Implementation comparison: crypto_aead/xoodyakv1

Operationcrypto_aead
Primitivexoodyakv1
Description Xoodyak LWC-default AEAD: Cyclist(key, ε, ε); Absorb(nonce); Absorb(associated data); ciphertext = Encrypt(plaintext); tag = Squeeze()
Designers Joan Daemen
Seth Hoffert
Michaël Peeters
Gilles Van Assche
Ronny Van Keer
Implementations ref
refcpp
xkcp/ARMv6
xkcp/ARMv6M
xkcp/ARMv7M
xkcp/AVR8
xkcp/AVX512
xkcp/plain-ua
xkcp/SSE2
amd64 Bobcat amd64 K10 45nm amd64 K10 32nm amd64 Bulldozer amd64 Zen amd64 Zen 2 amd64 Zen 3 amd64 Zen 4 amd64 Raptor Cove amd64 Golden Cove amd64 Tiger Lake amd64 Ice Lake amd64 Comet Lake amd64 Coffee Lake amd64 Kaby Lake amd64 Skylake amd64 Broadwell+AES amd64 Haswell+AES amd64 Ivy Bridge+AES amd64 Sandy Bridge+AES amd64 Sandy Bridge amd64 Core 2 45nm amd64 Core 2 65nm amd64 Gracemont amd64 Tremont amd64 Goldmont Plus amd64 Goldmont amd64 Airmont amd64 Silvermont amd64 Bonnell riscv64 U54 mipso32 Octeon II armeabi ARM1176 armeabi Cortex-A7 armeabi Cortex-A8 armeabi Cortex-A17 aarch64 Cortex-A53 aarch64 Cortex-A72 https://bench.cr.yp.to 20250506 implementations log2(trycycles) h8bobcat; 2 x 1650MHz; 2011 AMD G-T56N; 500f10 20241022 h3neo; 1 x 1700MHz; 2010 AMD Athlon II Neo K125; 100f63 20241022 hydra4; 4 x 2600MHz; 2011 AMD A6-3650; 300f10 20250415 hydra5; 4 x 2900MHz; 2011 AMD A8-3850; 300f10 20250415 saber214; 4 x 4000MHz; 2012 AMD FX-8350; 600f20 20250415 rumba5; 6 x 3200MHz; 2017 AMD Ryzen 5 1600; 800f11 20241022 rumba7; 8 x 3000MHz; 2017 AMD Ryzen 7 1700; 800f11 20250415 dali; 2 x 1400MHz; 2020 AMD Athlon Silver 3050e; 820f01 20250415 rumba3; 4 x 3100MHz; 2017 AMD Ryzen 3 1200; 800f11 20221122 renoir; 6 x 3600MHz; 2022 AMD Ryzen 5 4500U; 860f01 20250415 lucienne; 4 x 2600MHz; 2021 AMD Ryzen 3 5300U; 860f81 20250415 rome0; 64 x 2250MHz; 2019 AMD EPYC 7742; 830f10 20250415 beelink; 6 x 4062MHz; 2021 AMD Ryzen 5 5560U; a50f00 20221122 cezanne; 6 x 3900MHz; 2021 AMD Ryzen 5 PRO 5650G; a50f00 20250415 zen3; 16 x 3400MHz; 2020 AMD Ryzen 9 5950X; a20f10 20220213 hertz; 8 x 3800MHz; 2023 AMD Ryzen 7 7700; a60f12 20250415 raptor; 6 x 4800MHz; 2023 Intel Core i7-13700H, P cores; b06a2 20231107 alder2,1f626960,5600000; 2 x 1600MHz; 2022 Intel Core i3-1215U, P cores; 906a4-40 20250415 alder; 4 x 3300MHz; 2022 Intel Core i3-12100; 90675-00 20250415 panther; 4 x 2800MHz; 2020 Intel Core i7-1165G7; 806c1 20250415 icelake2; 4 x 1000MHz; 2019 Intel Core i3-1035G1; 706e5 20221005 know; 2 x 2100MHz; 2019 Intel Core i3-10110U; 806ec 20250415 comet; 2 x 2100MHz; 2019 Intel Core i3-10110U; 806ec 20241022 cubi10; 2 x 2100MHz; 2019 Intel Core i3-10110U; 806ec 20250415 r24000; 4 x 3300MHz; 2018 Intel Xeon E-2124; 906ea 20250415 like; 2 x 3000MHz; 2018 Intel Core i3-8109U; 806ea 20250415 kizomba; 4 x 3000MHz; 2017 Intel Xeon E3-1220 v6; 906e9 20250415 whosthere; 2 x 2400MHz; 2017 Intel Core i3-7100; 806e9 20221122 samba; 4 x 3000MHz; 2015 Intel Xeon E3-1220 v5; 506e3 20250415 bolero; 8 x 1700MHz; 2016 Intel Xeon E5-2609 v4; 406f1 20250415 shoe; 2 x 1900MHz; 2015 Intel Core i3-5005U; 306d4 20250415 prodesk; 4 x 2000MHz; 2013 Intel Core i7-4765T; 306c3 20241022 speed2supercop; 4 x 3400MHz; 2013 Intel Core i7-4770; 306c3 20250415 hiphop; 4 x 3100MHz; 2013 Intel Xeon E3-1220 v3; 306c3 20231107 titan0; 4 x 3500MHz; 2013 Intel Xeon E3-1275 V3; 306c3 20250415 hunsnivy; 2 x 1800MHz; 2012 Intel Core i5-3427U; 306a9 20250415 hydra8; 4 x 3500MHz; 2012 Intel Xeon E3-1275 V2; 306a9 20250415 hydra7; 4 x 3100MHz; 2011 Intel Xeon E3-1225; 206a7 20250415 h6sandy; 2 x 2100MHz; 2011 Intel Core i3-2310M; 206a7 20241022 wolfdale; 2 x 3060MHz; 2009 Intel Core 2 Duo E7600; 1067a 20250415 trident; 2 x 2000MHz; 2007 Intel Core 2 Duo T7300; 6fb 20250307 margaux; 4 x 2404MHz; 2007 Intel Core 2 Quad Q6600; 6fb 20250415 alder2,1f626960,3300000; 4 x 1600MHz; 2022 Intel Core i3-1215U, E cores; 906a4-20 20250415 jasper2; 2 x 1100MHz; 2021 Intel Celeron N4500; 906c0 20250415 jasper; 4 x 1100MHz; 2021 Intel Pentium Silver N6000; 906c0 20250415 jasper3; 4 x 2000MHz; 2021 Intel Celeron N5105; 906c0 20250415 gemini; 2 x 1100MHz; 2019 Intel Celeron N4020; 706a8 20250307 wooden; 4 x 1500MHz; 2016 Intel Celeron J3455; 506c9 20241022 nucnuc; 4 x 1600MHz; 2015 Intel Pentium N3700; 406c3 20241022 cherry; 4 x 1440MHz; 2016 Intel Atom x5-Z8350; 406c4 20250415 h8atom; 2 x 1866MHz; 2011 Intel Atom D2500; 30661 20250415 h2atom; 1 x 1000MHz; 2010 Intel Atom N455; 106ca 20241022 riscvunleashed000; 4 x 1000MHz; 2017 SiFive Freedom U540; sifive,u54-mc 20240107 gcc23; 2 x 2000MHz; 2011 Cavium Octeon II CN6120; cnmips64v2 20230530 erpro8fsf2; 2 x 2000MHz; 2011 Cavium Octeon II CN6120; cnmips64v2 20220213 berry0; 1 x 1000MHz; 2011 Broadcom BCM2835; 410fb767 20240909 berry2; 4 x 900MHz; 2016 Broadcom BCM2836; 410fc075 20240909 bblack; 1 x 1000MHz; 2012 TI Sitara XAM3359AZCZ100; 413fc082 20241022 tinker; 4 x 1800MHz; 2014 Rockchip RK3288; 410fc0d1 20241022 pi3aplus; 4 x 1400MHz; 2018 Broadcom BCM2837B0; 410fd034 20240808 pi3bplus; 4 x 1400MHz; 2018 Broadcom BCM2837B0; 410fd034 20241022 pi4b; 4 x 1500MHz; 2019 Broadcom BCM2711; 410fd083 20241022 15 16 17 18 19 20 21 22 23 24 25 26 T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:refcpp T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:ref T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/plain-ua T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/SSE2 T:xkcp/AVX512 T:xkcp/AVX512 T:xkcp/AVX512 T:xkcp/AVX512 crypto_aead xoodyakv1

Details (compiler options, compilation failures, error messages, etc.)

amd64; Bobcat (500f10); 2011 AMD G-T56N; 2 x 1650MHz; h8bobcat, supercop-20241022: 27x compiler output
amd64; K10 45nm (100f63); 2010 AMD Athlon II Neo K125; 1 x 1700MHz; h3neo, supercop-20241022: 27x compiler output
amd64; K10 32nm (300f10); 2011 AMD A6-3650; 4 x 2600MHz; hydra4, supercop-20250415: 27x compiler output, 18x namespace violation
amd64; K10 32nm (300f10); 2011 AMD A8-3850; 4 x 2900MHz; hydra5, supercop-20250415: 27x compiler output, 18x namespace violation
amd64; Bulldozer (600f20); 2012 AMD FX-8350; 4 x 4000MHz; saber214, supercop-20250415: 19x compiler output, 26x namespace violation
amd64; Zen (800f11); 2017 AMD Ryzen 5 1600; 6 x 3200MHz; rumba5, supercop-20241022: 19x compiler output, 26x namespace violation
amd64; Zen (800f11); 2017 AMD Ryzen 7 1700; 8 x 3000MHz; rumba7, supercop-20250415: 19x compiler output, 26x namespace violation
amd64; Zen (820f01); 2020 AMD Athlon Silver 3050e; 2 x 1400MHz; dali, supercop-20250415: 19x compiler output, 26x namespace violation
amd64; Zen (800f11); 2017 AMD Ryzen 3 1200; 4 x 3100MHz; rumba3, supercop-20221122
amd64; Zen 2 (860f01); 2022 AMD Ryzen 5 4500U; 6 x 3600MHz; renoir, supercop-20250415: 19x compiler output, 26x namespace violation
amd64; Zen 2 (860f81); 2021 AMD Ryzen 3 5300U; 4 x 2600MHz; lucienne, supercop-20250415: 19x compiler output, 26x namespace violation
amd64; Zen 2 (830f10); 2019 AMD EPYC 7742; 64 x 2250MHz; rome0, supercop-20250415: 19x compiler output, 26x namespace violation
amd64; Zen 3 (a20f10); 2020 AMD Ryzen 5 5600X; 6 x 3700MHz; unstable; spawn, supercop-20231215
amd64; Zen 3 (a50f00); 2021 AMD Ryzen 5 5560U; 6 x 4062MHz; beelink, supercop-20221122
amd64; Zen 3 (a50f00); 2021 AMD Ryzen 5 PRO 5650G; 6 x 3900MHz; cezanne, supercop-20250415: 19x compiler output, 26x namespace violation
amd64; Zen 3 (a20f10); 2020 AMD Ryzen 9 5950X; 16 x 3400MHz; zen3, supercop-20220213
amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20250415: 6x compiler output, 24x namespace violation
amd64; Raptor Cove (b06a2); 2023 Intel Core i7-13700H, P cores; 6 x 4800MHz; raptor, supercop-20231107
amd64; Golden Cove (906a4-40); 2022 Intel Core i3-1215U, P cores; 2 x 1600MHz; alder2,1f626960,5600000, supercop-20250415: 19x compiler output, 26x namespace violation
amd64; Golden Cove (90675-00); 2022 Intel Core i3-12100; 4 x 3300MHz; alder, supercop-20250415: 19x compiler output, 26x namespace violation
amd64; Tiger Lake (806c1); 2020 Intel Core i7-1165G7; 4 x 2800MHz; panther, supercop-20250415: 11x compiler output, 34x namespace violation
amd64; Ice Lake (706e5); 2019 Intel Core i3-1035G1; 4 x 1000MHz; icelake2, supercop-20221005
amd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; know, supercop-20250415: 19x compiler output, 26x namespace violation
amd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; comet, supercop-20241022: 27x compiler output
amd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; cubi10, supercop-20250415: 19x compiler output, 26x namespace violation
amd64; Coffee Lake (906ea); 2018 Intel Xeon E-2124; 4 x 3300MHz; r24000, supercop-20250415: 19x compiler output, 26x namespace violation
amd64; Coffee Lake (806ea); 2018 Intel Core i3-8109U; 2 x 3000MHz; like, supercop-20250415: 19x compiler output, 26x namespace violation
amd64; Kaby Lake (906e9); 2017 Intel Xeon E3-1220 v6; 4 x 3000MHz; kizomba, supercop-20250415: 19x compiler output, 26x namespace violation
amd64; Kaby Lake (806e9); 2017 Intel Core i3-7100; 2 x 2400MHz; whosthere, supercop-20221122
amd64; Skylake (506e3); 2015 Intel Xeon E3-1220 v5; 4 x 3000MHz; samba, supercop-20250415: 19x compiler output, 26x namespace violation
amd64; Broadwell+AES (406f1); 2016 Intel Xeon E5-2609 v4; 8 x 1700MHz; bolero, supercop-20250415: 19x compiler output, 26x namespace violation
amd64; Broadwell+AES (306d4); 2015 Intel Core i3-5005U; 2 x 1900MHz; shoe, supercop-20250415: 19x compiler output, 26x namespace violation
amd64; Haswell+AES (306c3); 2013 Intel Core i7-4765T; 4 x 2000MHz; prodesk, supercop-20241022: 19x compiler output, 26x namespace violation
amd64; Haswell+AES (306c3); 2013 Intel Core i7-4770; 4 x 3400MHz; speed2supercop, supercop-20250415: 19x compiler output, 26x namespace violation
amd64; Haswell+AES (306c3); 2013 Intel Xeon E3-1220 v3; 4 x 3100MHz; hiphop, supercop-20231107
amd64; Haswell+AES (306c3); 2013 Intel Xeon E3-1275 V3; 4 x 3500MHz; titan0, supercop-20250415: 19x compiler output, 26x namespace violation
amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3427U; 2 x 1800MHz; hunsnivy, supercop-20250415: 19x compiler output, 26x namespace violation
amd64; Ivy Bridge+AES (306a9); 2012 Intel Xeon E3-1275 V2; 4 x 3500MHz; hydra8, supercop-20250415: 19x compiler output, 26x namespace violation
amd64; Sandy Bridge+AES (206a7); 2011 Intel Xeon E3-1225; 4 x 3100MHz; hydra7, supercop-20250415: 19x compiler output, 26x namespace violation
amd64; Sandy Bridge+AES (206d7); 2012 Intel Xeon E5-2660; 8 x 2200MHz; unstable; gcc123, supercop-20220213
amd64; Sandy Bridge (206a7); 2011 Intel Core i3-2310M; 2 x 2100MHz; h6sandy, supercop-20241022: 19x compiler output, 26x namespace violation
amd64; Core 2 45nm (1067a); 2009 Intel Core 2 Duo E7600; 2 x 3060MHz; wolfdale, supercop-20250415: 19x compiler output, 26x namespace violation
amd64; Core 2 45nm (10676); 2007 Intel Xeon X5450; 8 x 2992MHz; unstable; gcc14, supercop-20220506
amd64; Core 2 65nm (6fb); 2007 Intel Core 2 Duo T7300; 2 x 2000MHz; trident, supercop-20250307: 27x compiler output, 18x namespace violation
amd64; Core 2 65nm (6fb); 2007 Intel Core 2 Quad Q6600; 4 x 2404MHz; margaux, supercop-20250415: 27x compiler output, 18x namespace violation
amd64; Gracemont (906a4-20); 2022 Intel Core i3-1215U, E cores; 4 x 1600MHz; alder2,1f626960,3300000, supercop-20250415: 19x compiler output, 26x namespace violation
amd64; Tremont (906c0); 2021 Intel Celeron N4500; 2 x 1100MHz; jasper2, supercop-20250415: 19x compiler output, 26x namespace violation
amd64; Tremont (906c0); 2021 Intel Pentium Silver N6000; 4 x 1100MHz; jasper, supercop-20250415: 19x compiler output, 26x namespace violation
amd64; Tremont (906c0); 2021 Intel Celeron N5105; 4 x 2000MHz; jasper3, supercop-20250415: 19x compiler output, 26x namespace violation
amd64; Goldmont Plus (706a8); 2019 Intel Celeron N4020; 2 x 1100MHz; gemini, supercop-20250307: 19x compiler output, 26x namespace violation
amd64; Goldmont (506c9); 2016 Intel Celeron J3455; 4 x 1500MHz; wooden, supercop-20241022: 27x compiler output
amd64; Airmont (406c3); 2015 Intel Pentium N3700; 4 x 1600MHz; nucnuc, supercop-20241022: 27x compiler output
amd64; Silvermont (406c4); 2016 Intel Atom x5-Z8350; 4 x 1440MHz; cherry, supercop-20250415: 19x compiler output, 26x namespace violation
amd64; Bonnell (30661); 2011 Intel Atom D2500; 2 x 1866MHz; h8atom, supercop-20250415: 27x compiler output, 18x namespace violation
amd64; Bonnell (106ca); 2010 Intel Atom N455; 1 x 1000MHz; h2atom, supercop-20241022: 27x compiler output
riscv64; U54 (sifive,u54-mc); 2017 SiFive Freedom U540; 4 x 1000MHz; riscvunleashed000, supercop-20240107
mipso32; Octeon II (cnmips64v2); 2011 Cavium Octeon II CN6120; 2 x 2000MHz; gcc23, supercop-20230530
mipso32; Octeon II (cnmips64v2); 2011 Cavium Octeon II CN6120; 2 x 2000MHz; erpro8fsf2, supercop-20220213
armeabi; ARM1176 (410fb767); 2011 Broadcom BCM2835; 1 x 1000MHz; berry0, supercop-20240909: 54x compiler output, 18x namespace violation
armeabi; Cortex-A7 (410fc075); 2016 Broadcom BCM2836; 4 x 900MHz; berry2, supercop-20240909: 24x compiler output, 8x namespace violation
armeabi; Cortex-A8 (413fc082); 2012 TI Sitara XAM3359AZCZ100; 1 x 1000MHz; bblack, supercop-20241022: 54x compiler output, 18x namespace violation
armeabi; Cortex-A9+NEON (412fc09a); 2011 Freescale i.MX6 Quad; 4 x 1200MHz; unstable; novena, supercop-20220506
armeabi; Cortex-A17 (410fc0d1); 2014 Rockchip RK3288; 4 x 1800MHz; tinker, supercop-20241022: 30x compiler output, 10x namespace violation
aarch64; Skylark (503f0002); 2018 Ampere eMAG 8180; 32 x 3300MHz; unstable; gcc185, supercop-20240107
aarch64; Cortex-A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3aplus, supercop-20240808: 15x compiler output, 10x namespace violation
aarch64; Cortex-A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3bplus, supercop-20241022: 12x compiler output, 8x namespace violation
aarch64; Cortex-A72 (410fd083); 2019 Broadcom BCM2711; 4 x 1500MHz; pi4b, supercop-20241022: 15x compiler output, 10x namespace violation