VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; K10 45nm (100f63); 2010 AMD Athlon II Neo K125; 1 x 1700MHz; h3neo, supercop-20241022

[Page version: 20241120 00:41:35]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
9.459.519.51ascon128av12
13.9213.9213.92ascon128v12
14.0314.0414.05ascon80pqv12
18.7318.7818.79ascon128abi32v12
26.8426.8726.99T:xoodyakround3
28.2428.2528.27ascon128bi32v12
35.4135.5235.55T:schwaemm256128v2
39.2639.4139.49T:aes128gcmv1
43.1143.5044.17T:aes256gcmv1
45.5545.5745.60T:giftcofb128v1
47.0847.1047.12T:schwaemm192192v2
50.7650.8150.86T:schwaemm256256v2
51.9952.1452.29T:schwaemm128128v2
55.8455.8855.91T:isapa128v20
59.6159.6459.67T:isapa128av20
68.6268.6368.65T:grain128aeadv2
80.4080.4180.41T:tinyjambu128v2
92.5092.5092.51T:romulusn
100.03100.03100.06T:tinyjambu192v2
108.19108.19108.21T:tinyjambu256v2
108.89108.93109.05T:isapk128av20
151.08151.37151.61T:isapk128v20
195.43195.44195.70romulusn
238.77240.47241.27T:elephant200v2
335.64336.06339.00T:isapxv20
372.46373.36373.79romulusm
803.38804.32814.88T!!!romulust
15669.9915670.3915671.21T:elephant160v2
15991.8015992.2215993.12T:elephant176v2
25360.1225372.9925391.31aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
9.509.529.54ascon128av12
13.8713.8813.89ascon80pqv12
14.1214.1314.13ascon128v12
18.7918.8218.85ascon128abi32v12
26.3926.4026.43T:xoodyakround3
29.1229.1329.13ascon128bi32v12
35.5935.6235.72T:schwaemm256128v2
39.3039.4539.50T:aes128gcmv1
43.4843.7844.16T:aes256gcmv1
45.3145.3345.33T:giftcofb128v1
47.1247.1747.18T:schwaemm192192v2
50.7650.7750.87T:schwaemm256256v2
51.9852.2452.26T:schwaemm128128v2
55.8755.8855.89T:isapa128v20
59.5959.6159.66T:isapa128av20
69.7769.8169.85T:grain128aeadv2
80.7580.7580.77T:tinyjambu128v2
91.7391.7491.77T:romulusn
100.25100.25100.26T:tinyjambu192v2
107.76107.76107.78T:tinyjambu256v2
108.91108.93109.17T:isapk128av20
151.33151.36151.78T:isapk128v20
195.61195.63195.88romulusn
238.67240.36241.71T:elephant200v2
334.58337.57339.21T:isapxv20
372.95373.34374.80romulusm
804.16804.70807.46T!!!romulust
15666.4415670.4215670.90T:elephant160v2
15991.6415992.1815992.80T:elephant176v2
25366.1225369.3225385.66aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
9.539.539.53ascon128av12
13.8713.8813.88ascon80pqv12
14.1214.1314.13ascon128v12
18.8318.8318.84ascon128abi32v12
26.5226.5526.57T:xoodyakround3
27.4727.5127.52T:isapa128v20
29.1229.1329.13ascon128bi32v12
35.5935.6235.72T:schwaemm256128v2
39.3539.3739.51T:aes128gcmv1
39.4639.4839.53T:isapa128av20
42.33?43.39?51.54?T:aes256gcmv1
45.3345.3345.34T:giftcofb128v1
47.1747.1747.19T:schwaemm192192v2
50.7650.7750.88T:schwaemm256256v2
51.9852.2452.26T:schwaemm128128v2
69.7869.8169.86T:grain128aeadv2
72.2272.2672.29T:isapk128av20
80.7580.7580.77T:tinyjambu128v2
91.7591.7691.77T:romulusn
98.8098.8498.91T:isapk128v20
100.25100.25100.25T:tinyjambu192v2
107.75107.75107.76T:tinyjambu256v2
195.62195.64195.88romulusn
200.53200.77203.96T:isapxv20
238.64240.36241.22T:elephant200v2
255.50256.45259.78T!!!romulust
372.13373.43374.19romulusm
677.68679.03686.46aes256gcmv1
15667.3515670.6515671.26T:elephant160v2
15991.9615992.2115992.56T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
9.219.249.27ascon128av12
14.0114.0214.03ascon80pqv12
14.0114.0214.03ascon128v12
18.6718.7118.73ascon128abi32v12
20.5820.6020.70T:xoodyakround3
23.3423.4623.53T:aes128gcmv1
25.8426.0526.24T:aes256gcmv1
27.8027.8127.83ascon128bi32v12
35.3635.4535.46T:schwaemm256128v2
41.6241.6341.68T:isapa128v20
45.4345.4545.57T:giftcofb128v1
47.0347.0547.07T:schwaemm192192v2
49.5649.5749.60T:isapa128av20
50.6850.7850.83T:schwaemm256256v2
51.9052.0252.11T:schwaemm128128v2
65.8565.8565.87T:tinyjambu128v2
68.3068.3268.44T:grain128aeadv2
78.4278.4478.45T:tinyjambu192v2
79.7179.7879.83T:romulusn
81.4681.4781.49T:tinyjambu256v2
90.5790.6090.72T:isapk128av20
118.42118.44118.62T:isapk128v20
178.63180.47180.62T:elephant200v2
185.50185.70186.48romulusn
267.44268.37269.90T:isapxv20
274.58275.43276.50romulusm
529.50530.05534.90T!!!romulust
11749.6411752.0911752.60T:elephant160v2
11947.7711948.1511948.41T:elephant176v2
13023.8313028.8613032.65aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
9.249.269.27ascon128av12
14.1214.1314.13ascon80pqv12
14.1214.1314.13ascon128v12
18.6718.6918.72ascon128abi32v12
20.2520.3520.42T:xoodyakround3
23.3923.4823.65T:aes128gcmv1
25.7425.9326.42T:aes256gcmv1
28.3128.3128.32ascon128bi32v12
35.4435.5335.55T:schwaemm256128v2
41.6241.6341.65T:isapa128v20
45.2845.3245.34T:giftcofb128v1
47.0647.0747.09T:schwaemm192192v2
49.5549.5749.58T:isapa128av20
50.6250.6850.80T:schwaemm256256v2
51.9352.0752.09T:schwaemm128128v2
66.0166.0266.04T:tinyjambu128v2
68.6468.6870.50T:grain128aeadv2
78.5478.5578.59T:tinyjambu192v2
79.3679.3879.49T:romulusn
81.2481.2581.29T:tinyjambu256v2
90.5890.6090.70T:isapk128av20
118.24118.45118.62T:isapk128v20
178.56180.40180.54T:elephant200v2
185.71185.97186.58romulusn
267.74270.09270.72T:isapxv20
274.42275.30275.93romulusm
529.04530.11533.82T!!!romulust
11749.1411749.5811752.50T:elephant160v2
11947.8911948.5811948.91T:elephant176v2
13020.9113026.9913031.47aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
9.269.269.30ascon128av12
14.1214.1314.13ascon128v12
14.1214.1314.13ascon80pqv12
18.7018.7118.71ascon128abi32v12
20.4120.4220.44T:xoodyakround3
23.4023.4423.49T:aes128gcmv1
25.3725.8125.96T:aes256gcmv1
27.4327.4427.47T:isapa128v20
28.3128.3128.31ascon128bi32v12
35.5035.5135.55T:schwaemm256128v2
39.4939.5139.62T:isapa128av20
45.3045.3345.45T:giftcofb128v1
47.0647.0747.09T:schwaemm192192v2
50.6350.7350.80T:schwaemm256256v2
51.8252.0752.09T:schwaemm128128v2
66.0266.0366.04T:tinyjambu128v2
68.6568.6768.79T:grain128aeadv2
72.2572.2672.41T:isapk128av20
78.5478.5578.57T:tinyjambu192v2
79.3679.3779.38T:romulusn
81.2481.2581.30T:tinyjambu256v2
91.9992.1992.36T:isapk128v20
178.56180.40180.56T:elephant200v2
185.90186.69188.04romulusn
200.91202.32202.48T:isapxv20
255.27255.79259.69T!!!romulust
274.35274.57276.53romulusm
678.16678.53689.68aes256gcmv1
11750.3811751.9511752.28T:elephant160v2
11947.6711947.9311948.14T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
7.567.597.65T:aes128gcmv1
7.798.078.31T:aes256gcmv1
8.968.988.98ascon128av12
13.9914.0014.01ascon80pqv12
14.1214.1314.13ascon128v12
14.3014.3214.69T:xoodyakround3
18.6218.6418.65ascon128abi32v12
27.3727.3827.39T:isapa128v20
27.3727.3827.38ascon128bi32v12
35.2635.3735.38T:schwaemm256128v2
39.4839.4939.54T:isapa128av20
45.3145.3445.35T:giftcofb128v1
46.9746.9947.01T:schwaemm192192v2
50.4950.5050.71T:schwaemm256256v2
51.3151.3151.31T:tinyjambu128v2
51.7051.8951.91T:schwaemm128128v2
54.7454.7654.76T:tinyjambu256v2
56.8456.8556.86T:tinyjambu192v2
66.8866.9067.06T:romulusn
67.9768.0268.06T:grain128aeadv2
72.2372.2572.27T:isapk128av20
85.4985.5385.89T:isapk128v20
119.63120.83120.92T:elephant200v2
175.85176.24177.52romulusn
176.64176.79177.64romulusm
199.57200.74200.89T:isapxv20
255.69256.31256.71T!!!romulust
678.50678.84689.59aes256gcmv1
7834.997835.477836.36T:elephant160v2
7905.217905.537906.66T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
7.517.587.64T:aes128gcmv1
7.848.098.29T:aes256gcmv1
8.968.988.99ascon128av12
14.1214.1314.13ascon128v12
14.3114.3414.71T:xoodyakround3
14.3714.3714.39ascon80pqv12
18.5418.5818.59ascon128abi32v12
27.3527.3727.40T:isapa128v20
27.4927.5027.50ascon128bi32v12
35.2635.3835.39T:schwaemm256128v2
39.5039.5139.52T:isapa128av20
45.3345.3445.36T:giftcofb128v1
46.9846.9947.00T:schwaemm192192v2
50.4950.5950.72T:schwaemm256256v2
51.3151.3251.32T:tinyjambu128v2
51.6951.8851.91T:schwaemm128128v2
54.7554.7554.75T:tinyjambu256v2
56.8456.8556.86T:tinyjambu192v2
66.8966.9066.99T:romulusn
67.4467.5267.56T:grain128aeadv2
72.2372.2572.27T:isapk128av20
85.5085.5385.57T:isapk128v20
119.90120.83120.93T:elephant200v2
176.15176.42177.55romulusn
176.81176.88178.51romulusm
200.73200.93201.26T:isapxv20
255.16255.63259.44T!!!romulust
678.23678.80691.24aes256gcmv1
7833.867835.197835.47T:elephant160v2
7905.117905.317905.76T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
7.537.607.63T:aes128gcmv1
7.23?8.36?8.86?T:aes256gcmv1
8.998.998.99ascon128av12
14.1214.1314.13ascon128v12
14.3314.3514.71T:xoodyakround3
14.3714.3814.38ascon80pqv12
18.5818.5918.59ascon128abi32v12
27.3627.3827.40T:isapa128v20
27.5027.5027.50ascon128bi32v12
35.3635.3835.39T:schwaemm256128v2
39.4839.4939.51T:isapa128av20
45.3245.3445.34T:giftcofb128v1
46.9846.9947.01T:schwaemm192192v2
50.5050.5950.72T:schwaemm256256v2
51.3151.3251.33T:tinyjambu128v2
51.8651.8851.91T:schwaemm128128v2
54.7554.7554.76T:tinyjambu256v2
56.8356.8556.87T:tinyjambu192v2
66.9066.9266.99T:romulusn
67.4967.5267.56T:grain128aeadv2
72.2372.2572.27T:isapk128av20
85.5085.5385.57T:isapk128v20
119.64120.83120.96T:elephant200v2
176.10176.28176.93romulusn
176.18176.35178.43romulusm
200.79200.94201.22T:isapxv20
254.97255.73260.29T!!!romulust
678.64679.35690.33aes256gcmv1
7834.577835.147835.41T:elephant160v2
7904.977905.147905.55T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
9.469.469.49ascon128av12
14.2314.2314.24ascon128v12
14.2314.2414.25ascon80pqv12
19.1119.1119.14ascon128abi32v12
20.8420.8620.87T:xoodyakround3
25.7625.8125.85T:aes128gcmv1
28.2528.2528.27ascon128bi32v12
29.7129.7830.01T:aes256gcmv1
36.4136.4936.50T:schwaemm256128v2
45.9345.9445.96T:giftcofb128v1
48.0848.0948.10T:schwaemm192192v2
52.0152.0252.14T:schwaemm256256v2
52.5752.7052.70T:schwaemm128128v2
53.3753.3753.40T:isapa128av20
60.5860.5860.64T:isapa128v20
66.3966.3966.40T:tinyjambu128v2
68.7568.7568.89T:grain128aeadv2
79.0579.0579.06T:tinyjambu192v2
80.7380.7580.86T:romulusn
82.0982.0982.12T:tinyjambu256v2
106.46106.46106.47T:isapk128av20
182.55184.23184.25T:elephant200v2
187.83187.96189.49romulusn
206.36206.38206.59T:isapk128v20
276.97277.21278.72romulusm
441.55441.71443.02T:isapxv20
537.90538.27543.65T!!!romulust
11883.6811883.9811884.25T:elephant160v2
12039.6412039.9712040.24T:elephant176v2
13286.8613289.6513291.70aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
9.489.499.50ascon128av12
14.3414.3514.35ascon128v12
14.3514.3514.35ascon80pqv12
19.1219.1219.13ascon128abi32v12
20.5120.6020.66T:xoodyakround3
25.7025.7725.79T:aes128gcmv1
28.7628.7628.77ascon128bi32v12
31.0831.2731.33T:aes256gcmv1
36.5336.5336.54T:schwaemm256128v2
45.8245.8245.84T:giftcofb128v1
48.0848.0948.11T:schwaemm192192v2
51.9852.0252.13T:schwaemm256256v2
52.5152.7452.74T:schwaemm128128v2
53.3953.3953.41T:isapa128av20
60.5860.5960.59T:isapa128v20
66.5566.5666.56T:tinyjambu128v2
69.0969.1069.14T:grain128aeadv2
79.1779.1779.23T:tinyjambu192v2
80.3680.3680.37T:romulusn
81.8781.8781.96T:tinyjambu256v2
106.50106.51106.51T:isapk128av20
182.46184.18184.22T:elephant200v2
187.68188.08189.86romulusn
206.39206.40206.57T:isapk128v20
277.71278.11279.37romulusm
442.05442.28443.11T:isapxv20
537.47537.68542.57T!!!romulust
11883.5411883.8011884.07T:elephant160v2
12039.4012039.7912039.99T:elephant176v2
13282.0313286.8713289.71aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
9.489.489.49ascon128av12
14.3414.3414.35ascon128v12
14.3514.3514.35ascon80pqv12
19.1219.1219.12ascon128abi32v12
20.5820.6820.69T:xoodyakround3
25.7025.7325.77T:aes128gcmv1
28.7628.7628.76ascon128bi32v12
36.4436.5536.57T:schwaemm256128v2
37.0737.0837.11T:isapa128v20
38.8038.8738.95T:aes256gcmv1
41.6541.6541.67T:isapa128av20
45.8245.8245.83T:giftcofb128v1
48.0848.0948.11T:schwaemm192192v2
52.0152.0252.13T:schwaemm256256v2
52.5152.7452.74T:schwaemm128128v2
66.5566.5666.56T:tinyjambu128v2
69.0769.1069.10T:grain128aeadv2
79.1679.1779.17T:tinyjambu192v2
80.3180.3180.35T:romulusn
81.8781.8781.88T:tinyjambu256v2
82.7182.7182.76T:isapk128av20
139.70139.72139.74T:isapk128v20
182.47184.18184.21T:elephant200v2
187.66188.08189.45romulusn
262.89263.08266.55T!!!romulust
277.12277.33279.37romulusm
289.82289.98291.32T:isapxv20
939.71939.83940.00aes256gcmv1
11883.8711884.0611884.48T:elephant160v2
12039.6212039.7612040.26T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
14.3814.3815.31ascon128av12
18.7218.7319.83ascon128v12
18.8618.9519.66ascon80pqv12
28.3828.4529.14ascon128abi32v12
31.4131.4632.19T:xoodyakround3
37.9637.9638.77ascon128bi32v12
56.7456.7557.31T:giftcofb128v1
59.8059.8460.16T:schwaemm256128v2
67.9468.1368.29T:schwaemm128128v2
77.7477.8078.09T:schwaemm192192v2
78.4478.4478.45T:grain128aeadv2
78.9178.9579.10T:tinyjambu128v2
80.3680.5082.19T:aes128gcmv1
82.4582.6282.99T:schwaemm256256v2
93.0993.2093.45T:tinyjambu192v2
96.6196.6296.77T:tinyjambu256v2
103.52103.53103.67T:romulusn
113.20114.07119.37T:aes256gcmv1
140.59140.66140.86T:isapa128av20
231.78231.91233.09romulusn
259.34260.43260.62T:elephant200v2
321.65323.02324.35romulusm
452.47452.70453.25T:isapk128av20
496.16496.17496.73T:isapa128v20
725.48726.09730.11T!!!romulust
2205.662205.982210.38T:isapk128v20
4376.324376.544380.55T:isapxv20
15011.5215014.1615014.82T:elephant176v2
15885.3015886.4715890.09T:elephant160v2
19273.5519274.1519300.12aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
14.4514.5615.04ascon128av12
19.0819.0919.90ascon128v12
19.1419.2320.05ascon80pqv12
28.4428.8629.46ascon128abi32v12
31.1631.1631.48T:xoodyakround3
38.8438.8439.19ascon128bi32v12
57.1257.1357.62T:giftcofb128v1
59.7159.7359.77T:schwaemm256128v2
67.7568.0568.17T:schwaemm128128v2
77.4777.5077.65T:schwaemm192192v2
78.4178.5380.43T:aes128gcmv1
78.7278.7378.80T:grain128aeadv2
78.9178.9679.07T:tinyjambu128v2
82.4382.5682.59T:schwaemm256256v2
93.5993.6193.62T:tinyjambu192v2
96.2996.4196.42T:tinyjambu256v2
103.10103.11103.31T:romulusn
141.30141.33141.68T:isapa128av20
145.99150.41151.46T:aes256gcmv1
232.52232.95234.11romulusn
258.82260.40260.64T:elephant200v2
342.85343.48345.16romulusm
453.41453.46453.51T:isapk128av20
496.29496.38497.02T:isapa128v20
725.18725.77730.63T!!!romulust
2205.662206.222212.04T:isapk128v20
4383.954387.554410.41T:isapxv20
15011.4115013.6515015.15T:elephant176v2
15886.0415888.9515889.72T:elephant160v2
19273.3419274.5119280.89aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
14.4014.4514.46ascon128av12
19.0719.0919.09ascon128v12
19.1319.1519.23ascon80pqv12
28.4328.4428.45ascon128abi32v12
31.3031.4531.53T:xoodyakround3
38.8638.8738.87ascon128bi32v12
57.1057.1257.13T:giftcofb128v1
59.6259.7359.77T:schwaemm256128v2
67.7568.0568.17T:schwaemm128128v2
77.4377.4777.52T:schwaemm192192v2
78.5778.6379.08T:aes128gcmv1
78.2278.7278.73T:grain128aeadv2
78.7178.9278.96T:tinyjambu128v2
82.4182.5882.59T:schwaemm256256v2
91.0691.0691.66T:isapa128av20
93.3793.5993.61T:tinyjambu192v2
96.1996.4196.41T:tinyjambu256v2
102.78102.84102.95T:romulusn
232.39232.84234.09romulusn
258.48258.61259.02T:isapa128v20
258.82260.40260.58T:elephant200v2
307.92307.95308.03T:isapk128av20
342.23342.42344.24romulusm
336.34345.03351.98T:aes256gcmv1
429.83430.03435.70T!!!romulust
1214.131214.601215.05T:isapk128v20
2297.412299.632300.09T:isapxv20
6934.606939.696942.55aes256gcmv1
15010.8115013.4115015.30T:elephant176v2
15886.2315889.0215890.02T:elephant160v2