VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Core 2 65nm (6fb); 2007 Intel Core 2 Quad Q6600; 4 x 2404MHz; margaux, supercop-20240625

[Page version: 20240726 23:46:23]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Implementation notes

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
10.1710.1910.20ascon128av12
15.2515.2615.26ascon128v12
15.2715.2815.29ascon80pqv12
16.6916.9317.03T:aes128gcmv1
19.2319.2719.29ascon128abi32v12
19.9120.0420.28T:aes256gcmv1
28.6028.6028.60ascon128bi32v12
28.7528.8428.85T:xoodyakround3
32.2332.7132.75T:schwaemm256128v2
42.6442.7443.12T:schwaemm192192v2
44.6244.7746.17T:schwaemm256256v2
45.2545.4145.43T:schwaemm128128v2
54.2854.2954.29T:giftcofb128v1
58.8358.8858.91T:isapa128v20
60.6460.6660.70T:isapa128av20
61.7461.9464.67T:grain128aeadv2
72.8872.9473.54romulusn
77.3977.4077.54T:tinyjambu128v2
93.9093.9393.95T:tinyjambu192v2
100.06100.06100.09T:tinyjambu256v2
117.32117.63117.70romulusm
234.61234.65234.72T:isapk128av20
240.47240.54240.57T!!!romulust
272.43275.59275.88T:elephant200v2
313.47313.57314.11T:isapk128v20
369.81?398.39?422.69?T:isapxv20
13028.8813202.7913219.40T:elephant176v2
14938.5914939.2114943.23T:elephant160v2
28402.6328403.0328405.51aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
10.1710.2210.25ascon128av12
15.1915.2115.24ascon80pqv12
15.3015.3115.31ascon128v12
16.7416.9417.06T:aes128gcmv1
19.2819.2919.31ascon128abi32v12
19.9620.2420.29T:aes256gcmv1
28.3928.4728.49T:xoodyakround3
28.5428.5528.55ascon128bi32v12
32.0832.2632.28T:schwaemm256128v2
42.9543.0243.32T:schwaemm192192v2
45.2745.2945.33T:schwaemm128128v2
45.1045.5047.13T:schwaemm256256v2
54.2754.3354.33T:giftcofb128v1
58.6358.7458.92T:isapa128v20
60.6260.6560.72T:isapa128av20
66.6166.8469.74T:grain128aeadv2
72.9573.1673.34romulusn
78.2478.2478.39T:tinyjambu128v2
93.1793.3394.52T:tinyjambu192v2
100.09100.09100.09T:tinyjambu256v2
117.31117.62117.64romulusm
234.64234.66234.79T:isapk128av20
240.29240.37240.57T!!!romulust
272.45275.62275.93T:elephant200v2
313.46313.56314.07T:isapk128v20
370.09?394.03?419.02?T:isapxv20
13028.9013202.8313219.54T:elephant176v2
14938.6414939.0714942.84T:elephant160v2
28396.9328399.6528406.21aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
10.1910.2210.25ascon128av12
15.1615.1815.24ascon80pqv12
15.1615.3115.31ascon128v12
16.8116.9117.11T:aes128gcmv1
19.2819.2919.30ascon128abi32v12
19.8820.1720.29T:aes256gcmv1
28.3728.3728.51ascon128bi32v12
28.4728.5328.54T:xoodyakround3
29.2229.2629.30T:isapa128v20
32.1932.2632.28T:schwaemm256128v2
41.1841.1941.24T:isapa128av20
42.9543.0243.32T:schwaemm192192v2
45.2745.2845.53T:schwaemm128128v2
45.1645.5147.14T:schwaemm256256v2
54.2754.3354.64T:giftcofb128v1
66.6166.8769.75T:grain128aeadv2
73.0273.1573.19romulusn
78.2478.2478.39T:tinyjambu128v2
81.7381.7981.92T!!!romulust
93.3393.3394.52T:tinyjambu192v2
100.09100.09100.09T:tinyjambu256v2
117.31117.38117.63romulusm
159.03159.07159.09T:isapk128av20
200.49200.55200.87T:isapk128v20
227.25237.41247.51T:isapxv20
272.45275.62275.93T:elephant200v2
860.74862.70870.79aes256gcmv1
13028.7713202.7113219.52T:elephant176v2
14938.4614939.3014942.66T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
10.1110.1210.15ascon128av12
12.4612.5112.64T:aes128gcmv1
13.9814.1014.21T:aes256gcmv1
15.0915.1115.12ascon128v12
15.1315.1515.15ascon80pqv12
19.1119.1419.15ascon128abi32v12
22.1422.1722.19T:xoodyakround3
28.5028.5228.52ascon128bi32v12
32.1632.4032.41T:schwaemm256128v2
42.5142.5242.84T:schwaemm192192v2
43.9744.0244.10T:isapa128v20
44.5244.5745.58T:schwaemm256256v2
44.9644.9845.11T:schwaemm128128v2
50.8950.9051.17T:isapa128av20
54.3254.3354.35T:giftcofb128v1
58.8158.8259.12romulusn
62.1762.3364.50T:grain128aeadv2
62.8562.9062.97T:tinyjambu128v2
73.8673.8873.90T:tinyjambu192v2
74.6874.6975.17T:tinyjambu256v2
81.0981.2281.36romulusm
160.79160.84160.86T!!!romulust
192.37192.40192.65T:isapk128av20
203.81207.41207.70T:elephant200v2
250.91250.94251.22T:isapk128v20
303.59317.87330.00T:isapxv20
9733.019862.359874.59T:elephant176v2
11203.5411203.7011206.69T:elephant160v2
14631.9914632.6514633.84aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
10.1010.1010.13ascon128av12
12.4512.5112.58T:aes128gcmv1
14.0214.1414.20T:aes256gcmv1
15.1115.1315.13ascon80pqv12
15.1315.1415.14ascon128v12
19.1419.1619.17ascon128abi32v12
21.9421.9922.01T:xoodyakround3
28.3828.3928.41ascon128bi32v12
32.1232.1332.17T:schwaemm256128v2
42.5342.7042.81T:schwaemm192192v2
43.9144.0544.12T:isapa128v20
44.7244.7546.10T:schwaemm256256v2
44.8745.1045.23T:schwaemm128128v2
51.3451.3551.38T:isapa128av20
54.2954.3554.80T:giftcofb128v1
58.8058.8858.97romulusn
63.2863.2863.38T:tinyjambu128v2
64.2964.5266.87T:grain128aeadv2
73.4273.5174.09T:tinyjambu192v2
75.2675.2775.28T:tinyjambu256v2
81.0981.1281.19romulusm
160.79160.82161.13T!!!romulust
192.39192.41192.50T:isapk128av20
204.05207.43207.72T:elephant200v2
250.92250.95251.24T:isapk128v20
303.73315.61328.18T:isapxv20
9732.889862.379874.38T:elephant176v2
11203.5011203.6811206.58T:elephant160v2
14629.3314630.4914638.38aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
10.1010.1210.13ascon128av12
12.4912.5212.57T:aes128gcmv1
14.0314.1114.20T:aes256gcmv1
15.1315.1315.13ascon80pqv12
15.1415.1415.14ascon128v12
19.1519.1719.17ascon128abi32v12
21.9922.0222.04T:xoodyakround3
28.4028.5428.54ascon128bi32v12
29.2529.2729.40T:isapa128v20
32.1132.1232.14T:schwaemm256128v2
41.6041.6141.61T:isapa128av20
42.5242.5342.81T:schwaemm192192v2
44.6944.8046.09T:schwaemm256256v2
45.0445.1045.24T:schwaemm128128v2
54.2954.3154.43T:giftcofb128v1
58.8158.8758.96romulusn
63.2863.2963.38T:tinyjambu128v2
64.2964.5466.87T:grain128aeadv2
73.5173.6274.09T:tinyjambu192v2
75.2775.2775.27T:tinyjambu256v2
81.1081.1281.20romulusm
81.5081.5481.60T!!!romulust
154.59154.60154.83T:isapk128av20
194.43194.45194.73T:isapk128v20
204.00207.43207.72T:elephant200v2
232.30237.57242.43T:isapxv20
861.30862.02870.45aes256gcmv1
9732.969862.599874.58T:elephant176v2
11203.4011203.7411206.54T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
7.928.028.09T:aes256gcmv1
8.088.108.17T:aes128gcmv1
10.0010.0310.06ascon128av12
14.9314.9514.95ascon128v12
14.9814.9914.99ascon80pqv12
15.4315.5115.57T:xoodyakround3
19.0219.0419.05ascon128abi32v12
28.4528.4528.45ascon128bi32v12
28.4929.2429.45T:isapa128v20
32.0232.0532.07T:schwaemm256128v2
41.2041.2241.24T:isapa128av20
42.3842.4742.55T:schwaemm192192v2
44.2444.3145.00T:schwaemm256256v2
44.7044.7344.75romulusn
44.6444.7444.86T:schwaemm128128v2
44.7244.7544.79romulusm
48.3848.3848.38T:tinyjambu128v2
49.8249.8450.47T:tinyjambu256v2
53.8853.9453.94T:tinyjambu192v2
54.3954.4154.42T:giftcofb128v1
62.0462.5964.49T:grain128aeadv2
81.2881.3281.34T!!!romulust
137.97139.99140.23T:elephant200v2
150.08150.13150.18T:isapk128av20
188.30188.34188.37T:isapk128v20
227.21237.37247.49T:isapxv20
861.58861.95862.09aes256gcmv1
6436.946522.776530.09T:elephant176v2
7469.677469.947471.79T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
7.998.078.15T:aes256gcmv1
8.018.118.17T:aes128gcmv1
10.0010.0410.07ascon128av12
14.9014.9114.91ascon128v12
15.0115.0315.03ascon80pqv12
15.4315.5215.54T:xoodyakround3
18.9718.9819.02ascon128abi32v12
28.2528.2728.31ascon128bi32v12
29.3129.4629.47T:isapa128v20
32.0032.0832.09T:schwaemm256128v2
41.1641.2041.21T:isapa128av20
42.2842.3542.37T:schwaemm192192v2
44.2544.3144.98T:schwaemm256256v2
44.7244.7344.77romulusn
44.7344.7744.78romulusm
44.6444.8644.90T:schwaemm128128v2
48.3848.4048.40T:tinyjambu128v2
50.4950.4950.49T:tinyjambu256v2
53.6753.6753.67T:tinyjambu192v2
54.3354.3554.36T:giftcofb128v1
61.4661.6964.10T:grain128aeadv2
81.2381.2681.31T!!!romulust
137.89139.99140.24T:elephant200v2
150.07150.13150.16T:isapk128av20
188.31188.35188.37T:isapk128v20
227.23237.70247.48T:isapxv20
861.28862.79870.26aes256gcmv1
6436.896522.506530.49T:elephant176v2
7469.747469.967471.90T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
7.988.078.17T:aes256gcmv1
7.998.118.21T:aes128gcmv1
10.0410.0510.07ascon128av12
14.9114.9115.01ascon128v12
15.0315.0315.03ascon80pqv12
15.4515.5115.53T:xoodyakround3
18.9718.9919.02ascon128abi32v12
28.3728.5728.57ascon128bi32v12
29.2629.4529.47T:isapa128v20
31.9832.0832.10T:schwaemm256128v2
41.1541.2041.20T:isapa128av20
42.3042.3542.37T:schwaemm192192v2
44.2444.3244.93T:schwaemm256256v2
44.7244.7344.76romulusn
44.7244.7744.78romulusm
44.6644.8844.88T:schwaemm128128v2
48.3848.3948.39T:tinyjambu128v2
50.4950.4950.49T:tinyjambu256v2
53.6453.6753.67T:tinyjambu192v2
54.3454.3554.46T:giftcofb128v1
61.4761.7064.11T:grain128aeadv2
81.2281.2681.31T!!!romulust
137.89140.00140.20T:elephant200v2
150.10150.13150.15T:isapk128av20
188.33188.37188.97T:isapk128v20
227.22237.35247.48T:isapxv20
861.29862.81870.24aes256gcmv1
6436.966522.676530.68T:elephant176v2
7469.857470.037471.82T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
10.3510.3610.36ascon128av12
14.9415.0215.05T:aes128gcmv1
15.3215.3215.34ascon128v12
15.3715.3715.37ascon80pqv12
16.7616.8116.85T:aes256gcmv1
19.5719.5919.61ascon128abi32v12
22.4622.4722.47T:xoodyakround3
28.9829.0029.00ascon128bi32v12
33.1833.3733.38T:schwaemm256128v2
43.4743.4943.77T:schwaemm192192v2
45.5845.6045.62T:schwaemm128128v2
45.8445.8446.78T:schwaemm256256v2
54.3854.3854.67T:isapa128av20
54.8854.8854.90T:giftcofb128v1
59.3559.3759.66romulusn
62.4862.7264.74T:grain128aeadv2
63.3563.3863.42T:tinyjambu128v2
64.4864.5064.57T:isapa128v20
74.4574.4674.46T:tinyjambu192v2
75.3075.3075.78T:tinyjambu256v2
81.6981.7681.78romulusm
163.23163.24163.26T!!!romulust
208.26211.75211.76T:elephant200v2
216.99217.00217.04T:isapk128av20
432.46432.47432.67T:isapk128v20
524.98541.37543.19T:isapxv20
9815.399936.289941.12T:elephant176v2
11330.2211330.4311333.22T:elephant160v2
14923.5114924.1514924.96aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
10.3510.3610.38ascon128av12
14.9614.9615.04T:aes128gcmv1
15.3715.3715.37ascon80pqv12
15.3715.3715.37ascon128v12
16.7116.7616.82T:aes256gcmv1
19.6119.6119.62ascon128abi32v12
22.2922.2922.30T:xoodyakround3
28.8828.8828.90ascon128bi32v12
33.1333.1333.14T:schwaemm256128v2
43.4743.6943.77T:schwaemm192192v2
45.4945.7245.85T:schwaemm128128v2
46.0346.0447.27T:schwaemm256256v2
54.8054.8154.83T:isapa128av20
54.8754.9155.12T:giftcofb128v1
59.3559.4259.49romulusn
63.7563.7663.81T:tinyjambu128v2
64.3864.5364.56T:isapa128v20
64.8664.9267.17T:grain128aeadv2
74.1374.1874.61T:tinyjambu192v2
75.8275.8275.83T:tinyjambu256v2
81.7781.8081.93romulusm
163.20163.24163.27T!!!romulust
208.30211.76211.76T:elephant200v2
217.00217.00217.01T:isapk128av20
432.46432.49432.53T:isapk128v20
524.98526.49541.38T:isapxv20
9815.389936.109940.86T:elephant176v2
11330.2711330.4611333.03T:elephant160v2
14921.6814922.3114929.53aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
10.3410.3710.38ascon128av12
14.9414.9715.05T:aes128gcmv1
15.3615.3615.36ascon80pqv12
15.3715.3715.37ascon128v12
16.7116.7716.81T:aes256gcmv1
19.6119.6119.62ascon128abi32v12
22.3422.3422.35T:xoodyakround3
28.8829.0129.01ascon128bi32v12
33.1233.1333.14T:schwaemm256128v2
39.6239.6339.83T:isapa128v20
43.4743.4743.76T:schwaemm192192v2
43.6043.6043.60T:isapa128av20
45.6045.7245.85T:schwaemm128128v2
46.0246.0347.26T:schwaemm256256v2
54.8754.8755.06T:giftcofb128v1
59.3559.4259.49romulusn
63.7563.7663.82T:tinyjambu128v2
64.8664.9267.18T:grain128aeadv2
74.1374.4274.61T:tinyjambu192v2
75.8175.8275.82T:tinyjambu256v2
81.7781.7881.93romulusm
83.8183.8383.86T!!!romulust
169.59169.60169.64T:isapk128av20
208.67211.76211.76T:elephant200v2
288.56288.58288.61T:isapk128v20
345.20345.22351.53T:isapxv20
1153.451153.671161.35aes256gcmv1
9815.469936.109940.91T:elephant176v2
11330.2811330.5211333.04T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
15.8715.9216.34ascon128av12
20.4520.4520.52ascon128v12
20.5720.5720.66ascon80pqv12
29.6229.6429.84ascon128abi32v12
34.8435.1336.79T:xoodyakround3
39.5039.5039.50ascon128bi32v12
55.5455.6055.84T:schwaemm256128v2
60.0660.4860.48T:schwaemm128128v2
67.3567.3567.45T:giftcofb128v1
71.0971.1271.62T:schwaemm192192v2
70.5371.6774.08T:grain128aeadv2
71.7171.8072.03romulusn
73.6874.6674.77T:schwaemm256256v2
74.2374.9675.18T:tinyjambu128v2
78.6879.3779.66T:aes128gcmv1
87.2287.2287.97T:tinyjambu192v2
87.5588.0688.95T:aes256gcmv1
88.3888.5589.09T:tinyjambu256v2
94.4694.8595.22romulusm
133.79134.27134.52T:isapa128av20
218.91218.98219.41T!!!romulust
294.23299.66299.72T:elephant200v2
532.84534.72536.72T:isapa128v20
744.39744.49744.73T:isapk128av20
4556.704556.884556.99T:isapk128v20
5319.175621.045622.93T:isapxv20
12239.6512342.4312349.09T:elephant176v2
15171.3815172.1715175.27T:elephant160v2
21624.8821626.3421631.31aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
15.8416.0916.26ascon128av12
20.2820.2820.80ascon80pqv12
20.8320.8320.98ascon128v12
29.5029.6229.95ascon128abi32v12
34.0934.0936.49T:xoodyakround3
39.7239.7240.14ascon128bi32v12
55.4155.5055.86T:schwaemm256128v2
59.8760.1160.52T:schwaemm128128v2
67.3267.5967.59T:giftcofb128v1
71.2871.4571.62T:schwaemm192192v2
71.6871.9872.09romulusn
73.3773.6677.05T:grain128aeadv2
73.9274.8475.52T:schwaemm256256v2
75.2775.2775.27T:tinyjambu128v2
77.8078.5279.48T:aes128gcmv1
86.7687.0987.95T:aes256gcmv1
87.3487.3487.60T:tinyjambu192v2
89.2089.2089.20T:tinyjambu256v2
97.3197.4997.72romulusm
134.25134.30134.48T:isapa128av20
218.62218.79219.55T!!!romulust
293.91299.80299.88T:elephant200v2
535.09536.23536.74T:isapa128v20
744.51744.61744.84T:isapk128av20
4556.994557.364564.37T:isapk128v20
5314.485320.295621.02T:isapxv20
12242.8812342.2712349.13T:elephant176v2
15172.0315174.3815176.31T:elephant160v2
21625.8821631.6121633.98aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
15.8415.9116.11ascon128av12
20.2720.2720.27ascon80pqv12
20.7020.7020.80ascon128v12
29.5029.5029.62ascon128abi32v12
34.4434.4435.50T:xoodyakround3
39.8039.8139.81ascon128bi32v12
55.5155.5456.09T:schwaemm256128v2
59.8759.8760.03T:schwaemm128128v2
67.3267.5967.59T:giftcofb128v1
71.2871.3371.59T:schwaemm192192v2
71.6871.9872.09romulusn
73.3373.3477.11T:grain128aeadv2
73.9374.8475.52T:schwaemm256256v2
75.0375.2775.27T:tinyjambu128v2
77.9878.7179.18T:aes128gcmv1
86.7087.1287.87T:aes256gcmv1
87.3487.3487.34T:tinyjambu192v2
89.2089.2089.20T:tinyjambu256v2
89.2689.2989.38T:isapa128av20
97.3297.4297.64romulusm
136.75137.06137.21T!!!romulust
276.20276.34276.44T:isapa128v20
293.91299.76299.84T:elephant200v2
483.77483.86484.14T:isapk128av20
2414.272414.292414.47T:isapk128v20
2779.092779.172930.95T:isapxv20
7855.717856.757864.16aes256gcmv1
12240.8412342.6312349.28T:elephant176v2
15172.5515174.4615175.74T:elephant160v2