VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Coffee Lake (906ea); 2018 Intel Xeon E-2124; 4 x 3300MHz; r24000, supercop-20251222

[Page version: 20260113 16:30:49]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.880.920.96T:aes256gcmv1
1.181.201.20T:aes128gcmv1
7.537.577.62ascon128av12
10.9010.9310.98ascon128v12
10.9210.9510.97ascon80pqv12
13.7213.8814.09ascon128abi32v12
15.5015.5815.63T:xoodyakround3
17.5717.6317.67T:schwaemm256128v2
20.5820.6121.11ascon128bi32v12
23.1223.2023.28T:schwaemm192192v2
24.2024.2124.23T:grain128aeadv2
23.9624.2224.81T:schwaemm256256v2
25.7225.7625.83T:schwaemm128128v2
33.4833.5433.58T:giftcofb128v1
37.4537.5037.53romulusn
40.4340.5240.64T:isapa128av20
43.0643.1443.20T:isapa128v20
60.7360.8260.96romulusm
67.7967.8567.87T:tinyjambu128v2
67.9068.0568.27T:isapk128av20
83.5083.5083.50T:tinyjambu192v2
89.2989.3089.31T:tinyjambu256v2
90.5190.7291.01T:isapk128v20
131.89132.10132.23romulust
144.94?169.41?194.06?T:isapxv20
179.16179.25179.37T:elephant200v2
303.63?317.71?517.53?aes256gcmv1
6812.766813.016813.19T:elephant176v2
8160.598161.138161.62T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.850.900.94T:aes256gcmv1
1.041.071.07T:aes128gcmv1
7.377.407.43ascon128av12
10.9010.9310.95ascon128v12
10.9010.9310.95ascon80pqv12
13.8313.9213.96ascon128abi32v12
15.2715.3415.42T:xoodyakround3
17.6017.6717.69T:schwaemm256128v2
20.8220.8420.85ascon128bi32v12
23.1523.2123.29T:schwaemm192192v2
23.9724.2024.83T:schwaemm256256v2
24.6224.6824.72T:grain128aeadv2
25.6425.6725.75T:schwaemm128128v2
33.6633.7033.75T:giftcofb128v1
37.4437.4937.55romulusn
40.4940.6040.67T:isapa128av20
43.0343.1143.18T:isapa128v20
60.7260.7960.86romulusm
68.0068.0168.02T:tinyjambu128v2
67.9468.0968.20T:isapk128av20
83.5083.5083.50T:tinyjambu192v2
89.2589.2689.27T:tinyjambu256v2
90.3990.7090.88T:isapk128v20
131.92132.13132.25romulust
144.81?169.55?194.11?T:isapxv20
179.21179.28179.40T:elephant200v2
302.70?316.69?517.32?aes256gcmv1
6812.776813.296813.67T:elephant176v2
8160.488161.128161.78T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.840.880.92T:aes256gcmv1
1.051.061.06T:aes128gcmv1
7.387.397.42ascon128av12
10.9010.9210.97ascon128v12
10.9110.9310.96ascon80pqv12
13.8413.9113.96ascon128abi32v12
15.2215.3115.45T:xoodyakround3
17.6017.6417.67T:schwaemm256128v2
20.8320.8520.87ascon128bi32v12
21.5221.5521.61T:isapa128v20
23.1323.2023.26T:schwaemm192192v2
23.9524.2324.82T:schwaemm256256v2
24.6824.6924.71T:grain128aeadv2
25.6525.6725.71T:schwaemm128128v2
27.3027.3627.42T:isapa128av20
33.6633.7033.74T:giftcofb128v1
37.4837.5037.58romulusn
45.0845.1745.27T:isapk128av20
45.1345.1845.28romulust
56.1256.3556.50T:isapk128v20
60.7060.8060.88romulusm
68.0068.0168.02T:tinyjambu128v2
83.5083.5083.50T:tinyjambu192v2
89.2589.2689.27T:tinyjambu256v2
72.82?97.55?121.95?T:isapxv20
179.19179.27179.39T:elephant200v2
288.76?302.69?502.93?aes256gcmv1
6812.346813.276813.71T:elephant176v2
8160.528161.138161.97T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.620.640.65T:aes256gcmv1
0.790.810.81T:aes128gcmv1
7.477.497.50ascon128av12
10.9210.9410.97ascon80pqv12
10.9210.9510.96ascon128v12
11.6811.7411.77T:xoodyakround3
13.9413.9714.00ascon128abi32v12
17.4917.5517.57T:schwaemm256128v2
20.4320.7020.73ascon128bi32v12
23.0323.0823.53T:schwaemm192192v2
23.8524.1024.74T:schwaemm256256v2
24.1924.2024.21T:grain128aeadv2
25.5125.5625.58T:schwaemm128128v2
30.3830.4230.46romulusn
32.3732.4132.43T:isapa128v20
33.7133.7333.75T:giftcofb128v1
33.9233.9734.01T:isapa128av20
42.0442.0842.15romulusm
55.4555.4655.49T:tinyjambu128v2
56.6356.7556.90T:isapk128av20
63.4063.4063.42T:tinyjambu192v2
67.3967.4067.41T:tinyjambu256v2
73.3473.4673.57T:isapk128v20
88.6188.6688.77romulust
121.18?133.56?145.69?T:isapxv20
133.96133.99134.07T:elephant200v2
297.09?310.45?509.80?aes256gcmv1
5087.945088.305088.60T:elephant176v2
6119.556119.826120.20T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.590.610.65T:aes256gcmv1
0.710.740.75T:aes128gcmv1
7.377.427.43ascon128av12
10.8910.9210.94ascon128v12
10.9210.9410.97ascon80pqv12
11.5611.6011.62T:xoodyakround3
13.8313.8613.91ascon128abi32v12
17.5217.5417.60T:schwaemm256128v2
20.8420.8720.95ascon128bi32v12
23.0623.1123.53T:schwaemm192192v2
23.8524.1224.72T:schwaemm256256v2
24.3524.3724.38T:grain128aeadv2
25.4825.5125.55T:schwaemm128128v2
30.3730.4030.46romulusn
32.3432.3832.43T:isapa128v20
33.8033.8233.84T:giftcofb128v1
33.9333.9734.01T:isapa128av20
42.0442.0842.11romulusm
55.5755.5755.58T:tinyjambu128v2
56.6456.7556.82T:isapk128av20
63.1863.4363.43T:tinyjambu192v2
67.3867.3867.39T:tinyjambu256v2
73.2573.4573.57T:isapk128v20
88.4988.6188.65romulust
121.16?133.60?145.81?T:isapxv20
133.97134.01134.08T:elephant200v2
296.64?310.01?509.18?aes256gcmv1
5087.785088.055088.40T:elephant176v2
6120.006120.226120.44T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.600.610.63T:aes256gcmv1
0.730.740.74T:aes128gcmv1
7.367.397.41ascon128av12
10.9010.9210.95ascon128v12
10.9210.9510.96ascon80pqv12
11.6011.6511.69T:xoodyakround3
13.8213.8613.90ascon128abi32v12
17.5217.5617.60T:schwaemm256128v2
20.6120.8520.90ascon128bi32v12
21.5621.6121.65T:isapa128v20
23.0423.0723.57T:schwaemm192192v2
23.8524.1424.72T:schwaemm256256v2
24.3524.3724.39T:grain128aeadv2
25.4925.5125.56T:schwaemm128128v2
27.3227.3827.40T:isapa128av20
30.3830.4030.44romulusn
33.7833.8233.83T:giftcofb128v1
42.0442.0742.12romulusm
45.0445.1745.23romulust
45.1945.2745.34T:isapk128av20
55.5755.5855.58T:tinyjambu128v2
56.1556.2756.43T:isapk128v20
63.1963.4363.44T:tinyjambu192v2
67.3867.3867.39T:tinyjambu256v2
85.16?97.54?109.78?T:isapxv20
133.97133.99134.06T:elephant200v2
289.81?303.01?502.36?aes256gcmv1
5087.845088.095088.48T:elephant176v2
6120.126120.496120.80T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.33?0.36?0.40?T:aes256gcmv1
0.410.420.43T:aes128gcmv1
7.357.387.42ascon128av12
7.937.978.00T:xoodyakround3
10.9110.9410.97ascon128v12
10.9010.9510.97ascon80pqv12
13.7913.8213.84ascon128abi32v12
17.3817.4417.46T:schwaemm256128v2
20.3820.6420.93ascon128bi32v12
21.5721.6421.72T:isapa128v20
22.8622.9223.85T:schwaemm192192v2
23.2823.3123.38romulusn
23.3323.3823.41romulusm
23.7424.0124.61T:schwaemm256256v2
24.1924.2024.21T:grain128aeadv2
25.2725.2925.36T:schwaemm128128v2
27.3127.3327.37T:isapa128av20
33.8733.9233.96T:giftcofb128v1
43.1343.1443.15T:tinyjambu128v2
43.3043.3043.31T:tinyjambu192v2
44.9345.0045.04romulust
45.1445.2745.33T:isapk128av20
45.5045.5145.51T:tinyjambu256v2
56.0956.3456.45T:isapk128v20
89.0289.0589.08T:elephant200v2
72.83?97.55?122.03?T:isapxv20
289.13?303.23?503.73?aes256gcmv1
3363.683363.993364.18T:elephant176v2
4078.564079.214080.11T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.30?0.36?0.40?T:aes256gcmv1
0.400.420.43T:aes128gcmv1
7.307.337.39ascon128av12
7.957.978.01T:xoodyakround3
10.8610.8910.91ascon128v12
10.9310.9610.98ascon80pqv12
13.7913.8113.83ascon128abi32v12
17.3817.4417.47T:schwaemm256128v2
20.8320.8720.90ascon128bi32v12
21.5921.6421.70T:isapa128v20
22.8922.9523.84T:schwaemm192192v2
23.2723.3023.35romulusn
23.3223.3623.39romulusm
23.7423.9924.61T:schwaemm256256v2
24.0224.0424.05T:grain128aeadv2
25.2425.2725.30T:schwaemm128128v2
27.2827.3027.38T:isapa128av20
33.8633.9033.93T:giftcofb128v1
43.1343.1443.16T:tinyjambu128v2
43.3643.3743.37T:tinyjambu192v2
44.9444.9945.06romulust
45.1245.2645.33T:isapk128av20
45.5045.5145.51T:tinyjambu256v2
56.0356.2456.51T:isapk128v20
88.9989.0489.10T:elephant200v2
72.90?97.56?122.22?T:isapxv20
289.01?303.03?503.15?aes256gcmv1
3363.903364.103364.35T:elephant176v2
4078.754079.174079.76T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.33?0.34?0.37?T:aes256gcmv1
0.410.420.42T:aes128gcmv1
7.327.347.40ascon128av12
7.947.998.02T:xoodyakround3
10.8510.8910.92ascon128v12
10.9310.9510.98ascon80pqv12
13.7913.8113.83ascon128abi32v12
17.3817.4317.49T:schwaemm256128v2
20.8220.8520.88ascon128bi32v12
21.5821.6521.74T:isapa128v20
22.8522.9423.77T:schwaemm192192v2
23.2823.3023.32romulusn
23.3223.3423.40romulusm
23.7024.0024.61T:schwaemm256256v2
24.0124.0324.04T:grain128aeadv2
25.2525.3025.35T:schwaemm128128v2
27.2827.3127.36T:isapa128av20
33.8533.9133.94T:giftcofb128v1
43.1343.1443.15T:tinyjambu128v2
43.3643.3743.37T:tinyjambu192v2
44.9545.0245.08romulust
45.1945.2645.33T:isapk128av20
45.5145.5145.51T:tinyjambu256v2
56.0756.2156.39T:isapk128v20
89.0389.0789.09T:elephant200v2
72.79?97.45?122.21?T:isapxv20
288.88?302.94?503.25?aes256gcmv1
3363.713364.093364.43T:elephant176v2
4078.764079.224079.67T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.960.970.98T:aes128gcmv1
1.891.901.90T:aes256gcmv1
7.657.677.70ascon128av12
11.1011.1311.16ascon128v12
11.1311.1411.16ascon80pqv12
11.8611.9011.94T:xoodyakround3
14.2614.2714.28ascon128abi32v12
18.0618.0818.11T:schwaemm256128v2
20.7820.8721.03ascon128bi32v12
23.5523.6424.00T:schwaemm192192v2
24.6224.6324.63T:grain128aeadv2
24.5624.7525.32T:schwaemm256256v2
25.8725.9025.94T:schwaemm128128v2
30.8030.8330.85romulusn
34.1534.1834.21T:giftcofb128v1
36.1236.1636.20T:isapa128av20
42.4942.5242.57romulusm
47.4647.4947.51T:isapa128v20
55.8855.8955.91T:tinyjambu128v2
63.8563.8563.85T:tinyjambu192v2
64.2764.3164.38T:isapk128av20
67.9067.9067.91T:tinyjambu256v2
89.9690.0490.07romulust
128.14128.23128.34T:isapk128v20
136.82136.84136.88T:elephant200v2
215.96216.03231.28T:isapxv20
312.30?312.52?499.36?aes256gcmv1
5127.105127.385127.77T:elephant176v2
6188.476188.736188.98T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.890.890.90T:aes128gcmv1
1.861.861.87T:aes256gcmv1
7.587.617.63ascon128av12
11.0911.1011.12ascon128v12
11.1111.1211.13ascon80pqv12
11.7711.8011.83T:xoodyakround3
14.1314.1714.19ascon128abi32v12
18.0518.0818.10T:schwaemm256128v2
21.1621.1821.19ascon128bi32v12
23.5323.6324.00T:schwaemm192192v2
24.5424.7725.30T:schwaemm256256v2
24.7524.7824.79T:grain128aeadv2
25.8425.8625.90T:schwaemm128128v2
30.8130.8330.85romulusn
34.2734.3034.33T:giftcofb128v1
36.1536.1836.19T:isapa128av20
42.5642.5842.62romulusm
47.4547.5047.55T:isapa128v20
55.9956.0056.01T:tinyjambu128v2
63.6663.8863.89T:tinyjambu192v2
64.2364.2764.34T:isapk128av20
67.8767.8767.88T:tinyjambu256v2
89.9690.0290.16romulust
128.09128.16128.27T:isapk128v20
136.82136.83136.89T:elephant200v2
216.05216.14231.38T:isapxv20
312.09?312.31?499.04?aes256gcmv1
5127.135127.215127.76T:elephant176v2
6188.616189.076189.49T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.880.880.89T:aes128gcmv1
1.851.851.86T:aes256gcmv1
7.577.587.60ascon128av12
11.0811.1011.11ascon128v12
11.1111.1311.14ascon80pqv12
11.7611.7911.81T:xoodyakround3
14.1214.1614.19ascon128abi32v12
18.0818.1018.16T:schwaemm256128v2
20.9421.1621.18ascon128bi32v12
23.5523.6123.93T:schwaemm192192v2
24.5324.7825.32T:schwaemm256256v2
24.7624.7924.81T:grain128aeadv2
25.8525.8825.91T:schwaemm128128v2
28.5828.6028.62T:isapa128av20
29.2829.3129.33T:isapa128v20
30.8230.8430.85romulusn
34.3034.3234.35T:giftcofb128v1
42.5742.5942.64romulusm
46.3846.4446.50romulust
49.5849.6149.67T:isapk128av20
55.9956.0056.01T:tinyjambu128v2
63.8963.8963.89T:tinyjambu192v2
67.8767.8867.88T:tinyjambu256v2
84.3284.4284.51T:isapk128v20
136.80136.84136.90T:elephant200v2
139.73139.76155.02T:isapxv20
304.63?304.91?491.92?aes256gcmv1
5126.935127.205127.32T:elephant176v2
6188.816189.086189.34T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
5.955.976.15T:aes128gcmv1
12.1212.2712.54ascon128av12
15.0915.2615.34ascon128v12
15.1615.4015.90ascon80pqv12
17.2017.3417.48T:xoodyakround3
21.2221.3321.91ascon128abi32v12
27.5927.7728.27ascon128bi32v12
29.3429.4829.54T:schwaemm256128v2
31.1331.2331.41T:aes256gcmv1
33.3233.4133.63T:schwaemm128128v2
34.1934.2134.29T:grain128aeadv2
37.9338.2738.57T:schwaemm192192v2
39.0839.5339.77T:schwaemm256256v2
40.3840.5340.77romulusn
44.4744.6044.70T:giftcofb128v1
52.6952.8353.23romulusm
65.5665.6265.70T:tinyjambu128v2
73.9074.1974.20T:tinyjambu192v2
79.1279.1679.33T:tinyjambu256v2
85.9886.3286.95T:isapa128av20
121.42121.59121.95romulust
193.46193.72194.02T:elephant200v2
223.58224.80225.48T:isapk128av20
352.59?352.88?562.29?aes256gcmv1
393.31393.96394.21T:isapa128v20
1366.241367.181368.84T:isapk128v20
2089.73?2090.53?2457.91?T:isapxv20
6384.886385.456387.16T:elephant176v2
8290.048291.188293.43T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
5.986.016.06T:aes128gcmv1
12.0712.2312.44ascon128av12
15.2115.2915.59ascon80pqv12
15.1315.4315.61ascon128v12
17.1617.3117.98T:xoodyakround3
21.1921.4221.91ascon128abi32v12
28.0228.0928.52ascon128bi32v12
29.2329.4329.73T:schwaemm256128v2
30.7731.0531.41T:aes256gcmv1
33.3433.4433.63T:schwaemm128128v2
34.3434.3834.48T:grain128aeadv2
38.1238.3138.80T:schwaemm192192v2
39.0839.3439.70T:schwaemm256256v2
40.5540.8041.07romulusn
45.5845.8245.98T:giftcofb128v1
54.4954.7355.12romulusm
65.7465.7865.80T:tinyjambu128v2
74.3074.3474.36T:tinyjambu192v2
79.1679.2279.27T:tinyjambu256v2
85.5586.0786.45T:isapa128av20
121.18121.66121.78romulust
193.25193.34193.53T:elephant200v2
224.78225.26225.94T:isapk128av20
352.62?353.02?562.40?aes256gcmv1
393.99394.33395.02T:isapa128v20
1366.551367.401368.46T:isapk128v20
2089.91?2091.09?2460.16?T:isapxv20
6384.696385.056386.54T:elephant176v2
8290.258291.578293.09T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
5.986.026.05T:aes128gcmv1
11.9812.1612.35ascon128av12
15.0215.1415.24ascon80pqv12
15.0215.1615.26ascon128v12
17.1617.2317.52T:xoodyakround3
21.1621.3021.74ascon128abi32v12
28.0228.0928.43ascon128bi32v12
29.2529.3429.55T:schwaemm256128v2
30.6230.9031.23T:aes256gcmv1
33.3033.4833.60T:schwaemm128128v2
34.3634.3834.45T:grain128aeadv2
37.8338.0538.15T:schwaemm192192v2
39.0739.2739.43T:schwaemm256256v2
40.5840.7041.25romulusn
45.6245.8445.95T:giftcofb128v1
54.5054.7054.98romulusm
57.0757.3057.57T:isapa128av20
65.7065.7365.75T:tinyjambu128v2
74.3074.3174.33T:tinyjambu192v2
75.7276.0376.27romulust
79.1679.1779.19T:tinyjambu256v2
138.98139.42140.28T:isapk128av20
193.24193.40193.53T:elephant200v2
205.42205.55205.88T:isapa128v20
345.61?346.32?554.90?aes256gcmv1
715.30716.44716.66T:isapk128v20
1092.50?1093.72?1462.02?T:isapxv20
6385.116385.246386.12T:elephant176v2
8290.228292.038293.69T:elephant160v2