VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; K10 45nm (100f63); 2010 AMD Athlon II Neo K125; 1 x 1700MHz; h3neo, supercop-20251222

[Page version: 20260319 20:29:39]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
9.469.509.52ascon128av12
13.9113.9213.95ascon128v12
14.0314.0414.06ascon80pqv12
18.6318.6618.71ascon128abi32v12
26.7626.7926.88T:xoodyakround3
28.1228.1528.34ascon128bi32v12
35.4335.4835.57T:schwaemm256128v2
39.0739.4940.24T:aes128gcmv1
42.9743.9645.07T:aes256gcmv1
45.5545.5745.69T:giftcofb128v1
47.0847.1547.27T:schwaemm192192v2
50.7850.9251.05T:schwaemm256256v2
52.1452.1952.46T:schwaemm128128v2
55.7655.8856.09T:isapa128v20
59.6059.6659.74T:isapa128av20
68.6468.6768.82T:grain128aeadv2
80.4080.4180.42T:tinyjambu128v2
92.4692.4992.73T:romulusn
100.03100.04100.08T:tinyjambu192v2
108.17108.19108.23T:tinyjambu256v2
108.69108.93109.35T:isapk128av20
150.98151.38151.80T:isapk128v20
195.33195.65195.95romulusn
238.93241.07241.26T:elephant200v2
333.93334.48336.78T:isapxv20
371.40371.67372.03romulusm
807.29808.51810.22T!!!romulust
15665.9215666.3515667.02T:elephant160v2
15961.0615989.6115995.50T:elephant176v2
25355.7725378.4925395.56aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
9.499.529.54ascon128av12
13.8713.8713.88ascon80pqv12
14.1214.1314.16ascon128v12
18.6218.6618.71ascon128abi32v12
26.3326.3526.43T:xoodyakround3
28.0128.0228.06ascon128bi32v12
35.5335.5635.64T:schwaemm256128v2
38.9539.4240.15T:aes128gcmv1
43.2344.0044.87T:aes256gcmv1
45.3045.3145.36T:giftcofb128v1
47.1847.2247.34T:schwaemm192192v2
50.7450.8451.05T:schwaemm256256v2
52.1852.2952.40T:schwaemm128128v2
55.7355.8856.03T:isapa128v20
59.5859.6359.67T:isapa128av20
69.8169.8269.84T:grain128aeadv2
80.7580.7580.76T:tinyjambu128v2
91.7491.8391.97T:romulusn
100.25100.25100.28T:tinyjambu192v2
107.74107.75107.79T:tinyjambu256v2
108.62109.01109.54T:isapk128av20
151.03151.38151.87T:isapk128v20
195.10195.49195.70romulusn
238.82241.03241.17T:elephant200v2
333.21336.11337.33T:isapxv20
371.54371.90372.03romulusm
806.88807.74816.43T!!!romulust
15666.0815666.6715670.25T:elephant160v2
15992.0815993.3515996.51T:elephant176v2
25353.6025362.6425385.69aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
9.539.539.54ascon128av12
13.8713.8813.88ascon80pqv12
14.1214.1314.15ascon128v12
18.6618.6618.68ascon128abi32v12
26.4726.4826.56T:xoodyakround3
27.4127.5027.59T:isapa128v20
28.0128.0228.06ascon128bi32v12
35.5335.5635.59T:schwaemm256128v2
39.2839.3839.96T:aes128gcmv1
39.4739.5039.59T:isapa128av20
42.6743.7744.79T:aes256gcmv1
45.3245.3345.36T:giftcofb128v1
47.1747.2247.34T:schwaemm192192v2
50.7450.8451.05T:schwaemm256256v2
52.1852.2952.36T:schwaemm128128v2
69.8169.8269.88T:grain128aeadv2
72.0672.2572.62T:isapk128av20
80.7580.7680.77T:tinyjambu128v2
91.7491.7791.98T:romulusn
98.7198.8699.08T:isapk128v20
100.25100.25100.27T:tinyjambu192v2
107.75107.75107.79T:tinyjambu256v2
195.10195.43195.65romulusn
200.43200.85203.57T:isapxv20
238.85241.03241.22T:elephant200v2
254.95255.60258.54T!!!romulust
371.74371.89372.09romulusm
678.85679.17679.37aes256gcmv1
15666.2515667.7915670.27T:elephant160v2
15990.3215992.2815994.57T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
9.219.259.28ascon128av12
14.0214.0214.04ascon80pqv12
14.0114.0214.05ascon128v12
18.5518.5618.65ascon128abi32v12
20.6120.6620.74T:xoodyakround3
23.2323.5323.88T:aes128gcmv1
25.5725.9126.25T:aes256gcmv1
28.0628.0828.17ascon128bi32v12
35.3735.4235.49T:schwaemm256128v2
41.5641.6341.79T:isapa128v20
45.4445.4545.49T:giftcofb128v1
47.0247.1147.18T:schwaemm192192v2
49.5549.5749.63T:isapa128av20
50.6450.7450.90T:schwaemm256256v2
52.0452.1252.22T:schwaemm128128v2
65.8565.8565.88T:tinyjambu128v2
68.2868.3168.41T:grain128aeadv2
78.4378.4478.46T:tinyjambu192v2
79.7779.8479.96T:romulusn
81.4381.4681.49T:tinyjambu256v2
90.5090.5890.71T:isapk128av20
118.33118.52118.71T:isapk128v20
178.83180.41180.54T:elephant200v2
186.00186.39187.43romulusn
267.36267.52267.66T:isapxv20
273.50273.77273.90romulusm
529.94531.22533.08T!!!romulust
11748.9011749.2211751.64T:elephant160v2
11935.6811948.0611948.75T:elephant176v2
13017.8013023.8713031.96aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
9.249.269.29ascon128av12
14.1214.1314.16ascon128v12
14.1214.1314.18ascon80pqv12
18.5418.5718.60ascon128abi32v12
20.3520.3920.45T:xoodyakround3
23.3223.4723.79T:aes128gcmv1
25.4925.9926.38T:aes256gcmv1
28.0128.0128.10ascon128bi32v12
35.4035.4435.55T:schwaemm256128v2
41.5441.6341.79T:isapa128v20
45.3145.3245.36T:giftcofb128v1
47.0447.1047.22T:schwaemm192192v2
49.5449.5649.63T:isapa128av20
50.6450.7550.92T:schwaemm256256v2
52.0352.1052.22T:schwaemm128128v2
66.0066.0366.03T:tinyjambu128v2
68.6368.6768.71T:grain128aeadv2
78.5478.5478.58T:tinyjambu192v2
79.4379.5079.61T:romulusn
81.2381.2581.27T:tinyjambu256v2
90.4990.6190.74T:isapk128av20
118.34118.47118.76T:isapk128v20
178.78180.40180.54T:elephant200v2
186.23186.65187.42romulusn
266.94267.67268.42T:isapxv20
273.85274.03274.15romulusm
529.12529.81535.40T!!!romulust
11748.9311750.5411752.49T:elephant160v2
11936.5611948.1511950.66T:elephant176v2
13015.5113020.0413028.16aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
9.269.269.28ascon128av12
14.1214.1214.14ascon80pqv12
14.1314.1314.19ascon128v12
18.5618.5718.63ascon128abi32v12
20.4320.4620.54T:xoodyakround3
23.4223.4923.88T:aes128gcmv1
25.1325.5526.21T:aes256gcmv1
27.3827.4427.52T:isapa128v20
28.0128.0128.06ascon128bi32v12
35.4235.4535.50T:schwaemm256128v2
39.4839.5039.54T:isapa128av20
45.3245.3345.37T:giftcofb128v1
47.0447.1447.24T:schwaemm192192v2
50.6350.7250.91T:schwaemm256256v2
52.0452.1252.22T:schwaemm128128v2
66.0366.0466.05T:tinyjambu128v2
68.6768.6768.74T:grain128aeadv2
72.2072.2572.37T:isapk128av20
78.5478.5478.56T:tinyjambu192v2
79.4479.5379.65T:romulusn
81.2481.2581.27T:tinyjambu256v2
92.0892.1992.32T:isapk128v20
178.78180.39180.55T:elephant200v2
186.16186.61187.07romulusn
200.80200.88201.05T:isapxv20
254.09254.81257.54T!!!romulust
273.84273.96274.16romulusm
678.90679.10679.20aes256gcmv1
11748.8111749.2711750.53T:elephant160v2
11943.5911948.8211950.93T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
7.157.587.68T:aes128gcmv1
7.37?8.07?8.72?T:aes256gcmv1
8.968.979.01ascon128av12
13.9914.0014.00ascon80pqv12
14.1214.1214.15ascon128v12
14.3014.3614.41T:xoodyakround3
18.4518.4618.51ascon128abi32v12
27.2427.3727.46T:isapa128v20
27.9928.0128.15ascon128bi32v12
35.2635.3035.37T:schwaemm256128v2
39.4939.5139.58T:isapa128av20
45.3145.3445.37T:giftcofb128v1
46.9547.0447.15T:schwaemm192192v2
50.4950.6050.80T:schwaemm256256v2
51.3151.3251.34T:tinyjambu128v2
51.8851.9252.09T:schwaemm128128v2
54.7354.7554.77T:tinyjambu256v2
56.8456.8456.87T:tinyjambu192v2
67.0667.1767.46T:romulusn
67.9568.0268.05T:grain128aeadv2
72.0672.2572.70T:isapk128av20
85.4085.5585.83T:isapk128v20
119.82120.82120.89T:elephant200v2
175.77176.17176.70romulusm
176.72177.68178.96romulusn
200.29200.75200.88T:isapxv20
254.33255.25256.85T!!!romulust
678.83679.08679.29aes256gcmv1
7832.847833.437835.96T:elephant160v2
7902.447905.257906.99T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
7.487.597.88T:aes128gcmv1
7.50?8.05?8.63?T:aes256gcmv1
8.968.989.00ascon128av12
14.1114.1214.13ascon128v12
14.2814.3214.35T:xoodyakround3
14.3714.3814.38ascon80pqv12
18.4418.4718.53ascon128abi32v12
27.2827.3827.52T:isapa128v20
28.0028.0128.09ascon128bi32v12
35.2735.3035.37T:schwaemm256128v2
39.4739.5039.57T:isapa128av20
45.3245.3345.41T:giftcofb128v1
46.9447.0147.16T:schwaemm192192v2
50.4750.5850.80T:schwaemm256256v2
51.3051.3251.33T:tinyjambu128v2
51.8851.9652.08T:schwaemm128128v2
54.7354.7554.77T:tinyjambu256v2
56.8356.8456.85T:tinyjambu192v2
67.1067.1867.54T:romulusn
67.4567.5267.55T:grain128aeadv2
72.0672.2572.58T:isapk128av20
85.3385.5385.95T:isapk128v20
119.95120.82120.90T:elephant200v2
176.06176.38176.83romulusm
176.62177.23179.17romulusn
200.72200.91201.21T:isapxv20
253.75254.89258.33T!!!romulust
678.80679.05679.26aes256gcmv1
7832.957833.547835.28T:elephant160v2
7896.677906.047907.79T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
7.487.588.10T:aes128gcmv1
7.08?8.04?9.01?T:aes256gcmv1
8.998.998.99ascon128av12
14.1214.1314.13ascon128v12
14.2814.3214.34T:xoodyakround3
14.3714.3814.38ascon80pqv12
18.4618.4718.61ascon128abi32v12
27.2727.3827.51T:isapa128v20
28.0028.0128.07ascon128bi32v12
35.2735.3035.37T:schwaemm256128v2
39.4739.5039.58T:isapa128av20
45.3145.3345.36T:giftcofb128v1
46.9547.0147.18T:schwaemm192192v2
50.4750.5850.80T:schwaemm256256v2
51.3051.3251.35T:tinyjambu128v2
51.8851.9152.08T:schwaemm128128v2
54.7454.7554.79T:tinyjambu256v2
56.8456.8456.85T:tinyjambu192v2
67.1067.1867.36T:romulusn
67.5167.5267.65T:grain128aeadv2
72.0772.2572.93T:isapk128av20
85.4085.5385.89T:isapk128v20
119.90120.82120.90T:elephant200v2
176.18176.43176.93romulusm
176.67177.74178.49romulusn
200.76200.92201.24T:isapxv20
254.21255.39258.20T!!!romulust
678.80679.12679.30aes256gcmv1
7832.827833.227834.60T:elephant160v2
7891.367906.067907.94T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
9.469.479.51ascon128av12
14.2314.2314.26ascon128v12
14.2314.2414.32ascon80pqv12
18.9718.9819.10ascon128abi32v12
20.7820.8120.90T:xoodyakround3
25.8125.9126.26T:aes128gcmv1
28.4628.4728.56ascon128bi32v12
29.5429.7831.46T:aes256gcmv1
36.4136.4436.52T:schwaemm256128v2
45.9345.9345.96T:giftcofb128v1
48.1048.1348.21T:schwaemm192192v2
52.0352.1052.25T:schwaemm256256v2
52.7652.7952.88T:schwaemm128128v2
53.3753.3753.44T:isapa128av20
60.5860.5860.70T:isapa128v20
66.3966.3966.40T:tinyjambu128v2
68.7468.7568.84T:grain128aeadv2
79.0479.0579.08T:tinyjambu192v2
80.7980.8380.98T:romulusn
82.0982.1082.15T:tinyjambu256v2
106.45106.48106.62T:isapk128av20
182.76184.19184.25T:elephant200v2
188.26188.66188.99romulusn
206.38206.41206.67T:isapk128v20
275.67275.83276.09romulusm
440.68440.82441.98T:isapxv20
538.43538.76540.94T!!!romulust
11880.7711881.5511883.71T:elephant160v2
12023.9212039.3312040.11T:elephant176v2
13278.2013285.6913318.03aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
9.489.489.49ascon128av12
14.3514.3514.40ascon128v12
14.3514.3514.38ascon80pqv12
18.9718.9719.04ascon128abi32v12
20.5620.6120.73T:xoodyakround3
25.8525.9226.31T:aes128gcmv1
28.4028.4128.46ascon128bi32v12
30.9331.2431.89T:aes256gcmv1
36.4536.4836.52T:schwaemm256128v2
45.8245.8245.87T:giftcofb128v1
48.1048.1548.24T:schwaemm192192v2
51.9952.1052.25T:schwaemm256256v2
52.7252.8052.90T:schwaemm128128v2
53.3853.3953.44T:isapa128av20
60.5860.5960.69T:isapa128v20
66.5466.5666.57T:tinyjambu128v2
69.1069.1069.18T:grain128aeadv2
79.1679.1779.19T:tinyjambu192v2
80.4480.5280.68T:romulusn
81.8681.8781.91T:tinyjambu256v2
106.50106.57106.69T:isapk128av20
182.73184.17184.21T:elephant200v2
187.97188.34188.93romulusn
206.36206.40206.59T:isapk128v20
276.81276.87277.16romulusm
441.25441.43443.25T:isapxv20
537.95538.33543.69T!!!romulust
11880.6611881.2011883.50T:elephant160v2
12030.5912039.7412040.32T:elephant176v2
13278.4913285.0113302.49aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
9.489.489.48ascon128av12
14.3414.3414.36ascon80pqv12
14.3414.3514.37ascon128v12
18.9718.9718.99ascon128abi32v12
20.6320.6720.75T:xoodyakround3
25.8525.8826.11T:aes128gcmv1
28.4028.4128.46ascon128bi32v12
36.4536.4836.51T:schwaemm256128v2
37.0837.0837.17T:isapa128v20
38.8439.0239.60T:aes256gcmv1
41.6541.6641.73T:isapa128av20
45.8245.8245.87T:giftcofb128v1
48.1148.1548.25T:schwaemm192192v2
52.0252.0952.26T:schwaemm256256v2
52.7152.7652.88T:schwaemm128128v2
66.5566.5566.56T:tinyjambu128v2
69.1069.1069.14T:grain128aeadv2
79.1679.1779.19T:tinyjambu192v2
80.4180.4680.57T:romulusn
81.8681.8781.88T:tinyjambu256v2
82.7282.7382.86T:isapk128av20
139.70139.73139.85T:isapk128v20
182.71184.17184.21T:elephant200v2
187.96188.35188.92romulusn
261.64262.23264.69T!!!romulust
276.75276.82277.02romulusm
289.84289.99291.23T:isapxv20
939.76939.80939.89aes256gcmv1
11880.6311881.5911883.69T:elephant160v2
12022.8312038.5312039.90T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
14.3814.4515.08ascon128av12
18.7218.8819.61ascon128v12
18.8518.9119.59ascon80pqv12
28.1728.3029.04ascon128abi32v12
31.3131.3831.77T:xoodyakround3
37.1137.2337.96ascon128bi32v12
56.7556.7957.32T:giftcofb128v1
59.8159.8760.15T:schwaemm256128v2
68.2268.2768.47T:schwaemm128128v2
77.7177.8878.24T:schwaemm192192v2
78.4078.4578.50T:grain128aeadv2
78.6378.7978.99T:tinyjambu128v2
78.8279.1481.34T:aes128gcmv1
82.5282.7883.09T:schwaemm256256v2
93.1593.1793.38T:tinyjambu192v2
96.5096.5596.98T:tinyjambu256v2
103.76103.87104.14T:romulusn
114.28114.82125.62T:aes256gcmv1
140.61140.68142.03T:isapa128av20
232.74233.30236.20romulusn
259.25260.27261.34T:elephant200v2
321.24321.53324.43romulusm
452.52453.14455.81T:isapk128av20
496.17496.21498.46T:isapa128v20
726.73729.32733.11T!!!romulust
2205.612205.802209.45T:isapk128v20
4374.254375.264378.50T:isapxv20
15011.5915014.5115015.55T:elephant176v2
15884.9215886.3015889.64T:elephant160v2
19276.9119280.0619293.01aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
14.4114.5515.11ascon128av12
19.1019.2119.78ascon128v12
19.1319.2219.82ascon80pqv12
28.2328.3528.88ascon128abi32v12
31.0831.1631.41T:xoodyakround3
37.1237.3437.89ascon128bi32v12
57.1657.1857.69T:giftcofb128v1
59.7559.8159.84T:schwaemm256128v2
68.1268.1768.23T:schwaemm128128v2
77.4177.5777.89T:schwaemm192192v2
78.5878.6978.91T:tinyjambu128v2
78.6978.7278.87T:grain128aeadv2
80.2981.0482.45T:aes128gcmv1
82.5082.7382.98T:schwaemm256256v2
93.5193.5593.67T:tinyjambu192v2
96.2296.2696.42T:tinyjambu256v2
103.16103.20103.34T:romulusn
141.31141.34142.01T:isapa128av20
148.90149.53161.59T:aes256gcmv1
232.85233.54236.47romulusn
259.08260.29261.91T:elephant200v2
341.94342.15344.43romulusm
453.64454.70457.24T:isapk128av20
496.25496.32497.99T:isapa128v20
726.76729.83736.02T!!!romulust
2205.452205.772212.68T:isapk128v20
4382.614385.504404.93T:isapxv20
15012.0915016.1315026.26T:elephant176v2
15884.8515886.4015890.11T:elephant160v2
19274.0319281.3519295.17aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
14.4114.4514.48ascon128av12
19.0819.1019.18ascon128v12
19.1219.1319.15ascon80pqv12
28.2428.2828.65ascon128abi32v12
31.2331.3431.56T:xoodyakround3
37.1237.1737.28ascon128bi32v12
57.1657.1857.20T:giftcofb128v1
59.7559.8159.85T:schwaemm256128v2
68.1268.1768.23T:schwaemm128128v2
77.4077.4877.80T:schwaemm192192v2
78.5678.6478.74T:tinyjambu128v2
78.6978.7178.74T:grain128aeadv2
80.0780.8381.52T:aes128gcmv1
82.4482.6983.19T:schwaemm256256v2
91.1891.2591.83T:isapa128av20
93.4993.5393.55T:tinyjambu192v2
96.2196.2496.27T:tinyjambu256v2
103.04103.17103.29T:romulusn
232.84233.67234.77romulusn
258.49258.61260.28T:isapa128v20
259.31260.29261.08T:elephant200v2
308.19308.37309.49T:isapk128av20
341.68341.93342.73romulusm
345.14349.37359.00T:aes256gcmv1
430.61433.10436.27T!!!romulust
1214.031214.371215.63T:isapk128v20
2296.992298.102299.22T:isapxv20
6935.396938.556941.48aes256gcmv1
14984.7115014.0815016.90T:elephant176v2
15884.9415886.3315889.60T:elephant160v2