VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Core 2 45nm (1067a); 2009 Intel Core 2 Duo E7600; 2 x 3060MHz; wolfdale, supercop-20251222

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
10.5710.6410.65ascon128av12
15.1815.1815.19ascon128v12
15.3015.3115.31ascon80pqv12
19.9019.9019.91ascon128abi32v12
20.2720.3020.53T:aes128gcmv1
24.8324.8324.84T:xoodyakround3
24.9925.0825.16T:aes256gcmv1
29.0429.0629.06ascon128bi32v12
30.4430.4730.59T:schwaemm256128v2
40.4640.5040.71T:schwaemm256256v2
40.4640.6241.34T:schwaemm128128v2
40.5140.6441.03T:schwaemm192192v2
48.8048.9749.09romulusn
53.5653.6853.72T:giftcofb128v1
62.2162.2962.63T:grain128aeadv2
63.3663.5063.59T:isapa128av20
66.4166.8067.11T:isapa128v20
78.9078.9578.99T:tinyjambu128v2
79.6579.8080.12romulusm
95.5895.7095.71T:tinyjambu192v2
102.80102.93103.05T:tinyjambu256v2
154.53154.78155.08T!!!romulust
237.72237.73237.79T:isapk128av20
252.55253.64267.76T:elephant200v2
330.39330.74331.07T:isapk128v20
311.81?342.59?350.04?T:isapxv20
13015.9213060.7513077.08T:elephant176v2
14741.3014749.5314783.34T:elephant160v2
33896.2834021.0035355.84aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
10.2610.2810.29ascon128av12
15.1215.2115.48ascon80pqv12
15.2715.2815.28ascon128v12
20.3120.3720.41T:aes128gcmv1
20.6520.6620.67ascon128abi32v12
22.4722.7022.92T:xoodyakround3
24.7824.9024.94T:aes256gcmv1
29.1629.3429.35ascon128bi32v12
30.9730.9831.07T:schwaemm256128v2
40.5340.6241.54T:schwaemm128128v2
40.6740.7440.79T:schwaemm256256v2
40.4540.7541.02T:schwaemm192192v2
49.0449.0649.19romulusn
53.4753.9053.91T:giftcofb128v1
61.9962.1062.42T:grain128aeadv2
63.3863.4563.54T:isapa128av20
66.5066.7367.34T:isapa128v20
78.6978.7678.81T:tinyjambu128v2
79.7179.8280.05romulusm
94.5794.5994.73T:tinyjambu192v2
102.74102.76102.92T:tinyjambu256v2
154.54154.78154.98T!!!romulust
237.72237.73238.21T:isapk128av20
252.57253.71267.75T:elephant200v2
330.69330.81331.10T:isapk128v20
311.72?342.21?349.61?T:isapxv20
13015.5913060.5513076.95T:elephant176v2
14743.5414749.6014772.11T:elephant160v2
33859.0734031.1835780.02aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
10.2710.2910.32ascon128av12
15.1215.2115.48ascon80pqv12
15.2815.2815.28ascon128v12
20.2920.3420.39T:aes128gcmv1
20.4620.6220.64ascon128abi32v12
22.7022.9522.99T:xoodyakround3
24.7824.8724.95T:aes256gcmv1
29.3429.3729.37ascon128bi32v12
30.8830.9831.02T:schwaemm256128v2
33.7033.7433.74T:isapa128v20
40.6340.7441.20T:schwaemm192192v2
40.7540.7940.81T:schwaemm256256v2
40.5340.9841.53T:schwaemm128128v2
41.5441.5641.71T:isapa128av20
49.0049.0649.10romulusn
53.4753.9053.90T:giftcofb128v1
54.1254.3554.45T!!!romulust
61.7562.0262.42T:grain128aeadv2
78.7178.7678.81T:tinyjambu128v2
79.7479.9880.90romulusm
94.5794.5994.79T:tinyjambu192v2
102.73102.85102.93T:tinyjambu256v2
162.53162.55162.70T:isapk128av20
192.40192.41192.43T:isapk128v20
182.43?202.73?212.59?T:isapxv20
252.57253.78267.75T:elephant200v2
723.00?861.83?2645.67?aes256gcmv1
13016.0213060.7213077.31T:elephant176v2
14742.6914750.6414770.17T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
10.3310.3410.36ascon128av12
14.1714.1914.33T:aes128gcmv1
15.1115.1215.12ascon128v12
15.1915.1915.19ascon80pqv12
16.5316.5716.61T:aes256gcmv1
17.7317.7617.77T:xoodyakround3
19.6719.6919.73ascon128abi32v12
29.1829.1929.20ascon128bi32v12
30.4630.5530.63T:schwaemm256128v2
39.9039.9540.14romulusn
40.4840.5740.81T:schwaemm256256v2
40.5840.7440.84T:schwaemm192192v2
40.6740.8740.93T:schwaemm128128v2
50.1150.1950.30T:isapa128v20
52.5952.6352.65T:isapa128av20
53.2053.2453.31T:giftcofb128v1
55.2055.3555.50romulusm
61.8061.8861.94T:grain128aeadv2
64.6164.6464.66T:tinyjambu128v2
74.6274.8575.27T:tinyjambu192v2
78.2078.3478.41T:tinyjambu256v2
103.98104.14104.59T!!!romulust
189.68190.76201.06T:elephant200v2
201.53201.59201.97T:isapk128av20
262.03262.08262.31T:isapk128v20
253.79267.50281.32T:isapxv20
9721.289763.799772.44T:elephant176v2
11060.5411066.0011111.65T:elephant160v2
17326.9517432.7618822.84aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
10.1910.2010.23ascon128av12
14.1914.2114.23T:aes128gcmv1
15.0615.0615.06ascon80pqv12
15.2415.2415.24ascon128v12
16.4416.4716.50T:aes256gcmv1
16.5916.6116.63T:xoodyakround3
20.0520.0520.06ascon128abi32v12
29.1129.1229.24ascon128bi32v12
30.3730.5230.66T:schwaemm256128v2
39.8939.9239.95romulusn
40.3640.5240.72T:schwaemm192192v2
40.6040.6540.94T:schwaemm256256v2
40.4140.7241.02T:schwaemm128128v2
50.1050.2650.48T:isapa128v20
52.5652.6552.69T:isapa128av20
53.0653.1753.35T:giftcofb128v1
55.2755.4255.49romulusm
61.6061.7261.87T:grain128aeadv2
64.2964.3364.45T:tinyjambu128v2
74.4574.4774.50T:tinyjambu192v2
78.0878.2178.29T:tinyjambu256v2
104.00104.08104.23T!!!romulust
189.66190.72201.01T:elephant200v2
201.55201.59201.72T:isapk128av20
262.07262.18262.26T:isapk128v20
253.81267.18281.39T:isapxv20
9722.049763.269772.70T:elephant176v2
11060.5211064.7111112.57T:elephant160v2
17305.66?17421.55?19242.72?aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
10.1910.2110.23ascon128av12
14.1814.2114.26T:aes128gcmv1
15.0615.0615.08ascon80pqv12
15.2415.2415.29ascon128v12
16.4216.4716.49T:aes256gcmv1
16.6016.6616.66T:xoodyakround3
20.0020.1620.19ascon128abi32v12
29.1329.3629.53ascon128bi32v12
30.2730.5030.68T:schwaemm256128v2
33.7033.7033.70T:isapa128v20
39.8839.9239.92romulusn
40.4040.5040.70T:schwaemm192192v2
40.6040.7140.90T:schwaemm256256v2
40.4240.7140.80T:schwaemm128128v2
41.6241.7141.72T:isapa128av20
53.0953.1253.36T:giftcofb128v1
53.8553.9454.16T!!!romulust
55.3655.4555.60romulusm
61.6361.6961.79T:grain128aeadv2
64.3064.3364.47T:tinyjambu128v2
74.4674.4674.48T:tinyjambu192v2
78.0878.2278.29T:tinyjambu256v2
163.92164.00164.04T:isapk128av20
189.66190.74201.00T:elephant200v2
192.90192.94193.12T:isapk128v20
189.06?197.78?212.45?T:isapxv20
737.44?862.22?2669.48?aes256gcmv1
9721.449767.699772.39T:elephant176v2
11060.0211064.9911111.39T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
8.038.078.13T:aes256gcmv1
8.068.088.11T:aes128gcmv1
10.0810.0910.12ascon128av12
10.6610.7010.72T:xoodyakround3
15.0215.0315.03ascon128v12
15.0615.0715.07ascon80pqv12
19.4319.4819.73ascon128abi32v12
29.3129.3329.33ascon128bi32v12
30.3830.4330.51T:schwaemm256128v2
30.7430.7630.80romulusn
30.8330.8930.96romulusm
33.4233.6533.92T:isapa128v20
40.3740.4040.43T:schwaemm256256v2
40.3640.5640.75T:schwaemm192192v2
39.6440.7941.02T:schwaemm128128v2
41.8041.8041.86T:isapa128av20
50.3450.3450.35T:tinyjambu128v2
52.7452.7852.81T:giftcofb128v1
53.4453.5753.81T!!!romulust
53.7953.8753.90T:tinyjambu256v2
53.6353.8754.87T:tinyjambu192v2
61.3061.4061.53T:grain128aeadv2
127.76128.35135.68T:elephant200v2
165.37165.42165.46T:isapk128av20
193.41193.42193.43T:isapk128v20
184.58?203.22?213.41?T:isapxv20
758.99?857.33?2221.44?aes256gcmv1
6428.626450.096459.40T:elephant176v2
7365.457372.127395.71T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
8.078.078.08T:aes128gcmv1
8.078.088.12T:aes256gcmv1
10.0910.1110.18ascon128av12
10.6110.6610.67T:xoodyakround3
15.0215.0215.02ascon80pqv12
15.1115.1115.11ascon128v12
19.4019.4219.49ascon128abi32v12
28.9028.9128.91ascon128bi32v12
30.2730.4130.44T:schwaemm256128v2
30.7030.7830.82romulusn
30.8430.8830.93romulusm
33.5033.5033.78T:isapa128v20
40.0140.2840.71T:schwaemm192192v2
40.3840.4040.49T:schwaemm256256v2
40.6240.8440.98T:schwaemm128128v2
41.7741.8141.83T:isapa128av20
49.8049.8249.89T:tinyjambu128v2
52.7552.7852.79T:giftcofb128v1
53.5753.6353.66T:tinyjambu256v2
53.4253.6753.95T!!!romulust
54.3454.3754.42T:tinyjambu192v2
60.8761.0161.34T:grain128aeadv2
127.71128.83135.64T:elephant200v2
164.37165.39165.50T:isapk128av20
193.38193.42193.85T:isapk128v20
184.21?203.24?213.39?T:isapxv20
726.46?860.43?2648.17?aes256gcmv1
6428.476449.896459.49T:elephant176v2
7366.717369.757388.93T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
8.068.078.09T:aes128gcmv1
8.078.108.13T:aes256gcmv1
10.0910.1210.18ascon128av12
10.5810.6610.69T:xoodyakround3
15.0215.0215.02ascon80pqv12
15.1115.1115.11ascon128v12
19.4019.4219.44ascon128abi32v12
28.9128.9329.04ascon128bi32v12
30.2930.4030.47T:schwaemm256128v2
30.7030.7730.81romulusn
30.8330.8930.95romulusm
33.6433.6533.85T:isapa128v20
40.3840.4040.43T:schwaemm256256v2
40.0640.5340.81T:schwaemm192192v2
40.6440.8641.17T:schwaemm128128v2
41.7741.8141.85T:isapa128av20
49.7949.8949.89T:tinyjambu128v2
52.7552.7853.37T:giftcofb128v1
53.6153.6553.67T:tinyjambu256v2
53.5253.8153.99T!!!romulust
54.3454.3954.43T:tinyjambu192v2
60.7660.9561.06T:grain128aeadv2
127.71128.82135.64T:elephant200v2
164.37165.42165.49T:isapk128av20
193.39193.43193.78T:isapk128v20
184.59?203.22?213.39?T:isapxv20
726.65?859.30?2648.18?aes256gcmv1
6428.596449.566459.34T:elephant176v2
7365.227369.357394.68T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
10.5810.5910.59ascon128av12
15.0915.1215.20T:aes128gcmv1
15.3315.3315.33ascon128v12
15.4115.4115.42ascon80pqv12
17.5117.5317.62T:aes256gcmv1
17.9217.9417.95T:xoodyakround3
20.1320.1420.22ascon128abi32v12
29.6429.6429.64ascon128bi32v12
31.5231.5431.61T:schwaemm256128v2
40.2940.3240.35romulusn
41.2841.4641.55T:schwaemm128128v2
41.6341.6541.79T:schwaemm192192v2
41.7641.7941.85T:schwaemm256256v2
53.7653.8253.84T:giftcofb128v1
55.6255.6955.84romulusm
56.6456.9056.95T:isapa128av20
62.2462.2862.52T:grain128aeadv2
65.1565.1865.33T:tinyjambu128v2
73.4473.5473.60T:isapa128v20
75.2275.3075.52T:tinyjambu192v2
78.7578.9278.98T:tinyjambu256v2
105.74105.81106.18T!!!romulust
194.46194.47204.45T:elephant200v2
227.42227.45227.99T:isapk128av20
433.93433.96434.16T:isapk128v20
436.00443.88452.60T:isapxv20
9800.899829.729843.72T:elephant176v2
11187.1111189.1711234.12T:elephant160v2
17766.8417768.5119053.42aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
10.4410.4410.44ascon128av12
15.0715.0915.09T:aes128gcmv1
15.3215.3215.32ascon80pqv12
15.4415.4415.48ascon128v12
16.7716.7716.94T:xoodyakround3
17.3817.4017.42T:aes256gcmv1
20.4620.4820.48ascon128abi32v12
29.5929.5929.70ascon128bi32v12
31.4431.4631.73T:schwaemm256128v2
40.2840.3140.32romulusn
41.1941.3741.58T:schwaemm128128v2
41.4541.5441.67T:schwaemm192192v2
41.8541.8841.90T:schwaemm256256v2
53.6253.6853.89T:giftcofb128v1
55.8255.9556.03romulusm
56.6156.6656.75T:isapa128av20
61.9862.0862.35T:grain128aeadv2
64.7864.9265.15T:tinyjambu128v2
73.4073.5073.61T:isapa128v20
75.0775.1175.17T:tinyjambu192v2
78.8178.8878.89T:tinyjambu256v2
105.77105.98106.19T!!!romulust
194.45194.76204.39T:elephant200v2
227.43227.46227.72T:isapk128av20
433.95433.97434.18T:isapk128v20
436.07443.67452.61T:isapxv20
9800.629829.629843.68T:elephant176v2
11187.7611190.2511232.88T:elephant160v2
17763.3517773.1219451.99aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
10.4310.4410.44ascon128av12
15.0715.0915.11T:aes128gcmv1
15.3215.3215.32ascon80pqv12
15.4415.4415.44ascon128v12
16.8116.8216.83T:xoodyakround3
17.4117.4217.44T:aes256gcmv1
20.4520.5820.61ascon128abi32v12
29.5929.5929.60ascon128bi32v12
31.4331.4531.52T:schwaemm256128v2
40.2940.3140.31romulusn
41.0641.4241.59T:schwaemm128128v2
41.4541.5041.62T:schwaemm192192v2
41.8641.8741.91T:schwaemm256256v2
43.9243.9644.04T:isapa128av20
45.5145.5145.52T:isapa128v20
53.6253.6753.87T:giftcofb128v1
55.4155.5155.72T!!!romulust
55.7555.8655.98romulusm
61.9862.0562.20T:grain128aeadv2
64.7364.9665.15T:tinyjambu128v2
75.0775.1475.26T:tinyjambu192v2
78.8178.8378.88T:tinyjambu256v2
180.17180.20180.42T:isapk128av20
194.45194.88204.40T:elephant200v2
280.83280.85281.08T:isapk128v20
282.38288.58299.72T:isapxv20
1196.21?1205.15?2887.04?aes256gcmv1
9800.999829.759843.54T:elephant176v2
11188.6411191.3711235.61T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
15.7916.0416.25ascon128av12
20.2320.2720.55ascon128v12
20.4220.4220.42ascon80pqv12
26.7226.7427.09T:xoodyakround3
30.0230.2330.61ascon128abi32v12
35.4835.5536.16T:aes128gcmv1
39.2439.4140.59T:aes256gcmv1
39.8739.8740.13ascon128bi32v12
48.9949.1649.26romulusn
54.8455.1355.38T:schwaemm256128v2
54.3255.7957.30T:schwaemm128128v2
64.7265.0665.27romulusm
65.7065.9666.20T:giftcofb128v1
69.6469.8870.25T:schwaemm256256v2
70.6971.2071.45T:grain128aeadv2
71.2871.4571.79T:schwaemm192192v2
77.1377.1377.64T:tinyjambu128v2
87.6887.7788.14T:tinyjambu192v2
93.0193.0193.22T:tinyjambu256v2
144.25144.54145.04T!!!romulust
149.31149.31150.10T:isapa128av20
275.19276.09288.38T:elephant200v2
609.63609.63609.75T:isapa128v20
780.28780.29781.16T:isapk128av20
4335.894336.484337.18T:isapk128v20
4344.774367.284650.69T:isapxv20
12240.5012242.5112327.89T:elephant176v2
14977.9215018.3815037.77T:elephant160v2
25817.8925822.3627240.84aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
15.8816.0316.09ascon128av12
20.3420.3420.80ascon128v12
20.3520.3520.55ascon80pqv12
25.6925.7825.86T:xoodyakround3
30.4830.7030.78ascon128abi32v12
34.8034.8436.02T:aes128gcmv1
38.7938.9240.22T:aes256gcmv1
40.1140.2240.30ascon128bi32v12
49.1349.2949.50romulusn
53.7454.3855.50T:schwaemm128128v2
54.6955.0455.25T:schwaemm256128v2
65.9666.1066.20T:giftcofb128v1
66.7367.0167.49romulusm
69.7669.8469.88T:schwaemm256256v2
70.4770.4770.76T:grain128aeadv2
71.0371.3671.72T:schwaemm192192v2
77.3477.3477.89T:tinyjambu128v2
88.6188.7089.14T:tinyjambu192v2
92.3892.5293.06T:tinyjambu256v2
144.20144.66145.70T!!!romulust
149.91149.91150.27T:isapa128av20
275.32275.72288.51T:elephant200v2
607.38609.42611.99T:isapa128v20
780.56780.57781.14T:isapk128av20
4336.384336.804337.15T:isapk128v20
4345.554367.564650.97T:isapxv20
12240.4212248.7512327.89T:elephant176v2
14997.9415016.2715034.60T:elephant160v2
25816.3425830.6327686.11aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
15.8815.9216.03ascon128av12
20.3420.3420.34ascon128v12
20.3520.3520.35ascon80pqv12
25.6625.8025.92T:xoodyakround3
30.5330.5330.57ascon128abi32v12
34.8434.8935.52T:aes128gcmv1
38.7738.8839.44T:aes256gcmv1
40.1340.1340.21ascon128bi32v12
49.1949.2949.43romulusn
54.2154.5556.20T:schwaemm128128v2
54.9955.3155.47T:schwaemm256128v2
65.9566.1566.32T:giftcofb128v1
66.8767.0167.35romulusm
69.7969.8169.86T:schwaemm256256v2
70.4770.4770.47T:grain128aeadv2
71.2171.2971.82T:schwaemm192192v2
77.3477.3477.34T:tinyjambu128v2
88.4388.6188.70T:tinyjambu192v2
91.4191.9592.38T!!!romulust
92.2392.3892.52T:tinyjambu256v2
96.2896.2896.29T:isapa128av20
275.33275.47288.52T:elephant200v2
316.77316.77316.77T:isapa128v20
518.34518.62519.01T:isapk128av20
2264.912264.912265.09T:isapk128v20
2275.722293.612425.43T:isapxv20
9245.49?9265.48?11121.03?aes256gcmv1
12237.1712240.7212327.35T:elephant176v2
14975.7415021.0115049.73T:elephant160v2