VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Airmont (406c3); 2015 Intel Pentium N3700; 4 x 1600MHz; nucnuc, supercop-20250415

[Page version: 20250615 19:27:19]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
5.99?6.46?6.80?T:aes128gcmv1
7.27?7.67?8.09?T:aes256gcmv1
8.868.959.00aes256gcmv1
16.8716.8916.90ascon128av12
24.6224.6224.63ascon128v12
25.1225.1225.15ascon80pqv12
35.2935.3335.34ascon128abi32v12
51.9752.0052.15ascon128bi32v12
52.9252.9552.97T:xoodyakround3
53.9154.0354.52T:grain128aeadv2
57.2857.3257.38T:giftcofb128v1
58.3258.3358.35T:schwaemm256128v2
65.9065.9165.95T:schwaemm256256v2
77.3677.3877.41T:schwaemm192192v2
80.7580.7680.76T:schwaemm128128v2
92.2492.2792.31T:isapa128av20
105.74105.77105.80T:tinyjambu128v2
113.53114.86116.32T:isapa128v20
118.39118.39118.44T:romulusn
127.25127.26127.29T:tinyjambu192v2
139.25139.27139.29T:tinyjambu256v2
143.59143.63143.70romulusn
183.87184.10184.51T:isapk128av20
229.00229.04229.10romulusm
244.49245.46246.05T:isapk128v20
296.26299.69300.55T:elephant200v2
441.41441.49442.18T:isapxv20
443.16443.29444.95T!!!romulust
17920.6517921.2417921.81T:elephant176v2
19389.3619390.3719391.13T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
6.08?6.45?6.92?T:aes128gcmv1
7.397.728.12T:aes256gcmv1
9.869.959.98aes256gcmv1
16.4916.5116.51ascon128av12
24.8724.8824.88ascon128v12
25.2525.2525.25ascon80pqv12
35.3735.4135.43ascon128abi32v12
51.0951.1051.11T:xoodyakround3
52.5052.6052.75ascon128bi32v12
54.1254.8954.93T:grain128aeadv2
56.9957.0157.09T:giftcofb128v1
58.1058.1258.15T:schwaemm256128v2
65.8065.8165.83T:schwaemm256256v2
77.8977.9277.96T:schwaemm192192v2
80.6280.6380.64T:schwaemm128128v2
92.2592.2792.30T:isapa128av20
107.49107.51107.54T:tinyjambu128v2
112.51114.27115.92T:isapa128v20
117.67117.69117.82T:romulusn
128.50128.50128.50T:tinyjambu192v2
140.49140.52140.58T:tinyjambu256v2
143.56143.63144.47romulusn
183.90184.06184.32T:isapk128av20
229.15229.19230.76romulusm
245.13245.49245.98T:isapk128v20
296.23299.66300.53T:elephant200v2
441.37441.50442.21T:isapxv20
443.14443.31444.74T!!!romulust
17920.6517921.0217921.71T:elephant176v2
19389.3819390.2919391.48T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
6.246.436.67T:aes128gcmv1
7.457.737.97T:aes256gcmv1
9.949.959.96aes256gcmv1
16.5016.5116.51ascon128av12
24.8724.8824.88ascon128v12
25.2525.2525.25ascon80pqv12
35.3935.3935.39ascon128abi32v12
51.1151.1851.36T:xoodyakround3
52.5852.6052.76ascon128bi32v12
54.0954.1654.93T:grain128aeadv2
57.0157.0157.03T:giftcofb128v1
56.5157.1958.04T:isapa128v20
58.1258.1258.13T:schwaemm256128v2
60.6360.6460.66T:isapa128av20
65.8165.8265.83T:schwaemm256256v2
77.9277.9277.94T:schwaemm192192v2
80.6280.6381.11T:schwaemm128128v2
107.49107.51107.53T:tinyjambu128v2
117.68117.70117.78T:romulusn
122.43122.58122.67T:isapk128av20
128.50128.50128.51T:tinyjambu192v2
140.49140.52140.53T:tinyjambu256v2
143.62143.64143.76romulusn
153.31153.41153.56T:isapk128v20
155.54155.55155.66T!!!romulust
229.08229.16229.21romulusm
244.06244.09244.21T:isapxv20
295.36299.67300.53T:elephant200v2
17920.7217921.0917921.83T:elephant176v2
19389.4419390.0219391.51T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
4.454.624.79T:aes128gcmv1
5.045.305.48T:aes256gcmv1
6.036.086.10aes256gcmv1
16.7516.7616.79ascon128av12
24.7424.7524.77ascon128v12
24.9925.0025.02ascon80pqv12
34.8434.9434.99ascon128abi32v12
39.2239.2339.25T:xoodyakround3
51.6751.7352.32ascon128bi32v12
53.4753.5853.77T:grain128aeadv2
57.1757.1757.20T:giftcofb128v1
57.9957.9958.00T:schwaemm256128v2
65.5865.5965.63T:schwaemm256256v2
76.4476.4576.53T:isapa128av20
76.4876.5076.55T:schwaemm192192v2
80.4080.4180.42T:schwaemm128128v2
84.0285.4787.27T:isapa128v20
86.1286.1486.16T:tinyjambu128v2
100.00100.01100.16T:tinyjambu192v2
105.64105.65105.69T:romulusn
105.87105.88105.91T:tinyjambu256v2
114.49114.50114.58romulusn
153.26153.37154.05T:isapk128av20
157.24157.28157.40romulusm
198.70199.25199.76T:isapk128v20
219.93222.57223.03T:elephant200v2
299.13299.22300.06T!!!romulust
343.80344.00344.31T:isapxv20
13385.7213385.9013386.26T:elephant176v2
14539.6114539.7514540.43T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
4.454.654.86T:aes128gcmv1
5.115.295.51T:aes256gcmv1
6.416.476.50aes256gcmv1
16.4916.5316.56ascon128av12
24.7924.8124.84ascon80pqv12
24.9825.0025.01ascon128v12
34.6634.7434.78ascon128abi32v12
38.3238.3338.35T:xoodyakround3
52.0052.1852.31ascon128bi32v12
53.4653.5554.45T:grain128aeadv2
57.0257.0457.06T:giftcofb128v1
57.8757.8857.89T:schwaemm256128v2
65.5365.5465.56T:schwaemm256256v2
76.4276.4476.46T:isapa128av20
76.7676.7776.80T:schwaemm192192v2
80.3480.3580.35T:schwaemm128128v2
84.6986.0886.87T:isapa128v20
86.9987.0087.01T:tinyjambu128v2
100.62100.63100.64T:tinyjambu192v2
105.29105.32105.74T:romulusn
106.49106.50106.53T:tinyjambu256v2
114.49114.55114.65romulusn
153.25153.33153.66T:isapk128av20
157.29157.34157.48romulusm
199.05199.18199.64T:isapk128v20
219.89222.56223.03T:elephant200v2
299.13299.18300.22T!!!romulust
343.54343.97344.27T:isapxv20
13385.6813385.9813386.77T:elephant176v2
14539.3914539.6814540.02T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
4.524.654.80T:aes128gcmv1
5.145.285.46T:aes256gcmv1
6.476.486.49aes256gcmv1
16.5316.5316.54ascon128av12
24.8124.8124.82ascon80pqv12
25.0025.0025.25ascon128v12
34.7634.7734.81ascon128abi32v12
38.3538.3738.43T:xoodyakround3
52.1852.2152.30ascon128bi32v12
53.5253.5654.30T:grain128aeadv2
57.0357.0557.07T:giftcofb128v1
56.6657.4058.54T:isapa128v20
57.8857.8957.95T:schwaemm256128v2
60.6160.6360.65T:isapa128av20
65.5365.5465.55T:schwaemm256256v2
76.7776.7876.80T:schwaemm192192v2
80.3480.3580.35T:schwaemm128128v2
87.0087.0087.07T:tinyjambu128v2
100.62100.63100.82T:tinyjambu192v2
105.31105.31105.37T:romulusn
106.50106.51106.52T:tinyjambu256v2
114.49114.53114.88romulusn
122.55122.62122.69T:isapk128av20
153.10153.16153.24T:isapk128v20
155.32155.34155.40T!!!romulust
157.30157.35157.52romulusm
219.90222.59223.05T:elephant200v2
245.19245.23245.56T:isapxv20
13385.6813385.9513386.50T:elephant176v2
14539.3914539.7214540.32T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
2.64?2.87?3.02?T:aes128gcmv1
2.54?2.89?3.11?T:aes256gcmv1
3.173.203.21aes256gcmv1
16.6216.6316.71ascon128av12
24.8624.8824.89ascon128v12
24.8824.8824.88ascon80pqv12
25.5725.5825.59T:xoodyakround3
34.5334.6334.69ascon128abi32v12
51.3051.3551.66ascon128bi32v12
53.1153.1353.38T:grain128aeadv2
57.0057.0157.06T:giftcofb128v1
56.4957.0357.36T:isapa128v20
57.6657.6757.68T:schwaemm256128v2
60.6260.6360.68T:isapa128av20
65.2765.2965.30T:schwaemm256256v2
66.5066.5066.52T:tinyjambu128v2
72.4972.5172.53T:tinyjambu256v2
72.7572.7572.76T:tinyjambu192v2
75.6175.6275.65T:schwaemm192192v2
80.0680.0680.06T:schwaemm128128v2
85.3185.3585.50romulusn
85.4885.5085.56romulusm
92.9092.9193.22T:romulusn
122.59122.68122.84T:isapk128av20
145.64147.06147.22T:elephant200v2
152.86152.96154.91T:isapk128v20
155.10155.17155.30T!!!romulust
246.27246.35247.00T:isapxv20
8851.178851.948852.15T:elephant176v2
9689.359689.689690.63T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
2.66?2.87?3.00?T:aes128gcmv1
2.72?2.93?3.08?T:aes256gcmv1
2.983.013.02aes256gcmv1
16.5216.5516.62ascon128av12
24.3824.3824.38ascon80pqv12
25.1125.1225.13ascon128v12
25.5525.5725.59T:xoodyakround3
34.0734.1434.18ascon128abi32v12
51.5951.6351.87ascon128bi32v12
52.7852.8853.70T:grain128aeadv2
57.0057.0157.08T:giftcofb128v1
56.5857.0157.54T:isapa128v20
57.6757.6757.68T:schwaemm256128v2
60.6060.6260.68T:isapa128av20
65.2765.2865.29T:schwaemm256256v2
66.5066.5066.54T:tinyjambu128v2
72.4872.5172.52T:tinyjambu256v2
72.7572.7572.77T:tinyjambu192v2
75.6275.6375.63T:schwaemm192192v2
80.0680.0680.08T:schwaemm128128v2
85.3385.4185.52romulusn
85.4385.5285.65romulusm
92.9092.9793.04T:romulusn
122.62122.72122.80T:isapk128av20
144.92147.06147.25T:elephant200v2
152.85152.97153.15T:isapk128v20
155.10155.12155.43T!!!romulust
246.29246.35246.42T:isapxv20
8850.948851.848852.16T:elephant176v2
9689.509690.349690.75T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
2.73?2.91?3.06?T:aes256gcmv1
2.782.913.00T:aes128gcmv1
2.993.013.01aes256gcmv1
16.5416.5516.55ascon128av12
24.3824.3824.38ascon80pqv12
25.1225.1225.13ascon128v12
25.5525.5725.59T:xoodyakround3
34.1334.1334.15ascon128abi32v12
51.6651.7651.85ascon128bi32v12
52.8852.9553.65T:grain128aeadv2
56.9957.0257.27T:giftcofb128v1
56.7157.1557.55T:isapa128v20
57.6657.6757.68T:schwaemm256128v2
60.6260.6460.69T:isapa128av20
65.2865.3065.31T:schwaemm256256v2
66.5066.5066.53T:tinyjambu128v2
72.4872.5272.53T:tinyjambu256v2
72.7572.7572.75T:tinyjambu192v2
75.6275.6375.65T:schwaemm192192v2
80.0680.0680.08T:schwaemm128128v2
85.3285.3985.48romulusn
85.5085.5385.56romulusm
92.9192.9493.08T:romulusn
122.55122.69122.77T:isapk128av20
145.82147.06147.25T:elephant200v2
152.80152.93153.05T:isapk128v20
155.11155.13155.25T!!!romulust
246.30246.33246.48T:isapxv20
8851.208851.958852.38T:elephant176v2
9689.369690.099690.69T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
5.795.806.00T:aes128gcmv1
6.446.446.48aes256gcmv1
6.436.456.69T:aes256gcmv1
17.1317.1317.15ascon128av12
25.1025.1025.12ascon128v12
25.3625.3625.37ascon80pqv12
35.7535.7635.88ascon128abi32v12
39.6139.6139.62T:xoodyakround3
52.4452.4452.77ascon128bi32v12
54.2854.4654.56T:grain128aeadv2
57.8557.8557.88T:giftcofb128v1
59.6659.6659.67T:schwaemm256128v2
67.2567.2567.31T:schwaemm256256v2
78.0978.0978.10T:schwaemm192192v2
81.4281.4281.49T:schwaemm128128v2
81.6881.6981.73T:isapa128av20
86.8086.8286.84T:tinyjambu128v2
100.76100.76100.78T:tinyjambu192v2
106.67106.68106.70T:tinyjambu256v2
107.03107.03107.10T:romulusn
115.47115.51115.57romulusn
125.15125.30126.01T:isapa128v20
158.34158.36158.43romulusm
192.17192.24192.28T:isapk128av20
224.35227.30227.51T:elephant200v2
303.62303.63303.95T!!!romulust
375.36375.52375.99T:isapk128v20
554.78554.82555.30T:isapxv20
13487.4913487.7413488.04T:elephant176v2
14703.5214703.7514704.38T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
5.775.806.03T:aes128gcmv1
6.486.556.73T:aes256gcmv1
6.866.866.91aes256gcmv1
16.9116.9216.94ascon128av12
25.1825.1825.19ascon80pqv12
25.3625.3625.38ascon128v12
35.5435.5635.62ascon128abi32v12
38.7238.7238.74T:xoodyakround3
52.9553.0053.09ascon128bi32v12
54.2554.3654.99T:grain128aeadv2
57.7557.7657.98T:giftcofb128v1
59.5559.5559.55T:schwaemm256128v2
67.2267.2267.24T:schwaemm256256v2
78.3678.3678.42T:schwaemm192192v2
81.3581.3681.36T:schwaemm128128v2
81.9081.9181.93T:isapa128av20
87.6987.6987.71T:tinyjambu128v2
101.40101.40101.42T:tinyjambu192v2
106.71106.73106.81T:romulusn
107.31107.32107.34T:tinyjambu256v2
115.50115.53115.97romulusn
125.41125.90126.78T:isapa128v20
158.57158.60158.85romulusm
192.27192.30192.49T:isapk128av20
224.36227.30227.51T:elephant200v2
303.61303.66304.54T!!!romulust
375.29375.46375.72T:isapk128v20
554.82554.83555.24T:isapxv20
13487.5713487.7413487.92T:elephant176v2
14703.5414703.9314704.36T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
5.755.775.92T:aes128gcmv1
6.496.576.71T:aes256gcmv1
6.866.876.87aes256gcmv1
16.9116.9116.92ascon128av12
25.1825.1825.28ascon80pqv12
25.3625.3625.36ascon128v12
35.5535.5635.64ascon128abi32v12
38.7738.7738.79T:xoodyakround3
52.9553.0153.14ascon128bi32v12
54.2854.7954.96T:grain128aeadv2
57.7357.7557.75T:giftcofb128v1
59.5559.5559.55T:schwaemm256128v2
63.8063.8163.84T:isapa128av20
67.2167.2267.22T:schwaemm256256v2
76.9977.0877.69T:isapa128v20
78.3678.3678.37T:schwaemm192192v2
81.3581.3681.36T:schwaemm128128v2
87.6987.6987.74T:tinyjambu128v2
101.40101.40101.40T:tinyjambu192v2
106.69106.70106.79T:romulusn
107.31107.31107.32T:tinyjambu256v2
115.49115.49115.58romulusn
150.06150.08150.37T:isapk128av20
158.56158.60158.67romulusm
159.64159.64159.70T!!!romulust
224.39227.30227.51T:elephant200v2
249.76249.80250.18T:isapk128v20
353.14353.15353.60T:isapxv20
13487.4613487.6213487.88T:elephant176v2
14703.6214703.7814704.04T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
22.4122.5922.95aes256gcmv1
25.5825.5826.95ascon128av12
30.84?31.54?36.53?T:aes128gcmv1
32.01?32.41?36.35?T:aes256gcmv1
33.0233.1233.55ascon128v12
33.3033.4134.02ascon80pqv12
53.7353.9056.41ascon128abi32v12
58.0458.1858.33T:xoodyakround3
69.5969.5972.97ascon128bi32v12
70.2470.5071.21T:grain128aeadv2
73.0173.0373.56T:giftcofb128v1
97.6097.6497.97T:schwaemm256128v2
102.34102.34102.45T:tinyjambu128v2
104.61104.61104.81T:schwaemm128128v2
105.14105.14105.72T:schwaemm256256v2
118.25118.25118.43T:tinyjambu192v2
124.34124.38125.27T:schwaemm192192v2
124.88125.05125.10T:tinyjambu256v2
137.95137.95139.60romulusn
138.89138.99139.16T:romulusn
182.56183.49184.17romulusm
202.27202.38202.55T:isapa128av20
319.91320.76321.08T:elephant200v2
405.55405.73407.13T!!!romulust
1030.481035.881057.13T:isapa128v20
1054.461056.131060.73T:isapk128av20
4384.294387.894392.55T:isapk128v20
5344.615344.775347.10T:isapxv20
16787.8916789.6416801.00T:elephant176v2
19685.7219688.1519699.14T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
22.2722.4523.20aes256gcmv1
25.6025.7526.70ascon128av12
29.67?30.78?35.70?T:aes128gcmv1
33.3533.4834.13ascon80pqv12
33.3633.4834.30ascon128v12
32.70?33.55?37.54?T:aes256gcmv1
53.4653.8455.67ascon128abi32v12
57.1257.1457.42T:xoodyakround3
70.2270.6873.20ascon128bi32v12
70.8271.5571.73T:grain128aeadv2
73.5273.5573.99T:giftcofb128v1
97.5597.6597.70T:schwaemm256128v2
103.46103.46103.57T:tinyjambu128v2
104.59104.59104.59T:schwaemm128128v2
105.05105.13105.60T:schwaemm256256v2
119.19119.19119.30T:tinyjambu192v2
124.90125.03125.41T:schwaemm192192v2
125.86125.97126.07T:tinyjambu256v2
138.33138.41138.98romulusn
138.43138.43139.30T:romulusn
187.17187.42187.62romulusm
207.44207.55207.73T:isapa128av20
317.70320.68321.13T:elephant200v2
405.50405.64407.48T!!!romulust
1031.591037.061061.64T:isapa128v20
1055.381056.821058.32T:isapk128av20
4385.044388.274393.04T:isapk128v20
5345.225345.705347.06T:isapxv20
16788.2116791.4516798.41T:elephant176v2
19686.1519691.0419695.50T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
22.2722.4522.52aes256gcmv1
25.6025.6025.72ascon128av12
29.91?30.38?34.37?T:aes128gcmv1
33.3533.3533.38ascon80pqv12
33.3633.4133.44ascon128v12
33.7533.9937.08T:aes256gcmv1
53.4654.1854.48ascon128abi32v12
57.4557.4957.72T:xoodyakround3
70.4970.8070.88T:grain128aeadv2
70.5970.8771.96ascon128bi32v12
73.5273.5273.55T:giftcofb128v1
97.5597.5697.70T:schwaemm256128v2
103.44103.44103.44T:tinyjambu128v2
104.59104.59104.59T:schwaemm128128v2
105.04105.04105.41T:schwaemm256256v2
119.19119.19119.19T:tinyjambu192v2
125.01125.03125.18T:schwaemm192192v2
125.86125.86126.07T:tinyjambu256v2
136.48136.52136.69T:isapa128av20
138.18138.23138.41T:romulusn
138.34138.34138.48romulusn
186.79187.42187.80romulusm
258.36258.45259.12T!!!romulust
317.43320.68321.32T:elephant200v2
531.63534.05559.41T:isapa128v20
755.67755.95756.29T:isapk128av20
2439.932440.892442.34T:isapk128v20
2789.262789.272789.66T:isapxv20
16787.8016790.1216801.91T:elephant176v2
19685.9119693.9219697.01T:elephant160v2