VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: aarch64; Cortex-A72 (410fd083); 2019 Broadcom BCM2711; 4 x 1500MHz; pi4b, supercop-20240425

[Page version: 20240828 00:46:12]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Implementation notes

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
7.197.197.19ascon128av12
10.5010.5110.51ascon128v12
10.5010.5110.51ascon80pqv12
14.3114.3214.36ascon128abi32v12
20.3720.3820.38ascon128bi32v12
22.0622.0822.11T:xoodyakround3
30.4930.5230.52T:schwaemm256128v2
32.2632.4932.77T:aes256gcmv1
38.9939.0139.01T:isapa128av20
40.5040.5340.56T:schwaemm192192v2
42.5042.5242.52T:giftcofb128v1
43.6243.6343.66T:isapa128v20
45.8945.9145.91T:schwaemm256256v2
48.6348.7249.82T:aes128gcmv1
50.2550.2550.26T:tinyjambu128v2
53.6853.8153.83T:schwaemm128128v2
59.5059.5359.60T:tinyjambu192v2
65.8165.8365.86T:romulusn
67.5067.5167.52T:tinyjambu256v2
98.4798.5698.62T:isapk128av20
114.11114.26114.26romulusn
129.91129.97131.43T:isapk128v20
169.86170.92171.00romulusm
205.21205.29205.50T:elephant200v2
238.24238.29241.49T:isapxv20
333.68333.77335.94romulust
6995.937000.947003.55T:elephant160v2
7459.747463.217473.19T:elephant176v2
18126.3018141.9118146.93aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
7.007.007.01ascon128av12
10.2410.2510.26ascon128v12
10.4910.5010.51ascon80pqv12
14.0614.0614.11ascon128abi32v12
20.3820.3820.38ascon128bi32v12
21.5521.5821.62T:xoodyakround3
30.4930.5230.53T:schwaemm256128v2
34.5534.7234.92T:aes256gcmv1
39.0039.0139.03T:isapa128av20
40.5140.5440.56T:schwaemm192192v2
42.5042.5242.52T:giftcofb128v1
43.6243.6343.66T:isapa128v20
46.0246.0346.04T:schwaemm256256v2
48.5448.6249.90T:aes128gcmv1
50.2450.2550.30T:tinyjambu128v2
53.6853.7053.78T:schwaemm128128v2
59.2559.2859.29T:tinyjambu192v2
65.2965.3165.34T:romulusn
67.7567.7767.94T:tinyjambu256v2
98.3598.5598.60T:isapk128av20
114.26114.27114.28romulusn
129.65129.93130.02T:isapk128v20
169.49171.10171.19romulusm
205.17205.21205.23T:elephant200v2
238.22238.28241.61T:isapxv20
333.68333.88336.37romulust
6985.756987.587000.60T:elephant160v2
7459.857464.987478.10T:elephant176v2
18128.0418145.0518157.79aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
7.017.017.01ascon128av12
10.2610.2610.26ascon128v12
10.5110.5110.51ascon80pqv12
14.0714.0714.11ascon128abi32v12
20.3820.3820.38ascon128bi32v12
21.6421.6821.70T:xoodyakround3
21.7221.7621.78T:isapa128v20
25.8525.8825.91T:isapa128av20
30.5030.5230.52T:schwaemm256128v2
34.0434.3234.56T:aes256gcmv1
40.5240.5340.56T:schwaemm192192v2
42.5242.5242.52T:giftcofb128v1
46.0346.0346.04T:schwaemm256256v2
48.4848.5548.70T:aes128gcmv1
50.2450.2550.26T:tinyjambu128v2
53.6953.7553.78T:schwaemm128128v2
59.2559.2759.36T:tinyjambu192v2
65.2865.3065.31T:romulusn
66.2766.4266.57T:isapk128av20
67.7567.7667.83T:tinyjambu256v2
82.0082.0382.22T:isapk128v20
114.05114.08114.14romulust
114.25114.26114.28romulusn
138.20138.23138.25T:isapxv20
169.46170.95171.15romulusm
204.64205.22205.30T:elephant200v2
381.30381.64382.24aes256gcmv1
6985.066991.337001.33T:elephant160v2
7457.217462.107473.64T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
7.027.047.05ascon128av12
10.5010.5110.51ascon128v12
10.6110.6310.64ascon80pqv12
14.0514.0814.09ascon128abi32v12
16.8416.9116.92T:xoodyakround3
19.2119.3319.48T:aes256gcmv1
20.3620.3820.39ascon128bi32v12
30.3130.3230.34T:schwaemm256128v2
30.6130.6430.69T:aes128gcmv1
32.4332.4432.46T:isapa128av20
32.7632.7732.80T:isapa128v20
40.2940.3040.30T:schwaemm192192v2
41.4941.5041.51T:tinyjambu128v2
42.3442.3542.36T:giftcofb128v1
45.2845.4845.49T:schwaemm256256v2
46.3746.3846.39T:tinyjambu192v2
50.5050.5050.51T:tinyjambu256v2
53.5453.5553.57T:schwaemm128128v2
57.1857.1857.21T:romulusn
81.4181.5281.59T:isapk128av20
84.7484.7585.23romulusn
105.10105.32105.94T:isapk128v20
111.84113.69113.73romulusm
153.32153.38153.48T:elephant200v2
188.02188.08188.16T:isapxv20
224.24225.32225.41romulust
5239.415246.205248.36T:elephant160v2
5582.605589.435595.93T:elephant176v2
9256.799258.459261.22aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
7.007.017.01ascon128av12
10.4310.4410.44ascon128v12
10.5010.5110.51ascon80pqv12
13.9313.9413.96ascon128abi32v12
16.5716.5916.60T:xoodyakround3
20.1220.4020.53T:aes256gcmv1
20.4420.4520.45ascon128bi32v12
30.3130.3330.33T:schwaemm256128v2
30.5330.6130.66T:aes128gcmv1
32.4332.4432.45T:isapa128av20
32.7732.7832.78T:isapa128v20
40.2940.3140.34T:schwaemm192192v2
41.4841.5041.50T:tinyjambu128v2
42.3542.3642.38T:giftcofb128v1
45.3045.5245.52T:schwaemm256256v2
46.2146.2646.27T:tinyjambu192v2
50.6250.6350.64T:tinyjambu256v2
53.5153.5253.53T:schwaemm128128v2
56.9056.9256.93T:romulusn
81.4981.5281.57T:isapk128av20
85.2085.2085.21romulusn
105.22105.32105.42T:isapk128v20
112.86113.64113.81romulusm
153.09153.44153.48T:elephant200v2
188.07188.09188.17T:isapxv20
224.03224.16225.52romulust
5240.465247.635248.91T:elephant160v2
5582.745584.405593.12T:elephant176v2
9250.109259.979263.24aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
7.017.017.01ascon128av12
10.4410.4410.44ascon128v12
10.5110.5110.54ascon80pqv12
13.9513.9513.96ascon128abi32v12
16.6116.6416.65T:xoodyakround3
20.0020.2220.71T:aes256gcmv1
20.4520.4520.45ascon128bi32v12
21.8121.8321.84T:isapa128v20
25.8625.8825.89T:isapa128av20
30.3130.3330.33T:schwaemm256128v2
30.5630.6130.67T:aes128gcmv1
40.3040.3040.31T:schwaemm192192v2
41.5041.5041.51T:tinyjambu128v2
42.3642.3642.36T:giftcofb128v1
45.3045.5345.53T:schwaemm256256v2
46.2446.2646.31T:tinyjambu192v2
50.6250.6350.63T:tinyjambu256v2
53.5353.5553.55T:schwaemm128128v2
56.9156.9256.94T:romulusn
65.4065.4965.56T:isapk128av20
81.3281.3481.43T:isapk128v20
85.1985.2285.22romulusn
112.47113.40113.80romulusm
114.11114.25114.32romulust
137.96137.98137.99T:isapxv20
153.32153.45153.54T:elephant200v2
381.10382.07383.67aes256gcmv1
5239.075246.375250.18T:elephant160v2
5580.955586.115590.69T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
5.986.166.33T:aes256gcmv1
6.876.886.88ascon128av12
10.5010.5110.51ascon128v12
10.7510.7610.76ascon80pqv12
11.5911.6111.63T:xoodyakround3
12.5312.6112.67T:aes128gcmv1
13.8013.8113.86ascon128abi32v12
20.3720.3820.38ascon128bi32v12
21.8721.8921.90T:isapa128v20
25.8825.8825.88T:isapa128av20
30.1230.1530.15T:schwaemm256128v2
32.7532.7532.75T:tinyjambu128v2
33.2533.2533.26T:tinyjambu192v2
33.4933.5033.50T:tinyjambu256v2
40.0540.1040.12T:schwaemm192192v2
42.1942.2142.22T:giftcofb128v1
44.5644.5644.57T:schwaemm256256v2
48.4948.5048.53T:romulusn
53.2653.3953.41T:schwaemm128128v2
56.0856.1156.13romulusn
56.1156.4356.44romulusm
64.4364.5964.70T:isapk128av20
80.6480.7381.17T:isapk128v20
102.02102.06102.13T:elephant200v2
114.09114.12114.25romulust
137.72137.74137.75T:isapxv20
381.26381.82386.79aes256gcmv1
3492.983493.623507.44T:elephant160v2
3687.553688.603693.25T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
6.056.336.41T:aes256gcmv1
7.007.007.01ascon128av12
10.4910.5110.51ascon80pqv12
10.6210.6210.63ascon128v12
11.5611.6011.63T:xoodyakround3
12.5412.6012.68T:aes128gcmv1
13.8113.8113.86ascon128abi32v12
20.5020.5120.51ascon128bi32v12
21.8521.8821.90T:isapa128v20
25.8525.8825.90T:isapa128av20
30.1130.1530.16T:schwaemm256128v2
32.7432.7532.76T:tinyjambu128v2
33.2433.2533.26T:tinyjambu192v2
33.4933.5033.51T:tinyjambu256v2
40.0740.1140.12T:schwaemm192192v2
42.2042.2142.23T:giftcofb128v1
44.5644.5744.59T:schwaemm256256v2
48.4948.5349.02T:romulusn
53.2653.3253.41T:schwaemm128128v2
56.1556.1656.17romulusn
56.1756.4356.45romulusm
64.4264.6064.68T:isapk128av20
80.6580.6980.79T:isapk128v20
102.14102.17102.19T:elephant200v2
114.33114.46114.57romulust
137.70137.74137.80T:isapxv20
381.48381.82388.69aes256gcmv1
3491.953493.163497.24T:elephant160v2
3687.633688.243691.29T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
5.916.136.46T:aes256gcmv1
7.017.017.01ascon128av12
10.5110.5110.51ascon80pqv12
10.6310.6310.63ascon128v12
11.5811.6011.62T:xoodyakround3
12.5512.5812.67T:aes128gcmv1
13.8213.8213.86ascon128abi32v12
20.5120.5120.51ascon128bi32v12
21.8521.8821.90T:isapa128v20
25.8525.8825.90T:isapa128av20
30.1330.1530.16T:schwaemm256128v2
32.7432.7532.76T:tinyjambu128v2
33.2433.2533.29T:tinyjambu192v2
33.4933.5133.51T:tinyjambu256v2
40.0640.1140.12T:schwaemm192192v2
42.2142.2142.21T:giftcofb128v1
44.5644.5744.57T:schwaemm256256v2
48.5048.5248.54T:romulusn
53.2653.3253.40T:schwaemm128128v2
56.1456.1556.18romulusn
56.1856.4256.45romulusm
64.4364.5464.68T:isapk128av20
80.5480.6880.80T:isapk128v20
102.14102.17102.20T:elephant200v2
114.12114.30114.53romulust
137.71137.73137.76T:isapxv20
381.46381.75385.37aes256gcmv1
3492.943493.913497.18T:elephant160v2
3687.683688.313695.82T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
7.197.197.21ascon128av12
10.6510.6510.66ascon128v12
10.7710.7710.78ascon80pqv12
14.4214.4414.44ascon128abi32v12
17.0417.1017.10T:xoodyakround3
20.7220.7220.73ascon128bi32v12
26.6426.8326.95T:aes256gcmv1
31.1831.1931.20T:schwaemm256128v2
33.0533.0833.13T:aes128gcmv1
35.3635.3635.37T:isapa128av20
41.1641.1741.19T:schwaemm192192v2
41.8241.8241.83T:tinyjambu128v2
42.7642.7642.78T:giftcofb128v1
46.4846.6346.64T:schwaemm256256v2
46.7246.7346.74T:tinyjambu192v2
47.8247.8347.84T:isapa128v20
50.8650.8650.87T:tinyjambu256v2
54.2154.2254.23T:schwaemm128128v2
57.8957.9057.92T:romulusn
85.4985.7485.74romulusn
95.4495.5395.56T:isapk128av20
112.60114.28114.30romulusm
156.49156.54156.59T:elephant200v2
185.18185.19185.21T:isapk128v20
227.13228.11228.50romulust
305.35305.36305.38T:isapxv20
5298.025299.415309.01T:elephant160v2
5617.015618.425626.12T:elephant176v2
9431.559434.099450.47aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
7.177.177.17ascon128av12
10.5810.5810.58ascon128v12
10.6510.6510.65ascon80pqv12
14.3014.3014.33ascon128abi32v12
16.7816.7916.80T:xoodyakround3
20.8020.8020.80ascon128bi32v12
29.3429.5029.61T:aes256gcmv1
31.1731.1931.20T:schwaemm256128v2
32.9632.9933.05T:aes128gcmv1
35.3935.3935.39T:isapa128av20
41.1741.1741.18T:schwaemm192192v2
41.8241.8241.83T:tinyjambu128v2
42.7842.7842.79T:giftcofb128v1
46.6046.6146.68T:tinyjambu192v2
46.4746.6846.68T:schwaemm256256v2
47.8447.8547.86T:isapa128v20
50.9951.0051.00T:tinyjambu256v2
54.1854.2054.21T:schwaemm128128v2
57.6557.6757.84T:romulusn
85.8285.8285.82romulusn
95.5495.5695.62T:isapk128av20
113.36114.42114.43romulusm
156.57156.59156.61T:elephant200v2
185.22185.27185.32T:isapk128v20
227.27227.31227.81romulust
305.36305.37305.48T:isapxv20
5299.015299.785306.40T:elephant160v2
5617.095619.135625.93T:elephant176v2
9432.339439.799443.57aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
7.177.177.17ascon128av12
10.5810.5810.58ascon128v12
10.6510.6510.65ascon80pqv12
14.3014.3014.33ascon128abi32v12
16.8316.8416.85T:xoodyakround3
20.8020.8020.80ascon128bi32v12
27.4927.4927.51T:isapa128av20
29.4829.4829.51T:isapa128v20
31.1731.1931.20T:schwaemm256128v2
32.9532.9933.10T:aes128gcmv1
41.1741.1741.20T:schwaemm192192v2
41.8241.8241.83T:tinyjambu128v2
42.7842.7842.78T:giftcofb128v1
44.4244.6244.95T:aes256gcmv1
46.6046.6046.62T:tinyjambu192v2
46.4846.6946.69T:schwaemm256256v2
50.9951.0051.00T:tinyjambu256v2
54.2154.2154.24T:schwaemm128128v2
57.6457.6657.87T:romulusn
74.7174.7874.81T:isapk128av20
85.8185.8185.84romulusn
113.28114.40114.42romulusm
117.27117.36117.48romulust
124.26124.26124.32T:isapk128v20
156.31156.59156.77T:elephant200v2
197.98198.00198.05T:isapxv20
567.90568.38570.32aes256gcmv1
5299.145300.025308.73T:elephant160v2
5617.075619.605626.16T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
10.7310.8211.29ascon128av12
13.8413.9514.14ascon128v12
13.9813.9814.30ascon80pqv12
22.2922.4323.12ascon128abi32v12
25.7525.7926.52T:xoodyakround3
28.4028.4129.02ascon128bi32v12
49.1649.1649.37T:tinyjambu128v2
50.3850.4850.62T:schwaemm256128v2
52.0252.0252.70T:giftcofb128v1
54.5954.5954.81T:tinyjambu192v2
59.1759.1759.30T:tinyjambu256v2
66.1466.3066.48T:schwaemm192192v2
69.4169.4169.52T:schwaemm128128v2
72.5672.5972.70T:schwaemm256256v2
73.8773.8774.62T:romulusn
87.9988.3089.02T:aes128gcmv1
98.5799.3599.72romulusn
102.52102.62103.23T:isapa128av20
128.52128.83129.04romulusm
196.80198.00201.74T:aes256gcmv1
219.91220.82222.48T:elephant200v2
299.59300.04300.18romulust
394.04394.04394.44T:isapa128v20
404.67404.97405.48T:isapk128av20
2003.322003.552004.90T:isapk128v20
2969.392969.612969.91T:isapxv20
6986.776987.066990.45T:elephant176v2
7088.467088.837092.41T:elephant160v2
13708.0213708.2713778.71aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
10.7510.7511.20ascon128av12
13.8413.8414.04ascon128v12
14.0014.0014.12ascon80pqv12
22.4622.4623.22ascon128abi32v12
25.4125.5826.02T:xoodyakround3
28.9528.9529.45ascon128bi32v12
49.2349.2349.34T:tinyjambu128v2
50.3450.4050.66T:schwaemm256128v2
52.3852.3852.84T:giftcofb128v1
54.5354.5654.70T:tinyjambu192v2
59.3759.4159.60T:tinyjambu256v2
66.1666.2766.53T:schwaemm192192v2
69.2369.2769.29T:schwaemm128128v2
72.9873.0173.30T:schwaemm256256v2
73.8773.9474.33T:romulusn
87.4888.0988.80T:aes128gcmv1
99.5699.84100.05romulusn
103.05103.05103.32T:isapa128av20
128.76128.99129.16romulusm
220.00220.16220.52T:elephant200v2
237.31239.91241.05T:aes256gcmv1
298.95299.20300.29romulust
394.47394.47394.77T:isapa128v20
404.84405.02405.47T:isapk128av20
2004.002005.022006.15T:isapk128v20
2969.542969.742970.11T:isapxv20
6987.056987.176989.21T:elephant176v2
7088.497088.697091.33T:elephant160v2
13708.2313708.8913763.21aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
10.7410.7410.75ascon128av12
13.8413.8413.84ascon128v12
13.8914.0014.00ascon80pqv12
22.4622.4622.46ascon128abi32v12
25.5625.5925.87T:xoodyakround3
28.9528.9528.95ascon128bi32v12
49.2349.2349.33T:tinyjambu128v2
50.3350.3850.47T:schwaemm256128v2
52.3852.3852.38T:giftcofb128v1
54.5354.5354.70T:tinyjambu192v2
59.3759.3759.55T:tinyjambu256v2
64.3864.3865.03T:isapa128av20
66.1666.2366.27T:schwaemm192192v2
69.2369.2469.25T:schwaemm128128v2
72.9772.9772.98T:schwaemm256256v2
73.6173.6673.78T:romulusn
87.2387.8187.95T:aes128gcmv1
99.5699.5699.56romulusn
128.76128.76129.16romulusm
188.22188.48188.95romulust
205.68205.68205.96T:isapa128v20
219.92220.02220.35T:elephant200v2
276.94277.63278.71T:isapk128av20
598.38600.39603.66T:aes256gcmv1
1096.391096.651096.88T:isapk128v20
1552.511552.761553.14T:isapxv20
4855.694855.904856.30aes256gcmv1
6986.806986.886988.27T:elephant176v2
7088.127088.277088.47T:elephant160v2