VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: armeabi; Cortex-A17 (410fc0d1); 2014 Rockchip RK3288; 4 x 1800MHz; tinker, supercop-20241022

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
15.8215.8916.06ascon128abi32v12
20.3720.3820.39ascon128av12
24.1024.1424.22ascon128bi32v12
24.9925.5526.84T:aes128gcmv1
30.2230.2530.26ascon80pqv12
30.3430.3730.43ascon128v12
30.6831.3432.58T:aes256gcmv1
33.3133.3233.34T:schwaemm256128v2
43.8343.8443.94T:schwaemm192192v2
45.5246.0846.11T:xoodyakround3
47.4847.5848.26T:schwaemm128128v2
47.8847.9048.27T:schwaemm256256v2
50.3550.3850.39T:giftcofb128v1
80.2580.2680.34T:tinyjambu128v2
80.7681.1681.55T:isapa128av20
90.6390.7190.87T:romulusn
96.7796.8997.15T:tinyjambu192v2
102.57103.41103.70T:tinyjambu256v2
103.86104.33104.86T:isapa128v20
152.72152.94153.40T:romulusm
210.02210.22210.75romulusn
213.49213.78214.34T:isapk128av20
282.75283.95285.13T:isapk128v20
319.22319.36319.57T:elephant200v2
388.36389.94390.41romulusm
433.08434.12435.34T:isapxv20
831.38832.16833.93T!!!romulust
18191.6318194.4918207.52T:elephant176v2
19881.9719948.0619987.92T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
15.7215.7615.81ascon128abi32v12
20.3120.3120.32ascon128av12
24.3724.3824.42ascon128bi32v12
25.0725.5326.72T:aes128gcmv1
30.2330.2530.32ascon80pqv12
30.4930.5130.59ascon128v12
31.0832.2733.17T:aes256gcmv1
33.3133.3233.33T:schwaemm256128v2
43.4343.7144.04T:xoodyakround3
43.8243.8443.87T:schwaemm192192v2
46.8246.8346.92T:schwaemm128128v2
48.0348.0848.21T:schwaemm256256v2
50.4950.5250.75T:giftcofb128v1
77.0077.0077.08T:tinyjambu128v2
80.9181.3181.72T:isapa128av20
90.7291.7991.91T:romulusn
97.7698.0598.12T:tinyjambu192v2
103.81104.27104.91T:isapa128v20
109.00109.01109.04T:tinyjambu256v2
208.20208.63209.18T:romulusm
209.71209.89210.64romulusn
213.57213.78214.39T:isapk128av20
283.16284.00284.27T:isapk128v20
319.38319.53319.86T:elephant200v2
389.22389.69390.29romulusm
432.56435.20436.87T:isapxv20
833.20834.08834.61T!!!romulust
18194.0418196.3418200.08T:elephant176v2
19886.4919913.1619933.26T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
15.7315.7515.79ascon128abi32v12
20.3120.3120.33ascon128av12
24.3724.3824.39ascon128bi32v12
24.9425.3825.90T:aes128gcmv1
30.2330.2730.34ascon80pqv12
30.4830.5130.60ascon128v12
30.8931.5132.14T:aes256gcmv1
33.3033.3133.35T:schwaemm256128v2
43.6743.7544.26T:xoodyakround3
43.8243.8343.88T:schwaemm192192v2
46.8346.8446.93T:schwaemm128128v2
48.0348.1148.14T:schwaemm256256v2
50.4650.5150.54T:giftcofb128v1
51.5751.9452.46T:isapa128v20
51.7152.0052.44T:isapa128av20
77.0077.0277.16T:tinyjambu128v2
90.7390.9891.85T:romulusn
97.7597.7898.07T:tinyjambu192v2
109.00109.01109.02T:tinyjambu256v2
143.68143.77143.92T:isapk128av20
176.79176.99178.05T:isapk128v20
208.02208.16208.35T:isapxv20
208.11208.53209.09T:romulusm
209.75209.89210.72romulusn
265.67265.98266.57T!!!romulust
319.36319.50319.82T:elephant200v2
389.29389.67390.26romulusm
18192.6618193.1518195.85T:elephant176v2
19906.5719936.7119988.93T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
15.7515.7715.79ascon128abi32v12
16.8817.3517.83T:aes128gcmv1
19.8920.1520.61T:aes256gcmv1
20.2020.2120.27ascon128av12
23.8023.8223.85ascon128bi32v12
27.9728.0128.21ascon80pqv12
28.2428.2628.31ascon128v12
33.3033.3133.35T:schwaemm256128v2
34.2134.2434.50T:xoodyakround3
43.6643.6743.70T:schwaemm192192v2
47.3847.5148.13T:schwaemm128128v2
47.7447.7747.79T:schwaemm256256v2
50.5850.6050.79T:giftcofb128v1
65.7365.7665.78T:tinyjambu128v2
66.3966.6467.04T:isapa128av20
75.5075.5175.59T:tinyjambu192v2
77.5977.7778.33T:tinyjambu256v2
78.0378.2978.61T:isapa128v20
80.5680.6080.70T:romulusn
108.40108.64108.87T:romulusm
177.19177.30177.80T:isapk128av20
194.14194.44194.65romulusn
229.66230.17230.46T:isapk128v20
240.51240.56240.67T:elephant200v2
283.09283.58283.74romulusm
321.35322.17322.83T:isapxv20
549.49550.07552.00T!!!romulust
13592.5613594.0313596.33T:elephant176v2
14911.1814929.0414934.45T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
15.6515.7115.79ascon128abi32v12
16.7817.3217.68T:aes128gcmv1
20.1620.1820.27ascon128av12
19.4420.2820.62T:aes256gcmv1
23.8723.9123.95ascon128bi32v12
28.1428.2028.35ascon80pqv12
28.3228.3828.47ascon128v12
33.3133.3233.33T:schwaemm256128v2
33.4233.4533.50T:xoodyakround3
43.6643.6743.72T:schwaemm192192v2
46.6746.7146.79T:schwaemm128128v2
47.8347.8547.95T:schwaemm256256v2
50.6250.6550.94T:giftcofb128v1
64.2464.2764.32T:tinyjambu128v2
66.4166.5566.85T:isapa128av20
76.6776.7176.86T:tinyjambu192v2
78.0078.2878.62T:isapa128v20
79.6279.8280.96T:tinyjambu256v2
80.3080.3280.36T:romulusn
136.20136.42136.66T:romulusm
177.29177.37177.83T:isapk128av20
194.93195.19195.65romulusn
229.64230.08230.62T:isapk128v20
240.55240.66240.75T:elephant200v2
284.22284.65285.05romulusm
321.38322.47323.10T:isapxv20
549.24549.87550.20T!!!romulust
13594.1713595.9713598.79T:elephant176v2
14909.9114924.8014938.08T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
15.6915.7215.84ascon128abi32v12
16.8117.1917.35T:aes128gcmv1
20.1720.1720.19ascon128av12
20.0720.3321.04T:aes256gcmv1
23.9023.9123.97ascon128bi32v12
28.1728.2128.40ascon80pqv12
28.3628.3928.46ascon128v12
33.3033.3233.34T:schwaemm256128v2
33.5733.6033.77T:xoodyakround3
43.6643.6743.77T:schwaemm192192v2
46.6646.7348.15T:schwaemm128128v2
47.8347.8647.96T:schwaemm256256v2
50.6250.6850.87T:giftcofb128v1
51.7351.9352.19T:isapa128av20
51.8552.0352.36T:isapa128v20
64.2364.2564.27T:tinyjambu128v2
76.6976.8076.90T:tinyjambu192v2
79.6379.6579.75T:tinyjambu256v2
80.3180.3380.46T:romulusn
136.09136.35136.74T:romulusm
142.30142.38142.69T:isapk128av20
176.33176.75177.22T:isapk128v20
194.99195.17195.41romulusn
208.07208.15208.24T:isapxv20
240.55240.66240.68T:elephant200v2
265.28265.92266.22T!!!romulust
284.10284.66285.10romulusm
13593.1313595.8813601.65T:elephant176v2
14911.6914923.5914933.80T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
8.618.999.44T:aes256gcmv1
8.659.089.46T:aes128gcmv1
15.6715.6915.75ascon128abi32v12
20.0320.0320.04ascon128av12
22.9022.9222.94T:xoodyakround3
23.4923.5023.54ascon128bi32v12
25.9626.0026.06ascon80pqv12
26.0926.1326.14ascon128v12
33.2933.3133.32T:schwaemm256128v2
43.4843.5043.53T:schwaemm192192v2
47.6047.6847.75T:schwaemm256256v2
47.2447.9748.10T:schwaemm128128v2
50.7450.7651.22T:giftcofb128v1
51.4951.5151.55T:tinyjambu128v2
51.8851.9051.97T:tinyjambu256v2
51.8352.0952.49T:isapa128av20
51.8252.2252.66T:isapa128v20
54.2454.2654.38T:tinyjambu192v2
64.1164.2464.47T:romulusm
69.9769.9970.05T:romulusn
140.74140.97141.42T:isapk128av20
162.51162.62162.83T:elephant200v2
175.79176.10176.54T:isapk128v20
178.22178.32178.52romulusm
178.15178.38179.44romulusn
208.12208.41208.63T:isapxv20
265.57265.95266.75T!!!romulust
8993.328993.698999.53T:elephant176v2
9936.289946.869951.67T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
8.24?8.87?9.39?T:aes256gcmv1
8.599.019.25T:aes128gcmv1
15.6415.6615.67ascon128abi32v12
20.0220.0320.03ascon128av12
22.9022.9222.94T:xoodyakround3
23.4323.4623.47ascon128bi32v12
26.0726.1326.19ascon80pqv12
26.2026.2626.35ascon128v12
33.3033.3133.35T:schwaemm256128v2
43.4943.5043.53T:schwaemm192192v2
46.4846.6147.95T:schwaemm128128v2
47.6147.6647.72T:schwaemm256256v2
50.7750.7951.23T:giftcofb128v1
51.5051.5051.50T:tinyjambu128v2
51.8352.0452.56T:isapa128av20
51.7652.0852.51T:isapa128v20
52.7552.7652.77T:tinyjambu256v2
55.6155.6355.67T:tinyjambu192v2
64.0564.1864.40T:romulusm
69.9569.9870.02T:romulusn
140.77140.91141.40T:isapk128av20
162.59162.62162.81T:elephant200v2
175.65176.06176.66T:isapk128v20
179.47179.61180.64romulusm
179.96180.39180.75romulusn
207.90208.14208.36T:isapxv20
265.33265.72266.69T!!!romulust
8992.898993.448999.04T:elephant176v2
9936.509943.379945.73T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
8.699.029.20T:aes128gcmv1
8.599.039.45T:aes256gcmv1
15.6215.6415.67ascon128abi32v12
20.0320.0320.05ascon128av12
22.9022.9423.01T:xoodyakround3
23.4323.4423.45ascon128bi32v12
26.1026.1326.21ascon80pqv12
26.2326.3026.92ascon128v12
33.3033.3133.33T:schwaemm256128v2
43.5043.5443.66T:schwaemm192192v2
46.4946.5347.24T:schwaemm128128v2
47.5947.6447.72T:schwaemm256256v2
50.7550.7750.80T:giftcofb128v1
51.5051.5051.52T:tinyjambu128v2
51.6452.0652.57T:isapa128v20
51.7652.0652.50T:isapa128av20
52.7552.7752.87T:tinyjambu256v2
55.6255.6455.72T:tinyjambu192v2
64.0664.1864.46T:romulusm
69.9569.9870.01T:romulusn
140.74140.93141.37T:isapk128av20
162.59162.64162.90T:elephant200v2
175.55175.96177.04T:isapk128v20
179.43179.58180.27romulusm
179.84180.03180.87romulusn
208.17208.26208.39T:isapxv20
265.45265.70266.58T!!!romulust
8993.018993.398994.15T:elephant176v2
9935.859942.939945.77T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
16.2016.2116.31ascon128abi32v12
20.5720.6421.26T:aes128gcmv1
20.7320.7320.86ascon128av12
23.7624.0024.67T:aes256gcmv1
24.2324.2324.25ascon128bi32v12
28.4728.4728.56ascon80pqv12
28.7028.7128.79ascon128v12
34.3334.3434.38T:schwaemm256128v2
34.6534.6634.71T:xoodyakround3
44.6844.6944.76T:schwaemm192192v2
48.0248.0348.09T:schwaemm128128v2
49.1149.1249.21T:schwaemm256256v2
51.2251.2351.24T:giftcofb128v1
66.3566.4366.49T:tinyjambu128v2
71.0371.1871.39T:isapa128av20
76.2376.2676.43T:tinyjambu192v2
77.8577.8678.30T:tinyjambu256v2
81.6781.6881.74T:romulusn
109.62109.72109.98T:romulusm
110.44110.56110.87T:isapa128v20
196.29196.34196.57romulusn
202.37202.42202.74T:isapk128av20
245.61245.71245.78T:elephant200v2
285.43285.72286.15romulusm
403.60404.12404.37T:isapk128v20
503.37504.25504.80T:isapxv20
558.08558.37558.83T!!!romulust
13694.5913695.8213698.68T:elephant176v2
15075.6415093.8215101.99T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
16.1816.1816.30ascon128abi32v12
20.5120.7221.16T:aes128gcmv1
20.7420.7420.76ascon128av12
23.7324.0124.39T:aes256gcmv1
24.3624.3724.46ascon128bi32v12
28.6828.6928.87ascon80pqv12
28.8528.8728.93ascon128v12
33.6233.6333.69T:xoodyakround3
34.3334.3434.39T:schwaemm256128v2
44.6844.6844.71T:schwaemm192192v2
47.3647.3747.48T:schwaemm128128v2
49.1749.2049.25T:schwaemm256256v2
51.2951.3151.55T:giftcofb128v1
64.8564.8664.87T:tinyjambu128v2
71.0471.0771.36T:isapa128av20
77.4477.4877.61T:tinyjambu192v2
80.3080.3180.53T:tinyjambu256v2
81.4981.6882.21T:romulusn
110.54110.71110.82T:isapa128v20
137.32137.64138.52T:romulusm
197.09197.22197.86romulusn
202.32202.77203.18T:isapk128av20
245.70245.76245.96T:elephant200v2
287.54288.09288.81romulusm
403.56403.88404.35T:isapk128v20
502.16503.84504.43T:isapxv20
558.15558.40559.04T!!!romulust
13696.0913696.6413700.55T:elephant176v2
15084.7115091.0815101.65T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
16.1716.1816.19ascon128abi32v12
20.7420.7420.77ascon128av12
20.5920.8021.02T:aes128gcmv1
23.8924.0524.84T:aes256gcmv1
24.3624.3624.43ascon128bi32v12
28.6928.7328.88ascon80pqv12
28.8528.8628.90ascon128v12
33.7633.7633.83T:xoodyakround3
34.3334.3434.35T:schwaemm256128v2
44.6844.7044.78T:schwaemm192192v2
47.3647.3748.04T:schwaemm128128v2
49.1749.1949.20T:schwaemm256256v2
51.3151.5051.59T:giftcofb128v1
54.6354.7154.94T:isapa128av20
64.8664.8664.88T:tinyjambu128v2
68.6068.8168.88T:isapa128v20
77.4577.4777.64T:tinyjambu192v2
80.3080.3380.43T:tinyjambu256v2
81.4781.5081.63T:romulusn
137.31137.50137.89T:romulusm
158.24158.39158.81T:isapk128av20
197.13197.30197.65romulusn
245.75245.81245.95T:elephant200v2
267.39267.52268.16T:isapk128v20
273.05273.16273.80T!!!romulust
287.67287.97288.84romulusm
302.28302.33302.41T:isapxv20
13696.3513696.7913700.75T:elephant176v2
15078.0915093.1315102.29T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
26.0226.0927.04ascon128abi32v12
32.7032.7032.92ascon128av12
33.7333.8934.44ascon128bi32v12
38.8438.9239.70ascon128v12
39.0039.0539.92ascon80pqv12
52.1452.2152.32T:xoodyakround3
57.7757.7757.84T:schwaemm256128v2
62.7562.7563.13T:schwaemm128128v2
66.1466.1766.80T:giftcofb128v1
74.2474.2774.30T:schwaemm192192v2
79.3280.1280.34T:schwaemm256256v2
80.3880.4380.56T:tinyjambu128v2
93.0193.0493.23T:tinyjambu192v2
92.9193.2194.36T:tinyjambu256v2
97.4698.33104.23T:aes128gcmv1
104.25105.86111.06T:aes256gcmv1
106.84107.02107.25T:romulusn
134.54135.00136.55T:romulusm
173.70174.44177.48T:isapa128av20
244.52245.07247.75romulusn
334.12334.57337.77romulusm
350.69350.81351.40T:elephant200v2
742.00743.23743.62T:isapk128av20
751.00751.98752.95T!!!romulust
852.65853.52858.26T:isapa128v20
4351.724353.704362.82T:isapk128v20
4661.864663.874667.88T:isapxv20
17060.2517061.0817075.06T:elephant176v2
20214.5520255.2020280.02T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
26.8826.9528.12ascon128abi32v12
33.5933.5933.75ascon128av12
34.7034.8435.16ascon128bi32v12
39.5939.5940.57ascon128v12
40.0140.0941.12ascon80pqv12
51.5551.5952.10T:xoodyakround3
57.7057.7057.79T:schwaemm256128v2
62.5462.7063.05T:schwaemm128128v2
66.2066.3266.70T:giftcofb128v1
74.5974.6474.67T:schwaemm192192v2
78.7678.7878.80T:tinyjambu128v2
79.1879.3280.16T:schwaemm256256v2
94.8094.9595.66T:tinyjambu192v2
95.6295.6695.77T:tinyjambu256v2
97.4599.29103.23T:aes128gcmv1
103.44104.21109.60T:aes256gcmv1
107.78107.87108.09T:romulusn
162.14162.40163.69T:romulusm
173.72174.71176.67T:isapa128av20
246.14246.59247.38romulusn
351.07351.18352.05T:elephant200v2
355.42356.16358.35romulusm
742.47743.66744.35T:isapk128av20
751.58752.28753.87T!!!romulust
852.37853.70859.11T:isapa128v20
4351.614353.224357.49T:isapk128v20
4665.554666.624669.41T:isapxv20
17059.3117059.7117063.08T:elephant176v2
20187.7420212.0120241.77T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
26.8827.0527.30ascon128abi32v12
33.6233.6233.66ascon128av12
34.7034.7034.84ascon128bi32v12
39.5839.6639.91ascon128v12
39.8739.9440.10ascon80pqv12
51.7751.7851.98T:xoodyakround3
57.7157.7157.77T:schwaemm256128v2
62.7062.7063.05T:schwaemm128128v2
66.2066.3066.50T:giftcofb128v1
74.5574.5974.65T:schwaemm192192v2
78.7678.7778.80T:tinyjambu128v2
79.2980.1380.22T:schwaemm256256v2
94.8094.8695.01T:tinyjambu192v2
95.6995.7896.97T:tinyjambu256v2
97.9899.22103.53T:aes128gcmv1
103.46104.68105.98T:aes256gcmv1
107.45107.73108.04T:romulusn
115.87117.48119.67T:isapa128av20
161.56161.88162.53T:romulusm
246.57247.21248.27romulusn
350.98351.12351.26T:elephant200v2
355.48355.77356.75romulusm
446.98447.73448.87T!!!romulust
448.81449.84455.87T:isapa128v20
493.63494.34495.24T:isapk128av20
2321.882323.212326.45T:isapk128v20
2426.232427.072429.77T:isapxv20
17059.8417060.4817061.26T:elephant176v2
20188.1220209.3220220.23T:elephant160v2