VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: aarch64; Skylark (503f0002); 2018 Ampere eMAG 8180; 32 x 3300MHz; unstable; gcc185, supercop-20240107

[Page version: 20241120 00:41:35]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
5.085.205.39T:aes128gcmv1
6.416.566.68T:aes256gcmv1
9.619.699.69ascon128av12
14.1814.2214.22ascon128v12
14.4114.4114.45ascon80pqv12
20.9020.9420.94ascon128abi32v12
25.4325.4725.51T:xoodyakround3
30.4330.4330.51ascon128bi32v12
36.3736.4136.41T:schwaemm256128v2
40.2740.2740.35T:giftcofb128v1
41.5241.6441.80aes128gcmv1
48.4448.5248.55T:schwaemm192192v2
50.2350.2350.23T:tinyjambu128v2
51.4551.4851.52T:schwaemm128128v2
54.5354.5354.57T:schwaemm256256v2
56.4556.4856.52T:isapa128v20
57.9357.9757.97T:tinyjambu192v2
59.3859.4559.45T:isapa128av20
64.5364.5764.57T:tinyjambu256v2
83.3283.3683.40T:romulusn
123.44123.48123.48romulusn
125.47125.59125.78T:isapk128av20
169.14169.38170.16T:isapk128v20
201.64201.68201.76romulusm
246.52246.52246.60T:isapxv20
297.70297.77297.89T:elephant200v2
430.39430.43430.43romulust
13224.3813226.6413233.55T:elephant176v2
14494.7314496.0914500.70T:elephant160v2
17313.4017318.2017322.81aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
5.125.235.31T:aes128gcmv1
6.456.566.60T:aes256gcmv1
9.809.849.88ascon128av12
14.5314.5314.57ascon80pqv12
14.7714.7714.80ascon128v12
20.2320.3120.31ascon128abi32v12
24.8824.9624.96T:xoodyakround3
30.0830.1230.16ascon128bi32v12
36.4136.4536.48T:schwaemm256128v2
40.6240.6640.66T:giftcofb128v1
41.4841.6041.66aes128gcmv1
48.5948.6748.67T:schwaemm192192v2
50.4350.4750.47T:tinyjambu128v2
51.3751.4551.45T:schwaemm128128v2
54.5754.6154.65T:schwaemm256256v2
56.4856.4856.52T:isapa128v20
57.9357.9357.97T:tinyjambu192v2
59.4159.4159.49T:isapa128av20
64.7364.7764.80T:tinyjambu256v2
81.6081.6481.68T:romulusn
123.32123.32123.40romulusn
125.47125.62125.70T:isapk128av20
169.14169.30169.41T:isapk128v20
201.68201.72201.80romulusm
246.52246.56246.56T:isapxv20
297.77297.77297.77T:elephant200v2
430.35430.43430.47romulust
13223.8313225.0413233.52T:elephant176v2
14495.2714496.0214502.03T:elephant160v2
17314.1417316.8417319.18aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
5.165.165.27T:aes128gcmv1
6.456.566.64T:aes256gcmv1
9.809.809.88ascon128av12
14.5314.5314.57ascon80pqv12
14.7714.7714.77ascon128v12
14.8814.9615.02aes128gcmv1
20.2720.3120.31ascon128abi32v12
24.9225.0025.04T:xoodyakround3
28.0928.0928.09T:isapa128v20
30.0830.1230.16ascon128bi32v12
36.4136.4836.48T:schwaemm256128v2
40.5940.6640.66T:giftcofb128v1
41.1341.1341.17T:isapa128av20
48.5948.6748.71T:schwaemm192192v2
50.4350.4750.47T:tinyjambu128v2
51.3751.4151.45T:schwaemm128128v2
54.5754.6154.65T:schwaemm256256v2
57.9357.9358.01T:tinyjambu192v2
64.7364.7764.80T:tinyjambu256v2
81.6481.6481.68T:romulusn
83.5983.7183.91T:isapk128av20
104.69104.73104.96T:isapk128v20
123.32123.36123.40romulusn
144.80144.84144.84T:isapxv20
150.74150.74150.78romulust
201.68201.68201.76romulusm
297.77297.77297.81T:elephant200v2
492.23499.57499.73aes256gcmv1
13223.7113229.1413283.09T:elephant176v2
14494.3814495.3914500.04T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
3.223.283.34T:aes128gcmv1
3.893.954.00T:aes256gcmv1
9.519.519.55ascon128av12
14.3014.3214.34ascon128v12
14.4114.4314.45ascon80pqv12
19.4519.5119.53T:xoodyakround3
20.5920.6120.62ascon128abi32v12
28.1628.2228.28aes128gcmv1
30.2130.2330.23ascon128bi32v12
36.3136.3136.31T:schwaemm256128v2
39.9840.0040.02T:giftcofb128v1
40.2140.2340.23T:tinyjambu128v2
42.2742.2742.30T:isapa128v20
46.0246.0246.05T:tinyjambu192v2
48.4448.4448.48T:schwaemm192192v2
48.6348.6348.65T:tinyjambu256v2
49.0249.0649.08T:isapa128av20
51.1951.2351.27T:schwaemm128128v2
54.4354.4554.45T:schwaemm256256v2
72.7972.7972.79T:romulusn
100.96100.96101.02romulusn
104.73104.77104.82T:isapk128av20
136.66136.80137.32T:isapk128v20
140.02140.08140.12romulusm
195.27195.31195.31T:isapxv20
222.87222.87222.91T:elephant200v2
290.39290.43290.47romulust
8902.718906.138909.08aes256gcmv1
9878.739880.689884.10T:elephant176v2
10869.1410870.8410873.18T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
3.223.263.32T:aes128gcmv1
3.913.963.98T:aes256gcmv1
9.679.679.67ascon128av12
14.4714.4714.51ascon80pqv12
14.7114.7114.73ascon128v12
19.2419.2819.32T:xoodyakround3
20.4720.4920.51ascon128abi32v12
28.1428.2028.24aes128gcmv1
30.1230.1230.12ascon128bi32v12
36.3336.3536.35T:schwaemm256128v2
40.1840.1840.20T:giftcofb128v1
40.3340.3540.35T:tinyjambu128v2
42.2742.2942.32T:isapa128v20
46.2546.2546.29T:tinyjambu192v2
48.5248.5248.69T:schwaemm192192v2
48.7548.7548.81T:tinyjambu256v2
49.0249.0449.06T:isapa128av20
51.1751.2351.23T:schwaemm128128v2
54.4754.4754.49T:schwaemm256256v2
71.9371.9572.34T:romulusn
100.90100.92101.02romulusn
104.73104.79104.82T:isapk128av20
136.46136.78137.03T:isapk128v20
140.06140.12140.16romulusm
195.29195.31195.37T:isapxv20
222.89222.89222.93T:elephant200v2
290.39290.39290.43romulust
8905.088905.788910.23aes256gcmv1
9880.009881.569885.94T:elephant176v2
10869.3610871.4110873.54T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
3.243.263.30T:aes128gcmv1
3.913.953.98T:aes256gcmv1
9.679.679.67ascon128av12
14.4714.4914.51ascon80pqv12
14.7114.7114.75ascon128v12
14.8414.8814.88aes128gcmv1
19.2619.3019.34T:xoodyakround3
20.4920.4920.49ascon128abi32v12
28.0528.0928.09T:isapa128v20
30.1230.1230.14ascon128bi32v12
36.3336.3536.35T:schwaemm256128v2
39.8839.9039.92T:isapa128av20
40.1840.1840.20T:giftcofb128v1
40.3540.3540.35T:tinyjambu128v2
46.2346.2546.27T:tinyjambu192v2
48.5248.5248.55T:schwaemm192192v2
48.7548.7548.77T:tinyjambu256v2
51.1551.2351.23T:schwaemm128128v2
54.4754.4754.47T:schwaemm256256v2
71.9371.9572.34T:romulusn
83.7983.8383.87T:isapk128av20
100.90100.90100.92romulusn
104.43104.53104.61T:isapk128v20
140.06140.10140.14romulusm
144.43144.45144.47T:isapxv20
150.57150.59150.59romulust
222.89222.89222.89T:elephant200v2
495.86495.90496.39aes256gcmv1
9880.319882.079884.10T:elephant176v2
10869.6110871.7810874.28T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
1.17?1.33?1.41?T:aes128gcmv1
1.251.331.37T:aes256gcmv1
9.389.389.38ascon128av12
13.5213.5213.55T:xoodyakround3
14.4114.4114.45ascon128v12
14.4114.4514.45ascon80pqv12
14.7714.7714.80aes128gcmv1
20.2720.2720.31ascon128abi32v12
28.0528.0528.12T:isapa128v20
30.0030.0030.00ascon128bi32v12
30.2330.2330.23T:tinyjambu128v2
32.7332.7332.77T:tinyjambu256v2
34.0634.1034.10T:tinyjambu192v2
36.2136.2136.29T:schwaemm256128v2
38.6338.6338.67T:isapa128av20
39.6939.7339.73T:giftcofb128v1
48.4048.4048.48T:schwaemm192192v2
50.9851.0251.05T:schwaemm128128v2
54.3454.3454.38T:schwaemm256256v2
62.1962.2762.27T:romulusn
78.4478.4478.48romulusm
78.4478.4878.52romulusn
83.8383.9884.18T:isapk128av20
104.26104.38104.53T:isapk128v20
144.02144.10144.10T:isapxv20
148.91148.91149.02T:elephant200v2
150.39150.39150.43romulust
490.39492.34499.30aes256gcmv1
6534.696535.166542.89T:elephant176v2
7243.527246.377253.36T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
1.251.291.33T:aes256gcmv1
1.291.331.41T:aes128gcmv1
9.459.499.53ascon128av12
13.5213.5913.63T:xoodyakround3
14.4114.4114.45ascon80pqv12
14.6514.6514.69ascon128v12
14.7314.7714.80aes128gcmv1
20.6220.7020.70ascon128abi32v12
28.0528.0928.09T:isapa128v20
30.0830.1230.16ascon128bi32v12
30.2030.2330.27T:tinyjambu128v2
32.7032.7332.77T:tinyjambu256v2
34.5334.5334.57T:tinyjambu192v2
36.2136.2136.21T:schwaemm256128v2
38.5938.6338.67T:isapa128av20
39.6939.7339.73T:giftcofb128v1
48.4048.4048.44T:schwaemm192192v2
50.9451.0251.05T:schwaemm128128v2
54.3454.3454.38T:schwaemm256256v2
62.2362.2362.27T:romulusn
78.4078.4878.52romulusm
78.4478.4878.52romulusn
83.9183.9583.98T:isapk128av20
104.30104.38104.45T:isapk128v20
143.95144.06144.10T:isapxv20
148.91148.91148.95T:elephant200v2
150.35150.35150.35romulust
492.11499.53499.65aes256gcmv1
6534.306535.086543.59T:elephant176v2
7243.327244.187252.62T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
1.251.291.37T:aes128gcmv1
1.21?1.33?1.37?T:aes256gcmv1
9.459.499.49ascon128av12
13.5513.5913.63T:xoodyakround3
14.4114.4114.45ascon80pqv12
14.6514.6914.69ascon128v12
14.7314.7714.80aes128gcmv1
20.6620.7020.70ascon128abi32v12
28.0528.0928.09T:isapa128v20
30.0830.1230.16ascon128bi32v12
30.2030.2730.27T:tinyjambu128v2
32.7032.7332.77T:tinyjambu256v2
34.5334.5334.57T:tinyjambu192v2
36.2136.2136.21T:schwaemm256128v2
38.6338.6338.67T:isapa128av20
39.6939.7339.73T:giftcofb128v1
48.4048.4048.44T:schwaemm192192v2
50.9451.0251.05T:schwaemm128128v2
54.3454.3454.38T:schwaemm256256v2
62.1962.2362.27T:romulusn
78.4078.4878.52romulusm
78.4478.4878.52romulusn
83.9183.9584.06T:isapk128av20
104.34104.41104.49T:isapk128v20
144.02144.06144.10T:isapxv20
148.91148.91148.91T:elephant200v2
150.31150.39150.39romulust
492.11492.23499.18aes256gcmv1
6534.776535.046544.06T:elephant176v2
7243.207244.107252.30T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
3.963.984.03T:aes128gcmv1
4.694.714.76T:aes256gcmv1
9.749.749.77ascon128av12
14.5314.5314.55ascon128v12
14.6514.6514.67ascon80pqv12
19.6819.7019.73T:xoodyakround3
21.1221.1421.14ascon128abi32v12
30.3730.4030.44aes128gcmv1
30.6930.6930.71ascon128bi32v12
37.3337.3337.35T:schwaemm256128v2
40.4840.4840.50T:giftcofb128v1
40.5540.5840.58T:tinyjambu128v2
46.3646.3946.39T:tinyjambu192v2
49.0049.0049.00T:tinyjambu256v2
49.4649.4949.49T:schwaemm192192v2
51.9051.9351.93T:schwaemm128128v2
52.0852.1052.12T:isapa128av20
55.8655.8655.86T:schwaemm256256v2
61.5561.5561.57T:isapa128v20
73.7173.7173.73T:romulusn
101.83101.83101.88romulusn
122.83122.85122.90T:isapk128av20
141.53141.53141.55romulusm
227.56227.56227.59T:elephant200v2
242.99243.02243.65T:isapk128v20
294.65294.68294.73romulust
321.92321.92321.95T:isapxv20
9083.309085.409087.55aes256gcmv1
9955.109955.629958.47T:elephant176v2
10992.1910993.6310997.24T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
3.983.984.03T:aes128gcmv1
4.694.714.74T:aes256gcmv1
9.899.899.89ascon128av12
14.7014.7214.72ascon80pqv12
14.9214.9214.94ascon128v12
19.4619.4819.51T:xoodyakround3
21.0221.0421.04ascon128abi32v12
30.3530.3730.42aes128gcmv1
30.6230.6230.62ascon128bi32v12
37.3537.3537.38T:schwaemm256128v2
40.6540.6540.67T:giftcofb128v1
40.6740.6740.70T:tinyjambu128v2
46.6146.6146.63T:tinyjambu192v2
49.1049.1249.12T:tinyjambu256v2
49.5449.5649.56T:schwaemm192192v2
51.8651.8651.90T:schwaemm128128v2
52.1052.1052.10T:isapa128av20
55.8855.9156.03T:schwaemm256256v2
61.5561.5761.57T:isapa128v20
72.8872.9073.27T:romulusn
101.78101.78101.78romulusn
122.88122.88122.92T:isapk128av20
141.80141.80141.87romulusm
227.59227.59227.61T:elephant200v2
243.02243.02243.14T:isapk128v20
294.65294.68294.68romulust
321.92321.92322.00T:isapxv20
9083.209083.749088.31aes256gcmv1
9954.649955.749959.20T:elephant176v2
10992.4110993.1410996.17T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
3.963.984.00T:aes128gcmv1
4.694.714.76T:aes256gcmv1
9.899.899.89ascon128av12
14.7014.7214.72ascon80pqv12
14.9214.9214.94ascon128v12
17.0217.0417.04aes128gcmv1
19.4819.5119.53T:xoodyakround3
21.0221.0221.04ascon128abi32v12
30.6230.6230.62ascon128bi32v12
37.3537.3537.38T:schwaemm256128v2
37.8737.8737.89T:isapa128v20
40.6540.6540.67T:giftcofb128v1
40.6740.6740.67T:tinyjambu128v2
41.6341.6541.65T:isapa128av20
46.6146.6146.63T:tinyjambu192v2
49.1049.1249.12T:tinyjambu256v2
49.5649.5649.56T:schwaemm192192v2
51.8151.8651.98T:schwaemm128128v2
55.8855.8855.91T:schwaemm256256v2
72.8572.9273.34T:romulusn
95.7595.7895.83T:isapk128av20
101.78101.78101.78romulusn
141.80141.80141.85romulusm
154.71154.71154.74romulust
160.82160.84161.06T:isapk128v20
209.20209.23209.23T:isapxv20
227.59227.59227.61T:elephant200v2
673.66673.68673.71aes256gcmv1
9955.189956.679959.96T:elephant176v2
10992.3310994.2110998.10T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
14.6514.6515.23ascon128av12
18.7519.3419.92ascon128v12
19.3419.3419.92ascon80pqv12
19.34?19.92?21.68?T:aes128gcmv1
21.0921.6822.85T:aes256gcmv1
29.3029.8829.88T:xoodyakround3
32.8132.8133.40ascon128abi32v12
41.0241.0241.60ascon128bi32v12
48.0548.0548.63T:tinyjambu128v2
50.9851.5651.56T:giftcofb128v1
54.4954.4954.49T:tinyjambu192v2
56.8457.4257.42T:tinyjambu256v2
60.3560.9460.94T:schwaemm256128v2
67.3867.3867.38T:schwaemm128128v2
79.6979.6980.27T:schwaemm192192v2
87.8988.4888.48T:schwaemm256256v2
90.8291.4192.29aes128gcmv1
94.3494.9294.92T:romulusn
121.88121.88122.46romulusn
121.88122.46122.46T:isapa128av20
175.20175.20175.78romulusm
321.68321.68322.27T:elephant200v2
392.58393.16393.16romulust
504.49504.49505.08T:isapa128v20
516.80517.38530.86T:isapk128av20
2656.642657.232658.40T:isapk128v20
3197.463198.053198.05T:isapxv20
12393.1612393.7512396.09T:elephant176v2
13167.7713168.9513170.70aes256gcmv1
14716.4114716.4114721.68T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
14.6515.2315.23ascon128av12
19.3419.9219.92ascon80pqv12
19.3419.9220.51ascon128v12
19.3419.9221.09T:aes128gcmv1
21.0921.6822.85T:aes256gcmv1
29.3029.3029.88T:xoodyakround3
33.4033.4033.98ascon128abi32v12
41.6042.1942.19ascon128bi32v12
48.0548.0548.63T:tinyjambu128v2
50.9851.5651.56T:giftcofb128v1
55.0855.0855.08T:tinyjambu192v2
57.4257.4258.01T:tinyjambu256v2
60.3560.9460.94T:schwaemm256128v2
66.8066.8066.80T:schwaemm128128v2
79.6979.6980.27T:schwaemm192192v2
87.8988.4888.48T:schwaemm256256v2
91.4191.4192.29aes128gcmv1
94.3494.3494.92T:romulusn
121.88122.46122.46T:isapa128av20
121.88122.46122.46romulusn
181.05181.05181.64romulusm
321.68321.68322.27T:elephant200v2
393.16393.16393.16romulust
504.49505.08505.08T:isapa128v20
516.80517.38518.55T:isapk128av20
2656.642657.812661.33T:isapk128v20
3198.053198.053198.63T:isapxv20
12393.7512393.7512393.75T:elephant176v2
13169.5313170.1213170.12aes256gcmv1
14716.4114716.4114717.58T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
14.6515.2315.23ascon128av12
19.3419.9219.92T:aes128gcmv1
19.3419.9219.92ascon128v12
19.3419.9219.92ascon80pqv12
21.0921.6822.27T:aes256gcmv1
29.3029.3029.88T:xoodyakround3
33.4033.4033.40ascon128abi32v12
41.6042.1942.19ascon128bi32v12
48.0548.0548.05T:tinyjambu128v2
50.9851.5651.56T:giftcofb128v1
54.4954.4955.08T:tinyjambu192v2
56.8457.4257.42T:tinyjambu256v2
60.3560.9460.94T:schwaemm256128v2
66.2166.8067.38aes128gcmv1
66.8066.8066.80T:schwaemm128128v2
79.6979.6980.27T:schwaemm192192v2
81.4581.4582.03T:isapa128av20
87.8987.8988.48T:schwaemm256256v2
93.7593.7594.34T:romulusn
121.88121.88122.46romulusn
181.05181.05181.64romulusm
250.20250.20250.20romulust
263.09263.09263.09T:isapa128v20
321.68321.68322.27T:elephant200v2
352.15353.32353.91T:isapk128av20
1432.621433.201433.79T:isapk128v20
1671.091671.091671.09T:isapxv20
4761.914762.504763.09aes256gcmv1
12393.7512393.7512393.75T:elephant176v2
14715.8214716.4114716.41T:elephant160v2