VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; K10 32nm (300f10); 2011 AMD A8-3850; 4 x 2900MHz; hydra5, supercop-20250415

[Page version: 20250506 12:43:01]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
9.299.329.33ascon128av12
13.8713.8813.89ascon128v12
13.9113.9213.92ascon80pqv12
19.1819.2119.21ascon128abi32v12
26.4426.4626.54T:xoodyakround3
27.7427.7527.77ascon128bi32v12
31.8431.8531.87T:schwaemm256128v2
38.2838.3838.53T:aes128gcmv1
40.0240.4340.67T:aes256gcmv1
42.0742.2942.46T:schwaemm192192v2
44.8444.8544.87T:giftcofb128v1
46.0046.0146.16T:schwaemm256256v2
46.9346.9446.94T:schwaemm128128v2
53.8553.8853.90T:isapa128v20
57.8457.8657.90T:isapa128av20
73.9473.9473.95T:grain128aeadv2
81.8481.8481.86T:tinyjambu128v2
85.3485.6085.63T:romulusn
98.4398.4498.46T:tinyjambu192v2
105.33105.47106.26T:isapk128av20
113.20113.23113.24T:tinyjambu256v2
140.12140.22140.66T:isapk128v20
178.43178.53178.55romulusn
241.84242.49242.51T:elephant200v2
298.02302.89306.91T:isapxv20
329.02329.65330.86romulusm
702.49707.20711.29T!!!romulust
14420.4114420.8214421.43T:elephant160v2
15229.8015230.2315230.63T:elephant176v2
24460.8024461.3624462.68aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
9.419.459.45ascon128av12
13.8613.8813.88ascon80pqv12
13.9914.0014.01ascon128v12
18.3618.3918.41ascon128abi32v12
26.1426.2926.38T:xoodyakround3
28.5028.5028.50ascon128bi32v12
31.8031.9131.93T:schwaemm256128v2
38.3638.4438.55T:aes128gcmv1
39.8740.1740.48T:aes256gcmv1
42.4142.4542.62T:schwaemm192192v2
44.5544.5644.57T:giftcofb128v1
45.9946.0346.15T:schwaemm256256v2
46.9947.0247.03T:schwaemm128128v2
53.8653.8853.90T:isapa128v20
57.8457.8657.87T:isapa128av20
76.5876.5876.59T:grain128aeadv2
81.5081.5181.52T:tinyjambu128v2
85.4685.4885.49T:romulusn
98.9798.9899.00T:tinyjambu192v2
105.40105.44105.46T:isapk128av20
113.21113.22113.34T:tinyjambu256v2
140.18140.23140.47T:isapk128v20
178.36178.63178.65romulusn
241.75242.35242.40T:elephant200v2
297.41306.26307.00T:isapxv20
330.23330.45331.65romulusm
705.15708.69709.14T!!!romulust
14420.3214420.9814421.16T:elephant160v2
15229.8415230.4315230.62T:elephant176v2
24458.4124459.4724461.66aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
9.459.459.45ascon128av12
13.8813.8813.88ascon80pqv12
14.0014.0014.00ascon128v12
18.3918.3918.42ascon128abi32v12
26.2126.3226.48T:xoodyakround3
26.8426.8726.91T:isapa128v20
28.5028.5028.50ascon128bi32v12
31.8031.9231.93T:schwaemm256128v2
38.2538.2638.27T:isapa128av20
38.3738.4338.51T:aes128gcmv1
39.5340.1240.47T:aes256gcmv1
42.4142.4442.62T:schwaemm192192v2
44.5644.5744.57T:giftcofb128v1
45.9946.0246.15T:schwaemm256256v2
46.8047.0047.02T:schwaemm128128v2
70.1070.1270.14T:isapk128av20
76.5776.5876.58T:grain128aeadv2
81.4981.5081.52T:tinyjambu128v2
85.4585.4785.49T:romulusn
87.5487.5887.60T:isapk128v20
98.9798.9898.99T:tinyjambu192v2
113.21113.22113.62T:tinyjambu256v2
178.37178.63178.65romulusn
174.73179.93184.01T:isapxv20
226.32227.10230.09T!!!romulust
241.73242.34242.40T:elephant200v2
330.20330.72331.66romulusm
624.34624.92625.67aes256gcmv1
14420.2614420.7014421.03T:elephant160v2
15229.6715230.2515230.59T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
9.119.149.15ascon128av12
13.5513.5613.57ascon128v12
13.7013.7113.72ascon80pqv12
18.7318.7618.77ascon128abi32v12
20.3020.5020.57T:xoodyakround3
22.7722.8622.91T:aes128gcmv1
23.9224.0824.14T:aes256gcmv1
27.3627.3827.39ascon128bi32v12
31.6931.7131.73T:schwaemm256128v2
40.2340.2540.27T:isapa128v20
41.9741.9842.14T:schwaemm192192v2
44.8344.8444.85T:giftcofb128v1
45.9046.0346.07T:schwaemm256256v2
46.8146.8446.86T:schwaemm128128v2
48.0548.0648.07T:isapa128av20
66.7466.7466.78T:tinyjambu128v2
73.8073.8573.86T:grain128aeadv2
74.1974.2774.36T:romulusn
76.6676.6876.98T:tinyjambu192v2
84.4484.4584.48T:tinyjambu256v2
87.7587.7687.78T:isapk128av20
113.65113.94114.12T:isapk128v20
163.72164.04164.28romulusn
181.05181.56181.75T:elephant200v2
236.57239.31241.54T:isapxv20
239.81240.07241.58romulusm
465.29466.10468.01T!!!romulust
10814.6710814.9010815.17T:elephant160v2
11378.7611378.8811379.23T:elephant176v2
12541.7812542.2812544.26aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
9.179.209.21ascon128av12
13.8113.8113.82ascon128v12
13.8613.8813.88ascon80pqv12
18.3118.3418.35ascon128abi32v12
20.1420.1820.33T:xoodyakround3
22.8022.8522.89T:aes128gcmv1
23.7823.9324.08T:aes256gcmv1
27.8127.8127.82ascon128bi32v12
31.6331.7431.75T:schwaemm256128v2
40.2440.2540.44T:isapa128v20
42.1242.1642.34T:schwaemm192192v2
44.6744.6944.70T:giftcofb128v1
45.9045.9146.05T:schwaemm256256v2
46.6446.8846.89T:schwaemm128128v2
48.0548.0648.07T:isapa128av20
66.5266.5766.60T:tinyjambu128v2
74.2274.2374.43T:romulusn
75.1175.1775.19T:grain128aeadv2
76.9676.9677.01T:tinyjambu192v2
84.4584.4584.47T:tinyjambu256v2
87.7487.7687.79T:isapk128av20
113.85113.89114.13T:isapk128v20
163.78163.96164.24romulusn
181.02181.50181.71T:elephant200v2
236.05239.59241.80T:isapxv20
240.62240.86241.84romulusm
466.75467.58467.82T!!!romulust
10814.6610814.8810814.98T:elephant160v2
11378.7711378.8411379.09T:elephant176v2
12542.3412542.8212546.33aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
9.209.209.20ascon128av12
13.8113.8113.81ascon128v12
13.8713.8813.88ascon80pqv12
18.3418.3418.35ascon128abi32v12
20.1720.2120.37T:xoodyakround3
22.8222.8422.90T:aes128gcmv1
23.6723.9924.17T:aes256gcmv1
26.7326.7526.77T:isapa128v20
27.8127.8127.82ascon128bi32v12
31.6331.7431.75T:schwaemm256128v2
38.2538.2638.26T:isapa128av20
42.1442.1542.32T:schwaemm192192v2
44.6944.6944.69T:giftcofb128v1
45.8945.9146.06T:schwaemm256256v2
46.7846.8846.89T:schwaemm128128v2
66.5266.5666.61T:tinyjambu128v2
70.1070.1270.15T:isapk128av20
74.2274.2774.38T:romulusn
75.1775.1775.18T:grain128aeadv2
76.9576.9676.99T:tinyjambu192v2
84.4584.4584.46T:tinyjambu256v2
87.5487.5887.70T:isapk128v20
163.81164.04164.22romulusn
174.32177.58180.90T:isapxv20
181.07181.50181.72T:elephant200v2
226.08226.95229.02T!!!romulust
240.62240.85241.85romulusm
624.54625.57642.79aes256gcmv1
10814.6110814.8310815.23T:elephant160v2
11378.7511378.8711378.98T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
7.147.277.35T:aes128gcmv1
7.557.838.06T:aes256gcmv1
8.918.958.96ascon128av12
13.2413.2513.26ascon128v12
13.4913.5013.51ascon80pqv12
14.0314.0814.16T:xoodyakround3
18.2318.2618.31ascon128abi32v12
26.6026.6226.64T:isapa128v20
26.9927.0027.00ascon128bi32v12
31.4931.5831.59T:schwaemm256128v2
38.2638.2738.27T:isapa128av20
41.8741.8842.02T:schwaemm192192v2
44.8044.8344.85T:giftcofb128v1
45.8145.8145.94T:schwaemm256256v2
46.4946.7546.77T:schwaemm128128v2
51.5451.6251.73T:tinyjambu128v2
54.9354.9454.97T:tinyjambu192v2
55.6755.6955.71T:tinyjambu256v2
62.9763.0563.08T:romulusn
70.1070.1270.57T:isapk128av20
73.7073.7773.77T:grain128aeadv2
87.5287.5387.58T:isapk128v20
120.89121.38121.40T:elephant200v2
148.79149.26150.11romulusn
150.54150.85152.41romulusm
174.89175.35177.97T:isapxv20
225.57227.60227.76T!!!romulust
624.45641.90642.21aes256gcmv1
7209.407209.667210.02T:elephant160v2
7527.877528.177528.58T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
7.227.277.31T:aes128gcmv1
7.617.807.94T:aes256gcmv1
8.918.958.95ascon128av12
13.6213.6213.63ascon128v12
13.8713.8813.88ascon80pqv12
14.0414.0814.15T:xoodyakround3
18.2718.2918.30ascon128abi32v12
26.6026.6226.65T:isapa128v20
27.1227.1227.13ascon128bi32v12
31.5331.5831.60T:schwaemm256128v2
38.2638.2738.27T:isapa128av20
41.8741.9042.03T:schwaemm192192v2
44.8244.8244.83T:giftcofb128v1
45.8045.8245.94T:schwaemm256256v2
46.5046.7546.76T:schwaemm128128v2
51.5451.6351.72T:tinyjambu128v2
54.9354.9454.95T:tinyjambu192v2
55.6855.6955.70T:tinyjambu256v2
63.0663.0763.08T:romulusn
70.1070.1170.15T:isapk128av20
73.6873.7773.78T:grain128aeadv2
87.4887.5387.58T:isapk128v20
120.92121.38121.42T:elephant200v2
148.80149.26150.14romulusn
150.95151.09152.34romulusm
174.03174.45178.42T:isapxv20
226.47226.96229.70T!!!romulust
624.54641.04642.09aes256gcmv1
7209.317209.747210.12T:elephant160v2
7527.877528.177528.78T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
7.207.257.30T:aes128gcmv1
7.597.958.26T:aes256gcmv1
8.958.958.95ascon128av12
13.6213.6313.97ascon128v12
13.8813.8813.88ascon80pqv12
13.9614.0814.12T:xoodyakround3
18.2918.3018.30ascon128abi32v12
26.6026.6326.66T:isapa128v20
27.1227.1227.13ascon128bi32v12
31.5631.5831.60T:schwaemm256128v2
38.2538.2738.27T:isapa128av20
41.8741.9042.03T:schwaemm192192v2
44.8244.8244.82T:giftcofb128v1
45.7945.8145.94T:schwaemm256256v2
46.6646.7646.76T:schwaemm128128v2
51.5451.6251.71T:tinyjambu128v2
54.9354.9554.95T:tinyjambu192v2
55.6855.6955.70T:tinyjambu256v2
62.9863.0763.09T:romulusn
70.1070.1370.25T:isapk128av20
73.7773.7773.77T:grain128aeadv2
87.4787.5587.58T:isapk128v20
121.35121.38121.42T:elephant200v2
149.16149.41149.57romulusn
150.15151.08152.33romulusm
174.01174.40178.38T:isapxv20
226.43226.93229.73T!!!romulust
624.38624.93641.92aes256gcmv1
7209.307209.687210.05T:elephant160v2
7527.807528.097528.69T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
9.359.359.37ascon128av12
13.7713.7713.78ascon128v12
13.9213.9213.93ascon80pqv12
19.1519.1619.16ascon128abi32v12
20.5520.5920.74T:xoodyakround3
25.2225.2525.28T:aes128gcmv1
27.7927.7927.81ascon128bi32v12
27.8327.9928.02T:aes256gcmv1
32.6232.6332.64T:schwaemm256128v2
42.9242.9343.07T:schwaemm192192v2
45.3145.3145.31T:giftcofb128v1
47.1547.1547.27T:schwaemm256256v2
47.3247.4447.44T:schwaemm128128v2
51.8251.8251.84T:isapa128av20
58.7558.7859.16T:isapa128v20
67.1967.2367.24T:tinyjambu128v2
74.2774.2774.28T:grain128aeadv2
75.1375.2275.27T:romulusn
77.2977.2977.30T:tinyjambu192v2
85.1085.1185.13T:tinyjambu256v2
103.45103.45103.45T:isapk128av20
165.49165.65165.72romulusn
184.90185.36185.53T:elephant200v2
204.15204.15204.40T:isapk128v20
241.40242.39243.22romulusm
388.94392.31393.20T:isapxv20
472.71473.42476.32T!!!romulust
10937.2110937.3710937.62T:elephant160v2
11465.4211465.6411465.77T:elephant176v2
12795.1412808.3812814.94aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
9.419.419.42ascon128av12
14.0214.0214.03ascon128v12
14.0914.0914.10ascon80pqv12
18.7518.7618.76ascon128abi32v12
20.4020.4220.58T:xoodyakround3
25.2325.2425.27T:aes128gcmv1
28.2428.2428.25ascon128bi32v12
29.0529.2129.29T:aes256gcmv1
32.5632.6632.66T:schwaemm256128v2
43.0643.0643.21T:schwaemm192192v2
45.1745.1745.18T:giftcofb128v1
47.1447.1547.27T:schwaemm256256v2
47.3247.4747.47T:schwaemm128128v2
51.9551.9651.97T:isapa128av20
58.7558.7658.76T:isapa128v20
67.0567.0667.07T:tinyjambu128v2
75.1975.2075.23T:romulusn
75.5975.5975.61T:grain128aeadv2
77.5777.5777.58T:tinyjambu192v2
85.1085.1085.11T:tinyjambu256v2
103.50103.50103.53T:isapk128av20
165.50165.79165.84romulusn
184.97185.29185.30T:elephant200v2
204.21204.22204.51T:isapk128v20
242.47243.90244.26romulusm
387.97392.69393.78T:isapxv20
474.43475.19475.93T!!!romulust
10937.0910937.3210937.64T:elephant160v2
11465.2811465.4711465.59T:elephant176v2
12794.1812806.7612810.13aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
9.419.419.41ascon128av12
14.0214.0214.02ascon128v12
14.0914.0914.09ascon80pqv12
18.7518.7518.75ascon128abi32v12
20.4320.4620.67T:xoodyakround3
25.2225.2525.29T:aes128gcmv1
28.2428.2428.24ascon128bi32v12
32.5632.6632.66T:schwaemm256128v2
36.1536.1636.18T:isapa128v20
37.0137.1337.35T:aes256gcmv1
40.4940.4940.49T:isapa128av20
43.0643.0643.21T:schwaemm192192v2
45.1745.1745.18T:giftcofb128v1
47.1447.1447.27T:schwaemm256256v2
47.3147.4647.47T:schwaemm128128v2
67.0067.0567.06T:tinyjambu128v2
75.1775.1875.20T:romulusn
75.5975.5975.59T:grain128aeadv2
77.5777.5777.58T:tinyjambu192v2
80.5080.5180.55T:isapk128av20
85.1085.1085.12T:tinyjambu256v2
136.27136.29136.45T:isapk128v20
165.49165.80165.84romulusn
184.94185.21185.29T:elephant200v2
232.70233.39236.03T!!!romulust
242.73243.90244.26romulusm
252.30254.82255.15T:isapxv20
877.25877.51892.85aes256gcmv1
10937.0910937.3210937.52T:elephant160v2
11465.2911465.4511465.84T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
14.1014.1014.57ascon128av12
18.1818.2018.91ascon128v12
18.4518.4519.55ascon80pqv12
28.3328.3529.02ascon128abi32v12
30.9331.0831.34T:xoodyakround3
37.1337.1337.73ascon128bi32v12
53.4653.5453.64T:schwaemm256128v2
55.7755.8156.15T:giftcofb128v1
61.0561.0561.07T:schwaemm128128v2
69.6969.8270.08T:schwaemm192192v2
75.1275.1675.30T:schwaemm256256v2
78.1678.7878.78T:tinyjambu128v2
79.1379.5080.71T:aes128gcmv1
83.4183.4583.67T:grain128aeadv2
91.2491.3491.40T:tinyjambu192v2
96.9197.0997.20T:romulusn
100.34100.40100.57T:tinyjambu256v2
112.12113.65118.99T:aes256gcmv1
138.07138.12138.28T:isapa128av20
202.99203.32203.60romulusn
262.08262.21262.69T:elephant200v2
280.35282.98283.38romulusm
445.52445.62446.32T:isapk128av20
483.88483.89484.93T:isapa128v20
636.87637.80637.93T!!!romulust
2256.652257.082257.46T:isapk128v20
3831.253838.493855.75T:isapxv20
14275.9514281.9814283.42T:elephant176v2
14650.0614655.1614656.53T:elephant160v2
18583.3118584.4818591.66aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
14.1414.1515.11ascon128av12
18.6418.6519.20ascon128v12
18.7718.7719.68ascon80pqv12
28.3728.6328.91ascon128abi32v12
30.8030.9031.35T:xoodyakround3
37.8437.8438.14ascon128bi32v12
53.2553.4653.48T:schwaemm256128v2
56.0856.2556.97T:giftcofb128v1
60.9561.0261.24T:schwaemm128128v2
68.9769.2569.99T:schwaemm192192v2
75.1275.2075.32T:schwaemm256256v2
78.1178.4578.68T:tinyjambu128v2
79.1879.7080.88T:aes128gcmv1
84.7984.8085.16T:grain128aeadv2
91.7091.7291.75T:tinyjambu192v2
97.0997.1697.28T:romulusn
99.5999.65100.41T:tinyjambu256v2
141.41141.42141.63T:isapa128av20
147.26148.96149.82T:aes256gcmv1
203.93204.12204.59romulusn
261.39262.17262.25T:elephant200v2
296.86298.63300.72romulusm
446.81446.91447.30T:isapk128av20
483.91484.02484.86T:isapa128v20
638.12638.59640.02T!!!romulust
2257.892258.532258.62T:isapk128v20
3831.643835.323835.79T:isapxv20
14275.7714279.8014281.32T:elephant176v2
14649.8214655.1814656.98T:elephant160v2
18581.4118583.7918593.57aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
14.1414.1514.30ascon128av12
18.6218.6318.66ascon128v12
18.7618.7718.77ascon80pqv12
28.0228.0528.06ascon128abi32v12
30.9031.0531.30T:xoodyakround3
37.8337.8338.12ascon128bi32v12
53.2553.4653.48T:schwaemm256128v2
56.0856.1056.25T:giftcofb128v1
60.8760.9461.19T:schwaemm128128v2
68.9769.2569.32T:schwaemm192192v2
74.9174.9275.16T:schwaemm256256v2
78.2478.4578.67T:tinyjambu128v2
79.0579.6380.23T:aes128gcmv1
84.7984.8084.81T:grain128aeadv2
91.6491.6691.74T:isapa128av20
91.6291.7291.76T:tinyjambu192v2
96.7496.8196.88T:romulusn
99.5599.59100.41T:tinyjambu256v2
203.93204.06204.66romulusn
252.18252.59252.98T:isapa128v20
261.42262.24262.65T:elephant200v2
296.26298.18299.95romulusm
304.35304.59304.74T:isapk128av20
338.57340.13345.19T:aes256gcmv1
380.22381.88383.60T!!!romulust
1238.441238.731239.18T:isapk128v20
1998.362004.632008.40T:isapxv20
6662.116662.736668.93aes256gcmv1
14275.9714281.0014283.04T:elephant176v2
14650.1514654.4514657.24T:elephant160v2