VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: armeabi; Cortex-A17 (410fc0d1); 2014 Rockchip RK3288; 4 x 1800MHz; tinker, supercop-20241022

[Page version: 20241215 22:59:49]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
15.8215.8916.06ascon128abi32v12
20.3720.3820.39ascon128av12
24.1024.1424.22ascon128bi32v12
24.9925.5526.84T:aes128gcmv1
30.2230.2530.26ascon80pqv12
30.3430.3730.43ascon128v12
30.6831.3432.58T:aes256gcmv1
33.3133.3233.34T:schwaemm256128v2
43.8343.8443.94T:schwaemm192192v2
45.5246.0846.11T:xoodyakround3
47.4847.5848.26T:schwaemm128128v2
47.8847.9048.27T:schwaemm256256v2
50.3550.3850.39T:giftcofb128v1
80.2580.2680.34T:tinyjambu128v2
80.7681.1681.55T:isapa128av20
90.6390.7190.87T:romulusn
96.7796.8997.15T:tinyjambu192v2
102.57103.41103.70T:tinyjambu256v2
103.86104.33104.86T:isapa128v20
152.72152.94153.40T:romulusm
210.02210.22210.75romulusn
213.49213.78214.34T:isapk128av20
282.75283.95285.13T:isapk128v20
319.22319.36319.57T:elephant200v2
388.36389.94390.41romulusm
433.08434.12435.34T:isapxv20
831.38832.16833.93T!!!romulust
18191.6318194.4918207.52T:elephant176v2
19881.9719948.0619987.92T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
15.7215.7615.81ascon128abi32v12
20.3120.3120.32ascon128av12
24.3724.3824.42ascon128bi32v12
25.0725.5326.72T:aes128gcmv1
30.2330.2530.32ascon80pqv12
30.4930.5130.59ascon128v12
31.0832.2733.17T:aes256gcmv1
33.3133.3233.33T:schwaemm256128v2
43.4343.7144.04T:xoodyakround3
43.8243.8443.87T:schwaemm192192v2
46.8246.8346.92T:schwaemm128128v2
48.0348.0848.21T:schwaemm256256v2
50.4950.5250.75T:giftcofb128v1
77.0077.0077.08T:tinyjambu128v2
80.9181.3181.72T:isapa128av20
90.7291.7991.91T:romulusn
97.7698.0598.12T:tinyjambu192v2
103.81104.27104.91T:isapa128v20
109.00109.01109.04T:tinyjambu256v2
208.20208.63209.18T:romulusm
209.71209.89210.64romulusn
213.57213.78214.39T:isapk128av20
283.16284.00284.27T:isapk128v20
319.38319.53319.86T:elephant200v2
389.22389.69390.29romulusm
432.56435.20436.87T:isapxv20
833.20834.08834.61T!!!romulust
18194.0418196.3418200.08T:elephant176v2
19886.4919913.1619933.26T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
15.7315.7515.79ascon128abi32v12
20.3120.3120.33ascon128av12
24.3724.3824.39ascon128bi32v12
24.9425.3825.90T:aes128gcmv1
30.2330.2730.34ascon80pqv12
30.4830.5130.60ascon128v12
30.8931.5132.14T:aes256gcmv1
33.3033.3133.35T:schwaemm256128v2
43.6743.7544.26T:xoodyakround3
43.8243.8343.88T:schwaemm192192v2
46.8346.8446.93T:schwaemm128128v2
48.0348.1148.14T:schwaemm256256v2
50.4650.5150.54T:giftcofb128v1
51.5751.9452.46T:isapa128v20
51.7152.0052.44T:isapa128av20
77.0077.0277.16T:tinyjambu128v2
90.7390.9891.85T:romulusn
97.7597.7898.07T:tinyjambu192v2
109.00109.01109.02T:tinyjambu256v2
143.68143.77143.92T:isapk128av20
176.79176.99178.05T:isapk128v20
208.02208.16208.35T:isapxv20
208.11208.53209.09T:romulusm
209.75209.89210.72romulusn
265.67265.98266.57T!!!romulust
319.36319.50319.82T:elephant200v2
389.29389.67390.26romulusm
18192.6618193.1518195.85T:elephant176v2
19906.5719936.7119988.93T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
15.7515.7715.79ascon128abi32v12
16.8817.3517.83T:aes128gcmv1
19.8920.1520.61T:aes256gcmv1
20.2020.2120.27ascon128av12
23.8023.8223.85ascon128bi32v12
27.9728.0128.21ascon80pqv12
28.2428.2628.31ascon128v12
33.3033.3133.35T:schwaemm256128v2
34.2134.2434.50T:xoodyakround3
43.6643.6743.70T:schwaemm192192v2
47.3847.5148.13T:schwaemm128128v2
47.7447.7747.79T:schwaemm256256v2
50.5850.6050.79T:giftcofb128v1
65.7365.7665.78T:tinyjambu128v2
66.3966.6467.04T:isapa128av20
75.5075.5175.59T:tinyjambu192v2
77.5977.7778.33T:tinyjambu256v2
78.0378.2978.61T:isapa128v20
80.5680.6080.70T:romulusn
108.40108.64108.87T:romulusm
177.19177.30177.80T:isapk128av20
194.14194.44194.65romulusn
229.66230.17230.46T:isapk128v20
240.51240.56240.67T:elephant200v2
283.09283.58283.74romulusm
321.35322.17322.83T:isapxv20
549.49550.07552.00T!!!romulust
13592.5613594.0313596.33T:elephant176v2
14911.1814929.0414934.45T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
15.6515.7115.79ascon128abi32v12
16.7817.3217.68T:aes128gcmv1
20.1620.1820.27ascon128av12
19.4420.2820.62T:aes256gcmv1
23.8723.9123.95ascon128bi32v12
28.1428.2028.35ascon80pqv12
28.3228.3828.47ascon128v12
33.3133.3233.33T:schwaemm256128v2
33.4233.4533.50T:xoodyakround3
43.6643.6743.72T:schwaemm192192v2
46.6746.7146.79T:schwaemm128128v2
47.8347.8547.95T:schwaemm256256v2
50.6250.6550.94T:giftcofb128v1
64.2464.2764.32T:tinyjambu128v2
66.4166.5566.85T:isapa128av20
76.6776.7176.86T:tinyjambu192v2
78.0078.2878.62T:isapa128v20
79.6279.8280.96T:tinyjambu256v2
80.3080.3280.36T:romulusn
136.20136.42136.66T:romulusm
177.29177.37177.83T:isapk128av20
194.93195.19195.65romulusn
229.64230.08230.62T:isapk128v20
240.55240.66240.75T:elephant200v2
284.22284.65285.05romulusm
321.38322.47323.10T:isapxv20
549.24549.87550.20T!!!romulust
13594.1713595.9713598.79T:elephant176v2
14909.9114924.8014938.08T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
15.6915.7215.84ascon128abi32v12
16.8117.1917.35T:aes128gcmv1
20.1720.1720.19ascon128av12
20.0720.3321.04T:aes256gcmv1
23.9023.9123.97ascon128bi32v12
28.1728.2128.40ascon80pqv12
28.3628.3928.46ascon128v12
33.3033.3233.34T:schwaemm256128v2
33.5733.6033.77T:xoodyakround3
43.6643.6743.77T:schwaemm192192v2
46.6646.7348.15T:schwaemm128128v2
47.8347.8647.96T:schwaemm256256v2
50.6250.6850.87T:giftcofb128v1
51.7351.9352.19T:isapa128av20
51.8552.0352.36T:isapa128v20
64.2364.2564.27T:tinyjambu128v2
76.6976.8076.90T:tinyjambu192v2
79.6379.6579.75T:tinyjambu256v2
80.3180.3380.46T:romulusn
136.09136.35136.74T:romulusm
142.30142.38142.69T:isapk128av20
176.33176.75177.22T:isapk128v20
194.99195.17195.41romulusn
208.07208.15208.24T:isapxv20
240.55240.66240.68T:elephant200v2
265.28265.92266.22T!!!romulust
284.10284.66285.10romulusm
13593.1313595.8813601.65T:elephant176v2
14911.6914923.5914933.80T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
8.618.999.44T:aes256gcmv1
8.659.089.46T:aes128gcmv1
15.6715.6915.75ascon128abi32v12
20.0320.0320.04ascon128av12
22.9022.9222.94T:xoodyakround3
23.4923.5023.54ascon128bi32v12
25.9626.0026.06ascon80pqv12
26.0926.1326.14ascon128v12
33.2933.3133.32T:schwaemm256128v2
43.4843.5043.53T:schwaemm192192v2
47.6047.6847.75T:schwaemm256256v2
47.2447.9748.10T:schwaemm128128v2
50.7450.7651.22T:giftcofb128v1
51.4951.5151.55T:tinyjambu128v2
51.8851.9051.97T:tinyjambu256v2
51.8352.0952.49T:isapa128av20
51.8252.2252.66T:isapa128v20
54.2454.2654.38T:tinyjambu192v2
64.1164.2464.47T:romulusm
69.9769.9970.05T:romulusn
140.74140.97141.42T:isapk128av20
162.51162.62162.83T:elephant200v2
175.79176.10176.54T:isapk128v20
178.22178.32178.52romulusm
178.15178.38179.44romulusn
208.12208.41208.63T:isapxv20
265.57265.95266.75T!!!romulust
8993.328993.698999.53T:elephant176v2
9936.289946.869951.67T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
8.24?8.87?9.39?T:aes256gcmv1
8.599.019.25T:aes128gcmv1
15.6415.6615.67ascon128abi32v12
20.0220.0320.03ascon128av12
22.9022.9222.94T:xoodyakround3
23.4323.4623.47ascon128bi32v12
26.0726.1326.19ascon80pqv12
26.2026.2626.35ascon128v12
33.3033.3133.35T:schwaemm256128v2
43.4943.5043.53T:schwaemm192192v2
46.4846.6147.95T:schwaemm128128v2
47.6147.6647.72T:schwaemm256256v2
50.7750.7951.23T:giftcofb128v1
51.5051.5051.50T:tinyjambu128v2
51.8352.0452.56T:isapa128av20
51.7652.0852.51T:isapa128v20
52.7552.7652.77T:tinyjambu256v2
55.6155.6355.67T:tinyjambu192v2
64.0564.1864.40T:romulusm
69.9569.9870.02T:romulusn
140.77140.91141.40T:isapk128av20
162.59162.62162.81T:elephant200v2
175.65176.06176.66T:isapk128v20
179.47179.61180.64romulusm
179.96180.39180.75romulusn
207.90208.14208.36T:isapxv20
265.33265.72266.69T!!!romulust
8992.898993.448999.04T:elephant176v2
9936.509943.379945.73T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
8.699.029.20T:aes128gcmv1
8.599.039.45T:aes256gcmv1
15.6215.6415.67ascon128abi32v12
20.0320.0320.05ascon128av12
22.9022.9423.01T:xoodyakround3
23.4323.4423.45ascon128bi32v12
26.1026.1326.21ascon80pqv12
26.2326.3026.92ascon128v12
33.3033.3133.33T:schwaemm256128v2
43.5043.5443.66T:schwaemm192192v2
46.4946.5347.24T:schwaemm128128v2
47.5947.6447.72T:schwaemm256256v2
50.7550.7750.80T:giftcofb128v1
51.5051.5051.52T:tinyjambu128v2
51.6452.0652.57T:isapa128v20
51.7652.0652.50T:isapa128av20
52.7552.7752.87T:tinyjambu256v2
55.6255.6455.72T:tinyjambu192v2
64.0664.1864.46T:romulusm
69.9569.9870.01T:romulusn
140.74140.93141.37T:isapk128av20
162.59162.64162.90T:elephant200v2
175.55175.96177.04T:isapk128v20
179.43179.58180.27romulusm
179.84180.03180.87romulusn
208.17208.26208.39T:isapxv20
265.45265.70266.58T!!!romulust
8993.018993.398994.15T:elephant176v2
9935.859942.939945.77T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
16.2016.2116.31ascon128abi32v12
20.5720.6421.26T:aes128gcmv1
20.7320.7320.86ascon128av12
23.7624.0024.67T:aes256gcmv1
24.2324.2324.25ascon128bi32v12
28.4728.4728.56ascon80pqv12
28.7028.7128.79ascon128v12
34.3334.3434.38T:schwaemm256128v2
34.6534.6634.71T:xoodyakround3
44.6844.6944.76T:schwaemm192192v2
48.0248.0348.09T:schwaemm128128v2
49.1149.1249.21T:schwaemm256256v2
51.2251.2351.24T:giftcofb128v1
66.3566.4366.49T:tinyjambu128v2
71.0371.1871.39T:isapa128av20
76.2376.2676.43T:tinyjambu192v2
77.8577.8678.30T:tinyjambu256v2
81.6781.6881.74T:romulusn
109.62109.72109.98T:romulusm
110.44110.56110.87T:isapa128v20
196.29196.34196.57romulusn
202.37202.42202.74T:isapk128av20
245.61245.71245.78T:elephant200v2
285.43285.72286.15romulusm
403.60404.12404.37T:isapk128v20
503.37504.25504.80T:isapxv20
558.08558.37558.83T!!!romulust
13694.5913695.8213698.68T:elephant176v2
15075.6415093.8215101.99T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
16.1816.1816.30ascon128abi32v12
20.5120.7221.16T:aes128gcmv1
20.7420.7420.76ascon128av12
23.7324.0124.39T:aes256gcmv1
24.3624.3724.46ascon128bi32v12
28.6828.6928.87ascon80pqv12
28.8528.8728.93ascon128v12
33.6233.6333.69T:xoodyakround3
34.3334.3434.39T:schwaemm256128v2
44.6844.6844.71T:schwaemm192192v2
47.3647.3747.48T:schwaemm128128v2
49.1749.2049.25T:schwaemm256256v2
51.2951.3151.55T:giftcofb128v1
64.8564.8664.87T:tinyjambu128v2
71.0471.0771.36T:isapa128av20
77.4477.4877.61T:tinyjambu192v2
80.3080.3180.53T:tinyjambu256v2
81.4981.6882.21T:romulusn
110.54110.71110.82T:isapa128v20
137.32137.64138.52T:romulusm
197.09197.22197.86romulusn
202.32202.77203.18T:isapk128av20
245.70245.76245.96T:elephant200v2
287.54288.09288.81romulusm
403.56403.88404.35T:isapk128v20
502.16503.84504.43T:isapxv20
558.15558.40559.04T!!!romulust
13696.0913696.6413700.55T:elephant176v2
15084.7115091.0815101.65T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
16.1716.1816.19ascon128abi32v12
20.7420.7420.77ascon128av12
20.5920.8021.02T:aes128gcmv1
23.8924.0524.84T:aes256gcmv1
24.3624.3624.43ascon128bi32v12
28.6928.7328.88ascon80pqv12
28.8528.8628.90ascon128v12
33.7633.7633.83T:xoodyakround3
34.3334.3434.35T:schwaemm256128v2
44.6844.7044.78T:schwaemm192192v2
47.3647.3748.04T:schwaemm128128v2
49.1749.1949.20T:schwaemm256256v2
51.3151.5051.59T:giftcofb128v1
54.6354.7154.94T:isapa128av20
64.8664.8664.88T:tinyjambu128v2
68.6068.8168.88T:isapa128v20
77.4577.4777.64T:tinyjambu192v2
80.3080.3380.43T:tinyjambu256v2
81.4781.5081.63T:romulusn
137.31137.50137.89T:romulusm
158.24158.39158.81T:isapk128av20
197.13197.30197.65romulusn
245.75245.81245.95T:elephant200v2
267.39267.52268.16T:isapk128v20
273.05273.16273.80T!!!romulust
287.67287.97288.84romulusm
302.28302.33302.41T:isapxv20
13696.3513696.7913700.75T:elephant176v2
15078.0915093.1315102.29T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
26.0226.0927.04ascon128abi32v12
32.7032.7032.92ascon128av12
33.7333.8934.44ascon128bi32v12
38.8438.9239.70ascon128v12
39.0039.0539.92ascon80pqv12
52.1452.2152.32T:xoodyakround3
57.7757.7757.84T:schwaemm256128v2
62.7562.7563.13T:schwaemm128128v2
66.1466.1766.80T:giftcofb128v1
74.2474.2774.30T:schwaemm192192v2
79.3280.1280.34T:schwaemm256256v2
80.3880.4380.56T:tinyjambu128v2
93.0193.0493.23T:tinyjambu192v2
92.9193.2194.36T:tinyjambu256v2
97.4698.33104.23T:aes128gcmv1
104.25105.86111.06T:aes256gcmv1
106.84107.02107.25T:romulusn
134.54135.00136.55T:romulusm
173.70174.44177.48T:isapa128av20
244.52245.07247.75romulusn
334.12334.57337.77romulusm
350.69350.81351.40T:elephant200v2
742.00743.23743.62T:isapk128av20
751.00751.98752.95T!!!romulust
852.65853.52858.26T:isapa128v20
4351.724353.704362.82T:isapk128v20
4661.864663.874667.88T:isapxv20
17060.2517061.0817075.06T:elephant176v2
20214.5520255.2020280.02T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
26.8826.9528.12ascon128abi32v12
33.5933.5933.75ascon128av12
34.7034.8435.16ascon128bi32v12
39.5939.5940.57ascon128v12
40.0140.0941.12ascon80pqv12
51.5551.5952.10T:xoodyakround3
57.7057.7057.79T:schwaemm256128v2
62.5462.7063.05T:schwaemm128128v2
66.2066.3266.70T:giftcofb128v1
74.5974.6474.67T:schwaemm192192v2
78.7678.7878.80T:tinyjambu128v2
79.1879.3280.16T:schwaemm256256v2
94.8094.9595.66T:tinyjambu192v2
95.6295.6695.77T:tinyjambu256v2
97.4599.29103.23T:aes128gcmv1
103.44104.21109.60T:aes256gcmv1
107.78107.87108.09T:romulusn
162.14162.40163.69T:romulusm
173.72174.71176.67T:isapa128av20
246.14246.59247.38romulusn
351.07351.18352.05T:elephant200v2
355.42356.16358.35romulusm
742.47743.66744.35T:isapk128av20
751.58752.28753.87T!!!romulust
852.37853.70859.11T:isapa128v20
4351.614353.224357.49T:isapk128v20
4665.554666.624669.41T:isapxv20
17059.3117059.7117063.08T:elephant176v2
20187.7420212.0120241.77T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
26.8827.0527.30ascon128abi32v12
33.6233.6233.66ascon128av12
34.7034.7034.84ascon128bi32v12
39.5839.6639.91ascon128v12
39.8739.9440.10ascon80pqv12
51.7751.7851.98T:xoodyakround3
57.7157.7157.77T:schwaemm256128v2
62.7062.7063.05T:schwaemm128128v2
66.2066.3066.50T:giftcofb128v1
74.5574.5974.65T:schwaemm192192v2
78.7678.7778.80T:tinyjambu128v2
79.2980.1380.22T:schwaemm256256v2
94.8094.8695.01T:tinyjambu192v2
95.6995.7896.97T:tinyjambu256v2
97.9899.22103.53T:aes128gcmv1
103.46104.68105.98T:aes256gcmv1
107.45107.73108.04T:romulusn
115.87117.48119.67T:isapa128av20
161.56161.88162.53T:romulusm
246.57247.21248.27romulusn
350.98351.12351.26T:elephant200v2
355.48355.77356.75romulusm
446.98447.73448.87T!!!romulust
448.81449.84455.87T:isapa128v20
493.63494.34495.24T:isapk128av20
2321.882323.212326.45T:isapk128v20
2426.232427.072429.77T:isapxv20
17059.8417060.4817061.26T:elephant176v2
20188.1220209.3220220.23T:elephant160v2