VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Sandy Bridge (206a7); 2011 Intel Core i3-2310M; 2 x 2100MHz; h6sandy, supercop-20241022

[Page version: 20241120 00:41:35]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
8.238.458.57T:aes128gcmv1
10.1210.1510.17ascon128av12
10.6210.8611.02T:aes256gcmv1
14.9414.9615.01ascon80pqv12
15.0315.0615.09ascon128v12
18.1718.2218.27T:xoodyakround3
18.8618.8818.91ascon128abi32v12
27.2027.2827.33T:schwaemm256128v2
27.9027.9227.96ascon128bi32v12
28.9528.9829.01T:grain128aeadv2
34.9234.9735.00T:schwaemm256256v2
35.9035.9536.03T:schwaemm192192v2
38.7038.7638.85T:schwaemm128128v2
39.0239.0839.13romulusn
48.5748.6048.64T:giftcofb128v1
56.7656.8557.18T:isapa128v20
59.5259.5759.60T:tinyjambu128v2
61.1861.2361.46T:isapa128av20
63.1663.1963.25romulusm
71.9572.0072.03T:tinyjambu192v2
73.5173.5573.61T:tinyjambu256v2
107.52107.87108.01T:isapk128av20
126.40126.52126.67romulust
143.56144.08144.34T:isapk128v20
195.27195.39195.52T:elephant200v2
197.95?210.77?225.71?T:isapxv20
11121.7211123.8511152.25T:elephant176v2
12776.1912777.2112778.00T:elephant160v2
25978.0925982.1925984.58aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
8.348.488.55T:aes128gcmv1
10.0110.0510.07ascon128av12
10.6810.9411.02T:aes256gcmv1
14.9614.9915.02ascon80pqv12
14.9715.0115.03ascon128v12
18.1518.1818.24T:xoodyakround3
18.3118.3318.35ascon128abi32v12
27.1627.2327.33T:schwaemm256128v2
27.4427.4627.49ascon128bi32v12
29.9830.0430.07T:grain128aeadv2
35.0235.0335.22T:schwaemm256256v2
35.8635.9236.02T:schwaemm192192v2
38.6838.7538.84T:schwaemm128128v2
39.2539.3039.33romulusn
48.6248.6848.74T:giftcofb128v1
56.6656.7556.89T:isapa128v20
59.6859.8059.89T:tinyjambu128v2
61.2561.3461.39T:isapa128av20
63.2763.3563.40romulusm
72.1772.2372.34T:tinyjambu192v2
74.1174.1974.27T:tinyjambu256v2
107.55107.82108.10T:isapk128av20
126.46126.58126.67romulust
143.47143.75144.23T:isapk128v20
195.33195.42195.53T:elephant200v2
210.70211.45211.56T:isapxv20
11122.0211124.9711151.69T:elephant176v2
12776.0312776.9012777.83T:elephant160v2
25979.1225983.2025984.22aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
8.358.478.55T:aes128gcmv1
10.0210.0310.05ascon128av12
10.7510.9411.10T:aes256gcmv1
14.9514.9815.00ascon80pqv12
14.9815.0115.03ascon128v12
18.2018.2718.37T:xoodyakround3
18.2818.3018.33ascon128abi32v12
27.1727.2527.29T:schwaemm256128v2
27.4327.4527.48ascon128bi32v12
27.8927.9828.02T:isapa128v20
29.9930.0230.06T:grain128aeadv2
35.0235.0335.17T:schwaemm256256v2
35.8835.9436.04T:schwaemm192192v2
38.6938.7438.84T:schwaemm128128v2
39.2839.3339.37romulusn
41.6741.7341.83T:isapa128av20
43.3543.4243.50romulust
48.6248.6748.75T:giftcofb128v1
59.7759.8159.85T:tinyjambu128v2
63.3263.3663.40romulusm
71.2171.4371.90T:isapk128av20
72.1772.2472.30T:tinyjambu192v2
74.1174.1674.31T:tinyjambu256v2
89.1489.3389.83T:isapk128v20
124.10124.86124.97T:isapxv20
195.33195.42195.66T:elephant200v2
404.72405.43406.17aes256gcmv1
11122.5011125.4911151.99T:elephant176v2
12776.1612777.1312778.08T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
5.135.215.29T:aes128gcmv1
6.196.406.62T:aes256gcmv1
10.0110.0310.05ascon128av12
13.7113.8013.97T:xoodyakround3
14.8814.9014.92ascon128v12
14.9414.9514.98ascon80pqv12
18.5518.5718.60ascon128abi32v12
27.0327.0827.12T:schwaemm256128v2
27.6227.6427.65ascon128bi32v12
28.9328.9728.98T:grain128aeadv2
31.5831.6931.85romulusn
34.6934.7734.80T:schwaemm256256v2
35.7435.8335.91T:schwaemm192192v2
38.6238.6638.73T:schwaemm128128v2
42.2742.4542.62T:isapa128v20
43.5943.6043.65romulusm
48.0248.0548.07T:tinyjambu128v2
48.5448.5748.64T:giftcofb128v1
51.5051.5351.58T:isapa128av20
55.3055.3455.37T:tinyjambu256v2
55.9355.9555.98T:tinyjambu192v2
84.7684.8385.03romulust
89.6489.8089.89T:isapk128av20
116.55116.80116.98T:isapk128v20
146.22146.28146.43T:elephant200v2
160.93167.39175.41T:isapxv20
8310.658312.188332.28T:elephant176v2
9580.569581.149581.62T:elephant160v2
13193.9513194.8813196.12aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
5.075.165.31T:aes128gcmv1
6.206.366.60T:aes256gcmv1
9.9710.0010.01ascon128av12
13.7313.7913.85T:xoodyakround3
14.9114.9114.93ascon128v12
14.9514.9714.99ascon80pqv12
18.2518.2618.28ascon128abi32v12
27.0427.0927.15T:schwaemm256128v2
27.3927.4127.42ascon128bi32v12
29.3029.3429.38T:grain128aeadv2
31.6931.7931.98romulusn
34.7434.7634.79T:schwaemm256256v2
35.7135.7635.87T:schwaemm192192v2
38.4738.5538.63T:schwaemm128128v2
42.2242.4442.60T:isapa128v20
43.6443.6943.72romulusm
48.1048.1548.20T:tinyjambu128v2
48.5648.6348.69T:giftcofb128v1
51.5751.6551.71T:isapa128av20
55.6255.6755.72T:tinyjambu256v2
56.1256.1656.21T:tinyjambu192v2
84.7284.8684.90romulust
89.6789.8089.94T:isapk128av20
116.55116.82117.16T:isapk128v20
146.23146.29146.34T:elephant200v2
167.51167.96168.20T:isapxv20
8310.538312.158332.82T:elephant176v2
9580.579581.119582.06T:elephant160v2
13193.6513194.9513197.06aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
5.085.145.29T:aes128gcmv1
6.256.346.58T:aes256gcmv1
9.9710.0010.02ascon128av12
13.7213.8213.87T:xoodyakround3
14.8914.9014.93ascon128v12
14.9514.9714.99ascon80pqv12
18.2618.2818.29ascon128abi32v12
27.0227.0627.12T:schwaemm256128v2
27.4127.4227.44ascon128bi32v12
27.8828.0128.14T:isapa128v20
29.3329.3629.38T:grain128aeadv2
31.6831.8032.01romulusn
34.7434.7734.78T:schwaemm256256v2
35.7335.7635.83T:schwaemm192192v2
38.5138.5438.60T:schwaemm128128v2
41.7841.8241.87T:isapa128av20
43.1743.2343.32romulust
43.6443.6643.69romulusm
48.0948.1548.19T:tinyjambu128v2
48.5448.5848.64T:giftcofb128v1
55.5955.6455.71T:tinyjambu256v2
56.1456.1856.22T:tinyjambu192v2
71.5371.6071.70T:isapk128av20
89.2489.3589.48T:isapk128v20
124.08124.84124.88T:isapxv20
146.24146.28146.34T:elephant200v2
404.68405.54406.04aes256gcmv1
8310.808312.528332.89T:elephant176v2
9580.739581.129581.70T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
1.701.821.87T:aes128gcmv1
1.73?1.83?1.95?T:aes256gcmv1
9.179.249.30T:xoodyakround3
9.889.919.93ascon128av12
14.6714.7114.75ascon128v12
14.9114.9414.94ascon80pqv12
18.2218.2318.26ascon128abi32v12
24.0124.0324.08romulusm
24.0724.3124.67romulusn
26.8026.8326.91T:schwaemm256128v2
27.3127.3327.35ascon128bi32v12
27.9328.0128.04T:isapa128v20
28.9128.9428.98T:grain128aeadv2
34.4334.4634.49T:schwaemm256256v2
35.5935.7235.75T:schwaemm192192v2
36.4936.5336.57T:tinyjambu128v2
37.1037.1437.18T:tinyjambu256v2
38.4538.5238.71T:schwaemm128128v2
39.8939.9339.96T:tinyjambu192v2
41.8841.9241.99T:isapa128av20
43.0043.0843.27romulust
48.5148.5548.61T:giftcofb128v1
71.5171.6471.76T:isapk128av20
89.2489.4189.54T:isapk128v20
97.7897.8297.95T:elephant200v2
123.97124.03124.87T:isapxv20
403.75404.70406.54aes256gcmv1
5495.715498.405510.57T:elephant176v2
6384.846385.406386.16T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
1.721.821.90T:aes128gcmv1
1.70?1.84?1.89?T:aes256gcmv1
9.179.239.29T:xoodyakround3
9.929.949.96ascon128av12
14.8014.8214.85ascon128v12
14.9214.9615.00ascon80pqv12
18.2118.2318.25ascon128abi32v12
24.0224.0424.09romulusm
24.0124.2624.62romulusn
26.8626.8826.96T:schwaemm256128v2
27.3127.3327.36ascon128bi32v12
27.9428.0228.07T:isapa128v20
28.6628.7028.74T:grain128aeadv2
34.4334.4834.49T:schwaemm256256v2
35.5635.6335.70T:schwaemm192192v2
36.4836.5136.55T:tinyjambu128v2
37.1037.1537.17T:tinyjambu256v2
38.2838.3538.54T:schwaemm128128v2
40.0140.0840.12T:tinyjambu192v2
41.8741.9141.96T:isapa128av20
42.9643.0743.18romulust
48.5348.5648.62T:giftcofb128v1
71.4671.5771.83T:isapk128av20
89.1989.3989.52T:isapk128v20
97.7797.8197.87T:elephant200v2
124.11124.76124.85T:isapxv20
404.34405.47406.47aes256gcmv1
5495.395496.895510.26T:elephant176v2
6384.836385.606386.15T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
1.66?1.78?1.97?T:aes256gcmv1
1.701.791.83T:aes128gcmv1
9.219.279.33T:xoodyakround3
9.919.939.97ascon128av12
14.7914.8214.85ascon128v12
14.9214.9414.97ascon80pqv12
18.2018.2218.25ascon128abi32v12
24.0124.0424.07romulusm
24.0524.2824.67romulusn
26.8727.0427.09T:schwaemm256128v2
27.3227.3427.38ascon128bi32v12
27.9728.0228.09T:isapa128v20
28.6728.6928.86T:grain128aeadv2
34.4634.4834.50T:schwaemm256256v2
35.5935.6735.74T:schwaemm192192v2
36.4236.4736.55T:tinyjambu128v2
37.1337.1737.21T:tinyjambu256v2
38.3638.4038.49T:schwaemm128128v2
40.0340.0940.12T:tinyjambu192v2
41.8641.9141.95T:isapa128av20
43.0243.0743.15romulust
48.5248.5648.62T:giftcofb128v1
71.4471.6271.71T:isapk128av20
89.1789.3089.53T:isapk128v20
97.7697.8297.90T:elephant200v2
124.53124.82124.88T:isapxv20
404.94406.00406.51aes256gcmv1
5494.745497.625510.96T:elephant176v2
6384.836385.446386.32T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
6.957.047.06T:aes128gcmv1
8.358.408.62T:aes256gcmv1
10.2710.2710.30ascon128av12
13.9314.0614.09T:xoodyakround3
15.1315.1315.15ascon128v12
15.1715.1815.19ascon80pqv12
18.9719.0019.01ascon128abi32v12
27.8527.8727.89T:schwaemm256128v2
28.0328.0428.06ascon128bi32v12
29.4329.4529.47T:grain128aeadv2
31.8731.9932.18romulusn
35.6535.6935.72T:schwaemm256256v2
36.5936.6336.67T:schwaemm192192v2
39.0939.1139.19T:schwaemm128128v2
43.9043.9343.97romulusm
48.4148.4248.45T:tinyjambu128v2
49.0549.0949.11T:giftcofb128v1
54.8354.8554.89T:isapa128av20
55.7155.7655.78T:tinyjambu256v2
56.3656.3856.41T:tinyjambu192v2
62.2162.2862.46T:isapa128v20
86.1086.1486.24romulust
103.58103.64103.72T:isapk128av20
149.36149.38149.48T:elephant200v2
206.61206.70206.90T:isapk128v20
273.48273.74282.75T:isapxv20
8374.928375.698394.31T:elephant176v2
9688.649689.069689.71T:elephant160v2
13462.0213462.9213482.81aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
6.977.027.05T:aes128gcmv1
8.378.408.68T:aes256gcmv1
10.2410.2510.26ascon128av12
13.9013.9513.98T:xoodyakround3
15.1315.1415.15ascon128v12
15.1915.2115.22ascon80pqv12
18.6818.6918.71ascon128abi32v12
27.7927.8127.82ascon128bi32v12
27.8527.8927.94T:schwaemm256128v2
29.8129.8329.86T:grain128aeadv2
32.0032.1032.30romulusn
35.6835.6935.72T:schwaemm256256v2
36.5536.5836.61T:schwaemm192192v2
39.0039.0539.12T:schwaemm128128v2
44.0344.0544.07romulusm
48.5148.5448.57T:tinyjambu128v2
49.0849.1149.17T:giftcofb128v1
54.8954.9655.00T:isapa128av20
56.0556.0856.14T:tinyjambu256v2
56.5656.6356.67T:tinyjambu192v2
62.2062.2562.42T:isapa128v20
86.0786.1286.29romulust
103.64103.67103.74T:isapk128av20
149.32149.38149.42T:elephant200v2
206.59206.71206.85T:isapk128v20
273.29273.39273.67T:isapxv20
8374.418375.418394.55T:elephant176v2
9689.049689.389689.56T:elephant160v2
13463.1413463.9113484.24aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
6.987.027.25T:aes128gcmv1
8.358.418.63T:aes256gcmv1
10.2310.2310.24ascon128av12
13.8513.9013.97T:xoodyakround3
15.1315.1415.15ascon128v12
15.1815.1915.20ascon80pqv12
18.6818.6918.73ascon128abi32v12
27.8027.8027.82ascon128bi32v12
27.8327.8727.93T:schwaemm256128v2
29.8129.8329.88T:grain128aeadv2
32.0232.0932.32romulusn
35.6735.6935.72T:schwaemm256256v2
36.6036.6436.69T:schwaemm192192v2
38.0138.0538.16T:isapa128v20
38.9939.0439.11T:schwaemm128128v2
43.7043.7343.76T:isapa128av20
44.0144.0444.05romulusm
44.4544.4944.54romulust
48.5048.5248.55T:tinyjambu128v2
49.0949.1249.17T:giftcofb128v1
56.0656.1056.13T:tinyjambu256v2
56.5656.6056.65T:tinyjambu192v2
80.4280.4580.53T:isapk128av20
136.41136.50136.62T:isapk128v20
149.35149.38149.41T:elephant200v2
178.31178.73178.77T:isapxv20
674.20674.57675.35aes256gcmv1
8375.188375.568394.27T:elephant176v2
9688.949689.089689.62T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
15.8415.9716.31ascon128av12
20.0620.1820.39ascon128v12
20.2020.3120.55ascon80pqv12
20.2420.6820.80T:xoodyakround3
28.4428.5928.88ascon128abi32v12
37.1637.2237.49ascon128bi32v12
38.7138.9639.16romulusn
40.2040.2840.50T:grain128aeadv2
45.2845.4546.05T:schwaemm256128v2
50.1350.3050.73T:schwaemm128128v2
50.8851.0551.27romulusm
56.4756.6056.79T:schwaemm256256v2
56.7956.9857.27T:tinyjambu128v2
59.2259.5560.06T:schwaemm192192v2
59.0259.8061.12T:aes128gcmv1
60.2960.4060.80T:giftcofb128v1
65.0965.2365.41T:tinyjambu256v2
65.8966.3366.58T:tinyjambu192v2
67.4167.8469.87T:aes256gcmv1
115.64115.79116.77romulust
130.38131.02131.42T:isapa128av20
211.42211.62212.12T:elephant200v2
401.06402.73404.69T:isapk128av20
517.01519.48522.20T:isapa128v20
2242.212244.392246.48T:isapk128v20
2679.132690.662876.78T:isapxv20
10429.0010432.9610450.43T:elephant176v2
12972.1512974.5212978.81T:elephant160v2
19639.1319640.3419643.49aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
15.8416.0316.14ascon128av12
20.1220.2820.58ascon128v12
20.2420.3720.48ascon80pqv12
20.3920.6220.91T:xoodyakround3
28.2828.5628.89ascon128abi32v12
37.3337.5937.81ascon128bi32v12
38.8338.9939.09romulusn
40.6640.7741.09T:grain128aeadv2
45.5545.6446.08T:schwaemm256128v2
50.1250.3650.67T:schwaemm128128v2
52.2752.4852.77romulusm
56.4356.5956.78T:schwaemm256256v2
57.1757.4157.56T:tinyjambu128v2
58.4558.9660.73T:aes128gcmv1
59.1759.3059.59T:schwaemm192192v2
60.6660.9161.07T:giftcofb128v1
65.7066.0366.09T:tinyjambu256v2
66.2066.3366.52T:tinyjambu192v2
67.0667.7668.91T:aes256gcmv1
115.73116.00116.30romulust
130.55130.91131.14T:isapa128av20
211.33211.53211.77T:elephant200v2
399.98401.19403.52T:isapk128av20
516.32516.95522.40T:isapa128v20
2242.012244.452247.06T:isapk128v20
2668.452668.922675.00T:isapxv20
10429.2010432.8010450.20T:elephant176v2
12974.1412975.3412981.05T:elephant160v2
19640.3419641.2619647.02aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
15.7315.8015.88ascon128av12
20.0920.2120.46ascon128v12
20.2720.3720.46ascon80pqv12
20.3420.4820.82T:xoodyakround3
28.1828.2728.33ascon128abi32v12
37.2337.3237.42ascon128bi32v12
38.6838.8439.20romulusn
40.5240.6440.76T:grain128aeadv2
45.3545.5145.84T:schwaemm256128v2
50.0750.2250.66T:schwaemm128128v2
52.1652.2652.39romulusm
56.6256.6656.70T:schwaemm256256v2
57.1157.2657.40T:tinyjambu128v2
58.0958.7759.41T:aes128gcmv1
59.0859.2359.36T:schwaemm192192v2
60.7060.8460.98T:giftcofb128v1
65.5565.7565.78T:tinyjambu256v2
66.0866.2766.37T:tinyjambu192v2
67.0067.6070.03T:aes256gcmv1
73.2973.4673.73romulust
86.8487.2787.57T:isapa128av20
211.22211.47212.25T:elephant200v2
268.27268.88272.16T:isapa128v20
268.45269.23269.64T:isapk128av20
1198.521199.191199.80T:isapk128v20
1395.841396.061396.59T:isapxv20
6850.426851.556854.14aes256gcmv1
10430.2110432.1210449.22T:elephant176v2
12973.4412977.6912981.06T:elephant160v2