VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Zen (800f11); 2017 AMD Ryzen 5 1600; 6 x 3200MHz; rumba5, supercop-20241022

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.87?0.91?1.07?T:aes256gcmv1
1.601.611.63T:aes128gcmv1
6.576.596.60ascon128av12
9.019.049.07ascon128v12
9.049.089.09ascon80pqv12
11.3811.4111.41ascon128abi32v12
15.1415.3815.49T:xoodyakround3
16.6116.6216.63ascon128bi32v12
19.3919.4119.90T:schwaemm256128v2
24.0024.0624.15T:schwaemm256256v2
25.5426.0426.33T:schwaemm192192v2
27.0227.1027.20T:grain128aeadv2
27.7927.8330.83T:schwaemm128128v2
34.2834.3234.35T:isapa128av20
34.7134.7134.88T:isapa128v20
35.7136.0637.16romulusn
40.5140.5640.58T:giftcofb128v1
56.3956.4056.48T:tinyjambu128v2
57.5057.8458.99romulusm
66.5266.5266.55T:tinyjambu192v2
67.2767.3267.42T:isapk128av20
71.0471.0571.08T:tinyjambu256v2
88.7989.7990.20T:isapk128v20
115.58115.59115.60romulust
147.89148.05148.18T:elephant200v2
160.97162.78164.32T:isapxv20
373.79374.47375.19aes256gcmv1
6936.786938.966943.52T:elephant176v2
7828.587829.147829.62T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.81?0.92?0.96?T:aes256gcmv1
1.591.611.62T:aes128gcmv1
6.036.076.10ascon128av12
8.898.918.91ascon80pqv12
9.089.109.10ascon128v12
11.34?11.41?13.37?ascon128abi32v12
16.2316.2516.25ascon128bi32v12
16.3316.5116.76T:xoodyakround3
19.4819.5019.51T:schwaemm256128v2
24.0224.1024.13T:schwaemm256256v2
25.8325.8826.32T:schwaemm192192v2
27.3827.4527.50T:grain128aeadv2
27.8527.8627.91T:schwaemm128128v2
34.3034.3234.35T:isapa128av20
34.7034.7034.72T:isapa128v20
35.6836.1136.63romulusn
40.4940.5240.55T:giftcofb128v1
56.4956.5256.58T:tinyjambu128v2
57.6357.9757.98romulusm
66.1266.1566.21T:tinyjambu192v2
67.2467.3767.42T:isapk128av20
71.1471.1971.22T:tinyjambu256v2
88.8389.6889.79T:isapk128v20
115.56115.58115.60romulust
148.21148.28148.34T:elephant200v2
161.63162.05163.70T:isapxv20
374.58376.29376.94aes256gcmv1
6939.136939.876943.70T:elephant176v2
7829.257829.567830.01T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.850.910.94T:aes256gcmv1
1.601.611.62T:aes128gcmv1
6.036.066.07ascon128av12
8.908.918.91ascon80pqv12
9.099.109.12ascon128v12
11.36?11.43?13.35?ascon128abi32v12
16.2516.2516.25ascon128bi32v12
16.4416.5916.78T:xoodyakround3
17.3017.4717.47T:isapa128v20
19.4719.5119.54T:schwaemm256128v2
22.8822.9022.92T:isapa128av20
24.0524.1124.14T:schwaemm256256v2
25.8225.8626.32T:schwaemm192192v2
27.4027.4527.53T:grain128aeadv2
27.8127.8528.18T:schwaemm128128v2
35.7035.9837.25romulusn
38.8438.8638.88romulust
40.4940.5340.56T:giftcofb128v1
44.3044.3644.41T:isapk128av20
55.3356.1856.33T:isapk128v20
56.5056.5056.53T:tinyjambu128v2
57.5257.7259.05romulusm
66.1066.1566.19T:tinyjambu192v2
71.2171.2471.24T:tinyjambu256v2
94.1695.3595.95T:isapxv20
147.96148.10148.34T:elephant200v2
370.89371.32371.68aes256gcmv1
6939.256939.996947.59T:elephant176v2
7828.767829.607830.13T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.61?0.67?0.71?T:aes256gcmv1
1.071.081.09T:aes128gcmv1
6.286.296.30ascon128av12
8.898.908.94ascon80pqv12
8.988.999.01ascon128v12
11.1311.1711.78ascon128abi32v12
11.6511.8211.87T:xoodyakround3
16.4416.4516.47ascon128bi32v12
19.3519.4319.43T:schwaemm256128v2
23.9223.9724.02T:schwaemm256256v2
25.5625.7726.33T:schwaemm192192v2
26.0126.0826.20T:isapa128v20
27.1027.1227.15T:grain128aeadv2
27.7327.7527.76T:schwaemm128128v2
28.5928.6728.68T:isapa128av20
28.7328.8329.00romulusn
39.6139.9140.42romulusm
40.5040.5140.53T:giftcofb128v1
44.6744.7344.74T:tinyjambu128v2
51.7251.7451.81T:tinyjambu192v2
53.3253.3453.35T:tinyjambu256v2
55.7955.8455.94T:isapk128av20
72.1672.2372.72T:isapk128v20
77.2277.2377.25romulust
111.63111.69111.74T:elephant200v2
128.93129.91130.55T:isapxv20
373.02373.30376.14aes256gcmv1
5182.065182.425190.62T:elephant176v2
5868.605868.945869.38T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.62?0.66?0.70?T:aes256gcmv1
1.071.081.08T:aes128gcmv1
5.975.986.01ascon128av12
8.888.908.90ascon80pqv12
8.928.959.01ascon128v12
11.1911.2212.19ascon128abi32v12
12.2412.3512.53T:xoodyakround3
16.2416.3416.36ascon128bi32v12
19.4419.4619.47T:schwaemm256128v2
23.9324.0024.02T:schwaemm256256v2
25.7325.9726.14T:schwaemm192192v2
26.1426.1626.32T:isapa128v20
27.1927.2327.38T:grain128aeadv2
27.7727.8127.94T:schwaemm128128v2
28.6228.6928.71T:isapa128av20
28.7828.9729.55romulusn
39.7539.8039.92romulusm
40.4640.4840.50T:giftcofb128v1
44.7344.7344.75T:tinyjambu128v2
51.4651.4751.49T:tinyjambu192v2
53.4253.4453.46T:tinyjambu256v2
55.7955.8355.87T:isapk128av20
72.1372.2172.64T:isapk128v20
77.2377.2477.24romulust
111.61111.65111.68T:elephant200v2
129.19129.44130.98T:isapxv20
372.47373.05373.42aes256gcmv1
5182.285182.695188.67T:elephant176v2
5868.485868.845869.26T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.650.670.70T:aes256gcmv1
1.061.081.08T:aes128gcmv1
5.996.006.00ascon128av12
8.898.908.91ascon80pqv12
8.948.989.02ascon128v12
11.2011.2312.20ascon128abi32v12
12.2412.3612.48T:xoodyakround3
16.2616.3216.36ascon128bi32v12
17.5617.6517.70T:isapa128v20
19.4419.4419.46T:schwaemm256128v2
22.9122.9623.00T:isapa128av20
23.9023.9624.02T:schwaemm256256v2
25.6025.7925.94T:schwaemm192192v2
27.3427.3927.46T:grain128aeadv2
27.7527.7827.81T:schwaemm128128v2
28.8028.9029.56romulusn
38.8538.8738.89romulust
39.7039.9040.45romulusm
40.4540.4840.51T:giftcofb128v1
44.3344.3744.47T:isapk128av20
44.7444.7444.74T:tinyjambu128v2
51.4651.4951.51T:tinyjambu192v2
53.4153.4153.43T:tinyjambu256v2
55.3855.4355.90T:isapk128v20
95.0496.0696.17T:isapxv20
111.50111.71111.75T:elephant200v2
367.17368.67369.82aes256gcmv1
5181.915182.245189.70T:elephant176v2
5868.725868.955869.18T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.38?0.48?0.52?T:aes256gcmv1
0.550.560.58T:aes128gcmv1
5.996.006.01ascon128av12
8.068.118.21T:xoodyakround3
8.768.798.80ascon80pqv12
8.948.948.96ascon128v12
10.87?10.94?12.13?ascon128abi32v12
16.2716.2916.44ascon128bi32v12
17.6017.6017.78T:isapa128v20
19.2819.4019.43T:schwaemm256128v2
21.8321.8421.86romulusn
21.8321.8521.85romulusm
22.9723.0623.07T:isapa128av20
23.7823.8223.89T:schwaemm256256v2
25.3125.3325.83T:schwaemm192192v2
27.0727.2127.30T:grain128aeadv2
27.6327.6827.74T:schwaemm128128v2
32.9332.9532.97T:tinyjambu128v2
35.6335.6335.64T:tinyjambu256v2
37.0137.0237.05T:tinyjambu192v2
38.8638.8738.88romulust
40.4240.4640.47T:giftcofb128v1
44.2344.3044.38T:isapk128av20
55.5355.7856.01T:isapk128v20
75.6176.0876.12T:elephant200v2
95.4295.6896.43T:isapxv20
369.10369.68370.28aes256gcmv1
3425.633426.093429.05T:elephant176v2
3908.823909.233909.85T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.38?0.42?0.48?T:aes256gcmv1
0.540.560.58T:aes128gcmv1
5.915.925.93ascon128av12
8.038.108.18T:xoodyakround3
8.868.878.87ascon80pqv12
8.868.888.91ascon128v12
10.9911.0211.03ascon128abi32v12
16.2416.3616.46ascon128bi32v12
17.6017.6017.60T:isapa128v20
19.3919.4119.43T:schwaemm256128v2
21.8221.8421.85romulusn
21.8321.8521.86romulusm
22.9522.9823.08T:isapa128av20
23.7923.8623.90T:schwaemm256256v2
25.3325.3625.59T:schwaemm192192v2
26.8726.9727.35T:grain128aeadv2
27.6727.7127.76T:schwaemm128128v2
32.9332.9432.99T:tinyjambu128v2
35.6635.6735.68T:tinyjambu256v2
36.7336.8336.88T:tinyjambu192v2
38.8338.8638.87romulust
40.4440.4740.49T:giftcofb128v1
44.3044.3344.39T:isapk128av20
55.3755.6055.73T:isapk128v20
76.0076.1276.22T:elephant200v2
94.8595.7695.98T:isapxv20
368.30372.53373.05aes256gcmv1
3425.703427.303429.50T:elephant176v2
3909.003909.573909.99T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.39?0.44?0.49?T:aes256gcmv1
0.560.560.57T:aes128gcmv1
5.895.915.92ascon128av12
8.068.098.51T:xoodyakround3
8.878.888.89ascon128v12
8.898.898.89ascon80pqv12
11.0111.0311.04ascon128abi32v12
16.2516.4516.47ascon128bi32v12
17.6017.6117.63T:isapa128v20
19.4019.4119.41T:schwaemm256128v2
21.8321.8521.86romulusm
21.8321.8521.86romulusn
22.9122.9323.08T:isapa128av20
23.7823.8523.88T:schwaemm256256v2
25.3425.3525.61T:schwaemm192192v2
26.9526.9727.18T:grain128aeadv2
27.6927.7127.75T:schwaemm128128v2
32.9532.9732.97T:tinyjambu128v2
35.6635.6635.66T:tinyjambu256v2
36.8036.8236.87T:tinyjambu192v2
38.8638.8738.90romulust
40.4440.4740.50T:giftcofb128v1
44.2444.3144.36T:isapk128av20
55.4255.5355.57T:isapk128v20
75.4476.0476.11T:elephant200v2
94.7395.0195.69T:isapxv20
366.70368.86375.98aes256gcmv1
3426.053428.773429.74T:elephant176v2
3909.793910.213923.47T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.211.211.22T:aes128gcmv1
1.982.012.04T:aes256gcmv1
6.456.456.46ascon128av12
9.079.079.09ascon80pqv12
9.149.149.15ascon128v12
11.4911.5512.03ascon128abi32v12
11.7411.8811.89T:xoodyakround3
16.7916.7916.80ascon128bi32v12
19.9719.9820.10T:schwaemm256128v2
24.6324.6424.66T:schwaemm256256v2
26.1726.2926.85T:schwaemm192192v2
27.4427.4527.48T:grain128aeadv2
28.1028.1328.15T:schwaemm128128v2
29.0629.2129.73romulusn
30.9231.1031.11T:isapa128av20
38.3838.3838.46T:isapa128v20
39.9240.0540.21romulusm
40.8640.8840.90T:giftcofb128v1
45.0345.0945.11T:tinyjambu128v2
52.1452.1452.21T:tinyjambu192v2
53.7653.7653.78T:tinyjambu256v2
63.3963.4563.59T:isapk128av20
78.4178.4178.42romulust
113.85113.97114.11T:elephant200v2
125.36125.38125.76T:isapk128v20
209.43209.70209.84T:isapxv20
372.85373.79379.21aes256gcmv1
5221.875222.055224.45T:elephant176v2
5934.875935.035935.35T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.211.211.21T:aes128gcmv1
1.951.962.00T:aes256gcmv1
6.156.166.16ascon128av12
9.049.069.06ascon80pqv12
9.089.109.15ascon128v12
11.5411.5512.43ascon128abi32v12
12.3412.4412.50T:xoodyakround3
16.5916.6816.68ascon128bi32v12
20.0120.0120.02T:schwaemm256128v2
24.5924.6624.67T:schwaemm256256v2
26.1926.3126.67T:schwaemm192192v2
27.6827.7327.80T:grain128aeadv2
28.1728.2128.23T:schwaemm128128v2
29.0829.2429.41romulusn
31.0531.0831.13T:isapa128av20
38.2638.2638.26T:isapa128v20
40.1240.1640.22romulusm
40.8540.8840.91T:giftcofb128v1
45.1045.1145.14T:tinyjambu128v2
51.8851.9051.92T:tinyjambu192v2
53.8853.9053.90T:tinyjambu256v2
63.3763.4163.48T:isapk128av20
78.4078.4078.43romulust
113.87113.93114.08T:elephant200v2
125.76125.78125.84T:isapk128v20
208.90209.17210.38T:isapxv20
374.94377.54381.40aes256gcmv1
5221.355221.865225.78T:elephant176v2
5934.755935.195935.51T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.201.201.21T:aes128gcmv1
1.931.941.96T:aes256gcmv1
6.156.166.16ascon128av12
9.059.069.06ascon80pqv12
9.109.119.15ascon128v12
11.5411.5512.44ascon128abi32v12
12.3912.4412.60T:xoodyakround3
16.6016.6816.68ascon128bi32v12
20.0120.0220.02T:schwaemm256128v2
23.7323.7323.73T:isapa128v20
24.2924.3224.35T:isapa128av20
24.5924.6524.67T:schwaemm256256v2
26.1826.3326.68T:schwaemm192192v2
27.5527.6727.77T:grain128aeadv2
28.1528.1728.19T:schwaemm128128v2
29.0829.2429.28romulusn
39.9939.9940.02romulust
40.1240.2240.23romulusm
40.8440.8540.89T:giftcofb128v1
45.1145.1245.14T:tinyjambu128v2
48.7148.7348.75T:isapk128av20
51.9151.9251.94T:tinyjambu192v2
53.8553.8853.89T:tinyjambu256v2
82.6482.6683.04T:isapk128v20
113.92114.01114.17T:elephant200v2
135.96136.37136.59T:isapxv20
373.32375.32375.97aes256gcmv1
5221.675221.935225.00T:elephant176v2
5934.945935.235935.47T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
5.475.535.73T:aes128gcmv1
10.0510.4110.58ascon128av12
12.3012.5113.03ascon80pqv12
12.4812.8012.95ascon128v12
17.6917.9118.20T:xoodyakround3
18.3818.8019.27ascon128abi32v12
24.0324.3424.73ascon128bi32v12
31.9932.0533.47T:aes256gcmv1
32.6232.8032.89T:schwaemm256128v2
35.0235.4335.80T:grain128aeadv2
35.2735.4535.93romulusn
37.0437.2037.37T:schwaemm128128v2
39.2339.3439.58T:schwaemm256256v2
42.7943.2343.66T:schwaemm192192v2
46.1646.3146.71romulusm
49.3849.4149.58T:giftcofb128v1
53.3353.4153.84T:tinyjambu128v2
61.4261.4262.09T:tinyjambu192v2
63.1063.1163.62T:tinyjambu256v2
86.6286.8887.30T:isapa128av20
105.29105.41105.83romulust
163.02163.28163.56T:elephant200v2
223.88224.31225.38T:isapk128av20
319.05320.98320.98T:isapa128v20
418.83419.96421.09aes256gcmv1
1332.811333.171333.45T:isapk128v20
2004.052020.622032.17T:isapxv20
6502.056505.336510.01T:elephant176v2
7947.397949.347950.86T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
5.485.525.55T:aes128gcmv1
9.8010.1710.67ascon128av12
12.2312.3713.07ascon128v12
12.5612.7713.17ascon80pqv12
17.8417.9718.33T:xoodyakround3
18.4818.9519.40ascon128abi32v12
24.3024.4924.61ascon128bi32v12
31.8832.2533.20T:aes256gcmv1
32.5532.6432.67T:schwaemm256128v2
35.0735.3635.69romulusn
35.3035.5935.82T:grain128aeadv2
37.1737.2837.38T:schwaemm128128v2
39.1739.2439.34T:schwaemm256256v2
42.8243.2243.41T:schwaemm192192v2
47.5347.5947.80romulusm
49.6249.7349.93T:giftcofb128v1
53.5353.5353.80T:tinyjambu128v2
61.6561.8162.05T:tinyjambu192v2
63.6663.6663.80T:tinyjambu256v2
86.7086.9287.09T:isapa128av20
105.27105.31105.47romulust
163.22163.31163.52T:elephant200v2
224.16224.48225.22T:isapk128av20
310.27311.37319.11T:isapa128v20
421.52422.41426.34aes256gcmv1
1332.341332.841333.29T:isapk128v20
2009.882014.682016.98T:isapxv20
6501.516503.536524.43T:elephant176v2
7946.097947.317949.43T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
5.505.525.59T:aes128gcmv1
9.669.9510.11ascon128av12
12.5412.5612.77ascon128v12
12.4112.6012.86ascon80pqv12
17.9318.0518.56T:xoodyakround3
18.2418.7319.02ascon128abi32v12
23.8823.9523.98ascon128bi32v12
31.9532.0332.71T:aes256gcmv1
32.4832.4832.88T:schwaemm256128v2
35.0535.1835.77romulusn
35.6635.7535.79T:grain128aeadv2
37.0537.0937.37T:schwaemm128128v2
39.1739.2439.30T:schwaemm256256v2
42.9043.2043.30T:schwaemm192192v2
47.4247.4747.80romulusm
49.5349.5949.77T:giftcofb128v1
53.4553.4553.46T:tinyjambu128v2
55.6955.7655.98T:isapa128av20
61.4161.5661.81T:tinyjambu192v2
63.6663.7963.93T:tinyjambu256v2
65.6565.7665.88romulust
140.02140.45140.59T:isapk128av20
163.17163.27163.60T:elephant200v2
165.80165.80166.20T:isapa128v20
417.75422.31424.59aes256gcmv1
696.56696.80697.23T:isapk128v20
1048.151049.161055.25T:isapxv20
6504.096505.576507.05T:elephant176v2
7947.457949.387952.66T:elephant160v2