.49T:schwaemm256256v2
61.0061.0361.09T:grain128aeadv2
64.7564.7764.88T:romulusn
69.4769.6270.14T:isapk128av20
90.0090.2790.50T:isapk128v20
148.02148.49150.87T:elephant200v2
176.44176.77176.98romulusn
176.49178.71180.92romulusm
207.76209.83211.27T:isapxv20
254.27254.82255.31T!!!romulust
670.49671.59676.39aes256gcmv1
6611.396611.686612.26T:elephant176v2
7634.437634.677635.11T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
7.527.587.65T:aes128gcmv1
8.258.558.94T:aes256gcmv1
9.579.579.57ascon128av12
14.2514.2514.25ascon80pqv12
14.2514.2514.25ascon128v12
14.6614.8014.88T:xoodyakround3
18.4618.4718.47ascon128abi32v12
28.0028.0128.05ascon128bi32v12
29.2429.2529.30T:isapa128v20
35.0935.1635.18T:schwaemm256128v2
39.5039.5139.55T:isapa128av20
41.2241.2341.29T:giftcofb128v1
46.3346.6048.15T:schwaemm192192v2
48.2548.2548.29T:tinyjambu256v2
48.2448.3148.46T:schwaemm128128v2
48.7548.7548.82T:tinyjambu192v2
49.2549.2549.30T:tinyjambu128v2
50.8350.9651.48T:schwaemm256256v2
61.0161.0361.09T:grain128aeadv2
64.7564.7764.90T:romulusn
69.5069.5770.15T:isapk128av20
89.9890.2590.47T:isapk128v20
148.02148.48150.85T:elephant200v2
176.23176.71176.99romulusn
177.22178.75180.98romulusm
207.68209.57211.30T:isapxv20
254.33254.88255.34T!!!romulust
670.51671.64671.86aes256gcmv1
6611.386611.716612.32T:elephant176v2
7634.487634.777635.28T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
9.919.919.92ascon128av12
14.4014.4014.41ascon128v12
14.4614.4614.47ascon80pqv12
18.9718.9718.99ascon128abi32v12
21.4021.5021.63T:xoodyakround3
25.8425.9526.15T:aes128gcmv1
27.2427.3027.47T:aes256gcmv1
28.4628.4728.51ascon128bi32v12
36.4036.4636.48T:schwaemm256128v2
41.9341.9441.99T:giftcofb128v1
47.7547.8349.23T:schwaemm192192v2
48.9749.0449.17T:schwaemm128128v2
52.3352.3452.41T:isapa128av20
52.4252.5252.94T:schwaemm256256v2
61.5161.5361.62T:grain128aeadv2
64.2264.2364.31T:isapa128v20
64.6364.6464.73T:tinyjambu128v2
73.2973.3073.41T:tinyjambu192v2
75.3175.3375.42T:tinyjambu256v2
77.4377.4777.56T:romulusn
103.74103.95104.15T:isapk128av20
187.81188.01188.26romulusn
210.75210.80210.90T:isapk128v20
224.91224.94228.41T:elephant200v2
276.33277.35280.03romulusm
462.02462.86464.93T:isapxv20
537.51538.05544.04T!!!romulust
10072.6410072.9210073.17T:elephant176v2
11583.2311583.5111583.98T:elephant160v2
13210.2613210.6413219.68aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
9.859.859.86ascon128av12
14.4014.4114.42ascon80pqv12
14.4114.4114.43ascon128v12
18.9718.9718.98ascon128abi32v12
21.1921.2421.34T:xoodyakround3
25.7625.7725.93T:aes128gcmv1
28.4028.4128.45ascon128bi32v12
28.8429.0629.26T:aes256gcmv1
36.3336.4036.44T:schwaemm256128v2
41.9341.9441.99T:giftcofb128v1
47.8247.9149.31T:schwaemm192192v2
49.0049.0949.20T:schwaemm128128v2
52.3352.3352.42T:isapa128av20
52.4252.5152.93T:schwaemm256256v2
62.0762.0862.17T:grain128aeadv2
64.2264.2364.35T:isapa128v20
64.8864.8964.99T:tinyjambu128v2
73.7973.8073.90T:tinyjambu192v2
75.2175.2275.32T:tinyjambu256v2
77.9177.9878.06T:romulusn
103.82104.01104.17T:isapk128av20
187.57187.84187.99romulusn
210.76210.82210.95T:isapk128v20
224.91224.95228.46T:elephant200v2
277.45278.63281.19romulusm
462.28463.72464.15T:isapxv20
537.36538.01538.36T!!!romulust
10072.5510072.8210073.04T:elephant176v2
11583.2311583.5111583.88T:elephant160v2
13211.3913211.6813222.40aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
9.859.859.86ascon128av12
14.4014.4114.41ascon80pqv12
14.4114.4114.41ascon128v12
18.9718.9718.98ascon128abi32v12
21.3021.3621.47T:xoodyakround3
25.7625.7725.99T:aes128gcmv1
28.4028.4128.46ascon128bi32v12
36.3336.4036.43T:schwaemm256128v2
36.7136.8737.12T:aes256gcmv1
39.2339.2339.27T:isapa128v20
41.5341.5441.60T:isapa128av20
41.9341.9442.00T:giftcofb128v1
47.8147.9149.31T:schwaemm192192v2
49.0149.0949.20T:schwaemm128128v2
52.4252.5152.92T:schwaemm256256v2
62.0662.0762.14T:grain128aeadv2
64.8864.8965.00T:tinyjambu128v2
73.7973.8073.90T:tinyjambu192v2
75.2175.2275.33T:tinyjambu256v2
77.9077.9678.05T:romulusn
78.7078.8879.07T:isapk128av20
140.52140.65140.72T:isapk128v20
187.49187.80187.99romulusn
224.91224.94228.45T:elephant200v2
261.50261.85261.90T!!!romulust
277.32278.52281.17romulusm
301.12302.83304.93T:isapxv20
931.06936.98946.74aes256gcmv1
10072.5010072.8310073.11T:elephant176v2
11583.2611583.6011583.92T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
14.7914.7914.86ascon128av12
18.9718.9719.08ascon128v12
19.1119.1119.21ascon80pqv12
28.1828.2028.47ascon128abi32v12
31.8231.8832.08T:xoodyakround3
37.0937.1037.24ascon128bi32v12
52.7452.7752.87T:giftcofb128v1
59.7559.8759.91T:schwaemm256128v2
63.2163.2663.59T:schwaemm128128v2
70.9570.9571.01T:grain128aeadv2
76.2076.2176.67T:tinyjambu128v2
76.8777.2179.62T:schwaemm192192v2
79.0579.4679.79T:aes128gcmv1
83.4183.7284.24T:schwaemm256256v2
85.6485.6485.71T:tinyjambu192v2
88.2088.2088.51T:tinyjambu256v2
98.6698.7699.04T:romulusn
110.57111.42113.65T:aes256gcmv1
134.45134.63134.89T:isapa128av20
231.98232.19232.37romulusn
318.96319.82324.33T:elephant200v2
322.47324.24327.16romulusm
418.58418.70419.69T:isapk128av20
520.78520.85521.82T:isapa128v20
727.07729.11735.66T!!!romulust
2312.452314.332317.93T:isapk128v20
4593.354596.894625.63T:isapxv20
12541.6112541.9512542.61T:elephant176v2
15508.7115511.1115512.45T:elephant160v2
19175.1219176.2819178.85aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
14.8614.8715.03ascon128av12
19.1219.1219.22ascon80pqv12
19.1619.1619.27ascon128v12
28.2828.2828.45ascon128abi32v12
31.7331.7931.93T:xoodyakround3
37.1137.1137.21ascon128bi32v12
52.9552.9552.98T:giftcofb128v1
59.9760.0660.09T:schwaemm256128v2
63.4263.5363.84T:schwaemm128128v2
71.4071.4071.42T:grain128aeadv2
76.5776.5776.57T:tinyjambu128v2
76.9477.0879.58T:schwaemm192192v2
77.4877.9478.65T:aes128gcmv1
83.6483.8784.48T:schwaemm256256v2
86.1086.1186.25T:tinyjambu192v2
88.8088.8088.81T:tinyjambu256v2
98.8598.8898.98T:romulusn
134.51134.52134.62T:isapa128av20
147.31148.51153.18T:aes256gcmv1
232.74232.90233.14romulusn
319.18319.92324.59T:elephant200v2
342.55344.65348.34romulusm
419.49420.02421.07T:isapk128av20
520.78520.83521.28T:isapa128v20
727.31727.53729.22T!!!romulust
2312.512313.742320.69T:isapk128v20
4592.544598.744617.06T:isapxv20
12541.5712542.0112542.81T:elephant176v2
15509.1215511.3515514.28T:elephant160v2
19176.8819179.4219193.79aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
14.8614.8714.87ascon128av12
19.1219.1219.13ascon80pqv12
19.1619.1619.17ascon128v12
28.2828.2828.30ascon128abi32v12
31.8431.8932.09T:xoodyakround3
37.1137.1137.12ascon128bi32v12
52.9552.9652.99T:giftcofb128v1
59.8359.9360.02T:schwaemm256128v2
63.4463.4663.83T:schwaemm128128v2
71.4071.4071.40T:grain128aeadv2
76.5776.5776.57T:tinyjambu128v2
76.9577.0279.44T:schwaemm192192v2
77.8978.4179.39T:aes128gcmv1
83.6283.7484.32T:schwaemm256256v2
86.1086.1086.12T:tinyjambu192v2
88.2488.2888.31T:isapa128av20
88.8088.8188.85T:tinyjambu256v2
98.5998.6298.74T:romulusn
232.62232.81233.11romulusn
271.23271.28271.62T:isapa128v20
271.59271.77271.86T:isapk128av20
319.18319.85324.56T:elephant200v2
335.73338.14344.38T:aes256gcmv1
342.55344.49348.52romulusm
431.21431.48431.84T!!!romulust
1267.741268.231270.19T:isapk128v20
2403.552406.232408.92T:isapxv20
6896.096897.316912.17aes256gcmv1
12541.5912542.2912543.51T:elephant176v2
15508.7815510.6215512.15T:elephant160v2