VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; K10 45nm (100f63); 2010 AMD Athlon II Neo K125; 1 x 1700MHz; h3neo, supercop-20251114

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
9.459.519.52ascon128av12
13.9113.9213.93ascon128v12
14.0414.0414.05ascon80pqv12
18.7418.7818.79ascon128abi32v12
26.7726.7826.83T:xoodyakround3
28.2428.2628.26ascon128bi32v12
35.4235.4735.56T:schwaemm256128v2
39.3339.4539.96T:aes128gcmv1
43.3743.9644.37T:aes256gcmv1
45.5545.5745.58T:giftcofb128v1
47.1047.1247.23T:schwaemm192192v2
50.7450.8951.04T:schwaemm256256v2
52.1352.1652.48T:schwaemm128128v2
55.8455.8855.90T:isapa128v20
59.6259.6759.69T:isapa128av20
68.6268.6768.81T:grain128aeadv2
80.4180.4180.42T:tinyjambu128v2
92.4293.4493.47T:romulusn
100.03100.03100.06T:tinyjambu192v2
108.18108.19108.20T:tinyjambu256v2
108.89108.92109.00T:isapk128av20
151.16151.37151.71T:isapk128v20
195.64195.78195.82romulusn
238.64241.07241.21T:elephant200v2
333.92334.54337.18T:isapxv20
372.46372.92375.96romulusm
802.00802.41803.47T!!!romulust
15665.9915666.3315666.84T:elephant160v2
15964.6615992.0415995.21T:elephant176v2
25354.4125378.0625394.98aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
9.499.539.54ascon128av12
13.8713.8713.88ascon80pqv12
14.1214.1314.14ascon128v12
18.8118.8318.84ascon128abi32v12
26.3326.3526.39T:xoodyakround3
29.1229.1329.13ascon128bi32v12
35.5335.5635.59T:schwaemm256128v2
39.1739.4139.86T:aes128gcmv1
43.7343.9944.32T:aes256gcmv1
45.3045.3145.32T:giftcofb128v1
47.1847.2047.33T:schwaemm192192v2
50.7350.7951.04T:schwaemm256256v2
52.1352.2652.35T:schwaemm128128v2
55.8755.8855.89T:isapa128v20
59.6059.6359.66T:isapa128av20
69.8169.8269.82T:grain128aeadv2
80.7580.7580.76T:tinyjambu128v2
91.7291.7791.78T:romulusn
100.25100.25100.26T:tinyjambu192v2
107.74107.75107.76T:tinyjambu256v2
108.78109.08109.32T:isapk128av20
151.34151.38151.86T:isapk128v20
195.83195.96195.98romulusn
238.52241.03241.03T:elephant200v2
332.68336.08337.39T:isapxv20
372.31373.17376.33romulusm
803.66804.31804.59T!!!romulust
15666.0315666.7215670.48T:elephant160v2
15992.0415992.5715996.50T:elephant176v2
25353.5925364.1425382.80aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
9.539.539.54ascon128av12
13.8713.8813.88ascon80pqv12
14.1214.1314.13ascon128v12
18.8318.8318.90ascon128abi32v12
26.4726.4826.53T:xoodyakround3
27.4727.5027.53T:isapa128v20
29.1229.1329.13ascon128bi32v12
35.5335.5535.58T:schwaemm256128v2
39.3139.3839.93T:aes128gcmv1
39.4839.5139.54T:isapa128av20
43.1643.7744.07T:aes256gcmv1
45.3245.3345.33T:giftcofb128v1
47.1747.2047.32T:schwaemm192192v2
50.7450.7951.04T:schwaemm256256v2
52.1452.2652.35T:schwaemm128128v2
69.8269.8269.82T:grain128aeadv2
72.2272.2572.29T:isapk128av20
80.7580.7680.77T:tinyjambu128v2
91.7391.7491.76T:romulusn
98.8598.8698.88T:isapk128v20
100.25100.25100.26T:tinyjambu192v2
107.75107.75107.76T:tinyjambu256v2
195.81195.97195.98romulusn
200.47200.79203.97T:isapxv20
238.49241.03241.21T:elephant200v2
255.32255.65256.14T!!!romulust
372.32372.65376.32romulusm
678.87679.20679.37aes256gcmv1
15666.2515667.5015670.18T:elephant160v2
15991.8415992.2915994.02T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
9.219.259.28ascon128av12
14.0114.0214.03ascon80pqv12
14.0214.0214.03ascon128v12
18.6818.7118.73ascon128abi32v12
20.6020.6520.68T:xoodyakround3
23.3823.5223.74T:aes128gcmv1
25.8025.9026.02T:aes256gcmv1
27.8027.8127.83ascon128bi32v12
35.3735.3935.48T:schwaemm256128v2
41.6141.6341.65T:isapa128v20
45.4445.4545.46T:giftcofb128v1
47.0447.1547.18T:schwaemm192192v2
49.5649.5749.60T:isapa128av20
50.6050.7350.91T:schwaemm256256v2
52.0252.0952.22T:schwaemm128128v2
65.8565.8565.87T:tinyjambu128v2
68.3068.3168.45T:grain128aeadv2
78.4378.4478.45T:tinyjambu192v2
79.7379.7579.76T:romulusn
81.4481.4681.49T:tinyjambu256v2
90.5690.5790.61T:isapk128av20
118.43118.54118.61T:isapk128v20
178.56180.41180.46T:elephant200v2
185.49185.53185.56romulusn
267.36267.49267.65T:isapxv20
274.45275.11278.99romulusm
530.07530.37530.53T!!!romulust
11748.9111749.1811752.00T:elephant160v2
11945.7311948.1111948.30T:elephant176v2
13016.8513023.1613031.02aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
9.249.269.27ascon128av12
14.1214.1314.14ascon128v12
14.1214.1314.14ascon80pqv12
18.6818.7118.72ascon128abi32v12
20.3620.3920.43T:xoodyakround3
23.3823.4723.62T:aes128gcmv1
25.6925.9926.09T:aes256gcmv1
28.3128.3128.32ascon128bi32v12
35.4035.4235.49T:schwaemm256128v2
41.6241.6341.66T:isapa128v20
45.3045.3245.34T:giftcofb128v1
47.0547.0747.20T:schwaemm192192v2
49.5449.5649.58T:isapa128av20
50.6750.7350.93T:schwaemm256256v2
52.0352.0752.22T:schwaemm128128v2
66.0266.0366.03T:tinyjambu128v2
68.6468.6768.68T:grain128aeadv2
78.5478.5478.55T:tinyjambu192v2
79.3879.4079.42T:romulusn
81.2481.2581.26T:tinyjambu256v2
90.5290.6590.72T:isapk128av20
118.43118.45118.62T:isapk128v20
178.49180.40180.53T:elephant200v2
185.58185.60185.66romulusn
266.91267.63268.49T:isapxv20
274.19275.38278.13romulusm
529.69530.43530.84T!!!romulust
11748.9311750.2111752.35T:elephant160v2
11941.0911948.1011951.15T:elephant176v2
13015.4113021.9813027.13aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
9.269.269.27ascon128av12
14.1214.1214.13ascon80pqv12
14.1314.1314.15ascon128v12
18.7118.7118.71ascon128abi32v12
20.4320.4620.48T:xoodyakround3
23.4423.4923.76T:aes128gcmv1
25.4425.5525.94T:aes256gcmv1
27.4227.4427.45T:isapa128v20
28.3128.3128.31ascon128bi32v12
35.4235.4235.49T:schwaemm256128v2
39.4839.5039.52T:isapa128av20
45.3245.3345.33T:giftcofb128v1
47.0547.0947.24T:schwaemm192192v2
50.6150.7050.92T:schwaemm256256v2
52.0752.1152.22T:schwaemm128128v2
66.0366.0466.04T:tinyjambu128v2
68.6668.6768.77T:grain128aeadv2
72.2372.2572.26T:isapk128av20
78.5478.5478.55T:tinyjambu192v2
79.3979.4079.40T:romulusn
81.2481.2581.25T:tinyjambu256v2
92.1692.1992.33T:isapk128v20
178.47180.40180.62T:elephant200v2
185.62185.72185.76romulusn
200.84200.88201.07T:isapxv20
255.92256.05256.19T!!!romulust
274.88278.09278.94romulusm
678.91679.07679.20aes256gcmv1
11748.8211749.1811749.90T:elephant160v2
11943.3911948.1611950.93T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
7.417.587.62T:aes128gcmv1
7.678.068.34T:aes256gcmv1
8.968.988.98ascon128av12
13.9914.0014.00ascon80pqv12
14.1214.1214.14ascon128v12
14.3014.3714.41T:xoodyakround3
18.6118.6418.64ascon128abi32v12
27.3627.3727.38T:isapa128v20
27.3727.3827.39ascon128bi32v12
35.2635.2935.36T:schwaemm256128v2
39.4939.5139.54T:isapa128av20
45.3145.3445.34T:giftcofb128v1
46.9647.0047.13T:schwaemm192192v2
50.4750.5850.80T:schwaemm256256v2
51.3151.3251.33T:tinyjambu128v2
51.8851.8852.08T:schwaemm128128v2
54.7454.7554.76T:tinyjambu256v2
56.8456.8556.86T:tinyjambu192v2
67.0967.1167.17T:romulusn
67.9668.0168.02T:grain128aeadv2
72.2372.2472.66T:isapk128av20
85.4985.5585.60T:isapk128v20
119.59120.82120.86T:elephant200v2
174.86175.34176.26romulusn
175.89176.78179.07romulusm
200.73200.75200.90T:isapxv20
255.25255.36255.61T!!!romulust
678.86679.06679.26aes256gcmv1
7832.827833.217835.53T:elephant160v2
7904.887905.337907.80T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
7.547.587.92T:aes128gcmv1
7.918.058.19T:aes256gcmv1
8.968.999.00ascon128av12
14.1214.1214.13ascon128v12
14.3014.3314.36T:xoodyakround3
14.3714.3814.38ascon80pqv12
18.5618.5818.59ascon128abi32v12
27.3627.3827.40T:isapa128v20
27.4927.5027.51ascon128bi32v12
35.2735.2835.36T:schwaemm256128v2
39.4939.5039.51T:isapa128av20
45.3245.3345.34T:giftcofb128v1
46.9346.9847.14T:schwaemm192192v2
50.4550.5850.80T:schwaemm256256v2
51.3051.3251.33T:tinyjambu128v2
51.8851.8952.08T:schwaemm128128v2
54.7454.7554.76T:tinyjambu256v2
56.8356.8456.85T:tinyjambu192v2
67.0767.0967.16T:romulusn
67.4467.5267.52T:grain128aeadv2
72.2272.2572.28T:isapk128av20
85.5085.5385.93T:isapk128v20
119.89120.82120.90T:elephant200v2
175.26175.34176.25romulusn
175.85176.98179.43romulusm
200.73200.97201.14T:isapxv20
255.43255.56255.70T!!!romulust
678.81679.14679.26aes256gcmv1
7832.867833.427835.26T:elephant160v2
7900.277905.717907.84T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
7.497.608.01T:aes128gcmv1
7.54?8.05?8.56?T:aes256gcmv1
8.988.998.99ascon128av12
14.1214.1314.13ascon128v12
14.2814.3214.34T:xoodyakround3
14.3714.3814.38ascon80pqv12
18.5718.5818.59ascon128abi32v12
27.3627.3827.39T:isapa128v20
27.4927.5027.51ascon128bi32v12
35.2735.2935.36T:schwaemm256128v2
39.4839.5039.52T:isapa128av20
45.3245.3245.34T:giftcofb128v1
46.9446.9847.15T:schwaemm192192v2
50.4550.5750.80T:schwaemm256256v2
51.3051.3251.33T:tinyjambu128v2
51.8851.8852.08T:schwaemm128128v2
54.7454.7554.77T:tinyjambu256v2
56.8456.8456.85T:tinyjambu192v2
67.0867.1267.16T:romulusn
67.5267.5267.58T:grain128aeadv2
72.2372.2572.56T:isapk128av20
85.5185.5385.73T:isapk128v20
119.64120.82120.91T:elephant200v2
175.28175.35175.67romulusn
175.97176.54179.38romulusm
200.80200.97201.22T:isapxv20
255.09255.32255.64T!!!romulust
678.84679.17679.28aes256gcmv1
7832.777833.237835.15T:elephant160v2
7892.647905.367907.96T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
9.469.469.50ascon128av12
14.2314.2314.24ascon128v12
14.2314.2414.27ascon80pqv12
19.1119.1219.14ascon128abi32v12
20.7820.8020.88T:xoodyakround3
25.8325.8926.08T:aes128gcmv1
28.2528.2528.26ascon128bi32v12
29.5829.8229.96T:aes256gcmv1
36.4236.4236.51T:schwaemm256128v2
45.9345.9345.94T:giftcofb128v1
48.1048.1148.20T:schwaemm192192v2
52.0752.0852.25T:schwaemm256256v2
52.7652.7652.88T:schwaemm128128v2
53.3753.3753.41T:isapa128av20
60.5860.5860.61T:isapa128v20
66.3966.3966.40T:tinyjambu128v2
68.7568.7568.86T:grain128aeadv2
79.0479.0579.08T:tinyjambu192v2
80.7480.7580.78T:romulusn
82.0982.0982.15T:tinyjambu256v2
106.45106.48106.51T:isapk128av20
182.47184.19184.21T:elephant200v2
187.44187.45187.62romulusn
206.39206.40206.58T:isapk128v20
276.46277.37280.18romulusm
440.66440.78442.15T:isapxv20
537.29538.06538.26T!!!romulust
11880.7311881.6811883.98T:elephant160v2
12024.0212039.7112039.98T:elephant176v2
13277.3713286.2313322.48aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
9.489.489.49ascon128av12
14.3514.3514.35ascon128v12
14.3514.3514.36ascon80pqv12
19.1219.1219.13ascon128abi32v12
20.5620.6120.67T:xoodyakround3
25.8725.9026.10T:aes128gcmv1
28.7628.7628.77ascon128bi32v12
30.9131.2331.50T:aes256gcmv1
36.4536.4636.51T:schwaemm256128v2
45.8245.8245.84T:giftcofb128v1
48.1048.1048.22T:schwaemm192192v2
51.9752.0452.25T:schwaemm256256v2
52.7452.7652.88T:schwaemm128128v2
53.3853.3953.40T:isapa128av20
60.5860.5960.59T:isapa128v20
66.5566.5666.56T:tinyjambu128v2
69.1069.1069.11T:grain128aeadv2
79.1679.1779.17T:tinyjambu192v2
80.3980.4180.51T:romulusn
81.8781.8781.90T:tinyjambu256v2
106.50106.60106.61T:isapk128av20
182.57184.17184.18T:elephant200v2
187.56187.68187.73romulusn
206.37206.42206.59T:isapk128v20
277.80278.11280.80romulusm
441.24441.36443.54T:isapxv20
537.69538.12538.30T!!!romulust
11880.6911881.1311883.45T:elephant160v2
12030.9912040.0112040.21T:elephant176v2
13277.8913284.6813304.92aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
9.489.489.49ascon128av12
14.3414.3414.35ascon80pqv12
14.3414.3514.35ascon128v12
19.1219.1219.12ascon128abi32v12
20.6320.6820.73T:xoodyakround3
25.8625.8826.12T:aes128gcmv1
28.7628.7628.76ascon128bi32v12
36.4536.4736.51T:schwaemm256128v2
37.0737.0837.09T:isapa128v20
38.8339.0239.16T:aes256gcmv1
41.6541.6641.67T:isapa128av20
45.8245.8345.83T:giftcofb128v1
48.1048.1348.23T:schwaemm192192v2
52.0252.0352.26T:schwaemm256256v2
52.6952.7452.88T:schwaemm128128v2
66.5566.5566.56T:tinyjambu128v2
69.1069.1069.10T:grain128aeadv2
79.1779.1779.17T:tinyjambu192v2
80.3780.3880.41T:romulusn
81.8681.8781.87T:tinyjambu256v2
82.7282.7382.78T:isapk128av20
139.70139.74139.76T:isapk128v20
182.45184.17184.17T:elephant200v2
187.57187.70187.85romulusn
262.51262.94263.27T!!!romulust
277.37277.85280.20romulusm
289.84289.98291.39T:isapxv20
939.76939.79939.88aes256gcmv1
11880.6111881.1611883.64T:elephant160v2
12024.9612039.6212039.93T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
14.3814.3815.11ascon128av12
18.7218.8219.80ascon128v12
18.8418.8619.70ascon80pqv12
28.4528.4829.01ascon128abi32v12
31.3031.3831.83T:xoodyakround3
37.9737.9738.79ascon128bi32v12
56.7556.7857.50T:giftcofb128v1
59.8259.8760.19T:schwaemm256128v2
68.2368.2968.33T:schwaemm128128v2
77.7377.9678.12T:schwaemm192192v2
78.3978.4578.45T:grain128aeadv2
78.6978.7678.94T:tinyjambu128v2
78.8779.1680.92T:aes128gcmv1
82.5682.8783.01T:schwaemm256256v2
93.1793.1793.35T:tinyjambu192v2
96.5596.5597.04T:tinyjambu256v2
103.82103.92104.14T:romulusn
114.34114.84121.04T:aes256gcmv1
140.65140.69141.31T:isapa128av20
231.73231.80232.16romulusn
259.09260.27261.03T:elephant200v2
322.30323.02326.79romulusm
452.50453.26453.55T:isapk128av20
496.17496.19496.98T:isapa128v20
725.30726.08726.25T!!!romulust
2205.662205.792205.95T:isapk128v20
4374.344375.354377.46T:isapxv20
15011.6115014.6615015.13T:elephant176v2
15885.5115886.0515889.45T:elephant160v2
19277.3719280.0719296.02aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
14.3914.4615.04ascon128av12
19.0919.1919.90ascon128v12
19.1219.2319.85ascon80pqv12
28.4528.5229.20ascon128abi32v12
31.0931.1031.26T:xoodyakround3
38.8438.8439.49ascon128bi32v12
57.1757.1857.80T:giftcofb128v1
59.7359.8159.82T:schwaemm256128v2
68.0968.1768.23T:schwaemm128128v2
77.4577.4777.84T:schwaemm192192v2
78.6778.7178.73T:grain128aeadv2
78.6378.7378.88T:tinyjambu128v2
80.5981.0081.67T:aes128gcmv1
82.5182.6883.00T:schwaemm256256v2
93.5493.5693.69T:tinyjambu192v2
96.2396.2896.43T:tinyjambu256v2
103.18103.20103.43T:romulusn
141.32141.34141.88T:isapa128av20
148.79149.35153.73T:aes256gcmv1
232.52232.65233.03romulusn
258.67260.29260.55T:elephant200v2
341.77342.81348.02romulusm
453.75453.89456.03T:isapk128av20
496.25496.32496.44T:isapa128v20
724.52724.97726.36T!!!romulust
2205.552205.732211.40T:isapk128v20
4382.914384.714407.23T:isapxv20
15011.7715014.9715022.00T:elephant176v2
15885.4015886.4115890.50T:elephant160v2
19273.1719281.9919296.85aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
14.3914.4514.46ascon128av12
19.0819.0919.17ascon128v12
19.1219.1319.14ascon80pqv12
28.4428.4528.52ascon128abi32v12
31.2331.3931.52T:xoodyakround3
38.8638.8638.86ascon128bi32v12
57.1657.1857.18T:giftcofb128v1
59.7359.8159.82T:schwaemm256128v2
68.0968.1768.23T:schwaemm128128v2
77.3877.4577.83T:schwaemm192192v2
78.5278.6378.74T:tinyjambu128v2
78.6778.7178.73T:grain128aeadv2
80.0980.7381.16T:aes128gcmv1
82.4482.5683.02T:schwaemm256256v2
91.1891.2691.71T:isapa128av20
93.4793.5293.55T:tinyjambu192v2
96.2096.2496.27T:tinyjambu256v2
102.99103.03103.11T:romulusn
232.54232.88232.92romulusn
258.50258.59259.02T:isapa128v20
259.55260.29260.79T:elephant200v2
308.30308.35308.44T:isapk128av20
341.06343.41347.20romulusm
344.02349.46350.19T:aes256gcmv1
429.48429.66430.59T!!!romulust
1213.981214.361214.61T:isapk128v20
2297.462298.382298.56T:isapxv20
6935.526938.166940.99aes256gcmv1
14973.9215014.4315015.80T:elephant176v2
15885.4815886.1615889.79T:elephant160v2