VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; K10 32nm (300f10); 2011 AMD A6-3650; 4 x 2600MHz; hydra4, supercop-20250415

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
9.919.959.95ascon128av12
13.8713.8713.88ascon128v12
14.1214.1314.13ascon80pqv12
19.1619.2019.21ascon128abi32v12
25.3425.4225.48T:aes128gcmv1
27.6227.6227.63ascon128bi32v12
29.0329.0630.83T:xoodyakround3
31.3831.4031.50T:aes256gcmv1
34.3134.9835.31T:schwaemm256128v2
43.8743.8843.90T:giftcofb128v1
43.9544.5745.21T:schwaemm192192v2
47.1547.1847.37T:schwaemm128128v2
48.1048.3048.57T:schwaemm256256v2
58.5058.5158.52T:isapa128av20
58.6058.7558.79T:isapa128v20
75.3275.5975.61T:grain128aeadv2
80.0080.0080.00T:tinyjambu128v2
82.5582.5582.56T:romulusn
97.1497.3597.38T:tinyjambu192v2
109.38109.42109.45T:isapk128av20
109.84109.85109.89T:tinyjambu256v2
146.34146.43147.02T:isapk128v20
168.02168.09168.25romulusn
237.17238.20239.85T:isapxv20
326.07329.84330.14romulusm
357.65361.87362.38T:elephant200v2
720.93721.49723.72T!!!romulust
15845.3615846.2515849.57T:elephant160v2
15978.6215990.0115991.73T:elephant176v2
25227.6825228.4825228.77aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
9.719.759.76ascon128av12
13.8713.8813.88ascon80pqv12
13.8713.8813.90ascon128v12
19.2019.2319.23ascon128abi32v12
25.3925.4725.49T:aes128gcmv1
28.6228.6328.63ascon128bi32v12
29.3729.4230.46T:xoodyakround3
31.3331.3731.55T:aes256gcmv1
34.5335.4335.87T:schwaemm256128v2
43.5443.5843.59T:giftcofb128v1
45.0845.2045.91T:schwaemm192192v2
47.9948.0248.20T:schwaemm128128v2
48.7748.8149.11T:schwaemm256256v2
58.4958.5058.52T:isapa128av20
58.7558.7558.75T:isapa128v20
75.0875.1075.12T:grain128aeadv2
80.0080.0080.01T:tinyjambu128v2
83.4883.5283.53T:romulusn
97.6297.6397.63T:tinyjambu192v2
109.39109.43110.16T:isapk128av20
110.05110.07110.10T:tinyjambu256v2
146.38146.45146.84T:isapk128v20
167.86168.05170.06romulusn
233.69240.16241.85T:isapxv20
328.56330.30330.44romulusm
357.74362.07362.35T:elephant200v2
723.01723.83732.00T!!!romulust
15845.3215846.1615849.88T:elephant160v2
15978.2115989.9115990.78T:elephant176v2
25228.4825229.3525230.22aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
9.759.759.76ascon128av12
13.8713.8813.88ascon80pqv12
13.8713.8813.88ascon128v12
19.2319.2319.23ascon128abi32v12
25.4125.4725.48T:aes128gcmv1
28.6228.6328.63ascon128bi32v12
29.4429.4830.53T:xoodyakround3
29.6229.6229.63T:isapa128v20
31.3331.5631.59T:aes256gcmv1
34.5335.4336.34T:schwaemm256128v2
38.6138.6238.65T:isapa128av20
43.5643.5743.59T:giftcofb128v1
45.0845.8846.10T:schwaemm192192v2
47.9948.0348.20T:schwaemm128128v2
48.4848.7148.82T:schwaemm256256v2
72.4272.4272.45T:isapk128av20
75.0875.0975.11T:grain128aeadv2
80.0080.0080.01T:tinyjambu128v2
83.4683.5083.52T:romulusn
90.8690.9290.96T:isapk128v20
97.6397.6497.65T:tinyjambu192v2
110.05110.07110.10T:tinyjambu256v2
139.60139.87141.47T:isapxv20
167.80168.04170.06romulusn
231.71232.80234.62T!!!romulust
328.67330.33330.62romulusm
357.93361.86362.34T:elephant200v2
625.06625.63625.83aes256gcmv1
15846.0415850.8915851.55T:elephant160v2
15979.1715990.3815991.23T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
9.739.769.77ascon128av12
13.6113.6213.64ascon128v12
13.9313.9413.94ascon80pqv12
16.2516.3016.50T:aes128gcmv1
18.8818.9218.93ascon128abi32v12
19.3419.4019.44T:aes256gcmv1
21.4821.5022.82T:xoodyakround3
27.5527.5627.57ascon128bi32v12
33.6434.2434.37T:schwaemm256128v2
43.7843.8043.81T:giftcofb128v1
43.6543.8045.25T:schwaemm192192v2
44.4344.4444.44T:isapa128v20
46.6646.7546.90T:schwaemm128128v2
47.8947.9448.19T:schwaemm256256v2
48.4948.5048.53T:isapa128av20
65.1865.2365.28T:tinyjambu128v2
72.7172.7472.76T:romulusn
75.0275.0575.06T:grain128aeadv2
75.7575.7575.78T:tinyjambu192v2
82.8382.8582.88T:tinyjambu256v2
90.8690.9190.94T:isapk128av20
118.77118.79119.04T:isapk128v20
163.24163.47164.29romulusn
189.93192.72192.88T:isapxv20
242.10246.51246.99romulusm
266.86270.21270.49T:elephant200v2
476.59477.63477.86T!!!romulust
11883.5111883.8211886.93T:elephant160v2
11937.9411946.0711946.35T:elephant176v2
12926.3612927.0212933.70aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
9.559.579.58ascon128av12
13.8113.8213.82ascon128v12
13.8713.8813.88ascon80pqv12
16.3116.3516.51T:aes128gcmv1
18.8818.9018.92ascon128abi32v12
19.3619.3919.46T:aes256gcmv1
21.3121.3322.70T:xoodyakround3
28.0628.0628.07ascon128bi32v12
34.0334.4734.62T:schwaemm256128v2
43.6243.6343.66T:giftcofb128v1
44.4444.4444.45T:isapa128v20
44.4244.9046.09T:schwaemm192192v2
47.1247.1647.33T:schwaemm128128v2
47.8548.0248.13T:schwaemm256256v2
48.4948.5048.52T:isapa128av20
65.1965.2065.27T:tinyjambu128v2
73.2673.2873.29T:romulusn
74.7874.8174.95T:grain128aeadv2
75.8875.8975.91T:tinyjambu192v2
82.9582.9783.01T:tinyjambu256v2
90.9090.9090.93T:isapk128av20
118.56118.80119.07T:isapk128v20
163.11163.31165.27romulusn
189.75191.58192.62T:isapxv20
242.65246.32247.65romulusm
266.85270.14270.50T:elephant200v2
477.85479.33483.12T!!!romulust
11883.4311883.8711884.22T:elephant160v2
11937.4411946.1011946.41T:elephant176v2
12927.1112927.7812932.28aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
9.579.579.58ascon128av12
13.8113.8113.82ascon128v12
13.8713.8813.88ascon80pqv12
16.3416.4816.52T:aes128gcmv1
18.9018.9018.91ascon128abi32v12
19.3719.4019.44T:aes256gcmv1
21.3321.3622.74T:xoodyakround3
28.0628.0628.06ascon128bi32v12
29.8729.8829.89T:isapa128v20
34.1934.5935.23T:schwaemm256128v2
38.5638.5638.57T:isapa128av20
43.6343.6443.65T:giftcofb128v1
44.4244.8444.91T:schwaemm192192v2
47.1647.2347.33T:schwaemm128128v2
47.8548.0248.28T:schwaemm256256v2
65.1965.1965.27T:tinyjambu128v2
72.4072.4272.44T:isapk128av20
73.2773.2873.30T:romulusn
74.8074.8174.82T:grain128aeadv2
75.8875.8975.89T:tinyjambu192v2
82.9482.9783.00T:tinyjambu256v2
90.7891.0391.21T:isapk128v20
140.07140.25140.95T:isapxv20
163.11163.30165.29romulusn
232.45232.84234.49T!!!romulust
243.39246.31247.65romulusm
266.86270.14270.41T:elephant200v2
625.24625.55625.81aes256gcmv1
11883.4311883.8311884.16T:elephant160v2
11938.0211946.0511946.48T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
7.187.287.36T:aes128gcmv1
7.287.287.30T:aes256gcmv1
9.549.579.57ascon128av12
13.3713.3813.38ascon128v12
13.7413.7513.75ascon80pqv12
13.9214.0114.91T:xoodyakround3
18.6118.6318.63ascon128abi32v12
27.4927.5027.50ascon128bi32v12
30.1230.1330.14T:isapa128v20
33.2333.7733.79T:schwaemm256128v2
38.4938.5038.51T:isapa128av20
43.6843.7143.74T:giftcofb128v1
43.1343.9844.96T:schwaemm192192v2
46.2346.3346.45T:schwaemm128128v2
47.4147.4547.62T:schwaemm256256v2
50.3850.3950.39T:tinyjambu128v2
54.1654.1654.18T:tinyjambu192v2
55.8455.8455.86T:tinyjambu256v2
62.7762.7762.78T:romulusn
72.4172.4272.48T:isapk128av20
74.4974.5274.52T:grain128aeadv2
91.0991.1491.49T:isapk128v20
141.29142.61143.41T:isapxv20
158.34158.60160.58romulusn
158.84161.83161.90romulusm
178.04179.97180.07T:elephant200v2
230.93231.44231.96T!!!romulust
624.52625.03625.16aes256gcmv1
7898.297903.607904.20T:elephant176v2
7922.707922.947923.98T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
7.237.277.33T:aes256gcmv1
7.237.297.33T:aes128gcmv1
9.369.389.40ascon128av12
13.7413.7513.76ascon128v12
13.8713.8813.88ascon80pqv12
13.9414.0115.03T:xoodyakround3
18.5418.5718.58ascon128abi32v12
27.5027.5027.50ascon128bi32v12
30.1230.1330.15T:isapa128v20
33.5233.7834.34T:schwaemm256128v2
38.5038.5038.50T:isapa128av20
43.6943.7443.75T:giftcofb128v1
43.6144.3345.16T:schwaemm192192v2
46.2546.3346.46T:schwaemm128128v2
47.3847.4547.88T:schwaemm256256v2
50.3750.3850.38T:tinyjambu128v2
54.1554.1654.16T:tinyjambu192v2
55.8455.8655.88T:tinyjambu256v2
63.0563.0763.09T:romulusn
71.8072.4472.62T:isapk128av20
74.5074.5374.53T:grain128aeadv2
91.1091.1891.53T:isapk128v20
140.52140.61140.79T:isapxv20
158.32159.02160.57romulusn
159.39162.34162.74romulusm
178.03180.03180.20T:elephant200v2
231.65232.40234.53T!!!romulust
625.15625.60625.81aes256gcmv1
7897.817903.207903.83T:elephant176v2
7922.427922.747923.87T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
7.257.307.31T:aes128gcmv1
7.217.317.35T:aes256gcmv1
9.389.389.39ascon128av12
13.7413.7513.76ascon128v12
13.8713.8813.88ascon80pqv12
13.9514.0115.03T:xoodyakround3
18.5718.5718.58ascon128abi32v12
27.5027.5027.50ascon128bi32v12
30.1230.1330.13T:isapa128v20
33.2333.6734.35T:schwaemm256128v2
38.4838.5038.52T:isapa128av20
43.7143.7143.71T:giftcofb128v1
43.9644.4645.34T:schwaemm192192v2
46.3046.3246.46T:schwaemm128128v2
47.3447.4147.45T:schwaemm256256v2
50.3750.3750.38T:tinyjambu128v2
54.1654.1654.17T:tinyjambu192v2
55.8455.8655.86T:tinyjambu256v2
63.0663.0863.09T:romulusn
72.3772.4372.46T:isapk128av20
74.5274.5374.54T:grain128aeadv2
91.1091.1691.21T:isapk128v20
140.53140.59140.70T:isapxv20
158.66159.04160.57romulusn
159.37162.35162.74romulusm
177.97180.01180.20T:elephant200v2
231.35232.37234.49T!!!romulust
625.13625.61625.95aes256gcmv1
7902.997903.637904.02T:elephant176v2
7922.847923.997925.88T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
9.979.989.99ascon128av12
13.8413.8413.85ascon128v12
14.1514.1514.15ascon80pqv12
17.2817.3117.34T:aes128gcmv1
19.3319.3319.35ascon128abi32v12
20.4520.4820.52T:aes256gcmv1
21.7921.8023.03T:xoodyakround3
28.0028.0028.01ascon128bi32v12
34.6235.1835.99T:schwaemm256128v2
44.2544.2544.26T:giftcofb128v1
44.9344.9346.37T:schwaemm192192v2
47.3147.3248.03T:schwaemm128128v2
49.1549.1849.41T:schwaemm256256v2
52.2652.2652.29T:isapa128av20
65.4665.4765.49T:isapa128v20
65.7165.7365.78T:tinyjambu128v2
73.5973.6173.67T:romulusn
75.4475.4475.45T:grain128aeadv2
76.3476.3576.38T:tinyjambu192v2
83.4683.4783.50T:tinyjambu256v2
106.61106.63106.94T:isapk128av20
165.51165.56165.65romulusn
212.36212.46212.88T:isapk128v20
244.29247.73248.71romulusm
272.76275.63275.71T:elephant200v2
308.81309.25309.91T:isapxv20
484.20485.11485.31T!!!romulust
12017.6912017.9412018.23T:elephant160v2
12028.7712036.8912037.24T:elephant176v2
13186.1813186.3113186.50aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
9.789.789.79ascon128av12
14.0314.0314.03ascon128v12
14.0914.0914.09ascon80pqv12
17.2717.2817.31T:aes128gcmv1
19.3219.3219.34ascon128abi32v12
20.4720.5620.61T:aes256gcmv1
21.6321.6422.92T:xoodyakround3
28.5028.5028.50ascon128bi32v12
34.9935.4835.97T:schwaemm256128v2
44.1144.1144.14T:giftcofb128v1
45.6646.2146.95T:schwaemm192192v2
47.7447.7648.44T:schwaemm128128v2
49.1249.2749.37T:schwaemm256256v2
52.2752.2752.28T:isapa128av20
65.4965.4965.50T:isapa128v20
65.7165.7865.79T:tinyjambu128v2
74.1974.2174.22T:romulusn
75.2075.2175.22T:grain128aeadv2
76.4876.4976.50T:tinyjambu192v2
83.6083.6283.65T:tinyjambu256v2
106.65106.66106.67T:isapk128av20
165.41165.60166.93romulusn
212.36212.49212.66T:isapk128v20
245.60249.07250.00romulusm
272.59275.64275.70T:elephant200v2
306.11308.99309.66T:isapxv20
485.85486.63490.33T!!!romulust
12017.3012017.7212017.98T:elephant160v2
12030.3512036.8512037.12T:elephant176v2
13186.9013187.0413187.41aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
9.789.789.79ascon128av12
14.0314.0314.03ascon128v12
14.0914.0914.09ascon80pqv12
17.2617.2817.32T:aes128gcmv1
19.3219.3219.33ascon128abi32v12
20.4120.4720.59T:aes256gcmv1
21.6821.6922.97T:xoodyakround3
28.5028.5028.51ascon128bi32v12
35.1935.4835.97T:schwaemm256128v2
40.5740.5840.58T:isapa128v20
40.6740.6740.68T:isapa128av20
44.1144.1144.12T:giftcofb128v1
45.8146.5746.95T:schwaemm192192v2
47.7047.7448.44T:schwaemm128128v2
49.2549.4449.49T:schwaemm256256v2
65.7165.7265.79T:tinyjambu128v2
74.1674.1874.19T:romulusn
75.2075.2075.22T:grain128aeadv2
76.4876.4976.50T:tinyjambu192v2
82.8582.8782.89T:isapk128av20
83.6083.6183.62T:tinyjambu256v2
141.39141.42141.78T:isapk128v20
165.41165.54166.93romulusn
199.51199.69200.30T:isapxv20
239.33239.58241.06T!!!romulust
245.65249.08250.00romulusm
272.61275.65275.84T:elephant200v2
885.05885.16885.31aes256gcmv1
12017.6412018.1312019.62T:elephant160v2
12028.9212036.8112037.10T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
14.8414.8415.55ascon128av12
18.4118.5119.03ascon128v12
18.6918.7019.76ascon80pqv12
28.7928.7929.95ascon128abi32v12
33.7033.7334.16T:xoodyakround3
37.7437.7538.30ascon128bi32v12
39.4139.5540.38T:aes128gcmv1
43.7743.8444.95T:aes256gcmv1
54.4354.4554.80T:giftcofb128v1
55.5956.3856.42T:schwaemm256128v2
60.3860.6060.67T:schwaemm128128v2
72.2272.3973.08T:schwaemm192192v2
77.4377.5777.88T:schwaemm256256v2
77.8577.8778.25T:tinyjambu128v2
83.9383.9484.06T:grain128aeadv2
90.1590.1990.25T:tinyjambu192v2
94.7494.7895.32T:romulusn
97.8497.8898.28T:tinyjambu256v2
138.61138.62139.31T:isapa128av20
206.02206.30206.88romulusn
287.45290.30291.19romulusm
383.52386.39386.55T:elephant200v2
449.79449.91450.41T:isapk128av20
548.66548.66549.46T:isapa128v20
655.54656.77659.23T!!!romulust
2340.622340.802341.22T:isapk128v20
2970.472970.702990.81T:isapxv20
14987.0514992.5914995.10T:elephant176v2
16094.8916097.2516098.12T:elephant160v2
19156.3419156.8219159.76aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
14.5814.6115.05ascon128av12
18.7418.7519.38ascon80pqv12
18.6918.7719.47ascon128v12
28.9828.9829.51ascon128abi32v12
33.5733.5933.59T:xoodyakround3
38.2338.2739.92T:aes128gcmv1
38.3238.3238.88ascon128bi32v12
43.3344.3844.40T:aes256gcmv1
54.7754.7955.41T:giftcofb128v1
56.0556.6656.71T:schwaemm256128v2
60.7960.9761.12T:schwaemm128128v2
72.7072.8173.95T:schwaemm192192v2
77.5877.7082.54T:schwaemm256256v2
77.7777.8377.87T:tinyjambu128v2
83.8383.8584.08T:grain128aeadv2
90.0990.1090.34T:tinyjambu192v2
94.9195.0595.26T:romulusn
98.5598.7198.93T:tinyjambu256v2
138.91139.13139.20T:isapa128av20
205.82206.66207.14romulusn
306.56311.26311.43romulusm
383.35386.13386.50T:elephant200v2
450.38450.38451.36T:isapk128av20
549.29549.30549.64T:isapa128v20
656.38657.98663.77T!!!romulust
2341.122341.742346.62T:isapk128v20
2963.162976.412978.52T:isapxv20
14988.6214993.1214994.36T:elephant176v2
16090.2516096.0116100.67T:elephant160v2
19157.2619158.2719160.23aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
14.5814.5914.61ascon128av12
18.6818.7318.82ascon128v12
18.7418.7418.75ascon80pqv12
28.9628.9628.97ascon128abi32v12
33.6033.6333.91T:xoodyakround3
38.3038.3038.30ascon128bi32v12
38.2438.4639.23T:aes128gcmv1
43.3443.8944.55T:aes256gcmv1
54.7754.7754.79T:giftcofb128v1
55.8556.6756.72T:schwaemm256128v2
60.7660.9560.97T:schwaemm128128v2
72.4572.7073.94T:schwaemm192192v2
77.1677.4177.73T:schwaemm256256v2
77.7777.7777.80T:tinyjambu128v2
83.8283.8583.85T:grain128aeadv2
89.1089.1389.29T:isapa128av20
90.2490.2490.25T:tinyjambu192v2
94.5994.6294.80T:romulusn
98.5598.7198.82T:tinyjambu256v2
205.82206.23206.72romulusn
286.41286.41286.49T:isapa128v20
308.12308.26308.50T:isapk128av20
310.91311.26311.41romulusm
385.92386.14386.50T:elephant200v2
391.30391.37395.41T!!!romulust
1281.701282.291286.55T:isapk128v20
1539.011540.671540.91T:isapxv20
6853.906854.106858.74aes256gcmv1
14987.7014993.2514994.94T:elephant176v2
16094.3816096.2316101.39T:elephant160v2