VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Broadwell+AES (306d4); 2015 Intel Core i3-5005U; 2 x 1900MHz; shoe, supercop-20241022

[Page version: 20241120 00:41:35]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.770.780.81T:aes128gcmv1
1.051.071.09T:aes256gcmv1
2.122.142.16aes256gcmv1
7.327.347.36ascon128av12
10.6210.6510.67ascon128v12
10.6110.6610.71ascon80pqv12
14.3114.3214.35ascon128abi32v12
17.3917.4817.55T:xoodyakround3
20.0620.1520.53T:schwaemm256128v2
21.1321.2221.29ascon128bi32v12
24.6724.6924.72T:schwaemm256256v2
25.8025.8426.02T:grain128aeadv2
26.2326.3226.38T:schwaemm192192v2
28.7228.7428.80T:schwaemm128128v2
38.9338.9538.96romulusn
41.6241.6641.69T:giftcofb128v1
41.5341.6941.88T:isapa128v20
41.9141.9642.04T:isapa128av20
61.0561.0961.11T:tinyjambu128v2
62.9863.0263.07romulusm
70.5070.6571.03T:isapk128av20
72.8572.8773.06T:tinyjambu192v2
82.0582.0682.37T:tinyjambu256v2
92.5092.9393.46T:isapk128v20
124.47124.56124.63romulust
152.90153.10153.35T:elephant200v2
174.30183.85193.29T:isapxv20
7301.717310.417310.93T:elephant176v2
8508.928535.998550.67T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.720.740.75T:aes128gcmv1
1.011.051.06T:aes256gcmv1
2.192.212.23aes256gcmv1
7.037.047.08ascon128av12
10.4710.5010.60ascon80pqv12
10.6310.6710.69ascon128v12
14.0214.0514.11ascon128abi32v12
17.1817.2117.26T:xoodyakround3
20.0520.1320.52T:schwaemm256128v2
21.3821.4221.45ascon128bi32v12
24.6724.6924.71T:schwaemm256256v2
26.1926.2926.39T:grain128aeadv2
26.2826.3726.44T:schwaemm192192v2
28.7228.7528.81T:schwaemm128128v2
38.9038.9338.95romulusn
41.3641.6441.81T:isapa128v20
41.8041.8841.97T:giftcofb128v1
41.9942.0342.11T:isapa128av20
61.1461.2061.24T:tinyjambu128v2
63.0663.1263.19romulusm
70.5070.6570.94T:isapk128av20
73.0573.0673.08T:tinyjambu192v2
82.3282.3482.36T:tinyjambu256v2
92.6692.9293.18T:isapk128v20
124.50124.55124.61romulust
152.98153.28153.61T:elephant200v2
183.88183.92184.40T:isapxv20
7301.827310.557310.89T:elephant176v2
8512.648541.038548.91T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.680.720.74T:aes128gcmv1
1.001.051.06T:aes256gcmv1
2.182.212.23aes256gcmv1
7.037.047.11ascon128av12
10.4810.5010.55ascon80pqv12
10.6010.6510.67ascon128v12
14.0414.1014.12ascon128abi32v12
17.2117.2517.28T:xoodyakround3
20.0520.1420.53T:schwaemm256128v2
20.8020.9221.02T:isapa128v20
21.3521.4221.46ascon128bi32v12
24.6624.6824.71T:schwaemm256256v2
26.2226.3526.41T:grain128aeadv2
26.3226.3826.43T:schwaemm192192v2
27.8527.8828.04T:isapa128av20
28.7028.7528.79T:schwaemm128128v2
38.8938.9238.97romulusn
41.8041.8841.91T:giftcofb128v1
42.4142.4842.54romulust
46.6546.8447.03T:isapk128av20
57.7557.8958.16T:isapk128v20
61.1161.1761.23T:tinyjambu128v2
63.0663.0963.15romulusm
73.0673.0773.08T:tinyjambu192v2
82.3382.3482.35T:tinyjambu256v2
108.51108.71109.37T:isapxv20
153.01153.16153.45T:elephant200v2
7302.087310.877311.15T:elephant176v2
8512.568536.808544.83T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.530.530.54T:aes128gcmv1
0.660.680.69T:aes256gcmv1
1.251.261.27aes256gcmv1
7.227.247.25ascon128av12
10.5210.5610.60ascon80pqv12
10.5810.6010.63ascon128v12
13.3113.3413.37T:xoodyakround3
14.0914.1214.29ascon128abi32v12
20.2420.2820.69T:schwaemm256128v2
21.3321.3521.39ascon128bi32v12
24.5424.5624.57T:schwaemm256256v2
25.8725.9126.11T:grain128aeadv2
26.1426.1726.22T:schwaemm192192v2
28.6228.6428.68T:schwaemm128128v2
31.1331.1931.27T:isapa128v20
31.5231.5531.56romulusn
34.8634.8934.93T:isapa128av20
41.8341.8541.91T:giftcofb128v1
43.5543.5743.58romulusm
50.1450.1750.19T:tinyjambu128v2
57.0957.1157.23T:tinyjambu192v2
58.5758.7258.78T:isapk128av20
61.9161.9161.92T:tinyjambu256v2
75.4775.7075.82T:isapk128v20
83.4783.5583.62romulust
115.10115.19115.25T:elephant200v2
141.69146.50150.92T:isapxv20
5452.665458.625459.29T:elephant176v2
6379.926399.806401.67T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.490.510.52T:aes128gcmv1
0.640.660.67T:aes256gcmv1
1.311.311.33aes256gcmv1
7.087.097.11ascon128av12
10.4910.5210.57ascon80pqv12
10.5910.6210.63ascon128v12
13.2113.2313.25T:xoodyakround3
14.1614.2114.24ascon128abi32v12
20.2420.2920.68T:schwaemm256128v2
21.3321.3821.40ascon128bi32v12
24.5424.5624.57T:schwaemm256256v2
26.0226.1426.19T:grain128aeadv2
26.1526.1926.24T:schwaemm192192v2
28.6028.6328.67T:schwaemm128128v2
31.0931.1531.21T:isapa128v20
31.5231.5431.56romulusn
34.8734.9034.92T:isapa128av20
41.9441.9842.04T:giftcofb128v1
43.6043.6343.65romulusm
50.2050.2550.28T:tinyjambu128v2
57.2057.2257.24T:tinyjambu192v2
58.6458.7158.96T:isapk128av20
62.0562.0762.08T:tinyjambu256v2
75.5475.7376.08T:isapk128v20
83.4983.5383.58romulust
115.02115.10115.28T:elephant200v2
146.26146.51146.82T:isapxv20
5452.825458.725459.34T:elephant176v2
6379.886399.376401.93T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.500.510.51T:aes128gcmv1
0.620.660.67T:aes256gcmv1
1.301.311.32aes256gcmv1
7.097.107.12ascon128av12
10.5210.5310.56ascon80pqv12
10.5910.6110.64ascon128v12
13.2413.2613.28T:xoodyakround3
14.1714.2014.24ascon128abi32v12
20.2220.2720.68T:schwaemm256128v2
20.5620.6420.73T:isapa128v20
21.3721.3821.40ascon128bi32v12
24.5524.5624.57T:schwaemm256256v2
26.0426.1526.18T:grain128aeadv2
26.1726.2126.25T:schwaemm192192v2
27.8227.8727.95T:isapa128av20
28.6128.6328.67T:schwaemm128128v2
31.5131.5231.56romulusn
41.9441.9641.97T:giftcofb128v1
42.5042.5342.56romulust
43.5843.6043.64romulusm
46.7046.7946.94T:isapk128av20
50.1950.2150.26T:tinyjambu128v2
57.2157.2357.24T:tinyjambu192v2
58.0858.2458.39T:isapk128v20
62.0662.0762.09T:tinyjambu256v2
108.74108.78109.33T:isapxv20
114.94115.09115.25T:elephant200v2
5452.575458.685459.24T:elephant176v2
6380.366398.746401.77T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.270.280.30T:aes128gcmv1
0.26?0.29?0.30?T:aes256gcmv1
0.390.400.41aes256gcmv1
7.127.137.15ascon128av12
9.159.199.22T:xoodyakround3
10.4410.4910.58ascon80pqv12
10.5110.5510.57ascon128v12
13.8313.9014.22ascon128abi32v12
20.3020.3720.76T:schwaemm256128v2
20.4920.7320.78T:isapa128v20
21.3821.4221.45ascon128bi32v12
24.0724.0924.11romulusn
24.1124.1224.15romulusm
24.4124.4324.46T:schwaemm256256v2
25.8825.9326.12T:grain128aeadv2
25.9626.0226.06T:schwaemm192192v2
27.8328.0028.04T:isapa128av20
28.4728.5228.57T:schwaemm128128v2
39.2439.2839.30T:tinyjambu128v2
41.3941.4141.42T:tinyjambu192v2
41.7941.8041.81T:tinyjambu256v2
42.0042.0642.13T:giftcofb128v1
42.5342.5742.63romulust
46.4846.6846.92T:isapk128av20
58.0258.3558.58T:isapk128v20
78.1078.2978.61T:elephant200v2
98.80?109.03?119.21?T:isapxv20
3605.613609.763610.06T:elephant176v2
4250.124252.764260.37T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.270.280.30T:aes256gcmv1
0.25?0.29?0.30?T:aes128gcmv1
0.410.430.44aes256gcmv1
7.077.097.12ascon128av12
9.169.199.21T:xoodyakround3
10.4310.4610.52ascon80pqv12
10.5210.5510.57ascon128v12
14.2114.2514.35ascon128abi32v12
20.3020.4020.79T:schwaemm256128v2
20.4920.6220.77T:isapa128v20
21.2921.3321.38ascon128bi32v12
24.0624.1024.12romulusn
24.1024.1324.16romulusm
24.4224.4324.46T:schwaemm256256v2
25.8325.9026.04T:grain128aeadv2
26.0226.0526.12T:schwaemm192192v2
27.8127.9928.01T:isapa128av20
28.4728.5128.58T:schwaemm128128v2
39.2639.3139.34T:tinyjambu128v2
41.3841.4241.46T:tinyjambu192v2
41.8241.8341.83T:tinyjambu256v2
42.0342.0842.11T:giftcofb128v1
42.5142.5542.63romulust
46.4646.7246.87T:isapk128av20
58.0458.3358.63T:isapk128v20
78.0278.1278.28T:elephant200v2
108.69109.24109.59T:isapxv20
3605.483609.773610.33T:elephant176v2
4248.434254.444260.92T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.24?0.27?0.29?T:aes256gcmv1
0.23?0.28?0.30?T:aes128gcmv1
0.420.420.43aes256gcmv1
7.077.097.11ascon128av12
9.149.199.22T:xoodyakround3
10.4510.4610.49ascon80pqv12
10.5110.5410.56ascon128v12
14.2514.2814.35ascon128abi32v12
20.3020.3820.79T:schwaemm256128v2
20.4520.6120.69T:isapa128v20
21.3321.3621.38ascon128bi32v12
24.0424.0924.11romulusn
24.0924.1224.14romulusm
24.4024.4224.45T:schwaemm256256v2
25.8425.9026.05T:grain128aeadv2
25.9626.0526.11T:schwaemm192192v2
27.8127.9528.05T:isapa128av20
28.4828.5328.57T:schwaemm128128v2
39.2539.3139.37T:tinyjambu128v2
41.4141.4341.48T:tinyjambu192v2
41.8341.8441.85T:tinyjambu256v2
42.0242.0942.12T:giftcofb128v1
42.5042.5442.58romulust
46.4046.6846.90T:isapk128av20
58.1958.3858.77T:isapk128v20
77.9578.1878.33T:elephant200v2
108.86109.21109.60T:isapxv20
3605.503609.723610.27T:elephant176v2
4248.834255.024262.08T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.051.051.06T:aes128gcmv1
1.221.231.24T:aes256gcmv1
1.451.451.46aes256gcmv1
7.397.427.43ascon128av12
10.6910.7010.76ascon80pqv12
10.7510.7610.78ascon128v12
13.4613.4913.51T:xoodyakround3
14.4314.4514.62ascon128abi32v12
20.8320.8621.25T:schwaemm256128v2
21.6221.6521.69ascon128bi32v12
25.2225.2325.26T:schwaemm256256v2
26.3026.3426.52T:grain128aeadv2
26.7326.7526.78T:schwaemm192192v2
29.0229.0429.09T:schwaemm128128v2
31.8531.8631.90romulusn
38.5538.5638.58T:isapa128av20
42.2842.3142.33T:giftcofb128v1
43.8943.9043.96romulusm
45.5245.5945.65T:isapa128v20
50.5850.5950.61T:tinyjambu128v2
57.5657.5957.69T:tinyjambu192v2
62.4062.4062.42T:tinyjambu256v2
66.0866.1966.32T:isapk128av20
84.8084.8484.87romulust
117.45117.52117.67T:elephant200v2
131.36131.47131.79T:isapk128v20
240.37240.39246.32T:isapxv20
5493.985501.065501.47T:elephant176v2
6453.376470.016472.00T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.041.051.06T:aes128gcmv1
1.201.211.21T:aes256gcmv1
1.501.511.52aes256gcmv1
7.267.277.29ascon128av12
10.7010.7210.76ascon80pqv12
10.7510.7810.79ascon128v12
13.3513.3613.38T:xoodyakround3
14.4814.5114.55ascon128abi32v12
20.8620.8721.28T:schwaemm256128v2
21.7121.7321.74ascon128bi32v12
25.2225.2225.23T:schwaemm256256v2
26.4926.6126.63T:grain128aeadv2
26.7926.8226.84T:schwaemm192192v2
29.0229.0529.10T:schwaemm128128v2
31.8431.8531.87romulusn
38.5638.5938.62T:isapa128av20
42.4442.4542.47T:giftcofb128v1
44.0544.0944.12romulusm
45.5045.5445.58T:isapa128v20
50.6050.6450.68T:tinyjambu128v2
57.6757.6857.70T:tinyjambu192v2
62.5462.5562.56T:tinyjambu256v2
66.1166.2666.31T:isapk128av20
84.7984.8284.85romulust
117.55117.66117.84T:elephant200v2
131.38131.47131.64T:isapk128v20
240.13240.35240.37T:isapxv20
5493.935501.095501.36T:elephant176v2
6453.366470.296473.11T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.041.051.05T:aes128gcmv1
1.201.211.21T:aes256gcmv1
1.491.501.51aes256gcmv1
7.277.287.29ascon128av12
10.7010.7110.74ascon80pqv12
10.7510.7810.80ascon128v12
13.3513.4013.41T:xoodyakround3
14.4714.5014.54ascon128abi32v12
20.8320.8721.24T:schwaemm256128v2
21.7121.7321.74ascon128bi32v12
25.2125.2225.23T:schwaemm256256v2
26.4926.6026.64T:grain128aeadv2
26.7826.8126.85T:schwaemm192192v2
27.8827.9528.01T:isapa128v20
28.9729.0229.09T:schwaemm128128v2
29.8429.9329.99T:isapa128av20
31.8431.8631.87romulusn
42.4142.4242.45T:giftcofb128v1
43.7343.7543.84romulust
44.0444.0644.09romulusm
50.6050.6650.69T:tinyjambu128v2
51.2051.3251.37T:isapk128av20
57.6757.6757.69T:tinyjambu192v2
62.5562.5562.56T:tinyjambu256v2
86.9587.0687.25T:isapk128v20
117.58117.73117.83T:elephant200v2
156.59156.80157.28T:isapxv20
5493.995501.155501.49T:elephant176v2
6453.006469.896472.38T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
8.098.128.17aes256gcmv1
11.3511.4211.66ascon128av12
13.5913.6313.84T:aes128gcmv1
14.4214.4814.71ascon128v12
14.4514.5314.73ascon80pqv12
14.5014.5914.79T:aes256gcmv1
19.6219.8820.34T:xoodyakround3
21.9522.0722.29ascon128abi32v12
29.1229.1629.55ascon128bi32v12
33.8234.1034.57T:schwaemm256128v2
36.4136.5036.61T:grain128aeadv2
37.0537.4537.70T:schwaemm128128v2
39.2739.3639.62romulusn
40.3940.5140.64T:schwaemm256256v2
43.1243.4243.62T:schwaemm192192v2
51.7751.8652.10romulusm
52.0652.2452.38T:giftcofb128v1
59.4759.7860.05T:tinyjambu128v2
67.7667.9768.09T:tinyjambu192v2
73.1873.4173.48T:tinyjambu256v2
113.23113.44114.05romulust
122.01122.36122.57T:isapa128av20
168.52169.30170.04T:elephant200v2
221.45223.59226.38T:isapk128av20
375.04375.48378.05T:isapa128v20
1391.931393.121396.50T:isapk128v20
2377.882378.172520.98T:isapxv20
6845.346852.006852.88T:elephant176v2
8647.308663.348670.07T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
7.757.817.91aes256gcmv1
11.2111.4411.59ascon128av12
13.5913.7013.86T:aes128gcmv1
14.4714.5614.74T:aes256gcmv1
14.5214.6114.88ascon80pqv12
14.5314.6214.74ascon128v12
19.4119.8820.48T:xoodyakround3
22.1822.2322.43ascon128abi32v12
29.3829.5129.89ascon128bi32v12
33.5633.8534.30T:schwaemm256128v2
36.4736.5336.66T:grain128aeadv2
37.4037.4537.74T:schwaemm128128v2
39.3739.4639.61romulusn
40.3940.4540.54T:schwaemm256256v2
43.0543.1043.35T:schwaemm192192v2
52.3752.5452.79T:giftcofb128v1
53.9254.0054.36romulusm
59.5659.6559.77T:tinyjambu128v2
67.8367.9468.02T:tinyjambu192v2
73.2273.3873.52T:tinyjambu256v2
113.12113.36113.60romulust
122.44122.57122.97T:isapa128av20
167.26168.61169.21T:elephant200v2
220.84221.68223.77T:isapk128av20
374.65375.12375.70T:isapa128v20
1390.841393.051394.15T:isapk128v20
2366.602369.052369.35T:isapxv20
6844.886851.966852.59T:elephant176v2
8643.588666.088672.80T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
7.657.697.75aes256gcmv1
11.2011.4011.50ascon128av12
13.5513.6913.84T:aes128gcmv1
14.5014.5414.61T:aes256gcmv1
14.5214.5914.71ascon80pqv12
14.5314.5914.75ascon128v12
19.3819.4519.79T:xoodyakround3
22.1922.3022.35ascon128abi32v12
29.3829.4329.65ascon128bi32v12
33.5833.6634.22T:schwaemm256128v2
36.4536.5936.72T:grain128aeadv2
37.0037.5237.69T:schwaemm128128v2
39.3339.4539.61romulusn
40.3340.3840.50T:schwaemm256256v2
43.1243.2043.29T:schwaemm192192v2
52.4352.6252.91T:giftcofb128v1
53.9554.0754.15romulusm
59.5259.7059.80T:tinyjambu128v2
67.8067.8967.97T:tinyjambu192v2
71.2571.6071.71romulust
73.1973.2073.24T:tinyjambu256v2
76.0676.2376.45T:isapa128av20
141.77143.80145.21T:isapk128av20
167.55168.06169.35T:elephant200v2
194.55194.97195.16T:isapa128v20
733.74734.34740.12T:isapk128v20
1239.051241.321242.13T:isapxv20
6845.766851.916852.54T:elephant176v2
8644.408662.988676.97T:elephant160v2