VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20241022

[Page version: 20241120 00:41:35]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.37?0.43?0.47?T:aes128gcmv1
0.40?0.44?0.48?T:aes256gcmv1
5.315.315.32ascon128av12
7.507.517.51ascon80pqv12
7.747.757.75ascon128v12
12.6812.6912.69ascon128abi32v12
13.1913.2513.33T:xoodyakround3
17.5417.5617.60T:grain128aeadv2
17.5317.5817.66T:schwaemm256128v2
18.6218.6318.64ascon128bi32v12
23.8223.8723.92T:schwaemm192192v2
24.7724.8825.13T:schwaemm256256v2
25.4625.4925.51T:isapa128av20
27.3727.4727.61T:schwaemm128128v2
30.7430.7530.75T:giftcofb128v1
33.5133.5233.52T:isapa128v20
41.0541.0741.09romulusn
46.2346.6148.19T:isapk128av20
63.6363.7364.00romulusm
73.4973.4973.50T:tinyjambu128v2
73.2173.6873.73T:isapk128v20
85.4985.4985.50T:tinyjambu192v2
91.4991.5091.50T:tinyjambu256v2
134.37134.40134.62romulust
163.28163.68164.12T:isapxv20
190.54190.72190.91T:elephant200v2
275.67?317.93?537.63?aes256gcmv1
5975.875978.955985.48T:elephant176v2
7417.597696.957725.96T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.36?0.42?0.45?T:aes128gcmv1
0.42?0.47?0.49?T:aes256gcmv1
5.305.315.32ascon128av12
7.617.617.63ascon128v12
8.008.018.01ascon80pqv12
12.6912.6912.70ascon128abi32v12
13.1913.2413.32T:xoodyakround3
17.4817.5517.65T:schwaemm256128v2
17.6217.6417.67T:grain128aeadv2
18.4918.5118.53ascon128bi32v12
23.7823.8323.88T:schwaemm192192v2
24.4924.5224.56T:isapa128av20
24.4924.9425.11T:schwaemm256256v2
27.4227.4927.61T:schwaemm128128v2
31.0631.0631.07T:giftcofb128v1
33.4833.5233.54T:isapa128v20
41.0441.0941.14romulusn
46.1947.5648.25T:isapk128av20
63.6763.8964.02romulusm
73.4973.4973.50T:tinyjambu128v2
73.6673.8973.95T:isapk128v20
85.4985.5085.50T:tinyjambu192v2
91.4991.4991.51T:tinyjambu256v2
134.37134.67134.89romulust
162.14163.05163.39T:isapxv20
190.63190.85191.41T:elephant200v2
282.30?298.25?425.49?aes256gcmv1
5981.275982.695999.52T:elephant176v2
7709.587728.627744.12T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.41?0.43?0.46?T:aes128gcmv1
0.44?0.46?0.49?T:aes256gcmv1
5.315.315.31ascon128av12
7.627.627.64ascon128v12
8.008.018.01ascon80pqv12
12.6912.6912.70ascon128abi32v12
13.2113.2613.32T:xoodyakround3
16.3416.3916.42T:isapa128av20
16.7116.7316.80T:isapa128v20
17.4717.5117.63T:schwaemm256128v2
17.6217.6317.66T:grain128aeadv2
18.4918.5018.52ascon128bi32v12
23.7523.8023.85T:schwaemm192192v2
24.4124.4524.51T:schwaemm256256v2
27.4627.5627.68T:schwaemm128128v2
30.7230.9731.99T:isapk128av20
31.0631.0631.07T:giftcofb128v1
41.0641.3741.42romulusn
44.5244.6444.99romulust
46.1046.2046.39T:isapk128v20
63.6463.9364.07romulusm
73.5073.5073.51T:tinyjambu128v2
85.5085.5085.50T:tinyjambu192v2
91.5091.5091.50T:tinyjambu256v2
97.9698.4098.75T:isapxv20
190.52190.67190.84T:elephant200v2
276.91?287.71?420.41?aes256gcmv1
5981.755983.315985.26T:elephant176v2
7420.337719.027734.61T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.31?0.33?0.36?T:aes128gcmv1
0.31?0.34?0.36?T:aes256gcmv1
5.285.295.30ascon128av12
7.507.507.51ascon80pqv12
7.627.637.64ascon128v12
9.749.769.79T:xoodyakround3
12.6212.6312.65ascon128abi32v12
17.3317.3817.42T:schwaemm256128v2
17.5117.5317.56T:grain128aeadv2
18.5018.5018.51ascon128bi32v12
21.1121.1321.13T:isapa128av20
23.8823.9624.02T:schwaemm192192v2
24.5124.5924.73T:schwaemm256256v2
25.0725.0925.09T:isapa128v20
27.3027.3827.49T:schwaemm128128v2
30.9731.0031.01T:giftcofb128v1
31.8031.8431.94romulusn
38.5638.6240.06T:isapk128av20
43.0743.1543.23romulusm
59.7659.8659.89T:isapk128v20
59.8759.8859.88T:tinyjambu128v2
66.7566.7566.75T:tinyjambu192v2
68.8768.8768.88T:tinyjambu256v2
89.3089.4489.68romulust
131.26131.57131.89T:isapxv20
142.24142.36142.42T:elephant200v2
272.98?287.58?542.23?aes256gcmv1
4466.454467.674468.40T:elephant176v2
5783.725792.125794.63T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.320.340.34T:aes128gcmv1
0.360.380.39T:aes256gcmv1
5.285.285.29ascon128av12
7.627.637.64ascon128v12
7.817.827.82ascon80pqv12
9.719.729.75T:xoodyakround3
12.6012.6012.60ascon128abi32v12
17.3217.3717.43T:schwaemm256128v2
17.5317.5617.59T:grain128aeadv2
18.3118.3118.32ascon128bi32v12
20.6220.6520.72T:isapa128av20
23.7423.8023.86T:schwaemm192192v2
24.4324.8725.09T:schwaemm256256v2
25.0725.0925.11T:isapa128v20
27.3127.4727.58T:schwaemm128128v2
31.1231.1431.16T:giftcofb128v1
31.8131.8631.89romulusn
38.6039.1839.96T:isapk128av20
43.1843.2343.26romulusm
59.5759.6459.70T:isapk128v20
59.8759.8859.90T:tinyjambu128v2
66.7466.7566.75T:tinyjambu192v2
68.8768.8768.88T:tinyjambu256v2
89.4789.5889.87romulust
130.91131.23131.49T:isapxv20
142.22142.29142.92T:elephant200v2
292.49?304.64?423.73?aes256gcmv1
4462.324465.454473.19T:elephant176v2
5563.135797.955803.41T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.330.340.35T:aes128gcmv1
0.350.360.38T:aes256gcmv1
5.285.285.29ascon128av12
7.637.637.63ascon128v12
7.827.827.82ascon80pqv12
9.729.769.78T:xoodyakround3
12.6012.6012.60ascon128abi32v12
16.5516.5516.59T:isapa128av20
16.6716.6816.72T:isapa128v20
17.3817.4417.50T:schwaemm256128v2
17.5417.5517.57T:grain128aeadv2
18.3118.3218.32ascon128bi32v12
23.7623.8223.85T:schwaemm192192v2
24.4024.4824.63T:schwaemm256256v2
27.4227.5927.65T:schwaemm128128v2
31.1231.1331.16T:giftcofb128v1
31.8231.8731.90romulusn
31.7831.9732.28T:isapk128av20
43.1043.2243.28romulusm
44.5044.5245.12romulust
45.7445.8546.05T:isapk128v20
59.8859.8859.89T:tinyjambu128v2
66.7466.7466.75T:tinyjambu192v2
68.8868.8868.89T:tinyjambu256v2
98.4498.5998.84T:isapxv20
142.20142.30143.04T:elephant200v2
278.85?290.51?420.98?aes256gcmv1
4463.004465.314470.20T:elephant176v2
5764.255797.885815.70T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.19?0.27?0.31?T:aes128gcmv1
0.19?0.27?0.31?T:aes256gcmv1
5.245.245.26ascon128av12
6.196.236.24T:xoodyakround3
7.507.507.50ascon128v12
7.497.507.51ascon80pqv12
12.5512.5612.59ascon128abi32v12
16.6216.6316.64T:isapa128v20
16.7516.7616.76T:isapa128av20
17.1717.2717.30T:schwaemm256128v2
17.4217.4617.49T:grain128aeadv2
18.3618.3818.41ascon128bi32v12
22.5522.5622.58romulusm
22.5422.5622.66romulusn
23.7923.8323.90T:schwaemm192192v2
24.4524.5924.64T:schwaemm256256v2
27.3127.3827.45T:schwaemm128128v2
30.8131.0831.97T:isapk128av20
31.2031.2531.25T:giftcofb128v1
44.4744.5844.90romulust
45.4445.5545.61T:isapk128v20
46.2446.2446.25T:tinyjambu256v2
46.2446.2446.25T:tinyjambu128v2
47.9947.9948.00T:tinyjambu192v2
94.4594.4794.53T:elephant200v2
98.8199.0199.33T:isapxv20
271.11?290.17?533.89?aes256gcmv1
2954.392956.032962.34T:elephant176v2
3704.503705.893874.12T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.24?0.27?0.31?T:aes128gcmv1
0.25?0.27?0.30?T:aes256gcmv1
5.245.245.26ascon128av12
6.236.256.28T:xoodyakround3
7.627.627.63ascon128v12
7.627.637.64ascon80pqv12
12.4812.5012.50ascon128abi32v12
16.5916.6716.67T:isapa128v20
16.7116.7516.80T:isapa128av20
17.2017.2617.35T:schwaemm256128v2
17.4417.4617.48T:grain128aeadv2
18.1318.1318.13ascon128bi32v12
22.5622.5722.61romulusm
22.6922.6922.69romulusn
23.7823.8323.89T:schwaemm192192v2
24.3124.3524.41T:schwaemm256256v2
27.0927.3627.53T:schwaemm128128v2
30.8230.9032.07T:isapk128av20
31.1931.2531.26T:giftcofb128v1
44.4844.5445.07romulust
45.4645.5745.74T:isapk128v20
46.2446.2446.26T:tinyjambu128v2
46.2546.2546.26T:tinyjambu256v2
47.9947.9948.01T:tinyjambu192v2
94.4894.5394.59T:elephant200v2
98.3098.6599.08T:isapxv20
277.15?285.63?453.56?aes256gcmv1
2951.402952.262955.27T:elephant176v2
3856.183861.183881.42T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.25?0.27?0.28?T:aes128gcmv1
0.25?0.29?0.31?T:aes256gcmv1
5.255.255.26ascon128av12
6.216.246.27T:xoodyakround3
7.627.627.62ascon128v12
7.637.637.63ascon80pqv12
12.4812.5012.50ascon128abi32v12
16.5916.5916.67T:isapa128v20
16.7116.7516.80T:isapa128av20
17.2217.2817.32T:schwaemm256128v2
17.4517.4617.49T:grain128aeadv2
18.1218.1318.13ascon128bi32v12
22.5222.5522.61romulusm
22.5322.6622.69romulusn
23.7823.8223.93T:schwaemm192192v2
24.3824.5324.65T:schwaemm256256v2
27.0927.2227.34T:schwaemm128128v2
30.9031.1532.34T:isapk128av20
31.1831.2331.25T:giftcofb128v1
44.4744.5545.08romulust
45.2245.5245.80T:isapk128v20
46.2446.2546.26T:tinyjambu128v2
46.2546.2546.26T:tinyjambu256v2
47.9947.9948.00T:tinyjambu192v2
94.6494.9294.97T:elephant200v2
98.5698.8899.27T:isapxv20
286.15?297.85?449.07?aes256gcmv1
2954.502956.082961.64T:elephant176v2
3702.843736.523876.98T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.960.970.99T:aes128gcmv1
0.980.981.01T:aes256gcmv1
5.425.435.44ascon128av12
7.637.647.64ascon80pqv12
7.757.767.76ascon128v12
9.889.939.94T:xoodyakround3
12.9512.9512.97ascon128abi32v12
17.8517.8617.88T:grain128aeadv2
17.8917.9217.96T:schwaemm256128v2
18.7918.7918.79ascon128bi32v12
22.6022.6122.61T:isapa128av20
24.3024.3324.34T:schwaemm192192v2
25.1725.3125.51T:schwaemm256256v2
27.6227.7127.80T:schwaemm128128v2
31.2231.2431.25T:giftcofb128v1
32.0832.0832.15romulusn
36.3036.3136.32T:isapa128v20
43.1043.1744.18T:isapk128av20
43.3943.4243.50romulusm
60.3460.3560.35T:tinyjambu128v2
67.2667.2667.26T:tinyjambu192v2
69.3969.3969.39T:tinyjambu256v2
90.7890.8291.00romulust
103.33103.36103.38T:isapk128v20
145.21145.27145.32T:elephant200v2
218.92219.64219.95T:isapxv20
291.70?340.84?521.12?aes256gcmv1
4498.404499.304502.01T:elephant176v2
5759.445860.055869.91T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.960.980.99T:aes128gcmv1
1.001.021.04T:aes256gcmv1
5.415.425.42ascon128av12
7.757.757.76ascon128v12
7.937.937.94ascon80pqv12
9.829.859.92T:xoodyakround3
12.9012.9012.90ascon128abi32v12
17.8717.8917.91T:grain128aeadv2
17.8817.9017.94T:schwaemm256128v2
18.6018.6018.60ascon128bi32v12
22.0822.0822.08T:isapa128av20
24.3024.3424.36T:schwaemm192192v2
25.0925.1225.31T:schwaemm256256v2
27.6627.7227.82T:schwaemm128128v2
31.3731.3731.40T:giftcofb128v1
32.0432.0732.12romulusn
36.3136.3136.34T:isapa128v20
43.3943.4843.55romulusm
44.3144.4444.65T:isapk128av20
60.3460.3460.34T:tinyjambu128v2
67.2567.2667.26T:tinyjambu192v2
69.3969.3969.39T:tinyjambu256v2
90.6390.8491.22romulust
103.32103.37103.57T:isapk128v20
145.28145.34146.03T:elephant200v2
219.07219.36219.67T:isapxv20
292.86?305.51?417.03?aes256gcmv1
4497.074498.624503.09T:elephant176v2
5860.345863.035865.98T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.980.990.99T:aes128gcmv1
1.001.021.03T:aes256gcmv1
5.415.415.42ascon128av12
7.757.757.75ascon128v12
7.937.937.93ascon80pqv12
9.859.879.93T:xoodyakround3
12.9012.9012.90ascon128abi32v12
17.3817.3817.41T:isapa128av20
17.8717.8817.89T:grain128aeadv2
17.8817.9618.02T:schwaemm256128v2
18.6018.6018.61ascon128bi32v12
22.4122.4222.43T:isapa128v20
24.3024.3324.36T:schwaemm192192v2
25.1025.1725.24T:schwaemm256256v2
27.7627.8127.87T:schwaemm128128v2
31.3731.3731.40T:giftcofb128v1
32.0432.0732.13romulusn
33.5634.4134.74T:isapk128av20
43.4843.5543.57romulusm
45.8045.8346.27romulust
60.3460.3460.34T:tinyjambu128v2
67.2567.2567.26T:tinyjambu192v2
68.6868.7268.76T:isapk128v20
69.3969.3969.39T:tinyjambu256v2
143.61143.75144.01T:isapxv20
145.20145.26145.29T:elephant200v2
293.93?301.86?426.41?aes256gcmv1
4497.564499.994502.62T:elephant176v2
5643.505840.355862.21T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
8.438.568.84ascon128av12
10.4410.4410.68ascon80pqv12
10.4810.5810.71ascon128v12
14.3114.5014.70T:xoodyakround3
15.2015.5215.98T:aes128gcmv1
15.4815.9216.55T:aes256gcmv1
20.0520.0520.28ascon128abi32v12
25.1625.3225.39T:grain128aeadv2
25.3425.3425.38ascon128bi32v12
29.1629.3629.51T:schwaemm256128v2
35.3736.1536.28T:schwaemm128128v2
36.8236.8736.95T:giftcofb128v1
37.8638.0238.15romulusn
38.1038.4438.70T:schwaemm192192v2
40.0240.2140.49T:schwaemm256256v2
50.0150.1750.34romulusm
56.4856.5256.81T:isapa128av20
70.9271.0571.18T:tinyjambu128v2
79.1579.1579.16T:tinyjambu192v2
81.0681.0981.26T:tinyjambu256v2
120.66120.94121.12romulust
138.73139.22139.68T:isapk128av20
204.73205.49205.91T:elephant200v2
294.15294.23294.33T:isapa128v20
336.73?341.93?584.24?aes256gcmv1
1096.911097.241104.45T:isapk128v20
2220.942223.772224.72T:isapxv20
5602.275604.845608.31T:elephant176v2
7556.997831.197852.62T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
8.458.558.83ascon128av12
10.4310.5110.71ascon128v12
10.6010.6210.76ascon80pqv12
14.2414.4614.71T:xoodyakround3
15.1815.4115.70T:aes128gcmv1
15.4315.6616.05T:aes256gcmv1
19.8419.8519.96ascon128abi32v12
25.1725.1725.28ascon128bi32v12
25.1125.2025.27T:grain128aeadv2
29.5929.7330.05T:schwaemm256128v2
35.6236.0636.50T:schwaemm128128v2
36.9536.9736.97T:giftcofb128v1
37.5937.6537.84romulusn
38.2738.8338.93T:schwaemm192192v2
40.3640.4840.92T:schwaemm256256v2
50.7050.8650.92romulusm
55.2155.5555.97T:isapa128av20
70.9371.0671.19T:tinyjambu128v2
78.7979.2079.33T:tinyjambu192v2
81.0981.2181.35T:tinyjambu256v2
120.98121.25121.62romulust
135.55138.51139.30T:isapk128av20
204.44204.84205.30T:elephant200v2
294.23294.64294.98T:isapa128v20
327.67?328.45?478.12?aes256gcmv1
1097.361097.621104.17T:isapk128v20
2216.912219.432220.44T:isapxv20
5604.305606.375609.70T:elephant176v2
7555.627565.667833.62T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
8.318.418.41ascon128av12
10.4210.4310.43ascon128v12
10.5610.6010.62ascon80pqv12
14.2314.3014.71T:xoodyakround3
14.9815.2515.39T:aes128gcmv1
15.5015.6115.68T:aes256gcmv1
19.8619.8819.88ascon128abi32v12
25.1625.1625.16ascon128bi32v12
25.1125.2425.30T:grain128aeadv2
29.4029.8230.04T:schwaemm256128v2
35.9336.1736.61T:isapa128av20
35.8036.2436.98T:schwaemm128128v2
36.9436.9536.95T:giftcofb128v1
37.5937.6537.77romulusn
38.3338.4638.76T:schwaemm192192v2
40.2940.5340.76T:schwaemm256256v2
50.5350.6350.76romulusm
70.6470.7971.03T:tinyjambu128v2
75.2875.5575.82romulust
78.4878.8078.92T:tinyjambu192v2
80.9381.0881.20T:tinyjambu256v2
85.8486.9289.10T:isapk128av20
153.45153.70154.07T:isapa128v20
204.45204.74205.29T:elephant200v2
325.26?327.50?465.45?aes256gcmv1
584.95585.45588.91T:isapk128v20
1160.311160.861163.90T:isapxv20
5600.835602.795606.94T:elephant176v2
7819.847832.587840.02T:elephant160v2