VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Bulldozer (600f20); 2012 AMD FX-8350; 4 x 4000MHz; saber214, supercop-20241022

[Page version: 20241120 00:41:35]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
2.162.242.35T:aes128gcmv1
2.30?2.53?2.76?T:aes256gcmv1
9.449.469.46ascon128av12
14.1214.1214.14ascon80pqv12
14.1314.1314.13ascon128v12
20.7620.7720.78ascon128abi32v12
22.0522.1422.39T:xoodyakround3
28.3628.3628.39ascon128bi32v12
29.1429.1629.16T:schwaemm256128v2
32.2932.3832.41T:schwaemm256256v2
38.6138.6338.65T:schwaemm192192v2
43.5843.5843.59T:grain128aeadv2
47.8347.9147.92T:giftcofb128v1
48.2548.2848.47T:schwaemm128128v2
56.3256.3456.47T:isapa128v20
56.4656.5056.53T:isapa128av20
74.3874.3974.40romulusn
79.5279.5279.55T:tinyjambu128v2
102.91103.01103.03T:tinyjambu192v2
105.95106.00106.18T:isapk128av20
113.51113.93113.98T:tinyjambu256v2
116.31116.34116.41romulusm
140.17140.49140.70T:isapk128v20
233.30233.35233.36romulust
254.94255.52255.68T:elephant200v2
282.52283.90284.65T:isapxv20
406.70?418.80?563.79?aes256gcmv1
14477.7914483.5414485.99T:elephant160v2
14734.1014740.5114744.32T:elephant176v2
Cycles/byte for long+0 decrypt
25%50%75%aead
2.05?2.20?2.39?T:aes128gcmv1
2.392.532.63T:aes256gcmv1
9.419.429.42ascon128av12
14.0914.0914.09ascon128v12
14.1114.1214.20ascon80pqv12
20.7320.7320.74ascon128abi32v12
21.5621.7122.01T:xoodyakround3
28.5928.6028.61ascon128bi32v12
29.4529.4629.48T:schwaemm256128v2
32.5332.5332.58T:schwaemm256256v2
38.6238.6338.64T:schwaemm192192v2
45.1545.2245.23T:grain128aeadv2
48.1148.1348.16T:schwaemm128128v2
48.1948.2148.23T:giftcofb128v1
56.3556.3656.37T:isapa128v20
56.4756.5456.59T:isapa128av20
74.5774.5774.58romulusn
80.1080.1880.66T:tinyjambu128v2
102.79102.86102.88T:tinyjambu192v2
106.09106.18106.47T:isapk128av20
114.19114.52114.65T:tinyjambu256v2
116.44116.49116.56romulusm
140.27140.50140.64T:isapk128v20
233.31233.34233.36romulust
255.07255.65255.77T:elephant200v2
282.90283.83283.98T:isapxv20
417.89422.52424.59aes256gcmv1
14477.0514479.6314485.99T:elephant160v2
14734.5414737.0414742.15T:elephant176v2
Cycles/byte for long+0 forgery
25%50%75%aead
2.02?2.21?2.37?T:aes128gcmv1
2.392.512.61T:aes256gcmv1
9.429.429.42ascon128av12
14.0914.0914.09ascon128v12
14.1314.1314.16ascon80pqv12
20.7320.7520.75ascon128abi32v12
21.6121.7522.11T:xoodyakround3
28.1428.1728.18T:isapa128v20
28.5828.6028.60ascon128bi32v12
29.4529.4729.48T:schwaemm256128v2
32.5332.5332.58T:schwaemm256256v2
37.2437.2737.27T:isapa128av20
38.6238.8438.94T:schwaemm192192v2
45.2245.2345.24T:grain128aeadv2
48.1048.1248.14T:schwaemm128128v2
48.1748.2148.24T:giftcofb128v1
69.9770.2070.25T:isapk128av20
74.5674.5874.59romulusn
78.0778.1678.22romulust
80.0280.0680.66T:tinyjambu128v2
86.8786.9687.05T:isapk128v20
102.81102.84102.87T:tinyjambu192v2
114.22114.50114.69T:tinyjambu256v2
116.47116.48116.53romulusm
167.76167.79167.81T:isapxv20
255.26255.72261.34T:elephant200v2
406.68412.21412.49aes256gcmv1
14481.4514494.0014502.23T:elephant160v2
14734.0014739.5214747.98T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
1.781.871.93T:aes128gcmv1
1.881.962.08T:aes256gcmv1
9.359.359.37ascon128av12
14.0014.0114.03ascon128v12
14.0014.0214.03ascon80pqv12
16.5916.7316.75T:xoodyakround3
19.8119.8219.83ascon128abi32v12
28.2228.2528.25ascon128bi32v12
29.1129.1229.12T:schwaemm256128v2
32.1032.1232.14T:schwaemm256256v2
38.6038.6738.82T:schwaemm192192v2
42.2342.2642.28T:isapa128v20
43.4243.4443.47T:grain128aeadv2
46.8246.9046.92T:isapa128av20
47.6147.9548.04T:giftcofb128v1
48.0848.1748.22T:schwaemm128128v2
58.0358.0558.18romulusn
64.0464.0564.07T:tinyjambu128v2
78.9979.0279.10romulusm
80.2580.2780.31T:tinyjambu192v2
85.4185.4585.50T:tinyjambu256v2
87.9488.0388.05T:isapk128av20
113.76113.87114.05T:isapk128v20
155.69155.71155.85romulust
192.74193.11197.00T:elephant200v2
225.10225.24225.52T:isapxv20
408.16?416.81?545.01?aes256gcmv1
10856.2110861.9810866.06T:elephant160v2
11005.3111007.2911009.58T:elephant176v2
Cycles/byte for long+long decrypt
25%50%75%aead
1.78?1.90?1.98?T:aes128gcmv1
1.891.942.09T:aes256gcmv1
9.349.359.35ascon128av12
14.0014.0014.00ascon128v12
14.0114.0114.04ascon80pqv12
16.2616.3216.61T:xoodyakround3
19.8119.8119.81ascon128abi32v12
28.2528.2628.26ascon128bi32v12
29.2629.2729.27T:schwaemm256128v2
32.1932.2032.24T:schwaemm256256v2
38.6138.6638.68T:schwaemm192192v2
42.2742.2842.33T:isapa128v20
44.1544.1944.21T:grain128aeadv2
46.9046.9446.96T:isapa128av20
47.4047.4248.13T:giftcofb128v1
47.9748.0648.10T:schwaemm128128v2
58.1458.1558.26romulusn
64.2964.3364.67T:tinyjambu128v2
79.0779.1279.23romulusm
79.9880.0080.04T:tinyjambu192v2
85.6085.7485.82T:tinyjambu256v2
88.0588.0988.89T:isapk128av20
113.71113.93114.10T:isapk128v20
155.68155.71155.72romulust
192.68193.28197.16T:elephant200v2
225.06225.28225.62T:isapxv20
416.09419.02419.95aes256gcmv1
10851.4410861.8110866.44T:elephant160v2
11004.0811008.4811010.65T:elephant176v2
Cycles/byte for long+long forgery
25%50%75%aead
1.781.911.97T:aes128gcmv1
1.931.972.07T:aes256gcmv1
9.349.359.35ascon128av12
14.0014.0014.01ascon128v12
14.0114.0214.03ascon80pqv12
16.3916.6616.69T:xoodyakround3
19.8219.8219.82ascon128abi32v12
28.1628.1828.18T:isapa128v20
28.2528.2628.26ascon128bi32v12
29.2629.2729.27T:schwaemm256128v2
32.1732.2032.24T:schwaemm256256v2
37.2837.2937.31T:isapa128av20
38.6538.6738.83T:schwaemm192192v2
44.1844.1944.20T:grain128aeadv2
47.9447.9948.10T:schwaemm128128v2
47.5648.1548.17T:giftcofb128v1
58.1458.1458.26romulusn
64.2464.2664.33T:tinyjambu128v2
70.0070.0370.16T:isapk128av20
78.0878.1178.15romulust
79.0979.1379.20romulusm
79.9980.0180.04T:tinyjambu192v2
85.6385.7585.82T:tinyjambu256v2
87.0787.1387.27T:isapk128v20
167.62167.65167.89T:isapxv20
192.76193.18197.20T:elephant200v2
406.90410.81420.91aes256gcmv1
10856.7210859.4510862.82T:elephant160v2
11003.1411006.4711009.25T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
1.37?1.45?1.58?T:aes128gcmv1
1.32?1.47?1.71?T:aes256gcmv1
9.259.269.29ascon128av12
11.1411.1611.27T:xoodyakround3
13.8913.9013.90ascon80pqv12
13.9013.9013.90ascon128v12
18.8718.8718.87ascon128abi32v12
28.1228.1228.18ascon128bi32v12
28.1728.1728.19T:isapa128v20
29.0629.0729.08T:schwaemm256128v2
31.8231.8831.93T:schwaemm256256v2
37.3637.3837.41T:isapa128av20
38.6138.6938.94T:schwaemm192192v2
41.6441.7141.96romulusn
41.6541.7641.79romulusm
43.2843.3043.30T:grain128aeadv2
48.0048.0548.17T:schwaemm128128v2
47.9148.0648.13T:giftcofb128v1
48.4448.5748.57T:tinyjambu128v2
56.9256.9756.99T:tinyjambu256v2
57.6057.7757.79T:tinyjambu192v2
69.8870.1070.20T:isapk128av20
78.0278.0678.06romulust
87.2287.4787.66T:isapk128v20
129.79130.16133.31T:elephant200v2
167.56167.58167.63T:isapxv20
400.12?411.50?554.09?aes256gcmv1
7233.167237.077238.53T:elephant160v2
7277.277280.197282.56T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
1.28?1.40?1.60?T:aes128gcmv1
1.41?1.47?1.57?T:aes256gcmv1
9.269.279.27ascon128av12
11.0611.1011.23T:xoodyakround3
13.9013.9013.90ascon128v12
13.9013.9013.90ascon80pqv12
18.8618.8918.89ascon128abi32v12
28.0328.0528.06ascon128bi32v12
28.1628.1728.18T:isapa128v20
29.0729.0829.08T:schwaemm256128v2
31.8631.9332.01T:schwaemm256256v2
37.2537.2637.29T:isapa128av20
38.5938.6138.69T:schwaemm192192v2
41.6541.6941.87romulusm
41.6241.7041.95romulusn
43.1343.1543.17T:grain128aeadv2
47.9248.0048.00T:schwaemm128128v2
47.6348.0248.07T:giftcofb128v1
48.4648.4848.55T:tinyjambu128v2
56.9756.9756.98T:tinyjambu256v2
57.1357.1557.16T:tinyjambu192v2
69.8070.0570.14T:isapk128av20
78.0178.0578.05romulust
87.0787.2587.42T:isapk128v20
129.85130.19133.26T:elephant200v2
167.52167.57167.65T:isapxv20
409.67410.06415.82aes256gcmv1
7233.457236.407238.02T:elephant160v2
7279.217282.697291.47T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
1.28?1.50?1.62?T:aes128gcmv1
1.44?1.51?1.60?T:aes256gcmv1
9.269.269.27ascon128av12
11.0611.1011.20T:xoodyakround3
13.9013.9013.90ascon128v12
13.9013.9013.91ascon80pqv12
18.8818.8818.88ascon128abi32v12
28.0428.0528.08ascon128bi32v12
28.1428.1428.20T:isapa128v20
29.0629.0829.08T:schwaemm256128v2
31.8331.9232.01T:schwaemm256256v2
37.2437.2437.30T:isapa128av20
38.5838.6138.69T:schwaemm192192v2
41.7041.7141.89romulusm
41.6641.7241.95romulusn
43.1443.1643.17T:grain128aeadv2
47.8647.9948.12T:schwaemm128128v2
48.0248.0548.05T:giftcofb128v1
48.4848.4848.48T:tinyjambu128v2
56.9656.9856.98T:tinyjambu256v2
57.1457.1557.16T:tinyjambu192v2
69.6869.7969.95T:isapk128av20
78.0178.0578.07romulust
87.2987.3587.45T:isapk128v20
129.76130.11133.44T:elephant200v2
167.54167.57167.61T:isapxv20
404.99405.89414.91aes256gcmv1
7236.107237.077242.16T:elephant160v2
7277.427279.637283.35T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
4.134.154.19T:aes128gcmv1
4.314.434.47T:aes256gcmv1
9.619.619.62ascon128av12
14.2414.2414.25ascon128v12
14.2414.2414.24ascon80pqv12
16.8316.9517.01T:xoodyakround3
20.2920.2920.29ascon128abi32v12
28.7428.7628.77ascon128bi32v12
29.9729.9729.98T:schwaemm256128v2
32.9933.0233.04T:schwaemm256256v2
39.5239.5439.67T:schwaemm192192v2
44.0244.0844.12T:grain128aeadv2
47.8648.5048.55T:giftcofb128v1
48.7348.7848.88T:schwaemm128128v2
52.4852.5152.52T:isapa128av20
58.5958.5958.70romulusn
61.7361.7461.74T:isapa128v20
64.6064.6164.64T:tinyjambu128v2
79.6179.6479.71romulusm
80.9380.9580.96T:tinyjambu192v2
85.9386.0986.13T:tinyjambu256v2
101.17101.34101.39T:isapk128av20
158.09158.11158.13romulust
196.79196.84200.95T:elephant200v2
200.97201.22201.26T:isapk128v20
367.51367.90368.02T:isapxv20
414.75?417.03?537.54?aes256gcmv1
10978.4610982.6610988.99T:elephant160v2
11087.1011088.7811095.10T:elephant176v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
4.204.224.34T:aes128gcmv1
4.334.414.52T:aes256gcmv1
9.609.609.60ascon128av12
14.2314.2314.23ascon128v12
14.2414.2414.24ascon80pqv12
16.5416.5616.63T:xoodyakround3
20.2920.2920.29ascon128abi32v12
28.7728.7728.78ascon128bi32v12
30.1130.1130.12T:schwaemm256128v2
33.0733.0833.11T:schwaemm256256v2
39.4739.5239.65T:schwaemm192192v2
44.8344.8544.87T:grain128aeadv2
48.6448.6948.81T:schwaemm128128v2
48.6848.6948.72T:giftcofb128v1
52.5252.5352.79T:isapa128av20
58.6858.6958.79romulusn
61.7361.7361.74T:isapa128v20
64.8664.9365.19T:tinyjambu128v2
79.7779.7879.91romulusm
80.6480.6480.67T:tinyjambu192v2
86.2886.3286.40T:tinyjambu256v2
101.21101.22101.36T:isapk128av20
158.07158.10158.13romulust
196.79196.89197.94T:elephant200v2
200.98201.06201.17T:isapk128v20
367.42367.76368.60T:isapxv20
414.92415.61419.84aes256gcmv1
10979.1110982.7710987.26T:elephant160v2
11086.9911088.4911093.44T:elephant176v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
4.124.164.20T:aes128gcmv1
4.344.374.44T:aes256gcmv1
9.609.609.60ascon128av12
14.2314.2314.23ascon128v12
14.2414.2414.28ascon80pqv12
16.5616.5916.67T:xoodyakround3
20.2920.2920.29ascon128abi32v12
28.7728.7728.79ascon128bi32v12
30.1130.1230.14T:schwaemm256128v2
33.0633.0833.11T:schwaemm256256v2
38.0638.0738.08T:isapa128v20
39.4739.5139.52T:schwaemm192192v2
40.2640.2740.29T:isapa128av20
44.8344.8444.86T:grain128aeadv2
48.6248.6948.80T:schwaemm128128v2
48.6748.6948.69T:giftcofb128v1
58.6658.6958.78romulusn
64.8464.8465.14T:tinyjambu128v2
78.1278.2578.28T:isapk128av20
79.7779.8179.92romulusm
80.3880.3980.40romulust
80.6480.6480.65T:tinyjambu192v2
86.2886.3186.44T:tinyjambu256v2
133.24133.29133.35T:isapk128v20
196.62196.80197.60T:elephant200v2
240.44240.45240.50T:isapxv20
409.66412.01412.25aes256gcmv1
10976.3810979.9310984.94T:elephant160v2
11087.1811089.7411094.36T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
15.3815.6215.88ascon128av12
19.3019.3219.59ascon80pqv12
19.2419.3919.52ascon128v12
26.6526.7727.35T:xoodyakround3
30.7731.2331.43ascon128abi32v12
40.4040.4841.36ascon128bi32v12
49.3349.3649.65T:schwaemm256128v2
52.6652.9153.05T:schwaemm256256v2
55.2856.1257.98T:aes128gcmv1
58.4458.5958.81T:grain128aeadv2
60.7761.3161.91T:giftcofb128v1
59.9161.3562.36T:aes256gcmv1
62.4862.8762.88T:schwaemm128128v2
64.2564.4964.59T:schwaemm192192v2
70.6070.9671.37romulusn
77.3577.3777.45T:tinyjambu128v2
92.5092.6093.34romulusm
95.7395.9896.41T:tinyjambu192v2
101.29101.52101.80T:tinyjambu256v2
180.69180.87181.27T:isapa128av20
213.05213.39213.62romulust
280.44281.78286.09T:elephant200v2
384.92385.23385.84T:isapk128av20
468.27?476.23?622.49?aes256gcmv1
509.14509.53509.95T:isapa128v20
2178.602179.972183.24T:isapk128v20
3598.213598.323598.99T:isapxv20
13786.7013787.5213795.68T:elephant176v2
14677.0514682.5214738.77T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
15.1015.3015.73ascon128av12
19.3019.3119.59ascon128v12
19.3719.5519.71ascon80pqv12
25.8726.0226.23T:xoodyakround3
31.1731.4731.84ascon128abi32v12
40.4940.6040.88ascon128bi32v12
49.1749.2549.36T:schwaemm256128v2
52.4752.5252.99T:schwaemm256256v2
55.6957.1659.25T:aes128gcmv1
59.1459.2459.40T:grain128aeadv2
59.1659.5561.91T:aes256gcmv1
61.1161.3261.48T:giftcofb128v1
62.5962.7863.09T:schwaemm128128v2
64.0864.1364.28T:schwaemm192192v2
70.7070.7970.84romulusn
77.4277.5978.12T:tinyjambu128v2
94.7395.0895.17romulusm
95.1595.2595.70T:tinyjambu192v2
101.88102.05102.31T:tinyjambu256v2
181.09181.18181.54T:isapa128av20
212.92213.10213.67romulust
280.40280.95285.39T:elephant200v2
384.87385.29386.04T:isapk128av20
467.80469.97470.38aes256gcmv1
509.30509.31509.73T:isapa128v20
2178.932179.832181.47T:isapk128v20
3598.513598.723599.23T:isapxv20
13785.9513790.2313798.40T:elephant176v2
14676.5514680.4714683.30T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
15.1015.1015.27ascon128av12
19.1219.1219.14ascon128v12
19.1919.1919.38ascon80pqv12
25.6125.7725.99T:xoodyakround3
31.0631.0731.17ascon128abi32v12
40.2140.4140.42ascon128bi32v12
49.1749.1749.26T:schwaemm256128v2
52.4652.5253.41T:schwaemm256256v2
53.9456.2057.26T:aes128gcmv1
59.0059.0159.12T:grain128aeadv2
58.8059.5560.27T:aes256gcmv1
61.1261.1961.34T:giftcofb128v1
62.2462.7063.20T:schwaemm128128v2
64.0864.1264.30T:schwaemm192192v2
70.6770.7370.80romulusn
77.1577.2077.29T:tinyjambu128v2
94.5294.5694.66romulusm
95.1695.2395.35T:tinyjambu192v2
101.81101.95101.95T:tinyjambu256v2
109.40109.55109.91T:isapa128av20
132.45133.11133.45romulust
250.76251.29252.09T:isapk128av20
265.27265.46266.07T:isapa128v20
280.08280.42286.13T:elephant200v2
461.75462.69465.67aes256gcmv1
1174.181174.801175.41T:isapk128v20
1883.121883.211883.34T:isapxv20
13787.2413790.1213798.48T:elephant176v2
14677.8014680.5114683.95T:elephant160v2