VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Xeon E3-1275 V2; 4 x 3500MHz; hydra8, supercop-20240716

[Page version: 20240726 23:46:23]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Implementation notes

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
2.50?2.76?2.89?T:aes128gcmv1
2.55?2.93?3.29?T:aes256gcmv1
8.628.638.65ascon128av12
12.8112.8312.84ascon128v12
12.7712.8712.89ascon80pqv12
16.4416.6316.67ascon128abi32v12
17.3917.5117.73T:xoodyakround3
23.3823.4724.14T:schwaemm256128v2
24.3624.4024.45ascon128bi32v12
27.9228.1828.45T:grain128aeadv2
30.8430.9230.98T:schwaemm192192v2
33.2433.2833.40T:schwaemm128128v2
33.8533.8834.08T:schwaemm256256v2
38.7538.7739.10romulusn
44.7444.7644.79T:giftcofb128v1
47.8447.8947.91T:isapa128v20
50.7150.7650.83T:isapa128av20
50.7850.8350.87T:tinyjambu128v2
57.1657.2157.30T:tinyjambu192v2
59.2559.3159.34T:tinyjambu256v2
62.6962.7662.81romulusm
90.9491.0991.21T:isapk128av20
120.82121.94122.09T:isapk128v20
126.28126.40126.51romulust
182.97183.20184.43T:elephant200v2
186.34191.23194.73T:isapxv20
347.36347.56347.92aes256gcmv1
9229.749231.129233.45T:elephant176v2
10530.1310531.5010532.83T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
2.24?2.70?2.96?T:aes128gcmv1
2.59?2.91?3.24?T:aes256gcmv1
8.538.608.63ascon128av12
12.7912.8012.80ascon128v12
12.8112.8412.89ascon80pqv12
16.6316.6716.72ascon128abi32v12
17.1817.3417.42T:xoodyakround3
23.3323.3823.44T:schwaemm256128v2
24.0924.1324.16ascon128bi32v12
29.1229.1529.18T:grain128aeadv2
30.7730.8831.71T:schwaemm192192v2
33.5033.5733.68T:schwaemm128128v2
33.9934.0334.29T:schwaemm256256v2
39.0739.1239.15romulusn
44.7544.7944.86T:giftcofb128v1
47.8547.9448.02T:isapa128v20
50.6850.7250.80T:isapa128av20
50.9851.0051.04T:tinyjambu128v2
57.8157.8857.92T:tinyjambu192v2
59.9259.9760.02T:tinyjambu256v2
62.9363.1163.16romulusm
91.0791.2291.34T:isapk128av20
120.81121.32121.50T:isapk128v20
126.29126.38126.48romulust
182.99183.15184.42T:elephant200v2
189.14190.56192.49T:isapxv20
346.65347.00347.27aes256gcmv1
9229.509230.859233.18T:elephant176v2
10530.2310531.4910532.60T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
2.31?2.75?2.87?T:aes128gcmv1
2.66?2.91?3.14?T:aes256gcmv1
8.598.598.62ascon128av12
12.7812.8012.81ascon128v12
12.8112.8312.85ascon80pqv12
16.6416.7016.75ascon128abi32v12
17.2617.3217.42T:xoodyakround3
23.3423.3823.41T:schwaemm256128v2
23.5423.5723.60T:isapa128v20
24.1124.1324.17ascon128bi32v12
29.1329.1729.19T:grain128aeadv2
30.7930.9031.70T:schwaemm192192v2
33.4433.5433.60T:schwaemm128128v2
33.9934.0434.33T:schwaemm256256v2
34.3534.3934.43T:isapa128av20
39.0539.1139.13romulusn
43.2143.2643.31romulust
44.7344.7844.80T:giftcofb128v1
50.9751.0251.07T:tinyjambu128v2
57.8157.8657.90T:tinyjambu192v2
59.9259.9660.04T:tinyjambu256v2
60.9361.0761.15T:isapk128av20
63.0363.1063.15romulusm
75.0775.5675.70T:isapk128v20
111.82112.33113.59T:isapxv20
182.96183.18184.38T:elephant200v2
336.17336.52336.99aes256gcmv1
9230.189231.239233.67T:elephant176v2
10529.9510531.2810532.79T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
2.152.182.29T:aes128gcmv1
2.302.352.47T:aes256gcmv1
8.568.578.60ascon128av12
12.6912.7212.73ascon128v12
12.6312.7412.76ascon80pqv12
13.1813.2313.28T:xoodyakround3
16.5716.5916.61ascon128abi32v12
23.2023.2623.61T:schwaemm256128v2
24.2024.2124.22ascon128bi32v12
27.9428.0828.18T:grain128aeadv2
30.6830.7030.76T:schwaemm192192v2
31.3031.3431.39romulusn
33.1633.2033.24T:schwaemm128128v2
33.6133.6633.88T:schwaemm256256v2
35.7436.0636.65T:isapa128v20
40.8740.9240.94T:tinyjambu128v2
42.5542.5842.60T:isapa128av20
43.2843.3243.38romulusm
44.4544.4944.52T:tinyjambu192v2
44.5244.5544.57T:tinyjambu256v2
44.6944.7144.73T:giftcofb128v1
75.9776.0176.08T:isapk128av20
84.6084.6584.73romulust
98.2398.5298.89T:isapk128v20
136.63136.79137.71T:elephant200v2
149.44152.01153.78T:isapxv20
341.50342.11342.68aes256gcmv1
6894.086894.906896.25T:elephant176v2
7892.237892.917893.58T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
2.202.262.30T:aes128gcmv1
2.282.372.49T:aes256gcmv1
8.538.568.59ascon128av12
12.6912.7212.74ascon128v12
12.7012.7212.73ascon80pqv12
13.0813.1313.17T:xoodyakround3
16.8216.8716.88ascon128abi32v12
23.2223.2523.28T:schwaemm256128v2
24.1224.1324.34ascon128bi32v12
28.3928.4328.46T:grain128aeadv2
30.6930.7631.14T:schwaemm192192v2
31.4831.5131.54romulusn
33.2033.2433.31T:schwaemm128128v2
33.7033.7333.98T:schwaemm256256v2
35.5535.8536.02T:isapa128v20
40.9640.9941.01T:tinyjambu128v2
42.5242.5642.62T:isapa128av20
43.4643.5043.51romulusm
44.6944.7344.76T:giftcofb128v1
44.8344.8844.90T:tinyjambu256v2
44.8544.8944.93T:tinyjambu192v2
75.9976.0876.13T:isapk128av20
84.5684.6284.67romulust
98.4598.5398.62T:isapk128v20
136.66136.76137.70T:elephant200v2
151.15151.65152.73T:isapxv20
341.78342.46342.71aes256gcmv1
6894.236895.086896.28T:elephant176v2
7891.557892.817893.75T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
2.142.192.29T:aes128gcmv1
2.292.382.47T:aes256gcmv1
8.528.548.57ascon128av12
12.6812.7112.72ascon128v12
12.7112.7112.73ascon80pqv12
13.1213.1813.22T:xoodyakround3
16.8316.8516.87ascon128abi32v12
23.2123.2423.28T:schwaemm256128v2
23.3023.5223.69T:isapa128v20
24.1224.1324.33ascon128bi32v12
28.4128.4328.45T:grain128aeadv2
30.6830.7331.11T:schwaemm192192v2
31.5131.5331.57romulusn
33.1833.2333.30T:schwaemm128128v2
33.7133.7333.98T:schwaemm256256v2
34.3434.3634.39T:isapa128av20
40.9640.9941.01T:tinyjambu128v2
43.0543.0843.14romulust
43.4543.4743.50romulusm
44.7044.7244.77T:giftcofb128v1
44.8644.8844.91T:tinyjambu256v2
44.8644.9044.93T:tinyjambu192v2
60.9260.9561.05T:isapk128av20
75.5975.6475.72T:isapk128v20
112.49112.56113.13T:isapxv20
136.61136.87137.70T:elephant200v2
336.51337.27337.59aes256gcmv1
6894.276894.816895.95T:elephant176v2
7891.897893.047893.56T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
1.701.791.88T:aes128gcmv1
1.69?1.81?1.90?T:aes256gcmv1
8.498.528.53ascon128av12
8.898.938.98T:xoodyakround3
12.4612.5012.52ascon80pqv12
12.5312.5612.61ascon128v12
16.4716.5116.52ascon128abi32v12
23.0323.0523.08T:schwaemm256128v2
23.5923.6523.65T:isapa128v20
23.8323.9023.94romulusn
23.8223.9123.99romulusm
23.9623.9924.01ascon128bi32v12
27.6627.8928.16T:grain128aeadv2
29.7829.8129.84T:tinyjambu256v2
30.5530.5830.64T:schwaemm192192v2
30.9230.9530.97T:tinyjambu128v2
31.7031.7431.76T:tinyjambu192v2
33.0233.1233.21T:schwaemm128128v2
33.3733.4033.68T:schwaemm256256v2
34.2834.3534.43T:isapa128av20
42.9042.9742.99romulust
44.6344.6644.72T:giftcofb128v1
60.7760.9661.06T:isapk128av20
75.4975.6175.71T:isapk128v20
92.3092.3592.71T:elephant200v2
110.55112.84114.57T:isapxv20
336.53336.97337.38aes256gcmv1
4558.744559.854561.02T:elephant176v2
5259.325260.115260.91T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
1.67?1.77?1.88?T:aes128gcmv1
1.71?1.80?1.92?T:aes256gcmv1
8.528.538.54ascon128av12
8.888.928.96T:xoodyakround3
12.5912.6112.65ascon128v12
12.5912.6112.63ascon80pqv12
16.9917.0217.04ascon128abi32v12
23.0723.1023.18T:schwaemm256128v2
23.4523.6223.69T:isapa128v20
23.8123.8623.96romulusn
23.8423.9023.96romulusm
24.0524.1224.17ascon128bi32v12
27.6827.7027.74T:grain128aeadv2
29.7729.8029.84T:tinyjambu256v2
30.4730.5430.62T:schwaemm192192v2
30.9330.9530.98T:tinyjambu128v2
31.8931.9531.98T:tinyjambu192v2
32.8832.9433.00T:schwaemm128128v2
33.4233.4633.67T:schwaemm256256v2
34.3234.3634.40T:isapa128av20
42.9042.9543.01romulust
44.6044.6844.73T:giftcofb128v1
60.7660.8861.05T:isapk128av20
75.4875.5675.72T:isapk128v20
92.3192.4192.71T:elephant200v2
112.02112.62113.83T:isapxv20
336.55336.86337.27aes256gcmv1
4559.124559.594560.39T:elephant176v2
5258.965259.685260.17T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
1.741.811.88T:aes128gcmv1
1.741.821.90T:aes256gcmv1
8.528.538.54ascon128av12
8.908.938.99T:xoodyakround3
12.5912.6112.62ascon80pqv12
12.6012.6412.66ascon128v12
16.9717.0117.03ascon128abi32v12
23.0823.1223.13T:schwaemm256128v2
23.4523.4823.72T:isapa128v20
23.8023.8524.01romulusn
23.8923.9824.01romulusm
24.0924.1424.53ascon128bi32v12
27.6827.7127.74T:grain128aeadv2
29.7929.8329.85T:tinyjambu256v2
30.5230.5730.60T:schwaemm192192v2
30.9030.9530.97T:tinyjambu128v2
31.9231.9731.98T:tinyjambu192v2
32.9332.9933.07T:schwaemm128128v2
33.4333.4533.67T:schwaemm256256v2
34.3134.3534.40T:isapa128av20
42.8942.9643.00romulust
44.6444.6944.72T:giftcofb128v1
60.7260.9161.02T:isapk128av20
75.5075.5975.66T:isapk128v20
92.3292.3992.71T:elephant200v2
112.01112.45113.43T:isapxv20
336.32336.59337.16aes256gcmv1
4559.474560.394560.95T:elephant176v2
5258.965259.575260.68T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
3.623.723.74T:aes128gcmv1
3.793.803.87T:aes256gcmv1
8.778.798.80ascon128av12
12.8312.8712.95ascon80pqv12
12.8912.9012.91ascon128v12
13.3613.3713.42T:xoodyakround3
16.9416.9716.98ascon128abi32v12
23.8923.9224.25T:schwaemm256128v2
24.6124.6224.65ascon128bi32v12
28.5428.5728.68T:grain128aeadv2
31.4031.4331.47T:schwaemm192192v2
31.5831.6131.68romulusn
33.6433.7033.74T:schwaemm128128v2
34.5334.5734.77T:schwaemm256256v2
41.2241.2441.29T:tinyjambu128v2
43.6143.6543.74romulusm
44.7844.8344.85T:tinyjambu192v2
44.9144.9244.95T:tinyjambu256v2
45.0745.1045.12T:giftcofb128v1
45.4145.4645.50T:isapa128av20
52.6452.7352.93T:isapa128v20
85.9285.9786.01romulust
87.1587.2187.31T:isapk128av20
139.63139.74140.52T:elephant200v2
173.88174.17174.23T:isapk128v20
244.28246.78246.83T:isapxv20
343.79344.16344.57aes256gcmv1
6947.066947.496948.61T:elephant176v2
7981.567981.837982.30T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
3.653.663.69T:aes128gcmv1
3.743.783.87T:aes256gcmv1
8.748.758.79ascon128av12
12.9012.9212.93ascon128v12
12.9012.9312.93ascon80pqv12
13.2913.3113.32T:xoodyakround3
17.2317.2417.25ascon128abi32v12
23.8923.9123.95T:schwaemm256128v2
24.5424.5624.60ascon128bi32v12
28.8728.8828.90T:grain128aeadv2
31.3931.4631.77T:schwaemm192192v2
31.7831.8031.85romulusn
33.6733.7033.73T:schwaemm128128v2
34.6234.6534.86T:schwaemm256256v2
41.2941.3341.36T:tinyjambu128v2
43.8343.8443.85romulusm
45.1145.1345.16T:giftcofb128v1
45.2245.2345.29T:tinyjambu192v2
45.2045.2445.28T:tinyjambu256v2
45.4345.4445.50T:isapa128av20
52.6852.7153.01T:isapa128v20
85.9185.9385.95romulust
87.1787.2187.28T:isapk128av20
139.59139.70140.52T:elephant200v2
173.93174.01174.13T:isapk128v20
245.27245.86246.15T:isapxv20
343.88344.17344.35aes256gcmv1
6946.986947.436948.69T:elephant176v2
7981.197981.647982.88T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
3.653.673.71T:aes128gcmv1
3.753.773.83T:aes256gcmv1
8.748.778.79ascon128av12
12.8912.9012.92ascon128v12
12.9012.9112.93ascon80pqv12
13.2613.3013.35T:xoodyakround3
17.2317.2417.26ascon128abi32v12
23.8823.9223.94T:schwaemm256128v2
24.5424.5624.72ascon128bi32v12
28.8828.8928.92T:grain128aeadv2
31.4231.4531.77T:schwaemm192192v2
31.7831.8131.85romulusn
32.3132.3332.50T:isapa128v20
33.6433.6733.76T:schwaemm128128v2
34.6234.6334.86T:schwaemm256256v2
36.0236.0436.07T:isapa128av20
41.3241.3641.41T:tinyjambu128v2
43.8043.8443.87romulusm
44.3144.3544.37romulust
45.0945.1145.13T:giftcofb128v1
45.2245.2545.28T:tinyjambu192v2
45.2245.2545.27T:tinyjambu256v2
68.0168.0868.15T:isapk128av20
114.94114.99115.02T:isapk128v20
139.59139.74140.55T:elephant200v2
160.71160.74160.95T:isapxv20
338.43338.85339.24aes256gcmv1
6946.946947.266948.51T:elephant176v2
7981.017982.057983.90T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
13.4013.4513.68ascon128av12
17.1617.1717.48ascon128v12
17.1517.2317.44ascon80pqv12
19.4219.6220.38T:xoodyakround3
25.2625.3325.69ascon128abi32v12
33.9534.0034.16ascon128bi32v12
36.0636.3436.90T:aes128gcmv1
36.5537.0239.48T:aes256gcmv1
38.3838.4438.73romulusn
38.9139.1539.38T:schwaemm256128v2
39.1339.8042.84T:grain128aeadv2
43.0343.4344.58T:schwaemm128128v2
48.5148.7048.90T:tinyjambu128v2
50.3950.5551.09romulusm
50.5250.9151.12T:schwaemm192192v2
52.6152.9053.04T:tinyjambu192v2
52.9053.1353.47T:tinyjambu256v2
53.5753.8053.92T:giftcofb128v1
54.8355.0655.23T:schwaemm256256v2
111.08111.46112.36T:isapa128av20
115.51115.68115.98romulust
198.07198.81199.53T:elephant200v2
326.48326.70328.00T:isapk128av20
388.34389.14389.30aes256gcmv1
441.16441.85445.24T:isapa128v20
1887.151892.911893.75T:isapk128v20
2349.692400.172407.17T:isapxv20
8649.958651.918654.66T:elephant176v2
10687.3510692.2110695.73T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
13.4613.6613.86ascon128av12
17.3517.3517.55ascon80pqv12
17.2717.3617.57ascon128v12
19.4419.9520.31T:xoodyakround3
25.9326.0126.33ascon128abi32v12
34.1234.2734.52ascon128bi32v12
35.0235.2736.91T:aes128gcmv1
35.3635.6637.33T:aes256gcmv1
38.3738.5838.70romulusn
39.0339.1339.34T:schwaemm256128v2
39.2439.5439.73T:grain128aeadv2
43.2543.4344.19T:schwaemm128128v2
48.7348.7749.11T:tinyjambu128v2
50.8851.0151.41T:schwaemm192192v2
51.9552.0152.16romulusm
53.0553.2353.62T:tinyjambu192v2
53.2053.3353.60T:tinyjambu256v2
53.6453.7654.02T:giftcofb128v1
54.7355.0155.16T:schwaemm256256v2
111.60111.80112.09T:isapa128av20
115.58115.77116.03romulust
197.76198.10199.09T:elephant200v2
324.11325.23326.84T:isapk128av20
388.74388.88389.30aes256gcmv1
441.73442.19448.31T:isapa128v20
1885.961886.731897.19T:isapk128v20
2360.952391.612397.40T:isapxv20
8650.308652.648655.28T:elephant176v2
10687.2010689.8010693.29T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
13.3813.5013.66ascon128av12
17.2217.3117.45ascon128v12
17.3517.3517.54ascon80pqv12
19.5519.9520.11T:xoodyakround3
25.9626.0026.16ascon128abi32v12
34.0934.1634.33ascon128bi32v12
35.1235.3236.07T:aes128gcmv1
35.2335.5436.63T:aes256gcmv1
38.3238.4238.51romulusn
39.0339.1439.21T:schwaemm256128v2
39.2139.2839.45T:grain128aeadv2
43.2443.3443.50T:schwaemm128128v2
48.5948.7348.82T:tinyjambu128v2
50.9251.1751.54T:schwaemm192192v2
51.8952.0252.16romulusm
53.0453.1053.23T:tinyjambu256v2
53.1753.2553.40T:tinyjambu192v2
53.6253.8554.02T:giftcofb128v1
54.8555.0455.23T:schwaemm256256v2
72.8873.0273.30romulust
73.8574.1374.50T:isapa128av20
197.88198.22199.38T:elephant200v2
217.51217.61218.32T:isapk128av20
234.21234.49236.95T:isapa128v20
382.98383.41384.13aes256gcmv1
1003.031003.341004.05T:isapk128v20
1237.051250.361254.32T:isapxv20
8648.258651.268655.38T:elephant176v2
10685.6410692.5010695.59T:elephant160v2