VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Bobcat (500f10); 2011 AMD G-T56N; 2 x 1650MHz; h8bobcat, supercop-20240425

[Page version: 20240726 23:46:23]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Implementation notes

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
27.0427.0627.06ascon128av12
39.7339.7439.76ascon128v12
23.87?40.25?41.52?ascon80pqv12
46.39?49.41?82.04?T:xoodyakround3
54.6254.6554.67ascon128abi32v12
34.23?65.01?72.20?T:aes128gcmv1
64.76?69.04?114.68?T:schwaemm192192v2
70.88?74.57?123.11?T:schwaemm128128v2
77.9978.0078.01ascon128bi32v12
80.7181.5382.46T:aes256gcmv1
48.99?83.50?86.78?T:schwaemm256128v2
108.69108.76108.80T:giftcofb128v1
116.25116.25116.25T:grain128aeadv2
123.27123.28123.36T:schwaemm256256v2
140.31140.33140.36T:tinyjambu128v2
139.13?146.11?240.52?romulusn
154.95155.00155.01T:isapa128v20
161.43161.53161.68T:isapa128av20
259.24259.53259.78T:isapk128v20
163.01?270.26?277.96?T:tinyjambu192v2
312.58312.67314.03T:isapk128av20
318.99319.03319.22T:tinyjambu256v2
384.31384.40384.49romulusm
397.34?420.77?696.23?T:elephant200v2
493.04493.07494.43romulust
1098.051116.701120.82T:isapxv20
22469.2022472.3022488.32T:elephant176v2
37866.85?37891.80?63846.10?aes256gcmv1
23380.12?39402.53?40646.26?T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
26.9226.9426.96ascon128av12
39.7339.7439.75ascon128v12
24.00?40.50?41.81?ascon80pqv12
45.77?49.15?80.99?T:xoodyakround3
52.3952.4052.41ascon128abi32v12
40.81?64.75?71.57?T:aes128gcmv1
64.77?69.08?114.74?T:schwaemm192192v2
70.94?74.64?123.25?T:schwaemm128128v2
78.2578.2578.25ascon128bi32v12
80.9581.7182.17T:aes256gcmv1
49.18?83.84?87.24?T:schwaemm256128v2
108.71108.74108.82T:giftcofb128v1
120.63120.64120.66T:grain128aeadv2
123.37123.38123.40T:schwaemm256256v2
140.00140.01140.01T:tinyjambu128v2
138.74?145.62?239.88?romulusn
154.99155.02157.74T:isapa128v20
161.48161.53161.55T:isapa128av20
259.18259.55261.95T:isapk128v20
161.07?270.01?277.73?T:tinyjambu192v2
312.49312.57313.20T:isapk128av20
318.98319.00319.03T:tinyjambu256v2
384.11384.22384.68romulusm
397.36?420.74?696.24?T:elephant200v2
493.02493.10494.73romulust
1100.341116.431118.09T:isapxv20
22465.8622474.8322478.58T:elephant176v2
37864.03?37878.81?63835.90?aes256gcmv1
23376.65?39407.88?40658.18?T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
26.9426.9526.95ascon128av12
39.7539.7539.75ascon128v12
24.01?40.52?41.82?ascon80pqv12
46.04?49.03?81.45?T:xoodyakround3
52.3952.4252.44ascon128abi32v12
34.57?64.89?71.36?T:aes128gcmv1
64.78?69.10?114.76?T:schwaemm192192v2
70.98?75.24?123.25?T:schwaemm128128v2
77.7177.7577.78T:isapa128v20
78.2578.2778.27ascon128bi32v12
81.1681.6482.22T:aes256gcmv1
49.18?83.83?87.15?T:schwaemm256128v2
106.47106.50106.53T:isapa128av20
108.76108.78108.83T:giftcofb128v1
120.62120.64121.18T:grain128aeadv2
123.33123.37123.38T:schwaemm256256v2
140.00140.01140.01T:tinyjambu128v2
138.74?145.79?239.88?romulusn
161.83161.97162.75T:isapk128v20
173.42173.47173.58romulust
207.22207.28207.58T:isapk128av20
162.25?270.01?277.66?T:tinyjambu192v2
319.00319.01319.03T:tinyjambu256v2
384.11384.28384.75romulusm
397.37?422.03?696.20?T:elephant200v2
494.41?508.28?1493.56?aes256gcmv1
669.86671.25679.35T:isapxv20
22468.1722475.7322485.20T:elephant176v2
23374.95?39403.25?40636.27?T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
26.7926.8126.85ascon128av12
35.98?38.14?62.45?T:xoodyakround3
39.6139.6239.64ascon128v12
23.81?40.00?41.16?ascon80pqv12
27.00?42.89?46.65?T:aes128gcmv1
50.7951.1552.86T:aes256gcmv1
53.2253.2553.27ascon128abi32v12
64.84?64.86?108.71?T:giftcofb128v1
64.81?68.67?113.66?T:schwaemm192192v2
70.26?74.24?122.18?T:schwaemm128128v2
77.5977.6377.79ascon128bi32v12
49.08?83.02?85.89?T:schwaemm256128v2
114.99115.01115.08T:tinyjambu128v2
114.66115.03115.05T:grain128aeadv2
114.93116.27117.44T:isapa128v20
115.04?120.85?197.94?romulusn
72.66?122.72?122.78?T:schwaemm256256v2
133.99134.02134.03T:isapa128av20
140.90?140.94?162.53?T:isapk128av20
126.12?210.63?216.20?T:tinyjambu192v2
210.66210.72214.79T:isapk128v20
240.99241.01241.04T:tinyjambu256v2
267.90267.94268.91romulusm
332.97?333.75?548.66?romulust
351.30358.06359.35T:isapxv20
304.29?523.06?524.46?T:elephant200v2
16824.5516831.4316833.55T:elephant176v2
17576.95?30432.34?30442.20?T:elephant160v2
19389.16?32662.61?32678.71?aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
26.7726.7826.79ascon128av12
35.69?37.83?61.94?T:xoodyakround3
39.7439.7539.81ascon128v12
23.90?40.12?41.31?ascon80pqv12
23.47?43.00?46.69?T:aes128gcmv1
51.0751.5151.88T:aes256gcmv1
52.3052.3152.53ascon128abi32v12
64.78?64.86?108.71?T:giftcofb128v1
64.81?68.65?113.69?T:schwaemm192192v2
70.29?74.31?122.26?T:schwaemm128128v2
78.1078.1278.13ascon128bi32v12
49.21?83.19?86.01?T:schwaemm256128v2
114.85114.85114.91T:tinyjambu128v2
116.22116.25116.72T:isapa128v20
117.17117.19117.50T:grain128aeadv2
114.83?120.15?197.60?romulusn
73.25?122.75?122.79?T:schwaemm256256v2
134.01134.02134.90T:isapa128av20
140.90?141.00?162.55?T:isapk128av20
210.68210.76212.73T:isapk128v20
126.55?211.01?216.79?T:tinyjambu192v2
240.50240.77240.83T:tinyjambu256v2
267.59267.80269.34romulusm
332.99?333.93?548.64?romulust
351.25356.23358.90T:isapxv20
302.56?523.09?524.63?T:elephant200v2
16825.3716831.2616841.76T:elephant176v2
17570.60?30438.23?30444.73?T:elephant160v2
19381.03?32664.74?32678.77?aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
26.7926.8026.88ascon128av12
35.80?37.80?62.16?T:xoodyakround3
39.7639.7639.85ascon128v12
23.90?40.15?41.32?ascon80pqv12
23.35?42.99?46.63?T:aes128gcmv1
51.3851.5151.75T:aes256gcmv1
52.3352.3452.36ascon128abi32v12
64.84?64.86?108.70?T:giftcofb128v1
64.81?68.69?113.69?T:schwaemm192192v2
70.30?73.92?122.26?T:schwaemm128128v2
77.6177.6577.66T:isapa128v20
78.1378.1479.71ascon128bi32v12
49.65?83.17?86.02?T:schwaemm256128v2
106.49106.51106.81T:isapa128av20
114.08?114.12?129.32?T:isapk128av20
114.84114.85114.85T:tinyjambu128v2
117.21117.22117.30T:grain128aeadv2
114.83?120.23?197.61?romulusn
72.69?122.75?122.79?T:schwaemm256256v2
161.85161.96162.81T:isapk128v20
173.19?173.22?286.41?romulust
126.13?211.01?216.76?T:tinyjambu192v2
240.49240.52240.79T:tinyjambu256v2
267.56267.84269.07romulusm
311.05311.83314.54T:isapxv20
304.42?523.09?524.30?T:elephant200v2
698.88?1496.91?1500.21?aes256gcmv1
16826.4116831.9616835.65T:elephant176v2
17569.82?30430.88?30444.55?T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
9.20?21.08?26.13?T:aes128gcmv1
20.8921.2022.14T:aes256gcmv1
24.44?26.33?44.01?T:xoodyakround3
26.5326.5626.58ascon128av12
39.5039.5039.50ascon128v12
23.49?39.74?41.10?ascon80pqv12
51.7951.8251.83ascon128abi32v12
64.06?68.24?113.48?T:schwaemm192192v2
70.36?74.04?121.77?T:schwaemm128128v2
77.2477.2577.27ascon128bi32v12
77.4877.5077.52T:isapa128v20
48.35?82.50?85.76?T:schwaemm256128v2
89.6989.7089.71T:tinyjambu128v2
89.14?94.65?157.08?romulusn
106.50106.50106.55T:isapa128av20
108.59108.63108.69T:giftcofb128v1
113.74113.77113.79T:grain128aeadv2
122.19122.19122.21T:schwaemm256256v2
89.67?151.01?155.75?T:tinyjambu192v2
151.35151.40151.49romulusm
161.90161.97162.40T:isapk128v20
163.00163.01163.02T:tinyjambu256v2
172.88172.90174.18romulust
207.27207.36207.42T:isapk128av20
201.42?214.91?357.07?T:elephant200v2
671.66673.01681.28T:isapxv20
505.69?1500.80?1931.07?aes256gcmv1
11668.69?19405.59?19416.31?T:elephant176v2
19683.4619704.6520470.37T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
20.8621.0321.68T:aes256gcmv1
8.90?21.15?25.89?T:aes128gcmv1
24.45?26.33?44.00?T:xoodyakround3
26.6126.6226.62ascon128av12
39.7339.7539.75ascon128v12
23.47?39.75?41.09?ascon80pqv12
52.2552.2552.28ascon128abi32v12
64.05?68.24?113.48?T:schwaemm192192v2
70.07?74.06?121.78?T:schwaemm128128v2
77.4577.4977.53T:isapa128v20
77.9977.9978.01ascon128bi32v12
48.35?82.50?85.73?T:schwaemm256128v2
89.6989.6990.17T:tinyjambu128v2
89.14?94.69?157.10?romulusn
106.49106.53106.56T:isapa128av20
108.62108.65108.77T:giftcofb128v1
113.74113.76113.85T:grain128aeadv2
122.19122.19122.22T:schwaemm256256v2
89.69?151.01?155.78?T:tinyjambu192v2
151.37151.49151.71romulusm
161.89161.95162.47T:isapk128v20
162.51162.51162.52T:tinyjambu256v2
172.86172.90172.92romulust
207.24207.38207.84T:isapk128av20
201.40?214.70?357.07?T:elephant200v2
672.82672.92684.20T:isapxv20
508.14?1494.68?1925.27?aes256gcmv1
11668.50?19411.81?19421.70?T:elephant176v2
19687.8219701.2120469.62T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
20.92?21.12?23.77?T:aes256gcmv1
8.89?21.16?25.99?T:aes128gcmv1
24.40?26.33?44.06?T:xoodyakround3
26.6226.6226.63ascon128av12
39.7539.7539.77ascon128v12
23.51?39.77?41.12?ascon80pqv12
52.2552.3152.32ascon128abi32v12
64.05?68.29?113.48?T:schwaemm192192v2
70.07?74.06?121.78?T:schwaemm128128v2
77.4677.5277.55T:isapa128v20
78.0078.0178.02ascon128bi32v12
48.92?82.50?85.72?T:schwaemm256128v2
89.6989.6989.70T:tinyjambu128v2
89.14?95.87?157.11?romulusn
106.51106.51106.56T:isapa128av20
108.63108.65108.67T:giftcofb128v1
113.79113.80113.82T:grain128aeadv2
122.18122.19122.20T:schwaemm256256v2
89.71?151.00?155.73?T:tinyjambu192v2
151.43151.52151.57romulusm
161.87161.93161.95T:isapk128v20
162.51162.51162.52T:tinyjambu256v2
172.89172.90174.06romulust
207.24207.38207.48T:isapk128av20
201.39?214.95?357.07?T:elephant200v2
671.49672.91683.42T:isapxv20
500.10?1493.07?1932.09?aes256gcmv1
11677.00?19406.07?19416.30?T:elephant176v2
19684.5319697.6220466.66T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
27.4727.4927.55ascon128av12
38.28?38.29?61.25?T:xoodyakround3
40.2440.2440.27ascon128v12
25.41?40.62?40.64?ascon80pqv12
32.57?51.71?51.90?T:aes128gcmv1
54.4654.4754.48ascon128abi32v12
60.3460.6460.99T:aes256gcmv1
70.20?70.22?112.29?T:schwaemm192192v2
75.35?75.74?120.30?T:schwaemm128128v2
78.8778.8978.92ascon128bi32v12
53.75?85.49?85.51?T:schwaemm256128v2
109.99110.01110.11T:giftcofb128v1
115.46115.48115.79T:grain128aeadv2
115.91115.93115.94T:tinyjambu128v2
121.49?121.51?194.36?romulusn
126.04126.07126.12T:schwaemm256256v2
144.37144.38144.38T:isapa128av20
169.74169.75169.80T:isapa128v20
132.68?212.25?212.29?T:tinyjambu192v2
242.82242.84242.86T:tinyjambu256v2
269.80269.84270.97romulusm
194.48?311.09?311.19?T:isapk128av20
323.73?324.54?517.92?T:elephant200v2
338.19338.23339.11romulust
383.99384.03386.18T:isapk128v20
931.38931.95936.00T:isapxv20
17769.71?17775.38?28454.65?T:elephant176v2
18670.71?29879.95?29897.75?T:elephant160v2
20813.70?33322.09?33344.36?aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
27.4527.4527.46ascon128av12
37.99?38.31?60.78?T:xoodyakround3
40.3640.3640.37ascon128v12
25.49?40.76?40.76?ascon80pqv12
32.85?51.65?51.85?T:aes128gcmv1
53.5453.5553.81ascon128abi32v12
60.7060.8361.09T:aes256gcmv1
70.20?70.21?112.31?T:schwaemm192192v2
75.79?75.95?120.38?T:schwaemm128128v2
79.3879.3879.39ascon128bi32v12
53.55?85.63?85.67?T:schwaemm256128v2
110.02110.04110.07T:giftcofb128v1
115.77115.79115.80T:tinyjambu128v2
117.96117.97118.07T:grain128aeadv2
121.29?121.33?194.05?romulusn
126.06126.09126.11T:schwaemm256256v2
144.38144.38144.67T:isapa128av20
169.75169.77170.07T:isapa128v20
132.94?212.66?212.96?T:tinyjambu192v2
242.36242.43242.64T:tinyjambu256v2
270.11270.13270.53romulusm
194.58?311.16?311.20?T:isapk128av20
323.74?325.06?517.92?T:elephant200v2
338.18338.21339.33romulust
384.03384.05386.42T:isapk128v20
931.41932.59935.82T:isapxv20
17769.76?17774.46?28459.95?T:elephant176v2
18661.40?18670.90?29877.66?T:elephant160v2
20817.65?33323.82?33330.75?aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
27.4527.4527.46ascon128av12
38.12?38.15?60.99?T:xoodyakround3
40.3640.3640.37ascon128v12
25.48?40.76?40.76?ascon80pqv12
32.66?51.59?51.77?T:aes128gcmv1
53.5453.5553.55ascon128abi32v12
60.7361.0161.19T:aes256gcmv1
70.19?70.25?112.31?T:schwaemm192192v2
75.24?75.79?120.38?T:schwaemm128128v2
79.3879.3879.39ascon128bi32v12
53.55?85.62?85.66?T:schwaemm256128v2
104.81104.83105.11T:isapa128v20
110.00110.01110.24T:giftcofb128v1
112.30112.30112.61T:isapa128av20
115.77115.77115.78T:tinyjambu128v2
117.96117.97117.97T:grain128aeadv2
121.29?121.29?194.05?romulusn
126.06126.07126.10T:schwaemm256256v2
178.16178.17178.22romulust
132.90?212.61?212.62?T:tinyjambu192v2
242.32242.34242.59T:tinyjambu256v2
152.52?242.67?242.76?T:isapk128av20
255.17255.17255.21T:isapk128v20
270.10270.12270.43romulusm
323.74?324.96?517.92?T:elephant200v2
611.78611.78615.03T:isapxv20
1346.89?2153.75?2154.64?aes256gcmv1
17769.55?17776.63?28453.93?T:elephant176v2
18660.02?18663.11?29880.52?T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
43.1643.9044.38ascon128av12
54.4854.7055.22ascon128v12
34.91?54.89?55.34?ascon80pqv12
57.96?58.67?92.59?T:xoodyakround3
82.4682.6482.94ascon128abi32v12
97.63?98.05?164.62?T:schwaemm128128v2
107.70107.77108.51ascon128bi32v12
114.19?114.38?182.58?T:schwaemm192192v2
132.19132.66132.97T:grain128aeadv2
136.82137.01137.12T:tinyjambu128v2
139.79140.46141.23T:giftcofb128v1
89.25?140.72?141.84?T:schwaemm256128v2
147.47?147.73?235.27?romulusn
201.54202.02202.24T:schwaemm256256v2
156.45?249.12?249.60?T:tinyjambu192v2
169.73?256.84?264.88?T:aes128gcmv1
274.39275.31284.96T:aes256gcmv1
284.37284.59285.41T:tinyjambu256v2
312.12312.68313.50romulusm
382.97383.71384.08T:isapa128av20
456.89457.04457.74romulust
459.64?460.98?734.77?T:elephant200v2
1399.881400.101401.06T:isapa128v20
896.30?1430.90?1432.34?T:isapk128av20
4326.064326.244327.18T:isapk128v20
15107.7815108.0815270.77T:isapxv20
24938.88?25069.31?40029.21?T:elephant160v2
35363.9735487.2835492.77T:elephant176v2
48434.0548438.0148480.76aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
43.0943.3444.16ascon128av12
54.4854.5254.96ascon128v12
34.92?55.22?55.89?ascon80pqv12
57.41?57.81?91.55?T:xoodyakround3
81.3182.1282.61ascon128abi32v12
97.63?98.38?165.06?T:schwaemm128128v2
108.54108.95109.70ascon128bi32v12
114.48?134.08?183.32?T:schwaemm192192v2
134.60134.74135.15T:grain128aeadv2
136.94136.97137.12T:tinyjambu128v2
139.87140.38141.28T:giftcofb128v1
88.62?141.16?141.27?T:schwaemm256128v2
147.21?147.66?234.90?romulusn
201.58201.58201.77T:schwaemm256256v2
156.83?249.63?250.08?T:tinyjambu192v2
171.67?253.94?263.29?T:aes128gcmv1
280.55281.25291.75T:aes256gcmv1
284.15284.15284.41T:tinyjambu256v2
322.89323.67330.87romulusm
381.96382.00382.59T:isapa128av20
456.63457.26457.82romulust
459.71?459.86?735.28?T:elephant200v2
1399.501399.951400.21T:isapa128v20
898.72?1430.94?1434.28?T:isapk128av20
4326.994329.214339.23T:isapk128v20
15108.7515109.3015232.73T:isapxv20
24938.80?25036.36?40036.86?T:elephant160v2
35361.6735486.8435525.10T:elephant176v2
48433.9748441.9848445.66aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
42.3442.6042.83ascon128av12
54.2254.2554.29ascon128v12
34.33?54.62?54.62?ascon80pqv12
57.55?59.63?91.73?T:xoodyakround3
80.9480.9781.34ascon128abi32v12
97.60?98.30?165.06?T:schwaemm128128v2
107.95107.95108.33ascon128bi32v12
114.48?134.08?183.05?T:schwaemm192192v2
134.59134.59134.60T:grain128aeadv2
136.93136.94136.94T:tinyjambu128v2
139.83139.83139.83T:giftcofb128v1
88.29?140.98?141.16?T:schwaemm256128v2
146.99?146.99?234.90?romulusn
201.28201.28201.32T:schwaemm256256v2
245.18245.41246.22T:isapa128av20
156.20?249.59?249.64?T:tinyjambu192v2
162.51?253.38?260.36?T:aes128gcmv1
278.02281.33289.98T:aes256gcmv1
284.15284.15284.15T:tinyjambu256v2
291.94292.02292.23romulust
321.99322.63329.53romulusm
459.71?459.79?735.55?T:elephant200v2
729.46729.90730.72T:isapa128v20
635.28?1010.01?1010.56?T:isapk128av20
2364.092364.282366.02T:isapk128v20
7902.627903.077926.19T:isapxv20
17226.2117232.8917353.05aes256gcmv1
24938.98?25030.05?39905.53?T:elephant160v2
35364.9735481.7235555.38T:elephant176v2