VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Zen 2 (860f01); 2022 AMD Ryzen 5 4500U; 6 x 3600MHz; renoir, supercop-20241022

[Page version: 20241120 00:41:35]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.920.960.99T:aes256gcmv1
1.511.531.53T:aes128gcmv1
1.651.671.68aes256gcmv1
6.456.466.48ascon128av12
9.379.399.40ascon128v12
9.429.429.42ascon80pqv12
11.1511.1911.41ascon128abi32v12
16.9817.0417.12ascon128bi32v12
17.9117.9417.98T:xoodyakround3
19.4419.4819.62T:schwaemm256128v2
23.6923.7323.73T:schwaemm256256v2
25.6825.7525.84T:schwaemm192192v2
27.1727.2227.28T:grain128aeadv2
27.6127.7127.91T:schwaemm128128v2
35.5535.5735.61romulusn
36.3936.4336.47T:isapa128av20
36.5536.6036.62T:isapa128v20
40.4740.5140.53T:giftcofb128v1
57.1357.1857.24romulusm
61.7261.7461.76T:tinyjambu128v2
64.5464.7564.91T:isapk128av20
68.9168.9368.96T:tinyjambu192v2
75.9775.9776.10T:tinyjambu256v2
85.0985.3685.65T:isapk128v20
112.27112.30112.33romulust
147.24147.84149.06T:isapxv20
227.74?230.10?254.63?T:elephant200v2
6458.936460.036461.11T:elephant176v2
7137.897157.087160.49T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.87?0.95?0.98?T:aes256gcmv1
1.601.621.63T:aes128gcmv1
1.781.791.81aes256gcmv1
6.276.306.32ascon128av12
9.299.309.32ascon128v12
9.389.399.39ascon80pqv12
11.2111.2311.25ascon128abi32v12
16.8016.9116.98ascon128bi32v12
17.7017.7617.83T:xoodyakround3
19.4919.5019.61T:schwaemm256128v2
23.6623.7023.71T:schwaemm256256v2
25.6425.7125.85T:schwaemm192192v2
27.2827.3427.41T:grain128aeadv2
27.5227.6127.80T:schwaemm128128v2
35.4135.4235.45romulusn
36.2836.4036.76T:isapa128v20
36.4236.4436.50T:isapa128av20
40.5140.5640.60T:giftcofb128v1
57.2157.2757.39romulusm
60.1060.1560.19T:tinyjambu128v2
65.2065.4265.54T:isapk128av20
68.7068.7168.73T:tinyjambu192v2
76.0276.0876.13T:tinyjambu256v2
84.5984.7185.53T:isapk128v20
112.25112.29112.34romulust
146.58148.47148.89T:isapxv20
227.59?229.58?254.07?T:elephant200v2
6452.846458.986461.05T:elephant176v2
7140.267158.327161.08T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.87?0.92?0.97?T:aes256gcmv1
1.601.601.60T:aes128gcmv1
1.791.791.80aes256gcmv1
6.286.316.31ascon128av12
9.289.299.31ascon128v12
9.349.379.39ascon80pqv12
11.2311.2411.25ascon128abi32v12
16.7816.9116.99ascon128bi32v12
17.8017.8617.91T:xoodyakround3
18.0218.0918.13T:isapa128v20
19.4919.5219.62T:schwaemm256128v2
23.6723.6923.70T:schwaemm256256v2
24.1424.1624.21T:isapa128av20
25.6925.8125.88T:schwaemm192192v2
27.3327.3827.42T:grain128aeadv2
27.4727.5927.77T:schwaemm128128v2
35.4035.4235.44romulusn
37.4737.5637.63romulust
40.5040.5240.55T:giftcofb128v1
44.4844.5344.57T:isapk128av20
54.2354.6254.99T:isapk128v20
57.2357.2657.41romulusm
60.0960.1260.20T:tinyjambu128v2
68.7168.7168.76T:tinyjambu192v2
76.0776.0876.12T:tinyjambu256v2
86.7486.9287.26T:isapxv20
227.62?229.92?254.24?T:elephant200v2
6454.396457.786462.09T:elephant176v2
7137.717156.797159.94T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.680.680.70T:aes256gcmv1
1.011.011.02T:aes128gcmv1
1.081.091.10aes256gcmv1
6.396.406.42ascon128av12
9.329.349.37ascon80pqv12
9.329.369.36ascon128v12
11.0611.1111.11ascon128abi32v12
13.4813.5013.56T:xoodyakround3
16.8316.9016.94ascon128bi32v12
19.3819.4319.46T:schwaemm256128v2
23.5723.6023.62T:schwaemm256256v2
25.5825.6225.69T:schwaemm192192v2
27.1227.1627.17T:grain128aeadv2
27.2527.4227.43T:isapa128v20
27.5327.5927.60T:schwaemm128128v2
28.7428.7528.75romulusn
30.2830.3030.31T:isapa128av20
39.5239.5539.60romulusm
40.4140.4340.46T:giftcofb128v1
51.1851.2151.25T:tinyjambu128v2
54.3154.3354.35T:tinyjambu192v2
54.5854.6354.68T:isapk128av20
57.9958.0058.04T:tinyjambu256v2
69.8270.0170.28T:isapk128v20
74.7674.9074.92romulust
116.67117.20117.38T:isapxv20
169.89?171.33?189.61?T:elephant200v2
4819.244824.894826.19T:elephant176v2
5351.595366.505368.04T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.650.690.70T:aes256gcmv1
1.041.051.06T:aes128gcmv1
1.151.161.17aes256gcmv1
6.316.326.35ascon128av12
9.299.329.32ascon128v12
9.339.349.34ascon80pqv12
11.1011.1711.17ascon128abi32v12
13.3913.4313.49T:xoodyakround3
16.6916.7316.75ascon128bi32v12
19.3519.3919.44T:schwaemm256128v2
23.5623.5823.60T:schwaemm256256v2
25.5725.6225.68T:schwaemm192192v2
27.1827.2127.23T:grain128aeadv2
27.1927.2827.49T:isapa128v20
27.4227.5427.57T:schwaemm128128v2
28.6428.6528.69romulusn
30.2830.3130.38T:isapa128av20
39.5439.6239.65romulusm
40.3940.4240.45T:giftcofb128v1
50.4250.4250.42T:tinyjambu128v2
54.1954.2054.22T:tinyjambu192v2
54.9154.9955.06T:isapk128av20
58.1058.1258.13T:tinyjambu256v2
69.5169.8570.21T:isapk128v20
74.8874.9174.94romulust
116.17117.36117.54T:isapxv20
169.98?171.35?189.54?T:elephant200v2
4820.074824.434827.14T:elephant176v2
5352.255366.595369.02T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.670.680.70T:aes256gcmv1
1.051.051.06T:aes128gcmv1
1.151.161.16aes256gcmv1
6.326.346.34ascon128av12
9.299.309.30ascon128v12
9.349.359.35ascon80pqv12
11.1011.1111.11ascon128abi32v12
13.4413.4713.50T:xoodyakround3
16.7216.7416.74ascon128bi32v12
18.1118.1318.22T:isapa128v20
19.3519.4019.44T:schwaemm256128v2
23.5723.6023.61T:schwaemm256256v2
24.1624.1824.19T:isapa128av20
25.5825.6425.67T:schwaemm192192v2
27.1727.1927.25T:grain128aeadv2
27.4127.5527.56T:schwaemm128128v2
28.6228.6628.68romulusn
37.5137.5237.55romulust
39.5139.5839.64romulusm
40.4040.4340.45T:giftcofb128v1
44.5244.5544.57T:isapk128av20
50.4150.4250.43T:tinyjambu128v2
54.2154.2254.24T:tinyjambu192v2
54.4554.6654.85T:isapk128v20
58.0758.0758.09T:tinyjambu256v2
86.5286.6186.66T:isapxv20
169.82?171.37?189.53?T:elephant200v2
4825.914827.504829.73T:elephant176v2
5352.525366.935367.97T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.410.440.45T:aes256gcmv1
0.500.520.54aes256gcmv1
0.500.520.53T:aes128gcmv1
6.336.366.36ascon128av12
9.069.109.14T:xoodyakround3
9.259.279.29ascon80pqv12
9.289.289.29ascon128v12
10.9010.9410.95ascon128abi32v12
16.5316.6716.75ascon128bi32v12
18.2418.2718.27T:isapa128v20
19.2419.2719.37T:schwaemm256128v2
21.7421.8421.91romulusm
21.8621.8921.93romulusn
23.4623.4923.52T:schwaemm256256v2
24.1324.1724.21T:isapa128av20
25.4225.5325.62T:schwaemm192192v2
26.9827.0327.07T:grain128aeadv2
27.3427.5627.68T:schwaemm128128v2
37.5337.5737.58romulust
39.6939.7139.73T:tinyjambu192v2
40.0140.0240.10T:tinyjambu256v2
40.2540.3040.31T:giftcofb128v1
40.6640.6740.69T:tinyjambu128v2
44.5344.6144.64T:isapk128av20
54.3454.7354.83T:isapk128v20
85.8486.2486.67T:isapxv20
112.14?113.19?125.12?T:elephant200v2
3187.333188.253189.61T:elephant176v2
3564.063573.023575.63T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.410.430.44T:aes256gcmv1
0.490.510.52T:aes128gcmv1
0.520.530.54aes256gcmv1
6.356.396.39ascon128av12
9.069.109.16T:xoodyakround3
9.309.309.32ascon128v12
9.299.319.31ascon80pqv12
10.9310.9610.97ascon128abi32v12
16.5016.5716.65ascon128bi32v12
18.2018.2418.29T:isapa128v20
19.2519.2819.32T:schwaemm256128v2
21.8521.8821.94romulusm
21.8021.9021.90romulusn
23.4523.5123.53T:schwaemm256256v2
24.1424.1924.22T:isapa128av20
25.4525.5725.62T:schwaemm192192v2
27.0027.0327.10T:grain128aeadv2
27.3127.3827.59T:schwaemm128128v2
37.4837.5237.57romulust
39.6939.7039.73T:tinyjambu192v2
40.0840.1340.13T:tinyjambu256v2
40.2640.3240.35T:giftcofb128v1
40.6940.7140.71T:tinyjambu128v2
44.5244.5844.62T:isapk128av20
54.2854.7055.05T:isapk128v20
85.9686.2386.48T:isapxv20
112.12?113.34?125.16?T:elephant200v2
3186.183187.803190.26T:elephant176v2
3565.363572.163575.43T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.420.430.45T:aes256gcmv1
0.490.510.53T:aes128gcmv1
0.520.520.53aes256gcmv1
6.336.346.35ascon128av12
9.019.109.16T:xoodyakround3
9.289.299.29ascon128v12
9.309.309.32ascon80pqv12
10.9510.9510.97ascon128abi32v12
16.5216.5816.67ascon128bi32v12
18.2118.2618.28T:isapa128v20
19.2319.2719.35T:schwaemm256128v2
21.8321.8621.90romulusn
21.8721.9321.95romulusm
23.4223.4823.52T:schwaemm256256v2
24.1224.1724.22T:isapa128av20
25.5225.5625.64T:schwaemm192192v2
27.0027.0327.09T:grain128aeadv2
27.2427.3127.59T:schwaemm128128v2
37.4837.5437.57romulust
39.7039.7039.70T:tinyjambu192v2
40.0140.0740.07T:tinyjambu256v2
40.2840.3340.37T:giftcofb128v1
40.6640.7140.71T:tinyjambu128v2
44.5244.5944.63T:isapk128av20
54.3054.6955.05T:isapk128v20
85.8486.1486.47T:isapxv20
112.16?113.16?125.03?T:elephant200v2
3185.963186.913188.34T:elephant176v2
3565.203572.873575.74T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.141.141.15T:aes128gcmv1
1.231.231.24aes256gcmv1
1.231.231.24T:aes256gcmv1
6.576.596.59ascon128av12
9.489.499.51ascon128v12
9.499.509.52ascon80pqv12
11.3711.4011.41ascon128abi32v12
13.6213.6613.67T:xoodyakround3
17.1817.2117.23ascon128bi32v12
19.9319.9720.03T:schwaemm256128v2
24.2224.2524.25T:schwaemm256256v2
26.1826.2026.24T:schwaemm192192v2
27.5127.5427.55T:grain128aeadv2
27.8427.9928.01T:schwaemm128128v2
29.0129.0229.05romulusn
33.5133.5233.53T:isapa128av20
39.8639.9139.97romulusm
39.9740.1540.15T:isapa128v20
40.7840.8140.82T:giftcofb128v1
51.6351.6451.65T:tinyjambu128v2
54.7554.7554.76T:tinyjambu192v2
58.4258.4558.49T:tinyjambu256v2
60.6960.7160.77T:isapk128av20
75.8876.0476.07romulust
121.75121.82122.06T:isapk128v20
174.85174.89192.16T:elephant200v2
189.86190.24190.32T:isapxv20
4860.734861.584862.71T:elephant176v2
5415.045426.295427.19T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.181.191.19T:aes128gcmv1
1.221.241.25T:aes256gcmv1
1.301.301.32aes256gcmv1
6.526.536.54ascon128av12
9.469.469.46ascon128v12
9.489.489.50ascon80pqv12
11.4111.4111.41ascon128abi32v12
13.5913.6113.64T:xoodyakround3
17.0817.1017.11ascon128bi32v12
19.9619.9920.05T:schwaemm256128v2
24.2124.2224.24T:schwaemm256256v2
26.1626.1826.25T:schwaemm192192v2
27.5727.5927.61T:grain128aeadv2
27.8227.9427.96T:schwaemm128128v2
28.9328.9528.98romulusn
33.5433.5533.58T:isapa128av20
40.0040.0040.03romulusm
40.0040.0240.17T:isapa128v20
40.7840.7940.84T:giftcofb128v1
50.8450.8450.86T:tinyjambu128v2
54.6354.6354.63T:tinyjambu192v2
58.5258.5858.60T:tinyjambu256v2
61.1861.2561.28T:isapk128av20
76.0476.0476.08romulust
121.53121.78122.05T:isapk128v20
174.87174.89192.13T:elephant200v2
189.35190.36190.59T:isapxv20
4861.294862.994864.21T:elephant176v2
5414.355425.455426.72T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.181.181.18T:aes128gcmv1
1.231.241.24T:aes256gcmv1
1.291.301.30aes256gcmv1
6.506.506.51ascon128av12
9.449.449.44ascon128v12
9.499.499.49ascon80pqv12
11.4111.4111.48ascon128abi32v12
13.6113.6413.68T:xoodyakround3
17.0917.1117.12ascon128bi32v12
19.9520.0020.04T:schwaemm256128v2
24.2024.2424.25T:schwaemm256256v2
24.6224.6224.73T:isapa128v20
25.9725.9825.99T:isapa128av20
26.2026.2426.29T:schwaemm192192v2
27.5527.5927.60T:grain128aeadv2
27.8427.9327.97T:schwaemm128128v2
28.9428.9528.97romulusn
38.6338.6538.67romulust
39.9839.9940.04romulusm
40.8140.8340.85T:giftcofb128v1
48.1348.1448.15T:isapk128av20
50.8450.8650.86T:tinyjambu128v2
54.6354.6454.65T:tinyjambu192v2
58.5058.5458.55T:tinyjambu256v2
81.1581.3881.41T:isapk128v20
123.88124.03124.13T:isapxv20
174.88174.89192.24T:elephant200v2
4860.604861.564862.55T:elephant176v2
5414.155425.765427.83T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
6.987.087.09T:aes128gcmv1
7.487.578.19aes256gcmv1
10.6610.7111.00ascon128av12
12.6112.7613.17ascon80pqv12
12.7012.9513.33ascon128v12
14.2414.3814.76T:aes256gcmv1
17.9318.2118.79ascon128abi32v12
20.1620.5720.84T:xoodyakround3
23.7324.0726.18ascon128bi32v12
32.7033.0533.52T:schwaemm256128v2
35.1435.2435.30romulusn
35.3435.6136.16T:grain128aeadv2
35.7736.1036.78T:schwaemm128128v2
38.5538.6838.73T:schwaemm256256v2
42.1842.6343.11T:schwaemm192192v2
47.1047.3847.45romulusm
49.3049.4549.70T:giftcofb128v1
60.7861.4161.46T:tinyjambu128v2
64.1464.4964.76T:tinyjambu192v2
68.0968.3868.73T:tinyjambu256v2
101.78102.04102.34romulust
106.88107.21107.56T:isapa128av20
189.91190.18191.66T:isapk128av20
245.85246.49269.19T:elephant200v2
331.00331.19331.32T:isapa128v20
1303.341303.491303.82T:isapk128v20
1846.891847.901851.37T:isapxv20
6046.906049.046052.01T:elephant176v2
7251.347259.627261.62T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
6.986.987.04T:aes128gcmv1
7.507.517.86aes256gcmv1
10.7410.9611.25ascon128av12
12.8112.9813.39ascon128v12
12.8313.0913.26ascon80pqv12
14.0214.1414.79T:aes256gcmv1
18.0318.3518.77ascon128abi32v12
19.7621.1021.26T:xoodyakround3
24.4325.3026.18ascon128bi32v12
32.8232.8233.49T:schwaemm256128v2
35.1135.2735.41romulusn
35.9636.0436.43T:grain128aeadv2
36.4236.5937.30T:schwaemm128128v2
38.5638.6238.70T:schwaemm256256v2
42.1442.3642.66T:schwaemm192192v2
48.1648.4248.85romulusm
49.5649.7650.15T:giftcofb128v1
60.5960.9160.95T:tinyjambu128v2
64.0464.0964.15T:tinyjambu192v2
68.3568.4868.59T:tinyjambu256v2
101.99102.04102.70romulust
106.81107.13107.44T:isapa128av20
192.36193.61194.75T:isapk128av20
245.77246.23267.59T:elephant200v2
329.31331.32332.62T:isapa128v20
1299.411303.831304.53T:isapk128v20
1850.261852.421853.87T:isapxv20
6048.976051.136053.66T:elephant176v2
7250.547257.967261.61T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
6.986.986.98T:aes128gcmv1
7.507.507.83aes256gcmv1
10.8610.8711.10ascon128av12
12.8312.8912.89ascon128v12
12.7012.9613.15ascon80pqv12
14.1314.3814.66T:aes256gcmv1
18.0018.0018.39ascon128abi32v12
20.0420.5120.57T:xoodyakround3
25.5925.5925.86ascon128bi32v12
32.7332.7833.08T:schwaemm256128v2
35.1935.4135.49romulusn
35.8035.9236.41T:grain128aeadv2
36.1736.2636.46T:schwaemm128128v2
38.5938.6838.69T:schwaemm256256v2
42.2942.5442.70T:schwaemm192192v2
48.3848.5548.66romulusm
49.8849.8850.18T:giftcofb128v1
60.5960.6060.79T:tinyjambu128v2
63.6264.1264.21romulust
64.2964.2964.30T:tinyjambu192v2
66.6866.9967.26T:isapa128av20
68.1268.1268.73T:tinyjambu256v2
121.46122.00122.23T:isapk128av20
173.04173.47173.97T:isapa128v20
245.72245.83268.38T:elephant200v2
679.77685.07685.61T:isapk128v20
967.04967.88968.98T:isapxv20
6045.106049.386052.66T:elephant176v2
7252.057259.847262.95T:elephant160v2