VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: aarch64; Cortex-A76 (414fd0b1); 2023 Broadcom BCM2712; 4 x 1500MHz; pi5, supercop-20251222

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
1.561.611.62T:aes256gcmv1
1.821.851.86T:aes128gcmv1
4.834.854.86ascon128av12
7.127.137.14ascon128v12
7.127.137.15ascon80pqv12
10.9110.9711.04ascon128abi32v12
15.7015.7715.89T:xoodyakround3
16.1616.1916.22ascon128bi32v12
16.8216.8616.92T:schwaemm256128v2
22.2922.3322.39T:schwaemm192192v2
23.3823.4323.49T:schwaemm128128v2
24.9925.0325.09T:schwaemm256256v2
29.7429.7929.84T:giftcofb128v1
30.0730.1430.21T:isapa128v20
31.4331.5531.66T:isapa128av20
45.1645.2145.27T:romulusn
56.3256.3856.42romulusn
56.6756.6956.71T:tinyjambu128v2
64.4264.4664.50T:tinyjambu192v2
72.1772.2172.25T:tinyjambu256v2
76.9577.0477.24T:isapk128av20
84.3284.6184.80romulusm
101.77101.96102.19T:isapk128v20
135.77135.92136.41T:elephant200v2
165.52165.91166.11T:isapxv20
166.10166.23166.29T!!!romulust
6459.486461.566474.61T:elephant176v2
7371.397378.787379.70T:elephant160v2
15264.2615264.8415265.35aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
1.371.411.42T:aes128gcmv1
1.511.541.55T:aes256gcmv1
4.824.834.83ascon128av12
7.147.157.16ascon128v12
7.167.197.22ascon80pqv12
10.8810.9711.02ascon128abi32v12
15.5515.5915.67T:xoodyakround3
16.1816.2116.26ascon128bi32v12
16.8316.8716.93T:schwaemm256128v2
22.2822.3222.38T:schwaemm192192v2
23.3523.3823.44T:schwaemm128128v2
25.0025.0425.12T:schwaemm256256v2
29.7529.7929.89T:giftcofb128v1
30.0930.1830.27T:isapa128v20
31.5431.6231.77T:isapa128av20
45.3445.4145.50T:romulusn
56.6556.6856.70T:tinyjambu128v2
56.6556.7356.80romulusn
64.4764.5264.59T:tinyjambu192v2
72.2972.3773.65T:tinyjambu256v2
76.9877.0577.16T:isapk128av20
84.6784.7484.80romulusm
101.75101.93102.14T:isapk128v20
135.85136.30136.40T:elephant200v2
165.63165.98166.41T:isapxv20
166.49166.62166.71T!!!romulust
6459.676461.826474.50T:elephant176v2
7373.707378.197379.82T:elephant160v2
15264.4715265.0215266.26aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
1.401.411.42T:aes128gcmv1
1.541.551.56T:aes256gcmv1
4.824.834.83ascon128av12
7.147.157.16ascon128v12
7.157.177.21ascon80pqv12
10.8810.9411.00ascon128abi32v12
15.1615.2215.28T:isapa128v20
15.5915.6215.71T:xoodyakround3
16.1816.2016.24ascon128bi32v12
16.8416.8616.92T:schwaemm256128v2
21.5221.5421.56T:isapa128av20
22.3022.3622.43T:schwaemm192192v2
23.3523.3823.50T:schwaemm128128v2
25.0025.0325.11T:schwaemm256256v2
29.7529.8029.85T:giftcofb128v1
45.3745.4745.56T:romulusn
51.3551.4051.49T:isapk128av20
55.9756.0256.12T!!!romulust
56.6656.6956.71T:tinyjambu128v2
56.6856.7356.82romulusn
63.8763.9964.13T:isapk128v20
64.4664.5264.60T:tinyjambu192v2
72.2872.3673.68T:tinyjambu256v2
84.7084.7684.83romulusm
96.3096.4596.59T:isapxv20
135.86136.22136.49T:elephant200v2
262.73262.92263.08aes256gcmv1
6459.146461.806474.71T:elephant176v2
7371.187378.127379.09T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
1.111.111.12T:aes256gcmv1
1.221.231.24T:aes128gcmv1
4.774.784.79ascon128av12
7.087.107.11ascon80pqv12
7.067.147.23ascon128v12
10.9010.9210.94ascon128abi32v12
11.9311.9812.07T:xoodyakround3
16.1316.1616.21ascon128bi32v12
16.7216.7516.79T:schwaemm256128v2
22.1722.1922.23T:schwaemm192192v2
22.8222.9122.95T:isapa128v20
23.1923.2223.27T:schwaemm128128v2
24.8824.9124.94T:schwaemm256256v2
26.2326.4126.47T:isapa128av20
29.6429.6629.71T:giftcofb128v1
40.8940.9140.96T:romulusn
42.1742.2042.24romulusn
47.8847.9047.92T:tinyjambu128v2
50.9951.0551.07T:tinyjambu192v2
54.1854.2454.27T:tinyjambu256v2
56.0356.3056.36romulusm
64.2564.2964.33T:isapk128av20
83.1783.2783.37T:isapk128v20
101.53101.65101.93T:elephant200v2
111.22111.33111.44T!!!romulust
131.03131.21131.41T:isapxv20
4825.234826.644835.13T:elephant176v2
5517.315530.655536.47T:elephant160v2
7763.417763.907764.44aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
1.011.021.03T:aes128gcmv1
1.071.081.09T:aes256gcmv1
4.784.794.81ascon128av12
7.087.147.19ascon128v12
7.157.197.24ascon80pqv12
10.8510.8710.91ascon128abi32v12
11.8711.9011.95T:xoodyakround3
16.2216.2416.27ascon128bi32v12
16.7216.7616.80T:schwaemm256128v2
22.1522.1822.22T:schwaemm192192v2
22.8322.8822.93T:isapa128v20
23.1623.2123.26T:schwaemm128128v2
24.8724.9124.95T:schwaemm256256v2
26.3626.4126.47T:isapa128av20
29.6229.6429.68T:giftcofb128v1
40.9841.0041.05T:romulusn
42.3842.4342.48romulusn
47.8847.9047.93T:tinyjambu128v2
50.9150.9651.00T:tinyjambu192v2
55.2455.3055.38T:tinyjambu256v2
56.3156.3456.37romulusm
64.2664.3264.45T:isapk128av20
83.1183.1883.26T:isapk128v20
101.17101.51101.89T:elephant200v2
111.10111.20111.40T!!!romulust
131.08131.24131.34T:isapxv20
4824.984826.944836.23T:elephant176v2
5506.675529.655535.39T:elephant160v2
7762.727763.587764.15aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
1.011.011.02T:aes128gcmv1
1.081.081.08T:aes256gcmv1
4.784.794.80ascon128av12
7.107.147.19ascon128v12
7.127.167.22ascon80pqv12
10.8510.8910.91ascon128abi32v12
11.8911.9211.96T:xoodyakround3
15.3315.4015.45T:isapa128v20
16.2216.2416.27ascon128bi32v12
16.7316.7716.79T:schwaemm256128v2
21.3521.3921.41T:isapa128av20
22.1622.2022.24T:schwaemm192192v2
23.1623.1823.25T:schwaemm128128v2
24.8824.9024.94T:schwaemm256256v2
29.6129.6529.70T:giftcofb128v1
41.0041.0341.06T:romulusn
42.3442.4042.48romulusn
47.9047.9247.95T:tinyjambu128v2
50.9650.9951.04T:tinyjambu192v2
51.4551.4951.55T:isapk128av20
55.2655.3055.33T:tinyjambu256v2
56.0756.1456.19T!!!romulust
56.3256.3656.39romulusm
64.1564.2164.27T:isapk128v20
96.3496.4696.58T:isapxv20
101.15101.49101.56T:elephant200v2
262.81262.99263.07aes256gcmv1
4825.044825.914835.77T:elephant176v2
5530.105536.145537.73T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.600.610.62T:aes256gcmv1
0.600.610.62T:aes128gcmv1
4.724.724.74ascon128av12
6.997.007.13ascon80pqv12
7.087.117.13ascon128v12
8.198.228.25T:xoodyakround3
10.8210.8410.86ascon128abi32v12
15.5815.6315.66T:isapa128v20
16.1716.2416.27ascon128bi32v12
16.5616.5916.63T:schwaemm256128v2
21.2421.3321.35T:isapa128av20
21.9922.0322.09T:schwaemm192192v2
22.9723.0223.08T:schwaemm128128v2
24.7424.7824.85T:schwaemm256256v2
27.9728.0128.10romulusm
27.9928.0128.11romulusn
29.4529.4929.56T:giftcofb128v1
36.2336.3036.38T:tinyjambu256v2
36.6036.6336.67T:romulusn
37.5437.6037.63T:tinyjambu192v2
39.1339.2239.26T:tinyjambu128v2
51.4651.5351.61T:isapk128av20
55.8155.8755.98T!!!romulust
64.3964.5864.67T:isapk128v20
66.9567.1267.22T:elephant200v2
96.3196.4696.66T:isapxv20
262.74262.93263.08aes256gcmv1
3191.773192.513198.83T:elephant176v2
3682.233686.733688.03T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.590.610.61T:aes256gcmv1
0.600.620.63T:aes128gcmv1
4.724.734.74ascon128av12
7.007.107.19ascon128v12
7.067.147.21ascon80pqv12
8.178.228.25T:xoodyakround3
10.8210.8410.86ascon128abi32v12
15.5215.5915.63T:isapa128v20
16.2616.3116.33ascon128bi32v12
16.5616.5916.64T:schwaemm256128v2
21.2321.3121.38T:isapa128av20
21.9922.0322.11T:schwaemm192192v2
22.9523.0023.06T:schwaemm128128v2
24.7424.7924.84T:schwaemm256256v2
27.9828.0128.09romulusn
27.9928.0328.11romulusm
29.4929.5429.61T:giftcofb128v1
36.2136.2936.48T:tinyjambu256v2
36.5936.6436.71T:romulusn
37.4037.4537.46T:tinyjambu192v2
39.1239.2139.26T:tinyjambu128v2
51.4951.5651.64T:isapk128av20
55.8255.9155.98T!!!romulust
64.2864.4164.48T:isapk128v20
66.9167.1467.26T:elephant200v2
96.4896.7196.88T:isapxv20
262.78262.93263.13aes256gcmv1
3191.033192.003198.97T:elephant176v2
3683.053686.493687.83T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.600.610.62T:aes256gcmv1
0.610.620.62T:aes128gcmv1
4.714.734.74ascon128av12
7.027.117.18ascon80pqv12
7.037.147.24ascon128v12
8.178.238.26T:xoodyakround3
10.8210.8310.84ascon128abi32v12
15.4915.6115.66T:isapa128v20
16.2216.2816.32ascon128bi32v12
16.5616.6016.65T:schwaemm256128v2
21.2321.2921.33T:isapa128av20
21.9922.0322.10T:schwaemm192192v2
22.9623.0223.06T:schwaemm128128v2
24.7524.7824.84T:schwaemm256256v2
27.9828.0328.10romulusm
27.9928.0328.10romulusn
29.4629.5129.57T:giftcofb128v1
36.1236.2736.50T:tinyjambu256v2
36.6036.6336.69T:romulusn
37.4237.4537.48T:tinyjambu192v2
39.1339.2039.25T:tinyjambu128v2
51.4551.5851.64T:isapk128av20
55.8555.9756.02T!!!romulust
64.2464.4164.55T:isapk128v20
67.0167.0967.17T:elephant200v2
96.4796.5896.76T:isapxv20
262.70262.89263.11aes256gcmv1
3191.333192.283197.82T:elephant176v2
3683.063686.653687.37T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.301.301.31T:aes256gcmv1
1.401.401.41T:aes128gcmv1
4.894.904.92ascon128av12
7.207.217.23ascon80pqv12
7.187.237.29ascon128v12
11.2111.2511.29ascon128abi32v12
12.0912.1312.20T:xoodyakround3
16.4016.4116.44ascon128bi32v12
17.2217.2417.26T:schwaemm256128v2
22.6722.7022.71T:schwaemm192192v2
23.5123.5323.58T:schwaemm128128v2
25.4925.5325.58T:schwaemm256256v2
28.2628.2828.35T:isapa128av20
29.9129.9329.96T:giftcofb128v1
33.1133.1733.24T:isapa128v20
41.4441.4841.51T:romulusn
42.4742.4842.50romulusn
48.2948.3248.34T:tinyjambu128v2
51.4051.4451.47T:tinyjambu192v2
54.6154.6454.69T:tinyjambu256v2
56.3556.3856.41romulusm
71.9171.9271.98T:isapk128av20
103.64103.68103.74T:elephant200v2
112.79112.84112.93T!!!romulust
143.56143.60143.69T:isapk128v20
211.55211.61211.82T:isapxv20
4863.064863.764872.25T:elephant176v2
5593.495597.905599.08T:elephant160v2
7921.267921.497921.70aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.181.191.19T:aes128gcmv1
1.271.271.27T:aes256gcmv1
4.904.914.93ascon128av12
7.207.257.30ascon128v12
7.297.337.35ascon80pqv12
11.1711.1911.22ascon128abi32v12
12.0212.0512.09T:xoodyakround3
16.5116.5316.56ascon128bi32v12
17.2117.2517.28T:schwaemm256128v2
22.6722.6922.73T:schwaemm192192v2
23.4823.5023.55T:schwaemm128128v2
25.5325.5625.61T:schwaemm256256v2
28.2628.3028.35T:isapa128av20
29.9129.9529.98T:giftcofb128v1
33.1133.1733.24T:isapa128v20
41.5341.5441.59T:romulusn
42.7742.8242.83romulusn
48.2848.2848.31T:tinyjambu128v2
51.3451.3751.39T:tinyjambu192v2
55.6355.6755.72T:tinyjambu256v2
56.6856.7056.76romulusm
71.9471.9672.01T:isapk128av20
103.61103.66103.70T:elephant200v2
112.72112.78112.87T!!!romulust
143.56143.58143.62T:isapk128v20
211.77211.82211.90T:isapxv20
4862.364863.134871.92T:elephant176v2
5594.635597.965598.48T:elephant160v2
7921.057921.437922.07aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.181.181.18T:aes128gcmv1
1.261.261.26T:aes256gcmv1
4.904.914.92ascon128av12
7.247.287.33ascon80pqv12
7.257.287.30ascon128v12
11.1611.1711.21ascon128abi32v12
12.0512.0612.11T:xoodyakround3
16.5016.5116.54ascon128bi32v12
17.2117.2417.27T:schwaemm256128v2
20.6220.6520.68T:isapa128v20
22.4022.4822.50T:isapa128av20
22.6722.7022.72T:schwaemm192192v2
23.4823.5023.55T:schwaemm128128v2
25.5125.5425.57T:schwaemm256256v2
29.9129.9329.96T:giftcofb128v1
41.5341.5641.59T:romulusn
42.7442.7642.79romulusn
48.2948.3048.33T:tinyjambu128v2
51.3151.3551.38T:tinyjambu192v2
55.6355.6955.72T:tinyjambu256v2
55.9255.9355.97T:isapk128av20
56.6656.6956.74romulusm
57.6557.6857.71T!!!romulust
95.3395.3695.41T:isapk128v20
103.69103.76104.04T:elephant200v2
137.57137.69137.78T:isapxv20
420.50420.57420.62aes256gcmv1
4863.484864.034872.39T:elephant176v2
5570.895592.045597.59T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
7.527.617.84ascon128av12
7.767.847.98T:aes128gcmv1
7.957.998.07T:aes256gcmv1
9.629.669.79ascon128v12
9.629.699.87ascon80pqv12
17.9718.0418.34ascon128abi32v12
18.1818.4918.85T:xoodyakround3
22.3722.4722.78ascon128bi32v12
28.2228.3128.48T:schwaemm256128v2
30.2430.3830.64T:schwaemm128128v2
36.1536.3036.42T:giftcofb128v1
36.8737.0837.44T:schwaemm192192v2
39.7239.8940.08T:schwaemm256256v2
49.4449.5549.64romulusn
53.5553.6954.05T:romulusn
56.9356.9757.08T:tinyjambu128v2
59.8059.9059.97T:tinyjambu192v2
63.6463.8263.96romulusm
63.3563.9364.40T:tinyjambu256v2
71.4271.5971.68T:isapa128av20
146.22146.93147.61T:elephant200v2
147.54147.74148.14T!!!romulust
234.47234.96235.85T:isapk128av20
270.02270.31270.93T:isapa128v20
1514.261515.561518.61T:isapk128v20
2037.392039.522041.60T:isapxv20
6055.946059.436066.38T:elephant176v2
7489.137495.847498.06T:elephant160v2
11548.1711548.8911549.71aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
7.587.637.80ascon128av12
7.677.777.90T:aes128gcmv1
7.937.998.08T:aes256gcmv1
9.649.709.80ascon128v12
9.699.749.79ascon80pqv12
18.0018.1318.58ascon128abi32v12
18.0718.4918.80T:xoodyakround3
22.5322.6022.86ascon128bi32v12
28.0928.2828.41T:schwaemm256128v2
30.1530.3030.44T:schwaemm128128v2
36.3436.4336.54T:giftcofb128v1
36.8837.1237.43T:schwaemm192192v2
39.7639.9540.02T:schwaemm256256v2
49.8349.8849.94romulusn
53.7954.0454.52T:romulusn
57.3557.4357.48T:tinyjambu128v2
59.8359.9060.01T:tinyjambu192v2
63.9964.1164.28romulusm
63.4464.4064.58T:tinyjambu256v2
71.5171.7171.92T:isapa128av20
146.42147.01147.52T:elephant200v2
147.98148.14148.63T!!!romulust
234.20234.40235.14T:isapk128av20
270.20270.56270.90T:isapa128v20
1515.271516.221517.39T:isapk128v20
2038.182039.922041.11T:isapxv20
6055.266058.126070.25T:elephant176v2
7491.677494.897498.94T:elephant160v2
11546.0011547.1011549.73aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
7.457.487.49ascon128av12
7.717.737.77T:aes128gcmv1
7.907.927.95T:aes256gcmv1
9.609.689.73ascon128v12
9.639.689.77ascon80pqv12
17.9718.0718.13ascon128abi32v12
18.0518.3118.44T:xoodyakround3
22.5522.6122.69ascon128bi32v12
27.9728.1028.26T:schwaemm256128v2
30.0330.1930.34T:schwaemm128128v2
36.2736.4136.50T:giftcofb128v1
36.6736.9637.19T:schwaemm192192v2
39.7239.8439.95T:schwaemm256256v2
47.2147.3947.45T:isapa128av20
49.7549.8549.94romulusn
53.5753.7853.98T:romulusn
57.3057.3757.44T:tinyjambu128v2
59.6959.8259.93T:tinyjambu192v2
63.5364.1464.86T:tinyjambu256v2
64.0664.1664.30romulusm
92.4192.7193.09T!!!romulust
141.09141.24141.52T:isapa128v20
146.33146.71147.33T:elephant200v2
147.68147.83148.66T:isapk128av20
796.12797.74799.22T:isapk128v20
1067.371068.331069.46T:isapxv20
4045.654046.514047.33aes256gcmv1
6054.736058.636067.58T:elephant176v2
7490.537496.517499.91T:elephant160v2