VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Bonnell (106ca); 2011 Intel Atom N435; 1 x 1330MHz; h4atom, supercop-20250922

[Page version: 20251128 09:22:21]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
13.9614.0114.01ascon128av12
19.6320.9321.01ascon80pqv12
20.9921.0021.01ascon128v12
32.8533.3634.39T:aes128gcmv1
34.1534.2034.22ascon128abi32v12
38.5539.3240.38T:aes256gcmv1
49.8549.8949.92ascon128bi32v12
55.0955.1455.20T:giftcofb128v1
56.7256.7756.92T:xoodyakround3
59.5759.5959.65T:schwaemm256128v2
78.9278.9679.03T:schwaemm192192v2
82.3982.5387.42T:isapa128v20
83.1783.2183.25T:schwaemm128128v2
84.2384.2684.38T:isapa128av20
85.2885.3385.41T:schwaemm256256v2
177.59177.74178.33T:romulusn
181.40181.59182.26T:grain128aeadv2
192.04192.08192.64romulusn
201.17201.59207.69T:isapk128av20
207.71207.88208.38T:tinyjambu128v2
260.02260.08260.84T:tinyjambu192v2
263.49267.03270.62T:isapk128v20
276.01276.07277.14T:tinyjambu256v2
311.40311.48313.03romulusm
397.30398.21399.02T:elephant200v2
526.06527.10533.22T:isapxv20
572.40572.56574.37T!!!romulust
41734.7041743.4141779.09T:elephant160v2
45197.9945402.0645455.78T:elephant176v2
53725.2553753.1153806.45aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
13.9213.9513.95ascon128av12
20.8520.8820.89ascon80pqv12
20.8620.8820.89ascon128v12
33.0733.4834.32T:aes128gcmv1
33.6933.7133.75ascon128abi32v12
38.3639.2140.10T:aes256gcmv1
49.6249.6549.70ascon128bi32v12
53.2753.3353.43T:xoodyakround3
54.8554.9155.64T:giftcofb128v1
59.5959.6159.63T:schwaemm256128v2
78.9278.9879.01T:schwaemm192192v2
82.1282.5182.94T:isapa128v20
83.1683.2083.22T:schwaemm128128v2
84.2384.2684.40T:isapa128av20
89.4389.4889.54T:schwaemm256256v2
176.66176.81177.44T:romulusn
182.29182.34183.06T:grain128aeadv2
192.19192.21192.78romulusn
201.33202.18203.91T:isapk128av20
208.49208.53208.64T:tinyjambu128v2
261.50261.54262.28T:tinyjambu192v2
263.80266.52269.41T:isapk128v20
275.73275.80277.24T:tinyjambu256v2
311.50311.64313.63romulusm
397.74398.29399.18T:elephant200v2
524.82526.33533.45T:isapxv20
572.41573.31574.57T!!!romulust
41732.2041741.0541786.25T:elephant160v2
45182.0545406.3745467.15T:elephant176v2
53752.0153818.1253850.14aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
13.9413.9513.96ascon128av12
20.8720.8820.88ascon80pqv12
20.8720.8820.88ascon128v12
33.2533.5335.19T:aes128gcmv1
33.6933.7133.72ascon128abi32v12
38.9739.4341.35T:aes256gcmv1
41.3641.3941.44T:isapa128v20
49.6349.6550.56ascon128bi32v12
53.3653.4553.55T:xoodyakround3
54.8654.8954.92T:giftcofb128v1
56.7456.7556.85T:isapa128av20
59.5859.6059.62T:schwaemm256128v2
78.9478.9879.06T:schwaemm192192v2
83.1883.2183.24T:schwaemm128128v2
89.4389.4589.50T:schwaemm256256v2
132.03134.85135.58T:isapk128av20
170.25170.69172.69T:isapk128v20
176.63176.68176.77T:romulusn
182.29182.32182.37T:grain128aeadv2
192.20192.22192.79romulusn
198.49198.57198.77T!!!romulust
208.50208.51208.57T:tinyjambu128v2
261.50261.54261.94T:tinyjambu192v2
275.74275.77276.42T:tinyjambu256v2
289.47290.30291.13T:isapxv20
311.53311.63313.32romulusm
397.77398.67399.15T:elephant200v2
1455.811461.841465.51aes256gcmv1
41732.5241741.6441788.89T:elephant160v2
45186.6945400.7445453.22T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
13.8013.8213.86ascon128av12
20.6120.6320.67ascon128v12
20.7420.7520.80ascon80pqv12
24.8125.2826.19T:aes128gcmv1
27.7528.1229.38T:aes256gcmv1
33.4133.4633.49ascon128abi32v12
42.3142.3442.39T:xoodyakround3
49.2549.2649.30ascon128bi32v12
55.2155.2455.28T:giftcofb128v1
59.4159.4359.61T:schwaemm256128v2
61.26?63.62?148.38?T:isapa128v20
70.4770.5070.84T:isapa128av20
78.6978.7178.75T:schwaemm192192v2
82.8882.9683.11T:schwaemm128128v2
85.3885.4385.69T:schwaemm256256v2
152.00152.06152.57T:romulusn
155.68155.75156.36romulusn
162.87162.96165.46T:isapk128av20
170.86170.92171.19T:tinyjambu128v2
180.50180.62181.07T:grain128aeadv2
198.62198.85198.95T:tinyjambu192v2
205.10205.15205.59T:tinyjambu256v2
208.12209.44210.66T:isapk128v20
215.39215.52216.15romulusm
299.01299.36299.75T:elephant200v2
385.08386.16386.56T!!!romulust
408.41409.21409.69T:isapxv20
27615.7327640.7927681.16aes256gcmv1
31291.7531298.5631324.15T:elephant160v2
33759.1433919.0733949.95T:elephant176v2
Cycles/byte for long+long decrypt
25%50%75%aead
13.7513.7913.84ascon128av12
20.5520.5720.64ascon128v12
20.7220.7520.81ascon80pqv12
24.8525.1825.56T:aes128gcmv1
27.7628.0828.38T:aes256gcmv1
33.1533.1833.21ascon128abi32v12
40.7040.7540.84T:xoodyakround3
49.1649.2049.26ascon128bi32v12
55.0855.1455.23T:giftcofb128v1
59.4059.4259.47T:schwaemm256128v2
59.54?61.50?66.23?T:isapa128v20
70.4670.5070.57T:isapa128av20
78.6678.7378.85T:schwaemm192192v2
82.8882.9082.93T:schwaemm128128v2
87.4187.4787.53T:schwaemm256256v2
151.54151.66152.03T:romulusn
155.71155.85156.51romulusn
162.88163.31165.03T:isapk128av20
171.20171.34171.62T:tinyjambu128v2
180.99181.28181.59T:grain128aeadv2
197.92198.07198.62T:tinyjambu192v2
204.96205.06205.37T:tinyjambu256v2
208.08209.44211.66T:isapk128v20
215.38215.56216.98romulusm
298.98299.32299.67T:elephant200v2
385.19385.78386.60T!!!romulust
408.49409.09410.24T:isapxv20
27599.7627627.5327654.68aes256gcmv1
31294.5431302.1231323.77T:elephant160v2
33784.5133917.3633955.04T:elephant176v2
Cycles/byte for long+long forgery
25%50%75%aead
13.7913.7913.79ascon128av12
20.5620.5620.59ascon128v12
20.7420.7520.78ascon80pqv12
25.0725.2926.50T:aes128gcmv1
27.6828.0828.32T:aes256gcmv1
33.1733.1733.30ascon128abi32v12
40.7840.8140.87T:xoodyakround3
40.8440.8840.94T:isapa128v20
49.1949.1949.21ascon128bi32v12
55.1155.1255.30T:giftcofb128v1
56.7456.7757.06T:isapa128av20
59.4159.4359.45T:schwaemm256128v2
78.6978.7178.75T:schwaemm192192v2
82.8782.8882.91T:schwaemm128128v2
87.4187.4787.50T:schwaemm256256v2
129.90130.00130.43T:isapk128av20
151.55151.61151.95T:romulusn
155.77155.82156.72romulusn
159.27161.57163.38T:isapk128v20
171.24171.26171.62T:tinyjambu128v2
181.02181.05181.60T:grain128aeadv2
198.00198.02198.42T:tinyjambu192v2
198.10198.21199.22T!!!romulust
205.00205.02205.53T:tinyjambu256v2
215.45215.52216.74romulusm
290.52290.96291.22T:isapxv20
298.79299.31300.51T:elephant200v2
1455.391461.181463.02aes256gcmv1
31296.6231310.1931330.47T:elephant160v2
33741.7833926.5933958.11T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
13.6013.6313.64ascon128av12
16.2916.7717.47T:aes128gcmv1
16.1816.8417.86T:aes256gcmv1
20.2420.2520.26ascon128v12
20.4920.5020.52ascon80pqv12
28.1628.1928.27T:xoodyakround3
32.6632.7032.72ascon128abi32v12
40.3340.4140.45T:isapa128v20
48.5948.6248.63ascon128bi32v12
55.2955.3355.41T:giftcofb128v1
56.7356.7756.92T:isapa128av20
59.1459.2559.33T:schwaemm256128v2
78.4278.4678.52T:schwaemm192192v2
82.5582.5983.02T:schwaemm128128v2
85.3385.4385.47T:schwaemm256256v2
119.26119.35119.42romulusn
119.32119.39119.47romulusm
124.36124.45124.61T:isapk128av20
126.45126.50126.59T:romulusn
133.97134.02134.14T:tinyjambu128v2
134.25134.31134.95T:tinyjambu256v2
137.26137.30137.75T:tinyjambu192v2
152.08152.26154.66T:isapk128v20
179.38179.87180.47T:grain128aeadv2
197.69197.82199.52T!!!romulust
201.03201.60202.27T:elephant200v2
290.83291.08292.12T:isapxv20
1454.891456.191458.60aes256gcmv1
20848.8920863.4020892.99T:elephant160v2
22322.7622426.9722461.47T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
13.6013.6313.63ascon128av12
16.4916.7417.36T:aes128gcmv1
16.5217.3418.13T:aes256gcmv1
20.2420.2520.29ascon128v12
20.6120.6220.63ascon80pqv12
28.1528.1828.20T:xoodyakround3
32.6032.6432.65ascon128abi32v12
40.3340.3840.40T:isapa128v20
48.7048.7550.83ascon128bi32v12
55.3355.3555.39T:giftcofb128v1
56.7356.7656.91T:isapa128av20
59.2559.2759.35T:schwaemm256128v2
78.4178.4678.53T:schwaemm192192v2
82.5382.5782.60T:schwaemm128128v2
85.4185.4485.46T:schwaemm256256v2
119.29119.39121.11romulusn
119.37119.39119.47romulusm
124.39124.42124.50T:isapk128av20
126.45126.51126.63T:romulusn
133.99134.01134.07T:tinyjambu128v2
134.24134.26134.31T:tinyjambu256v2
134.50134.52134.85T:tinyjambu192v2
152.07152.16152.70T:isapk128v20
179.68179.78180.09T:grain128aeadv2
197.65197.85200.75T!!!romulust
201.02201.88202.17T:elephant200v2
290.90291.09291.90T:isapxv20
1456.301457.471459.73aes256gcmv1
20855.2920863.2220880.65T:elephant160v2
22339.1622427.2922447.25T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
13.6313.6313.63ascon128av12
16.5616.8017.35T:aes128gcmv1
16.6416.9517.68T:aes256gcmv1
20.2520.2520.25ascon128v12
20.6220.6320.63ascon80pqv12
28.1328.1628.20T:xoodyakround3
32.6332.6432.65ascon128abi32v12
40.3340.3840.40T:isapa128v20
48.7448.7548.76ascon128bi32v12
55.3255.3455.55T:giftcofb128v1
56.5356.7556.86T:isapa128av20
59.2359.2659.29T:schwaemm256128v2
78.4378.4678.52T:schwaemm192192v2
82.5582.5882.63T:schwaemm128128v2
85.4185.4585.53T:schwaemm256256v2
119.32119.33119.38romulusn
119.31119.40119.59romulusm
124.36124.43124.56T:isapk128av20
126.50126.62127.58T:romulusn
134.00134.02134.06T:tinyjambu128v2
134.24134.27134.90T:tinyjambu256v2
134.46134.50134.53T:tinyjambu192v2
151.71152.20152.86T:isapk128v20
179.73179.78180.07T:grain128aeadv2
197.66197.79199.68T!!!romulust
201.03201.52201.95T:elephant200v2
290.90291.09292.03T:isapxv20
1456.511457.441462.78aes256gcmv1
20858.0220865.1620890.69T:elephant160v2
22330.4022425.9322447.47T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
14.1614.1614.21ascon128av12
20.9420.9520.97ascon128v12
21.0821.0821.11ascon80pqv12
33.4133.4734.08T:aes128gcmv1
34.3134.3234.37ascon128abi32v12
36.7536.7937.44T:aes256gcmv1
42.8342.8542.86T:xoodyakround3
50.0350.0551.31ascon128bi32v12
55.9655.9756.01T:giftcofb128v1
61.1561.1761.66T:schwaemm256128v2
75.4775.4875.83T:isapa128av20
80.4580.4680.50T:schwaemm192192v2
83.9683.9784.07T:schwaemm128128v2
87.6187.6387.85T:schwaemm256256v2
90.0990.1092.55T:isapa128v20
153.80153.87154.24T:romulusn
157.08157.10158.26romulusn
172.23172.23172.31T:tinyjambu128v2
181.27181.38181.83T:grain128aeadv2
200.04200.09200.78T:tinyjambu192v2
203.22203.29204.94T:isapk128av20
206.63206.65207.58T:tinyjambu256v2
216.93217.61218.72romulusm
305.19305.89306.41T:elephant200v2
386.01386.65389.05T:isapk128v20
390.95391.16392.78T!!!romulust
655.45655.60656.89T:isapxv20
28149.9928164.8728197.05aes256gcmv1
31656.8531674.9731689.31T:elephant160v2
34034.1834177.0934196.59T:elephant176v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
14.1314.1314.18ascon128av12
20.8920.8920.91ascon128v12
21.0821.0921.15ascon80pqv12
33.7033.8534.18T:aes128gcmv1
34.0334.0434.10ascon128abi32v12
36.9236.9937.54T:aes256gcmv1
41.2741.2841.32T:xoodyakround3
49.9849.9950.04ascon128bi32v12
55.9055.9256.00T:giftcofb128v1
61.1461.1561.17T:schwaemm256128v2
75.4775.4875.58T:isapa128av20
80.4680.4880.71T:schwaemm192192v2
83.9783.9884.44T:schwaemm128128v2
89.6389.6689.71T:schwaemm256256v2
90.2990.3690.42T:isapa128v20
153.41153.45153.92T:romulusn
157.16157.20157.69romulusn
172.62172.74173.27T:tinyjambu128v2
181.72181.74182.20T:grain128aeadv2
199.46199.49200.00T:tinyjambu192v2
203.20203.62205.61T:isapk128av20
206.51206.61207.13T:tinyjambu256v2
217.24217.39219.68romulusm
305.28306.06306.75T:elephant200v2
386.05386.55388.98T:isapk128v20
391.08391.62393.23T!!!romulust
655.24655.55655.85T:isapxv20
28179.5228197.3628211.16aes256gcmv1
31652.0231654.7131665.38T:elephant160v2
34030.8134172.4434175.14T:elephant176v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
14.1314.1314.14ascon128av12
20.8820.8920.89ascon128v12
21.0821.0921.42ascon80pqv12
33.6933.7434.03T:aes128gcmv1
34.0334.0334.04ascon128abi32v12
36.8536.9037.32T:aes256gcmv1
41.3541.3741.42T:xoodyakround3
49.9849.9850.85ascon128bi32v12
55.4155.4255.49T:isapa128v20
55.8955.9055.93T:giftcofb128v1
59.5559.5659.60T:isapa128av20
61.1461.1661.65T:schwaemm256128v2
80.4480.4780.50T:schwaemm192192v2
83.9683.9783.98T:schwaemm128128v2
89.6489.6689.66T:schwaemm256256v2
153.40153.42153.93T:romulusn
157.16157.17157.64romulusn
158.93159.32160.74T:isapk128av20
172.61172.65173.23T:tinyjambu128v2
181.74181.75181.97T:grain128aeadv2
199.46199.47199.90T:tinyjambu192v2
203.75203.79204.69T!!!romulust
206.51206.55207.00T:tinyjambu256v2
217.24217.47220.55romulusm
259.43259.47262.11T:isapk128v20
305.22306.06307.37T:elephant200v2
416.84416.99417.32T:isapxv20
2009.082009.442010.65aes256gcmv1
31651.4431653.3931672.24T:elephant160v2
34041.7134172.3834176.81T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
21.9721.9722.95ascon128av12
28.1128.1128.92ascon128v12
28.4528.4529.39ascon80pqv12
54.0954.1454.54ascon128abi32v12
63.2063.3665.05T:xoodyakround3
67.6867.7368.48ascon128bi32v12
72.5372.5473.41T:giftcofb128v1
100.38100.59100.86T:schwaemm256128v2
108.70108.77108.91T:schwaemm128128v2
131.25131.29132.19T:schwaemm192192v2
138.40138.50138.95T:schwaemm256256v2
188.71188.77190.05romulusn
189.74189.82191.55T:isapa128av20
194.48194.64195.55T:romulusn
196.15196.26196.94T:grain128aeadv2
203.26203.27204.27T:tinyjambu128v2
224.36225.55234.38T:aes128gcmv1
232.53232.61232.98T:tinyjambu192v2
241.09241.15241.64T:tinyjambu256v2
240.80241.54250.78T:aes256gcmv1
250.45250.45251.73romulusm
433.48435.72438.12T:elephant200v2
524.69524.76527.13T!!!romulust
748.41750.85752.61T:isapa128v20
1097.351098.051099.90T:isapk128av20
4410.054410.904464.52T:isapk128v20
6255.856259.436263.26T:isapxv20
40822.4440832.3240860.07aes256gcmv1
42370.5842426.9942460.27T:elephant160v2
42531.9542545.9342612.76T:elephant176v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
21.9321.9322.69ascon128av12
28.1328.1328.99ascon128v12
28.5028.5129.34ascon80pqv12
53.7753.8354.47ascon128abi32v12
61.2761.4161.71T:xoodyakround3
67.8567.9168.62ascon128bi32v12
73.5273.5274.36T:giftcofb128v1
100.60100.66100.78T:schwaemm256128v2
108.73108.80108.88T:schwaemm128128v2
131.28131.43132.20T:schwaemm192192v2
139.87139.95140.57T:schwaemm256256v2
189.18189.20190.05romulusn
189.63189.70190.07T:isapa128av20
195.16195.31195.89T:romulusn
196.70196.88197.78T:grain128aeadv2
203.85203.85204.31T:tinyjambu128v2
227.47228.50233.50T:aes128gcmv1
232.98233.06233.78T:tinyjambu192v2
241.30241.32241.91T:tinyjambu256v2
244.27244.80252.22T:aes256gcmv1
257.50257.55258.66romulusm
433.66434.04438.22T:elephant200v2
524.93525.02525.80T!!!romulust
752.61754.45755.12T:isapa128v20
1098.121098.731133.12T:isapk128av20
4408.874410.154446.64T:isapk128v20
6256.276257.296270.92T:isapxv20
40826.3140827.8440854.72aes256gcmv1
42417.0242433.9942498.56T:elephant160v2
42375.6542541.2542550.03T:elephant176v2
Cycles/byte for 64+64 forgery
25%50%75%aead
21.9321.9321.98ascon128av12
28.1328.1328.24ascon128v12
28.5028.5028.93ascon80pqv12
53.7753.8253.87ascon128abi32v12
62.1162.2262.34T:xoodyakround3
67.8367.8867.94ascon128bi32v12
73.5073.6073.72T:giftcofb128v1
100.52100.62100.85T:schwaemm256128v2
108.91108.92109.01T:schwaemm128128v2
124.08124.10124.27T:isapa128av20
131.21131.38131.48T:schwaemm192192v2
139.89139.96140.13T:schwaemm256256v2
189.18189.19189.24romulusn
194.56194.67194.78T:romulusn
196.76196.88197.68T:grain128aeadv2
203.80203.81204.29T:tinyjambu128v2
226.74227.27230.15T:aes128gcmv1
233.03233.05233.08T:tinyjambu192v2
241.35241.37241.38T:tinyjambu256v2
242.16243.02248.20T:aes256gcmv1
257.47257.48257.84romulusm
332.53332.59333.35T!!!romulust
389.39389.48389.98T:isapa128v20
433.65434.52437.96T:elephant200v2
805.97806.17806.46T:isapk128av20
2484.452485.802501.90T:isapk128v20
3264.183264.533267.94T:isapxv20
14697.8114706.0114712.68aes256gcmv1
42376.6742428.7042485.20T:elephant160v2
42405.5542543.0542555.91T:elephant176v2