VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Bonnell (106ca); 2010 Intel Atom N455; 1 x 1000MHz; h2atom, supercop-20240107

[Page version: 20240828 00:46:12]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Implementation notes

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
12.98?14.06?27.86?ascon128av12
20.9821.0021.01ascon128v12
21.2421.2521.25ascon80pqv12
33.43?35.40?61.88?ascon128abi32v12
46.18?49.02?82.25?ascon128bi32v12
55.5255.5955.73T:xoodyakround3
55.8355.8855.94T:giftcofb128v1
62.7662.8062.83T:schwaemm256128v2
79.0979.2579.41T:isapa128v20
82.8082.8482.93T:schwaemm192192v2
86.6986.7186.74T:schwaemm128128v2
87.0188.3489.47T:aes256gcmv1
88.8688.8888.95T:isapa128av20
89.8089.8189.91T:schwaemm256256v2
133.42?135.34?158.04?T:grain128aeadv2
152.49152.50152.92T:tinyjambu128v2
156.03156.07156.54romulusn
180.94181.03181.45T:isapk128av20
195.50195.52195.98T:tinyjambu192v2
216.75216.81217.19T:tinyjambu256v2
239.92240.58244.18T:isapk128v20
257.87257.96259.05romulusm
413.95414.08414.92T:elephant200v2
567.42568.08569.68romulust
573.50590.67591.85T:isapxv20
1483.781486.201493.44T:aes128gcmv1
40133.4140144.9940214.24T:elephant160v2
42969.0543064.7243160.88T:elephant176v2
44567.6944632.3644804.31aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
12.88?13.94?27.73?ascon128av12
20.8720.8820.94ascon128v12
20.9921.0121.69ascon80pqv12
32.69?35.11?61.57?ascon128abi32v12
45.28?48.42?82.07?ascon128bi32v12
51.9952.0152.09T:xoodyakround3
55.5955.6355.87T:giftcofb128v1
63.0263.0563.23T:schwaemm256128v2
75.9179.2482.58T:isapa128v20
83.0883.0983.13T:schwaemm192192v2
86.9286.9587.02T:schwaemm128128v2
88.8688.8888.93T:isapa128av20
87.7189.0290.21T:aes256gcmv1
90.4590.4790.50T:schwaemm256256v2
152.75152.79153.67T:tinyjambu128v2
155.98156.02156.70romulusn
135.67?160.11?160.26?T:grain128aeadv2
180.96181.05181.45T:isapk128av20
195.25195.26195.76T:tinyjambu192v2
217.01217.06217.60T:tinyjambu256v2
239.88240.84244.89T:isapk128v20
258.00258.17259.86romulusm
413.94414.07414.94T:elephant200v2
562.36564.42582.16T:isapxv20
567.55568.67570.32romulust
1483.841485.111490.49T:aes128gcmv1
40107.9840128.4040213.86T:elephant160v2
42920.7743061.5343096.28T:elephant176v2
44567.7344605.6944738.17aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
12.78?13.94?27.60?ascon128av12
20.8820.8820.88ascon128v12
21.0021.0021.00ascon80pqv12
32.80?35.13?62.14?ascon128abi32v12
39.3039.3939.46T:isapa128v20
44.94?47.76?83.36?ascon128bi32v12
52.1152.1452.36T:xoodyakround3
55.6255.6355.68T:giftcofb128v1
58.1158.1258.18T:isapa128av20
63.0463.0563.07T:schwaemm256128v2
83.0883.0983.12T:schwaemm192192v2
86.9486.9587.00T:schwaemm128128v2
87.2587.9988.89T:aes256gcmv1
90.4590.4891.48T:schwaemm256256v2
118.44118.49118.55T:isapk128av20
135.55?137.60?160.14?T:grain128aeadv2
147.37148.18151.52T:isapk128v20
152.75152.76152.81T:tinyjambu128v2
155.99156.00156.92romulusn
195.25195.26196.11T:tinyjambu192v2
196.58196.67198.18romulust
217.01217.06217.58T:tinyjambu256v2
258.05258.13259.85romulusm
312.75314.38332.67T:isapxv20
413.90414.05414.69T:elephant200v2
1426.421427.381435.64aes256gcmv1
1427.241427.761433.52T:aes128gcmv1
40107.5940152.0740246.30T:elephant160v2
42930.2043044.9943114.69T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
12.66?13.77?28.12?ascon128av12
20.6720.7020.73ascon128v12
21.1121.1221.17ascon80pqv12
32.00?34.04?59.68?ascon128abi32v12
41.8741.8943.18T:xoodyakround3
45.39?48.45?79.24?ascon128bi32v12
51.3551.7752.03T:aes256gcmv1
55.6755.7055.75T:giftcofb128v1
59.2659.3761.11T:isapa128v20
60.7762.4662.61T:schwaemm256128v2
73.4973.5073.53T:isapa128av20
82.6482.6582.67T:schwaemm192192v2
86.4386.4586.78T:schwaemm128128v2
88.7288.7388.80T:schwaemm256256v2
124.99125.03125.24T:tinyjambu128v2
128.82128.87130.23romulusn
133.53?135.28?157.76?T:grain128aeadv2
149.10149.20150.07T:isapk128av20
152.49152.56152.88T:tinyjambu192v2
164.13164.16164.39T:tinyjambu256v2
179.73179.92181.18romulusm
192.82193.52194.82T:isapk128v20
306.77307.07307.34T:elephant200v2
381.76382.51383.88romulust
441.87460.16462.86T:isapxv20
1455.611456.151460.46T:aes128gcmv1
22997.3923029.2523084.75aes256gcmv1
30097.4430135.3430175.03T:elephant160v2
32094.5332156.4932232.77T:elephant176v2
Cycles/byte for long+long decrypt
25%50%75%aead
12.56?13.71?28.23?ascon128av12
20.5520.5620.62ascon80pqv12
20.5520.5620.61ascon128v12
30.81?33.50?58.61?ascon128abi32v12
40.09?40.50?63.46?T:xoodyakround3
44.38?47.51?80.14?ascon128bi32v12
45.95?51.07?52.64?T:aes256gcmv1
55.5555.5955.81T:giftcofb128v1
59.1059.4759.65T:isapa128v20
62.5962.6162.63T:schwaemm256128v2
73.4773.5174.74T:isapa128av20
82.7682.8083.15T:schwaemm192192v2
86.5586.5786.59T:schwaemm128128v2
89.0289.0589.23T:schwaemm256256v2
125.11125.14125.25T:tinyjambu128v2
128.77128.88129.45romulusn
134.48?136.17?158.66?T:grain128aeadv2
149.09149.22150.68T:isapk128av20
152.37152.38152.61T:tinyjambu192v2
164.24164.29164.53T:tinyjambu256v2
179.76179.96180.74romulusm
191.73193.01194.97T:isapk128v20
306.77307.18308.19T:elephant200v2
381.93382.67384.02romulust
438.04439.33457.54T:isapxv20
1455.081455.691456.34T:aes128gcmv1
22976.6823042.8623099.66aes256gcmv1
30077.0930124.6930147.44T:elephant160v2
32111.7732169.6732233.23T:elephant176v2
Cycles/byte for long+long forgery
25%50%75%aead
12.45?13.71?28.30?ascon128av12
20.5620.5620.72ascon80pqv12
20.5620.5620.57ascon128v12
31.38?33.48?59.03?ascon128abi32v12
39.4139.4439.49T:isapa128v20
40.15?40.21?63.55?T:xoodyakround3
44.27?47.70?80.74?ascon128bi32v12
51.17?51.59?59.08?T:aes256gcmv1
55.5755.5755.60T:giftcofb128v1
58.1158.1258.16T:isapa128av20
62.6062.6162.63T:schwaemm256128v2
82.7782.7882.90T:schwaemm192192v2
86.5586.5786.59T:schwaemm128128v2
89.0489.0689.59T:schwaemm256256v2
117.85117.92118.27T:isapk128av20
125.11125.14125.47T:tinyjambu128v2
128.80128.82129.45romulusn
134.48?136.32?158.66?T:grain128aeadv2
145.37146.85148.45T:isapk128v20
152.37152.69154.79T:tinyjambu192v2
164.26164.28164.52T:tinyjambu256v2
179.84179.90180.71romulusm
196.31196.44197.17romulust
306.77306.95307.38T:elephant200v2
313.08315.05332.52T:isapxv20
1426.281427.121430.55aes256gcmv1
1426.951427.371431.12T:aes128gcmv1
30083.9430097.4930144.79T:elephant160v2
32100.1732151.7032221.67T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
12.12?13.44?28.52?ascon128av12
13.66?15.06?16.17?T:aes256gcmv1
20.3720.3820.38ascon128v12
20.9921.0021.60ascon80pqv12
28.1628.2028.35T:xoodyakround3
29.49?32.16?56.88?ascon128abi32v12
39.4139.5439.61T:isapa128v20
45.28?49.17?83.24?ascon128bi32v12
55.4855.5355.58T:giftcofb128v1
58.1258.1258.15T:isapa128av20
62.1662.1762.18T:schwaemm256128v2
82.4282.4782.55T:schwaemm192192v2
86.1986.2086.25T:schwaemm128128v2
87.6587.6787.70T:schwaemm256256v2
97.4997.4997.55T:tinyjambu128v2
100.72101.59101.77romulusn
101.57101.71110.26romulusm
109.48109.49109.52T:tinyjambu192v2
111.49111.52111.90T:tinyjambu256v2
116.92117.38117.90T:isapk128av20
133.21?135.59?157.88?T:grain128aeadv2
142.55145.30147.17T:isapk128v20
195.95196.12197.49romulust
202.57202.62203.33T:elephant200v2
312.56330.16332.40T:isapxv20
1425.681427.331433.39aes256gcmv1
1426.111427.571427.98T:aes128gcmv1
20031.3720059.2920078.30T:elephant160v2
21221.0621260.7521315.51T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
11.85?13.41?28.58?ascon128av12
13.81?15.07?16.41?T:aes256gcmv1
20.1220.1220.13ascon80pqv12
20.2220.2520.27ascon128v12
28.1828.2028.24T:xoodyakround3
29.58?32.22?55.94?ascon128abi32v12
39.4339.5039.58T:isapa128v20
44.46?47.66?82.86?ascon128bi32v12
55.4855.5155.62T:giftcofb128v1
58.0058.1358.14T:isapa128av20
62.1762.1762.17T:schwaemm256128v2
82.4682.4982.59T:schwaemm192192v2
86.1986.2086.21T:schwaemm128128v2
87.6087.6487.82T:schwaemm256256v2
97.4997.4997.55T:tinyjambu128v2
101.60101.63101.70romulusn
101.59101.64101.71romulusm
109.46109.49109.54T:tinyjambu192v2
111.50111.50111.56T:tinyjambu256v2
117.19117.28117.67T:isapk128av20
128.31?134.82?157.63?T:grain128aeadv2
144.17145.41147.23T:isapk128v20
195.94196.11198.08romulust
202.60202.93204.63T:elephant200v2
312.87320.58331.98T:isapxv20
1421.291426.411428.81aes256gcmv1
1426.991427.301428.44T:aes128gcmv1
20047.1520061.2620099.92T:elephant160v2
21217.1121248.0921306.07T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
12.21?13.44?28.59?ascon128av12
14.3215.0815.64T:aes256gcmv1
20.1220.1220.12ascon80pqv12
20.2420.2520.26ascon128v12
28.1928.2028.23T:xoodyakround3
29.37?31.81?55.83?ascon128abi32v12
39.4339.5139.85T:isapa128v20
45.26?47.65?82.41?ascon128bi32v12
55.5055.5155.56T:giftcofb128v1
58.1258.1458.15T:isapa128av20
62.1762.1762.18T:schwaemm256128v2
82.4682.4782.50T:schwaemm192192v2
86.1986.1986.21T:schwaemm128128v2
87.6187.6287.66T:schwaemm256256v2
97.4997.4997.55T:tinyjambu128v2
101.62101.63103.05romulusn
101.62101.68104.34romulusm
109.49109.49109.53T:tinyjambu192v2
111.50111.51111.59T:tinyjambu256v2
117.19117.26117.32T:isapk128av20
132.96?135.02?157.63?T:grain128aeadv2
145.22145.33147.70T:isapk128v20
195.97196.10197.59romulust
202.60202.61203.17T:elephant200v2
312.84314.07332.69T:isapxv20
1426.391427.241427.85T:aes128gcmv1
1426.081427.461434.27aes256gcmv1
20036.9120054.3220080.31T:elephant160v2
21225.6321268.7021298.14T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
14.09?14.14?27.56?ascon128av12
21.0121.0121.06ascon128v12
21.4621.4621.52ascon80pqv12
34.58?34.64?59.63?ascon128abi32v12
42.3642.3642.40T:xoodyakround3
49.24?49.27?80.92?ascon128bi32v12
56.4356.4456.50T:giftcofb128v1
64.2964.3565.06T:schwaemm256128v2
64.8564.9565.27T:aes256gcmv1
78.6878.6878.72T:isapa128av20
84.4784.4884.60T:schwaemm192192v2
87.5587.5787.67T:schwaemm128128v2
88.1588.1588.27T:isapa128v20
90.9590.9590.97T:schwaemm256256v2
125.98125.99126.04T:tinyjambu128v2
130.05130.05130.73romulusn
135.85?136.10?157.09?T:grain128aeadv2
153.67153.67153.71T:tinyjambu192v2
165.35165.36165.64T:tinyjambu256v2
181.09181.19182.52romulusm
190.30190.31190.69T:isapk128av20
313.25313.44314.41T:elephant200v2
364.47364.66366.97T:isapk128v20
387.64388.05389.45romulust
727.89745.68746.02T:isapxv20
1463.361464.131465.14T:aes128gcmv1
23454.2523472.1123537.47aes256gcmv1
30418.9630431.1930489.46T:elephant160v2
32325.5432392.1632411.99T:elephant176v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
14.04?14.11?26.64?ascon128av12
20.8920.8920.95ascon128v12
20.9020.9320.98ascon80pqv12
34.26?34.35?57.86?ascon128abi32v12
40.5640.6141.65T:xoodyakround3
48.50?49.55?80.93?ascon128bi32v12
56.3556.3556.45T:giftcofb128v1
64.4264.4264.45T:schwaemm256128v2
70.9270.9971.86T:aes256gcmv1
78.6878.7179.42T:isapa128av20
84.6184.6184.69T:schwaemm192192v2
87.6787.6887.69T:schwaemm128128v2
88.1888.3188.52T:isapa128v20
91.2791.2791.31T:schwaemm256256v2
126.12126.13126.18T:tinyjambu128v2
130.04130.08130.64romulusn
136.81?137.00?158.05?T:grain128aeadv2
153.55153.57155.81T:tinyjambu192v2
165.49165.51165.63T:tinyjambu256v2
181.43181.50182.48romulusm
190.36190.42191.20T:isapk128av20
313.58313.65314.05T:elephant200v2
364.58365.25366.79T:isapk128v20
387.65388.12388.41romulust
707.46707.82723.78T:isapxv20
1463.851465.391468.70T:aes128gcmv1
23443.6323469.8923553.86aes256gcmv1
30414.1330444.6130489.18T:elephant160v2
32345.1632408.7132453.50T:elephant176v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
14.04?14.05?27.67?ascon128av12
20.8920.8920.90ascon128v12
20.9020.9020.92ascon80pqv12
34.26?34.28?59.12?ascon128abi32v12
40.6540.6640.70T:xoodyakround3
48.48?48.51?81.01?ascon128bi32v12
53.5753.5753.61T:isapa128v20
56.3556.3656.67T:giftcofb128v1
61.0461.0461.06T:isapa128av20
64.4264.4264.44T:schwaemm256128v2
84.6184.6485.04T:schwaemm192192v2
87.6887.6887.70T:schwaemm128128v2
91.2791.2891.40T:schwaemm256256v2
91.4291.5292.05T:aes256gcmv1
126.12126.14126.15T:tinyjambu128v2
130.04130.05130.72romulusn
136.81?136.99?158.05?T:grain128aeadv2
146.57146.58146.66T:isapk128av20
153.55153.57155.81T:tinyjambu192v2
165.50165.50165.55T:tinyjambu256v2
181.43181.59183.58romulusm
201.91201.96202.93romulust
240.97241.37243.52T:isapk128v20
313.26313.59313.79T:elephant200v2
451.05451.49467.26T:isapxv20
1435.191435.471439.79T:aes128gcmv1
1883.041884.211891.54aes256gcmv1
30418.7730440.5230513.81T:elephant160v2
32335.6932405.2232429.67T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
21.84?22.88?41.12?ascon128av12
28.2128.2129.02ascon128v12
28.9128.9129.80ascon80pqv12
62.0662.1663.58T:xoodyakround3
67.39?68.30?122.12?ascon128bi32v12
52.09?72.56?94.75?ascon128abi32v12
73.2773.2774.45T:giftcofb128v1
105.70105.70106.94T:schwaemm256128v2
113.01113.01113.85T:schwaemm128128v2
137.34137.34137.75T:schwaemm192192v2
141.50141.50142.09T:schwaemm256256v2
148.62148.62148.89T:tinyjambu128v2
157.50157.62158.70romulusn
152.94?178.55?217.41?T:grain128aeadv2
180.47180.47180.81T:tinyjambu192v2
193.54193.54193.82T:tinyjambu256v2
197.84197.84203.20T:isapa128av20
210.36210.36211.55romulusm
361.68365.15381.82T:aes256gcmv1
442.08442.41443.82T:elephant200v2
520.20520.27522.79romulust
749.64749.68752.38T:isapa128v20
1106.341106.451107.95T:isapk128av20
1649.181649.231651.12T:aes128gcmv1
4270.984271.844310.26T:isapk128v20
7184.197214.837219.92T:isapxv20
33911.8933944.2134075.38aes256gcmv1
40239.0040344.2240441.84T:elephant176v2
40699.8240706.1640733.13T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
22.09?23.29?41.32?ascon128av12
28.2828.2828.90ascon128v12
28.6628.6629.58ascon80pqv12
52.25?53.12?100.97?ascon128abi32v12
59.7159.7960.14T:xoodyakround3
66.60?67.60?127.02?ascon128bi32v12
74.2074.2074.74T:giftcofb128v1
105.95105.95106.41T:schwaemm256128v2
113.12113.12113.55T:schwaemm128128v2
138.06138.06138.27T:schwaemm192192v2
142.20142.20142.51T:schwaemm256256v2
149.02149.02149.12T:tinyjambu128v2
157.82157.94158.85romulusn
153.87?179.89?254.48?T:grain128aeadv2
180.53180.53180.77T:tinyjambu192v2
194.00194.00194.09T:tinyjambu256v2
197.85197.85198.43T:isapa128av20
217.44217.44218.50romulusm
442.22442.27443.37T:elephant200v2
506.48508.48522.35T:aes256gcmv1
520.05520.15522.11romulust
750.25750.27758.51T:isapa128v20
1107.871108.351109.34T:isapk128av20
1648.901649.041650.00T:aes128gcmv1
4272.384273.474300.57T:isapk128v20
6796.496807.246819.27T:isapxv20
33909.5233914.4633951.16aes256gcmv1
40232.2940259.7440314.78T:elephant176v2
40699.4540705.3240726.18T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
22.09?22.19?41.49?ascon128av12
28.2828.2828.38ascon128v12
28.6628.7628.77ascon80pqv12
52.28?52.43?96.09?ascon128abi32v12
60.3460.4260.67T:xoodyakround3
66.59?66.70?128.52?ascon128bi32v12
74.2174.2174.25T:giftcofb128v1
105.95105.95106.09T:schwaemm256128v2
113.17113.39114.08T:schwaemm128128v2
127.99127.99128.12T:isapa128av20
138.06138.06138.34T:schwaemm192192v2
142.21142.21142.45T:schwaemm256256v2
149.09149.09149.09T:tinyjambu128v2
157.86157.98158.07romulusn
153.19?179.89?239.95?T:grain128aeadv2
180.53180.53180.64T:tinyjambu192v2
194.00194.00194.00T:tinyjambu256v2
217.44217.44217.71romulusm
329.42330.00364.47romulust
378.30378.34379.22T:isapa128v20
442.20442.23443.24T:elephant200v2
781.97782.02782.98T:isapk128av20
1006.121008.961016.92T:aes256gcmv1
1620.311620.751624.44T:aes128gcmv1
2378.632379.872393.46T:isapk128v20
3532.043541.693555.18T:isapxv20
12372.5812384.5013558.45aes256gcmv1
40231.5240256.5740354.45T:elephant176v2
40701.1540704.3940738.49T:elephant160v2