VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Sandy Bridge (206a7); 2011 Intel Core i3-2310M; 2 x 2100MHz; h6sandy, supercop-20240625

[Page version: 20240726 23:46:23]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Implementation notes

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
8.198.438.58T:aes128gcmv1
10.1410.1510.17ascon128av12
10.5910.8211.02T:aes256gcmv1
14.9614.9815.00ascon80pqv12
15.0215.0615.11ascon128v12
18.2318.3118.43T:xoodyakround3
18.8818.9118.94ascon128abi32v12
27.2427.3227.36T:schwaemm256128v2
27.9227.9728.00ascon128bi32v12
29.0029.3129.36T:grain128aeadv2
34.9234.9635.12T:schwaemm256256v2
35.9736.0536.13T:schwaemm192192v2
38.6538.7138.79T:schwaemm128128v2
39.0139.0639.10romulusn
48.5648.6048.66T:giftcofb128v1
56.7156.8356.90T:isapa128v20
59.5259.5659.62T:tinyjambu128v2
61.1661.2161.28T:isapa128av20
63.1663.1963.26romulusm
71.9271.9872.07T:tinyjambu192v2
73.4973.5273.58T:tinyjambu256v2
107.53107.79108.18T:isapk128av20
126.85127.21127.40romulust
143.40143.65144.13T:isapk128v20
195.66196.12196.80T:elephant200v2
207.10210.73214.73T:isapxv20
11121.1311150.4011152.59T:elephant176v2
12776.3812777.1612777.83T:elephant160v2
18605.1918608.7918610.63aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
8.268.448.58T:aes128gcmv1
10.0010.0310.05ascon128av12
10.6610.8510.98T:aes256gcmv1
14.8814.9214.94ascon80pqv12
14.9515.0115.03ascon128v12
18.0418.1318.17T:xoodyakround3
18.2718.3118.35ascon128abi32v12
27.1727.2327.27T:schwaemm256128v2
27.4627.5027.54ascon128bi32v12
29.8429.8829.89T:grain128aeadv2
35.2035.2335.26T:schwaemm256256v2
35.9235.9736.02T:schwaemm192192v2
38.6738.7738.83T:schwaemm128128v2
39.2839.3039.36romulusn
48.6448.6948.72T:giftcofb128v1
56.7056.7656.82T:isapa128v20
59.7059.7759.81T:tinyjambu128v2
61.2061.3061.35T:isapa128av20
63.2663.3563.45romulusm
72.1272.2672.36T:tinyjambu192v2
74.1274.1674.23T:tinyjambu256v2
107.48107.84108.14T:isapk128av20
126.60126.74126.86romulust
143.56143.89144.29T:isapk128v20
195.36196.03196.84T:elephant200v2
197.37?211.54?224.69?T:isapxv20
11120.4011150.2511152.30T:elephant176v2
12776.4712777.0612777.50T:elephant160v2
18601.4918604.1418605.67aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
8.348.428.50T:aes128gcmv1
10.0110.0310.05ascon128av12
10.6910.8110.95T:aes256gcmv1
14.8914.9114.94ascon80pqv12
14.9614.9915.02ascon128v12
18.1918.2218.27T:xoodyakround3
18.2718.3118.32ascon128abi32v12
27.1727.2227.29T:schwaemm256128v2
27.4427.4727.50ascon128bi32v12
27.9027.9428.01T:isapa128v20
29.8329.8729.93T:grain128aeadv2
35.0235.1935.26T:schwaemm256256v2
35.9435.9936.04T:schwaemm192192v2
38.7038.7338.79T:schwaemm128128v2
39.2739.3339.39romulusn
41.6741.7341.82T:isapa128av20
43.3543.4343.55romulust
48.6348.6948.78T:giftcofb128v1
59.6959.7559.84T:tinyjambu128v2
63.3163.3463.43romulusm
71.2571.3771.50T:isapk128av20
72.1772.2372.25T:tinyjambu192v2
74.1274.2074.26T:tinyjambu256v2
89.0689.2889.43T:isapk128v20
113.29?124.92?136.05?T:isapxv20
195.36196.07196.72T:elephant200v2
355.90357.41358.28aes256gcmv1
11120.8111149.9011152.40T:elephant176v2
12776.1212776.8612777.89T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
5.055.165.29T:aes128gcmv1
6.226.386.53T:aes256gcmv1
10.0110.0410.07ascon128av12
13.8113.9213.97T:xoodyakround3
14.8614.8814.90ascon80pqv12
14.8814.9014.91ascon128v12
18.5518.5818.60ascon128abi32v12
27.0427.1027.17T:schwaemm256128v2
27.6327.6527.68ascon128bi32v12
28.9229.2929.35T:grain128aeadv2
31.5131.5531.59romulusn
34.7034.7634.78T:schwaemm256256v2
35.8335.8835.95T:schwaemm192192v2
38.5638.6138.67T:schwaemm128128v2
42.2242.4542.62T:isapa128v20
43.6043.6543.70romulusm
48.0048.0448.08T:tinyjambu128v2
48.5448.5648.60T:giftcofb128v1
51.5151.5451.64T:isapa128av20
55.3055.3355.38T:tinyjambu256v2
55.9155.9756.02T:tinyjambu192v2
84.7885.1485.19romulust
89.6689.7689.95T:isapk128av20
116.56116.81117.03T:isapk128v20
146.20146.74147.33T:elephant200v2
165.41167.42169.81T:isapxv20
8310.198331.098332.65T:elephant176v2
9483.699483.969484.25aes256gcmv1
9580.429580.899581.14T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
5.085.215.32T:aes128gcmv1
6.306.376.51T:aes256gcmv1
9.969.9810.00ascon128av12
13.6813.7313.81T:xoodyakround3
14.8714.8814.90ascon80pqv12
14.8414.8914.90ascon128v12
18.2618.2818.29ascon128abi32v12
27.0427.0827.11T:schwaemm256128v2
27.3927.4227.44ascon128bi32v12
29.1429.1629.21T:grain128aeadv2
31.6431.6631.71romulusn
34.7434.7634.77T:schwaemm256256v2
35.7535.7935.84T:schwaemm192192v2
38.4438.5538.64T:schwaemm128128v2
42.2042.4242.63T:isapa128v20
43.6943.7343.77romulusm
48.1148.1748.21T:tinyjambu128v2
48.5548.6048.67T:giftcofb128v1
51.5451.6151.67T:isapa128av20
55.6355.6655.75T:tinyjambu256v2
56.1156.1656.24T:tinyjambu192v2
84.8084.8884.96romulust
89.6289.7989.92T:isapk128av20
116.55116.83117.01T:isapk128v20
146.42146.75147.34T:elephant200v2
161.26168.21174.32T:isapxv20
8310.758331.298332.67T:elephant176v2
9481.189481.649482.01aes256gcmv1
9580.419581.069581.74T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
5.155.245.37T:aes128gcmv1
6.296.376.51T:aes256gcmv1
9.959.979.99ascon128av12
13.6713.7113.75T:xoodyakround3
14.8814.8914.91ascon80pqv12
14.8714.8914.92ascon128v12
18.2518.2718.30ascon128abi32v12
27.0627.1127.15T:schwaemm256128v2
27.3827.4227.43ascon128bi32v12
27.8728.0228.24T:isapa128v20
29.1629.1729.21T:grain128aeadv2
31.6531.6831.72romulusn
34.7634.7634.78T:schwaemm256256v2
35.7535.7835.82T:schwaemm192192v2
38.4938.5538.63T:schwaemm128128v2
41.7741.8341.86T:isapa128av20
43.1843.2443.33romulust
43.6643.7043.72romulusm
48.1248.1448.20T:tinyjambu128v2
48.5748.6148.65T:giftcofb128v1
55.6355.6655.71T:tinyjambu256v2
56.1156.1456.23T:tinyjambu192v2
71.5571.6571.73T:isapk128av20
89.2589.3689.47T:isapk128v20
119.09124.93129.97T:isapxv20
146.22146.73147.35T:elephant200v2
357.22357.98358.25aes256gcmv1
8309.778331.308333.12T:elephant176v2
9580.539581.029581.39T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
1.68?1.78?1.93?T:aes128gcmv1
1.721.811.87T:aes256gcmv1
9.219.259.30T:xoodyakround3
9.909.929.95ascon128av12
14.6814.7114.75ascon128v12
14.7414.7714.82ascon80pqv12
18.2118.2518.27ascon128abi32v12
24.0324.0524.08romulusn
24.0324.0524.10romulusm
26.8526.9326.99T:schwaemm256128v2
27.3327.3627.38ascon128bi32v12
27.9628.0428.06T:isapa128v20
28.9129.3129.36T:grain128aeadv2
34.4134.4834.52T:schwaemm256256v2
35.6135.7035.79T:schwaemm192192v2
36.4636.5036.52T:tinyjambu128v2
37.0637.1037.14T:tinyjambu256v2
38.4438.4938.62T:schwaemm128128v2
39.8739.9539.99T:tinyjambu192v2
41.8441.8941.92T:isapa128av20
43.0143.0743.10romulust
48.5148.5848.61T:giftcofb128v1
71.4571.6771.78T:isapk128av20
89.1589.3289.45T:isapk128v20
97.8398.0898.52T:elephant200v2
122.65123.98126.35T:isapxv20
357.26357.50358.04aes256gcmv1
5495.275509.665511.42T:elephant176v2
6385.146385.576385.96T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
1.55?1.77?1.90?T:aes256gcmv1
1.711.801.87T:aes128gcmv1
9.209.269.30T:xoodyakround3
9.909.929.95ascon128av12
14.7714.7914.82ascon128v12
14.7714.8214.85ascon80pqv12
18.2218.2418.26ascon128abi32v12
24.0024.0324.07romulusn
24.0324.0624.10romulusm
26.9026.9927.07T:schwaemm256128v2
27.3427.3627.39ascon128bi32v12
27.9628.0228.08T:isapa128v20
28.4728.5028.55T:grain128aeadv2
34.4634.4834.51T:schwaemm256256v2
35.6035.6335.66T:schwaemm192192v2
36.4536.5036.54T:tinyjambu128v2
37.0637.1437.17T:tinyjambu256v2
38.3438.4138.50T:schwaemm128128v2
40.0140.0740.11T:tinyjambu192v2
41.8441.9341.99T:isapa128av20
43.0143.0843.23romulust
48.4848.5548.63T:giftcofb128v1
71.4971.6171.76T:isapk128av20
89.0689.2889.53T:isapk128v20
97.9098.0698.59T:elephant200v2
113.03?124.92?135.73?T:isapxv20
357.22357.76358.17aes256gcmv1
5496.095509.135510.76T:elephant176v2
6385.196385.546385.93T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
1.731.781.84T:aes128gcmv1
1.711.791.85T:aes256gcmv1
9.219.249.31T:xoodyakround3
9.909.929.94ascon128av12
14.7614.7814.80ascon128v12
14.8014.8214.84ascon80pqv12
18.2218.2418.27ascon128abi32v12
24.0124.0424.07romulusn
24.0124.0524.08romulusm
26.8926.9126.95T:schwaemm256128v2
27.3227.3427.38ascon128bi32v12
27.9728.0128.07T:isapa128v20
28.4528.5028.52T:grain128aeadv2
34.4634.4834.57T:schwaemm256256v2
35.6035.6535.69T:schwaemm192192v2
36.4636.5136.56T:tinyjambu128v2
37.1037.1437.19T:tinyjambu256v2
38.3438.4138.50T:schwaemm128128v2
39.9740.0540.10T:tinyjambu192v2
41.8641.9241.98T:isapa128av20
43.0043.0843.18romulust
48.4848.5248.59T:giftcofb128v1
71.4771.5871.81T:isapk128av20
89.2089.3189.52T:isapk128v20
97.8098.0298.54T:elephant200v2
112.84?124.88?135.98?T:isapxv20
357.55357.77358.30aes256gcmv1
5495.325509.275510.80T:elephant176v2
6384.746385.366386.02T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
6.967.067.10T:aes128gcmv1
8.358.438.57T:aes256gcmv1
10.2910.2910.31ascon128av12
13.9113.9214.07T:xoodyakround3
15.0915.1015.13ascon80pqv12
15.1115.1215.15ascon128v12
18.9919.0019.02ascon128abi32v12
27.8527.8827.91T:schwaemm256128v2
28.0328.0428.06ascon128bi32v12
29.4629.7929.82T:grain128aeadv2
31.8331.8531.88romulusn
35.6535.6935.72T:schwaemm256256v2
36.6236.6536.74T:schwaemm192192v2
39.0939.1339.14T:schwaemm128128v2
43.9443.9643.99romulusm
48.4248.4348.49T:tinyjambu128v2
49.0649.0849.12T:giftcofb128v1
54.8154.8754.92T:isapa128av20
55.7455.7655.82T:tinyjambu256v2
56.3556.3856.43T:tinyjambu192v2
62.1562.2662.43T:isapa128v20
86.3286.5186.53romulust
103.61103.64103.70T:isapk128av20
149.56149.82150.36T:elephant200v2
206.44206.64206.88T:isapk128v20
270.97271.23273.60T:isapxv20
8375.908394.268394.93T:elephant176v2
9675.779676.159676.51aes256gcmv1
9689.139689.679689.89T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
6.957.027.08T:aes128gcmv1
8.368.388.53T:aes256gcmv1
10.2210.2310.23ascon128av12
13.9113.9614.00T:xoodyakround3
15.1015.1015.11ascon80pqv12
15.1015.1115.12ascon128v12
18.6818.7018.72ascon128abi32v12
27.7927.8127.83ascon128bi32v12
27.8627.8927.94T:schwaemm256128v2
29.6729.6829.74T:grain128aeadv2
31.9531.9732.00romulusn
35.6835.6935.71T:schwaemm256256v2
36.5736.6036.63T:schwaemm192192v2
39.0139.0639.12T:schwaemm128128v2
44.0644.1044.14romulusm
48.4848.5248.64T:tinyjambu128v2
49.0949.1349.18T:giftcofb128v1
54.9154.9455.01T:isapa128av20
56.0556.1156.26T:tinyjambu256v2
56.5656.6256.67T:tinyjambu192v2
62.2162.2662.45T:isapa128v20
86.1286.2386.29romulust
103.61103.73103.86T:isapk128av20
149.41149.77150.41T:elephant200v2
206.54206.69206.88T:isapk128v20
271.41272.25279.53T:isapxv20
8374.808393.988394.71T:elephant176v2
9673.179673.539674.01aes256gcmv1
9688.749689.079689.65T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
6.946.977.01T:aes128gcmv1
8.348.408.56T:aes256gcmv1
10.2010.2210.23ascon128av12
13.8813.9114.00T:xoodyakround3
15.1015.1215.13ascon128v12
15.1115.1215.15ascon80pqv12
18.6718.6918.72ascon128abi32v12
27.8027.8227.83ascon128bi32v12
27.8427.8727.92T:schwaemm256128v2
29.6529.6729.69T:grain128aeadv2
31.9631.9832.00romulusn
35.6635.6935.72T:schwaemm256256v2
36.5736.6336.66T:schwaemm192192v2
38.0138.0438.17T:isapa128v20
39.0439.0739.09T:schwaemm128128v2
43.7043.7243.78T:isapa128av20
44.0544.0844.10romulusm
44.4544.5244.57romulust
48.4948.5448.59T:tinyjambu128v2
49.1049.1249.14T:giftcofb128v1
56.0556.1056.17T:tinyjambu256v2
56.5756.6256.65T:tinyjambu192v2
80.4680.5580.63T:isapk128av20
136.48136.55136.62T:isapk128v20
149.57149.82150.34T:elephant200v2
177.97178.09184.45T:isapxv20
549.68549.81550.13aes256gcmv1
8375.108394.558395.03T:elephant176v2
9688.899689.159689.52T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
15.5515.7216.14ascon128av12
20.0920.1920.48ascon80pqv12
20.0520.2320.48ascon128v12
20.1920.4720.92T:xoodyakround3
28.1728.4128.82ascon128abi32v12
36.8337.1637.51ascon128bi32v12
38.5538.6638.85romulusn
40.6140.8641.06T:grain128aeadv2
45.4745.5545.92T:schwaemm256128v2
50.0650.4850.80T:schwaemm128128v2
50.8151.0351.42romulusm
56.5356.6456.77T:schwaemm256256v2
56.7356.9957.17T:tinyjambu128v2
59.0959.3859.51T:schwaemm192192v2
60.3460.4360.58T:giftcofb128v1
58.8061.1263.95T:aes128gcmv1
65.2165.3465.61T:tinyjambu256v2
65.8666.0066.29T:tinyjambu192v2
67.7368.7770.28T:aes256gcmv1
115.76116.27116.55romulust
130.91131.08131.43T:isapa128av20
211.99212.61213.67T:elephant200v2
401.40402.38404.44T:isapk128av20
516.42517.54521.13T:isapa128v20
2242.942244.302247.59T:isapk128v20
2621.722630.302674.41T:isapxv20
10437.5510453.6510456.00T:elephant176v2
12971.8212976.3412979.16T:elephant160v2
14090.6114091.5914093.36aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
15.5815.7816.11ascon128av12
20.0720.1720.44ascon128v12
20.2220.3020.66ascon80pqv12
20.2520.6120.77T:xoodyakround3
28.0528.2128.47ascon128abi32v12
36.6836.8837.38ascon128bi32v12
38.6338.7038.92romulusn
40.7940.9240.97T:grain128aeadv2
45.4145.7046.05T:schwaemm256128v2
50.0550.4250.87T:schwaemm128128v2
52.3652.5852.68romulusm
56.4356.6256.85T:schwaemm256256v2
57.0457.2257.43T:tinyjambu128v2
58.6259.3360.16T:aes128gcmv1
59.2759.4559.88T:schwaemm192192v2
60.6860.9961.10T:giftcofb128v1
65.6765.7565.88T:tinyjambu256v2
66.1766.4066.55T:tinyjambu192v2
66.0167.7368.63T:aes256gcmv1
115.93116.27116.74romulust
130.44131.01131.16T:isapa128av20
211.59212.09212.95T:elephant200v2
400.39402.35404.22T:isapk128av20
515.58516.40522.86T:isapa128v20
2243.512245.472247.71T:isapk128v20
2621.972634.202829.11T:isapxv20
10435.5010450.0910454.88T:elephant176v2
12974.6112976.5912980.91T:elephant160v2
14087.4814089.2814093.41aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
15.5015.5915.69ascon128av12
20.1320.2020.48ascon80pqv12
20.1320.2620.34ascon128v12
20.3320.5820.70T:xoodyakround3
28.1128.1928.35ascon128abi32v12
36.7036.7937.15ascon128bi32v12
38.4638.5938.65romulusn
40.5540.6640.79T:grain128aeadv2
45.5845.7045.77T:schwaemm256128v2
50.0350.1750.50T:schwaemm128128v2
52.1352.3252.51romulusm
56.5856.6056.66T:schwaemm256256v2
56.9257.2057.31T:tinyjambu128v2
58.1458.7059.27T:aes128gcmv1
59.2859.5259.66T:schwaemm192192v2
60.6660.7960.91T:giftcofb128v1
65.4465.5665.88T:tinyjambu256v2
66.1066.2566.48T:tinyjambu192v2
66.5067.2068.34T:aes256gcmv1
73.0673.2773.65romulust
86.9787.2387.36T:isapa128av20
211.52211.97212.79T:elephant200v2
268.37268.54272.87T:isapa128v20
268.93269.57270.93T:isapk128av20
1198.901200.011201.99T:isapk128v20
1372.54?1378.52?1552.41?T:isapxv20
4964.724965.274968.03aes256gcmv1
10431.6310452.6210454.58T:elephant176v2
12972.2312974.8312978.59T:elephant160v2