VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: armeabi; Cortex-A7 (410fc075); 2016 Broadcom BCM2836; 4 x 900MHz; berry2, supercop-20240909

[Page version: 20241120 00:41:35]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
30.5131.2533.10ascon128abi32v12
38.68?40.04?43.76?ascon128av12
46.48?48.09?83.49?ascon128bi32v12
47.43?52.23?53.55?T:aes128gcmv1
51.41?52.40?90.62?T:schwaemm256128v2
55.83?56.86?92.54?ascon128v12
56.22?56.91?92.72?ascon80pqv12
60.3764.8466.68T:aes256gcmv1
66.33?67.99?76.97?T:schwaemm192192v2
70.7871.4171.84T:schwaemm128128v2
72.3372.7073.22T:schwaemm256256v2
75.5276.6477.54T:giftcofb128v1
136.59137.18137.48T:tinyjambu128v2
138.16141.16145.71T:isapa128av20
148.78149.67150.74T:xoodyakround3
164.37164.99166.63T:tinyjambu192v2
169.47169.85170.50T:tinyjambu256v2
177.49178.32179.37T:romulusn
184.16189.49190.39T:isapa128v20
284.27288.38292.03romulusn
295.46?329.17?338.31?T:isapk128av20
411.62429.65435.53T:isapk128v20
468.86470.75471.74T:elephant200v2
541.00551.32556.41romulusm
857.57858.30858.85T:isapxv20
1188.561223.631231.26T!!!romulust
24190.7124192.4324194.09T:elephant176v2
25037.9325038.9025040.50T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
30.0430.9131.99ascon128abi32v12
38.8640.2141.33ascon128av12
45.38?46.43?83.09?ascon128bi32v12
51.55?52.36?89.75?T:schwaemm256128v2
51.34?56.07?59.00?T:aes128gcmv1
54.91?56.26?91.99?ascon80pqv12
55.86?56.38?93.16?ascon128v12
62.28?67.03?71.42?T:aes256gcmv1
67.9468.2970.08T:schwaemm192192v2
71.3271.6973.06T:schwaemm128128v2
72.4273.1374.36T:schwaemm256256v2
75.6477.4380.53T:giftcofb128v1
138.29138.92139.89T:tinyjambu128v2
139.73142.35148.77T:isapa128av20
146.87147.42149.19T:xoodyakround3
164.82165.59166.83T:tinyjambu192v2
171.00171.34172.81T:tinyjambu256v2
177.34178.36180.49T:romulusn
185.32189.25193.10T:isapa128v20
284.96289.46292.02romulusn
310.79?325.53?348.26?T:isapk128av20
394.01?420.09?451.56?T:isapk128v20
471.23472.46473.44T:elephant200v2
546.83549.10553.88romulusm
857.45858.36859.34T:isapxv20
1190.951206.221234.80T!!!romulust
24191.2424192.4324194.23T:elephant176v2
25037.8525039.0725040.24T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
29.9630.5532.13ascon128abi32v12
39.2740.3540.90ascon128av12
45.7346.8648.73ascon128bi32v12
51.35?52.53?88.72?T:schwaemm256128v2
51.42?54.54?59.02?T:aes128gcmv1
54.89?56.03?91.63?ascon80pqv12
55.20?56.58?92.29?ascon128v12
62.08?66.92?71.70?T:aes256gcmv1
67.79?68.49?75.69?T:schwaemm192192v2
71.1671.7972.84T:schwaemm128128v2
72.2473.0674.39T:schwaemm256256v2
75.4577.2380.67T:giftcofb128v1
88.47?92.79?100.50?T:isapa128av20
91.0492.8999.20T:isapa128v20
138.14138.63139.62T:tinyjambu128v2
146.78148.34152.12T:xoodyakround3
165.18165.58166.47T:tinyjambu192v2
170.99171.31172.35T:tinyjambu256v2
177.29178.35179.68T:romulusn
198.10?210.90?236.90?T:isapk128av20
232.32?259.56?277.09?T:isapk128v20
285.13287.54292.06romulusn
382.30392.62400.40T!!!romulust
419.22420.44421.16T:isapxv20
470.40471.79472.98T:elephant200v2
545.19550.25556.27romulusm
24190.4424192.5524193.32T:elephant176v2
25038.1725038.8025039.76T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
29.7329.8430.79ascon128abi32v12
33.5834.6735.63T:aes128gcmv1
35.7236.1436.27ascon128av12
40.2941.1741.82T:aes256gcmv1
44.2944.8645.06ascon128bi32v12
49.8050.0450.14T:schwaemm256128v2
50.9451.5151.88ascon128v12
51.3351.5851.75ascon80pqv12
65.7266.1666.30T:schwaemm192192v2
70.7571.0571.19T:schwaemm128128v2
71.7772.1472.50T:schwaemm256256v2
75.4075.9276.52T:giftcofb128v1
112.11112.33112.57T:tinyjambu128v2
114.54114.70115.45T:xoodyakround3
114.26117.36119.16T:isapa128av20
128.53128.69128.96T:tinyjambu192v2
128.55128.73129.02T:tinyjambu256v2
141.19142.10142.44T:isapa128v20
150.70151.20151.56T:romulusn
254.16275.51281.06T:isapk128av20
271.98277.78279.04romulusn
331.64339.91349.29T:isapk128v20
353.15354.98355.70T:elephant200v2
404.14410.67413.51romulusm
637.79638.23638.55T:isapxv20
788.07795.42807.79T!!!romulust
18074.9918075.9018076.31T:elephant176v2
18778.7918779.4218780.03T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
29.8730.2332.32ascon128abi32v12
34.02?36.13?38.77?T:aes128gcmv1
35.8036.8139.52ascon128av12
40.57?41.88?45.54?T:aes256gcmv1
44.6744.9846.60ascon128bi32v12
49.6050.1652.06T:schwaemm256128v2
50.9751.9853.92ascon80pqv12
51.2652.0354.62ascon128v12
65.7566.2768.04T:schwaemm192192v2
70.6371.0372.07T:schwaemm128128v2
71.5972.0172.74T:schwaemm256256v2
75.4275.8179.14T:giftcofb128v1
112.93113.14113.66T:tinyjambu128v2
113.13113.61114.57T:xoodyakround3
116.31118.02120.46T:isapa128av20
128.51129.03129.47T:tinyjambu192v2
129.36129.62130.33T:tinyjambu256v2
137.18141.56143.27T:isapa128v20
150.38151.14151.72T:romulusn
253.96273.56278.85T:isapk128av20
273.23275.37278.60romulusn
320.35338.02352.99T:isapk128v20
354.62355.59357.02T:elephant200v2
404.73410.46411.81romulusm
637.90638.15638.70T:isapxv20
788.28801.65809.38T!!!romulust
18075.0218075.9518076.71T:elephant176v2
18778.6418779.2918780.15T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
29.6730.2431.82ascon128abi32v12
34.2036.3437.92T:aes128gcmv1
36.3636.8838.42ascon128av12
39.92?41.95?45.18?T:aes256gcmv1
44.5544.9245.40ascon128bi32v12
50.0250.1251.36T:schwaemm256128v2
51.3951.9253.44ascon80pqv12
51.2451.9453.78ascon128v12
65.8466.2367.47T:schwaemm192192v2
70.7671.2371.50T:schwaemm128128v2
71.7972.0972.81T:schwaemm256256v2
75.4976.0479.15T:giftcofb128v1
90.5992.1295.44T:isapa128av20
91.7993.4995.85T:isapa128v20
112.98113.18113.93T:tinyjambu128v2
113.54?114.66?126.43?T:xoodyakround3
128.88129.09129.56T:tinyjambu192v2
129.33129.57130.07T:tinyjambu256v2
150.67151.18151.84T:romulusn
203.00216.95223.10T:isapk128av20
233.61?258.57?267.27?T:isapk128v20
274.19275.98278.35romulusn
354.54355.65356.46T:elephant200v2
381.72387.19398.26T!!!romulust
405.00410.37412.00romulusm
418.85419.24419.75T:isapxv20
18074.9618075.7818076.27T:elephant176v2
18778.8218779.4118780.09T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
17.61?20.34?25.44?T:aes128gcmv1
18.17?20.54?22.48?T:aes256gcmv1
30.34?31.14?34.87?ascon128abi32v12
33.27?35.12?37.09?ascon128av12
44.6945.8749.33ascon128bi32v12
48.9550.2551.69T:schwaemm256128v2
50.29?51.61?88.41?ascon128v12
50.23?51.69?85.79?ascon80pqv12
66.53?67.90?105.14?T:schwaemm192192v2
70.28?71.42?79.18?T:schwaemm128128v2
70.7571.4772.14T:schwaemm256256v2
75.5976.3978.70T:giftcofb128v1
78.4779.6081.09T:xoodyakround3
87.4687.7588.42T:tinyjambu128v2
87.5888.0388.77T:tinyjambu256v2
88.5791.8595.07T:isapa128av20
92.2592.7393.54T:tinyjambu192v2
91.2392.7795.07T:isapa128v20
123.09123.98124.78T:romulusn
193.79?215.85?223.54?T:isapk128av20
238.29238.84240.13T:elephant200v2
233.44?256.65?267.40?T:isapk128v20
256.99262.29266.63romulusm
257.56263.28266.40romulusn
371.64387.51390.92T!!!romulust
417.33418.18418.86T:isapxv20
11957.5311958.4111959.00T:elephant176v2
12519.6612520.5912521.36T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
18.14?19.96?22.13?T:aes128gcmv1
18.28?20.30?21.73?T:aes256gcmv1
30.4831.2132.37ascon128abi32v12
34.48?35.18?72.08?ascon128av12
45.97?46.26?81.47?ascon128bi32v12
49.0850.4151.09T:schwaemm256128v2
50.52?51.41?87.33?ascon80pqv12
51.09?52.44?87.44?ascon128v12
66.73?67.34?104.65?T:schwaemm192192v2
70.7371.4372.33T:schwaemm128128v2
71.3871.8873.55T:schwaemm256256v2
74.7076.3279.27T:giftcofb128v1
78.9880.4182.16T:xoodyakround3
87.7088.0489.38T:tinyjambu256v2
87.5288.1789.01T:tinyjambu128v2
90.9092.4898.70T:isapa128v20
92.3792.7794.09T:tinyjambu192v2
89.91?92.88?101.61?T:isapa128av20
123.08124.02128.45T:romulusn
197.76?211.13?226.19?T:isapk128av20
239.01239.80241.00T:elephant200v2
232.19?255.44?272.92?T:isapk128v20
258.11261.97265.18romulusm
258.68264.44270.44romulusn
377.68386.48399.83T!!!romulust
417.09418.23419.12T:isapxv20
11957.0311958.0411958.83T:elephant176v2
12519.9812521.1712522.31T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
17.20?18.89?21.52?T:aes128gcmv1
17.65?20.05?21.57?T:aes256gcmv1
30.3031.6032.26ascon128abi32v12
34.5735.1836.03ascon128av12
45.69?46.11?81.70?ascon128bi32v12
49.4050.5251.30T:schwaemm256128v2
50.71?51.89?87.82?ascon80pqv12
51.25?52.42?89.48?ascon128v12
66.17?66.97?104.11?T:schwaemm192192v2
69.9971.6172.16T:schwaemm128128v2
71.3171.8573.22T:schwaemm256256v2
75.1676.0879.40T:giftcofb128v1
78.4379.6681.86T:xoodyakround3
87.4887.9188.81T:tinyjambu128v2
87.5988.2789.17T:tinyjambu256v2
89.66?91.44?102.62?T:isapa128av20
92.4292.7993.93T:tinyjambu192v2
91.2193.0399.04T:isapa128v20
123.04124.36127.58T:romulusn
197.43?212.76?226.39?T:isapk128av20
238.78240.04241.36T:elephant200v2
230.31?257.25?270.52?T:isapk128v20
258.20261.20264.62romulusm
257.98261.85266.24romulusn
377.07388.59393.78T!!!romulust
417.41418.05419.01T:isapxv20
11956.8911958.1111959.00T:elephant176v2
12520.1912520.8512521.69T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
30.6330.6530.88ascon128abi32v12
37.0637.1037.56ascon128av12
38.2138.3939.15T:aes128gcmv1
45.0645.1245.94T:aes256gcmv1
45.6245.6245.73ascon128bi32v12
51.6351.6651.96T:schwaemm256128v2
52.3652.3652.53ascon128v12
52.3852.3952.68ascon80pqv12
67.7867.8168.00T:schwaemm192192v2
72.1372.1772.70T:schwaemm128128v2
74.1074.1274.36T:schwaemm256256v2
77.2877.5177.77T:giftcofb128v1
113.50113.55113.97T:tinyjambu128v2
116.21116.48117.00T:xoodyakround3
127.69128.17128.67T:isapa128av20
130.00130.10130.24T:tinyjambu192v2
130.11130.24130.39T:tinyjambu256v2
153.41153.58153.91T:romulusn
201.68201.84202.39T:isapa128v20
280.59280.90282.05romulusn
328.34330.98333.91T:isapk128av20
362.71363.03363.57T:elephant200v2
413.29414.50415.84romulusm
623.56625.91637.81T:isapk128v20
809.57821.17829.82T!!!romulust
998.60998.69998.84T:isapxv20
18213.3218214.1118214.57T:elephant176v2
18991.8218992.0818992.83T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
31.0131.5532.59ascon128abi32v12
37.3238.1141.02ascon128av12
38.6840.0042.88T:aes128gcmv1
45.5345.9148.46ascon128bi32v12
45.43?46.88?50.57?T:aes256gcmv1
51.8052.1453.31T:schwaemm256128v2
52.5652.9755.82ascon80pqv12
52.7453.3155.88ascon128v12
67.7967.9669.49T:schwaemm192192v2
72.0872.1173.60T:schwaemm128128v2
74.1074.2675.98T:schwaemm256256v2
77.0877.1378.03T:giftcofb128v1
114.31114.41115.03T:tinyjambu128v2
115.24115.26115.95T:xoodyakround3
127.59128.44133.59T:isapa128av20
130.25130.37130.93T:tinyjambu192v2
130.86130.99131.42T:tinyjambu256v2
153.31153.48154.46T:romulusn
201.63201.96203.33T:isapa128v20
280.41280.86282.68romulusn
329.80331.50341.19T:isapk128av20
363.83364.24364.98T:elephant200v2
414.78415.14416.41romulusm
626.60627.84641.21T:isapk128v20
808.58819.29826.13T!!!romulust
997.62997.71998.08T:isapxv20
18213.8118214.2818215.20T:elephant176v2
18992.0118992.2418993.36T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
30.9531.7232.17ascon128abi32v12
37.6238.2938.99ascon128av12
38.5939.9742.33T:aes128gcmv1
45.5645.9546.62ascon128bi32v12
45.1647.1049.09T:aes256gcmv1
51.8052.0752.83T:schwaemm256128v2
52.8553.1554.55ascon80pqv12
52.7553.2555.09ascon128v12
67.7868.0669.06T:schwaemm192192v2
72.0872.2073.25T:schwaemm128128v2
74.0974.1975.39T:schwaemm256256v2
77.0877.3278.07T:giftcofb128v1
98.2099.23103.26T:isapa128av20
114.25114.31114.82T:tinyjambu128v2
115.34115.65117.55T:xoodyakround3
124.79124.84126.96T:isapa128v20
130.36130.40130.91T:tinyjambu192v2
130.85130.88131.98T:tinyjambu256v2
153.27153.43154.38T:romulusn
254.32256.85262.96T:isapk128av20
280.55281.37282.56romulusn
363.70364.40364.60T:elephant200v2
396.88401.36403.18T!!!romulust
408.37410.98420.57T:isapk128v20
414.66415.25417.72romulusm
604.75604.97605.35T:isapxv20
18213.5718214.1918214.63T:elephant176v2
18992.0018992.2218992.72T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
48.3348.4149.09ascon128abi32v12
56.2357.1461.88ascon128av12
62.3862.4964.77ascon128bi32v12
70.6170.7172.23ascon128v12
71.02?72.05?86.69?ascon80pqv12
87.3189.1294.86T:schwaemm256128v2
95.95?97.38?107.31?T:schwaemm128128v2
100.60?101.69?113.33?T:giftcofb128v1
112.97114.06121.12T:schwaemm192192v2
108.35?120.04?143.46?T:aes128gcmv1
120.56121.39131.53T:schwaemm256256v2
121.78?130.77?166.08?T:aes256gcmv1
136.48136.55137.34T:tinyjambu128v2
155.38156.38167.59T:tinyjambu192v2
155.22158.82166.51T:tinyjambu256v2
173.83176.29187.89T:xoodyakround3
196.41197.48205.07T:romulusn
365.54?377.42?448.46?romulusn
345.43?384.76?464.20?T:isapa128av20
496.70?511.56?620.32?romulusm
527.70532.41562.12T:elephant200v2
1098.94?1123.41?1306.65?T!!!romulust
1532.62?1558.28?2136.20?T:isapk128av20
1578.061583.581678.20T:isapa128v20
7062.947153.417349.51T:isapk128v20
9213.009219.969233.46T:isapxv20
22691.8622695.5922705.85T:elephant176v2
25445.2125449.0225453.97T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
49.4249.5051.42ascon128abi32v12
57.1957.2760.73ascon128av12
62.84?63.72?72.65?ascon128bi32v12
71.6771.7374.24ascon128v12
72.0272.7479.70ascon80pqv12
87.2787.9396.51T:schwaemm256128v2
96.0696.23103.11T:schwaemm128128v2
100.95102.38111.44T:giftcofb128v1
102.03105.18108.28T:aes128gcmv1
113.65115.13126.02T:schwaemm192192v2
113.61?117.95?145.57?T:aes256gcmv1
120.70120.79122.11T:schwaemm256256v2
137.46138.58144.41T:tinyjambu128v2
155.70155.70160.51T:tinyjambu192v2
156.11156.72162.56T:tinyjambu256v2
173.70181.02188.25T:xoodyakround3
197.35198.68216.27T:romulusn
360.90377.62396.23T:isapa128av20
374.41?401.21?442.21?romulusn
526.16536.68554.54T:elephant200v2
532.27?570.60?611.90?romulusm
1097.06?1117.60?1308.83?T!!!romulust
1579.041591.001665.34T:isapa128v20
1538.70?1621.77?1974.95?T:isapk128av20
7104.097242.437723.74T:isapk128v20
9191.489195.289202.40T:isapxv20
22692.7022695.4822709.35T:elephant176v2
25446.9225451.5525459.77T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
49.4249.9154.74ascon128abi32v12
57.1757.3162.05ascon128av12
63.19?64.53?72.11?ascon128bi32v12
71.6971.8477.21ascon128v12
72.05?73.07?80.43?ascon80pqv12
87.8490.4997.56T:schwaemm256128v2
96.0296.97102.77T:schwaemm128128v2
100.74100.80102.74T:giftcofb128v1
104.74?107.60?141.48?T:aes128gcmv1
113.65114.59124.36T:schwaemm192192v2
116.30?120.31?133.66?T:aes256gcmv1
120.73121.48128.35T:schwaemm256256v2
137.33137.44140.79T:tinyjambu128v2
156.19157.05164.68T:tinyjambu256v2
156.04157.12165.77T:tinyjambu192v2
173.05174.52184.31T:xoodyakround3
197.35202.68213.34T:romulusn
210.81?242.12?275.08?T:isapa128av20
367.55?397.82?443.98?romulusn
527.13537.08558.47T:elephant200v2
530.59?574.51?609.43?romulusm
683.89?762.27?774.73?T!!!romulust
832.50864.93888.09T:isapa128v20
1049.27?1094.52?1513.23?T:isapk128av20
3839.47?3930.88?4424.61?T:isapk128v20
4790.664792.254812.23T:isapxv20
22693.2822695.2222709.01T:elephant176v2
25444.3225449.1425462.13T:elephant160v2