VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Bonnell (106ca); 2011 Intel Atom N435; 1 x 1330MHz; h4atom, supercop-20250922

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
13.9614.0114.01ascon128av12
19.6320.9321.01ascon80pqv12
20.9921.0021.01ascon128v12
32.8533.3634.39T:aes128gcmv1
34.1534.2034.22ascon128abi32v12
38.5539.3240.38T:aes256gcmv1
49.8549.8949.92ascon128bi32v12
55.0955.1455.20T:giftcofb128v1
56.7256.7756.92T:xoodyakround3
59.5759.5959.65T:schwaemm256128v2
78.9278.9679.03T:schwaemm192192v2
82.3982.5387.42T:isapa128v20
83.1783.2183.25T:schwaemm128128v2
84.2384.2684.38T:isapa128av20
85.2885.3385.41T:schwaemm256256v2
177.59177.74178.33T:romulusn
181.40181.59182.26T:grain128aeadv2
192.04192.08192.64romulusn
201.17201.59207.69T:isapk128av20
207.71207.88208.38T:tinyjambu128v2
260.02260.08260.84T:tinyjambu192v2
263.49267.03270.62T:isapk128v20
276.01276.07277.14T:tinyjambu256v2
311.40311.48313.03romulusm
397.30398.21399.02T:elephant200v2
526.06527.10533.22T:isapxv20
572.40572.56574.37T!!!romulust
41734.7041743.4141779.09T:elephant160v2
45197.9945402.0645455.78T:elephant176v2
53725.2553753.1153806.45aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
13.9213.9513.95ascon128av12
20.8520.8820.89ascon80pqv12
20.8620.8820.89ascon128v12
33.0733.4834.32T:aes128gcmv1
33.6933.7133.75ascon128abi32v12
38.3639.2140.10T:aes256gcmv1
49.6249.6549.70ascon128bi32v12
53.2753.3353.43T:xoodyakround3
54.8554.9155.64T:giftcofb128v1
59.5959.6159.63T:schwaemm256128v2
78.9278.9879.01T:schwaemm192192v2
82.1282.5182.94T:isapa128v20
83.1683.2083.22T:schwaemm128128v2
84.2384.2684.40T:isapa128av20
89.4389.4889.54T:schwaemm256256v2
176.66176.81177.44T:romulusn
182.29182.34183.06T:grain128aeadv2
192.19192.21192.78romulusn
201.33202.18203.91T:isapk128av20
208.49208.53208.64T:tinyjambu128v2
261.50261.54262.28T:tinyjambu192v2
263.80266.52269.41T:isapk128v20
275.73275.80277.24T:tinyjambu256v2
311.50311.64313.63romulusm
397.74398.29399.18T:elephant200v2
524.82526.33533.45T:isapxv20
572.41573.31574.57T!!!romulust
41732.2041741.0541786.25T:elephant160v2
45182.0545406.3745467.15T:elephant176v2
53752.0153818.1253850.14aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
13.9413.9513.96ascon128av12
20.8720.8820.88ascon80pqv12
20.8720.8820.88ascon128v12
33.2533.5335.19T:aes128gcmv1
33.6933.7133.72ascon128abi32v12
38.9739.4341.35T:aes256gcmv1
41.3641.3941.44T:isapa128v20
49.6349.6550.56ascon128bi32v12
53.3653.4553.55T:xoodyakround3
54.8654.8954.92T:giftcofb128v1
56.7456.7556.85T:isapa128av20
59.5859.6059.62T:schwaemm256128v2
78.9478.9879.06T:schwaemm192192v2
83.1883.2183.24T:schwaemm128128v2
89.4389.4589.50T:schwaemm256256v2
132.03134.85135.58T:isapk128av20
170.25170.69172.69T:isapk128v20
176.63176.68176.77T:romulusn
182.29182.32182.37T:grain128aeadv2
192.20192.22192.79romulusn
198.49198.57198.77T!!!romulust
208.50208.51208.57T:tinyjambu128v2
261.50261.54261.94T:tinyjambu192v2
275.74275.77276.42T:tinyjambu256v2
289.47290.30291.13T:isapxv20
311.53311.63313.32romulusm
397.77398.67399.15T:elephant200v2
1455.811461.841465.51aes256gcmv1
41732.5241741.6441788.89T:elephant160v2
45186.6945400.7445453.22T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
13.8013.8213.86ascon128av12
20.6120.6320.67ascon128v12
20.7420.7520.80ascon80pqv12
24.8125.2826.19T:aes128gcmv1
27.7528.1229.38T:aes256gcmv1
33.4133.4633.49ascon128abi32v12
42.3142.3442.39T:xoodyakround3
49.2549.2649.30ascon128bi32v12
55.2155.2455.28T:giftcofb128v1
59.4159.4359.61T:schwaemm256128v2
61.26?63.62?148.38?T:isapa128v20
70.4770.5070.84T:isapa128av20
78.6978.7178.75T:schwaemm192192v2
82.8882.9683.11T:schwaemm128128v2
85.3885.4385.69T:schwaemm256256v2
152.00152.06152.57T:romulusn
155.68155.75156.36romulusn
162.87162.96165.46T:isapk128av20
170.86170.92171.19T:tinyjambu128v2
180.50180.62181.07T:grain128aeadv2
198.62198.85198.95T:tinyjambu192v2
205.10205.15205.59T:tinyjambu256v2
208.12209.44210.66T:isapk128v20
215.39215.52216.15romulusm
299.01299.36299.75T:elephant200v2
385.08386.16386.56T!!!romulust
408.41409.21409.69T:isapxv20
27615.7327640.7927681.16aes256gcmv1
31291.7531298.5631324.15T:elephant160v2
33759.1433919.0733949.95T:elephant176v2
Cycles/byte for long+long decrypt
25%50%75%aead
13.7513.7913.84ascon128av12
20.5520.5720.64ascon128v12
20.7220.7520.81ascon80pqv12
24.8525.1825.56T:aes128gcmv1
27.7628.0828.38T:aes256gcmv1
33.1533.1833.21ascon128abi32v12
40.7040.7540.84T:xoodyakround3
49.1649.2049.26ascon128bi32v12
55.0855.1455.23T:giftcofb128v1
59.4059.4259.47T:schwaemm256128v2
59.54?61.50?66.23?T:isapa128v20
70.4670.5070.57T:isapa128av20
78.6678.7378.85T:schwaemm192192v2
82.8882.9082.93T:schwaemm128128v2
87.4187.4787.53T:schwaemm256256v2
151.54151.66152.03T:romulusn
155.71155.85156.51romulusn
162.88163.31165.03T:isapk128av20
171.20171.34171.62T:tinyjambu128v2
180.99181.28181.59T:grain128aeadv2
197.92198.07198.62T:tinyjambu192v2
204.96205.06205.37T:tinyjambu256v2
208.08209.44211.66T:isapk128v20
215.38215.56216.98romulusm
298.98299.32299.67T:elephant200v2
385.19385.78386.60T!!!romulust
408.49409.09410.24T:isapxv20
27599.7627627.5327654.68aes256gcmv1
31294.5431302.1231323.77T:elephant160v2
33784.5133917.3633955.04T:elephant176v2
Cycles/byte for long+long forgery
25%50%75%aead
13.7913.7913.79ascon128av12
20.5620.5620.59ascon128v12
20.7420.7520.78ascon80pqv12
25.0725.2926.50T:aes128gcmv1
27.6828.0828.32T:aes256gcmv1
33.1733.1733.30ascon128abi32v12
40.7840.8140.87T:xoodyakround3
40.8440.8840.94T:isapa128v20
49.1949.1949.21ascon128bi32v12
55.1155.1255.30T:giftcofb128v1
56.7456.7757.06T:isapa128av20
59.4159.4359.45T:schwaemm256128v2
78.6978.7178.75T:schwaemm192192v2
82.8782.8882.91T:schwaemm128128v2
87.4187.4787.50T:schwaemm256256v2
129.90130.00130.43T:isapk128av20
151.55151.61151.95T:romulusn
155.77155.82156.72romulusn
159.27161.57163.38T:isapk128v20
171.24171.26171.62T:tinyjambu128v2
181.02181.05181.60T:grain128aeadv2
198.00198.02198.42T:tinyjambu192v2
198.10198.21199.22T!!!romulust
205.00205.02205.53T:tinyjambu256v2
215.45215.52216.74romulusm
290.52290.96291.22T:isapxv20
298.79299.31300.51T:elephant200v2
1455.391461.181463.02aes256gcmv1
31296.6231310.1931330.47T:elephant160v2
33741.7833926.5933958.11T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
13.6013.6313.64ascon128av12
16.2916.7717.47T:aes128gcmv1
16.1816.8417.86T:aes256gcmv1
20.2420.2520.26ascon128v12
20.4920.5020.52ascon80pqv12
28.1628.1928.27T:xoodyakround3
32.6632.7032.72ascon128abi32v12
40.3340.4140.45T:isapa128v20
48.5948.6248.63ascon128bi32v12
55.2955.3355.41T:giftcofb128v1
56.7356.7756.92T:isapa128av20
59.1459.2559.33T:schwaemm256128v2
78.4278.4678.52T:schwaemm192192v2
82.5582.5983.02T:schwaemm128128v2
85.3385.4385.47T:schwaemm256256v2
119.26119.35119.42romulusn
119.32119.39119.47romulusm
124.36124.45124.61T:isapk128av20
126.45126.50126.59T:romulusn
133.97134.02134.14T:tinyjambu128v2
134.25134.31134.95T:tinyjambu256v2
137.26137.30137.75T:tinyjambu192v2
152.08152.26154.66T:isapk128v20
179.38179.87180.47T:grain128aeadv2
197.69197.82199.52T!!!romulust
201.03201.60202.27T:elephant200v2
290.83291.08292.12T:isapxv20
1454.891456.191458.60aes256gcmv1
20848.8920863.4020892.99T:elephant160v2
22322.7622426.9722461.47T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
13.6013.6313.63ascon128av12
16.4916.7417.36T:aes128gcmv1
16.5217.3418.13T:aes256gcmv1
20.2420.2520.29ascon128v12
20.6120.6220.63ascon80pqv12
28.1528.1828.20T:xoodyakround3
32.6032.6432.65ascon128abi32v12
40.3340.3840.40T:isapa128v20
48.7048.7550.83ascon128bi32v12
55.3355.3555.39T:giftcofb128v1
56.7356.7656.91T:isapa128av20
59.2559.2759.35T:schwaemm256128v2
78.4178.4678.53T:schwaemm192192v2
82.5382.5782.60T:schwaemm128128v2
85.4185.4485.46T:schwaemm256256v2
119.29119.39121.11romulusn
119.37119.39119.47romulusm
124.39124.42124.50T:isapk128av20
126.45126.51126.63T:romulusn
133.99134.01134.07T:tinyjambu128v2
134.24134.26134.31T:tinyjambu256v2
134.50134.52134.85T:tinyjambu192v2
152.07152.16152.70T:isapk128v20
179.68179.78180.09T:grain128aeadv2
197.65197.85200.75T!!!romulust
201.02201.88202.17T:elephant200v2
290.90291.09291.90T:isapxv20
1456.301457.471459.73aes256gcmv1
20855.2920863.2220880.65T:elephant160v2
22339.1622427.2922447.25T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
13.6313.6313.63ascon128av12
16.5616.8017.35T:aes128gcmv1
16.6416.9517.68T:aes256gcmv1
20.2520.2520.25ascon128v12
20.6220.6320.63ascon80pqv12
28.1328.1628.20T:xoodyakround3
32.6332.6432.65ascon128abi32v12
40.3340.3840.40T:isapa128v20
48.7448.7548.76ascon128bi32v12
55.3255.3455.55T:giftcofb128v1
56.5356.7556.86T:isapa128av20
59.2359.2659.29T:schwaemm256128v2
78.4378.4678.52T:schwaemm192192v2
82.5582.5882.63T:schwaemm128128v2
85.4185.4585.53T:schwaemm256256v2
119.32119.33119.38romulusn
119.31119.40119.59romulusm
124.36124.43124.56T:isapk128av20
126.50126.62127.58T:romulusn
134.00134.02134.06T:tinyjambu128v2
134.24134.27134.90T:tinyjambu256v2
134.46134.50134.53T:tinyjambu192v2
151.71152.20152.86T:isapk128v20
179.73179.78180.07T:grain128aeadv2
197.66197.79199.68T!!!romulust
201.03201.52201.95T:elephant200v2
290.90291.09292.03T:isapxv20
1456.511457.441462.78aes256gcmv1
20858.0220865.1620890.69T:elephant160v2
22330.4022425.9322447.47T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
14.1614.1614.21ascon128av12
20.9420.9520.97ascon128v12
21.0821.0821.11ascon80pqv12
33.4133.4734.08T:aes128gcmv1
34.3134.3234.37ascon128abi32v12
36.7536.7937.44T:aes256gcmv1
42.8342.8542.86T:xoodyakround3
50.0350.0551.31ascon128bi32v12
55.9655.9756.01T:giftcofb128v1
61.1561.1761.66T:schwaemm256128v2
75.4775.4875.83T:isapa128av20
80.4580.4680.50T:schwaemm192192v2
83.9683.9784.07T:schwaemm128128v2
87.6187.6387.85T:schwaemm256256v2
90.0990.1092.55T:isapa128v20
153.80153.87154.24T:romulusn
157.08157.10158.26romulusn
172.23172.23172.31T:tinyjambu128v2
181.27181.38181.83T:grain128aeadv2
200.04200.09200.78T:tinyjambu192v2
203.22203.29204.94T:isapk128av20
206.63206.65207.58T:tinyjambu256v2
216.93217.61218.72romulusm
305.19305.89306.41T:elephant200v2
386.01386.65389.05T:isapk128v20
390.95391.16392.78T!!!romulust
655.45655.60656.89T:isapxv20
28149.9928164.8728197.05aes256gcmv1
31656.8531674.9731689.31T:elephant160v2
34034.1834177.0934196.59T:elephant176v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
14.1314.1314.18ascon128av12
20.8920.8920.91ascon128v12
21.0821.0921.15ascon80pqv12
33.7033.8534.18T:aes128gcmv1
34.0334.0434.10ascon128abi32v12
36.9236.9937.54T:aes256gcmv1
41.2741.2841.32T:xoodyakround3
49.9849.9950.04ascon128bi32v12
55.9055.9256.00T:giftcofb128v1
61.1461.1561.17T:schwaemm256128v2
75.4775.4875.58T:isapa128av20
80.4680.4880.71T:schwaemm192192v2
83.9783.9884.44T:schwaemm128128v2
89.6389.6689.71T:schwaemm256256v2
90.2990.3690.42T:isapa128v20
153.41153.45153.92T:romulusn
157.16157.20157.69romulusn
172.62172.74173.27T:tinyjambu128v2
181.72181.74182.20T:grain128aeadv2
199.46199.49200.00T:tinyjambu192v2
203.20203.62205.61T:isapk128av20
206.51206.61207.13T:tinyjambu256v2
217.24217.39219.68romulusm
305.28306.06306.75T:elephant200v2
386.05386.55388.98T:isapk128v20
391.08391.62393.23T!!!romulust
655.24655.55655.85T:isapxv20
28179.5228197.3628211.16aes256gcmv1
31652.0231654.7131665.38T:elephant160v2
34030.8134172.4434175.14T:elephant176v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
14.1314.1314.14ascon128av12
20.8820.8920.89ascon128v12
21.0821.0921.42ascon80pqv12
33.6933.7434.03T:aes128gcmv1
34.0334.0334.04ascon128abi32v12
36.8536.9037.32T:aes256gcmv1
41.3541.3741.42T:xoodyakround3
49.9849.9850.85ascon128bi32v12
55.4155.4255.49T:isapa128v20
55.8955.9055.93T:giftcofb128v1
59.5559.5659.60T:isapa128av20
61.1461.1661.65T:schwaemm256128v2
80.4480.4780.50T:schwaemm192192v2
83.9683.9783.98T:schwaemm128128v2
89.6489.6689.66T:schwaemm256256v2
153.40153.42153.93T:romulusn
157.16157.17157.64romulusn
158.93159.32160.74T:isapk128av20
172.61172.65173.23T:tinyjambu128v2
181.74181.75181.97T:grain128aeadv2
199.46199.47199.90T:tinyjambu192v2
203.75203.79204.69T!!!romulust
206.51206.55207.00T:tinyjambu256v2
217.24217.47220.55romulusm
259.43259.47262.11T:isapk128v20
305.22306.06307.37T:elephant200v2
416.84416.99417.32T:isapxv20
2009.082009.442010.65aes256gcmv1
31651.4431653.3931672.24T:elephant160v2
34041.7134172.3834176.81T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
21.9721.9722.95ascon128av12
28.1128.1128.92ascon128v12
28.4528.4529.39ascon80pqv12
54.0954.1454.54ascon128abi32v12
63.2063.3665.05T:xoodyakround3
67.6867.7368.48ascon128bi32v12
72.5372.5473.41T:giftcofb128v1
100.38100.59100.86T:schwaemm256128v2
108.70108.77108.91T:schwaemm128128v2
131.25131.29132.19T:schwaemm192192v2
138.40138.50138.95T:schwaemm256256v2
188.71188.77190.05romulusn
189.74189.82191.55T:isapa128av20
194.48194.64195.55T:romulusn
196.15196.26196.94T:grain128aeadv2
203.26203.27204.27T:tinyjambu128v2
224.36225.55234.38T:aes128gcmv1
232.53232.61232.98T:tinyjambu192v2
241.09241.15241.64T:tinyjambu256v2
240.80241.54250.78T:aes256gcmv1
250.45250.45251.73romulusm
433.48435.72438.12T:elephant200v2
524.69524.76527.13T!!!romulust
748.41750.85752.61T:isapa128v20
1097.351098.051099.90T:isapk128av20
4410.054410.904464.52T:isapk128v20
6255.856259.436263.26T:isapxv20
40822.4440832.3240860.07aes256gcmv1
42370.5842426.9942460.27T:elephant160v2
42531.9542545.9342612.76T:elephant176v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
21.9321.9322.69ascon128av12
28.1328.1328.99ascon128v12
28.5028.5129.34ascon80pqv12
53.7753.8354.47ascon128abi32v12
61.2761.4161.71T:xoodyakround3
67.8567.9168.62ascon128bi32v12
73.5273.5274.36T:giftcofb128v1
100.60100.66100.78T:schwaemm256128v2
108.73108.80108.88T:schwaemm128128v2
131.28131.43132.20T:schwaemm192192v2
139.87139.95140.57T:schwaemm256256v2
189.18189.20190.05romulusn
189.63189.70190.07T:isapa128av20
195.16195.31195.89T:romulusn
196.70196.88197.78T:grain128aeadv2
203.85203.85204.31T:tinyjambu128v2
227.47228.50233.50T:aes128gcmv1
232.98233.06233.78T:tinyjambu192v2
241.30241.32241.91T:tinyjambu256v2
244.27244.80252.22T:aes256gcmv1
257.50257.55258.66romulusm
433.66434.04438.22T:elephant200v2
524.93525.02525.80T!!!romulust
752.61754.45755.12T:isapa128v20
1098.121098.731133.12T:isapk128av20
4408.874410.154446.64T:isapk128v20
6256.276257.296270.92T:isapxv20
40826.3140827.8440854.72aes256gcmv1
42417.0242433.9942498.56T:elephant160v2
42375.6542541.2542550.03T:elephant176v2
Cycles/byte for 64+64 forgery
25%50%75%aead
21.9321.9321.98ascon128av12
28.1328.1328.24ascon128v12
28.5028.5028.93ascon80pqv12
53.7753.8253.87ascon128abi32v12
62.1162.2262.34T:xoodyakround3
67.8367.8867.94ascon128bi32v12
73.5073.6073.72T:giftcofb128v1
100.52100.62100.85T:schwaemm256128v2
108.91108.92109.01T:schwaemm128128v2
124.08124.10124.27T:isapa128av20
131.21131.38131.48T:schwaemm192192v2
139.89139.96140.13T:schwaemm256256v2
189.18189.19189.24romulusn
194.56194.67194.78T:romulusn
196.76196.88197.68T:grain128aeadv2
203.80203.81204.29T:tinyjambu128v2
226.74227.27230.15T:aes128gcmv1
233.03233.05233.08T:tinyjambu192v2
241.35241.37241.38T:tinyjambu256v2
242.16243.02248.20T:aes256gcmv1
257.47257.48257.84romulusm
332.53332.59333.35T!!!romulust
389.39389.48389.98T:isapa128v20
433.65434.52437.96T:elephant200v2
805.97806.17806.46T:isapk128av20
2484.452485.802501.90T:isapk128v20
3264.183264.533267.94T:isapxv20
14697.8114706.0114712.68aes256gcmv1
42376.6742428.7042485.20T:elephant160v2
42405.5542543.0542555.91T:elephant176v2