VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Bonnell (106ca); 2010 Intel Atom N455; 1 x 1000MHz; h2atom, supercop-20240909

[Page version: 20241120 00:41:35]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
14.0414.0714.42ascon128av12
20.9821.0021.01ascon128v12
21.2421.2521.83ascon80pqv12
35.4035.4535.45ascon128abi32v12
48.9849.0049.03ascon128bi32v12
55.5255.5955.73T:xoodyakround3
55.84?55.94?97.59?T:giftcofb128v1
62.7762.8263.53T:schwaemm256128v2
79.0279.2579.45T:isapa128v20
82.8082.8382.94T:schwaemm192192v2
86.6986.6986.70T:schwaemm128128v2
88.8688.8888.94T:isapa128av20
89.5289.8189.88T:schwaemm256256v2
97.37101.08102.44T:aes256gcmv1
135.18135.21135.40T:grain128aeadv2
152.49152.50152.68T:tinyjambu128v2
156.03156.06156.13romulusn
180.95181.05183.81T:isapk128av20
195.50195.53196.17T:tinyjambu192v2
216.74216.82217.19T:tinyjambu256v2
51.31?238.24?243.68?T:isapk128v20
257.67258.05259.15romulusm
414.17414.32415.10T:elephant200v2
567.54568.11569.54T!!!romulust
538.36?581.22?616.42?T:isapxv20
1483.361484.291496.82T:aes128gcmv1
40129.1140246.1340440.75T:elephant160v2
42958.5843050.3343092.19T:elephant176v2
50755.4850922.6150997.72aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
13.9113.9413.96ascon128av12
20.8720.8820.93ascon128v12
20.9821.0121.07ascon80pqv12
35.1135.1335.14ascon128abi32v12
47.7447.7547.77ascon128bi32v12
51.9952.0152.10T:xoodyakround3
55.62?57.99?99.87?T:giftcofb128v1
63.0363.0463.08T:schwaemm256128v2
78.6479.2581.28T:isapa128v20
83.0883.0983.16T:schwaemm192192v2
86.9486.9486.95T:schwaemm128128v2
88.8788.9289.93T:isapa128av20
90.3690.4590.56T:schwaemm256256v2
101.23102.41103.97T:aes256gcmv1
137.32137.35137.58T:grain128aeadv2
152.76152.76152.81T:tinyjambu128v2
155.98156.00156.05romulusn
180.95181.09183.60T:isapk128av20
195.26195.87200.07T:tinyjambu192v2
216.99217.06217.59T:tinyjambu256v2
63.20?238.40?242.33?T:isapk128v20
258.00258.08258.69romulusm
414.01414.27414.87T:elephant200v2
567.50567.90569.31T!!!romulust
537.91?574.77?616.89?T:isapxv20
1483.291484.651492.38T:aes128gcmv1
40135.5640224.7040328.73T:elephant160v2
42936.8143078.7743130.09T:elephant176v2
50801.4050903.9050982.91aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
13.9413.9413.95ascon128av12
20.8820.8820.92ascon128v12
21.0021.0021.00ascon80pqv12
35.1235.1335.13ascon128abi32v12
39.3139.3839.44T:isapa128v20
47.7547.7649.44ascon128bi32v12
52.1252.1352.25T:xoodyakround3
55.63?55.68?96.83?T:giftcofb128v1
58.0858.1258.17T:isapa128av20
63.0363.0563.08T:schwaemm256128v2
83.0883.0983.12T:schwaemm192192v2
86.9486.9486.95T:schwaemm128128v2
90.3790.4790.50T:schwaemm256256v2
100.55101.53102.77T:aes256gcmv1
118.41118.49118.54T:isapk128av20
137.33137.34137.39T:grain128aeadv2
52.80?148.09?148.95?T:isapk128v20
152.76152.76152.80T:tinyjambu128v2
155.99156.01156.86romulusn
195.26195.30200.07T:tinyjambu192v2
196.58196.67196.77T!!!romulust
217.01217.06217.88T:tinyjambu256v2
258.05258.07258.21romulusm
302.48?315.86?343.74?T:isapxv20
413.55413.97415.79T:elephant200v2
1426.311427.591434.29T:aes128gcmv1
1457.031458.901460.95aes256gcmv1
40120.4740155.4740220.08T:elephant160v2
42997.3443089.9743135.25T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
13.7313.7613.81ascon128av12
20.6720.6920.73ascon128v12
21.11?21.17?41.18?ascon80pqv12
33.8033.8333.86ascon128abi32v12
41.8841.8941.96T:xoodyakround3
48.4348.4548.47ascon128bi32v12
55.6755.7055.75T:giftcofb128v1
56.8057.1957.92T:aes256gcmv1
58.6759.3761.97T:isapa128v20
62.4462.4962.54T:schwaemm256128v2
73.4973.4973.62T:isapa128av20
82.6382.6582.73T:schwaemm192192v2
86.44?86.60?118.30?T:schwaemm128128v2
88.7288.7488.76T:schwaemm256256v2
124.99125.05125.24T:tinyjambu128v2
128.82128.89129.75romulusn
135.04135.17135.37T:grain128aeadv2
149.08149.20149.89T:isapk128av20
152.49152.55152.93T:tinyjambu192v2
164.12164.15164.36T:tinyjambu256v2
179.75179.88180.69romulusm
191.55193.47195.07T:isapk128v20
307.11307.35307.81T:elephant200v2
381.96382.57383.00T!!!romulust
424.76?459.11?474.98?T:isapxv20
1455.221456.101460.21T:aes128gcmv1
26118.6226198.4726225.67aes256gcmv1
30082.4730131.7230165.58T:elephant160v2
32119.6432178.3032252.67T:elephant176v2
Cycles/byte for long+long decrypt
25%50%75%aead
13.6613.6913.75ascon128av12
20.49?20.56?39.30?ascon80pqv12
20.5420.5821.06ascon128v12
33.4433.5033.57ascon128abi32v12
40.0840.0940.16T:xoodyakround3
47.6747.7049.99ascon128bi32v12
55.5555.5755.80T:giftcofb128v1
56.7757.5558.44T:aes256gcmv1
59.1159.5159.77T:isapa128v20
62.5962.6062.64T:schwaemm256128v2
73.4973.5373.74T:isapa128av20
82.7582.7882.82T:schwaemm192192v2
86.56?86.58?120.19?T:schwaemm128128v2
89.0389.0589.14T:schwaemm256256v2
125.12125.16125.46T:tinyjambu128v2
128.77128.85129.73romulusn
135.94136.17136.42T:grain128aeadv2
149.10149.35149.77T:isapk128av20
152.37152.39152.71T:tinyjambu192v2
164.24164.29164.81T:tinyjambu256v2
179.75179.99180.67romulusm
192.19193.30194.98T:isapk128v20
307.00307.31307.97T:elephant200v2
381.94382.57383.71T!!!romulust
430.43445.02474.69T:isapxv20
1454.801455.771459.69T:aes128gcmv1
26106.6426177.6826204.37aes256gcmv1
30096.8230147.3130174.08T:elephant160v2
32114.0432157.7732186.53T:elephant176v2
Cycles/byte for long+long forgery
25%50%75%aead
13.6913.6913.71ascon128av12
20.50?20.51?39.61?ascon80pqv12
20.5620.5620.58ascon128v12
33.4733.4833.49ascon128abi32v12
39.4039.4539.49T:isapa128v20
40.1440.1640.21T:xoodyakround3
47.6947.6947.70ascon128bi32v12
55.5755.5755.60T:giftcofb128v1
56.7557.1857.76T:aes256gcmv1
58.1258.1258.15T:isapa128av20
62.5962.6062.63T:schwaemm256128v2
82.7782.7882.89T:schwaemm192192v2
86.56?86.58?119.14?T:schwaemm128128v2
88.8789.0589.07T:schwaemm256256v2
117.86117.92118.22T:isapk128av20
125.13125.13125.30T:tinyjambu128v2
128.80128.82129.42romulusn
136.00136.08136.36T:grain128aeadv2
146.68146.82148.62T:isapk128v20
152.37152.41152.83T:tinyjambu192v2
164.25164.28164.62T:tinyjambu256v2
179.86180.01181.52romulusm
196.31196.39197.21T!!!romulust
307.06307.38307.84T:elephant200v2
311.91314.14338.99T:isapxv20
1426.361427.691428.38T:aes128gcmv1
1457.791459.771469.42aes256gcmv1
30088.0330136.0430159.83T:elephant160v2
32119.6232154.0632221.27T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
12.33?13.32?14.61?T:aes256gcmv1
13.4113.4413.45ascon128av12
20.3720.3820.38ascon128v12
20.9921.0021.00ascon80pqv12
28.1628.2128.29T:xoodyakround3
32.1632.2032.20ascon128abi32v12
39.4439.5439.58T:isapa128v20
47.8747.8847.91ascon128bi32v12
55.4755.5355.95T:giftcofb128v1
52.7858.1258.14T:isapa128av20
62.1562.1662.18T:schwaemm256128v2
82.4182.4782.55T:schwaemm192192v2
86.1886.2086.23T:schwaemm128128v2
87.6587.6687.70T:schwaemm256256v2
97.4997.5097.54T:tinyjambu128v2
101.59101.64101.68romulusn
101.58101.65101.77romulusm
109.48109.50109.56T:tinyjambu192v2
111.49111.50111.56T:tinyjambu256v2
117.16117.26117.47T:isapk128av20
134.93135.06135.39T:grain128aeadv2
144.86145.50147.64T:isapk128v20
195.93196.04196.61T!!!romulust
202.19202.61203.16T:elephant200v2
301.16?331.25?344.81?T:isapxv20
1427.771428.281440.16T:aes128gcmv1
1457.121459.801469.63aes256gcmv1
20058.0620072.5820112.23T:elephant160v2
21228.8521273.2821316.61T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
13.3913.4413.47ascon128av12
12.25?13.46?14.50?T:aes256gcmv1
19.9720.0020.02ascon80pqv12
20.2420.2520.25ascon128v12
28.1828.2028.23T:xoodyakround3
31.7831.8231.83ascon128abi32v12
39.4339.5139.58T:isapa128v20
47.6247.6248.29ascon128bi32v12
55.4855.5958.23T:giftcofb128v1
52.27?58.12?58.14?T:isapa128av20
62.1662.1662.17T:schwaemm256128v2
82.4682.4782.51T:schwaemm192192v2
86.1986.1986.76T:schwaemm128128v2
87.6087.6287.67T:schwaemm256256v2
97.5097.5097.58T:tinyjambu128v2
101.59101.65101.71romulusm
101.61101.68103.23romulusn
109.50109.50109.54T:tinyjambu192v2
111.50111.50111.56T:tinyjambu256v2
117.18117.28117.37T:isapk128av20
134.71134.81134.90T:grain128aeadv2
145.24145.30146.68T:isapk128v20
195.94196.05196.81T!!!romulust
202.25202.61202.69T:elephant200v2
301.85?316.25?344.19?T:isapxv20
1426.111427.691429.36T:aes128gcmv1
1457.641459.221471.99aes256gcmv1
20041.1720073.9920116.97T:elephant160v2
21216.1221244.9521323.00T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
13.4413.4413.61ascon128av12
12.9413.5414.13T:aes256gcmv1
19.9820.0020.02ascon80pqv12
20.2520.2520.25ascon128v12
28.1928.2028.24T:xoodyakround3
31.8131.8231.83ascon128abi32v12
39.4439.5039.57T:isapa128v20
47.6247.6247.65ascon128bi32v12
55.5055.5255.97T:giftcofb128v1
57.8658.1258.15T:isapa128av20
62.1662.1662.23T:schwaemm256128v2
82.4582.4782.55T:schwaemm192192v2
86.1986.2086.23T:schwaemm128128v2
87.6187.6287.67T:schwaemm256256v2
97.5097.5097.53T:tinyjambu128v2
101.62101.63101.66romulusn
101.62101.64101.82romulusm
109.50109.50109.54T:tinyjambu192v2
111.50111.50111.56T:tinyjambu256v2
117.19117.39119.51T:isapk128av20
134.79134.80134.84T:grain128aeadv2
145.21145.30147.18T:isapk128v20
195.97196.05196.15T!!!romulust
202.06202.61202.66T:elephant200v2
300.74?314.83?344.23?T:isapxv20
1426.451427.251435.82T:aes128gcmv1
1456.471458.351460.66aes256gcmv1
20046.5920059.6620088.55T:elephant160v2
21221.4821276.0321313.21T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
14.09?14.14?27.27?ascon128av12
21.0121.0121.05ascon128v12
21.4621.4621.51ascon80pqv12
34.5834.5834.63ascon128abi32v12
42.3642.3842.69T:xoodyakround3
49.2449.2549.27ascon128bi32v12
56.4356.4356.49T:giftcofb128v1
64.2864.3364.75T:schwaemm256128v2
70.0270.1070.53T:aes256gcmv1
78.6878.6978.73T:isapa128av20
84.4784.4784.55T:schwaemm192192v2
87.5587.5687.59T:schwaemm128128v2
88.1588.1588.26T:isapa128v20
90.9590.9591.07T:schwaemm256256v2
125.99125.99126.20T:tinyjambu128v2
130.05130.11131.87romulusn
135.85135.87136.21T:grain128aeadv2
153.67153.68153.84T:tinyjambu192v2
165.35165.39165.64T:tinyjambu256v2
181.09181.11183.05romulusm
190.30190.35191.76T:isapk128av20
313.55313.64314.14T:elephant200v2
364.49365.02367.04T:isapk128v20
387.67387.96389.77T!!!romulust
723.64729.18750.23T:isapxv20
1463.491463.791467.45T:aes128gcmv1
26604.9526629.1126702.71aes256gcmv1
30446.6930508.5130641.65T:elephant160v2
32348.6032409.5732429.79T:elephant176v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
14.04?14.11?27.32?ascon128av12
20.8420.8420.92ascon80pqv12
20.8920.8920.95ascon128v12
34.2634.2634.37ascon128abi32v12
40.5640.5640.61T:xoodyakround3
48.4948.4948.57ascon128bi32v12
56.3556.3556.44T:giftcofb128v1
64.4164.4364.44T:schwaemm256128v2
75.8276.1376.98T:aes256gcmv1
78.6878.6978.72T:isapa128av20
84.6184.6184.69T:schwaemm192192v2
87.6887.6887.70T:schwaemm128128v2
88.1888.1888.51T:isapa128v20
91.2791.2891.32T:schwaemm256256v2
126.13126.18126.61T:tinyjambu128v2
130.04130.06130.87romulusn
136.81137.03137.28T:grain128aeadv2
153.55153.56153.61T:tinyjambu192v2
165.49165.51165.66T:tinyjambu256v2
181.44181.56183.77romulusm
190.37190.44192.26T:isapk128av20
313.46313.51314.15T:elephant200v2
364.85365.08367.54T:isapk128v20
387.63388.18388.59T!!!romulust
707.94727.33745.07T:isapxv20
1462.941464.401468.32T:aes128gcmv1
26625.6626699.9126805.10aes256gcmv1
30424.3430438.2630520.47T:elephant160v2
32344.2832403.2232482.12T:elephant176v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
14.04?14.07?27.27?ascon128av12
20.8420.8420.85ascon80pqv12
20.8920.8920.91ascon128v12
34.2634.2634.28ascon128abi32v12
40.6540.6540.69T:xoodyakround3
48.4948.4948.51ascon128bi32v12
53.5753.5854.04T:isapa128v20
56.3556.3556.65T:giftcofb128v1
61.0461.0461.06T:isapa128av20
64.4164.4364.66T:schwaemm256128v2
84.6184.6184.85T:schwaemm192192v2
87.6887.6888.36T:schwaemm128128v2
91.2791.2791.30T:schwaemm256256v2
96.1596.4396.97T:aes256gcmv1
126.13126.15126.51T:tinyjambu128v2
130.04130.04130.06romulusn
136.81136.83137.15T:grain128aeadv2
146.58146.61147.67T:isapk128av20
153.55153.56153.61T:tinyjambu192v2
165.50165.54165.85T:tinyjambu256v2
181.43181.44181.75romulusm
201.94201.99203.75T!!!romulust
240.97241.02243.46T:isapk128v20
313.48313.59313.91T:elephant200v2
450.84458.73475.50T:isapxv20
1434.611435.311435.98T:aes128gcmv1
1978.931979.781984.25aes256gcmv1
30444.0230461.4430514.03T:elephant160v2
32333.5932414.2532492.92T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
21.8421.8422.88ascon128av12
28.2128.2129.15ascon128v12
28.9128.9129.60ascon80pqv12
52.0952.0952.98ascon128abi32v12
62.1062.2063.57T:xoodyakround3
67.3967.3968.30ascon128bi32v12
73.27?74.48?123.50?T:giftcofb128v1
105.70105.70106.81T:schwaemm256128v2
113.13113.13113.84T:schwaemm128128v2
137.34137.50137.75T:schwaemm192192v2
141.50141.50142.16T:schwaemm256256v2
148.62148.67148.89T:tinyjambu128v2
151.64151.70152.94T:grain128aeadv2
157.50?158.90?203.93?romulusn
180.47180.47180.67T:tinyjambu192v2
193.54193.54193.82T:tinyjambu256v2
197.84197.84198.63T:isapa128av20
210.36210.48211.47romulusm
360.67363.26379.41T:aes256gcmv1
442.45442.59443.66T:elephant200v2
520.20520.59522.71T!!!romulust
749.66749.68752.06T:isapa128v20
1106.341106.371107.65T:isapk128av20
1648.621648.761649.68T:aes128gcmv1
4270.994271.624308.80T:isapk128v20
6816.036822.107216.37T:isapxv20
38550.5938583.1438847.61aes256gcmv1
40233.3040316.6140359.98T:elephant176v2
40705.0340780.6340904.83T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
22.0922.0923.19ascon128av12
28.2828.2828.88ascon128v12
28.4928.4929.36ascon80pqv12
52.2652.2653.01ascon128abi32v12
59.7359.8360.14T:xoodyakround3
66.6066.6067.60ascon128bi32v12
74.20?74.74?124.59?T:giftcofb128v1
105.95105.95106.41T:schwaemm256128v2
113.22113.22113.33T:schwaemm128128v2
138.06138.06138.27T:schwaemm192192v2
142.20142.20142.48T:schwaemm256256v2
149.02149.02149.12T:tinyjambu128v2
152.98153.04153.87T:grain128aeadv2
157.82?159.15?208.80?romulusn
180.53180.53180.74T:tinyjambu192v2
194.00194.00194.09T:tinyjambu256v2
197.85197.85198.54T:isapa128av20
217.44217.55218.84romulusm
442.76442.76443.49T:elephant200v2
489.48491.78504.14T:aes256gcmv1
520.05520.16521.90T!!!romulust
750.27750.27758.14T:isapa128v20
1107.881108.401120.84T:isapk128av20
1648.201649.181649.77T:aes128gcmv1
4271.784272.884286.43T:isapk128v20
6994.457170.517216.52T:isapxv20
38541.2938548.8338579.85aes256gcmv1
40235.4140306.8040320.78T:elephant176v2
40706.4240736.6340831.34T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
22.0922.0922.20ascon128av12
28.2828.2828.28ascon128v12
28.4928.4928.49ascon80pqv12
52.2952.2952.29ascon128abi32v12
60.3860.4560.67T:xoodyakround3
66.6066.6066.71ascon128bi32v12
74.21?74.25?127.08?T:giftcofb128v1
105.95105.95106.09T:schwaemm256128v2
113.22113.22113.22T:schwaemm128128v2
127.99127.99128.12T:isapa128av20
138.06138.06138.34T:schwaemm192192v2
142.21142.21142.45T:schwaemm256256v2
149.09149.09149.46T:tinyjambu128v2
152.98153.04153.19T:grain128aeadv2
157.86?158.00?204.37?romulusn
180.53180.53180.65T:tinyjambu192v2
194.00194.00194.00T:tinyjambu256v2
217.44217.55217.83romulusm
329.42329.42330.86T!!!romulust
378.30378.34378.96T:isapa128v20
442.73442.73443.26T:elephant200v2
781.97781.98782.66T:isapk128av20
989.02993.921003.50T:aes256gcmv1
1620.661622.191637.20T:aes128gcmv1
2378.382378.682379.56T:isapk128v20
3554.343716.083750.40T:isapxv20
13940.2113948.1613967.92aes256gcmv1
40238.5240318.6640408.88T:elephant176v2
40702.6840705.2140725.06T:elephant160v2