VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: armeabi; Cortex-A7 (410fc075); 2016 Broadcom BCM2836; 4 x 900MHz; berry2, supercop-20251114

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
30.68?31.67?34.29?ascon128abi32v12
39.24?40.68?44.07?ascon128av12
46.37?47.43?82.93?ascon128bi32v12
51.38?52.04?88.49?T:schwaemm256128v2
51.5352.4953.38T:aes128gcmv1
55.85?56.89?91.77?ascon80pqv12
55.86?57.96?93.70?ascon128v12
62.1864.1967.64T:aes256gcmv1
66.1167.0369.43T:schwaemm192192v2
71.1671.7972.70T:schwaemm128128v2
72.6972.8573.30T:schwaemm256256v2
75.8876.7077.05T:giftcofb128v1
136.55137.05137.81T:tinyjambu128v2
138.05140.31144.44T:isapa128av20
148.97149.64151.03T:xoodyakround3
164.08164.79167.34T:tinyjambu192v2
169.45169.77170.46T:tinyjambu256v2
177.48178.10179.24T:romulusn
183.67189.83190.32T:isapa128v20
283.36286.52291.69romulusn
304.10?332.23?340.17?T:isapk128av20
412.02426.19438.20T:isapk128v20
468.82470.19471.71T:elephant200v2
544.02563.54569.98romulusm
857.44858.25858.91T:isapxv20
1190.321217.171229.53T!!!romulust
24190.6624191.6924193.10T:elephant176v2
25037.2425038.4825039.08T:elephant160v2
103465.40103467.50103472.98aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
30.1131.3332.70ascon128abi32v12
40.1740.7242.59ascon128av12
45.72?47.01?82.44?ascon128bi32v12
51.37?51.92?88.31?T:schwaemm256128v2
49.00?53.52?59.11?T:aes128gcmv1
54.8255.6456.65ascon80pqv12
56.32?57.26?92.81?ascon128v12
66.2167.0668.83T:schwaemm192192v2
63.27?68.06?72.86?T:aes256gcmv1
71.3071.7472.83T:schwaemm128128v2
71.8972.6874.35T:schwaemm256256v2
75.2777.1180.50T:giftcofb128v1
138.42139.15139.87T:tinyjambu128v2
139.52142.80150.10T:isapa128av20
146.92148.29151.28T:xoodyakround3
164.77165.67167.27T:tinyjambu192v2
170.97171.38172.90T:tinyjambu256v2
177.93179.04179.86T:romulusn
185.40190.02192.09T:isapa128v20
283.54287.85291.60romulusn
309.81?331.20?348.64?T:isapk128av20
392.67?419.45?445.41?T:isapk128v20
463.66471.98472.98T:elephant200v2
549.06552.92566.68romulusm
857.48858.14859.17T:isapxv20
1193.921222.671232.67T!!!romulust
24191.0024191.7524193.14T:elephant176v2
25037.8025038.4925040.05T:elephant160v2
103450.72103452.29103457.55aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
30.1031.0031.77ascon128abi32v12
39.5340.9542.07ascon128av12
46.14?46.75?81.35?ascon128bi32v12
51.36?51.99?88.81?T:schwaemm256128v2
54.50?55.69?90.18?ascon80pqv12
51.54?56.49?59.04?T:aes128gcmv1
55.72?56.99?93.90?ascon128v12
67.0467.3068.30T:schwaemm192192v2
62.69?67.78?71.55?T:aes256gcmv1
70.7971.6172.80T:schwaemm128128v2
72.2072.6874.27T:schwaemm256256v2
75.5676.5480.74T:giftcofb128v1
88.73?91.97?101.68?T:isapa128av20
91.0493.9297.61T:isapa128v20
138.28139.02139.71T:tinyjambu128v2
147.29147.69151.95T:xoodyakround3
165.18165.53166.02T:tinyjambu192v2
170.95171.41172.30T:tinyjambu256v2
177.30178.17179.82T:romulusn
198.69?211.53?228.27?T:isapk128av20
229.36?256.60?279.81?T:isapk128v20
284.66289.19292.19romulusn
380.58386.33396.68T!!!romulust
419.19420.67421.74T:isapxv20
470.82471.99473.53T:elephant200v2
548.65557.46567.94romulusm
2354.042354.742355.62aes256gcmv1
24190.5424191.1824192.59T:elephant176v2
25036.9725038.0525039.25T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
29.7929.8429.91ascon128abi32v12
33.5534.6835.44T:aes128gcmv1
35.6536.1936.32ascon128av12
39.1240.9941.86T:aes256gcmv1
44.8444.8845.06ascon128bi32v12
49.7550.1650.42T:schwaemm256128v2
51.2451.5051.66ascon128v12
51.2551.8453.86ascon80pqv12
65.7066.0166.37T:schwaemm192192v2
70.6971.1371.68T:schwaemm128128v2
71.6471.9772.46T:schwaemm256256v2
75.4876.1676.57T:giftcofb128v1
112.26112.38112.56T:tinyjambu128v2
114.06114.52115.10T:xoodyakround3
115.61117.34118.40T:isapa128av20
128.27128.58128.67T:tinyjambu192v2
128.70128.88129.14T:tinyjambu256v2
138.45142.03142.65T:isapa128v20
150.66150.98151.70T:romulusn
254.69274.15278.25T:isapk128av20
271.58275.93278.44romulusn
331.47340.54349.38T:isapk128v20
352.99354.91355.52T:elephant200v2
404.41416.16419.78romulusm
637.92638.18638.56T:isapxv20
792.54796.57807.75T!!!romulust
18074.2818075.5218076.19T:elephant176v2
18778.5818779.1018780.03T:elephant160v2
52910.6352912.1252913.99aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
29.7330.2032.16ascon128abi32v12
34.50?36.24?38.77?T:aes128gcmv1
35.7836.7539.11ascon128av12
40.22?41.64?45.51?T:aes256gcmv1
44.7045.0346.37ascon128bi32v12
49.8150.0851.36T:schwaemm256128v2
50.3651.7252.26ascon80pqv12
51.2251.9154.37ascon128v12
65.8666.2567.93T:schwaemm192192v2
70.7271.0772.35T:schwaemm128128v2
71.7072.2473.97T:schwaemm256256v2
75.2176.3179.27T:giftcofb128v1
112.90113.12113.68T:tinyjambu128v2
113.39113.65114.67T:xoodyakround3
115.41117.20119.12T:isapa128av20
128.85129.06129.63T:tinyjambu192v2
129.47129.62130.25T:tinyjambu256v2
139.24141.51143.37T:isapa128v20
150.26151.12152.06T:romulusn
260.05272.76278.98T:isapk128av20
274.06275.74278.36romulusn
322.65337.54350.12T:isapk128v20
354.56355.45357.03T:elephant200v2
406.17410.90419.09romulusm
637.70638.06638.84T:isapxv20
788.23795.26809.32T!!!romulust
18074.2618075.2818076.25T:elephant176v2
18778.6418779.0118779.93T:elephant160v2
52902.7752903.8452906.21aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
29.8330.8731.61ascon128abi32v12
33.97?36.40?38.28?T:aes128gcmv1
35.7736.8238.02ascon128av12
40.27?41.33?44.94?T:aes256gcmv1
44.4445.1346.32ascon128bi32v12
49.8250.3150.97T:schwaemm256128v2
51.4851.8453.68ascon128v12
51.4251.9052.51ascon80pqv12
65.6866.1767.59T:schwaemm192192v2
70.7071.0272.07T:schwaemm128128v2
71.7172.2173.61T:schwaemm256256v2
75.4576.2278.63T:giftcofb128v1
90.4592.5594.07T:isapa128av20
92.0893.3795.61T:isapa128v20
112.99113.16113.60T:tinyjambu128v2
113.32113.94120.47T:xoodyakround3
128.95129.18129.54T:tinyjambu192v2
129.41129.64130.14T:tinyjambu256v2
150.68150.99151.93T:romulusn
203.76216.04223.16T:isapk128av20
237.36?257.73?264.54?T:isapk128v20
273.94276.02278.68romulusn
354.72355.74356.69T:elephant200v2
382.86389.27395.66T!!!romulust
406.02411.43418.48romulusm
418.87419.26419.74T:isapxv20
2354.112354.652355.07aes256gcmv1
18074.2518075.2918076.29T:elephant176v2
18778.2718779.1718779.86T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
17.26?19.77?21.56?T:aes128gcmv1
18.45?20.16?23.60?T:aes256gcmv1
29.4430.8432.57ascon128abi32v12
34.41?35.28?38.37?ascon128av12
45.6346.5748.29ascon128bi32v12
49.72?50.50?87.03?T:schwaemm256128v2
50.68?51.42?86.52?ascon128v12
50.75?52.02?87.10?ascon80pqv12
66.65?67.23?104.36?T:schwaemm192192v2
71.17?71.78?109.93?T:schwaemm128128v2
71.1071.9472.57T:schwaemm256256v2
75.7978.0480.25T:giftcofb128v1
78.6179.9186.44T:xoodyakround3
87.2787.8189.03T:tinyjambu128v2
87.5088.0688.95T:tinyjambu256v2
88.7291.5395.74T:isapa128av20
90.5792.3594.96T:isapa128v20
92.3592.7594.21T:tinyjambu192v2
123.20124.10124.91T:romulusn
193.51?212.51?225.27?T:isapk128av20
238.01239.07240.25T:elephant200v2
232.42?257.55?267.91?T:isapk128v20
257.60261.18268.24romulusm
260.34264.71267.10romulusn
373.28387.39390.61T!!!romulust
416.85418.66419.28T:isapxv20
2354.802355.442355.94aes256gcmv1
11956.9311958.2011958.71T:elephant176v2
12520.1312520.6612521.35T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
17.53?19.65?21.19?T:aes128gcmv1
18.37?20.28?21.93?T:aes256gcmv1
30.2230.9331.13ascon128abi32v12
34.2935.3436.35ascon128av12
45.7446.4647.83ascon128bi32v12
49.84?50.53?87.65?T:schwaemm256128v2
50.76?52.28?87.70?ascon80pqv12
51.09?52.32?86.89?ascon128v12
66.57?66.86?105.27?T:schwaemm192192v2
70.89?71.97?109.39?T:schwaemm128128v2
71.0972.1673.23T:schwaemm256256v2
75.2877.8180.09T:giftcofb128v1
79.0080.4982.52T:xoodyakround3
87.4588.0288.88T:tinyjambu128v2
87.5388.4989.26T:tinyjambu256v2
91.5593.0498.99T:isapa128v20
92.4193.0694.09T:tinyjambu192v2
89.13?93.16?102.29?T:isapa128av20
122.72123.52127.39T:romulusn
199.73?208.71?226.16?T:isapk128av20
238.84239.91241.03T:elephant200v2
226.83?256.18?271.24?T:isapk128v20
257.87262.58270.24romulusm
259.77263.84267.84romulusn
384.53392.35397.58T!!!romulust
417.18418.38419.54T:isapxv20
2354.192354.992355.62aes256gcmv1
11957.0911958.1911958.52T:elephant176v2
12519.8912520.8812522.00T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
16.72?18.86?20.37?T:aes128gcmv1
18.82?20.19?21.56?T:aes256gcmv1
30.6931.2932.20ascon128abi32v12
34.95?35.81?68.90?ascon128av12
45.31?46.45?82.24?ascon128bi32v12
49.5950.3651.20T:schwaemm256128v2
51.27?52.14?88.30?ascon128v12
51.43?52.33?87.92?ascon80pqv12
66.34?67.06?105.57?T:schwaemm192192v2
70.93?71.65?79.66?T:schwaemm128128v2
71.3072.1773.44T:schwaemm256256v2
74.69?78.78?85.58?T:giftcofb128v1
79.0180.0482.05T:xoodyakround3
87.5288.0088.74T:tinyjambu128v2
87.7688.4889.03T:tinyjambu256v2
89.32?92.47?101.96?T:isapa128av20
91.4592.8899.74T:isapa128v20
92.5092.9893.94T:tinyjambu192v2
123.21124.53127.37T:romulusn
201.23?210.61?229.43?T:isapk128av20
239.32240.13241.63T:elephant200v2
228.32?258.35?268.95?T:isapk128v20
257.94262.31267.31romulusn
260.54264.28271.06romulusm
377.65385.52391.52T!!!romulust
417.16418.25419.17T:isapxv20
2353.802355.002355.76aes256gcmv1
11957.1711958.4411959.84T:elephant176v2
12520.1912520.9912521.65T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
30.6230.6430.68ascon128abi32v12
37.0637.0737.35ascon128av12
38.2238.3138.83T:aes128gcmv1
44.7445.0745.78T:aes256gcmv1
45.6145.6245.75ascon128bi32v12
51.6351.8851.96T:schwaemm256128v2
52.3852.3952.51ascon80pqv12
52.3652.4352.78ascon128v12
67.7867.8168.07T:schwaemm192192v2
72.1672.2472.60T:schwaemm128128v2
74.1574.4174.47T:schwaemm256256v2
77.2477.3277.75T:giftcofb128v1
113.50113.53113.69T:tinyjambu128v2
116.17116.19116.88T:xoodyakround3
127.63127.66128.98T:isapa128av20
129.74129.89130.00T:tinyjambu192v2
130.10130.18130.30T:tinyjambu256v2
153.39153.63153.78T:romulusn
201.80202.11202.73T:isapa128v20
280.85281.91282.39romulusn
328.84331.53335.09T:isapk128av20
362.83363.16363.70T:elephant200v2
414.08415.27422.56romulusm
622.60625.48630.15T:isapk128v20
808.29818.66822.22T!!!romulust
998.56998.73999.12T:isapxv20
18212.9518213.3218214.18T:elephant176v2
18991.6818991.9918992.40T:elephant160v2
53977.1753977.7053980.58aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
31.3331.9032.78ascon128abi32v12
37.2738.1640.14ascon128av12
38.6440.3042.85T:aes128gcmv1
45.5145.9848.00ascon128bi32v12
45.5047.4250.41T:aes256gcmv1
51.6051.9052.97T:schwaemm256128v2
52.5753.0855.60ascon80pqv12
52.6453.1756.15ascon128v12
67.7567.8268.48T:schwaemm192192v2
72.1072.1972.61T:schwaemm128128v2
74.0874.1174.97T:schwaemm256256v2
77.1077.3879.69T:giftcofb128v1
114.27114.40114.67T:tinyjambu128v2
115.24115.28116.02T:xoodyakround3
127.63128.28130.34T:isapa128av20
130.41130.58130.89T:tinyjambu192v2
130.92130.99131.54T:tinyjambu256v2
153.33153.44154.16T:romulusn
201.85202.19203.48T:isapa128v20
280.95281.62282.97romulusn
329.34331.58341.47T:isapk128av20
363.82364.15364.52T:elephant200v2
415.20419.15423.21romulusm
625.12627.11638.17T:isapk128v20
808.21809.61821.59T!!!romulust
997.64997.74998.19T:isapxv20
18212.6318214.0118214.83T:elephant176v2
18991.5218992.1818992.69T:elephant160v2
53969.6653970.8853973.93aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
30.9831.5832.09ascon128abi32v12
37.1937.9238.79ascon128av12
38.3839.7541.85T:aes128gcmv1
45.5045.9147.30ascon128bi32v12
45.3947.3149.46T:aes256gcmv1
51.6951.9052.69T:schwaemm256128v2
52.5452.9854.09ascon80pqv12
52.6653.1954.90ascon128v12
67.7968.0168.41T:schwaemm192192v2
72.0772.2572.61T:schwaemm128128v2
74.0974.1274.57T:schwaemm256256v2
77.1077.5979.23T:giftcofb128v1
98.3098.45101.30T:isapa128av20
114.26114.28114.51T:tinyjambu128v2
115.33115.58117.68T:xoodyakround3
124.83125.10126.84T:isapa128v20
130.36130.53131.39T:tinyjambu192v2
130.87130.99131.38T:tinyjambu256v2
153.30153.62154.18T:romulusn
253.76255.93265.45T:isapk128av20
280.92281.51284.06romulusn
363.86364.23364.63T:elephant200v2
397.10400.40403.23T!!!romulust
408.72410.44417.82T:isapk128v20
415.38417.91423.41romulusm
604.66605.00605.39T:isapxv20
3420.573420.883421.59aes256gcmv1
18212.8818213.3918214.54T:elephant176v2
18991.4918992.0018992.85T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
48.44?49.37?59.16?ascon128abi32v12
56.1256.4959.77ascon128av12
62.3462.3863.41ascon128bi32v12
70.6070.6272.70ascon128v12
71.02?72.32?87.07?ascon80pqv12
87.2387.9289.06T:schwaemm256128v2
96.2196.95103.23T:schwaemm128128v2
100.59100.76105.09T:giftcofb128v1
103.69?108.02?137.58?T:aes128gcmv1
112.96113.04115.66T:schwaemm192192v2
120.67120.79133.49T:schwaemm256256v2
118.07?128.74?153.75?T:aes256gcmv1
136.44137.54141.86T:tinyjambu128v2
155.22156.80161.42T:tinyjambu192v2
155.30158.72165.33T:tinyjambu256v2
175.63178.40189.89T:xoodyakround3
196.84198.05213.88T:romulusn
342.70?364.89?414.04?T:isapa128av20
366.52?410.54?443.39?romulusn
502.09?517.23?627.15?romulusm
519.06530.12540.79T:elephant200v2
1111.161122.261207.51T!!!romulust
1526.78?1539.92?2120.41?T:isapk128av20
1578.271585.001685.11T:isapa128v20
7046.197095.087301.64T:isapk128v20
9209.799217.649226.04T:isapxv20
22692.2222694.7222702.91T:elephant176v2
25447.2525448.2425462.06T:elephant160v2
78494.0178497.0878508.43aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
48.5648.6750.70ascon128abi32v12
56.5356.6257.56ascon128av12
62.52?63.26?71.28?ascon128bi32v12
71.2271.3374.24ascon128v12
71.59?72.80?80.39?ascon80pqv12
87.2588.2895.29T:schwaemm256128v2
95.9796.23103.16T:schwaemm128128v2
101.05?103.65?114.96?T:giftcofb128v1
102.23?110.37?135.88?T:aes128gcmv1
113.75115.13125.00T:schwaemm192192v2
113.34?119.62?153.57?T:aes256gcmv1
121.74122.62130.09T:schwaemm256256v2
137.68138.34144.25T:tinyjambu128v2
156.05156.78163.56T:tinyjambu192v2
156.33158.10162.59T:tinyjambu256v2
173.96179.88187.57T:xoodyakround3
197.21198.34202.20T:romulusn
338.74?374.09?389.48?T:isapa128av20
369.68?381.34?428.70?romulusn
519.61530.34541.87T:elephant200v2
538.18?569.20?610.71?romulusm
1111.421122.361233.13T!!!romulust
1540.05?1557.47?1945.79?T:isapk128av20
1578.981586.481660.43T:isapa128v20
7059.087117.447686.90T:isapk128v20
9190.049196.659201.20T:isapxv20
22692.3722695.0722701.22T:elephant176v2
25446.5225450.2125452.59T:elephant160v2
78489.8078493.9378507.21aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
48.5548.6448.88ascon128abi32v12
56.5656.7557.34ascon128av12
62.61?62.90?70.16?ascon128bi32v12
71.2371.4577.23ascon128v12
71.5971.9574.50ascon80pqv12
87.36?88.19?97.12?T:schwaemm256128v2
95.9896.45102.47T:schwaemm128128v2
100.74?102.28?113.45?T:giftcofb128v1
101.23?104.95?113.22?T:aes128gcmv1
113.62114.20119.51T:schwaemm192192v2
114.19?118.01?146.08?T:aes256gcmv1
120.77121.28127.46T:schwaemm256256v2
137.33137.52141.14T:tinyjambu128v2
155.76157.38164.18T:tinyjambu192v2
156.63159.19162.43T:tinyjambu256v2
172.95173.95183.26T:xoodyakround3
198.54206.97213.05T:romulusn
205.95?224.92?260.02?T:isapa128av20
369.27?388.84?439.95?romulusn
520.56531.02540.58T:elephant200v2
543.66?581.44?617.55?romulusm
662.27?676.10?772.80?T!!!romulust
832.42862.34881.48T:isapa128v20
1052.83?1097.00?1494.88?T:isapk128av20
3834.93?3881.16?4346.38?T:isapk128v20
4792.174798.324806.39T:isapxv20
22690.4622693.3522701.12T:elephant176v2
25448.0725449.7725460.41T:elephant160v2
27933.9127941.3527951.80aes256gcmv1