VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Broadwell+AES (306d4); 2015 Intel Core i3-5005U; 2 x 1900MHz; shoe, supercop-20250415

[Page version: 20250506 12:43:01]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.760.770.78T:aes128gcmv1
1.061.071.09T:aes256gcmv1
2.112.122.15aes256gcmv1
7.307.337.35ascon128av12
10.6110.6510.68ascon128v12
10.6310.6910.72ascon80pqv12
14.3014.3214.34ascon128abi32v12
17.4417.4817.53T:xoodyakround3
20.0420.1120.16T:schwaemm256128v2
21.1121.2121.27ascon128bi32v12
24.6624.6925.06T:schwaemm256256v2
25.7825.8025.82T:grain128aeadv2
26.2626.3326.37T:schwaemm192192v2
28.7328.7728.81T:schwaemm128128v2
38.9238.9438.98romulusn
41.6241.6541.69T:giftcofb128v1
41.5141.7241.87T:isapa128v20
42.2742.3642.44T:isapa128av20
61.0361.0761.11T:tinyjambu128v2
62.9562.9963.07romulusm
70.5570.7871.04T:isapk128av20
72.5972.8573.07T:tinyjambu192v2
82.0482.0682.06T:tinyjambu256v2
92.8693.1293.52T:isapk128v20
124.53124.61124.92romulust
152.91153.21153.40T:elephant200v2
183.16183.38184.21T:isapxv20
7302.787310.937311.37T:elephant176v2
8537.308540.468545.93T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.720.730.74T:aes128gcmv1
1.001.041.06T:aes256gcmv1
2.202.222.24aes256gcmv1
7.027.137.21ascon128av12
10.4910.5410.63ascon80pqv12
10.6210.6410.66ascon128v12
14.0314.1014.11ascon128abi32v12
17.1817.2617.35T:xoodyakround3
20.0920.1420.18T:schwaemm256128v2
21.3621.4121.44ascon128bi32v12
24.6524.6925.10T:schwaemm256256v2
26.2726.3526.40T:schwaemm192192v2
26.6026.6426.77T:grain128aeadv2
28.7228.7528.81T:schwaemm128128v2
38.9038.9238.97romulusn
41.5141.7641.93T:isapa128v20
41.8041.8641.89T:giftcofb128v1
42.2742.3442.40T:isapa128av20
61.1461.1961.23T:tinyjambu128v2
63.0863.1063.16romulusm
70.5470.7270.95T:isapk128av20
73.0773.0873.12T:tinyjambu192v2
82.3282.3382.36T:tinyjambu256v2
92.6693.0893.51T:isapk128v20
124.50124.69124.92romulust
152.94153.10153.41T:elephant200v2
183.07184.22184.99T:isapxv20
7302.897310.987311.33T:elephant176v2
8538.858541.668549.20T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.720.730.75T:aes128gcmv1
0.971.051.06T:aes256gcmv1
2.202.232.23aes256gcmv1
6.967.047.18ascon128av12
10.4810.5110.53ascon80pqv12
10.6110.6410.65ascon128v12
14.0614.1014.12ascon128abi32v12
17.1817.2917.37T:xoodyakround3
20.0820.1120.14T:schwaemm256128v2
20.6920.8420.90T:isapa128v20
21.3521.4021.46ascon128bi32v12
24.6524.6825.10T:schwaemm256256v2
26.2926.3526.41T:schwaemm192192v2
26.6026.6426.80T:grain128aeadv2
27.7927.8427.92T:isapa128av20
28.7328.7628.80T:schwaemm128128v2
38.8938.9238.96romulusn
41.8341.8741.92T:giftcofb128v1
42.4142.5242.72romulust
46.6746.8147.17T:isapk128av20
57.5757.7658.28T:isapk128v20
61.1361.2061.24T:tinyjambu128v2
63.0463.0963.13romulusm
73.0873.0973.13T:tinyjambu192v2
82.3382.3482.37T:tinyjambu256v2
108.29109.24109.34T:isapxv20
153.01153.10153.27T:elephant200v2
7302.977310.857311.40T:elephant176v2
8536.428540.568543.26T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.520.530.54T:aes128gcmv1
0.660.680.68T:aes256gcmv1
1.251.261.26aes256gcmv1
7.227.247.25ascon128av12
10.5110.5410.60ascon80pqv12
10.5910.6110.62ascon128v12
13.3013.3513.38T:xoodyakround3
14.0914.1514.31ascon128abi32v12
20.2320.2720.30T:schwaemm256128v2
21.3021.3321.34ascon128bi32v12
24.5524.5724.90T:schwaemm256256v2
25.7625.7725.79T:grain128aeadv2
26.1626.1926.21T:schwaemm192192v2
28.6028.6428.68T:schwaemm128128v2
31.0731.1431.22T:isapa128v20
31.5231.5531.56romulusn
35.0735.1335.17T:isapa128av20
41.8241.8541.88T:giftcofb128v1
43.5343.5643.58romulusm
50.1550.1850.20T:tinyjambu128v2
57.1157.2257.24T:tinyjambu192v2
58.4258.6358.89T:isapk128av20
61.9261.9261.94T:tinyjambu256v2
75.4675.6375.88T:isapk128v20
83.5683.6083.83romulust
114.89115.03115.13T:elephant200v2
145.84146.12146.55T:isapxv20
5454.095459.365460.09T:elephant176v2
6397.936399.296401.05T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.490.500.51T:aes128gcmv1
0.650.670.68T:aes256gcmv1
1.291.311.33aes256gcmv1
7.087.107.12ascon128av12
10.5010.5210.56ascon80pqv12
10.5810.6010.62ascon128v12
13.1913.2213.24T:xoodyakround3
14.1514.1714.20ascon128abi32v12
20.2320.2620.29T:schwaemm256128v2
21.3321.3721.39ascon128bi32v12
24.5424.5724.96T:schwaemm256256v2
26.1826.2326.26T:schwaemm192192v2
26.2226.2426.36T:grain128aeadv2
28.6228.6628.73T:schwaemm128128v2
31.0831.1731.25T:isapa128v20
31.5131.5231.53romulusn
35.0635.1035.14T:isapa128av20
41.9742.0042.02T:giftcofb128v1
43.5943.6243.64romulusm
50.2150.2450.28T:tinyjambu128v2
57.2257.2557.30T:tinyjambu192v2
58.5958.7258.82T:isapk128av20
62.0562.0762.09T:tinyjambu256v2
75.4675.7976.06T:isapk128v20
83.4883.5783.82romulust
114.99115.09115.20T:elephant200v2
146.23146.83147.03T:isapxv20
5454.025459.355460.10T:elephant176v2
6398.246400.056400.78T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.500.510.53T:aes128gcmv1
0.630.660.68T:aes256gcmv1
1.301.311.32aes256gcmv1
7.097.097.12ascon128av12
10.5210.5310.55ascon80pqv12
10.5810.6110.63ascon128v12
13.2213.2513.30T:xoodyakround3
14.1714.2114.25ascon128abi32v12
20.2520.2820.30T:schwaemm256128v2
20.5720.6720.71T:isapa128v20
21.3721.3821.39ascon128bi32v12
24.5424.5824.96T:schwaemm256256v2
26.1526.1926.23T:schwaemm192192v2
26.2226.2626.37T:grain128aeadv2
27.8227.8527.88T:isapa128av20
28.6228.6528.69T:schwaemm128128v2
31.5031.5231.54romulusn
41.9541.9641.98T:giftcofb128v1
42.5142.5742.80romulust
43.5943.6143.63romulusm
46.7446.8947.01T:isapk128av20
50.2150.2550.27T:tinyjambu128v2
57.2257.2557.29T:tinyjambu192v2
58.1158.2658.41T:isapk128v20
62.0562.0762.08T:tinyjambu256v2
108.83109.15109.36T:isapxv20
114.94115.04115.17T:elephant200v2
5454.145459.385460.17T:elephant176v2
6399.366400.846401.87T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.270.290.30T:aes256gcmv1
0.280.290.30T:aes128gcmv1
0.390.400.40aes256gcmv1
7.117.137.16ascon128av12
9.149.189.20T:xoodyakround3
10.4410.5410.59ascon80pqv12
10.5110.5410.56ascon128v12
13.8113.8713.98ascon128abi32v12
20.3020.3420.41T:schwaemm256128v2
20.5320.6120.68T:isapa128v20
21.3621.4021.44ascon128bi32v12
24.0624.0924.14romulusn
24.0924.1124.13romulusm
24.4324.4624.76T:schwaemm256256v2
25.7125.7725.80T:grain128aeadv2
25.9626.0326.10T:schwaemm192192v2
27.7927.8827.92T:isapa128av20
28.4628.5028.59T:schwaemm128128v2
39.2439.2739.31T:tinyjambu128v2
41.3841.4041.45T:tinyjambu192v2
41.7941.8041.82T:tinyjambu256v2
42.0442.0742.11T:giftcofb128v1
42.5242.6242.81romulust
46.3646.5846.73T:isapk128av20
58.2658.4458.65T:isapk128v20
77.9878.1078.32T:elephant200v2
108.63108.96109.22T:isapxv20
3605.663609.683610.20T:elephant176v2
4251.864253.764259.29T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.280.290.31T:aes256gcmv1
0.280.290.31T:aes128gcmv1
0.410.420.43aes256gcmv1
7.067.087.11ascon128av12
9.159.189.21T:xoodyakround3
10.4410.4710.51ascon80pqv12
10.5210.5610.59ascon128v12
14.2314.2714.32ascon128abi32v12
20.3120.3420.41T:schwaemm256128v2
20.4020.5520.68T:isapa128v20
21.3021.3421.38ascon128bi32v12
24.0624.0824.12romulusn
24.0724.1024.13romulusm
24.4124.4424.78T:schwaemm256256v2
25.7925.8625.96T:grain128aeadv2
26.0026.0526.12T:schwaemm192192v2
27.7127.8027.85T:isapa128av20
28.4628.5228.59T:schwaemm128128v2
39.2539.2939.34T:tinyjambu128v2
41.4041.4141.46T:tinyjambu192v2
41.8141.8441.85T:tinyjambu256v2
42.0242.0742.10T:giftcofb128v1
42.5242.6042.87romulust
46.2646.4146.57T:isapk128av20
57.9158.2458.52T:isapk128v20
77.9878.1778.41T:elephant200v2
108.85109.44109.59T:isapxv20
3605.673609.703609.87T:elephant176v2
4251.844255.194258.66T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.25?0.28?0.30?T:aes256gcmv1
0.25?0.29?0.30?T:aes128gcmv1
0.420.420.43aes256gcmv1
7.067.087.10ascon128av12
9.159.199.21T:xoodyakround3
10.4310.4810.51ascon80pqv12
10.5010.5310.55ascon128v12
14.2414.3014.36ascon128abi32v12
20.3020.3720.45T:schwaemm256128v2
20.4820.6320.67T:isapa128v20
21.3121.3521.38ascon128bi32v12
24.0624.0824.13romulusn
24.0924.1224.16romulusm
24.4124.4324.77T:schwaemm256256v2
25.8425.8925.94T:grain128aeadv2
25.9726.0326.09T:schwaemm192192v2
27.8327.8827.93T:isapa128av20
28.4328.4928.59T:schwaemm128128v2
39.2639.3339.36T:tinyjambu128v2
41.3941.4241.46T:tinyjambu192v2
41.8241.8541.86T:tinyjambu256v2
41.9942.0642.13T:giftcofb128v1
42.5042.6042.86romulust
46.2946.5446.71T:isapk128av20
58.3058.5458.69T:isapk128v20
78.1078.2878.99T:elephant200v2
108.76109.41109.48T:isapxv20
3605.583609.683609.84T:elephant176v2
4251.164253.874259.87T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.051.061.06T:aes128gcmv1
1.221.231.24T:aes256gcmv1
1.441.451.46aes256gcmv1
7.417.437.44ascon128av12
10.6910.7110.72ascon80pqv12
10.7610.7810.79ascon128v12
13.4713.4913.50T:xoodyakround3
14.4514.5914.62ascon128abi32v12
20.8120.8320.85T:schwaemm256128v2
21.6221.6521.68ascon128bi32v12
25.2325.2425.54T:schwaemm256256v2
26.1926.2026.21T:grain128aeadv2
26.7326.7626.79T:schwaemm192192v2
29.0029.0329.07T:schwaemm128128v2
31.8531.8631.89romulusn
38.6938.7538.78T:isapa128av20
42.2942.3142.32T:giftcofb128v1
43.9143.9343.94romulusm
45.5045.5445.59T:isapa128v20
50.5650.5950.61T:tinyjambu128v2
57.5757.6457.70T:tinyjambu192v2
62.4162.4162.43T:tinyjambu256v2
66.0366.1566.31T:isapk128av20
84.8184.8885.11romulust
117.50117.63117.78T:elephant200v2
131.38131.45131.63T:isapk128v20
239.49239.58239.87T:isapxv20
5495.975500.895501.34T:elephant176v2
6471.016471.646472.90T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.041.041.05T:aes128gcmv1
1.211.211.23T:aes256gcmv1
1.501.511.52aes256gcmv1
7.257.277.31ascon128av12
10.7010.7210.76ascon80pqv12
10.7610.7710.79ascon128v12
13.3713.3813.42T:xoodyakround3
14.5114.5514.59ascon128abi32v12
20.8320.8420.86T:schwaemm256128v2
21.6821.7221.74ascon128bi32v12
25.2325.2625.60T:schwaemm256256v2
26.6726.6826.78T:grain128aeadv2
26.7826.8126.83T:schwaemm192192v2
29.0029.0329.11T:schwaemm128128v2
31.8331.8531.88romulusn
38.6938.7238.75T:isapa128av20
42.4242.4542.47T:giftcofb128v1
44.0644.0744.10romulusm
45.4445.5145.57T:isapa128v20
50.6350.6550.68T:tinyjambu128v2
57.6957.7057.72T:tinyjambu192v2
62.5362.5462.57T:tinyjambu256v2
66.1066.2166.32T:isapk128av20
84.8184.8585.14romulust
117.49117.61117.69T:elephant200v2
131.42131.57131.76T:isapk128v20
240.09240.21240.52T:isapxv20
5496.095500.875501.31T:elephant176v2
6471.416471.886472.51T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.041.041.06T:aes128gcmv1
1.201.211.21T:aes256gcmv1
1.501.511.52aes256gcmv1
7.277.287.29ascon128av12
10.6910.7210.76ascon80pqv12
10.7610.7710.80ascon128v12
13.3613.3813.41T:xoodyakround3
14.4914.5214.54ascon128abi32v12
20.8420.8420.86T:schwaemm256128v2
21.7121.7321.74ascon128bi32v12
25.2225.2325.59T:schwaemm256256v2
26.6826.6826.77T:grain128aeadv2
26.7926.8226.86T:schwaemm192192v2
27.8827.9628.01T:isapa128v20
29.0029.0229.07T:schwaemm128128v2
29.8129.8329.86T:isapa128av20
31.8431.8531.86romulusn
42.3842.4342.46T:giftcofb128v1
43.7743.8144.00romulust
44.0344.0444.06romulusm
50.6450.6650.67T:tinyjambu128v2
51.1951.2951.48T:isapk128av20
57.6757.6957.77T:tinyjambu192v2
62.5462.5662.57T:tinyjambu256v2
86.8586.9687.10T:isapk128v20
117.54117.65117.80T:elephant200v2
157.06157.07157.17T:isapxv20
5495.955500.945501.36T:elephant176v2
6471.306473.346473.68T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
8.098.128.15aes256gcmv1
11.3411.4411.70ascon128av12
13.6913.7313.87T:aes128gcmv1
14.4014.4814.66ascon80pqv12
14.4414.5814.87ascon128v12
14.5314.6714.87T:aes256gcmv1
19.6319.9820.21T:xoodyakround3
22.0022.0722.41ascon128abi32v12
29.2129.2729.38ascon128bi32v12
33.7033.9834.11T:schwaemm256128v2
35.9136.0036.16T:grain128aeadv2
37.3437.4937.82T:schwaemm128128v2
39.2939.4539.55romulusn
40.4040.4940.59T:schwaemm256256v2
43.1743.4143.67T:schwaemm192192v2
51.6951.9152.38romulusm
52.0352.1952.42T:giftcofb128v1
59.5759.7260.15T:tinyjambu128v2
67.8668.0968.17T:tinyjambu192v2
73.1773.3173.48T:tinyjambu256v2
113.38113.85114.40romulust
121.40121.59121.95T:isapa128av20
167.87169.13170.63T:elephant200v2
222.30223.72224.91T:isapk128av20
374.62375.91378.25T:isapa128v20
1391.241393.231397.77T:isapk128v20
2363.482366.602368.64T:isapxv20
6848.736851.836852.62T:elephant176v2
8668.288673.388678.59T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
7.707.727.76aes256gcmv1
11.2011.3011.65ascon128av12
13.7013.7313.79T:aes128gcmv1
14.5414.6014.78T:aes256gcmv1
14.4114.6714.88ascon80pqv12
14.5914.7314.87ascon128v12
19.3419.8420.34T:xoodyakround3
22.1422.1822.37ascon128abi32v12
29.4829.5429.77ascon128bi32v12
33.6033.6733.95T:schwaemm256128v2
36.3236.3836.49T:grain128aeadv2
37.0837.2437.45T:schwaemm128128v2
39.3039.4439.66romulusn
40.4240.4940.55T:schwaemm256256v2
43.1243.2143.43T:schwaemm192192v2
52.2352.5452.75T:giftcofb128v1
53.9454.0854.55romulusm
59.7259.9560.02T:tinyjambu128v2
67.8667.9868.09T:tinyjambu192v2
73.2373.4573.52T:tinyjambu256v2
113.33113.53114.09romulust
121.78122.02122.61T:isapa128av20
167.31168.16168.92T:elephant200v2
223.48223.75227.20T:isapk128av20
374.07376.06378.16T:isapa128v20
1392.911393.661394.62T:isapk128v20
2359.502361.092377.41T:isapxv20
6849.096851.596852.10T:elephant176v2
8663.278665.868669.71T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
7.637.697.76aes256gcmv1
11.1611.2611.44ascon128av12
13.7313.7813.84T:aes128gcmv1
14.5014.6114.66T:aes256gcmv1
14.6214.6814.78ascon128v12
14.5714.7714.82ascon80pqv12
19.5319.7119.91T:xoodyakround3
22.1522.2022.31ascon128abi32v12
29.4229.4729.66ascon128bi32v12
33.4833.5633.62T:schwaemm256128v2
36.3236.3536.44T:grain128aeadv2
37.0937.3937.56T:schwaemm128128v2
39.3139.3839.49romulusn
40.4040.4240.45T:schwaemm256256v2
43.1043.2043.30T:schwaemm192192v2
52.3252.5552.62T:giftcofb128v1
53.9554.0754.23romulusm
59.5259.7260.02T:tinyjambu128v2
67.7867.8067.97T:tinyjambu192v2
71.4371.7372.13romulust
73.2073.2373.28T:tinyjambu256v2
75.1675.3075.45T:isapa128av20
143.09143.47144.61T:isapk128av20
167.23168.04168.97T:elephant200v2
194.70194.98197.15T:isapa128v20
733.24734.37737.66T:isapk128v20
1235.081235.471244.05T:isapxv20
6844.736851.346852.08T:elephant176v2
8667.278672.608676.49T:elephant160v2