VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: aarch64; Cortex-A72 (410fd083); 2019 Broadcom BCM2711; 4 x 1500MHz; pi4b, supercop-20241022

[Page version: 20241120 00:41:35]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
7.187.197.19ascon128av12
10.4910.5010.51ascon80pqv12
10.4910.5010.51ascon128v12
14.3114.3514.36ascon128abi32v12
20.3720.3820.38ascon128bi32v12
22.4022.4122.43T:xoodyakround3
30.5130.5230.54T:schwaemm256128v2
32.1532.5632.93T:aes256gcmv1
38.9939.0139.03T:isapa128av20
40.4840.5040.55T:schwaemm192192v2
42.0742.0942.10T:giftcofb128v1
43.6243.6343.64T:isapa128v20
44.5544.5644.76T:schwaemm256256v2
48.6048.8148.91T:aes128gcmv1
50.2550.2550.29T:tinyjambu128v2
53.7153.8253.86T:schwaemm128128v2
59.5059.5059.51T:tinyjambu192v2
65.8965.9165.92T:romulusn
67.5067.5167.52T:tinyjambu256v2
100.13100.17100.32T:isapk128av20
113.59114.21114.22romulusn
132.93133.03133.19T:isapk128v20
169.60169.77169.90romulusm
207.19207.23207.63T:elephant200v2
239.84239.93243.23T:isapxv20
335.90335.97336.08T!!!romulust
7026.017032.497036.90T:elephant160v2
7478.057488.417495.07T:elephant176v2
23016.5623029.2123040.79aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
6.997.007.01ascon128av12
10.2510.2610.26ascon128v12
10.5010.5110.51ascon80pqv12
14.0614.1014.11ascon128abi32v12
20.3720.3820.38ascon128bi32v12
21.8921.9221.95T:xoodyakround3
30.4730.5230.55T:schwaemm256128v2
34.2634.5637.24T:aes256gcmv1
39.0039.0039.04T:isapa128av20
40.4640.5040.56T:schwaemm192192v2
42.3242.3442.35T:giftcofb128v1
43.6343.6443.66T:isapa128v20
44.8244.8945.07T:schwaemm256256v2
48.5848.6848.74T:aes128gcmv1
50.2450.2550.26T:tinyjambu128v2
53.7153.7753.80T:schwaemm128128v2
59.2459.2559.27T:tinyjambu192v2
65.2965.3065.32T:romulusn
67.7567.7667.77T:tinyjambu256v2
100.02100.16100.31T:isapk128av20
112.47112.49113.65romulusn
132.86133.08133.27T:isapk128v20
169.97170.11170.17romulusm
207.31207.59207.63T:elephant200v2
239.82240.01243.16T:isapxv20
335.85335.94336.48T!!!romulust
7017.357032.277036.54T:elephant160v2
7476.247484.227495.72T:elephant176v2
23026.5023033.4723045.19aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
7.017.017.01ascon128av12
10.2610.2610.26ascon128v12
10.5110.5110.51ascon80pqv12
14.0714.1114.11ascon128abi32v12
20.3820.3820.38ascon128bi32v12
21.7321.7521.76T:isapa128v20
21.9822.0122.03T:xoodyakround3
25.8525.8825.88T:isapa128av20
30.4930.5230.55T:schwaemm256128v2
34.1734.7136.84T:aes256gcmv1
40.4840.4940.57T:schwaemm192192v2
42.3442.3542.36T:giftcofb128v1
44.8344.8945.07T:schwaemm256256v2
48.5948.6848.82T:aes128gcmv1
50.2450.2550.26T:tinyjambu128v2
53.7053.7553.80T:schwaemm128128v2
59.2459.2559.27T:tinyjambu192v2
65.2865.3065.32T:romulusn
66.8767.0667.12T:isapk128av20
67.7567.7667.77T:tinyjambu256v2
83.7983.8583.92T:isapk128v20
112.45112.52113.86romulusn
113.04113.11113.16T!!!romulust
139.50139.53139.55T:isapxv20
169.98170.07170.15romulusm
207.24207.37207.41T:elephant200v2
374.77375.24378.48aes256gcmv1
7019.197032.567036.57T:elephant160v2
7483.897494.707495.39T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
7.017.047.05ascon128av12
10.4910.5110.51ascon128v12
10.6110.6310.64ascon80pqv12
14.0614.0914.10ascon128abi32v12
17.0617.0817.08T:xoodyakround3
19.1819.3519.44T:aes256gcmv1
20.3720.3820.39ascon128bi32v12
30.3130.3230.34T:schwaemm256128v2
30.6230.6930.75T:aes128gcmv1
32.4332.4632.48T:isapa128av20
32.7532.7632.94T:isapa128v20
40.3140.3340.34T:schwaemm192192v2
41.4941.5041.51T:tinyjambu128v2
42.2642.2742.28T:giftcofb128v1
44.0344.1844.19T:schwaemm256256v2
46.3746.3846.38T:tinyjambu192v2
50.4950.5050.51T:tinyjambu256v2
53.5453.6053.62T:schwaemm128128v2
57.3057.3157.37T:romulusn
83.4583.4683.50T:isapk128av20
84.9885.3285.33romulusn
107.77107.80107.92T:isapk128v20
112.98113.02113.16romulusm
154.74154.82154.96T:elephant200v2
189.71191.38191.46T:isapxv20
224.37224.40224.45T!!!romulust
5264.095266.185276.77T:elephant160v2
5590.385596.715599.12T:elephant176v2
11696.6211702.5311706.15aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
7.007.007.01ascon128av12
10.4310.4410.44ascon128v12
10.5010.5110.51ascon80pqv12
13.9513.9613.97ascon128abi32v12
16.8016.8216.84T:xoodyakround3
20.0920.3221.74T:aes256gcmv1
20.4420.4420.44ascon128bi32v12
30.3130.3230.34T:schwaemm256128v2
30.5730.6130.66T:aes128gcmv1
32.4332.4532.46T:isapa128av20
32.7632.7632.77T:isapa128v20
40.3040.3140.36T:schwaemm192192v2
41.5041.5041.50T:tinyjambu128v2
42.3842.4042.41T:giftcofb128v1
44.1844.3344.36T:schwaemm256256v2
46.2546.2646.46T:tinyjambu192v2
50.6250.6350.64T:tinyjambu256v2
53.5253.5553.59T:schwaemm128128v2
56.9957.0057.02T:romulusn
83.4183.5183.62T:isapk128av20
84.4584.5084.86romulusn
107.71107.84107.95T:isapk128v20
113.10113.22113.27romulusm
153.69153.93154.82T:elephant200v2
189.71189.89191.39T:isapxv20
224.37224.39224.48T!!!romulust
5262.925265.435267.95T:elephant160v2
5588.605594.875597.32T:elephant176v2
11698.1511702.4611706.93aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
7.017.017.01ascon128av12
10.4410.4410.45ascon128v12
10.5110.5110.51ascon80pqv12
13.9613.9613.97ascon128abi32v12
16.8416.8716.88T:xoodyakround3
19.8420.3721.78T:aes256gcmv1
20.4520.4520.45ascon128bi32v12
21.8121.8221.83T:isapa128v20
25.8625.8825.89T:isapa128av20
30.3130.3230.34T:schwaemm256128v2
30.5930.6530.73T:aes128gcmv1
40.3040.3440.36T:schwaemm192192v2
41.5041.5041.50T:tinyjambu128v2
42.4042.4142.44T:giftcofb128v1
44.1644.3444.35T:schwaemm256256v2
46.2546.2646.26T:tinyjambu192v2
50.6250.6350.67T:tinyjambu256v2
53.5253.5553.57T:schwaemm128128v2
56.9957.0057.01T:romulusn
66.9166.9366.96T:isapk128av20
83.1983.2283.25T:isapk128v20
84.4784.5084.89romulusn
112.94112.97113.01T!!!romulust
113.20113.21113.27romulusm
139.51139.53139.60T:isapxv20
153.77154.78154.81T:elephant200v2
375.07375.39377.20aes256gcmv1
5262.875265.195266.75T:elephant160v2
5586.725596.635597.29T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
6.026.246.40T:aes256gcmv1
6.876.886.88ascon128av12
10.5010.5110.51ascon128v12
10.7510.7510.76ascon80pqv12
11.7211.7411.77T:xoodyakround3
12.5412.6312.72T:aes128gcmv1
13.8113.8513.86ascon128abi32v12
20.3720.3820.38ascon128bi32v12
21.8721.8821.88T:isapa128v20
25.8725.8825.88T:isapa128av20
30.1130.1530.15T:schwaemm256128v2
32.7532.7532.75T:tinyjambu128v2
33.2533.2533.26T:tinyjambu192v2
33.4933.5033.50T:tinyjambu256v2
40.0940.1440.15T:schwaemm192192v2
42.4542.4742.49T:giftcofb128v1
43.4943.5943.60T:schwaemm256256v2
48.6948.7149.12T:romulusn
53.3353.3853.41T:schwaemm128128v2
56.3056.3456.37romulusm
55.8956.4356.47romulusn
66.7966.8366.91T:isapk128av20
82.5082.6182.67T:isapk128v20
103.01103.04103.08T:elephant200v2
112.83112.89112.91T!!!romulust
139.53139.56139.58T:isapxv20
372.33374.91375.72aes256gcmv1
3509.483510.473524.94T:elephant160v2
3696.453702.093711.69T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
6.146.356.69T:aes256gcmv1
6.997.017.01ascon128av12
10.5010.5010.51ascon80pqv12
10.6210.6210.63ascon128v12
11.7211.7511.78T:xoodyakround3
12.5412.6212.69T:aes128gcmv1
13.8113.8513.86ascon128abi32v12
20.4920.5120.51ascon128bi32v12
21.8521.8821.90T:isapa128v20
25.8725.8825.91T:isapa128av20
30.1130.1530.16T:schwaemm256128v2
32.7432.7532.76T:tinyjambu128v2
33.2433.2533.26T:tinyjambu192v2
33.4933.4933.51T:tinyjambu256v2
40.1040.1440.16T:schwaemm192192v2
42.4542.4842.49T:giftcofb128v1
43.4943.5043.51T:schwaemm256256v2
48.7349.1249.14T:romulusn
53.3053.3953.41T:schwaemm128128v2
56.3156.3456.38romulusm
56.1056.4756.49romulusn
66.8166.8466.86T:isapk128av20
82.5482.6082.66T:isapk128v20
103.04103.06103.17T:elephant200v2
112.80112.84112.88T!!!romulust
139.52139.55139.59T:isapxv20
375.02375.25375.39aes256gcmv1
3509.883513.103525.16T:elephant160v2
3696.263698.663710.66T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
6.116.296.52T:aes256gcmv1
7.017.017.01ascon128av12
10.5010.5010.51ascon80pqv12
10.6310.6310.63ascon128v12
11.7111.7411.76T:xoodyakround3
12.5612.6212.68T:aes128gcmv1
13.8213.8613.86ascon128abi32v12
20.5120.5120.51ascon128bi32v12
21.8521.8821.90T:isapa128v20
25.8525.8825.91T:isapa128av20
30.1230.1530.16T:schwaemm256128v2
32.7432.7532.76T:tinyjambu128v2
33.2433.2533.26T:tinyjambu192v2
33.4933.5033.51T:tinyjambu256v2
40.1140.1440.16T:schwaemm192192v2
42.4642.4742.49T:giftcofb128v1
43.4943.5043.61T:schwaemm256256v2
48.7249.1149.15T:romulusn
53.2753.3953.41T:schwaemm128128v2
56.3256.3556.39romulusm
56.1156.4256.45romulusn
66.8266.8566.88T:isapk128av20
82.5482.5982.67T:isapk128v20
102.32103.05103.09T:elephant200v2
112.78112.81112.90T!!!romulust
139.54139.56139.57T:isapxv20
375.01375.26375.38aes256gcmv1
3509.953512.563524.61T:elephant160v2
3696.543699.353711.75T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
7.197.197.21ascon128av12
10.6510.6510.66ascon128v12
10.7810.7810.78ascon80pqv12
14.4314.4414.44ascon128abi32v12
17.2717.2717.27T:xoodyakround3
20.7220.7220.73ascon128bi32v12
26.6526.7526.84T:aes256gcmv1
31.1831.2031.22T:schwaemm256128v2
32.9733.0233.06T:aes128gcmv1
35.3635.3735.38T:isapa128av20
41.1941.2041.21T:schwaemm192192v2
41.8241.8241.83T:tinyjambu128v2
42.6342.6442.65T:giftcofb128v1
45.1745.3045.30T:schwaemm256256v2
46.7246.7246.73T:tinyjambu192v2
47.8247.8247.84T:isapa128v20
50.8750.8750.87T:tinyjambu256v2
54.2454.3054.30T:schwaemm128128v2
58.0358.0358.03T:romulusn
85.6585.9285.93romulusn
97.5197.5297.53T:isapk128av20
113.63113.69113.73romulusm
157.97158.24158.72T:elephant200v2
187.86187.88187.94T:isapk128v20
227.41227.43227.46T!!!romulust
307.51307.60309.00T:isapxv20
5322.425324.525333.84T:elephant160v2
5629.735630.455640.92T:elephant176v2
11936.5711937.7811939.75aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
7.177.177.17ascon128av12
10.5810.5810.58ascon128v12
10.6510.6510.65ascon80pqv12
14.3114.3314.33ascon128abi32v12
17.0217.0317.04T:xoodyakround3
20.8020.8020.80ascon128bi32v12
29.3129.5430.76T:aes256gcmv1
31.1931.2031.21T:schwaemm256128v2
32.9132.9533.01T:aes128gcmv1
35.3935.4035.40T:isapa128av20
41.1941.2041.21T:schwaemm192192v2
41.8241.8241.83T:tinyjambu128v2
42.7642.7742.78T:giftcofb128v1
45.3145.4745.49T:schwaemm256256v2
46.6046.6046.60T:tinyjambu192v2
47.8447.8447.85T:isapa128v20
50.9951.0051.00T:tinyjambu256v2
54.2454.2554.28T:schwaemm128128v2
57.7257.7357.74T:romulusn
85.0885.0985.40romulusn
97.5597.6097.64T:isapk128av20
113.89113.94113.98romulusm
158.03158.11159.05T:elephant200v2
187.88187.91187.97T:isapk128v20
227.43227.43227.47T!!!romulust
307.53307.61309.01T:isapxv20
5321.655324.385333.17T:elephant160v2
5629.575629.855639.10T:elephant176v2
11937.9411939.1011941.08aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
7.177.177.17ascon128av12
10.5810.5810.59ascon128v12
10.6510.6510.65ascon80pqv12
14.3114.3314.33ascon128abi32v12
17.0717.0817.09T:xoodyakround3
20.8020.8020.80ascon128bi32v12
27.4927.4927.51T:isapa128av20
29.4829.4829.49T:isapa128v20
31.1831.2031.21T:schwaemm256128v2
32.8832.9132.97T:aes128gcmv1
41.1941.1941.20T:schwaemm192192v2
41.8241.8241.83T:tinyjambu128v2
42.7642.7742.78T:giftcofb128v1
44.5444.8145.88T:aes256gcmv1
45.4145.4745.49T:schwaemm256256v2
46.6046.6046.60T:tinyjambu192v2
50.9951.0051.00T:tinyjambu256v2
54.2054.2454.24T:schwaemm128128v2
57.7257.7257.74T:romulusn
76.2776.2976.31T:isapk128av20
85.0885.1085.55romulusn
113.80113.94113.99romulusm
115.97115.99116.01T!!!romulust
126.30126.31126.42T:isapk128v20
157.99158.11159.03T:elephant200v2
199.75199.76199.78T:isapxv20
612.12612.44614.91aes256gcmv1
5324.075324.395331.03T:elephant160v2
5629.655630.465638.87T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
10.7210.8411.45ascon128av12
13.8613.9614.17ascon128v12
14.0014.1114.41ascon80pqv12
22.3022.4423.12ascon128abi32v12
26.0826.1026.55T:xoodyakround3
28.4228.5528.91ascon128bi32v12
49.1649.1649.37T:tinyjambu128v2
50.5550.6050.84T:schwaemm256128v2
50.8451.0451.30T:giftcofb128v1
54.5954.5954.71T:tinyjambu192v2
59.1759.2059.41T:tinyjambu256v2
66.2366.4266.73T:schwaemm192192v2
69.6370.0070.02T:schwaemm128128v2
70.4270.6370.83T:schwaemm256256v2
73.9874.0374.66T:romulusn
86.0586.4587.27T:aes128gcmv1
99.3999.4999.61romulusn
102.35102.59103.21T:isapa128av20
129.48129.49129.84romulusm
195.92197.79201.82T:aes256gcmv1
222.15222.33223.41T:elephant200v2
296.83297.04297.37T!!!romulust
394.07394.07394.52T:isapa128v20
405.88406.04406.48T:isapk128av20
2011.142011.392011.81T:isapk128v20
2981.602981.942983.62T:isapxv20
7002.457002.737005.50T:elephant176v2
7120.707121.127124.54T:elephant160v2
17356.3217358.0017418.66aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
10.7710.7711.23ascon128av12
13.7513.8413.95ascon128v12
13.8814.0014.38ascon80pqv12
22.4522.5923.05ascon128abi32v12
25.7725.8426.18T:xoodyakround3
28.9729.0929.58ascon128bi32v12
49.2349.3449.35T:tinyjambu128v2
50.5250.5950.70T:schwaemm256128v2
51.0851.1051.30T:giftcofb128v1
54.5354.6654.76T:tinyjambu192v2
59.4059.4759.60T:tinyjambu256v2
66.3366.6867.01T:schwaemm192192v2
69.4569.8369.83T:schwaemm128128v2
70.9571.1171.30T:schwaemm256256v2
73.9774.0374.60T:romulusn
85.1685.7086.33T:aes128gcmv1
99.5999.5999.69romulusn
103.05103.16103.23T:isapa128av20
129.84130.18130.48romulusm
222.23222.33222.44T:elephant200v2
238.30241.44243.80T:aes256gcmv1
296.66296.98298.02T!!!romulust
394.49394.49394.80T:isapa128v20
406.58407.50408.62T:isapk128av20
2011.952014.702043.47T:isapk128v20
2981.772982.232983.30T:isapxv20
7002.367002.747004.89T:elephant176v2
7120.967121.207123.27T:elephant160v2
17356.2717357.9317435.91aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
10.7710.7710.77ascon128av12
13.7513.7513.77ascon128v12
13.8813.8813.89ascon80pqv12
22.4522.4522.47ascon128abi32v12
25.8826.0226.34T:xoodyakround3
28.9628.9728.97ascon128bi32v12
49.2349.2349.34T:tinyjambu128v2
50.5150.5350.56T:schwaemm256128v2
51.0851.1051.15T:giftcofb128v1
54.5354.5354.70T:tinyjambu192v2
59.3759.3759.51T:tinyjambu256v2
64.3864.3864.64T:isapa128av20
66.3066.4166.90T:schwaemm192192v2
69.4569.8469.84T:schwaemm128128v2
70.9470.9571.11T:schwaemm256256v2
73.7373.7973.99T:romulusn
85.0585.6986.20T:aes128gcmv1
99.4599.5999.59romulusn
129.48129.56130.38romulusm
185.23185.39185.70T!!!romulust
205.68205.68205.96T:isapa128v20
222.09222.26222.46T:elephant200v2
279.77280.22280.99T:isapk128av20
601.23602.84604.13T:aes256gcmv1
1102.741103.661119.26T:isapk128v20
1559.351559.461559.72T:isapxv20
6066.956067.586068.45aes256gcmv1
7002.397002.757004.12T:elephant176v2
7120.957121.027122.62T:elephant160v2