VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Broadwell+AES (406f1); 2016 Intel Xeon E5-2609 v4; 8 x 1700MHz; bolero, supercop-20241022

[Page version: 20241120 00:41:35]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.70?0.76?0.83?T:aes128gcmv1
1.02?1.11?1.97?T:aes256gcmv1
7.17?8.69?10.43?ascon128av12
10.5410.5710.59ascon128v12
10.64?12.42?15.39?ascon80pqv12
14.45?14.54?16.21?ascon128abi32v12
17.0417.0917.15T:xoodyakround3
18.6318.6718.70T:schwaemm256128v2
20.95?20.99?23.99?ascon128bi32v12
23.4923.5423.86T:schwaemm256256v2
24.5724.6324.69T:schwaemm192192v2
25.1925.2125.24T:grain128aeadv2
27.1527.2027.24T:schwaemm128128v2
39.1639.2139.26romulusn
39.9540.7141.54T:isapa128v20
41.4141.4941.66T:isapa128av20
41.6441.6741.69T:giftcofb128v1
60.8960.9460.95T:tinyjambu128v2
63.2363.5966.38romulusm
70.5170.6770.85T:isapk128av20
73.77?74.17?107.06?T:tinyjambu192v2
80.7882.3087.92T:tinyjambu256v2
92.5893.0296.31T:isapk128v20
127.04127.44127.54romulust
151.45151.59151.75T:elephant200v2
187.25187.60188.66T:isapxv20
297.28316.74323.88aes256gcmv1
7276.327465.567496.19T:elephant176v2
8530.508538.508563.75T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.65?0.77?0.81?T:aes128gcmv1
1.05?1.24?2.84?T:aes256gcmv1
7.12?7.18?10.31?ascon128av12
10.3210.4910.53ascon128v12
10.50?10.68?15.28?ascon80pqv12
14.82?16.11?16.55?ascon128abi32v12
16.8816.9717.01T:xoodyakround3
18.6418.6918.73T:schwaemm256128v2
23.5423.6023.87T:schwaemm256256v2
21.20?24.19?24.43?ascon128bi32v12
24.5624.6724.73T:schwaemm192192v2
25.6225.6625.71T:grain128aeadv2
27.2527.2927.34T:schwaemm128128v2
39.2039.2239.28romulusn
39.3139.8140.35T:isapa128v20
41.6441.6841.71T:giftcofb128v1
41.6341.6941.74T:isapa128av20
60.9460.9761.01T:tinyjambu128v2
63.1263.2463.68romulusm
70.5570.6670.78T:isapk128av20
74.02?77.29?107.14?T:tinyjambu192v2
82.2882.2882.53T:tinyjambu256v2
91.83?93.56?102.43?T:isapk128v20
127.02127.45127.53romulust
151.50151.64151.85T:elephant200v2
186.59188.09188.52T:isapxv20
296.05311.58319.36aes256gcmv1
7273.137453.697521.71T:elephant176v2
8524.688539.968559.60T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.57?0.77?0.80?T:aes128gcmv1
1.00?1.10?1.38?T:aes256gcmv1
7.11?7.19?10.44?ascon128av12
10.3110.4910.53ascon128v12
10.49?10.65?15.21?ascon80pqv12
14.72?14.98?17.76?ascon128abi32v12
16.8916.9717.05T:xoodyakround3
18.6418.6818.71T:schwaemm256128v2
19.1919.2719.83T:isapa128v20
21.19?21.28?24.25?ascon128bi32v12
23.5323.5823.88T:schwaemm256256v2
24.5824.6524.73T:schwaemm192192v2
25.6325.6825.72T:grain128aeadv2
27.2727.3227.34T:schwaemm128128v2
28.4428.4828.53T:isapa128av20
39.2039.2439.26romulusn
41.6341.6741.71T:giftcofb128v1
44.2544.3044.33romulust
46.6446.7546.94T:isapk128av20
55.7557.7860.08T:isapk128v20
60.9861.0261.04T:tinyjambu128v2
63.1463.2665.08romulusm
74.05?79.13?107.10?T:tinyjambu192v2
82.2982.3082.43T:tinyjambu256v2
110.74111.20111.74T:isapxv20
151.42151.64152.05T:elephant200v2
285.06305.17315.93aes256gcmv1
7283.487465.077500.43T:elephant176v2
8225.108536.548561.06T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.500.540.55T:aes128gcmv1
0.650.680.69T:aes256gcmv1
7.16?7.19?8.01?ascon128av12
10.5310.5510.57ascon128v12
10.51?10.62?11.98?ascon80pqv12
13.1113.1213.15T:xoodyakround3
14.2114.2814.31ascon128abi32v12
18.5218.5418.58T:schwaemm256128v2
20.4621.2222.69ascon128bi32v12
23.3623.5323.82T:schwaemm256256v2
23.5424.4524.51T:schwaemm192192v2
25.2625.2825.30T:grain128aeadv2
27.0727.0927.20T:schwaemm128128v2
29.9030.0130.41T:isapa128v20
31.4931.5131.61romulusn
35.0035.0435.08T:isapa128av20
41.5441.5741.61T:giftcofb128v1
43.5043.5243.86romulusm
49.9750.0150.06T:tinyjambu128v2
56.1857.9658.02T:tinyjambu192v2
58.6658.7558.93T:isapk128av20
60.30?67.93?89.96?T:tinyjambu256v2
75.4275.5175.71T:isapk128v20
85.73?88.86?124.26?romulust
114.08114.21114.38T:elephant200v2
149.33149.46151.58T:isapxv20
300.91312.11319.51aes256gcmv1
5421.735433.445437.08T:elephant176v2
6398.416417.446429.04T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.47?0.50?0.53?T:aes128gcmv1
0.62?0.67?0.71?T:aes256gcmv1
7.097.137.15ascon128av12
10.45?10.49?11.99?ascon128v12
10.49?10.57?12.69?ascon80pqv12
13.0313.0613.08T:xoodyakround3
14.4514.5715.43ascon128abi32v12
18.5218.5618.59T:schwaemm256128v2
20.6221.2821.39ascon128bi32v12
23.3823.7325.45T:schwaemm256256v2
23.5824.4924.55T:schwaemm192192v2
25.4225.4825.51T:grain128aeadv2
27.13?27.29?31.40?T:schwaemm128128v2
29.4929.7830.01T:isapa128v20
31.5531.5731.60romulusn
35.0435.0835.12T:isapa128av20
41.5641.5941.61T:giftcofb128v1
43.5443.6143.92romulusm
50.0250.0650.10T:tinyjambu128v2
56.0257.9858.04T:tinyjambu192v2
58.6558.7258.82T:isapk128av20
60.30?63.90?89.95?T:tinyjambu256v2
75.4975.6276.97T:isapk128v20
85.68?87.15?124.24?romulust
114.00114.11114.33T:elephant200v2
149.29149.72153.39T:isapxv20
293.78302.81316.05aes256gcmv1
5423.485430.445435.54T:elephant176v2
6399.326412.456600.79T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.470.490.52T:aes128gcmv1
0.57?0.68?0.70?T:aes256gcmv1
7.077.117.14ascon128av12
10.4710.4910.53ascon128v12
10.5010.5411.24ascon80pqv12
13.0413.0713.10T:xoodyakround3
14.3814.4214.44ascon128abi32v12
18.5118.5618.61T:schwaemm256128v2
19.5219.7419.76T:isapa128v20
20.5821.3121.36ascon128bi32v12
23.3823.4124.65T:schwaemm256256v2
23.5224.5224.55T:schwaemm192192v2
25.4625.4925.52T:grain128aeadv2
27.1327.2829.45T:schwaemm128128v2
28.4228.4528.48T:isapa128av20
31.5531.5731.58romulusn
41.5741.5941.62T:giftcofb128v1
43.5443.6043.92romulusm
44.15?46.63?64.22?romulust
46.6946.7946.86T:isapk128av20
50.0350.0650.08T:tinyjambu128v2
56.1957.9958.03T:tinyjambu192v2
57.8458.0058.12T:isapk128v20
60.45?67.20?89.94?T:tinyjambu256v2
111.16111.24111.96T:isapxv20
113.93114.17114.35T:elephant200v2
287.31298.84311.23aes256gcmv1
5423.225428.245435.71T:elephant176v2
6415.446578.456610.94T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
-0.58?0.19?0.34?T:aes256gcmv1
0.26?0.30?0.36?T:aes128gcmv1
6.857.177.20ascon128av12
9.119.149.17T:xoodyakround3
10.0710.5110.56ascon80pqv12
10.5210.5410.57ascon128v12
14.0214.0814.11ascon128abi32v12
18.3518.3718.44T:schwaemm256128v2
19.1819.6120.27T:isapa128v20
21.32?22.77?31.01?ascon128bi32v12
23.1923.2223.52T:schwaemm256256v2
23.8223.8523.86romulusn
23.8023.8824.18romulusm
23.2524.2824.37T:schwaemm192192v2
25.2125.2625.28T:grain128aeadv2
26.9226.9626.99T:schwaemm128128v2
28.4328.4628.49T:isapa128av20
39.0839.1539.17T:tinyjambu128v2
41.3941.4341.46T:giftcofb128v1
42.0342.0742.12T:tinyjambu192v2
42.0642.0842.19T:tinyjambu256v2
44.0544.1044.12romulust
46.7246.9247.06T:isapk128av20
57.9658.1958.69T:isapk128v20
76.8176.9177.08T:elephant200v2
111.16111.29111.46T:isapxv20
290.95301.80319.33aes256gcmv1
3586.523596.393601.80T:elephant176v2
4271.704285.784396.54T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.23?0.27?0.32?T:aes128gcmv1
0.24?0.30?0.57?T:aes256gcmv1
6.737.107.15ascon128av12
9.089.119.18T:xoodyakround3
10.3810.4310.46ascon128v12
10.06?10.47?11.97?ascon80pqv12
14.11?14.16?15.72?ascon128abi32v12
18.3418.3618.39T:schwaemm256128v2
19.2019.5820.28T:isapa128v20
23.1623.2223.47T:schwaemm256256v2
23.8523.8823.89romulusn
23.8423.9124.26romulusm
23.2924.3124.38T:schwaemm192192v2
21.51?24.40?31.32?ascon128bi32v12
25.2025.2425.29T:grain128aeadv2
26.9026.9626.99T:schwaemm128128v2
28.3828.4428.48T:isapa128av20
39.1139.1739.22T:tinyjambu128v2
41.4241.4641.49T:giftcofb128v1
42.0742.0845.60T:tinyjambu256v2
42.08?42.18?48.16?T:tinyjambu192v2
44.0344.1044.16romulust
46.7346.8546.95T:isapk128av20
57.8858.0961.68T:isapk128v20
76.9277.1077.27T:elephant200v2
110.81111.62111.69T:isapxv20
295.62?315.33?439.03?aes256gcmv1
3582.893596.563600.10T:elephant176v2
4283.744390.364422.03T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.22?0.25?0.30?T:aes256gcmv1
0.24?0.29?0.34?T:aes128gcmv1
6.817.167.19ascon128av12
9.089.109.16T:xoodyakround3
10.4110.4210.44ascon128v12
10.0410.4510.48ascon80pqv12
14.11?14.15?17.03?ascon128abi32v12
18.3618.3818.45T:schwaemm256128v2
19.2319.7020.25T:isapa128v20
23.2223.2423.51T:schwaemm256256v2
21.50?23.39?31.33?ascon128bi32v12
23.8223.8624.22romulusm
23.8523.8723.89romulusn
23.2124.2924.37T:schwaemm192192v2
25.2125.2525.28T:grain128aeadv2
26.9426.9626.99T:schwaemm128128v2
28.4228.4728.50T:isapa128av20
39.0839.1439.17T:tinyjambu128v2
41.4341.4941.52T:giftcofb128v1
42.0042.0342.12T:tinyjambu192v2
42.0742.0842.08T:tinyjambu256v2
44.0144.0644.13romulust
46.8146.8746.99T:isapk128av20
57.8758.0958.27T:isapk128v20
76.9377.0077.15T:elephant200v2
110.83111.32111.89T:isapxv20
285.19?306.30?435.00?aes256gcmv1
3586.043596.093602.04T:elephant176v2
4265.734271.604282.20T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.711.711.72T:aes128gcmv1
1.88?1.88?2.24?T:aes256gcmv1
7.34?7.35?8.28?ascon128av12
10.7110.7210.80ascon128v12
10.6510.7211.62ascon80pqv12
13.2513.2613.28T:xoodyakround3
14.6414.6514.67ascon128abi32v12
19.0319.0619.10T:schwaemm256128v2
21.52?22.61?30.35?ascon128bi32v12
24.0024.0324.31T:schwaemm256256v2
25.0025.0225.05T:schwaemm192192v2
25.6725.6925.72T:grain128aeadv2
27.4227.4427.53T:schwaemm128128v2
31.7631.8131.85romulusn
37.5537.5937.62T:isapa128av20
41.9241.9541.98T:giftcofb128v1
43.7943.8544.13romulusm
43.8243.9144.11T:isapa128v20
50.4050.4150.44T:tinyjambu128v2
58.3958.4258.48T:tinyjambu192v2
62.6562.6562.67T:tinyjambu256v2
65.7665.8165.97T:isapk128av20
86.8287.0487.11romulust
116.47116.58116.79T:elephant200v2
130.38130.54130.65T:isapk128v20
245.03245.12248.04T:isapxv20
297.94304.54317.13aes256gcmv1
5464.855468.455474.37T:elephant176v2
6472.886484.796492.90T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.681.691.73T:aes128gcmv1
1.851.881.89T:aes256gcmv1
7.287.317.33ascon128av12
10.6210.6410.66ascon128v12
10.66?11.66?12.70?ascon80pqv12
13.1713.1813.20T:xoodyakround3
14.7814.8014.86ascon128abi32v12
19.0719.0919.11T:schwaemm256128v2
21.70?21.73?30.75?ascon128bi32v12
24.0224.2824.35T:schwaemm256256v2
25.0125.0625.12T:schwaemm192192v2
25.8425.8825.91T:grain128aeadv2
27.4527.4927.51T:schwaemm128128v2
31.8431.8531.86romulusn
37.5837.6337.65T:isapa128av20
41.9341.9541.99T:giftcofb128v1
43.7043.8844.11T:isapa128v20
43.8943.9944.30romulusm
50.4050.4450.53T:tinyjambu128v2
58.4158.4858.51T:tinyjambu192v2
62.6362.6362.63T:tinyjambu256v2
65.8365.9165.95T:isapk128av20
86.8587.0487.07romulust
116.47116.65116.92T:elephant200v2
130.40130.54130.65T:isapk128v20
244.90245.34247.34T:isapxv20
299.44310.50315.24aes256gcmv1
5464.305467.395476.72T:elephant176v2
6473.416475.746491.87T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.681.701.72T:aes128gcmv1
1.861.871.89T:aes256gcmv1
7.267.297.31ascon128av12
10.6010.6210.63ascon128v12
10.6510.7010.74ascon80pqv12
13.1513.1813.21T:xoodyakround3
14.7714.8714.92ascon128abi32v12
19.0819.0919.11T:schwaemm256128v2
21.76?23.65?30.73?ascon128bi32v12
24.0424.2724.33T:schwaemm256256v2
25.0325.0625.09T:schwaemm192192v2
25.8425.8625.88T:grain128aeadv2
26.6526.8626.92T:isapa128v20
27.4527.4827.52T:schwaemm128128v2
29.8629.8929.92T:isapa128av20
31.8231.8431.90romulusn
41.9241.9241.97T:giftcofb128v1
43.8943.9844.24romulusm
45.4445.4545.48romulust
50.4550.4850.58T:tinyjambu128v2
50.8750.9352.22T:isapk128av20
58.3958.4558.52T:tinyjambu192v2
62.6362.6462.79T:tinyjambu256v2
86.2186.2986.39T:isapk128v20
116.49116.57116.86T:elephant200v2
160.21160.41162.20T:isapxv20
295.89300.80312.53aes256gcmv1
5465.345477.255620.71T:elephant176v2
6473.856476.286492.31T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
11.0011.0611.75ascon128av12
13.9714.0614.31ascon128v12
14.1614.2214.41ascon80pqv12
19.0319.2819.69T:xoodyakround3
22.2522.5924.00ascon128abi32v12
29.2229.3129.94ascon128bi32v12
29.3429.6230.03T:aes128gcmv1
30.5330.6931.00T:aes256gcmv1
30.7831.1931.38T:schwaemm256128v2
34.4734.5334.75T:grain128aeadv2
34.88?35.34?48.91?T:schwaemm128128v2
37.9138.0338.22romulusn
38.1638.2838.59T:schwaemm256256v2
39.9740.3840.72T:schwaemm192192v2
49.8450.0050.22T:giftcofb128v1
50.2850.4450.78romulusm
59.4459.6259.72T:tinyjambu128v2
68.38?68.81?96.78?T:tinyjambu192v2
73.1273.4773.72T:tinyjambu256v2
95.1995.5695.81T:isapa128av20
116.97117.59118.41romulust
165.44165.84166.66T:elephant200v2
212.34213.06214.03T:isapk128av20
323.06323.88347.09aes256gcmv1
359.22361.78362.81T:isapa128v20
1371.781372.691373.84T:isapk128v20
2418.312419.192545.72T:isapxv20
6787.286807.066812.41T:elephant176v2
8652.818657.508684.50T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
11.0611.1211.28ascon128av12
13.8113.9114.22ascon128v12
14.0614.2214.44ascon80pqv12
19.0019.1619.72T:xoodyakround3
22.5622.6223.12ascon128abi32v12
29.0629.4129.91T:aes128gcmv1
29.6929.8430.16ascon128bi32v12
29.7230.1630.91T:aes256gcmv1
30.7830.9431.72T:schwaemm256128v2
34.8134.8434.97T:grain128aeadv2
34.94?35.16?49.35?T:schwaemm128128v2
38.1238.1938.31romulusn
38.1938.3838.72T:schwaemm256256v2
40.0940.6240.84T:schwaemm192192v2
50.0050.0950.25T:giftcofb128v1
51.6251.9752.12romulusm
59.3859.5059.72T:tinyjambu128v2
68.38?68.50?96.82?T:tinyjambu192v2
73.1673.3473.38T:tinyjambu256v2
94.9195.3195.81T:isapa128av20
117.28117.50117.84romulust
165.16165.38165.78T:elephant200v2
213.03213.97215.00T:isapk128av20
322.50?323.38?367.41?aes256gcmv1
362.50369.47370.44T:isapa128v20
1372.881373.691415.50T:isapk128v20
2412.382418.782424.06T:isapxv20
6785.066807.066813.16T:elephant176v2
8653.978674.628697.78T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
11.0911.1611.28ascon128av12
13.8414.0014.22ascon128v12
14.0314.0914.22ascon80pqv12
19.0919.1619.56T:xoodyakround3
22.5022.6222.97ascon128abi32v12
28.7828.8429.00T:aes128gcmv1
29.5929.7530.06ascon128bi32v12
29.66?29.78?33.06?T:aes256gcmv1
30.6630.7831.19T:schwaemm256128v2
34.8434.9134.94T:grain128aeadv2
34.72?35.12?49.27?T:schwaemm128128v2
38.0938.1638.31romulusn
38.0938.2838.44T:schwaemm256256v2
40.0640.5940.81T:schwaemm192192v2
49.8849.9450.03T:giftcofb128v1
51.5051.7552.16romulusm
59.2859.3459.59T:tinyjambu128v2
62.3162.5662.72T:isapa128av20
68.31?68.38?96.73?T:tinyjambu192v2
73.1973.2273.28T:tinyjambu256v2
74.5074.6675.03romulust
133.72134.00134.50T:isapk128av20
164.97165.16166.09T:elephant200v2
186.41192.47192.91T:isapa128v20
316.50316.88317.44aes256gcmv1
719.12721.16722.53T:isapk128v20
1262.531267.531268.94T:isapxv20
6787.786817.416844.56T:elephant176v2
8655.038662.918682.94T:elephant160v2