VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Core 2 65nm (6fb); 2007 Intel Core 2 Quad Q6600; 4 x 2404MHz; margaux, supercop-20250415

[Page version: 20250506 12:43:01]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
10.1610.1810.20ascon128av12
15.2515.2615.26ascon128v12
15.2715.2815.28ascon80pqv12
16.8016.9517.15T:aes128gcmv1
19.2519.2819.31ascon128abi32v12
19.8520.0820.29T:aes256gcmv1
28.6028.6028.60ascon128bi32v12
28.7728.8428.94T:xoodyakround3
32.2332.2932.56T:schwaemm256128v2
42.7443.2143.32T:schwaemm192192v2
45.4045.4345.45T:schwaemm128128v2
38.01?46.05?121.63?T:schwaemm256256v2
54.2754.3354.46T:giftcofb128v1
58.5758.5758.65T:isapa128v20
60.6760.6860.68T:isapa128av20
61.9361.9461.98T:grain128aeadv2
71.9172.0872.13romulusn
77.4277.5177.77T:tinyjambu128v2
93.9193.9994.04T:tinyjambu192v2
100.06100.06100.07T:tinyjambu256v2
117.31117.43117.62romulusm
234.62234.66234.74T:isapk128av20
241.19242.08243.93T!!!romulust
270.85271.57276.11T:elephant200v2
313.44313.51313.93T:isapk128v20
389.03390.53406.16T:isapxv20
13039.9813043.7513057.99T:elephant176v2
14889.3114939.3914945.45T:elephant160v2
32364.1332364.6532365.12aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
10.2610.3610.36ascon128av12
15.2115.2415.33ascon80pqv12
15.2315.3115.31ascon128v12
16.7416.9617.14T:aes128gcmv1
19.2719.2819.32ascon128abi32v12
19.9120.0520.36T:aes256gcmv1
28.3928.5028.55T:xoodyakround3
28.5428.5528.55ascon128bi32v12
32.0732.1632.25T:schwaemm256128v2
42.7542.7643.36T:schwaemm192192v2
45.2945.5746.03T:schwaemm128128v2
38.81?47.01?122.87?T:schwaemm256256v2
54.6155.0855.32T:giftcofb128v1
58.5058.5758.81T:isapa128v20
60.6260.6560.70T:isapa128av20
66.9266.9466.98T:grain128aeadv2
73.0073.0173.03romulusn
78.2478.2578.51T:tinyjambu128v2
94.1794.5294.55T:tinyjambu192v2
100.03100.09100.09T:tinyjambu256v2
117.45117.61117.67romulusm
234.64234.68234.70T:isapk128av20
240.33241.61241.89T!!!romulust
269.95271.50276.19T:elephant200v2
313.00313.49314.06T:isapk128v20
389.43404.64405.75T:isapxv20
13039.8313043.9613057.90T:elephant176v2
14887.1314939.2314942.15T:elephant160v2
32367.5632368.0232370.82aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
10.2710.3410.36ascon128av12
15.2215.2415.29ascon80pqv12
15.3015.3115.31ascon128v12
16.7416.9117.18T:aes128gcmv1
19.2819.2919.32ascon128abi32v12
19.9420.0720.38T:aes256gcmv1
28.4628.5228.62T:xoodyakround3
28.3728.9728.97ascon128bi32v12
29.2629.3129.31T:isapa128v20
32.0932.1532.25T:schwaemm256128v2
41.1741.1941.22T:isapa128av20
42.7542.9643.34T:schwaemm192192v2
45.2945.3646.03T:schwaemm128128v2
38.82?47.08?122.86?T:schwaemm256256v2
54.6855.0855.32T:giftcofb128v1
66.9266.9566.98T:grain128aeadv2
73.0073.0173.02romulusn
78.2478.4878.60T:tinyjambu128v2
81.7181.7482.42T!!!romulust
94.1794.5094.55T:tinyjambu192v2
100.07100.09100.09T:tinyjambu256v2
117.59117.63117.68romulusm
159.03159.06159.10T:isapk128av20
200.14200.50200.56T:isapk128v20
236.31251.53253.03T:isapxv20
270.38271.23276.15T:elephant200v2
863.85864.54868.41aes256gcmv1
13039.6113043.6513057.97T:elephant176v2
14887.6614939.2214942.29T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
10.1010.1210.16ascon128av12
12.4012.5212.59T:aes128gcmv1
13.9914.0614.20T:aes256gcmv1
15.0915.1115.11ascon128v12
15.1315.1515.15ascon80pqv12
19.1219.1519.17ascon128abi32v12
22.1522.1822.26T:xoodyakround3
28.5128.5228.52ascon128bi32v12
32.1632.1732.31T:schwaemm256128v2
42.5842.7142.71T:schwaemm192192v2
43.9344.0644.20T:isapa128v20
44.8344.9245.00T:schwaemm128128v2
38.58?45.51?120.66?T:schwaemm256256v2
50.8950.8951.18T:isapa128av20
54.3354.3554.40T:giftcofb128v1
58.4058.4458.50romulusn
62.0562.0862.09T:grain128aeadv2
62.8562.9062.96T:tinyjambu128v2
73.9073.9173.92T:tinyjambu192v2
74.6874.6975.01T:tinyjambu256v2
81.0881.1581.22romulusm
161.05161.74162.54T!!!romulust
192.37192.40192.42T:isapk128av20
202.43203.28207.81T:elephant200v2
250.92250.94251.38T:isapk128v20
312.72314.09329.28T:isapxv20
9740.019745.109753.82T:elephant176v2
11166.4611203.9311207.97T:elephant160v2
16612.6816613.3216613.51aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
10.1410.1610.18ascon128av12
12.4712.5412.67T:aes128gcmv1
14.0314.1014.89T:aes256gcmv1
15.0015.0015.14ascon80pqv12
15.1415.1515.15ascon128v12
19.1319.1619.19ascon128abi32v12
21.9522.0122.07T:xoodyakround3
28.3928.3928.39ascon128bi32v12
32.1132.2932.32T:schwaemm256128v2
42.4642.7042.84T:schwaemm192192v2
43.9144.0444.10T:isapa128v20
45.0545.1045.24T:schwaemm128128v2
39.41?46.03?121.35?T:schwaemm256256v2
51.3551.3651.36T:isapa128av20
54.3654.5554.71T:giftcofb128v1
58.8758.8958.92romulusn
63.2663.3263.43T:tinyjambu128v2
64.4264.4464.48T:grain128aeadv2
73.9374.1074.12T:tinyjambu192v2
75.2675.2775.27T:tinyjambu256v2
81.0881.2481.41romulusm
161.18161.38161.72T!!!romulust
192.38192.40192.62T:isapk128av20
202.28203.14207.80T:elephant200v2
250.71250.94251.25T:isapk128v20
312.94328.07329.07T:isapxv20
9739.719745.169753.93T:elephant176v2
11166.1711203.9611206.59T:elephant160v2
16615.5416616.0216619.29aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
10.1610.1710.18ascon128av12
12.4412.5112.60T:aes128gcmv1
14.0314.1114.25T:aes256gcmv1
15.0015.0015.00ascon80pqv12
15.1515.1515.15ascon128v12
19.1519.1619.20ascon128abi32v12
21.9922.0222.11T:xoodyakround3
28.5428.5428.54ascon128bi32v12
29.2729.2729.30T:isapa128v20
32.1132.1732.31T:schwaemm256128v2
41.6041.6141.61T:isapa128av20
42.4842.7142.84T:schwaemm192192v2
45.0445.1945.26T:schwaemm128128v2
38.73?46.03?121.36?T:schwaemm256256v2
54.3654.5654.69T:giftcofb128v1
58.8758.8958.96romulusn
63.2963.3363.47T:tinyjambu128v2
64.4464.4464.50T:grain128aeadv2
73.9374.1074.12T:tinyjambu192v2
75.2575.2775.27T:tinyjambu256v2
81.0881.2481.25romulusm
81.4881.5181.96T!!!romulust
154.57154.60154.77T:isapk128av20
194.41194.44194.61T:isapk128v20
202.76203.38207.80T:elephant200v2
236.36251.49252.71T:isapxv20
863.81863.94868.03aes256gcmv1
9740.129744.999753.97T:elephant176v2
11165.9411203.9211206.69T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
8.028.098.13T:aes128gcmv1
8.058.118.16T:aes256gcmv1
10.0110.0210.09ascon128av12
14.9314.9514.95ascon128v12
14.9814.9914.99ascon80pqv12
15.4315.5715.60T:xoodyakround3
19.0219.0319.06ascon128abi32v12
28.4528.4528.45ascon128bi32v12
29.3429.3729.37T:isapa128v20
32.0032.0532.06T:schwaemm256128v2
41.2041.2341.24T:isapa128av20
42.2342.4742.57T:schwaemm192192v2
44.4244.4444.77T:schwaemm128128v2
44.7344.7444.76romulusm
44.7144.7644.83romulusn
37.57?44.94?120.75?T:schwaemm256256v2
48.3848.3848.38T:tinyjambu128v2
49.8249.8450.46T:tinyjambu256v2
53.9453.9453.97T:tinyjambu192v2
54.3154.3854.41T:giftcofb128v1
62.2262.2362.23T:grain128aeadv2
81.3181.3381.36T!!!romulust
137.82138.37140.22T:elephant200v2
150.09150.12150.13T:isapk128av20
188.31188.36188.43T:isapk128v20
235.83237.38252.96T:isapxv20
861.75861.89862.07aes256gcmv1
6441.856444.996449.85T:elephant176v2
7443.727470.337475.42T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
7.998.078.17T:aes128gcmv1
8.008.098.18T:aes256gcmv1
10.0310.0410.06ascon128av12
14.7814.7914.79ascon80pqv12
14.9814.9914.99ascon128v12
15.4215.5515.59T:xoodyakround3
18.9218.9819.04ascon128abi32v12
28.2528.2728.27ascon128bi32v12
29.3829.3829.38T:isapa128v20
32.0432.0832.12T:schwaemm256128v2
41.1541.2041.22T:isapa128av20
42.2742.2842.43T:schwaemm192192v2
44.7344.7344.84romulusn
44.7244.7444.78romulusm
44.8344.8645.02T:schwaemm128128v2
37.47?44.90?120.78?T:schwaemm256256v2
48.3848.4048.40T:tinyjambu128v2
50.4650.4950.50T:tinyjambu256v2
53.6753.6753.69T:tinyjambu192v2
54.1154.3154.42T:giftcofb128v1
61.6561.6761.68T:grain128aeadv2
81.2581.3481.56T!!!romulust
138.14138.37140.23T:elephant200v2
150.09150.12150.13T:isapk128av20
188.30188.36188.83T:isapk128v20
236.26251.47252.92T:isapxv20
863.44864.01867.66aes256gcmv1
6442.066445.376449.91T:elephant176v2
7444.287470.267471.93T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
7.998.078.16T:aes128gcmv1
7.998.108.23T:aes256gcmv1
10.0410.0410.06ascon128av12
14.7914.7914.79ascon80pqv12
14.9914.9914.99ascon128v12
15.4215.5215.60T:xoodyakround3
18.9518.9719.04ascon128abi32v12
28.5728.5728.57ascon128bi32v12
29.3829.3829.38T:isapa128v20
32.0232.0832.12T:schwaemm256128v2
41.1741.2041.22T:isapa128av20
42.2642.4042.43T:schwaemm192192v2
44.7244.7444.77romulusm
44.7344.7544.84romulusn
37.49?44.81?120.76?T:schwaemm256256v2
44.8544.8744.98T:schwaemm128128v2
48.3948.3948.39T:tinyjambu128v2
50.4950.4950.49T:tinyjambu256v2
53.6753.6753.69T:tinyjambu192v2
54.0954.3354.43T:giftcofb128v1
61.6761.6861.69T:grain128aeadv2
81.2981.3381.50T!!!romulust
137.85138.38140.22T:elephant200v2
150.11150.13150.14T:isapk128av20
188.32188.35188.38T:isapk128v20
235.87251.46252.92T:isapxv20
863.31863.85867.67aes256gcmv1
6442.026445.156449.88T:elephant176v2
7444.567470.237471.91T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
10.3610.3710.37ascon128av12
14.8914.9515.06T:aes128gcmv1
15.3215.3215.32ascon128v12
15.3715.3715.37ascon80pqv12
16.6116.6616.78T:aes256gcmv1
19.5819.6019.61ascon128abi32v12
22.4722.4822.53T:xoodyakround3
28.9729.0029.00ascon128bi32v12
33.1633.1833.29T:schwaemm256128v2
43.5843.6143.62T:schwaemm192192v2
45.4945.5845.64T:schwaemm128128v2
45.84?46.75?117.58?T:schwaemm256256v2
54.3854.3854.71T:isapa128av20
54.8954.9054.90T:giftcofb128v1
58.9859.0359.07romulusn
62.7262.7362.73T:grain128aeadv2
63.3563.3763.48T:tinyjambu128v2
64.4064.5064.52T:isapa128v20
74.4874.4974.50T:tinyjambu192v2
75.3075.3075.51T:tinyjambu256v2
81.6581.7081.76romulusm
163.46164.08164.91T!!!romulust
207.03207.57211.79T:elephant200v2
217.01217.02217.05T:isapk128av20
432.46432.48433.13T:isapk128v20
524.70524.97539.22T:isapxv20
9816.279819.349827.72T:elephant176v2
11294.8411330.4511331.75T:elephant160v2
16945.6016946.0016946.25aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
10.4110.4110.44ascon128av12
14.9114.9415.05T:aes128gcmv1
15.3015.3015.30ascon80pqv12
15.3915.3915.39ascon128v12
16.6216.6416.84T:aes256gcmv1
19.6019.6219.64ascon128abi32v12
22.2922.3022.34T:xoodyakround3
28.8828.8828.88ascon128bi32v12
33.0933.1133.29T:schwaemm256128v2
43.4543.6843.79T:schwaemm192192v2
45.6845.7345.86T:schwaemm128128v2
46.04?47.27?118.27?T:schwaemm256256v2
54.8054.8154.81T:isapa128av20
54.9555.1155.19T:giftcofb128v1
59.4459.4959.63romulusn
63.7663.8163.89T:tinyjambu128v2
64.4464.5364.55T:isapa128v20
64.8564.8664.89T:grain128aeadv2
74.5074.6274.70T:tinyjambu192v2
75.8075.8275.82T:tinyjambu256v2
81.8281.8881.91romulusm
163.68163.78164.17T!!!romulust
207.24207.68211.79T:elephant200v2
216.99217.00217.09T:isapk128av20
432.46432.50432.90T:isapk128v20
524.99539.24539.25T:isapxv20
9816.639819.479827.77T:elephant176v2
11294.9311330.4711330.67T:elephant160v2
16948.5316948.8016951.65aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
10.3910.4110.41ascon128av12
14.8914.9715.07T:aes128gcmv1
15.3015.3015.30ascon80pqv12
15.3915.3915.39ascon128v12
16.6316.6516.85T:aes256gcmv1
19.6019.6219.65ascon128abi32v12
22.3322.3422.40T:xoodyakround3
29.0129.0129.01ascon128bi32v12
33.0933.1133.29T:schwaemm256128v2
39.5839.5839.63T:isapa128v20
43.5943.6043.61T:isapa128av20
43.6843.7943.82T:schwaemm192192v2
45.6845.7345.82T:schwaemm128128v2
46.62?47.27?118.27?T:schwaemm256256v2
54.9555.1155.19T:giftcofb128v1
59.4559.4659.49romulusn
63.7663.8163.93T:tinyjambu128v2
64.8564.8664.89T:grain128aeadv2
74.5074.6274.70T:tinyjambu192v2
75.8175.8275.82T:tinyjambu256v2
81.8881.9181.93romulusm
83.8383.8584.29T!!!romulust
169.58169.60169.61T:isapk128av20
206.92207.52211.80T:elephant200v2
288.56288.58288.95T:isapk128v20
345.48359.71359.72T:isapxv20
1196.591196.841200.41aes256gcmv1
9816.349819.449827.90T:elephant176v2
11294.5511330.5111330.64T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
15.8315.9616.42ascon128av12
20.4520.4520.45ascon128v12
20.5720.5720.66ascon80pqv12
29.6429.6429.74ascon128abi32v12
34.8735.3137.00T:xoodyakround3
39.5039.5039.83ascon128bi32v12
55.5455.6055.70T:schwaemm256128v2
60.3560.3760.48T:schwaemm128128v2
67.3267.3567.45T:giftcofb128v1
70.5370.5371.48T:grain128aeadv2
71.0271.1671.28T:schwaemm192192v2
71.4071.8472.08romulusn
74.2374.9675.07T:tinyjambu128v2
74.57?75.12?184.75?T:schwaemm256256v2
76.9177.0478.08T:aes128gcmv1
86.4986.7087.33T:aes256gcmv1
87.2287.2287.93T:tinyjambu192v2
88.3888.5588.79T:tinyjambu256v2
94.4894.6195.66romulusm
133.77133.79134.27T:isapa128av20
219.18219.66220.18T!!!romulust
292.84294.00299.88T:elephant200v2
533.28534.77536.16T:isapa128v20
744.48744.67744.92T:isapk128av20
4556.744556.914557.23T:isapk128v20
5312.305312.935332.70T:isapxv20
12235.8812241.1312244.72T:elephant176v2
15126.3215171.9915173.32T:elephant160v2
24595.6624596.1724603.02aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
15.7916.0516.63ascon128av12
20.6220.6220.83ascon80pqv12
20.7020.7020.98ascon128v12
29.5029.6129.95ascon128abi32v12
34.0434.0535.55T:xoodyakround3
39.7139.7140.02ascon128bi32v12
55.5355.5855.95T:schwaemm256128v2
59.8159.8760.27T:schwaemm128128v2
67.3267.4867.62T:giftcofb128v1
71.1171.2871.65T:schwaemm192192v2
71.8772.1072.28romulusn
73.3373.3873.41T:grain128aeadv2
75.2775.2775.27T:tinyjambu128v2
74.84?75.52?186.02?T:schwaemm256256v2
76.2176.4177.49T:aes128gcmv1
84.7585.1586.05T:aes256gcmv1
87.3487.6087.81T:tinyjambu192v2
89.2089.2089.20T:tinyjambu256v2
97.4597.5997.82romulusm
134.21134.29134.34T:isapa128av20
219.38219.90220.34T!!!romulust
293.46293.77300.02T:elephant200v2
534.87535.62537.62T:isapa128v20
744.38744.53745.16T:isapk128av20
4556.804556.944557.45T:isapk128v20
5320.315332.915333.42T:isapxv20
12235.8412242.2012244.34T:elephant176v2
15136.2315171.8815172.83T:elephant160v2
24599.3224602.2824605.05aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
15.7816.0516.05ascon128av12
20.6220.6220.62ascon80pqv12
20.7120.7120.71ascon128v12
29.5029.5029.52ascon128abi32v12
34.4034.4235.41T:xoodyakround3
39.8039.8039.80ascon128bi32v12
55.4155.6155.90T:schwaemm256128v2
59.8159.8759.97T:schwaemm128128v2
67.3267.4867.62T:giftcofb128v1
71.1871.3071.52T:schwaemm192192v2
71.8772.1072.25romulusn
73.2973.3373.34T:grain128aeadv2
75.2775.2775.34T:tinyjambu128v2
74.84?75.57?186.01?T:schwaemm256256v2
76.8977.0077.57T:aes128gcmv1
84.9585.5186.33T:aes256gcmv1
87.3487.3487.81T:tinyjambu192v2
89.2089.2089.20T:tinyjambu256v2
89.1989.2389.48T:isapa128av20
97.4597.6297.81romulusm
136.96137.35137.57T!!!romulust
277.21277.21277.21T:isapa128v20
293.59294.09299.97T:elephant200v2
483.82483.96484.05T:isapk128av20
2414.232414.342415.01T:isapk128v20
2779.422799.292799.62T:isapxv20
8847.998848.278852.15aes256gcmv1
12235.4112239.0712244.80T:elephant176v2
15139.6115171.7715174.77T:elephant160v2