VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: armeabi; Cortex-A7 (410fc075); 2016 Broadcom BCM2836; 4 x 900MHz; berry2, supercop-20250415

[Page version: 20250615 19:27:19]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
30.68?31.67?34.29?ascon128abi32v12
39.24?40.68?44.07?ascon128av12
46.37?47.43?82.93?ascon128bi32v12
51.38?52.04?88.49?T:schwaemm256128v2
51.5352.4953.38T:aes128gcmv1
55.85?56.89?91.77?ascon80pqv12
55.86?57.96?93.70?ascon128v12
62.1864.1967.64T:aes256gcmv1
66.1167.0369.43T:schwaemm192192v2
71.1671.7972.70T:schwaemm128128v2
72.6972.8573.30T:schwaemm256256v2
75.8876.7077.05T:giftcofb128v1
136.55137.05137.81T:tinyjambu128v2
138.05140.31144.44T:isapa128av20
148.97149.64151.03T:xoodyakround3
164.08164.79167.34T:tinyjambu192v2
169.45169.77170.46T:tinyjambu256v2
177.48178.10179.24T:romulusn
183.67189.83190.32T:isapa128v20
283.36286.52291.69romulusn
304.10?332.23?340.17?T:isapk128av20
412.02426.19438.20T:isapk128v20
468.82470.19471.71T:elephant200v2
544.02563.54569.98romulusm
857.44858.25858.91T:isapxv20
1190.321217.171229.53T!!!romulust
24190.6624191.6924193.10T:elephant176v2
25037.2425038.4825039.08T:elephant160v2
103465.40103467.50103472.98aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
30.1131.3332.70ascon128abi32v12
40.1740.7242.59ascon128av12
45.72?47.01?82.44?ascon128bi32v12
51.37?51.92?88.31?T:schwaemm256128v2
49.00?53.52?59.11?T:aes128gcmv1
54.8255.6456.65ascon80pqv12
56.32?57.26?92.81?ascon128v12
66.2167.0668.83T:schwaemm192192v2
63.27?68.06?72.86?T:aes256gcmv1
71.3071.7472.83T:schwaemm128128v2
71.8972.6874.35T:schwaemm256256v2
75.2777.1180.50T:giftcofb128v1
138.42139.15139.87T:tinyjambu128v2
139.52142.80150.10T:isapa128av20
146.92148.29151.28T:xoodyakround3
164.77165.67167.27T:tinyjambu192v2
170.97171.38172.90T:tinyjambu256v2
177.93179.04179.86T:romulusn
185.40190.02192.09T:isapa128v20
283.54287.85291.60romulusn
309.81?331.20?348.64?T:isapk128av20
392.67?419.45?445.41?T:isapk128v20
463.66471.98472.98T:elephant200v2
549.06552.92566.68romulusm
857.48858.14859.17T:isapxv20
1193.921222.671232.67T!!!romulust
24191.0024191.7524193.14T:elephant176v2
25037.8025038.4925040.05T:elephant160v2
103450.72103452.29103457.55aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
30.1031.0031.77ascon128abi32v12
39.5340.9542.07ascon128av12
46.14?46.75?81.35?ascon128bi32v12
51.36?51.99?88.81?T:schwaemm256128v2
54.50?55.69?90.18?ascon80pqv12
51.54?56.49?59.04?T:aes128gcmv1
55.72?56.99?93.90?ascon128v12
67.0467.3068.30T:schwaemm192192v2
62.69?67.78?71.55?T:aes256gcmv1
70.7971.6172.80T:schwaemm128128v2
72.2072.6874.27T:schwaemm256256v2
75.5676.5480.74T:giftcofb128v1
88.73?91.97?101.68?T:isapa128av20
91.0493.9297.61T:isapa128v20
138.28139.02139.71T:tinyjambu128v2
147.29147.69151.95T:xoodyakround3
165.18165.53166.02T:tinyjambu192v2
170.95171.41172.30T:tinyjambu256v2
177.30178.17179.82T:romulusn
198.69?211.53?228.27?T:isapk128av20
229.36?256.60?279.81?T:isapk128v20
284.66289.19292.19romulusn
380.58386.33396.68T!!!romulust
419.19420.67421.74T:isapxv20
470.82471.99473.53T:elephant200v2
548.65557.46567.94romulusm
2354.042354.742355.62aes256gcmv1
24190.5424191.1824192.59T:elephant176v2
25036.9725038.0525039.25T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
29.7929.8429.91ascon128abi32v12
33.5534.6835.44T:aes128gcmv1
35.6536.1936.32ascon128av12
39.1240.9941.86T:aes256gcmv1
44.8444.8845.06ascon128bi32v12
49.7550.1650.42T:schwaemm256128v2
51.2451.5051.66ascon128v12
51.2551.8453.86ascon80pqv12
65.7066.0166.37T:schwaemm192192v2
70.6971.1371.68T:schwaemm128128v2
71.6471.9772.46T:schwaemm256256v2
75.4876.1676.57T:giftcofb128v1
112.26112.38112.56T:tinyjambu128v2
114.06114.52115.10T:xoodyakround3
115.61117.34118.40T:isapa128av20
128.27128.58128.67T:tinyjambu192v2
128.70128.88129.14T:tinyjambu256v2
138.45142.03142.65T:isapa128v20
150.66150.98151.70T:romulusn
254.69274.15278.25T:isapk128av20
271.58275.93278.44romulusn
331.47340.54349.38T:isapk128v20
352.99354.91355.52T:elephant200v2
404.41416.16419.78romulusm
637.92638.18638.56T:isapxv20
792.54796.57807.75T!!!romulust
18074.2818075.5218076.19T:elephant176v2
18778.5818779.1018780.03T:elephant160v2
52910.6352912.1252913.99aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
29.7330.2032.16ascon128abi32v12
34.50?36.24?38.77?T:aes128gcmv1
35.7836.7539.11ascon128av12
40.22?41.64?45.51?T:aes256gcmv1
44.7045.0346.37ascon128bi32v12
49.8150.0851.36T:schwaemm256128v2
50.3651.7252.26ascon80pqv12
51.2251.9154.37ascon128v12
65.8666.2567.93T:schwaemm192192v2
70.7271.0772.35T:schwaemm128128v2
71.7072.2473.97T:schwaemm256256v2
75.2176.3179.27T:giftcofb128v1
112.90113.12113.68T:tinyjambu128v2
113.39113.65114.67T:xoodyakround3
115.41117.20119.12T:isapa128av20
128.85129.06129.63T:tinyjambu192v2
129.47129.62130.25T:tinyjambu256v2
139.24141.51143.37T:isapa128v20
150.26151.12152.06T:romulusn
260.05272.76278.98T:isapk128av20
274.06275.74278.36romulusn
322.65337.54350.12T:isapk128v20
354.56355.45357.03T:elephant200v2
406.17410.90419.09romulusm
637.70638.06638.84T:isapxv20
788.23795.26809.32T!!!romulust
18074.2618075.2818076.25T:elephant176v2
18778.6418779.0118779.93T:elephant160v2
52902.7752903.8452906.21aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
29.8330.8731.61ascon128abi32v12
33.97?36.40?38.28?T:aes128gcmv1
35.7736.8238.02ascon128av12
40.27?41.33?44.94?T:aes256gcmv1
44.4445.1346.32ascon128bi32v12
49.8250.3150.97T:schwaemm256128v2
51.4851.8453.68ascon128v12
51.4251.9052.51ascon80pqv12
65.6866.1767.59T:schwaemm192192v2
70.7071.0272.07T:schwaemm128128v2
71.7172.2173.61T:schwaemm256256v2
75.4576.2278.63T:giftcofb128v1
90.4592.5594.07T:isapa128av20
92.0893.3795.61T:isapa128v20
112.99113.16113.60T:tinyjambu128v2
113.32113.94120.47T:xoodyakround3
128.95129.18129.54T:tinyjambu192v2
129.41129.64130.14T:tinyjambu256v2
150.68150.99151.93T:romulusn
203.76216.04223.16T:isapk128av20
237.36?257.73?264.54?T:isapk128v20
273.94276.02278.68romulusn
354.72355.74356.69T:elephant200v2
382.86389.27395.66T!!!romulust
406.02411.43418.48romulusm
418.87419.26419.74T:isapxv20
2354.112354.652355.07aes256gcmv1
18074.2518075.2918076.29T:elephant176v2
18778.2718779.1718779.86T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
17.26?19.77?21.56?T:aes128gcmv1
18.45?20.16?23.60?T:aes256gcmv1
29.4430.8432.57ascon128abi32v12
34.41?35.28?38.37?ascon128av12
45.6346.5748.29ascon128bi32v12
49.72?50.50?87.03?T:schwaemm256128v2
50.68?51.42?86.52?ascon128v12
50.75?52.02?87.10?ascon80pqv12
66.65?67.23?104.36?T:schwaemm192192v2
71.17?71.78?109.93?T:schwaemm128128v2
71.1071.9472.57T:schwaemm256256v2
75.7978.0480.25T:giftcofb128v1
78.6179.9186.44T:xoodyakround3
87.2787.8189.03T:tinyjambu128v2
87.5088.0688.95T:tinyjambu256v2
88.7291.5395.74T:isapa128av20
90.5792.3594.96T:isapa128v20
92.3592.7594.21T:tinyjambu192v2
123.20124.10124.91T:romulusn
193.51?212.51?225.27?T:isapk128av20
238.01239.07240.25T:elephant200v2
232.42?257.55?267.91?T:isapk128v20
257.60261.18268.24romulusm
260.34264.71267.10romulusn
373.28387.39390.61T!!!romulust
416.85418.66419.28T:isapxv20
2354.802355.442355.94aes256gcmv1
11956.9311958.2011958.71T:elephant176v2
12520.1312520.6612521.35T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
17.53?19.65?21.19?T:aes128gcmv1
18.37?20.28?21.93?T:aes256gcmv1
30.2230.9331.13ascon128abi32v12
34.2935.3436.35ascon128av12
45.7446.4647.83ascon128bi32v12
49.84?50.53?87.65?T:schwaemm256128v2
50.76?52.28?87.70?ascon80pqv12
51.09?52.32?86.89?ascon128v12
66.57?66.86?105.27?T:schwaemm192192v2
70.89?71.97?109.39?T:schwaemm128128v2
71.0972.1673.23T:schwaemm256256v2
75.2877.8180.09T:giftcofb128v1
79.0080.4982.52T:xoodyakround3
87.4588.0288.88T:tinyjambu128v2
87.5388.4989.26T:tinyjambu256v2
91.5593.0498.99T:isapa128v20
92.4193.0694.09T:tinyjambu192v2
89.13?93.16?102.29?T:isapa128av20
122.72123.52127.39T:romulusn
199.73?208.71?226.16?T:isapk128av20
238.84239.91241.03T:elephant200v2
226.83?256.18?271.24?T:isapk128v20
257.87262.58270.24romulusm
259.77263.84267.84romulusn
384.53392.35397.58T!!!romulust
417.18418.38419.54T:isapxv20
2354.192354.992355.62aes256gcmv1
11957.0911958.1911958.52T:elephant176v2
12519.8912520.8812522.00T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
16.72?18.86?20.37?T:aes128gcmv1
18.82?20.19?21.56?T:aes256gcmv1
30.6931.2932.20ascon128abi32v12
34.95?35.81?68.90?ascon128av12
45.31?46.45?82.24?ascon128bi32v12
49.5950.3651.20T:schwaemm256128v2
51.27?52.14?88.30?ascon128v12
51.43?52.33?87.92?ascon80pqv12
66.34?67.06?105.57?T:schwaemm192192v2
70.93?71.65?79.66?T:schwaemm128128v2
71.3072.1773.44T:schwaemm256256v2
74.69?78.78?85.58?T:giftcofb128v1
79.0180.0482.05T:xoodyakround3
87.5288.0088.74T:tinyjambu128v2
87.7688.4889.03T:tinyjambu256v2
89.32?92.47?101.96?T:isapa128av20
91.4592.8899.74T:isapa128v20
92.5092.9893.94T:tinyjambu192v2
123.21124.53127.37T:romulusn
201.23?210.61?229.43?T:isapk128av20
239.32240.13241.63T:elephant200v2
228.32?258.35?268.95?T:isapk128v20
257.94262.31267.31romulusn
260.54264.28271.06romulusm
377.65385.52391.52T!!!romulust
417.16418.25419.17T:isapxv20
2353.802355.002355.76aes256gcmv1
11957.1711958.4411959.84T:elephant176v2
12520.1912520.9912521.65T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
30.6230.6430.68ascon128abi32v12
37.0637.0737.35ascon128av12
38.2238.3138.83T:aes128gcmv1
44.7445.0745.78T:aes256gcmv1
45.6145.6245.75ascon128bi32v12
51.6351.8851.96T:schwaemm256128v2
52.3852.3952.51ascon80pqv12
52.3652.4352.78ascon128v12
67.7867.8168.07T:schwaemm192192v2
72.1672.2472.60T:schwaemm128128v2
74.1574.4174.47T:schwaemm256256v2
77.2477.3277.75T:giftcofb128v1
113.50113.53113.69T:tinyjambu128v2
116.17116.19116.88T:xoodyakround3
127.63127.66128.98T:isapa128av20
129.74129.89130.00T:tinyjambu192v2
130.10130.18130.30T:tinyjambu256v2
153.39153.63153.78T:romulusn
201.80202.11202.73T:isapa128v20
280.85281.91282.39romulusn
328.84331.53335.09T:isapk128av20
362.83363.16363.70T:elephant200v2
414.08415.27422.56romulusm
622.60625.48630.15T:isapk128v20
808.29818.66822.22T!!!romulust
998.56998.73999.12T:isapxv20
18212.9518213.3218214.18T:elephant176v2
18991.6818991.9918992.40T:elephant160v2
53977.1753977.7053980.58aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
31.3331.9032.78ascon128abi32v12
37.2738.1640.14ascon128av12
38.6440.3042.85T:aes128gcmv1
45.5145.9848.00ascon128bi32v12
45.5047.4250.41T:aes256gcmv1
51.6051.9052.97T:schwaemm256128v2
52.5753.0855.60ascon80pqv12
52.6453.1756.15ascon128v12
67.7567.8268.48T:schwaemm192192v2
72.1072.1972.61T:schwaemm128128v2
74.0874.1174.97T:schwaemm256256v2
77.1077.3879.69T:giftcofb128v1
114.27114.40114.67T:tinyjambu128v2
115.24115.28116.02T:xoodyakround3
127.63128.28130.34T:isapa128av20
130.41130.58130.89T:tinyjambu192v2
130.92130.99131.54T:tinyjambu256v2
153.33153.44154.16T:romulusn
201.85202.19203.48T:isapa128v20
280.95281.62282.97romulusn
329.34331.58341.47T:isapk128av20
363.82364.15364.52T:elephant200v2
415.20419.15423.21romulusm
625.12627.11638.17T:isapk128v20
808.21809.61821.59T!!!romulust
997.64997.74998.19T:isapxv20
18212.6318214.0118214.83T:elephant176v2
18991.5218992.1818992.69T:elephant160v2
53969.6653970.8853973.93aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
30.9831.5832.09ascon128abi32v12
37.1937.9238.79ascon128av12
38.3839.7541.85T:aes128gcmv1
45.5045.9147.30ascon128bi32v12
45.3947.3149.46T:aes256gcmv1
51.6951.9052.69T:schwaemm256128v2
52.5452.9854.09ascon80pqv12
52.6653.1954.90ascon128v12
67.7968.0168.41T:schwaemm192192v2
72.0772.2572.61T:schwaemm128128v2
74.0974.1274.57T:schwaemm256256v2
77.1077.5979.23T:giftcofb128v1
98.3098.45101.30T:isapa128av20
114.26114.28114.51T:tinyjambu128v2
115.33115.58117.68T:xoodyakround3
124.83125.10126.84T:isapa128v20
130.36130.53131.39T:tinyjambu192v2
130.87130.99131.38T:tinyjambu256v2
153.30153.62154.18T:romulusn
253.76255.93265.45T:isapk128av20
280.92281.51284.06romulusn
363.86364.23364.63T:elephant200v2
397.10400.40403.23T!!!romulust
408.72410.44417.82T:isapk128v20
415.38417.91423.41romulusm
604.66605.00605.39T:isapxv20
3420.573420.883421.59aes256gcmv1
18212.8818213.3918214.54T:elephant176v2
18991.4918992.0018992.85T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
48.44?49.37?59.16?ascon128abi32v12
56.1256.4959.77ascon128av12
62.3462.3863.41ascon128bi32v12
70.6070.6272.70ascon128v12
71.02?72.32?87.07?ascon80pqv12
87.2387.9289.06T:schwaemm256128v2
96.2196.95103.23T:schwaemm128128v2
100.59100.76105.09T:giftcofb128v1
103.69?108.02?137.58?T:aes128gcmv1
112.96113.04115.66T:schwaemm192192v2
120.67120.79133.49T:schwaemm256256v2
118.07?128.74?153.75?T:aes256gcmv1
136.44137.54141.86T:tinyjambu128v2
155.22156.80161.42T:tinyjambu192v2
155.30158.72165.33T:tinyjambu256v2
175.63178.40189.89T:xoodyakround3
196.84198.05213.88T:romulusn
342.70?364.89?414.04?T:isapa128av20
366.52?410.54?443.39?romulusn
502.09?517.23?627.15?romulusm
519.06530.12540.79T:elephant200v2
1111.161122.261207.51T!!!romulust
1526.78?1539.92?2120.41?T:isapk128av20
1578.271585.001685.11T:isapa128v20
7046.197095.087301.64T:isapk128v20
9209.799217.649226.04T:isapxv20
22692.2222694.7222702.91T:elephant176v2
25447.2525448.2425462.06T:elephant160v2
78494.0178497.0878508.43aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
48.5648.6750.70ascon128abi32v12
56.5356.6257.56ascon128av12
62.52?63.26?71.28?ascon128bi32v12
71.2271.3374.24ascon128v12
71.59?72.80?80.39?ascon80pqv12
87.2588.2895.29T:schwaemm256128v2
95.9796.23103.16T:schwaemm128128v2
101.05?103.65?114.96?T:giftcofb128v1
102.23?110.37?135.88?T:aes128gcmv1
113.75115.13125.00T:schwaemm192192v2
113.34?119.62?153.57?T:aes256gcmv1
121.74122.62130.09T:schwaemm256256v2
137.68138.34144.25T:tinyjambu128v2
156.05156.78163.56T:tinyjambu192v2
156.33158.10162.59T:tinyjambu256v2
173.96179.88187.57T:xoodyakround3
197.21198.34202.20T:romulusn
338.74?374.09?389.48?T:isapa128av20
369.68?381.34?428.70?romulusn
519.61530.34541.87T:elephant200v2
538.18?569.20?610.71?romulusm
1111.421122.361233.13T!!!romulust
1540.05?1557.47?1945.79?T:isapk128av20
1578.981586.481660.43T:isapa128v20
7059.087117.447686.90T:isapk128v20
9190.049196.659201.20T:isapxv20
22692.3722695.0722701.22T:elephant176v2
25446.5225450.2125452.59T:elephant160v2
78489.8078493.9378507.21aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
48.5548.6448.88ascon128abi32v12
56.5656.7557.34ascon128av12
62.61?62.90?70.16?ascon128bi32v12
71.2371.4577.23ascon128v12
71.5971.9574.50ascon80pqv12
87.36?88.19?97.12?T:schwaemm256128v2
95.9896.45102.47T:schwaemm128128v2
100.74?102.28?113.45?T:giftcofb128v1
101.23?104.95?113.22?T:aes128gcmv1
113.62114.20119.51T:schwaemm192192v2
114.19?118.01?146.08?T:aes256gcmv1
120.77121.28127.46T:schwaemm256256v2
137.33137.52141.14T:tinyjambu128v2
155.76157.38164.18T:tinyjambu192v2
156.63159.19162.43T:tinyjambu256v2
172.95173.95183.26T:xoodyakround3
198.54206.97213.05T:romulusn
205.95?224.92?260.02?T:isapa128av20
369.27?388.84?439.95?romulusn
520.56531.02540.58T:elephant200v2
543.66?581.44?617.55?romulusm
662.27?676.10?772.80?T!!!romulust
832.42862.34881.48T:isapa128v20
1052.83?1097.00?1494.88?T:isapk128av20
3834.93?3881.16?4346.38?T:isapk128v20
4792.174798.324806.39T:isapxv20
22690.4622693.3522701.12T:elephant176v2
25448.0725449.7725460.41T:elephant160v2
27933.9127941.3527951.80aes256gcmv1