VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20240808

[Page version: 20240828 00:46:12]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Implementation notes

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.36?0.42?0.45?T:aes128gcmv1
0.44?0.49?0.52?T:aes256gcmv1
5.315.315.31ascon128av12
7.497.507.51ascon80pqv12
7.757.757.76ascon128v12
11.7011.7211.77T:xoodyakround3
12.3812.3812.40ascon128abi32v12
17.3917.4617.51T:schwaemm256128v2
17.5417.5617.57T:grain128aeadv2
18.4018.5118.60ascon128bi32v12
23.7723.8223.88T:schwaemm192192v2
24.4424.5124.58T:schwaemm256256v2
25.2825.6925.70T:isapa128av20
27.0127.0427.18T:schwaemm128128v2
30.7330.7530.77T:giftcofb128v1
33.6433.6433.65T:isapa128v20
41.3441.4642.14romulusn
45.9446.0846.57T:isapk128av20
64.0364.6365.10romulusm
71.7171.7972.00T:isapk128v20
73.2473.2473.25T:tinyjambu128v2
82.7482.7482.75T:tinyjambu192v2
91.2491.2591.25T:tinyjambu256v2
133.62133.89134.01romulust
140.51140.89141.45T:isapxv20
188.76188.86189.02T:elephant200v2
302.24317.46319.37aes256gcmv1
6387.466388.196394.50T:elephant176v2
7209.077221.547247.97T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.37?0.41?0.46?T:aes128gcmv1
0.46?0.50?0.53?T:aes256gcmv1
5.315.315.32ascon128av12
7.617.627.64ascon128v12
8.008.018.01ascon80pqv12
11.6911.7611.78T:xoodyakround3
12.4312.4412.45ascon128abi32v12
17.3917.4517.51T:schwaemm256128v2
17.6217.6417.66T:grain128aeadv2
18.4618.5018.54ascon128bi32v12
23.8024.0224.18T:schwaemm192192v2
24.8224.8824.93T:schwaemm256256v2
26.6626.7126.75T:isapa128av20
27.0627.1627.29T:schwaemm128128v2
31.0531.0631.09T:giftcofb128v1
33.6233.6333.67T:isapa128v20
41.4942.0042.32romulusn
47.9748.4948.64T:isapk128av20
64.3065.2165.73romulusm
71.5271.7271.87T:isapk128v20
73.4973.5073.52T:tinyjambu128v2
82.9982.9983.00T:tinyjambu192v2
91.4991.5091.51T:tinyjambu256v2
133.77133.91134.02romulust
140.38140.83141.21T:isapxv20
188.71188.79188.86T:elephant200v2
300.72308.86310.69aes256gcmv1
6388.586389.816397.56T:elephant176v2
7222.857227.167293.88T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.40?0.43?0.46?T:aes128gcmv1
0.44?0.48?0.51?T:aes256gcmv1
5.315.315.31ascon128av12
7.637.637.63ascon128v12
8.018.018.01ascon80pqv12
11.7011.7611.78T:xoodyakround3
12.4412.4412.45ascon128abi32v12
15.8415.8815.91T:isapa128v20
17.3817.4917.54T:schwaemm256128v2
17.6117.6417.66T:grain128aeadv2
17.7217.7617.76T:isapa128av20
18.4918.5018.51ascon128bi32v12
23.7423.8223.86T:schwaemm192192v2
24.4924.5524.86T:schwaemm256256v2
27.0627.1827.26T:schwaemm128128v2
31.0531.0731.08T:giftcofb128v1
30.9832.0132.30T:isapk128av20
41.2941.5142.12romulusn
44.4544.5044.60romulust
45.0845.1445.25T:isapk128v20
64.3264.4065.27romulusm
73.5073.5173.53T:tinyjambu128v2
82.9983.0083.01T:tinyjambu192v2
84.0084.1084.59T:isapxv20
91.5091.5091.51T:tinyjambu256v2
188.78188.92189.44T:elephant200v2
291.63295.53306.52aes256gcmv1
6384.886387.306392.40T:elephant176v2
7255.967259.697267.99T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.33?0.36?0.39?T:aes128gcmv1
0.360.380.39T:aes256gcmv1
5.285.305.30ascon128av12
7.507.517.51ascon80pqv12
7.637.647.64ascon128v12
8.818.848.85T:xoodyakround3
12.4412.4512.46ascon128abi32v12
17.3217.3617.39T:schwaemm256128v2
17.5017.5217.53T:grain128aeadv2
18.3618.3818.40ascon128bi32v12
21.7121.8021.84T:isapa128av20
23.7923.8123.93T:schwaemm192192v2
24.4024.4424.87T:schwaemm256256v2
24.9424.9624.97T:isapa128v20
26.9327.0127.08T:schwaemm128128v2
30.9931.0131.02T:giftcofb128v1
32.4632.5332.62romulusn
38.5639.8740.37T:isapk128av20
43.3943.8144.05romulusm
57.4757.5357.63T:isapk128v20
59.7559.7559.75T:tinyjambu128v2
64.7564.7764.77T:tinyjambu192v2
68.7568.7568.76T:tinyjambu256v2
89.0889.1989.26romulust
112.77112.82113.12T:isapxv20
141.58141.65141.68T:elephant200v2
301.33315.34316.11aes256gcmv1
4772.514774.034774.57T:elephant176v2
5430.825459.025513.95T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.32?0.35?0.40?T:aes128gcmv1
0.35?0.38?0.39?T:aes256gcmv1
5.285.285.29ascon128av12
7.627.637.64ascon128v12
7.817.827.82ascon80pqv12
8.768.828.84T:xoodyakround3
12.4712.4712.49ascon128abi32v12
17.3117.3517.44T:schwaemm256128v2
17.5317.5617.59T:grain128aeadv2
18.5118.5318.55ascon128bi32v12
22.2122.2322.25T:isapa128av20
23.8223.9324.00T:schwaemm192192v2
24.9624.9624.97T:isapa128v20
24.4725.1625.20T:schwaemm256256v2
26.9827.1027.31T:schwaemm128128v2
31.1431.1531.18T:giftcofb128v1
32.4832.5232.60romulusn
38.5038.6640.34T:isapk128av20
43.4843.7144.02romulusm
57.4957.6557.71T:isapk128v20
59.8759.8859.90T:tinyjambu128v2
64.8764.8964.89T:tinyjambu192v2
68.8768.8868.88T:tinyjambu256v2
89.0389.1789.26romulust
112.00112.24112.59T:isapxv20
141.62141.69142.02T:elephant200v2
292.32301.53314.48aes256gcmv1
4769.764770.794773.34T:elephant176v2
5439.455446.565456.86T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.34?0.36?0.38?T:aes256gcmv1
0.34?0.37?0.40?T:aes128gcmv1
5.285.285.28ascon128av12
7.637.637.64ascon128v12
7.827.827.82ascon80pqv12
8.798.858.87T:xoodyakround3
12.4712.4712.48ascon128abi32v12
16.0616.0816.09T:isapa128v20
17.3317.4017.48T:schwaemm256128v2
17.5317.5417.56T:grain128aeadv2
17.7317.7417.77T:isapa128av20
18.5218.5318.55ascon128bi32v12
23.7423.8023.82T:schwaemm192192v2
24.3924.5424.72T:schwaemm256256v2
26.9527.0427.13T:schwaemm128128v2
30.9131.0732.00T:isapk128av20
31.1431.1531.17T:giftcofb128v1
32.4832.5232.61romulusn
43.5143.6844.01romulusm
44.2344.2844.35T:isapk128v20
44.4644.5044.66romulust
59.8759.8859.90T:tinyjambu128v2
64.8864.8964.89T:tinyjambu192v2
68.8768.8868.89T:tinyjambu256v2
83.9584.0484.56T:isapxv20
141.59141.63141.71T:elephant200v2
291.62300.15301.18aes256gcmv1
4769.994772.784774.36T:elephant176v2
5400.705446.805462.05T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.22?0.25?0.28?T:aes256gcmv1
0.24?0.27?0.29?T:aes128gcmv1
5.255.255.25ascon128av12
5.935.955.99T:xoodyakround3
7.497.507.51ascon80pqv12
7.497.507.50ascon128v12
12.5012.5012.51ascon128abi32v12
16.2416.2516.27T:isapa128v20
17.1817.2417.33T:schwaemm256128v2
17.4317.4517.47T:grain128aeadv2
17.8717.8817.88T:isapa128av20
18.1618.2618.35ascon128bi32v12
22.7622.8022.88romulusm
23.0123.0423.09romulusn
23.7323.8423.94T:schwaemm192192v2
24.3324.3924.76T:schwaemm256256v2
26.7326.8526.98T:schwaemm128128v2
31.2231.2831.30T:giftcofb128v1
30.8331.7132.21T:isapk128av20
43.2243.3943.52T:isapk128v20
44.4444.4644.49romulust
46.2446.2446.24T:tinyjambu256v2
46.2346.2446.24T:tinyjambu128v2
46.7446.7446.74T:tinyjambu192v2
84.5284.5684.80T:isapxv20
94.5494.6194.68T:elephant200v2
288.61289.25292.06aes256gcmv1
3152.773154.103158.21T:elephant176v2
3607.143617.793678.32T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.25?0.29?0.31?T:aes256gcmv1
0.28?0.31?0.34?T:aes128gcmv1
5.255.255.26ascon128av12
5.925.955.97T:xoodyakround3
7.627.627.63ascon128v12
7.627.637.64ascon80pqv12
12.5012.5012.51ascon128abi32v12
16.2216.2616.28T:isapa128v20
17.2317.2617.33T:schwaemm256128v2
17.4417.4617.49T:grain128aeadv2
17.7117.7517.79T:isapa128av20
18.5318.5718.60ascon128bi32v12
22.7222.7922.83romulusm
22.8722.9423.08romulusn
23.7523.8723.91T:schwaemm192192v2
24.3624.5224.61T:schwaemm256256v2
26.7826.8927.29T:schwaemm128128v2
31.2731.2931.30T:giftcofb128v1
30.8331.9032.07T:isapk128av20
43.3043.4743.54T:isapk128v20
44.4144.4844.55romulust
46.2446.2446.26T:tinyjambu128v2
46.2546.2546.28T:tinyjambu256v2
46.7446.7546.75T:tinyjambu192v2
83.7483.9984.73T:isapxv20
94.5694.5994.64T:elephant200v2
289.95290.53295.28aes256gcmv1
3153.153155.043155.41T:elephant176v2
3618.423624.103627.69T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.24?0.28?0.31?T:aes256gcmv1
0.25?0.28?0.30?T:aes128gcmv1
5.255.265.26ascon128av12
5.885.956.01T:xoodyakround3
7.627.627.62ascon128v12
7.637.637.63ascon80pqv12
12.4912.5012.50ascon128abi32v12
16.2516.2716.29T:isapa128v20
17.2317.2817.42T:schwaemm256128v2
17.4417.4517.49T:grain128aeadv2
17.7217.7517.79T:isapa128av20
18.5318.5718.60ascon128bi32v12
22.7322.8122.85romulusm
22.9023.0023.08romulusn
23.7623.8423.94T:schwaemm192192v2
24.3124.4124.79T:schwaemm256256v2
26.7626.8626.99T:schwaemm128128v2
30.7331.0432.02T:isapk128av20
31.2231.2331.28T:giftcofb128v1
43.4143.4943.60T:isapk128v20
44.4144.4944.54romulust
46.2546.2546.26T:tinyjambu128v2
46.2546.2646.27T:tinyjambu256v2
46.7446.7546.76T:tinyjambu192v2
83.6784.0284.46T:isapxv20
94.5294.6394.70T:elephant200v2
290.13292.22314.80aes256gcmv1
3153.773155.273159.99T:elephant176v2
3612.823615.993625.50T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.181.211.24T:aes128gcmv1
1.201.221.23T:aes256gcmv1
5.425.435.44ascon128av12
7.637.647.64ascon80pqv12
7.757.757.76ascon128v12
8.908.928.94T:xoodyakround3
12.7312.7412.74ascon128abi32v12
17.8317.8517.86T:grain128aeadv2
17.8417.8517.90T:schwaemm256128v2
18.7818.7818.84ascon128bi32v12
23.2123.2523.33T:isapa128av20
24.3724.3924.45T:schwaemm192192v2
25.1525.1825.35T:schwaemm256256v2
27.2527.3227.37T:schwaemm128128v2
31.2431.2531.26T:giftcofb128v1
32.7832.8332.84romulusn
36.6536.6636.66T:isapa128v20
42.9943.0444.37T:isapk128av20
43.7644.1744.25romulusm
60.2260.2260.23T:tinyjambu128v2
65.2465.2465.25T:tinyjambu192v2
69.2769.2769.27T:tinyjambu256v2
90.5190.5390.56romulust
97.9297.9497.96T:isapk128v20
144.55144.59145.06T:elephant200v2
186.11186.26186.54T:isapxv20
296.18296.60324.81aes256gcmv1
4804.494810.414811.36T:elephant176v2
5477.895507.065508.31T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.201.221.24T:aes128gcmv1
1.221.241.25T:aes256gcmv1
5.415.415.42ascon128av12
7.757.757.76ascon128v12
7.937.937.94ascon80pqv12
8.898.898.92T:xoodyakround3
12.7612.7612.78ascon128abi32v12
17.8817.8917.91T:grain128aeadv2
17.8417.9017.93T:schwaemm256128v2
18.9618.9818.99ascon128bi32v12
23.7223.7423.75T:isapa128av20
24.2924.3324.39T:schwaemm192192v2
25.1225.2825.41T:schwaemm256256v2
27.3727.4527.55T:schwaemm128128v2
31.3831.3831.39T:giftcofb128v1
32.7832.8032.84romulusn
36.6536.6536.66T:isapa128v20
42.9643.0644.12T:isapk128av20
43.9044.0044.46romulusm
60.3460.3460.36T:tinyjambu128v2
65.3765.3765.37T:tinyjambu192v2
69.3869.3969.39T:tinyjambu256v2
90.4690.5890.62romulust
97.9097.9598.00T:isapk128v20
144.50144.58144.67T:elephant200v2
185.62185.97185.99T:isapxv20
294.66300.03307.28aes256gcmv1
4805.734810.254813.47T:elephant176v2
5502.735507.655521.36T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.191.211.25T:aes128gcmv1
1.221.241.25T:aes256gcmv1
5.415.415.41ascon128av12
7.757.757.75ascon128v12
7.937.937.93ascon80pqv12
8.898.908.97T:xoodyakround3
12.7612.7612.76ascon128abi32v12
17.8517.8717.88T:grain128aeadv2
17.8517.8817.90T:schwaemm256128v2
18.6018.6218.62T:isapa128av20
18.9618.9818.98ascon128bi32v12
22.0222.0422.04T:isapa128v20
24.3124.3824.44T:schwaemm192192v2
25.0625.1025.12T:schwaemm256256v2
27.3427.3627.44T:schwaemm128128v2
31.3831.4031.41T:giftcofb128v1
32.7632.8032.82romulusn
33.6034.4434.67T:isapk128av20
43.9443.9444.29romulusm
45.7745.8245.85romulust
60.3460.3460.36T:tinyjambu128v2
65.3065.3465.41T:isapk128v20
65.3765.3765.37T:tinyjambu192v2
69.3869.3869.39T:tinyjambu256v2
121.38121.60121.96T:isapxv20
144.55144.59144.62T:elephant200v2
292.08293.39297.44aes256gcmv1
4805.914807.334808.59T:elephant176v2
5480.875505.315570.85T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
8.448.448.95ascon128av12
10.3810.3810.53ascon80pqv12
10.4510.4510.68ascon128v12
12.7712.7812.84T:xoodyakround3
19.2719.2919.43ascon128abi32v12
20.3020.5221.33T:aes128gcmv1
20.3220.8421.20T:aes256gcmv1
25.0925.1625.24T:grain128aeadv2
27.6627.9929.08ascon128bi32v12
29.6529.8830.10T:schwaemm256128v2
34.5934.9935.49T:schwaemm128128v2
36.6436.7836.82T:giftcofb128v1
38.3438.5338.76T:schwaemm192192v2
38.3738.9139.24romulusn
40.2440.5040.63T:schwaemm256256v2
50.8051.0951.31romulusm
58.4258.5358.76T:isapa128av20
70.8371.1071.25T:tinyjambu128v2
76.7876.7976.90T:tinyjambu192v2
80.7881.0781.21T:tinyjambu256v2
120.67120.84121.32romulust
133.84137.91138.66T:isapk128av20
204.75204.91205.28T:elephant200v2
305.65305.73305.76T:isapa128v20
332.17335.10356.23aes256gcmv1
1013.411014.821015.23T:isapk128v20
1850.271850.961852.94T:isapxv20
5983.505985.965992.20T:elephant176v2
7342.517377.387398.45T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
8.348.348.65ascon128av12
10.4510.4610.77ascon128v12
10.5210.5410.83ascon80pqv12
12.8812.8912.97T:xoodyakround3
19.2819.3519.56ascon128abi32v12
19.5519.6820.03T:aes128gcmv1
19.6619.8920.27T:aes256gcmv1
25.1225.2025.29T:grain128aeadv2
28.8729.3229.62ascon128bi32v12
29.6129.8130.20T:schwaemm256128v2
35.1135.6635.91T:schwaemm128128v2
36.7336.7536.88T:giftcofb128v1
38.1238.2039.30romulusn
38.4338.7738.84T:schwaemm192192v2
40.5440.8041.55T:schwaemm256256v2
51.7851.9952.29romulusm
58.3558.4558.69T:isapa128av20
70.8270.9571.26T:tinyjambu128v2
76.7976.9477.06T:tinyjambu192v2
80.7981.0581.21T:tinyjambu256v2
121.18121.58121.66romulust
133.56137.62138.62T:isapk128av20
204.38204.73205.08T:elephant200v2
305.70306.17306.30T:isapa128v20
330.82331.70333.41aes256gcmv1
1014.121016.121016.50T:isapk128v20
1848.851851.091852.81T:isapxv20
5965.975983.815994.09T:elephant176v2
7326.737365.647510.39T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
8.348.348.34ascon128av12
10.4510.4510.45ascon128v12
10.5210.5310.54ascon80pqv12
12.9813.0713.59T:xoodyakround3
19.2019.3419.38ascon128abi32v12
19.4119.6219.94T:aes128gcmv1
20.0020.0620.27T:aes256gcmv1
25.1325.2425.27T:grain128aeadv2
28.8728.8729.38ascon128bi32v12
29.6529.8230.04T:schwaemm256128v2
35.5035.8035.91T:schwaemm128128v2
36.7336.7536.88T:giftcofb128v1
37.9338.1638.51T:isapa128av20
38.1238.3339.31romulusn
38.5538.7338.89T:schwaemm192192v2
40.3740.9641.41T:schwaemm256256v2
51.7351.9552.43romulusm
70.6570.7070.80T:tinyjambu128v2
75.7576.1676.59romulust
76.6376.7976.94T:tinyjambu192v2
80.7780.7981.07T:tinyjambu256v2
84.7086.7888.09T:isapk128av20
158.92158.95159.34T:isapa128v20
204.33204.53205.06T:elephant200v2
328.20329.46330.92aes256gcmv1
538.18538.65539.27T:isapk128v20
965.51967.13967.68T:isapxv20
5984.945990.035994.88T:elephant176v2
7341.207372.587403.93T:elephant160v2