VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; K10 32nm (300f10); 2011 AMD A8-3850; 4 x 2900MHz; hydra5, supercop-20240808

[Page version: 20240828 00:46:12]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Implementation notes

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
9.309.329.33ascon128av12
13.8713.8813.88ascon128v12
13.9113.9213.93ascon80pqv12
18.5518.5718.58ascon128abi32v12
26.4126.4626.53T:xoodyakround3
27.7427.7527.76ascon128bi32v12
31.6631.7931.84T:schwaemm256128v2
38.2738.3838.47T:aes128gcmv1
39.20?40.20?49.66?T:aes256gcmv1
42.0442.0942.54T:schwaemm192192v2
44.8244.8444.87T:giftcofb128v1
46.1346.1846.19T:schwaemm256256v2
46.9247.0047.21T:schwaemm128128v2
53.8453.8853.90T:isapa128v20
57.8457.8657.88T:isapa128av20
73.9473.9473.94T:grain128aeadv2
81.8481.8581.87T:tinyjambu128v2
85.4185.6585.68T:romulusn
98.4298.4698.47T:tinyjambu192v2
105.36105.45105.48T:isapk128av20
113.20113.22113.24T:tinyjambu256v2
140.15140.23140.75T:isapk128v20
178.68178.75179.07romulusn
242.31242.41242.50T:elephant200v2
298.10302.38308.10T:isapxv20
328.38329.62336.99romulusm
704.43709.23709.82T!!!romulust
14420.3014420.8714421.22T:elephant160v2
15230.1815230.5015230.82T:elephant176v2
24459.3124490.9824492.42aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
9.419.459.45ascon128av12
13.8613.8813.90ascon80pqv12
13.9914.0014.01ascon128v12
18.6218.6518.65ascon128abi32v12
26.1026.1326.25T:xoodyakround3
28.5028.5028.51ascon128bi32v12
31.7731.7831.79T:schwaemm256128v2
38.3638.4038.61T:aes128gcmv1
39.7140.0340.28T:aes256gcmv1
42.3142.5543.01T:schwaemm192192v2
44.5544.5644.57T:giftcofb128v1
46.0546.1046.11T:schwaemm256256v2
46.8046.8147.02T:schwaemm128128v2
53.8653.8853.90T:isapa128v20
57.8557.8657.88T:isapa128av20
76.5876.5876.58T:grain128aeadv2
81.5081.5181.51T:tinyjambu128v2
85.2685.2885.29T:romulusn
98.9798.9898.98T:tinyjambu192v2
105.42105.44105.86T:isapk128av20
113.22113.23113.25T:tinyjambu256v2
140.20140.24140.70T:isapk128v20
178.55178.78179.01romulusn
242.32242.36242.41T:elephant200v2
299.57303.88309.50T:isapxv20
329.49330.44338.15romulusm
703.85706.25711.04T!!!romulust
14420.4014420.9014421.18T:elephant160v2
15230.2815230.6215230.86T:elephant176v2
24470.1824483.6424487.65aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
9.459.459.45ascon128av12
13.8813.8813.91ascon80pqv12
14.0014.0014.00ascon128v12
18.6518.6518.65ascon128abi32v12
26.1826.2526.33T:xoodyakround3
26.8426.8826.91T:isapa128v20
28.5028.5028.50ascon128bi32v12
31.7731.7831.80T:schwaemm256128v2
38.2538.2638.27T:isapa128av20
38.3338.3938.43T:aes128gcmv1
39.7740.0140.54T:aes256gcmv1
42.3142.5443.01T:schwaemm192192v2
44.5544.5644.57T:giftcofb128v1
46.0546.1046.11T:schwaemm256256v2
46.8046.8147.02T:schwaemm128128v2
70.0870.1270.16T:isapk128av20
76.5876.5876.60T:grain128aeadv2
81.5081.5081.52T:tinyjambu128v2
85.2785.2885.32T:romulusn
87.5287.6187.93T:isapk128v20
98.9798.9898.99T:tinyjambu192v2
113.22113.23113.25T:tinyjambu256v2
176.02176.87182.00T:isapxv20
178.55178.80178.98romulusn
224.87225.37226.98T!!!romulust
242.31242.34242.39T:elephant200v2
329.50330.57338.17romulusm
623.89625.85626.84aes256gcmv1
14420.6314420.8014421.31T:elephant160v2
15230.3015230.6015230.90T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
9.119.149.15ascon128av12
13.5513.5613.57ascon128v12
13.7013.7113.72ascon80pqv12
18.5018.5218.54ascon128abi32v12
20.4020.4520.47T:xoodyakround3
22.8022.8622.93T:aes128gcmv1
23.8223.8623.97T:aes256gcmv1
27.3627.3727.39ascon128bi32v12
31.5631.6131.67T:schwaemm256128v2
40.2340.2540.27T:isapa128v20
41.9742.0042.45T:schwaemm192192v2
44.8344.8444.85T:giftcofb128v1
45.9646.0246.05T:schwaemm256256v2
46.7346.9447.22T:schwaemm128128v2
48.0548.0748.08T:isapa128av20
66.7366.7466.76T:tinyjambu128v2
73.8273.8673.86T:grain128aeadv2
73.9374.0674.07T:romulusn
76.6676.6976.72T:tinyjambu192v2
84.4484.4684.49T:tinyjambu256v2
87.7287.7887.81T:isapk128av20
113.84113.88114.14T:isapk128v20
163.83164.59165.18romulusn
181.50181.56181.70T:elephant200v2
234.09238.36239.13T:isapxv20
239.41240.35246.86romulusm
465.43466.86468.02T!!!romulust
10814.9810815.1010815.32T:elephant160v2
11378.7411378.9411379.20T:elephant176v2
12549.0012556.8812561.42aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
9.169.209.21ascon128av12
13.8113.8113.82ascon128v12
13.8613.8813.89ascon80pqv12
18.5318.5618.56ascon128abi32v12
20.1220.1620.20T:xoodyakround3
22.8222.9222.99T:aes128gcmv1
23.6023.8824.05T:aes256gcmv1
27.8127.8127.81ascon128bi32v12
31.6131.6331.63T:schwaemm256128v2
40.2440.2540.26T:isapa128v20
42.2042.2442.68T:schwaemm192192v2
44.6844.7044.71T:giftcofb128v1
45.9545.9645.98T:schwaemm256256v2
46.7746.7946.86T:schwaemm128128v2
48.0548.0648.08T:isapa128av20
66.5466.5666.59T:tinyjambu128v2
73.8873.9174.30T:romulusn
75.1275.1775.18T:grain128aeadv2
76.9476.9576.96T:tinyjambu192v2
84.4584.4784.47T:tinyjambu256v2
87.7487.7987.80T:isapk128av20
113.88113.89114.07T:isapk128v20
163.80164.50165.24romulusn
181.50181.50181.62T:elephant200v2
234.84239.03239.88T:isapxv20
239.30241.20247.65romulusm
464.23465.52470.41T!!!romulust
10814.9510815.1810815.39T:elephant160v2
11378.6311378.9311379.11T:elephant176v2
12539.5912548.1412558.65aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
9.209.209.20ascon128av12
13.8113.8113.81ascon128v12
13.8813.8813.89ascon80pqv12
18.5518.5618.56ascon128abi32v12
20.1520.1820.21T:xoodyakround3
22.8422.8522.93T:aes128gcmv1
23.5723.8123.98T:aes256gcmv1
26.7426.7526.77T:isapa128v20
27.8127.8127.82ascon128bi32v12
31.6031.6231.63T:schwaemm256128v2
38.2638.2638.27T:isapa128av20
42.2142.2542.68T:schwaemm192192v2
44.6944.7044.71T:giftcofb128v1
45.9245.9746.00T:schwaemm256256v2
46.7746.8546.86T:schwaemm128128v2
66.5366.5666.60T:tinyjambu128v2
70.1170.1270.28T:isapk128av20
73.8973.9174.30T:romulusn
75.1775.1775.29T:grain128aeadv2
76.9576.9576.97T:tinyjambu192v2
84.4584.4784.47T:tinyjambu256v2
87.5387.5687.72T:isapk128v20
163.96164.50165.24romulusn
174.92176.13178.65T:isapxv20
181.50181.51181.61T:elephant200v2
224.75225.09227.58T!!!romulust
239.30241.00247.66romulusm
624.45642.18642.45aes256gcmv1
10814.9810815.2610815.40T:elephant160v2
11378.6911378.8511379.09T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
7.187.267.33T:aes128gcmv1
7.457.958.08T:aes256gcmv1
8.928.958.96ascon128av12
13.2413.2513.26ascon128v12
13.4913.5013.51ascon80pqv12
14.0314.0914.17T:xoodyakround3
18.4318.4618.47ascon128abi32v12
26.6126.6226.63T:isapa128v20
26.9927.0027.01ascon128bi32v12
31.4531.4731.51T:schwaemm256128v2
38.2638.2738.27T:isapa128av20
41.8941.9442.34T:schwaemm192192v2
44.8044.8344.86T:giftcofb128v1
45.7545.7645.87T:schwaemm256256v2
46.4546.9647.24T:schwaemm128128v2
51.5751.6251.69T:tinyjambu128v2
54.9454.9454.95T:tinyjambu192v2
55.6755.6855.70T:tinyjambu256v2
62.4462.4662.50T:romulusn
70.1070.1270.15T:isapk128av20
73.6973.7773.77T:grain128aeadv2
87.5287.5587.59T:isapk128v20
121.34121.39121.40T:elephant200v2
149.46150.46158.36romulusm
148.53150.69151.34romulusn
174.61175.11176.84T:isapxv20
225.30225.66226.28T!!!romulust
624.33624.91625.58aes256gcmv1
7209.577209.847210.38T:elephant160v2
7527.837528.207528.67T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
7.227.247.32T:aes128gcmv1
7.347.768.01T:aes256gcmv1
8.938.958.95ascon128av12
13.6213.6213.63ascon128v12
13.8713.8713.88ascon80pqv12
14.0314.1414.17T:xoodyakround3
18.4418.4618.46ascon128abi32v12
26.6026.6226.65T:isapa128v20
27.1327.1327.13ascon128bi32v12
31.4531.4631.51T:schwaemm256128v2
38.2638.2638.27T:isapa128av20
41.9441.9742.34T:schwaemm192192v2
44.8244.8244.83T:giftcofb128v1
45.7545.7645.78T:schwaemm256256v2
46.6946.7546.77T:schwaemm128128v2
51.5651.6351.71T:tinyjambu128v2
54.9454.9454.95T:tinyjambu192v2
55.6855.6955.70T:tinyjambu256v2
62.5162.5562.56T:romulusn
70.1070.1270.14T:isapk128av20
73.6973.7773.77T:grain128aeadv2
87.4887.5187.60T:isapk128v20
121.38121.39121.40T:elephant200v2
148.54150.69151.35romulusn
149.39150.80158.84romulusm
174.35175.90176.24T:isapxv20
224.69225.04227.55T!!!romulust
624.73641.03641.69aes256gcmv1
7209.487210.127210.32T:elephant160v2
7527.937528.217528.70T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
7.297.317.34T:aes128gcmv1
7.397.768.20T:aes256gcmv1
8.958.958.95ascon128av12
13.6213.6213.63ascon128v12
13.8713.8813.88ascon80pqv12
14.0014.1014.18T:xoodyakround3
18.4618.4618.46ascon128abi32v12
26.6026.6326.65T:isapa128v20
27.1227.1327.13ascon128bi32v12
31.4531.4631.51T:schwaemm256128v2
38.2538.2638.27T:isapa128av20
41.9141.9742.34T:schwaemm192192v2
44.8244.8244.83T:giftcofb128v1
45.7545.7745.88T:schwaemm256256v2
46.6946.7546.77T:schwaemm128128v2
51.5651.6351.70T:tinyjambu128v2
54.9454.9454.95T:tinyjambu192v2
55.6855.6955.72T:tinyjambu256v2
62.5362.5562.56T:romulusn
70.1070.1370.15T:isapk128av20
73.7773.7773.77T:grain128aeadv2
87.4787.5487.58T:isapk128v20
121.38121.39121.40T:elephant200v2
148.22150.69151.35romulusn
149.74150.82158.85romulusm
174.46175.90176.25T:isapxv20
224.66225.09226.59T!!!romulust
624.36625.19642.36aes256gcmv1
7209.557209.757210.26T:elephant160v2
7527.737528.227528.87T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
9.359.359.37ascon128av12
13.7713.7713.78ascon128v12
13.9213.9213.93ascon80pqv12
18.9318.9318.94ascon128abi32v12
20.4720.5420.63T:xoodyakround3
25.0725.1225.20T:aes128gcmv1
27.4927.5327.60T:aes256gcmv1
27.7927.7927.81ascon128bi32v12
32.4932.5332.58T:schwaemm256128v2
42.9542.9643.37T:schwaemm192192v2
45.3145.3145.31T:giftcofb128v1
47.1947.2347.25T:schwaemm256256v2
47.3547.5347.78T:schwaemm128128v2
51.8251.8251.83T:isapa128av20
58.7558.7558.79T:isapa128v20
67.2467.2567.27T:tinyjambu128v2
74.2774.2774.28T:grain128aeadv2
74.8975.0075.18T:romulusn
77.2877.3077.33T:tinyjambu192v2
85.1185.1185.14T:tinyjambu256v2
103.44103.44103.46T:isapk128av20
165.82166.65166.79romulusn
185.34185.36185.49T:elephant200v2
204.18204.20204.42T:isapk128v20
241.35241.67248.84romulusm
385.57388.56392.76T:isapxv20
471.79474.22475.42T!!!romulust
10937.4110937.6010937.71T:elephant160v2
11465.3811465.5711465.70T:elephant176v2
12808.2112811.0312823.57aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
9.419.419.42ascon128av12
14.0214.0214.03ascon128v12
14.0914.0914.10ascon80pqv12
18.9618.9618.97ascon128abi32v12
20.3620.3920.44T:xoodyakround3
25.0425.0725.09T:aes128gcmv1
28.2428.2428.24ascon128bi32v12
28.8528.9629.16T:aes256gcmv1
32.5332.5332.55T:schwaemm256128v2
43.1443.1643.54T:schwaemm192192v2
45.1845.1845.19T:giftcofb128v1
47.1447.1447.16T:schwaemm256256v2
47.3747.3747.43T:schwaemm128128v2
51.9551.9651.98T:isapa128av20
58.7658.7658.77T:isapa128v20
67.0767.0867.08T:tinyjambu128v2
74.8574.8675.21T:romulusn
75.5975.5975.60T:grain128aeadv2
77.5777.5777.57T:tinyjambu192v2
85.1085.1085.11T:tinyjambu256v2
103.49103.50103.50T:isapk128av20
165.90166.58166.81romulusn
185.21185.30185.43T:elephant200v2
204.21204.22204.56T:isapk128v20
242.59242.94250.31romulusm
387.13390.18394.48T:isapxv20
471.45471.69475.63T!!!romulust
10937.5410937.6510937.83T:elephant160v2
11465.4811465.5411465.71T:elephant176v2
12805.9912809.9812810.48aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
9.419.419.41ascon128av12
14.0214.0214.02ascon128v12
14.0914.0914.09ascon80pqv12
18.9618.9618.96ascon128abi32v12
20.4220.4320.46T:xoodyakround3
25.0525.0625.10T:aes128gcmv1
28.2428.2428.24ascon128bi32v12
32.5332.5332.55T:schwaemm256128v2
36.1536.1636.20T:isapa128v20
36.9737.0937.46T:aes256gcmv1
40.4940.4940.49T:isapa128av20
43.1643.1643.54T:schwaemm192192v2
45.1845.1845.19T:giftcofb128v1
47.1347.1447.17T:schwaemm256256v2
47.3747.3847.43T:schwaemm128128v2
67.0467.0867.08T:tinyjambu128v2
74.8475.0775.21T:romulusn
75.5975.5975.59T:grain128aeadv2
77.5777.5777.61T:tinyjambu192v2
80.5080.5180.52T:isapk128av20
85.1085.1085.11T:tinyjambu256v2
136.28136.29136.30T:isapk128v20
165.40166.58166.81romulusn
185.21185.32185.43T:elephant200v2
231.09231.18233.07T!!!romulust
242.65242.69250.28romulusm
253.05253.74258.58T:isapxv20
877.14877.29877.48aes256gcmv1
10937.3610937.5510937.80T:elephant160v2
11465.2811465.4511465.74T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
14.1014.1214.60ascon128av12
18.1818.2118.96ascon128v12
18.4518.4919.20ascon80pqv12
28.0528.2328.95ascon128abi32v12
30.9131.0931.41T:xoodyakround3
37.1337.1337.77ascon128bi32v12
53.2753.2753.55T:schwaemm256128v2
55.8055.8356.18T:giftcofb128v1
61.1561.1661.48T:schwaemm128128v2
69.7370.0370.41T:schwaemm192192v2
74.7874.7975.38T:schwaemm256256v2
77.0578.1778.53T:aes128gcmv1
78.5979.0579.16T:tinyjambu128v2
83.5983.6983.95T:grain128aeadv2
90.9391.2491.61T:tinyjambu192v2
96.6296.7396.77T:romulusn
100.23100.34100.71T:tinyjambu256v2
110.69112.88118.06T:aes256gcmv1
138.12138.23138.41T:isapa128av20
204.66204.68204.82romulusn
262.14262.42262.58T:elephant200v2
280.30281.15289.48romulusm
445.99446.08446.53T:isapk128av20
483.88483.89484.93T:isapa128v20
636.84637.34639.52T!!!romulust
2257.142257.762258.26T:isapk128v20
3820.713821.443822.12T:isapxv20
14275.4614279.7314281.37T:elephant176v2
14650.3214655.7314657.61T:elephant160v2
18584.7818599.5918607.05aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
14.1414.1514.91ascon128av12
18.6318.6518.97ascon128v12
18.7718.7719.65ascon80pqv12
28.1228.1229.10ascon128abi32v12
30.6830.8431.12T:xoodyakround3
37.8437.8738.23ascon128bi32v12
53.2753.2753.30T:schwaemm256128v2
56.1056.2156.73T:giftcofb128v1
60.8360.9561.05T:schwaemm128128v2
69.1269.5970.18T:schwaemm192192v2
74.7174.7774.93T:schwaemm256256v2
75.2175.6276.51T:aes128gcmv1
78.2278.9178.98T:tinyjambu128v2
84.8284.8485.18T:grain128aeadv2
91.6591.8292.07T:tinyjambu192v2
96.6796.7597.13T:romulusn
99.6999.94100.34T:tinyjambu256v2
141.45141.45141.60T:isapa128av20
142.53143.51145.42T:aes256gcmv1
204.51205.37205.48romulusn
261.84262.19262.38T:elephant200v2
297.05297.62308.15romulusm
447.09447.14447.34T:isapk128av20
483.93484.02484.72T:isapa128v20
634.31636.20641.93T!!!romulust
2258.042258.342258.54T:isapk128v20
3843.733844.353846.96T:isapxv20
14275.9214280.3714281.91T:elephant176v2
14650.1614655.9114657.33T:elephant160v2
18581.5218583.2318633.26aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
14.1414.1514.15ascon128av12
18.6218.6318.79ascon128v12
18.7718.7718.79ascon80pqv12
28.1228.1228.27ascon128abi32v12
30.8030.9731.30T:xoodyakround3
37.8337.8437.86ascon128bi32v12
53.2753.2753.30T:schwaemm256128v2
56.0756.0956.24T:giftcofb128v1
60.8060.8561.04T:schwaemm128128v2
69.0969.2469.72T:schwaemm192192v2
74.7274.7774.82T:schwaemm256256v2
76.1176.3577.09T:aes128gcmv1
77.9078.8978.96T:tinyjambu128v2
84.8284.8384.84T:grain128aeadv2
91.6491.6591.77T:isapa128av20
91.6491.7491.81T:tinyjambu192v2
96.3296.4496.45T:romulusn
99.6699.69100.34T:tinyjambu256v2
204.33205.32205.44romulusn
252.20252.40252.95T:isapa128v20
261.90262.19262.56T:elephant200v2
296.34297.36307.96romulusm
304.62304.73304.88T:isapk128av20
333.65338.66341.02T:aes256gcmv1
378.89380.21382.40T!!!romulust
1238.411238.611238.97T:isapk128v20
1999.482003.812016.28T:isapxv20
6662.416667.786674.73aes256gcmv1
14275.5514281.6214283.12T:elephant176v2
14650.0814654.7914656.66T:elephant160v2