VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Coffee Lake (906ea); 2018 Intel Xeon E-2124; 4 x 3300MHz; r24000, supercop-20241022

[Page version: 20250206 00:56:48]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.65?0.70?0.74?T:aes128gcmv1
0.880.930.96T:aes256gcmv1
7.537.587.60ascon128av12
10.9210.9410.97ascon80pqv12
10.9110.9410.97ascon128v12
13.7314.0514.08ascon128abi32v12
15.5015.5815.63T:xoodyakround3
17.5717.6317.67T:schwaemm256128v2
21.0521.0721.09ascon128bi32v12
23.1223.2023.28T:schwaemm192192v2
24.2024.2124.23T:grain128aeadv2
23.9624.2224.81T:schwaemm256256v2
25.7225.7625.83T:schwaemm128128v2
33.4833.5433.58T:giftcofb128v1
39.5039.5239.56romulusn
40.4340.5240.64T:isapa128av20
43.0643.1443.20T:isapa128v20
62.9462.9763.01romulusm
67.7967.8567.87T:tinyjambu128v2
67.9068.0568.27T:isapk128av20
83.5083.5083.50T:tinyjambu192v2
89.2989.3089.31T:tinyjambu256v2
90.5190.7291.01T:isapk128v20
131.80131.95132.01romulust
144.94?169.41?194.06?T:isapxv20
179.16179.25179.37T:elephant200v2
310.17?317.40?420.06?aes256gcmv1
6812.766813.016813.19T:elephant176v2
8160.598161.138161.62T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.61?0.67?0.71?T:aes128gcmv1
0.83?0.88?0.95?T:aes256gcmv1
7.397.417.43ascon128av12
10.9010.9210.95ascon128v12
10.9110.9410.97ascon80pqv12
13.7713.8413.93ascon128abi32v12
15.2715.3415.42T:xoodyakround3
17.6017.6717.69T:schwaemm256128v2
20.8220.8420.87ascon128bi32v12
23.1523.2123.29T:schwaemm192192v2
23.9724.2024.83T:schwaemm256256v2
24.6224.6824.72T:grain128aeadv2
25.6425.6725.75T:schwaemm128128v2
33.6633.7033.75T:giftcofb128v1
39.3239.4739.77romulusn
40.4940.6040.67T:isapa128av20
43.0343.1143.18T:isapa128v20
63.1663.2363.29romulusm
68.0068.0168.02T:tinyjambu128v2
67.9468.0968.20T:isapk128av20
83.5083.5083.50T:tinyjambu192v2
89.2589.2689.27T:tinyjambu256v2
90.3990.7090.88T:isapk128v20
131.75131.88132.18romulust
144.81?169.55?194.11?T:isapxv20
179.21179.28179.40T:elephant200v2
309.54?316.78?419.56?aes256gcmv1
6812.776813.296813.67T:elephant176v2
8160.488161.128161.78T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.650.680.69T:aes128gcmv1
0.830.890.92T:aes256gcmv1
7.397.427.44ascon128av12
10.9210.9310.97ascon128v12
10.9210.9410.96ascon80pqv12
13.7813.8913.92ascon128abi32v12
15.2215.3115.45T:xoodyakround3
17.6017.6417.67T:schwaemm256128v2
20.8220.8420.86ascon128bi32v12
21.5221.5521.61T:isapa128v20
23.1323.2023.26T:schwaemm192192v2
23.9524.2324.82T:schwaemm256256v2
24.6824.6924.71T:grain128aeadv2
25.6525.6725.71T:schwaemm128128v2
27.3027.3627.42T:isapa128av20
33.6633.7033.74T:giftcofb128v1
39.3339.7139.79romulusn
44.9645.0245.40romulust
45.0845.1745.27T:isapk128av20
56.1256.3556.50T:isapk128v20
63.1763.2163.27romulusm
68.0068.0168.02T:tinyjambu128v2
83.5083.5083.50T:tinyjambu192v2
89.2589.2689.27T:tinyjambu256v2
72.82?97.55?121.95?T:isapxv20
179.19179.27179.39T:elephant200v2
295.51?302.73?405.42?aes256gcmv1
6812.346813.276813.71T:elephant176v2
8160.528161.138161.97T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.510.530.54T:aes128gcmv1
0.620.630.64T:aes256gcmv1
7.467.497.51ascon128av12
10.9210.9410.96ascon128v12
10.9210.9410.97ascon80pqv12
11.6811.7411.77T:xoodyakround3
13.9213.9513.97ascon128abi32v12
17.4917.5517.57T:schwaemm256128v2
20.7120.7220.76ascon128bi32v12
23.0323.0823.53T:schwaemm192192v2
23.8524.1024.74T:schwaemm256256v2
24.1924.2024.21T:grain128aeadv2
25.5125.5625.58T:schwaemm128128v2
31.5331.5631.60romulusn
32.3732.4132.43T:isapa128v20
33.7133.7333.75T:giftcofb128v1
33.9233.9734.01T:isapa128av20
43.2143.2643.33romulusm
55.4555.4655.49T:tinyjambu128v2
56.6356.7556.90T:isapk128av20
63.4063.4063.42T:tinyjambu192v2
67.3967.4067.41T:tinyjambu256v2
73.3473.4673.57T:isapk128v20
88.3888.4488.69romulust
121.18?133.56?145.69?T:isapxv20
133.96133.99134.07T:elephant200v2
303.51?310.37?412.63?aes256gcmv1
5087.945088.305088.60T:elephant176v2
6119.556119.826120.20T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.480.500.51T:aes128gcmv1
0.60?0.63?0.70?T:aes256gcmv1
7.357.377.39ascon128av12
10.8910.9210.94ascon128v12
10.9010.9610.97ascon80pqv12
11.5611.6011.62T:xoodyakround3
13.8213.9013.94ascon128abi32v12
17.5217.5417.60T:schwaemm256128v2
20.5920.6220.87ascon128bi32v12
23.0623.1123.53T:schwaemm192192v2
23.8524.1224.72T:schwaemm256256v2
24.3524.3724.38T:grain128aeadv2
25.4825.5125.55T:schwaemm128128v2
31.4131.5431.64romulusn
32.3432.3832.43T:isapa128v20
33.8033.8233.84T:giftcofb128v1
33.9333.9734.01T:isapa128av20
43.3243.3543.44romulusm
55.5755.5755.58T:tinyjambu128v2
56.6456.7556.82T:isapk128av20
63.1863.4363.43T:tinyjambu192v2
67.3867.3867.39T:tinyjambu256v2
73.2573.4573.57T:isapk128v20
88.3488.4088.68romulust
121.16?133.60?145.81?T:isapxv20
133.97134.01134.08T:elephant200v2
302.97?309.96?412.01?aes256gcmv1
5087.785088.055088.40T:elephant176v2
6120.006120.226120.44T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.480.500.51T:aes128gcmv1
0.600.620.64T:aes256gcmv1
7.377.397.41ascon128av12
10.9010.9210.94ascon128v12
10.9210.9410.97ascon80pqv12
11.6011.6511.69T:xoodyakround3
13.8013.8513.89ascon128abi32v12
17.5217.5617.60T:schwaemm256128v2
20.5920.6220.68ascon128bi32v12
21.5621.6121.65T:isapa128v20
23.0423.0723.57T:schwaemm192192v2
23.8524.1424.72T:schwaemm256256v2
24.3524.3724.39T:grain128aeadv2
25.4925.5125.56T:schwaemm128128v2
27.3227.3827.40T:isapa128av20
31.4231.5031.61romulusn
33.7833.8233.83T:giftcofb128v1
43.3143.3543.38romulusm
44.9645.0045.27romulust
45.1945.2745.34T:isapk128av20
55.5755.5855.58T:tinyjambu128v2
56.1556.2756.43T:isapk128v20
63.1963.4363.44T:tinyjambu192v2
67.3867.3867.39T:tinyjambu256v2
85.16?97.54?109.78?T:isapxv20
133.97133.99134.06T:elephant200v2
296.22?303.06?405.22?aes256gcmv1
5087.845088.095088.48T:elephant176v2
6120.126120.496120.80T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.31?0.36?0.40?T:aes256gcmv1
0.33?0.36?0.39?T:aes128gcmv1
7.377.397.42ascon128av12
7.937.978.00T:xoodyakround3
10.9010.9410.97ascon128v12
10.9010.9410.97ascon80pqv12
13.7913.8213.84ascon128abi32v12
17.3817.4417.46T:schwaemm256128v2
20.3420.3820.41ascon128bi32v12
21.5721.6421.72T:isapa128v20
22.8622.9223.85T:schwaemm192192v2
23.6123.6823.75romulusn
23.5723.7323.76romulusm
23.7424.0124.61T:schwaemm256256v2
24.1924.2024.21T:grain128aeadv2
25.2725.2925.36T:schwaemm128128v2
27.3127.3327.37T:isapa128av20
33.8733.9233.96T:giftcofb128v1
43.1343.1443.15T:tinyjambu128v2
43.3043.3043.31T:tinyjambu192v2
44.8844.9345.12romulust
45.1445.2745.33T:isapk128av20
45.5045.5145.51T:tinyjambu256v2
56.0956.3456.45T:isapk128v20
89.0289.0589.08T:elephant200v2
72.83?97.55?122.03?T:isapxv20
296.01?303.17?405.86?aes256gcmv1
3363.683363.993364.18T:elephant176v2
4078.564079.214080.11T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.31?0.35?0.40?T:aes256gcmv1
0.34?0.37?0.39?T:aes128gcmv1
7.317.347.36ascon128av12
7.957.978.01T:xoodyakround3
10.8610.8910.91ascon128v12
10.9210.9410.97ascon80pqv12
13.7913.8213.83ascon128abi32v12
17.3817.4417.47T:schwaemm256128v2
20.3320.3820.65ascon128bi32v12
21.5921.6421.70T:isapa128v20
22.8922.9523.84T:schwaemm192192v2
23.5323.6223.71romulusn
23.5423.7223.75romulusm
23.7423.9924.61T:schwaemm256256v2
24.0224.0424.05T:grain128aeadv2
25.2425.2725.30T:schwaemm128128v2
27.2827.3027.38T:isapa128av20
33.8633.9033.93T:giftcofb128v1
43.1343.1443.16T:tinyjambu128v2
43.3643.3743.37T:tinyjambu192v2
44.8544.9645.19romulust
45.1245.2645.33T:isapk128av20
45.5045.5145.51T:tinyjambu256v2
56.0356.2456.51T:isapk128v20
88.9989.0489.10T:elephant200v2
72.90?97.56?122.22?T:isapxv20
296.11?303.29?405.50?aes256gcmv1
3363.903364.103364.35T:elephant176v2
4078.754079.174079.76T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.33?0.36?0.40?T:aes128gcmv1
0.33?0.37?0.38?T:aes256gcmv1
7.327.347.36ascon128av12
7.947.998.02T:xoodyakround3
10.8510.8810.90ascon128v12
10.9310.9510.98ascon80pqv12
13.7813.8113.83ascon128abi32v12
17.3817.4317.49T:schwaemm256128v2
20.3520.3920.42ascon128bi32v12
21.5821.6521.74T:isapa128v20
22.8522.9423.77T:schwaemm192192v2
23.5623.6323.68romulusn
23.5123.7023.76romulusm
23.7024.0024.61T:schwaemm256256v2
24.0124.0324.04T:grain128aeadv2
25.2525.3025.35T:schwaemm128128v2
27.2827.3127.36T:isapa128av20
33.8533.9133.94T:giftcofb128v1
43.1343.1443.15T:tinyjambu128v2
43.3643.3743.37T:tinyjambu192v2
44.9044.9245.30romulust
45.1945.2645.33T:isapk128av20
45.5145.5145.51T:tinyjambu256v2
56.0756.2156.39T:isapk128v20
89.0389.0789.09T:elephant200v2
72.79?97.45?122.21?T:isapxv20
295.67?302.97?405.82?aes256gcmv1
3363.713364.093364.43T:elephant176v2
4078.764079.224079.67T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.751.761.77T:aes128gcmv1
1.881.891.90T:aes256gcmv1
7.677.687.71ascon128av12
11.1111.1211.15ascon128v12
11.1211.1511.16ascon80pqv12
11.8611.9011.94T:xoodyakround3
14.1414.2714.29ascon128abi32v12
18.0618.0818.11T:schwaemm256128v2
20.7820.9921.03ascon128bi32v12
23.5523.6424.00T:schwaemm192192v2
24.6224.6324.63T:grain128aeadv2
24.5624.7525.32T:schwaemm256256v2
25.8725.9025.94T:schwaemm128128v2
31.8631.8931.94romulusn
34.1534.1834.21T:giftcofb128v1
36.1236.1636.20T:isapa128av20
43.5943.6343.66romulusm
47.4647.4947.51T:isapa128v20
55.8855.8955.91T:tinyjambu128v2
63.8563.8563.85T:tinyjambu192v2
64.2764.3164.38T:isapk128av20
67.9067.9067.91T:tinyjambu256v2
89.7689.8489.97romulust
128.14128.23128.34T:isapk128v20
136.82136.84136.88T:elephant200v2
215.96216.03231.28T:isapxv20
311.75?312.05?408.14?aes256gcmv1
5127.105127.385127.77T:elephant176v2
6188.476188.736188.98T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.721.731.74T:aes128gcmv1
1.851.871.88T:aes256gcmv1
7.577.597.62ascon128av12
11.0911.1111.12ascon128v12
11.1111.1311.17ascon80pqv12
11.7711.8011.83T:xoodyakround3
14.1514.1714.21ascon128abi32v12
18.0518.0818.10T:schwaemm256128v2
20.9420.9921.16ascon128bi32v12
23.5323.6324.00T:schwaemm192192v2
24.5424.7725.30T:schwaemm256256v2
24.7524.7824.79T:grain128aeadv2
25.8425.8625.90T:schwaemm128128v2
31.7231.7431.82romulusn
34.2734.3034.33T:giftcofb128v1
36.1536.1836.19T:isapa128av20
43.7643.8143.85romulusm
47.4547.5047.55T:isapa128v20
55.9956.0056.01T:tinyjambu128v2
63.6663.8863.89T:tinyjambu192v2
64.2364.2764.34T:isapk128av20
67.8767.8767.88T:tinyjambu256v2
89.7389.7890.05romulust
128.09128.16128.27T:isapk128v20
136.82136.83136.89T:elephant200v2
216.05216.14231.38T:isapxv20
311.72?311.75?407.60?aes256gcmv1
5127.135127.215127.76T:elephant176v2
6188.616189.076189.49T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.721.731.74T:aes128gcmv1
1.851.861.88T:aes256gcmv1
7.587.597.62ascon128av12
11.0811.0911.11ascon128v12
11.1211.1211.15ascon80pqv12
11.7611.7911.81T:xoodyakround3
14.1114.1514.16ascon128abi32v12
18.0818.1018.16T:schwaemm256128v2
20.9120.9320.95ascon128bi32v12
23.5523.6123.93T:schwaemm192192v2
24.5324.7825.32T:schwaemm256256v2
24.7624.7924.81T:grain128aeadv2
25.8525.8825.91T:schwaemm128128v2
28.5828.6028.62T:isapa128av20
29.2829.3129.33T:isapa128v20
31.7131.7531.81romulusn
34.3034.3234.35T:giftcofb128v1
43.7143.7643.83romulusm
46.2546.3046.55romulust
49.5849.6149.67T:isapk128av20
55.9956.0056.01T:tinyjambu128v2
63.8963.8963.89T:tinyjambu192v2
67.8767.8867.88T:tinyjambu256v2
84.3284.4284.51T:isapk128v20
136.80136.84136.90T:elephant200v2
139.73139.76155.02T:isapxv20
304.49?304.70?400.62?aes256gcmv1
5126.935127.205127.32T:elephant176v2
6188.816189.086189.34T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
12.2412.3812.66ascon128av12
15.0415.2015.45ascon128v12
15.3015.5515.84ascon80pqv12
17.2017.3417.48T:xoodyakround3
21.3821.4821.82ascon128abi32v12
27.5527.9628.34ascon128bi32v12
29.3429.4829.54T:schwaemm256128v2
30.2830.5731.00T:aes128gcmv1
31.1331.3031.62T:aes256gcmv1
33.3233.4133.63T:schwaemm128128v2
34.1934.2134.29T:grain128aeadv2
38.2038.2638.45romulusn
37.9338.2738.57T:schwaemm192192v2
39.0839.5339.77T:schwaemm256256v2
44.4744.6044.70T:giftcofb128v1
51.3551.5251.78romulusm
65.5665.6265.70T:tinyjambu128v2
73.9074.1974.20T:tinyjambu192v2
79.1279.1679.33T:tinyjambu256v2
85.9886.3286.95T:isapa128av20
121.21121.34121.92romulust
193.46193.72194.02T:elephant200v2
223.58224.80225.48T:isapk128av20
352.94?353.43?459.56?aes256gcmv1
393.31393.96394.21T:isapa128v20
1366.241367.181368.84T:isapk128v20
2089.73?2090.53?2457.91?T:isapxv20
6384.886385.456387.16T:elephant176v2
8290.048291.188293.43T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
12.3312.5212.63ascon128av12
15.1015.2615.72ascon128v12
15.1715.2615.42ascon80pqv12
17.1617.3117.98T:xoodyakround3
21.2621.4221.70ascon128abi32v12
27.8428.0728.46ascon128bi32v12
29.2329.4329.73T:schwaemm256128v2
30.0930.6630.81T:aes128gcmv1
30.6230.9031.23T:aes256gcmv1
33.3433.4433.63T:schwaemm128128v2
34.3434.3834.48T:grain128aeadv2
38.2038.2838.46romulusn
38.1238.3138.80T:schwaemm192192v2
39.0839.3439.70T:schwaemm256256v2
45.5845.8245.98T:giftcofb128v1
52.6652.7652.84romulusm
65.7465.7865.80T:tinyjambu128v2
74.3074.3474.36T:tinyjambu192v2
79.1679.2279.27T:tinyjambu256v2
85.5586.0786.45T:isapa128av20
121.37121.54121.71romulust
193.25193.34193.53T:elephant200v2
224.78225.26225.94T:isapk128av20
352.59?352.84?459.55?aes256gcmv1
393.99394.33395.02T:isapa128v20
1366.551367.401368.46T:isapk128v20
2089.91?2091.09?2460.16?T:isapxv20
6384.696385.056386.54T:elephant176v2
8290.258291.578293.09T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
12.0412.2512.33ascon128av12
14.9715.0515.13ascon80pqv12
14.9415.1615.36ascon128v12
17.1617.2317.52T:xoodyakround3
21.1421.2221.53ascon128abi32v12
28.0028.2028.43ascon128bi32v12
29.2529.3429.55T:schwaemm256128v2
29.8830.1430.27T:aes128gcmv1
30.5930.8331.32T:aes256gcmv1
33.3033.4833.60T:schwaemm128128v2
34.3634.3834.45T:grain128aeadv2
37.8338.0538.15T:schwaemm192192v2
38.0738.2238.38romulusn
39.0739.2739.43T:schwaemm256256v2
45.6245.8445.95T:giftcofb128v1
52.6052.6652.82romulusm
57.0757.3057.57T:isapa128av20
65.7065.7365.75T:tinyjambu128v2
74.3074.3174.33T:tinyjambu192v2
75.9076.0976.34romulust
79.1679.1779.19T:tinyjambu256v2
138.98139.42140.28T:isapk128av20
193.24193.40193.53T:elephant200v2
205.42205.55205.88T:isapa128v20
345.37?345.60?452.68?aes256gcmv1
715.30716.44716.66T:isapk128v20
1092.50?1093.72?1462.02?T:isapxv20
6385.116385.246386.12T:elephant176v2
8290.228292.038293.69T:elephant160v2