VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Bonnell (106ca); 2010 Intel Atom N455; 1 x 1000MHz; h2atom, supercop-20251222

[Page version: 20260503 04:13:14]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
13.9914.0714.28ascon128av12
20.9421.0021.05ascon128v12
21.2021.2521.31ascon80pqv12
35.3635.4435.52ascon128abi32v12
48.8649.0049.25ascon128bi32v12
55.5255.6055.95T:xoodyakround3
55.8255.9157.03T:giftcofb128v1
62.7562.8063.05T:schwaemm256128v2
78.6079.2581.14T:isapa128v20
82.8082.8683.22T:schwaemm192192v2
86.6886.7187.07T:schwaemm128128v2
88.8288.9089.08T:isapa128av20
89.7889.8189.95T:schwaemm256256v2
99.65101.26103.12T:aes256gcmv1
152.49152.52152.81T:tinyjambu128v2
137.61?156.21?157.80?T:grain128aeadv2
180.56181.04182.36T:isapk128av20
187.15187.65188.35romulusn
195.50195.78197.48T:tinyjambu192v2
216.74216.76216.99T:tinyjambu256v2
238.44240.68248.25T:isapk128v20
304.29305.37305.71romulusm
413.05413.74415.24T:elephant200v2
551.95574.23596.34T:isapxv20
601.02602.13604.11T!!!romulust
1482.801484.001489.10T:aes128gcmv1
40105.7440156.0740246.77T:elephant160v2
43021.0443065.1343159.59T:elephant176v2
50718.8450809.4550929.78aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
13.8613.9414.10ascon128av12
20.8320.8821.15ascon128v12
20.9421.0021.42ascon80pqv12
35.0635.1436.39ascon128abi32v12
47.6247.7548.25ascon128bi32v12
51.9752.0352.79T:xoodyakround3
55.5955.6355.91T:giftcofb128v1
63.0163.0563.14T:schwaemm256128v2
77.0779.2581.60T:isapa128v20
83.0783.0983.21T:schwaemm192192v2
85.7886.9287.05T:schwaemm128128v2
88.7688.8990.05T:isapa128av20
90.4390.4891.38T:schwaemm256256v2
99.67102.07104.79T:aes256gcmv1
152.75152.76153.04T:tinyjambu128v2
139.71?158.34?159.80?T:grain128aeadv2
173.66180.80182.47T:isapk128av20
186.50188.21188.79romulusn
195.25195.27195.72T:tinyjambu192v2
217.00217.01217.41T:tinyjambu256v2
239.21240.88244.87T:isapk128v20
305.01305.96306.70romulusm
413.57413.99414.75T:elephant200v2
560.60584.31612.38T:isapxv20
600.52601.98603.52T!!!romulust
1483.791484.491485.79T:aes128gcmv1
40116.1840193.1342550.42T:elephant160v2
43049.8443084.4343167.77T:elephant176v2
50719.0150811.4151040.71aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
13.9213.9413.96ascon128av12
20.8720.8820.93ascon128v12
21.0021.0021.01ascon80pqv12
35.1135.1335.16ascon128abi32v12
38.8639.3839.90T:isapa128v20
47.7247.7547.98ascon128bi32v12
52.0952.1352.31T:xoodyakround3
55.6255.6355.87T:giftcofb128v1
58.1058.1358.30T:isapa128av20
63.0263.0563.25T:schwaemm256128v2
83.0883.0983.33T:schwaemm192192v2
86.9286.9587.30T:schwaemm128128v2
90.4490.4790.89T:schwaemm256256v2
100.40101.92104.50T:aes256gcmv1
118.30118.49119.23T:isapk128av20
147.00148.29151.06T:isapk128v20
152.73152.76153.00T:tinyjambu128v2
139.58?158.34?159.50?T:grain128aeadv2
187.44188.06188.64romulusn
195.25195.28196.74T:tinyjambu192v2
207.70209.08210.17T!!!romulust
216.97217.01217.34T:tinyjambu256v2
304.25305.76306.32romulusm
320.77331.27341.39T:isapxv20
413.33413.82414.68T:elephant200v2
1426.581427.421428.23T:aes128gcmv1
1455.091459.051461.73aes256gcmv1
40112.5540178.7741496.33T:elephant160v2
42995.4243064.7943139.11T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
13.7313.7613.89ascon128av12
20.6720.6920.81ascon128v12
21.1121.1421.46ascon80pqv12
33.7733.8435.15ascon128abi32v12
41.8741.8942.18T:xoodyakround3
46.6248.6049.86ascon128bi32v12
55.6655.7056.33T:giftcofb128v1
56.5357.1958.67T:aes256gcmv1
57.6859.3962.18T:isapa128v20
62.4562.4862.54T:schwaemm256128v2
73.4773.5273.96T:isapa128av20
82.6382.6582.69T:schwaemm192192v2
86.4286.4686.68T:schwaemm128128v2
88.7188.7989.09T:schwaemm256256v2
122.38124.95125.24T:tinyjambu128v2
148.90149.26151.69T:isapk128av20
152.45152.52152.78T:tinyjambu192v2
152.13152.53152.85romulusn
137.47?156.12?157.55?T:grain128aeadv2
164.12164.16164.33T:tinyjambu256v2
191.91193.20194.82T:isapk128v20
210.71211.24211.57romulusm
306.58306.88307.32T:elephant200v2
403.99405.02405.94T!!!romulust
429.45443.69454.38T:isapxv20
1454.801456.011458.24T:aes128gcmv1
26101.6626154.0526221.21aes256gcmv1
30084.8530128.4030169.60T:elephant160v2
32132.8332196.3932231.85T:elephant176v2
Cycles/byte for long+long decrypt
25%50%75%aead
13.6013.6913.85ascon128av12
20.4420.5020.64ascon80pqv12
20.5020.5620.70ascon128v12
33.3433.4833.72ascon128abi32v12
39.9940.1140.39T:xoodyakround3
45.4547.3147.89ascon128bi32v12
55.5355.5755.75T:giftcofb128v1
56.4957.7259.32T:aes256gcmv1
58.5159.3960.76T:isapa128v20
62.5862.6162.80T:schwaemm256128v2
73.4673.5073.70T:isapa128av20
82.7482.7882.87T:schwaemm192192v2
86.5486.5986.95T:schwaemm128128v2
89.0089.0889.36T:schwaemm256256v2
122.34125.11125.41T:tinyjambu128v2
148.43149.19150.30T:isapk128av20
147.42152.38163.03T:tinyjambu192v2
152.26152.66153.09romulusn
138.50?157.07?158.44?T:grain128aeadv2
164.19164.28164.52T:tinyjambu256v2
192.27193.90212.08T:isapk128v20
211.22211.53212.21romulusm
306.79307.08307.45T:elephant200v2
404.43405.24405.85T!!!romulust
444.50456.19471.75T:isapxv20
1455.051455.901456.91T:aes128gcmv1
26099.7026162.9026237.82aes256gcmv1
30049.1930122.2330169.26T:elephant160v2
32139.1432195.7232241.94T:elephant176v2
Cycles/byte for long+long forgery
25%50%75%aead
13.6913.6913.81ascon128av12
20.4920.5020.60ascon80pqv12
20.5620.5620.81ascon128v12
33.4433.4833.96ascon128abi32v12
39.1339.4540.31T:isapa128v20
40.1440.1640.27T:xoodyakround3
45.6147.6048.36ascon128bi32v12
46.30?55.29?59.16?T:aes256gcmv1
55.5355.5756.10T:giftcofb128v1
58.0758.1358.44T:isapa128av20
62.5962.6162.82T:schwaemm256128v2
82.7782.7983.16T:schwaemm192192v2
86.5586.5686.71T:schwaemm128128v2
89.0389.1189.35T:schwaemm256256v2
117.78117.98119.40T:isapk128av20
121.62125.13125.31T:tinyjambu128v2
146.18?147.25?164.32?T:isapk128v20
151.59152.53154.08T:tinyjambu192v2
152.20152.59153.03romulusn
138.69?157.07?158.59?T:grain128aeadv2
164.22164.32164.65T:tinyjambu256v2
207.89208.13208.26T!!!romulust
211.05211.31211.77romulusm
306.54307.03307.45T:elephant200v2
325.23333.55337.44T:isapxv20
1427.181427.901432.58T:aes128gcmv1
1457.911460.231465.60aes256gcmv1
30091.6630143.3730194.25T:elephant160v2
32138.0432205.2332258.04T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
11.90?13.33?14.95?T:aes256gcmv1
13.3413.4413.52ascon128av12
20.3120.3820.43ascon128v12
20.9321.0021.06ascon80pqv12
28.1528.2028.29T:xoodyakround3
32.0732.1932.30ascon128abi32v12
39.0139.5040.00T:isapa128v20
47.7447.8948.67ascon128bi32v12
55.4655.6157.65T:giftcofb128v1
58.0258.1358.32T:isapa128av20
62.1562.1762.23T:schwaemm256128v2
82.4182.4782.69T:schwaemm192192v2
86.1986.2186.62T:schwaemm128128v2
87.6387.7287.97T:schwaemm256256v2
97.4997.5198.21T:tinyjambu128v2
109.49109.55109.87T:tinyjambu192v2
111.49111.51111.65T:tinyjambu256v2
116.69116.90118.72romulusn
116.74117.00118.98romulusm
117.02117.32118.92T:isapk128av20
144.97145.47147.29T:isapk128v20
137.23?156.04?157.63?T:grain128aeadv2
202.19202.33202.83T:elephant200v2
206.62208.26209.19T!!!romulust
304.87313.11323.43T:isapxv20
1425.51?1428.51?1917.79?T:aes128gcmv1
1457.971459.441464.39aes256gcmv1
20032.0920056.8420076.21T:elephant160v2
21248.1221286.0121364.60T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
13.2713.4413.80ascon128av12
11.87?13.84?20.93?T:aes256gcmv1
19.3619.9920.09ascon80pqv12
20.1720.2520.31ascon128v12
27.6928.1928.25T:xoodyakround3
31.6831.8231.93ascon128abi32v12
39.0139.5041.01T:isapa128v20
47.4847.6347.89ascon128bi32v12
55.4855.5456.82T:giftcofb128v1
58.1058.1358.71T:isapa128av20
62.1662.1762.39T:schwaemm256128v2
82.4482.4782.82T:schwaemm192192v2
86.1886.2087.94T:schwaemm128128v2
87.5987.7788.42T:schwaemm256256v2
97.4997.5097.59T:tinyjambu128v2
109.49109.50109.57T:tinyjambu192v2
111.31111.51111.82T:tinyjambu256v2
116.61116.91118.88romulusn
116.77117.10118.77romulusm
117.08117.27118.14T:isapk128av20
143.93145.34147.27T:isapk128v20
139.13?155.82?157.80?T:grain128aeadv2
202.21202.33202.84T:elephant200v2
206.57208.81210.02T!!!romulust
316.74329.98344.44T:isapxv20
1426.27?1428.18?1912.40?T:aes128gcmv1
1454.821459.631465.27aes256gcmv1
20035.0620057.6820098.13T:elephant160v2
21243.5721289.2121311.40T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
13.4313.4413.46ascon128av12
11.71?14.18?26.17?T:aes256gcmv1
19.9720.0120.35ascon80pqv12
20.2420.2520.26ascon128v12
28.1728.2128.38T:xoodyakround3
31.7931.8232.02ascon128abi32v12
38.9939.5241.77T:isapa128v20
47.5947.6348.64ascon128bi32v12
55.5055.5255.72T:giftcofb128v1
58.1158.1358.31T:isapa128av20
62.1662.1762.38T:schwaemm256128v2
82.4482.4682.54T:schwaemm192192v2
86.1886.2086.53T:schwaemm128128v2
87.5987.6987.98T:schwaemm256256v2
97.4897.5097.56T:tinyjambu128v2
109.44109.54110.02T:tinyjambu192v2
111.49111.51111.68T:tinyjambu256v2
115.70116.92118.37romulusm
116.62116.93118.69romulusn
116.83117.25117.84T:isapk128av20
143.06145.19146.95T:isapk128v20
136.97?155.79?157.43?T:grain128aeadv2
202.21202.32202.72T:elephant200v2
206.47208.10210.60T!!!romulust
318.67330.14343.08T:isapxv20
1456.971459.151461.46aes256gcmv1
1431.98?1459.71?1957.37?T:aes128gcmv1
20037.4920052.0720102.07T:elephant160v2
21253.5121285.7021326.69T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
14.0914.1014.14ascon128av12
21.0121.0121.16ascon128v12
21.4621.4621.60ascon80pqv12
34.5834.5934.81ascon128abi32v12
42.3642.3642.56T:xoodyakround3
49.2449.2449.54ascon128bi32v12
56.4356.4557.03T:giftcofb128v1
64.3164.5367.05T:schwaemm256128v2
70.0370.1472.22T:aes256gcmv1
78.6978.7279.35T:isapa128av20
84.4784.4884.55T:schwaemm192192v2
87.5587.5687.61T:schwaemm128128v2
88.1788.1789.23T:isapa128v20
90.9591.0091.24T:schwaemm256256v2
125.99126.02126.21T:tinyjambu128v2
153.67153.78154.32T:tinyjambu192v2
153.56153.87154.12romulusn
139.55?157.09?157.39?T:grain128aeadv2
165.35165.38165.62T:tinyjambu256v2
190.29190.36191.89T:isapk128av20
212.46212.78213.28romulusm
313.13313.31313.89T:elephant200v2
364.48364.94366.50T:isapk128v20
410.89411.19412.20T!!!romulust
711.23726.92727.55T:isapxv20
1462.941463.541464.02T:aes128gcmv1
26623.8226661.0926788.97aes256gcmv1
30414.3830436.2430492.90T:elephant160v2
32394.3532416.3332482.44T:elephant176v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
14.0414.0514.22ascon128av12
20.8420.8421.02ascon80pqv12
20.8920.9021.06ascon128v12
34.2634.2734.56ascon128abi32v12
40.5640.5640.78T:xoodyakround3
48.4948.5049.26ascon128bi32v12
56.3556.3656.56T:giftcofb128v1
64.4264.4364.71T:schwaemm256128v2
75.6175.6777.04T:aes256gcmv1
78.6978.6978.84T:isapa128av20
84.6184.6284.82T:schwaemm192192v2
87.6887.6987.85T:schwaemm128128v2
87.4788.0991.17T:isapa128v20
91.2791.3791.83T:schwaemm256256v2
126.13126.15126.37T:tinyjambu128v2
153.55153.59153.92T:tinyjambu192v2
153.64154.02154.83romulusn
140.65?158.05?158.22?T:grain128aeadv2
165.49165.52165.75T:tinyjambu256v2
190.38190.50192.62T:isapk128av20
212.85213.25213.60romulusm
313.11313.22313.97T:elephant200v2
364.54365.10368.67T:isapk128v20
410.93411.48412.27T!!!romulust
724.90729.39745.07T:isapxv20
1463.661464.131465.21T:aes128gcmv1
26621.8026676.2526748.61aes256gcmv1
30419.1530445.1130489.05T:elephant160v2
32387.4132421.3532459.27T:elephant176v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
14.0414.0414.06ascon128av12
20.8420.8421.31ascon80pqv12
20.8920.8921.02ascon128v12
34.2634.2734.82ascon128abi32v12
40.6540.6640.79T:xoodyakround3
48.4948.5049.29ascon128bi32v12
53.5653.5754.67T:isapa128v20
56.3556.3656.98T:giftcofb128v1
61.0461.0461.54T:isapa128av20
64.4264.4364.76T:schwaemm256128v2
84.6184.6384.88T:schwaemm192192v2
87.6787.6987.98T:schwaemm128128v2
91.2791.3491.98T:schwaemm256256v2
96.0596.2698.13T:aes256gcmv1
126.13126.13126.35T:tinyjambu128v2
146.58146.60147.52T:isapk128av20
153.55153.57153.90T:tinyjambu192v2
153.38153.84154.48romulusn
140.53?158.05?158.13?T:grain128aeadv2
165.49165.51165.73T:tinyjambu256v2
212.85213.26213.54romulusm
213.69214.15214.52T!!!romulust
240.98241.04242.60T:isapk128v20
313.12313.30314.60T:elephant200v2
467.50469.55475.53T:isapxv20
1435.401435.921438.42T:aes128gcmv1
1979.501980.301983.19aes256gcmv1
30414.7630441.1230482.79T:elephant160v2
32383.8432427.5132479.04T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
21.8421.9524.13ascon128av12
28.2128.2729.95ascon128v12
28.9128.9630.55ascon80pqv12
52.0952.2355.59ascon128abi32v12
62.1662.2463.44T:xoodyakround3
67.3967.4471.05ascon128bi32v12
73.2773.3874.70T:giftcofb128v1
105.70105.73106.73T:schwaemm256128v2
113.01113.01113.71T:schwaemm128128v2
137.34137.40137.80T:schwaemm192192v2
141.60?142.08?168.65?T:schwaemm256256v2
148.62148.62148.83T:tinyjambu128v2
158.99?178.50?179.22?T:grain128aeadv2
180.47180.47180.77T:tinyjambu192v2
184.13184.21186.18romulusn
193.54193.54193.83T:tinyjambu256v2
197.86197.90198.76T:isapa128av20
244.77244.85247.05romulusm
361.91364.74387.05T:aes256gcmv1
441.91442.03444.58T:elephant200v2
548.14549.32566.04T!!!romulust
750.38750.43760.32T:isapa128v20
1106.341106.381113.71T:isapk128av20
1649.17?1655.15?2138.98?T:aes128gcmv1
4271.254271.864296.78T:isapk128v20
6887.907163.517166.92T:isapxv20
38542.4238554.4238721.81aes256gcmv1
40309.9840320.6440340.65T:elephant176v2
40698.8040703.0640775.03T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
22.09?22.17?24.81?ascon128av12
28.2828.3229.98ascon128v12
28.4928.5130.33ascon80pqv12
52.2652.3855.83ascon128abi32v12
59.7959.8660.45T:xoodyakround3
66.6066.6370.32ascon128bi32v12
74.2074.2474.74T:giftcofb128v1
105.95106.00106.49T:schwaemm256128v2
113.12113.13113.59T:schwaemm128128v2
138.06138.13138.49T:schwaemm192192v2
142.20142.27142.83T:schwaemm256256v2
149.02149.02149.14T:tinyjambu128v2
158.78?179.89?180.25?T:grain128aeadv2
180.53180.53180.74T:tinyjambu192v2
184.64?187.66?236.56?romulusn
194.00194.00194.10T:tinyjambu256v2
198.07198.28199.71T:isapa128av20
252.33252.55257.85romulusm
442.08442.12444.37T:elephant200v2
486.94489.29509.53T:aes256gcmv1
548.19548.45559.13T!!!romulust
748.56748.69757.80T:isapa128v20
1107.871108.501120.08T:isapk128av20
1649.69?1654.68?2148.39?T:aes128gcmv1
4272.434273.374305.36T:isapk128v20
6819.816833.617180.87T:isapxv20
38546.3038555.0538670.51aes256gcmv1
40266.5940318.0140338.85T:elephant176v2
40698.1740705.6340781.63T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
22.0922.0922.33ascon128av12
28.2828.2828.45ascon128v12
28.4928.4928.65ascon80pqv12
52.2952.2954.59ascon128abi32v12
60.4160.5160.95T:xoodyakround3
66.6066.6067.43ascon128bi32v12
74.2174.2474.38T:giftcofb128v1
105.95106.00106.14T:schwaemm256128v2
113.18113.37117.47T:schwaemm128128v2
127.89127.97128.35T:isapa128av20
138.06138.13138.47T:schwaemm192192v2
142.21142.29142.73T:schwaemm256256v2
149.09149.09149.12T:tinyjambu128v2
157.82?179.89?180.03?T:grain128aeadv2
180.53180.53180.68T:tinyjambu192v2
184.60184.67185.31romulusn
194.00194.00194.05T:tinyjambu256v2
252.40252.46253.15romulusm
346.91348.38363.95T!!!romulust
378.33378.35387.41T:isapa128v20
442.05442.06444.20T:elephant200v2
781.97781.99785.40T:isapk128av20
987.70992.721012.08T:aes256gcmv1
1621.11?1627.11?2120.39?T:aes128gcmv1
2378.292379.162399.12T:isapk128v20
3555.373564.643721.26T:isapxv20
13939.0113952.5514025.40aes256gcmv1
40282.3240318.9740340.23T:elephant176v2
40698.4540704.7340775.88T:elephant160v2