VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Xeon E3-1275 V2; 4 x 3500MHz; hydra8, supercop-20241022

[Page version: 20241120 00:41:35]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
2.50?2.76?2.89?T:aes128gcmv1
2.732.833.00T:aes256gcmv1
8.578.618.62ascon128av12
12.8112.8312.85ascon128v12
12.7512.8712.90ascon80pqv12
16.4316.6316.65ascon128abi32v12
17.3917.5117.73T:xoodyakround3
23.3823.4724.14T:schwaemm256128v2
24.4124.4524.47ascon128bi32v12
27.9228.1828.45T:grain128aeadv2
30.8430.9230.98T:schwaemm192192v2
33.2433.2833.40T:schwaemm128128v2
33.8533.8834.08T:schwaemm256256v2
38.7538.7739.10romulusn
44.7444.7644.79T:giftcofb128v1
47.8447.8947.91T:isapa128v20
50.7150.7650.83T:isapa128av20
50.7850.8350.87T:tinyjambu128v2
57.1657.2157.30T:tinyjambu192v2
59.2559.3159.34T:tinyjambu256v2
62.6962.7662.81romulusm
90.9491.0991.21T:isapk128av20
120.82121.94122.09T:isapk128v20
126.28126.40126.51romulust
182.97183.20184.43T:elephant200v2
186.34191.23194.73T:isapxv20
362.04362.20362.44aes256gcmv1
9229.749231.129233.45T:elephant176v2
10530.1310531.5010532.83T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
2.24?2.70?2.96?T:aes128gcmv1
2.60?3.05?3.24?T:aes256gcmv1
8.508.618.64ascon128av12
12.7212.7512.86ascon80pqv12
12.8012.8312.86ascon128v12
16.6316.6716.75ascon128abi32v12
17.1817.3417.42T:xoodyakround3
23.3323.3823.44T:schwaemm256128v2
24.1024.1524.19ascon128bi32v12
29.1229.1529.18T:grain128aeadv2
30.7730.8831.71T:schwaemm192192v2
33.5033.5733.68T:schwaemm128128v2
33.9934.0334.29T:schwaemm256256v2
39.0739.1239.15romulusn
44.7544.7944.86T:giftcofb128v1
47.8547.9448.02T:isapa128v20
50.6850.7250.80T:isapa128av20
50.9851.0051.04T:tinyjambu128v2
57.8157.8857.92T:tinyjambu192v2
59.9259.9760.02T:tinyjambu256v2
62.9363.1163.16romulusm
91.0791.2291.34T:isapk128av20
120.81121.32121.50T:isapk128v20
126.29126.38126.48romulust
182.99183.15184.42T:elephant200v2
189.14190.56192.49T:isapxv20
361.29361.53361.74aes256gcmv1
9229.509230.859233.18T:elephant176v2
10530.2310531.4910532.60T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
2.31?2.75?2.87?T:aes128gcmv1
2.61?3.08?3.22?T:aes256gcmv1
8.588.618.63ascon128av12
12.7512.8312.86ascon80pqv12
12.8112.8512.88ascon128v12
16.6216.6616.74ascon128abi32v12
17.2617.3217.42T:xoodyakround3
23.3423.3823.41T:schwaemm256128v2
23.5423.5723.60T:isapa128v20
24.1124.1424.18ascon128bi32v12
29.1329.1729.19T:grain128aeadv2
30.7930.9031.70T:schwaemm192192v2
33.4433.5433.60T:schwaemm128128v2
33.9934.0434.33T:schwaemm256256v2
34.3534.3934.43T:isapa128av20
39.0539.1139.13romulusn
43.2143.2643.31romulust
44.7344.7844.80T:giftcofb128v1
50.9751.0251.07T:tinyjambu128v2
57.8157.8657.90T:tinyjambu192v2
59.9259.9660.04T:tinyjambu256v2
60.9361.0761.15T:isapk128av20
63.0363.1063.15romulusm
75.0775.5675.70T:isapk128v20
111.82112.33113.59T:isapxv20
182.96183.18184.38T:elephant200v2
350.24350.72350.95aes256gcmv1
9230.189231.239233.67T:elephant176v2
10529.9510531.2810532.79T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
2.152.182.29T:aes128gcmv1
2.342.422.50T:aes256gcmv1
8.548.568.58ascon128av12
12.6112.7112.75ascon80pqv12
12.7012.7112.73ascon128v12
13.1813.2313.28T:xoodyakround3
16.5416.5816.61ascon128abi32v12
23.2023.2623.61T:schwaemm256128v2
24.1724.2024.22ascon128bi32v12
27.9428.0828.18T:grain128aeadv2
30.6830.7030.76T:schwaemm192192v2
31.3031.3431.39romulusn
33.1633.2033.24T:schwaemm128128v2
33.6133.6633.88T:schwaemm256256v2
35.7436.0636.65T:isapa128v20
40.8740.9240.94T:tinyjambu128v2
42.5542.5842.60T:isapa128av20
43.2843.3243.38romulusm
44.4544.4944.52T:tinyjambu192v2
44.5244.5544.57T:tinyjambu256v2
44.6944.7144.73T:giftcofb128v1
75.9776.0176.08T:isapk128av20
84.6084.6584.73romulust
98.2398.5298.89T:isapk128v20
136.63136.79137.71T:elephant200v2
149.44152.01153.78T:isapxv20
356.64356.74356.93aes256gcmv1
6894.086894.906896.25T:elephant176v2
7892.237892.917893.58T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
2.202.262.30T:aes128gcmv1
2.262.452.49T:aes256gcmv1
8.548.578.62ascon128av12
12.7312.7912.80ascon128v12
12.6612.8012.85ascon80pqv12
13.0813.1313.17T:xoodyakround3
16.8216.8516.86ascon128abi32v12
23.2223.2523.28T:schwaemm256128v2
24.1224.2024.33ascon128bi32v12
28.3928.4328.46T:grain128aeadv2
30.6930.7631.14T:schwaemm192192v2
31.4831.5131.54romulusn
33.2033.2433.31T:schwaemm128128v2
33.7033.7333.98T:schwaemm256256v2
35.5535.8536.02T:isapa128v20
40.9640.9941.01T:tinyjambu128v2
42.5242.5642.62T:isapa128av20
43.4643.5043.51romulusm
44.6944.7344.76T:giftcofb128v1
44.8344.8844.90T:tinyjambu256v2
44.8544.8944.93T:tinyjambu192v2
75.9976.0876.13T:isapk128av20
84.5684.6284.67romulust
98.4598.5398.62T:isapk128v20
136.66136.76137.70T:elephant200v2
151.15151.65152.73T:isapxv20
355.63355.96356.21aes256gcmv1
6894.236895.086896.28T:elephant176v2
7891.557892.817893.75T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
2.142.192.29T:aes128gcmv1
2.292.432.45T:aes256gcmv1
8.558.578.59ascon128av12
12.7812.7912.80ascon128v12
12.7912.8212.85ascon80pqv12
13.1213.1813.22T:xoodyakround3
16.8316.8616.88ascon128abi32v12
23.2123.2423.28T:schwaemm256128v2
23.3023.5223.69T:isapa128v20
24.1024.1224.32ascon128bi32v12
28.4128.4328.45T:grain128aeadv2
30.6830.7331.11T:schwaemm192192v2
31.5131.5331.57romulusn
33.1833.2333.30T:schwaemm128128v2
33.7133.7333.98T:schwaemm256256v2
34.3434.3634.39T:isapa128av20
40.9640.9941.01T:tinyjambu128v2
43.0543.0843.14romulust
43.4543.4743.50romulusm
44.7044.7244.77T:giftcofb128v1
44.8644.8844.91T:tinyjambu256v2
44.8644.9044.93T:tinyjambu192v2
60.9260.9561.05T:isapk128av20
75.5975.6475.72T:isapk128v20
112.49112.56113.13T:isapxv20
136.61136.87137.70T:elephant200v2
350.43350.73350.98aes256gcmv1
6894.276894.816895.95T:elephant176v2
7891.897893.047893.56T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
1.721.791.85T:aes256gcmv1
1.701.791.88T:aes128gcmv1
8.488.508.52ascon128av12
8.898.938.98T:xoodyakround3
12.4712.5012.59ascon80pqv12
12.6612.6812.70ascon128v12
16.4816.5016.52ascon128abi32v12
23.0323.0523.08T:schwaemm256128v2
23.5923.6523.65T:isapa128v20
23.8323.9023.94romulusn
23.8223.9123.99romulusm
23.9523.9924.01ascon128bi32v12
27.6627.8928.16T:grain128aeadv2
29.7829.8129.84T:tinyjambu256v2
30.5530.5830.64T:schwaemm192192v2
30.9230.9530.97T:tinyjambu128v2
31.7031.7431.76T:tinyjambu192v2
33.0233.1233.21T:schwaemm128128v2
33.3733.4033.68T:schwaemm256256v2
34.2834.3534.43T:isapa128av20
42.9042.9742.99romulust
44.6344.6644.72T:giftcofb128v1
60.7760.9661.06T:isapk128av20
75.4975.6175.71T:isapk128v20
92.3092.3592.71T:elephant200v2
110.55112.84114.57T:isapxv20
351.06351.17351.72aes256gcmv1
4558.744559.854561.02T:elephant176v2
5259.325260.115260.91T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
1.67?1.77?1.88?T:aes128gcmv1
1.741.811.89T:aes256gcmv1
8.498.518.62ascon128av12
8.888.928.96T:xoodyakround3
12.7012.7412.75ascon128v12
12.4312.8512.88ascon80pqv12
17.0017.0217.04ascon128abi32v12
23.0723.1023.18T:schwaemm256128v2
23.4523.6223.69T:isapa128v20
23.8123.8623.96romulusn
23.8423.9023.96romulusm
24.1124.1324.51ascon128bi32v12
27.6827.7027.74T:grain128aeadv2
29.7729.8029.84T:tinyjambu256v2
30.4730.5430.62T:schwaemm192192v2
30.9330.9530.98T:tinyjambu128v2
31.8931.9531.98T:tinyjambu192v2
32.8832.9433.00T:schwaemm128128v2
33.4233.4633.67T:schwaemm256256v2
34.3234.3634.40T:isapa128av20
42.9042.9543.01romulust
44.6044.6844.73T:giftcofb128v1
60.7660.8861.05T:isapk128av20
75.4875.5675.72T:isapk128v20
92.3192.4192.71T:elephant200v2
112.02112.62113.83T:isapxv20
350.79351.16351.38aes256gcmv1
4559.124559.594560.39T:elephant176v2
5258.965259.685260.17T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
1.741.811.88T:aes128gcmv1
1.731.841.90T:aes256gcmv1
8.478.488.50ascon128av12
8.908.938.99T:xoodyakround3
12.6612.7312.74ascon128v12
12.8012.8512.88ascon80pqv12
16.9917.0117.03ascon128abi32v12
23.0823.1223.13T:schwaemm256128v2
23.4523.4823.72T:isapa128v20
23.8023.8524.01romulusn
23.8923.9824.01romulusm
24.0724.1324.52ascon128bi32v12
27.6827.7127.74T:grain128aeadv2
29.7929.8329.85T:tinyjambu256v2
30.5230.5730.60T:schwaemm192192v2
30.9030.9530.97T:tinyjambu128v2
31.9231.9731.98T:tinyjambu192v2
32.9332.9933.07T:schwaemm128128v2
33.4333.4533.67T:schwaemm256256v2
34.3134.3534.40T:isapa128av20
42.8942.9643.00romulust
44.6444.6944.72T:giftcofb128v1
60.7260.9161.02T:isapk128av20
75.5075.5975.66T:isapk128v20
92.3292.3992.71T:elephant200v2
112.01112.45113.43T:isapxv20
350.49350.95351.15aes256gcmv1
4559.474560.394560.95T:elephant176v2
5258.965259.575260.68T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
3.623.723.74T:aes128gcmv1
3.813.903.92T:aes256gcmv1
8.788.798.80ascon128av12
12.8212.8712.94ascon80pqv12
12.8912.9012.98ascon128v12
13.3613.3713.42T:xoodyakround3
16.9516.9616.97ascon128abi32v12
23.8923.9224.25T:schwaemm256128v2
24.6124.6324.64ascon128bi32v12
28.5428.5728.68T:grain128aeadv2
31.4031.4331.47T:schwaemm192192v2
31.5831.6131.68romulusn
33.6433.7033.74T:schwaemm128128v2
34.5334.5734.77T:schwaemm256256v2
41.2241.2441.29T:tinyjambu128v2
43.6143.6543.74romulusm
44.7844.8344.85T:tinyjambu192v2
44.9144.9244.95T:tinyjambu256v2
45.0745.1045.12T:giftcofb128v1
45.4145.4645.50T:isapa128av20
52.6452.7352.93T:isapa128v20
85.9285.9786.01romulust
87.1587.2187.31T:isapk128av20
139.63139.74140.52T:elephant200v2
173.88174.17174.23T:isapk128v20
244.28246.78246.83T:isapxv20
358.73358.83358.95aes256gcmv1
6947.066947.496948.61T:elephant176v2
7981.567981.837982.30T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
3.653.663.69T:aes128gcmv1
3.753.803.89T:aes256gcmv1
8.768.778.80ascon128av12
12.9512.9712.98ascon128v12
12.9913.0213.05ascon80pqv12
13.2913.3113.32T:xoodyakround3
17.2217.2417.26ascon128abi32v12
23.8923.9123.95T:schwaemm256128v2
24.5424.7224.74ascon128bi32v12
28.8728.8828.90T:grain128aeadv2
31.3931.4631.77T:schwaemm192192v2
31.7831.8031.85romulusn
33.6733.7033.73T:schwaemm128128v2
34.6234.6534.86T:schwaemm256256v2
41.2941.3341.36T:tinyjambu128v2
43.8343.8443.85romulusm
45.1145.1345.16T:giftcofb128v1
45.2245.2345.29T:tinyjambu192v2
45.2045.2445.28T:tinyjambu256v2
45.4345.4445.50T:isapa128av20
52.6852.7153.01T:isapa128v20
85.9185.9385.95romulust
87.1787.2187.28T:isapk128av20
139.59139.70140.52T:elephant200v2
173.93174.01174.13T:isapk128v20
245.27245.86246.15T:isapxv20
358.25358.32358.49aes256gcmv1
6946.986947.436948.69T:elephant176v2
7981.197981.647982.88T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
3.653.673.71T:aes128gcmv1
3.723.813.85T:aes256gcmv1
8.728.778.78ascon128av12
12.9512.9713.00ascon128v12
13.0013.0113.04ascon80pqv12
13.2613.3013.35T:xoodyakround3
17.2317.2517.27ascon128abi32v12
23.8823.9223.94T:schwaemm256128v2
24.5424.5424.75ascon128bi32v12
28.8828.8928.92T:grain128aeadv2
31.4231.4531.77T:schwaemm192192v2
31.7831.8131.85romulusn
32.3132.3332.50T:isapa128v20
33.6433.6733.76T:schwaemm128128v2
34.6234.6334.86T:schwaemm256256v2
36.0236.0436.07T:isapa128av20
41.3241.3641.41T:tinyjambu128v2
43.8043.8443.87romulusm
44.3144.3544.37romulust
45.0945.1145.13T:giftcofb128v1
45.2245.2545.28T:tinyjambu192v2
45.2245.2545.27T:tinyjambu256v2
68.0168.0868.15T:isapk128av20
114.94114.99115.02T:isapk128v20
139.59139.74140.55T:elephant200v2
160.71160.74160.95T:isapxv20
352.72352.89352.98aes256gcmv1
6946.946947.266948.51T:elephant176v2
7981.017982.057983.90T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
13.6913.9114.56ascon128av12
17.1017.2317.84ascon80pqv12
17.3617.4817.61ascon128v12
19.4219.6220.38T:xoodyakround3
25.2725.3325.68ascon128abi32v12
34.0034.1834.36ascon128bi32v12
36.0636.3436.90T:aes128gcmv1
35.9536.7437.15T:aes256gcmv1
38.3838.4438.73romulusn
38.9139.1539.38T:schwaemm256128v2
39.1339.8042.84T:grain128aeadv2
43.0343.4344.58T:schwaemm128128v2
48.5148.7048.90T:tinyjambu128v2
50.3950.5551.09romulusm
50.5250.9151.12T:schwaemm192192v2
52.6152.9053.04T:tinyjambu192v2
52.9053.1353.47T:tinyjambu256v2
53.5753.8053.92T:giftcofb128v1
54.8355.0655.23T:schwaemm256256v2
111.08111.46112.36T:isapa128av20
115.51115.68115.98romulust
198.07198.81199.53T:elephant200v2
326.48326.70328.00T:isapk128av20
404.04404.50405.02aes256gcmv1
441.16441.85445.24T:isapa128v20
1887.151892.911893.75T:isapk128v20
2349.692400.172407.17T:isapxv20
8649.958651.918654.66T:elephant176v2
10687.3510692.2110695.73T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
13.7313.9614.07ascon128av12
17.2917.3817.67ascon128v12
17.4117.4217.76ascon80pqv12
19.4419.9520.31T:xoodyakround3
25.9526.0026.15ascon128abi32v12
34.0534.2734.51ascon128bi32v12
35.0235.2736.91T:aes128gcmv1
35.0435.4136.44T:aes256gcmv1
38.3738.5838.70romulusn
39.0339.1339.34T:schwaemm256128v2
39.2439.5439.73T:grain128aeadv2
43.2543.4344.19T:schwaemm128128v2
48.7348.7749.11T:tinyjambu128v2
50.8851.0151.41T:schwaemm192192v2
51.9552.0152.16romulusm
53.0553.2353.62T:tinyjambu192v2
53.2053.3353.60T:tinyjambu256v2
53.6453.7654.02T:giftcofb128v1
54.7355.0155.16T:schwaemm256256v2
111.60111.80112.09T:isapa128av20
115.58115.77116.03romulust
197.76198.10199.09T:elephant200v2
324.11325.23326.84T:isapk128av20
404.14404.30404.46aes256gcmv1
441.73442.19448.31T:isapa128v20
1885.961886.731897.19T:isapk128v20
2360.952391.612397.40T:isapxv20
8650.308652.648655.28T:elephant176v2
10687.2010689.8010693.29T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
13.6313.7713.90ascon128av12
17.2517.3417.54ascon128v12
17.3517.4117.55ascon80pqv12
19.5519.9520.11T:xoodyakround3
25.9526.0426.23ascon128abi32v12
34.0534.1334.19ascon128bi32v12
34.7034.9736.56T:aes256gcmv1
35.1235.3236.07T:aes128gcmv1
38.3238.4238.51romulusn
39.0339.1439.21T:schwaemm256128v2
39.2139.2839.45T:grain128aeadv2
43.2443.3443.50T:schwaemm128128v2
48.5948.7348.82T:tinyjambu128v2
50.9251.1751.54T:schwaemm192192v2
51.8952.0252.16romulusm
53.0453.1053.23T:tinyjambu256v2
53.1753.2553.40T:tinyjambu192v2
53.6253.8554.02T:giftcofb128v1
54.8555.0455.23T:schwaemm256256v2
72.8873.0273.30romulust
73.8574.1374.50T:isapa128av20
197.88198.22199.38T:elephant200v2
217.51217.61218.32T:isapk128av20
234.21234.49236.95T:isapa128v20
398.05398.65399.66aes256gcmv1
1003.031003.341004.05T:isapk128v20
1237.051250.361254.32T:isapxv20
8648.258651.268655.38T:elephant176v2
10685.6410692.5010695.59T:elephant160v2