VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Tremont (906c0); 2021 Intel Celeron N4500; 2 x 1100MHz; jasper2, supercop-20250307

[Page version: 20250420 15:45:41]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
1.461.471.49T:aes128gcmv1
1.631.651.66aes256gcmv1
10.7610.7710.78ascon128av12
15.1315.1415.15ascon80pqv12
15.3115.3415.35ascon128v12
21.6221.7221.91T:xoodyakround3
22.0822.1222.18T:schwaemm256128v2
23.2123.4223.42ascon128abi32v12
29.2629.3729.39T:schwaemm192192v2
32.4132.4332.45T:schwaemm256256v2
33.3733.4133.43T:schwaemm128128v2
34.1234.1334.14ascon128bi32v12
38.8938.9238.98T:grain128aeadv2
47.4547.4747.48romulusn
48.0548.1348.24T:giftcofb128v1
61.1061.7162.37T:isapa128av20
68.0568.1368.23T:isapa128v20
76.0276.1576.25T:tinyjambu128v2
76.8476.8876.95romulusm
95.3895.4895.61T:tinyjambu192v2
104.00104.03104.10T:tinyjambu256v2
106.05106.77106.82T:isapk128av20
138.90142.32144.41T:isapk128v20
145.71145.92146.31T!!!romulust
197.32200.12200.35T:elephant200v2
211.58212.24213.04T:isapxv20
10388.1110392.2610398.65T:elephant176v2
11797.6611802.0011812.20T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
1.591.601.62T:aes128gcmv1
1.711.721.73aes256gcmv1
10.2410.2510.28ascon128av12
15.1515.1515.20ascon128v12
15.3515.3815.46ascon80pqv12
20.6720.7420.79T:xoodyakround3
22.1222.1422.17T:schwaemm256128v2
23.4523.4523.48ascon128abi32v12
29.2329.3729.41T:schwaemm192192v2
32.3932.4132.42T:schwaemm256256v2
33.3633.4233.48T:schwaemm128128v2
33.8633.9433.96ascon128bi32v12
39.4039.4139.53T:grain128aeadv2
47.3447.3847.47romulusn
47.8747.9848.40T:giftcofb128v1
61.3462.1062.26T:isapa128av20
67.8868.1868.79T:isapa128v20
76.4776.5076.56T:tinyjambu128v2
77.0877.1877.33romulusm
95.0495.2595.36T:tinyjambu192v2
104.23104.28104.40T:tinyjambu256v2
106.68106.78106.82T:isapk128av20
138.91141.86144.34T:isapk128v20
145.76145.97146.45T!!!romulust
197.14197.56198.54T:elephant200v2
212.26212.64213.13T:isapxv20
10389.8010391.6610402.89T:elephant176v2
11795.8111802.4411805.76T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
1.581.601.62T:aes128gcmv1
1.701.721.72aes256gcmv1
10.2510.2610.27ascon128av12
15.1915.1915.22ascon128v12
15.3715.3815.39ascon80pqv12
20.7120.8320.85T:xoodyakround3
22.1322.1622.17T:schwaemm256128v2
23.4423.4623.47ascon128abi32v12
29.2529.3829.41T:schwaemm192192v2
32.3832.4232.45T:schwaemm256256v2
33.3433.4133.44T:schwaemm128128v2
33.8733.9333.94ascon128bi32v12
34.1834.3134.53T:isapa128v20
39.4139.4239.51T:grain128aeadv2
40.4441.0141.17T:isapa128av20
47.4447.4547.47romulusn
48.0148.2748.38T:giftcofb128v1
51.9552.1352.44T!!!romulust
70.6870.7270.77T:isapk128av20
76.4176.4676.49T:tinyjambu128v2
77.0777.1877.34romulusm
85.7889.0991.04T:isapk128v20
95.0295.2695.35T:tinyjambu192v2
104.26104.30104.39T:tinyjambu256v2
126.24126.47126.85T:isapxv20
196.86197.12197.76T:elephant200v2
10391.2110393.9610396.07T:elephant176v2
11788.7611799.4411807.59T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
1.001.021.02T:aes128gcmv1
1.081.101.11aes256gcmv1
10.4010.4210.43ascon128av12
14.9815.0415.13ascon80pqv12
15.0615.0715.09ascon128v12
15.4915.5415.57T:xoodyakround3
21.9922.0122.04T:schwaemm256128v2
23.0823.1923.20ascon128abi32v12
29.1629.2229.23T:schwaemm192192v2
32.2232.2532.28T:schwaemm256256v2
33.2433.3533.50T:schwaemm128128v2
34.0834.1334.23ascon128bi32v12
38.5538.6038.69romulusn
38.8438.8938.92T:grain128aeadv2
47.9748.0748.15T:giftcofb128v1
50.9851.0151.09T:isapa128v20
50.9751.0751.12T:isapa128av20
53.3053.3853.43romulusm
62.1062.2662.32T:tinyjambu128v2
74.6174.6574.71T:tinyjambu192v2
78.5378.5678.65T:tinyjambu256v2
88.7488.7888.98T:isapk128av20
98.6398.7599.23T!!!romulust
114.69116.53117.45T:isapk128v20
148.49149.39149.44T:elephant200v2
168.97169.22169.60T:isapxv20
7758.007763.887765.92T:elephant176v2
8847.368849.808854.05T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
1.051.071.08T:aes128gcmv1
1.121.141.14aes256gcmv1
10.2810.2910.29ascon128av12
14.9215.0315.04ascon128v12
14.9715.1615.17ascon80pqv12
15.3315.3915.42T:xoodyakround3
21.9722.0022.02T:schwaemm256128v2
23.0623.0723.14ascon128abi32v12
29.1929.2129.23T:schwaemm192192v2
32.1932.2332.29T:schwaemm256256v2
33.3533.3633.40T:schwaemm128128v2
33.5533.6033.61ascon128bi32v12
38.5538.5838.63romulusn
39.1339.1839.19T:grain128aeadv2
47.9748.0748.14T:giftcofb128v1
50.9351.0951.24T:isapa128v20
51.2151.3151.74T:isapa128av20
53.4553.5153.59romulusm
62.4162.4662.49T:tinyjambu128v2
74.4374.5474.62T:tinyjambu192v2
78.6878.7078.75T:tinyjambu256v2
88.5688.8089.61T:isapk128av20
98.5798.6899.43T!!!romulust
114.85116.30117.34T:isapk128v20
149.16149.23149.83T:elephant200v2
169.37169.71169.92T:isapxv20
7760.587763.267765.04T:elephant176v2
8846.828849.928852.96T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
1.061.071.07T:aes128gcmv1
1.131.131.14aes256gcmv1
10.2910.3010.31ascon128av12
14.9515.0415.05ascon128v12
14.9415.0415.09ascon80pqv12
15.3815.4115.44T:xoodyakround3
21.9722.0022.04T:schwaemm256128v2
23.0623.0723.14ascon128abi32v12
29.1629.1929.23T:schwaemm192192v2
32.2032.2432.27T:schwaemm256256v2
33.3633.4133.49T:schwaemm128128v2
33.5633.6033.60ascon128bi32v12
34.1134.1934.88T:isapa128v20
38.5738.6138.72romulusn
39.1439.1939.20T:grain128aeadv2
40.7840.8741.12T:isapa128av20
47.9648.0448.16T:giftcofb128v1
51.6851.8552.47T!!!romulust
53.4753.5253.55romulusm
62.4062.4462.50T:tinyjambu128v2
70.7270.7770.98T:isapk128av20
74.4574.5674.67T:tinyjambu192v2
78.6978.7478.79T:tinyjambu256v2
88.1189.8090.84T:isapk128v20
126.27126.47126.69T:isapxv20
148.35148.44149.20T:elephant200v2
7760.957762.887764.86T:elephant176v2
8846.358851.498852.53T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.550.560.57T:aes128gcmv1
0.540.560.58aes256gcmv1
9.9910.0110.04T:xoodyakround3
10.0510.0610.06ascon128av12
14.7914.8214.82ascon128v12
14.8314.8414.85ascon80pqv12
21.7921.8121.86T:schwaemm256128v2
22.9322.9522.96ascon128abi32v12
29.0529.0629.07T:schwaemm192192v2
29.7529.8229.92romulusn
29.7929.8629.87romulusm
31.9832.0832.13T:schwaemm256256v2
33.1733.3533.60T:schwaemm128128v2
34.0434.1234.13ascon128bi32v12
34.1134.1734.47T:isapa128v20
38.7138.9038.92T:grain128aeadv2
40.9541.0341.13T:isapa128av20
48.3248.3448.46T:tinyjambu128v2
47.8748.3748.77T:giftcofb128v1
51.2751.5152.35T!!!romulust
53.1253.1653.25T:tinyjambu256v2
53.7753.8253.90T:tinyjambu192v2
70.6670.7670.86T:isapk128av20
89.9490.5890.76T:isapk128v20
100.59100.72100.93T:elephant200v2
125.59126.12126.35T:isapxv20
5131.025135.665140.78T:elephant176v2
5890.405894.325899.06T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.520.540.56T:aes128gcmv1
0.550.570.58aes256gcmv1
9.9910.0110.01T:xoodyakround3
10.2910.3010.31ascon128av12
14.6714.6914.89ascon128v12
14.5514.7014.95ascon80pqv12
21.8121.8721.91T:schwaemm256128v2
22.6822.8222.83ascon128abi32v12
29.0029.0329.04T:schwaemm192192v2
29.7129.7429.81romulusn
29.8129.8829.93romulusm
32.0732.1032.16T:schwaemm256256v2
33.2333.2533.26ascon128bi32v12
33.2633.4033.48T:schwaemm128128v2
33.4734.2934.48T:isapa128v20
38.7338.9738.97T:grain128aeadv2
41.0341.1241.22T:isapa128av20
48.0448.2548.37T:giftcofb128v1
48.3248.4248.47T:tinyjambu128v2
51.1951.8052.48T!!!romulust
53.1453.1953.23T:tinyjambu256v2
53.7853.8153.85T:tinyjambu192v2
70.7570.8170.83T:isapk128av20
90.5090.5890.67T:isapk128v20
100.07100.16100.63T:elephant200v2
126.10126.50126.85T:isapxv20
5132.965134.805137.20T:elephant176v2
5893.125897.605900.83T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.530.540.55T:aes128gcmv1
0.550.560.57aes256gcmv1
9.9810.0210.03T:xoodyakround3
10.3010.3110.32ascon128av12
14.6714.6914.88ascon128v12
14.5714.7014.95ascon80pqv12
21.8021.8821.91T:schwaemm256128v2
22.6922.8222.83ascon128abi32v12
29.0329.0429.05T:schwaemm192192v2
29.6729.7329.83romulusn
29.7629.8129.87romulusm
32.0632.1032.15T:schwaemm256256v2
33.2533.2533.26ascon128bi32v12
33.1733.3133.43T:schwaemm128128v2
33.7734.2634.46T:isapa128v20
38.7338.9738.97T:grain128aeadv2
41.0141.1641.22T:isapa128av20
47.8848.0748.38T:giftcofb128v1
48.3648.4048.49T:tinyjambu128v2
51.1951.6752.42T!!!romulust
53.1253.1653.29T:tinyjambu256v2
53.7653.7853.83T:tinyjambu192v2
70.7270.8371.25T:isapk128av20
90.4290.5491.41T:isapk128v20
99.93100.04100.95T:elephant200v2
126.02126.45126.83T:isapxv20
5128.335132.445137.25T:elephant176v2
5894.915897.385900.26T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.151.151.16T:aes128gcmv1
1.251.261.27aes256gcmv1
10.6710.6910.69ascon128av12
15.2315.2415.29ascon80pqv12
15.3015.3115.33ascon128v12
15.6815.7815.95T:xoodyakround3
22.6322.6622.67T:schwaemm256128v2
23.6123.6723.68ascon128abi32v12
29.8329.8929.91T:schwaemm192192v2
33.1233.1433.16T:schwaemm256256v2
33.8033.8233.95T:schwaemm128128v2
34.6034.6334.72ascon128bi32v12
38.9739.0139.02romulusn
39.3339.3839.48T:grain128aeadv2
48.4848.5648.66T:giftcofb128v1
53.7553.7953.83romulusm
55.2255.2455.34T:isapa128av20
62.6362.7562.79T:tinyjambu128v2
74.4774.4874.55T:isapa128v20
75.2075.2375.29T:tinyjambu192v2
79.1279.1579.26T:tinyjambu256v2
99.0599.0799.40T:isapk128av20
100.17100.32100.81T!!!romulust
151.91152.44153.13T:elephant200v2
208.03208.49209.88T:isapk128v20
277.66277.73277.81T:isapxv20
7819.007822.057823.67T:elephant176v2
8946.488949.578951.84T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.201.211.22T:aes128gcmv1
1.291.301.31aes256gcmv1
10.5010.5510.57ascon128av12
15.1715.1715.26ascon128v12
15.2115.3915.44ascon80pqv12
15.5215.5615.57T:xoodyakround3
22.6222.6722.70T:schwaemm256128v2
23.5723.5823.65ascon128abi32v12
29.8329.8529.91T:schwaemm192192v2
33.0633.1133.15T:schwaemm256256v2
33.7433.8933.98T:schwaemm128128v2
34.0734.0734.08ascon128bi32v12
38.9738.9939.00romulusn
39.6339.6439.64T:grain128aeadv2
48.4748.5148.58T:giftcofb128v1
53.9754.0054.06romulusm
55.0355.2655.41T:isapa128av20
62.9162.9662.97T:tinyjambu128v2
74.4674.5574.59T:isapa128v20
75.0075.1275.19T:tinyjambu192v2
79.2679.3179.34T:tinyjambu256v2
99.0699.1399.45T:isapk128av20
100.08100.25100.88T!!!romulust
151.67152.09153.15T:elephant200v2
208.14208.67209.81T:isapk128v20
278.19278.26278.33T:isapxv20
7819.907821.897825.01T:elephant176v2
8947.008950.338952.09T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.201.201.21T:aes128gcmv1
1.281.291.29aes256gcmv1
10.5210.5410.57ascon128av12
15.1715.2615.26ascon128v12
15.1815.2615.38ascon80pqv12
15.5315.5915.62T:xoodyakround3
22.6322.6522.67T:schwaemm256128v2
23.5823.5823.65ascon128abi32v12
29.8129.8529.88T:schwaemm192192v2
33.0633.1133.15T:schwaemm256256v2
33.8333.8733.94T:schwaemm128128v2
34.0834.1034.10ascon128bi32v12
38.9438.9739.01romulusn
39.6039.6439.64T:grain128aeadv2
42.9243.1043.25T:isapa128av20
46.1546.1746.29T:isapa128v20
48.5048.6448.83T:giftcofb128v1
53.2653.2754.14T!!!romulust
53.9554.0154.11romulusm
62.9162.9562.98T:tinyjambu128v2
75.0575.1175.19T:tinyjambu192v2
76.8076.8376.87T:isapk128av20
79.3179.3479.38T:tinyjambu256v2
135.78135.91137.52T:isapk128v20
151.68152.42152.80T:elephant200v2
181.97182.12182.24T:isapxv20
7820.017821.177826.93T:elephant176v2
8946.208949.058951.48T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
6.987.077.29aes256gcmv1
7.617.687.77T:aes128gcmv1
16.1616.2316.51ascon128av12
20.3820.4520.63ascon128v12
20.3420.5120.86ascon80pqv12
23.0623.2123.38T:xoodyakround3
34.9134.9335.60ascon128abi32v12
37.1237.2237.41T:schwaemm256128v2
43.8343.9143.99T:schwaemm128128v2
45.9145.9446.16ascon128bi32v12
47.1447.2447.39romulusn
48.0548.0948.26T:schwaemm192192v2
49.6649.7149.85T:grain128aeadv2
52.5952.7652.99T:schwaemm256256v2
58.7459.1659.41T:giftcofb128v1
62.8063.0463.19romulusm
73.9574.0974.42T:tinyjambu128v2
88.1688.3088.50T:tinyjambu192v2
92.5592.7093.09T:tinyjambu256v2
137.41137.83138.27T!!!romulust
141.15141.48141.63T:isapa128av20
216.56216.90217.18T:elephant200v2
317.78318.19318.98T:isapk128av20
608.05610.52611.40T:isapa128v20
2301.412311.222342.96T:isapk128v20
2732.482741.662746.38T:isapxv20
9734.209734.669744.84T:elephant176v2
11978.8611984.7711989.94T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
6.706.817.20aes256gcmv1
7.477.557.71T:aes128gcmv1
16.1016.2316.34ascon128av12
20.2920.4220.61ascon80pqv12
20.2320.4320.59ascon128v12
22.8823.2023.34T:xoodyakround3
35.1435.3335.81ascon128abi32v12
37.2237.3437.48T:schwaemm256128v2
43.7043.7844.20T:schwaemm128128v2
45.4945.5245.85ascon128bi32v12
47.3747.4547.55romulusn
47.9948.0648.14T:schwaemm192192v2
49.8849.9250.09T:grain128aeadv2
52.4852.5852.66T:schwaemm256256v2
59.2859.4859.91T:giftcofb128v1
65.2365.4665.65romulusm
74.2774.3874.56T:tinyjambu128v2
88.1088.2488.41T:tinyjambu192v2
92.8793.0293.39T:tinyjambu256v2
137.77138.16138.51T!!!romulust
141.53141.79142.26T:isapa128av20
216.28216.68216.89T:elephant200v2
318.62319.05327.09T:isapk128av20
610.33610.91611.31T:isapa128v20
2301.912303.542341.61T:isapk128v20
2742.522742.882748.45T:isapxv20
9733.579742.349746.13T:elephant176v2
11982.2311990.7211995.83T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
6.696.766.95aes256gcmv1
7.427.537.59T:aes128gcmv1
16.0016.0616.20ascon128av12
20.1820.2020.30ascon128v12
20.1620.2820.34ascon80pqv12
22.9523.1523.19T:xoodyakround3
35.0335.1735.32ascon128abi32v12
37.1437.2237.30T:schwaemm256128v2
43.8343.9044.00T:schwaemm128128v2
45.5245.6045.62ascon128bi32v12
47.2547.3447.48romulusn
47.9647.9848.05T:schwaemm192192v2
49.8549.8849.98T:grain128aeadv2
52.5152.6152.69T:schwaemm256256v2
59.2659.5459.88T:giftcofb128v1
65.2465.4065.77romulusm
74.2474.3674.48T:tinyjambu128v2
88.0888.2488.47T:tinyjambu192v2
88.9289.2789.61T!!!romulust
91.3691.5992.03T:isapa128av20
92.8893.0293.10T:tinyjambu256v2
201.66201.97202.36T:isapk128av20
216.33216.70216.86T:elephant200v2
318.39318.77319.07T:isapa128v20
1185.081194.801224.19T:isapk128v20
1434.971435.321441.23T:isapxv20
9736.329741.529745.53T:elephant176v2
11974.6211984.7511992.48T:elephant160v2