VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Bonnell (30661); 2011 Intel Atom D2500; 2 x 1866MHz; h8atom, supercop-20250415

[Page version: 20250506 12:43:01]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
14.0314.0714.07ascon128av12
20.9921.0021.00ascon128v12
21.2221.2521.26ascon80pqv12
32.4833.3734.21T:aes128gcmv1
35.0935.1335.14ascon128abi32v12
38.2939.1339.77T:aes256gcmv1
46.7346.7947.13ascon128bi32v12
54.1254.2654.52T:xoodyakround3
57.8457.8857.92T:giftcofb128v1
62.9162.9262.94T:schwaemm256128v2
79.1679.2479.30T:isapa128v20
83.3683.3984.32T:schwaemm192192v2
84.6385.1585.30T:schwaemm256256v2
86.6986.8088.12T:schwaemm128128v2
88.8788.8788.89T:isapa128av20
128.41?130.26?152.99?T:grain128aeadv2
144.50144.51144.55T:tinyjambu128v2
156.05156.06156.11romulusn
187.65187.75187.87T:isapk128av20
199.00199.00199.02T:tinyjambu192v2
211.74211.75211.78T:tinyjambu256v2
248.80249.98257.29T:isapk128v20
257.87257.94258.54romulusm
402.31402.53402.62T:elephant200v2
567.45567.55568.20T!!!romulust
544.99580.45597.13T:isapxv20
39264.9339270.4339292.17T:elephant160v2
42245.0642257.0642295.01T:elephant176v2
49609.3949700.4050082.98aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
13.9113.9413.95ascon128av12
20.8720.8820.88ascon128v12
20.9921.0021.01ascon80pqv12
32.7633.2933.93T:aes128gcmv1
33.8533.8833.90ascon128abi32v12
38.6739.2039.78T:aes256gcmv1
47.2147.2547.27ascon128bi32v12
51.1151.1451.18T:xoodyakround3
57.6157.6357.67T:giftcofb128v1
63.0263.0363.05T:schwaemm256128v2
78.6679.2579.83T:isapa128v20
83.6283.6584.59T:schwaemm192192v2
85.9286.9987.29T:schwaemm256256v2
86.9486.9988.08T:schwaemm128128v2
88.8788.8989.59T:isapa128av20
137.30?139.12?161.89?T:grain128aeadv2
144.75144.76144.80T:tinyjambu128v2
155.99156.03156.43romulusn
187.61187.75188.20T:isapk128av20
199.00199.02199.66T:tinyjambu192v2
212.24212.26212.49T:tinyjambu256v2
249.05249.42254.65T:isapk128v20
258.04258.07258.15romulusm
402.51402.53402.67T:elephant200v2
567.46567.58568.26T!!!romulust
561.91573.92614.07T:isapxv20
39262.6239268.9039301.22T:elephant160v2
42147.3642264.6542294.83T:elephant176v2
49637.1249688.1950047.30aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
13.9413.9413.95ascon128av12
20.8820.8820.88ascon128v12
21.0021.0021.00ascon80pqv12
32.8633.4233.82T:aes128gcmv1
33.8733.8833.89ascon128abi32v12
38.6839.1639.70T:aes256gcmv1
39.3339.3839.42T:isapa128v20
47.2547.2547.25ascon128bi32v12
51.2651.2751.32T:xoodyakround3
57.6357.6357.63T:giftcofb128v1
58.1158.1258.15T:isapa128av20
63.0363.0363.11T:schwaemm256128v2
83.6283.7784.60T:schwaemm192192v2
86.9386.9587.80T:schwaemm128128v2
85.9187.1987.48T:schwaemm256256v2
124.58124.67124.76T:isapk128av20
137.30?139.26?161.89?T:grain128aeadv2
144.76144.79145.02T:tinyjambu128v2
155.86155.91155.97T:isapk128v20
156.00156.01156.03romulusn
196.63196.67196.69T!!!romulust
198.99199.01199.02T:tinyjambu192v2
212.24212.26212.29T:tinyjambu256v2
258.06258.07258.18romulusm
313.85321.92342.53T:isapxv20
402.50402.53402.70T:elephant200v2
1331.101345.101354.32aes256gcmv1
39262.4639271.1539306.71T:elephant160v2
42234.7442262.5142304.31T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
13.7313.7613.77ascon128av12
20.6720.6920.70ascon128v12
21.1121.1321.16ascon80pqv12
24.5724.9725.42T:aes128gcmv1
27.5527.9228.28T:aes256gcmv1
33.2233.2633.28ascon128abi32v12
40.3240.3440.37T:xoodyakround3
46.9246.9446.98ascon128bi32v12
57.5257.5557.58T:giftcofb128v1
59.3159.3759.44T:isapa128v20
62.5762.6062.62T:schwaemm256128v2
73.4973.5173.52T:isapa128av20
82.9683.1283.18T:schwaemm192192v2
83.2683.3383.36T:schwaemm256256v2
86.4386.4586.48T:schwaemm128128v2
118.36118.38118.41T:tinyjambu128v2
128.83128.85128.88romulusn
128.65?130.25?152.84?T:grain128aeadv2
155.24155.26155.37T:tinyjambu192v2
156.03156.09156.43T:isapk128av20
159.49159.50159.51T:tinyjambu256v2
179.75179.79179.86romulusm
202.43202.57204.79T:isapk128v20
299.63299.66300.49T:elephant200v2
381.72381.88383.50T!!!romulust
428.41454.63455.98T:isapxv20
25493.7125504.7225523.40aes256gcmv1
29447.8129463.2629487.52T:elephant160v2
31524.8231584.9631606.14T:elephant176v2
Cycles/byte for long+long decrypt
25%50%75%aead
13.6613.6913.71ascon128av12
20.4920.5020.52ascon80pqv12
20.5620.5820.59ascon128v12
24.7225.0725.46T:aes128gcmv1
27.5927.9528.24T:aes256gcmv1
32.5632.6032.62ascon128abi32v12
38.8238.8338.86T:xoodyakround3
47.0447.0747.09ascon128bi32v12
57.3857.4257.46T:giftcofb128v1
59.3259.3761.19T:isapa128v20
62.6462.6562.66T:schwaemm256128v2
73.4973.5173.52T:isapa128av20
83.1283.2183.26T:schwaemm192192v2
84.1584.2184.28T:schwaemm256256v2
86.5686.5786.60T:schwaemm128128v2
118.49118.52119.01T:tinyjambu128v2
128.79128.82128.89romulusn
133.22?135.64?157.41?T:grain128aeadv2
155.25155.26155.27T:tinyjambu192v2
156.02156.13157.76T:isapk128av20
159.72159.77159.82T:tinyjambu256v2
179.80179.85179.93romulusm
202.44202.62205.28T:isapk128v20
299.63299.65300.59T:elephant200v2
381.77381.86383.54T!!!romulust
442.07447.83471.21T:isapxv20
25485.7525509.4325545.74aes256gcmv1
29444.6729454.8929472.80T:elephant160v2
31575.1331586.8331608.72T:elephant176v2
Cycles/byte for long+long forgery
25%50%75%aead
13.6913.6913.70ascon128av12
20.5020.5020.50ascon80pqv12
20.5620.5620.57ascon128v12
24.7525.0225.31T:aes128gcmv1
27.7627.9428.16T:aes256gcmv1
32.6032.6032.61ascon128abi32v12
38.8938.9038.93T:xoodyakround3
39.4139.4439.46T:isapa128v20
47.0647.0647.06ascon128bi32v12
57.4257.4257.44T:giftcofb128v1
58.1258.1258.14T:isapa128av20
62.6462.6562.65T:schwaemm256128v2
83.1583.2583.41T:schwaemm192192v2
84.0884.2184.24T:schwaemm256256v2
86.5686.5786.60T:schwaemm128128v2
118.50118.50118.51T:tinyjambu128v2
124.24124.49124.60T:isapk128av20
128.82128.82128.83romulusn
133.22?134.84?157.42?T:grain128aeadv2
155.25155.25155.26T:tinyjambu192v2
155.75155.81157.39T:isapk128v20
159.74159.76160.25T:tinyjambu256v2
179.83179.85179.89romulusm
196.33196.38196.44T!!!romulust
299.64299.67300.55T:elephant200v2
312.72325.15335.15T:isapxv20
1339.621342.421343.47aes256gcmv1
29445.4229460.2329482.46T:elephant160v2
31538.0931569.8831599.79T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
13.4013.4413.45ascon128av12
16.3116.6417.31T:aes128gcmv1
16.3416.6517.18T:aes256gcmv1
20.3520.3820.38ascon128v12
20.9921.0021.01ascon80pqv12
26.5026.5326.58T:xoodyakround3
31.3331.3831.38ascon128abi32v12
39.4739.5039.51T:isapa128v20
47.1147.1247.15ascon128bi32v12
57.1757.2157.23T:giftcofb128v1
58.1258.1358.15T:isapa128av20
62.2462.2662.28T:schwaemm256128v2
82.6882.8782.90T:schwaemm192192v2
82.4783.2883.68T:schwaemm256256v2
85.9986.1986.23T:schwaemm128128v2
92.2492.2592.29T:tinyjambu128v2
101.57101.63101.65romulusn
101.58101.63101.69romulusm
107.25107.32107.85T:tinyjambu256v2
111.49111.50111.52T:tinyjambu192v2
124.30124.44124.59T:isapk128av20
128.45?130.36?153.12?T:grain128aeadv2
155.61155.69156.04T:isapk128v20
195.95196.05196.13T!!!romulust
198.14198.21198.29T:elephant200v2
300.93326.19329.11T:isapxv20
1330.891341.881348.15aes256gcmv1
19625.0719628.6819654.48T:elephant160v2
20816.2620881.9320891.93T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
13.3913.4413.45ascon128av12
16.3916.5817.39T:aes256gcmv1
16.2516.7517.29T:aes128gcmv1
19.9720.0020.00ascon80pqv12
20.2420.2520.26ascon128v12
26.4926.5426.57T:xoodyakround3
31.2831.3231.32ascon128abi32v12
39.4839.5039.51T:isapa128v20
46.8646.8746.91ascon128bi32v12
57.1957.2157.26T:giftcofb128v1
58.1158.1358.16T:isapa128av20
62.2662.2662.29T:schwaemm256128v2
82.3382.6583.54T:schwaemm256256v2
82.6682.8883.61T:schwaemm192192v2
86.1086.2086.24T:schwaemm128128v2
92.2492.2692.28T:tinyjambu128v2
101.60101.63101.65romulusn
101.61101.63101.66romulusm
107.23107.27107.41T:tinyjambu256v2
111.50111.50111.52T:tinyjambu192v2
124.34124.44124.52T:isapk128av20
128.72?131.51?153.38?T:grain128aeadv2
155.24155.63156.23T:isapk128v20
195.97196.05196.11T!!!romulust
198.19198.21198.41T:elephant200v2
311.51319.62340.67T:isapxv20
1331.521346.361371.57aes256gcmv1
19623.6619628.8119638.79T:elephant160v2
20867.5120891.9620911.10T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
13.4413.4413.45ascon128av12
16.4816.6417.02T:aes128gcmv1
16.3916.6917.01T:aes256gcmv1
20.0020.0020.00ascon80pqv12
20.2520.2520.25ascon128v12
26.5026.5526.56T:xoodyakround3
31.3131.3231.32ascon128abi32v12
39.4539.5039.52T:isapa128v20
46.8746.8746.89ascon128bi32v12
57.2157.2157.22T:giftcofb128v1
58.1158.1358.15T:isapa128av20
62.2562.2662.28T:schwaemm256128v2
82.7682.8782.90T:schwaemm192192v2
82.3783.0183.58T:schwaemm256256v2
86.1286.2186.58T:schwaemm128128v2
92.2492.2592.28T:tinyjambu128v2
101.63101.63101.65romulusn
101.63101.63101.65romulusm
107.23107.25107.27T:tinyjambu256v2
111.50111.50111.51T:tinyjambu192v2
124.32124.43124.82T:isapk128av20
128.71?130.56?153.38?T:grain128aeadv2
155.62155.64155.73T:isapk128v20
196.00196.04196.09T!!!romulust
198.20198.21198.26T:elephant200v2
311.44319.06338.95T:isapxv20
1339.541356.761382.56aes256gcmv1
19628.6719631.9619652.12T:elephant160v2
20839.2720886.2120895.56T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
14.0814.0814.10ascon128av12
20.9921.0021.00ascon128v12
21.4421.4421.48ascon80pqv12
32.0632.1032.60T:aes128gcmv1
34.0134.0234.05ascon128abi32v12
35.4835.5136.04T:aes256gcmv1
40.9840.9841.00T:xoodyakround3
47.7147.7147.76ascon128bi32v12
58.3058.3058.33T:giftcofb128v1
64.4164.4264.45T:schwaemm256128v2
78.6678.6778.73T:isapa128av20
84.9584.9685.01T:schwaemm192192v2
85.4585.4686.34T:schwaemm256256v2
87.5387.5487.64T:schwaemm128128v2
88.1388.1388.21T:isapa128v20
119.30119.35119.69T:tinyjambu128v2
130.03130.03130.08romulusn
130.99?131.23?152.23?T:grain128aeadv2
156.41156.41156.50T:tinyjambu192v2
160.71160.71160.74T:tinyjambu256v2
181.04181.05181.51romulusm
193.09193.09193.16T:isapk128av20
305.98305.99306.10T:elephant200v2
382.17382.33385.67T:isapk128v20
387.52387.53389.58T!!!romulust
709.15721.47724.75T:isapxv20
26122.6426378.6626429.15aes256gcmv1
29778.4629787.2129802.72T:elephant160v2
31740.2731815.3231832.26T:elephant176v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
14.0314.0314.05ascon128av12
20.8220.8420.90ascon80pqv12
20.8820.8820.91ascon128v12
32.1232.1732.58T:aes128gcmv1
33.3633.3633.39ascon128abi32v12
35.4935.5535.86T:aes256gcmv1
39.4739.4839.52T:xoodyakround3
47.8547.8547.87ascon128bi32v12
58.2158.2158.24T:giftcofb128v1
64.4764.4764.48T:schwaemm256128v2
78.6678.6778.68T:isapa128av20
85.0785.0885.11T:schwaemm192192v2
86.3386.4887.53T:schwaemm256256v2
87.6687.6687.71T:schwaemm128128v2
88.0688.0688.13T:isapa128v20
119.43119.46120.27T:tinyjambu128v2
130.02130.03131.91romulusn
135.55?135.69?156.79?T:grain128aeadv2
156.42156.46156.66T:tinyjambu192v2
160.98160.98161.03T:tinyjambu256v2
181.38181.39181.50romulusm
193.15193.15193.30T:isapk128av20
305.99305.99306.12T:elephant200v2
382.30382.42385.17T:isapk128v20
387.55387.58389.66T!!!romulust
723.80726.57740.85T:isapxv20
26010.8026409.6726426.87aes256gcmv1
29782.7729795.6929815.18T:elephant160v2
31740.9931808.5531828.64T:elephant176v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
14.0314.0314.03ascon128av12
20.8220.8320.83ascon80pqv12
20.8820.8820.89ascon128v12
32.1932.2132.49T:aes128gcmv1
33.3633.3633.37ascon128abi32v12
35.5335.5735.78T:aes256gcmv1
39.6039.8439.85T:xoodyakround3
47.8547.8547.85ascon128bi32v12
53.5553.5653.59T:isapa128v20
58.2158.2158.21T:giftcofb128v1
61.0261.0261.04T:isapa128av20
64.4764.4764.48T:schwaemm256128v2
85.0785.0785.09T:schwaemm192192v2
86.3286.3387.28T:schwaemm256256v2
87.6687.6787.72T:schwaemm128128v2
119.43119.44120.33T:tinyjambu128v2
130.02130.02130.03romulusn
135.55?135.64?156.80?T:grain128aeadv2
151.45151.45151.53T:isapk128av20
156.42156.44156.68T:tinyjambu192v2
160.97160.97161.01T:tinyjambu256v2
181.38181.38181.44romulusm
201.86201.89201.93T!!!romulust
254.33254.36257.51T:isapk128v20
305.99305.99306.04T:elephant200v2
461.41466.46473.70T:isapxv20
1854.111879.711886.19aes256gcmv1
29785.9129801.6629851.40T:elephant160v2
31741.8531810.8831827.43T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
21.4921.5522.09ascon128av12
27.8427.8928.71ascon128v12
28.5528.6029.70ascon80pqv12
51.2451.2451.95ascon128abi32v12
60.9260.9861.63T:xoodyakround3
65.1965.2466.39ascon128bi32v12
75.6375.6376.67T:giftcofb128v1
106.04106.04106.97T:schwaemm256128v2
112.66112.71112.88T:schwaemm128128v2
133.60134.09134.42T:schwaemm256256v2
137.92137.98138.03T:schwaemm192192v2
140.27140.27140.77T:tinyjambu128v2
147.22?147.82?174.07?T:grain128aeadv2
157.17157.17157.99romulusn
182.98183.04183.20T:tinyjambu192v2
188.51188.51188.95T:tinyjambu256v2
197.42197.42197.75T:isapa128av20
198.68200.05210.27T:aes128gcmv1
209.62209.62210.66romulusm
219.73221.27232.15T:aes256gcmv1
433.45433.45434.11T:elephant200v2
519.31519.42520.62T!!!romulust
749.38749.44751.41T:isapa128v20
1011.991012.051013.74T:isapk128av20
4471.854474.154496.95T:isapk128v20
6786.396953.307107.62T:isapxv20
37737.4437767.7338254.84aes256gcmv1
39551.9139637.2339644.99T:elephant176v2
39823.7739906.5639982.30T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
21.7721.7722.86ascon128av12
27.9527.9528.60ascon128v12
28.1628.1629.09ascon80pqv12
50.7550.8051.79ascon128abi32v12
59.1259.2359.45T:xoodyakround3
65.7365.7966.45ascon128bi32v12
76.2376.2376.84T:giftcofb128v1
106.15106.20106.26T:schwaemm256128v2
112.77112.82112.88T:schwaemm128128v2
134.70134.86135.68T:schwaemm256256v2
138.20138.25138.30T:schwaemm192192v2
140.77140.77140.88T:tinyjambu128v2
151.38?152.09?178.23?T:grain128aeadv2
157.50157.50158.43romulusn
183.31183.37183.42T:tinyjambu192v2
189.05189.11189.33T:tinyjambu256v2
197.42197.42197.75T:isapa128av20
197.80198.19210.55T:aes128gcmv1
216.40216.40217.22romulusm
217.49219.52230.29T:aes256gcmv1
433.40433.40433.67T:elephant200v2
519.42519.70520.46T!!!romulust
747.63747.69749.16T:isapa128v20
1013.911013.961015.00T:isapk128av20
4474.374475.524479.29T:isapk128v20
6988.307108.617328.51T:isapxv20
37741.8737793.4938303.02aes256gcmv1
39507.8939578.7139641.33T:elephant176v2
39837.9839902.6239954.47T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
21.7721.7721.77ascon128av12
27.9527.9527.95ascon128v12
28.1128.1628.16ascon80pqv12
50.7550.8050.97ascon128abi32v12
59.6159.7259.83T:xoodyakround3
65.7365.7366.01ascon128bi32v12
76.1876.2376.23T:giftcofb128v1
106.09106.15106.15T:schwaemm256128v2
112.77112.82112.93T:schwaemm128128v2
127.53127.59127.70T:isapa128av20
134.64134.70135.95T:schwaemm256256v2
138.25138.25138.30T:schwaemm192192v2
140.77140.77140.77T:tinyjambu128v2
151.43?151.48?178.34?T:grain128aeadv2
157.50157.55157.66romulusn
183.31183.31183.42T:tinyjambu192v2
189.05189.05189.33T:tinyjambu256v2
200.21200.54207.54T:aes128gcmv1
216.40216.40216.45romulusm
219.52220.34226.73T:aes256gcmv1
328.67328.73329.60T!!!romulust
378.00378.00378.49T:isapa128v20
433.40433.45433.62T:elephant200v2
744.41744.41745.61T:isapk128av20
2489.162489.702490.41T:isapk128v20
3659.093699.613809.86T:isapxv20
13559.8213589.4613764.24aes256gcmv1
39512.3239562.3039637.94T:elephant176v2
39822.6239959.7740004.40T:elephant160v2