VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Sandy Bridge (206a7); 2011 Intel Core i3-2310M; 2 x 2100MHz; h6sandy, supercop-20241022

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
8.238.458.57T:aes128gcmv1
10.1210.1510.17ascon128av12
10.6210.8611.02T:aes256gcmv1
14.9414.9615.01ascon80pqv12
15.0315.0615.09ascon128v12
18.1718.2218.27T:xoodyakround3
18.8618.8818.91ascon128abi32v12
27.2027.2827.33T:schwaemm256128v2
27.9027.9227.96ascon128bi32v12
28.9528.9829.01T:grain128aeadv2
34.9234.9735.00T:schwaemm256256v2
35.9035.9536.03T:schwaemm192192v2
38.7038.7638.85T:schwaemm128128v2
39.0239.0839.13romulusn
48.5748.6048.64T:giftcofb128v1
56.7656.8557.18T:isapa128v20
59.5259.5759.60T:tinyjambu128v2
61.1861.2361.46T:isapa128av20
63.1663.1963.25romulusm
71.9572.0072.03T:tinyjambu192v2
73.5173.5573.61T:tinyjambu256v2
107.52107.87108.01T:isapk128av20
126.40126.52126.67romulust
143.56144.08144.34T:isapk128v20
195.27195.39195.52T:elephant200v2
197.95?210.77?225.71?T:isapxv20
11121.7211123.8511152.25T:elephant176v2
12776.1912777.2112778.00T:elephant160v2
25978.0925982.1925984.58aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
8.348.488.55T:aes128gcmv1
10.0110.0510.07ascon128av12
10.6810.9411.02T:aes256gcmv1
14.9614.9915.02ascon80pqv12
14.9715.0115.03ascon128v12
18.1518.1818.24T:xoodyakround3
18.3118.3318.35ascon128abi32v12
27.1627.2327.33T:schwaemm256128v2
27.4427.4627.49ascon128bi32v12
29.9830.0430.07T:grain128aeadv2
35.0235.0335.22T:schwaemm256256v2
35.8635.9236.02T:schwaemm192192v2
38.6838.7538.84T:schwaemm128128v2
39.2539.3039.33romulusn
48.6248.6848.74T:giftcofb128v1
56.6656.7556.89T:isapa128v20
59.6859.8059.89T:tinyjambu128v2
61.2561.3461.39T:isapa128av20
63.2763.3563.40romulusm
72.1772.2372.34T:tinyjambu192v2
74.1174.1974.27T:tinyjambu256v2
107.55107.82108.10T:isapk128av20
126.46126.58126.67romulust
143.47143.75144.23T:isapk128v20
195.33195.42195.53T:elephant200v2
210.70211.45211.56T:isapxv20
11122.0211124.9711151.69T:elephant176v2
12776.0312776.9012777.83T:elephant160v2
25979.1225983.2025984.22aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
8.358.478.55T:aes128gcmv1
10.0210.0310.05ascon128av12
10.7510.9411.10T:aes256gcmv1
14.9514.9815.00ascon80pqv12
14.9815.0115.03ascon128v12
18.2018.2718.37T:xoodyakround3
18.2818.3018.33ascon128abi32v12
27.1727.2527.29T:schwaemm256128v2
27.4327.4527.48ascon128bi32v12
27.8927.9828.02T:isapa128v20
29.9930.0230.06T:grain128aeadv2
35.0235.0335.17T:schwaemm256256v2
35.8835.9436.04T:schwaemm192192v2
38.6938.7438.84T:schwaemm128128v2
39.2839.3339.37romulusn
41.6741.7341.83T:isapa128av20
43.3543.4243.50romulust
48.6248.6748.75T:giftcofb128v1
59.7759.8159.85T:tinyjambu128v2
63.3263.3663.40romulusm
71.2171.4371.90T:isapk128av20
72.1772.2472.30T:tinyjambu192v2
74.1174.1674.31T:tinyjambu256v2
89.1489.3389.83T:isapk128v20
124.10124.86124.97T:isapxv20
195.33195.42195.66T:elephant200v2
404.72405.43406.17aes256gcmv1
11122.5011125.4911151.99T:elephant176v2
12776.1612777.1312778.08T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
5.135.215.29T:aes128gcmv1
6.196.406.62T:aes256gcmv1
10.0110.0310.05ascon128av12
13.7113.8013.97T:xoodyakround3
14.8814.9014.92ascon128v12
14.9414.9514.98ascon80pqv12
18.5518.5718.60ascon128abi32v12
27.0327.0827.12T:schwaemm256128v2
27.6227.6427.65ascon128bi32v12
28.9328.9728.98T:grain128aeadv2
31.5831.6931.85romulusn
34.6934.7734.80T:schwaemm256256v2
35.7435.8335.91T:schwaemm192192v2
38.6238.6638.73T:schwaemm128128v2
42.2742.4542.62T:isapa128v20
43.5943.6043.65romulusm
48.0248.0548.07T:tinyjambu128v2
48.5448.5748.64T:giftcofb128v1
51.5051.5351.58T:isapa128av20
55.3055.3455.37T:tinyjambu256v2
55.9355.9555.98T:tinyjambu192v2
84.7684.8385.03romulust
89.6489.8089.89T:isapk128av20
116.55116.80116.98T:isapk128v20
146.22146.28146.43T:elephant200v2
160.93167.39175.41T:isapxv20
8310.658312.188332.28T:elephant176v2
9580.569581.149581.62T:elephant160v2
13193.9513194.8813196.12aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
5.075.165.31T:aes128gcmv1
6.206.366.60T:aes256gcmv1
9.9710.0010.01ascon128av12
13.7313.7913.85T:xoodyakround3
14.9114.9114.93ascon128v12
14.9514.9714.99ascon80pqv12
18.2518.2618.28ascon128abi32v12
27.0427.0927.15T:schwaemm256128v2
27.3927.4127.42ascon128bi32v12
29.3029.3429.38T:grain128aeadv2
31.6931.7931.98romulusn
34.7434.7634.79T:schwaemm256256v2
35.7135.7635.87T:schwaemm192192v2
38.4738.5538.63T:schwaemm128128v2
42.2242.4442.60T:isapa128v20
43.6443.6943.72romulusm
48.1048.1548.20T:tinyjambu128v2
48.5648.6348.69T:giftcofb128v1
51.5751.6551.71T:isapa128av20
55.6255.6755.72T:tinyjambu256v2
56.1256.1656.21T:tinyjambu192v2
84.7284.8684.90romulust
89.6789.8089.94T:isapk128av20
116.55116.82117.16T:isapk128v20
146.23146.29146.34T:elephant200v2
167.51167.96168.20T:isapxv20
8310.538312.158332.82T:elephant176v2
9580.579581.119582.06T:elephant160v2
13193.6513194.9513197.06aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
5.085.145.29T:aes128gcmv1
6.256.346.58T:aes256gcmv1
9.9710.0010.02ascon128av12
13.7213.8213.87T:xoodyakround3
14.8914.9014.93ascon128v12
14.9514.9714.99ascon80pqv12
18.2618.2818.29ascon128abi32v12
27.0227.0627.12T:schwaemm256128v2
27.4127.4227.44ascon128bi32v12
27.8828.0128.14T:isapa128v20
29.3329.3629.38T:grain128aeadv2
31.6831.8032.01romulusn
34.7434.7734.78T:schwaemm256256v2
35.7335.7635.83T:schwaemm192192v2
38.5138.5438.60T:schwaemm128128v2
41.7841.8241.87T:isapa128av20
43.1743.2343.32romulust
43.6443.6643.69romulusm
48.0948.1548.19T:tinyjambu128v2
48.5448.5848.64T:giftcofb128v1
55.5955.6455.71T:tinyjambu256v2
56.1456.1856.22T:tinyjambu192v2
71.5371.6071.70T:isapk128av20
89.2489.3589.48T:isapk128v20
124.08124.84124.88T:isapxv20
146.24146.28146.34T:elephant200v2
404.68405.54406.04aes256gcmv1
8310.808312.528332.89T:elephant176v2
9580.739581.129581.70T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
1.701.821.87T:aes128gcmv1
1.73?1.83?1.95?T:aes256gcmv1
9.179.249.30T:xoodyakround3
9.889.919.93ascon128av12
14.6714.7114.75ascon128v12
14.9114.9414.94ascon80pqv12
18.2218.2318.26ascon128abi32v12
24.0124.0324.08romulusm
24.0724.3124.67romulusn
26.8026.8326.91T:schwaemm256128v2
27.3127.3327.35ascon128bi32v12
27.9328.0128.04T:isapa128v20
28.9128.9428.98T:grain128aeadv2
34.4334.4634.49T:schwaemm256256v2
35.5935.7235.75T:schwaemm192192v2
36.4936.5336.57T:tinyjambu128v2
37.1037.1437.18T:tinyjambu256v2
38.4538.5238.71T:schwaemm128128v2
39.8939.9339.96T:tinyjambu192v2
41.8841.9241.99T:isapa128av20
43.0043.0843.27romulust
48.5148.5548.61T:giftcofb128v1
71.5171.6471.76T:isapk128av20
89.2489.4189.54T:isapk128v20
97.7897.8297.95T:elephant200v2
123.97124.03124.87T:isapxv20
403.75404.70406.54aes256gcmv1
5495.715498.405510.57T:elephant176v2
6384.846385.406386.16T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
1.721.821.90T:aes128gcmv1
1.70?1.84?1.89?T:aes256gcmv1
9.179.239.29T:xoodyakround3
9.929.949.96ascon128av12
14.8014.8214.85ascon128v12
14.9214.9615.00ascon80pqv12
18.2118.2318.25ascon128abi32v12
24.0224.0424.09romulusm
24.0124.2624.62romulusn
26.8626.8826.96T:schwaemm256128v2
27.3127.3327.36ascon128bi32v12
27.9428.0228.07T:isapa128v20
28.6628.7028.74T:grain128aeadv2
34.4334.4834.49T:schwaemm256256v2
35.5635.6335.70T:schwaemm192192v2
36.4836.5136.55T:tinyjambu128v2
37.1037.1537.17T:tinyjambu256v2
38.2838.3538.54T:schwaemm128128v2
40.0140.0840.12T:tinyjambu192v2
41.8741.9141.96T:isapa128av20
42.9643.0743.18romulust
48.5348.5648.62T:giftcofb128v1
71.4671.5771.83T:isapk128av20
89.1989.3989.52T:isapk128v20
97.7797.8197.87T:elephant200v2
124.11124.76124.85T:isapxv20
404.34405.47406.47aes256gcmv1
5495.395496.895510.26T:elephant176v2
6384.836385.606386.15T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
1.66?1.78?1.97?T:aes256gcmv1
1.701.791.83T:aes128gcmv1
9.219.279.33T:xoodyakround3
9.919.939.97ascon128av12
14.7914.8214.85ascon128v12
14.9214.9414.97ascon80pqv12
18.2018.2218.25ascon128abi32v12
24.0124.0424.07romulusm
24.0524.2824.67romulusn
26.8727.0427.09T:schwaemm256128v2
27.3227.3427.38ascon128bi32v12
27.9728.0228.09T:isapa128v20
28.6728.6928.86T:grain128aeadv2
34.4634.4834.50T:schwaemm256256v2
35.5935.6735.74T:schwaemm192192v2
36.4236.4736.55T:tinyjambu128v2
37.1337.1737.21T:tinyjambu256v2
38.3638.4038.49T:schwaemm128128v2
40.0340.0940.12T:tinyjambu192v2
41.8641.9141.95T:isapa128av20
43.0243.0743.15romulust
48.5248.5648.62T:giftcofb128v1
71.4471.6271.71T:isapk128av20
89.1789.3089.53T:isapk128v20
97.7697.8297.90T:elephant200v2
124.53124.82124.88T:isapxv20
404.94406.00406.51aes256gcmv1
5494.745497.625510.96T:elephant176v2
6384.836385.446386.32T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
6.957.047.06T:aes128gcmv1
8.358.408.62T:aes256gcmv1
10.2710.2710.30ascon128av12
13.9314.0614.09T:xoodyakround3
15.1315.1315.15ascon128v12
15.1715.1815.19ascon80pqv12
18.9719.0019.01ascon128abi32v12
27.8527.8727.89T:schwaemm256128v2
28.0328.0428.06ascon128bi32v12
29.4329.4529.47T:grain128aeadv2
31.8731.9932.18romulusn
35.6535.6935.72T:schwaemm256256v2
36.5936.6336.67T:schwaemm192192v2
39.0939.1139.19T:schwaemm128128v2
43.9043.9343.97romulusm
48.4148.4248.45T:tinyjambu128v2
49.0549.0949.11T:giftcofb128v1
54.8354.8554.89T:isapa128av20
55.7155.7655.78T:tinyjambu256v2
56.3656.3856.41T:tinyjambu192v2
62.2162.2862.46T:isapa128v20
86.1086.1486.24romulust
103.58103.64103.72T:isapk128av20
149.36149.38149.48T:elephant200v2
206.61206.70206.90T:isapk128v20
273.48273.74282.75T:isapxv20
8374.928375.698394.31T:elephant176v2
9688.649689.069689.71T:elephant160v2
13462.0213462.9213482.81aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
6.977.027.05T:aes128gcmv1
8.378.408.68T:aes256gcmv1
10.2410.2510.26ascon128av12
13.9013.9513.98T:xoodyakround3
15.1315.1415.15ascon128v12
15.1915.2115.22ascon80pqv12
18.6818.6918.71ascon128abi32v12
27.7927.8127.82ascon128bi32v12
27.8527.8927.94T:schwaemm256128v2
29.8129.8329.86T:grain128aeadv2
32.0032.1032.30romulusn
35.6835.6935.72T:schwaemm256256v2
36.5536.5836.61T:schwaemm192192v2
39.0039.0539.12T:schwaemm128128v2
44.0344.0544.07romulusm
48.5148.5448.57T:tinyjambu128v2
49.0849.1149.17T:giftcofb128v1
54.8954.9655.00T:isapa128av20
56.0556.0856.14T:tinyjambu256v2
56.5656.6356.67T:tinyjambu192v2
62.2062.2562.42T:isapa128v20
86.0786.1286.29romulust
103.64103.67103.74T:isapk128av20
149.32149.38149.42T:elephant200v2
206.59206.71206.85T:isapk128v20
273.29273.39273.67T:isapxv20
8374.418375.418394.55T:elephant176v2
9689.049689.389689.56T:elephant160v2
13463.1413463.9113484.24aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
6.987.027.25T:aes128gcmv1
8.358.418.63T:aes256gcmv1
10.2310.2310.24ascon128av12
13.8513.9013.97T:xoodyakround3
15.1315.1415.15ascon128v12
15.1815.1915.20ascon80pqv12
18.6818.6918.73ascon128abi32v12
27.8027.8027.82ascon128bi32v12
27.8327.8727.93T:schwaemm256128v2
29.8129.8329.88T:grain128aeadv2
32.0232.0932.32romulusn
35.6735.6935.72T:schwaemm256256v2
36.6036.6436.69T:schwaemm192192v2
38.0138.0538.16T:isapa128v20
38.9939.0439.11T:schwaemm128128v2
43.7043.7343.76T:isapa128av20
44.0144.0444.05romulusm
44.4544.4944.54romulust
48.5048.5248.55T:tinyjambu128v2
49.0949.1249.17T:giftcofb128v1
56.0656.1056.13T:tinyjambu256v2
56.5656.6056.65T:tinyjambu192v2
80.4280.4580.53T:isapk128av20
136.41136.50136.62T:isapk128v20
149.35149.38149.41T:elephant200v2
178.31178.73178.77T:isapxv20
674.20674.57675.35aes256gcmv1
8375.188375.568394.27T:elephant176v2
9688.949689.089689.62T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
15.8415.9716.31ascon128av12
20.0620.1820.39ascon128v12
20.2020.3120.55ascon80pqv12
20.2420.6820.80T:xoodyakround3
28.4428.5928.88ascon128abi32v12
37.1637.2237.49ascon128bi32v12
38.7138.9639.16romulusn
40.2040.2840.50T:grain128aeadv2
45.2845.4546.05T:schwaemm256128v2
50.1350.3050.73T:schwaemm128128v2
50.8851.0551.27romulusm
56.4756.6056.79T:schwaemm256256v2
56.7956.9857.27T:tinyjambu128v2
59.2259.5560.06T:schwaemm192192v2
59.0259.8061.12T:aes128gcmv1
60.2960.4060.80T:giftcofb128v1
65.0965.2365.41T:tinyjambu256v2
65.8966.3366.58T:tinyjambu192v2
67.4167.8469.87T:aes256gcmv1
115.64115.79116.77romulust
130.38131.02131.42T:isapa128av20
211.42211.62212.12T:elephant200v2
401.06402.73404.69T:isapk128av20
517.01519.48522.20T:isapa128v20
2242.212244.392246.48T:isapk128v20
2679.132690.662876.78T:isapxv20
10429.0010432.9610450.43T:elephant176v2
12972.1512974.5212978.81T:elephant160v2
19639.1319640.3419643.49aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
15.8416.0316.14ascon128av12
20.1220.2820.58ascon128v12
20.2420.3720.48ascon80pqv12
20.3920.6220.91T:xoodyakround3
28.2828.5628.89ascon128abi32v12
37.3337.5937.81ascon128bi32v12
38.8338.9939.09romulusn
40.6640.7741.09T:grain128aeadv2
45.5545.6446.08T:schwaemm256128v2
50.1250.3650.67T:schwaemm128128v2
52.2752.4852.77romulusm
56.4356.5956.78T:schwaemm256256v2
57.1757.4157.56T:tinyjambu128v2
58.4558.9660.73T:aes128gcmv1
59.1759.3059.59T:schwaemm192192v2
60.6660.9161.07T:giftcofb128v1
65.7066.0366.09T:tinyjambu256v2
66.2066.3366.52T:tinyjambu192v2
67.0667.7668.91T:aes256gcmv1
115.73116.00116.30romulust
130.55130.91131.14T:isapa128av20
211.33211.53211.77T:elephant200v2
399.98401.19403.52T:isapk128av20
516.32516.95522.40T:isapa128v20
2242.012244.452247.06T:isapk128v20
2668.452668.922675.00T:isapxv20
10429.2010432.8010450.20T:elephant176v2
12974.1412975.3412981.05T:elephant160v2
19640.3419641.2619647.02aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
15.7315.8015.88ascon128av12
20.0920.2120.46ascon128v12
20.2720.3720.46ascon80pqv12
20.3420.4820.82T:xoodyakround3
28.1828.2728.33ascon128abi32v12
37.2337.3237.42ascon128bi32v12
38.6838.8439.20romulusn
40.5240.6440.76T:grain128aeadv2
45.3545.5145.84T:schwaemm256128v2
50.0750.2250.66T:schwaemm128128v2
52.1652.2652.39romulusm
56.6256.6656.70T:schwaemm256256v2
57.1157.2657.40T:tinyjambu128v2
58.0958.7759.41T:aes128gcmv1
59.0859.2359.36T:schwaemm192192v2
60.7060.8460.98T:giftcofb128v1
65.5565.7565.78T:tinyjambu256v2
66.0866.2766.37T:tinyjambu192v2
67.0067.6070.03T:aes256gcmv1
73.2973.4673.73romulust
86.8487.2787.57T:isapa128av20
211.22211.47212.25T:elephant200v2
268.27268.88272.16T:isapa128v20
268.45269.23269.64T:isapk128av20
1198.521199.191199.80T:isapk128v20
1395.841396.061396.59T:isapxv20
6850.426851.556854.14aes256gcmv1
10430.2110432.1210449.22T:elephant176v2
12973.4412977.6912981.06T:elephant160v2