VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Tiger Lake (806c1); 2020 Intel Core i7-1165G7; 4 x 2800MHz; panther, supercop-20250307

[Page version: 20250328 20:58:22]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.58?0.65?0.75?T:aes256gcmv1
0.52?0.66?0.75?T:aes128gcmv1
1.521.531.54aes256gcmv1
7.377.397.44ascon128av12
10.9110.9410.97ascon80pqv12
10.9510.9911.01ascon128v12
13.3713.5213.62T:xoodyakround3
14.7114.7714.80ascon128abi32v12
16.3916.5116.63T:schwaemm256128v2
18.9218.9819.02T:grain128aeadv2
19.8820.0220.35T:schwaemm256256v2
21.7521.8522.08T:schwaemm192192v2
22.3922.4422.46ascon128bi32v12
25.1525.2925.37T:schwaemm128128v2
26.8226.8926.94T:isapa128av20
32.0732.0932.13T:isapk128av20
37.0337.0937.21romulusn
44.1244.2144.29T:giftcofb128v1
45.1745.2545.32T:isapa128v20
57.7957.9257.99romulusm
70.6270.6570.68T:tinyjambu128v2
85.9086.1186.17T:tinyjambu192v2
91.0391.1691.42T:tinyjambu256v2
90.2791.3492.06T:isapk128v20
111.27111.52111.71romulust
121.30122.26122.54T:elephant200v2
136.44137.62139.20T:isapxv20
7257.607278.897283.90T:elephant176v2
8274.578276.588279.74T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.47?0.54?0.65?T:aes128gcmv1
0.54?0.58?0.63?T:aes256gcmv1
1.331.341.36aes256gcmv1
7.427.467.49ascon128av12
10.7710.8210.85ascon80pqv12
10.6910.8610.91ascon128v12
13.3213.3813.41T:xoodyakround3
14.8214.8714.91ascon128abi32v12
16.4316.5216.60T:schwaemm256128v2
19.1919.2619.31T:grain128aeadv2
19.9420.0920.28T:schwaemm256256v2
21.6421.7821.88T:schwaemm192192v2
22.3322.3722.40ascon128bi32v12
25.1125.2025.25T:schwaemm128128v2
32.0732.1132.14T:isapk128av20
34.2934.3334.41T:isapa128av20
37.3537.4937.56romulusn
44.2944.3444.41T:giftcofb128v1
45.1445.2545.34T:isapa128v20
58.1958.3758.47romulusm
70.4670.5870.62T:tinyjambu128v2
85.8885.9686.16T:tinyjambu192v2
90.7791.2891.79T:isapk128v20
91.5991.6691.74T:tinyjambu256v2
110.99111.49111.64romulust
121.50122.04122.52T:elephant200v2
136.53137.29138.04T:isapxv20
7253.477262.187286.98T:elephant176v2
8270.648274.338276.90T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.51?0.58?0.68?T:aes128gcmv1
0.59?0.62?0.70?T:aes256gcmv1
1.331.341.36aes256gcmv1
7.437.487.51ascon128av12
10.7910.8110.84ascon80pqv12
10.8410.8610.91ascon128v12
13.2813.3913.49T:xoodyakround3
14.8514.8714.90ascon128abi32v12
16.4716.5916.69T:schwaemm256128v2
19.1619.2119.30T:grain128aeadv2
19.9920.1420.23T:schwaemm256256v2
21.3821.4121.44T:isapk128av20
21.6821.8121.90T:schwaemm192192v2
21.9622.0422.10T:isapa128v20
22.3322.3722.42ascon128bi32v12
22.7622.8422.90T:isapa128av20
25.2725.3525.48T:schwaemm128128v2
37.2837.4137.50romulusn
38.6438.8639.00romulust
44.2644.3344.42T:giftcofb128v1
57.1257.9358.45T:isapk128v20
58.1858.2858.42romulusm
70.4170.4870.56T:tinyjambu128v2
81.2481.6482.00T:isapxv20
85.6585.8486.12T:tinyjambu192v2
90.9791.0291.71T:tinyjambu256v2
121.42122.52123.37T:elephant200v2
7258.017273.577283.45T:elephant176v2
8270.848273.618278.00T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.38?0.45?0.48?T:aes128gcmv1
0.42?0.47?0.53?T:aes256gcmv1
0.940.950.96aes256gcmv1
7.407.447.56ascon128av12
10.2810.3210.35T:xoodyakround3
10.8710.9110.94ascon80pqv12
10.9110.9310.94ascon128v12
14.5014.5214.55ascon128abi32v12
16.2716.3916.49T:schwaemm256128v2
18.8918.9119.00T:grain128aeadv2
19.9020.0620.20T:schwaemm256256v2
21.5621.6821.84T:schwaemm192192v2
22.0922.1222.14ascon128bi32v12
24.8524.8924.92T:isapa128av20
25.1525.2325.28T:schwaemm128128v2
26.7326.7426.75T:isapk128av20
28.9228.9729.03romulusn
33.6133.6833.73T:isapa128v20
39.3339.4039.47romulusm
44.1044.1644.22T:giftcofb128v1
57.5357.5957.68T:tinyjambu128v2
66.9067.1067.13T:tinyjambu192v2
68.5868.9168.98T:tinyjambu256v2
73.7574.1174.41T:isapk128v20
74.9475.1175.20romulust
90.9791.4091.59T:elephant200v2
108.70110.03110.31T:isapxv20
5425.145431.345442.06T:elephant176v2
6200.126203.046205.73T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.35?0.38?0.41?T:aes128gcmv1
0.40?0.41?0.50?T:aes256gcmv1
0.850.860.86aes256gcmv1
7.377.417.45ascon128av12
10.2010.2710.31T:xoodyakround3
10.7910.8410.86ascon80pqv12
10.8610.8710.90ascon128v12
14.5314.5714.59ascon128abi32v12
16.2516.3216.44T:schwaemm256128v2
19.0319.0619.11T:grain128aeadv2
19.8219.9520.10T:schwaemm256256v2
21.5521.6221.72T:schwaemm192192v2
22.0622.0922.12ascon128bi32v12
25.1625.2425.30T:schwaemm128128v2
26.7126.7326.76T:isapk128av20
28.3428.3828.40T:isapa128av20
29.0529.1329.22romulusn
33.6433.6933.75T:isapa128v20
39.5539.6139.67romulusm
44.1244.1644.21T:giftcofb128v1
57.5257.5757.64T:tinyjambu128v2
67.0267.0967.32T:tinyjambu192v2
69.0569.1069.13T:tinyjambu256v2
73.7874.1674.57T:isapk128v20
74.9875.0675.22romulust
90.4390.9191.27T:elephant200v2
109.24109.45109.88T:isapxv20
5422.705432.295442.88T:elephant176v2
6199.946203.746205.80T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.36?0.40?0.43?T:aes128gcmv1
0.40?0.41?0.46?T:aes256gcmv1
0.850.850.86aes256gcmv1
7.387.407.42ascon128av12
10.2310.2810.35T:xoodyakround3
10.8110.8410.85ascon80pqv12
10.8610.8710.90ascon128v12
14.5314.5714.59ascon128abi32v12
16.2816.3916.47T:schwaemm256128v2
19.0619.1319.16T:grain128aeadv2
19.8119.9120.04T:schwaemm256256v2
21.3821.4021.43T:isapk128av20
21.5521.6621.73T:schwaemm192192v2
22.0522.1022.12ascon128bi32v12
22.0622.1122.13T:isapa128v20
22.6022.6322.68T:isapa128av20
25.2125.2725.37T:schwaemm128128v2
29.0529.1029.17romulusn
38.7938.8638.97romulust
39.5539.5939.66romulusm
44.1644.2244.30T:giftcofb128v1
56.9657.2957.63T:isapk128v20
57.6157.6357.66T:tinyjambu128v2
66.9567.2167.38T:tinyjambu192v2
68.6968.8869.06T:tinyjambu256v2
81.0281.5581.76T:isapxv20
90.8691.2891.80T:elephant200v2
5426.885439.565445.43T:elephant176v2
6201.486203.356207.68T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.15?0.21?0.27?T:aes128gcmv1
0.19?0.21?0.34?T:aes256gcmv1
0.370.370.38aes256gcmv1
7.167.277.30T:xoodyakround3
7.327.357.46ascon128av12
10.7910.8410.88ascon80pqv12
10.8310.8510.88ascon128v12
14.1914.2314.26ascon128abi32v12
16.1716.3516.47T:schwaemm256128v2
18.8318.8919.02T:grain128aeadv2
19.9120.1720.30T:schwaemm256256v2
20.7620.8420.92romulusn
20.8120.8720.93romulusm
21.3821.4121.44T:isapk128av20
21.5321.6721.79T:schwaemm192192v2
21.7221.7521.79ascon128bi32v12
22.0522.1022.16T:isapa128v20
22.8422.8822.94T:isapa128av20
25.0525.1425.30T:schwaemm128128v2
38.6238.7838.95romulust
44.1544.2244.27T:giftcofb128v1
44.5644.6044.70T:tinyjambu128v2
46.2146.4046.54T:tinyjambu256v2
48.4448.4948.57T:tinyjambu192v2
57.1357.7358.04T:isapk128v20
61.8962.1362.36T:elephant200v2
81.2982.0983.03T:isapxv20
3581.803606.933614.96T:elephant176v2
4130.404135.434144.27T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.07?0.19?0.24?T:aes256gcmv1
0.13?0.21?0.27?T:aes128gcmv1
0.360.380.39aes256gcmv1
7.177.267.30T:xoodyakround3
7.297.317.35ascon128av12
10.7610.8310.85ascon80pqv12
10.8510.8710.91ascon128v12
14.2114.2614.29ascon128abi32v12
16.0816.1816.36T:schwaemm256128v2
18.8918.9619.06T:grain128aeadv2
19.5719.8119.99T:schwaemm256256v2
20.7720.8420.92romulusn
20.8120.8921.02romulusm
21.3521.4021.43T:isapk128av20
21.4721.6221.87T:schwaemm192192v2
21.7421.7921.83ascon128bi32v12
22.0422.1422.19T:isapa128v20
22.4222.4622.49T:isapa128av20
24.9925.0725.18T:schwaemm128128v2
38.7238.7838.92romulust
44.1144.2344.31T:giftcofb128v1
44.6244.6444.70T:tinyjambu128v2
46.2046.5446.60T:tinyjambu256v2
48.2848.3548.42T:tinyjambu192v2
56.9357.3757.79T:isapk128v20
61.6261.9162.11T:elephant200v2
81.6682.3382.63T:isapxv20
3577.783591.633600.62T:elephant176v2
4133.414136.964140.50T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.16?0.21?0.32?T:aes128gcmv1
0.18?0.21?0.30?T:aes256gcmv1
0.360.380.39aes256gcmv1
7.137.237.29T:xoodyakround3
7.267.327.34ascon128av12
10.7810.8210.85ascon80pqv12
10.8510.8710.88ascon128v12
14.2414.2714.30ascon128abi32v12
16.1716.2316.39T:schwaemm256128v2
18.9119.0019.06T:grain128aeadv2
19.6919.9120.05T:schwaemm256256v2
20.8120.8520.91romulusn
20.8020.8620.93romulusm
21.3621.4021.45T:isapk128av20
21.3321.4521.53T:schwaemm192192v2
21.7821.8021.84ascon128bi32v12
22.0422.1122.18T:isapa128v20
22.3822.4422.47T:isapa128av20
25.0725.1625.23T:schwaemm128128v2
38.6538.9239.12romulust
44.1144.1744.24T:giftcofb128v1
44.5844.6144.66T:tinyjambu128v2
46.2546.5246.59T:tinyjambu256v2
48.2948.3648.40T:tinyjambu192v2
57.0457.4858.11T:isapk128v20
61.6261.9162.22T:elephant200v2
81.7182.0482.49T:isapxv20
3578.143585.933590.83T:elephant176v2
4139.394143.344147.17T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.810.820.90T:aes128gcmv1
0.870.900.92T:aes256gcmv1
1.091.091.10aes256gcmv1
7.587.607.62ascon128av12
10.4810.5010.51T:xoodyakround3
11.0111.0411.07ascon80pqv12
11.0511.0811.10ascon128v12
14.8314.8514.87ascon128abi32v12
16.8016.8516.92T:schwaemm256128v2
19.3519.3819.38T:grain128aeadv2
20.3820.4120.50T:schwaemm256256v2
22.1522.2322.34T:schwaemm192192v2
22.4422.4522.47ascon128bi32v12
25.5625.6125.69T:schwaemm128128v2
26.8226.8326.85T:isapa128av20
29.2129.2229.25romulusn
29.7929.8129.81T:isapk128av20
39.7539.7939.84romulusm
44.5844.6144.66T:giftcofb128v1
48.6948.7248.78T:isapa128v20
57.9457.9658.03T:tinyjambu128v2
67.4867.5767.67T:tinyjambu192v2
69.1169.1569.58T:tinyjambu256v2
76.1776.2576.30romulust
93.1593.3093.46T:elephant200v2
128.47128.76128.94T:isapk128v20
179.97180.52180.71T:isapxv20
5466.185473.125478.59T:elephant176v2
6272.696273.886276.10T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.810.830.85T:aes128gcmv1
0.900.900.96T:aes256gcmv1
0.970.970.98aes256gcmv1
7.567.587.62ascon128av12
10.3710.3910.42T:xoodyakround3
10.9711.0011.02ascon80pqv12
11.0311.0411.06ascon128v12
14.9014.9214.93ascon128abi32v12
16.7616.8516.89T:schwaemm256128v2
19.4719.5019.50T:grain128aeadv2
20.3420.4120.47T:schwaemm256256v2
22.0122.1322.21T:schwaemm192192v2
22.4222.4522.47ascon128bi32v12
25.4525.5525.62T:schwaemm128128v2
29.3329.3629.40romulusn
29.8029.8029.82T:isapk128av20
30.2630.3130.33T:isapa128av20
39.8839.9340.00romulusm
44.6744.6944.72T:giftcofb128v1
48.7148.7248.75T:isapa128v20
57.9357.9758.05T:tinyjambu128v2
67.4167.4867.55T:tinyjambu192v2
69.5669.5969.61T:tinyjambu256v2
76.2576.3376.39romulust
93.0893.2593.91T:elephant200v2
128.54128.75129.06T:isapk128v20
179.52179.76180.03T:isapxv20
5471.675480.065496.70T:elephant176v2
6272.776274.306276.74T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.820.850.87T:aes128gcmv1
0.890.900.93T:aes256gcmv1
0.970.970.97aes256gcmv1
7.557.597.60ascon128av12
10.3910.4210.45T:xoodyakround3
10.9410.9610.98ascon80pqv12
11.0111.0211.03ascon128v12
14.8914.9114.91ascon128abi32v12
16.7816.8816.94T:schwaemm256128v2
19.4719.5019.52T:grain128aeadv2
20.3820.5020.59T:schwaemm256256v2
22.0522.0722.13T:schwaemm192192v2
22.4122.4222.44ascon128bi32v12
23.1823.1923.21T:isapk128av20
23.7123.7223.74T:isapa128av20
25.5025.5825.65T:schwaemm128128v2
29.3529.3829.41romulusn
29.7129.7629.78T:isapa128v20
39.8839.9439.98romulusm
39.9840.0240.15romulust
44.6044.6444.69T:giftcofb128v1
57.9257.9558.03T:tinyjambu128v2
67.5467.6367.73T:tinyjambu192v2
69.1969.5369.58T:tinyjambu256v2
85.2685.4885.73T:isapk128v20
93.1993.4093.85T:elephant200v2
117.46117.61117.73T:isapxv20
5475.845478.935494.62T:elephant176v2
6273.526275.646279.34T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
6.726.766.91aes256gcmv1
10.91?11.08?12.27?T:aes128gcmv1
11.3211.7011.92T:aes256gcmv1
11.8411.9812.33ascon128av12
14.4614.5214.95ascon80pqv12
14.5614.6114.73ascon128v12
14.8815.3815.91T:xoodyakround3
22.2422.3822.78ascon128abi32v12
27.1528.0228.57T:schwaemm256128v2
27.9128.6428.75T:grain128aeadv2
29.9630.0330.45ascon128bi32v12
32.7033.3533.91T:schwaemm256256v2
33.1033.7734.07T:schwaemm128128v2
34.4434.6834.88romulusn
35.6536.2736.74T:schwaemm192192v2
45.7346.2346.49romulusm
53.3453.6053.98T:giftcofb128v1
67.3967.5967.82T:tinyjambu128v2
71.0571.4072.03T:isapa128av20
78.1278.3378.55T:tinyjambu192v2
80.0580.3980.75T:tinyjambu256v2
95.0995.3895.52T:isapk128av20
102.64103.10103.79romulust
131.08131.84133.12T:elephant200v2
394.75395.03395.38T:isapa128v20
1348.251352.271357.48T:isapk128v20
1773.661778.491791.23T:isapxv20
6816.876835.276841.22T:elephant176v2
8401.308418.918429.26T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
6.686.776.84aes256gcmv1
10.9411.1211.61T:aes128gcmv1
11.4711.6311.75T:aes256gcmv1
11.5911.9212.24ascon128av12
14.4014.5814.71ascon80pqv12
14.6614.7314.88ascon128v12
14.8715.0216.17T:xoodyakround3
22.4622.5522.63ascon128abi32v12
27.4328.0728.67T:schwaemm256128v2
27.8728.4028.73T:grain128aeadv2
30.0930.3130.88ascon128bi32v12
31.6332.4833.42T:schwaemm256256v2
33.2333.5734.35T:schwaemm128128v2
34.7334.9935.23romulusn
35.5036.5937.25T:schwaemm192192v2
47.2547.5348.04romulusm
53.6153.9454.10T:giftcofb128v1
67.6167.7567.94T:tinyjambu128v2
74.2374.3774.63T:isapa128av20
78.4278.6278.87T:tinyjambu192v2
80.2680.4380.71T:tinyjambu256v2
95.2395.4895.68T:isapk128av20
102.62103.23104.15romulust
131.21133.30133.68T:elephant200v2
394.94395.13395.41T:isapa128v20
1351.591354.341358.61T:isapk128v20
1772.591774.361777.60T:isapxv20
6823.656827.796837.02T:elephant176v2
8405.598416.358428.36T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
6.716.776.86aes256gcmv1
10.8311.0611.90T:aes256gcmv1
10.9311.1311.23T:aes128gcmv1
11.6011.6611.84ascon128av12
14.3814.5214.62ascon80pqv12
14.5214.6014.66ascon128v12
14.9715.4415.73T:xoodyakround3
22.4122.4722.64ascon128abi32v12
27.1527.5928.42T:schwaemm256128v2
27.8628.4228.68T:grain128aeadv2
30.1330.2530.63ascon128bi32v12
32.4632.7833.67T:schwaemm256256v2
33.0933.5433.80T:schwaemm128128v2
34.8434.9535.04romulusn
35.4736.1436.58T:schwaemm192192v2
47.1247.2247.48romulusm
48.4448.7349.52T:isapa128av20
53.5453.8954.18T:giftcofb128v1
59.9860.2760.57T:isapk128av20
65.4566.0566.68romulust
67.4567.6267.75T:tinyjambu128v2
78.3478.7478.80T:tinyjambu192v2
80.0580.2480.56T:tinyjambu256v2
131.80132.61133.01T:elephant200v2
206.02206.12206.88T:isapa128v20
710.02711.14715.84T:isapk128v20
927.05929.01931.96T:isapxv20
6822.736839.446845.70T:elephant176v2
8411.308416.598425.66T:elephant160v2