VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Bonnell (30661); 2011 Intel Atom D2500; 2 x 1866MHz; h8atom, supercop-20250415

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
14.0314.0714.07ascon128av12
20.9921.0021.00ascon128v12
21.2221.2521.26ascon80pqv12
32.4833.3734.21T:aes128gcmv1
35.0935.1335.14ascon128abi32v12
38.2939.1339.77T:aes256gcmv1
46.7346.7947.13ascon128bi32v12
54.1254.2654.52T:xoodyakround3
57.8457.8857.92T:giftcofb128v1
62.9162.9262.94T:schwaemm256128v2
79.1679.2479.30T:isapa128v20
83.3683.3984.32T:schwaemm192192v2
84.6385.1585.30T:schwaemm256256v2
86.6986.8088.12T:schwaemm128128v2
88.8788.8788.89T:isapa128av20
128.41?130.26?152.99?T:grain128aeadv2
144.50144.51144.55T:tinyjambu128v2
156.05156.06156.11romulusn
187.65187.75187.87T:isapk128av20
199.00199.00199.02T:tinyjambu192v2
211.74211.75211.78T:tinyjambu256v2
248.80249.98257.29T:isapk128v20
257.87257.94258.54romulusm
402.31402.53402.62T:elephant200v2
567.45567.55568.20T!!!romulust
544.99580.45597.13T:isapxv20
39264.9339270.4339292.17T:elephant160v2
42245.0642257.0642295.01T:elephant176v2
49609.3949700.4050082.98aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
13.9113.9413.95ascon128av12
20.8720.8820.88ascon128v12
20.9921.0021.01ascon80pqv12
32.7633.2933.93T:aes128gcmv1
33.8533.8833.90ascon128abi32v12
38.6739.2039.78T:aes256gcmv1
47.2147.2547.27ascon128bi32v12
51.1151.1451.18T:xoodyakround3
57.6157.6357.67T:giftcofb128v1
63.0263.0363.05T:schwaemm256128v2
78.6679.2579.83T:isapa128v20
83.6283.6584.59T:schwaemm192192v2
85.9286.9987.29T:schwaemm256256v2
86.9486.9988.08T:schwaemm128128v2
88.8788.8989.59T:isapa128av20
137.30?139.12?161.89?T:grain128aeadv2
144.75144.76144.80T:tinyjambu128v2
155.99156.03156.43romulusn
187.61187.75188.20T:isapk128av20
199.00199.02199.66T:tinyjambu192v2
212.24212.26212.49T:tinyjambu256v2
249.05249.42254.65T:isapk128v20
258.04258.07258.15romulusm
402.51402.53402.67T:elephant200v2
567.46567.58568.26T!!!romulust
561.91573.92614.07T:isapxv20
39262.6239268.9039301.22T:elephant160v2
42147.3642264.6542294.83T:elephant176v2
49637.1249688.1950047.30aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
13.9413.9413.95ascon128av12
20.8820.8820.88ascon128v12
21.0021.0021.00ascon80pqv12
32.8633.4233.82T:aes128gcmv1
33.8733.8833.89ascon128abi32v12
38.6839.1639.70T:aes256gcmv1
39.3339.3839.42T:isapa128v20
47.2547.2547.25ascon128bi32v12
51.2651.2751.32T:xoodyakround3
57.6357.6357.63T:giftcofb128v1
58.1158.1258.15T:isapa128av20
63.0363.0363.11T:schwaemm256128v2
83.6283.7784.60T:schwaemm192192v2
86.9386.9587.80T:schwaemm128128v2
85.9187.1987.48T:schwaemm256256v2
124.58124.67124.76T:isapk128av20
137.30?139.26?161.89?T:grain128aeadv2
144.76144.79145.02T:tinyjambu128v2
155.86155.91155.97T:isapk128v20
156.00156.01156.03romulusn
196.63196.67196.69T!!!romulust
198.99199.01199.02T:tinyjambu192v2
212.24212.26212.29T:tinyjambu256v2
258.06258.07258.18romulusm
313.85321.92342.53T:isapxv20
402.50402.53402.70T:elephant200v2
1331.101345.101354.32aes256gcmv1
39262.4639271.1539306.71T:elephant160v2
42234.7442262.5142304.31T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
13.7313.7613.77ascon128av12
20.6720.6920.70ascon128v12
21.1121.1321.16ascon80pqv12
24.5724.9725.42T:aes128gcmv1
27.5527.9228.28T:aes256gcmv1
33.2233.2633.28ascon128abi32v12
40.3240.3440.37T:xoodyakround3
46.9246.9446.98ascon128bi32v12
57.5257.5557.58T:giftcofb128v1
59.3159.3759.44T:isapa128v20
62.5762.6062.62T:schwaemm256128v2
73.4973.5173.52T:isapa128av20
82.9683.1283.18T:schwaemm192192v2
83.2683.3383.36T:schwaemm256256v2
86.4386.4586.48T:schwaemm128128v2
118.36118.38118.41T:tinyjambu128v2
128.83128.85128.88romulusn
128.65?130.25?152.84?T:grain128aeadv2
155.24155.26155.37T:tinyjambu192v2
156.03156.09156.43T:isapk128av20
159.49159.50159.51T:tinyjambu256v2
179.75179.79179.86romulusm
202.43202.57204.79T:isapk128v20
299.63299.66300.49T:elephant200v2
381.72381.88383.50T!!!romulust
428.41454.63455.98T:isapxv20
25493.7125504.7225523.40aes256gcmv1
29447.8129463.2629487.52T:elephant160v2
31524.8231584.9631606.14T:elephant176v2
Cycles/byte for long+long decrypt
25%50%75%aead
13.6613.6913.71ascon128av12
20.4920.5020.52ascon80pqv12
20.5620.5820.59ascon128v12
24.7225.0725.46T:aes128gcmv1
27.5927.9528.24T:aes256gcmv1
32.5632.6032.62ascon128abi32v12
38.8238.8338.86T:xoodyakround3
47.0447.0747.09ascon128bi32v12
57.3857.4257.46T:giftcofb128v1
59.3259.3761.19T:isapa128v20
62.6462.6562.66T:schwaemm256128v2
73.4973.5173.52T:isapa128av20
83.1283.2183.26T:schwaemm192192v2
84.1584.2184.28T:schwaemm256256v2
86.5686.5786.60T:schwaemm128128v2
118.49118.52119.01T:tinyjambu128v2
128.79128.82128.89romulusn
133.22?135.64?157.41?T:grain128aeadv2
155.25155.26155.27T:tinyjambu192v2
156.02156.13157.76T:isapk128av20
159.72159.77159.82T:tinyjambu256v2
179.80179.85179.93romulusm
202.44202.62205.28T:isapk128v20
299.63299.65300.59T:elephant200v2
381.77381.86383.54T!!!romulust
442.07447.83471.21T:isapxv20
25485.7525509.4325545.74aes256gcmv1
29444.6729454.8929472.80T:elephant160v2
31575.1331586.8331608.72T:elephant176v2
Cycles/byte for long+long forgery
25%50%75%aead
13.6913.6913.70ascon128av12
20.5020.5020.50ascon80pqv12
20.5620.5620.57ascon128v12
24.7525.0225.31T:aes128gcmv1
27.7627.9428.16T:aes256gcmv1
32.6032.6032.61ascon128abi32v12
38.8938.9038.93T:xoodyakround3
39.4139.4439.46T:isapa128v20
47.0647.0647.06ascon128bi32v12
57.4257.4257.44T:giftcofb128v1
58.1258.1258.14T:isapa128av20
62.6462.6562.65T:schwaemm256128v2
83.1583.2583.41T:schwaemm192192v2
84.0884.2184.24T:schwaemm256256v2
86.5686.5786.60T:schwaemm128128v2
118.50118.50118.51T:tinyjambu128v2
124.24124.49124.60T:isapk128av20
128.82128.82128.83romulusn
133.22?134.84?157.42?T:grain128aeadv2
155.25155.25155.26T:tinyjambu192v2
155.75155.81157.39T:isapk128v20
159.74159.76160.25T:tinyjambu256v2
179.83179.85179.89romulusm
196.33196.38196.44T!!!romulust
299.64299.67300.55T:elephant200v2
312.72325.15335.15T:isapxv20
1339.621342.421343.47aes256gcmv1
29445.4229460.2329482.46T:elephant160v2
31538.0931569.8831599.79T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
13.4013.4413.45ascon128av12
16.3116.6417.31T:aes128gcmv1
16.3416.6517.18T:aes256gcmv1
20.3520.3820.38ascon128v12
20.9921.0021.01ascon80pqv12
26.5026.5326.58T:xoodyakround3
31.3331.3831.38ascon128abi32v12
39.4739.5039.51T:isapa128v20
47.1147.1247.15ascon128bi32v12
57.1757.2157.23T:giftcofb128v1
58.1258.1358.15T:isapa128av20
62.2462.2662.28T:schwaemm256128v2
82.6882.8782.90T:schwaemm192192v2
82.4783.2883.68T:schwaemm256256v2
85.9986.1986.23T:schwaemm128128v2
92.2492.2592.29T:tinyjambu128v2
101.57101.63101.65romulusn
101.58101.63101.69romulusm
107.25107.32107.85T:tinyjambu256v2
111.49111.50111.52T:tinyjambu192v2
124.30124.44124.59T:isapk128av20
128.45?130.36?153.12?T:grain128aeadv2
155.61155.69156.04T:isapk128v20
195.95196.05196.13T!!!romulust
198.14198.21198.29T:elephant200v2
300.93326.19329.11T:isapxv20
1330.891341.881348.15aes256gcmv1
19625.0719628.6819654.48T:elephant160v2
20816.2620881.9320891.93T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
13.3913.4413.45ascon128av12
16.3916.5817.39T:aes256gcmv1
16.2516.7517.29T:aes128gcmv1
19.9720.0020.00ascon80pqv12
20.2420.2520.26ascon128v12
26.4926.5426.57T:xoodyakround3
31.2831.3231.32ascon128abi32v12
39.4839.5039.51T:isapa128v20
46.8646.8746.91ascon128bi32v12
57.1957.2157.26T:giftcofb128v1
58.1158.1358.16T:isapa128av20
62.2662.2662.29T:schwaemm256128v2
82.3382.6583.54T:schwaemm256256v2
82.6682.8883.61T:schwaemm192192v2
86.1086.2086.24T:schwaemm128128v2
92.2492.2692.28T:tinyjambu128v2
101.60101.63101.65romulusn
101.61101.63101.66romulusm
107.23107.27107.41T:tinyjambu256v2
111.50111.50111.52T:tinyjambu192v2
124.34124.44124.52T:isapk128av20
128.72?131.51?153.38?T:grain128aeadv2
155.24155.63156.23T:isapk128v20
195.97196.05196.11T!!!romulust
198.19198.21198.41T:elephant200v2
311.51319.62340.67T:isapxv20
1331.521346.361371.57aes256gcmv1
19623.6619628.8119638.79T:elephant160v2
20867.5120891.9620911.10T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
13.4413.4413.45ascon128av12
16.4816.6417.02T:aes128gcmv1
16.3916.6917.01T:aes256gcmv1
20.0020.0020.00ascon80pqv12
20.2520.2520.25ascon128v12
26.5026.5526.56T:xoodyakround3
31.3131.3231.32ascon128abi32v12
39.4539.5039.52T:isapa128v20
46.8746.8746.89ascon128bi32v12
57.2157.2157.22T:giftcofb128v1
58.1158.1358.15T:isapa128av20
62.2562.2662.28T:schwaemm256128v2
82.7682.8782.90T:schwaemm192192v2
82.3783.0183.58T:schwaemm256256v2
86.1286.2186.58T:schwaemm128128v2
92.2492.2592.28T:tinyjambu128v2
101.63101.63101.65romulusn
101.63101.63101.65romulusm
107.23107.25107.27T:tinyjambu256v2
111.50111.50111.51T:tinyjambu192v2
124.32124.43124.82T:isapk128av20
128.71?130.56?153.38?T:grain128aeadv2
155.62155.64155.73T:isapk128v20
196.00196.04196.09T!!!romulust
198.20198.21198.26T:elephant200v2
311.44319.06338.95T:isapxv20
1339.541356.761382.56aes256gcmv1
19628.6719631.9619652.12T:elephant160v2
20839.2720886.2120895.56T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
14.0814.0814.10ascon128av12
20.9921.0021.00ascon128v12
21.4421.4421.48ascon80pqv12
32.0632.1032.60T:aes128gcmv1
34.0134.0234.05ascon128abi32v12
35.4835.5136.04T:aes256gcmv1
40.9840.9841.00T:xoodyakround3
47.7147.7147.76ascon128bi32v12
58.3058.3058.33T:giftcofb128v1
64.4164.4264.45T:schwaemm256128v2
78.6678.6778.73T:isapa128av20
84.9584.9685.01T:schwaemm192192v2
85.4585.4686.34T:schwaemm256256v2
87.5387.5487.64T:schwaemm128128v2
88.1388.1388.21T:isapa128v20
119.30119.35119.69T:tinyjambu128v2
130.03130.03130.08romulusn
130.99?131.23?152.23?T:grain128aeadv2
156.41156.41156.50T:tinyjambu192v2
160.71160.71160.74T:tinyjambu256v2
181.04181.05181.51romulusm
193.09193.09193.16T:isapk128av20
305.98305.99306.10T:elephant200v2
382.17382.33385.67T:isapk128v20
387.52387.53389.58T!!!romulust
709.15721.47724.75T:isapxv20
26122.6426378.6626429.15aes256gcmv1
29778.4629787.2129802.72T:elephant160v2
31740.2731815.3231832.26T:elephant176v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
14.0314.0314.05ascon128av12
20.8220.8420.90ascon80pqv12
20.8820.8820.91ascon128v12
32.1232.1732.58T:aes128gcmv1
33.3633.3633.39ascon128abi32v12
35.4935.5535.86T:aes256gcmv1
39.4739.4839.52T:xoodyakround3
47.8547.8547.87ascon128bi32v12
58.2158.2158.24T:giftcofb128v1
64.4764.4764.48T:schwaemm256128v2
78.6678.6778.68T:isapa128av20
85.0785.0885.11T:schwaemm192192v2
86.3386.4887.53T:schwaemm256256v2
87.6687.6687.71T:schwaemm128128v2
88.0688.0688.13T:isapa128v20
119.43119.46120.27T:tinyjambu128v2
130.02130.03131.91romulusn
135.55?135.69?156.79?T:grain128aeadv2
156.42156.46156.66T:tinyjambu192v2
160.98160.98161.03T:tinyjambu256v2
181.38181.39181.50romulusm
193.15193.15193.30T:isapk128av20
305.99305.99306.12T:elephant200v2
382.30382.42385.17T:isapk128v20
387.55387.58389.66T!!!romulust
723.80726.57740.85T:isapxv20
26010.8026409.6726426.87aes256gcmv1
29782.7729795.6929815.18T:elephant160v2
31740.9931808.5531828.64T:elephant176v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
14.0314.0314.03ascon128av12
20.8220.8320.83ascon80pqv12
20.8820.8820.89ascon128v12
32.1932.2132.49T:aes128gcmv1
33.3633.3633.37ascon128abi32v12
35.5335.5735.78T:aes256gcmv1
39.6039.8439.85T:xoodyakround3
47.8547.8547.85ascon128bi32v12
53.5553.5653.59T:isapa128v20
58.2158.2158.21T:giftcofb128v1
61.0261.0261.04T:isapa128av20
64.4764.4764.48T:schwaemm256128v2
85.0785.0785.09T:schwaemm192192v2
86.3286.3387.28T:schwaemm256256v2
87.6687.6787.72T:schwaemm128128v2
119.43119.44120.33T:tinyjambu128v2
130.02130.02130.03romulusn
135.55?135.64?156.80?T:grain128aeadv2
151.45151.45151.53T:isapk128av20
156.42156.44156.68T:tinyjambu192v2
160.97160.97161.01T:tinyjambu256v2
181.38181.38181.44romulusm
201.86201.89201.93T!!!romulust
254.33254.36257.51T:isapk128v20
305.99305.99306.04T:elephant200v2
461.41466.46473.70T:isapxv20
1854.111879.711886.19aes256gcmv1
29785.9129801.6629851.40T:elephant160v2
31741.8531810.8831827.43T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
21.4921.5522.09ascon128av12
27.8427.8928.71ascon128v12
28.5528.6029.70ascon80pqv12
51.2451.2451.95ascon128abi32v12
60.9260.9861.63T:xoodyakround3
65.1965.2466.39ascon128bi32v12
75.6375.6376.67T:giftcofb128v1
106.04106.04106.97T:schwaemm256128v2
112.66112.71112.88T:schwaemm128128v2
133.60134.09134.42T:schwaemm256256v2
137.92137.98138.03T:schwaemm192192v2
140.27140.27140.77T:tinyjambu128v2
147.22?147.82?174.07?T:grain128aeadv2
157.17157.17157.99romulusn
182.98183.04183.20T:tinyjambu192v2
188.51188.51188.95T:tinyjambu256v2
197.42197.42197.75T:isapa128av20
198.68200.05210.27T:aes128gcmv1
209.62209.62210.66romulusm
219.73221.27232.15T:aes256gcmv1
433.45433.45434.11T:elephant200v2
519.31519.42520.62T!!!romulust
749.38749.44751.41T:isapa128v20
1011.991012.051013.74T:isapk128av20
4471.854474.154496.95T:isapk128v20
6786.396953.307107.62T:isapxv20
37737.4437767.7338254.84aes256gcmv1
39551.9139637.2339644.99T:elephant176v2
39823.7739906.5639982.30T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
21.7721.7722.86ascon128av12
27.9527.9528.60ascon128v12
28.1628.1629.09ascon80pqv12
50.7550.8051.79ascon128abi32v12
59.1259.2359.45T:xoodyakround3
65.7365.7966.45ascon128bi32v12
76.2376.2376.84T:giftcofb128v1
106.15106.20106.26T:schwaemm256128v2
112.77112.82112.88T:schwaemm128128v2
134.70134.86135.68T:schwaemm256256v2
138.20138.25138.30T:schwaemm192192v2
140.77140.77140.88T:tinyjambu128v2
151.38?152.09?178.23?T:grain128aeadv2
157.50157.50158.43romulusn
183.31183.37183.42T:tinyjambu192v2
189.05189.11189.33T:tinyjambu256v2
197.42197.42197.75T:isapa128av20
197.80198.19210.55T:aes128gcmv1
216.40216.40217.22romulusm
217.49219.52230.29T:aes256gcmv1
433.40433.40433.67T:elephant200v2
519.42519.70520.46T!!!romulust
747.63747.69749.16T:isapa128v20
1013.911013.961015.00T:isapk128av20
4474.374475.524479.29T:isapk128v20
6988.307108.617328.51T:isapxv20
37741.8737793.4938303.02aes256gcmv1
39507.8939578.7139641.33T:elephant176v2
39837.9839902.6239954.47T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
21.7721.7721.77ascon128av12
27.9527.9527.95ascon128v12
28.1128.1628.16ascon80pqv12
50.7550.8050.97ascon128abi32v12
59.6159.7259.83T:xoodyakround3
65.7365.7366.01ascon128bi32v12
76.1876.2376.23T:giftcofb128v1
106.09106.15106.15T:schwaemm256128v2
112.77112.82112.93T:schwaemm128128v2
127.53127.59127.70T:isapa128av20
134.64134.70135.95T:schwaemm256256v2
138.25138.25138.30T:schwaemm192192v2
140.77140.77140.77T:tinyjambu128v2
151.43?151.48?178.34?T:grain128aeadv2
157.50157.55157.66romulusn
183.31183.31183.42T:tinyjambu192v2
189.05189.05189.33T:tinyjambu256v2
200.21200.54207.54T:aes128gcmv1
216.40216.40216.45romulusm
219.52220.34226.73T:aes256gcmv1
328.67328.73329.60T!!!romulust
378.00378.00378.49T:isapa128v20
433.40433.45433.62T:elephant200v2
744.41744.41745.61T:isapk128av20
2489.162489.702490.41T:isapk128v20
3659.093699.613809.86T:isapxv20
13559.8213589.4613764.24aes256gcmv1
39512.3239562.3039637.94T:elephant176v2
39822.6239959.7740004.40T:elephant160v2