VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: aarch64; Cortex-A72 (410fd083); 2019 Broadcom BCM2711; 4 x 1500MHz; pi4b, supercop-20260330

[Page version: 20260717 22:09:05]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
6.946.956.98ascon128av12
10.3710.3810.39ascon128v12
10.3910.4110.42ascon80pqv12
14.4814.5014.52ascon128abi32v12
21.1221.1421.16ascon128bi32v12
22.8722.8822.92T:xoodyakround3
24.2924.3224.39T:schwaemm256128v2
32.0832.1232.15T:schwaemm128128v2
31.7232.2833.18T:aes256gcmv1
32.3332.3632.39T:schwaemm192192v2
35.8535.8735.91T:schwaemm256256v2
36.0736.1036.13T:giftcofb128v1
38.9939.0339.09T:isapa128av20
43.8643.9544.10T:isapa128v20
48.0448.4948.68T:aes128gcmv1
55.0055.0455.10T:tinyjambu128v2
63.2763.2963.34T:tinyjambu192v2
64.4964.5764.72T:romulusn
70.2570.2870.34T:tinyjambu256v2
95.0895.1695.35T:isapk128av20
113.83113.93114.03romulusn
125.73126.17126.48T:isapk128v20
169.38169.61170.44romulusm
193.85193.92194.05T:elephant200v2
225.10225.36226.03T:isapxv20
335.27335.62335.96T!!!romulust
6939.946940.206940.40T:elephant160v2
7445.067445.297445.59T:elephant176v2
22968.9222969.3222969.71aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
6.967.007.02ascon128av12
10.2710.2910.32ascon80pqv12
10.3010.3310.34ascon128v12
14.4114.4614.47ascon128abi32v12
20.3820.4020.40ascon128bi32v12
22.0822.0822.09T:xoodyakround3
24.3224.3624.38T:schwaemm256128v2
32.0232.0532.09T:schwaemm128128v2
32.1632.1832.20T:schwaemm192192v2
33.5934.1535.10T:aes256gcmv1
35.7635.8235.91T:giftcofb128v1
35.9736.0136.06T:schwaemm256256v2
39.0039.0339.07T:isapa128av20
43.8443.9544.11T:isapa128v20
48.4448.6249.52T:aes128gcmv1
55.0055.0355.05T:tinyjambu128v2
63.2863.2963.39T:tinyjambu192v2
64.0664.0964.15T:romulusn
70.2670.3170.37T:tinyjambu256v2
95.2095.2895.45T:isapk128av20
112.97113.74113.95romulusn
125.87126.12126.57T:isapk128v20
169.25169.53170.37romulusm
193.89193.95194.09T:elephant200v2
225.48226.06230.56T:isapxv20
335.26335.36335.54T!!!romulust
6939.926940.196940.52T:elephant160v2
7444.987445.227445.54T:elephant176v2
22964.8122965.0922965.54aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
6.967.007.02ascon128av12
10.2810.2810.30ascon80pqv12
10.3010.3210.34ascon128v12
14.4514.4814.48ascon128abi32v12
20.3920.4020.41ascon128bi32v12
22.0222.0422.15T:isapa128v20
22.1722.1722.19T:xoodyakround3
24.3324.3724.42T:schwaemm256128v2
25.8725.9025.96T:isapa128av20
32.0332.0432.07T:schwaemm128128v2
32.1632.1932.22T:schwaemm192192v2
33.0033.9535.32T:aes256gcmv1
35.7735.8235.88T:giftcofb128v1
35.9836.0236.06T:schwaemm256256v2
48.3948.5049.08T:aes128gcmv1
55.0155.0355.05T:tinyjambu128v2
63.1563.2063.28T:isapk128av20
63.2763.2863.35T:tinyjambu192v2
64.0564.0964.15T:romulusn
70.2670.3170.35T:tinyjambu256v2
78.7178.7978.97T:isapk128v20
113.20113.25113.31T!!!romulust
112.89113.74113.99romulusn
130.05130.15130.32T:isapxv20
169.22169.51170.34romulusm
193.86193.92194.06T:elephant200v2
362.28362.57362.74aes256gcmv1
6939.996940.296940.61T:elephant160v2
7445.007445.197445.53T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
6.916.936.94ascon128av12
10.3310.3310.34ascon128v12
10.4510.4610.47ascon80pqv12
14.1814.1914.22ascon128abi32v12
17.3317.3617.38T:xoodyakround3
18.4018.6319.43T:aes256gcmv1
20.8820.8920.90ascon128bi32v12
24.2724.2924.33T:schwaemm256128v2
30.3930.6530.90T:aes128gcmv1
32.1232.1532.18T:schwaemm128128v2
32.2532.2732.28T:schwaemm192192v2
32.4432.4732.51T:isapa128av20
32.9632.9833.09T:isapa128v20
35.7035.7235.76T:schwaemm256256v2
35.8935.9135.95T:giftcofb128v1
45.8445.8645.90T:tinyjambu128v2
50.2750.2850.33T:tinyjambu192v2
52.7652.7752.83T:tinyjambu256v2
56.6256.7356.85T:romulusn
79.2779.3279.46T:isapk128av20
84.6984.9385.09romulusn
102.13102.32102.47T:isapk128v20
112.75112.91113.23romulusm
144.72144.82144.90T:elephant200v2
177.81177.97179.97T:isapxv20
224.07224.18224.38T!!!romulust
5204.765204.975205.13T:elephant160v2
5562.655562.855563.08T:elephant176v2
11664.8611665.1711665.84aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
6.826.856.86ascon128av12
10.2810.2910.31ascon80pqv12
10.3410.3610.38ascon128v12
14.2114.2214.23ascon128abi32v12
16.9316.9516.97T:xoodyakround3
19.3020.0020.51T:aes256gcmv1
20.4520.4620.48ascon128bi32v12
24.2824.3224.36T:schwaemm256128v2
30.5630.7631.20T:aes128gcmv1
32.0232.1032.16T:schwaemm128128v2
32.1632.1832.22T:schwaemm192192v2
32.4432.4832.53T:isapa128av20
32.9632.9933.18T:isapa128v20
35.7435.7735.82T:giftcofb128v1
35.7635.7835.82T:schwaemm256256v2
45.8445.8545.89T:tinyjambu128v2
50.2650.2750.31T:tinyjambu192v2
52.7752.7952.86T:tinyjambu256v2
56.4056.4656.55T:romulusn
79.3279.4279.52T:isapk128av20
84.5384.9585.06romulusn
102.13102.35102.52T:isapk128v20
112.69112.83113.29romulusm
144.74144.82144.94T:elephant200v2
177.82177.93178.03T:isapxv20
224.04224.12224.21T!!!romulust
5204.765204.955205.11T:elephant160v2
5562.755562.935563.18T:elephant176v2
11663.4711663.8011663.99aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
6.836.856.86ascon128av12
10.2810.2910.29ascon80pqv12
10.3510.3610.38ascon128v12
14.2014.2214.23ascon128abi32v12
16.9816.9917.02T:xoodyakround3
18.9519.8320.49T:aes256gcmv1
20.4520.4620.48ascon128bi32v12
22.0122.0222.10T:isapa128v20
24.2824.3224.36T:schwaemm256128v2
25.8725.9025.94T:isapa128av20
30.5730.7331.08T:aes128gcmv1
32.0632.1132.15T:schwaemm128128v2
32.1732.1832.21T:schwaemm192192v2
35.7435.7735.84T:giftcofb128v1
35.7635.7935.81T:schwaemm256256v2
45.8445.8545.89T:tinyjambu128v2
50.2750.2750.30T:tinyjambu192v2
52.7752.8052.85T:tinyjambu256v2
56.4056.4656.55T:romulusn
63.3063.3663.47T:isapk128av20
78.5778.6378.76T:isapk128v20
84.4984.9385.05romulusn
112.69112.84113.25romulusm
113.04113.09113.15T!!!romulust
130.10130.22130.25T:isapxv20
144.75144.84144.94T:elephant200v2
362.22362.51362.64aes256gcmv1
5204.755204.925205.10T:elephant160v2
5562.595562.825563.10T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
5.055.265.40T:aes256gcmv1
6.876.896.91ascon128av12
10.2710.2810.29ascon128v12
10.5210.5310.54ascon80pqv12
11.8011.8411.90T:xoodyakround3
12.8412.9313.03T:aes128gcmv1
13.9113.9313.94ascon128abi32v12
20.6420.6520.66ascon128bi32v12
22.0122.0222.04T:isapa128v20
24.2424.2624.30T:schwaemm256128v2
25.8725.9225.97T:isapa128av20
32.0932.1832.21T:schwaemm128128v2
32.1532.1932.21T:schwaemm192192v2
35.2435.2635.29T:tinyjambu256v2
35.5335.5635.59T:schwaemm256256v2
35.7035.7135.74T:giftcofb128v1
36.6636.6836.70T:tinyjambu128v2
37.2637.2837.29T:tinyjambu192v2
48.7348.8248.91T:romulusn
55.4355.7656.05romulusn
56.0456.1056.16romulusm
63.4663.5463.65T:isapk128av20
78.3078.3878.48T:isapk128v20
96.0796.2096.29T:elephant200v2
112.85112.88112.94T!!!romulust
130.06130.21130.37T:isapxv20
360.20360.45362.45aes256gcmv1
3469.103469.353469.58T:elephant160v2
3679.763680.033680.30T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
5.105.245.40T:aes256gcmv1
6.686.696.71ascon128av12
10.2710.3010.30ascon80pqv12
10.4110.4210.43ascon128v12
11.7911.8211.85T:xoodyakround3
12.8912.9713.08T:aes128gcmv1
13.9914.0014.01ascon128abi32v12
20.5120.5220.53ascon128bi32v12
22.0022.0222.06T:isapa128v20
24.2324.2724.29T:schwaemm256128v2
25.8725.9125.93T:isapa128av20
32.0232.1532.22T:schwaemm128128v2
32.1632.1732.20T:schwaemm192192v2
35.2335.2635.30T:tinyjambu256v2
35.5235.5535.57T:schwaemm256256v2
35.7035.7135.74T:giftcofb128v1
36.6436.6736.70T:tinyjambu128v2
37.2437.2637.27T:tinyjambu192v2
48.7448.8148.92T:romulusn
55.9356.0456.29romulusm
55.9956.0856.15romulusn
63.4663.5463.68T:isapk128av20
78.3778.4678.63T:isapk128v20
96.0896.1896.34T:elephant200v2
112.83112.85112.94T!!!romulust
130.08130.22130.36T:isapxv20
362.14362.52362.79aes256gcmv1
3469.083469.363469.63T:elephant160v2
3679.783680.013680.30T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
4.55?5.27?5.74?T:aes256gcmv1
6.686.706.72ascon128av12
10.2710.2910.30ascon80pqv12
10.3810.4010.43ascon128v12
11.7911.8411.89T:xoodyakround3
12.9413.0213.10T:aes128gcmv1
13.9914.0014.01ascon128abi32v12
20.5120.5220.54ascon128bi32v12
22.0022.0322.07T:isapa128v20
24.2324.2624.29T:schwaemm256128v2
25.8625.9025.96T:isapa128av20
32.0532.1732.22T:schwaemm128128v2
32.1632.1932.21T:schwaemm192192v2
35.2335.2635.29T:tinyjambu256v2
35.5435.5635.59T:schwaemm256256v2
35.7035.7235.73T:giftcofb128v1
36.6536.6736.71T:tinyjambu128v2
37.2537.2637.27T:tinyjambu192v2
48.7348.7948.91T:romulusn
55.9256.0456.29romulusm
56.0456.0856.17romulusn
63.4563.5163.61T:isapk128av20
78.4278.4678.64T:isapk128v20
96.0896.2096.29T:elephant200v2
112.84112.85112.93T!!!romulust
130.03130.14130.31T:isapxv20
362.25362.53362.73aes256gcmv1
3469.073469.373469.66T:elephant160v2
3679.793680.033680.27T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
7.137.147.15ascon128av12
10.5210.5310.53ascon128v12
10.6510.6610.66ascon80pqv12
14.6114.6214.64ascon128abi32v12
17.6117.6217.65T:xoodyakround3
21.3121.3221.33ascon128bi32v12
25.0725.0925.11T:schwaemm256128v2
26.7426.9227.55T:aes256gcmv1
32.6732.7232.74T:schwaemm128128v2
33.0633.0733.09T:schwaemm192192v2
33.7233.8334.10T:aes128gcmv1
35.4335.4435.47T:isapa128av20
36.3236.3336.39T:giftcofb128v1
36.7136.7136.73T:schwaemm256256v2
46.2546.2646.30T:tinyjambu128v2
48.3548.3748.53T:isapa128v20
50.7050.7250.74T:tinyjambu192v2
53.1953.2053.26T:tinyjambu256v2
57.4857.5457.68T:romulusn
85.3585.5985.75romulusn
93.6793.7393.86T:isapk128av20
113.42113.54113.88romulusm
147.76147.86147.94T:elephant200v2
182.20182.31182.52T:isapk128v20
227.21227.32227.59T!!!romulust
287.40288.94289.83T:isapxv20
5263.835263.895263.97T:elephant160v2
5605.245605.375605.49T:elephant176v2
11902.4711902.7911903.34aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
7.067.097.10ascon128av12
10.4910.4910.52ascon80pqv12
10.5710.5810.59ascon128v12
14.6514.6714.67ascon128abi32v12
17.2217.2417.27T:xoodyakround3
20.8720.8820.89ascon128bi32v12
25.0925.1125.14T:schwaemm256128v2
29.7230.2330.72T:aes256gcmv1
32.6332.6732.69T:schwaemm128128v2
32.9632.9732.99T:schwaemm192192v2
33.9634.0634.42T:aes128gcmv1
35.4435.4635.49T:isapa128av20
36.1936.2236.27T:giftcofb128v1
36.7636.7936.82T:schwaemm256256v2
46.2646.2646.30T:tinyjambu128v2
48.4248.4348.50T:isapa128v20
50.7050.7050.74T:tinyjambu192v2
53.2053.2253.27T:tinyjambu256v2
57.2357.2857.35T:romulusn
85.2085.6285.72romulusn
93.5693.6693.77T:isapk128av20
113.42113.55113.96romulusm
147.78147.91147.98T:elephant200v2
181.76181.88182.05T:isapk128v20
227.19227.25227.32T!!!romulust
288.51289.80289.87T:isapxv20
5263.835263.925264.00T:elephant160v2
5605.225605.345605.46T:elephant176v2
11901.1511901.3411901.55aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
7.067.097.09ascon128av12
10.4910.4910.49ascon80pqv12
10.5710.5810.59ascon128v12
14.6514.6714.67ascon128abi32v12
17.2717.2817.29T:xoodyakround3
20.8720.8720.89ascon128bi32v12
25.1025.1225.14T:schwaemm256128v2
27.5627.5727.60T:isapa128av20
29.8829.8929.94T:isapa128v20
32.6432.6832.69T:schwaemm128128v2
32.9732.9832.99T:schwaemm192192v2
33.9634.0534.41T:aes128gcmv1
36.1936.2236.28T:giftcofb128v1
36.7636.7936.82T:schwaemm256256v2
43.0643.4044.05T:aes256gcmv1
46.2646.2746.28T:tinyjambu128v2
50.7050.7050.73T:tinyjambu192v2
53.1953.2153.25T:tinyjambu256v2
57.2357.2857.34T:romulusn
72.8172.8472.90T:isapk128av20
85.2285.6285.69romulusn
113.42113.53114.02romulusm
116.16116.19116.26T!!!romulust
121.44121.48121.61T:isapk128v20
147.76147.85147.95T:elephant200v2
186.15186.22186.31T:isapxv20
599.78599.99600.06aes256gcmv1
5263.865263.925264.06T:elephant160v2
5605.205605.295605.40T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
11.8411.8812.03ascon128av12
14.9815.0315.11ascon128v12
15.0015.0615.14ascon80pqv12
24.0524.1824.45ascon128abi32v12
28.3328.5228.78T:xoodyakround3
30.9331.0331.20ascon128bi32v12
43.3643.5543.91T:schwaemm256128v2
45.1745.3545.59T:schwaemm128128v2
45.8645.9946.17T:giftcofb128v1
55.3855.4555.50T:tinyjambu128v2
55.5455.7556.00T:schwaemm192192v2
59.1459.2659.46T:schwaemm256256v2
60.5660.6860.73T:tinyjambu192v2
62.9162.9963.04T:tinyjambu256v2
76.4676.5776.93T:romulusn
101.01101.11101.32romulusn
103.29103.47103.88T:isapa128av20
108.09108.68109.74T:aes128gcmv1
129.09129.30129.85romulusm
208.98209.18209.77T:elephant200v2
216.62217.09219.56T:aes256gcmv1
297.76298.18298.84T!!!romulust
402.10402.21402.42T:isapa128v20
410.46410.71411.27T:isapk128av20
2003.042003.282005.46T:isapk128v20
2773.052774.462775.87T:isapxv20
6982.356985.116986.06T:elephant176v2
7051.107053.927055.05T:elephant160v2
17363.5817365.4217366.77aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
12.1412.2412.39ascon128av12
15.2315.2715.34ascon128v12
15.3015.3415.51ascon80pqv12
24.4824.4824.79ascon128abi32v12
27.6927.9228.23T:xoodyakround3
30.4130.4430.57ascon128bi32v12
43.2043.3543.64T:schwaemm256128v2
45.1645.3845.59T:schwaemm128128v2
46.1746.2646.35T:giftcofb128v1
55.5155.5655.63T:tinyjambu128v2
55.3855.6155.77T:schwaemm192192v2
59.0359.2059.43T:schwaemm256256v2
60.5860.5960.61T:tinyjambu192v2
63.2363.2863.37T:tinyjambu256v2
75.7476.0176.47T:romulusn
100.88101.40101.50romulusn
103.77103.98104.11T:isapa128av20
109.16109.67110.36T:aes128gcmv1
129.23129.46130.50romulusm
208.98209.07209.25T:elephant200v2
265.28266.24267.83T:aes256gcmv1
297.75297.88298.32T!!!romulust
403.59403.69403.80T:isapa128v20
407.58407.78408.40T:isapk128av20
1991.461991.631994.25T:isapk128v20
2773.332773.762775.40T:isapxv20
6982.126984.726985.82T:elephant176v2
7051.057054.007054.80T:elephant160v2
17363.0117364.5217366.26aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
12.2012.2512.27ascon128av12
15.2615.2715.33ascon80pqv12
15.3015.3915.48ascon128v12
24.4824.4824.54ascon128abi32v12
27.9828.2428.45T:xoodyakround3
30.4130.4230.45ascon128bi32v12
43.4343.5743.78T:schwaemm256128v2
45.1745.3345.56T:schwaemm128128v2
46.1746.2746.50T:giftcofb128v1
55.3655.4455.61T:schwaemm192192v2
55.6355.7155.77T:tinyjambu128v2
59.0759.1559.31T:schwaemm256256v2
60.5660.5960.59T:tinyjambu192v2
63.2263.2463.35T:tinyjambu256v2
65.6465.9066.07T:isapa128av20
75.5275.7476.15T:romulusn
100.82101.37101.44romulusn
109.11109.48110.28T:aes128gcmv1
129.17129.26130.43romulusm
186.76187.01187.23T!!!romulust
209.00209.16209.23T:elephant200v2
210.36210.50210.67T:isapa128v20
280.61280.88281.56T:isapk128av20
583.18584.44592.46T:aes256gcmv1
1093.281093.461093.70T:isapk128v20
1450.351450.401451.34T:isapxv20
6060.066061.866063.06aes256gcmv1
6982.216985.476986.53T:elephant176v2
7051.837054.417055.24T:elephant160v2