VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Bobcat (500f20); 2011 AMD E-450; 2 x 1650MHz; h4e450, supercop-20251114

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
13.3013.3113.32ascon128av12
19.8619.8719.88ascon128v12
19.8619.8819.88ascon80pqv12
27.3227.3327.34ascon128abi32v12
39.0039.0039.01ascon128bi32v12
41.7941.8041.82T:schwaemm256128v2
42.9642.9842.99T:xoodyakround3
54.3054.3154.39T:giftcofb128v1
55.2355.3055.92T:schwaemm192192v2
58.5058.5158.51T:schwaemm128128v2
58.1258.7259.28T:aes256gcmv1
61.0261.1761.24T:schwaemm256256v2
77.4977.5178.92T:isapa128v20
78.9979.0179.06T:isapa128av20
93.0193.0293.07T:grain128aeadv2
109.75109.76109.80T:tinyjambu128v2
116.31116.36116.46romulusn
135.13135.14135.58T:tinyjambu192v2
144.00144.00144.01T:tinyjambu256v2
156.27156.33156.78T:isapk128av20
192.12192.27192.88romulusm
206.91207.59208.21T:isapk128v20
317.27318.58319.42T:elephant200v2
393.05393.41394.07T!!!romulust
528.13537.00540.81T:isapxv20
779.19779.77780.10T:aes128gcmv1
18108.7118115.4618116.97T:elephant160v2
18855.3418856.9818862.76T:elephant176v2
37922.0337925.7837931.53aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
13.2713.2713.29ascon128av12
19.8019.8119.82ascon80pqv12
19.8619.8819.98ascon128v12
26.1926.2026.22ascon128abi32v12
39.1139.1239.12ascon128bi32v12
41.1641.2241.39T:xoodyakround3
41.9741.9841.98T:schwaemm256128v2
54.3854.4054.47T:giftcofb128v1
55.2455.2756.08T:schwaemm192192v2
58.5158.5158.52T:schwaemm128128v2
58.0459.0659.96T:aes256gcmv1
61.0261.1261.23T:schwaemm256256v2
77.4777.5077.98T:isapa128v20
79.0079.0379.05T:isapa128av20
99.6399.6799.86T:grain128aeadv2
109.75109.75109.75T:tinyjambu128v2
116.38116.42116.44romulusn
135.01135.01135.03T:tinyjambu192v2
144.00144.00144.01T:tinyjambu256v2
156.27156.34156.74T:isapk128av20
192.02192.16192.70romulusm
206.53207.62208.58T:isapk128v20
318.10318.54319.27T:elephant200v2
393.09393.76394.12T!!!romulust
531.35539.19541.03T:isapxv20
779.71780.25780.38T:aes128gcmv1
18093.1018099.9418102.55T:elephant160v2
18855.4218861.9518864.19T:elephant176v2
37921.9337923.3137929.44aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
13.2713.2913.31ascon128av12
19.8019.8319.83ascon80pqv12
19.8819.8919.90ascon128v12
26.2126.2226.23ascon128abi32v12
38.8638.8738.88T:isapa128v20
39.1339.1339.13ascon128bi32v12
41.3841.4141.46T:xoodyakround3
41.9841.9841.98T:schwaemm256128v2
53.2553.2653.44T:isapa128av20
54.3954.3954.64T:giftcofb128v1
55.2455.2755.99T:schwaemm192192v2
58.5058.5158.51T:schwaemm128128v2
57.3358.9560.36T:aes256gcmv1
61.1261.1361.23T:schwaemm256256v2
99.6399.6499.68T:grain128aeadv2
103.68103.71103.75T:isapk128av20
109.75109.75109.83T:tinyjambu128v2
116.36116.39116.53romulusn
129.48129.56130.55T:isapk128v20
135.00135.02135.50T:tinyjambu192v2
137.12137.18137.96T!!!romulust
144.00144.00144.01T:tinyjambu256v2
191.98192.18192.94romulusm
300.25301.51306.64T:isapxv20
317.23318.76320.08T:elephant200v2
745.82746.15746.59T:aes128gcmv1
745.79746.76755.68aes256gcmv1
18092.9918099.1618100.70T:elephant160v2
18856.4418862.3518865.17T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
13.1813.2013.20ascon128av12
19.8019.8119.82ascon128v12
19.8119.8219.83ascon80pqv12
26.6026.6226.63ascon128abi32v12
32.6232.7132.83T:xoodyakround3
34.3834.5834.80T:aes256gcmv1
38.8038.8138.85ascon128bi32v12
41.5441.5942.33T:schwaemm256128v2
53.9353.9654.12T:giftcofb128v1
54.9654.9755.00T:schwaemm192192v2
58.1058.1358.57T:isapa128v20
58.1958.2558.78T:schwaemm128128v2
60.8760.9261.13T:schwaemm256256v2
66.1166.1366.16T:isapa128av20
88.7488.7688.96T:tinyjambu128v2
91.7492.0192.19T:grain128aeadv2
96.0796.3696.56romulusn
105.29105.32105.35T:tinyjambu192v2
108.09108.32108.48T:tinyjambu256v2
129.98130.01130.63T:isapk128av20
133.93133.97134.38romulusm
168.21168.61169.12T:isapk128v20
238.45238.56238.93T:elephant200v2
265.22265.61266.03T!!!romulust
414.32419.25422.07T:isapxv20
761.99762.77763.14T:aes128gcmv1
13573.5613574.1313582.48T:elephant160v2
14088.5814089.5314093.47T:elephant176v2
19333.7619336.7319344.64aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
13.2013.2113.23ascon128av12
19.8119.8119.84ascon128v12
19.9019.9119.91ascon80pqv12
26.1426.3826.40ascon128abi32v12
31.7131.7431.83T:xoodyakround3
34.5034.9035.38T:aes256gcmv1
39.0639.0639.07ascon128bi32v12
41.6341.6542.25T:schwaemm256128v2
53.9854.0054.12T:giftcofb128v1
54.9654.9755.07T:schwaemm192192v2
58.1358.1458.59T:isapa128v20
58.2258.2258.23T:schwaemm128128v2
60.8560.8760.92T:schwaemm256256v2
66.1366.1566.16T:isapa128av20
88.8788.8989.14T:tinyjambu128v2
95.3195.4995.65T:grain128aeadv2
96.0996.4196.48romulusn
105.50105.52105.55T:tinyjambu192v2
108.13108.15108.29T:tinyjambu256v2
130.00130.03130.30T:isapk128av20
133.83133.92134.20romulusm
168.40168.64168.93T:isapk128v20
238.46238.58239.32T:elephant200v2
265.30265.89266.25T!!!romulust
415.84419.10423.79T:isapxv20
763.01763.12763.37T:aes128gcmv1
13570.3813574.4113578.34T:elephant160v2
14088.5014089.8214093.45T:elephant176v2
19333.5219337.5419342.80aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
13.2113.2113.22ascon128av12
19.8219.8319.86ascon128v12
19.9119.9119.92ascon80pqv12
26.1526.3926.41ascon128abi32v12
31.8331.8631.91T:xoodyakround3
34.1434.6435.19T:aes256gcmv1
38.8138.8238.83T:isapa128v20
39.0639.0739.07ascon128bi32v12
41.6742.0142.13T:schwaemm256128v2
53.2453.2753.29T:isapa128av20
54.0054.0354.12T:giftcofb128v1
54.9554.9755.08T:schwaemm192192v2
58.2258.2558.42T:schwaemm128128v2
60.8660.8660.93T:schwaemm256256v2
88.8788.8889.10T:tinyjambu128v2
95.3395.3695.52T:grain128aeadv2
96.0996.3996.43romulusn
103.66103.70103.85T:isapk128av20
105.49105.51105.73T:tinyjambu192v2
108.12108.13108.18T:tinyjambu256v2
129.52129.54130.05T:isapk128v20
133.86133.94134.35romulusm
137.19137.42137.75T!!!romulust
238.46238.58239.27T:elephant200v2
300.59301.67306.60T:isapxv20
746.05746.13746.41T:aes128gcmv1
746.43747.30755.45aes256gcmv1
13571.4613573.6413574.57T:elephant160v2
14088.9014089.7114093.84T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
10.4710.6811.29T:aes256gcmv1
13.0413.0613.07ascon128av12
19.7419.7519.76ascon128v12
19.7419.7519.76ascon80pqv12
22.3422.4322.46T:xoodyakround3
25.8925.9025.92ascon128abi32v12
38.6238.6238.62ascon128bi32v12
38.7138.7338.79T:isapa128v20
41.2741.2841.31T:schwaemm256128v2
53.2453.2553.27T:isapa128av20
53.5653.6053.62T:giftcofb128v1
54.5654.6554.75T:schwaemm192192v2
57.8757.9459.07T:schwaemm128128v2
60.5960.6060.63T:schwaemm256256v2
67.7567.7567.76T:tinyjambu128v2
72.2572.2572.30T:tinyjambu256v2
75.4975.5175.52T:tinyjambu192v2
75.6775.7175.77romulusm
75.8075.8375.91romulusn
90.9891.0191.16T:grain128aeadv2
103.62103.68103.81T:isapk128av20
129.48129.54130.27T:isapk128v20
136.80137.16137.53T!!!romulust
159.72159.74160.00T:elephant200v2
302.16303.89304.79T:isapxv20
745.15746.07746.37T:aes128gcmv1
745.36746.38756.74aes256gcmv1
9046.729048.099057.09T:elephant160v2
9321.409323.779325.67T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
10.4410.8611.28T:aes256gcmv1
13.1013.1313.15ascon128av12
19.7419.7419.75ascon128v12
20.0020.0020.01ascon80pqv12
22.2522.2722.45T:xoodyakround3
26.5426.5526.58ascon128abi32v12
38.7338.7538.80T:isapa128v20
38.9838.9939.00ascon128bi32v12
41.2741.2841.28T:schwaemm256128v2
53.2553.2853.31T:isapa128av20
53.5753.5953.62T:giftcofb128v1
54.5854.6654.70T:schwaemm192192v2
57.9357.9357.94T:schwaemm128128v2
60.5860.6360.64T:schwaemm256256v2
68.0068.0068.01T:tinyjambu128v2
72.2572.2572.26T:tinyjambu256v2
75.5075.5175.53T:tinyjambu192v2
75.6675.7975.84romulusm
75.8375.9075.99romulusn
90.9991.0291.04T:grain128aeadv2
103.62103.69104.05T:isapk128av20
129.46129.49130.24T:isapk128v20
136.74136.84138.32T!!!romulust
159.77159.81159.81T:elephant200v2
300.39301.60306.73T:isapxv20
745.88746.20746.49T:aes128gcmv1
745.45746.31756.06aes256gcmv1
9045.799047.969050.97T:elephant160v2
9320.979323.279324.35T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
10.04?10.98?11.87?T:aes256gcmv1
13.1213.1413.15ascon128av12
19.7419.7519.77ascon128v12
20.0020.0120.02ascon80pqv12
22.4322.4422.45T:xoodyakround3
26.1126.5726.60ascon128abi32v12
38.7538.7638.81T:isapa128v20
39.0039.0139.01ascon128bi32v12
41.2741.2841.28T:schwaemm256128v2
53.2553.2753.29T:isapa128av20
53.5953.6053.62T:giftcofb128v1
54.6054.6654.67T:schwaemm192192v2
57.9357.9357.94T:schwaemm128128v2
60.5660.5960.59T:schwaemm256256v2
68.0068.0068.00T:tinyjambu128v2
72.2572.2572.25T:tinyjambu256v2
75.5175.5275.53T:tinyjambu192v2
75.6475.7475.81romulusm
75.8275.8375.97romulusn
91.0391.0591.14T:grain128aeadv2
103.66103.68103.73T:isapk128av20
129.44129.52130.53T:isapk128v20
136.75136.84137.57T!!!romulust
159.77159.81159.82T:elephant200v2
300.37301.78306.71T:isapxv20
745.84746.14746.35T:aes128gcmv1
745.59747.08755.93aes256gcmv1
9047.829048.399048.93T:elephant160v2
9320.949322.689324.09T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
13.5113.5213.53ascon128av12
20.1020.1120.12ascon128v12
20.1120.1220.43ascon80pqv12
27.2127.2227.23ascon128abi32v12
32.9933.0533.06T:xoodyakround3
39.4339.4539.45ascon128bi32v12
42.8042.8542.87T:schwaemm256128v2
43.4743.5743.62T:aes256gcmv1
54.6054.6054.64T:giftcofb128v1
56.2056.2256.29T:schwaemm192192v2
58.9959.0161.84T:schwaemm128128v2
62.5262.5362.59T:schwaemm256256v2
70.6470.6570.67T:isapa128av20
84.8684.8885.38T:isapa128v20
89.4489.4589.46T:tinyjambu128v2
92.3692.3792.62T:grain128aeadv2
96.9896.9897.13romulusn
106.11106.12106.39T:tinyjambu192v2
108.93108.94109.38T:tinyjambu256v2
134.91134.94134.99romulusm
155.61155.62155.87T:isapk128av20
243.54243.61244.07T:elephant200v2
269.04269.38269.57T!!!romulust
307.27307.33308.16T:isapk128v20
679.56682.77685.77T:isapxv20
766.41767.04767.80T:aes128gcmv1
13723.9613727.0713728.36T:elephant160v2
14196.7914197.3514200.99T:elephant176v2
19725.0419728.8919734.20aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
13.5213.5313.53ascon128av12
20.1120.1220.12ascon128v12
20.2120.2120.21ascon80pqv12
26.7726.9826.99ascon128abi32v12
32.0932.1032.12T:xoodyakround3
39.6939.6939.70ascon128bi32v12
42.9542.9542.98T:schwaemm256128v2
47.6148.1548.43T:aes256gcmv1
54.6454.6454.66T:giftcofb128v1
56.2056.2456.29T:schwaemm192192v2
59.0159.0362.20T:schwaemm128128v2
62.5362.5462.56T:schwaemm256256v2
70.6370.6470.67T:isapa128av20
84.8884.8885.20T:isapa128v20
89.5789.5889.61T:tinyjambu128v2
95.9295.9396.36T:grain128aeadv2
97.0397.0697.13romulusn
106.31106.33106.37T:tinyjambu192v2
108.95108.96109.01T:tinyjambu256v2
135.06135.10135.14romulusm
155.63155.64155.69T:isapk128av20
243.54243.61244.59T:elephant200v2
269.02269.41269.72T!!!romulust
307.32307.35307.88T:isapk128v20
680.84683.22687.40T:isapxv20
767.35767.45767.69T:aes128gcmv1
13727.7213728.7413735.67T:elephant160v2
14196.7114197.2614202.55T:elephant176v2
19725.2219729.8119734.39aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
13.5213.5213.52ascon128av12
20.1120.1120.12ascon128v12
20.2120.2120.21ascon80pqv12
26.7726.9826.99ascon128abi32v12
32.1932.2132.22T:xoodyakround3
39.6839.6839.69ascon128bi32v12
42.8742.9542.95T:schwaemm256128v2
52.4052.4052.43T:isapa128v20
54.6454.6454.67T:giftcofb128v1
55.8655.8655.87T:isapa128av20
56.2056.2056.28T:schwaemm192192v2
59.0059.0160.51T:schwaemm128128v2
60.4860.7961.18T:aes256gcmv1
62.5362.5462.61T:schwaemm256256v2
89.5789.5789.68T:tinyjambu128v2
95.9195.9396.27T:grain128aeadv2
97.0397.1397.17romulusn
106.30106.31106.33T:tinyjambu192v2
108.94108.94108.97T:tinyjambu256v2
121.40121.43121.57T:isapk128av20
135.05135.10135.43romulusm
140.89141.42141.60T!!!romulust
204.13204.15204.60T:isapk128v20
243.54244.03244.63T:elephant200v2
436.37436.83441.46T:isapxv20
750.39750.46750.91T:aes128gcmv1
1138.011138.521146.11aes256gcmv1
13727.0213727.5913730.29T:elephant160v2
14196.7614197.0314201.05T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
20.6520.8121.16ascon128av12
26.8826.9527.27ascon80pqv12
26.8927.0527.13ascon128v12
40.6540.8741.04ascon128abi32v12
49.4449.7350.11T:xoodyakround3
53.6553.8154.09ascon128bi32v12
69.0869.3069.88T:giftcofb128v1
70.9371.1771.26T:schwaemm256128v2
76.6276.8477.15T:schwaemm128128v2
91.9592.0792.08T:schwaemm192192v2
100.35100.41100.49T:schwaemm256256v2
105.35105.52105.69T:grain128aeadv2
105.48105.59105.70T:tinyjambu128v2
117.57117.78118.10romulusn
124.23124.34124.72T:tinyjambu192v2
127.45127.58127.88T:tinyjambu256v2
156.09156.96157.68romulusm
173.49173.77174.05T:isapa128av20
245.44247.74251.28T:aes256gcmv1
345.12345.25346.11T:elephant200v2
362.51363.68364.67T!!!romulust
699.52699.94700.63T:isapa128v20
717.53717.81718.47T:isapk128av20
865.18865.60865.70T:aes128gcmv1
3463.303463.663472.72T:isapk128v20
6664.456676.246713.88T:isapxv20
17685.0917694.8617697.41T:elephant176v2
18388.2018393.6018405.13T:elephant160v2
28730.0528734.7128744.84aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
20.5420.7821.10ascon128av12
27.0127.1327.27ascon128v12
27.1527.3827.65ascon80pqv12
40.5941.0241.38ascon128abi32v12
48.0948.3448.51T:xoodyakround3
54.1154.3054.55ascon128bi32v12
69.1869.4069.80T:giftcofb128v1
71.1671.2171.27T:schwaemm256128v2
76.9076.9477.05T:schwaemm128128v2
92.1492.1694.29T:schwaemm192192v2
100.69100.77100.88T:schwaemm256256v2
105.60105.60105.86T:tinyjambu128v2
108.69108.90109.12T:grain128aeadv2
117.80118.05118.39romulusn
124.47124.61124.79T:tinyjambu192v2
127.68127.98128.01T:tinyjambu256v2
161.19161.79162.62romulusm
173.18173.44173.54T:isapa128av20
340.22345.10349.39T:aes256gcmv1
344.84345.70345.75T:elephant200v2
361.70362.62363.59T!!!romulust
699.59699.88713.25T:isapa128v20
717.47717.70718.56T:isapk128av20
865.80866.06866.37T:aes128gcmv1
3463.583464.363475.33T:isapk128v20
6684.176695.136696.73T:isapxv20
17682.4717688.2217693.01T:elephant176v2
18389.7818392.3718402.31T:elephant160v2
28723.9728730.7028735.91aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
20.3220.5220.67ascon128av12
26.7026.7726.92ascon128v12
26.7926.8027.01ascon80pqv12
40.2040.3440.34ascon128abi32v12
48.3848.4048.57T:xoodyakround3
53.7553.7753.90ascon128bi32v12
69.1869.1869.59T:giftcofb128v1
71.1271.1571.20T:schwaemm256128v2
76.7876.9376.94T:schwaemm128128v2
92.0292.1694.12T:schwaemm192192v2
100.69100.69100.77T:schwaemm256256v2
105.60105.60106.05T:tinyjambu128v2
108.60108.77109.26T:grain128aeadv2
115.05115.31115.57T:isapa128av20
117.89117.91117.99romulusn
124.41124.45124.47T:tinyjambu192v2
127.66127.66127.68T:tinyjambu256v2
161.14161.26162.40romulusm
229.80230.16231.08T!!!romulust
344.84345.12345.70T:elephant200v2
364.70364.88365.06T:isapa128v20
507.42508.03508.45T:isapk128av20
650.72655.55687.59T:aes256gcmv1
848.60848.96850.26T:aes128gcmv1
1893.071893.171903.23T:isapk128v20
3488.063490.473496.23T:isapxv20
10132.8810140.0910148.49aes256gcmv1
17685.1117688.3117694.32T:elephant176v2
18391.3718397.7318402.24T:elephant160v2