VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

General information:	Introduction	eBASH	eBASC	eBAEAD	eBATS	SUPERCOP	XBX	Computers

How to submit new software:	Tips	hash	stream	aead	dh	kem	encrypt	sign

List of primitives measured:	lwc	sha3	hash	stream	lwc	caesar	aead	dh	kem	encrypt	sign

Measurements indexed by machine:	lwc	sha3	hash	stream	lwc	caesar	aead	dh	kem	encrypt	sign

List of subroutines:	verify	decode	encode	sort	core	hashblocks	scalarmult

List of NISTLWC cipher candidates measured

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt from the full list of authenticated ciphers covered by SUPERCOP; the excerpt contains round-2 candidates in NISTLWC (plus older versions of the same ciphers for comparison). The page then lists implementations of these ciphers.

There is a separate page that lists machines and, for each machine, the measurements of these ciphers.

Which authenticated ciphers are measured? (NISTLWC excerpt)

Primitive	Description	Designers
`aceae128v1`
`ascon128av12`		Christoph Dobraunig Maria Eichlseder Florian Mendel Martin Schläffer
`ascon128v12`		Christoph Dobraunig Maria Eichlseder Florian Mendel Martin Schläffer
`ascon80pqv12`
`comet128aesv1`
`comet128chamv1`
`comet64chamv1`
`comet64speckv1`
`drygascon128k16`		Sebastien Riou
`drygascon128k32`		Sebastien Riou
`drygascon128k56`		Sebastien Riou
`drygascon256k32`		Sebastien Riou
`elephant160v1`
`elephant176v1`
`elephant200v1`
`estatetweaes128v1`
`estatetwegift128v1`
`giftcofb128v1`
`gimli24v1`
`grain128aead`
`hyenav1`
`isapa128av20`
`isapa128v20`
`isapk128av20`
`isapk128v20`
`knot192`
`knot256`
`knot128v1`
`knot128v2`
`mixfeed`
`orangezestv1`
`oribatida192v11`
`oribatida256v11`
`paefforkskinnyb128t192n48v1`
`paefforkskinnyb128t256n112v1`
`paefforkskinnyb128t288n104v1`
`paefforkskinnyb64t192n48v1`
`photonbeetleaead128rate128v1`
`photonbeetleaead128rate32v1`
`pyjamask128aeadv1`
`pyjamask96aeadv1`
`romulusm1v1`
`romulusm2v1`
`romulusm3v1`
`romulusn1v1`
`romulusn2v1`
`romulusn3v1`
`saeaes128a120t128v1`
`saeaes128a120t64v1`
`saeaes128a64t128v1`
`saeaes128a64t64v1`
`saeaes192a120t128v1`
`saeaes192a64t128v1`
`saeaes192a64t64v1`
`saeaes256a120t128v1`
`saeaes256a64t128v1`
`saeaes256a64t64v1`
`saefforkskinnyb128t192n56v1`
`saefforkskinnyb128t256n120v1`
`saturninctrcascadev2`
`schwaemm128128v1`
`schwaemm192192v1`
`schwaemm256128v1`
`schwaemm256256v1`
`sestatetweaes128v1`
`skinnyaeadtk296128v1`
`skinnyaeadtk29664v1`
`skinnyaeadtk3128128v1`
`skinnyaeadtk312864v1`
`skinnyaeadtk396128v1`
`skinnyaeadtk39664v1`
`spix128v1`
`spoc128sliscplight256v1`
`spoc64sliscplight192v1`
`spook128mu384v1`
`spook128mu512v1`
`spook128su384v1`
`spook128su512v1`
`subterraneanv1`
`sundaegift0v1`
`sundaegift128v1`
`sundaegift64v1`
`sundaegift96v1`
`tinyjambu128`
`tinyjambu192`
`tinyjambu256`
`twegift64locusaeadv1`
`twegift64lotusaeadv1`
`wageae128v1`
`xoodyakv1`	Xoodyak LWC-default AEAD: Cyclist(key, ε, ε); Absorb(nonce); Absorb(associated data); ciphertext = Encrypt(plaintext); tag = Squeeze()	Joan Daemen Seth Hoffert Michaël Peeters Gilles Van Assche Ronny Van Keer

Implementations

Primitive	Implementation	Authors
`aceae128v1`	`ref`
`ascon128av12`	`avx512`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`bi32`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`bi32_arm`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`bi32_lowreg`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`bi32_lowsize`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`bi8`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`neon`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`opt32old`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`opt64`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`opt64_lowsize`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`opt64old`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`opt8`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`ref`	Christoph Dobraunig Martin Schläffer
`ascon128av12`	`refold`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`avx512`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`bi32`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`bi32_arm`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`bi32_lowreg`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`bi32_lowsize`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`bi8`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`neon`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`opt32old`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`opt64`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`opt64_lowsize`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`opt64old`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`opt8`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`ref`	Christoph Dobraunig Martin Schläffer
`ascon128v12`	`refold`	Christoph Dobraunig Martin Schläffer
`ascon80pqv12`	`bi32`	Christoph Dobraunig Martin Schläffer
`ascon80pqv12`	`bi32_arm`	Christoph Dobraunig Martin Schläffer
`ascon80pqv12`	`bi32_lowreg`	Christoph Dobraunig Martin Schläffer
`ascon80pqv12`	`bi32_lowsize`	Christoph Dobraunig Martin Schläffer
`ascon80pqv12`	`bi8`	Christoph Dobraunig Martin Schläffer
`ascon80pqv12`	`opt64`	Christoph Dobraunig Martin Schläffer
`ascon80pqv12`	`opt64_lowsize`	Christoph Dobraunig Martin Schläffer
`ascon80pqv12`	`opt8`	Christoph Dobraunig Martin Schläffer
`ascon80pqv12`	`ref`	Christoph Dobraunig Martin Schläffer
`comet128aesv1`	`ref`
`comet128chamv1`	`ref`
`comet64chamv1`	`ref`
`comet64speckv1`	`ref`
`drygascon128k16`	`le32`
`drygascon128k16`	`opt_arm_cortex-m`	Rhys Weatherley Sebastien Riou
`drygascon128k16`	`opt_v6m-cortex-m0`	Rhys Weatherley Sebastien Riou
`drygascon128k16`	`opt_v7m-cortex-m3`	Rhys Weatherley Sebastien Riou
`drygascon128k16`	`opt_v7m_fpu-cortex-m4`	Rhys Weatherley Sebastien Riou
`drygascon128k16`	`opt_v7m_fpu-cortex-m7`	Rhys Weatherley Sebastien Riou
`drygascon128k16`	`ref`
`drygascon128k32`	`le32`
`drygascon128k32`	`opt_arm_cortex-m`	Rhys Weatherley Sebastien Riou
`drygascon128k32`	`opt_v6m-cortex-m0`	Rhys Weatherley Sebastien Riou
`drygascon128k32`	`opt_v7m-cortex-m3`	Rhys Weatherley Sebastien Riou
`drygascon128k32`	`opt_v7m_fpu-cortex-m4`	Rhys Weatherley Sebastien Riou
`drygascon128k32`	`opt_v7m_fpu-cortex-m7`	Rhys Weatherley Sebastien Riou
`drygascon128k32`	`ref`
`drygascon128k56`	`le32`
`drygascon128k56`	`opt_arm_cortex-m`	Rhys Weatherley Sebastien Riou
`drygascon128k56`	`opt_v6m-cortex-m0`	Rhys Weatherley Sebastien Riou
`drygascon128k56`	`opt_v7m-cortex-m3`	Rhys Weatherley Sebastien Riou
`drygascon128k56`	`opt_v7m_fpu-cortex-m4`	Rhys Weatherley Sebastien Riou
`drygascon128k56`	`opt_v7m_fpu-cortex-m7`	Rhys Weatherley Sebastien Riou
`drygascon128k56`	`ref`
`drygascon256k32`	`le32`
`drygascon256k32`	`ref`
`elephant160v1`	`ref`	Tim Beyne
`elephant176v1`	`ref`	Tim Beyne
`elephant200v1`	`ref`	Tim Beyne
`estatetweaes128v1`	`ref`
`estatetwegift128v1`	`ref`
`giftcofb128v1`	`aadomn/opt32`	Alexandre Adomnicai
`giftcofb128v1`	`ref`
`gimli24v1`	`littleendian`
`gimli24v1`	`ref`
`gimli24v1`	`sse`
`gimli24v1`	`ssealt`
`grain128aead`	`opt32`
`grain128aead`	`ref`
`hyenav1`	`ref`
`isapa128av20`	`avx512`
`isapa128av20`	`opt_32`
`isapa128av20`	`opt_32_armv67m`
`isapa128av20`	`opt_64`
`isapa128av20`	`ref`
`isapa128v20`	`opt_32`
`isapa128v20`	`opt_32_armv67m`
`isapa128v20`	`opt_64`
`isapa128v20`	`ref`
`isapk128av20`	`avx512`
`isapk128av20`	`opt_32_armv6m`
`isapk128av20`	`opt_32_armv7m`
`isapk128av20`	`opt_64`
`isapk128av20`	`ref`
`isapk128v20`	`opt_32_armv6m`
`isapk128v20`	`opt_32_armv7m`
`isapk128v20`	`opt_64`
`isapk128v20`	`ref`
`knot192`	`opt`
`knot192`	`ref`
`knot256`	`opt`
`knot256`	`ref`
`knot128v1`	`opt`
`knot128v1`	`ref`
`knot128v2`	`opt`
`knot128v2`	`ref`
`mixfeed`	`ref`
`orangezestv1`	`ref`
`oribatida192v11`	`ref`
`oribatida256v11`	`ref`
`paefforkskinnyb128t192n48v1`	`ref`
`paefforkskinnyb128t256n112v1`	`ref`
`paefforkskinnyb128t288n104v1`	`ref`
`paefforkskinnyb64t192n48v1`	`ref`
`photonbeetleaead128rate128v1`	`ref`
`photonbeetleaead128rate32v1`	`ref`
`pyjamask128aeadv1`	`add_cortex-m4/v1`
`pyjamask128aeadv1`	`add_cortex-m4/v2`
`pyjamask128aeadv1`	`ref`
`pyjamask96aeadv1`	`add_cortex-m4/v1`
`pyjamask96aeadv1`	`add_cortex-m4/v2`
`pyjamask96aeadv1`	`ref`
`romulusm1v1`	`aadomn/opt32`	Alexandre Adomnicai
`romulusm1v1`	`ref`
`romulusm2v1`	`ref`
`romulusm3v1`	`ref`
`romulusn1v1`	`aadomn/opt32`	Alexandre Adomnicai
`romulusn1v1`	`ref`
`romulusn2v1`	`ref`
`romulusn3v1`	`ref`
`saeaes128a120t128v1`	`ref`
`saeaes128a120t64v1`	`ref`
`saeaes128a64t128v1`	`ref`
`saeaes128a64t64v1`	`ref`
`saeaes192a120t128v1`	`ref`
`saeaes192a64t128v1`	`ref`
`saeaes192a64t64v1`	`ref`
`saeaes256a120t128v1`	`ref`
`saeaes256a64t128v1`	`ref`
`saeaes256a64t64v1`	`ref`
`saefforkskinnyb128t192n56v1`	`ref`
`saefforkskinnyb128t256n120v1`	`ref`
`saturninctrcascadev2`	`bs32`
`saturninctrcascadev2`	`bs32x`
`saturninctrcascadev2`	`bs64`
`saturninctrcascadev2`	`ref`
`schwaemm128128v1`	`opt`
`schwaemm128128v1`	`ref`
`schwaemm192192v1`	`opt`
`schwaemm192192v1`	`ref`
`schwaemm256128v1`	`opt`
`schwaemm256128v1`	`ref`
`schwaemm256256v1`	`opt`
`schwaemm256256v1`	`ref`
`sestatetweaes128v1`	`ref`
`skinnyaeadtk296128v1`	`ref`
`skinnyaeadtk29664v1`	`ref`
`skinnyaeadtk3128128v1`	`aadomn/opt32`	Alexandre Adomnicai
`skinnyaeadtk3128128v1`	`ref`
`skinnyaeadtk312864v1`	`ref`
`skinnyaeadtk396128v1`	`ref`
`skinnyaeadtk39664v1`	`ref`
`spix128v1`	`ref`
`spoc128sliscplight256v1`	`ref`
`spoc64sliscplight192v1`	`ref`
`spook128mu384v1`	`ref`
`spook128mu512v1`	`ref`
`spook128su384v1`	`ref`
`spook128su512v1`	`ref`
`subterraneanv1`	`add_mem_compact`
`subterraneanv1`	`ref`
`sundaegift0v1`	`ref`
`sundaegift128v1`	`ref`
`sundaegift64v1`	`ref`
`sundaegift96v1`	`ref`
`tinyjambu128`	`opt`
`tinyjambu128`	`ref`
`tinyjambu192`	`opt`
`tinyjambu192`	`ref`
`tinyjambu256`	`opt`
`tinyjambu256`	`ref`
`twegift64locusaeadv1`	`ref`
`twegift64lotusaeadv1`	`ref`
`wageae128v1`	`ref`
`xoodyakv1`	`ref`
`xoodyakv1`	`refcpp`
`xoodyakv1`	`xkcp/ARMv6`
`xoodyakv1`	`xkcp/ARMv6M`
`xoodyakv1`	`xkcp/ARMv7M`
`xoodyakv1`	`xkcp/AVR8`
`xoodyakv1`	`xkcp/AVX512`
`xoodyakv1`	`xkcp/SSE2`
`xoodyakv1`	`xkcp/plain-ua`

Version

This is version 2021.01.15 of the primitives-nistlwc-aead.html web page. This web page is in the public domain.

eBACS: ECRYPT Benchmarking of Cryptographic Systems

List of NISTLWC cipher candidates measured

Which authenticated ciphers are measured? (NISTLWC excerpt)

Implementations

Version