VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Zen 5 (b00f21); 2024 AMD EPYC 9555; 64 x 3200MHz; tripwire, supercop-20261004

[Page version: 20261013 16:31:00]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.24?0.27?0.29?T:aes128gcmv1
1.241.271.29aes256gcmv1
4.804.814.82ascon128av12
6.987.007.01ascon80pqv12
7.027.047.06ascon128v12
10.5710.5910.62ascon128abi32v12
14.1214.1514.18T:schwaemm256128v2
15.2315.2615.28ascon128bi32v12
19.0019.0419.08T:schwaemm192192v2
20.2820.3120.35T:grain128aeadv2
20.7520.7920.83T:schwaemm256256v2
22.0522.1222.31T:schwaemm128128v2
24.9925.0625.16T:isapa128av20
27.1027.1427.18T:isapa128v20
36.7436.7536.76T:giftcofb128v1
36.8537.0137.12T:romulusn
48.3948.7149.14T:isapk128av20
52.9552.9953.00T:tinyjambu128v2
54.1954.2854.30T:xoodyakround3
64.0664.3564.61romulusn
65.2465.2665.30T:tinyjambu192v2
66.5166.5966.66T:isapk128v20
73.4973.5073.51T:tinyjambu256v2
97.5897.8698.16romulusm
178.24178.33178.43T:elephant200v2
197.36197.50197.91romulust
343.17357.62372.11T:isapxv20
5197.555198.395199.20T:elephant176v2
5474.495475.225476.08T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.23?0.26?0.28?T:aes128gcmv1
1.151.161.16aes256gcmv1
4.684.694.71ascon128av12
6.976.997.00ascon80pqv12
6.976.997.00ascon128v12
10.6410.6810.71ascon128abi32v12
14.1014.1314.16T:schwaemm256128v2
15.2715.3115.34ascon128bi32v12
18.9919.0419.12T:schwaemm192192v2
20.4120.4520.50T:isapa128av20
20.4320.4720.50T:grain128aeadv2
20.7420.7620.78T:schwaemm256256v2
21.9922.0822.33T:schwaemm128128v2
27.0727.1527.21T:isapa128v20
36.7336.7536.76T:giftcofb128v1
37.1337.2537.56T:romulusn
48.4848.7049.05T:isapk128av20
52.9452.9853.02T:tinyjambu128v2
54.1054.1354.15T:xoodyakround3
63.9964.3064.59romulusn
65.2465.2665.31T:tinyjambu192v2
66.3866.5666.73T:isapk128v20
73.5073.5073.50T:tinyjambu256v2
97.6998.0798.11romulusm
178.25178.33178.41T:elephant200v2
197.49197.64198.00romulust
354.48356.56375.99T:isapxv20
5197.655198.505199.77T:elephant176v2
5474.355475.055475.75T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.25?0.27?0.28?T:aes128gcmv1
1.161.161.18aes256gcmv1
4.684.704.71ascon128av12
6.976.997.00ascon80pqv12
6.976.997.00ascon128v12
10.6410.6710.70ascon128abi32v12
13.5313.5713.61T:isapa128v20
13.5813.6213.65T:isapa128av20
14.0914.1314.17T:schwaemm256128v2
15.2915.3215.34ascon128bi32v12
18.9819.0219.06T:schwaemm192192v2
20.3420.3920.44T:grain128aeadv2
20.7420.7620.78T:schwaemm256256v2
21.9822.0622.34T:schwaemm128128v2
32.3632.4232.48T:isapk128av20
36.7436.7536.76T:giftcofb128v1
37.0637.2237.55T:romulusn
41.2741.3341.39T:isapk128v20
52.9753.0153.03T:tinyjambu128v2
54.0954.1454.19T:xoodyakround3
64.0064.3264.60romulusn
65.2265.2565.28T:tinyjambu192v2
65.6365.6965.75romulust
73.4973.5073.51T:tinyjambu256v2
97.6798.0398.07romulusm
178.27178.36178.45T:elephant200v2
217.44219.46239.03T:isapxv20
5197.645198.435199.25T:elephant176v2
5474.645475.205476.03T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.240.250.26T:aes128gcmv1
0.840.850.86aes256gcmv1
4.704.724.74ascon128av12
6.997.007.01ascon80pqv12
7.007.017.02ascon128v12
10.3910.4110.44ascon128abi32v12
14.2314.2814.47T:schwaemm256128v2
15.2615.2815.31ascon128bi32v12
18.9218.9418.97T:schwaemm192192v2
19.2719.3119.35T:isapa128av20
20.2920.3220.34T:grain128aeadv2
20.3420.3720.40T:isapa128v20
20.6620.6820.69T:schwaemm256256v2
21.9722.0222.09T:schwaemm128128v2
33.5533.6133.71T:romulusn
36.7636.7636.77T:giftcofb128v1
40.3940.5640.73T:isapk128av20
41.7841.7941.80T:xoodyakround3
43.1143.1343.14T:tinyjambu128v2
48.8248.9649.07romulusn
50.8650.8750.88T:tinyjambu192v2
53.8453.9053.97T:isapk128v20
55.2455.2555.26T:tinyjambu256v2
65.5565.7265.87romulusm
131.48131.65131.81romulust
134.13134.19134.27T:elephant200v2
282.18289.83297.13T:isapxv20
3882.933883.473884.01T:elephant176v2
4106.364107.124107.67T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.21?0.23?0.24?T:aes128gcmv1
0.800.800.80aes256gcmv1
4.684.694.70ascon128av12
6.966.976.98ascon128v12
6.966.976.98ascon80pqv12
10.3510.3810.40ascon128abi32v12
14.2314.2614.33T:schwaemm256128v2
15.2615.2815.30ascon128bi32v12
16.9917.0117.04T:isapa128av20
18.9218.9518.99T:schwaemm192192v2
20.3320.3620.39T:isapa128v20
20.3420.3720.39T:grain128aeadv2
20.6420.6620.68T:schwaemm256256v2
21.9522.0122.06T:schwaemm128128v2
33.6233.6633.75T:romulusn
36.7636.7736.78T:giftcofb128v1
40.4240.5540.73T:isapk128av20
41.7841.8041.81T:xoodyakround3
43.1143.1243.14T:tinyjambu128v2
48.7948.9549.08romulusn
50.8750.8750.88T:tinyjambu192v2
53.8053.9153.97T:isapk128v20
55.2455.2555.26T:tinyjambu256v2
65.5665.6265.83romulusm
131.62131.80131.95romulust
134.12134.17134.22T:elephant200v2
286.72288.53307.66T:isapxv20
3883.433884.103884.62T:elephant176v2
4106.974107.554108.10T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.220.230.24T:aes128gcmv1
0.800.810.82aes256gcmv1
4.684.694.70ascon128av12
6.966.976.98ascon128v12
6.976.986.98ascon80pqv12
10.3510.3710.39ascon128abi32v12
13.5513.5713.59T:isapa128v20
13.5913.6113.63T:isapa128av20
14.2214.2514.31T:schwaemm256128v2
15.2615.2815.30ascon128bi32v12
18.9218.9418.98T:schwaemm192192v2
20.3420.3720.39T:grain128aeadv2
20.6520.6620.68T:schwaemm256256v2
21.9421.9922.04T:schwaemm128128v2
32.3732.4032.42T:isapk128av20
33.6333.6733.74T:romulusn
36.7636.7736.77T:giftcofb128v1
41.2441.2841.32T:isapk128v20
41.7741.8041.83T:xoodyakround3
43.1143.1243.14T:tinyjambu128v2
48.7948.9449.08romulusn
50.8750.8750.88T:tinyjambu192v2
55.1955.2555.26T:tinyjambu256v2
65.5565.5965.63romulusm
65.6465.6765.71romulust
134.11134.16134.20T:elephant200v2
218.27220.21239.33T:isapxv20
3882.943883.593884.26T:elephant176v2
4107.014107.754110.67T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.17?0.20?0.23?T:aes128gcmv1
0.420.420.43aes256gcmv1
4.614.634.64ascon128av12
6.946.966.97ascon80pqv12
6.977.007.01ascon128v12
10.1910.2110.22ascon128abi32v12
13.4713.4913.52T:isapa128av20
13.5413.5813.61T:isapa128v20
14.3214.3414.39T:schwaemm256128v2
15.2615.2915.33ascon128bi32v12
18.8818.9319.09T:schwaemm192192v2
20.2820.3120.36T:grain128aeadv2
20.5920.6220.64T:schwaemm256256v2
21.9021.9722.04T:schwaemm128128v2
29.4429.4529.46T:xoodyakround3
30.0830.1530.49T:romulusn
32.3232.3932.44T:isapk128av20
33.2333.2533.27T:tinyjambu128v2
33.5333.5533.58romulusn
33.5333.5633.60romulusm
36.4836.5036.51T:tinyjambu192v2
36.7736.7836.79T:giftcofb128v1
36.9937.0037.01T:tinyjambu256v2
41.2441.3041.36T:isapk128v20
65.5165.5565.59romulust
90.0790.1290.18T:elephant200v2
220.53221.80222.44T:isapxv20
2569.012569.462569.91T:elephant176v2
2737.532738.542739.24T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.18?0.21?0.24?T:aes128gcmv1
0.420.430.44aes256gcmv1
4.684.704.72ascon128av12
6.966.976.99ascon128v12
6.966.987.00ascon80pqv12
10.0510.0710.09ascon128abi32v12
13.5013.5513.60T:isapa128v20
13.5613.6013.63T:isapa128av20
14.3114.3514.39T:schwaemm256128v2
15.2115.2415.27ascon128bi32v12
18.8818.9519.49T:schwaemm192192v2
20.2820.3320.38T:grain128aeadv2
20.6120.6620.70T:schwaemm256256v2
21.8821.9622.00T:schwaemm128128v2
29.4329.4529.47T:xoodyakround3
30.1130.1730.35T:romulusn
32.3132.3732.44T:isapk128av20
33.2233.2633.28T:tinyjambu128v2
33.5233.5533.60romulusn
33.5633.5833.61romulusm
36.4836.5036.52T:tinyjambu192v2
36.7636.7836.79T:giftcofb128v1
36.8937.0037.01T:tinyjambu256v2
41.2141.2941.34T:isapk128v20
65.6465.7165.75romulust
90.0090.0590.11T:elephant200v2
218.46220.59240.17T:isapxv20
2569.282569.742570.37T:elephant176v2
2737.952738.632739.23T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.20?0.22?0.24?T:aes128gcmv1
0.420.430.44aes256gcmv1
4.694.704.72ascon128av12
6.956.976.98ascon128v12
6.976.987.00ascon80pqv12
10.0410.0710.10ascon128abi32v12
13.5313.5713.60T:isapa128v20
13.5413.6013.64T:isapa128av20
14.3114.3414.38T:schwaemm256128v2
15.2115.2415.28ascon128bi32v12
18.9719.4819.63T:schwaemm192192v2
20.2920.3420.37T:grain128aeadv2
20.6220.6620.73T:schwaemm256256v2
21.9021.9522.04T:schwaemm128128v2
29.4029.4629.50T:xoodyakround3
30.1030.1930.37T:romulusn
32.3232.3832.44T:isapk128av20
33.2233.2533.28T:tinyjambu128v2
33.5133.5533.57romulusm
33.5333.5633.60romulusn
36.4936.5036.51T:tinyjambu192v2
36.7736.7836.78T:giftcofb128v1
36.9837.0037.02T:tinyjambu256v2
41.2541.3141.35T:isapk128v20
65.6365.6865.73romulust
90.0190.0590.10T:elephant200v2
218.18220.72240.32T:isapxv20
2569.102569.732570.30T:elephant176v2
2737.982738.802740.29T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.880.890.89T:aes128gcmv1
0.950.950.96aes256gcmv1
4.834.854.86ascon128av12
7.107.117.12ascon80pqv12
7.117.127.13ascon128v12
10.6710.6810.70ascon128abi32v12
14.6814.7014.72T:schwaemm256128v2
15.5215.5315.55ascon128bi32v12
19.3919.4119.43T:schwaemm192192v2
20.4720.5020.54T:isapa128av20
20.5720.5920.61T:grain128aeadv2
21.3221.3321.35T:schwaemm256256v2
22.2622.3122.37T:schwaemm128128v2
29.6929.7229.74T:isapa128v20
33.9234.0934.12T:romulusn
37.0637.0737.08T:giftcofb128v1
42.1342.1542.16T:xoodyakround3
43.5043.5043.51T:tinyjambu128v2
45.0645.1745.35T:isapk128av20
49.3549.4749.59romulusn
51.3751.3751.38T:tinyjambu192v2
55.6755.6855.68T:tinyjambu256v2
66.1866.2866.43romulusm
94.7994.8394.87T:isapk128v20
133.43133.57133.70romulust
136.89136.92136.97T:elephant200v2
491.95492.49501.44T:isapxv20
3913.133913.423913.94T:elephant176v2
4153.304153.754154.29T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.870.880.88aes256gcmv1
0.880.890.90T:aes128gcmv1
4.814.824.83ascon128av12
7.077.087.09ascon128v12
7.097.097.10ascon80pqv12
10.6310.6410.66ascon128abi32v12
14.6814.7014.72T:schwaemm256128v2
15.5015.5215.53ascon128bi32v12
18.2118.2218.24T:isapa128av20
19.3819.4019.42T:schwaemm192192v2
20.6220.6420.66T:grain128aeadv2
21.3121.3221.33T:schwaemm256256v2
22.2722.3022.34T:schwaemm128128v2
29.7029.7229.74T:isapa128v20
33.9534.2234.39T:romulusn
37.0837.0837.09T:giftcofb128v1
42.1542.1642.17T:xoodyakround3
43.5043.5143.52T:tinyjambu128v2
45.1045.2245.35T:isapk128av20
49.3549.4949.61romulusn
51.3851.3851.38T:tinyjambu192v2
55.6755.6755.68T:tinyjambu256v2
66.2366.2466.43romulusm
94.8094.8394.88T:isapk128v20
133.59133.75133.87romulust
136.94136.97137.02T:elephant200v2
492.45493.01510.77T:isapxv20
3913.033913.583913.87T:elephant176v2
4153.624154.064154.48T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.880.880.88aes256gcmv1
0.880.890.90T:aes128gcmv1
4.814.824.83ascon128av12
7.077.087.09ascon128v12
7.097.097.10ascon80pqv12
10.6310.6510.66ascon128abi32v12
14.2914.3014.31T:isapa128av20
14.6814.7014.71T:schwaemm256128v2
15.5115.5215.54ascon128bi32v12
18.3418.3618.37T:isapa128v20
19.3919.4219.45T:schwaemm192192v2
20.6220.6420.66T:grain128aeadv2
21.3121.3221.34T:schwaemm256256v2
22.2622.3022.33T:schwaemm128128v2
33.9834.2634.40T:romulusn
35.1035.1135.13T:isapk128av20
37.0837.0837.08T:giftcofb128v1
42.1642.1842.20T:xoodyakround3
43.5043.5143.52T:tinyjambu128v2
49.3449.4749.60romulusn
51.3751.3851.38T:tinyjambu192v2
55.6855.6955.74T:tinyjambu256v2
62.4462.4862.52T:isapk128v20
66.2366.3766.47romulusm
67.5867.6067.62romulust
136.93136.96137.01T:elephant200v2
324.23324.65342.79T:isapxv20
3912.813913.313913.79T:elephant176v2
4153.514153.944154.31T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
5.865.885.98aes256gcmv1
7.637.938.04ascon128av12
9.429.459.60ascon128v12
9.419.459.52ascon80pqv12
14.7214.9015.11T:aes128gcmv1
16.5316.7316.97ascon128abi32v12
20.9521.1121.26ascon128bi32v12
24.8025.1425.28T:schwaemm256128v2
26.6626.8127.00T:grain128aeadv2
28.9029.1229.29T:schwaemm128128v2
31.7831.9332.16T:schwaemm192192v2
34.9835.0735.19T:schwaemm256256v2
43.9244.0644.10T:giftcofb128v1
44.3044.4244.63T:romulusn
48.0648.3148.57T:isapa128av20
51.6551.8352.13T:tinyjambu128v2
60.6960.7560.82T:xoodyakround3
61.6961.8361.99romulusn
62.8462.9363.10T:tinyjambu192v2
65.1965.2865.41T:tinyjambu256v2
78.9279.2280.99romulusm
142.91143.66144.59T:isapk128av20
177.36177.57177.77romulust
193.29193.54194.01T:elephant200v2
244.29244.53244.91T:isapa128v20
1024.421024.811025.73T:isapk128v20
4872.554873.924876.08T:elephant176v2
5093.475100.465309.78T:isapxv20
5560.775562.285564.52T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
6.406.436.53aes256gcmv1
7.738.018.06ascon128av12
9.419.469.53ascon128v12
9.449.499.56ascon80pqv12
15.0715.1515.39T:aes128gcmv1
16.3416.5516.92ascon128abi32v12
20.7520.8821.02ascon128bi32v12
24.9725.1125.25T:schwaemm256128v2
26.8726.9927.11T:grain128aeadv2
28.7929.0329.37T:schwaemm128128v2
32.0532.2332.48T:schwaemm192192v2
35.1335.2335.36T:schwaemm256256v2
44.2344.3044.44T:giftcofb128v1
44.3744.7845.19T:romulusn
45.6446.0046.33T:isapa128av20
51.9352.2752.60T:tinyjambu128v2
60.8560.9261.05T:xoodyakround3
61.7161.8662.04romulusn
62.9663.0463.17T:tinyjambu192v2
65.2165.4365.53T:tinyjambu256v2
80.6780.9381.37romulusm
143.73144.13144.63T:isapk128av20
177.96178.17178.56romulust
193.54193.83194.02T:elephant200v2
244.37244.76245.12T:isapa128v20
1024.601025.371027.38T:isapk128v20
4872.034873.744875.29T:elephant176v2
5131.305135.165158.57T:isapxv20
5561.245562.855564.64T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
6.406.456.52aes256gcmv1
7.497.527.59ascon128av12
9.419.479.54ascon128v12
9.439.479.54ascon80pqv12
15.1215.2315.41T:aes128gcmv1
16.4416.6816.92ascon128abi32v12
20.7320.8921.02ascon128bi32v12
24.9425.1825.41T:schwaemm256128v2
26.8126.9827.12T:grain128aeadv2
28.9029.1129.31T:schwaemm128128v2
29.8630.0130.26T:isapa128av20
32.1132.3332.46T:schwaemm192192v2
35.1635.2235.30T:schwaemm256256v2
44.1944.2344.28T:giftcofb128v1
44.6144.9945.29T:romulusn
51.8151.9852.19T:tinyjambu128v2
60.8661.1461.60T:xoodyakround3
61.7461.9062.09romulusn
62.8563.0263.03T:tinyjambu192v2
65.3265.3865.73T:tinyjambu256v2
80.8780.9881.24romulusm
90.6391.0691.39T:isapk128av20
111.35111.51112.12romulust
127.84128.04128.38T:isapa128v20
193.53193.74193.93T:elephant200v2
540.60540.84541.27T:isapk128v20
2682.462685.442707.73T:isapxv20
4873.034874.064875.54T:elephant176v2
5561.275562.595564.63T:elephant160v2