VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Gracemont (906a4-20); 2022 Intel Core i3-1215U, E cores; 4 x 1600MHz; alder2,1f626960,3300000, supercop-20240808

[Page version: 20240828 00:46:12]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Implementation notes

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.47?0.55?0.59?T:aes128gcmv1
0.58?0.67?0.70?T:aes256gcmv1
1.391.401.42aes256gcmv1
6.346.446.46ascon128av12
8.918.938.96ascon128v12
8.928.948.95ascon80pqv12
11.2111.2411.32ascon128abi32v12
16.6516.6916.77ascon128bi32v12
16.5116.9417.02T:schwaemm256128v2
17.1217.1817.22T:xoodyakround3
21.5621.6021.66T:schwaemm256256v2
22.4522.5522.58T:schwaemm192192v2
23.3723.4023.42T:schwaemm128128v2
27.1727.2327.29T:grain128aeadv2
36.5436.5736.62romulusn
36.7936.8536.90T:isapa128v20
37.4637.5037.55T:isapa128av20
38.8038.8338.85T:giftcofb128v1
51.4551.4851.51T:tinyjambu128v2
58.3258.6558.76T:tinyjambu192v2
60.2060.3860.59romulusm
60.4860.6260.75T:isapk128av20
62.4463.2863.57T:tinyjambu256v2
79.9880.2280.47T:isapk128v20
114.62114.68114.80romulust
145.31146.68146.81T:elephant200v2
158.71159.49161.11T:isapxv20
6388.256448.676458.09T:elephant176v2
7697.867803.297825.73T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.47?0.56?0.60?T:aes128gcmv1
0.54?0.67?0.70?T:aes256gcmv1
1.401.421.42aes256gcmv1
6.006.056.08ascon128av12
8.908.918.94ascon128v12
8.898.928.95ascon80pqv12
11.1011.1511.21ascon128abi32v12
16.7616.8016.84ascon128bi32v12
16.5216.9417.03T:schwaemm256128v2
16.9417.0117.54T:xoodyakround3
21.5021.5721.65T:schwaemm256256v2
22.4622.5722.61T:schwaemm192192v2
23.4023.4323.48T:schwaemm128128v2
27.0427.0927.24T:grain128aeadv2
36.4136.5736.73romulusn
36.7536.8036.86T:isapa128v20
37.4637.5137.58T:isapa128av20
38.9338.9739.00T:giftcofb128v1
51.4651.5051.53T:tinyjambu128v2
58.5058.7559.25T:tinyjambu192v2
60.1960.4860.53romulusm
60.3560.5560.71T:isapk128av20
61.6963.1163.63T:tinyjambu256v2
80.0080.0580.24T:isapk128v20
114.68114.98115.02romulust
145.07146.30146.50T:elephant200v2
159.18159.37160.06T:isapxv20
6388.316448.556457.96T:elephant176v2
7702.557804.157825.55T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.50?0.56?0.60?T:aes128gcmv1
0.58?0.67?0.69?T:aes256gcmv1
1.411.421.43aes256gcmv1
6.026.056.07ascon128av12
8.908.928.96ascon80pqv12
8.908.928.94ascon128v12
11.1111.1411.18ascon128abi32v12
16.7716.8016.83ascon128bi32v12
16.5116.9417.02T:schwaemm256128v2
16.9517.0317.08T:xoodyakround3
18.2918.3518.42T:isapa128v20
21.5121.5821.64T:schwaemm256256v2
22.5122.5722.60T:schwaemm192192v2
23.3923.4223.44T:schwaemm128128v2
24.9425.0125.05T:isapa128av20
27.0927.2027.25T:grain128aeadv2
36.4436.5836.72romulusn
38.9238.9538.98T:giftcofb128v1
39.1939.2539.29romulust
39.7340.1540.38T:isapk128av20
49.9550.0150.10T:isapk128v20
51.4851.5251.55T:tinyjambu128v2
58.8359.2959.45T:tinyjambu192v2
60.3060.3860.54romulusm
60.6961.8163.01T:tinyjambu256v2
93.2293.3693.78T:isapxv20
144.77146.29146.49T:elephant200v2
6388.276448.186458.23T:elephant176v2
7698.117800.377825.87T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.38?0.42?0.46?T:aes128gcmv1
0.43?0.47?0.50?T:aes256gcmv1
0.920.940.95aes256gcmv1
6.216.326.36ascon128av12
8.898.928.95ascon80pqv12
8.908.938.96ascon128v12
11.0211.0511.08ascon128abi32v12
13.1413.1613.27T:xoodyakround3
16.5416.6116.67ascon128bi32v12
16.5616.8316.95T:schwaemm256128v2
21.5421.5721.59T:schwaemm256256v2
22.4322.4722.51T:schwaemm192192v2
23.2623.3123.34T:schwaemm128128v2
27.1927.2627.30T:grain128aeadv2
27.6227.6727.70T:isapa128v20
29.8929.9029.95romulusn
31.2131.2431.28T:isapa128av20
38.7838.8038.84T:giftcofb128v1
41.6141.7041.72romulusm
42.2742.3042.34T:tinyjambu128v2
46.8246.9147.00T:tinyjambu192v2
47.8747.9848.33T:tinyjambu256v2
50.2850.4250.61T:isapk128av20
65.1665.3265.49T:isapk128v20
76.9477.0077.05romulust
108.92110.23110.27T:elephant200v2
126.18126.36127.39T:isapxv20
4802.624803.214812.87T:elephant176v2
5781.545842.945848.43T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.38?0.41?0.44?T:aes128gcmv1
0.43?0.46?0.50?T:aes256gcmv1
0.910.930.94aes256gcmv1
5.986.016.10ascon128av12
8.888.918.97ascon128v12
8.898.928.97ascon80pqv12
11.0011.0111.05ascon128abi32v12
13.0113.0613.23T:xoodyakround3
16.6416.6716.75ascon128bi32v12
16.5516.8316.94T:schwaemm256128v2
21.5021.5421.64T:schwaemm256256v2
22.4222.4722.51T:schwaemm192192v2
23.2823.3223.35T:schwaemm128128v2
27.1827.2427.28T:grain128aeadv2
27.6127.6427.70T:isapa128v20
29.8829.9229.94romulusn
31.2231.2531.27T:isapa128av20
38.7638.8438.90T:giftcofb128v1
41.5341.6841.80romulusm
42.2842.3042.31T:tinyjambu128v2
46.3946.6846.72T:tinyjambu192v2
47.2947.3947.91T:tinyjambu256v2
50.1350.4050.67T:isapk128av20
65.0765.3065.45T:isapk128v20
76.8876.9677.04romulust
108.77110.07110.16T:elephant200v2
126.12126.33126.78T:isapxv20
4780.034801.014805.03T:elephant176v2
5781.665843.285849.57T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.410.420.44T:aes128gcmv1
0.44?0.47?0.49?T:aes256gcmv1
0.930.930.94aes256gcmv1
6.016.106.12ascon128av12
8.908.928.97ascon80pqv12
8.868.949.00ascon128v12
11.0111.0311.05ascon128abi32v12
13.0513.0913.36T:xoodyakround3
16.6216.6516.73ascon128bi32v12
16.5516.8316.96T:schwaemm256128v2
18.3618.3918.42T:isapa128v20
21.5121.5321.62T:schwaemm256256v2
22.4522.5022.52T:schwaemm192192v2
23.2923.3523.37T:schwaemm128128v2
24.9625.0025.02T:isapa128av20
27.1527.2127.26T:grain128aeadv2
29.8429.9730.00romulusn
38.7538.8538.90T:giftcofb128v1
39.1539.1639.21romulust
40.0240.2840.50T:isapk128av20
41.5941.7041.76romulusm
42.2942.3142.34T:tinyjambu128v2
46.2446.7146.78T:tinyjambu192v2
47.2847.3747.91T:tinyjambu256v2
50.0550.1450.32T:isapk128v20
93.3393.4193.65T:isapxv20
108.85110.06110.15T:elephant200v2
4780.154803.044812.97T:elephant176v2
5839.665842.985849.03T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.20?0.24?0.30?T:aes256gcmv1
0.22?0.25?0.28?T:aes128gcmv1
0.460.480.48aes256gcmv1
5.966.276.29ascon128av12
8.808.848.87ascon128v12
8.858.878.91ascon80pqv12
9.039.079.09T:xoodyakround3
10.9110.9711.02ascon128abi32v12
16.5416.5916.73ascon128bi32v12
16.3616.7916.85T:schwaemm256128v2
18.4318.4918.52T:isapa128v20
21.4721.5221.57T:schwaemm256256v2
22.1422.3622.41T:schwaemm192192v2
22.9423.0323.06romulusm
23.2123.2223.23romulusn
23.2223.4223.45T:schwaemm128128v2
24.9424.9925.01T:isapa128av20
27.2027.2427.35T:grain128aeadv2
32.3232.6233.21T:tinyjambu256v2
33.0533.0733.09T:tinyjambu128v2
33.0234.0234.19T:tinyjambu192v2
38.7438.7938.86T:giftcofb128v1
39.0439.0839.19romulust
39.8540.0540.33T:isapk128av20
49.9750.1850.44T:isapk128v20
73.6073.8173.90T:elephant200v2
92.8593.5394.16T:isapxv20
3154.943174.833177.97T:elephant176v2
3844.323850.163880.15T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.23?0.25?0.28?T:aes128gcmv1
0.240.250.26T:aes256gcmv1
0.440.450.47aes256gcmv1
5.945.976.20ascon128av12
8.838.868.93ascon128v12
8.868.898.92ascon80pqv12
9.039.079.12T:xoodyakround3
10.8910.9210.96ascon128abi32v12
16.4916.5116.56ascon128bi32v12
16.3416.7816.86T:schwaemm256128v2
18.4318.4818.57T:isapa128v20
21.4821.5121.58T:schwaemm256256v2
22.1622.3822.43T:schwaemm192192v2
22.9823.0023.02romulusm
23.2223.2623.28romulusn
23.2123.4023.43T:schwaemm128128v2
24.9524.9825.02T:isapa128av20
27.1427.2127.28T:grain128aeadv2
32.3133.1033.40T:tinyjambu256v2
33.0633.1033.15T:tinyjambu128v2
33.0833.4534.02T:tinyjambu192v2
38.7538.7838.81T:giftcofb128v1
39.1039.1539.36romulust
39.7340.0740.41T:isapk128av20
49.9950.2150.40T:isapk128v20
73.5073.8173.93T:elephant200v2
93.1493.4293.69T:isapxv20
3155.133174.773177.90T:elephant176v2
3844.063851.633877.23T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.22?0.24?0.26?T:aes128gcmv1
0.21?0.25?0.29?T:aes256gcmv1
0.440.450.46aes256gcmv1
5.966.016.22ascon128av12
8.828.878.91ascon128v12
8.868.898.92ascon80pqv12
9.049.079.13T:xoodyakround3
10.9010.9310.98ascon128abi32v12
16.4916.5216.57ascon128bi32v12
16.3216.7916.88T:schwaemm256128v2
18.3918.4418.52T:isapa128v20
21.4521.5121.61T:schwaemm256256v2
22.1422.3622.43T:schwaemm192192v2
22.9523.0023.03romulusm
23.2123.2423.27romulusn
23.2323.4023.44T:schwaemm128128v2
24.9424.9925.04T:isapa128av20
27.3327.3627.40T:grain128aeadv2
31.2332.3733.16T:tinyjambu256v2
33.0333.0633.11T:tinyjambu128v2
33.5433.9634.05T:tinyjambu192v2
38.7938.8238.84T:giftcofb128v1
39.0439.1039.17romulust
39.8140.0340.39T:isapk128av20
49.9550.1650.41T:isapk128v20
73.5873.8273.91T:elephant200v2
93.1293.4093.80T:isapxv20
3155.373174.773177.91T:elephant176v2
3844.013848.623876.80T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.850.860.88T:aes128gcmv1
0.900.910.93T:aes256gcmv1
1.041.041.05aes256gcmv1
6.396.496.51ascon128av12
9.059.069.07ascon128v12
9.069.089.09ascon80pqv12
11.3011.3311.34ascon128abi32v12
13.2913.3113.39T:xoodyakround3
16.8816.8816.89ascon128bi32v12
16.9817.3317.41T:schwaemm256128v2
22.1522.1622.19T:schwaemm256256v2
22.7722.9722.98T:schwaemm192192v2
23.6823.7623.82T:schwaemm128128v2
27.5227.5527.62T:grain128aeadv2
30.2030.2330.24romulusn
34.1834.2034.23T:isapa128av20
39.1339.1539.18T:giftcofb128v1
40.4040.4140.49T:isapa128v20
41.9342.0242.05romulusm
42.5642.5942.62T:tinyjambu128v2
46.6847.2447.53T:tinyjambu192v2
48.2548.4548.74T:tinyjambu256v2
58.3858.4558.52T:isapk128av20
78.0578.0978.19romulust
111.43112.44112.56T:elephant200v2
115.20115.27115.51T:isapk128v20
205.90206.36206.57T:isapxv20
4808.154856.334896.13T:elephant176v2
5839.965894.145932.31T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.840.860.89T:aes128gcmv1
0.890.910.93T:aes256gcmv1
1.041.051.06aes256gcmv1
6.156.176.27ascon128av12
9.039.059.08ascon128v12
9.069.089.10ascon80pqv12
11.2811.3011.32ascon128abi32v12
13.1913.2213.37T:xoodyakround3
16.8916.9216.93ascon128bi32v12
16.9817.3317.39T:schwaemm256128v2
22.1022.1322.20T:schwaemm256256v2
22.8522.9623.00T:schwaemm192192v2
23.6823.7523.80T:schwaemm128128v2
27.4727.4927.56T:grain128aeadv2
30.2330.2730.29romulusn
34.2134.2534.27T:isapa128av20
39.1439.2339.25T:giftcofb128v1
40.3840.4040.43T:isapa128v20
41.9142.0542.09romulusm
42.6142.6342.64T:tinyjambu128v2
46.9547.0147.10T:tinyjambu192v2
47.7148.2848.52T:tinyjambu256v2
58.3258.4358.51T:isapk128av20
78.0778.1978.28romulust
111.22112.29112.35T:elephant200v2
115.19115.24115.41T:isapk128v20
206.06206.47206.59T:isapxv20
4807.954861.474904.85T:elephant176v2
5839.225893.995933.15T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.840.850.87T:aes128gcmv1
0.890.900.92T:aes256gcmv1
1.031.041.04aes256gcmv1
6.166.186.24ascon128av12
9.039.059.08ascon128v12
9.049.069.07ascon80pqv12
11.2711.2811.29ascon128abi32v12
13.2013.2313.47T:xoodyakround3
16.9116.9216.92ascon128bi32v12
16.9617.3317.39T:schwaemm256128v2
22.1222.1522.20T:schwaemm256256v2
22.7622.9722.99T:schwaemm192192v2
23.6823.7623.81T:schwaemm128128v2
24.8724.8924.91T:isapa128v20
26.6626.6826.71T:isapa128av20
27.5027.5727.62T:grain128aeadv2
30.2330.2730.28romulusn
39.1339.2139.27T:giftcofb128v1
40.2740.3140.39romulust
41.9642.0342.12romulusm
42.6342.6442.67T:tinyjambu128v2
45.3245.5045.59T:isapk128av20
46.9847.0547.09T:tinyjambu192v2
47.7147.8148.35T:tinyjambu256v2
76.6776.7376.83T:isapk128v20
111.15112.26112.35T:elephant200v2
134.25134.43134.50T:isapxv20
4810.594861.594895.84T:elephant176v2
5839.055894.065932.31T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
5.185.205.34aes256gcmv1
9.8710.1010.55ascon128av12
11.0811.3011.76T:aes128gcmv1
11.3811.6212.24T:aes256gcmv1
11.9112.1012.51ascon128v12
12.1412.4812.87ascon80pqv12
16.9817.2717.70ascon128abi32v12
19.2219.4019.79T:xoodyakround3
22.7522.8923.56ascon128bi32v12
28.2528.3528.55T:schwaemm256128v2
30.1330.5030.74T:schwaemm128128v2
34.3134.4834.68T:grain128aeadv2
35.2335.4235.52T:schwaemm256256v2
36.9137.2537.68T:schwaemm192192v2
37.8938.0538.36romulusn
47.0147.0747.15T:giftcofb128v1
48.8249.0549.67romulusm
49.8350.0750.44T:tinyjambu128v2
54.8055.2455.34T:tinyjambu192v2
56.4256.7657.09T:tinyjambu256v2
101.32101.67102.10T:isapa128av20
104.37104.74105.48romulust
159.03159.18160.37T:elephant200v2
231.15232.38235.05T:isapk128av20
332.73333.49333.69T:isapa128v20
1254.101256.531258.89T:isapk128v20
2016.662017.552024.29T:isapxv20
5984.805992.656043.01T:elephant176v2
7871.317877.637893.90T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
5.045.235.38aes256gcmv1
9.679.7310.21ascon128av12
11.0511.2511.68T:aes128gcmv1
11.3011.5712.19T:aes256gcmv1
12.1312.3312.79ascon80pqv12
12.0812.4112.81ascon128v12
17.1417.2717.80ascon128abi32v12
19.1719.2719.89T:xoodyakround3
23.0123.2023.67ascon128bi32v12
28.3828.4828.60T:schwaemm256128v2
30.0430.1030.49T:schwaemm128128v2
34.2234.3434.54T:grain128aeadv2
35.2935.3735.55T:schwaemm256256v2
36.8637.0737.38T:schwaemm192192v2
38.1738.2238.34romulusn
47.4647.5947.68T:giftcofb128v1
49.9950.1350.31T:tinyjambu128v2
50.1650.3050.53romulusm
55.1255.4455.59T:tinyjambu192v2
56.2656.5856.98T:tinyjambu256v2
101.69101.84101.98T:isapa128av20
104.68104.82105.40romulust
158.97159.19159.61T:elephant200v2
231.64232.91234.32T:isapk128av20
333.34333.88334.21T:isapa128v20
1255.461256.341257.39T:isapk128v20
2014.232020.142021.95T:isapxv20
5958.365985.626034.72T:elephant176v2
7860.497898.487924.31T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
4.995.095.20aes256gcmv1
9.509.649.82ascon128av12
11.0211.0911.13T:aes128gcmv1
11.3911.4912.09T:aes256gcmv1
12.0212.1212.30ascon128v12
12.0912.1612.30ascon80pqv12
17.1317.2317.35ascon128abi32v12
19.3019.8619.92T:xoodyakround3
22.9623.0223.25ascon128bi32v12
27.7928.2828.48T:schwaemm256128v2
30.1430.1730.29T:schwaemm128128v2
34.2734.3834.52T:grain128aeadv2
35.2235.3035.52T:schwaemm256256v2
36.6236.9137.07T:schwaemm192192v2
38.0538.1538.37romulusn
47.4347.5247.61T:giftcofb128v1
49.9550.0350.13T:tinyjambu128v2
50.1050.1950.46romulusm
54.9955.2355.41T:tinyjambu192v2
56.2256.3856.93T:tinyjambu256v2
64.4864.6364.81T:isapa128av20
65.7965.9066.69romulust
155.26157.16157.66T:isapk128av20
158.80159.09159.29T:elephant200v2
173.76174.16174.66T:isapa128v20
680.27680.67682.41T:isapk128v20
1054.971056.341057.18T:isapxv20
5965.115982.106035.18T:elephant176v2
7886.737906.227934.48T:elephant160v2