VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Bulldozer (600f20); 2012 AMD FX-8350; 4 x 4000MHz; saber214, supercop-20240625

[Page version: 20240726 23:46:23]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Implementation notes

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
2.03?2.33?2.52?T:aes128gcmv1
2.412.512.59T:aes256gcmv1
9.459.469.47ascon128av12
14.1114.1214.13ascon80pqv12
14.1314.1314.13ascon128v12
20.7620.7720.79ascon128abi32v12
22.0222.1722.51T:xoodyakround3
28.3528.3628.36ascon128bi32v12
29.1429.2029.23T:schwaemm256128v2
32.4032.4532.94T:schwaemm256256v2
39.0939.1039.14T:schwaemm192192v2
43.5743.5943.60T:grain128aeadv2
47.8147.9447.94T:giftcofb128v1
48.2848.3848.55T:schwaemm128128v2
56.3256.3456.37T:isapa128v20
57.1857.2357.33T:isapa128av20
74.3974.4074.42romulusn
79.5379.5580.04T:tinyjambu128v2
102.88102.92102.93T:tinyjambu192v2
105.98106.16106.36T:isapk128av20
113.52113.87113.89T:tinyjambu256v2
116.24116.31116.43romulusm
140.37140.60141.01T:isapk128v20
233.25233.29233.30romulust
255.40255.77256.03T:elephant200v2
282.73283.14284.79T:isapxv20
404.82409.72410.38aes256gcmv1
14476.9314481.6514487.97T:elephant160v2
14732.1814738.3914747.53T:elephant176v2
Cycles/byte for long+0 decrypt
25%50%75%aead
2.00?2.30?2.47?T:aes128gcmv1
2.472.522.61T:aes256gcmv1
9.459.459.45ascon128av12
14.0914.1014.10ascon128v12
14.1114.1214.12ascon80pqv12
20.7320.7520.76ascon128abi32v12
21.6421.7522.00T:xoodyakround3
28.5828.6028.63ascon128bi32v12
29.4229.4529.46T:schwaemm256128v2
32.2832.3532.41T:schwaemm256256v2
38.9639.0739.07T:schwaemm192192v2
45.2245.2345.24T:grain128aeadv2
48.1348.1948.24T:schwaemm128128v2
48.1748.2448.26T:giftcofb128v1
56.3356.3556.37T:isapa128v20
57.3557.4257.49T:isapa128av20
74.5774.5874.60romulusn
80.0280.0880.75T:tinyjambu128v2
102.83102.87102.89T:tinyjambu192v2
106.06106.16106.39T:isapk128av20
114.11114.21114.53T:tinyjambu256v2
116.44116.48116.55romulusm
140.36140.53141.88T:isapk128v20
233.30233.32233.32romulust
255.26255.62255.88T:elephant200v2
279.38?283.96?322.78?T:isapxv20
407.29410.20412.95aes256gcmv1
14477.8214485.0014488.97T:elephant160v2
14730.9014737.7014741.15T:elephant176v2
Cycles/byte for long+0 forgery
25%50%75%aead
1.93?2.22?2.46?T:aes128gcmv1
2.462.572.66T:aes256gcmv1
9.459.469.47ascon128av12
14.1014.1014.11ascon128v12
14.1214.1214.15ascon80pqv12
20.7320.7420.78ascon128abi32v12
21.7221.7721.84T:xoodyakround3
28.1528.1928.21T:isapa128v20
28.5828.6028.62ascon128bi32v12
29.4229.4529.48T:schwaemm256128v2
32.2832.3732.40T:schwaemm256256v2
37.9238.0638.12T:isapa128av20
39.0339.0739.09T:schwaemm192192v2
45.2245.2345.24T:grain128aeadv2
48.1248.1948.25T:schwaemm128128v2
48.2048.2248.24T:giftcofb128v1
70.0670.1670.23T:isapk128av20
74.5774.5974.60romulusn
78.1078.1678.39romulust
80.0180.0380.75T:tinyjambu128v2
86.9487.1787.55T:isapk128v20
102.83102.86102.92T:tinyjambu192v2
114.11114.50114.52T:tinyjambu256v2
116.49116.50116.53romulusm
167.74167.78167.81T:isapxv20
255.42255.77255.79T:elephant200v2
395.38397.83398.68aes256gcmv1
14475.6314478.4114488.27T:elephant160v2
14731.4314736.9414742.05T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
1.73?1.85?2.01?T:aes128gcmv1
1.982.032.07T:aes256gcmv1
9.359.369.38ascon128av12
14.0114.0114.02ascon128v12
14.0014.0114.02ascon80pqv12
16.5216.6316.76T:xoodyakround3
19.8119.8219.84ascon128abi32v12
28.2228.2328.25ascon128bi32v12
29.1129.1529.16T:schwaemm256128v2
32.0932.1032.48T:schwaemm256256v2
39.1139.1339.13T:schwaemm192192v2
42.2642.2742.28T:isapa128v20
43.4343.4443.48T:grain128aeadv2
47.3747.4047.43T:isapa128av20
47.2848.0148.05T:giftcofb128v1
48.1048.2148.33T:schwaemm128128v2
58.0358.0558.08romulusn
64.0564.0564.06T:tinyjambu128v2
78.9879.0279.07romulusm
80.2580.2680.30T:tinyjambu192v2
85.3985.4285.45T:tinyjambu256v2
87.9888.1088.15T:isapk128av20
113.75113.94114.34T:isapk128v20
155.68155.69155.72romulust
192.50192.60193.09T:elephant200v2
225.11225.70225.76T:isapxv20
404.08404.37405.33aes256gcmv1
10854.7710858.2710864.90T:elephant160v2
11004.7011009.1711012.66T:elephant176v2
Cycles/byte for long+long decrypt
25%50%75%aead
1.76?1.92?2.00?T:aes128gcmv1
1.931.982.05T:aes256gcmv1
9.379.379.38ascon128av12
14.0014.0014.00ascon128v12
14.0314.0314.04ascon80pqv12
16.2616.3416.49T:xoodyakround3
19.8119.8119.81ascon128abi32v12
28.2728.2728.27ascon128bi32v12
29.2729.2729.27T:schwaemm256128v2
32.0332.0932.18T:schwaemm256256v2
39.0439.1039.12T:schwaemm192192v2
42.2742.2742.28T:isapa128v20
44.1644.1944.22T:grain128aeadv2
47.5147.6047.65T:isapa128av20
48.0548.0948.14T:schwaemm128128v2
47.7548.1048.13T:giftcofb128v1
58.1458.1658.16romulusn
64.3864.6164.69T:tinyjambu128v2
79.0779.1079.12romulusm
80.0080.0380.22T:tinyjambu192v2
85.7285.7585.77T:tinyjambu256v2
87.9288.0388.16T:isapk128av20
113.85114.22114.81T:isapk128v20
155.67155.71155.77romulust
192.44192.51193.12T:elephant200v2
223.19225.21246.23T:isapxv20
400.77403.58405.96aes256gcmv1
10856.3710860.7410864.35T:elephant160v2
11003.2211006.5611010.19T:elephant176v2
Cycles/byte for long+long forgery
25%50%75%aead
1.78?1.93?1.99?T:aes128gcmv1
1.941.992.06T:aes256gcmv1
9.379.389.39ascon128av12
14.0014.0014.00ascon128v12
14.0214.0214.03ascon80pqv12
16.3116.3716.57T:xoodyakround3
19.8219.8219.82ascon128abi32v12
28.1628.1828.19T:isapa128v20
28.2728.2728.27ascon128bi32v12
29.2729.2729.27T:schwaemm256128v2
32.0632.0732.17T:schwaemm256256v2
37.9137.9438.01T:isapa128av20
39.0439.1039.14T:schwaemm192192v2
44.1944.2044.22T:grain128aeadv2
47.4148.1248.13T:giftcofb128v1
48.0948.1348.19T:schwaemm128128v2
58.1458.1558.17romulusn
64.4964.6264.64T:tinyjambu128v2
69.9870.0870.18T:isapk128av20
78.1078.1278.17romulust
79.1079.1179.12romulusm
79.9880.0080.03T:tinyjambu192v2
85.7785.7785.86T:tinyjambu256v2
87.1887.2187.36T:isapk128v20
167.61167.67167.74T:isapxv20
192.32192.73193.10T:elephant200v2
397.01397.06398.53aes256gcmv1
10852.8710862.1010877.02T:elephant160v2
11003.8211006.3111012.09T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
1.24?1.35?1.64?T:aes128gcmv1
1.38?1.50?1.67?T:aes256gcmv1
9.279.279.27ascon128av12
11.1311.1611.32T:xoodyakround3
13.8913.9013.91ascon80pqv12
13.9013.9013.90ascon128v12
18.8618.8718.89ascon128abi32v12
28.1228.1228.13ascon128bi32v12
28.1628.1728.19T:isapa128v20
29.0629.1029.11T:schwaemm256128v2
31.7631.7732.04T:schwaemm256256v2
37.6237.7737.86T:isapa128av20
39.1139.1339.13T:schwaemm192192v2
41.6341.6741.71romulusm
41.6541.7041.72romulusn
43.2643.2843.29T:grain128aeadv2
47.8947.9548.02T:schwaemm128128v2
48.0248.0248.12T:giftcofb128v1
48.5748.5748.57T:tinyjambu128v2
56.9256.9757.06T:tinyjambu256v2
57.5457.7557.80T:tinyjambu192v2
69.9270.1170.16T:isapk128av20
78.0178.0678.06romulust
87.2287.3287.65T:isapk128v20
129.89129.97130.31T:elephant200v2
167.57167.60168.71T:isapxv20
394.14395.69400.07aes256gcmv1
7233.367236.347238.69T:elephant160v2
7275.317280.367285.04T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
1.28?1.46?1.62?T:aes128gcmv1
1.44?1.53?1.69?T:aes256gcmv1
9.299.309.32ascon128av12
11.1011.1211.13T:xoodyakround3
13.9013.9013.90ascon128v12
13.9313.9313.94ascon80pqv12
18.8818.8818.89ascon128abi32v12
28.0528.0528.05ascon128bi32v12
28.1628.1728.18T:isapa128v20
29.0829.1029.11T:schwaemm256128v2
31.7531.7832.11T:schwaemm256256v2
37.7237.8337.89T:isapa128av20
39.1139.1339.13T:schwaemm192192v2
41.6741.6941.74romulusn
41.6241.6941.72romulusm
43.1343.1643.18T:grain128aeadv2
47.1547.9548.05T:giftcofb128v1
47.8447.9848.08T:schwaemm128128v2
48.5448.5548.58T:tinyjambu128v2
56.9857.1057.13T:tinyjambu256v2
57.1157.1257.20T:tinyjambu192v2
69.8669.9570.10T:isapk128av20
78.0178.0578.06romulust
87.1087.1887.46T:isapk128v20
130.04130.17130.22T:elephant200v2
167.48167.55167.60T:isapxv20
395.59397.80400.72aes256gcmv1
7233.797237.577241.41T:elephant160v2
7276.547280.677285.06T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
1.18?1.36?1.65?T:aes128gcmv1
1.44?1.55?1.60?T:aes256gcmv1
9.299.299.32ascon128av12
11.0911.1211.14T:xoodyakround3
13.9013.9013.90ascon128v12
13.9013.9013.93ascon80pqv12
18.8818.9018.90ascon128abi32v12
28.0428.0528.05ascon128bi32v12
28.1528.1728.20T:isapa128v20
29.0829.1029.11T:schwaemm256128v2
31.7731.7832.03T:schwaemm256256v2
37.6637.8037.85T:isapa128av20
39.1239.1339.13T:schwaemm192192v2
41.6741.7241.72romulusm
41.6941.7241.74romulusn
43.1443.1643.17T:grain128aeadv2
47.9248.0448.09T:schwaemm128128v2
48.0548.0548.07T:giftcofb128v1
48.5448.5848.59T:tinyjambu128v2
56.9756.9956.99T:tinyjambu256v2
57.1057.1257.16T:tinyjambu192v2
69.8969.9670.19T:isapk128av20
77.9978.0678.10romulust
87.2387.3787.43T:isapk128v20
130.03130.14130.21T:elephant200v2
167.47167.57167.61T:isapxv20
395.48395.91397.59aes256gcmv1
7235.077238.127243.07T:elephant160v2
7279.207284.487286.10T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
4.164.234.37T:aes128gcmv1
4.424.434.47T:aes256gcmv1
9.619.619.62ascon128av12
14.2414.2414.25ascon128v12
14.2414.2414.24ascon80pqv12
16.9416.9617.03T:xoodyakround3
20.2920.2920.30ascon128abi32v12
28.7628.7628.77ascon128bi32v12
30.0030.0030.01T:schwaemm256128v2
33.0133.0233.36T:schwaemm256256v2
39.9539.9539.96T:schwaemm192192v2
44.0744.0744.11T:grain128aeadv2
47.9648.4348.57T:giftcofb128v1
48.7348.7548.78T:schwaemm128128v2
52.9052.9454.91T:isapa128av20
58.5858.5858.58romulusn
61.7361.7361.74T:isapa128v20
64.6164.6164.62T:tinyjambu128v2
79.6079.6179.61romulusm
80.9180.9681.00T:tinyjambu192v2
85.9185.9286.12T:tinyjambu256v2
101.15101.18101.24T:isapk128av20
158.07158.10158.12romulust
196.58196.67197.20T:elephant200v2
201.12201.32202.44T:isapk128v20
367.95367.95367.96T:isapxv20
403.94406.35407.27aes256gcmv1
10975.8810981.3310985.32T:elephant160v2
11086.9011089.6711094.44T:elephant176v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
4.174.244.33T:aes128gcmv1
4.384.424.48T:aes256gcmv1
9.629.629.63ascon128av12
14.2214.2214.23ascon128v12
14.2614.2614.27ascon80pqv12
16.5816.6016.65T:xoodyakround3
20.2920.3020.30ascon128abi32v12
28.7728.7828.79ascon128bi32v12
30.1130.1130.12T:schwaemm256128v2
32.9632.9633.08T:schwaemm256256v2
39.8739.8839.91T:schwaemm192192v2
44.8344.8444.86T:grain128aeadv2
47.9848.6548.68T:giftcofb128v1
48.6748.7148.76T:schwaemm128128v2
53.1853.2453.31T:isapa128av20
58.6758.6858.68romulusn
61.7361.7361.74T:isapa128v20
64.8464.8764.93T:tinyjambu128v2
79.7679.7779.79romulusm
80.6380.6580.68T:tinyjambu192v2
86.3186.4486.46T:tinyjambu256v2
101.14101.26101.33T:isapk128av20
158.07158.08158.13romulust
196.58196.65196.89T:elephant200v2
201.06?201.25?225.86?T:isapk128v20
367.92368.29385.22T:isapxv20
404.17405.79407.87aes256gcmv1
10975.1310978.3610983.80T:elephant160v2
11086.8711088.1611093.38T:elephant176v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
4.164.244.28T:aes128gcmv1
4.354.394.43T:aes256gcmv1
9.629.629.63ascon128av12
14.2214.2314.23ascon128v12
14.2514.2514.26ascon80pqv12
16.6416.6516.65T:xoodyakround3
20.2920.2920.30ascon128abi32v12
28.7828.7828.79ascon128bi32v12
30.1130.1130.12T:schwaemm256128v2
32.9633.0233.05T:schwaemm256256v2
38.0738.0738.08T:isapa128v20
39.8639.8939.91T:schwaemm192192v2
41.0141.0641.11T:isapa128av20
44.8444.8444.86T:grain128aeadv2
47.9948.5948.66T:giftcofb128v1
48.6848.7148.76T:schwaemm128128v2
58.6758.6758.67romulusn
64.8264.8964.93T:tinyjambu128v2
78.2378.3178.36T:isapk128av20
79.7679.7879.79romulusm
80.3780.3880.41romulust
80.6180.6280.64T:tinyjambu192v2
86.4286.4586.47T:tinyjambu256v2
133.31133.33133.38T:isapk128v20
196.72196.72196.80T:elephant200v2
240.44240.45240.47T:isapxv20
397.92399.27399.34aes256gcmv1
10975.5410981.9210983.69T:elephant160v2
11087.8711090.1911095.33T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
15.4115.6315.71ascon128av12
19.3419.3919.59ascon128v12
19.4019.4519.59ascon80pqv12
26.8027.1028.49T:xoodyakround3
30.9531.1631.48ascon128abi32v12
40.2040.4041.11ascon128bi32v12
49.3349.3849.64T:schwaemm256128v2
53.6853.7754.20T:schwaemm256256v2
58.4858.6658.83T:grain128aeadv2
57.7559.4361.23T:aes128gcmv1
60.8661.1761.93T:giftcofb128v1
60.8361.5763.36T:aes256gcmv1
62.8162.9863.20T:schwaemm128128v2
64.0964.1664.46T:schwaemm192192v2
70.6770.8171.27romulusn
77.1377.2677.67T:tinyjambu128v2
92.4892.6093.38romulusm
95.4495.5796.19T:tinyjambu192v2
101.21101.57101.93T:tinyjambu256v2
179.14179.99181.64T:isapa128av20
213.04213.17213.50romulust
279.50280.24281.24T:elephant200v2
383.97385.48385.61T:isapk128av20
457.81457.95458.78aes256gcmv1
509.23509.26509.54T:isapa128v20
2179.982181.782182.75T:isapk128v20
3598.303598.413598.78T:isapxv20
13788.3613797.1413827.70T:elephant176v2
14674.6614683.4314689.72T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
15.1215.4115.78ascon128av12
19.2919.3019.47ascon128v12
19.4119.5619.72ascon80pqv12
25.7425.8326.23T:xoodyakround3
31.1931.3032.02ascon128abi32v12
40.3040.5040.73ascon128bi32v12
49.1849.2449.28T:schwaemm256128v2
53.3853.4553.46T:schwaemm256256v2
56.8459.0960.36T:aes128gcmv1
59.0959.3159.70T:grain128aeadv2
59.2160.3861.58T:aes256gcmv1
61.0261.1061.66T:giftcofb128v1
62.3562.6562.91T:schwaemm128128v2
64.1464.1664.18T:schwaemm192192v2
70.5770.7770.84romulusn
77.4477.6777.98T:tinyjambu128v2
94.7794.7895.06romulusm
95.0595.1795.67T:tinyjambu192v2
101.83102.17102.41T:tinyjambu256v2
183.18183.95184.34T:isapa128av20
212.75212.97213.62romulust
279.63279.87280.37T:elephant200v2
385.80386.88387.92T:isapk128av20
454.21456.00461.30aes256gcmv1
509.05509.15509.20T:isapa128v20
2179.362180.622181.76T:isapk128v20
3598.723601.063623.27T:isapxv20
13788.8813796.3813836.12T:elephant176v2
14674.2914682.3414684.34T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
14.9414.9515.00ascon128av12
19.1319.1319.13ascon128v12
19.2019.2019.38ascon80pqv12
25.7425.8026.20T:xoodyakround3
31.1231.1231.12ascon128abi32v12
40.4440.4540.45ascon128bi32v12
49.1749.1849.25T:schwaemm256128v2
53.2553.4653.57T:schwaemm256256v2
56.7357.0059.83T:aes128gcmv1
58.4859.0260.55T:aes256gcmv1
58.9359.0359.03T:grain128aeadv2
60.9161.1261.20T:giftcofb128v1
62.5662.7063.05T:schwaemm128128v2
63.9163.9564.11T:schwaemm192192v2
70.5770.5870.77romulusn
77.0577.1277.28T:tinyjambu128v2
94.4594.4694.78romulusm
94.9695.0495.12T:tinyjambu192v2
101.69101.69101.85T:tinyjambu256v2
112.34113.35113.59T:isapa128av20
132.33132.46133.59romulust
250.45251.65252.51T:isapk128av20
265.34265.42266.06T:isapa128v20
279.25279.98280.23T:elephant200v2
448.14449.16450.94aes256gcmv1
1173.351174.451176.65T:isapk128v20
1882.921882.981884.31T:isapxv20
13788.5313793.9813836.00T:elephant176v2
14674.6214682.5214683.84T:elephant160v2