VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Zen 3 (a50f00); 2021 AMD Ryzen 5 PRO 5650G; 6 x 3900MHz; cezanne, supercop-20241022

[Page version: 20241120 00:41:35]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.72?0.78?0.82?T:aes128gcmv1
0.790.850.86T:aes256gcmv1
1.841.841.85aes256gcmv1
5.845.865.88ascon128av12
8.508.508.51ascon80pqv12
8.628.628.67ascon128v12
12.5312.5412.59ascon128abi32v12
16.5916.6316.66T:xoodyakround3
19.0519.1319.21ascon128bi32v12
19.3919.5119.66T:schwaemm256128v2
23.0023.0423.06T:grain128aeadv2
23.4623.9524.61T:schwaemm256256v2
25.9526.4826.64T:schwaemm192192v2
28.9629.0929.15T:schwaemm128128v2
34.1434.1434.15T:isapa128v20
35.6735.6835.75T:isapa128av20
37.0837.1237.14romulusn
38.4438.4438.44T:giftcofb128v1
58.4758.4858.48T:tinyjambu128v2
59.3159.3559.38romulusm
60.3160.4560.75T:isapk128av20
65.6165.6265.64T:tinyjambu256v2
66.0566.0566.05T:tinyjambu192v2
78.1378.8279.15T:isapk128v20
114.45114.58114.62romulust
148.97150.34151.37T:isapxv20
228.45?234.41?256.93?T:elephant200v2
6688.226688.976694.77T:elephant176v2
7843.777844.157846.06T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.70?0.74?0.79?T:aes128gcmv1
0.740.790.81T:aes256gcmv1
1.821.821.83aes256gcmv1
6.256.256.26ascon128av12
8.378.388.38ascon128v12
8.438.448.45ascon80pqv12
12.6812.6912.71ascon128abi32v12
16.4816.5116.55T:xoodyakround3
18.4818.5118.53ascon128bi32v12
19.5819.6719.75T:schwaemm256128v2
22.9122.9423.06T:grain128aeadv2
23.9124.3524.39T:schwaemm256256v2
25.7025.7625.81T:schwaemm192192v2
29.0729.1229.22T:schwaemm128128v2
34.1134.1134.18T:isapa128v20
35.1135.6935.70T:isapa128av20
37.3037.3237.36romulusn
38.5038.5038.50T:giftcofb128v1
58.5258.5358.53T:tinyjambu128v2
59.7159.7859.81romulusm
60.4261.0761.84T:isapk128av20
64.7564.7664.76T:tinyjambu192v2
65.5065.7565.75T:tinyjambu256v2
77.6077.9678.55T:isapk128v20
114.53114.61114.68romulust
148.79149.15149.58T:isapxv20
230.29?234.62?258.06?T:elephant200v2
6694.166695.126696.46T:elephant176v2
7843.987844.527845.90T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.67?0.74?0.77?T:aes128gcmv1
0.760.800.82T:aes256gcmv1
1.821.821.83aes256gcmv1
6.266.266.26ascon128av12
8.388.388.38ascon128v12
8.448.448.45ascon80pqv12
12.6812.6912.70ascon128abi32v12
16.4916.5616.60T:xoodyakround3
16.8416.8916.93T:isapa128v20
18.4818.5118.53ascon128bi32v12
19.4719.5419.66T:schwaemm256128v2
22.9122.9823.16T:grain128aeadv2
23.6123.6323.64T:isapa128av20
23.6524.2124.41T:schwaemm256256v2
25.4625.6925.82T:schwaemm192192v2
29.0929.1429.21T:schwaemm128128v2
37.2937.3337.36romulusn
38.5038.5138.52T:giftcofb128v1
38.7938.8538.92romulust
40.5040.6541.17T:isapk128av20
49.3550.1850.39T:isapk128v20
58.5058.5258.59T:tinyjambu128v2
59.7059.7459.79romulusm
64.7564.7664.77T:tinyjambu192v2
65.5465.7565.75T:tinyjambu256v2
86.4587.4388.73T:isapxv20
228.69?234.68?257.22?T:elephant200v2
6685.976696.616698.18T:elephant176v2
7843.577845.527867.62T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.560.590.62T:aes128gcmv1
0.600.640.65T:aes256gcmv1
1.141.151.15aes256gcmv1
5.845.845.85ascon128av12
8.378.388.39ascon80pqv12
8.448.458.46ascon128v12
12.4012.4112.43ascon128abi32v12
12.6612.6912.71T:xoodyakround3
18.8418.8618.87ascon128bi32v12
19.3919.5219.61T:schwaemm256128v2
22.9522.9722.99T:grain128aeadv2
23.4624.0224.67T:schwaemm256256v2
25.5825.5825.60T:isapa128v20
26.4426.5026.64T:schwaemm192192v2
29.0429.1029.16T:schwaemm128128v2
29.6429.6429.65T:isapa128av20
29.6929.7129.72romulusn
38.4038.4238.42T:giftcofb128v1
40.8140.8440.86romulusm
47.5447.6047.63T:tinyjambu128v2
48.4048.5848.69T:isapk128av20
49.2449.2649.28T:tinyjambu256v2
51.2651.3051.30T:tinyjambu192v2
64.1365.0565.85T:isapk128v20
76.6576.7076.74romulust
117.95118.17119.67T:isapxv20
170.96?174.83?191.25?T:elephant200v2
5001.225002.315006.12T:elephant176v2
5881.825883.265884.27T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.560.580.61T:aes128gcmv1
0.590.610.61T:aes256gcmv1
1.131.131.14aes256gcmv1
6.046.056.05ascon128av12
8.318.328.32ascon128v12
8.348.358.35ascon80pqv12
12.4312.4512.46ascon128abi32v12
12.5612.6412.66T:xoodyakround3
18.4918.5118.52ascon128bi32v12
19.3219.4519.61T:schwaemm256128v2
22.8922.9423.07T:grain128aeadv2
23.8924.1624.39T:schwaemm256256v2
25.5625.5825.58T:isapa128v20
26.2826.3426.50T:schwaemm192192v2
29.1029.1829.26T:schwaemm128128v2
29.4229.6429.64T:isapa128av20
29.7829.8129.84romulusn
38.4238.4438.44T:giftcofb128v1
41.0041.0241.05romulusm
47.5747.6247.67T:tinyjambu128v2
48.3148.4148.64T:isapk128av20
49.3449.3549.41T:tinyjambu256v2
50.6050.6550.71T:tinyjambu192v2
64.2464.7364.89T:isapk128v20
76.6776.7176.77romulust
117.60118.26119.36T:isapxv20
170.42?174.76?191.42?T:elephant200v2
4998.225001.545002.00T:elephant176v2
5883.195883.945900.47T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.550.590.60T:aes128gcmv1
0.580.600.61T:aes256gcmv1
1.121.131.13aes256gcmv1
6.046.056.05ascon128av12
8.318.328.33ascon128v12
8.358.358.35ascon80pqv12
12.4412.4412.45ascon128abi32v12
12.5912.6512.67T:xoodyakround3
16.9216.9416.97T:isapa128v20
18.4918.5118.52ascon128bi32v12
19.3619.4919.58T:schwaemm256128v2
22.8922.9023.06T:grain128aeadv2
23.6323.6323.63T:isapa128av20
23.7424.1624.32T:schwaemm256256v2
26.1526.1926.45T:schwaemm192192v2
29.0529.1129.19T:schwaemm128128v2
29.7729.8129.84romulusn
38.4338.4438.45T:giftcofb128v1
38.8238.8738.90romulust
38.6438.9838.99T:isapk128av20
41.0141.0341.04romulusm
47.5747.6447.72T:tinyjambu128v2
49.3449.3849.41T:tinyjambu256v2
50.2350.3350.37T:isapk128v20
50.6050.6550.67T:tinyjambu192v2
87.0387.2887.75T:isapxv20
170.81?175.16?191.35?T:elephant200v2
4997.875001.795026.01T:elephant176v2
5882.125883.705884.84T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.39?0.41?0.48?T:aes128gcmv1
0.41?0.42?0.49?T:aes256gcmv1
0.430.450.46aes256gcmv1
5.795.805.81ascon128av12
8.258.258.26ascon80pqv12
8.258.258.26ascon128v12
8.708.748.77T:xoodyakround3
12.2312.2612.29ascon128abi32v12
17.0017.0017.01T:isapa128v20
18.5418.5718.59ascon128bi32v12
18.9019.0619.15T:schwaemm256128v2
22.2822.3122.34romulusm
22.2922.3222.35romulusn
22.8722.9022.91T:grain128aeadv2
23.6023.6323.65T:isapa128av20
23.3623.8424.68T:schwaemm256256v2
26.8626.9427.14T:schwaemm192192v2
29.0729.2529.35T:schwaemm128128v2
33.2533.2533.26T:tinyjambu256v2
36.4136.5236.69T:isapk128av20
36.5436.5536.55T:tinyjambu192v2
36.6136.7536.77T:tinyjambu128v2
38.2238.3338.38T:giftcofb128v1
38.8438.8738.92romulust
50.2751.8952.08T:isapk128v20
86.6887.1788.50T:isapxv20
112.56?115.67?127.57?T:elephant200v2
3307.693308.183308.53T:elephant176v2
3920.913922.063922.55T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.39?0.42?0.44?T:aes256gcmv1
0.41?0.43?0.49?T:aes128gcmv1
0.420.430.45aes256gcmv1
5.825.855.87ascon128av12
8.258.258.25ascon80pqv12
8.258.268.26ascon128v12
8.668.748.77T:xoodyakround3
12.1612.1912.22ascon128abi32v12
16.9616.9717.05T:isapa128v20
18.4818.5018.52ascon128bi32v12
19.0419.4819.72T:schwaemm256128v2
22.2522.2922.32romulusn
22.2822.3122.33romulusm
22.8822.9123.09T:grain128aeadv2
23.6223.6323.64T:isapa128av20
23.6024.2324.33T:schwaemm256256v2
26.8526.8926.94T:schwaemm192192v2
29.0829.1729.30T:schwaemm128128v2
33.2433.2533.26T:tinyjambu256v2
36.2636.4636.60T:isapk128av20
36.5336.5536.56T:tinyjambu192v2
36.6036.7536.77T:tinyjambu128v2
38.3438.3838.39T:giftcofb128v1
38.8038.8638.92romulust
50.2050.4250.69T:isapk128v20
85.9486.5787.72T:isapxv20
112.39?113.51?127.43?T:elephant200v2
3307.503307.733308.01T:elephant176v2
3921.533922.033933.86T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.390.410.43T:aes256gcmv1
0.410.420.43T:aes128gcmv1
0.430.430.44aes256gcmv1
5.835.855.87ascon128av12
8.258.258.26ascon80pqv12
8.258.268.26ascon128v12
8.668.748.77T:xoodyakround3
12.1912.1912.20ascon128abi32v12
16.9717.0517.05T:isapa128v20
18.4818.5118.53ascon128bi32v12
18.8919.0019.23T:schwaemm256128v2
22.2822.3022.34romulusn
22.3022.3222.36romulusm
22.8822.9023.14T:grain128aeadv2
23.6223.6323.64T:isapa128av20
23.8124.1324.29T:schwaemm256256v2
26.8726.9326.96T:schwaemm192192v2
29.1429.2129.28T:schwaemm128128v2
32.9732.9833.28T:tinyjambu256v2
36.4136.5236.62T:isapk128av20
36.5536.5536.55T:tinyjambu192v2
36.7436.7536.76T:tinyjambu128v2
38.3538.3538.38T:giftcofb128v1
38.7738.8438.90romulust
50.1250.5650.81T:isapk128v20
86.5086.5687.38T:isapxv20
112.69?115.59?126.38?T:elephant200v2
3306.473307.263308.67T:elephant176v2
3920.603922.063922.71T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.001.001.02T:aes128gcmv1
1.041.051.07T:aes256gcmv1
1.271.271.28aes256gcmv1
6.016.016.02ascon128av12
8.518.518.51ascon80pqv12
8.578.578.59ascon128v12
12.7012.7112.72ascon128abi32v12
12.8012.8112.83T:xoodyakround3
19.1719.1819.20ascon128bi32v12
20.0720.0920.17T:schwaemm256128v2
23.3123.3223.36T:grain128aeadv2
24.0424.5925.16T:schwaemm256256v2
27.0627.1627.42T:schwaemm192192v2
29.4429.5329.57T:schwaemm128128v2
29.9429.9729.98romulusn
33.8133.8133.82T:isapa128av20
37.2137.2237.23T:isapa128v20
38.7538.7638.76T:giftcofb128v1
41.0641.0741.11romulusm
47.9448.0048.01T:tinyjambu128v2
49.6449.6449.65T:tinyjambu256v2
51.7051.7151.71T:tinyjambu192v2
54.4054.5754.68T:isapk128av20
77.7977.8177.86romulust
108.64108.77109.30T:isapk128v20
175.94178.55193.92T:elephant200v2
193.36193.85194.45T:isapxv20
5040.205062.805065.06T:elephant176v2
5949.475949.655950.30T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.970.980.99T:aes128gcmv1
1.031.041.05T:aes256gcmv1
1.261.261.27aes256gcmv1
6.196.196.21ascon128av12
8.448.448.45ascon128v12
8.478.478.48ascon80pqv12
12.7212.7312.75ascon128abi32v12
12.7212.7612.78T:xoodyakround3
18.8618.8618.87ascon128bi32v12
19.9420.0520.15T:schwaemm256128v2
23.3023.3523.45T:grain128aeadv2
24.4724.8324.94T:schwaemm256256v2
26.7126.7726.81T:schwaemm192192v2
29.4829.5129.60T:schwaemm128128v2
30.0530.0830.09romulusn
33.8133.8233.82T:isapa128av20
37.2137.2137.21T:isapa128v20
38.7938.7938.80T:giftcofb128v1
41.3241.3541.38romulusm
48.0248.0648.14T:tinyjambu128v2
49.7749.7749.81T:tinyjambu256v2
51.0851.0951.15T:tinyjambu192v2
54.3354.5854.60T:isapk128av20
77.7777.8077.85romulust
109.57109.68109.77T:isapk128v20
175.61178.44194.30T:elephant200v2
193.00193.42193.70T:isapxv20
5039.195039.765040.12T:elephant176v2
5949.515949.805966.25T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.980.981.02T:aes128gcmv1
1.031.031.05T:aes256gcmv1
1.261.261.26aes256gcmv1
6.206.206.20ascon128av12
8.448.458.48ascon128v12
8.478.478.47ascon80pqv12
12.7212.7312.73ascon128abi32v12
12.7412.7912.81T:xoodyakround3
18.8618.8618.87ascon128bi32v12
19.9320.0520.24T:schwaemm256128v2
22.8622.8622.88T:isapa128v20
23.3023.3123.44T:grain128aeadv2
24.3524.9224.94T:schwaemm256256v2
25.9225.9225.93T:isapa128av20
26.6326.6726.89T:schwaemm192192v2
29.4829.5429.57T:schwaemm128128v2
30.0630.0830.09romulusn
38.7938.8038.81T:giftcofb128v1
39.8939.9540.00romulust
41.3241.3341.35romulusm
41.9041.9342.23T:isapk128av20
48.0048.1248.12T:tinyjambu128v2
49.7749.8149.81T:tinyjambu256v2
51.1451.1451.14T:tinyjambu192v2
73.7873.8274.11T:isapk128v20
124.84125.12125.15T:isapxv20
175.59178.50193.97T:elephant200v2
5039.815040.165040.42T:elephant176v2
5949.085949.525950.04T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
6.126.186.21aes256gcmv1
9.849.849.95ascon128av12
10.4010.6311.09T:aes128gcmv1
10.8410.9111.27T:aes256gcmv1
11.4011.4011.48ascon128v12
11.4011.4011.59ascon80pqv12
18.4118.5218.70T:xoodyakround3
19.5519.6420.12ascon128abi32v12
26.4126.4927.23ascon128bi32v12
31.4431.4731.60T:grain128aeadv2
33.0933.4133.83T:schwaemm256128v2
35.6335.8235.90romulusn
38.3838.6639.00T:schwaemm128128v2
39.0539.7540.36T:schwaemm256256v2
43.0643.2143.27T:schwaemm192192v2
46.4546.7246.83T:giftcofb128v1
46.9347.0147.11romulusm
56.7356.9757.88T:tinyjambu128v2
58.5558.6558.76T:tinyjambu256v2
61.0461.0961.25T:tinyjambu192v2
103.12103.50103.66romulust
128.86128.92128.97T:isapa128av20
183.84187.02188.49T:isapk128av20
249.30251.03271.36T:elephant200v2
304.56304.69304.80T:isapa128v20
1116.351116.621117.97T:isapk128v20
1884.591890.031896.95T:isapxv20
6269.816274.726324.51T:elephant176v2
7967.387968.777969.78T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
5.605.665.70aes256gcmv1
9.749.919.94ascon128av12
10.1110.2010.79T:aes128gcmv1
11.0111.2311.44T:aes256gcmv1
11.3611.3611.45ascon128v12
11.3411.4011.65ascon80pqv12
18.3718.3918.61T:xoodyakround3
19.3319.4519.87ascon128abi32v12
26.9126.9527.37ascon128bi32v12
31.3931.9932.88T:grain128aeadv2
33.1633.4333.73T:schwaemm256128v2
35.9536.1636.20romulusn
38.7138.8839.23T:schwaemm128128v2
39.5239.8540.41T:schwaemm256256v2
43.3443.7744.32T:schwaemm192192v2
46.8446.9047.21T:giftcofb128v1
48.3148.5248.68romulusm
56.8658.0658.31T:tinyjambu128v2
58.8459.1259.80T:tinyjambu256v2
62.0962.2262.62T:tinyjambu192v2
103.46103.62103.84romulust
128.99129.05129.36T:isapa128av20
184.56184.69185.76T:isapk128av20
247.70250.45271.38T:elephant200v2
304.65304.65305.14T:isapa128v20
1135.491137.771140.88T:isapk128v20
1879.851885.371890.09T:isapxv20
6273.896275.546276.03T:elephant176v2
7966.947968.107969.75T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
5.625.665.69aes256gcmv1
9.719.919.93ascon128av12
10.3010.4110.62T:aes128gcmv1
11.0411.2511.40T:aes256gcmv1
11.3411.3411.41ascon80pqv12
11.3611.3611.38ascon128v12
18.3518.4619.16T:xoodyakround3
19.3419.4019.44ascon128abi32v12
26.9526.9727.27ascon128bi32v12
31.6232.0932.37T:grain128aeadv2
33.0933.3033.42T:schwaemm256128v2
36.0636.1436.20romulusn
38.3638.5438.97T:schwaemm128128v2
39.3739.8840.34T:schwaemm256256v2
46.8247.0547.38T:giftcofb128v1
48.3448.4348.55romulusm
56.8057.8357.92T:tinyjambu128v2
58.8859.5759.72T:tinyjambu256v2
62.0762.0762.37T:tinyjambu192v2
64.7764.9465.16romulust
44.09?65.38?65.42?T:schwaemm192192v2
77.2777.3877.57T:isapa128av20
115.69116.41117.62T:isapk128av20
158.71158.71159.30T:isapa128v20
246.79249.87271.34T:elephant200v2
600.02600.48600.68T:isapk128v20
984.20985.24991.93T:isapxv20
6274.266277.476285.78T:elephant176v2
7966.847968.607985.25T:elephant160v2