VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Airmont (406c3); 2015 Intel Pentium N3700; 4 x 1600MHz; nucnuc, supercop-20260330

[Page version: 20260624 14:36:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
6.356.416.50T:aes128gcmv1
7.677.797.85T:aes256gcmv1
8.948.958.95aes256gcmv1
16.8816.8816.89ascon128av12
24.6224.6224.64ascon128v12
25.1225.1225.12ascon80pqv12
35.3235.3235.32ascon128abi32v12
52.0052.0052.12ascon128bi32v12
52.9252.9252.93T:xoodyakround3
53.7953.9454.47T:grain128aeadv2
57.3657.3757.37T:giftcofb128v1
58.3158.3258.32T:schwaemm256128v2
65.9065.9165.91T:schwaemm256256v2
77.3877.3977.40T:schwaemm192192v2
80.7580.7680.76T:schwaemm128128v2
92.2592.2592.27T:isapa128av20
105.76105.78105.78T:tinyjambu128v2
113.74114.63116.04T:isapa128v20
118.37118.38118.42T:romulusn
127.25127.25127.26T:tinyjambu192v2
139.24139.25139.26T:tinyjambu256v2
143.71143.75143.94romulusn
183.86184.14184.42T:isapk128av20
229.25229.29229.51romulusm
245.02245.50246.24T:isapk128v20
296.11296.85300.05T:elephant200v2
441.34441.50441.88T:isapxv20
443.36443.44443.90T!!!romulust
17774.7717776.2917791.15T:elephant176v2
19390.4919391.0419392.10T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
6.416.476.51T:aes128gcmv1
7.597.697.81T:aes256gcmv1
9.949.959.95aes256gcmv1
16.5116.5116.51ascon128av12
24.8824.8824.88ascon128v12
25.2525.2525.25ascon80pqv12
35.3835.3935.41ascon128abi32v12
51.0851.0851.09T:xoodyakround3
52.6052.6252.63ascon128bi32v12
54.3454.6354.66T:grain128aeadv2
57.3157.3257.40T:giftcofb128v1
58.0958.1058.11T:schwaemm256128v2
65.8165.8165.82T:schwaemm256256v2
77.9277.9377.94T:schwaemm192192v2
80.6380.6380.63T:schwaemm128128v2
92.2592.2592.27T:isapa128av20
107.50107.51107.51T:tinyjambu128v2
113.62114.53116.06T:isapa128v20
117.68117.69117.77T:romulusn
128.49128.51128.53T:tinyjambu192v2
140.50140.50140.51T:tinyjambu256v2
143.71143.76143.84romulusn
183.84184.02184.23T:isapk128av20
229.32229.34229.50romulusm
245.11245.49246.03T:isapk128v20
296.11296.95300.13T:elephant200v2
441.30441.53441.95T:isapxv20
443.39443.43443.91T!!!romulust
17774.4717775.7917790.69T:elephant176v2
19390.4919391.2519392.15T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
6.356.416.49T:aes128gcmv1
7.627.757.86T:aes256gcmv1
9.949.959.95aes256gcmv1
16.5116.5116.51ascon128av12
24.8824.8824.88ascon128v12
25.2525.2525.25ascon80pqv12
35.3935.3935.39ascon128abi32v12
51.1551.1551.16T:xoodyakround3
52.5952.6052.65ascon128bi32v12
54.3554.6254.66T:grain128aeadv2
57.0557.2757.40T:isapa128v20
57.3157.3157.31T:giftcofb128v1
58.0958.1058.11T:schwaemm256128v2
60.6060.6360.66T:isapa128av20
65.8165.8165.82T:schwaemm256256v2
77.9277.9478.96T:schwaemm192192v2
80.6380.6380.63T:schwaemm128128v2
107.50107.51107.51T:tinyjambu128v2
117.69117.69117.71T:romulusn
122.41122.53122.65T:isapk128av20
128.49128.51128.52T:tinyjambu192v2
140.50140.50140.51T:tinyjambu256v2
143.76143.79143.92romulusn
153.29153.38153.56T:isapk128v20
155.57155.62156.76T!!!romulust
229.31229.36229.42romulusm
244.08244.10244.25T:isapxv20
296.16296.91300.07T:elephant200v2
17774.7217776.4317790.69T:elephant176v2
19390.5319391.0919392.06T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
4.634.664.69T:aes128gcmv1
5.255.305.41T:aes256gcmv1
6.076.076.07aes256gcmv1
16.7616.7616.76ascon128av12
24.7524.7524.75ascon128v12
25.0025.0025.02ascon80pqv12
34.9634.9735.03ascon128abi32v12
39.2239.2239.23T:xoodyakround3
51.6851.7051.81ascon128bi32v12
53.3353.4454.03T:grain128aeadv2
57.1357.1657.20T:giftcofb128v1
57.9857.9957.99T:schwaemm256128v2
65.5965.5965.60T:schwaemm256256v2
76.4476.4476.47T:isapa128av20
76.4876.5176.53T:schwaemm192192v2
80.4180.4180.41T:schwaemm128128v2
85.5085.8986.88T:isapa128v20
86.1386.1486.15T:tinyjambu128v2
100.00100.00100.01T:tinyjambu192v2
105.64105.64105.70T:romulusn
105.87105.88105.89T:tinyjambu256v2
114.69114.71114.79romulusn
153.27153.40153.77T:isapk128av20
157.43157.45157.60romulusm
198.98199.28199.79T:isapk128v20
219.84220.26222.68T:elephant200v2
299.27299.32299.70T!!!romulust
343.86343.95344.20T:isapxv20
13276.4613277.6813288.90T:elephant176v2
14540.7414541.0314541.56T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
4.634.684.73T:aes128gcmv1
5.265.305.36T:aes256gcmv1
6.486.486.48aes256gcmv1
16.5316.5316.53ascon128av12
24.8124.8124.81ascon80pqv12
25.0025.0025.01ascon128v12
34.7534.7734.82ascon128abi32v12
38.3238.3338.33T:xoodyakround3
52.1952.2252.27ascon128bi32v12
53.6953.8953.91T:grain128aeadv2
57.1857.2057.21T:giftcofb128v1
57.8757.8857.88T:schwaemm256128v2
65.5565.5565.55T:schwaemm256256v2
76.4376.4476.51T:isapa128av20
76.7776.7877.13T:schwaemm192192v2
80.3480.3580.35T:schwaemm128128v2
84.9085.7986.76T:isapa128v20
86.9987.0087.01T:tinyjambu128v2
100.62100.63100.65T:tinyjambu192v2
105.31105.31105.39T:romulusn
106.49106.50106.51T:tinyjambu256v2
114.69114.71114.88romulusn
153.27153.37153.57T:isapk128av20
157.46157.47157.58romulusm
198.92199.15199.83T:isapk128v20
219.85220.29222.66T:elephant200v2
299.26299.31299.69T!!!romulust
343.85343.95344.15T:isapxv20
13276.6113277.9413288.70T:elephant176v2
14540.7314541.0714541.49T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
4.644.674.71T:aes128gcmv1
5.215.295.37T:aes256gcmv1
6.486.486.48aes256gcmv1
16.5316.5316.53ascon128av12
24.8124.8124.82ascon80pqv12
25.0025.0025.00ascon128v12
34.7234.7634.80ascon128abi32v12
38.3638.3638.37T:xoodyakround3
52.1552.1952.24ascon128bi32v12
53.6453.8953.90T:grain128aeadv2
57.1857.1857.23T:giftcofb128v1
56.9757.2757.74T:isapa128v20
57.8757.8857.89T:schwaemm256128v2
60.6260.6360.64T:isapa128av20
65.5565.5565.55T:schwaemm256256v2
76.7776.7876.80T:schwaemm192192v2
80.3480.3580.35T:schwaemm128128v2
87.0087.0087.01T:tinyjambu128v2
100.63100.63100.64T:tinyjambu192v2
105.30105.31105.35T:romulusn
106.50106.50106.53T:tinyjambu256v2
114.66114.71114.80romulusn
122.54122.60122.65T:isapk128av20
153.08153.15153.52T:isapk128v20
155.37155.38155.47T!!!romulust
157.45157.49157.68romulusm
219.84220.29222.71T:elephant200v2
245.21245.23245.40T:isapxv20
13276.4513277.5513288.65T:elephant176v2
14540.6614541.0214541.55T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
2.812.872.93T:aes256gcmv1
2.862.902.95T:aes128gcmv1
3.193.203.20aes256gcmv1
16.6316.6416.64ascon128av12
24.8824.8824.88ascon80pqv12
24.8824.8824.88ascon128v12
25.5725.5725.58T:xoodyakround3
34.6334.6334.64ascon128abi32v12
51.3751.3851.38ascon128bi32v12
52.8552.8953.57T:grain128aeadv2
56.9456.9556.96T:giftcofb128v1
56.9657.1057.59T:isapa128v20
57.6557.6657.66T:schwaemm256128v2
60.6260.6360.64T:isapa128av20
65.2865.2865.29T:schwaemm256256v2
66.5066.5066.50T:tinyjambu128v2
72.4972.5072.51T:tinyjambu256v2
72.7572.7572.75T:tinyjambu192v2
75.6275.6275.63T:schwaemm192192v2
80.0680.0680.06T:schwaemm128128v2
85.6185.6185.63romulusn
85.6085.6285.66romulusm
92.9092.9192.94T:romulusn
122.55122.68122.79T:isapk128av20
144.83145.12147.07T:elephant200v2
152.81152.95153.17T:isapk128v20
155.12155.22155.42T!!!romulust
246.28246.33246.53T:isapxv20
8779.178779.758787.50T:elephant176v2
9689.499690.069690.55T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
2.812.862.93T:aes256gcmv1
2.852.892.91T:aes128gcmv1
3.003.023.02aes256gcmv1
16.5516.5516.55ascon128av12
24.3824.3824.38ascon80pqv12
25.1225.1225.12ascon128v12
25.5725.5725.57T:xoodyakround3
34.1334.1534.18ascon128abi32v12
51.6751.7351.82ascon128bi32v12
52.9453.1553.15T:grain128aeadv2
56.9556.9556.95T:giftcofb128v1
56.9357.0957.34T:isapa128v20
57.6557.6758.14T:schwaemm256128v2
60.6260.6260.64T:isapa128av20
65.2865.2865.29T:schwaemm256256v2
66.5066.5066.51T:tinyjambu128v2
72.5072.5072.52T:tinyjambu256v2
72.7572.7572.75T:tinyjambu192v2
75.6275.6276.18T:schwaemm192192v2
80.0680.0680.07T:schwaemm128128v2
85.5885.6185.66romulusm
85.6385.6485.70romulusn
92.9492.9492.96T:romulusn
122.61122.71122.83T:isapk128av20
144.83145.18147.03T:elephant200v2
152.76152.93153.10T:isapk128v20
155.12155.25155.42T!!!romulust
246.27246.33246.51T:isapxv20
8779.108779.738787.49T:elephant176v2
9689.499690.069690.49T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
2.842.872.92T:aes128gcmv1
2.812.892.96T:aes256gcmv1
3.013.023.02aes256gcmv1
16.5516.5516.56ascon128av12
24.3824.3824.38ascon80pqv12
25.1225.1225.12ascon128v12
25.5725.5725.57T:xoodyakround3
34.1334.1334.15ascon128abi32v12
51.7351.7951.86ascon128bi32v12
52.9453.1553.16T:grain128aeadv2
56.9556.9557.06T:giftcofb128v1
56.8257.1857.40T:isapa128v20
57.6557.6657.66T:schwaemm256128v2
60.6260.6260.63T:isapa128av20
65.2865.2865.28T:schwaemm256256v2
66.5066.5066.50T:tinyjambu128v2
72.5072.5072.51T:tinyjambu256v2
72.7572.7572.75T:tinyjambu192v2
75.6275.6275.63T:schwaemm192192v2
80.0680.0680.06T:schwaemm128128v2
85.5885.6085.64romulusm
85.6385.6485.66romulusn
92.9492.9492.96T:romulusn
122.59122.70122.79T:isapk128av20
144.83145.11147.02T:elephant200v2
152.80152.94153.12T:isapk128v20
155.12155.22155.38T!!!romulust
246.27246.33246.59T:isapxv20
8779.158779.758787.39T:elephant176v2
9689.459690.049690.36T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
5.735.755.79T:aes128gcmv1
6.436.436.43aes256gcmv1
6.456.476.51T:aes256gcmv1
17.1217.1217.13ascon128av12
25.1025.1025.10ascon128v12
25.3525.3525.35ascon80pqv12
35.7435.7435.76ascon128abi32v12
39.6039.6239.63T:xoodyakround3
52.4452.4452.50ascon128bi32v12
54.0954.1854.72T:grain128aeadv2
57.8157.8157.84T:giftcofb128v1
59.6459.6459.65T:schwaemm256128v2
67.2467.2467.25T:schwaemm256256v2
78.0878.0978.11T:schwaemm192192v2
81.4181.4281.42T:schwaemm128128v2
81.6781.6781.68T:isapa128av20
86.8286.8386.84T:tinyjambu128v2
100.78100.78100.79T:tinyjambu192v2
106.68106.68106.69T:tinyjambu256v2
107.02107.02107.05T:romulusn
115.67115.70115.75romulusn
124.86125.08126.12T:isapa128v20
158.48158.49158.68romulusm
192.16192.24192.32T:isapk128av20
224.71224.93227.17T:elephant200v2
303.73303.75304.13T!!!romulust
375.11375.29375.81T:isapk128v20
554.78554.83555.11T:isapxv20
13378.1513378.6013388.71T:elephant176v2
14704.8514705.1014705.40T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
5.705.745.81T:aes128gcmv1
6.436.456.50T:aes256gcmv1
6.856.856.85aes256gcmv1
16.9016.9116.91ascon128av12
25.1725.1725.18ascon80pqv12
25.3525.3525.38ascon128v12
35.5535.5635.56ascon128abi32v12
38.7038.7038.71T:xoodyakround3
52.9552.9553.06ascon128bi32v12
54.3954.6154.61T:grain128aeadv2
57.8757.8857.90T:giftcofb128v1
59.5459.5459.81T:schwaemm256128v2
67.2067.2067.21T:schwaemm256256v2
78.3678.3779.33T:schwaemm192192v2
81.3681.3681.36T:schwaemm128128v2
81.8881.8981.91T:isapa128av20
87.6987.6987.70T:tinyjambu128v2
101.40101.40101.41T:tinyjambu192v2
106.70106.70106.75T:romulusn
107.30107.31107.32T:tinyjambu256v2
115.68115.69115.82romulusn
124.94125.14125.74T:isapa128v20
158.71158.72158.80romulusm
192.25192.29192.38T:isapk128av20
224.72224.94227.19T:elephant200v2
303.71303.73304.06T!!!romulust
375.13375.27375.89T:isapk128v20
554.80554.84555.10T:isapxv20
13378.2613378.7913388.86T:elephant176v2
14704.9414705.1914705.54T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
5.715.735.75T:aes128gcmv1
6.446.466.49T:aes256gcmv1
6.856.856.85aes256gcmv1
16.9016.9116.91ascon128av12
25.1725.1725.19ascon80pqv12
25.3525.3525.35ascon128v12
35.5635.5735.60ascon128abi32v12
38.7538.7538.76T:xoodyakround3
52.9552.9853.05ascon128bi32v12
54.4254.6054.63T:grain128aeadv2
57.8857.8957.93T:giftcofb128v1
59.5359.5459.54T:schwaemm256128v2
63.7863.7963.80T:isapa128av20
67.2067.2067.20T:schwaemm256256v2
77.0677.1377.40T:isapa128v20
78.3678.3678.37T:schwaemm192192v2
81.3681.3681.37T:schwaemm128128v2
87.6987.6987.70T:tinyjambu128v2
101.40101.41101.41T:tinyjambu192v2
106.69106.71106.74T:romulusn
107.30107.30107.32T:tinyjambu256v2
115.70115.72115.85romulusn
150.03150.06150.11T:isapk128av20
158.70158.71158.83romulusm
159.69159.70159.75T!!!romulust
224.73224.93227.22T:elephant200v2
249.74249.80249.92T:isapk128v20
353.13353.14353.29T:isapxv20
13378.1913379.0213388.98T:elephant176v2
14704.8514705.0914705.48T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
22.3322.4522.65aes256gcmv1
25.4825.4825.49ascon128av12
29.7029.8330.10T:aes128gcmv1
31.7332.0632.98T:aes256gcmv1
32.8932.8932.99ascon128v12
33.2033.2033.29ascon80pqv12
53.5654.1654.47ascon128abi32v12
57.9958.0058.02T:xoodyakround3
69.4669.4669.73ascon128bi32v12
70.1270.5971.17T:grain128aeadv2
72.7972.8372.96T:giftcofb128v1
97.5197.5397.59T:schwaemm256128v2
102.55102.55102.55T:tinyjambu128v2
104.59104.59104.61T:schwaemm128128v2
104.89104.89104.90T:schwaemm256256v2
118.66118.66118.66T:tinyjambu192v2
123.99124.04124.20T:schwaemm192192v2
125.24125.27125.34T:tinyjambu256v2
138.58138.63138.73T:romulusn
138.43138.75138.90romulusn
182.09182.34182.75romulusm
202.00202.07202.09T:isapa128av20
317.44317.71321.20T:elephant200v2
406.00406.18406.48T!!!romulust
1025.431029.021039.52T:isapa128v20
1053.031054.741056.74T:isapk128av20
4379.504383.194389.86T:isapk128v20
5345.005345.005347.20T:isapxv20
16657.2016665.9316671.77T:elephant176v2
19685.7519688.6619696.06T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
22.1522.3122.39aes256gcmv1
25.5225.5225.65ascon128av12
29.5129.8230.13T:aes128gcmv1
31.3432.2933.40T:aes256gcmv1
33.2333.2333.33ascon80pqv12
33.2633.2633.36ascon128v12
53.5554.0254.46ascon128abi32v12
57.0357.0457.07T:xoodyakround3
70.2570.3270.35T:grain128aeadv2
71.0571.2771.68ascon128bi32v12
73.2773.3273.54T:giftcofb128v1
97.5197.5297.55T:schwaemm256128v2
103.49103.49103.50T:tinyjambu128v2
104.74104.74104.74T:schwaemm128128v2
104.96104.99104.99T:schwaemm256256v2
119.04119.04119.04T:tinyjambu192v2
124.86124.90125.05T:schwaemm192192v2
125.77125.91125.91T:tinyjambu256v2
138.34138.34138.46T:romulusn
138.58138.80139.53romulusn
186.64186.87187.03romulusm
207.27207.30207.30T:isapa128av20
317.44317.68321.23T:elephant200v2
405.87405.94405.99T!!!romulust
1026.041028.821037.90T:isapa128v20
1054.531055.731057.43T:isapk128av20
4379.864383.554386.72T:isapk128v20
5345.395345.465347.93T:isapxv20
16656.9616664.7316670.60T:elephant176v2
19685.6419689.2719695.79T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
22.1522.2722.33aes256gcmv1
25.5225.5225.52ascon128av12
29.9830.0530.46T:aes128gcmv1
32.0432.3733.60T:aes256gcmv1
33.2333.2333.23ascon80pqv12
33.2633.2633.26ascon128v12
53.3453.4653.80ascon128abi32v12
57.3957.3957.40T:xoodyakround3
70.2470.3270.33T:grain128aeadv2
70.2770.7872.22ascon128bi32v12
73.2773.2773.42T:giftcofb128v1
97.5197.5297.58T:schwaemm256128v2
103.50103.50103.50T:tinyjambu128v2
104.74104.74104.74T:schwaemm128128v2
104.99104.99104.99T:schwaemm256256v2
119.10119.10119.10T:tinyjambu192v2
124.92125.09126.61T:schwaemm192192v2
125.66125.80125.80T:tinyjambu256v2
136.54136.80137.02T:isapa128av20
138.05138.05138.34T:romulusn
138.59138.59138.59romulusn
186.67186.85187.01romulusm
258.85259.19259.34T!!!romulust
317.44317.65321.23T:elephant200v2
531.60533.26540.46T:isapa128v20
754.98755.84756.93T:isapk128av20
2439.802440.952441.77T:isapk128v20
2789.132789.132789.70T:isapxv20
16658.5116665.4816670.28T:elephant176v2
19685.8319689.3019695.21T:elephant160v2