VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Bobcat (500f20); 2011 AMD E-450; 2 x 1650MHz; h4e450, supercop-20260330

[Page version: 20260805 22:02:36]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
13.3113.3213.32ascon128av12
19.8719.8819.90ascon80pqv12
19.8719.8819.89ascon128v12
27.3127.3227.33ascon128abi32v12
39.0039.0139.05ascon128bi32v12
41.7541.7741.80T:schwaemm256128v2
45.2945.4645.48T:xoodyakround3
54.3054.3254.37T:giftcofb128v1
55.2055.2355.30T:schwaemm192192v2
57.3658.2958.58T:aes256gcmv1
58.5058.5358.58T:schwaemm128128v2
61.0961.1061.11T:schwaemm256256v2
77.4977.5177.74T:isapa128v20
78.9979.0179.04T:isapa128av20
93.0093.0493.05T:grain128aeadv2
109.75109.75109.77T:tinyjambu128v2
116.41116.45116.52romulusn
135.12135.13135.26T:tinyjambu192v2
143.99144.01144.29T:tinyjambu256v2
156.28156.34156.54T:isapk128av20
192.32192.34192.52romulusm
207.36207.61208.20T:isapk128v20
318.68318.89319.44T:elephant200v2
393.97394.49394.81T!!!romulust
546.11547.69551.84T:isapxv20
779.77780.30781.29T:aes128gcmv1
18066.8918075.1818083.30T:elephant160v2
18843.0818859.1818862.41T:elephant176v2
37677.0837680.9537683.86aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
13.2813.2913.29ascon128av12
19.8119.8219.83ascon80pqv12
19.8719.8819.89ascon128v12
26.1826.1926.20ascon128abi32v12
39.1239.1339.14ascon128bi32v12
41.9141.9341.93T:schwaemm256128v2
42.0042.0042.03T:xoodyakround3
54.3754.3954.40T:giftcofb128v1
55.2355.2455.34T:schwaemm192192v2
57.2458.2058.57T:aes256gcmv1
58.4958.5158.57T:schwaemm128128v2
61.0961.1061.17T:schwaemm256256v2
77.4277.5277.81T:isapa128v20
78.9979.0179.03T:isapa128av20
99.6399.6599.67T:grain128aeadv2
109.75109.75109.78T:tinyjambu128v2
116.36116.39116.50romulusn
135.00135.00135.21T:tinyjambu192v2
144.00144.00144.33T:tinyjambu256v2
156.31156.35156.51T:isapk128av20
192.26192.28192.50romulusm
207.38207.60208.32T:isapk128v20
318.70319.01320.23T:elephant200v2
394.03394.37394.67T!!!romulust
545.04547.71554.18T:isapxv20
779.93780.35781.23T:aes128gcmv1
18066.3618076.3018083.72T:elephant160v2
18842.7218858.4318859.42T:elephant176v2
37677.3637681.8837686.22aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
13.2813.2813.29ascon128av12
19.8219.8219.82ascon80pqv12
19.8719.8819.88ascon128v12
26.1926.2026.20ascon128abi32v12
38.8738.8838.92T:isapa128v20
39.1239.1339.18ascon128bi32v12
41.9141.9241.93T:schwaemm256128v2
42.2142.2242.23T:xoodyakround3
53.2453.2553.26T:isapa128av20
54.3754.3954.40T:giftcofb128v1
55.1455.2355.30T:schwaemm192192v2
57.3758.2758.94T:aes256gcmv1
58.4958.5158.57T:schwaemm128128v2
61.0961.1061.21T:schwaemm256256v2
99.6399.6699.69T:grain128aeadv2
103.69103.72103.80T:isapk128av20
109.75109.75109.79T:tinyjambu128v2
116.36116.40116.47romulusn
129.49129.55129.83T:isapk128v20
134.99135.01135.24T:tinyjambu192v2
137.31137.50137.89T!!!romulust
144.00144.01144.10T:tinyjambu256v2
192.26192.32192.54romulusm
300.79301.80302.54T:isapxv20
318.50319.05321.39T:elephant200v2
745.77746.17746.56T:aes128gcmv1
745.38746.46752.98aes256gcmv1
18065.7118067.7718080.72T:elephant160v2
18839.8118848.3618860.36T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
13.1813.1913.20ascon128av12
19.8019.8119.83ascon80pqv12
19.8119.8219.83ascon128v12
26.7027.0827.26ascon128abi32v12
33.9133.9133.93T:xoodyakround3
34.0534.5834.91T:aes256gcmv1
38.8038.8238.85ascon128bi32v12
41.5641.5841.61T:schwaemm256128v2
53.9653.9754.00T:giftcofb128v1
55.0055.0155.02T:schwaemm192192v2
58.1158.1358.42T:isapa128v20
58.2558.3258.40T:schwaemm128128v2
60.7760.8560.91T:schwaemm256256v2
66.1166.1366.16T:isapa128av20
88.7488.7588.81T:tinyjambu128v2
91.7691.8692.06T:grain128aeadv2
96.1396.1596.28romulusn
105.30105.32105.42T:tinyjambu192v2
108.12108.13108.32T:tinyjambu256v2
129.98130.03130.24T:isapk128av20
134.06134.10134.31romulusm
168.46168.62169.06T:isapk128v20
238.52238.67238.94T:elephant200v2
265.33265.60266.09T!!!romulust
423.79426.13427.80T:isapxv20
763.31763.55763.75T:aes128gcmv1
13549.0213553.9413561.73T:elephant160v2
14090.2814092.4114125.83T:elephant176v2
19212.3219214.3719216.37aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
13.2013.2113.21ascon128av12
19.8019.8119.82ascon128v12
19.9019.9119.92ascon80pqv12
26.1626.1626.17ascon128abi32v12
32.1732.1832.21T:xoodyakround3
34.2134.6135.06T:aes256gcmv1
39.0439.0639.10ascon128bi32v12
41.6541.6641.67T:schwaemm256128v2
53.9854.0054.03T:giftcofb128v1
55.0155.0255.03T:schwaemm192192v2
58.1358.1458.38T:isapa128v20
58.2258.2458.29T:schwaemm128128v2
60.8160.8460.89T:schwaemm256256v2
66.1266.1466.20T:isapa128av20
88.8788.8988.95T:tinyjambu128v2
95.3095.3395.40T:grain128aeadv2
96.1196.1296.23romulusn
105.49105.51105.59T:tinyjambu192v2
108.11108.13108.21T:tinyjambu256v2
130.00130.02130.23T:isapk128av20
134.02134.06134.26romulusm
168.43168.58169.06T:isapk128v20
238.52238.68238.92T:elephant200v2
265.31265.63265.94T!!!romulust
424.64426.27427.64T:isapxv20
762.78763.39763.73T:aes128gcmv1
13548.9813551.7413561.51T:elephant160v2
14089.9114090.7014121.55T:elephant176v2
19211.8419214.5519219.90aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
13.2013.2113.22ascon128av12
19.8219.8219.83ascon128v12
19.9119.9119.92ascon80pqv12
26.1626.1726.17ascon128abi32v12
32.2832.2932.31T:xoodyakround3
34.1134.8335.17T:aes256gcmv1
38.8138.8238.86T:isapa128v20
39.0739.0739.12ascon128bi32v12
41.6141.6641.67T:schwaemm256128v2
53.2453.2553.27T:isapa128av20
53.9954.0154.05T:giftcofb128v1
54.9555.0255.44T:schwaemm192192v2
58.2558.3058.36T:schwaemm128128v2
60.8260.8460.89T:schwaemm256256v2
88.8788.8888.93T:tinyjambu128v2
95.3395.3495.47T:grain128aeadv2
96.1096.1396.20romulusn
103.69103.70103.79T:isapk128av20
105.50105.50105.58T:tinyjambu192v2
108.12108.13108.20T:tinyjambu256v2
129.52129.54129.84T:isapk128v20
134.04134.07134.27romulusm
136.96137.21137.48T!!!romulust
238.53238.69238.96T:elephant200v2
300.99301.62302.25T:isapxv20
745.86746.44746.76T:aes128gcmv1
745.92746.75752.82aes256gcmv1
13548.6413550.8813560.04T:elephant160v2
14089.2914090.1214090.75T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
10.5410.8411.30T:aes256gcmv1
13.0613.0713.07ascon128av12
19.7419.7519.76ascon80pqv12
19.7419.7519.76ascon128v12
22.3522.3522.36T:xoodyakround3
26.0826.8227.00ascon128abi32v12
38.6238.6238.64ascon128bi32v12
38.7438.7638.92T:isapa128v20
41.2541.2641.32T:schwaemm256128v2
53.2453.2553.32T:isapa128av20
53.6053.6153.67T:giftcofb128v1
54.6554.7254.72T:schwaemm192192v2
57.9558.0258.08T:schwaemm128128v2
60.5560.5660.60T:schwaemm256256v2
67.7567.7567.75T:tinyjambu128v2
72.2472.2572.26T:tinyjambu256v2
75.5075.5075.51T:tinyjambu192v2
75.7975.8175.87romulusm
75.8175.8575.91romulusn
90.9891.0291.06T:grain128aeadv2
103.63103.69103.74T:isapk128av20
129.47129.52129.81T:isapk128v20
136.62136.80137.38T!!!romulust
159.79159.81160.03T:elephant200v2
300.85301.74302.38T:isapxv20
745.33746.52747.01aes256gcmv1
746.24746.55746.83T:aes128gcmv1
9032.079033.199037.05T:elephant160v2
9321.029322.429325.78T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
10.6610.9811.34T:aes256gcmv1
13.1213.1313.13ascon128av12
19.7419.7519.77ascon128v12
19.9920.0020.01ascon80pqv12
22.3422.3622.38T:xoodyakround3
26.1226.1426.14ascon128abi32v12
38.7438.7638.94T:isapa128v20
38.9939.0139.01ascon128bi32v12
41.2541.2841.32T:schwaemm256128v2
53.2453.2553.27T:isapa128av20
53.6053.6253.66T:giftcofb128v1
54.6454.7254.73T:schwaemm192192v2
57.9658.0058.08T:schwaemm128128v2
60.5560.5660.61T:schwaemm256256v2
67.9968.0068.01T:tinyjambu128v2
72.2572.2572.25T:tinyjambu256v2
75.5075.5075.51T:tinyjambu192v2
75.8075.8175.86romulusm
75.8275.8576.06romulusn
90.9891.0391.07T:grain128aeadv2
103.64103.69103.81T:isapk128av20
129.49129.53129.70T:isapk128v20
136.63136.82137.24T!!!romulust
159.80159.81159.90T:elephant200v2
300.77301.73302.49T:isapxv20
745.95746.46747.03T:aes128gcmv1
745.49746.50753.21aes256gcmv1
9031.719033.479041.85T:elephant160v2
9320.939321.529324.13T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
10.4410.8811.21T:aes256gcmv1
13.1213.1313.14ascon128av12
19.7519.7619.76ascon128v12
20.0020.0120.01ascon80pqv12
22.3422.3522.37T:xoodyakround3
26.1226.1426.14ascon128abi32v12
38.7538.7538.76T:isapa128v20
39.0039.0139.02ascon128bi32v12
41.2541.2841.33T:schwaemm256128v2
53.2453.2553.26T:isapa128av20
53.6053.6353.63T:giftcofb128v1
54.6454.7254.73T:schwaemm192192v2
57.9558.0058.00T:schwaemm128128v2
60.5360.5560.57T:schwaemm256256v2
68.0068.0068.01T:tinyjambu128v2
72.2572.2572.25T:tinyjambu256v2
75.4975.5075.51T:tinyjambu192v2
75.8075.8275.87romulusm
75.8175.8675.89romulusn
91.0291.0391.06T:grain128aeadv2
103.67103.69103.71T:isapk128av20
129.47129.53129.80T:isapk128v20
136.61136.75137.20T!!!romulust
159.80159.82159.90T:elephant200v2
300.80301.87302.46T:isapxv20
745.37746.38753.31aes256gcmv1
746.07746.50746.87T:aes128gcmv1
9031.879033.849042.28T:elephant160v2
9320.999321.589322.59T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
13.5013.5013.51ascon128av12
20.1020.1020.11ascon128v12
20.1020.1120.11ascon80pqv12
27.3627.6727.81ascon128abi32v12
34.2534.2534.26T:xoodyakround3
39.4439.4439.48ascon128bi32v12
42.7542.7742.80T:schwaemm256128v2
42.7543.1843.47T:aes256gcmv1
54.5954.6054.61T:giftcofb128v1
56.1856.2456.24T:schwaemm192192v2
59.0059.0259.12T:schwaemm128128v2
62.4762.4862.50T:schwaemm256256v2
70.5170.5170.55T:isapa128av20
84.8884.8985.11T:isapa128v20
89.4489.4589.61T:tinyjambu128v2
92.3892.3892.42T:grain128aeadv2
97.0397.0597.15romulusn
106.10106.10106.12T:tinyjambu192v2
108.93108.93109.04T:tinyjambu256v2
134.98135.00135.30romulusm
155.64155.67155.88T:isapk128av20
243.57243.72244.15T:elephant200v2
269.39269.75270.16T!!!romulust
307.29307.33307.79T:isapk128v20
688.86690.01691.10T:isapxv20
767.58767.87768.01T:aes128gcmv1
13703.8413708.7613714.02T:elephant160v2
14197.3114198.4014200.28T:elephant176v2
19600.8619602.7819604.05aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
13.5113.5213.52ascon128av12
20.1020.1020.12ascon128v12
20.2020.2020.20ascon80pqv12
26.7526.7526.75ascon128abi32v12
32.5532.5532.57T:xoodyakround3
39.6939.7239.73ascon128bi32v12
42.8342.8642.89T:schwaemm256128v2
47.0247.3247.61T:aes256gcmv1
54.6354.6454.65T:giftcofb128v1
56.2056.2556.25T:schwaemm192192v2
59.0359.0859.15T:schwaemm128128v2
62.4962.5162.55T:schwaemm256256v2
70.5170.5270.53T:isapa128av20
84.8984.9085.10T:isapa128v20
89.5789.5989.64T:tinyjambu128v2
95.9295.9296.01T:grain128aeadv2
97.0497.0697.18romulusn
106.29106.30106.33T:tinyjambu192v2
108.95108.96109.05T:tinyjambu256v2
135.18135.21135.37romulusm
155.65155.66155.83T:isapk128av20
243.57243.72244.34T:elephant200v2
269.38269.65269.87T!!!romulust
307.33307.34307.76T:isapk128v20
688.91689.78692.13T:isapxv20
767.03767.62767.87T:aes128gcmv1
13703.6113711.7913714.87T:elephant160v2
14197.1414197.7214198.39T:elephant176v2
19600.3519603.1919607.97aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
13.5113.5113.52ascon128av12
20.1120.1120.11ascon128v12
20.2020.2020.20ascon80pqv12
26.7526.7526.75ascon128abi32v12
32.6632.6732.68T:xoodyakround3
39.6939.6939.69ascon128bi32v12
42.8342.8542.88T:schwaemm256128v2
52.3952.3952.54T:isapa128v20
54.6354.6454.66T:giftcofb128v1
55.7355.7455.76T:isapa128av20
56.1956.2556.25T:schwaemm192192v2
59.0359.0859.14T:schwaemm128128v2
59.8960.3960.69T:aes256gcmv1
62.4962.5162.55T:schwaemm256256v2
89.5889.5889.67T:tinyjambu128v2
95.9295.9295.97T:grain128aeadv2
97.0497.0597.10romulusn
106.29106.29106.41T:tinyjambu192v2
108.94108.94109.04T:tinyjambu256v2
121.42121.43121.49T:isapk128av20
135.17135.21135.38romulusm
140.85141.05141.33T!!!romulust
204.14204.15204.44T:isapk128v20
243.57243.73244.48T:elephant200v2
436.81437.25437.64T:isapxv20
750.24750.70750.90T:aes128gcmv1
1134.761135.331140.97aes256gcmv1
13702.2813703.2413709.35T:elephant160v2
14197.4314198.1014199.28T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
20.5720.8321.09ascon128av12
26.5326.5526.81ascon128v12
26.6226.6326.83ascon80pqv12
40.7941.0141.21ascon128abi32v12
50.5450.5850.83T:xoodyakround3
53.5953.7654.08ascon128bi32v12
68.9169.2369.61T:giftcofb128v1
70.8870.9071.25T:schwaemm256128v2
76.7876.8376.92T:schwaemm128128v2
91.9091.9092.05T:schwaemm192192v2
100.29100.38100.69T:schwaemm256256v2
105.26105.26105.51T:tinyjambu128v2
105.45105.63105.96T:grain128aeadv2
117.32117.60117.93romulusn
124.22124.27124.65T:tinyjambu192v2
127.44127.49127.87T:tinyjambu256v2
155.51155.75156.20romulusm
171.12171.32171.53T:isapa128av20
233.76235.94238.28T:aes256gcmv1
345.54345.71347.83T:elephant200v2
361.54362.58364.05T!!!romulust
700.10700.29700.60T:isapa128v20
718.12718.59719.50T:isapk128av20
866.18866.38866.50T:aes128gcmv1
3462.923463.303466.53T:isapk128v20
6699.336700.826706.92T:isapxv20
17683.6017687.8017690.18T:elephant176v2
18356.3118366.6718371.89T:elephant160v2
28538.1328539.5728544.14aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
20.5020.6220.88ascon128av12
26.5226.6926.87ascon128v12
26.7226.8627.00ascon80pqv12
40.1540.2340.55ascon128abi32v12
49.1449.1749.35T:xoodyakround3
53.9754.0454.22ascon128bi32v12
69.2169.4469.81T:giftcofb128v1
70.9471.0571.11T:schwaemm256128v2
76.9276.9376.97T:schwaemm128128v2
92.3492.3492.45T:schwaemm192192v2
100.58100.63100.69T:schwaemm256256v2
105.67105.70105.81T:tinyjambu128v2
108.67108.84109.08T:grain128aeadv2
117.87118.06118.15romulusn
124.46124.52124.61T:tinyjambu192v2
127.79127.88128.22T:tinyjambu256v2
160.95161.13161.45romulusm
171.16171.33171.60T:isapa128av20
334.36336.07337.54T:aes256gcmv1
345.31345.40352.38T:elephant200v2
361.77362.07362.68T!!!romulust
700.27700.42700.70T:isapa128v20
718.14718.20718.89T:isapk128av20
865.78866.30866.95T:aes128gcmv1
3463.533463.713468.24T:isapk128v20
6700.666707.696722.98T:isapxv20
17683.3317687.6917690.22T:elephant176v2
18353.5618357.2918365.18T:elephant160v2
28541.4028546.9328552.98aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
20.4620.5720.81ascon128av12
26.6526.6526.79ascon128v12
26.6726.6726.73ascon80pqv12
40.0640.0940.35ascon128abi32v12
49.3949.4849.52T:xoodyakround3
53.9554.0054.08ascon128bi32v12
69.2169.3169.61T:giftcofb128v1
70.7970.9671.01T:schwaemm256128v2
76.9276.9276.95T:schwaemm128128v2
92.2392.3492.45T:schwaemm192192v2
100.49100.66100.66T:schwaemm256256v2
105.62105.70105.70T:tinyjambu128v2
108.65108.72109.02T:grain128aeadv2
112.83112.84113.07T:isapa128av20
117.84117.95118.34romulusn
124.41124.41124.52T:tinyjambu192v2
127.77127.77127.78T:tinyjambu256v2
160.81160.92161.22romulusm
229.45229.68230.10T!!!romulust
345.20345.22345.60T:elephant200v2
364.52364.55364.62T:isapa128v20
507.36507.51507.79T:isapk128av20
642.43644.16647.65T:aes256gcmv1
848.36848.96849.12T:aes128gcmv1
1893.131893.141893.27T:isapk128v20
3492.983497.713504.70T:isapxv20
10069.8110077.0210083.60aes256gcmv1
17683.0117687.8717727.51T:elephant176v2
18353.5218358.4018366.09T:elephant160v2