VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Airmont (406c3); 2015 Intel Pentium N3700; 4 x 1600MHz; nucnuc, supercop-20251222

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
5.99?6.46?6.80?T:aes128gcmv1
7.27?7.67?8.09?T:aes256gcmv1
8.868.959.00aes256gcmv1
16.8716.8916.90ascon128av12
24.6224.6224.63ascon128v12
25.1225.1225.15ascon80pqv12
35.2935.3335.34ascon128abi32v12
51.9752.0052.15ascon128bi32v12
52.9252.9552.97T:xoodyakround3
53.9154.0354.52T:grain128aeadv2
57.2857.3257.38T:giftcofb128v1
58.3258.3358.35T:schwaemm256128v2
65.9065.9165.95T:schwaemm256256v2
77.3677.3877.41T:schwaemm192192v2
80.7580.7680.76T:schwaemm128128v2
92.2492.2792.31T:isapa128av20
105.74105.77105.80T:tinyjambu128v2
113.53114.86116.32T:isapa128v20
118.39118.39118.61T:romulusn
127.25127.26127.29T:tinyjambu192v2
139.25139.27139.29T:tinyjambu256v2
143.74143.75143.86romulusn
183.87184.10184.51T:isapk128av20
229.28229.31229.41romulusm
244.49245.46246.05T:isapk128v20
296.26299.69300.55T:elephant200v2
441.41441.49442.18T:isapxv20
443.71443.96445.73T!!!romulust
17920.6517921.2417921.81T:elephant176v2
19389.3619390.3719391.13T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
6.08?6.45?6.92?T:aes128gcmv1
7.397.728.12T:aes256gcmv1
9.869.959.98aes256gcmv1
16.4916.5116.51ascon128av12
24.8724.8824.88ascon128v12
25.2525.2525.25ascon80pqv12
35.3735.4135.43ascon128abi32v12
51.0951.1051.11T:xoodyakround3
52.5052.6052.75ascon128bi32v12
54.1254.8954.93T:grain128aeadv2
56.9957.0157.09T:giftcofb128v1
58.1058.1258.15T:schwaemm256128v2
65.8065.8165.83T:schwaemm256256v2
77.8977.9277.96T:schwaemm192192v2
80.6280.6380.64T:schwaemm128128v2
92.2592.2792.30T:isapa128av20
107.49107.51107.54T:tinyjambu128v2
112.51114.27115.92T:isapa128v20
117.67117.69117.82T:romulusn
128.50128.50128.50T:tinyjambu192v2
140.49140.52140.58T:tinyjambu256v2
143.75143.87144.89romulusn
183.90184.06184.32T:isapk128av20
229.38229.48231.34romulusm
245.13245.49245.98T:isapk128v20
296.23299.66300.53T:elephant200v2
441.37441.50442.21T:isapxv20
443.58443.81445.09T!!!romulust
17920.6517921.0217921.71T:elephant176v2
19389.3819390.2919391.48T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
6.246.436.67T:aes128gcmv1
7.457.737.97T:aes256gcmv1
9.949.959.96aes256gcmv1
16.5016.5116.51ascon128av12
24.8724.8824.88ascon128v12
25.2525.2525.25ascon80pqv12
35.3935.3935.39ascon128abi32v12
51.1151.1851.36T:xoodyakround3
52.5852.6052.76ascon128bi32v12
54.0954.1654.93T:grain128aeadv2
57.0157.0157.03T:giftcofb128v1
56.5157.1958.04T:isapa128v20
58.1258.1258.13T:schwaemm256128v2
60.6360.6460.66T:isapa128av20
65.8165.8265.83T:schwaemm256256v2
77.9277.9277.94T:schwaemm192192v2
80.6280.6381.11T:schwaemm128128v2
107.49107.51107.53T:tinyjambu128v2
117.67117.70117.75T:romulusn
122.43122.58122.67T:isapk128av20
128.50128.50128.51T:tinyjambu192v2
140.49140.52140.53T:tinyjambu256v2
143.76143.79143.90romulusn
153.31153.41153.56T:isapk128v20
155.84155.86155.91T!!!romulust
229.07229.36229.54romulusm
244.06244.09244.21T:isapxv20
295.36299.67300.53T:elephant200v2
17920.7217921.0917921.83T:elephant176v2
19389.4419390.0219391.51T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
4.454.624.79T:aes128gcmv1
5.045.305.48T:aes256gcmv1
6.036.086.10aes256gcmv1
16.7516.7616.79ascon128av12
24.7424.7524.77ascon128v12
24.9925.0025.02ascon80pqv12
34.8434.9434.99ascon128abi32v12
39.2239.2339.25T:xoodyakround3
51.6751.7352.32ascon128bi32v12
53.4753.5853.77T:grain128aeadv2
57.1757.1757.20T:giftcofb128v1
57.9957.9958.00T:schwaemm256128v2
65.5865.5965.63T:schwaemm256256v2
76.4476.4576.53T:isapa128av20
76.4876.5076.55T:schwaemm192192v2
80.4080.4180.42T:schwaemm128128v2
84.0285.4787.27T:isapa128v20
86.1286.1486.16T:tinyjambu128v2
100.00100.01100.16T:tinyjambu192v2
105.64105.65105.68T:romulusn
105.87105.88105.91T:tinyjambu256v2
114.66114.68114.78romulusn
153.26153.37154.05T:isapk128av20
157.40157.46157.59romulusm
198.70199.25199.76T:isapk128v20
219.93222.57223.03T:elephant200v2
299.42299.49300.28T!!!romulust
343.80344.00344.31T:isapxv20
13385.7213385.9013386.26T:elephant176v2
14539.6114539.7514540.43T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
4.454.654.86T:aes128gcmv1
5.115.295.51T:aes256gcmv1
6.416.476.50aes256gcmv1
16.4916.5316.56ascon128av12
24.7924.8124.84ascon80pqv12
24.9825.0025.01ascon128v12
34.6634.7434.78ascon128abi32v12
38.3238.3338.35T:xoodyakround3
52.0052.1852.31ascon128bi32v12
53.4653.5554.45T:grain128aeadv2
57.0257.0457.06T:giftcofb128v1
57.8757.8857.89T:schwaemm256128v2
65.5365.5465.56T:schwaemm256256v2
76.4276.4476.46T:isapa128av20
76.7676.7776.80T:schwaemm192192v2
80.3480.3580.35T:schwaemm128128v2
84.6986.0886.87T:isapa128v20
86.9987.0087.01T:tinyjambu128v2
100.62100.63100.64T:tinyjambu192v2
105.28105.31105.56T:romulusn
106.49106.50106.53T:tinyjambu256v2
114.68114.73115.07romulusn
153.25153.33153.66T:isapk128av20
157.49157.51157.61romulusm
199.05199.18199.64T:isapk128v20
219.89222.56223.03T:elephant200v2
299.42299.45300.63T!!!romulust
343.54343.97344.27T:isapxv20
13385.6813385.9813386.77T:elephant176v2
14539.3914539.6814540.02T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
4.524.654.80T:aes128gcmv1
5.145.285.46T:aes256gcmv1
6.476.486.49aes256gcmv1
16.5316.5316.54ascon128av12
24.8124.8124.82ascon80pqv12
25.0025.0025.25ascon128v12
34.7634.7734.81ascon128abi32v12
38.3538.3738.43T:xoodyakround3
52.1852.2152.30ascon128bi32v12
53.5253.5654.30T:grain128aeadv2
57.0357.0557.07T:giftcofb128v1
56.6657.4058.54T:isapa128v20
57.8857.8957.95T:schwaemm256128v2
60.6160.6360.65T:isapa128av20
65.5365.5465.55T:schwaemm256256v2
76.7776.7876.80T:schwaemm192192v2
80.3480.3580.35T:schwaemm128128v2
87.0087.0087.07T:tinyjambu128v2
100.62100.63100.82T:tinyjambu192v2
105.30105.31105.39T:romulusn
106.50106.51106.52T:tinyjambu256v2
114.69114.71115.03romulusn
122.55122.62122.69T:isapk128av20
153.10153.16153.24T:isapk128v20
155.52155.55155.71T!!!romulust
157.48157.50157.65romulusm
219.90222.59223.05T:elephant200v2
245.19245.23245.56T:isapxv20
13385.6813385.9513386.50T:elephant176v2
14539.3914539.7214540.32T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
2.64?2.87?3.02?T:aes128gcmv1
2.54?2.89?3.11?T:aes256gcmv1
3.173.203.21aes256gcmv1
16.6216.6316.71ascon128av12
24.8624.8824.89ascon128v12
24.8824.8824.88ascon80pqv12
25.5725.5825.59T:xoodyakround3
34.5334.6334.69ascon128abi32v12
51.3051.3551.66ascon128bi32v12
53.1153.1353.38T:grain128aeadv2
57.0057.0157.06T:giftcofb128v1
56.4957.0357.36T:isapa128v20
57.6657.6757.68T:schwaemm256128v2
60.6260.6360.68T:isapa128av20
65.2765.2965.30T:schwaemm256256v2
66.5066.5066.52T:tinyjambu128v2
72.4972.5172.53T:tinyjambu256v2
72.7572.7572.76T:tinyjambu192v2
75.6175.6275.65T:schwaemm192192v2
80.0680.0680.06T:schwaemm128128v2
85.5885.6485.80romulusm
85.6185.6885.79romulusn
92.8792.9192.95T:romulusn
122.59122.68122.84T:isapk128av20
145.64147.06147.22T:elephant200v2
152.86152.96154.91T:isapk128v20
155.24155.31155.33T!!!romulust
246.27246.35247.00T:isapxv20
8851.178851.948852.15T:elephant176v2
9689.359689.689690.63T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
2.66?2.87?3.00?T:aes128gcmv1
2.72?2.93?3.08?T:aes256gcmv1
2.983.013.02aes256gcmv1
16.5216.5516.62ascon128av12
24.3824.3824.38ascon80pqv12
25.1125.1225.13ascon128v12
25.5525.5725.59T:xoodyakround3
34.0734.1434.18ascon128abi32v12
51.5951.6351.87ascon128bi32v12
52.7852.8853.70T:grain128aeadv2
57.0057.0157.08T:giftcofb128v1
56.5857.0157.54T:isapa128v20
57.6757.6757.68T:schwaemm256128v2
60.6060.6260.68T:isapa128av20
65.2765.2865.29T:schwaemm256256v2
66.5066.5066.54T:tinyjambu128v2
72.4872.5172.52T:tinyjambu256v2
72.7572.7572.77T:tinyjambu192v2
75.6275.6375.63T:schwaemm192192v2
80.0680.0680.08T:schwaemm128128v2
85.6085.6585.83romulusm
85.6685.6885.75romulusn
92.9292.9493.00T:romulusn
122.62122.72122.80T:isapk128av20
144.92147.06147.25T:elephant200v2
152.85152.97153.15T:isapk128v20
155.22155.25155.44T!!!romulust
246.29246.35246.42T:isapxv20
8850.948851.848852.16T:elephant176v2
9689.509690.349690.75T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
2.73?2.91?3.06?T:aes256gcmv1
2.782.913.00T:aes128gcmv1
2.993.013.01aes256gcmv1
16.5416.5516.55ascon128av12
24.3824.3824.38ascon80pqv12
25.1225.1225.13ascon128v12
25.5525.5725.59T:xoodyakround3
34.1334.1334.15ascon128abi32v12
51.6651.7651.85ascon128bi32v12
52.8852.9553.65T:grain128aeadv2
56.9957.0257.27T:giftcofb128v1
56.7157.1557.55T:isapa128v20
57.6657.6757.68T:schwaemm256128v2
60.6260.6460.69T:isapa128av20
65.2865.3065.31T:schwaemm256256v2
66.5066.5066.53T:tinyjambu128v2
72.4872.5272.53T:tinyjambu256v2
72.7572.7572.75T:tinyjambu192v2
75.6275.6375.65T:schwaemm192192v2
80.0680.0680.08T:schwaemm128128v2
85.5785.6185.68romulusm
85.6885.6885.71romulusn
92.9292.9793.16T:romulusn
122.55122.69122.77T:isapk128av20
145.82147.06147.25T:elephant200v2
152.80152.93153.05T:isapk128v20
155.21155.32155.42T!!!romulust
246.30246.33246.48T:isapxv20
8851.208851.958852.38T:elephant176v2
9689.369690.099690.69T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
5.795.806.00T:aes128gcmv1
6.446.446.48aes256gcmv1
6.436.456.69T:aes256gcmv1
17.1317.1317.15ascon128av12
25.1025.1025.12ascon128v12
25.3625.3625.37ascon80pqv12
35.7535.7635.88ascon128abi32v12
39.6139.6139.62T:xoodyakround3
52.4452.4452.77ascon128bi32v12
54.2854.4654.56T:grain128aeadv2
57.8557.8557.88T:giftcofb128v1
59.6659.6659.67T:schwaemm256128v2
67.2567.2567.31T:schwaemm256256v2
78.0978.0978.10T:schwaemm192192v2
81.4281.4281.49T:schwaemm128128v2
81.6881.6981.73T:isapa128av20
86.8086.8286.84T:tinyjambu128v2
100.76100.76100.78T:tinyjambu192v2
106.67106.68106.70T:tinyjambu256v2
107.03107.03107.07T:romulusn
115.68115.71115.86romulusn
125.15125.30126.01T:isapa128v20
158.49158.53158.57romulusm
192.17192.24192.28T:isapk128av20
224.35227.30227.51T:elephant200v2
303.88303.96304.78T!!!romulust
375.36375.52375.99T:isapk128v20
554.78554.82555.30T:isapxv20
13487.4913487.7413488.04T:elephant176v2
14703.5214703.7514704.38T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
5.775.806.03T:aes128gcmv1
6.486.556.73T:aes256gcmv1
6.866.866.91aes256gcmv1
16.9116.9216.94ascon128av12
25.1825.1825.19ascon80pqv12
25.3625.3625.38ascon128v12
35.5435.5635.62ascon128abi32v12
38.7238.7238.74T:xoodyakround3
52.9553.0053.09ascon128bi32v12
54.2554.3654.99T:grain128aeadv2
57.7557.7657.98T:giftcofb128v1
59.5559.5559.55T:schwaemm256128v2
67.2267.2267.24T:schwaemm256256v2
78.3678.3678.42T:schwaemm192192v2
81.3581.3681.36T:schwaemm128128v2
81.9081.9181.93T:isapa128av20
87.6987.6987.71T:tinyjambu128v2
101.40101.40101.42T:tinyjambu192v2
106.71106.71107.05T:romulusn
107.31107.32107.34T:tinyjambu256v2
115.71115.72115.84romulusn
125.41125.90126.78T:isapa128v20
158.76158.82159.82romulusm
192.27192.30192.49T:isapk128av20
224.36227.30227.51T:elephant200v2
303.88303.92305.31T!!!romulust
375.29375.46375.72T:isapk128v20
554.82554.83555.24T:isapxv20
13487.5713487.7413487.92T:elephant176v2
14703.5414703.9314704.36T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
5.755.775.92T:aes128gcmv1
6.496.576.71T:aes256gcmv1
6.866.876.87aes256gcmv1
16.9116.9116.92ascon128av12
25.1825.1825.28ascon80pqv12
25.3625.3625.36ascon128v12
35.5535.5635.64ascon128abi32v12
38.7738.7738.79T:xoodyakround3
52.9553.0153.14ascon128bi32v12
54.2854.7954.96T:grain128aeadv2
57.7357.7557.75T:giftcofb128v1
59.5559.5559.55T:schwaemm256128v2
63.8063.8163.84T:isapa128av20
67.2167.2267.22T:schwaemm256256v2
76.9977.0877.69T:isapa128v20
78.3678.3678.37T:schwaemm192192v2
81.3581.3681.36T:schwaemm128128v2
87.6987.6987.74T:tinyjambu128v2
101.40101.40101.40T:tinyjambu192v2
106.69106.70106.78T:romulusn
107.31107.31107.32T:tinyjambu256v2
115.72115.74115.87romulusn
150.06150.08150.37T:isapk128av20
158.74158.77158.82romulusm
159.62159.87159.91T!!!romulust
224.39227.30227.51T:elephant200v2
249.76249.80250.18T:isapk128v20
353.14353.15353.60T:isapxv20
13487.4613487.6213487.88T:elephant176v2
14703.6214703.7814704.04T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
22.4122.5922.95aes256gcmv1
25.5825.5826.95ascon128av12
30.84?31.54?36.53?T:aes128gcmv1
32.01?32.41?36.35?T:aes256gcmv1
33.0233.1233.55ascon128v12
33.3033.4134.02ascon80pqv12
53.7353.9056.41ascon128abi32v12
58.0458.1858.33T:xoodyakround3
69.5969.5972.97ascon128bi32v12
70.2470.5071.21T:grain128aeadv2
73.0173.0373.56T:giftcofb128v1
97.6097.6497.97T:schwaemm256128v2
102.34102.34102.45T:tinyjambu128v2
104.61104.61104.81T:schwaemm128128v2
105.14105.14105.72T:schwaemm256256v2
118.25118.25118.43T:tinyjambu192v2
124.34124.38125.27T:schwaemm192192v2
124.88125.05125.10T:tinyjambu256v2
138.30138.39138.96romulusn
138.90138.90139.26T:romulusn
182.16182.50183.45romulusm
202.27202.38202.55T:isapa128av20
319.91320.76321.08T:elephant200v2
405.94406.25407.30T!!!romulust
1030.481035.881057.13T:isapa128v20
1054.461056.131060.73T:isapk128av20
4384.294387.894392.55T:isapk128v20
5344.615344.775347.10T:isapxv20
16787.8916789.6416801.00T:elephant176v2
19685.7219688.1519699.14T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
22.2722.4523.20aes256gcmv1
25.6025.7526.70ascon128av12
29.67?30.78?35.70?T:aes128gcmv1
33.3533.4834.13ascon80pqv12
33.3633.4834.30ascon128v12
32.70?33.55?37.54?T:aes256gcmv1
53.4653.8455.67ascon128abi32v12
57.1257.1457.42T:xoodyakround3
70.2270.6873.20ascon128bi32v12
70.8271.5571.73T:grain128aeadv2
73.5273.5573.99T:giftcofb128v1
97.5597.6597.70T:schwaemm256128v2
103.46103.46103.57T:tinyjambu128v2
104.59104.59104.59T:schwaemm128128v2
105.05105.13105.60T:schwaemm256256v2
119.19119.19119.30T:tinyjambu192v2
124.90125.03125.41T:schwaemm192192v2
125.86125.97126.07T:tinyjambu256v2
138.43138.43139.27T:romulusn
138.65138.65138.87romulusn
187.13187.38187.54romulusm
207.44207.55207.73T:isapa128av20
317.70320.68321.13T:elephant200v2
406.27406.37407.74T!!!romulust
1031.591037.061061.64T:isapa128v20
1055.381056.821058.32T:isapk128av20
4385.044388.274393.04T:isapk128v20
5345.225345.705347.06T:isapxv20
16788.2116791.4516798.41T:elephant176v2
19686.1519691.0419695.50T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
22.2722.4522.52aes256gcmv1
25.6025.6025.72ascon128av12
29.91?30.38?34.37?T:aes128gcmv1
33.3533.3533.38ascon80pqv12
33.3633.4133.44ascon128v12
33.7533.9937.08T:aes256gcmv1
53.4654.1854.48ascon128abi32v12
57.4557.4957.72T:xoodyakround3
70.4970.8070.88T:grain128aeadv2
70.5970.8771.96ascon128bi32v12
73.5273.5273.55T:giftcofb128v1
97.5597.5697.70T:schwaemm256128v2
103.44103.44103.44T:tinyjambu128v2
104.59104.59104.59T:schwaemm128128v2
105.04105.04105.41T:schwaemm256256v2
119.19119.19119.19T:tinyjambu192v2
125.01125.03125.18T:schwaemm192192v2
125.86125.86126.07T:tinyjambu256v2
136.48136.52136.69T:isapa128av20
138.18138.18138.46T:romulusn
138.56138.66138.83romulusn
186.80186.90187.42romulusm
258.64258.92259.68T!!!romulust
317.43320.68321.32T:elephant200v2
531.63534.05559.41T:isapa128v20
755.67755.95756.29T:isapk128av20
2439.932440.892442.34T:isapk128v20
2789.262789.272789.66T:isapxv20
16787.8016790.1216801.91T:elephant176v2
19685.9119693.9219697.01T:elephant160v2