VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Core 2 65nm (6fb); 2007 Intel Core 2 Duo T7300; 2 x 2000MHz; trident, supercop-20251222

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
10.6010.6110.63ascon128av12
15.3115.3215.32ascon80pqv12
15.3515.3615.36ascon128v12
16.6617.0017.11T:aes128gcmv1
19.2419.2819.31ascon128abi32v12
19.6820.0520.47T:aes256gcmv1
29.3029.3229.33ascon128bi32v12
31.4631.4631.46T:xoodyakround3
34.0734.1734.28T:schwaemm256128v2
44.3444.4244.89T:schwaemm256256v2
45.3345.4245.55T:schwaemm192192v2
47.5148.1148.50T:schwaemm128128v2
53.6753.7153.76T:giftcofb128v1
62.5562.6062.69T:grain128aeadv2
63.3663.4863.93T:isapa128av20
66.4566.6667.15T:isapa128v20
72.5472.8072.93romulusn
78.9179.0279.14T:tinyjambu128v2
94.3894.4794.57T:tinyjambu192v2
102.44102.59102.67T:tinyjambu256v2
117.96118.13118.49romulusm
237.49237.57238.32T:isapk128av20
241.05241.43242.08T!!!romulust
253.44254.04254.39T:elephant200v2
326.87327.65328.26T:isapk128v20
342.30371.51372.42T:isapxv20
12973.1412996.9713080.72T:elephant176v2
14736.8014760.4114770.20T:elephant160v2
33196.0433396.5236256.46aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
10.2710.3010.32ascon128av12
15.2415.2715.27ascon80pqv12
15.2715.2915.39ascon128v12
16.7716.9417.02T:aes128gcmv1
19.2919.3019.31ascon128abi32v12
20.0220.0920.35T:aes256gcmv1
29.2129.2629.28ascon128bi32v12
31.1331.1631.19T:xoodyakround3
34.0934.1734.24T:schwaemm256128v2
44.1644.8645.47T:schwaemm256256v2
44.9145.0645.26T:schwaemm192192v2
47.3947.6847.71T:schwaemm128128v2
53.5053.5353.65T:giftcofb128v1
61.9661.9962.52T:grain128aeadv2
63.4263.5463.71T:isapa128av20
66.6766.9168.14T:isapa128v20
72.6072.7272.94romulusn
78.7678.8178.87T:tinyjambu128v2
94.4494.5594.84T:tinyjambu192v2
102.68102.83103.14T:tinyjambu256v2
117.88118.00118.10romulusm
237.54237.65238.08T:isapk128av20
241.10241.39241.92T!!!romulust
253.39253.90254.24T:elephant200v2
327.26327.98328.26T:isapk128v20
341.80371.84372.40T:isapxv20
12972.7712996.2913080.83T:elephant176v2
14735.0214761.5114767.82T:elephant160v2
33235.8533394.6535671.28aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
10.2810.3010.32ascon128av12
15.2115.2615.27ascon80pqv12
15.2715.2915.35ascon128v12
16.8516.9517.56T:aes128gcmv1
19.2719.2919.31ascon128abi32v12
19.9620.1220.32T:aes256gcmv1
29.2529.2629.28ascon128bi32v12
31.1531.2331.25T:xoodyakround3
33.3033.7133.72T:isapa128v20
34.0934.1434.18T:schwaemm256128v2
41.5841.6041.70T:isapa128av20
44.0344.9445.80T:schwaemm256256v2
44.9445.0845.14T:schwaemm192192v2
47.6047.7148.38T:schwaemm128128v2
53.4853.5153.65T:giftcofb128v1
61.8162.0162.34T:grain128aeadv2
72.5772.6572.72romulusn
78.7778.8178.84T:tinyjambu128v2
81.7781.9282.10T!!!romulust
94.4794.5294.73T:tinyjambu192v2
102.67102.78102.85T:tinyjambu256v2
117.84117.98118.08romulusm
162.21162.23162.67T:isapk128av20
201.82202.56203.02T:isapk128v20
206.20225.04225.42T:isapxv20
253.33253.93254.29T:elephant200v2
702.53?862.21?3139.20?aes256gcmv1
12974.6512996.4313080.86T:elephant176v2
14736.3714765.0514772.61T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
10.3310.3510.38ascon128av12
12.4112.5112.77T:aes128gcmv1
14.0114.1014.29T:aes256gcmv1
15.1115.1315.13ascon128v12
15.1515.1615.23ascon80pqv12
19.1319.1519.16ascon128abi32v12
23.4823.5023.50T:xoodyakround3
29.0329.0729.12ascon128bi32v12
34.0634.1234.17T:schwaemm256128v2
44.2544.5244.62T:schwaemm256256v2
45.2445.3245.40T:schwaemm192192v2
47.4447.5047.59T:schwaemm128128v2
50.0050.0450.56T:isapa128v20
52.5252.6952.81T:isapa128av20
53.1553.2453.46T:giftcofb128v1
58.7858.8758.93romulusn
61.8261.8761.98T:grain128aeadv2
64.7164.7564.84T:tinyjambu128v2
74.3874.4474.50T:tinyjambu192v2
77.9878.0578.06T:tinyjambu256v2
81.4581.6481.67romulusm
161.06161.49162.34T!!!romulust
184.61185.89190.92T:elephant200v2
202.76202.94203.19T:isapk128av20
267.06267.91268.18T:isapk128v20
274.36298.85299.28T:isapxv20
9690.699705.769785.62T:elephant176v2
11073.3211091.2211101.52T:elephant160v2
16940.33?17129.38?19978.73?aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
10.1810.2010.23ascon128av12
12.3812.5212.75T:aes128gcmv1
14.0114.1214.25T:aes256gcmv1
15.0715.0915.09ascon80pqv12
15.2215.2615.30ascon128v12
19.1519.1619.16ascon128abi32v12
23.2923.3423.35T:xoodyakround3
29.0329.0529.30ascon128bi32v12
34.0634.1034.15T:schwaemm256128v2
44.3444.4744.56T:schwaemm256256v2
45.0245.1845.28T:schwaemm192192v2
47.3047.4947.56T:schwaemm128128v2
50.1450.2850.62T:isapa128v20
52.5652.6052.67T:isapa128av20
53.1353.2953.41T:giftcofb128v1
58.7558.8259.09romulusn
61.4261.4761.69T:grain128aeadv2
64.6064.6364.78T:tinyjambu128v2
74.1274.3074.35T:tinyjambu192v2
78.0278.0778.24T:tinyjambu256v2
81.3181.3581.43romulusm
161.35161.45161.70T!!!romulust
184.66185.78190.97T:elephant200v2
202.81203.04203.14T:isapk128av20
267.70267.92268.34T:isapk128v20
274.45299.06299.27T:isapxv20
9689.709705.919771.48T:elephant176v2
11056.2611076.5911099.48T:elephant160v2
16977.42?17128.25?19396.83?aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
10.1810.2310.25ascon128av12
12.4412.5212.67T:aes128gcmv1
14.0814.1014.23T:aes256gcmv1
15.0915.0915.09ascon80pqv12
15.2315.2315.30ascon128v12
19.1219.1619.16ascon128abi32v12
23.3623.3723.38T:xoodyakround3
29.0329.0529.06ascon128bi32v12
33.5633.7133.80T:isapa128v20
34.1034.1134.14T:schwaemm256128v2
41.6541.7941.93T:isapa128av20
44.3244.4444.63T:schwaemm256256v2
45.0345.2045.39T:schwaemm192192v2
47.3847.5547.63T:schwaemm128128v2
53.1253.1553.40T:giftcofb128v1
58.7858.8259.02romulusn
61.4361.4861.55T:grain128aeadv2
64.6164.6264.67T:tinyjambu128v2
74.1574.2474.31T:tinyjambu192v2
77.9878.0378.12T:tinyjambu256v2
81.2981.3781.44romulusm
81.6481.6781.83T!!!romulust
165.13165.17165.49T:isapk128av20
184.59185.91190.96T:elephant200v2
204.96205.32205.85T:isapk128v20
206.53225.65226.02T:isapxv20
711.45?861.83?3130.60?aes256gcmv1
9689.949706.009772.22T:elephant176v2
11055.3111077.8811099.50T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
7.968.118.23T:aes256gcmv1
8.048.158.27T:aes128gcmv1
10.0510.0710.10ascon128av12
15.0115.0215.02ascon128v12
15.0115.0515.08ascon80pqv12
15.5215.5315.55T:xoodyakround3
19.0319.0619.14ascon128abi32v12
28.7428.7728.82ascon128bi32v12
33.6333.6533.66T:isapa128v20
33.9734.0134.07T:schwaemm256128v2
41.7741.8041.83T:isapa128av20
44.1344.5844.76T:schwaemm256256v2
44.8544.9145.06romulusm
44.9444.9644.98romulusn
44.9444.9845.02T:schwaemm192192v2
46.9947.3947.52T:schwaemm128128v2
50.4450.4750.47T:tinyjambu128v2
52.7352.7653.18T:giftcofb128v1
53.3453.3553.40T:tinyjambu256v2
54.3554.3754.37T:tinyjambu192v2
61.2261.3361.52T:grain128aeadv2
81.3481.4782.54T!!!romulust
128.34128.84128.94T:elephant200v2
168.00168.04168.46T:isapk128av20
207.67208.07208.70T:isapk128v20
207.23226.25226.78T:isapxv20
662.39?861.49?3722.85?aes256gcmv1
6406.296420.546462.12T:elephant176v2
7372.837397.437399.18T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
8.038.128.20T:aes256gcmv1
8.088.168.23T:aes128gcmv1
10.0510.1010.17ascon128av12
15.0415.0515.05ascon80pqv12
15.0615.0715.22ascon128v12
15.4815.5115.54T:xoodyakround3
18.9919.0219.07ascon128abi32v12
28.7928.8128.82ascon128bi32v12
33.4933.5133.76T:isapa128v20
33.9934.0534.16T:schwaemm256128v2
41.7741.8341.86T:isapa128av20
44.1344.2644.38T:schwaemm256256v2
44.8644.9545.04romulusm
44.8644.9845.45romulusn
44.9644.9945.05T:schwaemm192192v2
47.3147.3947.43T:schwaemm128128v2
50.4450.4550.48T:tinyjambu128v2
52.6952.7453.16T:giftcofb128v1
53.3753.3753.40T:tinyjambu256v2
53.8853.9354.00T:tinyjambu192v2
60.6660.9061.79T:grain128aeadv2
81.3681.5381.61T!!!romulust
128.37128.90129.04T:elephant200v2
168.01168.11168.96T:isapk128av20
207.53208.02209.16T:isapk128v20
207.22226.25226.75T:isapxv20
702.92?861.43?3139.68?aes256gcmv1
6406.586420.296462.38T:elephant176v2
7374.517387.297399.00T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
8.028.128.24T:aes256gcmv1
8.008.228.29T:aes128gcmv1
10.0510.1110.17ascon128av12
15.0515.0515.05ascon80pqv12
15.0615.0815.16ascon128v12
15.5115.5115.51T:xoodyakround3
18.9719.0219.02ascon128abi32v12
28.7928.8028.82ascon128bi32v12
33.4933.5133.88T:isapa128v20
34.0034.0534.12T:schwaemm256128v2
41.7841.8341.86T:isapa128av20
44.2144.3645.10T:schwaemm256256v2
44.8244.9345.00romulusm
44.8744.9744.99romulusn
44.9444.9845.04T:schwaemm192192v2
47.2747.3847.40T:schwaemm128128v2
50.4650.4850.49T:tinyjambu128v2
52.7152.7953.17T:giftcofb128v1
53.3753.3753.37T:tinyjambu256v2
53.9253.9353.98T:tinyjambu192v2
60.6760.7561.79T:grain128aeadv2
81.2981.5181.63T!!!romulust
128.32128.52128.95T:elephant200v2
168.04168.10168.33T:isapk128av20
207.57208.05209.15T:isapk128v20
207.21225.94226.63T:isapxv20
702.88?861.88?3139.67?aes256gcmv1
6407.566419.846462.32T:elephant176v2
7375.717398.437400.36T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
10.5910.6010.61ascon128av12
15.2615.3015.57T:aes128gcmv1
15.3415.3415.34ascon128v12
15.3915.3915.40ascon80pqv12
17.0117.1018.03T:aes256gcmv1
19.5819.6019.63ascon128abi32v12
23.7423.7524.04T:xoodyakround3
29.4529.4529.45ascon128bi32v12
35.1835.2035.22T:schwaemm256128v2
45.5345.7246.15T:schwaemm256256v2
46.2346.3146.37T:schwaemm192192v2
47.9748.1648.26T:schwaemm128128v2
53.7253.8253.92T:giftcofb128v1
56.6756.7556.93T:isapa128av20
59.3359.3959.48romulusn
62.2862.3662.45T:grain128aeadv2
65.2465.2465.38T:tinyjambu128v2
73.4273.6873.69T:isapa128v20
74.9474.9975.03T:tinyjambu192v2
78.5578.6378.65T:tinyjambu256v2
82.0282.1182.19romulusm
163.66163.95164.77T!!!romulust
188.77190.33194.94T:elephant200v2
227.97227.99228.50T:isapk128av20
450.10450.29450.82T:isapk128v20
475.75483.31483.63T:isapxv20
9768.299780.699839.85T:elephant176v2
11182.6711220.2911222.91T:elephant160v2
17472.30?17472.95?20147.45?aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
10.4210.4310.46ascon128av12
15.1915.2715.64T:aes128gcmv1
15.3215.3215.32ascon80pqv12
15.4515.4615.51ascon128v12
17.0017.0217.19T:aes256gcmv1
19.6119.6219.65ascon128abi32v12
23.5723.6123.62T:xoodyakround3
29.4429.4529.46ascon128bi32v12
35.1735.1835.22T:schwaemm256128v2
45.6445.8446.04T:schwaemm256256v2
46.0746.1046.16T:schwaemm192192v2
47.8248.1848.23T:schwaemm128128v2
53.6953.7753.82T:giftcofb128v1
56.6356.6556.86T:isapa128av20
59.3359.3559.39romulusn
61.8961.9462.15T:grain128aeadv2
65.1265.1565.16T:tinyjambu128v2
73.5073.6273.76T:isapa128v20
74.7674.8374.88T:tinyjambu192v2
78.7178.7678.84T:tinyjambu256v2
81.9482.0782.15romulusm
163.77163.88164.11T!!!romulust
188.74190.62195.00T:elephant200v2
228.04228.13228.40T:isapk128av20
450.45450.65451.00T:isapk128v20
475.86483.38483.64T:isapxv20
9768.489780.509839.75T:elephant176v2
11181.6711219.8111223.12T:elephant160v2
17471.33?17471.81?19601.31?aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
10.4210.4310.46ascon128av12
15.2015.2815.42T:aes128gcmv1
15.3215.3215.34ascon80pqv12
15.4515.4515.51ascon128v12
16.9617.0017.13T:aes256gcmv1
19.5819.6119.63ascon128abi32v12
23.6223.6523.67T:xoodyakround3
29.4329.4429.45ascon128bi32v12
35.1835.1935.23T:schwaemm256128v2
43.9243.9243.99T:isapa128av20
45.4245.5445.54T:isapa128v20
45.6645.8546.31T:schwaemm256256v2
46.0646.1646.55T:schwaemm192192v2
47.8848.0448.19T:schwaemm128128v2
53.6953.7353.86T:giftcofb128v1
59.3459.3859.44romulusn
61.8861.9562.00T:grain128aeadv2
65.1365.1565.17T:tinyjambu128v2
74.7674.8174.99T:tinyjambu192v2
78.6278.7678.88T:tinyjambu256v2
81.9281.9781.99romulusm
83.9884.0484.16T!!!romulust
180.72180.75181.06T:isapk128av20
189.11190.44195.00T:elephant200v2
300.07300.14300.74T:isapk128v20
309.55320.18320.42T:isapxv20
1204.82?1204.91?3334.89?aes256gcmv1
9768.979780.449839.75T:elephant176v2
11180.2811217.2911223.49T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
16.0416.0416.57ascon128av12
20.4320.4320.59ascon128v12
20.5820.6220.62ascon80pqv12
29.4129.4529.88ascon128abi32v12
36.7336.7337.15T:xoodyakround3
38.7338.7639.13ascon128bi32v12
59.5559.8260.05T:schwaemm256128v2
63.9464.1664.70T:schwaemm128128v2
65.8466.1666.29T:giftcofb128v1
70.7271.1371.71T:grain128aeadv2
71.4771.8372.09romulusn
73.5973.8974.55T:schwaemm256256v2
76.8676.9177.27T:schwaemm192192v2
77.3977.3977.69T:tinyjambu128v2
82.4782.9584.95T:aes128gcmv1
87.6587.9388.23T:tinyjambu192v2
91.6292.1695.04T:aes256gcmv1
92.1692.1692.98T:tinyjambu256v2
94.4894.8095.08romulusm
149.77149.77150.04T:isapa128av20
219.34219.66220.14T!!!romulust
275.54276.71276.90T:elephant200v2
610.77613.12613.13T:isapa128v20
766.87766.98773.05T:isapk128av20
4593.094594.524610.52T:isapk128v20
4664.184670.335058.16T:isapxv20
12176.3112190.6612246.52T:elephant176v2
14983.5115031.2715037.37T:elephant160v2
25369.92?25371.56?28364.33?aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
15.7915.7916.14ascon128av12
20.5320.5320.95ascon80pqv12
20.4520.7921.01ascon128v12
29.5229.5530.09ascon128abi32v12
35.7435.7436.35T:xoodyakround3
38.9538.9539.24ascon128bi32v12
59.3859.4959.76T:schwaemm256128v2
63.6363.8664.51T:schwaemm128128v2
65.7366.1866.31T:giftcofb128v1
70.5370.7770.86T:grain128aeadv2
72.0172.0972.30romulusn
74.2474.5874.80T:schwaemm256256v2
77.1777.1777.58T:tinyjambu128v2
77.4977.8879.16T:schwaemm192192v2
82.3082.5083.69T:aes128gcmv1
88.1688.1789.64T:tinyjambu192v2
91.4591.5792.73T:aes256gcmv1
92.9892.9892.98T:tinyjambu256v2
97.1797.4597.65romulusm
150.16150.24150.31T:isapa128av20
218.91219.14219.63T!!!romulust
275.50275.77277.41T:elephant200v2
606.92609.85612.91T:isapa128v20
767.33767.33767.92T:isapk128av20
4593.184594.644602.73T:isapk128v20
4664.054669.485059.30T:isapxv20
12174.4112191.3812246.46T:elephant176v2
14977.3115028.6015033.49T:elephant160v2
25369.5525375.9727753.91aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
15.7915.7915.85ascon128av12
20.4520.4520.85ascon128v12
20.5320.5320.53ascon80pqv12
29.5029.5029.50ascon128abi32v12
36.2636.2736.27T:xoodyakround3
38.9538.9539.03ascon128bi32v12
59.3559.4559.71T:schwaemm256128v2
63.6463.8364.45T:schwaemm128128v2
65.8466.2766.73T:giftcofb128v1
70.5370.5370.77T:grain128aeadv2
71.6471.6872.09romulusn
74.1674.2574.61T:schwaemm256256v2
77.1777.1777.17T:tinyjambu128v2
77.5277.7678.82T:schwaemm192192v2
81.9883.2583.65T:aes128gcmv1
88.1788.1888.51T:tinyjambu192v2
90.3591.4792.16T:aes256gcmv1
92.9892.9892.98T:tinyjambu256v2
96.2696.2696.45T:isapa128av20
97.0597.3697.84romulusm
136.87137.03137.54T!!!romulust
275.54275.91277.10T:elephant200v2
314.40314.40317.37T:isapa128v20
506.56506.57506.65T:isapk128av20
2441.412442.022442.77T:isapk128v20
2449.722450.452635.98T:isapxv20
9100.95?9108.23?11484.10?aes256gcmv1
12178.7112188.1912246.55T:elephant176v2
14988.5115030.6215038.93T:elephant160v2