VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Coffee Lake (906ea); 2018 Intel Xeon E-2124; 4 x 3300MHz; r24000, supercop-20241011

[Page version: 20241120 00:41:35]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.64?0.68?0.72?T:aes128gcmv1
0.880.930.96T:aes256gcmv1
7.427.467.52ascon128av12
10.8410.8710.90ascon128v12
10.9210.9611.02ascon80pqv12
14.0314.0714.13ascon128abi32v12
14.5614.6114.64T:xoodyakround3
17.7017.7517.99T:schwaemm256128v2
20.5120.6321.10ascon128bi32v12
23.3223.6123.64T:schwaemm192192v2
24.2024.2224.31T:grain128aeadv2
24.3024.3524.66T:schwaemm256256v2
25.7525.7725.81T:schwaemm128128v2
33.5133.5533.60T:giftcofb128v1
39.3939.7039.77romulusn
41.0241.0941.13T:isapa128av20
43.0243.1143.21T:isapa128v20
62.9363.0263.10romulusm
67.7767.7867.79T:tinyjambu128v2
67.7868.0868.16T:isapk128av20
82.7283.5083.50T:tinyjambu192v2
89.2889.2989.29T:tinyjambu256v2
90.3790.7090.90T:isapk128v20
131.77131.82131.92romulust
175.88175.92175.95T:elephant200v2
231.16231.23231.30T:isapxv20
304.14304.26305.20aes256gcmv1
8142.728143.158143.56T:elephant176v2
8260.828261.378261.67T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.58?0.66?0.76?T:aes128gcmv1
0.82?0.87?0.93?T:aes256gcmv1
7.397.437.44ascon128av12
10.9010.9110.94ascon80pqv12
10.9410.9711.00ascon128v12
13.9714.0314.07ascon128abi32v12
14.6114.6514.69T:xoodyakround3
17.7517.8317.98T:schwaemm256128v2
20.5720.6121.09ascon128bi32v12
23.6423.6723.71T:schwaemm192192v2
24.3124.3524.68T:schwaemm256256v2
24.7724.8124.86T:grain128aeadv2
25.7725.8425.95T:schwaemm128128v2
33.5533.5833.61T:giftcofb128v1
39.3639.4039.44romulusn
41.0941.1341.19T:isapa128av20
42.9743.0843.20T:isapa128v20
62.8763.0763.33romulusm
68.0068.0068.02T:tinyjambu128v2
67.9368.0668.28T:isapk128av20
82.7583.5083.50T:tinyjambu192v2
89.2589.2689.27T:tinyjambu256v2
90.5390.6890.83T:isapk128v20
131.72131.81131.87romulust
175.91175.95175.97T:elephant200v2
231.12231.19231.31T:isapxv20
305.21305.28305.40aes256gcmv1
8142.548142.938143.38T:elephant176v2
8260.888261.368261.61T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.62?0.66?0.69?T:aes128gcmv1
0.860.880.93T:aes256gcmv1
7.397.427.45ascon128av12
10.8910.9210.94ascon80pqv12
10.9410.9610.98ascon128v12
14.0114.0314.08ascon128abi32v12
14.6614.7114.74T:xoodyakround3
17.7417.8217.97T:schwaemm256128v2
20.5520.5720.62ascon128bi32v12
21.5321.6121.66T:isapa128v20
23.6223.6623.70T:schwaemm192192v2
24.3024.3424.63T:schwaemm256256v2
24.7724.8124.87T:grain128aeadv2
25.7825.8325.99T:schwaemm128128v2
27.2727.3227.39T:isapa128av20
33.5633.6233.68T:giftcofb128v1
39.3839.4239.81romulusn
44.9444.9745.03romulust
45.0045.1445.27T:isapk128av20
56.1356.2956.45T:isapk128v20
62.7162.9063.18romulusm
68.0068.0068.02T:tinyjambu128v2
82.7783.5083.50T:tinyjambu192v2
89.2589.2589.26T:tinyjambu256v2
134.49134.54134.61T:isapxv20
175.89175.93175.97T:elephant200v2
292.24292.33292.39aes256gcmv1
8142.918143.228143.57T:elephant176v2
8260.658261.328261.75T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.500.520.53T:aes128gcmv1
0.620.640.65T:aes256gcmv1
7.417.437.46ascon128av12
10.8510.8810.90ascon80pqv12
10.8610.8910.91ascon128v12
11.0011.0211.05T:xoodyakround3
13.9113.9613.98ascon128abi32v12
17.6217.8117.86T:schwaemm256128v2
20.4420.6520.75ascon128bi32v12
23.1323.1623.21T:schwaemm192192v2
24.2024.2424.59T:schwaemm256256v2
24.3324.3524.46T:grain128aeadv2
25.6025.6225.65T:schwaemm128128v2
31.4731.5231.70romulusn
32.3032.3832.44T:isapa128v20
33.5733.6133.64T:giftcofb128v1
34.2034.2334.27T:isapa128av20
43.2543.3443.40romulusm
55.4555.4655.50T:tinyjambu128v2
56.5656.7256.83T:isapk128av20
63.5563.5663.56T:tinyjambu192v2
67.3967.4067.41T:tinyjambu256v2
73.3573.4573.52T:isapk128v20
88.3588.4088.44romulust
131.80131.83131.84T:elephant200v2
183.74183.80183.89T:isapxv20
298.54298.68298.77aes256gcmv1
6084.106084.386084.64T:elephant176v2
6195.406195.896196.06T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.47?0.51?0.53?T:aes128gcmv1
0.59?0.62?0.66?T:aes256gcmv1
7.397.417.42ascon128av12
10.8410.8810.89ascon80pqv12
10.8510.8910.92ascon128v12
11.0311.0611.07T:xoodyakround3
13.9013.9413.96ascon128abi32v12
17.5817.6217.64T:schwaemm256128v2
20.6820.7220.82ascon128bi32v12
23.1823.2223.54T:schwaemm192192v2
24.2124.2524.59T:schwaemm256256v2
24.5124.5424.56T:grain128aeadv2
25.6125.6925.75T:schwaemm128128v2
31.5031.5231.56romulusn
32.3532.4132.45T:isapa128v20
33.5733.6133.67T:giftcofb128v1
34.2134.2334.25T:isapa128av20
43.3443.4043.48romulusm
55.5755.5855.58T:tinyjambu128v2
56.6756.7256.84T:isapk128av20
63.1563.1663.56T:tinyjambu192v2
67.3867.3867.40T:tinyjambu256v2
73.2873.4173.56T:isapk128v20
88.3488.3988.42romulust
131.80131.82131.85T:elephant200v2
183.78183.81183.86T:isapxv20
298.70298.80298.92aes256gcmv1
6084.116084.336084.62T:elephant176v2
6195.066195.576196.14T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.480.500.52T:aes128gcmv1
0.610.630.65T:aes256gcmv1
7.397.417.43ascon128av12
10.8210.8510.88ascon80pqv12
10.8810.8910.91ascon128v12
11.0511.0611.08T:xoodyakround3
13.9213.9513.97ascon128abi32v12
17.5917.6417.68T:schwaemm256128v2
20.6920.7721.01ascon128bi32v12
21.6321.6621.70T:isapa128v20
23.1323.1923.24T:schwaemm192192v2
24.2224.2424.56T:schwaemm256256v2
24.5224.5324.55T:grain128aeadv2
25.6225.6625.75T:schwaemm128128v2
27.3127.3227.35T:isapa128av20
31.4931.5331.58romulusn
33.5733.6133.65T:giftcofb128v1
43.1843.3043.44romulusm
44.9544.9845.02romulust
45.1745.2745.36T:isapk128av20
55.5755.5755.58T:tinyjambu128v2
56.1756.2656.38T:isapk128v20
63.1563.1663.56T:tinyjambu192v2
67.3867.3867.40T:tinyjambu256v2
131.80131.82131.84T:elephant200v2
135.43135.46135.50T:isapxv20
292.24292.31292.42aes256gcmv1
6084.036084.266084.53T:elephant176v2
6195.056195.606195.95T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.33?0.36?0.39?T:aes256gcmv1
0.34?0.37?0.41?T:aes128gcmv1
7.357.377.41ascon128av12
7.477.517.53T:xoodyakround3
10.7710.8210.85ascon80pqv12
10.8910.9110.95ascon128v12
13.8013.8313.85ascon128abi32v12
17.4017.4617.51T:schwaemm256128v2
20.3820.7020.91ascon128bi32v12
21.6321.6721.76T:isapa128v20
22.9623.0023.11T:schwaemm192192v2
23.5823.6623.75romulusm
23.6823.7223.77romulusn
24.0924.1324.48T:schwaemm256256v2
24.4424.4624.57T:grain128aeadv2
25.4225.4525.48T:schwaemm128128v2
27.2927.3327.36T:isapa128av20
33.4933.5833.64T:giftcofb128v1
43.1343.1443.15T:tinyjambu128v2
43.5743.5743.57T:tinyjambu192v2
44.8744.8944.93romulust
45.1345.2745.32T:isapk128av20
45.5045.5145.51T:tinyjambu256v2
56.0656.2056.33T:isapk128v20
87.9888.0088.03T:elephant200v2
136.37136.42136.46T:isapxv20
292.38292.55292.73aes256gcmv1
4024.064024.434024.74T:elephant176v2
4129.124129.374129.58T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.33?0.36?0.39?T:aes256gcmv1
0.31?0.36?0.42?T:aes128gcmv1
7.357.377.39ascon128av12
7.487.507.51T:xoodyakround3
10.7210.7810.83ascon80pqv12
10.7010.7910.83ascon128v12
13.7713.8113.83ascon128abi32v12
17.4417.4717.49T:schwaemm256128v2
20.3420.3820.89ascon128bi32v12
21.6021.6621.72T:isapa128v20
23.0223.3923.44T:schwaemm192192v2
23.6823.7123.76romulusn
23.5723.7223.77romulusm
24.1224.1624.47T:schwaemm256256v2
24.1724.2124.22T:grain128aeadv2
25.3825.4325.48T:schwaemm128128v2
27.2727.3127.35T:isapa128av20
33.4933.5433.60T:giftcofb128v1
43.1343.1443.16T:tinyjambu128v2
43.5643.5743.58T:tinyjambu192v2
44.8944.9344.99romulust
45.1345.2145.41T:isapk128av20
45.5045.5145.51T:tinyjambu256v2
56.0656.2056.34T:isapk128v20
87.9788.0088.01T:elephant200v2
136.35136.41136.49T:isapxv20
292.20292.39292.46aes256gcmv1
4023.924024.294024.65T:elephant176v2
4129.214129.374129.55T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.32?0.34?0.38?T:aes256gcmv1
0.35?0.40?0.43?T:aes128gcmv1
7.357.367.38ascon128av12
7.517.537.55T:xoodyakround3
10.7310.7910.83ascon128v12
10.7510.8010.83ascon80pqv12
13.7713.8013.82ascon128abi32v12
17.4217.4417.49T:schwaemm256128v2
20.3420.3920.88ascon128bi32v12
21.6521.7021.76T:isapa128v20
22.9923.0323.08T:schwaemm192192v2
23.6123.6923.77romulusm
23.7023.7223.77romulusn
24.1224.1424.45T:schwaemm256256v2
24.1824.2124.23T:grain128aeadv2
25.4125.4625.50T:schwaemm128128v2
27.2827.3227.36T:isapa128av20
33.5033.5433.60T:giftcofb128v1
43.1343.1343.14T:tinyjambu128v2
43.5643.5743.57T:tinyjambu192v2
44.8944.9244.98romulust
45.1245.1845.33T:isapk128av20
45.5045.5045.51T:tinyjambu256v2
56.0756.2356.40T:isapk128v20
87.9687.9988.01T:elephant200v2
136.37136.42136.47T:isapxv20
292.30292.41292.48aes256gcmv1
4024.174024.704024.98T:elephant176v2
4129.194129.444129.82T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.651.661.67T:aes128gcmv1
1.781.781.81T:aes256gcmv1
7.617.637.65ascon128av12
11.0611.0711.10ascon80pqv12
11.0611.0711.09ascon128v12
11.1611.1811.20T:xoodyakround3
14.2614.2714.29ascon128abi32v12
18.1718.3518.37T:schwaemm256128v2
20.7721.0221.04ascon128bi32v12
23.7023.7323.76T:schwaemm192192v2
24.7724.7924.89T:grain128aeadv2
24.9124.9225.22T:schwaemm256256v2
25.9725.9926.02T:schwaemm128128v2
31.8031.8431.99romulusn
33.9033.9333.97T:giftcofb128v1
36.3736.3936.41T:isapa128av20
43.6243.6843.72romulusm
47.4447.4647.50T:isapa128v20
55.8855.9055.92T:tinyjambu128v2
63.9863.9963.99T:tinyjambu192v2
64.2364.2864.37T:isapk128av20
67.8967.8967.89T:tinyjambu256v2
89.7489.7889.81romulust
128.15128.18128.23T:isapk128v20
134.59134.62134.64T:elephant200v2
299.94299.95299.99T:isapxv20
300.39300.53300.65aes256gcmv1
6130.436130.566130.87T:elephant176v2
6265.476265.816265.97T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.641.641.66T:aes128gcmv1
1.761.781.79T:aes256gcmv1
7.597.607.62ascon128av12
11.0211.0611.07ascon80pqv12
11.0511.0811.09ascon128v12
11.1611.1711.19T:xoodyakround3
14.2514.2614.27ascon128abi32v12
18.1218.1418.22T:schwaemm256128v2
21.0221.0421.28ascon128bi32v12
23.7223.7423.81T:schwaemm192192v2
24.9024.9325.20T:schwaemm256256v2
24.9424.9624.97T:grain128aeadv2
25.9725.9926.09T:schwaemm128128v2
31.8131.8531.87romulusn
33.9433.9534.00T:giftcofb128v1
36.3636.4136.44T:isapa128av20
43.7943.8843.92romulusm
47.4347.4647.53T:isapa128v20
55.9956.0056.01T:tinyjambu128v2
63.6763.9964.00T:tinyjambu192v2
64.2664.3164.36T:isapk128av20
67.8767.8767.88T:tinyjambu256v2
89.7489.7989.84romulust
128.15128.18128.26T:isapk128v20
134.59134.60134.60T:elephant200v2
299.92299.99300.01T:isapxv20
300.51300.62300.73aes256gcmv1
6130.566130.686131.01T:elephant176v2
6265.296265.676265.95T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.631.641.65T:aes128gcmv1
1.761.771.79T:aes256gcmv1
7.587.597.60ascon128av12
10.9911.0311.05ascon80pqv12
11.0511.0711.08ascon128v12
11.2011.2011.21T:xoodyakround3
14.2414.2614.27ascon128abi32v12
18.1218.1618.20T:schwaemm256128v2
21.0021.0221.05ascon128bi32v12
23.7123.7823.97T:schwaemm192192v2
24.9024.9325.23T:schwaemm256256v2
24.9424.9724.98T:grain128aeadv2
25.9726.0226.11T:schwaemm128128v2
28.5928.6028.62T:isapa128av20
29.3129.3329.35T:isapa128v20
31.8331.8632.06romulusn
33.9433.9734.00T:giftcofb128v1
43.6643.8443.87romulusm
46.2546.2646.32romulust
49.5649.6049.66T:isapk128av20
55.9955.9956.00T:tinyjambu128v2
63.9563.9964.00T:tinyjambu192v2
67.8767.8767.88T:tinyjambu256v2
84.3784.4084.50T:isapk128v20
134.58134.59134.60T:elephant200v2
194.87194.88194.91T:isapxv20
294.03294.08294.12aes256gcmv1
6130.406130.576130.72T:elephant176v2
6265.446265.796266.14T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
11.8612.1212.47ascon128av12
14.8815.0215.28ascon80pqv12
14.9915.2315.66ascon128v12
16.2716.3316.52T:xoodyakround3
21.3921.4921.70ascon128abi32v12
27.7427.9228.44ascon128bi32v12
28.0928.2228.45T:aes128gcmv1
28.7228.9129.20T:aes256gcmv1
29.5229.6830.22T:schwaemm256128v2
33.5333.6534.03T:schwaemm128128v2
34.7434.8334.91T:grain128aeadv2
38.2538.4538.52romulusn
38.2738.6138.97T:schwaemm192192v2
39.5239.8740.08T:schwaemm256256v2
41.9142.0442.17T:giftcofb128v1
51.7351.7752.11romulusm
65.5365.5965.77T:tinyjambu128v2
74.0374.0974.40T:tinyjambu192v2
79.1279.2779.33T:tinyjambu256v2
86.2386.4886.68T:isapa128av20
121.03121.28121.78romulust
190.62190.80191.26T:elephant200v2
223.84225.16226.14T:isapk128av20
339.16339.45339.62aes256gcmv1
393.66393.88395.19T:isapa128v20
1367.031368.511369.79T:isapk128v20
2937.692937.852938.27T:isapxv20
7636.327636.997638.40T:elephant176v2
8391.678392.408393.66T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
11.9312.1912.78ascon128av12
15.0415.2115.74ascon128v12
15.1015.2415.46ascon80pqv12
16.2916.3816.61T:xoodyakround3
21.2221.4821.85ascon128abi32v12
27.6728.0828.41ascon128bi32v12
27.9528.1429.16T:aes128gcmv1
28.2728.4528.91T:aes256gcmv1
29.4529.5229.62T:schwaemm256128v2
33.3833.6633.71T:schwaemm128128v2
34.9335.0335.27T:grain128aeadv2
38.1938.3838.55romulusn
38.3638.6338.87T:schwaemm192192v2
39.7139.8940.21T:schwaemm256256v2
42.0842.3642.57T:giftcofb128v1
53.2453.4453.69romulusm
65.7565.7965.82T:tinyjambu128v2
74.2974.5374.59T:tinyjambu192v2
79.1979.2679.30T:tinyjambu256v2
86.1686.6286.79T:isapa128av20
121.04121.46121.83romulust
190.35190.41190.48T:elephant200v2
225.29226.12226.76T:isapk128av20
339.75340.09340.24aes256gcmv1
393.08393.62394.57T:isapa128v20
1367.101368.051369.39T:isapk128v20
2938.052938.382938.73T:isapxv20
7636.377637.697639.09T:elephant176v2
8391.638392.228394.32T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
11.8711.9812.16ascon128av12
14.9915.0915.37ascon80pqv12
15.0515.1215.20ascon128v12
16.2716.3416.45T:xoodyakround3
21.1721.2421.34ascon128abi32v12
27.7527.9028.05ascon128bi32v12
27.7427.9828.29T:aes128gcmv1
28.2328.3728.72T:aes256gcmv1
29.4229.4829.57T:schwaemm256128v2
33.2933.6233.85T:schwaemm128128v2
34.8934.9635.23T:grain128aeadv2
38.1838.3338.73T:schwaemm192192v2
38.2038.3838.48romulusn
39.5939.7540.04T:schwaemm256256v2
42.0242.2342.40T:giftcofb128v1
53.3453.4153.45romulusm
57.2357.5657.73T:isapa128av20
65.7165.7265.73T:tinyjambu128v2
74.5374.5574.56T:tinyjambu192v2
75.6576.0376.17romulust
79.1679.1779.18T:tinyjambu256v2
138.88139.58140.68T:isapk128av20
190.40190.45190.52T:elephant200v2
205.20205.48205.88T:isapa128v20
332.96333.26333.70aes256gcmv1
715.31715.85717.42T:isapk128v20
1535.451535.551535.88T:isapxv20
7635.177636.667637.69T:elephant176v2
8391.658392.488394.92T:elephant160v2