VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Coffee Lake (806ea); 2018 Intel Core i3-8109U; 2 x 3000MHz; like, supercop-20241022

[Page version: 20241120 00:41:35]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.660.670.69T:aes128gcmv1
0.890.910.92T:aes256gcmv1
1.641.651.65aes256gcmv1
7.687.737.76ascon128av12
10.86?10.89?17.63?ascon80pqv12
10.9711.0011.03ascon128v12
14.3014.3314.34ascon128abi32v12
16.7116.7516.79T:xoodyakround3
19.1019.2119.24T:schwaemm256128v2
21.3321.3721.60T:schwaemm256256v2
21.4021.4521.50ascon128bi32v12
25.0625.1525.17T:grain128aeadv2
25.0125.2425.44T:schwaemm192192v2
27.4227.4827.55T:schwaemm128128v2
38.5238.5538.59romulusn
41.1641.1941.24T:giftcofb128v1
41.3641.4341.45T:isapa128av20
45.4445.6245.65T:isapa128v20
60.1760.2360.26T:tinyjambu128v2
61.9161.9362.00romulusm
68.6068.9569.24T:isapk128av20
73.0673.0773.10T:tinyjambu192v2
78.3678.5278.95T:tinyjambu256v2
91.8291.8991.99T:isapk128v20
124.60124.66124.72romulust
142.10142.19142.36T:elephant200v2
183.36185.08185.30T:isapxv20
7508.527508.907510.12T:elephant176v2
8253.338254.928256.70T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.62?0.64?0.69?T:aes128gcmv1
0.850.890.91T:aes256gcmv1
1.581.591.60aes256gcmv1
7.297.417.46ascon128av12
10.8810.9310.97ascon128v12
10.89?10.93?19.14?ascon80pqv12
14.1214.1514.22ascon128abi32v12
16.3716.4016.43T:xoodyakround3
19.1919.2419.31T:schwaemm256128v2
21.3421.3821.48T:schwaemm256256v2
21.4121.4521.49ascon128bi32v12
24.9725.2225.30T:schwaemm192192v2
25.6525.6625.67T:grain128aeadv2
27.3427.3827.42T:schwaemm128128v2
38.4838.5038.54romulusn
41.2441.2641.30T:giftcofb128v1
41.2741.3141.40T:isapa128av20
45.4545.5645.66T:isapa128v20
60.2260.2960.33T:tinyjambu128v2
61.9061.9562.00romulusm
68.6568.9569.22T:isapk128av20
73.5273.5473.56T:tinyjambu192v2
78.5878.6178.63T:tinyjambu256v2
91.7991.9192.00T:isapk128v20
124.61124.67124.85romulust
142.15142.23142.39T:elephant200v2
183.70185.12185.19T:isapxv20
7508.327508.857510.41T:elephant176v2
8252.718253.478255.99T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.630.640.65T:aes128gcmv1
0.830.890.92T:aes256gcmv1
1.591.591.59aes256gcmv1
7.417.457.48ascon128av12
10.88?10.95?20.22?ascon80pqv12
10.8910.9710.99ascon128v12
14.1414.1714.24ascon128abi32v12
16.4016.4516.47T:xoodyakround3
19.1219.2019.30T:schwaemm256128v2
21.3321.3821.49T:schwaemm256256v2
21.4021.4421.53ascon128bi32v12
22.6022.6722.75T:isapa128v20
25.0025.1625.31T:schwaemm192192v2
25.6525.6725.69T:grain128aeadv2
27.2027.2827.34T:isapa128av20
27.3327.3727.41T:schwaemm128128v2
38.4938.5038.52romulusn
41.2741.2941.33T:giftcofb128v1
42.4642.5242.56romulust
46.0446.1146.22T:isapk128av20
57.6257.6957.76T:isapk128v20
60.1660.2160.32T:tinyjambu128v2
61.9161.9661.99romulusm
73.5373.5473.55T:tinyjambu192v2
78.5978.6178.64T:tinyjambu256v2
107.62108.69108.73T:isapxv20
142.15142.24142.41T:elephant200v2
7508.527508.977510.56T:elephant176v2
8252.538253.268254.11T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.510.520.53T:aes128gcmv1
0.610.630.64T:aes256gcmv1
1.031.031.04aes256gcmv1
7.457.507.55ascon128av12
10.9110.9410.97ascon80pqv12
10.9711.0011.02ascon128v12
12.7012.7212.76T:xoodyakround3
14.3014.3414.36ascon128abi32v12
19.0419.0719.10T:schwaemm256128v2
21.2321.2521.48T:schwaemm256256v2
21.3621.3921.40ascon128bi32v12
25.1425.2125.23T:grain128aeadv2
25.1725.2225.24T:schwaemm192192v2
27.2327.2827.32T:schwaemm128128v2
31.0031.0331.06romulusn
34.1534.1734.28T:isapa128v20
34.2034.2434.29T:isapa128av20
41.3641.3941.43T:giftcofb128v1
42.7242.7442.86romulusm
49.2949.3449.37T:tinyjambu128v2
57.2257.4357.58T:isapk128av20
57.5257.5357.55T:tinyjambu192v2
59.5359.6559.72T:tinyjambu256v2
74.5274.5874.62T:isapk128v20
83.3983.4283.45romulust
107.06107.11107.20T:elephant200v2
147.36147.44147.49T:isapxv20
5606.165607.085608.07T:elephant176v2
6189.696190.266192.31T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.500.510.53T:aes128gcmv1
0.600.620.65T:aes256gcmv1
0.981.001.02aes256gcmv1
7.297.337.35ascon128av12
10.7010.7410.77ascon128v12
10.9010.9510.99ascon80pqv12
12.5512.5612.60T:xoodyakround3
14.2914.3114.34ascon128abi32v12
19.0319.0719.10T:schwaemm256128v2
21.2421.2621.44T:schwaemm256256v2
21.4321.4521.47ascon128bi32v12
25.0725.1425.19T:schwaemm192192v2
25.3825.4125.42T:grain128aeadv2
27.2127.2327.30T:schwaemm128128v2
30.9931.0031.02romulusn
34.2134.2334.28T:isapa128av20
34.2434.2934.34T:isapa128v20
41.4441.4641.49T:giftcofb128v1
42.7342.7542.84romulusm
49.3249.3749.38T:tinyjambu128v2
57.2557.3957.57T:isapk128av20
57.7857.9157.91T:tinyjambu192v2
59.5859.6059.62T:tinyjambu256v2
74.5074.5774.63T:isapk128v20
83.4083.4383.48romulust
107.06107.12107.22T:elephant200v2
147.46147.51147.55T:isapxv20
5604.415606.515607.04T:elephant176v2
6189.826190.376190.90T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.500.520.53T:aes128gcmv1
0.610.620.64T:aes256gcmv1
1.001.001.01aes256gcmv1
7.307.327.37ascon128av12
10.7310.7510.78ascon128v12
10.9110.9410.97ascon80pqv12
12.5812.5912.62T:xoodyakround3
14.2914.3114.33ascon128abi32v12
19.0619.1019.14T:schwaemm256128v2
21.2221.2521.40T:schwaemm256256v2
21.4321.4821.51ascon128bi32v12
22.7622.8222.87T:isapa128v20
25.0825.1325.18T:schwaemm192192v2
25.4025.4125.43T:grain128aeadv2
27.1627.2127.26T:isapa128av20
27.2027.2427.27T:schwaemm128128v2
30.9931.0031.02romulusn
41.4341.4641.51T:giftcofb128v1
42.3442.3742.39romulust
42.7342.7642.82romulusm
45.8945.9546.01T:isapk128av20
49.3449.3749.41T:tinyjambu128v2
57.4157.4657.52T:isapk128v20
57.7857.9157.91T:tinyjambu192v2
59.5859.6159.64T:tinyjambu256v2
107.10107.14107.23T:elephant200v2
109.25109.27109.32T:isapxv20
5604.005604.845607.60T:elephant176v2
6189.726190.156192.50T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.34?0.35?0.38?T:aes256gcmv1
0.340.350.37T:aes128gcmv1
0.410.420.43aes256gcmv1
7.237.277.29ascon128av12
8.768.788.81T:xoodyakround3
10.1510.9710.99ascon80pqv12
10.9810.9911.01ascon128v12
14.2514.2814.32ascon128abi32v12
18.8518.9518.98T:schwaemm256128v2
21.1021.1621.30T:schwaemm256256v2
21.2721.3121.34ascon128bi32v12
22.8222.8822.99T:isapa128v20
23.4623.4823.50romulusn
23.5223.5523.81romulusm
24.7425.0125.11T:schwaemm192192v2
25.1025.1925.21T:grain128aeadv2
27.0127.0427.08T:schwaemm128128v2
27.0927.1427.19T:isapa128av20
38.4238.4638.52T:tinyjambu128v2
40.5840.6140.65T:tinyjambu256v2
41.6241.6541.68T:giftcofb128v1
42.0442.0542.07T:tinyjambu192v2
42.2142.2542.30romulust
45.7545.8345.92T:isapk128av20
57.1757.2657.38T:isapk128v20
72.2072.2572.28T:elephant200v2
108.74109.82110.28T:isapxv20
3705.373706.033706.76T:elephant176v2
4124.804125.624126.26T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.34?0.36?0.38?T:aes128gcmv1
0.350.360.37T:aes256gcmv1
0.410.420.43aes256gcmv1
7.307.337.35ascon128av12
8.768.798.80T:xoodyakround3
10.5110.5510.60ascon128v12
10.5410.9310.98ascon80pqv12
14.4214.4414.47ascon128abi32v12
18.8618.9319.02T:schwaemm256128v2
21.1221.1621.27T:schwaemm256256v2
21.3921.4421.45ascon128bi32v12
22.8022.8922.99T:isapa128v20
23.4823.5223.54romulusn
23.5123.5523.76romulusm
24.9124.9825.06T:schwaemm192192v2
25.0925.1025.12T:grain128aeadv2
26.9827.0327.05T:schwaemm128128v2
27.0927.1327.20T:isapa128av20
38.3738.4438.47T:tinyjambu128v2
40.6040.6340.65T:tinyjambu256v2
41.5741.6141.66T:giftcofb128v1
42.0342.0442.04T:tinyjambu192v2
42.2542.3042.34romulust
45.7845.8445.94T:isapk128av20
57.1057.2457.36T:isapk128v20
72.2072.2472.36T:elephant200v2
108.70109.76110.17T:isapxv20
3705.453706.273706.90T:elephant176v2
4124.924125.674126.33T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.31?0.35?0.39?T:aes256gcmv1
0.32?0.36?0.38?T:aes128gcmv1
0.410.420.42aes256gcmv1
7.327.347.35ascon128av12
8.778.818.83T:xoodyakround3
10.5310.5710.59ascon128v12
10.5310.9410.98ascon80pqv12
14.4214.4414.45ascon128abi32v12
18.8518.9219.01T:schwaemm256128v2
21.1121.1621.27T:schwaemm256256v2
21.4321.4521.48ascon128bi32v12
22.8122.8822.96T:isapa128v20
23.5023.5223.54romulusn
23.5223.5623.77romulusm
24.9224.9525.08T:schwaemm192192v2
25.0825.1125.11T:grain128aeadv2
26.9927.0227.05T:schwaemm128128v2
27.0727.1227.20T:isapa128av20
38.4238.4738.51T:tinyjambu128v2
40.6040.6240.65T:tinyjambu256v2
41.6141.6541.70T:giftcofb128v1
42.0242.0342.05T:tinyjambu192v2
42.2242.2642.31romulust
45.8045.8645.95T:isapk128av20
57.1957.3057.40T:isapk128v20
72.1872.2472.31T:elephant200v2
108.72109.74110.26T:isapxv20
3705.113706.173706.68T:elephant176v2
4124.674125.314126.27T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.970.970.98T:aes128gcmv1
1.101.111.11T:aes256gcmv1
1.211.221.22aes256gcmv1
7.677.707.71ascon128av12
11.1111.1411.16ascon80pqv12
11.1711.1911.20ascon128v12
12.8612.8712.89T:xoodyakround3
14.6414.6514.67ascon128abi32v12
19.6219.6719.70T:schwaemm256128v2
21.6821.7121.74ascon128bi32v12
21.8421.8722.02T:schwaemm256256v2
25.5325.6325.64T:grain128aeadv2
25.7225.7825.82T:schwaemm192192v2
27.6027.6427.67T:schwaemm128128v2
31.3431.3531.37romulusn
37.7637.8037.83T:isapa128av20
41.8141.8341.85T:giftcofb128v1
43.0843.1243.20romulusm
49.7349.7549.76T:tinyjambu128v2
49.9149.9950.07T:isapa128v20
57.9557.9958.01T:tinyjambu192v2
59.9860.1360.27T:tinyjambu256v2
64.2064.2864.40T:isapk128av20
84.7884.8284.85romulust
109.42109.46109.52T:elephant200v2
128.68128.73128.77T:isapk128v20
238.41239.55239.64T:isapxv20
5649.505650.655651.61T:elephant176v2
6259.756259.986260.36T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.960.970.98T:aes128gcmv1
1.091.091.10T:aes256gcmv1
1.181.181.19aes256gcmv1
7.517.527.57ascon128av12
10.9110.9310.95ascon128v12
11.1111.1111.14ascon80pqv12
12.7112.7312.74T:xoodyakround3
14.6314.6514.66ascon128abi32v12
19.6719.6819.72T:schwaemm256128v2
21.7721.8021.83ascon128bi32v12
21.8521.8621.99T:schwaemm256256v2
25.6825.7225.77T:schwaemm192192v2
25.8025.8125.82T:grain128aeadv2
27.5827.6127.65T:schwaemm128128v2
31.3331.3531.37romulusn
37.7837.7937.83T:isapa128av20
41.8941.9141.93T:giftcofb128v1
43.1843.2243.28romulusm
49.7249.7649.82T:tinyjambu128v2
49.9850.0150.07T:isapa128v20
58.2358.2458.35T:tinyjambu192v2
60.0660.1060.15T:tinyjambu256v2
64.2364.2664.40T:isapk128av20
84.7984.8184.85romulust
109.45109.51109.60T:elephant200v2
128.74128.76128.81T:isapk128v20
238.36239.56239.68T:isapxv20
5651.175651.565657.32T:elephant176v2
6259.766260.286261.15T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.960.970.98T:aes128gcmv1
1.091.101.13T:aes256gcmv1
1.181.181.19aes256gcmv1
7.497.517.53ascon128av12
10.9210.9311.17ascon128v12
11.1011.1011.12ascon80pqv12
12.7312.7412.76T:xoodyakround3
14.6414.6614.66ascon128abi32v12
19.6719.6919.74T:schwaemm256128v2
21.7821.8021.82ascon128bi32v12
21.8521.8822.02T:schwaemm256256v2
25.7025.7425.77T:schwaemm192192v2
25.8025.8125.82T:grain128aeadv2
27.5827.6227.69T:schwaemm128128v2
29.0729.1029.15T:isapa128av20
30.7930.8230.84T:isapa128v20
31.3231.3431.37romulusn
41.8741.8941.92T:giftcofb128v1
43.1743.2243.30romulusm
43.5943.6243.65romulust
49.7349.7749.83T:tinyjambu128v2
49.9349.9449.98T:isapk128av20
58.2358.2458.36T:tinyjambu192v2
60.0560.0960.16T:tinyjambu256v2
85.2285.2685.28T:isapk128v20
109.50109.53109.56T:elephant200v2
155.59156.35156.39T:isapxv20
5649.625650.825651.87T:elephant176v2
6259.546259.786260.51T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
7.457.487.52aes256gcmv1
11.7011.9312.18T:aes128gcmv1
12.2712.3012.45T:aes256gcmv1
12.2312.4612.84ascon128av12
14.8915.1215.28ascon128v12
15.0015.2015.38ascon80pqv12
18.7319.2919.42T:xoodyakround3
22.1422.2322.46ascon128abi32v12
29.0729.1629.41ascon128bi32v12
31.9032.0932.55T:schwaemm256128v2
34.7834.8835.15T:schwaemm256256v2
34.9835.0335.10T:grain128aeadv2
35.5835.7736.11T:schwaemm128128v2
38.5938.6538.80romulusn
41.3441.6441.91T:schwaemm192192v2
50.8051.0851.32romulusm
51.3551.4551.70T:giftcofb128v1
58.5958.7759.05T:tinyjambu128v2
68.2768.5268.67T:tinyjambu192v2
70.2570.4170.89T:tinyjambu256v2
115.38115.56115.98romulust
118.65119.01119.87T:isapa128av20
156.70157.11157.38T:elephant200v2
207.57209.27211.44T:isapk128av20
412.20412.74413.38T:isapa128v20
1357.301357.661357.97T:isapk128v20
2330.882331.102331.78T:isapxv20
7038.367039.617041.14T:elephant176v2
8384.988386.558389.23T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
7.097.157.22aes256gcmv1
11.7011.9412.19T:aes128gcmv1
12.3012.3412.66T:aes256gcmv1
12.0012.3512.77ascon128av12
14.9515.1715.25ascon128v12
15.3215.4815.63ascon80pqv12
18.4119.1319.78T:xoodyakround3
22.1622.2722.64ascon128abi32v12
29.2729.4029.45ascon128bi32v12
31.8132.0532.47T:schwaemm256128v2
35.2035.2235.27T:grain128aeadv2
35.2035.3235.54T:schwaemm256256v2
35.3335.5736.02T:schwaemm128128v2
38.8438.9639.15romulusn
41.9642.2742.78T:schwaemm192192v2
51.6351.8251.98T:giftcofb128v1
52.7952.9753.20romulusm
58.6758.9659.09T:tinyjambu128v2
68.6368.7068.77T:tinyjambu192v2
70.5670.6270.78T:tinyjambu256v2
115.18115.41115.51romulust
118.78119.66119.95T:isapa128av20
156.67157.05157.41T:elephant200v2
207.38208.64211.84T:isapk128av20
412.57413.15413.48T:isapa128v20
1358.451358.821359.52T:isapk128v20
2331.622332.032332.72T:isapxv20
7037.957038.527039.62T:elephant176v2
8383.688386.298388.20T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
7.127.167.20aes256gcmv1
11.7111.7812.02T:aes128gcmv1
11.7811.9412.09ascon128av12
12.2512.3512.48T:aes256gcmv1
14.7714.8815.05ascon128v12
15.0415.1515.35ascon80pqv12
18.5518.7318.84T:xoodyakround3
22.1622.2422.33ascon128abi32v12
29.2729.3929.45ascon128bi32v12
31.7331.8532.03T:schwaemm256128v2
34.9935.0935.23T:schwaemm256256v2
35.1135.1635.20T:grain128aeadv2
35.2435.4535.91T:schwaemm128128v2
38.8838.9339.08romulusn
42.2242.6042.80T:schwaemm192192v2
51.6651.7651.87T:giftcofb128v1
52.6452.8052.99romulusm
58.5458.7758.91T:tinyjambu128v2
68.5568.6068.76T:tinyjambu192v2
70.5370.6070.70T:tinyjambu256v2
72.3672.5872.94romulust
73.6173.8774.23T:isapa128av20
129.89130.56131.12T:isapk128av20
156.88157.06157.35T:elephant200v2
214.32214.62215.36T:isapa128v20
711.05711.31711.75T:isapk128v20
1220.091220.311221.09T:isapxv20
7037.417038.167039.19T:elephant176v2
8354.418384.988385.82T:elephant160v2