VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Core 2 65nm (6fb); 2007 Intel Core 2 Duo T7300; 2 x 2000MHz; trident, supercop-20250307

[Page version: 20250506 12:43:01]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
10.5710.6110.65ascon128av12
15.3115.3215.32ascon80pqv12
15.3515.3615.36ascon128v12
19.9219.9319.93ascon128abi32v12
29.0429.0529.05ascon128bi32v12
30.8630.9230.96T:aes128gcmv1
31.4631.4631.46T:xoodyakround3
34.0734.1734.28T:schwaemm256128v2
39.9740.0240.06T:aes256gcmv1
44.3444.4244.89T:schwaemm256256v2
45.3345.4245.55T:schwaemm192192v2
47.5148.1148.50T:schwaemm128128v2
53.6753.7153.76T:giftcofb128v1
62.5562.6062.69T:grain128aeadv2
63.3663.4863.93T:isapa128av20
66.4566.6667.15T:isapa128v20
73.9974.1674.52romulusn
78.9179.0279.14T:tinyjambu128v2
94.3894.4794.57T:tinyjambu192v2
102.44102.59102.67T:tinyjambu256v2
119.62120.08120.15romulusm
229.95230.21230.67T!!!romulust
237.49237.57238.32T:isapk128av20
253.44254.04254.39T:elephant200v2
326.87327.65328.26T:isapk128v20
342.30371.51372.42T:isapxv20
12973.1412996.9713080.72T:elephant176v2
14736.8014760.4114770.20T:elephant160v2
33395.2233396.1733397.37aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
10.2710.3010.38ascon128av12
15.2615.2715.29ascon128v12
15.2415.2715.27ascon80pqv12
20.6220.6320.63ascon128abi32v12
29.3429.3529.35ascon128bi32v12
31.1031.1231.16T:aes128gcmv1
31.1331.1631.19T:xoodyakround3
34.0934.1734.24T:schwaemm256128v2
39.9039.9640.02T:aes256gcmv1
44.1644.8645.47T:schwaemm256256v2
44.9145.0645.26T:schwaemm192192v2
47.3947.6847.71T:schwaemm128128v2
53.5053.5353.65T:giftcofb128v1
61.9661.9962.52T:grain128aeadv2
63.4263.5463.71T:isapa128av20
66.6766.9168.14T:isapa128v20
73.5973.9374.24romulusn
78.7678.8178.87T:tinyjambu128v2
94.4494.5594.84T:tinyjambu192v2
102.68102.83103.14T:tinyjambu256v2
119.52119.83120.16romulusm
229.89230.07230.30T!!!romulust
237.54237.65238.08T:isapk128av20
253.39253.90254.24T:elephant200v2
327.26327.98328.26T:isapk128v20
341.80371.84372.40T:isapxv20
12972.7712996.2913080.83T:elephant176v2
14735.0214761.5114767.82T:elephant160v2
33394.0933400.0433400.77aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
10.2710.3010.31ascon128av12
15.2115.2315.23ascon80pqv12
15.2715.2715.29ascon128v12
20.6420.6420.64ascon128abi32v12
29.3429.3429.34ascon128bi32v12
31.0631.1231.16T:aes128gcmv1
31.1531.2331.25T:xoodyakround3
33.3033.7133.72T:isapa128v20
34.0934.1434.18T:schwaemm256128v2
39.8639.9440.03T:aes256gcmv1
41.5841.6041.70T:isapa128av20
44.0344.9445.80T:schwaemm256256v2
44.9445.0845.14T:schwaemm192192v2
47.6047.7148.38T:schwaemm128128v2
53.4853.5153.65T:giftcofb128v1
61.8162.0162.34T:grain128aeadv2
73.5973.9474.24romulusn
78.7778.8178.84T:tinyjambu128v2
78.9279.2079.44T!!!romulust
94.4794.5294.73T:tinyjambu192v2
102.67102.78102.85T:tinyjambu256v2
119.72120.01120.42romulusm
162.21162.23162.67T:isapk128av20
201.82202.56203.02T:isapk128v20
206.20225.04225.42T:isapxv20
253.33253.93254.29T:elephant200v2
860.42868.73869.04aes256gcmv1
12974.6512996.4313080.86T:elephant176v2
14736.3714765.0514772.61T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
10.3210.3610.38ascon128av12
15.1115.1315.13ascon128v12
15.1415.1615.16ascon80pqv12
19.4719.4919.51T:aes128gcmv1
19.6619.6819.72ascon128abi32v12
23.4823.5023.50T:xoodyakround3
24.0224.0624.09T:aes256gcmv1
29.1329.1429.15ascon128bi32v12
34.0634.1234.17T:schwaemm256128v2
44.2544.5244.62T:schwaemm256256v2
45.2445.3245.40T:schwaemm192192v2
47.4447.5047.59T:schwaemm128128v2
50.0050.0450.56T:isapa128v20
52.5252.6952.81T:isapa128av20
53.1553.2453.46T:giftcofb128v1
59.5259.8960.53romulusn
61.8261.8761.98T:grain128aeadv2
64.7164.7564.84T:tinyjambu128v2
74.3874.4474.50T:tinyjambu192v2
77.9878.0578.06T:tinyjambu256v2
82.4582.5482.65romulusm
154.21154.57154.81T!!!romulust
184.61185.89190.92T:elephant200v2
202.76202.94203.19T:isapk128av20
267.06267.91268.18T:isapk128v20
274.36298.85299.28T:isapxv20
9690.699705.769785.62T:elephant176v2
11073.3211091.2211101.52T:elephant160v2
17128.2217128.6817129.12aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
10.2110.2210.24ascon128av12
15.0715.0915.30ascon80pqv12
15.2215.2315.23ascon128v12
19.5819.5919.61T:aes128gcmv1
20.0520.0520.05ascon128abi32v12
23.2923.3423.35T:xoodyakround3
23.9824.0224.06T:aes256gcmv1
29.0229.0329.14ascon128bi32v12
34.0634.1034.15T:schwaemm256128v2
44.3444.4744.56T:schwaemm256256v2
45.0245.1845.28T:schwaemm192192v2
47.3047.4947.56T:schwaemm128128v2
50.1450.2850.62T:isapa128v20
52.5652.6052.67T:isapa128av20
53.1353.2953.41T:giftcofb128v1
59.4259.5460.57romulusn
61.4261.4761.69T:grain128aeadv2
64.6064.6364.78T:tinyjambu128v2
74.1274.3074.35T:tinyjambu192v2
78.0278.0778.24T:tinyjambu256v2
82.6282.6783.14romulusm
154.27154.40154.55T!!!romulust
184.66185.78190.97T:elephant200v2
202.81203.04203.14T:isapk128av20
267.70267.92268.34T:isapk128v20
274.45299.06299.27T:isapxv20
9689.709705.919771.48T:elephant176v2
11056.2611076.5911099.48T:elephant160v2
17127.8417134.7217135.36aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
10.2210.2310.25ascon128av12
15.0915.0915.09ascon80pqv12
15.2315.2315.23ascon128v12
19.5419.5919.66T:aes128gcmv1
20.0320.0320.03ascon128abi32v12
23.3623.3723.38T:xoodyakround3
23.9524.0224.04T:aes256gcmv1
29.0229.0329.03ascon128bi32v12
33.5633.7133.80T:isapa128v20
34.1034.1134.14T:schwaemm256128v2
41.6541.7941.93T:isapa128av20
44.3244.4444.63T:schwaemm256256v2
45.0345.2045.39T:schwaemm192192v2
47.3847.5547.63T:schwaemm128128v2
53.1253.1553.40T:giftcofb128v1
59.4659.5260.55romulusn
61.4361.4861.55T:grain128aeadv2
64.6164.6264.67T:tinyjambu128v2
74.1574.2474.31T:tinyjambu192v2
77.9878.0378.12T:tinyjambu256v2
79.0479.0979.12T!!!romulust
82.6182.6582.72romulusm
165.13165.17165.49T:isapk128av20
184.59185.91190.96T:elephant200v2
204.96205.32205.85T:isapk128v20
206.53225.65226.02T:isapxv20
861.05868.80869.37aes256gcmv1
9689.949706.009772.22T:elephant176v2
11055.3111077.8811099.50T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
8.058.078.12T:aes128gcmv1
8.028.098.13T:aes256gcmv1
10.0610.0710.14ascon128av12
15.0115.0215.02ascon80pqv12
15.0115.0215.02ascon128v12
15.5215.5315.55T:xoodyakround3
19.4219.4519.45ascon128abi32v12
29.2329.2629.26ascon128bi32v12
33.6333.6533.66T:isapa128v20
33.9734.0134.07T:schwaemm256128v2
41.7741.8041.83T:isapa128av20
44.1344.5844.76T:schwaemm256256v2
44.9444.9845.02T:schwaemm192192v2
45.2445.3845.50romulusm
45.1145.4346.91romulusn
46.9947.3947.52T:schwaemm128128v2
50.4450.4750.47T:tinyjambu128v2
52.7352.7653.18T:giftcofb128v1
53.3453.3553.40T:tinyjambu256v2
54.3554.3754.37T:tinyjambu192v2
61.2261.3361.52T:grain128aeadv2
78.5178.6178.76T!!!romulust
128.34128.84128.94T:elephant200v2
168.00168.04168.46T:isapk128av20
207.67208.07208.70T:isapk128v20
207.23226.25226.78T:isapxv20
861.65862.12864.16aes256gcmv1
6406.296420.546462.12T:elephant176v2
7372.837397.437399.18T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
8.058.078.09T:aes256gcmv1
8.068.098.13T:aes128gcmv1
10.0510.0810.12ascon128av12
15.0415.0515.05ascon80pqv12
15.0715.0815.08ascon128v12
15.4815.5115.54T:xoodyakround3
19.4719.4819.48ascon128abi32v12
28.8928.9028.90ascon128bi32v12
33.4933.5133.76T:isapa128v20
33.9934.0534.16T:schwaemm256128v2
41.7741.8341.86T:isapa128av20
44.1344.2644.38T:schwaemm256256v2
44.9644.9945.05T:schwaemm192192v2
45.2745.4545.80romulusm
45.1445.4946.91romulusn
47.3147.3947.43T:schwaemm128128v2
50.4450.4550.48T:tinyjambu128v2
52.6952.7453.16T:giftcofb128v1
53.3753.3753.40T:tinyjambu256v2
53.8853.9354.00T:tinyjambu192v2
60.6660.9061.79T:grain128aeadv2
78.4678.5878.69T!!!romulust
128.37128.90129.04T:elephant200v2
168.01168.11168.96T:isapk128av20
207.53208.02209.16T:isapk128v20
207.22226.25226.75T:isapxv20
864.32869.33869.59aes256gcmv1
6406.586420.296462.38T:elephant176v2
7374.517387.297399.00T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
7.998.078.14T:aes256gcmv1
8.028.118.13T:aes128gcmv1
10.0810.1210.12ascon128av12
15.0515.0515.05ascon80pqv12
15.0815.0815.08ascon128v12
15.5115.5115.51T:xoodyakround3
19.4519.4519.45ascon128abi32v12
28.8828.9128.92ascon128bi32v12
33.4933.5133.88T:isapa128v20
34.0034.0534.12T:schwaemm256128v2
41.7841.8341.86T:isapa128av20
44.2144.3645.10T:schwaemm256256v2
44.9444.9845.04T:schwaemm192192v2
45.2645.3545.80romulusm
45.1445.5146.91romulusn
47.2747.3847.40T:schwaemm128128v2
50.4650.4850.49T:tinyjambu128v2
52.7152.7953.17T:giftcofb128v1
53.3753.3753.37T:tinyjambu256v2
53.9253.9353.98T:tinyjambu192v2
60.6760.7561.79T:grain128aeadv2
78.4978.5678.61T!!!romulust
128.32128.52128.95T:elephant200v2
168.04168.10168.33T:isapk128av20
207.57208.05209.15T:isapk128v20
207.21225.94226.63T:isapxv20
864.55869.33869.39aes256gcmv1
6407.566419.846462.32T:elephant176v2
7375.717398.437400.36T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
10.5010.6010.62ascon128av12
15.3415.3415.34ascon128v12
15.3915.3915.39ascon80pqv12
20.1320.1320.18ascon128abi32v12
20.5520.5820.58T:aes128gcmv1
23.7423.7524.04T:xoodyakround3
25.2325.2425.26T:aes256gcmv1
29.6129.6129.62ascon128bi32v12
35.1835.2035.22T:schwaemm256128v2
45.5345.7246.15T:schwaemm256256v2
46.2346.3146.37T:schwaemm192192v2
47.9748.1648.26T:schwaemm128128v2
53.7253.8253.92T:giftcofb128v1
56.6756.7556.93T:isapa128av20
60.1960.3561.02romulusn
62.2862.3662.45T:grain128aeadv2
65.2465.2465.38T:tinyjambu128v2
73.4273.6873.69T:isapa128v20
74.9474.9975.03T:tinyjambu192v2
78.5578.6378.65T:tinyjambu256v2
83.0883.2283.42romulusm
156.65156.79157.07T!!!romulust
188.77190.33194.94T:elephant200v2
227.97227.99228.50T:isapk128av20
450.10450.29450.82T:isapk128v20
475.75483.31483.63T:isapxv20
9768.299780.699839.85T:elephant176v2
11182.6711220.2911222.91T:elephant160v2
17472.1817472.5117473.69aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
10.4610.4610.47ascon128av12
15.3215.3215.32ascon80pqv12
15.4515.4515.45ascon128v12
20.4820.4820.48ascon128abi32v12
20.6420.6520.97T:aes128gcmv1
23.5723.6123.62T:xoodyakround3
25.1625.1825.19T:aes256gcmv1
29.8429.8429.84ascon128bi32v12
35.1735.1835.22T:schwaemm256128v2
45.6445.8446.04T:schwaemm256256v2
46.0746.1046.16T:schwaemm192192v2
47.8248.1848.23T:schwaemm128128v2
53.6953.7753.82T:giftcofb128v1
56.6356.6556.86T:isapa128av20
60.0360.1261.06romulusn
61.8961.9462.15T:grain128aeadv2
65.1265.1565.16T:tinyjambu128v2
73.5073.6273.76T:isapa128v20
74.7674.8374.88T:tinyjambu192v2
78.7178.7678.84T:tinyjambu256v2
83.3083.3683.49romulusm
156.67156.72156.87T!!!romulust
188.74190.62195.00T:elephant200v2
228.04228.13228.40T:isapk128av20
450.45450.65451.00T:isapk128v20
475.86483.38483.64T:isapxv20
9768.489780.509839.75T:elephant176v2
11181.6711219.8111223.12T:elephant160v2
17471.1917478.1817478.42aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
10.4310.4610.47ascon128av12
15.3215.3215.32ascon80pqv12
15.4515.4515.45ascon128v12
20.4720.4720.47ascon128abi32v12
20.6420.6420.66T:aes128gcmv1
23.6223.6523.67T:xoodyakround3
25.1625.1725.18T:aes256gcmv1
29.5229.5329.53ascon128bi32v12
35.1835.1935.23T:schwaemm256128v2
43.9243.9243.99T:isapa128av20
45.4245.5445.54T:isapa128v20
45.6645.8546.31T:schwaemm256256v2
46.0646.1646.55T:schwaemm192192v2
47.8848.0448.19T:schwaemm128128v2
53.6953.7353.86T:giftcofb128v1
59.9360.1261.06romulusn
61.8861.9562.00T:grain128aeadv2
65.1365.1565.17T:tinyjambu128v2
74.7674.8174.99T:tinyjambu192v2
78.6278.7678.88T:tinyjambu256v2
81.2681.3281.39T!!!romulust
83.3483.3683.58romulusm
180.72180.75181.06T:isapk128av20
189.11190.44195.00T:elephant200v2
300.07300.14300.74T:isapk128v20
309.55320.18320.42T:isapxv20
1205.061212.301212.38aes256gcmv1
9768.979780.449839.75T:elephant176v2
11180.2811217.2911223.49T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
16.1016.1416.32ascon128av12
20.4320.4320.59ascon128v12
20.5820.5820.58ascon80pqv12
30.2830.2830.68ascon128abi32v12
36.7336.7337.15T:xoodyakround3
39.8839.8840.45ascon128bi32v12
45.0545.2045.84T:aes128gcmv1
52.4752.8453.47T:aes256gcmv1
59.5559.8260.05T:schwaemm256128v2
63.9464.1664.70T:schwaemm128128v2
65.8466.1666.29T:giftcofb128v1
70.7271.1371.71T:grain128aeadv2
72.4472.9473.99romulusn
73.5973.8974.55T:schwaemm256256v2
76.8676.9177.27T:schwaemm192192v2
77.3977.3977.69T:tinyjambu128v2
87.6587.9388.23T:tinyjambu192v2
92.1692.1692.98T:tinyjambu256v2
96.6296.8897.90romulusm
149.77149.77150.04T:isapa128av20
209.79210.56212.22T!!!romulust
275.54276.71276.90T:elephant200v2
610.77613.12613.13T:isapa128v20
766.87766.98773.05T:isapk128av20
4593.094594.524610.52T:isapk128v20
4664.184670.335058.16T:isapxv20
12176.3112190.6612246.52T:elephant176v2
14983.5115031.2715037.37T:elephant160v2
25370.2725370.4425371.05aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
15.9816.1016.43ascon128av12
20.4520.4521.01ascon128v12
20.5320.5320.95ascon80pqv12
30.7130.7131.23ascon128abi32v12
35.7435.7436.35T:xoodyakround3
40.3340.3340.70ascon128bi32v12
44.6144.9145.28T:aes128gcmv1
52.0052.1052.98T:aes256gcmv1
59.3859.4959.76T:schwaemm256128v2
63.6363.8664.51T:schwaemm128128v2
65.7366.1866.31T:giftcofb128v1
70.5370.7770.86T:grain128aeadv2
72.7973.4774.29romulusn
74.2474.5874.80T:schwaemm256256v2
77.1777.1777.58T:tinyjambu128v2
77.4977.8879.16T:schwaemm192192v2
88.1688.1789.64T:tinyjambu192v2
92.9892.9892.98T:tinyjambu256v2
99.4799.99100.09romulusm
150.16150.24150.31T:isapa128av20
211.09211.17211.23T!!!romulust
275.50275.77277.41T:elephant200v2
606.92609.85612.91T:isapa128v20
767.33767.33767.92T:isapk128av20
4593.184594.644602.73T:isapk128v20
4664.054669.485059.30T:isapxv20
12174.4112191.3812246.46T:elephant176v2
14977.3115028.6015033.49T:elephant160v2
25370.9625376.9225377.90aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
15.9816.0116.14ascon128av12
20.4520.4520.45ascon128v12
20.5320.5320.53ascon80pqv12
30.7330.7330.73ascon128abi32v12
36.2636.2736.27T:xoodyakround3
40.4140.4140.46ascon128bi32v12
44.6444.8945.30T:aes128gcmv1
52.0852.1252.95T:aes256gcmv1
59.3559.4559.71T:schwaemm256128v2
63.6463.8364.45T:schwaemm128128v2
65.8466.2766.73T:giftcofb128v1
70.5370.5370.77T:grain128aeadv2
72.7373.1874.24romulusn
74.1674.2574.61T:schwaemm256256v2
77.1777.1777.17T:tinyjambu128v2
77.5277.7678.82T:schwaemm192192v2
88.1788.1888.51T:tinyjambu192v2
92.9892.9892.98T:tinyjambu256v2
96.2696.2696.45T:isapa128av20
99.3099.67100.09romulusm
132.86133.01133.16T!!!romulust
275.54275.91277.10T:elephant200v2
314.40314.40317.37T:isapa128v20
506.56506.57506.65T:isapk128av20
2441.412442.022442.77T:isapk128v20
2449.722450.452635.98T:isapxv20
9109.059109.309115.11aes256gcmv1
12178.7112188.1912246.55T:elephant176v2
14988.5115030.6215038.93T:elephant160v2