VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Silvermont (406c4); 2016 Intel Atom x5-Z8350; 4 x 1440MHz; cherry, supercop-20251222

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
8.758.818.84T:aes128gcmv1
8.868.949.00aes256gcmv1
16.8616.8816.90ascon128av12
24.6224.6324.65ascon128v12
25.1025.1325.17ascon80pqv12
34.4034.4334.46ascon128abi32v12
51.3751.3851.40ascon128bi32v12
52.9352.9452.98T:xoodyakround3
53.9253.9454.04T:grain128aeadv2
57.2957.3257.34T:giftcofb128v1
58.1558.1758.19T:schwaemm256128v2
65.9065.9265.92T:schwaemm256256v2
77.3577.3877.40T:schwaemm192192v2
80.7680.7780.79T:schwaemm128128v2
92.2592.2892.29T:isapa128av20
105.71105.76105.96T:tinyjambu128v2
112.56113.74115.34T:isapa128v20
118.38118.42118.46T:romulusn
127.25127.26127.36T:tinyjambu192v2
139.20139.25139.36romulusn
139.21139.28139.37T:tinyjambu256v2
183.21184.07184.87T:isapk128av20
223.96224.05224.28romulusm
245.07245.51247.58T:isapk128v20
299.69300.09300.11T:elephant200v2
441.43441.54442.24T:isapxv20
480.30480.45481.84T!!!romulust
17774.5517775.8617793.53T:elephant176v2
19390.1719391.7919393.47T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
8.648.708.73T:aes128gcmv1
9.889.959.98aes256gcmv1
16.4816.5116.53ascon128av12
24.8724.8724.88ascon128v12
25.2425.2525.27ascon80pqv12
34.2434.2634.27ascon128abi32v12
51.0951.0951.12T:xoodyakround3
51.2551.2751.29ascon128bi32v12
54.8354.8954.89T:grain128aeadv2
56.9957.0157.05T:giftcofb128v1
58.3358.3658.38T:schwaemm256128v2
65.8165.8265.83T:schwaemm256256v2
77.9077.9277.95T:schwaemm192192v2
80.6480.6581.07T:schwaemm128128v2
92.2592.2692.32T:isapa128av20
107.50107.57107.58T:tinyjambu128v2
113.07115.25117.42T:isapa128v20
117.68117.77117.98T:romulusn
128.50128.50128.53T:tinyjambu192v2
139.11139.18139.34romulusn
140.50140.51140.61T:tinyjambu256v2
183.91184.05184.53T:isapk128av20
223.85223.93224.17romulusm
245.01245.68246.45T:isapk128v20
299.70300.09300.14T:elephant200v2
441.46441.55442.10T:isapxv20
480.30480.51481.81T!!!romulust
17774.6117776.7917793.41T:elephant176v2
19390.2819391.0319393.15T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
8.698.718.73T:aes128gcmv1
9.919.979.98aes256gcmv1
16.5116.5116.52ascon128av12
24.8724.8824.88ascon128v12
25.2425.2425.26ascon80pqv12
34.2634.2634.27ascon128abi32v12
51.1351.1751.19T:xoodyakround3
51.2651.2751.29ascon128bi32v12
54.8454.8954.89T:grain128aeadv2
57.0157.0157.03T:giftcofb128v1
56.1357.1558.14T:isapa128v20
58.3458.3758.41T:schwaemm256128v2
60.6160.6460.68T:isapa128av20
65.8165.8265.87T:schwaemm256256v2
77.9277.9277.93T:schwaemm192192v2
80.6480.6580.66T:schwaemm128128v2
107.48107.52107.58T:tinyjambu128v2
117.68117.71117.82T:romulusn
122.41122.55122.67T:isapk128av20
128.50128.50128.52T:tinyjambu192v2
139.13139.16139.26romulusn
140.50140.50140.55T:tinyjambu256v2
153.22153.38154.04T:isapk128v20
167.49167.56167.63T!!!romulust
223.86223.99224.35romulusm
244.02244.11244.22T:isapxv20
299.70300.09300.14T:elephant200v2
17773.6517775.3117793.04T:elephant176v2
19390.4619391.0519393.96T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
5.915.945.96T:aes128gcmv1
6.046.076.09aes256gcmv1
16.7316.7616.79ascon128av12
24.7424.7524.79ascon128v12
24.9925.0125.03ascon80pqv12
34.3134.3434.46ascon128abi32v12
39.2239.2339.28T:xoodyakround3
51.1851.1951.22ascon128bi32v12
53.5153.5553.63T:grain128aeadv2
57.1657.1857.33T:giftcofb128v1
57.9958.0058.08T:schwaemm256128v2
65.5965.6065.63T:schwaemm256256v2
76.4476.4576.46T:isapa128av20
76.3976.4876.52T:schwaemm192192v2
80.4180.4280.42T:schwaemm128128v2
84.8985.8486.66T:isapa128v20
86.1186.2686.31T:tinyjambu128v2
99.99100.00100.10T:tinyjambu192v2
105.61105.66105.69T:romulusn
105.87105.88105.91T:tinyjambu256v2
111.92111.98112.31romulusn
153.31153.41153.78T:isapk128av20
154.30154.33154.45romulusm
199.13199.26200.38T:isapk128v20
222.74222.78223.16T:elephant200v2
323.69323.87326.79T!!!romulust
343.85343.96344.25T:isapxv20
13276.3213277.1113290.11T:elephant176v2
14540.5414541.1814541.98T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
5.855.885.91T:aes128gcmv1
6.446.486.53aes256gcmv1
16.4716.5416.55ascon128av12
24.7924.8124.84ascon80pqv12
24.9925.0025.04ascon128v12
34.2134.2334.25ascon128abi32v12
38.3238.3338.36T:xoodyakround3
51.1351.1451.16ascon128bi32v12
54.1554.2354.38T:grain128aeadv2
57.0357.0557.06T:giftcofb128v1
58.0758.0858.16T:schwaemm256128v2
65.5365.5565.58T:schwaemm256256v2
76.4376.4476.69T:isapa128av20
76.6776.7576.82T:schwaemm192192v2
80.3480.3580.36T:schwaemm128128v2
84.6486.0288.00T:isapa128v20
87.0087.0787.15T:tinyjambu128v2
100.60100.63100.71T:tinyjambu192v2
105.32105.35105.62T:romulusn
106.49106.51106.57T:tinyjambu256v2
111.63111.95112.28romulusn
153.26153.36153.68T:isapk128av20
154.25154.29154.39romulusm
199.03199.36199.67T:isapk128v20
222.74222.76223.12T:elephant200v2
323.73324.29327.86T!!!romulust
343.86344.01344.27T:isapxv20
13276.2613277.5413290.76T:elephant176v2
14540.4814540.8414542.60T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
5.885.895.90T:aes128gcmv1
6.486.496.50aes256gcmv1
16.5216.5316.55ascon128av12
24.8024.8224.83ascon80pqv12
24.9925.0025.03ascon128v12
34.2234.2334.25ascon128abi32v12
38.3538.3638.37T:xoodyakround3
51.1451.1451.16ascon128bi32v12
54.2654.3254.34T:grain128aeadv2
57.0157.0457.05T:giftcofb128v1
56.4457.3057.96T:isapa128v20
58.0858.0858.18T:schwaemm256128v2
60.6260.6360.65T:isapa128av20
65.5465.5565.57T:schwaemm256256v2
76.6776.7776.78T:schwaemm192192v2
80.3480.3580.36T:schwaemm128128v2
87.0087.0287.09T:tinyjambu128v2
100.61100.62100.64T:tinyjambu192v2
105.32105.37105.80T:romulusn
106.48106.50106.51T:tinyjambu256v2
111.91111.92111.97romulusn
122.54122.61122.71T:isapk128av20
153.09153.14153.36T:isapk128v20
154.27154.29154.36romulusm
167.19167.30168.63T!!!romulust
222.74222.77223.17T:elephant200v2
244.89245.22245.49T:isapxv20
13276.1113277.2913290.04T:elephant176v2
14540.7914541.3914542.50T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
3.013.073.08T:aes128gcmv1
3.173.183.21aes256gcmv1
16.6116.6416.67ascon128av12
24.8324.8824.92ascon80pqv12
24.8724.8824.90ascon128v12
25.5725.5825.59T:xoodyakround3
34.1734.2134.58ascon128abi32v12
51.0051.0151.10ascon128bi32v12
53.1553.2053.30T:grain128aeadv2
56.9857.0357.12T:giftcofb128v1
56.6057.1957.76T:isapa128v20
57.8357.8357.92T:schwaemm256128v2
60.6260.6360.69T:isapa128av20
65.2865.2865.28T:schwaemm256256v2
66.4966.5366.60T:tinyjambu128v2
72.5072.5072.52T:tinyjambu256v2
72.7672.7872.84T:tinyjambu192v2
75.6175.6275.63T:schwaemm192192v2
80.0880.0880.08T:schwaemm128128v2
84.6384.6984.78romulusn
84.6884.6984.91romulusm
92.8992.9192.99T:romulusn
122.62122.73122.85T:isapk128av20
147.04147.06147.08T:elephant200v2
152.85152.98153.09T:isapk128v20
167.07167.08167.20T!!!romulust
246.27246.36247.00T:isapxv20
8780.588781.698790.09T:elephant176v2
9689.649690.569691.25T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
2.983.013.04aes256gcmv1
3.013.063.07T:aes128gcmv1
16.5016.5516.59ascon128av12
24.3624.3824.39ascon80pqv12
25.1225.1225.14ascon128v12
25.5525.5825.74T:xoodyakround3
34.1634.2034.22ascon128abi32v12
51.0051.0151.03ascon128bi32v12
53.5653.5953.62T:grain128aeadv2
56.9757.0357.05T:giftcofb128v1
56.3357.1858.26T:isapa128v20
57.8357.8357.88T:schwaemm256128v2
60.6160.6360.69T:isapa128av20
65.2765.2965.30T:schwaemm256256v2
66.4866.5566.63T:tinyjambu128v2
72.5072.5072.51T:tinyjambu256v2
72.7672.7972.81T:tinyjambu192v2
75.6275.6475.69T:schwaemm192192v2
80.0780.0880.12T:schwaemm128128v2
84.6684.6884.75romulusm
84.6584.7084.74romulusn
92.9092.9793.06T:romulusn
122.63122.72122.84T:isapk128av20
147.04147.08147.11T:elephant200v2
152.84152.94153.11T:isapk128v20
167.02167.10167.20T!!!romulust
246.28246.62246.67T:isapxv20
8780.408781.118790.04T:elephant176v2
9689.609690.399691.02T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
3.013.013.01aes256gcmv1
3.063.063.07T:aes128gcmv1
16.5416.5516.58ascon128av12
24.3824.3824.39ascon80pqv12
25.1225.1225.12ascon128v12
25.5625.5825.59T:xoodyakround3
34.1934.2034.21ascon128abi32v12
51.0051.0151.03ascon128bi32v12
53.5953.6053.70T:grain128aeadv2
56.9957.0257.03T:giftcofb128v1
56.2257.1458.10T:isapa128v20
57.8257.8357.87T:schwaemm256128v2
60.6260.6460.69T:isapa128av20
65.2865.2865.28T:schwaemm256256v2
66.5066.5166.53T:tinyjambu128v2
72.5072.5072.50T:tinyjambu256v2
72.7572.7972.87T:tinyjambu192v2
75.6275.6275.65T:schwaemm192192v2
80.0880.0880.12T:schwaemm128128v2
84.6784.7184.86romulusm
84.6984.7284.74romulusn
92.9192.9492.99T:romulusn
122.54122.69122.81T:isapk128av20
147.04147.06147.09T:elephant200v2
152.86152.97153.72T:isapk128v20
167.07167.08167.18T!!!romulust
246.22246.36247.00T:isapxv20
8780.338781.388790.07T:elephant176v2
9689.609690.459691.55T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
6.336.336.35T:aes128gcmv1
6.446.446.48aes256gcmv1
17.1317.1317.15ascon128av12
25.1025.1025.13ascon128v12
25.3725.3725.40ascon80pqv12
35.0535.0635.10ascon128abi32v12
39.6139.6139.62T:xoodyakround3
51.8851.8951.90ascon128bi32v12
54.2754.3354.33T:grain128aeadv2
57.8457.8557.86T:giftcofb128v1
59.6659.6759.68T:schwaemm256128v2
67.2767.2767.28T:schwaemm256256v2
78.0878.1078.14T:schwaemm192192v2
81.4381.4381.43T:schwaemm128128v2
81.6981.6981.72T:isapa128av20
86.9087.1787.22T:tinyjambu128v2
100.76100.81100.90T:tinyjambu192v2
106.68106.69106.85T:tinyjambu256v2
107.03107.03107.27T:romulusn
112.95112.97113.36romulusn
125.17125.48126.19T:isapa128v20
155.41155.41155.57romulusm
192.19192.25192.45T:isapk128av20
227.32227.47227.50T:elephant200v2
328.58328.61329.88T!!!romulust
375.25375.43375.93T:isapk128v20
554.78554.82555.21T:isapxv20
13378.0013379.1213390.21T:elephant176v2
14704.9114705.6214706.33T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
6.296.296.32T:aes128gcmv1
6.866.866.93aes256gcmv1
16.9216.9316.96ascon128av12
25.1825.1925.21ascon80pqv12
25.3625.3625.40ascon128v12
34.9734.9735.01ascon128abi32v12
38.7238.7338.76T:xoodyakround3
51.8451.8451.86ascon128bi32v12
54.9654.9955.13T:grain128aeadv2
57.7257.7757.92T:giftcofb128v1
59.7659.7659.78T:schwaemm256128v2
67.2167.2167.22T:schwaemm256256v2
78.3678.3678.36T:schwaemm192192v2
81.3781.3781.38T:schwaemm128128v2
81.9181.9181.93T:isapa128av20
87.7387.7887.91T:tinyjambu128v2
101.40101.43101.47T:tinyjambu192v2
106.72106.74106.78T:romulusn
107.32107.32107.34T:tinyjambu256v2
112.93112.95113.01romulusn
125.20125.60126.74T:isapa128v20
155.52155.61156.75romulusm
192.23192.32192.49T:isapk128av20
227.47227.49227.54T:elephant200v2
328.55328.63330.40T!!!romulust
375.29375.41375.66T:isapk128v20
554.80554.85555.19T:isapxv20
13378.0113379.2813390.26T:elephant176v2
14704.9114705.5214707.07T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
6.296.296.30T:aes128gcmv1
6.866.866.87aes256gcmv1
16.9216.9216.92ascon128av12
25.1925.1925.23ascon80pqv12
25.3625.3625.38ascon128v12
34.9734.9734.99ascon128abi32v12
38.7738.7738.79T:xoodyakround3
51.8451.8451.88ascon128bi32v12
54.9355.0155.11T:grain128aeadv2
57.7157.7357.75T:giftcofb128v1
59.7659.7659.76T:schwaemm256128v2
63.8063.8063.82T:isapa128av20
67.2167.2167.25T:schwaemm256256v2
77.0877.3777.98T:isapa128v20
78.3678.3678.37T:schwaemm192192v2
81.3781.3781.37T:schwaemm128128v2
87.7287.8187.91T:tinyjambu128v2
101.40101.42101.44T:tinyjambu192v2
106.71106.73106.79T:romulusn
107.32107.32107.33T:tinyjambu256v2
112.93112.93113.20romulusn
150.01150.05150.10T:isapk128av20
155.51155.53155.62romulusm
171.94171.96172.08T!!!romulust
227.47227.48227.51T:elephant200v2
249.74249.77250.21T:isapk128v20
353.14353.17353.54T:isapxv20
13378.0813378.3613390.22T:elephant176v2
14705.0114705.5414706.05T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
21.2021.3721.95T:aes128gcmv1
22.4122.5923.25aes256gcmv1
25.6525.9127.15ascon128av12
33.0233.1234.09ascon128v12
33.3233.3634.39ascon80pqv12
51.8851.9252.85ascon128abi32v12
58.1958.3758.52T:xoodyakround3
67.6667.8568.30ascon128bi32v12
70.5570.5971.74T:grain128aeadv2
73.0173.0174.12T:giftcofb128v1
97.7397.7898.00T:schwaemm256128v2
102.55102.55102.99T:tinyjambu128v2
104.62104.64105.03T:schwaemm128128v2
105.14105.14105.62T:schwaemm256256v2
118.30118.46118.70T:tinyjambu192v2
124.27124.38125.15T:schwaemm192192v2
125.10125.10125.23T:tinyjambu256v2
135.34135.70136.41romulusn
138.90139.00139.27T:romulusn
178.63178.69180.53romulusm
202.24202.30202.91T:isapa128av20
321.15321.20321.52T:elephant200v2
439.47439.82441.91T!!!romulust
1031.681036.121055.52T:isapa128v20
1054.201055.321058.29T:isapk128av20
4384.984388.004400.67T:isapk128v20
5344.715345.125345.90T:isapxv20
16658.3316668.3016672.43T:elephant176v2
19686.2519691.2319701.90T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
21.5021.6421.89T:aes128gcmv1
22.2822.4523.02aes256gcmv1
25.6225.7427.27ascon128av12
33.3633.3834.12ascon128v12
33.4533.5034.07ascon80pqv12
51.9852.0952.93ascon128abi32v12
57.1757.4258.05T:xoodyakround3
67.7167.7668.23ascon128bi32v12
71.3071.4174.30T:grain128aeadv2
73.5273.6174.07T:giftcofb128v1
97.8897.9598.04T:schwaemm256128v2
103.68103.68103.73T:tinyjambu128v2
104.65104.75104.84T:schwaemm128128v2
105.05105.05105.59T:schwaemm256256v2
119.20119.37119.41T:tinyjambu192v2
124.92124.99125.48T:schwaemm192192v2
126.07126.07126.22T:tinyjambu256v2
135.41135.50135.88romulusn
138.41138.47139.25T:romulusn
183.26183.33184.88romulusm
207.50207.66207.80T:isapa128av20
321.17321.27321.31T:elephant200v2
439.85441.16441.80T!!!romulust
1035.071044.611068.69T:isapa128v20
1055.791056.111058.12T:isapk128av20
4384.554389.014392.09T:isapk128v20
5345.275345.775346.65T:isapxv20
16658.3016668.9116675.62T:elephant176v2
19686.0519692.4419698.46T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
21.4221.5021.73T:aes128gcmv1
22.2822.4522.45aes256gcmv1
25.6125.6226.02ascon128av12
33.3533.3833.41ascon80pqv12
33.3633.3833.44ascon128v12
51.9651.9952.04ascon128abi32v12
57.4657.7058.33T:xoodyakround3
67.7267.7367.79ascon128bi32v12
70.8770.8771.17T:grain128aeadv2
73.5273.5273.61T:giftcofb128v1
97.8697.8897.95T:schwaemm256128v2
103.66103.66103.66T:tinyjambu128v2
104.63104.69104.84T:schwaemm128128v2
105.04105.04105.05T:schwaemm256256v2
119.19119.28119.41T:tinyjambu192v2
124.88125.07125.14T:schwaemm192192v2
126.07126.07126.07T:tinyjambu256v2
135.35135.48136.05romulusn
136.52136.58136.84T:isapa128av20
138.16138.20138.37T:romulusn
183.17183.29183.41romulusm
278.94278.94279.80T!!!romulust
321.17321.22321.28T:elephant200v2
534.45537.55552.72T:isapa128v20
756.35756.62757.28T:isapk128av20
2439.622440.732441.48T:isapk128v20
2789.272789.302789.96T:isapxv20
16659.2816666.9316675.41T:elephant176v2
19686.9819694.6619699.13T:elephant160v2