VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Zen (800f11); 2017 AMD Ryzen 7 1700; 8 x 3000MHz; rumba7, supercop-20240716

[Page version: 20240726 23:46:23]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Implementation notes

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.76?0.83?0.93?T:aes128gcmv1
0.86?0.94?1.03?T:aes256gcmv1
6.576.596.61ascon128av12
9.029.039.05ascon128v12
9.039.089.09ascon80pqv12
11.31?11.40?13.29?ascon128abi32v12
15.1415.4315.76T:xoodyakround3
16.4616.5016.51ascon128bi32v12
19.4019.4119.46T:schwaemm256128v2
24.0624.1024.12T:schwaemm256256v2
25.5625.8425.84T:schwaemm192192v2
27.0127.0927.38T:grain128aeadv2
27.7427.7627.79T:schwaemm128128v2
34.3034.3234.34T:isapa128av20
34.4934.6934.85T:isapa128v20
35.7336.0637.23romulusn
40.5340.5840.62T:giftcofb128v1
56.3956.3956.40T:tinyjambu128v2
57.4557.8457.89romulusm
66.4866.5166.53T:tinyjambu192v2
66.6166.7066.88T:isapk128av20
71.0471.0871.09T:tinyjambu256v2
88.7688.8689.99T:isapk128v20
115.58115.59115.60romulust
148.04148.17148.26T:elephant200v2
161.09162.55165.24T:isapxv20
375.22378.04378.37aes256gcmv1
6941.676942.466943.53T:elephant176v2
7827.307828.277829.21T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.72?0.79?0.92?T:aes128gcmv1
0.80?0.88?0.94?T:aes256gcmv1
6.046.056.07ascon128av12
8.858.888.91ascon80pqv12
9.099.109.10ascon128v12
11.4011.4311.46ascon128abi32v12
16.2516.2516.25ascon128bi32v12
16.4816.6616.74T:xoodyakround3
19.4719.5119.61T:schwaemm256128v2
24.0424.1024.13T:schwaemm256256v2
25.8425.8725.88T:schwaemm192192v2
27.3027.3227.45T:grain128aeadv2
27.7927.8327.86T:schwaemm128128v2
34.2934.3234.35T:isapa128av20
34.3434.8035.15T:isapa128v20
35.7336.1037.29romulusn
40.5140.5240.53T:giftcofb128v1
56.5156.5256.54T:tinyjambu128v2
57.6757.9657.97romulusm
66.1166.1366.16T:tinyjambu192v2
66.5766.6866.78T:isapk128av20
71.1471.1971.19T:tinyjambu256v2
88.8589.4890.06T:isapk128v20
115.56115.60115.61romulust
147.90148.02148.17T:elephant200v2
161.50163.11165.59T:isapxv20
374.77376.73383.04aes256gcmv1
6939.326941.606942.56T:elephant176v2
7828.477829.567829.93T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.79?0.83?0.91?T:aes128gcmv1
0.81?0.89?0.93?T:aes256gcmv1
6.046.056.08ascon128av12
8.928.928.92ascon80pqv12
9.009.099.13ascon128v12
11.4211.4511.46ascon128abi32v12
16.2516.2516.25ascon128bi32v12
16.5216.7316.78T:xoodyakround3
17.2717.4717.94T:isapa128v20
19.4719.4919.54T:schwaemm256128v2
22.9022.9122.92T:isapa128av20
24.0424.0924.13T:schwaemm256256v2
25.8525.8625.87T:schwaemm192192v2
27.3027.3227.47T:grain128aeadv2
27.8428.1828.20T:schwaemm128128v2
35.6735.9636.23romulusn
38.8638.8738.92romulust
40.5040.5140.56T:giftcofb128v1
44.3044.3744.47T:isapk128av20
55.1655.5756.30T:isapk128v20
56.5056.5256.53T:tinyjambu128v2
57.6657.9658.00romulusm
66.1066.1266.15T:tinyjambu192v2
71.1871.2471.24T:tinyjambu256v2
94.6695.1895.53T:isapxv20
147.95148.10148.19T:elephant200v2
364.36374.40377.32aes256gcmv1
6938.936941.196942.00T:elephant176v2
7827.697829.277829.95T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.60?0.63?0.69?T:aes128gcmv1
0.62?0.67?0.75?T:aes256gcmv1
6.266.296.30ascon128av12
8.898.908.94ascon80pqv12
8.988.999.01ascon128v12
11.1311.1712.10ascon128abi32v12
11.5611.7411.90T:xoodyakround3
16.4416.4616.49ascon128bi32v12
19.4119.4219.43T:schwaemm256128v2
23.9523.9924.02T:schwaemm256256v2
25.5825.7225.73T:schwaemm192192v2
26.1226.2526.28T:isapa128v20
27.1227.1827.21T:grain128aeadv2
27.7427.7527.78T:schwaemm128128v2
28.6528.6728.69T:isapa128av20
28.7428.9529.54romulusn
39.6139.8040.05romulusm
40.4840.5140.53T:giftcofb128v1
44.6544.7144.73T:tinyjambu128v2
51.7351.7451.81T:tinyjambu192v2
53.3353.3453.36T:tinyjambu256v2
55.6155.6755.71T:isapk128av20
71.0172.1072.63T:isapk128v20
77.2177.2377.24romulust
111.49111.58111.66T:elephant200v2
129.49130.17130.62T:isapxv20
371.41373.88375.13aes256gcmv1
5182.455184.075188.34T:elephant176v2
5868.435869.025869.41T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.59?0.62?0.68?T:aes128gcmv1
0.61?0.67?0.70?T:aes256gcmv1
5.975.996.00ascon128av12
8.888.888.88ascon80pqv12
8.929.009.00ascon128v12
11.2211.2311.25ascon128abi32v12
12.2912.3712.48T:xoodyakround3
16.2416.3516.35ascon128bi32v12
19.4519.4619.54T:schwaemm256128v2
23.8923.9824.03T:schwaemm256256v2
25.5925.6125.72T:schwaemm192192v2
26.0626.1326.26T:isapa128v20
27.2327.3427.44T:grain128aeadv2
27.7127.7827.79T:schwaemm128128v2
28.6528.7028.71T:isapa128av20
28.7428.8129.04romulusn
39.6839.8740.45romulusm
40.4840.5040.51T:giftcofb128v1
44.6744.7344.74T:tinyjambu128v2
51.4551.4751.49T:tinyjambu192v2
53.4153.4353.45T:tinyjambu256v2
55.5855.6655.81T:isapk128av20
70.9672.1772.62T:isapk128v20
77.2277.2477.25romulust
111.56111.65111.68T:elephant200v2
129.07129.69130.78T:isapxv20
372.88375.89376.22aes256gcmv1
5181.765183.885186.67T:elephant176v2
5868.845869.145870.03T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.600.630.64T:aes128gcmv1
0.630.670.70T:aes256gcmv1
5.985.996.00ascon128av12
8.888.888.88ascon80pqv12
8.938.959.01ascon128v12
11.2311.2511.26ascon128abi32v12
12.3112.3512.58T:xoodyakround3
16.2516.3516.36ascon128bi32v12
17.4517.5617.80T:isapa128v20
19.4319.4519.47T:schwaemm256128v2
22.9122.9822.99T:isapa128av20
23.9323.9824.01T:schwaemm256256v2
25.6125.7125.72T:schwaemm192192v2
27.1927.2427.34T:grain128aeadv2
27.7127.7627.78T:schwaemm128128v2
28.7228.9729.00romulusn
38.8538.8738.90romulust
39.7839.9039.92romulusm
40.4540.4840.52T:giftcofb128v1
44.4244.4844.93T:isapk128av20
44.7444.7444.75T:tinyjambu128v2
51.4251.4551.50T:tinyjambu192v2
53.4153.4253.45T:tinyjambu256v2
54.6855.2555.79T:isapk128v20
94.6495.0395.77T:isapxv20
111.59111.63111.66T:elephant200v2
368.49371.39373.73aes256gcmv1
5182.245183.955186.92T:elephant176v2
5868.575869.005869.79T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.39?0.44?0.51?T:aes128gcmv1
0.38?0.45?0.52?T:aes256gcmv1
5.996.006.01ascon128av12
8.048.128.29T:xoodyakround3
8.768.808.81ascon80pqv12
8.958.958.95ascon128v12
10.9110.9610.98ascon128abi32v12
16.4316.4416.44ascon128bi32v12
17.6017.6017.87T:isapa128v20
19.2719.3919.41T:schwaemm256128v2
21.8221.8421.86romulusn
21.8321.8521.87romulusm
23.0323.0523.06T:isapa128av20
23.7523.8323.93T:schwaemm256256v2
25.3225.3425.36T:schwaemm192192v2
26.8526.9227.00T:grain128aeadv2
27.6427.6827.71T:schwaemm128128v2
32.9332.9532.96T:tinyjambu128v2
35.6335.6335.65T:tinyjambu256v2
37.0037.0237.06T:tinyjambu192v2
38.8738.8738.88romulust
40.4340.4540.47T:giftcofb128v1
44.5344.6544.92T:isapk128av20
55.2555.2955.37T:isapk128v20
76.0776.1276.24T:elephant200v2
94.7195.2895.73T:isapxv20
366.59370.86376.50aes256gcmv1
3424.853426.033442.31T:elephant176v2
3909.723910.103924.09T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.36?0.41?0.45?T:aes128gcmv1
0.37?0.41?0.50?T:aes256gcmv1
5.915.925.93ascon128av12
7.928.098.33T:xoodyakround3
8.858.898.89ascon80pqv12
8.908.918.92ascon128v12
11.0011.0311.05ascon128abi32v12
16.2316.3616.46ascon128bi32v12
17.6017.6017.65T:isapa128v20
19.3919.4319.44T:schwaemm256128v2
21.8321.8421.85romulusn
21.8321.8521.87romulusm
22.9022.9823.08T:isapa128av20
23.8023.8823.94T:schwaemm256256v2
25.3125.3425.36T:schwaemm192192v2
27.2327.3027.40T:grain128aeadv2
27.6427.6827.74T:schwaemm128128v2
32.9432.9432.96T:tinyjambu128v2
35.6635.6835.69T:tinyjambu256v2
36.7536.8336.86T:tinyjambu192v2
38.8238.8538.88romulust
40.4340.4740.49T:giftcofb128v1
44.4944.5644.64T:isapk128av20
55.2155.2855.32T:isapk128v20
75.9276.0576.11T:elephant200v2
95.7196.1196.41T:isapxv20
366.03368.81370.85aes256gcmv1
3425.423426.163429.56T:elephant176v2
3909.073909.653910.23T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.39?0.41?0.48?T:aes256gcmv1
0.38?0.43?0.46?T:aes128gcmv1
5.905.915.91ascon128av12
7.958.178.24T:xoodyakround3
8.868.868.88ascon80pqv12
8.888.898.93ascon128v12
10.9811.0311.05ascon128abi32v12
16.2516.4416.45ascon128bi32v12
17.6017.6017.78T:isapa128v20
19.2319.2419.26T:schwaemm256128v2
21.8321.8421.85romulusn
21.8421.8521.86romulusm
22.9122.9723.06T:isapa128av20
23.7623.8623.90T:schwaemm256256v2
25.3225.3625.90T:schwaemm192192v2
26.8027.1627.19T:grain128aeadv2
27.6627.6927.71T:schwaemm128128v2
32.9632.9733.01T:tinyjambu128v2
35.6535.6535.71T:tinyjambu256v2
36.7936.8336.84T:tinyjambu192v2
38.8338.8738.92romulust
40.3840.4340.46T:giftcofb128v1
44.5444.6144.73T:isapk128av20
55.2155.2555.28T:isapk128v20
75.5975.9276.12T:elephant200v2
94.2895.2996.29T:isapxv20
365.68370.82374.88aes256gcmv1
3425.473425.873429.61T:elephant176v2
3909.503909.853923.99T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.911.931.97T:aes128gcmv1
1.951.972.03T:aes256gcmv1
6.456.456.46ascon128av12
9.069.079.10ascon80pqv12
9.149.149.16ascon128v12
11.7311.8111.96T:xoodyakround3
11.4912.3612.40ascon128abi32v12
17.1117.1117.13ascon128bi32v12
19.9319.9419.98T:schwaemm256128v2
24.6024.6424.65T:schwaemm256256v2
26.2826.2826.29T:schwaemm192192v2
27.4727.5027.53T:grain128aeadv2
28.1428.1728.20T:schwaemm128128v2
29.0329.2129.76romulusn
30.9231.1031.11T:isapa128av20
38.3838.3938.47T:isapa128v20
39.9240.0140.47romulusm
40.8840.8940.91T:giftcofb128v1
45.0945.1045.12T:tinyjambu128v2
52.1452.1452.20T:tinyjambu192v2
53.7653.7753.82T:tinyjambu256v2
62.6562.6863.02T:isapk128av20
78.4078.4178.42romulust
113.90113.97114.04T:elephant200v2
125.44125.50125.93T:isapk128v20
209.26209.64209.88T:isapxv20
375.36381.14381.91aes256gcmv1
5221.415222.325223.93T:elephant176v2
5934.595934.975935.21T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.881.901.91T:aes128gcmv1
1.911.951.97T:aes256gcmv1
6.156.156.16ascon128av12
9.059.059.06ascon80pqv12
9.099.119.14ascon128v12
11.5511.5511.56ascon128abi32v12
12.3412.4412.56T:xoodyakround3
16.5816.6816.68ascon128bi32v12
20.0120.0620.17T:schwaemm256128v2
24.5724.6224.67T:schwaemm256256v2
26.3226.3226.35T:schwaemm192192v2
27.6027.6827.77T:grain128aeadv2
28.1628.2028.34T:schwaemm128128v2
29.0529.2229.77romulusn
31.0831.1131.12T:isapa128av20
38.2638.3338.33T:isapa128v20
40.1140.1840.23romulusm
40.8740.8840.90T:giftcofb128v1
45.1145.1145.11T:tinyjambu128v2
51.8851.9051.92T:tinyjambu192v2
53.8653.8653.88T:tinyjambu256v2
62.6862.7362.95T:isapk128av20
78.4078.4178.41romulust
113.92114.05114.07T:elephant200v2
125.42125.44125.96T:isapk128v20
209.20209.93210.47T:isapxv20
374.67377.69377.93aes256gcmv1
5221.855222.305225.14T:elephant176v2
5935.145935.735953.42T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.861.881.91T:aes128gcmv1
1.901.931.95T:aes256gcmv1
6.156.156.16ascon128av12
9.059.059.05ascon80pqv12
9.109.159.15ascon128v12
11.5411.5511.56ascon128abi32v12
12.4312.4912.60T:xoodyakround3
16.5916.6816.68ascon128bi32v12
20.0020.0120.01T:schwaemm256128v2
23.7323.7523.86T:isapa128v20
24.3324.3524.36T:isapa128av20
24.5924.6224.65T:schwaemm256256v2
26.1826.1926.32T:schwaemm192192v2
27.5827.6527.76T:grain128aeadv2
28.1828.3628.54T:schwaemm128128v2
29.0629.2229.77romulusn
39.9939.9940.00romulust
40.0540.2240.72romulusm
40.8440.8440.88T:giftcofb128v1
45.1145.1145.12T:tinyjambu128v2
48.4848.4948.83T:isapk128av20
51.8751.9051.93T:tinyjambu192v2
53.8553.8653.89T:tinyjambu256v2
82.5682.7383.04T:isapk128v20
113.95113.98114.04T:elephant200v2
135.92136.21136.46T:isapxv20
371.66372.32373.97aes256gcmv1
5221.565222.125223.37T:elephant176v2
5934.945935.235935.67T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
9.9710.1610.25ascon128av12
12.3912.6812.95ascon80pqv12
12.3712.7113.05ascon128v12
17.7617.9118.53T:xoodyakround3
18.4618.7719.09ascon128abi32v12
31.4831.7032.35ascon128bi32v12
31.5631.9732.69T:aes128gcmv1
32.5532.6332.71T:schwaemm256128v2
32.3232.9533.84T:aes256gcmv1
35.2035.3435.96romulusn
35.2835.3835.44T:grain128aeadv2
36.7036.8237.46T:schwaemm128128v2
39.1539.2739.42T:schwaemm256256v2
42.7342.7643.07T:schwaemm192192v2
46.1646.4646.73romulusm
49.3349.4349.71T:giftcofb128v1
53.2753.3353.62T:tinyjambu128v2
61.4261.5261.85T:tinyjambu192v2
63.1163.1963.44T:tinyjambu256v2
86.5986.8387.07T:isapa128av20
105.27105.39106.00romulust
162.92163.27163.81T:elephant200v2
211.80212.19212.86T:isapk128av20
318.29318.86321.68T:isapa128v20
421.83424.62429.70aes256gcmv1
1336.641337.431369.84T:isapk128v20
2001.562022.912028.88T:isapxv20
6503.056504.516525.44T:elephant176v2
7948.387951.807970.74T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
9.8010.1210.51ascon128av12
12.3812.4513.16ascon128v12
12.4012.6112.93ascon80pqv12
17.7917.9118.22T:xoodyakround3
18.6018.8819.30ascon128abi32v12
24.0824.3424.70ascon128bi32v12
31.6432.0232.22T:aes128gcmv1
32.0032.4133.23T:aes256gcmv1
32.5832.6932.89T:schwaemm256128v2
34.8835.2035.70romulusn
35.2035.6135.76T:grain128aeadv2
37.4237.4337.62T:schwaemm128128v2
39.1139.2439.29T:schwaemm256256v2
42.7842.8243.19T:schwaemm192192v2
47.4647.5947.91romulusm
49.5749.7249.84T:giftcofb128v1
53.5353.5353.66T:tinyjambu128v2
61.5661.7661.89T:tinyjambu192v2
63.6863.7363.98T:tinyjambu256v2
86.5686.7386.97T:isapa128av20
105.23105.27105.70romulust
162.92163.18163.41T:elephant200v2
211.46211.95213.23T:isapk128av20
319.10319.16321.48T:isapa128v20
422.61424.53426.80aes256gcmv1
1337.431340.911370.11T:isapk128v20
2014.622016.902018.12T:isapxv20
6502.076504.426523.27T:elephant176v2
7947.767948.227951.08T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
9.649.7910.03ascon128av12
12.4012.4012.86ascon80pqv12
12.4212.5412.80ascon128v12
17.9117.9818.38T:xoodyakround3
18.3818.6818.77ascon128abi32v12
23.8423.8623.94ascon128bi32v12
31.3331.5832.00T:aes128gcmv1
31.8031.9532.31T:aes256gcmv1
32.4832.4832.64T:schwaemm256128v2
34.8835.3835.59romulusn
35.3035.7035.74T:grain128aeadv2
37.2037.3837.84T:schwaemm128128v2
39.0639.1739.23T:schwaemm256256v2
42.6942.7443.02T:schwaemm192192v2
47.3447.5548.05romulusm
49.5349.5949.59T:giftcofb128v1
53.4553.4553.45T:tinyjambu128v2
55.6455.8055.92T:isapa128av20
61.3461.5761.91T:tinyjambu192v2
63.8263.8263.96T:tinyjambu256v2
65.6565.7665.89romulust
130.86131.22132.02T:isapk128av20
162.82163.05163.27T:elephant200v2
161.23165.80165.80T:isapa128v20
417.60419.87420.34aes256gcmv1
698.22698.55715.49T:isapk128v20
1049.311049.441068.99T:isapxv20
6501.736506.306509.15T:elephant176v2
7948.677950.297951.04T:elephant160v2