VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; K10 32nm (300f10); 2011 AMD A6-3650; 4 x 2600MHz; hydra4, supercop-20250415

[Page version: 20250506 12:43:01]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
9.919.959.95ascon128av12
13.8713.8713.88ascon128v12
14.1214.1314.13ascon80pqv12
19.1619.2019.21ascon128abi32v12
25.3425.4225.48T:aes128gcmv1
27.6227.6227.63ascon128bi32v12
29.0329.0630.83T:xoodyakround3
31.3831.4031.50T:aes256gcmv1
34.3134.9835.31T:schwaemm256128v2
43.8743.8843.90T:giftcofb128v1
43.9544.5745.21T:schwaemm192192v2
47.1547.1847.37T:schwaemm128128v2
48.1048.3048.57T:schwaemm256256v2
58.5058.5158.52T:isapa128av20
58.6058.7558.79T:isapa128v20
75.3275.5975.61T:grain128aeadv2
80.0080.0080.00T:tinyjambu128v2
82.5582.5582.56T:romulusn
97.1497.3597.38T:tinyjambu192v2
109.38109.42109.45T:isapk128av20
109.84109.85109.89T:tinyjambu256v2
146.34146.43147.02T:isapk128v20
168.02168.09168.25romulusn
237.17238.20239.85T:isapxv20
326.07329.84330.14romulusm
357.65361.87362.38T:elephant200v2
720.93721.49723.72T!!!romulust
15845.3615846.2515849.57T:elephant160v2
15978.6215990.0115991.73T:elephant176v2
25227.6825228.4825228.77aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
9.719.759.76ascon128av12
13.8713.8813.88ascon80pqv12
13.8713.8813.90ascon128v12
19.2019.2319.23ascon128abi32v12
25.3925.4725.49T:aes128gcmv1
28.6228.6328.63ascon128bi32v12
29.3729.4230.46T:xoodyakround3
31.3331.3731.55T:aes256gcmv1
34.5335.4335.87T:schwaemm256128v2
43.5443.5843.59T:giftcofb128v1
45.0845.2045.91T:schwaemm192192v2
47.9948.0248.20T:schwaemm128128v2
48.7748.8149.11T:schwaemm256256v2
58.4958.5058.52T:isapa128av20
58.7558.7558.75T:isapa128v20
75.0875.1075.12T:grain128aeadv2
80.0080.0080.01T:tinyjambu128v2
83.4883.5283.53T:romulusn
97.6297.6397.63T:tinyjambu192v2
109.39109.43110.16T:isapk128av20
110.05110.07110.10T:tinyjambu256v2
146.38146.45146.84T:isapk128v20
167.86168.05170.06romulusn
233.69240.16241.85T:isapxv20
328.56330.30330.44romulusm
357.74362.07362.35T:elephant200v2
723.01723.83732.00T!!!romulust
15845.3215846.1615849.88T:elephant160v2
15978.2115989.9115990.78T:elephant176v2
25228.4825229.3525230.22aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
9.759.759.76ascon128av12
13.8713.8813.88ascon80pqv12
13.8713.8813.88ascon128v12
19.2319.2319.23ascon128abi32v12
25.4125.4725.48T:aes128gcmv1
28.6228.6328.63ascon128bi32v12
29.4429.4830.53T:xoodyakround3
29.6229.6229.63T:isapa128v20
31.3331.5631.59T:aes256gcmv1
34.5335.4336.34T:schwaemm256128v2
38.6138.6238.65T:isapa128av20
43.5643.5743.59T:giftcofb128v1
45.0845.8846.10T:schwaemm192192v2
47.9948.0348.20T:schwaemm128128v2
48.4848.7148.82T:schwaemm256256v2
72.4272.4272.45T:isapk128av20
75.0875.0975.11T:grain128aeadv2
80.0080.0080.01T:tinyjambu128v2
83.4683.5083.52T:romulusn
90.8690.9290.96T:isapk128v20
97.6397.6497.65T:tinyjambu192v2
110.05110.07110.10T:tinyjambu256v2
139.60139.87141.47T:isapxv20
167.80168.04170.06romulusn
231.71232.80234.62T!!!romulust
328.67330.33330.62romulusm
357.93361.86362.34T:elephant200v2
625.06625.63625.83aes256gcmv1
15846.0415850.8915851.55T:elephant160v2
15979.1715990.3815991.23T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
9.739.769.77ascon128av12
13.6113.6213.64ascon128v12
13.9313.9413.94ascon80pqv12
16.2516.3016.50T:aes128gcmv1
18.8818.9218.93ascon128abi32v12
19.3419.4019.44T:aes256gcmv1
21.4821.5022.82T:xoodyakround3
27.5527.5627.57ascon128bi32v12
33.6434.2434.37T:schwaemm256128v2
43.7843.8043.81T:giftcofb128v1
43.6543.8045.25T:schwaemm192192v2
44.4344.4444.44T:isapa128v20
46.6646.7546.90T:schwaemm128128v2
47.8947.9448.19T:schwaemm256256v2
48.4948.5048.53T:isapa128av20
65.1865.2365.28T:tinyjambu128v2
72.7172.7472.76T:romulusn
75.0275.0575.06T:grain128aeadv2
75.7575.7575.78T:tinyjambu192v2
82.8382.8582.88T:tinyjambu256v2
90.8690.9190.94T:isapk128av20
118.77118.79119.04T:isapk128v20
163.24163.47164.29romulusn
189.93192.72192.88T:isapxv20
242.10246.51246.99romulusm
266.86270.21270.49T:elephant200v2
476.59477.63477.86T!!!romulust
11883.5111883.8211886.93T:elephant160v2
11937.9411946.0711946.35T:elephant176v2
12926.3612927.0212933.70aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
9.559.579.58ascon128av12
13.8113.8213.82ascon128v12
13.8713.8813.88ascon80pqv12
16.3116.3516.51T:aes128gcmv1
18.8818.9018.92ascon128abi32v12
19.3619.3919.46T:aes256gcmv1
21.3121.3322.70T:xoodyakround3
28.0628.0628.07ascon128bi32v12
34.0334.4734.62T:schwaemm256128v2
43.6243.6343.66T:giftcofb128v1
44.4444.4444.45T:isapa128v20
44.4244.9046.09T:schwaemm192192v2
47.1247.1647.33T:schwaemm128128v2
47.8548.0248.13T:schwaemm256256v2
48.4948.5048.52T:isapa128av20
65.1965.2065.27T:tinyjambu128v2
73.2673.2873.29T:romulusn
74.7874.8174.95T:grain128aeadv2
75.8875.8975.91T:tinyjambu192v2
82.9582.9783.01T:tinyjambu256v2
90.9090.9090.93T:isapk128av20
118.56118.80119.07T:isapk128v20
163.11163.31165.27romulusn
189.75191.58192.62T:isapxv20
242.65246.32247.65romulusm
266.85270.14270.50T:elephant200v2
477.85479.33483.12T!!!romulust
11883.4311883.8711884.22T:elephant160v2
11937.4411946.1011946.41T:elephant176v2
12927.1112927.7812932.28aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
9.579.579.58ascon128av12
13.8113.8113.82ascon128v12
13.8713.8813.88ascon80pqv12
16.3416.4816.52T:aes128gcmv1
18.9018.9018.91ascon128abi32v12
19.3719.4019.44T:aes256gcmv1
21.3321.3622.74T:xoodyakround3
28.0628.0628.06ascon128bi32v12
29.8729.8829.89T:isapa128v20
34.1934.5935.23T:schwaemm256128v2
38.5638.5638.57T:isapa128av20
43.6343.6443.65T:giftcofb128v1
44.4244.8444.91T:schwaemm192192v2
47.1647.2347.33T:schwaemm128128v2
47.8548.0248.28T:schwaemm256256v2
65.1965.1965.27T:tinyjambu128v2
72.4072.4272.44T:isapk128av20
73.2773.2873.30T:romulusn
74.8074.8174.82T:grain128aeadv2
75.8875.8975.89T:tinyjambu192v2
82.9482.9783.00T:tinyjambu256v2
90.7891.0391.21T:isapk128v20
140.07140.25140.95T:isapxv20
163.11163.30165.29romulusn
232.45232.84234.49T!!!romulust
243.39246.31247.65romulusm
266.86270.14270.41T:elephant200v2
625.24625.55625.81aes256gcmv1
11883.4311883.8311884.16T:elephant160v2
11938.0211946.0511946.48T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
7.187.287.36T:aes128gcmv1
7.287.287.30T:aes256gcmv1
9.549.579.57ascon128av12
13.3713.3813.38ascon128v12
13.7413.7513.75ascon80pqv12
13.9214.0114.91T:xoodyakround3
18.6118.6318.63ascon128abi32v12
27.4927.5027.50ascon128bi32v12
30.1230.1330.14T:isapa128v20
33.2333.7733.79T:schwaemm256128v2
38.4938.5038.51T:isapa128av20
43.6843.7143.74T:giftcofb128v1
43.1343.9844.96T:schwaemm192192v2
46.2346.3346.45T:schwaemm128128v2
47.4147.4547.62T:schwaemm256256v2
50.3850.3950.39T:tinyjambu128v2
54.1654.1654.18T:tinyjambu192v2
55.8455.8455.86T:tinyjambu256v2
62.7762.7762.78T:romulusn
72.4172.4272.48T:isapk128av20
74.4974.5274.52T:grain128aeadv2
91.0991.1491.49T:isapk128v20
141.29142.61143.41T:isapxv20
158.34158.60160.58romulusn
158.84161.83161.90romulusm
178.04179.97180.07T:elephant200v2
230.93231.44231.96T!!!romulust
624.52625.03625.16aes256gcmv1
7898.297903.607904.20T:elephant176v2
7922.707922.947923.98T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
7.237.277.33T:aes256gcmv1
7.237.297.33T:aes128gcmv1
9.369.389.40ascon128av12
13.7413.7513.76ascon128v12
13.8713.8813.88ascon80pqv12
13.9414.0115.03T:xoodyakround3
18.5418.5718.58ascon128abi32v12
27.5027.5027.50ascon128bi32v12
30.1230.1330.15T:isapa128v20
33.5233.7834.34T:schwaemm256128v2
38.5038.5038.50T:isapa128av20
43.6943.7443.75T:giftcofb128v1
43.6144.3345.16T:schwaemm192192v2
46.2546.3346.46T:schwaemm128128v2
47.3847.4547.88T:schwaemm256256v2
50.3750.3850.38T:tinyjambu128v2
54.1554.1654.16T:tinyjambu192v2
55.8455.8655.88T:tinyjambu256v2
63.0563.0763.09T:romulusn
71.8072.4472.62T:isapk128av20
74.5074.5374.53T:grain128aeadv2
91.1091.1891.53T:isapk128v20
140.52140.61140.79T:isapxv20
158.32159.02160.57romulusn
159.39162.34162.74romulusm
178.03180.03180.20T:elephant200v2
231.65232.40234.53T!!!romulust
625.15625.60625.81aes256gcmv1
7897.817903.207903.83T:elephant176v2
7922.427922.747923.87T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
7.257.307.31T:aes128gcmv1
7.217.317.35T:aes256gcmv1
9.389.389.39ascon128av12
13.7413.7513.76ascon128v12
13.8713.8813.88ascon80pqv12
13.9514.0115.03T:xoodyakround3
18.5718.5718.58ascon128abi32v12
27.5027.5027.50ascon128bi32v12
30.1230.1330.13T:isapa128v20
33.2333.6734.35T:schwaemm256128v2
38.4838.5038.52T:isapa128av20
43.7143.7143.71T:giftcofb128v1
43.9644.4645.34T:schwaemm192192v2
46.3046.3246.46T:schwaemm128128v2
47.3447.4147.45T:schwaemm256256v2
50.3750.3750.38T:tinyjambu128v2
54.1654.1654.17T:tinyjambu192v2
55.8455.8655.86T:tinyjambu256v2
63.0663.0863.09T:romulusn
72.3772.4372.46T:isapk128av20
74.5274.5374.54T:grain128aeadv2
91.1091.1691.21T:isapk128v20
140.53140.59140.70T:isapxv20
158.66159.04160.57romulusn
159.37162.35162.74romulusm
177.97180.01180.20T:elephant200v2
231.35232.37234.49T!!!romulust
625.13625.61625.95aes256gcmv1
7902.997903.637904.02T:elephant176v2
7922.847923.997925.88T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
9.979.989.99ascon128av12
13.8413.8413.85ascon128v12
14.1514.1514.15ascon80pqv12
17.2817.3117.34T:aes128gcmv1
19.3319.3319.35ascon128abi32v12
20.4520.4820.52T:aes256gcmv1
21.7921.8023.03T:xoodyakround3
28.0028.0028.01ascon128bi32v12
34.6235.1835.99T:schwaemm256128v2
44.2544.2544.26T:giftcofb128v1
44.9344.9346.37T:schwaemm192192v2
47.3147.3248.03T:schwaemm128128v2
49.1549.1849.41T:schwaemm256256v2
52.2652.2652.29T:isapa128av20
65.4665.4765.49T:isapa128v20
65.7165.7365.78T:tinyjambu128v2
73.5973.6173.67T:romulusn
75.4475.4475.45T:grain128aeadv2
76.3476.3576.38T:tinyjambu192v2
83.4683.4783.50T:tinyjambu256v2
106.61106.63106.94T:isapk128av20
165.51165.56165.65romulusn
212.36212.46212.88T:isapk128v20
244.29247.73248.71romulusm
272.76275.63275.71T:elephant200v2
308.81309.25309.91T:isapxv20
484.20485.11485.31T!!!romulust
12017.6912017.9412018.23T:elephant160v2
12028.7712036.8912037.24T:elephant176v2
13186.1813186.3113186.50aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
9.789.789.79ascon128av12
14.0314.0314.03ascon128v12
14.0914.0914.09ascon80pqv12
17.2717.2817.31T:aes128gcmv1
19.3219.3219.34ascon128abi32v12
20.4720.5620.61T:aes256gcmv1
21.6321.6422.92T:xoodyakround3
28.5028.5028.50ascon128bi32v12
34.9935.4835.97T:schwaemm256128v2
44.1144.1144.14T:giftcofb128v1
45.6646.2146.95T:schwaemm192192v2
47.7447.7648.44T:schwaemm128128v2
49.1249.2749.37T:schwaemm256256v2
52.2752.2752.28T:isapa128av20
65.4965.4965.50T:isapa128v20
65.7165.7865.79T:tinyjambu128v2
74.1974.2174.22T:romulusn
75.2075.2175.22T:grain128aeadv2
76.4876.4976.50T:tinyjambu192v2
83.6083.6283.65T:tinyjambu256v2
106.65106.66106.67T:isapk128av20
165.41165.60166.93romulusn
212.36212.49212.66T:isapk128v20
245.60249.07250.00romulusm
272.59275.64275.70T:elephant200v2
306.11308.99309.66T:isapxv20
485.85486.63490.33T!!!romulust
12017.3012017.7212017.98T:elephant160v2
12030.3512036.8512037.12T:elephant176v2
13186.9013187.0413187.41aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
9.789.789.79ascon128av12
14.0314.0314.03ascon128v12
14.0914.0914.09ascon80pqv12
17.2617.2817.32T:aes128gcmv1
19.3219.3219.33ascon128abi32v12
20.4120.4720.59T:aes256gcmv1
21.6821.6922.97T:xoodyakround3
28.5028.5028.51ascon128bi32v12
35.1935.4835.97T:schwaemm256128v2
40.5740.5840.58T:isapa128v20
40.6740.6740.68T:isapa128av20
44.1144.1144.12T:giftcofb128v1
45.8146.5746.95T:schwaemm192192v2
47.7047.7448.44T:schwaemm128128v2
49.2549.4449.49T:schwaemm256256v2
65.7165.7265.79T:tinyjambu128v2
74.1674.1874.19T:romulusn
75.2075.2075.22T:grain128aeadv2
76.4876.4976.50T:tinyjambu192v2
82.8582.8782.89T:isapk128av20
83.6083.6183.62T:tinyjambu256v2
141.39141.42141.78T:isapk128v20
165.41165.54166.93romulusn
199.51199.69200.30T:isapxv20
239.33239.58241.06T!!!romulust
245.65249.08250.00romulusm
272.61275.65275.84T:elephant200v2
885.05885.16885.31aes256gcmv1
12017.6412018.1312019.62T:elephant160v2
12028.9212036.8112037.10T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
14.8414.8415.55ascon128av12
18.4118.5119.03ascon128v12
18.6918.7019.76ascon80pqv12
28.7928.7929.95ascon128abi32v12
33.7033.7334.16T:xoodyakround3
37.7437.7538.30ascon128bi32v12
39.4139.5540.38T:aes128gcmv1
43.7743.8444.95T:aes256gcmv1
54.4354.4554.80T:giftcofb128v1
55.5956.3856.42T:schwaemm256128v2
60.3860.6060.67T:schwaemm128128v2
72.2272.3973.08T:schwaemm192192v2
77.4377.5777.88T:schwaemm256256v2
77.8577.8778.25T:tinyjambu128v2
83.9383.9484.06T:grain128aeadv2
90.1590.1990.25T:tinyjambu192v2
94.7494.7895.32T:romulusn
97.8497.8898.28T:tinyjambu256v2
138.61138.62139.31T:isapa128av20
206.02206.30206.88romulusn
287.45290.30291.19romulusm
383.52386.39386.55T:elephant200v2
449.79449.91450.41T:isapk128av20
548.66548.66549.46T:isapa128v20
655.54656.77659.23T!!!romulust
2340.622340.802341.22T:isapk128v20
2970.472970.702990.81T:isapxv20
14987.0514992.5914995.10T:elephant176v2
16094.8916097.2516098.12T:elephant160v2
19156.3419156.8219159.76aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
14.5814.6115.05ascon128av12
18.7418.7519.38ascon80pqv12
18.6918.7719.47ascon128v12
28.9828.9829.51ascon128abi32v12
33.5733.5933.59T:xoodyakround3
38.2338.2739.92T:aes128gcmv1
38.3238.3238.88ascon128bi32v12
43.3344.3844.40T:aes256gcmv1
54.7754.7955.41T:giftcofb128v1
56.0556.6656.71T:schwaemm256128v2
60.7960.9761.12T:schwaemm128128v2
72.7072.8173.95T:schwaemm192192v2
77.5877.7082.54T:schwaemm256256v2
77.7777.8377.87T:tinyjambu128v2
83.8383.8584.08T:grain128aeadv2
90.0990.1090.34T:tinyjambu192v2
94.9195.0595.26T:romulusn
98.5598.7198.93T:tinyjambu256v2
138.91139.13139.20T:isapa128av20
205.82206.66207.14romulusn
306.56311.26311.43romulusm
383.35386.13386.50T:elephant200v2
450.38450.38451.36T:isapk128av20
549.29549.30549.64T:isapa128v20
656.38657.98663.77T!!!romulust
2341.122341.742346.62T:isapk128v20
2963.162976.412978.52T:isapxv20
14988.6214993.1214994.36T:elephant176v2
16090.2516096.0116100.67T:elephant160v2
19157.2619158.2719160.23aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
14.5814.5914.61ascon128av12
18.6818.7318.82ascon128v12
18.7418.7418.75ascon80pqv12
28.9628.9628.97ascon128abi32v12
33.6033.6333.91T:xoodyakround3
38.3038.3038.30ascon128bi32v12
38.2438.4639.23T:aes128gcmv1
43.3443.8944.55T:aes256gcmv1
54.7754.7754.79T:giftcofb128v1
55.8556.6756.72T:schwaemm256128v2
60.7660.9560.97T:schwaemm128128v2
72.4572.7073.94T:schwaemm192192v2
77.1677.4177.73T:schwaemm256256v2
77.7777.7777.80T:tinyjambu128v2
83.8283.8583.85T:grain128aeadv2
89.1089.1389.29T:isapa128av20
90.2490.2490.25T:tinyjambu192v2
94.5994.6294.80T:romulusn
98.5598.7198.82T:tinyjambu256v2
205.82206.23206.72romulusn
286.41286.41286.49T:isapa128v20
308.12308.26308.50T:isapk128av20
310.91311.26311.41romulusm
385.92386.14386.50T:elephant200v2
391.30391.37395.41T!!!romulust
1281.701282.291286.55T:isapk128v20
1539.011540.671540.91T:isapxv20
6853.906854.106858.74aes256gcmv1
14987.7014993.2514994.94T:elephant176v2
16094.3816096.2316101.39T:elephant160v2