VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Zen (800f11); 2017 AMD Ryzen 5 1600; 6 x 3200MHz; rumba5, supercop-20241022

[Page version: 20241120 00:41:35]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.87?0.91?1.07?T:aes256gcmv1
1.601.611.63T:aes128gcmv1
6.576.596.60ascon128av12
9.019.049.07ascon128v12
9.049.089.09ascon80pqv12
11.3811.4111.41ascon128abi32v12
15.1415.3815.49T:xoodyakround3
16.6116.6216.63ascon128bi32v12
19.3919.4119.90T:schwaemm256128v2
24.0024.0624.15T:schwaemm256256v2
25.5426.0426.33T:schwaemm192192v2
27.0227.1027.20T:grain128aeadv2
27.7927.8330.83T:schwaemm128128v2
34.2834.3234.35T:isapa128av20
34.7134.7134.88T:isapa128v20
35.7136.0637.16romulusn
40.5140.5640.58T:giftcofb128v1
56.3956.4056.48T:tinyjambu128v2
57.5057.8458.99romulusm
66.5266.5266.55T:tinyjambu192v2
67.2767.3267.42T:isapk128av20
71.0471.0571.08T:tinyjambu256v2
88.7989.7990.20T:isapk128v20
115.58115.59115.60romulust
147.89148.05148.18T:elephant200v2
160.97162.78164.32T:isapxv20
373.79374.47375.19aes256gcmv1
6936.786938.966943.52T:elephant176v2
7828.587829.147829.62T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.81?0.92?0.96?T:aes256gcmv1
1.591.611.62T:aes128gcmv1
6.036.076.10ascon128av12
8.898.918.91ascon80pqv12
9.089.109.10ascon128v12
11.34?11.41?13.37?ascon128abi32v12
16.2316.2516.25ascon128bi32v12
16.3316.5116.76T:xoodyakround3
19.4819.5019.51T:schwaemm256128v2
24.0224.1024.13T:schwaemm256256v2
25.8325.8826.32T:schwaemm192192v2
27.3827.4527.50T:grain128aeadv2
27.8527.8627.91T:schwaemm128128v2
34.3034.3234.35T:isapa128av20
34.7034.7034.72T:isapa128v20
35.6836.1136.63romulusn
40.4940.5240.55T:giftcofb128v1
56.4956.5256.58T:tinyjambu128v2
57.6357.9757.98romulusm
66.1266.1566.21T:tinyjambu192v2
67.2467.3767.42T:isapk128av20
71.1471.1971.22T:tinyjambu256v2
88.8389.6889.79T:isapk128v20
115.56115.58115.60romulust
148.21148.28148.34T:elephant200v2
161.63162.05163.70T:isapxv20
374.58376.29376.94aes256gcmv1
6939.136939.876943.70T:elephant176v2
7829.257829.567830.01T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.850.910.94T:aes256gcmv1
1.601.611.62T:aes128gcmv1
6.036.066.07ascon128av12
8.908.918.91ascon80pqv12
9.099.109.12ascon128v12
11.36?11.43?13.35?ascon128abi32v12
16.2516.2516.25ascon128bi32v12
16.4416.5916.78T:xoodyakround3
17.3017.4717.47T:isapa128v20
19.4719.5119.54T:schwaemm256128v2
22.8822.9022.92T:isapa128av20
24.0524.1124.14T:schwaemm256256v2
25.8225.8626.32T:schwaemm192192v2
27.4027.4527.53T:grain128aeadv2
27.8127.8528.18T:schwaemm128128v2
35.7035.9837.25romulusn
38.8438.8638.88romulust
40.4940.5340.56T:giftcofb128v1
44.3044.3644.41T:isapk128av20
55.3356.1856.33T:isapk128v20
56.5056.5056.53T:tinyjambu128v2
57.5257.7259.05romulusm
66.1066.1566.19T:tinyjambu192v2
71.2171.2471.24T:tinyjambu256v2
94.1695.3595.95T:isapxv20
147.96148.10148.34T:elephant200v2
370.89371.32371.68aes256gcmv1
6939.256939.996947.59T:elephant176v2
7828.767829.607830.13T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.61?0.67?0.71?T:aes256gcmv1
1.071.081.09T:aes128gcmv1
6.286.296.30ascon128av12
8.898.908.94ascon80pqv12
8.988.999.01ascon128v12
11.1311.1711.78ascon128abi32v12
11.6511.8211.87T:xoodyakround3
16.4416.4516.47ascon128bi32v12
19.3519.4319.43T:schwaemm256128v2
23.9223.9724.02T:schwaemm256256v2
25.5625.7726.33T:schwaemm192192v2
26.0126.0826.20T:isapa128v20
27.1027.1227.15T:grain128aeadv2
27.7327.7527.76T:schwaemm128128v2
28.5928.6728.68T:isapa128av20
28.7328.8329.00romulusn
39.6139.9140.42romulusm
40.5040.5140.53T:giftcofb128v1
44.6744.7344.74T:tinyjambu128v2
51.7251.7451.81T:tinyjambu192v2
53.3253.3453.35T:tinyjambu256v2
55.7955.8455.94T:isapk128av20
72.1672.2372.72T:isapk128v20
77.2277.2377.25romulust
111.63111.69111.74T:elephant200v2
128.93129.91130.55T:isapxv20
373.02373.30376.14aes256gcmv1
5182.065182.425190.62T:elephant176v2
5868.605868.945869.38T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.62?0.66?0.70?T:aes256gcmv1
1.071.081.08T:aes128gcmv1
5.975.986.01ascon128av12
8.888.908.90ascon80pqv12
8.928.959.01ascon128v12
11.1911.2212.19ascon128abi32v12
12.2412.3512.53T:xoodyakround3
16.2416.3416.36ascon128bi32v12
19.4419.4619.47T:schwaemm256128v2
23.9324.0024.02T:schwaemm256256v2
25.7325.9726.14T:schwaemm192192v2
26.1426.1626.32T:isapa128v20
27.1927.2327.38T:grain128aeadv2
27.7727.8127.94T:schwaemm128128v2
28.6228.6928.71T:isapa128av20
28.7828.9729.55romulusn
39.7539.8039.92romulusm
40.4640.4840.50T:giftcofb128v1
44.7344.7344.75T:tinyjambu128v2
51.4651.4751.49T:tinyjambu192v2
53.4253.4453.46T:tinyjambu256v2
55.7955.8355.87T:isapk128av20
72.1372.2172.64T:isapk128v20
77.2377.2477.24romulust
111.61111.65111.68T:elephant200v2
129.19129.44130.98T:isapxv20
372.47373.05373.42aes256gcmv1
5182.285182.695188.67T:elephant176v2
5868.485868.845869.26T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.650.670.70T:aes256gcmv1
1.061.081.08T:aes128gcmv1
5.996.006.00ascon128av12
8.898.908.91ascon80pqv12
8.948.989.02ascon128v12
11.2011.2312.20ascon128abi32v12
12.2412.3612.48T:xoodyakround3
16.2616.3216.36ascon128bi32v12
17.5617.6517.70T:isapa128v20
19.4419.4419.46T:schwaemm256128v2
22.9122.9623.00T:isapa128av20
23.9023.9624.02T:schwaemm256256v2
25.6025.7925.94T:schwaemm192192v2
27.3427.3927.46T:grain128aeadv2
27.7527.7827.81T:schwaemm128128v2
28.8028.9029.56romulusn
38.8538.8738.89romulust
39.7039.9040.45romulusm
40.4540.4840.51T:giftcofb128v1
44.3344.3744.47T:isapk128av20
44.7444.7444.74T:tinyjambu128v2
51.4651.4951.51T:tinyjambu192v2
53.4153.4153.43T:tinyjambu256v2
55.3855.4355.90T:isapk128v20
95.0496.0696.17T:isapxv20
111.50111.71111.75T:elephant200v2
367.17368.67369.82aes256gcmv1
5181.915182.245189.70T:elephant176v2
5868.725868.955869.18T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.38?0.48?0.52?T:aes256gcmv1
0.550.560.58T:aes128gcmv1
5.996.006.01ascon128av12
8.068.118.21T:xoodyakround3
8.768.798.80ascon80pqv12
8.948.948.96ascon128v12
10.87?10.94?12.13?ascon128abi32v12
16.2716.2916.44ascon128bi32v12
17.6017.6017.78T:isapa128v20
19.2819.4019.43T:schwaemm256128v2
21.8321.8421.86romulusn
21.8321.8521.85romulusm
22.9723.0623.07T:isapa128av20
23.7823.8223.89T:schwaemm256256v2
25.3125.3325.83T:schwaemm192192v2
27.0727.2127.30T:grain128aeadv2
27.6327.6827.74T:schwaemm128128v2
32.9332.9532.97T:tinyjambu128v2
35.6335.6335.64T:tinyjambu256v2
37.0137.0237.05T:tinyjambu192v2
38.8638.8738.88romulust
40.4240.4640.47T:giftcofb128v1
44.2344.3044.38T:isapk128av20
55.5355.7856.01T:isapk128v20
75.6176.0876.12T:elephant200v2
95.4295.6896.43T:isapxv20
369.10369.68370.28aes256gcmv1
3425.633426.093429.05T:elephant176v2
3908.823909.233909.85T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.38?0.42?0.48?T:aes256gcmv1
0.540.560.58T:aes128gcmv1
5.915.925.93ascon128av12
8.038.108.18T:xoodyakround3
8.868.878.87ascon80pqv12
8.868.888.91ascon128v12
10.9911.0211.03ascon128abi32v12
16.2416.3616.46ascon128bi32v12
17.6017.6017.60T:isapa128v20
19.3919.4119.43T:schwaemm256128v2
21.8221.8421.85romulusn
21.8321.8521.86romulusm
22.9522.9823.08T:isapa128av20
23.7923.8623.90T:schwaemm256256v2
25.3325.3625.59T:schwaemm192192v2
26.8726.9727.35T:grain128aeadv2
27.6727.7127.76T:schwaemm128128v2
32.9332.9432.99T:tinyjambu128v2
35.6635.6735.68T:tinyjambu256v2
36.7336.8336.88T:tinyjambu192v2
38.8338.8638.87romulust
40.4440.4740.49T:giftcofb128v1
44.3044.3344.39T:isapk128av20
55.3755.6055.73T:isapk128v20
76.0076.1276.22T:elephant200v2
94.8595.7695.98T:isapxv20
368.30372.53373.05aes256gcmv1
3425.703427.303429.50T:elephant176v2
3909.003909.573909.99T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.39?0.44?0.49?T:aes256gcmv1
0.560.560.57T:aes128gcmv1
5.895.915.92ascon128av12
8.068.098.51T:xoodyakround3
8.878.888.89ascon128v12
8.898.898.89ascon80pqv12
11.0111.0311.04ascon128abi32v12
16.2516.4516.47ascon128bi32v12
17.6017.6117.63T:isapa128v20
19.4019.4119.41T:schwaemm256128v2
21.8321.8521.86romulusm
21.8321.8521.86romulusn
22.9122.9323.08T:isapa128av20
23.7823.8523.88T:schwaemm256256v2
25.3425.3525.61T:schwaemm192192v2
26.9526.9727.18T:grain128aeadv2
27.6927.7127.75T:schwaemm128128v2
32.9532.9732.97T:tinyjambu128v2
35.6635.6635.66T:tinyjambu256v2
36.8036.8236.87T:tinyjambu192v2
38.8638.8738.90romulust
40.4440.4740.50T:giftcofb128v1
44.2444.3144.36T:isapk128av20
55.4255.5355.57T:isapk128v20
75.4476.0476.11T:elephant200v2
94.7395.0195.69T:isapxv20
366.70368.86375.98aes256gcmv1
3426.053428.773429.74T:elephant176v2
3909.793910.213923.47T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.211.211.22T:aes128gcmv1
1.982.012.04T:aes256gcmv1
6.456.456.46ascon128av12
9.079.079.09ascon80pqv12
9.149.149.15ascon128v12
11.4911.5512.03ascon128abi32v12
11.7411.8811.89T:xoodyakround3
16.7916.7916.80ascon128bi32v12
19.9719.9820.10T:schwaemm256128v2
24.6324.6424.66T:schwaemm256256v2
26.1726.2926.85T:schwaemm192192v2
27.4427.4527.48T:grain128aeadv2
28.1028.1328.15T:schwaemm128128v2
29.0629.2129.73romulusn
30.9231.1031.11T:isapa128av20
38.3838.3838.46T:isapa128v20
39.9240.0540.21romulusm
40.8640.8840.90T:giftcofb128v1
45.0345.0945.11T:tinyjambu128v2
52.1452.1452.21T:tinyjambu192v2
53.7653.7653.78T:tinyjambu256v2
63.3963.4563.59T:isapk128av20
78.4178.4178.42romulust
113.85113.97114.11T:elephant200v2
125.36125.38125.76T:isapk128v20
209.43209.70209.84T:isapxv20
372.85373.79379.21aes256gcmv1
5221.875222.055224.45T:elephant176v2
5934.875935.035935.35T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.211.211.21T:aes128gcmv1
1.951.962.00T:aes256gcmv1
6.156.166.16ascon128av12
9.049.069.06ascon80pqv12
9.089.109.15ascon128v12
11.5411.5512.43ascon128abi32v12
12.3412.4412.50T:xoodyakround3
16.5916.6816.68ascon128bi32v12
20.0120.0120.02T:schwaemm256128v2
24.5924.6624.67T:schwaemm256256v2
26.1926.3126.67T:schwaemm192192v2
27.6827.7327.80T:grain128aeadv2
28.1728.2128.23T:schwaemm128128v2
29.0829.2429.41romulusn
31.0531.0831.13T:isapa128av20
38.2638.2638.26T:isapa128v20
40.1240.1640.22romulusm
40.8540.8840.91T:giftcofb128v1
45.1045.1145.14T:tinyjambu128v2
51.8851.9051.92T:tinyjambu192v2
53.8853.9053.90T:tinyjambu256v2
63.3763.4163.48T:isapk128av20
78.4078.4078.43romulust
113.87113.93114.08T:elephant200v2
125.76125.78125.84T:isapk128v20
208.90209.17210.38T:isapxv20
374.94377.54381.40aes256gcmv1
5221.355221.865225.78T:elephant176v2
5934.755935.195935.51T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.201.201.21T:aes128gcmv1
1.931.941.96T:aes256gcmv1
6.156.166.16ascon128av12
9.059.069.06ascon80pqv12
9.109.119.15ascon128v12
11.5411.5512.44ascon128abi32v12
12.3912.4412.60T:xoodyakround3
16.6016.6816.68ascon128bi32v12
20.0120.0220.02T:schwaemm256128v2
23.7323.7323.73T:isapa128v20
24.2924.3224.35T:isapa128av20
24.5924.6524.67T:schwaemm256256v2
26.1826.3326.68T:schwaemm192192v2
27.5527.6727.77T:grain128aeadv2
28.1528.1728.19T:schwaemm128128v2
29.0829.2429.28romulusn
39.9939.9940.02romulust
40.1240.2240.23romulusm
40.8440.8540.89T:giftcofb128v1
45.1145.1245.14T:tinyjambu128v2
48.7148.7348.75T:isapk128av20
51.9151.9251.94T:tinyjambu192v2
53.8553.8853.89T:tinyjambu256v2
82.6482.6683.04T:isapk128v20
113.92114.01114.17T:elephant200v2
135.96136.37136.59T:isapxv20
373.32375.32375.97aes256gcmv1
5221.675221.935225.00T:elephant176v2
5934.945935.235935.47T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
5.475.535.73T:aes128gcmv1
10.0510.4110.58ascon128av12
12.3012.5113.03ascon80pqv12
12.4812.8012.95ascon128v12
17.6917.9118.20T:xoodyakround3
18.3818.8019.27ascon128abi32v12
24.0324.3424.73ascon128bi32v12
31.9932.0533.47T:aes256gcmv1
32.6232.8032.89T:schwaemm256128v2
35.0235.4335.80T:grain128aeadv2
35.2735.4535.93romulusn
37.0437.2037.37T:schwaemm128128v2
39.2339.3439.58T:schwaemm256256v2
42.7943.2343.66T:schwaemm192192v2
46.1646.3146.71romulusm
49.3849.4149.58T:giftcofb128v1
53.3353.4153.84T:tinyjambu128v2
61.4261.4262.09T:tinyjambu192v2
63.1063.1163.62T:tinyjambu256v2
86.6286.8887.30T:isapa128av20
105.29105.41105.83romulust
163.02163.28163.56T:elephant200v2
223.88224.31225.38T:isapk128av20
319.05320.98320.98T:isapa128v20
418.83419.96421.09aes256gcmv1
1332.811333.171333.45T:isapk128v20
2004.052020.622032.17T:isapxv20
6502.056505.336510.01T:elephant176v2
7947.397949.347950.86T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
5.485.525.55T:aes128gcmv1
9.8010.1710.67ascon128av12
12.2312.3713.07ascon128v12
12.5612.7713.17ascon80pqv12
17.8417.9718.33T:xoodyakround3
18.4818.9519.40ascon128abi32v12
24.3024.4924.61ascon128bi32v12
31.8832.2533.20T:aes256gcmv1
32.5532.6432.67T:schwaemm256128v2
35.0735.3635.69romulusn
35.3035.5935.82T:grain128aeadv2
37.1737.2837.38T:schwaemm128128v2
39.1739.2439.34T:schwaemm256256v2
42.8243.2243.41T:schwaemm192192v2
47.5347.5947.80romulusm
49.6249.7349.93T:giftcofb128v1
53.5353.5353.80T:tinyjambu128v2
61.6561.8162.05T:tinyjambu192v2
63.6663.6663.80T:tinyjambu256v2
86.7086.9287.09T:isapa128av20
105.27105.31105.47romulust
163.22163.31163.52T:elephant200v2
224.16224.48225.22T:isapk128av20
310.27311.37319.11T:isapa128v20
421.52422.41426.34aes256gcmv1
1332.341332.841333.29T:isapk128v20
2009.882014.682016.98T:isapxv20
6501.516503.536524.43T:elephant176v2
7946.097947.317949.43T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
5.505.525.59T:aes128gcmv1
9.669.9510.11ascon128av12
12.5412.5612.77ascon128v12
12.4112.6012.86ascon80pqv12
17.9318.0518.56T:xoodyakround3
18.2418.7319.02ascon128abi32v12
23.8823.9523.98ascon128bi32v12
31.9532.0332.71T:aes256gcmv1
32.4832.4832.88T:schwaemm256128v2
35.0535.1835.77romulusn
35.6635.7535.79T:grain128aeadv2
37.0537.0937.37T:schwaemm128128v2
39.1739.2439.30T:schwaemm256256v2
42.9043.2043.30T:schwaemm192192v2
47.4247.4747.80romulusm
49.5349.5949.77T:giftcofb128v1
53.4553.4553.46T:tinyjambu128v2
55.6955.7655.98T:isapa128av20
61.4161.5661.81T:tinyjambu192v2
63.6663.7963.93T:tinyjambu256v2
65.6565.7665.88romulust
140.02140.45140.59T:isapk128av20
163.17163.27163.60T:elephant200v2
165.80165.80166.20T:isapa128v20
417.75422.31424.59aes256gcmv1
696.56696.80697.23T:isapk128v20
1048.151049.161055.25T:isapxv20
6504.096505.576507.05T:elephant176v2
7947.457949.387952.66T:elephant160v2