VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Coffee Lake (906ea); 2018 Intel Xeon E-2124; 4 x 3300MHz; r24000, supercop-20240107

[Page version: 20240726 23:46:23]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Implementation notes

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.640.650.69T:aes128gcmv1
0.860.900.92T:aes256gcmv1
1.631.651.66aes256gcmv1
7.607.637.66ascon128av12
10.9010.9310.98ascon80pqv12
11.0111.0411.06ascon128v12
14.1314.1714.20ascon128abi32v12
19.1919.3619.40T:schwaemm256128v2
19.1719.4519.49T:xoodyakround3
21.1421.1721.19ascon128bi32v12
24.8925.0025.03T:grain128aeadv2
25.2725.3225.49T:schwaemm192192v2
27.0027.0327.04T:schwaemm256256v2
27.2427.3027.35T:schwaemm128128v2
38.4738.6541.12romulusn
39.6539.7039.76T:isapa128av20
40.6340.6840.71T:giftcofb128v1
45.8146.0046.35T:isapa128v20
61.4161.5161.57T:tinyjambu128v2
62.0162.0762.14romulusm
69.6369.7069.79T:isapk128av20
74.6074.7275.08T:tinyjambu192v2
80.2380.3380.53T:tinyjambu256v2
92.4792.5892.69T:isapk128v20
119.92119.98120.08T:elephant200v2
124.89124.98125.07romulust
181.33181.41181.52T:isapxv20
7501.567504.207504.72T:elephant176v2
8004.098007.048010.51T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.610.630.67T:aes128gcmv1
0.79?0.86?0.90?T:aes256gcmv1
1.591.611.62aes256gcmv1
7.407.427.45ascon128av12
10.9510.9811.00ascon128v12
10.9811.0211.05ascon80pqv12
14.1414.1714.19ascon128abi32v12
18.3918.4218.48T:xoodyakround3
19.0719.1019.33T:schwaemm256128v2
21.1021.1521.19ascon128bi32v12
25.4025.4325.47T:grain128aeadv2
26.4326.5626.62T:schwaemm192192v2
26.9727.1427.15T:schwaemm256256v2
27.2227.2527.29T:schwaemm128128v2
38.6238.6538.85romulusn
39.6739.7139.78T:isapa128av20
40.8040.8440.87T:giftcofb128v1
45.7445.9046.03T:isapa128v20
62.0262.0962.13romulusm
62.1962.3262.46T:tinyjambu128v2
69.5269.6269.74T:isapk128av20
74.7874.8374.94T:tinyjambu192v2
80.8980.9881.01T:tinyjambu256v2
92.3792.5692.74T:isapk128v20
119.92119.98120.03T:elephant200v2
124.89125.01125.19romulust
181.30181.41181.54T:isapxv20
7501.867504.337504.96T:elephant176v2
8004.698006.358008.45T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.58?0.63?0.68?T:aes128gcmv1
0.81?0.87?0.92?T:aes256gcmv1
1.601.601.61aes256gcmv1
7.407.427.45ascon128av12
10.9610.9711.01ascon128v12
11.0011.0211.04ascon80pqv12
14.1414.1714.18ascon128abi32v12
18.5118.5418.63T:xoodyakround3
19.1119.1519.31T:schwaemm256128v2
21.1721.2721.29ascon128bi32v12
22.8022.8823.11T:isapa128v20
25.4025.4425.47T:grain128aeadv2
26.2826.3226.36T:isapa128av20
26.5126.5526.67T:schwaemm192192v2
26.9327.1127.16T:schwaemm256256v2
27.2027.2627.32T:schwaemm128128v2
38.5838.6438.87romulusn
40.7740.8240.86T:giftcofb128v1
42.6042.6642.86romulust
46.5246.5846.67T:isapk128av20
57.6357.6857.79T:isapk128v20
62.0362.1062.16romulusm
62.2062.3062.40T:tinyjambu128v2
74.7674.8074.94T:tinyjambu192v2
80.9380.9881.06T:tinyjambu256v2
106.55106.67106.75T:isapxv20
119.93119.98120.02T:elephant200v2
7501.917504.067504.72T:elephant176v2
8002.928004.138006.44T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.500.510.53T:aes128gcmv1
0.58?0.63?0.65?T:aes256gcmv1
1.011.021.03aes256gcmv1
7.427.447.48ascon128av12
10.7910.8511.10ascon128v12
10.9610.9811.02ascon80pqv12
13.9613.9914.02T:xoodyakround3
14.1814.2114.25ascon128abi32v12
19.0519.0919.12T:schwaemm256128v2
21.2121.2321.25ascon128bi32v12
24.8524.9725.00T:grain128aeadv2
25.2525.2925.37T:schwaemm192192v2
26.2926.3526.39T:schwaemm256256v2
27.0427.1227.19T:schwaemm128128v2
30.9831.0832.38romulusn
33.0633.1033.12T:isapa128av20
34.4334.5834.75T:isapa128v20
40.8840.9140.95T:giftcofb128v1
42.7042.7442.81romulusm
50.1850.2050.23T:tinyjambu128v2
58.2058.2458.29T:isapk128av20
58.5558.5658.58T:tinyjambu192v2
60.5860.6360.70T:tinyjambu256v2
74.7174.7874.83T:isapk128v20
83.6183.6983.76romulust
89.8289.8489.88T:elephant200v2
144.80144.85144.89T:isapxv20
5603.685604.525605.38T:elephant176v2
6000.836001.356001.49T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.470.500.51T:aes128gcmv1
0.56?0.61?0.63?T:aes256gcmv1
1.001.011.02aes256gcmv1
7.337.367.40ascon128av12
10.9410.9811.00ascon128v12
10.9911.0211.05ascon80pqv12
13.6113.6513.68T:xoodyakround3
14.1814.2014.22ascon128abi32v12
19.0219.0519.10T:schwaemm256128v2
21.2421.3021.34ascon128bi32v12
25.1325.1625.18T:grain128aeadv2
25.7325.8225.88T:schwaemm192192v2
26.3326.4326.47T:schwaemm256256v2
27.1027.1127.15T:schwaemm128128v2
31.0531.0931.15romulusn
33.0433.0833.14T:isapa128av20
34.4734.5634.77T:isapa128v20
40.9641.0041.03T:giftcofb128v1
42.7142.8242.88romulusm
50.5450.5650.60T:tinyjambu128v2
58.1058.1758.23T:isapk128av20
58.6658.6758.68T:tinyjambu192v2
60.9361.0161.07T:tinyjambu256v2
74.7574.7974.87T:isapk128v20
83.6283.7183.89romulust
89.8289.8589.92T:elephant200v2
144.86144.92144.96T:isapxv20
5603.715604.635605.01T:elephant176v2
6000.866001.676001.94T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.470.500.52T:aes128gcmv1
0.590.610.64T:aes256gcmv1
1.001.001.01aes256gcmv1
7.327.367.39ascon128av12
10.9710.9911.00ascon128v12
11.0211.0311.04ascon80pqv12
13.6513.6813.70T:xoodyakround3
14.1914.2014.24ascon128abi32v12
19.0119.0619.10T:schwaemm256128v2
21.2521.2921.32ascon128bi32v12
23.0123.0823.19T:isapa128v20
25.1425.1625.18T:grain128aeadv2
25.7425.8125.90T:schwaemm192192v2
26.3326.3626.46T:schwaemm256256v2
26.3726.3926.41T:isapa128av20
27.0627.1027.15T:schwaemm128128v2
31.0631.0931.16romulusn
40.9941.0141.04T:giftcofb128v1
42.4942.5642.70romulust
42.7542.8142.89romulusm
46.5946.6446.72T:isapk128av20
50.5250.5950.66T:tinyjambu128v2
57.3157.3657.42T:isapk128v20
58.6658.6858.69T:tinyjambu192v2
60.9561.0261.11T:tinyjambu256v2
89.8389.8689.97T:elephant200v2
107.47107.53107.59T:isapxv20
5603.585604.425604.98T:elephant176v2
6000.996001.736002.75T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.330.350.36T:aes256gcmv1
0.340.360.36T:aes128gcmv1
0.370.390.40aes256gcmv1
7.217.247.27ascon128av12
8.838.918.95T:xoodyakround3
10.5110.5711.14ascon128v12
10.9911.0211.05ascon80pqv12
14.1714.2014.22ascon128abi32v12
18.9619.0219.11T:schwaemm256128v2
21.1321.1821.20ascon128bi32v12
22.4322.6523.30T:isapa128v20
23.4323.4723.56romulusm
23.4623.5223.63romulusn
24.7924.9124.93T:grain128aeadv2
25.0725.1525.48T:schwaemm192192v2
25.7025.7325.85T:schwaemm256256v2
26.3926.4326.46T:isapa128av20
26.8626.9126.96T:schwaemm128128v2
38.8438.8538.91T:tinyjambu128v2
40.8340.9441.00T:tinyjambu256v2
41.1741.2441.31T:giftcofb128v1
42.3542.4342.50romulust
42.5442.5442.56T:tinyjambu192v2
46.6546.7146.79T:isapk128av20
56.9957.0457.10T:isapk128v20
60.6160.6960.74T:elephant200v2
108.24108.35108.47T:isapxv20
3704.623705.583706.00T:elephant176v2
4001.004003.844005.28T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.340.360.36T:aes256gcmv1
0.350.360.37T:aes128gcmv1
0.380.400.41aes256gcmv1
7.187.307.32ascon128av12
8.898.968.99T:xoodyakround3
10.9410.9811.01ascon128v12
11.0111.0211.05ascon80pqv12
14.1814.2114.25ascon128abi32v12
18.9819.0419.10T:schwaemm256128v2
21.2521.3021.33ascon128bi32v12
22.8223.0423.24T:isapa128v20
23.4523.4923.61romulusm
23.4423.4923.52romulusn
24.8024.8424.88T:grain128aeadv2
25.0825.1625.41T:schwaemm192192v2
25.7025.7425.85T:schwaemm256256v2
26.4326.4826.50T:isapa128av20
26.8826.9026.97T:schwaemm128128v2
38.8438.8838.91T:tinyjambu128v2
40.8040.8240.87T:tinyjambu256v2
41.1741.2041.29T:giftcofb128v1
42.3842.4142.64romulust
42.5242.5442.55T:tinyjambu192v2
46.6046.6546.77T:isapk128av20
56.9957.0757.15T:isapk128v20
60.5960.6760.83T:elephant200v2
108.31108.37108.47T:isapxv20
3704.833705.463705.88T:elephant176v2
4000.154002.894005.95T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.31?0.31?0.41?T:aes128gcmv1
0.31?0.35?0.41?T:aes256gcmv1
0.400.400.42aes256gcmv1
7.197.257.32ascon128av12
8.889.009.03T:xoodyakround3
10.9510.9811.01ascon128v12
10.9911.0111.04ascon80pqv12
14.2214.2314.24ascon128abi32v12
18.9819.0219.08T:schwaemm256128v2
21.2721.3021.34ascon128bi32v12
22.7923.0723.17T:isapa128v20
23.4523.4823.51romulusn
23.4623.5023.61romulusm
24.8124.8424.87T:grain128aeadv2
25.0625.1325.48T:schwaemm192192v2
25.6525.6925.72T:schwaemm256256v2
26.3526.4526.51T:isapa128av20
26.8626.8927.00T:schwaemm128128v2
38.8338.9138.95T:tinyjambu128v2
40.8240.8841.16T:tinyjambu256v2
41.1941.2241.28T:giftcofb128v1
42.3942.4342.64romulust
42.5342.5442.54T:tinyjambu192v2
46.6246.6946.80T:isapk128av20
56.9957.0557.12T:isapk128v20
60.6560.7260.86T:elephant200v2
108.35108.41108.48T:isapxv20
3704.853705.763706.06T:elephant176v2
4000.034003.694005.09T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.980.981.00T:aes128gcmv1
1.121.121.15T:aes256gcmv1
1.211.211.22aes256gcmv1
7.637.657.66ascon128av12
10.9811.0111.28ascon128v12
11.1711.1811.20ascon80pqv12
14.1014.1514.17T:xoodyakround3
14.5114.5314.56ascon128abi32v12
19.6619.7019.74T:schwaemm256128v2
21.5021.5221.55ascon128bi32v12
25.2825.3825.39T:grain128aeadv2
25.7925.8225.91T:schwaemm192192v2
26.9927.0427.07T:schwaemm256256v2
27.4727.5327.56T:schwaemm128128v2
31.5631.6132.82romulusn
36.5536.6036.63T:isapa128av20
41.3141.3341.35T:giftcofb128v1
43.3043.3343.38romulusm
50.3950.4850.51T:isapa128v20
50.5750.5950.62T:tinyjambu128v2
59.0359.0459.08T:tinyjambu192v2
61.0161.0561.16T:tinyjambu256v2
65.0465.0865.12T:isapk128av20
85.0285.0385.12romulust
91.7291.7491.78T:elephant200v2
129.72129.75129.86T:isapk128v20
236.35236.40236.47T:isapxv20
5646.555647.715673.88T:elephant176v2
6068.886069.346069.92T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.970.970.99T:aes128gcmv1
1.101.101.11T:aes256gcmv1
1.201.211.22aes256gcmv1
7.517.567.59ascon128av12
11.1511.1711.18ascon128v12
11.1911.2111.23ascon80pqv12
13.7313.8013.81T:xoodyakround3
14.5514.5614.58ascon128abi32v12
19.6319.6619.69T:schwaemm256128v2
21.5921.6221.65ascon128bi32v12
25.5425.5725.58T:grain128aeadv2
26.2526.3626.44T:schwaemm192192v2
27.0927.1327.15T:schwaemm256256v2
27.4527.5027.53T:schwaemm128128v2
31.5831.6231.69romulusn
36.5636.5836.62T:isapa128av20
41.4241.4341.47T:giftcofb128v1
43.3743.4643.48romulusm
50.4550.5050.59T:isapa128v20
50.9751.0251.05T:tinyjambu128v2
59.1359.1559.28T:tinyjambu192v2
61.3361.3961.45T:tinyjambu256v2
65.0165.0565.14T:isapk128av20
85.0285.0685.17romulust
91.7391.7691.78T:elephant200v2
129.70129.72129.79T:isapk128v20
236.60236.64236.71T:isapxv20
5645.885647.885673.66T:elephant176v2
6068.956069.326069.58T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.960.970.99T:aes128gcmv1
1.101.101.11T:aes256gcmv1
1.201.201.21aes256gcmv1
7.537.567.58ascon128av12
11.1511.1711.17ascon128v12
11.1911.2011.21ascon80pqv12
13.8513.8613.89T:xoodyakround3
14.5414.5614.57ascon128abi32v12
19.6019.6319.69T:schwaemm256128v2
21.5721.6221.64ascon128bi32v12
25.5625.5725.60T:grain128aeadv2
26.2226.3126.39T:schwaemm192192v2
27.0527.1427.17T:schwaemm256256v2
27.4827.5127.56T:schwaemm128128v2
28.2928.3128.33T:isapa128av20
31.1631.2131.26T:isapa128v20
31.5931.6331.69romulusn
41.3941.4141.47T:giftcofb128v1
43.4043.4643.49romulusm
43.7943.8143.92romulust
50.6350.6750.74T:isapk128av20
50.9550.9951.05T:tinyjambu128v2
59.1359.1559.24T:tinyjambu192v2
61.4361.5061.56T:tinyjambu256v2
85.5285.5385.56T:isapk128v20
91.7291.7591.77T:elephant200v2
154.38154.41154.48T:isapxv20
5646.105647.825673.91T:elephant176v2
6068.656069.456069.93T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
7.957.988.08aes256gcmv1
12.0212.2212.70ascon128av12
12.2612.3412.47T:aes128gcmv1
12.8012.9713.22T:aes256gcmv1
15.0215.2415.46ascon128v12
15.2215.3415.66ascon80pqv12
20.3520.6720.80T:xoodyakround3
22.4922.5822.62ascon128abi32v12
28.8028.9129.10ascon128bi32v12
31.8132.1232.31T:schwaemm256128v2
34.6534.7534.94T:grain128aeadv2
35.1635.4535.86T:schwaemm128128v2
41.7342.0142.37T:schwaemm192192v2
42.9443.1243.25T:schwaemm256256v2
43.5243.7044.58romulusn
50.8250.8850.99T:giftcofb128v1
55.7755.9156.14romulusm
59.8460.0060.27T:tinyjambu128v2
69.5869.8369.96T:tinyjambu192v2
71.8371.9572.07T:tinyjambu256v2
115.95116.05116.25romulust
116.76117.02117.30T:isapa128av20
129.66129.98130.32T:elephant200v2
208.09208.41208.67T:isapk128av20
413.34416.16418.36T:isapa128v20
1375.171375.711376.38T:isapk128v20
2314.882315.392315.58T:isapxv20
7035.487036.277037.83T:elephant176v2
8128.508129.878135.75T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
7.958.018.05aes256gcmv1
11.9812.2112.80ascon128av12
12.2212.2412.59T:aes128gcmv1
12.7212.8212.90T:aes256gcmv1
15.0515.3315.70ascon128v12
15.3115.4115.66ascon80pqv12
20.3220.6220.84T:xoodyakround3
22.5422.6422.77ascon128abi32v12
28.9829.0729.12ascon128bi32v12
32.3032.4532.83T:schwaemm256128v2
34.8934.9835.08T:grain128aeadv2
35.3135.5435.85T:schwaemm128128v2
43.0743.1043.25T:schwaemm256256v2
43.0843.3343.55T:schwaemm192192v2
43.9043.9544.07romulusn
51.1551.2851.46T:giftcofb128v1
57.6057.7057.79romulusm
60.4160.5060.66T:tinyjambu128v2
69.7569.8369.99T:tinyjambu192v2
72.2372.5272.64T:tinyjambu256v2
115.78116.06116.45romulust
116.67116.92117.31T:isapa128av20
129.61129.70129.89T:elephant200v2
208.67209.11209.91T:isapk128av20
415.60417.26418.37T:isapa128v20
1375.231375.541376.05T:isapk128v20
2318.882319.132319.67T:isapxv20
7034.737035.697037.21T:elephant176v2
8128.558132.298135.17T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
7.897.927.98aes256gcmv1
11.8811.9712.11ascon128av12
12.1212.1812.34T:aes128gcmv1
12.7012.7412.89T:aes256gcmv1
14.9915.1015.21ascon128v12
15.0915.2015.27ascon80pqv12
20.2020.3220.59T:xoodyakround3
22.5322.6022.69ascon128abi32v12
28.9729.0629.20ascon128bi32v12
31.9732.1632.54T:schwaemm256128v2
34.8834.9034.99T:grain128aeadv2
35.4535.5335.82T:schwaemm128128v2
43.0943.1643.30T:schwaemm256256v2
43.1943.4543.58T:schwaemm192192v2
43.8943.9444.07romulusn
51.0451.2151.41T:giftcofb128v1
57.5157.6257.76romulusm
60.2760.4460.61T:tinyjambu128v2
69.6469.6869.73T:tinyjambu192v2
71.9672.1672.32T:tinyjambu256v2
72.4172.5272.74T:isapa128av20
72.7173.0273.18romulust
129.70129.83129.99T:elephant200v2
131.77131.94132.62T:isapk128av20
217.26218.24218.55T:isapa128v20
720.29720.63721.59T:isapk128v20
1212.611212.841213.42T:isapxv20
7035.137035.897037.05T:elephant176v2
8128.418129.188131.19T:elephant160v2