VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information: Introduction eBASH eBASC eBAEAD eBATS SUPERCOP XBX Computers
How to submit new software: Tips hash stream aead dh kem encrypt sign
List of primitives measured: lwc sha3 hash stream lwc caesar aead dh kem encrypt sign
Measurements indexed by machine: lwc sha3 hash stream lwc caesar aead dh kem encrypt sign
List of subroutines: verify decode encode sort core hashblocks scalarmult

List of NISTLWC cipher candidates measured

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt from the full list of authenticated ciphers covered by SUPERCOP; the excerpt contains round-2 candidates in NISTLWC (plus older versions of the same ciphers for comparison). The page then lists implementations of these ciphers.

There is a separate page that lists machines and, for each machine, the measurements of these ciphers.

Which authenticated ciphers are measured? (NISTLWC excerpt)

PrimitiveDescriptionDesigners
aceae128v1
ascon128av12 Christoph Dobraunig
Maria Eichlseder
Florian Mendel
Martin Schläffer
ascon128v12 Christoph Dobraunig
Maria Eichlseder
Florian Mendel
Martin Schläffer
ascon80pqv12
comet128aesv1
comet128chamv1
comet64chamv1
comet64speckv1
drygascon128k16 Sebastien Riou
drygascon128k32 Sebastien Riou
drygascon128k56 Sebastien Riou
drygascon256k32 Sebastien Riou
elephant160v1
elephant176v1
elephant200v1
estatetweaes128v1
estatetwegift128v1
giftcofb128v1
gimli24v1
grain128aead
hyenav1
isapa128av20
isapa128v20
isapk128av20
isapk128v20
knot192
knot256
knot128v1
knot128v2
mixfeed
orangezestv1
oribatida192v11
oribatida256v11
paefforkskinnyb128t192n48v1
paefforkskinnyb128t256n112v1
paefforkskinnyb128t288n104v1
paefforkskinnyb64t192n48v1
photonbeetleaead128rate128v1
photonbeetleaead128rate32v1
pyjamask128aeadv1
pyjamask96aeadv1
romulusm1v1
romulusm2v1
romulusm3v1
romulusn1v1
romulusn2v1
romulusn3v1
saeaes128a120t128v1
saeaes128a120t64v1
saeaes128a64t128v1
saeaes128a64t64v1
saeaes192a120t128v1
saeaes192a64t128v1
saeaes192a64t64v1
saeaes256a120t128v1
saeaes256a64t128v1
saeaes256a64t64v1
saefforkskinnyb128t192n56v1
saefforkskinnyb128t256n120v1
saturninctrcascadev2
schwaemm128128v1
schwaemm192192v1
schwaemm256128v1
schwaemm256256v1
sestatetweaes128v1
skinnyaeadtk296128v1
skinnyaeadtk29664v1
skinnyaeadtk3128128v1
skinnyaeadtk312864v1
skinnyaeadtk396128v1
skinnyaeadtk39664v1
spix128v1
spoc128sliscplight256v1
spoc64sliscplight192v1
spook128mu384v1
spook128mu512v1
spook128su384v1
spook128su512v1
subterraneanv1
sundaegift0v1
sundaegift128v1
sundaegift64v1
sundaegift96v1
tinyjambu128
tinyjambu192
tinyjambu256
twegift64locusaeadv1
twegift64lotusaeadv1
wageae128v1
xoodyakv1 Xoodyak LWC-default AEAD: Cyclist(key, ε, ε); Absorb(nonce); Absorb(associated data); ciphertext = Encrypt(plaintext); tag = Squeeze() Joan Daemen
Seth Hoffert
Michaël Peeters
Gilles Van Assche
Ronny Van Keer

Implementations

PrimitiveImplementationAuthors
aceae128v1ref
ascon128av12avx512 Christoph Dobraunig
Martin Schläffer
ascon128av12bi32 Christoph Dobraunig
Martin Schläffer
ascon128av12bi32_arm Christoph Dobraunig
Martin Schläffer
ascon128av12bi32_lowreg Christoph Dobraunig
Martin Schläffer
ascon128av12bi32_lowsize Christoph Dobraunig
Martin Schläffer
ascon128av12bi8 Christoph Dobraunig
Martin Schläffer
ascon128av12neon Christoph Dobraunig
Martin Schläffer
ascon128av12opt32old Christoph Dobraunig
Martin Schläffer
ascon128av12opt64 Christoph Dobraunig
Martin Schläffer
ascon128av12opt64_lowsize Christoph Dobraunig
Martin Schläffer
ascon128av12opt64old Christoph Dobraunig
Martin Schläffer
ascon128av12opt8 Christoph Dobraunig
Martin Schläffer
ascon128av12ref Christoph Dobraunig
Martin Schläffer
ascon128av12refold Christoph Dobraunig
Martin Schläffer
ascon128v12avx512 Christoph Dobraunig
Martin Schläffer
ascon128v12bi32 Christoph Dobraunig
Martin Schläffer
ascon128v12bi32_arm Christoph Dobraunig
Martin Schläffer
ascon128v12bi32_lowreg Christoph Dobraunig
Martin Schläffer
ascon128v12bi32_lowsize Christoph Dobraunig
Martin Schläffer
ascon128v12bi8 Christoph Dobraunig
Martin Schläffer
ascon128v12neon Christoph Dobraunig
Martin Schläffer
ascon128v12opt32old Christoph Dobraunig
Martin Schläffer
ascon128v12opt64 Christoph Dobraunig
Martin Schläffer
ascon128v12opt64_lowsize Christoph Dobraunig
Martin Schläffer
ascon128v12opt64old Christoph Dobraunig
Martin Schläffer
ascon128v12opt8 Christoph Dobraunig
Martin Schläffer
ascon128v12ref Christoph Dobraunig
Martin Schläffer
ascon128v12refold Christoph Dobraunig
Martin Schläffer
ascon80pqv12bi32 Christoph Dobraunig
Martin Schläffer
ascon80pqv12bi32_arm Christoph Dobraunig
Martin Schläffer
ascon80pqv12bi32_lowreg Christoph Dobraunig
Martin Schläffer
ascon80pqv12bi32_lowsize Christoph Dobraunig
Martin Schläffer
ascon80pqv12bi8 Christoph Dobraunig
Martin Schläffer
ascon80pqv12opt64 Christoph Dobraunig
Martin Schläffer
ascon80pqv12opt64_lowsize Christoph Dobraunig
Martin Schläffer
ascon80pqv12opt8 Christoph Dobraunig
Martin Schläffer
ascon80pqv12ref Christoph Dobraunig
Martin Schläffer
comet128aesv1ref
comet128chamv1ref
comet64chamv1ref
comet64speckv1ref
drygascon128k16le32
drygascon128k16opt_arm_cortex-m Rhys Weatherley
Sebastien Riou
drygascon128k16opt_v6m-cortex-m0 Rhys Weatherley
Sebastien Riou
drygascon128k16opt_v7m-cortex-m3 Rhys Weatherley
Sebastien Riou
drygascon128k16opt_v7m_fpu-cortex-m4 Rhys Weatherley
Sebastien Riou
drygascon128k16opt_v7m_fpu-cortex-m7 Rhys Weatherley
Sebastien Riou
drygascon128k16ref
drygascon128k32le32
drygascon128k32opt_arm_cortex-m Rhys Weatherley
Sebastien Riou
drygascon128k32opt_v6m-cortex-m0 Rhys Weatherley
Sebastien Riou
drygascon128k32opt_v7m-cortex-m3 Rhys Weatherley
Sebastien Riou
drygascon128k32opt_v7m_fpu-cortex-m4 Rhys Weatherley
Sebastien Riou
drygascon128k32opt_v7m_fpu-cortex-m7 Rhys Weatherley
Sebastien Riou
drygascon128k32ref
drygascon128k56le32
drygascon128k56opt_arm_cortex-m Rhys Weatherley
Sebastien Riou
drygascon128k56opt_v6m-cortex-m0 Rhys Weatherley
Sebastien Riou
drygascon128k56opt_v7m-cortex-m3 Rhys Weatherley
Sebastien Riou
drygascon128k56opt_v7m_fpu-cortex-m4 Rhys Weatherley
Sebastien Riou
drygascon128k56opt_v7m_fpu-cortex-m7 Rhys Weatherley
Sebastien Riou
drygascon128k56ref
drygascon256k32le32
drygascon256k32ref
elephant160v1ref Tim Beyne
elephant176v1ref Tim Beyne
elephant200v1ref Tim Beyne
estatetweaes128v1ref
estatetwegift128v1ref
giftcofb128v1aadomn/opt32 Alexandre Adomnicai
giftcofb128v1ref
gimli24v1littleendian
gimli24v1ref
gimli24v1sse
gimli24v1ssealt
grain128aeadopt32
grain128aeadref
hyenav1ref
isapa128av20avx512
isapa128av20opt_32
isapa128av20opt_32_armv67m
isapa128av20opt_64
isapa128av20ref
isapa128v20opt_32
isapa128v20opt_32_armv67m
isapa128v20opt_64
isapa128v20ref
isapk128av20avx512
isapk128av20opt_32_armv6m
isapk128av20opt_32_armv7m
isapk128av20opt_64
isapk128av20ref
isapk128v20opt_32_armv6m
isapk128v20opt_32_armv7m
isapk128v20opt_64
isapk128v20ref
knot192opt
knot192ref
knot256opt
knot256ref
knot128v1opt
knot128v1ref
knot128v2opt
knot128v2ref
mixfeedref
orangezestv1ref
oribatida192v11ref
oribatida256v11ref
paefforkskinnyb128t192n48v1ref
paefforkskinnyb128t256n112v1ref
paefforkskinnyb128t288n104v1ref
paefforkskinnyb64t192n48v1ref
photonbeetleaead128rate128v1ref
photonbeetleaead128rate32v1ref
pyjamask128aeadv1add_cortex-m4/v1
pyjamask128aeadv1add_cortex-m4/v2
pyjamask128aeadv1ref
pyjamask96aeadv1add_cortex-m4/v1
pyjamask96aeadv1add_cortex-m4/v2
pyjamask96aeadv1ref
romulusm1v1aadomn/opt32 Alexandre Adomnicai
romulusm1v1ref
romulusm2v1ref
romulusm3v1ref
romulusn1v1aadomn/opt32 Alexandre Adomnicai
romulusn1v1ref
romulusn2v1ref
romulusn3v1ref
saeaes128a120t128v1ref
saeaes128a120t64v1ref
saeaes128a64t128v1ref
saeaes128a64t64v1ref
saeaes192a120t128v1ref
saeaes192a64t128v1ref
saeaes192a64t64v1ref
saeaes256a120t128v1ref
saeaes256a64t128v1ref
saeaes256a64t64v1ref
saefforkskinnyb128t192n56v1ref
saefforkskinnyb128t256n120v1ref
saturninctrcascadev2bs32
saturninctrcascadev2bs32x
saturninctrcascadev2bs64
saturninctrcascadev2ref
schwaemm128128v1opt
schwaemm128128v1ref
schwaemm192192v1opt
schwaemm192192v1ref
schwaemm256128v1opt
schwaemm256128v1ref
schwaemm256256v1opt
schwaemm256256v1ref
sestatetweaes128v1ref
skinnyaeadtk296128v1ref
skinnyaeadtk29664v1ref
skinnyaeadtk3128128v1aadomn/opt32 Alexandre Adomnicai
skinnyaeadtk3128128v1ref
skinnyaeadtk312864v1ref
skinnyaeadtk396128v1ref
skinnyaeadtk39664v1ref
spix128v1ref
spoc128sliscplight256v1ref
spoc64sliscplight192v1ref
spook128mu384v1ref
spook128mu512v1ref
spook128su384v1ref
spook128su512v1ref
subterraneanv1add_mem_compact
subterraneanv1ref
sundaegift0v1ref
sundaegift128v1ref
sundaegift64v1ref
sundaegift96v1ref
tinyjambu128opt
tinyjambu128ref
tinyjambu192opt
tinyjambu192ref
tinyjambu256opt
tinyjambu256ref
twegift64locusaeadv1ref
twegift64lotusaeadv1ref
wageae128v1ref
xoodyakv1ref
xoodyakv1refcpp
xoodyakv1xkcp/ARMv6
xoodyakv1xkcp/ARMv6M
xoodyakv1xkcp/ARMv7M
xoodyakv1xkcp/AVR8
xoodyakv1xkcp/AVX512
xoodyakv1xkcp/SSE2
xoodyakv1xkcp/plain-ua

Version

This is version 2021.04.08 of the primitives-nistlwc-aead.html web page. This web page is in the public domain.