VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Sandy Bridge+AES (206a7); 2011 Intel Xeon E3-1225; 4 x 3100MHz; hydra7, supercop-20241022

[Page version: 20241215 22:59:49]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
2.40?2.55?2.77?T:aes128gcmv1
2.73?2.94?3.08?T:aes256gcmv1
10.1110.1310.15ascon128av12
14.9514.9715.00ascon80pqv12
15.0415.0615.10ascon128v12
18.2018.2918.47T:xoodyakround3
18.8918.9218.95ascon128abi32v12
27.1827.2427.29T:schwaemm256128v2
27.9027.9328.00ascon128bi32v12
28.5228.5528.58T:grain128aeadv2
34.5434.5634.58T:schwaemm256256v2
35.8535.9136.01T:schwaemm192192v2
38.6638.7038.75T:schwaemm128128v2
39.3239.3739.42romulusn
48.3748.4248.48T:giftcofb128v1
56.7156.7856.88T:isapa128v20
59.5159.5459.62T:tinyjambu128v2
61.1961.2361.35T:isapa128av20
63.1463.1963.26romulusm
71.9472.0272.09T:tinyjambu192v2
73.4473.5573.62T:tinyjambu256v2
107.70107.95108.57T:isapk128av20
126.47126.59127.32romulust
143.46143.83144.19T:isapk128v20
195.34195.41195.57T:elephant200v2
193.61?210.92?229.22?T:isapxv20
375.59376.04376.33aes256gcmv1
10863.4510868.2110906.14T:elephant176v2
12737.6912738.9212739.65T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
2.39?2.53?2.82?T:aes128gcmv1
2.822.963.06T:aes256gcmv1
10.0610.0910.11ascon128av12
14.9614.9714.99ascon80pqv12
14.9615.0015.03ascon128v12
18.1118.1618.25T:xoodyakround3
18.2918.3218.35ascon128abi32v12
27.1527.2327.29T:schwaemm256128v2
27.4327.4527.48ascon128bi32v12
30.3430.8531.01T:grain128aeadv2
34.5634.5834.80T:schwaemm256256v2
35.8135.9736.71T:schwaemm192192v2
38.6438.7438.80T:schwaemm128128v2
39.2939.3239.37romulusn
48.4548.5148.60T:giftcofb128v1
56.7056.7756.87T:isapa128v20
59.7559.7859.88T:tinyjambu128v2
61.2361.3261.36T:isapa128av20
63.2763.3163.35romulusm
72.1372.2372.29T:tinyjambu192v2
74.1374.2074.29T:tinyjambu256v2
107.64107.88108.20T:isapk128av20
126.47126.71127.14romulust
143.54143.79143.96T:isapk128v20
195.32195.40195.52T:elephant200v2
200.10?211.31?223.58?T:isapxv20
375.73376.61377.08aes256gcmv1
10863.0310867.4110905.97T:elephant176v2
12738.4712739.2612740.32T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
2.432.562.70T:aes128gcmv1
2.792.932.99T:aes256gcmv1
10.0710.0910.12ascon128av12
14.9714.9915.01ascon80pqv12
14.9815.0115.03ascon128v12
18.1718.2918.38T:xoodyakround3
18.2918.3118.35ascon128abi32v12
27.1527.2427.28T:schwaemm256128v2
27.4527.4727.49ascon128bi32v12
27.8927.9528.03T:isapa128v20
30.2730.8331.02T:grain128aeadv2
34.5534.5734.80T:schwaemm256256v2
35.8935.9836.74T:schwaemm192192v2
38.6438.6838.76T:schwaemm128128v2
39.2839.3239.35romulusn
41.6541.7641.81T:isapa128av20
43.3443.4043.45romulust
48.4848.5648.60T:giftcofb128v1
59.7359.7959.83T:tinyjambu128v2
63.2763.3363.37romulusm
71.1871.4071.53T:isapk128av20
72.1772.2472.37T:tinyjambu192v2
74.1574.2274.25T:tinyjambu256v2
89.2089.2789.45T:isapk128v20
112.54?124.83?138.22?T:isapxv20
195.31195.39195.52T:elephant200v2
365.59365.74365.96aes256gcmv1
10863.6510867.9310905.54T:elephant176v2
12738.4212739.1512739.71T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
2.102.202.30T:aes128gcmv1
2.302.362.42T:aes256gcmv1
10.0010.0310.05ascon128av12
13.7013.7513.86T:xoodyakround3
14.8514.8814.89ascon80pqv12
14.8814.9114.92ascon128v12
18.5618.6018.61ascon128abi32v12
27.0327.0527.09T:schwaemm256128v2
27.6327.6527.68ascon128bi32v12
28.5228.5428.56T:grain128aeadv2
31.6831.7331.76romulusn
34.2134.3734.39T:schwaemm256256v2
35.7435.8135.87T:schwaemm192192v2
38.5938.6238.69T:schwaemm128128v2
42.2642.4342.68T:isapa128v20
43.5843.6243.65romulusm
47.9748.0348.10T:tinyjambu128v2
48.3448.3848.46T:giftcofb128v1
51.4751.5151.58T:isapa128av20
55.3055.3355.36T:tinyjambu256v2
55.9055.9555.98T:tinyjambu192v2
84.7384.8185.19romulust
89.6390.1190.48T:isapk128av20
116.55116.76117.18T:isapk128v20
146.27146.31146.42T:elephant200v2
158.80?167.41?177.49?T:isapxv20
370.21370.59371.06aes256gcmv1
8115.538119.118146.83T:elephant176v2
9551.669552.029552.57T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
2.132.202.30T:aes128gcmv1
2.292.352.44T:aes256gcmv1
9.9810.0110.02ascon128av12
13.6613.7013.74T:xoodyakround3
14.8914.9114.93ascon80pqv12
14.9114.9114.93ascon128v12
18.2518.2718.30ascon128abi32v12
27.0427.0927.11T:schwaemm256128v2
27.4027.4227.45ascon128bi32v12
29.6530.2330.31T:grain128aeadv2
31.6631.6831.72romulusn
34.3334.3734.41T:schwaemm256256v2
35.7235.8136.12T:schwaemm192192v2
38.5138.5438.59T:schwaemm128128v2
42.2242.4542.63T:isapa128v20
43.6743.7143.73romulusm
48.1248.1648.20T:tinyjambu128v2
48.3548.4048.45T:giftcofb128v1
51.5551.5951.69T:isapa128av20
55.6155.6555.70T:tinyjambu256v2
56.1256.1756.21T:tinyjambu192v2
84.7184.8385.06romulust
89.6689.7789.86T:isapk128av20
116.62116.88117.05T:isapk128v20
146.25146.30146.43T:elephant200v2
162.54168.24174.71T:isapxv20
370.72370.90371.22aes256gcmv1
8115.508118.978145.00T:elephant176v2
9551.579552.089552.43T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
2.132.212.27T:aes128gcmv1
2.312.372.42T:aes256gcmv1
10.0010.0210.04ascon128av12
13.6713.7313.77T:xoodyakround3
14.8814.9114.92ascon80pqv12
14.9014.9214.94ascon128v12
18.2518.2718.30ascon128abi32v12
27.0427.0927.12T:schwaemm256128v2
27.3927.4127.43ascon128bi32v12
27.9028.0128.11T:isapa128v20
29.6530.2130.32T:grain128aeadv2
31.6631.6931.72romulusn
34.3534.3734.39T:schwaemm256256v2
35.7535.8436.19T:schwaemm192192v2
38.5038.5538.59T:schwaemm128128v2
41.8041.8441.88T:isapa128av20
43.1543.1843.21romulust
43.6643.6943.73romulusm
48.1048.1448.17T:tinyjambu128v2
48.4048.4248.49T:giftcofb128v1
55.6355.6955.71T:tinyjambu256v2
56.1056.1456.20T:tinyjambu192v2
71.5171.6871.76T:isapk128av20
89.2989.3989.56T:isapk128v20
118.60?125.05?132.10?T:isapxv20
146.23146.27146.32T:elephant200v2
365.49365.68365.90aes256gcmv1
8115.448118.998146.44T:elephant176v2
9551.749552.119552.73T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
1.65?1.79?1.95?T:aes128gcmv1
1.741.841.89T:aes256gcmv1
9.229.279.31T:xoodyakround3
9.889.929.95ascon128av12
14.6914.7014.73ascon128v12
14.7214.7614.78ascon80pqv12
18.2418.2618.27ascon128abi32v12
24.0124.0624.08romulusm
24.0524.0824.10romulusn
26.8026.8626.92T:schwaemm256128v2
27.2927.3427.36ascon128bi32v12
27.9928.0328.07T:isapa128v20
28.5128.5528.58T:grain128aeadv2
33.9733.9833.99T:schwaemm256256v2
35.6035.6935.78T:schwaemm192192v2
36.4636.5036.55T:tinyjambu128v2
37.0937.1337.17T:tinyjambu256v2
38.4538.5038.58T:schwaemm128128v2
39.8739.9339.96T:tinyjambu192v2
41.8641.9142.01T:isapa128av20
42.9843.0243.12romulust
48.2648.3348.39T:giftcofb128v1
71.5271.7072.44T:isapk128av20
89.1589.2689.50T:isapk128v20
97.7897.8097.85T:elephant200v2
108.64?123.99?141.22?T:isapxv20
364.73365.04365.57aes256gcmv1
5366.395368.905387.83T:elephant176v2
6366.136366.646367.51T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
1.68?1.78?1.89?T:aes128gcmv1
1.731.811.89T:aes256gcmv1
9.249.269.28T:xoodyakround3
9.939.959.98ascon128av12
14.7814.8114.83ascon80pqv12
14.8114.8314.88ascon128v12
18.2018.2218.27ascon128abi32v12
24.0124.0424.07romulusm
24.0524.0824.13romulusn
26.8826.9327.00T:schwaemm256128v2
27.3027.3227.36ascon128bi32v12
27.9828.0228.07T:isapa128v20
28.9429.5629.69T:grain128aeadv2
34.1234.1334.16T:schwaemm256256v2
35.5435.6335.68T:schwaemm192192v2
36.4636.5036.52T:tinyjambu128v2
37.1237.1737.26T:tinyjambu256v2
38.3138.3638.41T:schwaemm128128v2
40.0440.0940.13T:tinyjambu192v2
41.8541.9141.95T:isapa128av20
42.9643.0443.10romulust
48.2848.3248.42T:giftcofb128v1
71.5471.7171.88T:isapk128av20
89.2289.3189.50T:isapk128v20
97.7897.8297.87T:elephant200v2
112.58?125.07?138.18?T:isapxv20
365.46365.94366.22aes256gcmv1
5365.525368.565387.39T:elephant176v2
6365.956366.536367.10T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
1.67?1.78?1.90?T:aes128gcmv1
1.701.791.88T:aes256gcmv1
9.219.269.29T:xoodyakround3
9.949.959.97ascon128av12
14.7814.8014.82ascon80pqv12
14.7914.8114.84ascon128v12
18.2218.2518.29ascon128abi32v12
24.0124.0524.09romulusm
24.0424.0824.12romulusn
26.8626.9627.00T:schwaemm256128v2
27.3427.3627.39ascon128bi32v12
27.9828.0128.08T:isapa128v20
28.9629.5829.70T:grain128aeadv2
34.1234.1434.15T:schwaemm256256v2
35.5635.6335.69T:schwaemm192192v2
36.4936.5236.54T:tinyjambu128v2
37.0737.1337.22T:tinyjambu256v2
38.2938.3438.41T:schwaemm128128v2
40.0440.0840.11T:tinyjambu192v2
41.8541.9141.98T:isapa128av20
42.9743.0143.10romulust
48.2748.3248.36T:giftcofb128v1
71.4971.6771.76T:isapk128av20
89.2289.3789.48T:isapk128v20
97.7597.8297.86T:elephant200v2
112.39?124.99?138.19?T:isapxv20
364.70365.84366.14aes256gcmv1
5366.445368.975388.06T:elephant176v2
6365.836366.306367.00T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
3.653.693.71T:aes128gcmv1
3.813.833.87T:aes256gcmv1
10.2610.2910.30ascon128av12
13.9013.9114.00T:xoodyakround3
15.0915.1115.12ascon80pqv12
15.1315.1415.14ascon128v12
19.0019.0119.02ascon128abi32v12
27.8227.8927.92T:schwaemm256128v2
28.0428.0628.08ascon128bi32v12
29.0429.0529.07T:grain128aeadv2
31.9932.0232.03romulusn
35.1835.2835.30T:schwaemm256256v2
36.5936.6136.65T:schwaemm192192v2
39.1039.1439.20T:schwaemm128128v2
43.9043.9443.97romulusm
48.3548.4148.44T:tinyjambu128v2
48.8548.8748.94T:giftcofb128v1
54.8554.8754.89T:isapa128av20
55.7155.7455.78T:tinyjambu256v2
56.3456.3956.42T:tinyjambu192v2
62.1562.2762.40T:isapa128v20
86.0886.2286.48romulust
103.71103.92104.43T:isapk128av20
149.34149.38149.44T:elephant200v2
206.47206.65206.71T:isapk128v20
271.00273.16283.14T:isapxv20
372.57372.78373.04aes256gcmv1
8179.658181.828206.93T:elephant176v2
9659.839660.099660.25T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
3.573.613.70T:aes128gcmv1
3.763.793.86T:aes256gcmv1
10.2410.2510.28ascon128av12
13.8513.8813.89T:xoodyakround3
15.1215.1315.15ascon80pqv12
15.1315.1415.16ascon128v12
18.6918.7118.72ascon128abi32v12
27.8127.8227.83ascon128bi32v12
27.8427.8927.92T:schwaemm256128v2
30.1930.7330.77T:grain128aeadv2
31.9831.9832.02romulusn
35.2635.2935.31T:schwaemm256256v2
36.5436.6036.91T:schwaemm192192v2
39.0039.0239.07T:schwaemm128128v2
44.0244.0544.10romulusm
48.4848.5248.56T:tinyjambu128v2
48.8948.9048.98T:giftcofb128v1
54.8954.9355.00T:isapa128av20
56.0456.0656.12T:tinyjambu256v2
56.5456.5656.61T:tinyjambu192v2
62.1962.2262.39T:isapa128v20
86.0386.1686.35romulust
103.64103.67103.84T:isapk128av20
149.33149.37149.41T:elephant200v2
206.52206.70206.84T:isapk128v20
273.64273.73281.43T:isapxv20
372.83373.11373.39aes256gcmv1
8179.498181.408206.81T:elephant176v2
9659.559659.939660.11T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
3.563.613.65T:aes128gcmv1
3.763.823.85T:aes256gcmv1
10.2510.2610.27ascon128av12
13.8513.8813.93T:xoodyakround3
15.1215.1315.14ascon80pqv12
15.1315.1415.16ascon128v12
18.6918.7018.71ascon128abi32v12
27.8127.8227.84ascon128bi32v12
27.8127.8627.91T:schwaemm256128v2
30.1930.7330.76T:grain128aeadv2
31.9731.9932.01romulusn
35.2635.2735.30T:schwaemm256256v2
36.5836.6336.92T:schwaemm192192v2
38.0238.0338.16T:isapa128v20
39.0139.0439.10T:schwaemm128128v2
43.7043.7643.79T:isapa128av20
44.0244.0644.09romulusm
44.4344.4544.48romulust
48.4848.5248.57T:tinyjambu128v2
48.8548.8948.93T:giftcofb128v1
56.0456.0756.13T:tinyjambu256v2
56.5156.5656.62T:tinyjambu192v2
80.4780.5380.59T:isapk128av20
136.43136.48136.62T:isapk128v20
149.35149.38149.40T:elephant200v2
178.97179.05187.52T:isapxv20
367.49367.78368.12aes256gcmv1
8179.118181.038207.21T:elephant176v2
9659.739659.949660.33T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
15.5615.6615.80ascon128av12
20.0920.1720.34ascon80pqv12
20.1320.1720.45ascon128v12
20.2420.4220.95T:xoodyakround3
28.2228.2628.61ascon128abi32v12
36.2436.6638.61T:aes256gcmv1
37.0037.1837.39ascon128bi32v12
35.9437.5638.79T:aes128gcmv1
38.6438.7738.88romulusn
39.9640.0440.29T:grain128aeadv2
45.3645.5545.70T:schwaemm256128v2
49.9850.2850.77T:schwaemm128128v2
50.6750.8451.29romulusm
55.8155.9856.21T:schwaemm256256v2
56.7556.9057.09T:tinyjambu128v2
59.2059.3259.95T:schwaemm192192v2
59.6959.8760.05T:giftcofb128v1
65.1765.3265.52T:tinyjambu256v2
65.8466.2266.31T:tinyjambu192v2
115.90116.06116.80romulust
130.54130.98131.48T:isapa128av20
211.38211.86212.28T:elephant200v2
401.44401.93402.95T:isapk128av20
419.55420.13421.68aes256gcmv1
516.12517.26520.84T:isapa128v20
2242.932243.642249.56T:isapk128v20
2621.092676.182877.52T:isapxv20
10186.5910189.8110218.11T:elephant176v2
12936.0812938.6312941.71T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
15.7215.8116.02ascon128av12
20.1620.2820.61ascon128v12
20.1720.3320.56ascon80pqv12
20.2020.4120.68T:xoodyakround3
28.1128.2228.74ascon128abi32v12
34.4135.1636.27T:aes128gcmv1
35.4635.7337.34T:aes256gcmv1
37.2937.4537.54ascon128bi32v12
38.7038.8138.95romulusn
41.3042.7042.90T:grain128aeadv2
45.3745.5146.32T:schwaemm256128v2
49.9850.4150.63T:schwaemm128128v2
52.2952.4652.57romulusm
55.7355.7856.00T:schwaemm256256v2
57.1657.2257.47T:tinyjambu128v2
59.3059.5159.88T:schwaemm192192v2
59.6359.9560.48T:giftcofb128v1
65.7766.0366.21T:tinyjambu256v2
66.3466.5566.77T:tinyjambu192v2
116.23116.45116.94romulust
130.71131.00131.38T:isapa128av20
211.20211.38211.48T:elephant200v2
400.34401.73403.43T:isapk128av20
420.01420.58420.94aes256gcmv1
516.09516.50522.25T:isapa128v20
2241.982243.302245.29T:isapk128v20
2669.122669.702837.25T:isapxv20
10183.7910190.4810214.43T:elephant176v2
12936.0212937.3912940.18T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
15.5815.6415.76ascon128av12
20.0520.1620.27ascon128v12
20.2020.2820.50ascon80pqv12
20.2920.5220.80T:xoodyakround3
28.1028.2128.26ascon128abi32v12
34.3035.3035.86T:aes128gcmv1
35.4135.7436.29T:aes256gcmv1
37.0237.0637.27ascon128bi32v12
38.7938.9139.00romulusn
41.2842.7342.88T:grain128aeadv2
45.5145.7446.12T:schwaemm256128v2
49.9150.0550.37T:schwaemm128128v2
52.3052.4752.48romulusm
55.8655.9155.99T:schwaemm256256v2
56.9157.1257.28T:tinyjambu128v2
59.2059.3859.74T:schwaemm192192v2
59.9260.0560.15T:giftcofb128v1
65.4565.5665.75T:tinyjambu256v2
66.1366.2566.38T:tinyjambu192v2
73.0673.2873.77romulust
87.0087.3387.41T:isapa128av20
211.23211.41211.53T:elephant200v2
268.25268.70272.08T:isapa128v20
269.15269.45270.84T:isapk128av20
414.39414.96416.26aes256gcmv1
1198.561199.091199.44T:isapk128v20
1396.09?1397.78?1582.34?T:isapxv20
10185.2710187.8010218.10T:elephant176v2
12934.6312937.3012940.36T:elephant160v2