VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; K10 32nm (300f10); 2011 AMD A8-3850; 4 x 2900MHz; hydra5, supercop-20251222

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
9.299.329.33ascon128av12
13.8713.8813.89ascon128v12
13.9113.9213.92ascon80pqv12
19.1819.2119.21ascon128abi32v12
26.4426.4626.54T:xoodyakround3
27.7427.7527.77ascon128bi32v12
31.8431.8531.87T:schwaemm256128v2
38.3638.7939.27T:aes128gcmv1
40.0240.4340.67T:aes256gcmv1
42.0742.2942.46T:schwaemm192192v2
44.8444.8544.87T:giftcofb128v1
46.0046.0146.16T:schwaemm256256v2
46.9346.9446.94T:schwaemm128128v2
53.8553.8853.90T:isapa128v20
57.8457.8657.90T:isapa128av20
73.0173.0273.22T:grain128aeadv2
81.8481.8481.86T:tinyjambu128v2
85.3485.6085.85T:romulusn
98.4398.4498.46T:tinyjambu192v2
105.33105.47106.26T:isapk128av20
113.20113.23113.24T:tinyjambu256v2
140.12140.22140.66T:isapk128v20
173.25173.51173.70romulusn
241.84242.49242.51T:elephant200v2
298.02302.89306.91T:isapxv20
317.62317.82318.52romulusm
683.87684.40688.52T!!!romulust
14420.4114420.8214421.43T:elephant160v2
15229.8015230.2315230.63T:elephant176v2
24460.8024461.3624462.68aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
9.419.459.45ascon128av12
13.8613.8813.88ascon80pqv12
13.9914.0014.01ascon128v12
18.3618.3918.41ascon128abi32v12
26.1426.2926.38T:xoodyakround3
28.5028.5028.50ascon128bi32v12
31.8031.9131.93T:schwaemm256128v2
38.6038.8939.40T:aes128gcmv1
39.8740.1740.48T:aes256gcmv1
42.4142.4542.62T:schwaemm192192v2
44.5544.5644.57T:giftcofb128v1
45.9946.0346.15T:schwaemm256256v2
46.9947.0247.03T:schwaemm128128v2
53.8653.8853.90T:isapa128v20
57.8457.8657.87T:isapa128av20
76.1676.7676.80T:grain128aeadv2
81.5081.5181.52T:tinyjambu128v2
85.4585.5085.77T:romulusn
98.9798.9899.00T:tinyjambu192v2
105.40105.44105.46T:isapk128av20
113.21113.22113.34T:tinyjambu256v2
140.18140.23140.47T:isapk128v20
173.20173.54173.82romulusn
241.75242.35242.40T:elephant200v2
297.41306.26307.00T:isapxv20
317.76317.90319.57romulusm
680.62684.54687.29T!!!romulust
14420.3214420.9814421.16T:elephant160v2
15229.8415230.4315230.62T:elephant176v2
24458.4124459.4724461.66aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
9.459.459.45ascon128av12
13.8813.8813.88ascon80pqv12
14.0014.0014.00ascon128v12
18.3918.3918.42ascon128abi32v12
26.2126.3226.48T:xoodyakround3
26.8426.8726.91T:isapa128v20
28.5028.5028.50ascon128bi32v12
31.8031.9231.93T:schwaemm256128v2
38.2538.2638.27T:isapa128av20
38.5738.9239.38T:aes128gcmv1
39.5340.1240.47T:aes256gcmv1
42.4142.4442.62T:schwaemm192192v2
44.5644.5744.57T:giftcofb128v1
45.9946.0246.15T:schwaemm256256v2
46.8047.0047.02T:schwaemm128128v2
70.1070.1270.14T:isapk128av20
76.1376.7676.78T:grain128aeadv2
81.4981.5081.52T:tinyjambu128v2
85.4585.4885.78T:romulusn
87.5487.5887.60T:isapk128v20
98.9798.9898.99T:tinyjambu192v2
113.21113.22113.62T:tinyjambu256v2
173.22173.42173.86romulusn
174.73179.93184.01T:isapxv20
220.30221.48222.91T!!!romulust
241.73242.34242.40T:elephant200v2
317.83318.02321.55romulusm
624.34624.92625.67aes256gcmv1
14420.2614420.7014421.03T:elephant160v2
15229.6715230.2515230.59T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
9.119.149.15ascon128av12
13.5513.5613.57ascon128v12
13.7013.7113.72ascon80pqv12
18.7318.7618.77ascon128abi32v12
20.3020.5020.57T:xoodyakround3
22.7022.9623.17T:aes128gcmv1
23.9224.0824.14T:aes256gcmv1
27.3627.3827.39ascon128bi32v12
31.6931.7131.73T:schwaemm256128v2
40.2340.2540.27T:isapa128v20
41.9741.9842.14T:schwaemm192192v2
44.8344.8444.85T:giftcofb128v1
45.9046.0346.07T:schwaemm256256v2
46.8146.8446.86T:schwaemm128128v2
48.0548.0648.07T:isapa128av20
66.7466.7466.78T:tinyjambu128v2
72.8373.0373.18T:grain128aeadv2
74.2774.3474.50T:romulusn
76.6676.6876.98T:tinyjambu192v2
84.4484.4584.48T:tinyjambu256v2
87.7587.7687.78T:isapk128av20
113.65113.94114.12T:isapk128v20
159.17159.50159.95romulusn
181.05181.56181.75T:elephant200v2
230.85231.14231.45romulusm
236.57239.31241.54T:isapxv20
451.96452.47455.12T!!!romulust
10814.6710814.9010815.17T:elephant160v2
11378.7611378.8811379.23T:elephant176v2
12541.7812542.2812544.26aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
9.179.209.21ascon128av12
13.8113.8113.82ascon128v12
13.8613.8813.88ascon80pqv12
18.3118.3418.35ascon128abi32v12
20.1420.1820.33T:xoodyakround3
22.9223.0223.50T:aes128gcmv1
23.7823.9324.08T:aes256gcmv1
27.8127.8127.82ascon128bi32v12
31.6331.7431.75T:schwaemm256128v2
40.2440.2540.44T:isapa128v20
42.1242.1642.34T:schwaemm192192v2
44.6744.6944.70T:giftcofb128v1
45.9045.9146.05T:schwaemm256256v2
46.6446.8846.89T:schwaemm128128v2
48.0548.0648.07T:isapa128av20
66.5266.5766.60T:tinyjambu128v2
74.2374.2674.46T:romulusn
74.7374.7674.94T:grain128aeadv2
76.9676.9677.01T:tinyjambu192v2
84.4584.4584.47T:tinyjambu256v2
87.7487.7687.79T:isapk128av20
113.85113.89114.13T:isapk128v20
158.79159.83159.95romulusn
181.02181.50181.71T:elephant200v2
230.50230.73231.60romulusm
236.05239.59241.80T:isapxv20
452.03453.00455.13T!!!romulust
10814.6610814.8810814.98T:elephant160v2
11378.7711378.8411379.09T:elephant176v2
12542.3412542.8212546.33aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
9.209.209.20ascon128av12
13.8113.8113.81ascon128v12
13.8713.8813.88ascon80pqv12
18.3418.3418.35ascon128abi32v12
20.1720.2120.37T:xoodyakround3
22.9423.1023.23T:aes128gcmv1
23.6723.9924.17T:aes256gcmv1
26.7326.7526.77T:isapa128v20
27.8127.8127.82ascon128bi32v12
31.6331.7431.75T:schwaemm256128v2
38.2538.2638.26T:isapa128av20
42.1442.1542.32T:schwaemm192192v2
44.6944.6944.69T:giftcofb128v1
45.8945.9146.06T:schwaemm256256v2
46.7846.8846.89T:schwaemm128128v2
66.5266.5666.61T:tinyjambu128v2
70.1070.1270.15T:isapk128av20
74.2474.3174.53T:romulusn
74.3274.7781.31T:grain128aeadv2
76.9576.9676.99T:tinyjambu192v2
84.4584.4584.46T:tinyjambu256v2
87.5487.5887.70T:isapk128v20
158.73159.84159.89romulusn
174.32177.58180.90T:isapxv20
181.07181.50181.72T:elephant200v2
219.08221.30222.75T!!!romulust
231.33231.42232.41romulusm
624.54625.57642.79aes256gcmv1
10814.6110814.8310815.23T:elephant160v2
11378.7511378.8711378.98T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
6.947.077.60T:aes128gcmv1
7.557.838.06T:aes256gcmv1
8.918.958.96ascon128av12
13.2413.2513.26ascon128v12
13.4913.5013.51ascon80pqv12
14.0314.0814.16T:xoodyakround3
18.2318.2618.31ascon128abi32v12
26.6026.6226.64T:isapa128v20
26.9927.0027.00ascon128bi32v12
31.4931.5831.59T:schwaemm256128v2
38.2638.2738.27T:isapa128av20
41.8741.8842.02T:schwaemm192192v2
44.8044.8344.85T:giftcofb128v1
45.8145.8145.94T:schwaemm256256v2
46.4946.7546.77T:schwaemm128128v2
51.5451.6251.73T:tinyjambu128v2
54.9354.9454.97T:tinyjambu192v2
55.6755.6955.71T:tinyjambu256v2
63.0463.0663.44T:romulusn
70.1070.1270.57T:isapk128av20
73.0273.0473.27T:grain128aeadv2
87.5287.5387.58T:isapk128v20
120.89121.38121.40T:elephant200v2
143.07143.57144.77romulusm
145.01145.87147.16romulusn
174.89175.35177.97T:isapxv20
219.14221.46222.11T!!!romulust
624.45641.90642.21aes256gcmv1
7209.407209.667210.02T:elephant160v2
7527.877528.177528.58T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
7.027.267.55T:aes128gcmv1
7.617.807.94T:aes256gcmv1
8.918.958.95ascon128av12
13.6213.6213.63ascon128v12
13.8713.8813.88ascon80pqv12
14.0414.0814.15T:xoodyakround3
18.2718.2918.30ascon128abi32v12
26.6026.6226.65T:isapa128v20
27.1227.1227.13ascon128bi32v12
31.5331.5831.60T:schwaemm256128v2
38.2638.2738.27T:isapa128av20
41.8741.9042.03T:schwaemm192192v2
44.8244.8244.83T:giftcofb128v1
45.8045.8245.94T:schwaemm256256v2
46.5046.7546.76T:schwaemm128128v2
51.5451.6351.72T:tinyjambu128v2
54.9354.9454.95T:tinyjambu192v2
55.6855.6955.70T:tinyjambu256v2
63.0563.0763.40T:romulusn
70.1070.1170.15T:isapk128av20
72.7472.8073.12T:grain128aeadv2
87.4887.5387.58T:isapk128v20
120.92121.38121.42T:elephant200v2
143.25143.78144.45romulusm
145.04146.29147.22romulusn
174.03174.45178.42T:isapxv20
219.08220.56222.61T!!!romulust
624.54641.04642.09aes256gcmv1
7209.317209.747210.12T:elephant160v2
7527.877528.177528.78T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
7.017.537.57T:aes128gcmv1
7.597.958.26T:aes256gcmv1
8.958.958.95ascon128av12
13.6213.6313.97ascon128v12
13.8813.8813.88ascon80pqv12
13.9614.0814.12T:xoodyakround3
18.2918.3018.30ascon128abi32v12
26.6026.6326.66T:isapa128v20
27.1227.1227.13ascon128bi32v12
31.5631.5831.60T:schwaemm256128v2
38.2538.2738.27T:isapa128av20
41.8741.9042.03T:schwaemm192192v2
44.8244.8244.82T:giftcofb128v1
45.7945.8145.94T:schwaemm256256v2
46.6646.7646.76T:schwaemm128128v2
51.5451.6251.71T:tinyjambu128v2
54.9354.9554.95T:tinyjambu192v2
55.6855.6955.70T:tinyjambu256v2
63.0563.0763.17T:romulusn
70.1070.1370.25T:isapk128av20
72.8072.8073.19T:grain128aeadv2
87.4787.5587.58T:isapk128v20
121.35121.38121.42T:elephant200v2
143.26143.83144.41romulusm
145.01145.64146.35romulusn
174.01174.40178.38T:isapxv20
218.84220.57222.59T!!!romulust
624.38624.93641.92aes256gcmv1
7209.307209.687210.05T:elephant160v2
7527.807528.097528.69T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
9.359.359.37ascon128av12
13.7713.7713.78ascon128v12
13.9213.9213.93ascon80pqv12
19.1519.1619.16ascon128abi32v12
20.5520.5920.74T:xoodyakround3
25.2025.2625.37T:aes128gcmv1
27.7927.7927.81ascon128bi32v12
27.8327.9928.02T:aes256gcmv1
32.6232.6332.64T:schwaemm256128v2
42.9242.9343.07T:schwaemm192192v2
45.3145.3145.31T:giftcofb128v1
47.1547.1547.27T:schwaemm256256v2
47.3247.4447.44T:schwaemm128128v2
51.8251.8251.84T:isapa128av20
58.7558.7859.16T:isapa128v20
67.1967.2367.24T:tinyjambu128v2
73.2373.4373.45T:grain128aeadv2
75.1275.2275.49T:romulusn
77.2977.2977.30T:tinyjambu192v2
85.1085.1185.13T:tinyjambu256v2
103.45103.45103.45T:isapk128av20
160.53161.21161.53romulusn
184.90185.36185.53T:elephant200v2
204.15204.15204.40T:isapk128v20
231.89232.17233.17romulusm
388.94392.31393.20T:isapxv20
457.25459.29463.39T!!!romulust
10937.2110937.3710937.62T:elephant160v2
11465.4211465.6411465.77T:elephant176v2
12795.1412808.3812814.94aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
9.419.419.42ascon128av12
14.0214.0214.03ascon128v12
14.0914.0914.10ascon80pqv12
18.7518.7618.76ascon128abi32v12
20.4020.4220.58T:xoodyakround3
25.4025.4725.66T:aes128gcmv1
28.2428.2428.25ascon128bi32v12
29.0529.2129.29T:aes256gcmv1
32.5632.6632.66T:schwaemm256128v2
43.0643.0643.21T:schwaemm192192v2
45.1745.1745.18T:giftcofb128v1
47.1447.1547.27T:schwaemm256256v2
47.3247.4747.47T:schwaemm128128v2
51.9551.9651.97T:isapa128av20
58.7558.7658.76T:isapa128v20
67.0567.0667.07T:tinyjambu128v2
75.0075.1675.36T:grain128aeadv2
75.2475.2575.48T:romulusn
77.5777.5777.58T:tinyjambu192v2
85.1085.1085.11T:tinyjambu256v2
103.50103.50103.53T:isapk128av20
160.63161.16161.50romulusn
184.97185.29185.30T:elephant200v2
204.21204.22204.51T:isapk128v20
232.65233.69233.81romulusm
387.97392.69393.78T:isapxv20
459.08460.24461.85T!!!romulust
10937.0910937.3210937.64T:elephant160v2
11465.2811465.4711465.59T:elephant176v2
12794.1812806.7612810.13aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
9.419.419.41ascon128av12
14.0214.0214.02ascon128v12
14.0914.0914.09ascon80pqv12
18.7518.7518.75ascon128abi32v12
20.4320.4620.67T:xoodyakround3
25.4125.4725.71T:aes128gcmv1
28.2428.2428.24ascon128bi32v12
32.5632.6632.66T:schwaemm256128v2
36.1536.1636.18T:isapa128v20
37.0137.1337.35T:aes256gcmv1
40.4940.4940.49T:isapa128av20
43.0643.0643.21T:schwaemm192192v2
45.1745.1745.18T:giftcofb128v1
47.1447.1447.27T:schwaemm256256v2
47.3147.4647.47T:schwaemm128128v2
67.0067.0567.06T:tinyjambu128v2
74.9875.1881.25T:grain128aeadv2
75.2175.2475.47T:romulusn
77.5777.5777.58T:tinyjambu192v2
80.5080.5180.55T:isapk128av20
85.1085.1085.12T:tinyjambu256v2
136.27136.29136.45T:isapk128v20
160.52161.21161.52romulusn
184.94185.21185.29T:elephant200v2
226.29227.49229.75T!!!romulust
232.71232.83233.69romulusm
252.30254.82255.15T:isapxv20
877.25877.51892.85aes256gcmv1
10937.0910937.3210937.52T:elephant160v2
11465.2911465.4511465.84T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
14.1014.1014.57ascon128av12
18.1818.2018.91ascon128v12
18.4518.4519.55ascon80pqv12
28.3328.3529.02ascon128abi32v12
30.9331.0831.34T:xoodyakround3
37.1337.1337.73ascon128bi32v12
53.4653.5453.64T:schwaemm256128v2
55.7755.8156.15T:giftcofb128v1
61.0561.0561.07T:schwaemm128128v2
69.6969.8270.08T:schwaemm192192v2
75.1275.1675.30T:schwaemm256256v2
78.1678.7878.78T:tinyjambu128v2
82.2482.2783.11T:grain128aeadv2
77.7182.3983.23T:aes128gcmv1
91.2491.3491.40T:tinyjambu192v2
96.7996.8297.01T:romulusn
100.34100.40100.57T:tinyjambu256v2
112.12113.65118.99T:aes256gcmv1
138.07138.12138.28T:isapa128av20
197.80198.02199.45romulusn
262.08262.21262.69T:elephant200v2
268.48270.03271.33romulusm
445.52445.62446.32T:isapk128av20
483.88483.89484.93T:isapa128v20
615.86617.70619.82T!!!romulust
2256.652257.082257.46T:isapk128v20
3831.253838.493855.75T:isapxv20
14275.9514281.9814283.42T:elephant176v2
14650.0614655.1614656.53T:elephant160v2
18583.3118584.4818591.66aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
14.1414.1515.11ascon128av12
18.6418.6519.20ascon128v12
18.7718.7719.68ascon80pqv12
28.3728.6328.91ascon128abi32v12
30.8030.9031.35T:xoodyakround3
37.8437.8438.14ascon128bi32v12
53.2553.4653.48T:schwaemm256128v2
56.0856.2556.97T:giftcofb128v1
60.9561.0261.24T:schwaemm128128v2
68.9769.2569.99T:schwaemm192192v2
75.1275.2075.32T:schwaemm256256v2
78.1178.4578.68T:tinyjambu128v2
79.0280.7082.51T:aes128gcmv1
83.6484.0184.02T:grain128aeadv2
91.7091.7291.75T:tinyjambu192v2
97.1297.2297.31T:romulusn
99.5999.65100.41T:tinyjambu256v2
141.41141.42141.63T:isapa128av20
147.26148.96149.82T:aes256gcmv1
197.22198.27199.37romulusn
261.39262.17262.25T:elephant200v2
282.93283.62284.74romulusm
446.81446.91447.30T:isapk128av20
483.91484.02484.86T:isapa128v20
616.02616.94618.95T!!!romulust
2257.892258.532258.62T:isapk128v20
3831.643835.323835.79T:isapxv20
14275.7714279.8014281.32T:elephant176v2
14649.8214655.1814656.98T:elephant160v2
18581.4118583.7918593.57aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
14.1414.1514.30ascon128av12
18.6218.6318.66ascon128v12
18.7618.7718.77ascon80pqv12
28.0228.0528.06ascon128abi32v12
30.9031.0531.30T:xoodyakround3
37.8337.8338.12ascon128bi32v12
53.2553.4653.48T:schwaemm256128v2
56.0856.1056.25T:giftcofb128v1
60.8760.9461.19T:schwaemm128128v2
68.9769.2569.32T:schwaemm192192v2
74.9174.9275.16T:schwaemm256256v2
78.2478.4578.67T:tinyjambu128v2
79.0679.3282.74T:aes128gcmv1
83.5284.0684.08T:grain128aeadv2
91.6491.6691.74T:isapa128av20
91.6291.7291.76T:tinyjambu192v2
96.7396.7796.96T:romulusn
99.5599.59100.41T:tinyjambu256v2
197.17198.11199.27romulusn
252.18252.59252.98T:isapa128v20
261.42262.24262.65T:elephant200v2
282.94283.11284.48romulusm
304.35304.59304.74T:isapk128av20
338.57340.13345.19T:aes256gcmv1
366.90370.03372.40T!!!romulust
1238.441238.731239.18T:isapk128v20
1998.362004.632008.40T:isapxv20
6662.116662.736668.93aes256gcmv1
14275.9714281.0014283.04T:elephant176v2
14650.1514654.4514657.24T:elephant160v2