VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Core 2 65nm (6fb); 2007 Intel Core 2 Quad Q6600; 4 x 2404MHz; margaux, supercop-20250922

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
10.1610.1810.20ascon128av12
15.2515.2615.26ascon128v12
15.2715.2815.28ascon80pqv12
16.8016.9517.15T:aes128gcmv1
19.2519.2819.31ascon128abi32v12
19.8520.0820.29T:aes256gcmv1
28.6028.6028.60ascon128bi32v12
28.7728.8428.94T:xoodyakround3
32.2332.2932.56T:schwaemm256128v2
42.7443.2143.32T:schwaemm192192v2
45.4045.4345.45T:schwaemm128128v2
38.01?46.05?121.63?T:schwaemm256256v2
54.2754.3354.46T:giftcofb128v1
58.5758.5758.65T:isapa128v20
60.6760.6860.68T:isapa128av20
61.9361.9461.98T:grain128aeadv2
71.9172.0872.13romulusn
77.4277.5177.77T:tinyjambu128v2
93.9193.9994.04T:tinyjambu192v2
100.06100.06100.07T:tinyjambu256v2
117.31117.43117.62romulusm
234.62234.66234.74T:isapk128av20
241.19242.08243.93T!!!romulust
270.85271.57276.11T:elephant200v2
313.44313.51313.93T:isapk128v20
389.03390.53406.16T:isapxv20
13039.9813043.7513057.99T:elephant176v2
14889.3114939.3914945.45T:elephant160v2
32364.1332364.6532365.12aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
10.2610.3610.36ascon128av12
15.2115.2415.33ascon80pqv12
15.2315.3115.31ascon128v12
16.7416.9617.14T:aes128gcmv1
19.2719.2819.32ascon128abi32v12
19.9120.0520.36T:aes256gcmv1
28.3928.5028.55T:xoodyakround3
28.5428.5528.55ascon128bi32v12
32.0732.1632.25T:schwaemm256128v2
42.7542.7643.36T:schwaemm192192v2
45.2945.5746.03T:schwaemm128128v2
38.81?47.01?122.87?T:schwaemm256256v2
54.6155.0855.32T:giftcofb128v1
58.5058.5758.81T:isapa128v20
60.6260.6560.70T:isapa128av20
66.9266.9466.98T:grain128aeadv2
73.0073.0173.03romulusn
78.2478.2578.51T:tinyjambu128v2
94.1794.5294.55T:tinyjambu192v2
100.03100.09100.09T:tinyjambu256v2
117.45117.61117.67romulusm
234.64234.68234.70T:isapk128av20
240.33241.61241.89T!!!romulust
269.95271.50276.19T:elephant200v2
313.00313.49314.06T:isapk128v20
389.43404.64405.75T:isapxv20
13039.8313043.9613057.90T:elephant176v2
14887.1314939.2314942.15T:elephant160v2
32367.5632368.0232370.82aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
10.2710.3410.36ascon128av12
15.2215.2415.29ascon80pqv12
15.3015.3115.31ascon128v12
16.7416.9117.18T:aes128gcmv1
19.2819.2919.32ascon128abi32v12
19.9420.0720.38T:aes256gcmv1
28.4628.5228.62T:xoodyakround3
28.3728.9728.97ascon128bi32v12
29.2629.3129.31T:isapa128v20
32.0932.1532.25T:schwaemm256128v2
41.1741.1941.22T:isapa128av20
42.7542.9643.34T:schwaemm192192v2
45.2945.3646.03T:schwaemm128128v2
38.82?47.08?122.86?T:schwaemm256256v2
54.6855.0855.32T:giftcofb128v1
66.9266.9566.98T:grain128aeadv2
73.0073.0173.02romulusn
78.2478.4878.60T:tinyjambu128v2
81.7181.7482.42T!!!romulust
94.1794.5094.55T:tinyjambu192v2
100.07100.09100.09T:tinyjambu256v2
117.59117.63117.68romulusm
159.03159.06159.10T:isapk128av20
200.14200.50200.56T:isapk128v20
236.31251.53253.03T:isapxv20
270.38271.23276.15T:elephant200v2
863.85864.54868.41aes256gcmv1
13039.6113043.6513057.97T:elephant176v2
14887.6614939.2214942.29T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
10.1010.1210.16ascon128av12
12.4012.5212.59T:aes128gcmv1
13.9914.0614.20T:aes256gcmv1
15.0915.1115.11ascon128v12
15.1315.1515.15ascon80pqv12
19.1219.1519.17ascon128abi32v12
22.1522.1822.26T:xoodyakround3
28.5128.5228.52ascon128bi32v12
32.1632.1732.31T:schwaemm256128v2
42.5842.7142.71T:schwaemm192192v2
43.9344.0644.20T:isapa128v20
44.8344.9245.00T:schwaemm128128v2
38.58?45.51?120.66?T:schwaemm256256v2
50.8950.8951.18T:isapa128av20
54.3354.3554.40T:giftcofb128v1
58.4058.4458.50romulusn
62.0562.0862.09T:grain128aeadv2
62.8562.9062.96T:tinyjambu128v2
73.9073.9173.92T:tinyjambu192v2
74.6874.6975.01T:tinyjambu256v2
81.0881.1581.22romulusm
161.05161.74162.54T!!!romulust
192.37192.40192.42T:isapk128av20
202.43203.28207.81T:elephant200v2
250.92250.94251.38T:isapk128v20
312.72314.09329.28T:isapxv20
9740.019745.109753.82T:elephant176v2
11166.4611203.9311207.97T:elephant160v2
16612.6816613.3216613.51aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
10.1410.1610.18ascon128av12
12.4712.5412.67T:aes128gcmv1
14.0314.1014.89T:aes256gcmv1
15.0015.0015.14ascon80pqv12
15.1415.1515.15ascon128v12
19.1319.1619.19ascon128abi32v12
21.9522.0122.07T:xoodyakround3
28.3928.3928.39ascon128bi32v12
32.1132.2932.32T:schwaemm256128v2
42.4642.7042.84T:schwaemm192192v2
43.9144.0444.10T:isapa128v20
45.0545.1045.24T:schwaemm128128v2
39.41?46.03?121.35?T:schwaemm256256v2
51.3551.3651.36T:isapa128av20
54.3654.5554.71T:giftcofb128v1
58.8758.8958.92romulusn
63.2663.3263.43T:tinyjambu128v2
64.4264.4464.48T:grain128aeadv2
73.9374.1074.12T:tinyjambu192v2
75.2675.2775.27T:tinyjambu256v2
81.0881.2481.41romulusm
161.18161.38161.72T!!!romulust
192.38192.40192.62T:isapk128av20
202.28203.14207.80T:elephant200v2
250.71250.94251.25T:isapk128v20
312.94328.07329.07T:isapxv20
9739.719745.169753.93T:elephant176v2
11166.1711203.9611206.59T:elephant160v2
16615.5416616.0216619.29aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
10.1610.1710.18ascon128av12
12.4412.5112.60T:aes128gcmv1
14.0314.1114.25T:aes256gcmv1
15.0015.0015.00ascon80pqv12
15.1515.1515.15ascon128v12
19.1519.1619.20ascon128abi32v12
21.9922.0222.11T:xoodyakround3
28.5428.5428.54ascon128bi32v12
29.2729.2729.30T:isapa128v20
32.1132.1732.31T:schwaemm256128v2
41.6041.6141.61T:isapa128av20
42.4842.7142.84T:schwaemm192192v2
45.0445.1945.26T:schwaemm128128v2
38.73?46.03?121.36?T:schwaemm256256v2
54.3654.5654.69T:giftcofb128v1
58.8758.8958.96romulusn
63.2963.3363.47T:tinyjambu128v2
64.4464.4464.50T:grain128aeadv2
73.9374.1074.12T:tinyjambu192v2
75.2575.2775.27T:tinyjambu256v2
81.0881.2481.25romulusm
81.4881.5181.96T!!!romulust
154.57154.60154.77T:isapk128av20
194.41194.44194.61T:isapk128v20
202.76203.38207.80T:elephant200v2
236.36251.49252.71T:isapxv20
863.81863.94868.03aes256gcmv1
9740.129744.999753.97T:elephant176v2
11165.9411203.9211206.69T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
8.028.098.13T:aes128gcmv1
8.058.118.16T:aes256gcmv1
10.0110.0210.09ascon128av12
14.9314.9514.95ascon128v12
14.9814.9914.99ascon80pqv12
15.4315.5715.60T:xoodyakround3
19.0219.0319.06ascon128abi32v12
28.4528.4528.45ascon128bi32v12
29.3429.3729.37T:isapa128v20
32.0032.0532.06T:schwaemm256128v2
41.2041.2341.24T:isapa128av20
42.2342.4742.57T:schwaemm192192v2
44.4244.4444.77T:schwaemm128128v2
44.7344.7444.76romulusm
44.7144.7644.83romulusn
37.57?44.94?120.75?T:schwaemm256256v2
48.3848.3848.38T:tinyjambu128v2
49.8249.8450.46T:tinyjambu256v2
53.9453.9453.97T:tinyjambu192v2
54.3154.3854.41T:giftcofb128v1
62.2262.2362.23T:grain128aeadv2
81.3181.3381.36T!!!romulust
137.82138.37140.22T:elephant200v2
150.09150.12150.13T:isapk128av20
188.31188.36188.43T:isapk128v20
235.83237.38252.96T:isapxv20
861.75861.89862.07aes256gcmv1
6441.856444.996449.85T:elephant176v2
7443.727470.337475.42T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
7.998.078.17T:aes128gcmv1
8.008.098.18T:aes256gcmv1
10.0310.0410.06ascon128av12
14.7814.7914.79ascon80pqv12
14.9814.9914.99ascon128v12
15.4215.5515.59T:xoodyakround3
18.9218.9819.04ascon128abi32v12
28.2528.2728.27ascon128bi32v12
29.3829.3829.38T:isapa128v20
32.0432.0832.12T:schwaemm256128v2
41.1541.2041.22T:isapa128av20
42.2742.2842.43T:schwaemm192192v2
44.7344.7344.84romulusn
44.7244.7444.78romulusm
44.8344.8645.02T:schwaemm128128v2
37.47?44.90?120.78?T:schwaemm256256v2
48.3848.4048.40T:tinyjambu128v2
50.4650.4950.50T:tinyjambu256v2
53.6753.6753.69T:tinyjambu192v2
54.1154.3154.42T:giftcofb128v1
61.6561.6761.68T:grain128aeadv2
81.2581.3481.56T!!!romulust
138.14138.37140.23T:elephant200v2
150.09150.12150.13T:isapk128av20
188.30188.36188.83T:isapk128v20
236.26251.47252.92T:isapxv20
863.44864.01867.66aes256gcmv1
6442.066445.376449.91T:elephant176v2
7444.287470.267471.93T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
7.998.078.16T:aes128gcmv1
7.998.108.23T:aes256gcmv1
10.0410.0410.06ascon128av12
14.7914.7914.79ascon80pqv12
14.9914.9914.99ascon128v12
15.4215.5215.60T:xoodyakround3
18.9518.9719.04ascon128abi32v12
28.5728.5728.57ascon128bi32v12
29.3829.3829.38T:isapa128v20
32.0232.0832.12T:schwaemm256128v2
41.1741.2041.22T:isapa128av20
42.2642.4042.43T:schwaemm192192v2
44.7244.7444.77romulusm
44.7344.7544.84romulusn
37.49?44.81?120.76?T:schwaemm256256v2
44.8544.8744.98T:schwaemm128128v2
48.3948.3948.39T:tinyjambu128v2
50.4950.4950.49T:tinyjambu256v2
53.6753.6753.69T:tinyjambu192v2
54.0954.3354.43T:giftcofb128v1
61.6761.6861.69T:grain128aeadv2
81.2981.3381.50T!!!romulust
137.85138.38140.22T:elephant200v2
150.11150.13150.14T:isapk128av20
188.32188.35188.38T:isapk128v20
235.87251.46252.92T:isapxv20
863.31863.85867.67aes256gcmv1
6442.026445.156449.88T:elephant176v2
7444.567470.237471.91T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
10.3610.3710.37ascon128av12
14.8914.9515.06T:aes128gcmv1
15.3215.3215.32ascon128v12
15.3715.3715.37ascon80pqv12
16.6116.6616.78T:aes256gcmv1
19.5819.6019.61ascon128abi32v12
22.4722.4822.53T:xoodyakround3
28.9729.0029.00ascon128bi32v12
33.1633.1833.29T:schwaemm256128v2
43.5843.6143.62T:schwaemm192192v2
45.4945.5845.64T:schwaemm128128v2
45.84?46.75?117.58?T:schwaemm256256v2
54.3854.3854.71T:isapa128av20
54.8954.9054.90T:giftcofb128v1
58.9859.0359.07romulusn
62.7262.7362.73T:grain128aeadv2
63.3563.3763.48T:tinyjambu128v2
64.4064.5064.52T:isapa128v20
74.4874.4974.50T:tinyjambu192v2
75.3075.3075.51T:tinyjambu256v2
81.6581.7081.76romulusm
163.46164.08164.91T!!!romulust
207.03207.57211.79T:elephant200v2
217.01217.02217.05T:isapk128av20
432.46432.48433.13T:isapk128v20
524.70524.97539.22T:isapxv20
9816.279819.349827.72T:elephant176v2
11294.8411330.4511331.75T:elephant160v2
16945.6016946.0016946.25aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
10.4110.4110.44ascon128av12
14.9114.9415.05T:aes128gcmv1
15.3015.3015.30ascon80pqv12
15.3915.3915.39ascon128v12
16.6216.6416.84T:aes256gcmv1
19.6019.6219.64ascon128abi32v12
22.2922.3022.34T:xoodyakround3
28.8828.8828.88ascon128bi32v12
33.0933.1133.29T:schwaemm256128v2
43.4543.6843.79T:schwaemm192192v2
45.6845.7345.86T:schwaemm128128v2
46.04?47.27?118.27?T:schwaemm256256v2
54.8054.8154.81T:isapa128av20
54.9555.1155.19T:giftcofb128v1
59.4459.4959.63romulusn
63.7663.8163.89T:tinyjambu128v2
64.4464.5364.55T:isapa128v20
64.8564.8664.89T:grain128aeadv2
74.5074.6274.70T:tinyjambu192v2
75.8075.8275.82T:tinyjambu256v2
81.8281.8881.91romulusm
163.68163.78164.17T!!!romulust
207.24207.68211.79T:elephant200v2
216.99217.00217.09T:isapk128av20
432.46432.50432.90T:isapk128v20
524.99539.24539.25T:isapxv20
9816.639819.479827.77T:elephant176v2
11294.9311330.4711330.67T:elephant160v2
16948.5316948.8016951.65aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
10.3910.4110.41ascon128av12
14.8914.9715.07T:aes128gcmv1
15.3015.3015.30ascon80pqv12
15.3915.3915.39ascon128v12
16.6316.6516.85T:aes256gcmv1
19.6019.6219.65ascon128abi32v12
22.3322.3422.40T:xoodyakround3
29.0129.0129.01ascon128bi32v12
33.0933.1133.29T:schwaemm256128v2
39.5839.5839.63T:isapa128v20
43.5943.6043.61T:isapa128av20
43.6843.7943.82T:schwaemm192192v2
45.6845.7345.82T:schwaemm128128v2
46.62?47.27?118.27?T:schwaemm256256v2
54.9555.1155.19T:giftcofb128v1
59.4559.4659.49romulusn
63.7663.8163.93T:tinyjambu128v2
64.8564.8664.89T:grain128aeadv2
74.5074.6274.70T:tinyjambu192v2
75.8175.8275.82T:tinyjambu256v2
81.8881.9181.93romulusm
83.8383.8584.29T!!!romulust
169.58169.60169.61T:isapk128av20
206.92207.52211.80T:elephant200v2
288.56288.58288.95T:isapk128v20
345.48359.71359.72T:isapxv20
1196.591196.841200.41aes256gcmv1
9816.349819.449827.90T:elephant176v2
11294.5511330.5111330.64T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
15.8315.9616.42ascon128av12
20.4520.4520.45ascon128v12
20.5720.5720.66ascon80pqv12
29.6429.6429.74ascon128abi32v12
34.8735.3137.00T:xoodyakround3
39.5039.5039.83ascon128bi32v12
55.5455.6055.70T:schwaemm256128v2
60.3560.3760.48T:schwaemm128128v2
67.3267.3567.45T:giftcofb128v1
70.5370.5371.48T:grain128aeadv2
71.0271.1671.28T:schwaemm192192v2
71.4071.8472.08romulusn
74.2374.9675.07T:tinyjambu128v2
74.57?75.12?184.75?T:schwaemm256256v2
76.9177.0478.08T:aes128gcmv1
86.4986.7087.33T:aes256gcmv1
87.2287.2287.93T:tinyjambu192v2
88.3888.5588.79T:tinyjambu256v2
94.4894.6195.66romulusm
133.77133.79134.27T:isapa128av20
219.18219.66220.18T!!!romulust
292.84294.00299.88T:elephant200v2
533.28534.77536.16T:isapa128v20
744.48744.67744.92T:isapk128av20
4556.744556.914557.23T:isapk128v20
5312.305312.935332.70T:isapxv20
12235.8812241.1312244.72T:elephant176v2
15126.3215171.9915173.32T:elephant160v2
24595.6624596.1724603.02aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
15.7916.0516.63ascon128av12
20.6220.6220.83ascon80pqv12
20.7020.7020.98ascon128v12
29.5029.6129.95ascon128abi32v12
34.0434.0535.55T:xoodyakround3
39.7139.7140.02ascon128bi32v12
55.5355.5855.95T:schwaemm256128v2
59.8159.8760.27T:schwaemm128128v2
67.3267.4867.62T:giftcofb128v1
71.1171.2871.65T:schwaemm192192v2
71.8772.1072.28romulusn
73.3373.3873.41T:grain128aeadv2
75.2775.2775.27T:tinyjambu128v2
74.84?75.52?186.02?T:schwaemm256256v2
76.2176.4177.49T:aes128gcmv1
84.7585.1586.05T:aes256gcmv1
87.3487.6087.81T:tinyjambu192v2
89.2089.2089.20T:tinyjambu256v2
97.4597.5997.82romulusm
134.21134.29134.34T:isapa128av20
219.38219.90220.34T!!!romulust
293.46293.77300.02T:elephant200v2
534.87535.62537.62T:isapa128v20
744.38744.53745.16T:isapk128av20
4556.804556.944557.45T:isapk128v20
5320.315332.915333.42T:isapxv20
12235.8412242.2012244.34T:elephant176v2
15136.2315171.8815172.83T:elephant160v2
24599.3224602.2824605.05aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
15.7816.0516.05ascon128av12
20.6220.6220.62ascon80pqv12
20.7120.7120.71ascon128v12
29.5029.5029.52ascon128abi32v12
34.4034.4235.41T:xoodyakround3
39.8039.8039.80ascon128bi32v12
55.4155.6155.90T:schwaemm256128v2
59.8159.8759.97T:schwaemm128128v2
67.3267.4867.62T:giftcofb128v1
71.1871.3071.52T:schwaemm192192v2
71.8772.1072.25romulusn
73.2973.3373.34T:grain128aeadv2
75.2775.2775.34T:tinyjambu128v2
74.84?75.57?186.01?T:schwaemm256256v2
76.8977.0077.57T:aes128gcmv1
84.9585.5186.33T:aes256gcmv1
87.3487.3487.81T:tinyjambu192v2
89.2089.2089.20T:tinyjambu256v2
89.1989.2389.48T:isapa128av20
97.4597.6297.81romulusm
136.96137.35137.57T!!!romulust
277.21277.21277.21T:isapa128v20
293.59294.09299.97T:elephant200v2
483.82483.96484.05T:isapk128av20
2414.232414.342415.01T:isapk128v20
2779.422799.292799.62T:isapxv20
8847.998848.278852.15aes256gcmv1
12235.4112239.0712244.80T:elephant176v2
15139.6115171.7715174.77T:elephant160v2