VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Zen 2 (830f10); 2019 AMD EPYC 7742; 64 x 2250MHz; rome0, supercop-20250307

[Page version: 20250328 20:58:22]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.920.950.99T:aes256gcmv1
1.521.531.54T:aes128gcmv1
1.661.671.67aes256gcmv1
6.416.446.48ascon128av12
9.379.409.40ascon128v12
9.409.429.42ascon80pqv12
11.2011.2511.31ascon128abi32v12
16.9617.0517.14ascon128bi32v12
17.8917.9118.00T:xoodyakround3
19.4519.6019.74T:schwaemm256128v2
23.3523.3823.55T:schwaemm256256v2
25.6125.7225.85T:schwaemm192192v2
26.9627.0327.46T:grain128aeadv2
27.5127.6827.85T:schwaemm128128v2
35.5635.5735.62romulusn
36.3636.3836.45T:isapa128av20
36.5136.5636.68T:isapa128v20
40.4840.5040.54T:giftcofb128v1
57.3657.4457.54romulusm
61.6361.6361.69T:tinyjambu128v2
64.9865.0765.22T:isapk128av20
68.9168.9668.96T:tinyjambu192v2
75.9775.9776.04T:tinyjambu256v2
85.5485.6585.75T:isapk128v20
112.29112.30112.30romulust
148.48149.30150.73T:isapxv20
228.03229.71246.04T:elephant200v2
6484.266494.506540.14T:elephant176v2
7158.767161.617163.77T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.900.910.97T:aes256gcmv1
1.611.621.64T:aes128gcmv1
1.801.811.83aes256gcmv1
6.256.286.32ascon128av12
9.499.519.53ascon80pqv12
9.559.579.57ascon128v12
11.2111.2511.26ascon128abi32v12
16.7916.9316.98ascon128bi32v12
17.7417.7717.86T:xoodyakround3
19.5119.5919.67T:schwaemm256128v2
23.3423.3923.51T:schwaemm256256v2
25.6525.7625.82T:schwaemm192192v2
27.5227.5927.78T:schwaemm128128v2
27.4227.6127.63T:grain128aeadv2
35.4035.4135.43romulusn
36.2936.3436.54T:isapa128v20
36.4036.4436.50T:isapa128av20
40.5040.5440.59T:giftcofb128v1
57.6457.7058.14romulusm
61.4561.5261.58T:tinyjambu128v2
64.9965.1165.17T:isapk128av20
68.6768.6868.74T:tinyjambu192v2
75.9976.0476.12T:tinyjambu256v2
84.8184.9084.97T:isapk128v20
112.28112.34112.37romulust
149.09149.35151.56T:isapxv20
228.33229.85245.87T:elephant200v2
6478.136492.356540.31T:elephant176v2
7158.717160.337162.77T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.890.920.94T:aes256gcmv1
1.611.611.62T:aes128gcmv1
1.801.811.82aes256gcmv1
6.266.306.33ascon128av12
9.509.529.53ascon80pqv12
9.559.569.58ascon128v12
11.2211.2511.25ascon128abi32v12
16.8116.9316.96ascon128bi32v12
17.7717.8417.91T:xoodyakround3
18.0318.0918.13T:isapa128v20
19.4419.5519.73T:schwaemm256128v2
23.3323.4223.52T:schwaemm256256v2
24.1124.1424.20T:isapa128av20
25.6725.7525.80T:schwaemm192192v2
27.4427.5327.64T:grain128aeadv2
27.4927.5627.79T:schwaemm128128v2
35.4235.4235.44romulusn
37.4837.5737.59romulust
40.4840.5040.53T:giftcofb128v1
44.2544.4444.70T:isapk128av20
54.6254.6454.67T:isapk128v20
57.5757.6957.98romulusm
61.5261.5861.61T:tinyjambu128v2
68.7068.7268.79T:tinyjambu192v2
76.0176.0476.10T:tinyjambu256v2
86.4687.3189.45T:isapxv20
228.06229.92245.68T:elephant200v2
6478.416490.266532.56T:elephant176v2
7158.117161.217162.93T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.670.690.71T:aes256gcmv1
1.001.011.02T:aes128gcmv1
1.091.091.10aes256gcmv1
6.376.426.44ascon128av12
9.439.469.47ascon80pqv12
9.459.489.48ascon128v12
11.0511.0911.11ascon128abi32v12
13.4813.5113.58T:xoodyakround3
16.8316.9116.93ascon128bi32v12
19.3719.4819.59T:schwaemm256128v2
23.2423.2623.36T:schwaemm256256v2
25.5725.6025.67T:schwaemm192192v2
26.9326.9927.27T:grain128aeadv2
27.2527.4027.44T:isapa128v20
27.5627.6027.78T:schwaemm128128v2
28.7128.7528.77romulusn
30.2830.3130.32T:isapa128av20
39.6439.6939.71romulusm
40.3740.4140.43T:giftcofb128v1
50.5650.6350.65T:tinyjambu128v2
54.3354.3454.34T:tinyjambu192v2
54.7654.8254.95T:isapk128av20
58.0158.0358.05T:tinyjambu256v2
70.1670.1970.23T:isapk128v20
74.8274.8874.92romulust
117.12117.37117.98T:isapxv20
170.18171.28183.09T:elephant200v2
4844.664850.844887.38T:elephant176v2
5367.515369.035369.74T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.650.680.70T:aes256gcmv1
1.051.061.07T:aes128gcmv1
1.161.171.18aes256gcmv1
6.296.326.38ascon128av12
9.509.519.55ascon80pqv12
9.529.539.55ascon128v12
11.0811.1011.11ascon128abi32v12
13.3813.4013.49T:xoodyakround3
16.6816.7816.79ascon128bi32v12
19.4219.4919.58T:schwaemm256128v2
23.2323.2523.40T:schwaemm256256v2
25.5725.6225.65T:schwaemm192192v2
27.2527.2927.48T:isapa128v20
27.3327.4227.46T:grain128aeadv2
27.4527.5527.58T:schwaemm128128v2
28.6528.6628.68romulusn
30.2830.3230.37T:isapa128av20
39.7139.8739.98romulusm
40.3940.4340.46T:giftcofb128v1
50.6050.6150.64T:tinyjambu128v2
54.2154.2254.23T:tinyjambu192v2
54.7654.8154.87T:isapk128av20
58.0658.0958.11T:tinyjambu256v2
69.7269.8069.81T:isapk128v20
74.8774.8974.91romulust
117.53117.56118.03T:isapxv20
170.40171.36182.96T:elephant200v2
4843.834849.644885.40T:elephant176v2
5367.335368.725370.46T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.670.680.69T:aes256gcmv1
1.061.061.06T:aes128gcmv1
1.161.161.17aes256gcmv1
6.296.326.34ascon128av12
9.529.539.55ascon80pqv12
9.549.559.55ascon128v12
11.1011.1111.17ascon128abi32v12
13.4113.4513.49T:xoodyakround3
16.7016.7716.80ascon128bi32v12
18.1118.1218.21T:isapa128v20
19.4119.4819.58T:schwaemm256128v2
23.2323.2523.40T:schwaemm256256v2
24.1724.1924.22T:isapa128av20
25.5725.6225.67T:schwaemm192192v2
27.2627.4027.46T:grain128aeadv2
27.5127.5627.58T:schwaemm128128v2
28.6528.6628.70romulusn
37.4937.5137.53romulust
39.7339.8339.90romulusm
40.4040.4440.45T:giftcofb128v1
44.3844.4844.62T:isapk128av20
50.6250.6350.65T:tinyjambu128v2
54.2154.2354.26T:tinyjambu192v2
54.6254.6554.67T:isapk128v20
58.0458.0858.08T:tinyjambu256v2
86.4186.6686.88T:isapxv20
170.47171.50182.93T:elephant200v2
4845.074850.424887.92T:elephant176v2
5367.645369.105370.40T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.410.430.44T:aes256gcmv1
0.510.520.55aes256gcmv1
0.510.520.54T:aes128gcmv1
6.326.336.36ascon128av12
9.019.079.13T:xoodyakround3
9.489.499.54ascon80pqv12
9.529.529.53ascon128v12
10.9110.9510.96ascon128abi32v12
16.5216.6816.75ascon128bi32v12
18.1818.2418.27T:isapa128v20
19.2119.3019.45T:schwaemm256128v2
21.8721.9021.94romulusn
21.9021.9221.94romulusm
23.0423.0623.23T:schwaemm256256v2
24.1724.1924.25T:isapa128av20
25.4325.5225.59T:schwaemm192192v2
26.8927.1327.20T:grain128aeadv2
27.2427.3527.60T:schwaemm128128v2
37.5737.5837.58romulust
39.6939.7039.72T:tinyjambu192v2
39.7039.7039.73T:tinyjambu128v2
40.0540.1140.15T:tinyjambu256v2
40.2540.3040.35T:giftcofb128v1
44.3744.5844.77T:isapk128av20
54.6354.7254.75T:isapk128v20
85.8386.4986.89T:isapxv20
112.46113.29120.74T:elephant200v2
3193.783202.573223.68T:elephant176v2
3572.053573.713576.12T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.410.430.45T:aes256gcmv1
0.500.520.53T:aes128gcmv1
0.510.520.54aes256gcmv1
6.216.356.49ascon128av12
9.049.079.16T:xoodyakround3
9.489.499.57ascon80pqv12
9.529.539.53ascon128v12
10.9510.9610.98ascon128abi32v12
16.5016.6216.69ascon128bi32v12
18.1918.2318.25T:isapa128v20
19.2119.3219.48T:schwaemm256128v2
21.8521.9021.93romulusn
21.8921.9221.95romulusm
23.0523.0723.20T:schwaemm256256v2
24.1724.2124.26T:isapa128av20
25.4625.5625.61T:schwaemm192192v2
27.1327.2327.29T:grain128aeadv2
27.2727.3327.57T:schwaemm128128v2
37.4937.5337.58romulust
39.6839.6839.73T:tinyjambu128v2
39.6939.7039.71T:tinyjambu192v2
40.1340.1340.13T:tinyjambu256v2
40.2840.3340.36T:giftcofb128v1
44.3244.4744.73T:isapk128av20
54.6454.6954.72T:isapk128v20
85.7486.3186.71T:isapxv20
112.44113.30120.88T:elephant200v2
3193.423203.633223.90T:elephant176v2
3571.373574.123576.24T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.410.420.44T:aes256gcmv1
0.500.510.53T:aes128gcmv1
0.520.520.53aes256gcmv1
6.096.266.43ascon128av12
9.039.089.14T:xoodyakround3
9.529.549.56ascon80pqv12
9.549.579.57ascon128v12
10.9510.9711.12ascon128abi32v12
16.5116.6416.69ascon128bi32v12
18.2418.2618.29T:isapa128v20
19.2319.3719.47T:schwaemm256128v2
21.8421.8921.91romulusn
21.8821.9321.96romulusm
23.1123.1523.19T:schwaemm256256v2
24.1524.2024.25T:isapa128av20
25.4325.5125.59T:schwaemm192192v2
27.1327.2527.29T:grain128aeadv2
27.2827.4327.66T:schwaemm128128v2
37.4737.5237.58romulust
39.6839.6839.70T:tinyjambu128v2
39.7039.7039.72T:tinyjambu192v2
40.0140.0140.02T:tinyjambu256v2
40.3040.3440.37T:giftcofb128v1
44.2844.4844.75T:isapk128av20
54.6654.7054.71T:isapk128v20
85.4985.8586.43T:isapxv20
112.37113.29120.78T:elephant200v2
3194.723202.383228.76T:elephant176v2
3572.253574.683576.26T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.141.141.15T:aes128gcmv1
1.231.231.24T:aes256gcmv1
1.231.241.24aes256gcmv1
6.546.586.60ascon128av12
9.609.619.63ascon128v12
9.619.629.64ascon80pqv12
11.3711.4011.41ascon128abi32v12
13.5913.6013.65T:xoodyakround3
17.1917.2117.23ascon128bi32v12
19.9720.0420.16T:schwaemm256128v2
23.8223.8723.98T:schwaemm256256v2
26.1826.2126.26T:schwaemm192192v2
27.3827.4127.62T:grain128aeadv2
27.8727.9928.04T:schwaemm128128v2
28.9829.0129.04romulusn
33.5233.5333.54T:isapa128av20
39.9639.9739.98romulusm
39.9940.1340.16T:isapa128v20
40.7840.7840.81T:giftcofb128v1
50.9651.0351.05T:tinyjambu128v2
54.7454.7554.76T:tinyjambu192v2
58.4558.4658.48T:tinyjambu256v2
60.9961.0061.02T:isapk128av20
76.0476.0576.06romulust
121.98122.00122.03T:isapk128v20
174.85174.86185.99T:elephant200v2
190.44190.65190.74T:isapxv20
4881.284884.154917.35T:elephant176v2
5427.245429.065430.14T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.191.201.20T:aes128gcmv1
1.221.231.24T:aes256gcmv1
1.301.311.33aes256gcmv1
6.746.746.80ascon128av12
9.669.679.70ascon80pqv12
9.699.699.70ascon128v12
11.4111.4211.46ascon128abi32v12
13.5413.5813.62T:xoodyakround3
17.1117.1417.16ascon128bi32v12
19.9920.0220.14T:schwaemm256128v2
23.8123.8523.97T:schwaemm256256v2
26.1626.2226.26T:schwaemm192192v2
27.6827.7927.83T:grain128aeadv2
27.8727.9828.13T:schwaemm128128v2
28.9428.9728.98romulusn
33.5433.5633.57T:isapa128av20
40.0040.0140.16T:isapa128v20
40.0840.1640.24romulusm
40.7840.7940.82T:giftcofb128v1
51.0051.0151.04T:tinyjambu128v2
54.6154.6254.65T:tinyjambu192v2
58.5258.5458.54T:tinyjambu256v2
61.0261.0361.04T:isapk128av20
76.0376.0676.08romulust
121.66121.67121.69T:isapk128v20
174.81174.87185.83T:elephant200v2
190.37190.71191.50T:isapxv20
4879.854883.884919.51T:elephant176v2
5426.505428.745429.55T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.191.191.19T:aes128gcmv1
1.221.241.25T:aes256gcmv1
1.301.301.30aes256gcmv1
6.736.746.74ascon128av12
9.669.689.69ascon80pqv12
9.709.709.70ascon128v12
11.4111.4111.41ascon128abi32v12
13.5713.6113.65T:xoodyakround3
17.1217.1317.16ascon128bi32v12
19.9720.0520.17T:schwaemm256128v2
23.8523.8724.00T:schwaemm256256v2
24.6224.6224.73T:isapa128v20
25.9725.9926.03T:isapa128av20
26.1826.2026.23T:schwaemm192192v2
27.6727.7227.81T:grain128aeadv2
27.9428.0828.17T:schwaemm128128v2
28.9228.9328.96romulusn
38.6238.6538.66romulust
40.0940.1440.17romulusm
40.7840.7940.82T:giftcofb128v1
47.9647.9748.09T:isapk128av20
51.0251.0351.06T:tinyjambu128v2
54.6054.6254.62T:tinyjambu192v2
58.4758.4958.52T:tinyjambu256v2
81.1781.1981.21T:isapk128v20
123.96124.03124.07T:isapxv20
174.88174.90186.13T:elephant200v2
4883.024887.264917.07T:elephant176v2
5426.695427.725429.16T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
6.947.057.07T:aes128gcmv1
7.507.668.20aes256gcmv1
10.5910.6710.87ascon128av12
12.7412.9013.46ascon128v12
12.9812.9813.38ascon80pqv12
14.1214.2514.50T:aes256gcmv1
17.9318.2118.77ascon128abi32v12
20.1520.5820.89T:xoodyakround3
23.7323.7325.80ascon128bi32v12
33.0933.3033.39T:schwaemm256128v2
35.0035.1435.23romulusn
35.2935.9736.39T:grain128aeadv2
35.6936.0736.81T:schwaemm128128v2
38.0238.2338.35T:schwaemm256256v2
42.2642.8543.27T:schwaemm192192v2
45.7745.8946.66romulusm
49.3549.4149.66T:giftcofb128v1
59.9960.2060.26T:tinyjambu128v2
64.1664.2764.59T:tinyjambu192v2
68.0968.3668.82T:tinyjambu256v2
102.12102.13102.60romulust
106.87107.35107.66T:isapa128av20
192.05194.24194.30T:isapk128av20
246.17246.74262.39T:elephant200v2
331.14331.20331.98T:isapa128v20
1300.491300.511300.89T:isapk128v20
1844.591848.761852.91T:isapxv20
6063.196066.866109.73T:elephant176v2
7258.517261.377263.56T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
7.527.527.58T:aes128gcmv1
7.437.737.81aes256gcmv1
12.9713.0913.67ascon80pqv12
13.1113.1113.56ascon128v12
13.9114.1614.50T:aes256gcmv1
15.7816.9317.35ascon128av12
18.0318.4818.73ascon128abi32v12
19.7720.7321.08T:xoodyakround3
25.1125.2527.43ascon128bi32v12
32.8233.1233.26T:schwaemm256128v2
35.0935.5535.55romulusn
36.1636.3436.80T:grain128aeadv2
36.1636.4836.92T:schwaemm128128v2
38.0538.1738.25T:schwaemm256256v2
42.1542.2842.77T:schwaemm192192v2
47.2747.4347.70romulusm
49.5449.6550.07T:giftcofb128v1
60.0360.0960.37T:tinyjambu128v2
64.0564.1264.14T:tinyjambu192v2
68.1568.3068.73T:tinyjambu256v2
102.09102.44102.55romulust
106.72107.29107.41T:isapa128av20
192.63192.95194.77T:isapk128av20
245.73246.06262.04T:elephant200v2
329.31331.30332.51T:isapa128v20
1300.741301.041301.65T:isapk128v20
1849.091849.561850.25T:isapxv20
6061.246066.556101.07T:elephant176v2
7257.737262.047266.57T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
7.487.507.52T:aes128gcmv1
7.437.627.82aes256gcmv1
13.0513.0613.12ascon80pqv12
13.1113.1113.30ascon128v12
14.0814.1614.31T:aes256gcmv1
15.7916.0216.09ascon128av12
18.0018.0718.29ascon128abi32v12
20.0820.4420.55T:xoodyakround3
25.0525.2826.95ascon128bi32v12
32.8032.8233.19T:schwaemm256128v2
35.1735.2335.55romulusn
35.6636.0936.30T:grain128aeadv2
36.1636.1636.58T:schwaemm128128v2
38.0838.1538.20T:schwaemm256256v2
42.1542.1642.48T:schwaemm192192v2
47.1647.3447.59romulusm
49.9050.0250.16T:giftcofb128v1
60.0660.2260.23T:tinyjambu128v2
63.6863.7364.25romulust
64.2964.2964.30T:tinyjambu192v2
66.6666.9967.12T:isapa128av20
68.2968.3168.34T:tinyjambu256v2
118.63118.99121.95T:isapk128av20
172.55173.34173.97T:isapa128v20
245.52245.59262.35T:elephant200v2
680.03680.44680.76T:isapk128v20
967.42967.94971.74T:isapxv20
6063.946068.156110.75T:elephant176v2
7260.337263.227265.78T:elephant160v2