VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Broadwell+AES (306d4); 2015 Intel Core i3-5005U; 2 x 1900MHz; shoe, supercop-20251222

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.760.770.78T:aes128gcmv1
1.061.071.09T:aes256gcmv1
2.112.122.15aes256gcmv1
7.307.337.35ascon128av12
10.6110.6510.68ascon128v12
10.6310.6910.72ascon80pqv12
14.3014.3214.34ascon128abi32v12
17.4417.4817.53T:xoodyakround3
20.0420.1120.16T:schwaemm256128v2
21.1121.2121.27ascon128bi32v12
24.6624.6925.06T:schwaemm256256v2
25.7825.8025.82T:grain128aeadv2
26.2626.3326.37T:schwaemm192192v2
28.7328.7728.81T:schwaemm128128v2
38.9238.9639.02romulusn
41.6241.6541.69T:giftcofb128v1
41.5141.7241.87T:isapa128v20
42.2742.3642.44T:isapa128av20
61.0361.0761.11T:tinyjambu128v2
63.1263.1863.29romulusm
70.5570.7871.04T:isapk128av20
72.5972.8573.07T:tinyjambu192v2
82.0482.0682.06T:tinyjambu256v2
92.8693.1293.52T:isapk128v20
124.69124.75124.86romulust
152.91153.21153.40T:elephant200v2
183.16183.38184.21T:isapxv20
7302.787310.937311.37T:elephant176v2
8537.308540.468545.93T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.720.730.74T:aes128gcmv1
1.001.041.06T:aes256gcmv1
2.202.222.24aes256gcmv1
7.027.137.21ascon128av12
10.4910.5410.63ascon80pqv12
10.6210.6410.66ascon128v12
14.0314.1014.11ascon128abi32v12
17.1817.2617.35T:xoodyakround3
20.0920.1420.18T:schwaemm256128v2
21.3621.4121.44ascon128bi32v12
24.6524.6925.10T:schwaemm256256v2
26.2726.3526.40T:schwaemm192192v2
26.6026.6426.77T:grain128aeadv2
28.7228.7528.81T:schwaemm128128v2
38.9338.9639.01romulusn
41.5141.7641.93T:isapa128v20
41.8041.8641.89T:giftcofb128v1
42.2742.3442.40T:isapa128av20
61.1461.1961.23T:tinyjambu128v2
63.3263.3863.44romulusm
70.5470.7270.95T:isapk128av20
73.0773.0873.12T:tinyjambu192v2
82.3282.3382.36T:tinyjambu256v2
92.6693.0893.51T:isapk128v20
124.64124.76125.03romulust
152.94153.10153.41T:elephant200v2
183.07184.22184.99T:isapxv20
7302.897310.987311.33T:elephant176v2
8538.858541.668549.20T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.720.730.75T:aes128gcmv1
0.971.051.06T:aes256gcmv1
2.202.232.23aes256gcmv1
6.967.047.18ascon128av12
10.4810.5110.53ascon80pqv12
10.6110.6410.65ascon128v12
14.0614.1014.12ascon128abi32v12
17.1817.2917.37T:xoodyakround3
20.0820.1120.14T:schwaemm256128v2
20.6920.8420.90T:isapa128v20
21.3521.4021.46ascon128bi32v12
24.6524.6825.10T:schwaemm256256v2
26.2926.3526.41T:schwaemm192192v2
26.6026.6426.80T:grain128aeadv2
27.7927.8427.92T:isapa128av20
28.7328.7628.80T:schwaemm128128v2
38.9438.9739.01romulusn
41.8341.8741.92T:giftcofb128v1
42.7742.8442.91romulust
46.6746.8147.17T:isapk128av20
57.5757.7658.28T:isapk128v20
61.1361.2061.24T:tinyjambu128v2
63.3163.3563.37romulusm
73.0873.0973.13T:tinyjambu192v2
82.3382.3482.37T:tinyjambu256v2
108.29109.24109.34T:isapxv20
153.01153.10153.27T:elephant200v2
7302.977310.857311.40T:elephant176v2
8536.428540.568543.26T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.520.530.54T:aes128gcmv1
0.660.680.68T:aes256gcmv1
1.251.261.26aes256gcmv1
7.227.247.25ascon128av12
10.5110.5410.60ascon80pqv12
10.5910.6110.62ascon128v12
13.3013.3513.38T:xoodyakround3
14.0914.1514.31ascon128abi32v12
20.2320.2720.30T:schwaemm256128v2
21.3021.3321.34ascon128bi32v12
24.5524.5724.90T:schwaemm256256v2
25.7625.7725.79T:grain128aeadv2
26.1626.1926.21T:schwaemm192192v2
28.6028.6428.68T:schwaemm128128v2
31.0731.1431.22T:isapa128v20
31.5631.5831.60romulusn
35.0735.1335.17T:isapa128av20
41.8241.8541.88T:giftcofb128v1
43.7043.7543.79romulusm
50.1550.1850.20T:tinyjambu128v2
57.1157.2257.24T:tinyjambu192v2
58.4258.6358.89T:isapk128av20
61.9261.9261.94T:tinyjambu256v2
75.4675.6375.88T:isapk128v20
83.5883.6683.70romulust
114.89115.03115.13T:elephant200v2
145.84146.12146.55T:isapxv20
5454.095459.365460.09T:elephant176v2
6397.936399.296401.05T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.490.500.51T:aes128gcmv1
0.650.670.68T:aes256gcmv1
1.291.311.33aes256gcmv1
7.087.107.12ascon128av12
10.5010.5210.56ascon80pqv12
10.5810.6010.62ascon128v12
13.1913.2213.24T:xoodyakround3
14.1514.1714.20ascon128abi32v12
20.2320.2620.29T:schwaemm256128v2
21.3321.3721.39ascon128bi32v12
24.5424.5724.96T:schwaemm256256v2
26.1826.2326.26T:schwaemm192192v2
26.2226.2426.36T:grain128aeadv2
28.6228.6628.73T:schwaemm128128v2
31.0831.1731.25T:isapa128v20
31.5731.5931.61romulusn
35.0635.1035.14T:isapa128av20
41.9742.0042.02T:giftcofb128v1
43.7843.8243.84romulusm
50.2150.2450.28T:tinyjambu128v2
57.2257.2557.30T:tinyjambu192v2
58.5958.7258.82T:isapk128av20
62.0562.0762.09T:tinyjambu256v2
75.4675.7976.06T:isapk128v20
83.6283.6783.73romulust
114.99115.09115.20T:elephant200v2
146.23146.83147.03T:isapxv20
5454.025459.355460.10T:elephant176v2
6398.246400.056400.78T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.500.510.53T:aes128gcmv1
0.630.660.68T:aes256gcmv1
1.301.311.32aes256gcmv1
7.097.097.12ascon128av12
10.5210.5310.55ascon80pqv12
10.5810.6110.63ascon128v12
13.2213.2513.30T:xoodyakround3
14.1714.2114.25ascon128abi32v12
20.2520.2820.30T:schwaemm256128v2
20.5720.6720.71T:isapa128v20
21.3721.3821.39ascon128bi32v12
24.5424.5824.96T:schwaemm256256v2
26.1526.1926.23T:schwaemm192192v2
26.2226.2626.37T:grain128aeadv2
27.8227.8527.88T:isapa128av20
28.6228.6528.69T:schwaemm128128v2
31.5831.6031.61romulusn
41.9541.9641.98T:giftcofb128v1
42.6842.7042.77romulust
43.7743.8043.84romulusm
46.7446.8947.01T:isapk128av20
50.2150.2550.27T:tinyjambu128v2
57.2257.2557.29T:tinyjambu192v2
58.1158.2658.41T:isapk128v20
62.0562.0762.08T:tinyjambu256v2
108.83109.15109.36T:isapxv20
114.94115.04115.17T:elephant200v2
5454.145459.385460.17T:elephant176v2
6399.366400.846401.87T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.270.290.30T:aes256gcmv1
0.280.290.30T:aes128gcmv1
0.390.400.40aes256gcmv1
7.117.137.16ascon128av12
9.149.189.20T:xoodyakround3
10.4410.5410.59ascon80pqv12
10.5110.5410.56ascon128v12
13.8113.8713.98ascon128abi32v12
20.3020.3420.41T:schwaemm256128v2
20.5320.6120.68T:isapa128v20
21.3621.4021.44ascon128bi32v12
24.1624.1824.21romulusn
24.2424.2624.29romulusm
24.4324.4624.76T:schwaemm256256v2
25.7125.7725.80T:grain128aeadv2
25.9626.0326.10T:schwaemm192192v2
27.7927.8827.92T:isapa128av20
28.4628.5028.59T:schwaemm128128v2
39.2439.2739.31T:tinyjambu128v2
41.3841.4041.45T:tinyjambu192v2
41.7941.8041.82T:tinyjambu256v2
42.0442.0742.11T:giftcofb128v1
42.5242.5742.65romulust
46.3646.5846.73T:isapk128av20
58.2658.4458.65T:isapk128v20
77.9878.1078.32T:elephant200v2
108.63108.96109.22T:isapxv20
3605.663609.683610.20T:elephant176v2
4251.864253.764259.29T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.280.290.31T:aes256gcmv1
0.280.290.31T:aes128gcmv1
0.410.420.43aes256gcmv1
7.067.087.11ascon128av12
9.159.189.21T:xoodyakround3
10.4410.4710.51ascon80pqv12
10.5210.5610.59ascon128v12
14.2314.2714.32ascon128abi32v12
20.3120.3420.41T:schwaemm256128v2
20.4020.5520.68T:isapa128v20
21.3021.3421.38ascon128bi32v12
24.1324.1624.20romulusn
24.2524.2724.31romulusm
24.4124.4424.78T:schwaemm256256v2
25.7925.8625.96T:grain128aeadv2
26.0026.0526.12T:schwaemm192192v2
27.7127.8027.85T:isapa128av20
28.4628.5228.59T:schwaemm128128v2
39.2539.2939.34T:tinyjambu128v2
41.4041.4141.46T:tinyjambu192v2
41.8141.8441.85T:tinyjambu256v2
42.0242.0742.10T:giftcofb128v1
42.5342.6042.65romulust
46.2646.4146.57T:isapk128av20
57.9158.2458.52T:isapk128v20
77.9878.1778.41T:elephant200v2
108.85109.44109.59T:isapxv20
3605.673609.703609.87T:elephant176v2
4251.844255.194258.66T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.25?0.28?0.30?T:aes256gcmv1
0.25?0.29?0.30?T:aes128gcmv1
0.420.420.43aes256gcmv1
7.067.087.10ascon128av12
9.159.199.21T:xoodyakround3
10.4310.4810.51ascon80pqv12
10.5010.5310.55ascon128v12
14.2414.3014.36ascon128abi32v12
20.3020.3720.45T:schwaemm256128v2
20.4820.6320.67T:isapa128v20
21.3121.3521.38ascon128bi32v12
24.1324.1524.20romulusn
24.2324.2624.30romulusm
24.4124.4324.77T:schwaemm256256v2
25.8425.8925.94T:grain128aeadv2
25.9726.0326.09T:schwaemm192192v2
27.8327.8827.93T:isapa128av20
28.4328.4928.59T:schwaemm128128v2
39.2639.3339.36T:tinyjambu128v2
41.3941.4241.46T:tinyjambu192v2
41.8241.8541.86T:tinyjambu256v2
41.9942.0642.13T:giftcofb128v1
42.5042.5842.66romulust
46.2946.5446.71T:isapk128av20
58.3058.5458.69T:isapk128v20
78.1078.2878.99T:elephant200v2
108.76109.41109.48T:isapxv20
3605.583609.683609.84T:elephant176v2
4251.164253.874259.87T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.051.061.06T:aes128gcmv1
1.221.231.24T:aes256gcmv1
1.441.451.46aes256gcmv1
7.417.437.44ascon128av12
10.6910.7110.72ascon80pqv12
10.7610.7810.79ascon128v12
13.4713.4913.50T:xoodyakround3
14.4514.5914.62ascon128abi32v12
20.8120.8320.85T:schwaemm256128v2
21.6221.6521.68ascon128bi32v12
25.2325.2425.54T:schwaemm256256v2
26.1926.2026.21T:grain128aeadv2
26.7326.7626.79T:schwaemm192192v2
29.0029.0329.07T:schwaemm128128v2
31.8831.9131.93romulusn
38.6938.7538.78T:isapa128av20
42.2942.3142.32T:giftcofb128v1
44.0944.1144.15romulusm
45.5045.5445.59T:isapa128v20
50.5650.5950.61T:tinyjambu128v2
57.5757.6457.70T:tinyjambu192v2
62.4162.4162.43T:tinyjambu256v2
66.0366.1566.31T:isapk128av20
84.9484.9784.98romulust
117.50117.63117.78T:elephant200v2
131.38131.45131.63T:isapk128v20
239.49239.58239.87T:isapxv20
5495.975500.895501.34T:elephant176v2
6471.016471.646472.90T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.041.041.05T:aes128gcmv1
1.211.211.23T:aes256gcmv1
1.501.511.52aes256gcmv1
7.257.277.31ascon128av12
10.7010.7210.76ascon80pqv12
10.7610.7710.79ascon128v12
13.3713.3813.42T:xoodyakround3
14.5114.5514.59ascon128abi32v12
20.8320.8420.86T:schwaemm256128v2
21.6821.7221.74ascon128bi32v12
25.2325.2625.60T:schwaemm256256v2
26.6726.6826.78T:grain128aeadv2
26.7826.8126.83T:schwaemm192192v2
29.0029.0329.11T:schwaemm128128v2
31.8931.9131.93romulusn
38.6938.7238.75T:isapa128av20
42.4242.4542.47T:giftcofb128v1
44.2544.2744.29romulusm
45.4445.5145.57T:isapa128v20
50.6350.6550.68T:tinyjambu128v2
57.6957.7057.72T:tinyjambu192v2
62.5362.5462.57T:tinyjambu256v2
66.1066.2166.32T:isapk128av20
84.9284.9384.97romulust
117.49117.61117.69T:elephant200v2
131.42131.57131.76T:isapk128v20
240.09240.21240.52T:isapxv20
5496.095500.875501.31T:elephant176v2
6471.416471.886472.51T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.041.041.06T:aes128gcmv1
1.201.211.21T:aes256gcmv1
1.501.511.52aes256gcmv1
7.277.287.29ascon128av12
10.6910.7210.76ascon80pqv12
10.7610.7710.80ascon128v12
13.3613.3813.41T:xoodyakround3
14.4914.5214.54ascon128abi32v12
20.8420.8420.86T:schwaemm256128v2
21.7121.7321.74ascon128bi32v12
25.2225.2325.59T:schwaemm256256v2
26.6826.6826.77T:grain128aeadv2
26.7926.8226.86T:schwaemm192192v2
27.8827.9628.01T:isapa128v20
29.0029.0229.07T:schwaemm128128v2
29.8129.8329.86T:isapa128av20
31.8931.9131.93romulusn
42.3842.4342.46T:giftcofb128v1
43.9443.9644.00romulust
44.2144.2444.27romulusm
50.6450.6650.67T:tinyjambu128v2
51.1951.2951.48T:isapk128av20
57.6757.6957.77T:tinyjambu192v2
62.5462.5662.57T:tinyjambu256v2
86.8586.9687.10T:isapk128v20
117.54117.65117.80T:elephant200v2
157.06157.07157.17T:isapxv20
5495.955500.945501.36T:elephant176v2
6471.306473.346473.68T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
8.098.128.15aes256gcmv1
11.3411.4411.70ascon128av12
13.6913.7313.87T:aes128gcmv1
14.4014.4814.66ascon80pqv12
14.4414.5814.87ascon128v12
14.5314.6714.87T:aes256gcmv1
19.6319.9820.21T:xoodyakround3
22.0022.0722.41ascon128abi32v12
29.2129.2729.38ascon128bi32v12
33.7033.9834.11T:schwaemm256128v2
35.9136.0036.16T:grain128aeadv2
37.3437.4937.82T:schwaemm128128v2
39.3639.4639.66romulusn
40.4040.4940.59T:schwaemm256256v2
43.1743.4143.67T:schwaemm192192v2
51.8852.0552.47romulusm
52.0352.1952.42T:giftcofb128v1
59.5759.7260.15T:tinyjambu128v2
67.8668.0968.17T:tinyjambu192v2
73.1773.3173.48T:tinyjambu256v2
113.43113.73114.26romulust
121.40121.59121.95T:isapa128av20
167.87169.13170.63T:elephant200v2
222.30223.72224.91T:isapk128av20
374.62375.91378.25T:isapa128v20
1391.241393.231397.77T:isapk128v20
2363.482366.602368.64T:isapxv20
6848.736851.836852.62T:elephant176v2
8668.288673.388678.59T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
7.707.727.76aes256gcmv1
11.2011.3011.65ascon128av12
13.7013.7313.79T:aes128gcmv1
14.5414.6014.78T:aes256gcmv1
14.4114.6714.88ascon80pqv12
14.5914.7314.87ascon128v12
19.3419.8420.34T:xoodyakround3
22.1422.1822.37ascon128abi32v12
29.4829.5429.77ascon128bi32v12
33.6033.6733.95T:schwaemm256128v2
36.3236.3836.49T:grain128aeadv2
37.0837.2437.45T:schwaemm128128v2
39.4639.5039.74romulusn
40.4240.4940.55T:schwaemm256256v2
43.1243.2143.43T:schwaemm192192v2
52.2352.5452.75T:giftcofb128v1
54.0454.2354.52romulusm
59.7259.9560.02T:tinyjambu128v2
67.8667.9868.09T:tinyjambu192v2
73.2373.4573.52T:tinyjambu256v2
113.23113.53113.84romulust
121.78122.02122.61T:isapa128av20
167.31168.16168.92T:elephant200v2
223.48223.75227.20T:isapk128av20
374.07376.06378.16T:isapa128v20
1392.911393.661394.62T:isapk128v20
2359.502361.092377.41T:isapxv20
6849.096851.596852.10T:elephant176v2
8663.278665.868669.71T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
7.637.697.76aes256gcmv1
11.1611.2611.44ascon128av12
13.7313.7813.84T:aes128gcmv1
14.5014.6114.66T:aes256gcmv1
14.6214.6814.78ascon128v12
14.5714.7714.82ascon80pqv12
19.5319.7119.91T:xoodyakround3
22.1522.2022.31ascon128abi32v12
29.4229.4729.66ascon128bi32v12
33.4833.5633.62T:schwaemm256128v2
36.3236.3536.44T:grain128aeadv2
37.0937.3937.56T:schwaemm128128v2
39.3939.5039.55romulusn
40.4040.4240.45T:schwaemm256256v2
43.1043.2043.30T:schwaemm192192v2
52.3252.5552.62T:giftcofb128v1
54.0254.0954.31romulusm
59.5259.7260.02T:tinyjambu128v2
67.7867.8067.97T:tinyjambu192v2
71.5971.6571.79romulust
73.2073.2373.28T:tinyjambu256v2
75.1675.3075.45T:isapa128av20
143.09143.47144.61T:isapk128av20
167.23168.04168.97T:elephant200v2
194.70194.98197.15T:isapa128v20
733.24734.37737.66T:isapk128v20
1235.081235.471244.05T:isapxv20
6844.736851.346852.08T:elephant176v2
8667.278672.608676.49T:elephant160v2