VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; K10 32nm (300f10); 2011 AMD A6-3650; 4 x 2600MHz; hydra4, supercop-20240808

[Page version: 20240828 00:46:12]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Implementation notes

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
9.909.949.95ascon128av12
13.8713.8813.88ascon128v12
14.1214.1314.13ascon80pqv12
19.1719.2019.21ascon128abi32v12
25.3925.4325.58T:aes128gcmv1
27.6227.6227.64ascon128bi32v12
29.0329.0329.05T:xoodyakround3
31.4831.5631.62T:aes256gcmv1
34.3734.4335.05T:schwaemm256128v2
43.8743.8943.90T:giftcofb128v1
44.0444.4645.12T:schwaemm192192v2
47.1647.1647.18T:schwaemm128128v2
47.4948.2148.32T:schwaemm256256v2
58.4958.5058.52T:isapa128av20
58.7358.7558.76T:isapa128v20
75.3479.8380.10T:grain128aeadv2
80.0080.0180.02T:tinyjambu128v2
84.5084.5085.51T:romulusn
97.1497.3597.36T:tinyjambu192v2
109.36109.42109.63T:isapk128av20
109.85109.85109.88T:tinyjambu256v2
146.15146.33146.83T:isapk128v20
168.01168.15168.54romulusn
234.97240.04242.61T:isapxv20
326.30328.42330.07romulusm
357.75361.88362.33T:elephant200v2
722.12732.18734.71T!!!romulust
15846.0115849.5015851.40T:elephant160v2
15989.6815989.8515990.32T:elephant176v2
25227.7625228.5825232.16aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
9.739.759.75ascon128av12
13.8713.8813.88ascon128v12
13.8713.8813.88ascon80pqv12
19.2019.2319.23ascon128abi32v12
25.3625.4325.54T:aes128gcmv1
28.6228.6228.63ascon128bi32v12
28.6629.3930.47T:xoodyakround3
31.4531.5431.60T:aes256gcmv1
35.1835.4535.55T:schwaemm256128v2
43.5643.5843.60T:giftcofb128v1
45.4745.8746.17T:schwaemm192192v2
48.0048.0248.06T:schwaemm128128v2
48.1048.8149.11T:schwaemm256256v2
58.4958.5058.52T:isapa128av20
58.7458.7659.15T:isapa128v20
75.0875.1175.41T:grain128aeadv2
80.0080.0080.01T:tinyjambu128v2
83.7783.8184.86T:romulusn
97.6297.6397.65T:tinyjambu192v2
109.38109.41109.93T:isapk128av20
110.06110.08110.14T:tinyjambu256v2
145.99146.37146.99T:isapk128v20
168.01168.22168.37romulusn
236.66239.61243.25T:isapxv20
326.39327.64330.63romulusm
357.71361.88362.34T:elephant200v2
720.50722.07723.88T!!!romulust
15846.1515849.6115851.30T:elephant160v2
15989.6815989.8715990.30T:elephant176v2
25229.1625229.7425229.90aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
9.759.759.75ascon128av12
13.8713.8813.88ascon128v12
13.8713.8813.88ascon80pqv12
19.2319.2319.23ascon128abi32v12
25.4125.4725.56T:aes128gcmv1
28.6228.6228.63ascon128bi32v12
28.7329.4329.49T:xoodyakround3
29.6229.6329.63T:isapa128v20
31.5331.5731.61T:aes256gcmv1
35.1835.4535.55T:schwaemm256128v2
38.6038.6238.65T:isapa128av20
43.5843.5843.58T:giftcofb128v1
45.4245.5345.89T:schwaemm192192v2
48.0048.0248.06T:schwaemm128128v2
48.1049.0950.95T:schwaemm256256v2
72.3972.4172.45T:isapk128av20
75.0775.1075.11T:grain128aeadv2
79.9980.0080.01T:tinyjambu128v2
83.7983.8083.83T:romulusn
90.6890.8690.91T:isapk128v20
97.6297.6297.65T:tinyjambu192v2
110.06110.13110.15T:tinyjambu256v2
136.69141.78144.46T:isapxv20
168.01168.24168.37romulusn
231.80232.16232.88T!!!romulust
326.42327.64330.64romulusm
357.76361.89362.35T:elephant200v2
625.23625.89625.97aes256gcmv1
15850.9315851.4015851.95T:elephant160v2
15989.5515989.6415990.20T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
9.739.769.77ascon128av12
13.6113.6213.64ascon128v12
13.9313.9413.94ascon80pqv12
16.2916.3416.37T:aes128gcmv1
18.8918.9218.93ascon128abi32v12
19.3319.3719.52T:aes256gcmv1
21.4921.4921.50T:xoodyakround3
27.5527.5627.58ascon128bi32v12
33.8034.3034.75T:schwaemm256128v2
43.7943.8043.81T:giftcofb128v1
43.7144.1944.67T:schwaemm192192v2
44.4344.4444.49T:isapa128v20
46.6646.7146.81T:schwaemm128128v2
47.7647.9248.04T:schwaemm256256v2
48.4948.5048.52T:isapa128av20
65.1765.1865.24T:tinyjambu128v2
73.6773.7073.75T:romulusn
74.9175.0175.05T:grain128aeadv2
75.7575.7575.77T:tinyjambu192v2
82.8382.8482.87T:tinyjambu256v2
90.8990.9390.98T:isapk128av20
118.74118.80119.03T:isapk128v20
163.65164.09165.82romulusn
188.72190.39192.22T:isapxv20
243.08244.43247.16romulusm
266.84270.20270.46T:elephant200v2
481.04484.85485.24T!!!romulust
11886.5611887.3611887.96T:elephant160v2
11945.8511946.0411946.22T:elephant176v2
12926.5512926.8912927.48aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
9.539.579.57ascon128av12
13.8013.8113.82ascon128v12
13.8713.8813.88ascon80pqv12
16.3216.3716.47T:aes128gcmv1
18.8718.9018.92ascon128abi32v12
19.3319.3919.54T:aes256gcmv1
21.3021.3221.33T:xoodyakround3
28.0628.0628.07ascon128bi32v12
34.5034.5934.84T:schwaemm256128v2
43.6243.6443.66T:giftcofb128v1
44.4344.4444.49T:isapa128v20
44.8044.8845.63T:schwaemm192192v2
47.1347.1447.16T:schwaemm128128v2
47.8348.0948.17T:schwaemm256256v2
48.4948.5048.52T:isapa128av20
65.1865.1965.20T:tinyjambu128v2
73.3673.4173.43T:romulusn
74.7974.8174.98T:grain128aeadv2
75.8875.8975.90T:tinyjambu192v2
82.9582.9782.99T:tinyjambu256v2
90.8790.9190.96T:isapk128av20
118.53118.81119.02T:isapk128v20
163.66164.19165.90romulusn
188.37191.14192.95T:isapxv20
242.45243.59247.66romulusm
266.82270.18270.51T:elephant200v2
476.93477.16479.49T!!!romulust
11883.7811886.8111888.35T:elephant160v2
11945.7011945.9411946.16T:elephant176v2
12927.7012927.9912928.22aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
9.579.579.57ascon128av12
13.8113.8113.81ascon128v12
13.8713.8813.88ascon80pqv12
16.3016.3416.38T:aes128gcmv1
18.9018.9018.91ascon128abi32v12
19.3519.3819.54T:aes256gcmv1
21.3421.3621.37T:xoodyakround3
28.0628.0628.07ascon128bi32v12
29.8729.8729.88T:isapa128v20
34.2734.6634.78T:schwaemm256128v2
38.5538.5738.57T:isapa128av20
43.6343.6443.64T:giftcofb128v1
44.5844.8845.64T:schwaemm192192v2
47.1347.1747.24T:schwaemm128128v2
47.8348.1048.17T:schwaemm256256v2
65.1865.1965.20T:tinyjambu128v2
72.4172.4372.45T:isapk128av20
73.3773.4173.65T:romulusn
74.7974.8174.84T:grain128aeadv2
75.8975.8975.90T:tinyjambu192v2
82.9582.9682.99T:tinyjambu256v2
91.0091.0391.23T:isapk128v20
138.62142.30143.37T:isapxv20
163.38164.03165.92romulusn
232.05232.44233.62T!!!romulust
242.44243.60247.68romulusm
266.93270.18270.40T:elephant200v2
625.46625.77626.09aes256gcmv1
11883.7611886.7911888.55T:elephant160v2
11945.7811946.0411946.29T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
7.247.277.33T:aes256gcmv1
7.227.287.32T:aes128gcmv1
9.559.579.58ascon128av12
13.3713.3813.38ascon128v12
13.7413.7513.75ascon80pqv12
14.0114.0314.05T:xoodyakround3
18.6018.6318.65ascon128abi32v12
27.4927.5027.50ascon128bi32v12
30.1230.1330.14T:isapa128v20
33.5434.2634.35T:schwaemm256128v2
38.4938.5038.52T:isapa128av20
43.6843.7143.73T:giftcofb128v1
43.0743.8144.47T:schwaemm192192v2
46.2446.2646.32T:schwaemm128128v2
47.1147.3347.46T:schwaemm256256v2
50.3650.3850.40T:tinyjambu128v2
54.1554.1654.18T:tinyjambu192v2
55.8455.8455.87T:tinyjambu256v2
62.9763.5263.59T:romulusn
72.3672.4272.47T:isapk128av20
74.4874.5274.53T:grain128aeadv2
91.1191.1791.22T:isapk128v20
137.56142.61145.21T:isapxv20
159.03159.41163.66romulusn
158.25160.41162.05romulusm
177.91180.03180.17T:elephant200v2
235.81235.89236.00T!!!romulust
624.55625.24625.37aes256gcmv1
7903.047903.247903.74T:elephant176v2
7922.677923.807925.68T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
7.247.287.30T:aes128gcmv1
7.247.297.32T:aes256gcmv1
9.379.399.39ascon128av12
13.7413.7513.76ascon128v12
13.8713.8713.88ascon80pqv12
14.0014.0114.02T:xoodyakround3
18.5418.5718.58ascon128abi32v12
27.5027.5027.50ascon128bi32v12
30.1230.1330.15T:isapa128v20
33.5433.8534.36T:schwaemm256128v2
38.4838.5038.52T:isapa128av20
43.7243.7443.76T:giftcofb128v1
43.8843.9344.32T:schwaemm192192v2
46.2446.2646.26T:schwaemm128128v2
47.1147.3847.73T:schwaemm256256v2
50.3750.3850.39T:tinyjambu128v2
54.1654.1654.17T:tinyjambu192v2
55.8555.8555.87T:tinyjambu256v2
63.0263.6363.67T:romulusn
72.3872.4272.68T:isapk128av20
74.5274.5374.54T:grain128aeadv2
91.0991.1991.21T:isapk128v20
137.63142.72145.39T:isapxv20
158.91159.28163.64romulusn
158.41159.50162.63romulusm
177.82180.02180.17T:elephant200v2
231.98232.13234.28T!!!romulust
625.50625.94626.20aes256gcmv1
7902.917903.317903.90T:elephant176v2
7923.827925.377925.96T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
7.257.287.30T:aes128gcmv1
7.277.287.30T:aes256gcmv1
9.399.399.39ascon128av12
13.7513.7513.77ascon128v12
13.8713.8813.88ascon80pqv12
13.9914.0114.03T:xoodyakround3
18.5718.5718.58ascon128abi32v12
27.5027.5027.50ascon128bi32v12
30.1230.1230.14T:isapa128v20
33.5534.2734.41T:schwaemm256128v2
38.4738.5038.53T:isapa128av20
43.7143.7143.74T:giftcofb128v1
43.6943.9344.46T:schwaemm192192v2
46.2446.2546.26T:schwaemm128128v2
47.1147.3849.56T:schwaemm256256v2
50.3650.3850.39T:tinyjambu128v2
54.1654.1654.18T:tinyjambu192v2
55.8455.8655.87T:tinyjambu256v2
63.0063.4863.67T:romulusn
72.3872.4272.47T:isapk128av20
74.5274.5374.53T:grain128aeadv2
91.0791.1591.22T:isapk128v20
137.62142.72145.38T:isapxv20
158.90159.27163.64romulusn
158.70159.49162.63romulusm
177.86180.02180.14T:elephant200v2
232.08232.47234.20T!!!romulust
625.40625.96626.21aes256gcmv1
7902.837903.127903.67T:elephant176v2
7922.557924.237925.74T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
9.979.979.98ascon128av12
13.8413.8413.85ascon128v12
14.1514.1514.15ascon80pqv12
17.2317.2517.28T:aes128gcmv1
19.3319.3319.35ascon128abi32v12
20.4020.4220.64T:aes256gcmv1
21.7921.7923.03T:xoodyakround3
28.0028.0028.01ascon128bi32v12
34.7835.2435.50T:schwaemm256128v2
44.2544.2544.26T:giftcofb128v1
44.6344.9045.20T:schwaemm192192v2
47.2847.2847.30T:schwaemm128128v2
49.0049.0149.26T:schwaemm256256v2
52.2652.2652.28T:isapa128av20
65.4665.4665.48T:isapa128v20
65.7165.7165.72T:tinyjambu128v2
74.6974.7575.41T:romulusn
75.4475.4475.44T:grain128aeadv2
76.3576.3576.37T:tinyjambu192v2
83.4683.4683.49T:tinyjambu256v2
106.62106.64106.67T:isapk128av20
165.79165.88167.06romulusn
212.36212.48212.71T:isapk128v20
244.30246.22247.70romulusm
272.43275.68275.76T:elephant200v2
306.81308.74309.47T:isapxv20
489.75491.11492.43T!!!romulust
12018.0212021.6512022.02T:elephant160v2
12036.8612036.9312037.03T:elephant176v2
13186.3513186.6313189.12aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
9.789.789.78ascon128av12
14.0314.0314.04ascon128v12
14.0914.0914.09ascon80pqv12
17.2317.2617.28T:aes128gcmv1
19.3219.3219.34ascon128abi32v12
20.3820.4220.44T:aes256gcmv1
21.6321.6321.64T:xoodyakround3
28.5028.5028.50ascon128bi32v12
35.4535.5235.72T:schwaemm256128v2
44.1244.1244.15T:giftcofb128v1
45.6045.8146.16T:schwaemm192192v2
47.7247.7347.74T:schwaemm128128v2
49.3049.4049.42T:schwaemm256256v2
52.2752.2752.29T:isapa128av20
65.4965.5065.68T:isapa128v20
65.7165.7265.72T:tinyjambu128v2
74.3874.4174.43T:romulusn
75.2175.2175.23T:grain128aeadv2
76.4976.4976.50T:tinyjambu192v2
83.6183.6283.64T:tinyjambu256v2
106.65106.67106.70T:isapk128av20
165.82166.04167.15romulusn
212.40212.50212.62T:isapk128v20
245.44246.21250.00romulusm
272.60275.66275.77T:elephant200v2
306.68308.49311.38T:isapxv20
483.27484.68487.89T!!!romulust
12021.1412021.8312022.09T:elephant160v2
12036.6312036.8012036.87T:elephant176v2
13187.3513187.5313194.31aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
9.789.789.78ascon128av12
14.0314.0314.03ascon128v12
14.0914.0914.09ascon80pqv12
17.2317.2617.29T:aes128gcmv1
19.3219.3219.33ascon128abi32v12
20.4120.4220.42T:aes256gcmv1
21.6821.6821.71T:xoodyakround3
28.5028.5028.51ascon128bi32v12
35.4435.5235.59T:schwaemm256128v2
40.5740.5840.59T:isapa128v20
40.6640.6740.68T:isapa128av20
44.1244.1244.12T:giftcofb128v1
45.5445.8446.51T:schwaemm192192v2
47.7047.7147.72T:schwaemm128128v2
49.2549.3351.37T:schwaemm256256v2
65.7065.7265.72T:tinyjambu128v2
74.3574.3974.61T:romulusn
75.2175.2175.22T:grain128aeadv2
76.4976.4976.53T:tinyjambu192v2
82.8882.8882.89T:isapk128av20
83.6183.6283.63T:tinyjambu256v2
141.42141.43141.55T:isapk128v20
165.82166.14167.15romulusn
199.78202.64203.14T:isapxv20
238.21238.82240.74T!!!romulust
245.35246.22250.00romulusm
272.68275.66275.74T:elephant200v2
885.17885.40885.49aes256gcmv1
12018.0712021.0612021.87T:elephant160v2
12036.7512036.8612036.95T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
14.8214.8515.22ascon128av12
18.4118.4119.13ascon128v12
18.6918.6919.57ascon80pqv12
28.8028.8029.71ascon128abi32v12
33.7033.7033.94T:xoodyakround3
37.7437.7438.31ascon128bi32v12
38.2338.5339.25T:aes128gcmv1
43.6643.9644.52T:aes256gcmv1
54.4554.4554.82T:giftcofb128v1
55.5556.5757.12T:schwaemm256128v2
60.3660.3860.68T:schwaemm128128v2
72.0872.2772.90T:schwaemm192192v2
77.2177.3577.43T:schwaemm256256v2
77.6277.7778.12T:tinyjambu128v2
84.0585.7985.81T:grain128aeadv2
89.9990.2190.35T:tinyjambu192v2
96.3096.6297.27T:romulusn
97.7997.8398.29T:tinyjambu256v2
138.62138.69139.18T:isapa128av20
207.00208.05208.83romulusn
287.45289.11290.25romulusm
383.52385.90386.41T:elephant200v2
449.70450.20450.81T:isapk128av20
548.66548.66549.48T:isapa128v20
662.30666.16666.16T!!!romulust
2340.472340.762345.38T:isapk128v20
2968.452971.912992.25T:isapxv20
14986.9514991.5914994.30T:elephant176v2
16095.6516096.5216099.77T:elephant160v2
19156.3219157.1319157.94aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
14.5814.5915.76ascon128av12
18.6918.6919.41ascon128v12
18.7418.7619.31ascon80pqv12
28.9828.9829.52ascon128abi32v12
33.5533.6033.69T:xoodyakround3
38.3138.3139.02ascon128bi32v12
38.1438.4839.48T:aes128gcmv1
43.3143.7744.41T:aes256gcmv1
54.7954.7955.43T:giftcofb128v1
55.8456.7657.33T:schwaemm256128v2
60.7360.7760.99T:schwaemm128128v2
72.3172.7073.70T:schwaemm192192v2
77.4477.6377.72T:schwaemm256256v2
77.8277.8377.83T:tinyjambu128v2
83.7783.8484.09T:grain128aeadv2
90.1190.1290.38T:tinyjambu192v2
96.3896.7997.31T:romulusn
98.4898.5798.66T:tinyjambu256v2
138.84138.92139.12T:isapa128av20
206.86207.98208.80romulusn
306.52306.82310.76romulusm
383.44386.16386.45T:elephant200v2
450.35451.17451.26T:isapk128av20
549.28549.54550.48T:isapa128v20
657.12658.16658.27T!!!romulust
2341.092342.182342.45T:isapk128v20
2969.622976.672994.41T:isapxv20
14987.6214992.1614992.87T:elephant176v2
16095.2216097.5316099.80T:elephant160v2
19158.2119159.6719167.59aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
14.5714.5814.59ascon128av12
18.6818.6818.82ascon128v12
18.7418.7518.77ascon80pqv12
28.9728.9828.99ascon128abi32v12
33.6533.7333.91T:xoodyakround3
38.3038.3038.37ascon128bi32v12
38.2338.4838.49T:aes128gcmv1
43.6243.7243.80T:aes256gcmv1
54.7854.7954.79T:giftcofb128v1
55.6656.7657.34T:schwaemm256128v2
60.7360.7660.77T:schwaemm128128v2
72.1172.7073.69T:schwaemm192192v2
77.4577.5080.73T:schwaemm256256v2
77.7877.8277.83T:tinyjambu128v2
83.7783.7783.85T:grain128aeadv2
88.8588.8989.16T:isapa128av20
90.1190.1290.24T:tinyjambu192v2
95.8896.0596.70T:romulusn
98.5798.6698.69T:tinyjambu256v2
206.87207.53208.73romulusn
286.41286.49286.66T:isapa128v20
305.89306.75310.87romulusm
308.84308.94309.08T:isapk128av20
385.84386.33386.45T:elephant200v2
392.33392.48392.80T!!!romulust
1281.521282.051282.30T:isapk128v20
1541.141565.701589.40T:isapxv20
6854.276857.386861.47aes256gcmv1
14987.1214992.1514993.09T:elephant176v2
16094.9016095.8516099.69T:elephant160v2