VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Tiger Lake (806c1); 2020 Intel Core i7-1165G7; 4 x 2800MHz; panther, supercop-20240716

[Page version: 20240726 23:46:23]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Implementation notes

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.51?0.59?0.67?T:aes128gcmv1
0.59?0.72?0.80?T:aes256gcmv1
1.371.381.39aes256gcmv1
7.507.557.70ascon128av12
10.9410.9710.98ascon128v12
10.9510.9711.00ascon80pqv12
13.3813.4613.55T:xoodyakround3
14.7514.7914.83ascon128abi32v12
16.3216.3816.47T:schwaemm256128v2
18.8218.9619.02T:grain128aeadv2
20.2120.7121.37T:schwaemm256256v2
21.5821.7121.90T:schwaemm192192v2
22.3922.4322.49ascon128bi32v12
24.9725.1125.22T:schwaemm128128v2
26.8626.8926.96T:isapa128av20
32.0832.1232.14T:isapk128av20
37.0337.1337.17romulusn
44.1144.1744.25T:giftcofb128v1
45.1445.2345.29T:isapa128v20
57.8457.9658.04romulusm
70.4670.5370.67T:tinyjambu128v2
85.9686.0986.17T:tinyjambu192v2
90.5891.4992.30T:isapk128v20
91.0491.7191.80T:tinyjambu256v2
110.92111.07111.19romulust
120.76121.02121.21T:elephant200v2
137.16137.41138.21T:isapxv20
7266.147285.487290.82T:elephant176v2
8269.388272.628275.22T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.48?0.53?0.56?T:aes128gcmv1
0.58?0.63?0.73?T:aes256gcmv1
1.301.311.32aes256gcmv1
7.457.497.52ascon128av12
10.7810.8210.84ascon80pqv12
10.8610.8910.94ascon128v12
13.2713.3613.42T:xoodyakround3
14.8714.8914.93ascon128abi32v12
16.4716.5616.69T:schwaemm256128v2
19.2419.3119.44T:grain128aeadv2
20.2120.6721.40T:schwaemm256256v2
21.5021.8121.95T:schwaemm192192v2
22.3222.3822.39ascon128bi32v12
24.8825.0325.22T:schwaemm128128v2
32.0932.1432.15T:isapk128av20
34.2734.3634.41T:isapa128av20
37.3637.4137.49romulusn
44.2744.3344.39T:giftcofb128v1
45.2245.2745.34T:isapa128v20
58.1758.2258.37romulusm
70.4270.4970.53T:tinyjambu128v2
85.6385.7686.06T:tinyjambu192v2
90.5091.2591.85T:isapk128v20
91.1891.6199.19T:tinyjambu256v2
110.83110.95111.08romulust
121.15121.27121.90T:elephant200v2
136.55138.11139.17T:isapxv20
7255.287272.087285.26T:elephant176v2
8271.508274.628278.12T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.52?0.58?0.69?T:aes128gcmv1
0.59?0.69?0.73?T:aes256gcmv1
1.311.311.32aes256gcmv1
7.477.497.53ascon128av12
10.7710.8010.84ascon80pqv12
10.8510.8910.95ascon128v12
13.2313.3513.45T:xoodyakround3
14.8414.8914.91ascon128abi32v12
16.3916.5016.67T:schwaemm256128v2
19.2419.3219.42T:grain128aeadv2
20.2420.6021.35T:schwaemm256256v2
21.3621.4021.47T:isapk128av20
21.6621.7721.90T:schwaemm192192v2
21.9822.0622.13T:isapa128v20
22.3022.3622.39ascon128bi32v12
22.8022.8322.93T:isapa128av20
25.1525.1925.28T:schwaemm128128v2
37.3437.4237.47romulusn
38.6138.8738.97romulust
44.2244.2744.31T:giftcofb128v1
56.9157.5257.99T:isapk128v20
58.2658.3758.44romulusm
70.5770.6270.63T:tinyjambu128v2
81.2581.7282.44T:isapxv20
85.7385.7785.88T:tinyjambu192v2
90.9891.3791.60T:tinyjambu256v2
120.83121.13121.55T:elephant200v2
7259.657267.517280.51T:elephant176v2
8272.248275.258279.81T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.37?0.43?0.50?T:aes128gcmv1
0.42?0.46?0.55?T:aes256gcmv1
0.880.890.89aes256gcmv1
7.417.457.59ascon128av12
10.2810.3310.35T:xoodyakround3
10.8810.9010.92ascon80pqv12
10.9010.9310.95ascon128v12
14.5214.5414.55ascon128abi32v12
16.2116.2816.39T:schwaemm256128v2
18.9018.9919.02T:grain128aeadv2
20.2020.5721.30T:schwaemm256256v2
21.6821.7521.83T:schwaemm192192v2
22.0922.1222.15ascon128bi32v12
24.8524.8824.92T:isapa128av20
25.0625.1425.22T:schwaemm128128v2
26.7226.7426.75T:isapk128av20
28.9128.9529.00romulusn
33.6133.7033.72T:isapa128v20
39.3139.3839.46romulusm
44.1744.2444.27T:giftcofb128v1
57.5057.5257.62T:tinyjambu128v2
66.8967.3467.36T:tinyjambu192v2
68.5968.6168.65T:tinyjambu256v2
73.7974.1274.58T:isapk128v20
74.8774.9575.01romulust
91.0391.7692.22T:elephant200v2
109.11109.60109.92T:isapxv20
5427.025432.155442.14T:elephant176v2
6202.436204.156206.55T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.35?0.37?0.43?T:aes128gcmv1
0.39?0.41?0.49?T:aes256gcmv1
0.840.850.86aes256gcmv1
7.377.407.43ascon128av12
10.1810.2410.28T:xoodyakround3
10.7910.8110.83ascon80pqv12
10.8510.8810.90ascon128v12
14.5514.5814.60ascon128abi32v12
16.2316.3816.57T:schwaemm256128v2
19.0819.1419.26T:grain128aeadv2
20.2120.5721.33T:schwaemm256256v2
21.6821.7621.88T:schwaemm192192v2
22.0522.0722.10ascon128bi32v12
25.0825.1225.19T:schwaemm128128v2
26.7126.7326.76T:isapk128av20
28.3428.4028.43T:isapa128av20
29.0929.1229.17romulusn
33.6233.6633.72T:isapa128v20
39.5539.5939.65romulusm
44.1744.2444.29T:giftcofb128v1
57.4657.5357.63T:tinyjambu128v2
66.8767.3267.38T:tinyjambu192v2
68.6468.8768.92T:tinyjambu256v2
74.0774.4074.78T:isapk128v20
74.8774.9875.09romulust
90.9391.7291.92T:elephant200v2
109.39110.29111.23T:isapxv20
5425.155429.905440.85T:elephant176v2
6202.836204.446207.24T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.36?0.37?0.43?T:aes128gcmv1
0.38?0.40?0.43?T:aes256gcmv1
0.840.850.85aes256gcmv1
7.377.397.42ascon128av12
10.2310.2910.31T:xoodyakround3
10.7910.8110.85ascon80pqv12
10.8510.8810.90ascon128v12
14.5414.5714.59ascon128abi32v12
16.3416.4116.45T:schwaemm256128v2
19.1719.2019.41T:grain128aeadv2
20.1620.6021.33T:schwaemm256256v2
21.3721.3921.43T:isapk128av20
21.5421.7621.87T:schwaemm192192v2
22.0522.0722.09ascon128bi32v12
22.0522.0922.12T:isapa128v20
22.6122.6522.69T:isapa128av20
25.0925.2025.28T:schwaemm128128v2
29.1029.1329.21romulusn
38.7138.8038.88romulust
39.5039.5739.63romulusm
44.1644.2244.29T:giftcofb128v1
57.2557.4257.78T:isapk128v20
57.5257.6257.66T:tinyjambu128v2
67.0067.0267.06T:tinyjambu192v2
68.6368.6869.05T:tinyjambu256v2
81.9382.3082.76T:isapxv20
91.0691.6092.04T:elephant200v2
5428.525434.925440.67T:elephant176v2
6202.126204.826207.02T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.17?0.20?0.28?T:aes128gcmv1
0.19?0.21?0.30?T:aes256gcmv1
0.36?0.40?0.41?aes256gcmv1
7.167.247.29T:xoodyakround3
7.317.417.43ascon128av12
10.8110.8810.90ascon80pqv12
10.8510.8810.91ascon128v12
14.2114.2214.25ascon128abi32v12
16.2216.3616.58T:schwaemm256128v2
18.9519.0719.12T:grain128aeadv2
20.1320.5421.26T:schwaemm256256v2
20.7420.8420.90romulusm
20.7820.8620.89romulusn
21.3921.4121.43T:isapk128av20
21.4021.5221.64T:schwaemm192192v2
21.7621.7921.81ascon128bi32v12
22.0322.1022.19T:isapa128v20
22.8322.8822.92T:isapa128av20
24.9325.0125.14T:schwaemm128128v2
38.8038.8738.96romulust
44.0444.1344.31T:giftcofb128v1
44.5644.6644.72T:tinyjambu128v2
46.3646.4146.46T:tinyjambu256v2
48.2748.3848.47T:tinyjambu192v2
57.1457.6457.88T:isapk128v20
61.7962.0562.44T:elephant200v2
81.5382.2083.15T:isapxv20
3575.763586.513605.53T:elephant176v2
4138.574148.334150.83T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.17?0.19?0.23?T:aes128gcmv1
0.16?0.21?0.23?T:aes256gcmv1
0.360.380.39aes256gcmv1
7.167.247.28T:xoodyakround3
7.287.317.35ascon128av12
10.7910.8210.85ascon80pqv12
10.8310.8610.89ascon128v12
14.1914.2314.28ascon128abi32v12
16.2616.4416.64T:schwaemm256128v2
18.8819.0219.20T:grain128aeadv2
20.1320.5421.25T:schwaemm256256v2
20.7920.8720.93romulusn
20.8420.8920.93romulusm
21.3621.4221.43T:isapk128av20
21.3121.5221.68T:schwaemm192192v2
21.7421.7921.82ascon128bi32v12
22.0222.0822.16T:isapa128v20
22.3822.4522.48T:isapa128av20
24.9225.0925.21T:schwaemm128128v2
38.6739.0039.09romulust
44.1044.1944.26T:giftcofb128v1
44.5744.6344.67T:tinyjambu128v2
46.2146.2646.44T:tinyjambu256v2
48.2448.4748.52T:tinyjambu192v2
57.1257.4958.13T:isapk128v20
62.1562.2862.58T:elephant200v2
81.0481.9382.37T:isapxv20
3584.993612.033623.06T:elephant176v2
4133.874137.324139.03T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.10?0.20?0.30?T:aes256gcmv1
0.17?0.21?0.24?T:aes128gcmv1
0.380.390.40aes256gcmv1
7.167.287.30T:xoodyakround3
7.297.317.34ascon128av12
10.8110.8510.90ascon80pqv12
10.8310.8610.88ascon128v12
14.2314.2614.28ascon128abi32v12
16.1916.3416.48T:schwaemm256128v2
18.8819.0419.14T:grain128aeadv2
20.1120.5521.29T:schwaemm256256v2
20.7920.8520.88romulusm
20.8320.8820.94romulusn
21.3821.4121.45T:isapk128av20
21.3621.4821.65T:schwaemm192192v2
21.7221.7721.81ascon128bi32v12
22.0022.0522.13T:isapa128v20
22.3722.4222.45T:isapa128av20
24.8825.0525.14T:schwaemm128128v2
38.6538.8339.12romulust
44.1344.2344.27T:giftcofb128v1
44.5544.5844.65T:tinyjambu128v2
46.2446.2746.36T:tinyjambu256v2
48.3248.3648.41T:tinyjambu192v2
57.1957.7758.12T:isapk128v20
61.9262.1962.58T:elephant200v2
81.2581.9482.25T:isapxv20
3604.923614.933618.17T:elephant176v2
4132.754138.754144.50T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.810.810.84T:aes128gcmv1
0.870.910.94T:aes256gcmv1
1.051.051.05aes256gcmv1
7.677.717.75ascon128av12
10.4810.5110.53T:xoodyakround3
11.0311.0411.06ascon80pqv12
11.0511.0711.10ascon128v12
14.8314.8514.87ascon128abi32v12
16.7616.8216.86T:schwaemm256128v2
19.2619.3119.34T:grain128aeadv2
20.8521.1921.77T:schwaemm256256v2
22.1222.2222.30T:schwaemm192192v2
22.4322.4522.47ascon128bi32v12
25.3625.4425.49T:schwaemm128128v2
26.8126.8326.87T:isapa128av20
29.1229.1729.19romulusn
29.8029.8129.82T:isapk128av20
39.6339.6539.70romulusm
44.5244.5544.64T:giftcofb128v1
48.6748.7048.75T:isapa128v20
57.9758.0658.11T:tinyjambu128v2
67.5167.7067.75T:tinyjambu192v2
69.1569.4669.57T:tinyjambu256v2
76.1376.1876.23romulust
92.5892.7792.96T:elephant200v2
128.59128.77128.92T:isapk128v20
179.59179.76179.96T:isapxv20
5463.955477.145481.82T:elephant176v2
6273.376275.186277.79T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.800.810.82T:aes128gcmv1
0.860.880.93T:aes256gcmv1
0.990.990.99aes256gcmv1
7.567.587.59ascon128av12
10.3610.3810.41T:xoodyakround3
10.9410.9510.97ascon80pqv12
11.0311.0411.05ascon128v12
14.8914.9114.93ascon128abi32v12
16.7916.8716.96T:schwaemm256128v2
19.4519.5719.69T:grain128aeadv2
20.8321.2021.81T:schwaemm256256v2
22.1222.2022.28T:schwaemm192192v2
22.4122.4422.46ascon128bi32v12
25.4225.5725.66T:schwaemm128128v2
29.3529.4029.44romulusn
29.8129.8229.83T:isapk128av20
30.2630.2930.33T:isapa128av20
39.8339.8539.90romulusm
44.6244.6544.67T:giftcofb128v1
48.7348.7548.79T:isapa128v20
57.9557.9758.06T:tinyjambu128v2
67.4267.7467.78T:tinyjambu192v2
69.0669.0969.12T:tinyjambu256v2
76.0476.1476.20romulust
92.4092.9293.14T:elephant200v2
128.61128.85129.04T:isapk128v20
179.84180.06180.45T:isapxv20
5462.465475.845485.91T:elephant176v2
6273.686274.476277.47T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.800.810.86T:aes128gcmv1
0.880.900.94T:aes256gcmv1
0.990.991.00aes256gcmv1
7.587.607.61ascon128av12
10.4010.4310.50T:xoodyakround3
10.9410.9610.98ascon80pqv12
11.0111.0211.05ascon128v12
14.8914.9214.92ascon128abi32v12
16.8216.8416.94T:schwaemm256128v2
19.4819.5119.70T:grain128aeadv2
20.7921.1921.78T:schwaemm256256v2
22.1922.2722.33T:schwaemm192192v2
22.3922.4122.43ascon128bi32v12
23.1823.1923.21T:isapk128av20
23.6623.7023.74T:isapa128av20
25.4225.4625.58T:schwaemm128128v2
29.3229.3529.37romulusn
29.7329.7529.78T:isapa128v20
39.8639.8939.93romulusm
39.8939.9440.04romulust
44.6644.6944.72T:giftcofb128v1
58.0358.0558.06T:tinyjambu128v2
67.5367.6467.76T:tinyjambu192v2
69.0869.1469.36T:tinyjambu256v2
85.2585.5185.76T:isapk128v20
92.3692.9493.12T:elephant200v2
117.60117.72117.77T:isapxv20
5469.875477.305483.32T:elephant176v2
6274.036275.726277.79T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
6.987.017.04aes256gcmv1
10.9111.2311.52T:aes128gcmv1
11.4311.6211.94T:aes256gcmv1
11.7211.7712.05ascon128av12
14.4814.5614.69ascon128v12
14.4914.5814.69ascon80pqv12
14.9915.7116.05T:xoodyakround3
22.1922.3522.73ascon128abi32v12
26.5827.4228.56T:schwaemm256128v2
27.8427.9528.38T:grain128aeadv2
29.9530.1130.52ascon128bi32v12
32.5233.1333.91T:schwaemm128128v2
33.3433.9234.95T:schwaemm256256v2
34.5134.6634.83romulusn
35.0235.8036.80T:schwaemm192192v2
45.8846.0646.43romulusm
53.2053.5053.70T:giftcofb128v1
67.6067.7367.85T:tinyjambu128v2
70.9171.3971.87T:isapa128av20
78.5378.7478.91T:tinyjambu192v2
80.1280.5180.63T:tinyjambu256v2
95.3095.4495.71T:isapk128av20
101.41102.09102.91romulust
132.16132.67133.44T:elephant200v2
394.65394.97395.68T:isapa128v20
1352.731355.551358.44T:isapk128v20
1762.511773.421777.92T:isapxv20
6820.206825.136846.95T:elephant176v2
8411.778421.238430.56T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
6.596.646.70aes256gcmv1
10.3410.8711.33T:aes128gcmv1
11.2811.4811.81T:aes256gcmv1
11.4611.7012.09ascon128av12
14.3814.5214.62ascon80pqv12
14.4614.5714.82ascon128v12
14.9415.7315.85T:xoodyakround3
22.3922.5623.12ascon128abi32v12
27.4828.1228.73T:schwaemm256128v2
27.9828.3829.02T:grain128aeadv2
30.1230.2830.80ascon128bi32v12
33.2733.9434.11T:schwaemm128128v2
33.5233.9634.95T:schwaemm256256v2
34.8635.0535.19romulusn
35.4236.3236.78T:schwaemm192192v2
47.1047.3047.54romulusm
53.6153.8154.11T:giftcofb128v1
67.5567.6267.81T:tinyjambu128v2
74.0474.2974.54T:isapa128av20
78.4778.5378.70T:tinyjambu192v2
80.1380.3580.73T:tinyjambu256v2
95.2095.3895.68T:isapk128av20
101.33101.87102.51romulust
132.08132.64133.52T:elephant200v2
395.20395.32395.50T:isapa128v20
1350.121358.031363.11T:isapk128v20
1771.021775.301777.93T:isapxv20
6829.406839.086845.80T:elephant176v2
8400.008407.628425.43T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
6.626.656.70aes256gcmv1
10.8411.1811.31T:aes128gcmv1
11.4811.6011.88ascon128av12
11.5511.6812.27T:aes256gcmv1
14.4414.5114.65ascon128v12
14.4114.5614.64ascon80pqv12
14.8715.1916.16T:xoodyakround3
22.3722.6223.00ascon128abi32v12
27.2227.8828.27T:schwaemm256128v2
27.8828.9229.04T:grain128aeadv2
30.0930.2930.55ascon128bi32v12
32.5533.3033.91T:schwaemm128128v2
33.5934.0535.02T:schwaemm256256v2
34.7734.8735.08romulusn
35.5836.2936.72T:schwaemm192192v2
47.1247.4147.62romulusm
48.5248.8549.34T:isapa128av20
53.5453.6453.98T:giftcofb128v1
60.0360.2760.47T:isapk128av20
65.4966.0766.70romulust
67.6367.8167.94T:tinyjambu128v2
78.4878.6779.00T:tinyjambu192v2
80.5780.7580.95T:tinyjambu256v2
131.97132.39133.48T:elephant200v2
206.30206.51206.78T:isapa128v20
708.81710.48714.00T:isapk128v20
927.60929.51932.03T:isapxv20
6814.626820.016832.48T:elephant176v2
8398.278416.918435.16T:elephant160v2