VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: aarch64; Cortex-A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3bplus, supercop-20241022

[Page version: 20241120 00:41:35]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
7.74?7.89?10.05?ascon128av12
11.62?13.26?16.80?ascon128v12
11.64?14.37?31.58?ascon80pqv12
17.77?20.51?37.15?ascon128abi32v12
43.25?44.28?49.12?T:aes128gcmv1
36.98?47.35?71.75?T:aes256gcmv1
30.26?47.70?67.69?ascon128bi32v12
48.0648.0850.70T:giftcofb128v1
49.51?49.72?59.90?T:isapa128av20
49.63?51.87?56.02?T:isapa128v20
55.9056.3156.76romulusn
60.1360.1560.46T:xoodyakround3
61.13?62.60?168.29?T:schwaemm256256v2
72.01?72.66?99.81?T:schwaemm192192v2
73.8276.5680.51T:schwaemm128128v2
61.59?76.90?96.95?T:schwaemm256128v2
81.11?81.26?206.91?T:tinyjambu256v2
65.98?85.09?203.76?T:tinyjambu128v2
81.32?90.34?137.43?T:tinyjambu192v2
96.16?98.44?245.20?romulusm
211.72?216.18?240.69?T!!!romulust
217.74231.01241.87T:isapk128av20
310.66328.87334.62T:isapk128v20
330.64345.03352.19T:elephant200v2
404.44?422.82?454.05?T:isapxv20
13402.2413471.8614075.82T:elephant160v2
14267.6614273.9414290.55T:elephant176v2
36938.0236980.3536995.21aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
7.61?7.78?9.68?ascon128av12
11.64?12.99?16.88?ascon80pqv12
11.54?13.05?15.38?ascon128v12
18.30?19.79?41.54?ascon128abi32v12
26.42?43.22?86.60?T:aes256gcmv1
27.89?46.53?60.01?ascon128bi32v12
47.8748.0950.96T:giftcofb128v1
42.95?48.66?53.19?T:aes128gcmv1
49.3749.4050.10T:isapa128av20
48.19?52.49?60.08?T:isapa128v20
55.98?56.77?183.86?romulusn
58.9658.9859.67T:xoodyakround3
61.55?62.19?197.68?T:schwaemm256256v2
73.37?75.27?104.55?T:schwaemm192192v2
75.13?78.13?99.64?T:schwaemm128128v2
81.14?81.42?230.36?T:tinyjambu256v2
58.58?81.47?195.15?T:schwaemm256128v2
59.73?85.56?217.91?T:tinyjambu128v2
95.95?97.03?255.62?romulusm
80.77?97.10?140.29?T:tinyjambu192v2
211.69215.23227.91T!!!romulust
227.97231.49241.92T:isapk128av20
309.76329.37339.72T:isapk128v20
315.42?344.27?355.05?T:elephant200v2
408.94421.70454.20T:isapxv20
13398.8513452.0814070.69T:elephant160v2
14266.0014273.9714287.36T:elephant176v2
36958.5236974.2436996.63aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
7.75?8.00?9.23?ascon128av12
11.61?13.74?30.27?ascon128v12
11.33?13.99?16.50?ascon80pqv12
18.02?20.79?41.61?ascon128abi32v12
25.5626.2128.09T:isapa128v20
27.52?31.54?61.49?ascon128bi32v12
31.9832.0132.25T:isapa128av20
43.52?44.16?52.72?T:aes128gcmv1
47.8848.2349.23T:giftcofb128v1
2.15?49.26?82.32?T:aes256gcmv1
55.98?56.27?181.36?romulusn
59.0559.0859.60T:xoodyakround3
61.64?61.94?124.97?T:schwaemm256256v2
71.33?75.07?103.92?T:schwaemm192192v2
72.52?75.93?98.47?T!!!romulust
75.11?78.21?106.03?T:schwaemm128128v2
55.65?81.10?205.23?T:schwaemm256128v2
81.21?81.43?213.85?T:tinyjambu256v2
96.07?96.93?251.96?romulusm
62.04?100.22?202.72?T:tinyjambu128v2
80.84?106.62?141.17?T:tinyjambu192v2
152.04153.47162.38T:isapk128av20
194.43?202.39?219.23?T:isapk128v20
228.35?239.39?260.57?T:isapxv20
320.53344.87354.14T:elephant200v2
903.02906.53917.60aes256gcmv1
13403.5013467.4414070.33T:elephant160v2
14269.0914310.6014352.70T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
8.69?9.49?14.01?ascon128av12
12.66?15.78?31.42?ascon128v12
12.26?15.84?30.95?ascon80pqv12
26.0626.7228.10ascon128bi32v12
14.71?27.82?35.65?T:aes256gcmv1
30.9631.4634.26T:aes128gcmv1
23.45?32.08?38.26?ascon128abi32v12
36.25?36.75?41.43?T:isapa128v20
40.6940.7040.96T:isapa128av20
45.4545.8846.75T:xoodyakround3
47.6547.8048.60T:giftcofb128v1
47.82?48.00?60.37?romulusn
48.73?54.83?73.66?T:tinyjambu128v2
53.26?55.68?70.55?T:schwaemm256128v2
60.9160.9761.04T:tinyjambu256v2
60.51?61.68?72.72?T:schwaemm256256v2
60.9664.7066.76T:tinyjambu192v2
67.9368.0670.60romulusm
70.0472.7376.74T:schwaemm192192v2
74.3875.0679.56T:schwaemm128128v2
132.59142.63146.80T!!!romulust
187.26194.43199.39T:isapk128av20
231.82248.35256.28T:isapk128v20
248.62258.29265.62T:elephant200v2
326.41331.81358.98T:isapxv20
10053.9210092.9010554.05T:elephant160v2
10669.8910684.3710700.41T:elephant176v2
18933.6818941.1818950.03aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
8.09?9.75?12.04?ascon128av12
12.62?14.34?26.22?ascon80pqv12
12.23?14.95?29.75?ascon128v12
23.98?26.62?35.04?ascon128bi32v12
15.00?29.51?46.26?T:aes256gcmv1
20.66?30.44?34.35?ascon128abi32v12
30.91?31.87?34.44?T:aes128gcmv1
37.0938.6340.29T:isapa128v20
40.6540.7341.10T:isapa128av20
45.0345.2049.39T:xoodyakround3
47.5647.7049.13T:giftcofb128v1
47.7947.8649.51romulusn
47.63?58.57?67.43?T:tinyjambu128v2
51.48?60.46?74.87?T:schwaemm256128v2
60.9060.9761.15T:tinyjambu256v2
60.67?61.98?72.39?T:schwaemm256256v2
63.3664.3467.65T:tinyjambu192v2
67.7168.0271.68romulusm
69.37?72.38?81.07?T:schwaemm192192v2
72.31?75.72?88.91?T:schwaemm128128v2
131.90?144.34?150.22?T!!!romulust
190.75192.23200.62T:isapk128av20
186.00?257.60?266.07?T:elephant200v2
243.92259.80267.96T:isapk128v20
325.43333.02359.39T:isapxv20
10050.9610091.7410551.07T:elephant160v2
10667.3010677.1010701.85T:elephant176v2
18930.6918936.5918950.75aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
8.40?9.40?23.94?ascon128av12
12.32?13.15?31.80?ascon80pqv12
12.80?13.47?32.37?ascon128v12
19.57?23.91?34.91?ascon128abi32v12
24.38?25.88?27.50?T:isapa128v20
26.00?27.40?31.06?ascon128bi32v12
3.71?27.63?48.44?T:aes256gcmv1
30.8731.4533.61T:aes128gcmv1
32.0032.0332.28T:isapa128av20
45.0845.1746.18T:xoodyakround3
47.5647.5948.30T:giftcofb128v1
47.8147.9549.04romulusn
48.86?54.34?67.73?T:tinyjambu128v2
45.93?58.65?76.48?T:schwaemm256128v2
60.9160.9661.08T:tinyjambu256v2
60.94?61.78?74.30?T:schwaemm256256v2
62.54?66.59?73.34?T:tinyjambu192v2
67.9168.0870.29romulusm
72.09?73.36?81.82?T:schwaemm192192v2
70.52?75.41?88.60?T!!!romulust
73.6875.8478.70T:schwaemm128128v2
151.43154.73158.70T:isapk128av20
189.98195.38203.33T:isapk128v20
234.86242.09260.40T:isapxv20
251.97258.04265.56T:elephant200v2
905.97907.71911.83aes256gcmv1
10052.3610092.6910552.51T:elephant160v2
10651.9910676.9110699.25T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
7.64?7.96?11.02?ascon128av12
11.28?12.84?16.86?ascon128v12
11.16?12.92?16.78?ascon80pqv12
2.29?15.81?37.09?T:aes256gcmv1
18.38?19.08?23.16?T:aes128gcmv1
19.78?21.41?42.83?ascon128abi32v12
23.62?25.86?30.34?T:isapa128v20
30.8631.1831.66T:xoodyakround3
31.8932.0032.23T:isapa128av20
26.45?33.40?64.13?ascon128bi32v12
39.6339.6740.71romulusn
39.9339.9540.50romulusm
40.7440.7641.04T:tinyjambu256v2
47.25?47.89?57.77?T:giftcofb128v1
38.33?52.12?77.21?T:tinyjambu128v2
60.39?62.64?189.10?T:schwaemm256256v2
70.32?77.20?113.56?T!!!romulust
65.57?81.69?194.37?T:schwaemm192192v2
45.11?82.34?175.69?T:tinyjambu192v2
51.89?82.78?139.45?T:schwaemm256128v2
72.22?84.53?110.89?T:schwaemm128128v2
152.04152.66166.63T:isapk128av20
168.34177.88180.22T:elephant200v2
179.65?193.75?203.45?T:isapk128v20
234.90?249.78?261.62?T:isapxv20
901.94905.17918.15aes256gcmv1
6699.186725.947051.96T:elephant160v2
7050.437057.107072.36T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
7.64?7.89?11.37?ascon128av12
11.32?12.85?24.80?ascon128v12
11.19?14.19?16.79?ascon80pqv12
-26.88?17.71?35.89?T:aes256gcmv1
18.62?19.22?22.85?T:aes128gcmv1
19.97?23.55?45.55?ascon128abi32v12
25.63?26.00?29.33?T:isapa128v20
31.0931.1331.61T:xoodyakround3
31.9932.0132.28T:isapa128av20
39.6339.6540.02romulusn
39.9439.9740.59romulusm
40.7540.7640.96T:tinyjambu256v2
27.71?45.33?63.67?ascon128bi32v12
47.26?47.83?61.17?T:giftcofb128v1
38.30?60.85?78.69?T:tinyjambu128v2
73.88?76.70?107.09?T!!!romulust
49.48?81.74?218.52?T:tinyjambu192v2
72.19?82.16?138.90?T:schwaemm128128v2
69.17?83.28?153.85?T:schwaemm192192v2
60.58?84.64?171.46?T:schwaemm256256v2
57.46?92.83?194.25?T:schwaemm256128v2
150.09152.95163.60T:isapk128av20
172.01177.71180.53T:elephant200v2
181.17190.73201.25T:isapk128v20
222.33?244.05?262.37?T:isapxv20
901.11906.81920.36aes256gcmv1
6697.616724.247042.28T:elephant160v2
7049.887058.377071.21T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
-64.58?-30.70?54.59?T:aes256gcmv1
7.47?8.02?10.36?ascon128av12
11.15?12.52?16.97?ascon128v12
11.25?13.08?27.93?ascon80pqv12
18.21?19.17?21.82?T:aes128gcmv1
17.86?20.87?45.32?ascon128abi32v12
25.32?25.81?28.40?T:isapa128v20
31.0931.1631.64T:xoodyakround3
32.0032.0432.30T:isapa128av20
39.6339.6839.93romulusn
39.9239.9740.40romulusm
40.7440.7540.84T:tinyjambu256v2
28.09?43.39?66.37?ascon128bi32v12
38.13?44.59?90.20?T:tinyjambu128v2
47.25?47.65?58.95?T:giftcofb128v1
60.35?62.02?107.39?T:schwaemm256256v2
44.90?72.96?87.84?T:tinyjambu192v2
70.64?74.48?120.30?T:schwaemm128128v2
53.82?78.30?205.83?T:schwaemm256128v2
71.44?85.38?102.46?T!!!romulust
71.10?96.53?158.59?T:schwaemm192192v2
148.70152.75161.18T:isapk128av20
170.84178.05181.05T:elephant200v2
182.62197.69199.40T:isapk128v20
233.41?244.98?262.60?T:isapxv20
901.54906.60919.14aes256gcmv1
6695.756725.787062.77T:elephant160v2
7050.987057.657065.74T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
8.13?10.07?17.27?ascon128av12
11.75?13.68?32.97?ascon128v12
12.67?14.76?23.19?ascon80pqv12
20.00?24.38?43.85?ascon128abi32v12
35.46?36.33?40.88?T:aes128gcmv1
30.52?40.38?50.49?ascon128bi32v12
39.28?42.68?62.77?T:aes256gcmv1
44.1644.2044.55T:isapa128av20
45.94?46.18?52.29?T:xoodyakround3
48.1848.2049.28T:giftcofb128v1
48.2348.2649.87romulusn
49.09?52.26?68.73?T:tinyjambu128v2
56.6156.8561.59T:isapa128v20
53.93?57.84?68.17?T:schwaemm256128v2
61.4061.4161.54T:tinyjambu256v2
62.39?63.28?85.53?T:schwaemm256256v2
68.5068.5971.69romulusm
71.60?73.76?81.78?T:schwaemm192192v2
75.1576.5783.50T:schwaemm128128v2
62.04?90.94?126.38?T:tinyjambu192v2
146.75147.44153.63T!!!romulust
221.75222.67226.57T:isapk128av20
260.42265.74270.99T:elephant200v2
449.44452.00458.73T:isapk128v20
539.70543.84576.74T:isapxv20
10199.4610202.5710638.32T:elephant160v2
10748.4410762.5610792.21T:elephant176v2
19318.0119325.3319337.82aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
8.26?9.93?13.28?ascon128av12
11.58?13.36?19.11?ascon80pqv12
12.15?14.85?33.84?ascon128v12
20.42?22.99?46.11?ascon128abi32v12
36.20?39.31?43.28?T:aes128gcmv1
28.35?42.99?53.83?ascon128bi32v12
44.1744.1944.57T:isapa128av20
45.48?45.55?52.39?T:xoodyakround3
43.46?47.66?67.30?T:aes256gcmv1
48.2748.3150.16romulusn
48.1148.3249.34T:giftcofb128v1
47.14?51.51?146.39?T:tinyjambu128v2
56.5657.0958.73T:isapa128v20
55.36?57.76?69.99?T:schwaemm256128v2
61.4061.4161.63T:tinyjambu256v2
62.57?67.25?78.75?T:schwaemm256256v2
68.6668.6971.40romulusm
73.57?75.02?83.14?T:schwaemm192192v2
75.8876.0884.15T:schwaemm128128v2
62.40?87.66?122.15?T:tinyjambu192v2
145.94147.19151.72T!!!romulust
221.84225.68228.79T:isapk128av20
260.42264.32271.16T:elephant200v2
447.46453.00462.92T:isapk128v20
539.62542.19580.77T:isapxv20
10199.4210202.0110646.41T:elephant160v2
10748.7810765.7510792.60T:elephant176v2
19318.3919327.3819337.13aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
7.92?9.86?10.28?ascon128av12
12.31?13.39?19.79?ascon80pqv12
11.80?13.78?37.04?ascon128v12
33.9233.9534.22T:isapa128av20
20.54?34.20?48.07?ascon128abi32v12
34.8735.0536.52T:isapa128v20
35.47?37.88?43.27?T:aes128gcmv1
29.27?41.28?55.18?ascon128bi32v12
45.5245.6846.13T:xoodyakround3
48.1048.1748.91T:giftcofb128v1
48.2748.2948.97romulusn
49.36?55.10?72.18?T:tinyjambu128v2
55.32?56.88?73.37?T:schwaemm256128v2
61.4061.4161.65T:tinyjambu256v2
68.6768.9474.89romulusm
62.80?69.32?83.01?T:schwaemm256256v2
64.57?69.47?90.64?T:tinyjambu192v2
69.18?70.55?101.81?T:aes256gcmv1
72.04?74.39?90.58?T:schwaemm192192v2
74.1976.6382.23T:schwaemm128128v2
76.50?77.37?85.64?T!!!romulust
171.33171.46178.02T:isapk128av20
260.43264.28273.39T:elephant200v2
298.18300.26310.58T:isapk128v20
345.98351.82364.36T:isapxv20
1288.621290.781292.51aes256gcmv1
10200.5310211.3610638.54T:elephant160v2
10745.4710756.1910790.67T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
12.4112.4112.77ascon128av12
15.6615.6615.78ascon128v12
15.6515.7316.40ascon80pqv12
27.4227.4828.16ascon128abi32v12
35.70?35.89?45.34?ascon128bi32v12
55.4955.5456.23T:tinyjambu128v2
59.0959.1059.25romulusn
60.0960.1760.52T:giftcofb128v1
65.2365.2665.45T:xoodyakround3
72.3572.4872.64T:tinyjambu256v2
73.2873.3673.61T:tinyjambu192v2
81.4681.6181.84romulusm
85.32?85.64?123.84?T:schwaemm256128v2
92.3492.5397.45T:schwaemm128128v2
97.6397.8098.71T:schwaemm256256v2
111.51?111.74?162.19?T:schwaemm192192v2
123.79123.90124.09T:isapa128av20
129.86131.34136.88T:aes128gcmv1
192.66?205.27?427.27?T!!!romulust
291.59?327.27?598.08?T:aes256gcmv1
364.08?368.15?414.98?T:elephant200v2
462.50?471.16?544.46?T:isapa128v20
863.84?870.57?1087.16?T:isapk128av20
4789.174906.345245.91T:isapk128v20
5214.665305.915426.95T:isapxv20
13410.8413427.7113470.84T:elephant176v2
13687.2713701.1914272.02T:elephant160v2
28031.9528123.4728183.40aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
12.5912.6512.91ascon128av12
15.5715.5715.73ascon128v12
15.62?15.67?22.11?ascon80pqv12
27.78?30.05?38.37?ascon128abi32v12
35.5935.5936.33ascon128bi32v12
55.9856.0557.43T:tinyjambu128v2
59.1559.1859.28romulusn
60.0960.1060.24T:giftcofb128v1
64.7664.8665.16T:xoodyakround3
72.3072.7073.03T:tinyjambu256v2
73.5573.7474.48T:tinyjambu192v2
85.8185.9288.26T:schwaemm256128v2
85.8385.9586.21romulusm
93.1193.1797.78T:schwaemm128128v2
98.0598.1698.66T:schwaemm256256v2
112.15112.22116.88T:schwaemm192192v2
124.09124.20124.53T:isapa128av20
130.32131.07136.35T:aes128gcmv1
191.82?192.47?225.67?T!!!romulust
366.32?368.27?521.51?T:elephant200v2
462.91?469.40?532.97?T:isapa128v20
440.73?545.00?819.84?T:aes256gcmv1
863.59866.80954.89T:isapk128av20
4791.514803.365140.26T:isapk128v20
5215.135303.585495.04T:isapxv20
13407.2613421.6613453.23T:elephant176v2
13691.5513709.9714185.70T:elephant160v2
28042.3528119.3828143.39aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
12.5312.5412.59ascon128av12
15.5215.5715.84ascon128v12
15.6215.6215.87ascon80pqv12
28.01?31.05?42.91?ascon128abi32v12
35.5935.5936.02ascon128bi32v12
55.9356.2057.80T:tinyjambu128v2
59.1459.1559.19romulusn
60.0960.0960.10T:giftcofb128v1
64.9465.0668.15T:xoodyakround3
72.2872.5072.74T:tinyjambu256v2
74.3076.1977.78T:tinyjambu192v2
77.9578.1278.17T:isapa128av20
85.7785.8085.96romulusm
85.8185.9186.34T:schwaemm256128v2
92.6493.1193.24T:schwaemm128128v2
98.0598.1999.27T:schwaemm256256v2
112.04112.29115.99T:schwaemm192192v2
121.91122.02125.75T!!!romulust
129.95130.81133.62T:aes128gcmv1
241.32241.67249.31T:isapa128v20
367.73368.59404.33T:elephant200v2
566.41569.57584.34T:isapk128av20
1018.07?1502.53?1773.02?T:aes256gcmv1
2559.232645.132730.56T:isapk128v20
2723.862804.942852.95T:isapxv20
9987.5510089.7210151.11aes256gcmv1
13394.0513424.2213437.70T:elephant176v2
13688.6213705.5314283.06T:elephant160v2