VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Sandy Bridge+AES (206a7); 2011 Intel Xeon E3-1225; 4 x 3100MHz; hydra7, supercop-20240625

[Page version: 20240726 23:46:23]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Implementation notes

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
2.492.592.69T:aes128gcmv1
2.68?2.90?3.08?T:aes256gcmv1
12.2512.2812.30ascon128av12
18.1418.1818.20ascon128v12
18.4818.5018.54ascon80pqv12
22.3222.3522.37ascon128abi32v12
29.1929.2129.22T:schwaemm256128v2
30.0530.1230.57T:grain128aeadv2
31.9231.9431.97ascon128bi32v12
34.5234.5834.97T:schwaemm256256v2
38.9339.0339.16T:schwaemm192192v2
46.2846.5246.59T:xoodyakround3
48.3348.4148.48T:giftcofb128v1
48.3148.5048.62T:schwaemm128128v2
65.7565.8465.95T:isapa128av20
71.0071.0771.15T:romulusn
74.1674.2474.37T:isapa128v20
74.8774.8974.90T:tinyjambu128v2
87.1987.2387.27T:tinyjambu192v2
95.3195.3595.47T:tinyjambu256v2
107.83108.05108.34T:isapk128av20
143.50143.90144.19T:isapk128v20
213.56213.71214.06T:elephant200v2
415.02415.44415.82aes256gcmv1
723.26723.56723.74T:romulusm
1437.781438.001438.34T:romulust
1491.601493.631496.36T:isapxv20
13061.7313062.7113063.25T:elephant176v2
13245.6613246.4113248.11T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
2.462.582.72T:aes128gcmv1
2.812.943.01T:aes256gcmv1
12.1712.1912.21ascon128av12
17.9818.0118.06ascon80pqv12
18.1718.1918.21ascon128v12
22.3822.4022.41ascon128abi32v12
29.2829.3329.38T:schwaemm256128v2
31.7631.8031.82ascon128bi32v12
32.9533.0433.09T:grain128aeadv2
34.5534.6135.11T:schwaemm256256v2
38.6538.6838.72T:schwaemm192192v2
45.7245.7945.87T:xoodyakround3
48.4748.5148.56T:giftcofb128v1
48.7348.8048.91T:schwaemm128128v2
65.7165.8065.93T:isapa128av20
70.6470.7170.75T:romulusn
74.2174.2674.31T:isapa128v20
74.8074.8274.87T:tinyjambu128v2
87.1287.1587.27T:tinyjambu192v2
95.1595.1895.21T:tinyjambu256v2
108.01108.15110.10T:isapk128av20
143.30143.61144.33T:isapk128v20
213.57213.92214.07T:elephant200v2
414.31414.96415.29aes256gcmv1
723.01723.13723.89T:romulusm
1436.981438.001438.39T:romulust
1490.841494.741500.21T:isapxv20
13062.2213062.7713063.32T:elephant176v2
13244.8413246.3213248.71T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
2.462.562.73T:aes128gcmv1
2.78?2.87?3.15?T:aes256gcmv1
12.1712.2112.23ascon128av12
17.9718.0018.03ascon80pqv12
18.1618.1818.19ascon128v12
22.3822.4022.41ascon128abi32v12
29.2829.3129.39T:schwaemm256128v2
31.7731.7931.82ascon128bi32v12
32.9733.0133.05T:grain128aeadv2
34.5334.6235.10T:schwaemm256256v2
37.2137.2637.31T:isapa128v20
38.6538.6838.73T:schwaemm192192v2
43.6343.6843.74T:isapa128av20
45.7745.8745.94T:xoodyakround3
48.4548.5248.62T:giftcofb128v1
48.7148.8149.01T:schwaemm128128v2
70.6570.7070.76T:romulusn
71.7171.8471.99T:isapk128av20
74.8074.8374.84T:tinyjambu128v2
87.1787.1987.22T:tinyjambu192v2
89.0689.2889.39T:isapk128v20
95.1595.1695.20T:tinyjambu256v2
213.53213.67213.85T:elephant200v2
404.08404.44404.87aes256gcmv1
477.82478.03478.22T:romulust
722.91723.48724.19T:romulusm
915.18923.17926.35T:isapxv20
13062.0213062.5713063.42T:elephant176v2
13244.7013246.1713247.30T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
2.142.202.23T:aes128gcmv1
2.282.372.42T:aes256gcmv1
12.1312.1412.17ascon128av12
18.1918.2218.23ascon80pqv12
18.2018.2518.27ascon128v12
21.7521.7721.78ascon128abi32v12
28.8528.9128.93T:schwaemm256128v2
29.9930.0630.52T:grain128aeadv2
32.0032.0232.06ascon128bi32v12
34.3234.3834.68T:schwaemm256256v2
35.7535.8135.94T:xoodyakround3
38.5938.6038.62T:schwaemm192192v2
48.1448.2048.97T:schwaemm128128v2
48.3548.3948.43T:giftcofb128v1
54.6954.7454.79T:isapa128av20
55.4255.6255.83T:isapa128v20
61.1461.1661.18T:tinyjambu128v2
63.8363.8763.91T:romulusn
68.2568.2768.28T:tinyjambu192v2
71.9771.9972.11T:tinyjambu256v2
89.8990.0690.25T:isapk128av20
116.55116.68117.05T:isapk128v20
160.83160.97161.12T:elephant200v2
409.08409.73410.22aes256gcmv1
482.59482.78482.91T:romulusm
957.22957.80957.93T:romulust
1199.921208.091211.35T:isapxv20
9758.829759.559759.93T:elephant176v2
9934.129934.889935.44T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
2.122.212.33T:aes128gcmv1
2.302.362.44T:aes256gcmv1
12.1412.1612.17ascon128av12
17.8717.8917.93ascon80pqv12
18.1118.1318.18ascon128v12
22.0322.0922.10ascon128abi32v12
28.8328.8628.89T:schwaemm256128v2
31.4631.5331.75T:grain128aeadv2
31.7131.7331.74ascon128bi32v12
34.3534.4034.80T:schwaemm256256v2
35.4635.5135.56T:xoodyakround3
38.3638.3838.42T:schwaemm192192v2
48.2748.3548.40T:schwaemm128128v2
48.3948.4148.45T:giftcofb128v1
54.7154.7354.79T:isapa128av20
55.4455.6555.88T:isapa128v20
61.1161.1361.16T:tinyjambu128v2
63.6163.6463.69T:romulusn
68.2168.2468.26T:tinyjambu192v2
71.8971.9171.93T:tinyjambu256v2
90.0290.2591.11T:isapk128av20
116.58116.71116.94T:isapk128v20
160.76160.95161.08T:elephant200v2
409.23409.74409.95aes256gcmv1
482.54482.79483.18T:romulusm
957.34957.58957.72T:romulust
1207.201209.001212.89T:isapxv20
9759.239759.949760.31T:elephant176v2
9934.089934.879935.72T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
2.132.192.24T:aes128gcmv1
2.272.342.41T:aes256gcmv1
12.1212.1412.15ascon128av12
17.8617.8717.89ascon80pqv12
18.1118.1118.14ascon128v12
22.0622.0722.09ascon128abi32v12
28.8728.9228.95T:schwaemm256128v2
31.4731.5231.73T:grain128aeadv2
31.7131.7231.74ascon128bi32v12
34.3334.3734.81T:schwaemm256256v2
35.5035.5535.58T:xoodyakround3
37.0337.1437.17T:isapa128v20
38.3738.3938.39T:schwaemm192192v2
43.6543.6843.75T:isapa128av20
48.2748.3448.40T:schwaemm128128v2
48.3848.4348.46T:giftcofb128v1
61.0961.1161.15T:tinyjambu128v2
63.6063.6263.67T:romulusn
68.2268.2568.28T:tinyjambu192v2
71.8571.9171.95T:isapk128av20
71.9071.9171.95T:tinyjambu256v2
89.2989.4089.58T:isapk128v20
160.70160.92161.11T:elephant200v2
404.70405.03405.38aes256gcmv1
477.45477.66477.77T:romulust
482.55482.70482.86T:romulusm
922.29922.71923.15T:isapxv20
9759.169759.579759.97T:elephant176v2
9934.259934.959935.72T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
1.65?1.76?1.95?T:aes256gcmv1
1.68?1.78?1.87?T:aes128gcmv1
11.9812.0112.03ascon128av12
17.8617.9017.95ascon80pqv12
18.2818.3218.37ascon128v12
21.1321.1521.19ascon128abi32v12
25.3625.4425.56T:xoodyakround3
28.5328.5428.56T:schwaemm256128v2
29.9229.9730.43T:grain128aeadv2
32.1032.1332.14ascon128bi32v12
33.9333.9834.44T:schwaemm256256v2
36.8036.8936.95T:isapa128v20
38.0538.0738.08T:schwaemm192192v2
43.6543.7143.77T:isapa128av20
47.4047.4247.44T:tinyjambu128v2
47.7847.8747.92T:schwaemm128128v2
48.2748.3548.40T:giftcofb128v1
48.6548.6848.72T:tinyjambu256v2
49.3049.3249.37T:tinyjambu192v2
56.6056.6556.75T:romulusn
71.6971.8172.04T:isapk128av20
89.1689.3189.40T:isapk128v20
108.33108.46108.72T:elephant200v2
241.97242.02242.04T:romulusm
403.85404.89405.67aes256gcmv1
477.35477.40477.48T:romulust
922.41923.41929.15T:isapxv20
6456.856457.356457.88T:elephant176v2
6623.566624.206625.18T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
1.68?1.80?1.89?T:aes128gcmv1
1.70?1.82?1.92?T:aes256gcmv1
12.1012.1212.15ascon128av12
17.7517.7917.84ascon80pqv12
18.0518.0818.11ascon128v12
21.7321.7821.81ascon128abi32v12
25.2625.3125.38T:xoodyakround3
28.4528.4728.51T:schwaemm256128v2
29.9530.0630.47T:grain128aeadv2
31.6331.6531.66ascon128bi32v12
34.1034.1434.49T:schwaemm256256v2
36.8936.9637.00T:isapa128v20
38.0738.0938.10T:schwaemm192192v2
43.6443.6843.75T:isapa128av20
47.3947.4147.44T:tinyjambu128v2
47.7747.8547.90T:schwaemm128128v2
48.2848.3248.40T:giftcofb128v1
48.6448.6648.67T:tinyjambu256v2
49.2849.3149.33T:tinyjambu192v2
56.5256.6156.67T:romulusn
71.8571.9272.04T:isapk128av20
89.1989.3189.62T:isapk128v20
108.37108.53108.76T:elephant200v2
241.94242.00242.05T:romulusm
403.87404.73404.96aes256gcmv1
477.06477.11477.45T:romulust
921.84923.34926.10T:isapxv20
6456.856457.506457.95T:elephant176v2
6623.376624.196624.76T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
1.67?1.80?1.89?T:aes256gcmv1
1.70?1.80?1.91?T:aes128gcmv1
12.0812.1012.14ascon128av12
17.7517.7717.81ascon80pqv12
18.0518.0718.11ascon128v12
21.7521.7821.83ascon128abi32v12
25.2625.3225.37T:xoodyakround3
28.4428.4728.51T:schwaemm256128v2
29.9730.0430.48T:grain128aeadv2
31.6131.6431.68ascon128bi32v12
34.1034.1434.51T:schwaemm256256v2
36.8736.9437.02T:isapa128v20
38.0838.0938.11T:schwaemm192192v2
43.6443.6943.76T:isapa128av20
47.4047.4247.43T:tinyjambu128v2
47.7847.8747.96T:schwaemm128128v2
48.3048.3548.41T:giftcofb128v1
48.6448.6648.68T:tinyjambu256v2
49.3049.3249.35T:tinyjambu192v2
56.5456.6256.67T:romulusn
71.8771.9172.02T:isapk128av20
89.2489.3589.48T:isapk128v20
108.34108.52108.57T:elephant200v2
241.70241.96242.05T:romulusm
403.60404.96405.57aes256gcmv1
477.09477.36477.44T:romulust
920.26922.11924.23T:isapxv20
6457.146457.746458.29T:elephant176v2
6623.346624.126624.59T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
3.643.663.72T:aes128gcmv1
3.853.893.93T:aes256gcmv1
12.4012.4212.45ascon128av12
18.4518.4718.50ascon80pqv12
18.4918.5118.52ascon128v12
22.2622.2822.30ascon128abi32v12
29.6829.7329.75T:schwaemm256128v2
30.5130.5430.97T:grain128aeadv2
32.5132.5132.53ascon128bi32v12
35.2435.2935.60T:schwaemm256256v2
36.1136.2636.32T:xoodyakround3
39.4239.4239.43T:schwaemm192192v2
48.7648.7949.92T:schwaemm128128v2
48.8348.8648.91T:giftcofb128v1
59.3259.3559.38T:isapa128av20
61.6261.6361.65T:tinyjambu128v2
64.7164.7564.79T:romulusn
68.7868.7968.82T:tinyjambu192v2
72.5172.5472.64T:tinyjambu256v2
81.5181.5881.80T:isapa128v20
103.84103.88104.01T:isapk128av20
164.28164.42164.55T:elephant200v2
206.60206.69207.28T:isapk128v20
411.35411.76412.29aes256gcmv1
485.20485.36485.53T:romulusm
970.05970.33970.52T:romulust
2068.092070.682070.98T:isapxv20
9833.769834.169834.91T:elephant176v2
10046.4610046.9210047.39T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
3.623.633.71T:aes128gcmv1
3.793.823.89T:aes256gcmv1
12.4012.4312.44ascon128av12
18.1118.1318.15ascon80pqv12
18.3818.3918.41ascon128v12
22.5722.5822.60ascon128abi32v12
29.6829.7129.75T:schwaemm256128v2
31.9832.0632.20T:grain128aeadv2
32.2332.2332.24ascon128bi32v12
35.2835.3135.71T:schwaemm256256v2
35.8135.8935.91T:xoodyakround3
39.2139.2339.25T:schwaemm192192v2
48.8948.9148.95T:giftcofb128v1
48.9148.9749.01T:schwaemm128128v2
59.4659.4859.54T:isapa128av20
61.5861.5961.62T:tinyjambu128v2
64.4964.5264.55T:romulusn
68.7568.7768.79T:tinyjambu192v2
72.4472.4572.48T:tinyjambu256v2
81.5681.6081.77T:isapa128v20
103.85104.07104.91T:isapk128av20
164.28164.45164.53T:elephant200v2
206.61206.75206.92T:isapk128v20
411.87412.24412.75aes256gcmv1
485.08485.33485.69T:romulusm
969.90970.09970.30T:romulust
2069.572070.512072.50T:isapxv20
9833.719833.979834.56T:elephant176v2
10046.1510046.9410047.59T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
3.623.643.69T:aes128gcmv1
3.783.803.86T:aes256gcmv1
12.3912.4012.42ascon128av12
18.1118.1318.14ascon80pqv12
18.3818.3818.40ascon128v12
22.5622.5722.58ascon128abi32v12
29.6829.7529.77T:schwaemm256128v2
31.9332.0132.20T:grain128aeadv2
32.2332.2432.25ascon128bi32v12
35.2735.3035.70T:schwaemm256256v2
35.8635.9335.95T:xoodyakround3
39.2139.2239.24T:schwaemm192192v2
46.3546.3746.39T:isapa128av20
48.9048.9348.96T:giftcofb128v1
48.9248.9548.99T:schwaemm128128v2
50.3150.3250.37T:isapa128v20
61.5761.6061.61T:tinyjambu128v2
64.4664.4964.56T:romulusn
68.7468.7768.81T:tinyjambu192v2
72.4472.4672.47T:tinyjambu256v2
80.7180.7680.81T:isapk128av20
136.42136.49136.55T:isapk128v20
164.22164.34164.41T:elephant200v2
406.77407.09407.58aes256gcmv1
485.06485.15485.39T:romulusm
490.02490.15490.30T:romulust
1363.481363.771364.21T:isapxv20
9833.649833.939834.22T:elephant176v2
10046.0710047.1610047.64T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
18.7818.8918.95ascon128av12
24.2824.4024.69ascon80pqv12
24.2624.4124.61ascon128v12
33.5933.6633.92ascon128abi32v12
36.3836.8839.55T:aes128gcmv1
37.6739.3139.84T:aes256gcmv1
41.3541.5241.84T:grain128aeadv2
43.8043.9544.28ascon128bi32v12
48.1248.1648.30T:schwaemm256128v2
52.1252.4752.58T:xoodyakround3
55.9456.2156.62T:schwaemm256256v2
59.6959.7959.94T:giftcofb128v1
63.1563.4563.75T:schwaemm128128v2
63.6263.6463.84T:schwaemm192192v2
72.3072.6772.73T:tinyjambu128v2
80.5380.6580.83T:tinyjambu192v2
84.2384.5785.21T:romulusn
84.8385.0385.16T:tinyjambu256v2
164.05164.41164.77T:isapa128av20
232.99234.61235.48T:elephant200v2
401.11402.30403.59T:isapk128av20
463.03463.77464.97aes256gcmv1
543.27543.67543.98T:romulusm
679.76680.28684.53T:isapa128v20
1258.021258.241258.69T:romulust
2243.242245.732246.23T:isapk128v20
12248.0812249.7512254.47T:elephant176v2
13454.1613457.6213459.48T:elephant160v2
21605.6321662.3521664.94T:isapxv20
Cycles/byte for 64+64 decrypt
25%50%75%aead
18.8118.9419.01ascon128av12
24.0624.1524.41ascon80pqv12
24.2624.3924.67ascon128v12
33.9834.0234.37ascon128abi32v12
35.7636.7037.95T:aes128gcmv1
36.6237.6639.34T:aes256gcmv1
42.8843.0143.30T:grain128aeadv2
43.7943.8844.02ascon128bi32v12
48.3948.4748.68T:schwaemm256128v2
51.9452.2052.36T:xoodyakround3
55.7755.9356.66T:schwaemm256256v2
59.8660.0460.50T:giftcofb128v1
63.4463.5763.73T:schwaemm128128v2
63.7663.8864.17T:schwaemm192192v2
72.4872.5672.69T:tinyjambu128v2
80.7980.8880.96T:tinyjambu192v2
84.2084.5384.66T:romulusn
84.8684.9585.05T:tinyjambu256v2
168.30168.50168.88T:isapa128av20
233.90234.24235.45T:elephant200v2
400.49400.97401.61T:isapk128av20
463.84464.98465.60aes256gcmv1
543.47543.93544.63T:romulusm
679.41680.31685.13T:isapa128v20
1257.911258.151258.74T:romulust
2243.482244.332247.24T:isapk128v20
12248.4112250.2712253.16T:elephant176v2
13455.1513458.5213459.32T:elephant160v2
21634.7121658.4921666.63T:isapxv20
Cycles/byte for 64+64 forgery
25%50%75%aead
18.8118.8719.02ascon128av12
23.9824.0824.27ascon80pqv12
24.1324.2324.38ascon128v12
34.0034.0634.19ascon128abi32v12
35.8336.3437.36T:aes128gcmv1
36.3337.4237.80T:aes256gcmv1
42.8442.9443.18T:grain128aeadv2
43.7943.8144.25ascon128bi32v12
48.4048.4548.52T:schwaemm256128v2
52.1152.4052.49T:xoodyakround3
55.8955.9556.45T:schwaemm256256v2
59.8960.1060.22T:giftcofb128v1
63.2963.3163.77T:schwaemm128128v2
63.5063.6263.84T:schwaemm192192v2
72.5272.5872.62T:tinyjambu128v2
80.6580.8180.90T:tinyjambu192v2
83.8884.1284.36T:romulusn
84.8284.9084.98T:tinyjambu256v2
107.80108.38108.62T:isapa128av20
233.74234.51235.13T:elephant200v2
269.27269.44270.03T:isapk128av20
353.40353.96356.61T:isapa128v20
458.84459.27460.59aes256gcmv1
543.12543.38543.77T:romulusm
777.67778.21778.44T:romulust
1198.511199.791205.98T:isapk128v20
11294.7211322.4511327.93T:isapxv20
12248.0112249.0212254.02T:elephant176v2
13457.2713459.9713461.07T:elephant160v2