VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Tiger Lake (806c1); 2020 Intel Core i7-1165G7; 4 x 2800MHz; panther, supercop-20241022

[Page version: 20241215 22:59:49]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.51?0.59?0.67?T:aes128gcmv1
0.59?0.72?0.80?T:aes256gcmv1
1.371.381.39aes256gcmv1
7.457.507.55ascon128av12
10.9310.9711.00ascon80pqv12
10.9310.9711.00ascon128v12
13.3813.4613.55T:xoodyakround3
14.7314.7814.81ascon128abi32v12
16.3216.3816.47T:schwaemm256128v2
18.8218.9619.02T:grain128aeadv2
20.2120.7121.37T:schwaemm256256v2
21.5821.7121.90T:schwaemm192192v2
22.4022.4322.46ascon128bi32v12
24.9725.1125.22T:schwaemm128128v2
26.8626.8926.96T:isapa128av20
32.0832.1232.14T:isapk128av20
37.0337.1337.17romulusn
44.1144.1744.25T:giftcofb128v1
45.1445.2345.29T:isapa128v20
57.8457.9658.04romulusm
70.4670.5370.67T:tinyjambu128v2
85.9686.0986.17T:tinyjambu192v2
90.5891.4992.30T:isapk128v20
91.0491.7191.80T:tinyjambu256v2
110.92111.07111.19romulust
120.76121.02121.21T:elephant200v2
137.16137.41138.21T:isapxv20
7266.147285.487290.82T:elephant176v2
8269.388272.628275.22T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.48?0.53?0.56?T:aes128gcmv1
0.58?0.63?0.73?T:aes256gcmv1
1.301.311.32aes256gcmv1
7.457.487.52ascon128av12
10.7710.8010.83ascon80pqv12
10.8610.8810.91ascon128v12
13.2713.3613.42T:xoodyakround3
14.8414.8714.91ascon128abi32v12
16.4716.5616.69T:schwaemm256128v2
19.2419.3119.44T:grain128aeadv2
20.2120.6721.40T:schwaemm256256v2
21.5021.8121.95T:schwaemm192192v2
22.3322.3922.43ascon128bi32v12
24.8825.0325.22T:schwaemm128128v2
32.0932.1432.15T:isapk128av20
34.2734.3634.41T:isapa128av20
37.3637.4137.49romulusn
44.2744.3344.39T:giftcofb128v1
45.2245.2745.34T:isapa128v20
58.1758.2258.37romulusm
70.4270.4970.53T:tinyjambu128v2
85.6385.7686.06T:tinyjambu192v2
90.5091.2591.85T:isapk128v20
91.1891.6199.19T:tinyjambu256v2
110.83110.95111.08romulust
121.15121.27121.90T:elephant200v2
136.55138.11139.17T:isapxv20
7255.287272.087285.26T:elephant176v2
8271.508274.628278.12T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.52?0.58?0.69?T:aes128gcmv1
0.59?0.69?0.73?T:aes256gcmv1
1.311.311.32aes256gcmv1
7.447.497.53ascon128av12
10.7710.8110.83ascon80pqv12
10.8410.8810.91ascon128v12
13.2313.3513.45T:xoodyakround3
14.8714.8914.93ascon128abi32v12
16.3916.5016.67T:schwaemm256128v2
19.2419.3219.42T:grain128aeadv2
20.2420.6021.35T:schwaemm256256v2
21.3621.4021.47T:isapk128av20
21.6621.7721.90T:schwaemm192192v2
21.9822.0622.13T:isapa128v20
22.3122.3722.41ascon128bi32v12
22.8022.8322.93T:isapa128av20
25.1525.1925.28T:schwaemm128128v2
37.3437.4237.47romulusn
38.6138.8738.97romulust
44.2244.2744.31T:giftcofb128v1
56.9157.5257.99T:isapk128v20
58.2658.3758.44romulusm
70.5770.6270.63T:tinyjambu128v2
81.2581.7282.44T:isapxv20
85.7385.7785.88T:tinyjambu192v2
90.9891.3791.60T:tinyjambu256v2
120.83121.13121.55T:elephant200v2
7259.657267.517280.51T:elephant176v2
8272.248275.258279.81T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.37?0.43?0.50?T:aes128gcmv1
0.42?0.46?0.55?T:aes256gcmv1
0.880.890.89aes256gcmv1
7.417.447.45ascon128av12
10.2810.3310.35T:xoodyakround3
10.8910.9210.94ascon80pqv12
10.9110.9310.96ascon128v12
14.4914.5314.55ascon128abi32v12
16.2116.2816.39T:schwaemm256128v2
18.9018.9919.02T:grain128aeadv2
20.2020.5721.30T:schwaemm256256v2
21.6821.7521.83T:schwaemm192192v2
22.0822.0922.11ascon128bi32v12
24.8524.8824.92T:isapa128av20
25.0625.1425.22T:schwaemm128128v2
26.7226.7426.75T:isapk128av20
28.9128.9529.00romulusn
33.6133.7033.72T:isapa128v20
39.3139.3839.46romulusm
44.1744.2444.27T:giftcofb128v1
57.5057.5257.62T:tinyjambu128v2
66.8967.3467.36T:tinyjambu192v2
68.5968.6168.65T:tinyjambu256v2
73.7974.1274.58T:isapk128v20
74.8774.9575.01romulust
91.0391.7692.22T:elephant200v2
109.11109.60109.92T:isapxv20
5427.025432.155442.14T:elephant176v2
6202.436204.156206.55T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.35?0.37?0.43?T:aes128gcmv1
0.39?0.41?0.49?T:aes256gcmv1
0.840.850.86aes256gcmv1
7.387.427.45ascon128av12
10.1810.2410.28T:xoodyakround3
10.8010.8210.84ascon80pqv12
10.8510.8810.91ascon128v12
14.5414.5714.59ascon128abi32v12
16.2316.3816.57T:schwaemm256128v2
19.0819.1419.26T:grain128aeadv2
20.2120.5721.33T:schwaemm256256v2
21.6821.7621.88T:schwaemm192192v2
22.0522.0622.08ascon128bi32v12
25.0825.1225.19T:schwaemm128128v2
26.7126.7326.76T:isapk128av20
28.3428.4028.43T:isapa128av20
29.0929.1229.17romulusn
33.6233.6633.72T:isapa128v20
39.5539.5939.65romulusm
44.1744.2444.29T:giftcofb128v1
57.4657.5357.63T:tinyjambu128v2
66.8767.3267.38T:tinyjambu192v2
68.6468.8768.92T:tinyjambu256v2
74.0774.4074.78T:isapk128v20
74.8774.9875.09romulust
90.9391.7291.92T:elephant200v2
109.39110.29111.23T:isapxv20
5425.155429.905440.85T:elephant176v2
6202.836204.446207.24T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.36?0.37?0.43?T:aes128gcmv1
0.38?0.40?0.43?T:aes256gcmv1
0.840.850.85aes256gcmv1
7.387.417.47ascon128av12
10.2310.2910.31T:xoodyakround3
10.8010.8310.87ascon80pqv12
10.8610.8810.90ascon128v12
14.5414.5614.59ascon128abi32v12
16.3416.4116.45T:schwaemm256128v2
19.1719.2019.41T:grain128aeadv2
20.1620.6021.33T:schwaemm256256v2
21.3721.3921.43T:isapk128av20
21.5421.7621.87T:schwaemm192192v2
22.0622.0922.12ascon128bi32v12
22.0522.0922.12T:isapa128v20
22.6122.6522.69T:isapa128av20
25.0925.2025.28T:schwaemm128128v2
29.1029.1329.21romulusn
38.7138.8038.88romulust
39.5039.5739.63romulusm
44.1644.2244.29T:giftcofb128v1
57.2557.4257.78T:isapk128v20
57.5257.6257.66T:tinyjambu128v2
67.0067.0267.06T:tinyjambu192v2
68.6368.6869.05T:tinyjambu256v2
81.9382.3082.76T:isapxv20
91.0691.6092.04T:elephant200v2
5428.525434.925440.67T:elephant176v2
6202.126204.826207.02T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.17?0.20?0.28?T:aes128gcmv1
0.19?0.21?0.30?T:aes256gcmv1
0.36?0.40?0.41?aes256gcmv1
7.167.247.29T:xoodyakround3
7.387.427.45ascon128av12
10.7910.8210.87ascon80pqv12
10.8510.8710.89ascon128v12
14.1814.2414.29ascon128abi32v12
16.2216.3616.58T:schwaemm256128v2
18.9519.0719.12T:grain128aeadv2
20.1320.5421.26T:schwaemm256256v2
20.7420.8420.90romulusm
20.7820.8620.89romulusn
21.3921.4121.43T:isapk128av20
21.4021.5221.64T:schwaemm192192v2
21.7321.7821.80ascon128bi32v12
22.0322.1022.19T:isapa128v20
22.8322.8822.92T:isapa128av20
24.9325.0125.14T:schwaemm128128v2
38.8038.8738.96romulust
44.0444.1344.31T:giftcofb128v1
44.5644.6644.72T:tinyjambu128v2
46.3646.4146.46T:tinyjambu256v2
48.2748.3848.47T:tinyjambu192v2
57.1457.6457.88T:isapk128v20
61.7962.0562.44T:elephant200v2
81.5382.2083.15T:isapxv20
3575.763586.513605.53T:elephant176v2
4138.574148.334150.83T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.17?0.19?0.23?T:aes128gcmv1
0.16?0.21?0.23?T:aes256gcmv1
0.360.380.39aes256gcmv1
7.167.247.28T:xoodyakround3
7.317.357.41ascon128av12
10.7510.8610.91ascon80pqv12
10.8210.8610.89ascon128v12
14.2314.2614.29ascon128abi32v12
16.2616.4416.64T:schwaemm256128v2
18.8819.0219.20T:grain128aeadv2
20.1320.5421.25T:schwaemm256256v2
20.7920.8720.93romulusn
20.8420.8920.93romulusm
21.3621.4221.43T:isapk128av20
21.3121.5221.68T:schwaemm192192v2
21.7421.7821.82ascon128bi32v12
22.0222.0822.16T:isapa128v20
22.3822.4522.48T:isapa128av20
24.9225.0925.21T:schwaemm128128v2
38.6739.0039.09romulust
44.1044.1944.26T:giftcofb128v1
44.5744.6344.67T:tinyjambu128v2
46.2146.2646.44T:tinyjambu256v2
48.2448.4748.52T:tinyjambu192v2
57.1257.4958.13T:isapk128v20
62.1562.2862.58T:elephant200v2
81.0481.9382.37T:isapxv20
3584.993612.033623.06T:elephant176v2
4133.874137.324139.03T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.10?0.20?0.30?T:aes256gcmv1
0.17?0.21?0.24?T:aes128gcmv1
0.380.390.40aes256gcmv1
7.167.287.30T:xoodyakround3
7.287.337.37ascon128av12
10.7910.8310.87ascon80pqv12
10.8410.8810.90ascon128v12
14.2414.2614.28ascon128abi32v12
16.1916.3416.48T:schwaemm256128v2
18.8819.0419.14T:grain128aeadv2
20.1120.5521.29T:schwaemm256256v2
20.7920.8520.88romulusm
20.8320.8820.94romulusn
21.3821.4121.45T:isapk128av20
21.3621.4821.65T:schwaemm192192v2
21.7221.7821.82ascon128bi32v12
22.0022.0522.13T:isapa128v20
22.3722.4222.45T:isapa128av20
24.8825.0525.14T:schwaemm128128v2
38.6538.8339.12romulust
44.1344.2344.27T:giftcofb128v1
44.5544.5844.65T:tinyjambu128v2
46.2446.2746.36T:tinyjambu256v2
48.3248.3648.41T:tinyjambu192v2
57.1957.7758.12T:isapk128v20
61.9262.1962.58T:elephant200v2
81.2581.9482.25T:isapxv20
3604.923614.933618.17T:elephant176v2
4132.754138.754144.50T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.810.810.84T:aes128gcmv1
0.870.910.94T:aes256gcmv1
1.051.051.05aes256gcmv1
7.557.577.68ascon128av12
10.4810.5110.53T:xoodyakround3
11.0211.0411.07ascon80pqv12
11.0611.0811.10ascon128v12
14.8314.8514.86ascon128abi32v12
16.7616.8216.86T:schwaemm256128v2
19.2619.3119.34T:grain128aeadv2
20.8521.1921.77T:schwaemm256256v2
22.1222.2222.30T:schwaemm192192v2
22.4322.4522.46ascon128bi32v12
25.3625.4425.49T:schwaemm128128v2
26.8126.8326.87T:isapa128av20
29.1229.1729.19romulusn
29.8029.8129.82T:isapk128av20
39.6339.6539.70romulusm
44.5244.5544.64T:giftcofb128v1
48.6748.7048.75T:isapa128v20
57.9758.0658.11T:tinyjambu128v2
67.5167.7067.75T:tinyjambu192v2
69.1569.4669.57T:tinyjambu256v2
76.1376.1876.23romulust
92.5892.7792.96T:elephant200v2
128.59128.77128.92T:isapk128v20
179.59179.76179.96T:isapxv20
5463.955477.145481.82T:elephant176v2
6273.376275.186277.79T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.800.810.82T:aes128gcmv1
0.860.880.93T:aes256gcmv1
0.990.990.99aes256gcmv1
7.597.637.64ascon128av12
10.3610.3810.41T:xoodyakround3
10.9710.9911.01ascon80pqv12
11.0311.0411.06ascon128v12
14.8914.9114.93ascon128abi32v12
16.7916.8716.96T:schwaemm256128v2
19.4519.5719.69T:grain128aeadv2
20.8321.2021.81T:schwaemm256256v2
22.1222.2022.28T:schwaemm192192v2
22.4022.4322.44ascon128bi32v12
25.4225.5725.66T:schwaemm128128v2
29.3529.4029.44romulusn
29.8129.8229.83T:isapk128av20
30.2630.2930.33T:isapa128av20
39.8339.8539.90romulusm
44.6244.6544.67T:giftcofb128v1
48.7348.7548.79T:isapa128v20
57.9557.9758.06T:tinyjambu128v2
67.4267.7467.78T:tinyjambu192v2
69.0669.0969.12T:tinyjambu256v2
76.0476.1476.20romulust
92.4092.9293.14T:elephant200v2
128.61128.85129.04T:isapk128v20
179.84180.06180.45T:isapxv20
5462.465475.845485.91T:elephant176v2
6273.686274.476277.47T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.800.810.86T:aes128gcmv1
0.880.900.94T:aes256gcmv1
0.990.991.00aes256gcmv1
7.587.627.65ascon128av12
10.4010.4310.50T:xoodyakround3
10.9510.9811.01ascon80pqv12
11.0211.0211.04ascon128v12
14.9014.9114.93ascon128abi32v12
16.8216.8416.94T:schwaemm256128v2
19.4819.5119.70T:grain128aeadv2
20.7921.1921.78T:schwaemm256256v2
22.1922.2722.33T:schwaemm192192v2
22.4122.4322.45ascon128bi32v12
23.1823.1923.21T:isapk128av20
23.6623.7023.74T:isapa128av20
25.4225.4625.58T:schwaemm128128v2
29.3229.3529.37romulusn
29.7329.7529.78T:isapa128v20
39.8639.8939.93romulusm
39.8939.9440.04romulust
44.6644.6944.72T:giftcofb128v1
58.0358.0558.06T:tinyjambu128v2
67.5367.6467.76T:tinyjambu192v2
69.0869.1469.36T:tinyjambu256v2
85.2585.5185.76T:isapk128v20
92.3692.9493.12T:elephant200v2
117.60117.72117.77T:isapxv20
5469.875477.305483.32T:elephant176v2
6274.036275.726277.79T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
6.987.017.04aes256gcmv1
10.9111.2311.52T:aes128gcmv1
11.4311.6211.94T:aes256gcmv1
11.7711.8812.24ascon128av12
14.3814.5114.69ascon128v12
14.4714.6614.85ascon80pqv12
14.9915.7116.05T:xoodyakround3
22.2522.3023.02ascon128abi32v12
26.5827.4228.56T:schwaemm256128v2
27.8427.9528.38T:grain128aeadv2
30.0130.2130.63ascon128bi32v12
32.5233.1333.91T:schwaemm128128v2
33.3433.9234.95T:schwaemm256256v2
34.5134.6634.83romulusn
35.0235.8036.80T:schwaemm192192v2
45.8846.0646.43romulusm
53.2053.5053.70T:giftcofb128v1
67.6067.7367.85T:tinyjambu128v2
70.9171.3971.87T:isapa128av20
78.5378.7478.91T:tinyjambu192v2
80.1280.5180.63T:tinyjambu256v2
95.3095.4495.71T:isapk128av20
101.41102.09102.91romulust
132.16132.67133.44T:elephant200v2
394.65394.97395.68T:isapa128v20
1352.731355.551358.44T:isapk128v20
1762.511773.421777.92T:isapxv20
6820.206825.136846.95T:elephant176v2
8411.778421.238430.56T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
6.596.646.70aes256gcmv1
10.3410.8711.33T:aes128gcmv1
11.2811.4811.81T:aes256gcmv1
11.5811.7112.06ascon128av12
14.4214.5514.73ascon128v12
14.5214.6614.91ascon80pqv12
14.9415.7315.85T:xoodyakround3
22.4522.6422.88ascon128abi32v12
27.4828.1228.73T:schwaemm256128v2
27.9828.3829.02T:grain128aeadv2
30.1930.3630.89ascon128bi32v12
33.2733.9434.11T:schwaemm128128v2
33.5233.9634.95T:schwaemm256256v2
34.8635.0535.19romulusn
35.4236.3236.78T:schwaemm192192v2
47.1047.3047.54romulusm
53.6153.8154.11T:giftcofb128v1
67.5567.6267.81T:tinyjambu128v2
74.0474.2974.54T:isapa128av20
78.4778.5378.70T:tinyjambu192v2
80.1380.3580.73T:tinyjambu256v2
95.2095.3895.68T:isapk128av20
101.33101.87102.51romulust
132.08132.64133.52T:elephant200v2
395.20395.32395.50T:isapa128v20
1350.121358.031363.11T:isapk128v20
1771.021775.301777.93T:isapxv20
6829.406839.086845.80T:elephant176v2
8400.008407.628425.43T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
6.626.656.70aes256gcmv1
10.8411.1811.31T:aes128gcmv1
11.5511.6812.27T:aes256gcmv1
11.5511.6911.84ascon128av12
14.4614.5914.65ascon128v12
14.5014.6014.66ascon80pqv12
14.8715.1916.16T:xoodyakround3
22.4522.5222.69ascon128abi32v12
27.2227.8828.27T:schwaemm256128v2
27.8828.9229.04T:grain128aeadv2
30.0230.3730.98ascon128bi32v12
32.5533.3033.91T:schwaemm128128v2
33.5934.0535.02T:schwaemm256256v2
34.7734.8735.08romulusn
35.5836.2936.72T:schwaemm192192v2
47.1247.4147.62romulusm
48.5248.8549.34T:isapa128av20
53.5453.6453.98T:giftcofb128v1
60.0360.2760.47T:isapk128av20
65.4966.0766.70romulust
67.6367.8167.94T:tinyjambu128v2
78.4878.6779.00T:tinyjambu192v2
80.5780.7580.95T:tinyjambu256v2
131.97132.39133.48T:elephant200v2
206.30206.51206.78T:isapa128v20
708.81710.48714.00T:isapk128v20
927.60929.51932.03T:isapxv20
6814.626820.016832.48T:elephant176v2
8398.278416.918435.16T:elephant160v2