VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Bonnell (30661); 2011 Intel Atom D2500; 2 x 1866MHz; h8atom, supercop-20240625

[Page version: 20240726 23:46:23]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Implementation notes

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
14.0314.0714.07ascon128av12
20.9921.0021.00ascon128v12
21.2221.2521.26ascon80pqv12
32.5033.4334.20T:aes128gcmv1
35.0935.1435.18ascon128abi32v12
38.3539.1939.94T:aes256gcmv1
46.7246.7546.82ascon128bi32v12
54.1254.1554.31T:xoodyakround3
57.8557.8957.92T:giftcofb128v1
63.0063.6263.84T:schwaemm256128v2
79.1779.2579.31T:isapa128v20
83.3683.6584.33T:schwaemm192192v2
84.1584.7388.31T:schwaemm256256v2
86.6086.6986.71T:schwaemm128128v2
88.8988.8988.92T:isapa128av20
144.50144.53144.59T:tinyjambu128v2
128.99?151.20?152.99?T:grain128aeadv2
156.05156.06156.11romulusn
187.68187.75188.28T:isapk128av20
198.99199.02199.31T:tinyjambu192v2
211.73211.76211.82T:tinyjambu256v2
249.42250.58255.65T:isapk128v20
257.90257.94258.01romulusm
402.40402.58403.92T:elephant200v2
567.48567.66570.63T!!!romulust
534.71?581.56?616.42?T:isapxv20
39268.3639300.8539349.35T:elephant160v2
40106.8740145.4540194.42aes256gcmv1
42047.4942091.5542292.00T:elephant176v2
Cycles/byte for long+0 decrypt
25%50%75%aead
13.9213.9513.95ascon128av12
20.8520.8720.88ascon128v12
20.9921.0021.01ascon80pqv12
32.7333.4034.04T:aes128gcmv1
33.8533.8833.90ascon128abi32v12
38.4739.2039.89T:aes256gcmv1
47.2147.2547.26ascon128bi32v12
51.1351.1451.17T:xoodyakround3
57.6157.6357.66T:giftcofb128v1
63.0364.0464.29T:schwaemm256128v2
78.7179.2679.79T:isapa128v20
83.6183.7184.70T:schwaemm192192v2
86.9286.9586.97T:schwaemm128128v2
85.5587.0890.03T:schwaemm256256v2
88.8888.8988.91T:isapa128av20
144.75144.76144.81T:tinyjambu128v2
155.99156.01156.05romulusn
137.37?160.10?161.87?T:grain128aeadv2
187.66187.75187.83T:isapk128av20
199.00199.01199.03T:tinyjambu192v2
212.24212.26212.41T:tinyjambu256v2
249.07249.45252.75T:isapk128v20
258.03258.08258.37romulusm
402.38402.60402.78T:elephant200v2
567.50567.75570.87T!!!romulust
549.88576.30601.66T:isapxv20
39282.5639303.5439360.49T:elephant160v2
40095.0140125.0940207.99aes256gcmv1
42009.6642090.8042287.63T:elephant176v2
Cycles/byte for long+0 forgery
25%50%75%aead
13.9313.9413.95ascon128av12
20.8720.8820.88ascon128v12
21.0021.0021.00ascon80pqv12
32.9133.3433.87T:aes128gcmv1
33.8733.8833.89ascon128abi32v12
38.7139.2739.89T:aes256gcmv1
39.3639.3839.40T:isapa128v20
47.2547.2547.25ascon128bi32v12
51.2551.2751.32T:xoodyakround3
57.6357.6357.64T:giftcofb128v1
58.1258.1458.15T:isapa128av20
63.0463.8164.39T:schwaemm256128v2
83.5683.6584.54T:schwaemm192192v2
86.9386.9486.96T:schwaemm128128v2
85.5987.6090.03T:schwaemm256256v2
124.58124.67124.76T:isapk128av20
144.75144.78144.90T:tinyjambu128v2
155.13155.99156.30T:isapk128v20
156.00156.01156.59romulusn
138.38?160.10?161.89?T:grain128aeadv2
196.62196.71196.88T!!!romulust
199.01199.02199.80T:tinyjambu192v2
212.25212.29213.18T:tinyjambu256v2
258.07258.08261.08romulusm
300.58?314.48?335.14?T:isapxv20
402.38402.57403.32T:elephant200v2
1325.331338.381353.07aes256gcmv1
39260.1839292.0839344.91T:elephant160v2
42010.2942074.3442287.85T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
13.7413.7613.78ascon128av12
20.6720.6920.70ascon128v12
21.1121.1321.15ascon80pqv12
24.6125.0025.29T:aes128gcmv1
27.5227.9328.27T:aes256gcmv1
33.2333.2633.29ascon128abi32v12
40.3140.3340.40T:xoodyakround3
46.9346.9446.97ascon128bi32v12
57.5257.5357.56T:giftcofb128v1
59.3259.3759.43T:isapa128v20
62.4562.4962.55T:schwaemm256128v2
73.5073.5173.58T:isapa128av20
83.1383.2183.97T:schwaemm192192v2
83.0283.3887.42T:schwaemm256256v2
86.4386.4586.56T:schwaemm128128v2
118.37118.39118.42T:tinyjambu128v2
128.83128.85129.14romulusn
128.72?151.24?152.77?T:grain128aeadv2
155.25155.27155.29T:tinyjambu192v2
156.04156.14156.51T:isapk128av20
159.35159.51159.74T:tinyjambu256v2
179.74179.87181.23romulusm
202.51202.61204.85T:isapk128v20
299.55300.61310.28T:elephant200v2
381.77382.02385.26T!!!romulust
430.05454.47473.07T:isapxv20
20715.5020754.5520762.47aes256gcmv1
29466.6529484.2829517.91T:elephant160v2
31388.0031429.9331596.97T:elephant176v2
Cycles/byte for long+long decrypt
25%50%75%aead
13.6513.6913.72ascon128av12
20.5520.5620.58ascon128v12
20.5520.5620.59ascon80pqv12
24.5224.9925.45T:aes128gcmv1
27.5027.9428.44T:aes256gcmv1
32.5632.6032.62ascon128abi32v12
38.8238.8438.87T:xoodyakround3
47.0447.0647.08ascon128bi32v12
57.4057.4257.51T:giftcofb128v1
59.0159.3761.16T:isapa128v20
62.6062.6162.63T:schwaemm256128v2
73.4973.5073.51T:isapa128av20
83.2483.2783.34T:schwaemm192192v2
83.8884.3488.36T:schwaemm256256v2
86.5686.5886.66T:schwaemm128128v2
118.50118.52118.64T:tinyjambu128v2
128.77128.82128.86romulusn
155.24155.25155.29T:tinyjambu192v2
134.16?155.82?157.32?T:grain128aeadv2
156.02156.13156.35T:isapk128av20
159.61159.74159.91T:tinyjambu256v2
179.75179.91181.66romulusm
201.74202.69205.25T:isapk128v20
299.48300.88310.73T:elephant200v2
381.85382.50386.85T!!!romulust
435.67443.00472.78T:isapxv20
20711.5020757.5420765.65aes256gcmv1
29454.1929471.2029498.13T:elephant160v2
31428.4231605.8931653.02T:elephant176v2
Cycles/byte for long+long forgery
25%50%75%aead
13.6913.6913.69ascon128av12
20.5620.5620.56ascon128v12
20.5620.5620.57ascon80pqv12
24.7125.0525.36T:aes128gcmv1
27.7227.9928.33T:aes256gcmv1
32.6032.6032.61ascon128abi32v12
38.8938.9038.94T:xoodyakround3
39.4239.4439.46T:isapa128v20
47.0647.0647.07ascon128bi32v12
57.4157.4257.43T:giftcofb128v1
58.1258.1358.15T:isapa128av20
62.6062.6162.68T:schwaemm256128v2
83.2483.2884.25T:schwaemm192192v2
83.8884.1988.28T:schwaemm256256v2
86.5686.6287.86T:schwaemm128128v2
118.50118.52118.53T:tinyjambu128v2
124.49124.54124.73T:isapk128av20
128.82128.82128.85romulusn
155.25155.26155.38T:tinyjambu192v2
133.23?155.82?157.44?T:grain128aeadv2
155.71155.84157.48T:isapk128v20
159.69159.75159.85T:tinyjambu256v2
179.84179.85180.18romulusm
196.33196.39197.94T!!!romulust
299.61300.52307.79T:elephant200v2
311.40313.15337.25T:isapxv20
1342.141344.541347.09aes256gcmv1
29448.3729477.0629489.18T:elephant160v2
31387.1631473.2231600.23T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
13.4113.4413.45ascon128av12
16.2916.5617.34T:aes256gcmv1
16.4417.0217.59T:aes128gcmv1
20.3420.3820.38ascon128v12
20.9921.0021.00ascon80pqv12
26.5226.5526.64T:xoodyakround3
31.3331.3831.39ascon128abi32v12
39.4839.5039.52T:isapa128v20
47.1047.1347.14ascon128bi32v12
57.1657.2057.26T:giftcofb128v1
58.1458.1458.15T:isapa128av20
62.0362.2163.16T:schwaemm256128v2
82.7382.9282.95T:schwaemm192192v2
82.9683.6586.56T:schwaemm256256v2
86.1986.2086.23T:schwaemm128128v2
92.2592.2592.28T:tinyjambu128v2
101.59101.65101.71romulusm
101.57101.65101.72romulusn
107.25107.26107.30T:tinyjambu256v2
111.49111.51111.54T:tinyjambu192v2
124.29124.44124.65T:isapk128av20
128.62?151.28?153.05?T:grain128aeadv2
155.12155.68156.02T:isapk128v20
195.95196.05196.18T!!!romulust
198.32198.45198.57T:elephant200v2
299.57?329.13?341.84?T:isapxv20
1340.861351.261377.88aes256gcmv1
19621.3419635.9619672.32T:elephant160v2
20754.9920771.4020929.47T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
13.3813.4413.45ascon128av12
16.3716.7517.38T:aes256gcmv1
16.39?16.88?18.98?T:aes128gcmv1
20.1120.1220.13ascon80pqv12
20.2320.2520.25ascon128v12
26.5326.5526.57T:xoodyakround3
31.2731.3231.34ascon128abi32v12
39.4639.5039.55T:isapa128v20
46.8646.8746.90ascon128bi32v12
57.1357.1957.27T:giftcofb128v1
58.1158.1458.15T:isapa128av20
62.0562.1862.38T:schwaemm256128v2
82.7282.9883.64T:schwaemm192192v2
83.2984.3186.56T:schwaemm256256v2
86.1986.1986.20T:schwaemm128128v2
92.2592.2592.27T:tinyjambu128v2
101.61101.63101.81romulusm
101.62101.64101.67romulusn
107.23107.24107.28T:tinyjambu256v2
111.46111.50111.53T:tinyjambu192v2
124.33124.42124.51T:isapk128av20
128.79?151.54?153.28?T:grain128aeadv2
155.60155.66155.69T:isapk128v20
195.96196.07196.12T!!!romulust
198.33198.48198.54T:elephant200v2
299.20?312.55?341.24?T:isapxv20
1340.441349.181367.11aes256gcmv1
19629.2819656.0619687.57T:elephant160v2
20756.1920842.1120924.20T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
13.4413.4413.45ascon128av12
16.2816.6717.23T:aes256gcmv1
16.50?16.91?19.21?T:aes128gcmv1
20.1220.1220.29ascon80pqv12
20.2520.2520.25ascon128v12
26.5026.5426.56T:xoodyakround3
31.3231.3231.32ascon128abi32v12
39.4839.5039.53T:isapa128v20
46.8746.8746.89ascon128bi32v12
57.1757.2057.24T:giftcofb128v1
58.1358.1558.16T:isapa128av20
62.0862.1862.85T:schwaemm256128v2
82.8382.8982.95T:schwaemm192192v2
83.1483.9186.53T:schwaemm256256v2
86.1986.1986.19T:schwaemm128128v2
92.2592.2592.33T:tinyjambu128v2
101.63101.63101.65romulusn
101.63101.63101.66romulusm
107.23107.26107.30T:tinyjambu256v2
111.50111.50111.52T:tinyjambu192v2
124.32124.44125.85T:isapk128av20
129.61?151.54?153.42?T:grain128aeadv2
155.62155.65155.77T:isapk128v20
196.00196.05196.12T!!!romulust
198.29198.42198.52T:elephant200v2
299.63?312.46?342.06?T:isapxv20
1338.881347.421376.44aes256gcmv1
19626.3519632.5419681.53T:elephant160v2
20757.5420794.5520915.36T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
14.0814.0814.10ascon128av12
20.9921.0021.02ascon128v12
21.4421.4421.48ascon80pqv12
32.1332.2232.63T:aes128gcmv1
34.0134.0134.04ascon128abi32v12
35.3635.4235.75T:aes256gcmv1
40.9840.9841.00T:xoodyakround3
47.7147.7147.75ascon128bi32v12
58.3058.3158.68T:giftcofb128v1
64.2864.2864.32T:schwaemm256128v2
78.6978.6978.72T:isapa128av20
84.9784.9885.05T:schwaemm192192v2
85.4585.5889.31T:schwaemm256256v2
87.5487.5787.95T:schwaemm128128v2
88.1488.1588.21T:isapa128v20
119.30119.31119.41T:tinyjambu128v2
130.03130.03130.07romulusn
131.07?152.23?152.28?T:grain128aeadv2
156.41156.42156.47T:tinyjambu192v2
160.71160.71160.74T:tinyjambu256v2
181.04181.06181.13romulusm
193.08193.09193.17T:isapk128av20
306.05307.08317.93T:elephant200v2
382.19382.21384.46T:isapk128v20
387.53387.63389.49T!!!romulust
708.68722.04740.79T:isapxv20
21153.8021165.3721170.41aes256gcmv1
29800.3129815.2929823.14T:elephant160v2
31643.4831675.8831820.99T:elephant176v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
14.0314.0314.05ascon128av12
20.8820.8820.90ascon128v12
20.8920.8920.92ascon80pqv12
32.2132.2532.74T:aes128gcmv1
33.3633.3633.39ascon128abi32v12
35.4535.4936.08T:aes256gcmv1
39.4739.4839.50T:xoodyakround3
47.8547.8547.86ascon128bi32v12
58.2058.2158.24T:giftcofb128v1
64.4064.4164.44T:schwaemm256128v2
78.6978.7078.70T:isapa128av20
85.0885.0985.14T:schwaemm192192v2
86.3486.3990.17T:schwaemm256256v2
87.6687.6687.68T:schwaemm128128v2
87.4388.0792.48T:isapa128v20
119.43119.44119.48T:tinyjambu128v2
130.02130.02130.33romulusn
156.42156.43156.44T:tinyjambu192v2
135.67?156.79?156.81?T:grain128aeadv2
160.97160.99161.06T:tinyjambu256v2
181.38181.40181.52romulusm
193.14193.15193.29T:isapk128av20
306.04307.23317.59T:elephant200v2
382.28382.34387.98T:isapk128v20
387.57387.60389.59T!!!romulust
707.47725.81740.95T:isapxv20
21155.5521163.7821180.04aes256gcmv1
29788.1029797.3529808.66T:elephant160v2
31659.0631715.9231826.14T:elephant176v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
14.0314.0314.04ascon128av12
20.8820.8820.88ascon128v12
20.8920.8920.90ascon80pqv12
32.2332.2732.60T:aes128gcmv1
33.3633.3633.37ascon128abi32v12
35.4835.5235.86T:aes256gcmv1
39.4539.5739.59T:xoodyakround3
47.8547.8547.86ascon128bi32v12
53.5553.5553.58T:isapa128v20
58.2058.2158.21T:giftcofb128v1
61.0361.0461.05T:isapa128av20
64.4064.4264.45T:schwaemm256128v2
85.0885.0985.10T:schwaemm192192v2
86.3386.4090.31T:schwaemm256256v2
87.6687.6687.69T:schwaemm128128v2
119.44119.45119.51T:tinyjambu128v2
130.02130.02130.07romulusn
151.45151.45151.55T:isapk128av20
156.42156.42156.43T:tinyjambu192v2
135.62?156.80?156.84?T:grain128aeadv2
160.97160.99161.51T:tinyjambu256v2
181.38181.38181.40romulusm
201.87201.89202.20T!!!romulust
254.33254.34254.47T:isapk128v20
306.04307.21316.54T:elephant200v2
453.10457.32473.76T:isapxv20
1753.491755.981758.48aes256gcmv1
29794.0229814.5729852.70T:elephant160v2
31655.4631695.3431826.79T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
21.4921.5521.98ascon128av12
27.8427.8928.82ascon128v12
28.5528.6029.64ascon80pqv12
51.1951.2452.23ascon128abi32v12
60.9261.0361.41T:xoodyakround3
65.1965.2466.34ascon128bi32v12
75.6375.6976.84T:giftcofb128v1
105.44106.26107.52T:schwaemm256128v2
112.66112.71112.98T:schwaemm128128v2
135.52136.45139.67T:schwaemm256256v2
137.92137.98138.20T:schwaemm192192v2
140.27140.27140.77T:tinyjambu128v2
157.17157.17158.16romulusn
147.93?174.12?174.12?T:grain128aeadv2
183.04183.15183.20T:tinyjambu192v2
188.45188.67190.31T:tinyjambu256v2
197.48197.59197.80T:isapa128av20
204.20204.80216.23T:aes128gcmv1
209.45209.51210.33romulusm
221.21222.91232.97T:aes256gcmv1
433.18433.23434.11T:elephant200v2
519.37519.42520.52T!!!romulust
749.38749.44751.57T:isapa128v20
1011.991012.051013.09T:isapk128av20
4471.584472.234487.66T:isapk128v20
6762.886782.297230.95T:isapxv20
30568.7830728.2531100.56aes256gcmv1
39427.1239549.7339659.59T:elephant176v2
39840.8339916.2439924.94T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
21.7721.7722.64ascon128av12
27.9527.9528.44ascon128v12
28.2228.2229.09ascon80pqv12
50.7550.7551.73ascon128abi32v12
59.0659.2359.45T:xoodyakround3
65.7365.7966.34ascon128bi32v12
76.2376.2977.00T:giftcofb128v1
105.60105.82107.24T:schwaemm256128v2
112.77112.82112.88T:schwaemm128128v2
136.28137.05140.82T:schwaemm256256v2
138.25138.41138.47T:schwaemm192192v2
140.77140.77140.82T:tinyjambu128v2
157.50157.50158.54romulusn
152.36?178.23?178.28?T:grain128aeadv2
183.42183.48183.53T:tinyjambu192v2
189.05189.38190.53T:tinyjambu256v2
197.48197.64197.80T:isapa128av20
200.21200.92213.06T:aes128gcmv1
216.34216.34217.11romulusm
216.40219.84227.55T:aes256gcmv1
433.18433.23433.51T:elephant200v2
519.53519.64520.57T!!!romulust
747.58747.63749.05T:isapa128v20
1013.911014.121015.22T:isapk128av20
4474.094475.244486.40T:isapk128v20
7121.907131.587151.21T:isapxv20
30569.3330675.6431152.13aes256gcmv1
39423.5139450.5839654.07T:elephant176v2
39821.0939917.6639923.35T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
21.7121.7721.77ascon128av12
27.9527.9527.95ascon128v12
28.2228.2228.22ascon80pqv12
50.7550.7550.86ascon128abi32v12
59.6659.7259.99T:xoodyakround3
65.7365.7966.06ascon128bi32v12
76.2376.2976.29T:giftcofb128v1
105.60105.60107.35T:schwaemm256128v2
112.77112.82112.82T:schwaemm128128v2
127.64127.86127.97T:isapa128av20
138.20138.25138.41T:schwaemm192192v2
136.39138.30140.71T:schwaemm256256v2
140.77140.77140.77T:tinyjambu128v2
157.50157.55157.66romulusn
151.65?178.34?178.39?T:grain128aeadv2
183.31183.42183.53T:tinyjambu192v2
189.05189.38189.77T:tinyjambu256v2
200.76201.47207.70T:aes128gcmv1
216.34216.34216.40romulusm
216.62218.48225.09T:aes256gcmv1
328.67328.84329.49T!!!romulust
378.00378.00378.33T:isapa128v20
433.23433.29436.35T:elephant200v2
744.41744.41745.23T:isapk128av20
2489.052489.592490.41T:isapk128v20
3636.663713.993730.40T:isapxv20
11195.8411222.2011429.41aes256gcmv1
39440.6839507.2939663.04T:elephant176v2
39838.4839912.6939986.62T:elephant160v2