VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Crestmont (a06a4-20); 2023 Intel Core Ultra 5 125H, LPE cores; 2 x 700MHz; meteor,tiny, supercop-20260330

[Page version: 20260413 04:20:10]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.910.910.92T:aes128gcmv1
1.051.071.09aes256gcmv1
6.206.216.23ascon128av12
9.199.219.22ascon128v12
9.249.279.27ascon80pqv12
11.4811.5011.53ascon128abi32v12
13.9013.9814.07T:xoodyakround3
16.3316.4116.45T:schwaemm256128v2
16.4616.4916.51ascon128bi32v12
21.4421.5821.68T:schwaemm192192v2
23.5223.6423.67T:schwaemm256256v2
23.0323.6623.89T:schwaemm128128v2
31.6731.9932.05T:giftcofb128v1
35.7035.8135.86T:isapa128v20
35.9135.9736.02T:isapa128av20
42.7042.8142.93T:grain128aeadv2
53.7053.7353.76T:tinyjambu128v2
58.2858.4458.57T:isapk128av20
63.3863.4363.49romulusn
68.5168.5768.61T:tinyjambu192v2
69.1569.2069.28T:tinyjambu256v2
75.9276.4277.04T:romulusn
77.0677.4177.80T:isapk128v20
101.30101.42101.64romulusm
158.32159.05162.03T:isapxv20
167.43169.38169.96T:elephant200v2
211.96212.17212.38romulust
6135.906141.106200.03T:elephant176v2
7212.647240.357332.18T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.950.960.97T:aes128gcmv1
1.161.171.18aes256gcmv1
6.206.216.23ascon128av12
9.189.209.22ascon128v12
9.239.259.26ascon80pqv12
11.4011.4111.43ascon128abi32v12
13.6713.7713.92T:xoodyakround3
16.3616.4216.45T:schwaemm256128v2
16.5716.7616.79ascon128bi32v12
21.4421.5921.68T:schwaemm192192v2
23.4623.6423.68T:schwaemm256256v2
23.6523.7023.85T:schwaemm128128v2
31.8132.0432.32T:giftcofb128v1
35.7235.8135.90T:isapa128v20
35.9736.0136.05T:isapa128av20
43.3543.5043.58T:grain128aeadv2
53.7553.7853.83T:tinyjambu128v2
58.2858.4158.56T:isapk128av20
62.7462.7762.80romulusn
68.6468.6968.72T:tinyjambu192v2
69.2269.2769.38T:tinyjambu256v2
75.6176.3576.85T:romulusn
77.0977.3877.65T:isapk128v20
101.70102.13102.44romulusm
157.71160.73163.25T:isapxv20
167.10168.90169.44T:elephant200v2
212.02212.26212.49romulust
6130.536141.046209.05T:elephant176v2
7219.807249.037321.94T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.950.960.97T:aes128gcmv1
1.161.171.19aes256gcmv1
6.196.216.23ascon128av12
9.199.219.22ascon128v12
9.249.259.26ascon80pqv12
11.3911.4111.43ascon128abi32v12
13.7513.8113.94T:xoodyakround3
16.3516.3816.44T:schwaemm256128v2
16.5416.7616.78ascon128bi32v12
17.7317.7917.85T:isapa128v20
21.4421.5921.68T:schwaemm192192v2
23.5223.6323.64T:schwaemm256256v2
23.6723.7223.92T:schwaemm128128v2
24.1724.2124.27T:isapa128av20
31.8332.0332.29T:giftcofb128v1
39.1039.1939.35T:isapk128av20
43.2843.4343.54T:grain128aeadv2
48.4348.6248.93T:isapk128v20
53.7353.7653.80T:tinyjambu128v2
62.7662.7962.83romulusn
68.6668.6968.72T:tinyjambu192v2
69.2169.2969.41T:tinyjambu256v2
72.0572.1872.38romulust
75.6376.3776.86T:romulusn
93.4694.7396.33T:isapxv20
101.60101.99102.37romulusm
167.30168.89169.50T:elephant200v2
6136.196141.326192.94T:elephant176v2
7230.557247.227327.37T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.670.670.68T:aes128gcmv1
0.740.750.76aes256gcmv1
6.186.196.20ascon128av12
9.209.219.23ascon128v12
9.209.229.25ascon80pqv12
10.6110.6610.71T:xoodyakround3
11.3211.3311.35ascon128abi32v12
16.3316.3816.39T:schwaemm256128v2
16.5316.5416.56ascon128bi32v12
21.3821.4221.50T:schwaemm192192v2
22.9623.4923.68T:schwaemm128128v2
23.5623.6423.80T:schwaemm256256v2
26.8026.8526.91T:isapa128v20
30.0630.0830.13T:isapa128av20
32.0132.0232.06T:giftcofb128v1
42.6842.7742.86T:grain128aeadv2
43.8443.8844.53T:tinyjambu128v2
48.5448.7148.85T:isapk128av20
50.9450.9951.03romulusn
51.3351.3651.39T:tinyjambu192v2
52.2952.3252.35T:tinyjambu256v2
63.0363.2663.84T:isapk128v20
69.6069.7269.87romulusm
71.1671.2872.31T:romulusn
124.96126.01127.09T:elephant200v2
126.19126.93129.37T:isapxv20
142.08142.30142.76romulust
4585.484650.714671.02T:elephant176v2
5422.675424.915431.84T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.690.700.70T:aes128gcmv1
0.790.800.81aes256gcmv1
6.176.196.20ascon128av12
9.179.199.23ascon128v12
9.219.239.24ascon80pqv12
10.5110.5610.68T:xoodyakround3
11.2711.2811.29ascon128abi32v12
16.3216.3716.38T:schwaemm256128v2
16.5316.6416.67ascon128bi32v12
21.4221.4921.52T:schwaemm192192v2
23.2823.3123.63T:schwaemm128128v2
23.5823.6723.79T:schwaemm256256v2
26.8126.8526.88T:isapa128v20
30.0830.1130.12T:isapa128av20
32.0032.0332.21T:giftcofb128v1
42.9743.0543.15T:grain128aeadv2
43.8843.9544.57T:tinyjambu128v2
48.5848.6848.77T:isapk128av20
50.6350.7150.83romulusn
51.1051.1251.16T:tinyjambu192v2
52.3452.3652.41T:tinyjambu256v2
63.0263.2363.42T:isapk128v20
69.9970.0770.19romulusm
71.0571.1672.33T:romulusn
124.80125.98126.79T:elephant200v2
125.97127.32129.07T:isapxv20
142.05142.21142.55romulust
4600.064640.174684.40T:elephant176v2
5423.675427.155431.93T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.690.700.71T:aes128gcmv1
0.780.800.80aes256gcmv1
6.186.186.20ascon128av12
9.189.199.21ascon128v12
9.209.229.24ascon80pqv12
10.5810.6410.67T:xoodyakround3
11.2711.2811.29ascon128abi32v12
16.3316.3716.38T:schwaemm256128v2
16.5316.6416.67ascon128bi32v12
17.8417.8617.89T:isapa128v20
21.4021.4921.53T:schwaemm192192v2
23.2423.4623.62T:schwaemm128128v2
23.5723.6523.81T:schwaemm256256v2
24.1824.2124.25T:isapa128av20
31.9932.0332.23T:giftcofb128v1
39.0539.0939.15T:isapk128av20
43.0043.0843.20T:grain128aeadv2
43.8743.9144.56T:tinyjambu128v2
48.6648.8249.00T:isapk128v20
50.6350.7150.85romulusn
51.1051.1351.16T:tinyjambu192v2
52.3452.3752.42T:tinyjambu256v2
70.0470.1270.28romulusm
70.8071.0772.35T:romulusn
72.0072.1372.31romulust
94.0894.5495.30T:isapxv20
124.94126.21127.17T:elephant200v2
4586.554629.844661.29T:elephant176v2
5414.255424.805428.85T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.420.430.44T:aes128gcmv1
0.420.430.45aes256gcmv1
6.156.176.18ascon128av12
7.257.337.41T:xoodyakround3
9.149.189.23ascon128v12
9.199.219.22ascon80pqv12
11.1211.1411.16ascon128abi32v12
16.2516.2716.32T:schwaemm256128v2
16.5916.6116.63ascon128bi32v12
17.9818.0318.06T:isapa128v20
21.2621.3321.57T:schwaemm192192v2
22.8123.4323.78T:schwaemm128128v2
23.4423.5823.68T:schwaemm256256v2
24.2024.2224.24T:isapa128av20
31.8231.9632.02T:giftcofb128v1
32.6832.7532.83T:tinyjambu128v2
34.1134.1534.18T:tinyjambu192v2
35.4535.4835.51T:tinyjambu256v2
38.2338.3238.34romulusm
38.4338.4838.57romulusn
38.8539.0339.16T:isapk128av20
42.6042.6642.73T:grain128aeadv2
48.7149.1949.38T:isapk128v20
62.9563.6566.27T:romulusn
71.8372.0172.07romulust
82.0984.2884.70T:elephant200v2
94.0494.7195.08T:isapxv20
3030.723034.093058.25T:elephant176v2
3605.813615.973619.99T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.410.420.44aes256gcmv1
0.420.430.44T:aes128gcmv1
6.156.176.19ascon128av12
7.227.257.31T:xoodyakround3
9.189.209.21ascon80pqv12
9.149.219.25ascon128v12
11.1211.1411.16ascon128abi32v12
16.2316.2816.33T:schwaemm256128v2
16.4316.4616.50ascon128bi32v12
17.9718.0218.07T:isapa128v20
21.2621.3521.56T:schwaemm192192v2
22.7623.4023.72T:schwaemm128128v2
23.4723.6023.71T:schwaemm256256v2
24.2124.2524.30T:isapa128av20
31.8231.9632.02T:giftcofb128v1
32.7032.7732.84T:tinyjambu128v2
33.5333.5633.60T:tinyjambu192v2
35.4535.4835.51T:tinyjambu256v2
38.1638.2138.25romulusm
38.4738.5838.63romulusn
38.8738.9939.11T:isapk128av20
42.5542.6342.75T:grain128aeadv2
48.7749.1949.36T:isapk128v20
62.9963.6366.33T:romulusn
71.8772.0372.10romulust
82.5684.0584.66T:elephant200v2
93.1094.1995.54T:isapxv20
3030.733033.743068.10T:elephant176v2
3607.083616.473623.68T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.420.430.44aes256gcmv1
0.420.430.44T:aes128gcmv1
6.146.156.17ascon128av12
7.257.307.36T:xoodyakround3
9.159.189.23ascon128v12
9.199.209.21ascon80pqv12
11.1211.1411.16ascon128abi32v12
16.2416.2816.32T:schwaemm256128v2
16.4216.4416.48ascon128bi32v12
17.9618.0118.06T:isapa128v20
21.2521.3521.58T:schwaemm192192v2
22.7623.4123.72T:schwaemm128128v2
23.4623.6123.69T:schwaemm256256v2
24.1824.2324.28T:isapa128av20
31.8431.9732.02T:giftcofb128v1
32.7032.7632.83T:tinyjambu128v2
33.5333.5633.59T:tinyjambu192v2
35.4535.4735.50T:tinyjambu256v2
38.1838.2238.25romulusm
38.4938.5738.66romulusn
38.9239.0439.12T:isapk128av20
42.5442.6242.73T:grain128aeadv2
48.9149.1549.37T:isapk128v20
62.9363.6566.33T:romulusn
71.9672.0272.09romulust
82.4683.8584.56T:elephant200v2
92.8193.9095.42T:isapxv20
3030.863033.903067.25T:elephant176v2
3607.183615.763621.84T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.760.760.77T:aes128gcmv1
0.850.860.86aes256gcmv1
6.326.336.35ascon128av12
9.339.359.37ascon128v12
9.349.359.38ascon80pqv12
10.6710.7010.73T:xoodyakround3
11.6311.6411.66ascon128abi32v12
16.7616.7816.81T:schwaemm256128v2
16.8216.8316.84ascon128bi32v12
21.9322.0622.09T:schwaemm192192v2
23.6423.8423.96T:schwaemm128128v2
24.3324.4324.46T:schwaemm256256v2
32.0932.1132.14T:isapa128av20
32.1732.2932.33T:giftcofb128v1
39.1639.1939.22T:isapa128v20
43.2343.2943.37T:grain128aeadv2
44.2044.2244.83T:tinyjambu128v2
51.3651.4051.42romulusn
51.7051.7251.74T:tinyjambu192v2
52.6952.7152.73T:tinyjambu256v2
55.7455.9256.03T:isapk128av20
70.1570.2670.39romulusm
72.2272.6373.38T:romulusn
110.75110.87111.11T:isapk128v20
128.38128.92129.59T:elephant200v2
144.25144.44144.98romulust
208.70209.17210.06T:isapxv20
4609.754618.464633.71T:elephant176v2
5473.095478.875481.53T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.780.790.79T:aes128gcmv1
0.900.900.91aes256gcmv1
6.316.326.33ascon128av12
9.329.349.36ascon128v12
9.349.359.37ascon80pqv12
10.6410.6810.74T:xoodyakround3
11.5711.5811.60ascon128abi32v12
16.7816.7916.81T:schwaemm256128v2
16.8016.9116.93ascon128bi32v12
21.9322.0022.10T:schwaemm192192v2
23.6823.8523.97T:schwaemm128128v2
24.3024.4424.45T:schwaemm256256v2
31.9032.0832.13T:isapa128av20
32.2332.3032.48T:giftcofb128v1
39.1839.1939.23T:isapa128v20
43.4743.5243.62T:grain128aeadv2
44.2244.2544.84T:tinyjambu128v2
51.0751.1551.23romulusn
51.4651.4851.50T:tinyjambu192v2
52.7252.7552.78T:tinyjambu256v2
55.8055.9656.03T:isapk128av20
70.5270.6070.75romulusm
72.0972.5873.29T:romulusn
110.77110.85110.98T:isapk128v20
127.94128.85129.41T:elephant200v2
144.21144.36144.70romulust
209.32210.72211.42T:isapxv20
4616.264619.594633.74T:elephant176v2
5473.285482.475487.81T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.780.790.79T:aes128gcmv1
0.900.910.91aes256gcmv1
6.316.326.33ascon128av12
9.329.349.37ascon128v12
9.359.369.38ascon80pqv12
10.6510.7210.77T:xoodyakround3
11.5711.5811.59ascon128abi32v12
16.7816.7916.85T:schwaemm256128v2
16.7916.9116.92ascon128bi32v12
21.9322.0122.10T:schwaemm192192v2
23.6823.8523.96T:schwaemm128128v2
24.1124.1324.15T:isapa128v20
24.3124.4424.46T:schwaemm256256v2
25.2225.3525.38T:isapa128av20
32.2332.3032.48T:giftcofb128v1
43.5143.5643.62T:grain128aeadv2
43.5043.7143.75T:isapk128av20
44.2244.2444.80T:tinyjambu128v2
51.0751.1351.20romulusn
51.4651.4851.51T:tinyjambu192v2
52.7252.7552.78T:tinyjambu256v2
70.6170.7570.80romulusm
72.1472.5973.44T:romulusn
73.8473.9073.99T:isapk128v20
74.0474.1574.30romulust
128.22129.07129.64T:elephant200v2
136.73137.27137.76T:isapxv20
4615.614618.504633.74T:elephant176v2
5474.885483.815491.41T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
4.734.844.97aes256gcmv1
5.325.385.44T:aes128gcmv1
9.509.549.65ascon128av12
12.2412.3212.43ascon128v12
12.2812.3712.48ascon80pqv12
15.4315.5215.62T:xoodyakround3
18.7518.8218.89ascon128abi32v12
23.1023.1723.27ascon128bi32v12
27.3727.4027.46T:schwaemm256128v2
30.4330.6530.85T:schwaemm128128v2
35.2635.4535.73T:schwaemm192192v2
38.3138.4538.60T:schwaemm256256v2
38.5038.6138.73T:giftcofb128v1
51.5551.7251.97T:tinyjambu128v2
54.8455.1055.43T:grain128aeadv2
59.7059.8759.98T:tinyjambu192v2
61.2061.3261.68T:tinyjambu256v2
61.2561.4161.58romulusn
77.0177.2677.60T:isapa128av20
80.9081.1281.36romulusm
92.9093.0893.30T:romulusn
179.47181.86182.47T:elephant200v2
191.85192.13192.56romulust
208.61210.61213.55T:isapk128av20
322.45322.98323.66T:isapa128v20
1192.281193.171194.83T:isapk128v20
2066.452077.932086.48T:isapxv20
5724.115737.495761.34T:elephant176v2
7319.607323.827356.27T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
4.684.744.79aes256gcmv1
5.315.365.44T:aes128gcmv1
9.539.579.63ascon128av12
12.2312.3012.42ascon128v12
12.2812.3412.44ascon80pqv12
15.3615.4515.58T:xoodyakround3
18.6618.7418.83ascon128abi32v12
22.9523.0923.28ascon128bi32v12
27.3627.4327.48T:schwaemm256128v2
30.4630.7130.93T:schwaemm128128v2
35.2735.5135.72T:schwaemm192192v2
38.3738.4338.52T:schwaemm256256v2
38.8839.0039.15T:giftcofb128v1
51.5851.6951.84T:tinyjambu128v2
55.2855.4855.77T:grain128aeadv2
59.6359.7359.85T:tinyjambu192v2
61.0461.1861.36romulusn
61.3061.4661.57T:tinyjambu256v2
77.2077.3777.57T:isapa128av20
82.8583.1483.37romulusm
93.2293.4693.77T:romulusn
179.03181.83182.32T:elephant200v2
191.86192.09192.40romulust
209.25210.44213.73T:isapk128av20
322.57323.04323.44T:isapa128v20
1192.251193.481194.97T:isapk128v20
2091.392109.972116.17T:isapxv20
5723.715737.965762.51T:elephant176v2
7318.387323.867358.02T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
4.684.724.76aes256gcmv1
5.305.375.45T:aes128gcmv1
9.509.549.63ascon128av12
12.2512.3012.36ascon128v12
12.2912.3612.48ascon80pqv12
15.4015.5215.69T:xoodyakround3
18.6718.7218.82ascon128abi32v12
22.9623.0923.24ascon128bi32v12
27.3427.4427.47T:schwaemm256128v2
30.4030.6830.88T:schwaemm128128v2
35.1335.2035.42T:schwaemm192192v2
38.3538.3938.48T:schwaemm256256v2
38.8238.9339.05T:giftcofb128v1
50.9751.0851.37T:isapa128av20
51.5751.6851.76T:tinyjambu128v2
55.2055.4555.66T:grain128aeadv2
59.5659.6759.77T:tinyjambu192v2
61.0061.1361.35romulusn
61.3261.4361.54T:tinyjambu256v2
82.8983.0783.29romulusm
92.8593.0293.27T:romulusn
120.40120.63120.96romulust
137.08138.31139.77T:isapk128av20
168.02168.25168.66T:isapa128v20
179.19181.79182.31T:elephant200v2
639.50641.23642.58T:isapk128v20
1090.381102.081106.94T:isapxv20
5724.275737.915764.47T:elephant176v2
7319.527324.207353.76T:elephant160v2