VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Crestmont (a06a4-20); 2023 Intel Core Ultra 5 125H, E cores; 8 x 700MHz; meteor,little, supercop-20260330

[Page version: 20260413 04:20:10]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.910.920.92T:aes128gcmv1
1.051.061.07aes256gcmv1
6.186.206.22ascon128av12
9.239.249.27ascon128v12
9.239.259.27ascon80pqv12
11.4811.5011.52ascon128abi32v12
13.9714.0814.13T:xoodyakround3
16.3116.3616.39T:schwaemm256128v2
16.4616.4916.51ascon128bi32v12
21.5421.6722.61T:schwaemm192192v2
23.3423.7123.80T:schwaemm128128v2
23.5823.7523.78T:schwaemm256256v2
32.0132.0532.08T:giftcofb128v1
35.7335.8035.87T:isapa128v20
35.9235.9836.07T:isapa128av20
42.6742.7942.93T:grain128aeadv2
53.7053.7353.76T:tinyjambu128v2
58.3058.4258.57T:isapk128av20
63.5863.7063.80romulusn
68.1268.1668.21T:tinyjambu192v2
67.65?76.33?76.37?T:tinyjambu256v2
76.1177.0579.95T:romulusn
77.1977.4177.89T:isapk128v20
101.30101.52103.70romulusm
160.32160.94163.03T:isapxv20
166.74167.31168.77T:elephant200v2
211.94212.15212.38romulust
6104.456130.896146.61T:elephant176v2
7215.397223.877232.89T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.950.950.96T:aes128gcmv1
1.131.151.16aes256gcmv1
6.176.196.21ascon128av12
9.199.219.23ascon128v12
9.219.249.26ascon80pqv12
11.4111.4411.47ascon128abi32v12
13.7713.9614.86T:xoodyakround3
16.3416.3816.39T:schwaemm256128v2
16.5516.7816.86ascon128bi32v12
21.5721.7422.62T:schwaemm192192v2
23.3223.7023.79T:schwaemm128128v2
23.5423.7523.79T:schwaemm256256v2
31.7631.8332.05T:giftcofb128v1
35.7635.8435.89T:isapa128v20
35.9435.9936.07T:isapa128av20
43.3243.4443.58T:grain128aeadv2
53.7653.8153.86T:tinyjambu128v2
58.3358.4258.58T:isapk128av20
62.6062.6862.85romulusn
68.1768.2168.25T:tinyjambu192v2
67.78?76.43?76.49?T:tinyjambu256v2
75.8076.9079.44T:romulusn
77.0277.2877.67T:isapk128v20
102.14102.44107.82romulusm
158.43159.58161.56T:isapxv20
166.47167.05168.52T:elephant200v2
212.07212.28212.45romulust
6102.156132.486148.29T:elephant176v2
7215.827224.947234.35T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.940.950.96T:aes128gcmv1
1.141.151.16aes256gcmv1
6.176.196.21ascon128av12
9.199.219.23ascon128v12
9.209.239.24ascon80pqv12
11.4111.4411.47ascon128abi32v12
13.7214.0314.80T:xoodyakround3
16.3416.3816.39T:schwaemm256128v2
16.5616.7816.85ascon128bi32v12
17.7217.7817.86T:isapa128v20
21.4621.7422.70T:schwaemm192192v2
23.4823.6723.79T:schwaemm128128v2
23.5623.7623.81T:schwaemm256256v2
24.1724.2324.27T:isapa128av20
31.7731.8132.02T:giftcofb128v1
39.1339.2239.42T:isapk128av20
43.2943.4343.50T:grain128aeadv2
48.2348.4748.93T:isapk128v20
53.7753.8053.86T:tinyjambu128v2
62.6762.7462.84romulusn
68.1668.2068.26T:tinyjambu192v2
71.9872.1072.26romulust
67.47?76.44?76.50?T:tinyjambu256v2
75.9276.9079.80T:romulusn
94.8895.2395.63T:isapxv20
102.16102.36102.47romulusm
166.45166.99168.73T:elephant200v2
6126.796135.156148.33T:elephant176v2
7215.047225.187235.90T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.670.680.69T:aes128gcmv1
0.740.740.75aes256gcmv1
6.176.186.20ascon128av12
9.159.189.19ascon80pqv12
9.229.239.24ascon128v12
10.6010.6910.77T:xoodyakround3
11.3111.3311.35ascon128abi32v12
16.3116.3216.33T:schwaemm256128v2
16.5416.5616.57ascon128bi32v12
21.3321.4021.55T:schwaemm192192v2
23.5523.6123.67T:schwaemm256256v2
23.3523.6423.78T:schwaemm128128v2
26.8026.8426.87T:isapa128v20
30.0730.1030.13T:isapa128av20
32.0832.0932.12T:giftcofb128v1
42.6442.7242.78T:grain128aeadv2
43.8343.8543.88T:tinyjambu128v2
48.6448.7348.86T:isapk128av20
50.9951.0851.13romulusn
51.1151.1651.33T:tinyjambu192v2
50.96?57.28?57.73?T:tinyjambu256v2
63.0563.2763.75T:isapk128v20
69.5669.7169.81romulusm
71.1371.3671.86T:romulusn
125.54125.95126.51T:elephant200v2
128.03128.29129.47T:isapxv20
141.92142.04142.26romulust
4577.414582.134585.09T:elephant176v2
5432.395436.315438.73T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.690.700.70T:aes128gcmv1
0.780.790.80aes256gcmv1
6.166.186.19ascon128av12
9.189.199.20ascon128v12
9.229.239.24ascon80pqv12
10.5010.6011.04T:xoodyakround3
11.2611.2711.29ascon128abi32v12
16.3016.3216.33T:schwaemm256128v2
16.5216.6216.66ascon128bi32v12
21.3321.4221.46T:schwaemm192192v2
23.5523.6423.68T:schwaemm256256v2
23.3923.6423.78T:schwaemm128128v2
26.8026.8526.88T:isapa128v20
30.0930.1330.18T:isapa128av20
32.0632.0832.10T:giftcofb128v1
43.0143.0643.13T:grain128aeadv2
43.8743.8943.92T:tinyjambu128v2
48.6448.7448.89T:isapk128av20
50.5350.6650.72romulusn
51.2051.2551.29T:tinyjambu192v2
51.04?57.34?57.80?T:tinyjambu256v2
63.0663.2663.63T:isapk128v20
70.0970.1570.24romulusm
71.0771.2971.80T:romulusn
125.30125.68126.35T:elephant200v2
126.51127.03128.14T:isapxv20
141.94142.04142.20romulust
4577.774582.144585.61T:elephant176v2
5427.265432.385434.91T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.690.690.70T:aes128gcmv1
0.780.790.80aes256gcmv1
6.166.186.20ascon128av12
9.189.199.21ascon128v12
9.229.239.23ascon80pqv12
10.5910.6311.08T:xoodyakround3
11.2611.2711.29ascon128abi32v12
16.3116.3216.32T:schwaemm256128v2
16.5316.6116.66ascon128bi32v12
17.8317.8617.88T:isapa128v20
21.3321.4021.44T:schwaemm192192v2
23.3823.6423.77T:schwaemm128128v2
23.5723.6523.69T:schwaemm256256v2
24.1824.2224.26T:isapa128av20
32.0632.0832.11T:giftcofb128v1
39.0439.1239.23T:isapk128av20
42.9643.0443.13T:grain128aeadv2
43.8743.8943.92T:tinyjambu128v2
48.6948.9049.12T:isapk128v20
50.5250.6150.72romulusn
51.2251.2451.27T:tinyjambu192v2
51.10?57.32?57.79?T:tinyjambu256v2
70.1070.1770.26romulusm
71.0571.2571.73T:romulusn
71.9672.0672.14romulust
94.5994.8295.35T:isapxv20
125.68125.86126.45T:elephant200v2
4578.094581.894584.57T:elephant176v2
5426.745432.075435.02T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.420.430.44aes256gcmv1
0.430.430.44T:aes128gcmv1
6.146.166.18ascon128av12
7.267.357.42T:xoodyakround3
9.119.179.22ascon80pqv12
9.179.219.24ascon128v12
11.1311.1411.16ascon128abi32v12
16.2116.2316.25T:schwaemm256128v2
16.5916.6116.63ascon128bi32v12
17.9818.0418.07T:isapa128v20
21.3721.5221.54T:schwaemm192192v2
23.4723.5323.67T:schwaemm128128v2
23.5123.5623.64T:schwaemm256256v2
24.2124.2424.27T:isapa128av20
32.1232.1532.18T:giftcofb128v1
32.8733.9734.01T:tinyjambu128v2
34.0634.0934.13T:tinyjambu192v2
38.1538.1738.21romulusm
34.22?38.25?38.63?T:tinyjambu256v2
38.3738.5838.69romulusn
38.8139.0739.25T:isapk128av20
42.5742.6242.68T:grain128aeadv2
48.4949.0849.38T:isapk128v20
63.3163.7064.57T:romulusn
71.8271.9772.04romulust
82.0883.1484.10T:elephant200v2
95.5295.7696.07T:isapxv20
3014.563039.603045.52T:elephant176v2
3608.233613.393619.15T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.420.430.43aes256gcmv1
0.420.430.44T:aes128gcmv1
6.146.176.19ascon128av12
7.357.387.43T:xoodyakround3
9.189.209.23ascon80pqv12
9.219.229.25ascon128v12
11.1211.1411.16ascon128abi32v12
16.2116.2416.31T:schwaemm256128v2
16.4316.4616.52ascon128bi32v12
17.9618.0518.10T:isapa128v20
21.3621.5321.54T:schwaemm192192v2
23.4623.5323.68T:schwaemm128128v2
23.4823.5523.65T:schwaemm256256v2
24.2024.2524.29T:isapa128av20
32.1132.1332.18T:giftcofb128v1
32.9933.9934.03T:tinyjambu128v2
34.2134.2534.29T:tinyjambu192v2
38.1338.2038.23romulusm
34.23?38.25?38.62?T:tinyjambu256v2
38.3938.6138.72romulusn
38.7939.0439.23T:isapk128av20
42.5642.6442.70T:grain128aeadv2
48.4548.9549.35T:isapk128v20
63.3163.7064.46T:romulusn
71.8971.9972.05romulust
82.5983.1884.21T:elephant200v2
94.1294.5294.92T:isapxv20
3014.223039.403045.23T:elephant176v2
3608.743613.303619.18T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.420.430.44aes256gcmv1
0.430.440.45T:aes128gcmv1
6.146.166.18ascon128av12
7.207.257.41T:xoodyakround3
9.169.219.23ascon80pqv12
9.219.239.24ascon128v12
11.1111.1311.16ascon128abi32v12
16.2116.2516.29T:schwaemm256128v2
16.4316.4616.51ascon128bi32v12
17.9818.0218.09T:isapa128v20
21.3621.5221.53T:schwaemm192192v2
23.4023.5223.66T:schwaemm128128v2
23.5123.5623.62T:schwaemm256256v2
24.1724.2324.27T:isapa128av20
32.1032.1432.17T:giftcofb128v1
32.8733.9834.01T:tinyjambu128v2
34.2234.2534.28T:tinyjambu192v2
38.1238.1738.24romulusm
34.21?38.24?38.63?T:tinyjambu256v2
38.3938.6238.74romulusn
38.7839.0539.23T:isapk128av20
42.5642.6542.72T:grain128aeadv2
48.4049.0349.48T:isapk128v20
63.3063.7364.53T:romulusn
71.8771.9872.07romulust
82.6083.2784.11T:elephant200v2
94.2194.5494.92T:isapxv20
3013.263035.293042.32T:elephant176v2
3607.913612.973618.56T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.770.770.77T:aes128gcmv1
0.850.850.86aes256gcmv1
6.316.326.33ascon128av12
9.309.329.33ascon80pqv12
9.319.349.37ascon128v12
10.7310.7410.78T:xoodyakround3
11.6311.6411.66ascon128abi32v12
16.7716.7716.78T:schwaemm256128v2
16.8216.8316.83ascon128bi32v12
21.8921.9422.03T:schwaemm192192v2
23.5723.6223.71T:schwaemm128128v2
24.1824.2424.28T:schwaemm256256v2
32.0832.0932.12T:isapa128av20
32.3632.3732.39T:giftcofb128v1
39.1339.1639.19T:isapa128v20
43.1943.2443.30T:grain128aeadv2
44.1844.1944.22T:tinyjambu128v2
51.4651.5051.54T:tinyjambu192v2
51.4651.5851.64romulusn
55.8455.8755.94T:isapk128av20
51.89?57.70?57.73?T:tinyjambu256v2
70.1570.2270.28romulusm
71.9672.0372.70T:romulusn
110.45110.64111.02T:isapk128v20
127.83128.32128.89T:elephant200v2
144.06144.15144.30romulust
210.59211.03212.27T:isapxv20
4618.804621.704662.39T:elephant176v2
5472.845486.315487.46T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.790.790.80T:aes128gcmv1
0.890.900.90aes256gcmv1
6.306.316.32ascon128av12
9.329.339.35ascon128v12
9.359.369.36ascon80pqv12
10.6210.6911.05T:xoodyakround3
11.5711.5811.59ascon128abi32v12
16.7716.7816.78T:schwaemm256128v2
16.8016.9016.93ascon128bi32v12
21.9021.9622.07T:schwaemm192192v2
23.6123.6423.69T:schwaemm128128v2
24.2224.2324.24T:schwaemm256256v2
32.0832.1032.13T:isapa128av20
32.3532.3632.39T:giftcofb128v1
39.1639.1739.19T:isapa128v20
43.5143.5743.63T:grain128aeadv2
44.2144.2344.25T:tinyjambu128v2
51.0351.1151.18romulusn
51.5851.6051.63T:tinyjambu192v2
55.8555.9055.94T:isapk128av20
51.93?57.76?57.79?T:tinyjambu256v2
70.6270.6870.77romulusm
71.8372.0072.70T:romulusn
110.49110.66110.95T:isapk128v20
127.70127.95128.69T:elephant200v2
144.06144.15144.26romulust
209.00209.20210.38T:isapxv20
4617.724619.324664.14T:elephant176v2
5473.735486.755487.99T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.790.790.80T:aes128gcmv1
0.890.900.90aes256gcmv1
6.306.316.32ascon128av12
9.329.339.34ascon128v12
9.359.369.37ascon80pqv12
10.6310.7011.09T:xoodyakround3
11.5711.5811.60ascon128abi32v12
16.7716.7716.78T:schwaemm256128v2
16.8116.9016.92ascon128bi32v12
21.8921.9422.05T:schwaemm192192v2
23.6023.6423.71T:schwaemm128128v2
24.1024.1324.15T:isapa128v20
24.2124.2324.24T:schwaemm256256v2
25.3625.3925.40T:isapa128av20
32.3532.3732.38T:giftcofb128v1
43.5143.5643.61T:grain128aeadv2
43.5943.6343.67T:isapk128av20
44.2044.2244.24T:tinyjambu128v2
51.0451.1451.19romulusn
51.5851.6051.62T:tinyjambu192v2
51.91?57.76?57.79?T:tinyjambu256v2
70.6170.7170.77romulusm
71.7171.9372.68T:romulusn
73.6673.8074.03T:isapk128v20
74.0174.0574.14romulust
127.68128.20128.68T:elephant200v2
136.79136.96137.65T:isapxv20
4618.424620.644663.69T:elephant176v2
5483.155486.735488.10T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
4.304.384.40T:aes128gcmv1
5.535.565.60aes256gcmv1
9.449.519.58ascon128av12
12.2412.2912.40ascon128v12
12.2912.3812.54ascon80pqv12
15.4815.5815.79T:xoodyakround3
18.7918.8718.98ascon128abi32v12
23.1123.1723.26ascon128bi32v12
27.2727.3127.38T:schwaemm256128v2
30.0130.6730.80T:schwaemm128128v2
35.2235.3835.52T:schwaemm192192v2
38.1438.3938.56T:schwaemm256256v2
38.8438.9339.01T:giftcofb128v1
51.5451.6751.95T:tinyjambu128v2
54.8055.0355.25T:grain128aeadv2
59.5959.7459.81T:tinyjambu192v2
61.3061.4961.68romulusn
60.32?67.07?67.23?T:tinyjambu256v2
77.1077.2977.60T:isapa128av20
80.8381.0981.29romulusm
94.1694.4494.75T:romulusn
179.12179.72181.62T:elephant200v2
191.97192.41192.72romulust
209.01209.82210.42T:isapk128av20
322.64322.88323.41T:isapa128v20
1188.311190.251193.49T:isapk128v20
2084.022090.312093.18T:isapxv20
5741.015750.015772.96T:elephant176v2
7317.427321.617369.06T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
4.294.324.40T:aes128gcmv1
5.705.775.80aes256gcmv1
9.449.509.56ascon128av12
12.1812.2512.35ascon128v12
12.2812.3712.50ascon80pqv12
15.4215.5816.03T:xoodyakround3
18.7118.7818.85ascon128abi32v12
22.9623.0523.18ascon128bi32v12
27.3327.3727.41T:schwaemm256128v2
30.0030.7130.88T:schwaemm128128v2
35.2435.4535.59T:schwaemm192192v2
38.0738.3438.44T:schwaemm256256v2
38.7438.8538.97T:giftcofb128v1
51.6351.7351.95T:tinyjambu128v2
55.2455.4155.70T:grain128aeadv2
59.7459.8560.01T:tinyjambu192v2
61.4961.6861.88romulusn
60.40?67.36?67.55?T:tinyjambu256v2
77.0977.2877.58T:isapa128av20
82.9383.1383.37romulusm
94.1094.5095.02T:romulusn
179.01179.59181.35T:elephant200v2
191.87192.10192.42romulust
209.33210.07210.83T:isapk128av20
322.68323.07323.73T:isapa128v20
1189.201190.361192.83T:isapk128v20
2073.012075.262076.15T:isapxv20
5741.635749.285774.65T:elephant176v2
7317.147321.337378.76T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
4.264.324.37T:aes128gcmv1
5.715.785.82aes256gcmv1
9.419.469.52ascon128av12
12.2112.2712.39ascon128v12
12.2812.3412.43ascon80pqv12
15.4215.5416.02T:xoodyakround3
18.6618.7218.82ascon128abi32v12
22.9923.1023.22ascon128bi32v12
27.3327.3627.40T:schwaemm256128v2
29.9330.6530.80T:schwaemm128128v2
35.2435.4635.51T:schwaemm192192v2
38.1338.2538.38T:schwaemm256256v2
38.7838.9239.03T:giftcofb128v1
50.8851.0751.32T:isapa128av20
51.6051.7051.81T:tinyjambu128v2
55.2355.4855.69T:grain128aeadv2
59.7659.8759.97T:tinyjambu192v2
61.5861.7461.91romulusn
60.41?67.28?67.44?T:tinyjambu256v2
82.9383.1783.44romulusm
93.7594.2094.61T:romulusn
120.07120.38120.81romulust
138.28138.92139.63T:isapk128av20
168.07168.30168.70T:isapa128v20
178.83179.60181.42T:elephant200v2
634.50635.21636.30T:isapk128v20
1083.461086.881090.79T:isapxv20
5742.305750.225774.81T:elephant176v2
7317.097321.927376.75T:elephant160v2