VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Golden Cove (90675-00); 2022 Intel Core i3-12100; 4 x 3300MHz; alder, supercop-20240716

[Page version: 20240726 23:46:23]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Implementation notes

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.520.530.57T:aes128gcmv1
0.620.620.66T:aes256gcmv1
1.531.541.55aes256gcmv1
6.526.566.61ascon128av12
9.649.6710.03ascon80pqv12
9.839.859.94ascon128v12
13.0213.0713.11ascon128abi32v12
13.4413.4813.55T:schwaemm256128v2
14.9815.0615.13T:xoodyakround3
17.6617.7717.84T:schwaemm192192v2
19.8219.8619.88T:schwaemm128128v2
19.8919.9620.04ascon128bi32v12
20.3120.5220.60T:schwaemm256256v2
24.4224.4524.49T:grain128aeadv2
38.4738.5038.54romulusn
38.9539.0239.14T:isapa128av20
39.0939.8139.95T:isapa128v20
39.7739.8239.85T:giftcofb128v1
49.5050.0650.42T:isapk128av20
54.9955.0855.14T:tinyjambu128v2
61.7261.7861.84romulusm
66.5066.5866.69T:tinyjambu192v2
66.0567.5269.11T:isapk128v20
71.1071.1871.26T:tinyjambu256v2
110.26110.41110.97T:elephant200v2
119.34119.44119.52romulust
119.53119.76121.26T:isapxv20
5762.945769.555825.54T:elephant176v2
5887.355890.395891.39T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.48?0.51?0.55?T:aes128gcmv1
0.580.610.62T:aes256gcmv1
1.401.421.43aes256gcmv1
6.566.626.63ascon128av12
9.779.809.82ascon128v12
9.669.9210.00ascon80pqv12
13.0213.0813.12ascon128abi32v12
13.4113.4713.49T:schwaemm256128v2
14.7514.9815.03T:xoodyakround3
17.6517.6917.73T:schwaemm192192v2
19.7619.8119.86T:schwaemm128128v2
20.0320.0820.17ascon128bi32v12
18.9820.2220.37T:schwaemm256256v2
23.6923.7123.74T:grain128aeadv2
38.5538.6038.64romulusn
39.2339.5339.92T:isapa128v20
39.5039.6939.82T:isapa128av20
39.8139.8339.87T:giftcofb128v1
49.1549.8350.11T:isapk128av20
54.8354.8854.97T:tinyjambu128v2
61.7861.9161.98romulusm
66.4766.5166.62T:tinyjambu192v2
66.1667.0868.68T:isapk128v20
70.5870.7170.89T:tinyjambu256v2
110.34110.75110.84T:elephant200v2
119.13119.40119.53romulust
117.01?120.43?148.36?T:isapxv20
5782.275822.055836.21T:elephant176v2
5882.075885.355889.71T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.500.520.53T:aes128gcmv1
0.590.600.63T:aes256gcmv1
1.411.421.43aes256gcmv1
6.586.636.66ascon128av12
9.449.489.63ascon80pqv12
9.789.809.83ascon128v12
13.0513.1013.15ascon128abi32v12
13.4113.4613.51T:schwaemm256128v2
14.7714.8715.03T:xoodyakround3
17.6717.7117.78T:schwaemm192192v2
18.9018.9620.42T:schwaemm256256v2
19.3919.4619.52T:isapa128v20
19.7919.8219.85T:schwaemm128128v2
20.0120.1020.18ascon128bi32v12
23.7123.7323.75T:grain128aeadv2
26.2926.4026.47T:isapa128av20
33.0833.3233.66T:isapk128av20
38.5438.6138.63romulusn
39.7939.8139.86T:giftcofb128v1
41.2541.3241.42romulust
42.0542.7343.44T:isapk128v20
54.7954.8954.95T:tinyjambu128v2
61.7661.8962.00romulusm
66.4966.5366.58T:tinyjambu192v2
70.4471.0471.34T:tinyjambu256v2
70.60?73.78?100.44?T:isapxv20
110.58111.15111.31T:elephant200v2
5785.385816.145832.35T:elephant176v2
5884.375888.755891.06T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.350.370.38T:aes128gcmv1
0.420.430.45T:aes256gcmv1
0.920.920.93aes256gcmv1
6.486.566.59ascon128av12
9.639.769.98ascon80pqv12
9.789.819.84ascon128v12
11.7511.7811.80T:xoodyakround3
13.2113.3213.42ascon128abi32v12
13.3613.3913.42T:schwaemm256128v2
17.7017.7717.80T:schwaemm192192v2
18.9519.0120.06T:schwaemm256256v2
19.8219.8419.88T:schwaemm128128v2
20.0620.1820.22ascon128bi32v12
24.3124.3324.34T:grain128aeadv2
29.2729.5429.70T:isapa128v20
30.8630.8930.91romulusn
32.4632.5132.56T:isapa128av20
39.7339.7739.81T:giftcofb128v1
41.7142.0142.37T:isapk128av20
42.4942.5642.59romulusm
45.0345.0745.08T:tinyjambu128v2
51.8952.1852.33T:tinyjambu192v2
53.8353.8953.93T:tinyjambu256v2
54.6054.8955.34T:isapk128v20
80.3480.4280.46romulust
82.6582.7382.79T:elephant200v2
95.9296.8497.30T:isapxv20
4340.444350.094359.14T:elephant176v2
4413.644415.154415.78T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.35?0.37?0.39?T:aes128gcmv1
0.390.410.42T:aes256gcmv1
0.850.860.86aes256gcmv1
6.506.536.57ascon128av12
9.659.759.93ascon80pqv12
9.749.769.77ascon128v12
11.6911.7111.74T:xoodyakround3
13.2813.3113.36ascon128abi32v12
13.3013.3513.38T:schwaemm256128v2
17.6417.6817.71T:schwaemm192192v2
18.8719.0119.07T:schwaemm256256v2
19.7919.8219.88T:schwaemm128128v2
20.0220.0620.11ascon128bi32v12
23.9123.9523.96T:grain128aeadv2
29.4029.5129.67T:isapa128v20
30.9030.9330.96romulusn
32.9033.0333.08T:isapa128av20
39.7939.8339.85T:giftcofb128v1
41.6041.9442.23T:isapk128av20
42.5042.6042.63romulusm
44.9144.9344.96T:tinyjambu128v2
52.0552.1752.20T:tinyjambu192v2
53.6253.7554.26T:tinyjambu256v2
54.5255.0355.36T:isapk128v20
80.3180.3980.45romulust
82.9682.9883.03T:elephant200v2
94.55?97.17?123.90?T:isapxv20
4321.804338.234357.80T:elephant176v2
4412.814414.184415.19T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.34?0.36?0.38?T:aes128gcmv1
0.39?0.41?0.44?T:aes256gcmv1
0.850.860.86aes256gcmv1
6.506.556.57ascon128av12
9.739.779.89ascon80pqv12
9.759.779.79ascon128v12
11.6511.7011.74T:xoodyakround3
13.2813.3213.36ascon128abi32v12
13.3313.3613.39T:schwaemm256128v2
17.6317.6617.72T:schwaemm192192v2
18.89?19.03?21.10?T:schwaemm256256v2
19.4319.4719.51T:isapa128v20
19.7819.8219.85T:schwaemm128128v2
20.0520.1020.16ascon128bi32v12
23.9523.9824.05T:grain128aeadv2
26.2826.3626.43T:isapa128av20
30.9230.9430.97romulusn
33.3233.6933.92T:isapk128av20
39.7739.7939.81T:giftcofb128v1
41.3141.3841.46romulust
41.8442.3242.80T:isapk128v20
42.4942.5642.63romulusm
44.9044.9244.99T:tinyjambu128v2
52.1152.1652.18T:tinyjambu192v2
53.8153.8653.95T:tinyjambu256v2
70.18?72.26?100.32?T:isapxv20
83.1083.1983.49T:elephant200v2
4301.124323.724348.50T:elephant176v2
4407.824414.614416.22T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.22?0.24?0.27?T:aes128gcmv1
0.22?0.24?0.26?T:aes256gcmv1
0.29?0.31?0.33?aes256gcmv1
6.396.556.65ascon128av12
8.318.438.50T:xoodyakround3
9.719.749.78ascon128v12
9.6410.1610.29ascon80pqv12
13.2613.3013.34T:schwaemm256128v2
13.3613.4613.62ascon128abi32v12
17.5417.6017.67T:schwaemm192192v2
18.7918.9519.18T:schwaemm256256v2
19.4519.5019.56T:isapa128v20
19.7719.8119.85T:schwaemm128128v2
20.2120.4620.53ascon128bi32v12
23.2123.2623.32romulusm
23.2223.2723.30romulusn
24.2324.2824.31T:grain128aeadv2
26.2526.3226.39T:isapa128av20
33.0533.7134.24T:isapk128av20
34.7734.8534.94T:tinyjambu128v2
36.2036.3136.44T:tinyjambu256v2
37.4837.5737.64T:tinyjambu192v2
39.7339.7939.84T:giftcofb128v1
41.2841.3641.39romulust
41.0941.5542.34T:isapk128v20
55.5255.8155.87T:elephant200v2
72.4672.6372.80T:isapxv20
2843.982847.542851.88T:elephant176v2
2938.682939.732940.82T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.220.230.24T:aes128gcmv1
0.21?0.23?0.24?T:aes256gcmv1
0.28?0.30?0.32?aes256gcmv1
6.466.496.53ascon128av12
8.468.508.52T:xoodyakround3
9.639.699.88ascon80pqv12
9.739.759.81ascon128v12
13.2513.2813.35T:schwaemm256128v2
13.5113.5813.68ascon128abi32v12
17.6417.7017.75T:schwaemm192192v2
18.7118.8619.77T:schwaemm256256v2
19.4019.4819.58T:isapa128v20
19.7819.8319.86T:schwaemm128128v2
19.9820.0820.19ascon128bi32v12
23.2123.2823.32romulusn
23.2523.3323.37romulusm
24.1724.2924.39T:grain128aeadv2
26.2826.3826.44T:isapa128av20
32.9233.1633.34T:isapk128av20
34.8234.8534.93T:tinyjambu128v2
36.3136.3536.42T:tinyjambu256v2
37.4737.5337.67T:tinyjambu192v2
39.7539.8139.88T:giftcofb128v1
41.3141.3641.44romulust
40.8641.3842.52T:isapk128v20
55.8655.9356.23T:elephant200v2
69.64?72.31?101.27?T:isapxv20
2844.242848.542875.80T:elephant176v2
2936.782939.842941.23T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.21?0.23?0.27?T:aes128gcmv1
0.220.230.24T:aes256gcmv1
0.290.310.32aes256gcmv1
6.426.486.59ascon128av12
8.438.488.50T:xoodyakround3
9.649.729.86ascon80pqv12
9.699.749.76ascon128v12
13.2613.3013.34T:schwaemm256128v2
13.5213.5913.66ascon128abi32v12
17.6617.7117.74T:schwaemm192192v2
18.8618.9318.99T:schwaemm256256v2
19.4419.4819.57T:isapa128v20
19.7619.8219.87T:schwaemm128128v2
20.0020.1120.22ascon128bi32v12
23.2223.2523.29romulusn
23.2523.2923.33romulusm
24.2124.2524.32T:grain128aeadv2
26.3326.3926.49T:isapa128av20
32.8033.4433.93T:isapk128av20
34.8234.8734.92T:tinyjambu128v2
36.2936.3536.41T:tinyjambu256v2
37.4637.6037.68T:tinyjambu192v2
39.7339.8139.87T:giftcofb128v1
41.2541.3041.39romulust
41.1841.9442.84T:isapk128v20
55.6455.9856.20T:elephant200v2
69.69?72.65?101.29?T:isapxv20
2847.922876.682883.09T:elephant176v2
2938.672939.912941.30T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.730.730.75T:aes128gcmv1
0.780.790.82T:aes256gcmv1
1.051.061.06aes256gcmv1
6.676.716.74ascon128av12
9.919.939.95ascon128v12
9.8410.0010.17ascon80pqv12
11.8411.8611.88T:xoodyakround3
13.5413.6413.69ascon128abi32v12
13.7513.8013.81T:schwaemm256128v2
18.1218.1918.22T:schwaemm192192v2
20.1020.1220.16T:schwaemm128128v2
20.4020.4520.53ascon128bi32v12
19.5121.4721.52T:schwaemm256256v2
24.6824.6924.76T:grain128aeadv2
31.1331.1731.21romulusn
36.1436.2436.50T:isapa128av20
40.1240.1440.18T:giftcofb128v1
42.8542.8742.89romulusm
42.7342.9343.01T:isapa128v20
45.5045.5345.56T:tinyjambu128v2
46.5846.8647.13T:isapk128av20
52.7052.7352.77T:tinyjambu192v2
54.3254.3654.39T:tinyjambu256v2
81.5281.6281.67romulust
84.4484.8685.03T:elephant200v2
93.9394.5094.74T:isapk128v20
160.21160.44160.56T:isapxv20
4339.834360.094379.42T:elephant176v2
4462.924464.494466.39T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.730.730.75T:aes128gcmv1
0.780.790.80T:aes256gcmv1
1.001.011.01aes256gcmv1
6.686.706.76ascon128av12
9.849.909.95ascon80pqv12
9.899.919.93ascon128v12
11.8211.8411.86T:xoodyakround3
13.5813.6013.66ascon128abi32v12
13.7113.7713.82T:schwaemm256128v2
18.1318.1618.19T:schwaemm192192v2
19.5119.5420.14T:schwaemm256256v2
20.0620.1020.11T:schwaemm128128v2
20.3220.3720.46ascon128bi32v12
24.2624.2824.30T:grain128aeadv2
31.2131.2431.26romulusn
36.6736.6936.71T:isapa128av20
40.1440.1740.20T:giftcofb128v1
42.7542.8342.97T:isapa128v20
42.9142.9843.02romulusm
45.3745.3845.40T:tinyjambu128v2
46.6946.8147.05T:isapk128av20
52.5752.6052.64T:tinyjambu192v2
54.1054.1554.36T:tinyjambu256v2
81.5381.6181.63romulust
84.1884.8285.10T:elephant200v2
93.8294.2694.54T:isapk128v20
159.85?160.00?185.81?T:isapxv20
4347.474380.324385.80T:elephant176v2
4459.114463.014465.60T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.730.730.75T:aes128gcmv1
0.780.790.80T:aes256gcmv1
1.001.011.01aes256gcmv1
6.656.686.70ascon128av12
9.829.889.96ascon80pqv12
9.919.929.93ascon128v12
11.8011.8611.87T:xoodyakround3
13.6213.6413.67ascon128abi32v12
13.7813.7913.83T:schwaemm256128v2
18.0718.0918.13T:schwaemm192192v2
19.5419.5720.68T:schwaemm256256v2
20.0520.0720.11T:schwaemm128128v2
20.3320.4020.45ascon128bi32v12
24.2724.3024.38T:grain128aeadv2
26.2226.2626.30T:isapa128v20
28.3428.4128.44T:isapa128av20
31.2131.2431.26romulusn
36.4336.7936.95T:isapk128av20
40.1340.1540.20T:giftcofb128v1
42.4942.5042.54romulust
42.9443.0243.09romulusm
45.3745.3845.41T:tinyjambu128v2
52.6252.6652.69T:tinyjambu192v2
54.0954.2054.34T:tinyjambu256v2
62.3562.4862.65T:isapk128v20
84.6284.7785.10T:elephant200v2
105.99?106.27?133.12?T:isapxv20
4339.284353.394377.61T:elephant176v2
4461.234464.184465.37T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
5.645.695.73aes256gcmv1
8.899.139.69T:aes128gcmv1
9.279.499.98T:aes256gcmv1
10.4610.5410.70ascon128av12
12.8813.0213.39ascon80pqv12
12.9813.0213.12ascon128v12
16.8817.0617.42T:xoodyakround3
20.2520.4821.31ascon128abi32v12
22.3022.4722.93T:schwaemm256128v2
25.5525.6026.00T:schwaemm128128v2
27.2727.4827.62ascon128bi32v12
29.0929.4429.93T:schwaemm192192v2
32.3232.5932.70T:grain128aeadv2
31.0233.3133.98T:schwaemm256256v2
37.5437.6237.81romulusn
47.3847.4147.48T:giftcofb128v1
50.1750.2550.51romulusm
55.9656.1256.85T:tinyjambu128v2
64.2364.3464.99T:tinyjambu192v2
65.9466.2766.52T:tinyjambu256v2
108.75108.91109.09romulust
118.88119.44119.96T:elephant200v2
119.11119.46119.84T:isapa128av20
151.03151.47152.10T:isapk128av20
349.04349.61350.45T:isapa128v20
985.25988.88994.05T:isapk128v20
1602.161603.591606.06T:isapxv20
5407.105472.145493.48T:elephant176v2
5980.715982.225986.16T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
5.735.825.95aes256gcmv1
8.989.139.38T:aes128gcmv1
9.319.439.75T:aes256gcmv1
10.0610.1710.44ascon128av12
12.9312.9813.14ascon128v12
12.9513.0513.28ascon80pqv12
16.7617.0517.55T:xoodyakround3
20.3420.5320.84ascon128abi32v12
22.4222.7423.11T:schwaemm256128v2
25.4125.5126.10T:schwaemm128128v2
27.2327.3827.56ascon128bi32v12
29.5129.6230.10T:schwaemm192192v2
31.9132.1632.30T:grain128aeadv2
32.9133.5934.16T:schwaemm256256v2
37.8837.9538.09romulusn
47.5447.5947.76T:giftcofb128v1
51.8552.0652.31romulusm
55.7355.9456.34T:tinyjambu128v2
64.0064.3064.58T:tinyjambu192v2
65.9566.5066.86T:tinyjambu256v2
108.22108.70109.09romulust
119.44119.70119.87T:isapa128av20
119.70119.95120.18T:elephant200v2
151.27151.63152.03T:isapk128av20
349.11349.42350.36T:isapa128v20
952.57990.62996.73T:isapk128v20
1597.281598.801635.48T:isapxv20
5400.775404.615405.77T:elephant176v2
5976.275978.485981.05T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
5.755.795.84aes256gcmv1
9.009.079.58T:aes128gcmv1
9.419.489.66T:aes256gcmv1
10.1810.3510.52ascon128av12
12.9112.9713.06ascon128v12
12.9512.9913.09ascon80pqv12
16.7916.8617.44T:xoodyakround3
20.1620.4120.65ascon128abi32v12
22.3722.6022.82T:schwaemm256128v2
25.4625.5925.77T:schwaemm128128v2
27.2327.4127.66ascon128bi32v12
29.1429.4529.82T:schwaemm192192v2
31.9532.0332.08T:grain128aeadv2
31.4632.5733.20T:schwaemm256256v2
37.8537.9838.16romulusn
47.5547.6447.79T:giftcofb128v1
51.9152.0552.31romulusm
55.9156.2456.37T:tinyjambu128v2
64.0764.3564.90T:tinyjambu192v2
65.8566.1566.62T:tinyjambu256v2
68.4969.2869.70romulust
73.5973.8174.04T:isapa128av20
99.2399.6299.77T:isapk128av20
119.96120.28120.52T:elephant200v2
182.05182.20182.96T:isapa128v20
512.48517.84520.73T:isapk128v20
837.05842.05872.02T:isapxv20
5405.605439.465478.55T:elephant176v2
5981.785983.445985.14T:elephant160v2