VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Coffee Lake (906ea); 2018 Intel Xeon E-2124; 4 x 3300MHz; r24000, supercop-20250415

[Page version: 20250506 12:43:01]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.65?0.70?0.74?T:aes128gcmv1
0.880.920.96T:aes256gcmv1
7.537.577.62ascon128av12
10.9010.9310.98ascon128v12
10.9210.9510.97ascon80pqv12
13.7214.0114.08ascon128abi32v12
15.5015.5815.63T:xoodyakround3
17.5717.6317.67T:schwaemm256128v2
20.4920.5420.56ascon128bi32v12
23.1223.2023.28T:schwaemm192192v2
24.2024.2124.23T:grain128aeadv2
23.9624.2224.81T:schwaemm256256v2
25.7225.7625.83T:schwaemm128128v2
33.4833.5433.58T:giftcofb128v1
39.5039.5239.56romulusn
40.4340.5240.64T:isapa128av20
43.0643.1443.20T:isapa128v20
62.9462.9763.01romulusm
67.7967.8567.87T:tinyjambu128v2
67.9068.0568.27T:isapk128av20
83.5083.5083.50T:tinyjambu192v2
89.2989.3089.31T:tinyjambu256v2
90.5190.7291.01T:isapk128v20
131.80131.95132.01romulust
144.94?169.41?194.06?T:isapxv20
179.16179.25179.37T:elephant200v2
303.63?317.71?517.53?aes256gcmv1
6812.766813.016813.19T:elephant176v2
8160.598161.138161.62T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.61?0.67?0.71?T:aes128gcmv1
0.850.900.94T:aes256gcmv1
7.377.407.43ascon128av12
10.9010.9310.95ascon128v12
10.9010.9310.95ascon80pqv12
13.8013.8413.89ascon128abi32v12
15.2715.3415.42T:xoodyakround3
17.6017.6717.69T:schwaemm256128v2
20.5620.6020.82ascon128bi32v12
23.1523.2123.29T:schwaemm192192v2
23.9724.2024.83T:schwaemm256256v2
24.6224.6824.72T:grain128aeadv2
25.6425.6725.75T:schwaemm128128v2
33.6633.7033.75T:giftcofb128v1
39.3239.4739.77romulusn
40.4940.6040.67T:isapa128av20
43.0343.1143.18T:isapa128v20
63.1663.2363.29romulusm
68.0068.0168.02T:tinyjambu128v2
67.9468.0968.20T:isapk128av20
83.5083.5083.50T:tinyjambu192v2
89.2589.2689.27T:tinyjambu256v2
90.3990.7090.88T:isapk128v20
131.75131.88132.18romulust
144.81?169.55?194.11?T:isapxv20
179.21179.28179.40T:elephant200v2
302.70?316.69?517.32?aes256gcmv1
6812.776813.296813.67T:elephant176v2
8160.488161.128161.78T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.650.680.69T:aes128gcmv1
0.840.880.92T:aes256gcmv1
7.387.397.42ascon128av12
10.9010.9210.97ascon128v12
10.9110.9310.96ascon80pqv12
13.8313.9213.96ascon128abi32v12
15.2215.3115.45T:xoodyakround3
17.6017.6417.67T:schwaemm256128v2
20.5720.6120.66ascon128bi32v12
21.5221.5521.61T:isapa128v20
23.1323.2023.26T:schwaemm192192v2
23.9524.2324.82T:schwaemm256256v2
24.6824.6924.71T:grain128aeadv2
25.6525.6725.71T:schwaemm128128v2
27.3027.3627.42T:isapa128av20
33.6633.7033.74T:giftcofb128v1
39.3339.7139.79romulusn
44.9645.0245.40romulust
45.0845.1745.27T:isapk128av20
56.1256.3556.50T:isapk128v20
63.1763.2163.27romulusm
68.0068.0168.02T:tinyjambu128v2
83.5083.5083.50T:tinyjambu192v2
89.2589.2689.27T:tinyjambu256v2
72.82?97.55?121.95?T:isapxv20
179.19179.27179.39T:elephant200v2
288.76?302.69?502.93?aes256gcmv1
6812.346813.276813.71T:elephant176v2
8160.528161.138161.97T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.510.530.54T:aes128gcmv1
0.620.640.65T:aes256gcmv1
7.477.497.50ascon128av12
10.9210.9410.97ascon80pqv12
10.9210.9510.96ascon128v12
11.6811.7411.77T:xoodyakround3
13.9413.9613.98ascon128abi32v12
17.4917.5517.57T:schwaemm256128v2
20.7120.7320.98ascon128bi32v12
23.0323.0823.53T:schwaemm192192v2
23.8524.1024.74T:schwaemm256256v2
24.1924.2024.21T:grain128aeadv2
25.5125.5625.58T:schwaemm128128v2
31.5331.5631.60romulusn
32.3732.4132.43T:isapa128v20
33.7133.7333.75T:giftcofb128v1
33.9233.9734.01T:isapa128av20
43.2143.2643.33romulusm
55.4555.4655.49T:tinyjambu128v2
56.6356.7556.90T:isapk128av20
63.4063.4063.42T:tinyjambu192v2
67.3967.4067.41T:tinyjambu256v2
73.3473.4673.57T:isapk128v20
88.3888.4488.69romulust
121.18?133.56?145.69?T:isapxv20
133.96133.99134.07T:elephant200v2
297.09?310.45?509.80?aes256gcmv1
5087.945088.305088.60T:elephant176v2
6119.556119.826120.20T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.480.500.51T:aes128gcmv1
0.590.610.65T:aes256gcmv1
7.377.427.43ascon128av12
10.8910.9210.94ascon128v12
10.9210.9410.97ascon80pqv12
11.5611.6011.62T:xoodyakround3
13.8113.8613.88ascon128abi32v12
17.5217.5417.60T:schwaemm256128v2
20.4620.7120.75ascon128bi32v12
23.0623.1123.53T:schwaemm192192v2
23.8524.1224.72T:schwaemm256256v2
24.3524.3724.38T:grain128aeadv2
25.4825.5125.55T:schwaemm128128v2
31.4131.5431.64romulusn
32.3432.3832.43T:isapa128v20
33.8033.8233.84T:giftcofb128v1
33.9333.9734.01T:isapa128av20
43.3243.3543.44romulusm
55.5755.5755.58T:tinyjambu128v2
56.6456.7556.82T:isapk128av20
63.1863.4363.43T:tinyjambu192v2
67.3867.3867.39T:tinyjambu256v2
73.2573.4573.57T:isapk128v20
88.3488.4088.68romulust
121.16?133.60?145.81?T:isapxv20
133.97134.01134.08T:elephant200v2
296.64?310.01?509.18?aes256gcmv1
5087.785088.055088.40T:elephant176v2
6120.006120.226120.44T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.480.500.51T:aes128gcmv1
0.600.610.63T:aes256gcmv1
7.367.397.41ascon128av12
10.9010.9210.95ascon128v12
10.9210.9510.96ascon80pqv12
11.6011.6511.69T:xoodyakround3
13.8313.8613.89ascon128abi32v12
17.5217.5617.60T:schwaemm256128v2
20.4820.7320.77ascon128bi32v12
21.5621.6121.65T:isapa128v20
23.0423.0723.57T:schwaemm192192v2
23.8524.1424.72T:schwaemm256256v2
24.3524.3724.39T:grain128aeadv2
25.4925.5125.56T:schwaemm128128v2
27.3227.3827.40T:isapa128av20
31.4231.5031.61romulusn
33.7833.8233.83T:giftcofb128v1
43.3143.3543.38romulusm
44.9645.0045.27romulust
45.1945.2745.34T:isapk128av20
55.5755.5855.58T:tinyjambu128v2
56.1556.2756.43T:isapk128v20
63.1963.4363.44T:tinyjambu192v2
67.3867.3867.39T:tinyjambu256v2
85.16?97.54?109.78?T:isapxv20
133.97133.99134.06T:elephant200v2
289.81?303.01?502.36?aes256gcmv1
5087.845088.095088.48T:elephant176v2
6120.126120.496120.80T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.33?0.36?0.40?T:aes256gcmv1
0.33?0.36?0.39?T:aes128gcmv1
7.357.387.42ascon128av12
7.937.978.00T:xoodyakround3
10.9110.9410.97ascon128v12
10.9010.9510.97ascon80pqv12
13.8013.8313.85ascon128abi32v12
17.3817.4417.46T:schwaemm256128v2
20.3720.5320.93ascon128bi32v12
21.5721.6421.72T:isapa128v20
22.8622.9223.85T:schwaemm192192v2
23.6123.6823.75romulusn
23.5723.7323.76romulusm
23.7424.0124.61T:schwaemm256256v2
24.1924.2024.21T:grain128aeadv2
25.2725.2925.36T:schwaemm128128v2
27.3127.3327.37T:isapa128av20
33.8733.9233.96T:giftcofb128v1
43.1343.1443.15T:tinyjambu128v2
43.3043.3043.31T:tinyjambu192v2
44.8844.9345.12romulust
45.1445.2745.33T:isapk128av20
45.5045.5145.51T:tinyjambu256v2
56.0956.3456.45T:isapk128v20
89.0289.0589.08T:elephant200v2
72.83?97.55?122.03?T:isapxv20
289.13?303.23?503.73?aes256gcmv1
3363.683363.993364.18T:elephant176v2
4078.564079.214080.11T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.30?0.36?0.40?T:aes256gcmv1
0.34?0.37?0.39?T:aes128gcmv1
7.307.337.39ascon128av12
7.957.978.01T:xoodyakround3
10.8610.8910.91ascon128v12
10.9310.9610.98ascon80pqv12
13.8013.8213.84ascon128abi32v12
17.3817.4417.47T:schwaemm256128v2
20.3320.3820.74ascon128bi32v12
21.5921.6421.70T:isapa128v20
22.8922.9523.84T:schwaemm192192v2
23.5323.6223.71romulusn
23.5423.7223.75romulusm
23.7423.9924.61T:schwaemm256256v2
24.0224.0424.05T:grain128aeadv2
25.2425.2725.30T:schwaemm128128v2
27.2827.3027.38T:isapa128av20
33.8633.9033.93T:giftcofb128v1
43.1343.1443.16T:tinyjambu128v2
43.3643.3743.37T:tinyjambu192v2
44.8544.9645.19romulust
45.1245.2645.33T:isapk128av20
45.5045.5145.51T:tinyjambu256v2
56.0356.2456.51T:isapk128v20
88.9989.0489.10T:elephant200v2
72.90?97.56?122.22?T:isapxv20
289.01?303.03?503.15?aes256gcmv1
3363.903364.103364.35T:elephant176v2
4078.754079.174079.76T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.33?0.34?0.37?T:aes256gcmv1
0.33?0.36?0.40?T:aes128gcmv1
7.327.347.40ascon128av12
7.947.998.02T:xoodyakround3
10.8510.8910.92ascon128v12
10.9310.9510.98ascon80pqv12
13.7913.8113.83ascon128abi32v12
17.3817.4317.49T:schwaemm256128v2
20.3520.4320.91ascon128bi32v12
21.5821.6521.74T:isapa128v20
22.8522.9423.77T:schwaemm192192v2
23.5623.6323.68romulusn
23.5123.7023.76romulusm
23.7024.0024.61T:schwaemm256256v2
24.0124.0324.04T:grain128aeadv2
25.2525.3025.35T:schwaemm128128v2
27.2827.3127.36T:isapa128av20
33.8533.9133.94T:giftcofb128v1
43.1343.1443.15T:tinyjambu128v2
43.3643.3743.37T:tinyjambu192v2
44.9044.9245.30romulust
45.1945.2645.33T:isapk128av20
45.5145.5145.51T:tinyjambu256v2
56.0756.2156.39T:isapk128v20
89.0389.0789.09T:elephant200v2
72.79?97.45?122.21?T:isapxv20
288.88?302.94?503.25?aes256gcmv1
3363.713364.093364.43T:elephant176v2
4078.764079.224079.67T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.751.761.77T:aes128gcmv1
1.891.901.90T:aes256gcmv1
7.657.677.70ascon128av12
11.1011.1311.16ascon128v12
11.1311.1411.16ascon80pqv12
11.8611.9011.94T:xoodyakround3
14.2014.2614.29ascon128abi32v12
18.0618.0818.11T:schwaemm256128v2
21.0121.0421.05ascon128bi32v12
23.5523.6424.00T:schwaemm192192v2
24.6224.6324.63T:grain128aeadv2
24.5624.7525.32T:schwaemm256256v2
25.8725.9025.94T:schwaemm128128v2
31.8631.8931.94romulusn
34.1534.1834.21T:giftcofb128v1
36.1236.1636.20T:isapa128av20
43.5943.6343.66romulusm
47.4647.4947.51T:isapa128v20
55.8855.8955.91T:tinyjambu128v2
63.8563.8563.85T:tinyjambu192v2
64.2764.3164.38T:isapk128av20
67.9067.9067.91T:tinyjambu256v2
89.7689.8489.97romulust
128.14128.23128.34T:isapk128v20
136.82136.84136.88T:elephant200v2
215.96216.03231.28T:isapxv20
312.30?312.52?499.36?aes256gcmv1
5127.105127.385127.77T:elephant176v2
6188.476188.736188.98T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.721.731.74T:aes128gcmv1
1.861.861.87T:aes256gcmv1
7.587.617.63ascon128av12
11.0911.1011.12ascon128v12
11.1111.1211.13ascon80pqv12
11.7711.8011.83T:xoodyakround3
14.1414.1814.19ascon128abi32v12
18.0518.0818.10T:schwaemm256128v2
20.7921.0121.04ascon128bi32v12
23.5323.6324.00T:schwaemm192192v2
24.5424.7725.30T:schwaemm256256v2
24.7524.7824.79T:grain128aeadv2
25.8425.8625.90T:schwaemm128128v2
31.7231.7431.82romulusn
34.2734.3034.33T:giftcofb128v1
36.1536.1836.19T:isapa128av20
43.7643.8143.85romulusm
47.4547.5047.55T:isapa128v20
55.9956.0056.01T:tinyjambu128v2
63.6663.8863.89T:tinyjambu192v2
64.2364.2764.34T:isapk128av20
67.8767.8767.88T:tinyjambu256v2
89.7389.7890.05romulust
128.09128.16128.27T:isapk128v20
136.82136.83136.89T:elephant200v2
216.05216.14231.38T:isapxv20
312.09?312.31?499.04?aes256gcmv1
5127.135127.215127.76T:elephant176v2
6188.616189.076189.49T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.721.731.74T:aes128gcmv1
1.851.851.86T:aes256gcmv1
7.577.587.60ascon128av12
11.0811.1011.11ascon128v12
11.1111.1311.14ascon80pqv12
11.7611.7911.81T:xoodyakround3
14.1114.1614.19ascon128abi32v12
18.0818.1018.16T:schwaemm256128v2
20.7921.0121.20ascon128bi32v12
23.5523.6123.93T:schwaemm192192v2
24.5324.7825.32T:schwaemm256256v2
24.7624.7924.81T:grain128aeadv2
25.8525.8825.91T:schwaemm128128v2
28.5828.6028.62T:isapa128av20
29.2829.3129.33T:isapa128v20
31.7131.7531.81romulusn
34.3034.3234.35T:giftcofb128v1
43.7143.7643.83romulusm
46.2546.3046.55romulust
49.5849.6149.67T:isapk128av20
55.9956.0056.01T:tinyjambu128v2
63.8963.8963.89T:tinyjambu192v2
67.8767.8867.88T:tinyjambu256v2
84.3284.4284.51T:isapk128v20
136.80136.84136.90T:elephant200v2
139.73139.76155.02T:isapxv20
304.63?304.91?491.92?aes256gcmv1
5126.935127.205127.32T:elephant176v2
6188.816189.086189.34T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
12.1212.2712.54ascon128av12
15.0915.2615.34ascon128v12
15.1615.4015.90ascon80pqv12
17.2017.3417.48T:xoodyakround3
21.3521.5221.89ascon128abi32v12
27.6727.7528.24ascon128bi32v12
29.3429.4829.54T:schwaemm256128v2
30.2830.5731.00T:aes128gcmv1
31.1331.2331.41T:aes256gcmv1
33.3233.4133.63T:schwaemm128128v2
34.1934.2134.29T:grain128aeadv2
38.2038.2638.45romulusn
37.9338.2738.57T:schwaemm192192v2
39.0839.5339.77T:schwaemm256256v2
44.4744.6044.70T:giftcofb128v1
51.3551.5251.78romulusm
65.5665.6265.70T:tinyjambu128v2
73.9074.1974.20T:tinyjambu192v2
79.1279.1679.33T:tinyjambu256v2
85.9886.3286.95T:isapa128av20
121.21121.34121.92romulust
193.46193.72194.02T:elephant200v2
223.58224.80225.48T:isapk128av20
352.59?352.88?562.29?aes256gcmv1
393.31393.96394.21T:isapa128v20
1366.241367.181368.84T:isapk128v20
2089.73?2090.53?2457.91?T:isapxv20
6384.886385.456387.16T:elephant176v2
8290.048291.188293.43T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
12.0712.2312.44ascon128av12
15.2115.2915.59ascon80pqv12
15.1315.4315.61ascon128v12
17.1617.3117.98T:xoodyakround3
21.2221.4121.85ascon128abi32v12
27.6727.8328.40ascon128bi32v12
29.2329.4329.73T:schwaemm256128v2
30.0930.6630.81T:aes128gcmv1
30.7731.0531.41T:aes256gcmv1
33.3433.4433.63T:schwaemm128128v2
34.3434.3834.48T:grain128aeadv2
38.2038.2838.46romulusn
38.1238.3138.80T:schwaemm192192v2
39.0839.3439.70T:schwaemm256256v2
45.5845.8245.98T:giftcofb128v1
52.6652.7652.84romulusm
65.7465.7865.80T:tinyjambu128v2
74.3074.3474.36T:tinyjambu192v2
79.1679.2279.27T:tinyjambu256v2
85.5586.0786.45T:isapa128av20
121.37121.54121.71romulust
193.25193.34193.53T:elephant200v2
224.78225.26225.94T:isapk128av20
352.62?353.02?562.40?aes256gcmv1
393.99394.33395.02T:isapa128v20
1366.551367.401368.46T:isapk128v20
2089.91?2091.09?2460.16?T:isapxv20
6384.696385.056386.54T:elephant176v2
8290.258291.578293.09T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
11.9812.1612.35ascon128av12
15.0215.1415.24ascon80pqv12
15.0215.1615.26ascon128v12
17.1617.2317.52T:xoodyakround3
21.1721.2421.66ascon128abi32v12
27.6727.8728.12ascon128bi32v12
29.2529.3429.55T:schwaemm256128v2
29.8830.1430.27T:aes128gcmv1
30.6230.9031.23T:aes256gcmv1
33.3033.4833.60T:schwaemm128128v2
34.3634.3834.45T:grain128aeadv2
37.8338.0538.15T:schwaemm192192v2
38.0738.2238.38romulusn
39.0739.2739.43T:schwaemm256256v2
45.6245.8445.95T:giftcofb128v1
52.6052.6652.82romulusm
57.0757.3057.57T:isapa128av20
65.7065.7365.75T:tinyjambu128v2
74.3074.3174.33T:tinyjambu192v2
75.9076.0976.34romulust
79.1679.1779.19T:tinyjambu256v2
138.98139.42140.28T:isapk128av20
193.24193.40193.53T:elephant200v2
205.42205.55205.88T:isapa128v20
345.61?346.32?554.90?aes256gcmv1
715.30716.44716.66T:isapk128v20
1092.50?1093.72?1462.02?T:isapxv20
6385.116385.246386.12T:elephant176v2
8290.228292.038293.69T:elephant160v2