VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Coffee Lake (906ea); 2018 Intel Xeon E-2124; 4 x 3300MHz; r24000, supercop-20251222

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.880.920.96T:aes256gcmv1
1.181.201.20T:aes128gcmv1
7.537.577.62ascon128av12
10.9010.9310.98ascon128v12
10.9210.9510.97ascon80pqv12
13.7213.8814.09ascon128abi32v12
15.5015.5815.63T:xoodyakround3
17.5717.6317.67T:schwaemm256128v2
20.5820.6121.11ascon128bi32v12
23.1223.2023.28T:schwaemm192192v2
24.2024.2124.23T:grain128aeadv2
23.9624.2224.81T:schwaemm256256v2
25.7225.7625.83T:schwaemm128128v2
33.4833.5433.58T:giftcofb128v1
37.4537.5037.53romulusn
40.4340.5240.64T:isapa128av20
43.0643.1443.20T:isapa128v20
60.7360.8260.96romulusm
67.7967.8567.87T:tinyjambu128v2
67.9068.0568.27T:isapk128av20
83.5083.5083.50T:tinyjambu192v2
89.2989.3089.31T:tinyjambu256v2
90.5190.7291.01T:isapk128v20
131.89132.10132.23romulust
144.94?169.41?194.06?T:isapxv20
179.16179.25179.37T:elephant200v2
303.63?317.71?517.53?aes256gcmv1
6812.766813.016813.19T:elephant176v2
8160.598161.138161.62T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.850.900.94T:aes256gcmv1
1.041.071.07T:aes128gcmv1
7.377.407.43ascon128av12
10.9010.9310.95ascon128v12
10.9010.9310.95ascon80pqv12
13.8313.9213.96ascon128abi32v12
15.2715.3415.42T:xoodyakround3
17.6017.6717.69T:schwaemm256128v2
20.8220.8420.85ascon128bi32v12
23.1523.2123.29T:schwaemm192192v2
23.9724.2024.83T:schwaemm256256v2
24.6224.6824.72T:grain128aeadv2
25.6425.6725.75T:schwaemm128128v2
33.6633.7033.75T:giftcofb128v1
37.4437.4937.55romulusn
40.4940.6040.67T:isapa128av20
43.0343.1143.18T:isapa128v20
60.7260.7960.86romulusm
68.0068.0168.02T:tinyjambu128v2
67.9468.0968.20T:isapk128av20
83.5083.5083.50T:tinyjambu192v2
89.2589.2689.27T:tinyjambu256v2
90.3990.7090.88T:isapk128v20
131.92132.13132.25romulust
144.81?169.55?194.11?T:isapxv20
179.21179.28179.40T:elephant200v2
302.70?316.69?517.32?aes256gcmv1
6812.776813.296813.67T:elephant176v2
8160.488161.128161.78T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.840.880.92T:aes256gcmv1
1.051.061.06T:aes128gcmv1
7.387.397.42ascon128av12
10.9010.9210.97ascon128v12
10.9110.9310.96ascon80pqv12
13.8413.9113.96ascon128abi32v12
15.2215.3115.45T:xoodyakround3
17.6017.6417.67T:schwaemm256128v2
20.8320.8520.87ascon128bi32v12
21.5221.5521.61T:isapa128v20
23.1323.2023.26T:schwaemm192192v2
23.9524.2324.82T:schwaemm256256v2
24.6824.6924.71T:grain128aeadv2
25.6525.6725.71T:schwaemm128128v2
27.3027.3627.42T:isapa128av20
33.6633.7033.74T:giftcofb128v1
37.4837.5037.58romulusn
45.0845.1745.27T:isapk128av20
45.1345.1845.28romulust
56.1256.3556.50T:isapk128v20
60.7060.8060.88romulusm
68.0068.0168.02T:tinyjambu128v2
83.5083.5083.50T:tinyjambu192v2
89.2589.2689.27T:tinyjambu256v2
72.82?97.55?121.95?T:isapxv20
179.19179.27179.39T:elephant200v2
288.76?302.69?502.93?aes256gcmv1
6812.346813.276813.71T:elephant176v2
8160.528161.138161.97T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.620.640.65T:aes256gcmv1
0.790.810.81T:aes128gcmv1
7.477.497.50ascon128av12
10.9210.9410.97ascon80pqv12
10.9210.9510.96ascon128v12
11.6811.7411.77T:xoodyakround3
13.9413.9714.00ascon128abi32v12
17.4917.5517.57T:schwaemm256128v2
20.4320.7020.73ascon128bi32v12
23.0323.0823.53T:schwaemm192192v2
23.8524.1024.74T:schwaemm256256v2
24.1924.2024.21T:grain128aeadv2
25.5125.5625.58T:schwaemm128128v2
30.3830.4230.46romulusn
32.3732.4132.43T:isapa128v20
33.7133.7333.75T:giftcofb128v1
33.9233.9734.01T:isapa128av20
42.0442.0842.15romulusm
55.4555.4655.49T:tinyjambu128v2
56.6356.7556.90T:isapk128av20
63.4063.4063.42T:tinyjambu192v2
67.3967.4067.41T:tinyjambu256v2
73.3473.4673.57T:isapk128v20
88.6188.6688.77romulust
121.18?133.56?145.69?T:isapxv20
133.96133.99134.07T:elephant200v2
297.09?310.45?509.80?aes256gcmv1
5087.945088.305088.60T:elephant176v2
6119.556119.826120.20T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.590.610.65T:aes256gcmv1
0.710.740.75T:aes128gcmv1
7.377.427.43ascon128av12
10.8910.9210.94ascon128v12
10.9210.9410.97ascon80pqv12
11.5611.6011.62T:xoodyakround3
13.8313.8613.91ascon128abi32v12
17.5217.5417.60T:schwaemm256128v2
20.8420.8720.95ascon128bi32v12
23.0623.1123.53T:schwaemm192192v2
23.8524.1224.72T:schwaemm256256v2
24.3524.3724.38T:grain128aeadv2
25.4825.5125.55T:schwaemm128128v2
30.3730.4030.46romulusn
32.3432.3832.43T:isapa128v20
33.8033.8233.84T:giftcofb128v1
33.9333.9734.01T:isapa128av20
42.0442.0842.11romulusm
55.5755.5755.58T:tinyjambu128v2
56.6456.7556.82T:isapk128av20
63.1863.4363.43T:tinyjambu192v2
67.3867.3867.39T:tinyjambu256v2
73.2573.4573.57T:isapk128v20
88.4988.6188.65romulust
121.16?133.60?145.81?T:isapxv20
133.97134.01134.08T:elephant200v2
296.64?310.01?509.18?aes256gcmv1
5087.785088.055088.40T:elephant176v2
6120.006120.226120.44T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.600.610.63T:aes256gcmv1
0.730.740.74T:aes128gcmv1
7.367.397.41ascon128av12
10.9010.9210.95ascon128v12
10.9210.9510.96ascon80pqv12
11.6011.6511.69T:xoodyakround3
13.8213.8613.90ascon128abi32v12
17.5217.5617.60T:schwaemm256128v2
20.6120.8520.90ascon128bi32v12
21.5621.6121.65T:isapa128v20
23.0423.0723.57T:schwaemm192192v2
23.8524.1424.72T:schwaemm256256v2
24.3524.3724.39T:grain128aeadv2
25.4925.5125.56T:schwaemm128128v2
27.3227.3827.40T:isapa128av20
30.3830.4030.44romulusn
33.7833.8233.83T:giftcofb128v1
42.0442.0742.12romulusm
45.0445.1745.23romulust
45.1945.2745.34T:isapk128av20
55.5755.5855.58T:tinyjambu128v2
56.1556.2756.43T:isapk128v20
63.1963.4363.44T:tinyjambu192v2
67.3867.3867.39T:tinyjambu256v2
85.16?97.54?109.78?T:isapxv20
133.97133.99134.06T:elephant200v2
289.81?303.01?502.36?aes256gcmv1
5087.845088.095088.48T:elephant176v2
6120.126120.496120.80T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.33?0.36?0.40?T:aes256gcmv1
0.410.420.43T:aes128gcmv1
7.357.387.42ascon128av12
7.937.978.00T:xoodyakround3
10.9110.9410.97ascon128v12
10.9010.9510.97ascon80pqv12
13.7913.8213.84ascon128abi32v12
17.3817.4417.46T:schwaemm256128v2
20.3820.6420.93ascon128bi32v12
21.5721.6421.72T:isapa128v20
22.8622.9223.85T:schwaemm192192v2
23.2823.3123.38romulusn
23.3323.3823.41romulusm
23.7424.0124.61T:schwaemm256256v2
24.1924.2024.21T:grain128aeadv2
25.2725.2925.36T:schwaemm128128v2
27.3127.3327.37T:isapa128av20
33.8733.9233.96T:giftcofb128v1
43.1343.1443.15T:tinyjambu128v2
43.3043.3043.31T:tinyjambu192v2
44.9345.0045.04romulust
45.1445.2745.33T:isapk128av20
45.5045.5145.51T:tinyjambu256v2
56.0956.3456.45T:isapk128v20
89.0289.0589.08T:elephant200v2
72.83?97.55?122.03?T:isapxv20
289.13?303.23?503.73?aes256gcmv1
3363.683363.993364.18T:elephant176v2
4078.564079.214080.11T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.30?0.36?0.40?T:aes256gcmv1
0.400.420.43T:aes128gcmv1
7.307.337.39ascon128av12
7.957.978.01T:xoodyakround3
10.8610.8910.91ascon128v12
10.9310.9610.98ascon80pqv12
13.7913.8113.83ascon128abi32v12
17.3817.4417.47T:schwaemm256128v2
20.8320.8720.90ascon128bi32v12
21.5921.6421.70T:isapa128v20
22.8922.9523.84T:schwaemm192192v2
23.2723.3023.35romulusn
23.3223.3623.39romulusm
23.7423.9924.61T:schwaemm256256v2
24.0224.0424.05T:grain128aeadv2
25.2425.2725.30T:schwaemm128128v2
27.2827.3027.38T:isapa128av20
33.8633.9033.93T:giftcofb128v1
43.1343.1443.16T:tinyjambu128v2
43.3643.3743.37T:tinyjambu192v2
44.9444.9945.06romulust
45.1245.2645.33T:isapk128av20
45.5045.5145.51T:tinyjambu256v2
56.0356.2456.51T:isapk128v20
88.9989.0489.10T:elephant200v2
72.90?97.56?122.22?T:isapxv20
289.01?303.03?503.15?aes256gcmv1
3363.903364.103364.35T:elephant176v2
4078.754079.174079.76T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.33?0.34?0.37?T:aes256gcmv1
0.410.420.42T:aes128gcmv1
7.327.347.40ascon128av12
7.947.998.02T:xoodyakround3
10.8510.8910.92ascon128v12
10.9310.9510.98ascon80pqv12
13.7913.8113.83ascon128abi32v12
17.3817.4317.49T:schwaemm256128v2
20.8220.8520.88ascon128bi32v12
21.5821.6521.74T:isapa128v20
22.8522.9423.77T:schwaemm192192v2
23.2823.3023.32romulusn
23.3223.3423.40romulusm
23.7024.0024.61T:schwaemm256256v2
24.0124.0324.04T:grain128aeadv2
25.2525.3025.35T:schwaemm128128v2
27.2827.3127.36T:isapa128av20
33.8533.9133.94T:giftcofb128v1
43.1343.1443.15T:tinyjambu128v2
43.3643.3743.37T:tinyjambu192v2
44.9545.0245.08romulust
45.1945.2645.33T:isapk128av20
45.5145.5145.51T:tinyjambu256v2
56.0756.2156.39T:isapk128v20
89.0389.0789.09T:elephant200v2
72.79?97.45?122.21?T:isapxv20
288.88?302.94?503.25?aes256gcmv1
3363.713364.093364.43T:elephant176v2
4078.764079.224079.67T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.960.970.98T:aes128gcmv1
1.891.901.90T:aes256gcmv1
7.657.677.70ascon128av12
11.1011.1311.16ascon128v12
11.1311.1411.16ascon80pqv12
11.8611.9011.94T:xoodyakround3
14.2614.2714.28ascon128abi32v12
18.0618.0818.11T:schwaemm256128v2
20.7820.8721.03ascon128bi32v12
23.5523.6424.00T:schwaemm192192v2
24.6224.6324.63T:grain128aeadv2
24.5624.7525.32T:schwaemm256256v2
25.8725.9025.94T:schwaemm128128v2
30.8030.8330.85romulusn
34.1534.1834.21T:giftcofb128v1
36.1236.1636.20T:isapa128av20
42.4942.5242.57romulusm
47.4647.4947.51T:isapa128v20
55.8855.8955.91T:tinyjambu128v2
63.8563.8563.85T:tinyjambu192v2
64.2764.3164.38T:isapk128av20
67.9067.9067.91T:tinyjambu256v2
89.9690.0490.07romulust
128.14128.23128.34T:isapk128v20
136.82136.84136.88T:elephant200v2
215.96216.03231.28T:isapxv20
312.30?312.52?499.36?aes256gcmv1
5127.105127.385127.77T:elephant176v2
6188.476188.736188.98T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.890.890.90T:aes128gcmv1
1.861.861.87T:aes256gcmv1
7.587.617.63ascon128av12
11.0911.1011.12ascon128v12
11.1111.1211.13ascon80pqv12
11.7711.8011.83T:xoodyakround3
14.1314.1714.19ascon128abi32v12
18.0518.0818.10T:schwaemm256128v2
21.1621.1821.19ascon128bi32v12
23.5323.6324.00T:schwaemm192192v2
24.5424.7725.30T:schwaemm256256v2
24.7524.7824.79T:grain128aeadv2
25.8425.8625.90T:schwaemm128128v2
30.8130.8330.85romulusn
34.2734.3034.33T:giftcofb128v1
36.1536.1836.19T:isapa128av20
42.5642.5842.62romulusm
47.4547.5047.55T:isapa128v20
55.9956.0056.01T:tinyjambu128v2
63.6663.8863.89T:tinyjambu192v2
64.2364.2764.34T:isapk128av20
67.8767.8767.88T:tinyjambu256v2
89.9690.0290.16romulust
128.09128.16128.27T:isapk128v20
136.82136.83136.89T:elephant200v2
216.05216.14231.38T:isapxv20
312.09?312.31?499.04?aes256gcmv1
5127.135127.215127.76T:elephant176v2
6188.616189.076189.49T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.880.880.89T:aes128gcmv1
1.851.851.86T:aes256gcmv1
7.577.587.60ascon128av12
11.0811.1011.11ascon128v12
11.1111.1311.14ascon80pqv12
11.7611.7911.81T:xoodyakround3
14.1214.1614.19ascon128abi32v12
18.0818.1018.16T:schwaemm256128v2
20.9421.1621.18ascon128bi32v12
23.5523.6123.93T:schwaemm192192v2
24.5324.7825.32T:schwaemm256256v2
24.7624.7924.81T:grain128aeadv2
25.8525.8825.91T:schwaemm128128v2
28.5828.6028.62T:isapa128av20
29.2829.3129.33T:isapa128v20
30.8230.8430.85romulusn
34.3034.3234.35T:giftcofb128v1
42.5742.5942.64romulusm
46.3846.4446.50romulust
49.5849.6149.67T:isapk128av20
55.9956.0056.01T:tinyjambu128v2
63.8963.8963.89T:tinyjambu192v2
67.8767.8867.88T:tinyjambu256v2
84.3284.4284.51T:isapk128v20
136.80136.84136.90T:elephant200v2
139.73139.76155.02T:isapxv20
304.63?304.91?491.92?aes256gcmv1
5126.935127.205127.32T:elephant176v2
6188.816189.086189.34T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
5.955.976.15T:aes128gcmv1
12.1212.2712.54ascon128av12
15.0915.2615.34ascon128v12
15.1615.4015.90ascon80pqv12
17.2017.3417.48T:xoodyakround3
21.2221.3321.91ascon128abi32v12
27.5927.7728.27ascon128bi32v12
29.3429.4829.54T:schwaemm256128v2
31.1331.2331.41T:aes256gcmv1
33.3233.4133.63T:schwaemm128128v2
34.1934.2134.29T:grain128aeadv2
37.9338.2738.57T:schwaemm192192v2
39.0839.5339.77T:schwaemm256256v2
40.3840.5340.77romulusn
44.4744.6044.70T:giftcofb128v1
52.6952.8353.23romulusm
65.5665.6265.70T:tinyjambu128v2
73.9074.1974.20T:tinyjambu192v2
79.1279.1679.33T:tinyjambu256v2
85.9886.3286.95T:isapa128av20
121.42121.59121.95romulust
193.46193.72194.02T:elephant200v2
223.58224.80225.48T:isapk128av20
352.59?352.88?562.29?aes256gcmv1
393.31393.96394.21T:isapa128v20
1366.241367.181368.84T:isapk128v20
2089.73?2090.53?2457.91?T:isapxv20
6384.886385.456387.16T:elephant176v2
8290.048291.188293.43T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
5.986.016.06T:aes128gcmv1
12.0712.2312.44ascon128av12
15.2115.2915.59ascon80pqv12
15.1315.4315.61ascon128v12
17.1617.3117.98T:xoodyakround3
21.1921.4221.91ascon128abi32v12
28.0228.0928.52ascon128bi32v12
29.2329.4329.73T:schwaemm256128v2
30.7731.0531.41T:aes256gcmv1
33.3433.4433.63T:schwaemm128128v2
34.3434.3834.48T:grain128aeadv2
38.1238.3138.80T:schwaemm192192v2
39.0839.3439.70T:schwaemm256256v2
40.5540.8041.07romulusn
45.5845.8245.98T:giftcofb128v1
54.4954.7355.12romulusm
65.7465.7865.80T:tinyjambu128v2
74.3074.3474.36T:tinyjambu192v2
79.1679.2279.27T:tinyjambu256v2
85.5586.0786.45T:isapa128av20
121.18121.66121.78romulust
193.25193.34193.53T:elephant200v2
224.78225.26225.94T:isapk128av20
352.62?353.02?562.40?aes256gcmv1
393.99394.33395.02T:isapa128v20
1366.551367.401368.46T:isapk128v20
2089.91?2091.09?2460.16?T:isapxv20
6384.696385.056386.54T:elephant176v2
8290.258291.578293.09T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
5.986.026.05T:aes128gcmv1
11.9812.1612.35ascon128av12
15.0215.1415.24ascon80pqv12
15.0215.1615.26ascon128v12
17.1617.2317.52T:xoodyakround3
21.1621.3021.74ascon128abi32v12
28.0228.0928.43ascon128bi32v12
29.2529.3429.55T:schwaemm256128v2
30.6230.9031.23T:aes256gcmv1
33.3033.4833.60T:schwaemm128128v2
34.3634.3834.45T:grain128aeadv2
37.8338.0538.15T:schwaemm192192v2
39.0739.2739.43T:schwaemm256256v2
40.5840.7041.25romulusn
45.6245.8445.95T:giftcofb128v1
54.5054.7054.98romulusm
57.0757.3057.57T:isapa128av20
65.7065.7365.75T:tinyjambu128v2
74.3074.3174.33T:tinyjambu192v2
75.7276.0376.27romulust
79.1679.1779.19T:tinyjambu256v2
138.98139.42140.28T:isapk128av20
193.24193.40193.53T:elephant200v2
205.42205.55205.88T:isapa128v20
345.61?346.32?554.90?aes256gcmv1
715.30716.44716.66T:isapk128v20
1092.50?1093.72?1462.02?T:isapxv20
6385.116385.246386.12T:elephant176v2
8290.228292.038293.69T:elephant160v2