VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Golden Cove (90675-00); 2022 Intel Core i3-12100; 4 x 3300MHz; alder, supercop-20250415

[Page version: 20250425 10:21:43]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
1.421.431.45T:aes128gcmv1
1.521.541.55aes256gcmv1
6.726.746.78ascon128av12
9.9410.0410.24ascon80pqv12
10.0710.1310.16ascon128v12
13.1313.2313.30ascon128abi32v12
13.3713.4213.47T:schwaemm256128v2
15.2915.3515.43T:xoodyakround3
17.7317.8217.87T:schwaemm192192v2
19.2119.3319.45ascon128bi32v12
19.4919.5319.59T:schwaemm256256v2
19.8319.8819.93T:schwaemm128128v2
24.3024.4224.50T:grain128aeadv2
38.4838.5138.56romulusn
39.0939.2440.11T:isapa128av20
39.2439.7939.88T:isapa128v20
39.7939.8339.88T:giftcofb128v1
49.4049.7150.61T:isapk128av20
54.9855.0955.15T:tinyjambu128v2
61.7361.8061.86romulusm
66.6166.6766.78T:tinyjambu192v2
67.0168.3569.41T:isapk128v20
71.0771.1771.24T:tinyjambu256v2
110.30110.46111.03T:elephant200v2
119.35119.43119.51romulust
119.83120.59121.52T:isapxv20
5780.835815.665835.69T:elephant176v2
5881.955888.075890.52T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
1.291.301.30T:aes128gcmv1
1.411.421.44aes256gcmv1
6.726.756.79ascon128av12
9.8910.0010.25ascon80pqv12
10.0710.1010.15ascon128v12
13.0913.1713.21ascon128abi32v12
13.3813.4313.49T:schwaemm256128v2
15.1615.2315.33T:xoodyakround3
17.7217.8017.91T:schwaemm192192v2
19.3419.4219.50ascon128bi32v12
19.7719.7919.82T:schwaemm128128v2
19.6620.4820.66T:schwaemm256256v2
23.6523.6823.72T:grain128aeadv2
38.5938.6238.66romulusn
39.2339.3839.62T:isapa128v20
39.5039.6639.72T:isapa128av20
39.8039.8339.89T:giftcofb128v1
49.6349.9350.25T:isapk128av20
54.8354.8954.96T:tinyjambu128v2
61.6961.8762.01romulusm
66.4466.5566.61T:tinyjambu192v2
66.7267.8368.81T:isapk128v20
70.9871.0471.20T:tinyjambu256v2
109.81111.07111.25T:elephant200v2
119.26119.33119.48romulust
119.73119.97120.37T:isapxv20
5763.835801.095835.29T:elephant176v2
5887.405888.475891.03T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
1.291.301.30T:aes128gcmv1
1.411.421.43aes256gcmv1
6.716.756.79ascon128av12
10.0710.1010.14ascon128v12
9.8710.2010.30ascon80pqv12
13.0013.0813.21ascon128abi32v12
13.4113.4413.48T:schwaemm256128v2
15.1315.2015.25T:xoodyakround3
17.7517.8117.87T:schwaemm192192v2
19.1819.3019.48ascon128bi32v12
19.4319.5019.56T:isapa128v20
19.5219.6219.72T:schwaemm256256v2
19.7619.7919.85T:schwaemm128128v2
23.6623.6823.72T:grain128aeadv2
26.3526.4426.48T:isapa128av20
33.0833.2933.85T:isapk128av20
38.5738.6238.69romulusn
39.8139.8539.88T:giftcofb128v1
41.2641.3541.43romulust
42.0242.6543.24T:isapk128v20
54.7554.8654.91T:tinyjambu128v2
61.6561.7661.84romulusm
66.4166.4766.56T:tinyjambu192v2
70.5871.2371.66T:tinyjambu256v2
71.9872.1472.76T:isapxv20
110.66110.75111.15T:elephant200v2
5782.505818.755842.91T:elephant176v2
5885.965888.465891.12T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.860.870.87T:aes128gcmv1
0.910.920.93aes256gcmv1
6.706.726.74ascon128av12
10.0110.0410.18ascon80pqv12
10.0010.1010.15ascon128v12
11.4411.4711.53T:xoodyakround3
13.3113.3313.40T:schwaemm256128v2
13.3113.3613.39ascon128abi32v12
17.7517.7717.80T:schwaemm192192v2
19.3319.4319.53ascon128bi32v12
19.4219.4519.50T:schwaemm256256v2
19.8119.8519.89T:schwaemm128128v2
24.1624.3124.36T:grain128aeadv2
29.4529.6329.69T:isapa128v20
30.8430.8830.92romulusn
32.4032.4232.47T:isapa128av20
39.7839.8039.84T:giftcofb128v1
41.8842.2242.56T:isapk128av20
42.4942.5342.57romulusm
44.9945.0645.09T:tinyjambu128v2
52.1152.1652.20T:tinyjambu192v2
53.8153.8853.94T:tinyjambu256v2
54.1354.9255.77T:isapk128v20
80.3880.4380.47romulust
82.9083.2983.38T:elephant200v2
96.5296.8997.14T:isapxv20
4318.044338.394352.92T:elephant176v2
4413.544414.804415.37T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.790.800.80T:aes128gcmv1
0.850.860.87aes256gcmv1
6.676.716.72ascon128av12
9.9810.0510.11ascon80pqv12
10.0810.1210.14ascon128v12
11.3711.4711.50T:xoodyakround3
13.2613.3013.31ascon128abi32v12
13.3013.3213.37T:schwaemm256128v2
17.6917.7217.75T:schwaemm192192v2
19.3519.4319.52ascon128bi32v12
19.4419.5419.59T:schwaemm256256v2
19.7919.8219.85T:schwaemm128128v2
23.8823.9223.96T:grain128aeadv2
29.3629.5729.70T:isapa128v20
30.8730.9130.94romulusn
32.7732.9533.03T:isapa128av20
39.7539.8039.82T:giftcofb128v1
41.6841.9242.10T:isapk128av20
42.4842.5542.63romulusm
44.9345.0445.10T:tinyjambu128v2
52.1752.2252.27T:tinyjambu192v2
53.6153.6753.82T:tinyjambu256v2
54.2654.7755.72T:isapk128v20
80.3480.4380.47romulust
82.8582.9083.07T:elephant200v2
96.3996.5896.81T:isapxv20
4301.194328.794349.39T:elephant176v2
4412.664413.944415.29T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.800.800.80T:aes128gcmv1
0.850.860.86aes256gcmv1
6.686.696.71ascon128av12
9.9710.0810.13ascon80pqv12
10.0910.1310.16ascon128v12
11.3511.3911.46T:xoodyakround3
13.2113.2413.28ascon128abi32v12
13.3413.3813.42T:schwaemm256128v2
17.7117.7517.78T:schwaemm192192v2
19.4519.4919.50T:isapa128v20
19.4119.5019.58ascon128bi32v12
19.7919.8219.84T:schwaemm128128v2
19.5019.8720.64T:schwaemm256256v2
23.8823.9224.04T:grain128aeadv2
26.3226.3726.40T:isapa128av20
30.9130.9530.96romulusn
33.4233.7434.16T:isapk128av20
39.7839.8239.84T:giftcofb128v1
41.3841.4441.48romulust
41.9242.1942.68T:isapk128v20
42.4842.5242.59romulusm
44.8944.9144.98T:tinyjambu128v2
52.0652.1252.17T:tinyjambu192v2
53.8253.8754.02T:tinyjambu256v2
72.5872.7572.86T:isapxv20
82.6582.9883.61T:elephant200v2
4308.724322.254338.62T:elephant176v2
4414.344415.524417.09T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.290.310.32aes256gcmv1
0.290.310.32T:aes128gcmv1
6.676.696.72ascon128av12
7.587.657.75T:xoodyakround3
9.7810.0310.08ascon80pqv12
10.1110.1610.21ascon128v12
13.2513.3013.35T:schwaemm256128v2
13.3313.3413.41ascon128abi32v12
17.6117.6917.78T:schwaemm192192v2
19.3719.4119.43T:schwaemm256256v2
19.4419.5019.55T:isapa128v20
19.5319.6319.74ascon128bi32v12
19.7719.8119.84T:schwaemm128128v2
23.2323.2823.33romulusm
23.2423.2823.33romulusn
24.2124.2524.30T:grain128aeadv2
26.1426.2826.40T:isapa128av20
33.1233.4833.98T:isapk128av20
34.8234.8934.95T:tinyjambu128v2
36.2536.3236.39T:tinyjambu256v2
37.5237.7837.88T:tinyjambu192v2
39.7539.8139.86T:giftcofb128v1
41.3441.4241.44romulust
41.0541.9042.19T:isapk128v20
55.4455.8756.31T:elephant200v2
72.3972.4872.71T:isapxv20
2847.072859.892878.81T:elephant176v2
2938.562940.082941.96T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.29?0.30?0.33?T:aes128gcmv1
0.28?0.31?0.32?aes256gcmv1
6.666.696.73ascon128av12
7.567.637.69T:xoodyakround3
10.0510.0910.12ascon80pqv12
9.7910.0910.15ascon128v12
13.2913.3413.40T:schwaemm256128v2
13.3213.3513.39ascon128abi32v12
17.6717.7517.79T:schwaemm192192v2
19.4319.4819.52T:isapa128v20
19.3919.7119.82ascon128bi32v12
19.7519.7619.80T:schwaemm128128v2
19.4620.5120.60T:schwaemm256256v2
23.2223.2823.34romulusm
23.2423.2923.35romulusn
24.0824.2924.35T:grain128aeadv2
26.3226.3826.48T:isapa128av20
33.0333.4834.10T:isapk128av20
34.8935.0235.07T:tinyjambu128v2
36.3036.3536.41T:tinyjambu256v2
37.4437.5437.70T:tinyjambu192v2
39.7139.8039.84T:giftcofb128v1
41.3141.3541.41romulust
40.9941.6842.45T:isapk128v20
55.2655.7756.18T:elephant200v2
72.7272.8173.14T:isapxv20
2843.112850.252873.55T:elephant176v2
2936.712938.032940.30T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.300.310.32T:aes128gcmv1
0.290.310.32aes256gcmv1
6.646.676.69ascon128av12
7.567.657.70T:xoodyakround3
9.8410.0810.21ascon128v12
10.0510.0910.14ascon80pqv12
13.3013.3413.38ascon128abi32v12
13.2613.3613.41T:schwaemm256128v2
17.6917.7417.76T:schwaemm192192v2
19.4119.4519.55T:isapa128v20
19.3519.5020.54T:schwaemm256256v2
19.3919.5319.66ascon128bi32v12
19.7819.8219.87T:schwaemm128128v2
23.2023.2423.29romulusm
23.2523.2723.30romulusn
24.0524.0824.33T:grain128aeadv2
26.3326.4026.45T:isapa128av20
32.9933.2333.75T:isapk128av20
34.9235.0335.11T:tinyjambu128v2
36.2736.3736.45T:tinyjambu256v2
37.4237.5337.65T:tinyjambu192v2
39.7139.7839.84T:giftcofb128v1
41.2141.3141.38romulust
40.8741.8442.87T:isapk128v20
55.8055.8955.99T:elephant200v2
72.3972.6773.66T:isapxv20
2874.162881.782889.26T:elephant176v2
2938.712939.432942.34T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.980.990.99T:aes128gcmv1
1.061.061.07aes256gcmv1
6.856.876.88ascon128av12
10.1010.1610.28ascon80pqv12
10.1110.2110.28ascon128v12
11.5711.6011.61T:xoodyakround3
13.6613.6713.70ascon128abi32v12
13.7213.7513.78T:schwaemm256128v2
18.1418.1518.19T:schwaemm192192v2
19.6919.8319.92ascon128bi32v12
20.0020.0220.06T:schwaemm256256v2
20.0820.0920.10T:schwaemm128128v2
24.6224.6324.65T:grain128aeadv2
31.1631.1831.19romulusn
36.1436.1736.21T:isapa128av20
40.1340.1640.18T:giftcofb128v1
42.8842.8842.93romulusm
42.7442.9243.01T:isapa128v20
45.4845.5045.56T:tinyjambu128v2
46.7846.9547.37T:isapk128av20
52.6752.7552.81T:tinyjambu192v2
54.2954.3454.41T:tinyjambu256v2
81.6181.6681.68romulust
84.4284.6084.95T:elephant200v2
94.5194.8295.07T:isapk128v20
159.88159.97160.40T:isapxv20
4337.634340.244361.82T:elephant176v2
4463.484464.054464.79T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.920.930.93T:aes128gcmv1
1.001.011.02aes256gcmv1
6.846.866.87ascon128av12
10.1710.2410.28ascon80pqv12
10.2010.2510.27ascon128v12
11.5211.5411.61T:xoodyakround3
13.4713.5713.60ascon128abi32v12
13.7613.7713.83T:schwaemm256128v2
18.1218.1518.18T:schwaemm192192v2
19.8619.9019.96ascon128bi32v12
20.0520.0920.10T:schwaemm128128v2
20.0720.1021.04T:schwaemm256256v2
24.2624.3024.36T:grain128aeadv2
31.2231.2431.27romulusn
36.6436.6736.73T:isapa128av20
40.1140.1440.17T:giftcofb128v1
42.5842.7642.98T:isapa128v20
42.8942.9243.01romulusm
45.4345.4445.50T:tinyjambu128v2
46.5846.7746.87T:isapk128av20
52.6152.6552.71T:tinyjambu192v2
54.3054.3354.38T:tinyjambu256v2
81.5581.5981.63romulust
84.5784.7485.18T:elephant200v2
93.9394.1394.85T:isapk128v20
159.40160.08161.12T:isapxv20
4344.054365.984380.98T:elephant176v2
4463.024464.464465.46T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.930.930.93T:aes128gcmv1
1.011.011.01aes256gcmv1
6.856.876.89ascon128av12
10.1210.1810.22ascon80pqv12
10.1710.2210.23ascon128v12
11.5311.5511.60T:xoodyakround3
13.4013.5313.58ascon128abi32v12
13.7713.8013.83T:schwaemm256128v2
18.1218.1418.19T:schwaemm192192v2
19.7219.7919.89ascon128bi32v12
20.0720.0820.11T:schwaemm128128v2
20.0720.1721.01T:schwaemm256256v2
24.2924.4024.41T:grain128aeadv2
26.2126.2326.25T:isapa128v20
28.3128.3628.38T:isapa128av20
31.2131.2431.26romulusn
36.3936.4836.64T:isapk128av20
40.1040.1640.17T:giftcofb128v1
42.5142.5342.55romulust
42.9142.9642.98romulusm
45.3745.3945.40T:tinyjambu128v2
52.5952.6752.72T:tinyjambu192v2
54.0254.1054.16T:tinyjambu256v2
62.4362.7962.91T:isapk128v20
84.5284.5684.86T:elephant200v2
104.88105.32105.70T:isapxv20
4350.284377.724384.87T:elephant176v2
4463.194464.094465.41T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
5.095.165.25T:aes128gcmv1
5.595.675.86aes256gcmv1
10.1610.2810.47ascon128av12
13.1913.3213.40ascon128v12
13.3013.3713.54ascon80pqv12
16.5517.1517.51T:xoodyakround3
20.4020.5720.65ascon128abi32v12
22.3522.6423.34T:schwaemm256128v2
25.5425.7125.99T:schwaemm128128v2
26.6326.9027.03ascon128bi32v12
29.3429.5429.84T:schwaemm192192v2
31.7232.3332.59T:schwaemm256256v2
32.5532.6432.70T:grain128aeadv2
37.5737.7037.80romulusn
47.3047.4147.52T:giftcofb128v1
50.0650.2450.52romulusm
55.7356.0757.13T:tinyjambu128v2
64.3064.5465.23T:tinyjambu192v2
65.9166.3566.54T:tinyjambu256v2
108.04108.20108.67romulust
119.04119.26119.47T:isapa128av20
119.03119.38119.58T:elephant200v2
150.65150.92152.56T:isapk128av20
348.85349.75349.94T:isapa128v20
988.58994.191000.41T:isapk128v20
1594.271598.531601.21T:isapxv20
5459.275472.985483.77T:elephant176v2
5980.175982.385984.19T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
4.754.804.91T:aes128gcmv1
5.785.835.91aes256gcmv1
10.2310.3610.47ascon128av12
13.1913.2913.38ascon128v12
13.3213.5113.66ascon80pqv12
16.6116.8416.98T:xoodyakround3
20.3420.4820.66ascon128abi32v12
22.3622.5422.91T:schwaemm256128v2
25.4525.5825.80T:schwaemm128128v2
26.5926.7826.97ascon128bi32v12
29.2529.6829.84T:schwaemm192192v2
32.4332.6432.84T:grain128aeadv2
32.6233.6134.28T:schwaemm256256v2
37.9138.1638.42romulusn
47.4547.5947.74T:giftcofb128v1
52.0252.1752.40romulusm
56.0556.3557.12T:tinyjambu128v2
64.3064.8065.15T:tinyjambu192v2
65.9766.3066.56T:tinyjambu256v2
108.53108.95109.47romulust
119.34119.64120.00T:isapa128av20
118.98119.77120.18T:elephant200v2
150.62151.20151.45T:isapk128av20
349.45350.08350.77T:isapa128v20
977.81984.79997.38T:isapk128v20
1599.201600.841602.73T:isapxv20
5403.065412.865459.48T:elephant176v2
5976.905983.015985.85T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
4.784.854.89T:aes128gcmv1
5.765.845.90aes256gcmv1
10.2310.2810.41ascon128av12
13.0513.1213.34ascon128v12
13.2213.3513.53ascon80pqv12
16.6617.2317.46T:xoodyakround3
20.2520.3420.66ascon128abi32v12
22.4222.6022.84T:schwaemm256128v2
25.4725.5525.73T:schwaemm128128v2
26.7326.8627.10ascon128bi32v12
29.2329.4029.52T:schwaemm192192v2
31.7732.2032.44T:schwaemm256256v2
32.3832.5732.66T:grain128aeadv2
37.8838.1738.27romulusn
47.4547.5947.75T:giftcofb128v1
52.0652.3452.46romulusm
55.8956.2456.43T:tinyjambu128v2
63.9964.2164.91T:tinyjambu192v2
65.7766.2266.57T:tinyjambu256v2
68.5269.3469.91romulust
73.6673.9274.15T:isapa128av20
98.6699.1099.36T:isapk128av20
119.48119.73120.12T:elephant200v2
181.75182.23182.91T:isapa128v20
509.80518.46522.87T:isapk128v20
836.38837.92841.63T:isapxv20
5401.485405.125443.82T:elephant176v2
5971.825976.845981.93T:elephant160v2