VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; K10 32nm (300f10); 2011 AMD A8-3850; 4 x 2900MHz; hydra5, supercop-20260330

[Page version: 20260413 04:20:10]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
9.699.709.70ascon128av12
14.1214.1214.13ascon128v12
14.1214.1314.13ascon80pqv12
19.0019.0119.01ascon128abi32v12
27.2727.4227.47T:xoodyakround3
28.0028.0028.01ascon128bi32v12
30.6830.7630.81T:schwaemm256128v2
36.6437.3937.99T:aes256gcmv1
38.4438.8139.24T:aes128gcmv1
40.5340.5740.65T:schwaemm192192v2
42.0242.0342.08T:giftcofb128v1
43.9443.9844.09T:schwaemm256256v2
45.7445.8245.97T:schwaemm128128v2
56.1256.2656.57T:isapa128v20
57.9357.9458.10T:isapa128av20
79.4179.4379.60T:grain128aeadv2
83.2483.2783.45T:romulusn
104.92105.19105.81T:isapk128av20
106.50106.51106.82T:tinyjambu128v2
129.25129.26129.59T:tinyjambu192v2
138.49138.52138.83T:tinyjambu256v2
140.16140.92141.23T:isapk128v20
173.12173.33173.66romulusn
297.99308.57319.80T:isapxv20
316.26316.72317.90romulusm
313.65317.14319.66T:elephant200v2
686.37687.57688.58T!!!romulust
13027.6413028.4913029.08T:elephant176v2
14440.7814441.5914442.37T:elephant160v2
24555.9324557.0424561.95aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
9.639.639.64ascon128av12
14.0014.0014.00ascon128v12
14.0014.0014.00ascon80pqv12
19.0019.0119.01ascon128abi32v12
27.0027.1227.16T:xoodyakround3
28.4428.4428.45ascon128bi32v12
30.6230.7130.77T:schwaemm256128v2
37.2337.5838.28T:aes256gcmv1
38.4838.6038.89T:aes128gcmv1
40.5040.5540.69T:schwaemm192192v2
41.8441.8441.90T:giftcofb128v1
44.2744.3344.40T:schwaemm256256v2
45.7545.8345.99T:schwaemm128128v2
56.2056.2756.56T:isapa128v20
57.9157.9458.12T:isapa128av20
80.4180.8481.12T:grain128aeadv2
84.3384.3584.55T:romulusn
104.88105.24105.80T:isapk128av20
106.50106.50106.78T:tinyjambu128v2
127.25127.26127.53T:tinyjambu192v2
138.50138.51138.85T:tinyjambu256v2
140.02140.99141.25T:isapk128v20
173.27173.41173.74romulusn
307.37308.52312.40T:isapxv20
312.80316.36316.73T:elephant200v2
316.53316.95318.00romulusm
687.43689.05694.92T!!!romulust
13027.5613028.5713029.45T:elephant176v2
14440.7314441.6214442.51T:elephant160v2
24554.1724556.2524565.41aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
9.639.639.64ascon128av12
14.0014.0014.00ascon128v12
14.0014.0014.01ascon80pqv12
19.0119.0119.01ascon128abi32v12
27.0927.2227.28T:xoodyakround3
27.8527.8927.98T:isapa128v20
28.4428.4428.46ascon128bi32v12
30.6230.7130.76T:schwaemm256128v2
36.8237.8038.69T:aes256gcmv1
38.2338.2438.33T:isapa128av20
38.5038.5738.78T:aes128gcmv1
40.5040.5440.65T:schwaemm192192v2
41.8441.8441.85T:giftcofb128v1
44.2744.3344.41T:schwaemm256256v2
45.7545.8346.00T:schwaemm128128v2
69.7469.7770.38T:isapk128av20
80.6881.0181.31T:grain128aeadv2
84.3484.3684.54T:romulusn
87.3987.7588.13T:isapk128v20
106.50106.50106.75T:tinyjambu128v2
127.25127.26127.54T:tinyjambu192v2
138.50138.52138.86T:tinyjambu256v2
173.24173.39173.76romulusn
179.54188.74193.23T:isapxv20
220.88221.26221.99T!!!romulust
312.78316.68319.53T:elephant200v2
316.58316.88318.03romulusm
624.56625.33625.62aes256gcmv1
13027.7713028.6413029.44T:elephant176v2
14441.0314441.9714442.57T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
9.539.549.55ascon128av12
14.1214.1314.13ascon128v12
14.2514.2514.25ascon80pqv12
18.5418.5418.59ascon128abi32v12
20.9721.0421.12T:xoodyakround3
22.4222.8023.13T:aes256gcmv1
22.8423.0623.29T:aes128gcmv1
27.4927.5027.60ascon128bi32v12
30.5630.6230.65T:schwaemm256128v2
40.4140.4940.58T:schwaemm192192v2
41.9141.9242.05T:giftcofb128v1
42.0442.0842.28T:isapa128v20
43.8643.9344.06T:schwaemm256256v2
45.6445.7745.88T:schwaemm128128v2
48.0648.0848.23T:isapa128av20
72.1772.2372.39T:romulusn
79.1979.2679.40T:grain128aeadv2
87.1287.1787.30T:tinyjambu128v2
87.0587.2687.35T:isapk128av20
97.7597.8397.93T:tinyjambu192v2
102.13102.23102.32T:tinyjambu256v2
113.78114.05114.22T:isapk128v20
157.73158.09158.41romulusn
229.30229.64230.35romulusm
236.97237.54238.38T:elephant200v2
235.27243.03248.75T:isapxv20
453.69454.79455.27T!!!romulust
9731.609732.079732.72T:elephant176v2
10830.8810831.5510832.12T:elephant160v2
12591.7712592.4112593.55aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
9.549.549.54ascon128av12
14.0614.0614.07ascon128v12
14.0614.0614.07ascon80pqv12
18.5118.5118.54ascon128abi32v12
20.8020.8620.94T:xoodyakround3
22.8222.9123.32T:aes256gcmv1
22.8822.9523.13T:aes128gcmv1
27.5927.5927.68ascon128bi32v12
30.5330.6030.65T:schwaemm256128v2
40.4340.5140.61T:schwaemm192192v2
41.8241.8341.95T:giftcofb128v1
42.0242.1042.28T:isapa128v20
43.9544.0544.14T:schwaemm256256v2
45.6545.7745.89T:schwaemm128128v2
48.0748.0848.21T:isapa128av20
73.0473.0873.27T:romulusn
80.0280.1480.50T:grain128aeadv2
87.1287.1887.31T:tinyjambu128v2
87.0387.2587.37T:isapk128av20
96.8796.9797.04T:tinyjambu192v2
102.24102.36102.44T:tinyjambu256v2
113.76114.09114.24T:isapk128v20
157.75158.01158.50romulusn
229.52229.81230.52romulusm
234.56237.15237.56T:elephant200v2
239.36248.41251.19T:isapxv20
453.91454.79458.06T!!!romulust
9731.619732.199732.84T:elephant176v2
10831.2610831.7610832.21T:elephant160v2
12591.4112592.0812597.80aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
9.549.549.54ascon128av12
14.0614.0614.08ascon128v12
14.0614.0614.08ascon80pqv12
18.5118.5118.54ascon128abi32v12
20.8420.9120.98T:xoodyakround3
22.9122.9423.07T:aes128gcmv1
22.5922.9623.42T:aes256gcmv1
27.5927.6027.69ascon128bi32v12
27.8727.8828.01T:isapa128v20
30.5330.5930.64T:schwaemm256128v2
38.2238.2338.32T:isapa128av20
40.4040.4740.58T:schwaemm192192v2
41.8241.8341.93T:giftcofb128v1
44.0044.0844.16T:schwaemm256256v2
45.6545.7745.88T:schwaemm128128v2
69.4469.5369.75T:isapk128av20
73.0473.0673.24T:romulusn
79.9280.1681.51T:grain128aeadv2
87.1287.1987.32T:tinyjambu128v2
87.3787.6887.71T:isapk128v20
96.8896.9797.05T:tinyjambu192v2
102.25102.35102.45T:tinyjambu256v2
157.69158.02158.78romulusn
175.69188.63192.25T:isapxv20
220.70221.10221.96T!!!romulust
229.52229.79230.53romulusm
234.93240.23240.61T:elephant200v2
625.21625.64625.92aes256gcmv1
9731.419732.089732.68T:elephant176v2
10830.9110831.6110832.15T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
7.257.317.34T:aes128gcmv1
8.138.288.48T:aes256gcmv1
9.449.459.45ascon128av12
14.1214.1214.13ascon128v12
14.3814.3814.38ascon80pqv12
14.5314.5714.62T:xoodyakround3
18.0618.0718.07ascon128abi32v12
27.0027.0027.01ascon128bi32v12
27.8627.8827.95T:isapa128v20
30.3930.4030.45T:schwaemm256128v2
38.2438.2438.27T:isapa128av20
40.2940.3640.51T:schwaemm192192v2
41.8041.8141.89T:giftcofb128v1
43.6443.7343.76T:schwaemm256256v2
45.5445.6145.77T:schwaemm128128v2
61.0861.0961.18T:romulusn
65.7565.7565.86T:tinyjambu256v2
66.2566.2566.36T:tinyjambu192v2
67.7567.7567.82T:tinyjambu128v2
68.9969.2069.87T:isapk128av20
78.8979.0579.19T:grain128aeadv2
87.0187.3787.74T:isapk128v20
142.26142.64143.99romulusm
142.44142.95143.91romulusn
157.49159.11160.11T:elephant200v2
172.76175.28185.62T:isapxv20
220.01221.19221.86T!!!romulust
624.28625.44626.08aes256gcmv1
6435.896436.576437.21T:elephant176v2
7219.427219.737220.27T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
7.247.307.44T:aes128gcmv1
7.988.188.49T:aes256gcmv1
9.449.459.45ascon128av12
14.1214.1314.13ascon128v12
14.1214.1314.15ascon80pqv12
14.5414.5714.61T:xoodyakround3
18.0018.0118.01ascon128abi32v12
26.7526.7526.81ascon128bi32v12
27.8427.8827.95T:isapa128v20
30.3930.4130.46T:schwaemm256128v2
38.2338.2438.25T:isapa128av20
40.3040.3740.52T:schwaemm192192v2
41.8041.8141.94T:giftcofb128v1
43.6143.6643.86T:schwaemm256256v2
45.5345.6145.78T:schwaemm128128v2
61.7361.7761.88T:romulusn
66.0066.0066.10T:tinyjambu256v2
66.5066.5066.62T:tinyjambu192v2
67.7567.7567.87T:tinyjambu128v2
69.0869.1669.73T:isapk128av20
78.6678.8579.84T:grain128aeadv2
86.9887.3587.79T:isapk128v20
142.36142.85143.66romulusn
142.37142.88144.38romulusm
157.46159.26160.59T:elephant200v2
176.82187.93188.50T:isapxv20
220.39220.81221.18T!!!romulust
623.92625.39639.86aes256gcmv1
6435.806436.716437.35T:elephant176v2
7219.337219.807220.48T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
7.277.307.33T:aes128gcmv1
7.68?8.21?8.76?T:aes256gcmv1
9.449.459.45ascon128av12
14.1214.1314.13ascon128v12
14.1214.1314.13ascon80pqv12
14.5514.5714.61T:xoodyakround3
18.0118.0118.01ascon128abi32v12
26.7526.7526.80ascon128bi32v12
27.8427.8827.94T:isapa128v20
30.3930.4030.45T:schwaemm256128v2
38.2338.2438.25T:isapa128av20
40.2940.3640.52T:schwaemm192192v2
41.8041.8141.89T:giftcofb128v1
43.7043.8543.89T:schwaemm256256v2
45.5345.6045.76T:schwaemm128128v2
61.7361.7661.87T:romulusn
66.0066.0066.07T:tinyjambu256v2
66.5066.5066.60T:tinyjambu192v2
67.7567.7567.82T:tinyjambu128v2
68.9569.1669.77T:isapk128av20
78.6678.6678.99T:grain128aeadv2
87.0087.3887.76T:isapk128v20
142.02142.40143.35romulusn
142.45142.97143.63romulusm
157.45159.00160.45T:elephant200v2
176.82187.95190.81T:isapxv20
220.35220.76221.08T!!!romulust
624.48625.48639.94aes256gcmv1
6436.206436.726437.32T:elephant176v2
7219.367219.737220.27T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
9.769.769.76ascon128av12
14.3314.3314.34ascon128v12
14.4614.4614.46ascon80pqv12
18.9518.9518.96ascon128abi32v12
21.2121.2921.31T:xoodyakround3
25.2325.3825.56T:aes128gcmv1
26.3226.3626.60T:aes256gcmv1
27.9227.9227.98ascon128bi32v12
31.4031.4531.48T:schwaemm256128v2
41.3341.3841.46T:schwaemm192192v2
42.3642.3642.44T:giftcofb128v1
44.9845.0845.21T:schwaemm256256v2
46.2446.3246.44T:schwaemm128128v2
51.8451.8451.96T:isapa128av20
61.9261.9362.14T:isapa128v20
73.0773.0973.26T:romulusn
79.6279.6879.83T:grain128aeadv2
87.8187.8287.99T:tinyjambu128v2
98.4698.5098.68T:tinyjambu192v2
102.83102.89103.13T:isapk128av20
102.89102.91103.12T:tinyjambu256v2
159.51159.76159.99romulusn
203.63203.73203.85T:isapk128v20
231.00231.30231.90romulusm
240.02242.37244.97T:elephant200v2
397.85400.64402.65T:isapxv20
460.30461.46461.70T!!!romulust
9805.099805.419805.72T:elephant176v2
10953.8910954.3810954.95T:elephant160v2
12843.8512844.1112844.50aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
9.769.769.77ascon128av12
14.2714.2714.28ascon128v12
14.2814.2814.28ascon80pqv12
18.9318.9318.95ascon128abi32v12
21.0421.0821.11T:xoodyakround3
25.2725.3125.42T:aes128gcmv1
28.0328.0328.18ascon128bi32v12
28.0828.1628.56T:aes256gcmv1
31.3731.4531.48T:schwaemm256128v2
41.3241.3941.48T:schwaemm192192v2
42.2842.2942.36T:giftcofb128v1
45.2145.2445.34T:schwaemm256256v2
46.2546.3546.46T:schwaemm128128v2
51.9751.9852.11T:isapa128av20
61.9461.9662.21T:isapa128v20
73.9273.9574.20T:romulusn
80.4080.5181.27T:grain128aeadv2
87.8287.8288.02T:tinyjambu128v2
97.5997.6397.81T:tinyjambu192v2
102.83102.95103.17T:isapk128av20
103.02103.06103.25T:tinyjambu256v2
159.54159.76160.28romulusn
203.64203.75203.87T:isapk128v20
231.84232.03232.70romulusm
239.86241.98242.18T:elephant200v2
398.05408.22408.66T:isapxv20
460.98462.28464.49T!!!romulust
9805.169805.449805.77T:elephant176v2
10953.5410954.0610954.57T:elephant160v2
12843.4712843.8612844.14aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
9.769.769.76ascon128av12
14.2714.2714.28ascon128v12
14.2814.2814.28ascon80pqv12
18.9318.9318.94ascon128abi32v12
21.0821.1321.16T:xoodyakround3
25.2725.3025.41T:aes128gcmv1
28.0328.0428.12ascon128bi32v12
31.3931.4531.46T:schwaemm256128v2
35.4435.6236.03T:aes256gcmv1
37.9837.9938.13T:isapa128v20
40.4640.4640.54T:isapa128av20
41.3241.3541.42T:schwaemm192192v2
42.2842.2942.35T:giftcofb128v1
45.1645.2445.33T:schwaemm256256v2
46.2546.3246.47T:schwaemm128128v2
73.9173.9374.10T:romulusn
79.9479.9780.24T:isapk128av20
80.4680.6282.67T:grain128aeadv2
87.8287.8288.02T:tinyjambu128v2
97.5997.6197.80T:tinyjambu192v2
103.02103.05103.23T:tinyjambu256v2
135.86136.06136.18T:isapk128v20
159.50159.90160.10romulusn
226.94227.31227.61T!!!romulust
231.81232.06232.74romulusm
239.83242.13244.28T:elephant200v2
258.95271.48274.64T:isapxv20
877.69878.06878.31aes256gcmv1
9805.149805.559805.83T:elephant176v2
10953.8110954.3210954.76T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
14.6214.6214.83ascon128av12
18.8118.8218.93ascon128v12
19.0019.0119.10ascon80pqv12
28.2628.2628.48ascon128abi32v12
31.6631.7131.75T:xoodyakround3
37.3637.3737.55ascon128bi32v12
50.8550.8950.94T:schwaemm256128v2
52.3452.3752.40T:giftcofb128v1
59.6159.6959.87T:schwaemm128128v2
66.6366.7166.99T:schwaemm192192v2
71.5471.6871.80T:schwaemm256256v2
78.3578.5979.57T:aes128gcmv1
89.4389.4689.84T:grain128aeadv2
93.5393.6193.77T:romulusn
103.52103.56103.62T:tinyjambu128v2
105.59106.60114.11T:aes256gcmv1
114.88114.88114.96T:tinyjambu192v2
120.26120.27120.47T:tinyjambu256v2
137.71137.72138.24T:isapa128av20
195.83196.18196.68romulusn
267.85268.30269.20romulusm
338.80340.73341.44T:elephant200v2
447.21447.58447.93T:isapk128av20
518.12518.12518.48T:isapa128v20
616.27617.88620.26T!!!romulust
2238.582240.822246.79T:isapk128v20
3883.964028.274082.74T:isapxv20
12207.9012209.2612210.64T:elephant176v2
14667.1814670.0214671.57T:elephant160v2
18652.6618653.9218655.64aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
14.7614.7615.06ascon128av12
18.8218.8318.92ascon128v12
18.9518.9619.18ascon80pqv12
28.6028.6028.73ascon128abi32v12
31.5831.6631.82T:xoodyakround3
37.8337.8337.96ascon128bi32v12
50.8250.8750.93T:schwaemm256128v2
52.7152.7252.76T:giftcofb128v1
59.7959.8460.11T:schwaemm128128v2
66.8766.9566.96T:schwaemm192192v2
71.6771.8971.99T:schwaemm256256v2
79.4279.6079.68T:aes128gcmv1
90.1490.2890.71T:grain128aeadv2
94.1394.1994.25T:romulusn
103.87103.91103.91T:tinyjambu128v2
114.08114.09114.12T:tinyjambu192v2
120.62120.64120.82T:tinyjambu256v2
140.93140.98141.00T:isapa128av20
145.32147.35148.87T:aes256gcmv1
196.30196.60197.38romulusn
282.69283.30284.08romulusm
338.75341.02343.18T:elephant200v2
447.20447.89449.08T:isapk128av20
518.59518.83519.64T:isapa128v20
615.89616.76619.38T!!!romulust
2238.452239.872248.95T:isapk128v20
3969.084022.664027.20T:isapxv20
12207.8012209.2512210.86T:elephant176v2
14667.2414669.2314672.38T:elephant160v2
18653.1018655.3818672.38aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
14.7614.7614.76ascon128av12
18.8218.8218.84ascon128v12
18.9518.9618.98ascon80pqv12
28.5928.5928.59ascon128abi32v12
31.6531.7331.89T:xoodyakround3
37.8237.8237.85ascon128bi32v12
50.8350.8950.94T:schwaemm256128v2
52.7252.7452.79T:giftcofb128v1
59.7759.7960.08T:schwaemm128128v2
66.8666.9666.96T:schwaemm192192v2
71.6071.7371.85T:schwaemm256256v2
79.0979.3379.72T:aes128gcmv1
90.0390.1192.60T:grain128aeadv2
91.1591.2091.21T:isapa128av20
93.8293.8493.87T:romulusn
103.87103.91103.91T:tinyjambu128v2
114.08114.10114.15T:tinyjambu192v2
120.61120.62120.63T:tinyjambu256v2
196.24196.59197.35romulusn
270.12270.30270.71T:isapa128v20
282.65283.16284.02romulusm
305.90306.03306.24T:isapk128av20
321.46324.97332.05T:aes256gcmv1
338.72340.44344.78T:elephant200v2
367.28368.24368.42T!!!romulust
1230.311230.481233.83T:isapk128v20
2142.642146.712149.78T:isapxv20
6687.506689.646703.95aes256gcmv1
12207.9712209.3512210.85T:elephant176v2
14667.1214669.3214672.68T:elephant160v2