VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Bonnell (30661); 2011 Intel Atom D2500; 2 x 1866MHz; h8atom, supercop-20241022

[Page version: 20241120 00:41:35]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
14.0214.0714.07ascon128av12
20.9921.0021.00ascon128v12
21.2221.2521.26ascon80pqv12
32.5033.4334.20T:aes128gcmv1
35.1135.1335.15ascon128abi32v12
38.2939.1739.81T:aes256gcmv1
46.7246.7546.80ascon128bi32v12
54.1254.1554.31T:xoodyakround3
57.8557.8957.92T:giftcofb128v1
63.0063.6263.84T:schwaemm256128v2
79.1779.2579.31T:isapa128v20
83.3683.6584.33T:schwaemm192192v2
84.1584.7388.31T:schwaemm256256v2
86.6086.6986.71T:schwaemm128128v2
88.8988.8988.92T:isapa128av20
144.50144.53144.59T:tinyjambu128v2
128.99?151.20?152.99?T:grain128aeadv2
156.05156.06156.11romulusn
187.68187.75188.28T:isapk128av20
198.99199.02199.31T:tinyjambu192v2
211.73211.76211.82T:tinyjambu256v2
249.42250.58255.65T:isapk128v20
257.90257.94258.01romulusm
402.40402.58403.92T:elephant200v2
567.48567.66570.63T!!!romulust
534.71?581.56?616.42?T:isapxv20
39268.3639300.8539349.35T:elephant160v2
42047.4942091.5542292.00T:elephant176v2
49625.5749712.4150394.82aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
13.9113.9413.96ascon128av12
20.8720.8820.88ascon128v12
20.9921.0021.01ascon80pqv12
32.7333.4034.04T:aes128gcmv1
33.8533.8833.92ascon128abi32v12
38.6139.1939.93T:aes256gcmv1
47.2147.2547.26ascon128bi32v12
51.1351.1451.17T:xoodyakround3
57.6157.6357.66T:giftcofb128v1
63.0364.0464.29T:schwaemm256128v2
78.7179.2679.79T:isapa128v20
83.6183.7184.70T:schwaemm192192v2
86.9286.9586.97T:schwaemm128128v2
85.5587.0890.03T:schwaemm256256v2
88.8888.8988.91T:isapa128av20
144.75144.76144.81T:tinyjambu128v2
155.99156.01156.05romulusn
137.37?160.10?161.87?T:grain128aeadv2
187.66187.75187.83T:isapk128av20
199.00199.01199.03T:tinyjambu192v2
212.24212.26212.41T:tinyjambu256v2
249.07249.45252.75T:isapk128v20
258.03258.08258.37romulusm
402.38402.60402.78T:elephant200v2
567.50567.75570.87T!!!romulust
549.88576.30601.66T:isapxv20
39282.5639303.5439360.49T:elephant160v2
42009.6642090.8042287.63T:elephant176v2
49645.4649717.8649920.73aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
13.9413.9413.95ascon128av12
20.8820.8820.88ascon128v12
21.0021.0021.00ascon80pqv12
32.9133.3433.87T:aes128gcmv1
33.8733.8833.88ascon128abi32v12
38.6939.2139.74T:aes256gcmv1
39.3639.3839.40T:isapa128v20
47.2547.2547.26ascon128bi32v12
51.2551.2751.32T:xoodyakround3
57.6357.6357.64T:giftcofb128v1
58.1258.1458.15T:isapa128av20
63.0463.8164.39T:schwaemm256128v2
83.5683.6584.54T:schwaemm192192v2
86.9386.9486.96T:schwaemm128128v2
85.5987.6090.03T:schwaemm256256v2
124.58124.67124.76T:isapk128av20
144.75144.78144.90T:tinyjambu128v2
155.13155.99156.30T:isapk128v20
156.00156.01156.59romulusn
138.38?160.10?161.89?T:grain128aeadv2
196.62196.71196.88T!!!romulust
199.01199.02199.80T:tinyjambu192v2
212.25212.29213.18T:tinyjambu256v2
258.07258.08261.08romulusm
300.58?314.48?335.14?T:isapxv20
402.38402.57403.32T:elephant200v2
1324.681339.601394.95aes256gcmv1
39260.1839292.0839344.91T:elephant160v2
42010.2942074.3442287.85T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
13.7413.7513.77ascon128av12
20.6720.6920.70ascon128v12
21.1121.1321.15ascon80pqv12
24.6125.0025.29T:aes128gcmv1
27.5227.8928.27T:aes256gcmv1
33.2333.2633.29ascon128abi32v12
40.3140.3340.40T:xoodyakround3
46.9246.9446.97ascon128bi32v12
57.5257.5357.56T:giftcofb128v1
59.3259.3759.43T:isapa128v20
62.4562.4962.55T:schwaemm256128v2
73.5073.5173.58T:isapa128av20
83.1383.2183.97T:schwaemm192192v2
83.0283.3887.42T:schwaemm256256v2
86.4386.4586.56T:schwaemm128128v2
118.37118.39118.42T:tinyjambu128v2
128.83128.85129.14romulusn
128.72?151.24?152.77?T:grain128aeadv2
155.25155.27155.29T:tinyjambu192v2
156.04156.14156.51T:isapk128av20
159.35159.51159.74T:tinyjambu256v2
179.74179.87181.23romulusm
202.51202.61204.85T:isapk128v20
299.55300.61310.28T:elephant200v2
381.77382.02385.26T!!!romulust
430.05454.47473.07T:isapxv20
25487.8125501.4925515.07aes256gcmv1
29466.6529484.2829517.91T:elephant160v2
31388.0031429.9331596.97T:elephant176v2
Cycles/byte for long+long decrypt
25%50%75%aead
13.6513.7013.72ascon128av12
20.4920.5020.52ascon80pqv12
20.5620.5820.59ascon128v12
24.5224.9925.45T:aes128gcmv1
27.5727.9428.29T:aes256gcmv1
32.5632.6032.63ascon128abi32v12
38.8238.8438.87T:xoodyakround3
47.0447.0647.08ascon128bi32v12
57.4057.4257.51T:giftcofb128v1
59.0159.3761.16T:isapa128v20
62.6062.6162.63T:schwaemm256128v2
73.4973.5073.51T:isapa128av20
83.2483.2783.34T:schwaemm192192v2
83.8884.3488.36T:schwaemm256256v2
86.5686.5886.66T:schwaemm128128v2
118.50118.52118.64T:tinyjambu128v2
128.77128.82128.86romulusn
155.24155.25155.29T:tinyjambu192v2
134.16?155.82?157.32?T:grain128aeadv2
156.02156.13156.35T:isapk128av20
159.61159.74159.91T:tinyjambu256v2
179.75179.91181.66romulusm
201.74202.69205.25T:isapk128v20
299.48300.88310.73T:elephant200v2
381.85382.50386.85T!!!romulust
435.67443.00472.78T:isapxv20
25486.5825503.9225528.47aes256gcmv1
29454.1929471.2029498.13T:elephant160v2
31428.4231605.8931653.02T:elephant176v2
Cycles/byte for long+long forgery
25%50%75%aead
13.6913.6913.70ascon128av12
20.5020.5020.50ascon80pqv12
20.5620.5620.57ascon128v12
24.7125.0525.36T:aes128gcmv1
27.7327.9628.11T:aes256gcmv1
32.6032.6032.61ascon128abi32v12
38.8938.9038.94T:xoodyakround3
39.4239.4439.46T:isapa128v20
47.0647.0647.27ascon128bi32v12
57.4157.4257.43T:giftcofb128v1
58.1258.1358.15T:isapa128av20
62.6062.6162.68T:schwaemm256128v2
83.2483.2884.25T:schwaemm192192v2
83.8884.1988.28T:schwaemm256256v2
86.5686.6287.86T:schwaemm128128v2
118.50118.52118.53T:tinyjambu128v2
124.49124.54124.73T:isapk128av20
128.82128.82128.85romulusn
155.25155.26155.38T:tinyjambu192v2
133.23?155.82?157.44?T:grain128aeadv2
155.71155.84157.48T:isapk128v20
159.69159.75159.85T:tinyjambu256v2
179.84179.85180.18romulusm
196.33196.39197.94T!!!romulust
299.61300.52307.79T:elephant200v2
311.40313.15337.25T:isapxv20
1341.101343.111343.54aes256gcmv1
29448.3729477.0629489.18T:elephant160v2
31387.1631473.2231600.23T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
13.4113.4413.45ascon128av12
16.2316.6317.27T:aes256gcmv1
16.4417.0217.59T:aes128gcmv1
20.3520.3820.38ascon128v12
20.9921.0021.00ascon80pqv12
26.5226.5526.64T:xoodyakround3
31.3431.3831.39ascon128abi32v12
39.4839.5039.52T:isapa128v20
47.1047.1347.16ascon128bi32v12
57.1657.2057.26T:giftcofb128v1
58.1458.1458.15T:isapa128av20
62.0362.2163.16T:schwaemm256128v2
82.7382.9282.95T:schwaemm192192v2
82.9683.6586.56T:schwaemm256256v2
86.1986.2086.23T:schwaemm128128v2
92.2592.2592.28T:tinyjambu128v2
101.59101.65101.71romulusm
101.57101.65101.72romulusn
107.25107.26107.30T:tinyjambu256v2
111.49111.51111.54T:tinyjambu192v2
124.29124.44124.65T:isapk128av20
128.62?151.28?153.05?T:grain128aeadv2
155.12155.68156.02T:isapk128v20
195.95196.05196.18T!!!romulust
198.32198.45198.57T:elephant200v2
299.57?329.13?341.84?T:isapxv20
1333.921345.101373.72aes256gcmv1
19621.3419635.9619672.32T:elephant160v2
20754.9920771.4020929.47T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
13.3913.4413.45ascon128av12
16.3716.7317.43T:aes256gcmv1
16.39?16.88?18.98?T:aes128gcmv1
19.9720.0020.00ascon80pqv12
20.2520.2520.25ascon128v12
26.5326.5526.57T:xoodyakround3
31.2731.3231.32ascon128abi32v12
39.4639.5039.55T:isapa128v20
46.8646.8846.90ascon128bi32v12
57.1357.1957.27T:giftcofb128v1
58.1158.1458.15T:isapa128av20
62.0562.1862.38T:schwaemm256128v2
82.7282.9883.64T:schwaemm192192v2
83.2984.3186.56T:schwaemm256256v2
86.1986.1986.20T:schwaemm128128v2
92.2592.2592.27T:tinyjambu128v2
101.61101.63101.81romulusm
101.62101.64101.67romulusn
107.23107.24107.28T:tinyjambu256v2
111.46111.50111.53T:tinyjambu192v2
124.33124.42124.51T:isapk128av20
128.79?151.54?153.28?T:grain128aeadv2
155.60155.66155.69T:isapk128v20
195.96196.07196.12T!!!romulust
198.33198.48198.54T:elephant200v2
299.20?312.55?341.24?T:isapxv20
1325.441343.671354.32aes256gcmv1
19629.2819656.0619687.57T:elephant160v2
20756.1920842.1120924.20T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
13.4413.4413.45ascon128av12
16.4716.6317.19T:aes256gcmv1
16.50?16.91?19.21?T:aes128gcmv1
20.0020.0020.00ascon80pqv12
20.2520.2520.25ascon128v12
26.5026.5426.56T:xoodyakround3
31.3231.3231.32ascon128abi32v12
39.4839.5039.53T:isapa128v20
46.8746.8746.88ascon128bi32v12
57.1757.2057.24T:giftcofb128v1
58.1358.1558.16T:isapa128av20
62.0862.1862.85T:schwaemm256128v2
82.8382.8982.95T:schwaemm192192v2
83.1483.9186.53T:schwaemm256256v2
86.1986.1986.19T:schwaemm128128v2
92.2592.2592.33T:tinyjambu128v2
101.63101.63101.65romulusn
101.63101.63101.66romulusm
107.23107.26107.30T:tinyjambu256v2
111.50111.50111.52T:tinyjambu192v2
124.32124.44125.85T:isapk128av20
129.61?151.54?153.42?T:grain128aeadv2
155.62155.65155.77T:isapk128v20
196.00196.05196.12T!!!romulust
198.29198.42198.52T:elephant200v2
299.63?312.46?342.06?T:isapxv20
1335.751345.881360.08aes256gcmv1
19626.3519632.5419681.53T:elephant160v2
20757.5420794.5520915.36T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
14.0814.0814.09ascon128av12
20.9921.0021.03ascon128v12
21.4421.4421.48ascon80pqv12
32.1332.2232.63T:aes128gcmv1
34.0134.0134.05ascon128abi32v12
35.4935.5435.98T:aes256gcmv1
40.9840.9841.00T:xoodyakround3
47.7147.7147.76ascon128bi32v12
58.3058.3158.68T:giftcofb128v1
64.2864.2864.32T:schwaemm256128v2
78.6978.6978.72T:isapa128av20
84.9784.9885.05T:schwaemm192192v2
85.4585.5889.31T:schwaemm256256v2
87.5487.5787.95T:schwaemm128128v2
88.1488.1588.21T:isapa128v20
119.30119.31119.41T:tinyjambu128v2
130.03130.03130.07romulusn
131.07?152.23?152.28?T:grain128aeadv2
156.41156.42156.47T:tinyjambu192v2
160.71160.71160.74T:tinyjambu256v2
181.04181.06181.13romulusm
193.08193.09193.17T:isapk128av20
306.05307.08317.93T:elephant200v2
382.19382.21384.46T:isapk128v20
387.53387.63389.49T!!!romulust
708.68722.04740.79T:isapxv20
26290.9926428.9226472.83aes256gcmv1
29800.3129815.2929823.14T:elephant160v2
31643.4831675.8831820.99T:elephant176v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
14.0314.0314.06ascon128av12
20.8220.8320.85ascon80pqv12
20.8820.8820.91ascon128v12
32.2132.2532.74T:aes128gcmv1
33.3633.3633.40ascon128abi32v12
35.4835.5435.95T:aes256gcmv1
39.4739.4839.50T:xoodyakround3
47.8547.8547.88ascon128bi32v12
58.2058.2158.24T:giftcofb128v1
64.4064.4164.44T:schwaemm256128v2
78.6978.7078.70T:isapa128av20
85.0885.0985.14T:schwaemm192192v2
86.3486.3990.17T:schwaemm256256v2
87.6687.6687.68T:schwaemm128128v2
87.4388.0792.48T:isapa128v20
119.43119.44119.48T:tinyjambu128v2
130.02130.02130.33romulusn
156.42156.43156.44T:tinyjambu192v2
135.67?156.79?156.81?T:grain128aeadv2
160.97160.99161.06T:tinyjambu256v2
181.38181.40181.52romulusm
193.14193.15193.29T:isapk128av20
306.04307.23317.59T:elephant200v2
382.28382.34387.98T:isapk128v20
387.57387.60389.59T!!!romulust
707.47725.81740.95T:isapxv20
26373.9026432.6726457.48aes256gcmv1
29788.1029797.3529808.66T:elephant160v2
31659.0631715.9231826.14T:elephant176v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
14.0314.0314.03ascon128av12
20.8220.8320.83ascon80pqv12
20.8820.8820.88ascon128v12
32.2332.2732.60T:aes128gcmv1
33.3633.3633.37ascon128abi32v12
35.5735.6135.82T:aes256gcmv1
39.4539.5739.59T:xoodyakround3
47.8547.8548.90ascon128bi32v12
53.5553.5553.58T:isapa128v20
58.2058.2158.21T:giftcofb128v1
61.0361.0461.05T:isapa128av20
64.4064.4264.45T:schwaemm256128v2
85.0885.0985.10T:schwaemm192192v2
86.3386.4090.31T:schwaemm256256v2
87.6687.6687.69T:schwaemm128128v2
119.44119.45119.51T:tinyjambu128v2
130.02130.02130.07romulusn
151.45151.45151.55T:isapk128av20
156.42156.42156.43T:tinyjambu192v2
135.62?156.80?156.84?T:grain128aeadv2
160.97160.99161.51T:tinyjambu256v2
181.38181.38181.40romulusm
201.87201.89202.20T!!!romulust
254.33254.34254.47T:isapk128v20
306.04307.21316.54T:elephant200v2
453.10457.32473.76T:isapxv20
1881.031889.201892.72aes256gcmv1
29794.0229814.5729852.70T:elephant160v2
31655.4631695.3431826.79T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
21.4921.5522.26ascon128av12
27.8927.8928.77ascon128v12
28.5528.6029.59ascon80pqv12
51.2451.4152.12ascon128abi32v12
60.9261.0361.41T:xoodyakround3
65.1965.2466.72ascon128bi32v12
75.6375.6976.84T:giftcofb128v1
105.44106.26107.52T:schwaemm256128v2
112.66112.71112.98T:schwaemm128128v2
135.52136.45139.67T:schwaemm256256v2
137.92137.98138.20T:schwaemm192192v2
140.27140.27140.77T:tinyjambu128v2
157.17157.17158.16romulusn
147.93?174.12?174.12?T:grain128aeadv2
183.04183.15183.20T:tinyjambu192v2
188.45188.67190.31T:tinyjambu256v2
197.48197.59197.80T:isapa128av20
204.20204.80216.23T:aes128gcmv1
209.45209.51210.33romulusm
219.35222.14230.29T:aes256gcmv1
433.18433.23434.11T:elephant200v2
519.37519.42520.52T!!!romulust
749.38749.44751.57T:isapa128v20
1011.991012.051013.09T:isapk128av20
4471.584472.234487.66T:isapk128v20
6762.886782.297230.95T:isapxv20
37695.6037747.8337810.34aes256gcmv1
39427.1239549.7339659.59T:elephant176v2
39840.8339916.2439924.94T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
21.7721.8222.86ascon128av12
27.9527.9528.49ascon128v12
28.1628.1629.09ascon80pqv12
50.7550.8651.79ascon128abi32v12
59.0659.2359.45T:xoodyakround3
65.7365.8466.39ascon128bi32v12
76.2376.2977.00T:giftcofb128v1
105.60105.82107.24T:schwaemm256128v2
112.77112.82112.88T:schwaemm128128v2
136.28137.05140.82T:schwaemm256256v2
138.25138.41138.47T:schwaemm192192v2
140.77140.77140.82T:tinyjambu128v2
157.50157.50158.54romulusn
152.36?178.23?178.28?T:grain128aeadv2
183.42183.48183.53T:tinyjambu192v2
189.05189.38190.53T:tinyjambu256v2
197.48197.64197.80T:isapa128av20
200.21200.92213.06T:aes128gcmv1
216.34216.34217.11romulusm
216.62217.11227.55T:aes256gcmv1
433.18433.23433.51T:elephant200v2
519.53519.64520.57T!!!romulust
747.58747.63749.05T:isapa128v20
1013.911014.121015.22T:isapk128av20
4474.094475.244486.40T:isapk128v20
7121.907131.587151.21T:isapxv20
37681.3337770.4737775.94aes256gcmv1
39423.5139450.5839654.07T:elephant176v2
39821.0939917.6639923.35T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
21.7721.7721.82ascon128av12
27.9527.9527.95ascon128v12
28.1628.1628.16ascon80pqv12
50.7550.7550.86ascon128abi32v12
59.6659.7259.99T:xoodyakround3
65.7365.7365.90ascon128bi32v12
76.2376.2976.29T:giftcofb128v1
105.60105.60107.35T:schwaemm256128v2
112.77112.82112.82T:schwaemm128128v2
127.64127.86127.97T:isapa128av20
138.20138.25138.41T:schwaemm192192v2
136.39138.30140.71T:schwaemm256256v2
140.77140.77140.77T:tinyjambu128v2
157.50157.55157.66romulusn
151.65?178.34?178.39?T:grain128aeadv2
183.31183.42183.53T:tinyjambu192v2
189.05189.38189.77T:tinyjambu256v2
200.76201.47207.70T:aes128gcmv1
216.34216.34216.40romulusm
217.77218.42224.44T:aes256gcmv1
328.67328.84329.49T!!!romulust
378.00378.00378.33T:isapa128v20
433.23433.29436.35T:elephant200v2
744.41744.41745.23T:isapk128av20
2489.052489.592490.41T:isapk128v20
3636.663713.993730.40T:isapxv20
13559.0513560.1513587.71aes256gcmv1
39440.6839507.2939663.04T:elephant176v2
39838.4839912.6939986.62T:elephant160v2