VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Goldmont Plus (706a8); 2019 Intel Celeron N4020; 2 x 1100MHz; gemini, supercop-20250307

[Page version: 20250425 10:21:43]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
2.132.332.34T:aes128gcmv1
2.322.332.34aes256gcmv1
10.4510.4710.48ascon128av12
15.4015.4115.41ascon80pqv12
16.0016.0016.00ascon128v12
23.4423.4423.45ascon128abi32v12
23.6223.9824.13T:xoodyakround3
27.8627.9028.05T:schwaemm256128v2
34.4334.4534.46ascon128bi32v12
34.4434.6837.65T:schwaemm256256v2
36.3036.5339.69T:schwaemm128128v2
37.1637.1937.21T:schwaemm192192v2
39.6039.6639.95T:grain128aeadv2
45.5245.8449.71romulusn
47.4047.4847.89T:giftcofb128v1
62.5762.7362.85T:isapa128av20
69.1569.1769.18T:isapa128v20
78.0278.0678.12romulusm
83.6483.7383.76T:tinyjambu128v2
97.2097.2197.22T:tinyjambu192v2
109.35109.39109.43T:tinyjambu256v2
112.89113.03113.11T:isapk128av20
144.63144.65144.74T!!!romulust
149.59150.13152.05T:isapk128v20
220.99221.55226.11T:isapxv20
239.93243.18243.52T:elephant200v2
11095.3911096.5811100.62T:elephant176v2
12329.2912330.0112331.04T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
2.352.362.37aes256gcmv1
2.192.412.43T:aes128gcmv1
10.0510.0610.07ascon128av12
14.9014.9114.91ascon80pqv12
15.4315.4415.45ascon128v12
23.2423.2423.25ascon128abi32v12
22.9623.3323.47T:xoodyakround3
27.8127.8328.09T:schwaemm256128v2
33.9634.2136.96T:schwaemm256256v2
34.4934.5134.51ascon128bi32v12
36.3136.5039.77T:schwaemm128128v2
37.0437.0637.07T:schwaemm192192v2
41.9041.9141.92T:grain128aeadv2
45.0245.2949.13romulusn
47.2247.4947.60T:giftcofb128v1
62.1962.7162.78T:isapa128av20
69.1569.1969.20T:isapa128v20
77.5377.5877.78romulusm
82.9382.9883.00T:tinyjambu128v2
97.2797.2797.28T:tinyjambu192v2
108.69108.75108.75T:tinyjambu256v2
113.11113.37113.50T:isapk128av20
144.67144.70144.72T!!!romulust
148.88150.16151.33T:isapk128v20
221.01221.55225.67T:isapxv20
239.92243.22243.52T:elephant200v2
11092.5411095.2211100.24T:elephant176v2
12324.7512329.9812330.47T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
2.18?2.20?2.43?T:aes128gcmv1
2.352.362.36aes256gcmv1
10.0610.0610.07ascon128av12
14.9014.9114.91ascon80pqv12
15.4315.4415.45ascon128v12
23.2423.2423.25ascon128abi32v12
23.0523.4123.56T:xoodyakround3
27.8127.8328.09T:schwaemm256128v2
33.9434.2037.44T:schwaemm256256v2
34.4934.5134.85T:isapa128v20
34.5034.5134.51ascon128bi32v12
36.2936.4939.72T:schwaemm128128v2
37.0637.0737.07T:schwaemm192192v2
40.7741.0741.10T:isapa128av20
41.9041.9142.15T:grain128aeadv2
45.6745.8949.27romulusn
47.4447.4547.59T:giftcofb128v1
51.8051.8651.90T!!!romulust
74.2774.5574.72T:isapk128av20
77.5077.6077.86romulusm
82.9382.9582.98T:tinyjambu128v2
93.0893.6395.05T:isapk128v20
97.2797.2797.29T:tinyjambu192v2
108.69108.75108.81T:tinyjambu256v2
129.99131.97132.80T:isapxv20
242.07243.21247.09T:elephant200v2
11092.5611094.9611100.29T:elephant176v2
12329.1312330.1112330.67T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
1.771.791.81aes256gcmv1
1.69?1.81?1.91?T:aes128gcmv1
10.2210.2410.25ascon128av12
14.7414.7514.79ascon80pqv12
15.2415.2415.25ascon128v12
16.7517.0417.23T:xoodyakround3
22.9422.9522.97ascon128abi32v12
27.6927.7027.87T:schwaemm256128v2
34.2234.2334.23ascon128bi32v12
34.1834.4237.31T:schwaemm256256v2
36.1836.6039.50T:schwaemm128128v2
36.6936.7036.77T:schwaemm192192v2
37.7938.0141.30romulusn
39.3139.3739.61T:grain128aeadv2
47.8347.8547.91T:giftcofb128v1
51.6151.6251.62T:isapa128v20
51.6552.3752.49T:isapa128av20
54.6154.8454.85romulusm
69.1169.1469.15T:tinyjambu128v2
75.9775.9875.98T:tinyjambu192v2
82.5582.5782.63T:tinyjambu256v2
93.7293.7993.91T:isapk128av20
97.8097.8298.40T!!!romulust
121.31121.54122.45T:isapk128v20
175.97176.87177.05T:isapxv20
178.83181.14181.33T:elephant200v2
8258.648260.348266.67T:elephant176v2
9243.589244.769245.62T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
1.791.811.82aes256gcmv1
1.70?1.82?1.92?T:aes128gcmv1
10.0610.0710.08ascon128av12
14.7614.7714.77ascon80pqv12
14.9614.9714.97ascon128v12
16.6116.7016.79T:xoodyakround3
23.1323.1523.16ascon128abi32v12
27.6627.6727.88T:schwaemm256128v2
33.7833.7933.79ascon128bi32v12
33.9434.1837.41T:schwaemm256256v2
36.3836.6039.22T:schwaemm128128v2
36.6936.7036.70T:schwaemm192192v2
37.4937.7240.57romulusn
40.5040.5140.79T:grain128aeadv2
47.7247.7347.73T:giftcofb128v1
51.3351.6051.73T:isapa128v20
51.9152.6653.01T:isapa128av20
54.5154.5254.60romulusm
67.7667.8768.13T:tinyjambu128v2
76.1576.1576.15T:tinyjambu192v2
82.3582.3582.35T:tinyjambu256v2
93.7793.9194.09T:isapk128av20
97.8097.8198.02T!!!romulust
121.08121.42122.07T:isapk128v20
175.98176.72177.04T:isapxv20
178.93181.13181.17T:elephant200v2
8258.628260.528266.22T:elephant176v2
9243.349244.949247.16T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
1.811.811.82aes256gcmv1
1.711.821.84T:aes128gcmv1
10.0710.0710.08ascon128av12
14.7714.7714.77ascon80pqv12
14.9714.9714.98ascon128v12
16.6516.7216.84T:xoodyakround3
23.1523.1523.16ascon128abi32v12
27.6627.6727.89T:schwaemm256128v2
33.7933.7933.79ascon128bi32v12
33.9434.1837.36T:schwaemm256256v2
34.0034.2834.29T:isapa128v20
36.3536.6039.48T:schwaemm128128v2
36.6936.7036.70T:schwaemm192192v2
37.6337.7840.88romulusn
40.4840.5740.79T:grain128aeadv2
41.1342.1742.19T:isapa128av20
47.8347.8447.88T:giftcofb128v1
51.3751.5651.82T!!!romulust
54.4954.6254.64romulusm
67.7668.0568.13T:tinyjambu128v2
74.4274.5674.66T:isapk128av20
76.1576.1576.16T:tinyjambu192v2
82.3582.3582.35T:tinyjambu256v2
92.8093.0493.60T:isapk128v20
130.46131.14131.39T:isapxv20
178.87181.14181.33T:elephant200v2
8258.848260.518265.92T:elephant176v2
9243.379244.999245.56T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
1.241.261.27aes256gcmv1
1.26?1.32?1.52?T:aes128gcmv1
9.9810.0010.22ascon128av12
9.8910.1110.35T:xoodyakround3
14.5014.5214.53ascon128v12
14.6214.6214.63ascon80pqv12
22.4522.4622.47ascon128abi32v12
27.5027.5427.69T:schwaemm256128v2
29.7630.2232.61romulusn
31.5231.5731.76romulusm
33.7433.7533.76ascon128bi32v12
33.8533.8833.89T:isapa128v20
33.9434.1936.71T:schwaemm256256v2
36.3836.4136.44T:schwaemm192192v2
36.1636.7139.34T:schwaemm128128v2
38.8139.0839.28T:grain128aeadv2
41.2241.2241.24T:isapa128av20
48.0948.2748.29T:giftcofb128v1
52.1952.2252.23T!!!romulust
53.3854.2054.29T:tinyjambu128v2
54.7754.7854.78T:tinyjambu192v2
55.7455.7455.76T:tinyjambu256v2
74.4574.5274.68T:isapk128av20
93.1793.2293.27T:isapk128v20
117.14118.11119.83T:elephant200v2
130.07132.07132.60T:isapxv20
5535.815537.315537.64T:elephant176v2
6157.506160.476160.67T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
1.22?1.25?1.46?T:aes128gcmv1
1.241.271.30aes256gcmv1
10.0510.0610.07ascon128av12
10.0610.1410.27T:xoodyakround3
14.4914.5014.51ascon128v12
14.6214.6314.63ascon80pqv12
22.6522.6622.67ascon128abi32v12
27.5027.5427.70T:schwaemm256128v2
30.0330.2732.31romulusn
31.5331.6631.82romulusm
33.0633.0733.07ascon128bi32v12
33.9434.1837.16T:schwaemm256256v2
33.8534.4434.49T:isapa128v20
36.4136.4236.42T:schwaemm192192v2
36.5136.7239.41T:schwaemm128128v2
39.0939.1539.48T:grain128aeadv2
41.2041.2341.26T:isapa128av20
48.0848.1448.28T:giftcofb128v1
51.4051.6451.78T!!!romulust
52.5752.8353.32T:tinyjambu128v2
54.7754.7754.79T:tinyjambu192v2
56.0356.0356.04T:tinyjambu256v2
74.3174.5674.80T:isapk128av20
93.0093.2293.59T:isapk128v20
117.15118.12119.97T:elephant200v2
130.52132.08132.98T:isapxv20
5534.235537.515538.14T:elephant176v2
6157.846160.506160.78T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
1.22?1.23?1.46?T:aes128gcmv1
1.271.281.28aes256gcmv1
10.0510.0710.08ascon128av12
10.0610.1910.27T:xoodyakround3
14.4914.5014.51ascon128v12
14.6214.6214.63ascon80pqv12
22.6622.6622.66ascon128abi32v12
27.5027.5327.68T:schwaemm256128v2
30.0030.2332.36romulusn
31.5031.5431.66romulusm
33.0633.0733.07ascon128bi32v12
33.9534.1937.15T:schwaemm256256v2
33.8634.4434.45T:isapa128v20
36.4136.4236.42T:schwaemm192192v2
36.1836.7338.99T:schwaemm128128v2
39.1239.1639.49T:grain128aeadv2
41.2141.2241.25T:isapa128av20
47.8948.1148.29T:giftcofb128v1
51.3851.6351.78T!!!romulust
52.5752.6153.32T:tinyjambu128v2
54.7754.7754.77T:tinyjambu192v2
56.0356.0356.04T:tinyjambu256v2
74.3274.6074.64T:isapk128av20
92.5693.1593.82T:isapk128v20
117.02118.11119.81T:elephant200v2
130.52132.07133.00T:isapxv20
5535.015537.885538.13T:elephant176v2
6157.556160.566160.83T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.971.982.00aes256gcmv1
1.861.992.01T:aes128gcmv1
10.4710.4810.58ascon128av12
14.9814.9814.99ascon80pqv12
15.4715.4715.47ascon128v12
16.9217.1717.35T:xoodyakround3
23.4623.4623.47ascon128abi32v12
28.4928.5028.65T:schwaemm256128v2
34.7334.7334.73ascon128bi32v12
35.3035.3038.11T:schwaemm256256v2
36.9337.0939.67T:schwaemm128128v2
37.5137.5237.53T:schwaemm192192v2
38.3838.4441.17romulusn
39.7439.8440.08T:grain128aeadv2
48.3348.3448.41T:giftcofb128v1
55.0755.1855.23romulusm
57.1757.2357.23T:isapa128av20
69.6469.9869.98T:tinyjambu128v2
75.5075.5075.63T:isapa128v20
76.5676.5776.57T:tinyjambu192v2
83.2083.2083.23T:tinyjambu256v2
99.5499.55100.11T!!!romulust
108.58108.68108.76T:isapk128av20
182.94184.95184.98T:elephant200v2
215.79216.00216.42T:isapk128v20
281.25281.26281.62T:isapxv20
8325.238326.628328.75T:elephant176v2
9345.619349.269349.42T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.981.992.01aes256gcmv1
1.872.002.02T:aes128gcmv1
10.3110.3110.31ascon128av12
15.0015.0015.01ascon80pqv12
15.2015.2015.20ascon128v12
16.7716.8416.93T:xoodyakround3
23.6623.6623.67ascon128abi32v12
28.4728.5028.67T:schwaemm256128v2
34.3034.3034.30ascon128bi32v12
35.0735.0838.01T:schwaemm256256v2
36.9437.0739.88T:schwaemm128128v2
37.5137.5137.52T:schwaemm192192v2
38.1838.4440.91romulusn
41.0241.0241.26T:grain128aeadv2
48.1248.2348.24T:giftcofb128v1
55.0555.0755.09romulusm
57.3157.7457.78T:isapa128av20
68.3268.3868.64T:tinyjambu128v2
75.2475.2475.25T:isapa128v20
76.7276.7476.76T:tinyjambu192v2
83.0283.0583.28T:tinyjambu256v2
99.5599.7399.74T!!!romulust
108.70108.78108.80T:isapk128av20
183.01184.94184.98T:elephant200v2
215.68215.72216.60T:isapk128v20
281.26281.53283.64T:isapxv20
8325.428326.318330.51T:elephant176v2
9345.609349.319349.68T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.871.992.00T:aes128gcmv1
1.981.992.00aes256gcmv1
10.3110.3110.31ascon128av12
15.0015.0015.01ascon80pqv12
15.2015.2115.21ascon128v12
16.8316.8916.99T:xoodyakround3
23.6623.6623.66ascon128abi32v12
28.4628.4628.66T:schwaemm256128v2
34.3034.3034.30ascon128bi32v12
35.0635.0737.98T:schwaemm256256v2
36.9337.0839.43T:schwaemm128128v2
37.5137.5137.51T:schwaemm192192v2
38.1838.4440.85romulusn
41.0241.0341.26T:grain128aeadv2
44.7444.7544.76T:isapa128av20
46.3346.5946.59T:isapa128v20
48.2448.3348.33T:giftcofb128v1
53.0253.0353.20T!!!romulust
55.0355.0355.04romulusm
68.3168.6468.69T:tinyjambu128v2
76.7276.7376.74T:tinyjambu192v2
82.9883.0083.02T:isapk128av20
83.0283.0283.28T:tinyjambu256v2
141.84141.88142.22T:isapk128v20
184.38184.40185.94T:isapxv20
182.89184.95184.96T:elephant200v2
8325.898327.878331.47T:elephant176v2
9346.349348.969349.54T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
8.09?8.22?9.04?T:aes128gcmv1
9.199.279.57aes256gcmv1
15.9116.0016.30ascon128av12
20.2320.4320.56ascon80pqv12
20.5020.6720.89ascon128v12
24.2824.4424.68T:xoodyakround3
35.0035.1335.41ascon128abi32v12
46.2446.2446.41ascon128bi32v12
46.5546.6546.70T:schwaemm256128v2
47.2147.3150.48romulusn
47.3547.5451.15T:schwaemm128128v2
50.6351.0251.19T:grain128aeadv2
55.5855.7159.14T:schwaemm256256v2
59.3559.4859.80T:giftcofb128v1
60.5060.5460.81T:schwaemm192192v2
63.6664.0964.28romulusm
81.1281.3881.41T:tinyjambu128v2
89.8289.8290.04T:tinyjambu192v2
97.4697.9297.92T:tinyjambu256v2
138.26138.83139.55T!!!romulust
166.81166.83167.07T:isapa128av20
258.68261.72262.12T:elephant200v2
428.91429.03429.19T:isapk128av20
624.55624.55624.71T:isapa128v20
2360.412364.032370.09T:isapk128v20
2652.082658.032677.49T:isapxv20
10437.2210439.7810454.67T:elephant176v2
12517.3012518.3912523.71T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
7.878.088.62T:aes128gcmv1
8.989.099.66aes256gcmv1
15.8315.9016.05ascon128av12
20.3120.5020.55ascon80pqv12
20.3020.5220.78ascon128v12
23.8624.0824.21T:xoodyakround3
35.2935.4535.98ascon128abi32v12
45.9745.9946.32ascon128bi32v12
46.6646.7846.88T:schwaemm256128v2
47.3547.4350.71T:schwaemm128128v2
47.2747.4549.94romulusn
51.3951.6151.88T:grain128aeadv2
55.5255.6558.89T:schwaemm256256v2
59.7059.7759.77T:giftcofb128v1
60.4460.4660.85T:schwaemm192192v2
66.0566.4166.49romulusm
80.5080.6480.91T:tinyjambu128v2
90.1090.1090.16T:tinyjambu192v2
97.9598.1298.12T:tinyjambu256v2
137.94138.99139.56T!!!romulust
167.02167.20167.49T:isapa128av20
258.35261.42261.77T:elephant200v2
429.70429.98432.80T:isapk128av20
616.73616.85624.98T:isapa128v20
2358.702360.732368.03T:isapk128v20
2652.362652.502677.91T:isapxv20
10436.7710449.2210472.02T:elephant176v2
12516.5112518.7512522.17T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
7.77?7.94?8.66?T:aes128gcmv1
8.988.989.41aes256gcmv1
15.7115.8215.84ascon128av12
20.1520.2020.27ascon128v12
20.0920.2720.33ascon80pqv12
23.9524.2124.22T:xoodyakround3
35.2935.3335.45ascon128abi32v12
45.9545.9846.02ascon128bi32v12
46.6246.6646.79T:schwaemm256128v2
47.2347.2850.43romulusn
47.1747.3750.83T:schwaemm128128v2
51.1651.2651.41T:grain128aeadv2
55.5255.5258.63T:schwaemm256256v2
59.4459.6759.93T:giftcofb128v1
60.4360.4460.46T:schwaemm192192v2
66.0366.1866.40romulusm
80.4080.4980.50T:tinyjambu128v2
90.0490.0590.31T!!!romulust
90.0990.0990.09T:tinyjambu192v2
97.9698.1298.12T:tinyjambu256v2
104.41104.44104.73T:isapa128av20
258.16261.43261.77T:elephant200v2
260.04262.30263.16T:isapk128av20
329.46329.46329.66T:isapa128v20
1243.821244.201244.63T:isapk128v20
1390.231390.301403.56T:isapxv20
10431.9010454.0710462.71T:elephant176v2
12516.8012517.7712522.77T:elephant160v2