VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Zen (800f11); 2017 AMD Ryzen 7 1700; 8 x 3000MHz; rumba7, supercop-20241022

[Page version: 20241120 00:41:35]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.76?0.83?0.93?T:aes128gcmv1
0.86?0.95?1.06?T:aes256gcmv1
6.556.576.60ascon128av12
9.019.039.03ascon128v12
9.029.069.08ascon80pqv12
11.3811.4011.42ascon128abi32v12
15.1415.4315.76T:xoodyakround3
16.6016.6216.63ascon128bi32v12
19.4019.4119.46T:schwaemm256128v2
24.0624.1024.12T:schwaemm256256v2
25.5625.8425.84T:schwaemm192192v2
27.0127.0927.38T:grain128aeadv2
27.7427.7627.79T:schwaemm128128v2
34.3034.3234.34T:isapa128av20
34.4934.6934.85T:isapa128v20
35.7336.0637.23romulusn
40.5340.5840.62T:giftcofb128v1
56.3956.3956.40T:tinyjambu128v2
57.4557.8457.89romulusm
66.4866.5166.53T:tinyjambu192v2
66.6166.7066.88T:isapk128av20
71.0471.0871.09T:tinyjambu256v2
88.7688.8689.99T:isapk128v20
115.58115.59115.60romulust
148.04148.17148.26T:elephant200v2
161.09162.55165.24T:isapxv20
373.89?380.52?420.19?aes256gcmv1
6941.676942.466943.53T:elephant176v2
7827.307828.277829.21T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.72?0.79?0.92?T:aes128gcmv1
0.78?0.91?1.01?T:aes256gcmv1
6.056.066.08ascon128av12
8.898.908.92ascon80pqv12
9.089.109.10ascon128v12
11.4111.4211.45ascon128abi32v12
16.2316.2516.25ascon128bi32v12
16.4816.6616.74T:xoodyakround3
19.4719.5119.61T:schwaemm256128v2
24.0424.1024.13T:schwaemm256256v2
25.8425.8725.88T:schwaemm192192v2
27.3027.3227.45T:grain128aeadv2
27.7927.8327.86T:schwaemm128128v2
34.2934.3234.35T:isapa128av20
34.3434.8035.15T:isapa128v20
35.7336.1037.29romulusn
40.5140.5240.53T:giftcofb128v1
56.5156.5256.54T:tinyjambu128v2
57.6757.9657.97romulusm
66.1166.1366.16T:tinyjambu192v2
66.5766.6866.78T:isapk128av20
71.1471.1971.19T:tinyjambu256v2
88.8589.4890.06T:isapk128v20
115.56115.60115.61romulust
147.90148.02148.17T:elephant200v2
161.50163.11165.59T:isapxv20
373.06384.90400.84aes256gcmv1
6939.326941.606942.56T:elephant176v2
7828.477829.567829.93T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.79?0.83?0.91?T:aes128gcmv1
0.83?0.88?1.00?T:aes256gcmv1
6.046.066.07ascon128av12
8.888.908.91ascon80pqv12
9.089.109.14ascon128v12
11.4311.4511.46ascon128abi32v12
16.2516.2516.25ascon128bi32v12
16.5216.7316.78T:xoodyakround3
17.2717.4717.94T:isapa128v20
19.4719.4919.54T:schwaemm256128v2
22.9022.9122.92T:isapa128av20
24.0424.0924.13T:schwaemm256256v2
25.8525.8625.87T:schwaemm192192v2
27.3027.3227.47T:grain128aeadv2
27.8428.1828.20T:schwaemm128128v2
35.6735.9636.23romulusn
38.8638.8738.92romulust
40.5040.5140.56T:giftcofb128v1
44.3044.3744.47T:isapk128av20
55.1655.5756.30T:isapk128v20
56.5056.5256.53T:tinyjambu128v2
57.6657.9658.00romulusm
66.1066.1266.15T:tinyjambu192v2
71.1871.2471.24T:tinyjambu256v2
94.6695.1895.53T:isapxv20
147.95148.10148.19T:elephant200v2
369.43371.13399.36aes256gcmv1
6938.936941.196942.00T:elephant176v2
7827.697829.277829.95T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.60?0.63?0.69?T:aes128gcmv1
0.62?0.67?0.72?T:aes256gcmv1
6.256.266.29ascon128av12
8.878.918.92ascon80pqv12
8.989.009.01ascon128v12
11.1511.1711.21ascon128abi32v12
11.5611.7411.90T:xoodyakround3
16.4516.4616.51ascon128bi32v12
19.4119.4219.43T:schwaemm256128v2
23.9523.9924.02T:schwaemm256256v2
25.5825.7225.73T:schwaemm192192v2
26.1226.2526.28T:isapa128v20
27.1227.1827.21T:grain128aeadv2
27.7427.7527.78T:schwaemm128128v2
28.6528.6728.69T:isapa128av20
28.7428.9529.54romulusn
39.6139.8040.05romulusm
40.4840.5140.53T:giftcofb128v1
44.6544.7144.73T:tinyjambu128v2
51.7351.7451.81T:tinyjambu192v2
53.3353.3453.36T:tinyjambu256v2
55.6155.6755.71T:isapk128av20
71.0172.1072.63T:isapk128v20
77.2177.2377.24romulust
111.49111.58111.66T:elephant200v2
129.49130.17130.62T:isapxv20
370.47?374.86?415.77?aes256gcmv1
5182.455184.075188.34T:elephant176v2
5868.435869.025869.41T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.59?0.62?0.68?T:aes128gcmv1
0.62?0.68?0.72?T:aes256gcmv1
5.986.006.01ascon128av12
8.888.898.90ascon80pqv12
8.848.928.96ascon128v12
11.2311.2411.25ascon128abi32v12
12.2912.3712.48T:xoodyakround3
16.2416.3516.35ascon128bi32v12
19.4519.4619.54T:schwaemm256128v2
23.8923.9824.03T:schwaemm256256v2
25.5925.6125.72T:schwaemm192192v2
26.0626.1326.26T:isapa128v20
27.2327.3427.44T:grain128aeadv2
27.7127.7827.79T:schwaemm128128v2
28.6528.7028.71T:isapa128av20
28.7428.8129.04romulusn
39.6839.8740.45romulusm
40.4840.5040.51T:giftcofb128v1
44.6744.7344.74T:tinyjambu128v2
51.4551.4751.49T:tinyjambu192v2
53.4153.4353.45T:tinyjambu256v2
55.5855.6655.81T:isapk128av20
70.9672.1772.62T:isapk128v20
77.2277.2477.25romulust
111.56111.65111.68T:elephant200v2
129.07129.69130.78T:isapxv20
370.45375.31400.14aes256gcmv1
5181.765183.885186.67T:elephant176v2
5868.845869.145870.03T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.600.630.64T:aes128gcmv1
0.660.680.71T:aes256gcmv1
5.986.006.01ascon128av12
8.898.898.90ascon80pqv12
8.878.949.01ascon128v12
11.2411.2511.26ascon128abi32v12
12.3112.3512.58T:xoodyakround3
16.2616.3416.36ascon128bi32v12
17.4517.5617.80T:isapa128v20
19.4319.4519.47T:schwaemm256128v2
22.9122.9822.99T:isapa128av20
23.9323.9824.01T:schwaemm256256v2
25.6125.7125.72T:schwaemm192192v2
27.1927.2427.34T:grain128aeadv2
27.7127.7627.78T:schwaemm128128v2
28.7228.9729.00romulusn
38.8538.8738.90romulust
39.7839.9039.92romulusm
40.4540.4840.52T:giftcofb128v1
44.4244.4844.93T:isapk128av20
44.7444.7444.75T:tinyjambu128v2
51.4251.4551.50T:tinyjambu192v2
53.4153.4253.45T:tinyjambu256v2
54.6855.2555.79T:isapk128v20
94.6495.0395.77T:isapxv20
111.59111.63111.66T:elephant200v2
367.79372.18398.23aes256gcmv1
5182.245183.955186.92T:elephant176v2
5868.575869.005869.79T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.39?0.44?0.51?T:aes128gcmv1
0.36?0.46?0.52?T:aes256gcmv1
5.955.985.99ascon128av12
8.048.128.29T:xoodyakround3
8.768.778.78ascon80pqv12
8.958.958.95ascon128v12
10.9410.9410.96ascon128abi32v12
16.2816.2916.38ascon128bi32v12
17.6017.6017.87T:isapa128v20
19.2719.3919.41T:schwaemm256128v2
21.8221.8421.86romulusn
21.8321.8521.87romulusm
23.0323.0523.06T:isapa128av20
23.7523.8323.93T:schwaemm256256v2
25.3225.3425.36T:schwaemm192192v2
26.8526.9227.00T:grain128aeadv2
27.6427.6827.71T:schwaemm128128v2
32.9332.9532.96T:tinyjambu128v2
35.6335.6335.65T:tinyjambu256v2
37.0037.0237.06T:tinyjambu192v2
38.8738.8738.88romulust
40.4340.4540.47T:giftcofb128v1
44.5344.6544.92T:isapk128av20
55.2555.2955.37T:isapk128v20
76.0776.1276.24T:elephant200v2
94.7195.2895.73T:isapxv20
365.73?372.67?409.18?aes256gcmv1
3424.853426.033442.31T:elephant176v2
3909.723910.103924.09T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.36?0.41?0.45?T:aes128gcmv1
0.36?0.43?0.50?T:aes256gcmv1
5.885.895.89ascon128av12
7.928.098.33T:xoodyakround3
8.858.868.89ascon80pqv12
8.86?8.88?11.40?ascon128v12
11.0011.0211.03ascon128abi32v12
16.2416.3816.45ascon128bi32v12
17.6017.6017.65T:isapa128v20
19.3919.4319.44T:schwaemm256128v2
21.8321.8421.85romulusn
21.8321.8521.87romulusm
22.9022.9823.08T:isapa128av20
23.8023.8823.94T:schwaemm256256v2
25.3125.3425.36T:schwaemm192192v2
27.2327.3027.40T:grain128aeadv2
27.6427.6827.74T:schwaemm128128v2
32.9432.9432.96T:tinyjambu128v2
35.6635.6835.69T:tinyjambu256v2
36.7536.8336.86T:tinyjambu192v2
38.8238.8538.88romulust
40.4340.4740.49T:giftcofb128v1
44.4944.5644.64T:isapk128av20
55.2155.2855.32T:isapk128v20
75.9276.0576.11T:elephant200v2
95.7196.1196.41T:isapxv20
365.25370.98398.72aes256gcmv1
3425.423426.163429.56T:elephant176v2
3909.073909.653910.23T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.38?0.43?0.46?T:aes128gcmv1
0.37?0.46?0.48?T:aes256gcmv1
5.885.905.91ascon128av12
7.958.178.24T:xoodyakround3
8.858.878.88ascon80pqv12
8.87?8.91?11.41?ascon128v12
11.0211.0411.04ascon128abi32v12
16.2516.3616.47ascon128bi32v12
17.6017.6017.78T:isapa128v20
19.2319.2419.26T:schwaemm256128v2
21.8321.8421.85romulusn
21.8421.8521.86romulusm
22.9122.9723.06T:isapa128av20
23.7623.8623.90T:schwaemm256256v2
25.3225.3625.90T:schwaemm192192v2
26.8027.1627.19T:grain128aeadv2
27.6627.6927.71T:schwaemm128128v2
32.9632.9733.01T:tinyjambu128v2
35.6535.6535.71T:tinyjambu256v2
36.7936.8336.84T:tinyjambu192v2
38.8338.8738.92romulust
40.3840.4340.46T:giftcofb128v1
44.5444.6144.73T:isapk128av20
55.2155.2555.28T:isapk128v20
75.5975.9276.12T:elephant200v2
94.2895.2996.29T:isapxv20
364.74368.12397.03aes256gcmv1
3425.473425.873429.61T:elephant176v2
3909.503909.853923.99T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.911.931.97T:aes128gcmv1
1.971.992.04T:aes256gcmv1
6.456.456.47ascon128av12
9.029.059.10ascon80pqv12
9.129.129.15ascon128v12
11.4811.4811.50ascon128abi32v12
11.7311.8111.96T:xoodyakround3
16.7916.7916.83ascon128bi32v12
19.9319.9419.98T:schwaemm256128v2
24.6024.6424.65T:schwaemm256256v2
26.2826.2826.29T:schwaemm192192v2
27.4727.5027.53T:grain128aeadv2
28.1428.1728.20T:schwaemm128128v2
29.0329.2129.76romulusn
30.9231.1031.11T:isapa128av20
38.3838.3938.47T:isapa128v20
39.9240.0140.47romulusm
40.8840.8940.91T:giftcofb128v1
45.0945.1045.12T:tinyjambu128v2
52.1452.1452.20T:tinyjambu192v2
53.7653.7753.82T:tinyjambu256v2
62.6562.6863.02T:isapk128av20
78.4078.4178.42romulust
113.90113.97114.04T:elephant200v2
125.44125.50125.93T:isapk128v20
209.26209.64209.88T:isapxv20
376.24380.98411.88aes256gcmv1
5221.415222.325223.93T:elephant176v2
5934.595934.975935.21T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.881.901.91T:aes128gcmv1
1.941.982.00T:aes256gcmv1
6.166.186.18ascon128av12
9.049.069.07ascon80pqv12
9.089.089.10ascon128v12
11.5411.5511.55ascon128abi32v12
12.3412.4412.56T:xoodyakround3
16.6016.6816.69ascon128bi32v12
20.0120.0620.17T:schwaemm256128v2
24.5724.6224.67T:schwaemm256256v2
26.3226.3226.35T:schwaemm192192v2
27.6027.6827.77T:grain128aeadv2
28.1628.2028.34T:schwaemm128128v2
29.0529.2229.77romulusn
31.0831.1131.12T:isapa128av20
38.2638.3338.33T:isapa128v20
40.1140.1840.23romulusm
40.8740.8840.90T:giftcofb128v1
45.1145.1145.11T:tinyjambu128v2
51.8851.9051.92T:tinyjambu192v2
53.8653.8653.88T:tinyjambu256v2
62.6862.7362.95T:isapk128av20
78.4078.4178.41romulust
113.92114.05114.07T:elephant200v2
125.42125.44125.96T:isapk128v20
209.20209.93210.47T:isapxv20
373.22379.33402.33aes256gcmv1
5221.855222.305225.14T:elephant176v2
5935.145935.735953.42T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.861.881.91T:aes128gcmv1
1.921.951.96T:aes256gcmv1
6.166.176.18ascon128av12
9.059.069.06ascon80pqv12
9.109.109.14ascon128v12
11.5411.5511.55ascon128abi32v12
12.4312.4912.60T:xoodyakround3
16.6016.6916.69ascon128bi32v12
20.0020.0120.01T:schwaemm256128v2
23.7323.7523.86T:isapa128v20
24.3324.3524.36T:isapa128av20
24.5924.6224.65T:schwaemm256256v2
26.1826.1926.32T:schwaemm192192v2
27.5827.6527.76T:grain128aeadv2
28.1828.3628.54T:schwaemm128128v2
29.0629.2229.77romulusn
39.9939.9940.00romulust
40.0540.2240.72romulusm
40.8440.8440.88T:giftcofb128v1
45.1145.1145.12T:tinyjambu128v2
48.4848.4948.83T:isapk128av20
51.8751.9051.93T:tinyjambu192v2
53.8553.8653.89T:tinyjambu256v2
82.5682.7383.04T:isapk128v20
113.95113.98114.04T:elephant200v2
135.92136.21136.46T:isapxv20
370.15370.63398.51aes256gcmv1
5221.565222.125223.37T:elephant176v2
5934.945935.235935.67T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
10.3010.5110.66ascon128av12
12.1512.5312.81ascon128v12
12.8813.0513.16ascon80pqv12
17.7617.9118.53T:xoodyakround3
18.3118.5419.02ascon128abi32v12
24.0224.2424.69ascon128bi32v12
31.5631.9732.69T:aes128gcmv1
32.5532.6332.71T:schwaemm256128v2
31.8932.7333.65T:aes256gcmv1
35.2035.3435.96romulusn
35.2835.3835.44T:grain128aeadv2
36.7036.8237.46T:schwaemm128128v2
39.1539.2739.42T:schwaemm256256v2
42.7342.7643.07T:schwaemm192192v2
46.1646.4646.73romulusm
49.3349.4349.71T:giftcofb128v1
53.2753.3353.62T:tinyjambu128v2
61.4261.5261.85T:tinyjambu192v2
63.1163.1963.44T:tinyjambu256v2
86.5986.8387.07T:isapa128av20
105.27105.39106.00romulust
162.92163.27163.81T:elephant200v2
211.80212.19212.86T:isapk128av20
318.29318.86321.68T:isapa128v20
423.68425.53459.09aes256gcmv1
1336.641337.431369.84T:isapk128v20
2001.562022.912028.88T:isapxv20
6503.056504.516525.44T:elephant176v2
7948.387951.807970.74T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
10.3010.4510.62ascon128av12
12.7012.7913.07ascon80pqv12
12.29?12.88?13.73?ascon128v12
17.7917.9118.22T:xoodyakround3
18.5918.8719.11ascon128abi32v12
24.3424.4924.60ascon128bi32v12
31.5031.9133.06T:aes256gcmv1
31.6432.0232.22T:aes128gcmv1
32.5832.6932.89T:schwaemm256128v2
34.8835.2035.70romulusn
35.2035.6135.76T:grain128aeadv2
37.4237.4337.62T:schwaemm128128v2
39.1139.2439.29T:schwaemm256256v2
42.7842.8243.19T:schwaemm192192v2
47.4647.5947.91romulusm
49.5749.7249.84T:giftcofb128v1
53.5353.5353.66T:tinyjambu128v2
61.5661.7661.89T:tinyjambu192v2
63.6863.7363.98T:tinyjambu256v2
86.5686.7386.97T:isapa128av20
105.23105.27105.70romulust
162.92163.18163.41T:elephant200v2
211.46211.95213.23T:isapk128av20
319.10319.16321.48T:isapa128v20
421.32422.70447.38aes256gcmv1
1337.431340.911370.11T:isapk128v20
2014.622016.902018.12T:isapxv20
6502.076504.426523.27T:elephant176v2
7947.767948.227951.08T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
10.1110.2610.38ascon128av12
12.5012.7012.83ascon80pqv12
12.5412.8713.48ascon128v12
17.9117.9818.38T:xoodyakround3
18.2418.2718.59ascon128abi32v12
23.8324.2024.21ascon128bi32v12
31.3331.5832.00T:aes128gcmv1
31.3031.6332.08T:aes256gcmv1
32.4832.4832.64T:schwaemm256128v2
34.8835.3835.59romulusn
35.3035.7035.74T:grain128aeadv2
37.2037.3837.84T:schwaemm128128v2
39.0639.1739.23T:schwaemm256256v2
42.6942.7443.02T:schwaemm192192v2
47.3447.5548.05romulusm
49.5349.5949.59T:giftcofb128v1
53.4553.4553.45T:tinyjambu128v2
55.6455.8055.92T:isapa128av20
61.3461.5761.91T:tinyjambu192v2
63.8263.8263.96T:tinyjambu256v2
65.6565.7665.89romulust
130.86131.22132.02T:isapk128av20
162.82163.05163.27T:elephant200v2
161.23165.80165.80T:isapa128v20
414.38418.30451.05aes256gcmv1
698.22698.55715.49T:isapk128v20
1049.311049.441068.99T:isapxv20
6501.736506.306509.15T:elephant176v2
7948.677950.297951.04T:elephant160v2