VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Broadwell+AES (306d4); 2015 Intel Core i3-5005U; 2 x 1900MHz; shoe, supercop-20260330

[Page version: 20260503 04:13:14]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.760.770.79T:aes128gcmv1
1.051.071.09T:aes256gcmv1
2.112.132.14aes256gcmv1
7.327.347.36ascon128av12
10.5810.6110.69ascon80pqv12
10.6210.6410.67ascon128v12
14.3014.3214.35ascon128abi32v12
17.4517.4917.53T:xoodyakround3
20.0720.1320.19T:schwaemm256128v2
21.1921.2321.26ascon128bi32v12
24.6424.6824.92T:schwaemm256256v2
25.6625.9627.31T:grain128aeadv2
26.3126.3726.91T:schwaemm192192v2
28.8028.8528.89T:schwaemm128128v2
38.9038.9338.97romulusn
41.6141.6641.70T:giftcofb128v1
41.7241.8041.87T:isapa128v20
41.9642.0242.08T:isapa128av20
61.0761.1261.37T:tinyjambu128v2
63.2163.2563.29romulusm
70.5570.7771.01T:isapk128av20
73.0773.0973.11T:tinyjambu192v2
79.7279.7679.79T:tinyjambu256v2
92.5492.8993.29T:isapk128v20
124.69124.80124.96romulust
152.96153.19153.37T:elephant200v2
183.43184.00184.33T:isapxv20
7308.457313.807315.78T:elephant176v2
8513.108530.358535.76T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.720.730.74T:aes128gcmv1
1.001.021.05T:aes256gcmv1
2.192.222.23aes256gcmv1
7.027.037.07ascon128av12
10.4510.4910.61ascon80pqv12
10.6310.6610.69ascon128v12
14.0314.1214.14ascon128abi32v12
17.1317.2017.25T:xoodyakround3
20.0920.1320.19T:schwaemm256128v2
21.3521.3921.41ascon128bi32v12
24.6524.6924.95T:schwaemm256256v2
25.9926.1628.00T:grain128aeadv2
26.2726.3927.11T:schwaemm192192v2
28.7828.8228.87T:schwaemm128128v2
38.9338.9739.00romulusn
41.5741.7141.86T:isapa128v20
41.8341.8741.92T:giftcofb128v1
41.9542.0242.08T:isapa128av20
61.1761.2661.40T:tinyjambu128v2
63.2563.3163.39romulusm
70.4870.6670.85T:isapk128av20
73.0873.1073.11T:tinyjambu192v2
79.8279.8579.90T:tinyjambu256v2
92.7493.0793.41T:isapk128v20
124.67124.83124.97romulust
152.97153.15153.39T:elephant200v2
182.77183.94184.87T:isapxv20
7307.977313.987315.66T:elephant176v2
8513.418530.208535.95T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.710.730.75T:aes128gcmv1
1.011.021.05T:aes256gcmv1
2.192.212.23aes256gcmv1
7.017.027.07ascon128av12
10.4710.5110.55ascon80pqv12
10.6410.6510.67ascon128v12
14.0314.1214.14ascon128abi32v12
17.1417.2117.30T:xoodyakround3
20.0620.1220.18T:schwaemm256128v2
20.5920.7220.88T:isapa128v20
21.3421.3921.41ascon128bi32v12
24.6524.7024.94T:schwaemm256256v2
25.9926.1527.99T:grain128aeadv2
26.2826.3827.13T:schwaemm192192v2
27.8327.8727.93T:isapa128av20
28.7728.8328.92T:schwaemm128128v2
38.9238.9438.98romulusn
41.7841.8641.90T:giftcofb128v1
42.7942.8542.92romulust
46.5546.8046.98T:isapk128av20
57.6657.9058.15T:isapk128v20
61.1861.2461.43T:tinyjambu128v2
63.2563.2963.37romulusm
73.0873.0973.13T:tinyjambu192v2
79.8179.8479.90T:tinyjambu256v2
108.05108.79109.29T:isapxv20
152.96153.15153.36T:elephant200v2
7307.977314.137315.47T:elephant176v2
8514.658530.108535.49T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.510.530.54T:aes128gcmv1
0.670.680.69T:aes256gcmv1
1.261.271.28aes256gcmv1
7.227.247.25ascon128av12
10.5710.5910.62ascon80pqv12
10.6010.6110.65ascon128v12
13.3113.3413.35T:xoodyakround3
14.0714.0914.11ascon128abi32v12
19.9920.0320.10T:schwaemm256128v2
21.3321.3421.36ascon128bi32v12
24.5324.5724.81T:schwaemm256256v2
25.7025.8227.35T:grain128aeadv2
26.1126.2126.80T:schwaemm192192v2
28.6428.6728.71T:schwaemm128128v2
31.1631.2031.25T:isapa128v20
31.5831.6131.65romulusn
34.8934.9334.98T:isapa128av20
41.8341.8541.88T:giftcofb128v1
43.6743.7043.75romulusm
50.1850.2250.37T:tinyjambu128v2
57.1757.2057.22T:tinyjambu192v2
58.5258.6758.79T:isapk128av20
60.4960.5260.54T:tinyjambu256v2
75.4975.7175.90T:isapk128v20
83.6283.6983.78romulust
114.99115.10115.22T:elephant200v2
146.44146.84149.91T:isapxv20
5457.315460.785462.77T:elephant176v2
6388.226401.766403.94T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.480.500.52T:aes128gcmv1
0.640.650.66T:aes256gcmv1
1.311.311.32aes256gcmv1
7.087.107.11ascon128av12
10.5310.5610.58ascon80pqv12
10.5810.6010.62ascon128v12
13.2213.2413.25T:xoodyakround3
14.2014.2414.26ascon128abi32v12
19.9920.0420.09T:schwaemm256128v2
21.3421.3821.41ascon128bi32v12
24.5324.5724.83T:schwaemm256256v2
25.8926.0427.84T:grain128aeadv2
26.1226.2126.91T:schwaemm192192v2
28.6228.6528.68T:schwaemm128128v2
31.0631.1531.22T:isapa128v20
31.5931.6231.66romulusn
34.8834.9334.97T:isapa128av20
41.9441.9742.01T:giftcofb128v1
43.7643.8043.84romulusm
50.2050.2650.37T:tinyjambu128v2
57.1757.1957.22T:tinyjambu192v2
58.4558.6158.80T:isapk128av20
60.5260.5560.58T:tinyjambu256v2
75.5275.7275.93T:isapk128v20
83.6283.6883.79romulust
114.98115.08115.21T:elephant200v2
146.25146.94149.29T:isapxv20
5456.745460.945462.98T:elephant176v2
6388.686401.476403.58T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.480.500.52T:aes128gcmv1
0.640.650.66T:aes256gcmv1
1.311.321.33aes256gcmv1
7.087.097.11ascon128av12
10.5210.5610.60ascon80pqv12
10.5910.6010.62ascon128v12
13.2413.2513.27T:xoodyakround3
14.1914.2214.25ascon128abi32v12
20.0020.0320.08T:schwaemm256128v2
20.6120.6820.73T:isapa128v20
21.3421.3721.40ascon128bi32v12
24.5324.5624.83T:schwaemm256256v2
25.9126.0727.84T:grain128aeadv2
26.1126.2126.88T:schwaemm192192v2
27.9027.9227.94T:isapa128av20
28.6128.6528.69T:schwaemm128128v2
31.5831.6131.65romulusn
41.9241.9441.98T:giftcofb128v1
42.6942.7242.77romulust
43.7443.7843.82romulusm
46.6146.7146.86T:isapk128av20
50.2050.2550.40T:tinyjambu128v2
57.1757.1957.22T:tinyjambu192v2
58.0958.2258.38T:isapk128v20
60.5460.5660.60T:tinyjambu256v2
108.76109.23110.81T:isapxv20
115.01115.14115.23T:elephant200v2
5456.825461.075462.85T:elephant176v2
6389.256402.446404.70T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.26?0.28?0.31?T:aes256gcmv1
0.27?0.29?0.31?T:aes128gcmv1
0.390.400.41aes256gcmv1
7.127.147.16ascon128av12
9.149.179.21T:xoodyakround3
10.5310.5410.57ascon128v12
10.5110.5410.57ascon80pqv12
13.8313.9814.23ascon128abi32v12
19.8019.8619.92T:schwaemm256128v2
20.5320.6120.68T:isapa128v20
21.3621.3921.43ascon128bi32v12
24.1524.1924.28romulusn
24.2324.2524.28romulusm
24.3924.4424.68T:schwaemm256256v2
25.7525.9027.41T:grain128aeadv2
25.9526.0826.77T:schwaemm192192v2
27.8827.9928.06T:isapa128av20
28.4228.4928.54T:schwaemm128128v2
39.2739.3139.35T:tinyjambu128v2
41.2941.3141.35T:tinyjambu256v2
41.3341.3641.38T:tinyjambu192v2
42.0242.0642.11T:giftcofb128v1
42.5242.5742.62romulust
46.3046.4746.64T:isapk128av20
58.0758.3858.72T:isapk128v20
78.0478.1878.30T:elephant200v2
108.88109.50111.83T:isapxv20
3607.583610.473611.76T:elephant176v2
4252.284259.804264.39T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.27?0.29?0.31?T:aes128gcmv1
0.27?0.29?0.31?T:aes256gcmv1
0.410.420.43aes256gcmv1
7.067.087.10ascon128av12
9.159.189.21T:xoodyakround3
10.4610.5210.56ascon80pqv12
10.5410.5610.59ascon128v12
14.2614.3114.36ascon128abi32v12
19.7919.8419.91T:schwaemm256128v2
20.5720.6220.70T:isapa128v20
21.3121.3421.37ascon128bi32v12
24.1624.2024.29romulusn
24.2324.2624.29romulusm
24.3924.4424.67T:schwaemm256256v2
25.6925.8927.61T:grain128aeadv2
25.9926.1026.72T:schwaemm192192v2
27.8427.9928.05T:isapa128av20
28.4328.4828.53T:schwaemm128128v2
39.2839.3339.38T:tinyjambu128v2
41.3441.3641.39T:tinyjambu256v2
41.3441.3841.40T:tinyjambu192v2
42.0142.0842.12T:giftcofb128v1
42.5242.5942.64romulust
46.3546.5246.66T:isapk128av20
58.0958.4358.72T:isapk128v20
78.0778.2178.35T:elephant200v2
108.59109.57111.67T:isapxv20
3607.763610.403611.80T:elephant176v2
4250.604259.314266.58T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.26?0.28?0.30?T:aes128gcmv1
0.27?0.29?0.31?T:aes256gcmv1
0.410.420.43aes256gcmv1
7.077.097.11ascon128av12
9.149.179.21T:xoodyakround3
10.4910.5410.57ascon80pqv12
10.5410.5610.57ascon128v12
14.2314.2814.34ascon128abi32v12
19.7719.8519.91T:schwaemm256128v2
20.5020.5920.63T:isapa128v20
21.2921.3321.35ascon128bi32v12
24.1624.2024.28romulusn
24.2424.2524.28romulusm
24.3924.4424.68T:schwaemm256256v2
25.7125.8927.62T:grain128aeadv2
26.0226.1026.72T:schwaemm192192v2
27.8628.0028.08T:isapa128av20
28.4328.4828.53T:schwaemm128128v2
39.2739.3339.38T:tinyjambu128v2
41.3241.3641.39T:tinyjambu256v2
41.3841.4141.43T:tinyjambu192v2
42.0242.0642.09T:giftcofb128v1
42.5142.5742.63romulust
46.3246.5046.77T:isapk128av20
58.0858.4058.69T:isapk128v20
78.0278.1978.32T:elephant200v2
108.41109.50111.43T:isapxv20
3607.493610.323611.76T:elephant176v2
4251.104259.444264.30T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.051.061.06T:aes128gcmv1
1.221.231.24T:aes256gcmv1
1.441.451.46aes256gcmv1
7.417.417.42ascon128av12
10.7110.7310.74ascon80pqv12
10.7510.7710.79ascon128v12
13.4413.4613.48T:xoodyakround3
14.4014.4314.46ascon128abi32v12
20.5620.6020.66T:schwaemm256128v2
21.6621.6721.68ascon128bi32v12
25.2225.2525.46T:schwaemm256256v2
26.2426.2727.68T:grain128aeadv2
26.7526.8027.39T:schwaemm192192v2
29.0229.0429.06T:schwaemm128128v2
31.9031.9231.97romulusn
38.5538.5738.60T:isapa128av20
42.2642.2842.31T:giftcofb128v1
44.0444.0644.09romulusm
45.5145.5345.57T:isapa128v20
50.6150.6450.75T:tinyjambu128v2
57.6457.6657.67T:tinyjambu192v2
60.9861.0061.02T:tinyjambu256v2
66.0066.0966.22T:isapk128av20
84.9384.9785.02romulust
117.52117.61117.70T:elephant200v2
131.46131.58131.69T:isapk128v20
240.05240.38243.45T:isapxv20
5498.785501.855504.18T:elephant176v2
6461.346473.306474.95T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.031.041.05T:aes128gcmv1
1.201.201.21T:aes256gcmv1
1.501.501.51aes256gcmv1
7.267.277.28ascon128av12
10.7010.7310.75ascon80pqv12
10.7410.7610.78ascon128v12
13.3213.3413.37T:xoodyakround3
14.5014.5214.55ascon128abi32v12
20.5820.6020.66T:schwaemm256128v2
21.6921.7121.74ascon128bi32v12
25.2225.2425.49T:schwaemm256256v2
26.4426.4728.15T:grain128aeadv2
26.7826.8227.43T:schwaemm192192v2
29.0029.0229.04T:schwaemm128128v2
31.9231.9531.99romulusn
38.5338.5638.60T:isapa128av20
42.3942.4042.44T:giftcofb128v1
44.2144.2344.26romulusm
45.5345.5745.60T:isapa128v20
50.6150.6850.76T:tinyjambu128v2
57.6457.6657.68T:tinyjambu192v2
61.0161.0261.06T:tinyjambu256v2
66.0766.1266.24T:isapk128av20
84.9184.9585.05romulust
117.51117.61117.72T:elephant200v2
131.50131.60131.76T:isapk128v20
240.28240.67242.97T:isapxv20
5498.595501.895504.31T:elephant176v2
6461.626473.166474.84T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.031.041.04T:aes128gcmv1
1.201.201.21T:aes256gcmv1
1.491.501.51aes256gcmv1
7.277.287.30ascon128av12
10.7010.7310.76ascon80pqv12
10.7410.7710.78ascon128v12
13.3513.3713.39T:xoodyakround3
14.5014.5314.55ascon128abi32v12
20.5720.6020.64T:schwaemm256128v2
21.6921.7121.72ascon128bi32v12
25.2225.2425.48T:schwaemm256256v2
26.4526.4828.15T:grain128aeadv2
26.7626.7927.41T:schwaemm192192v2
27.9628.0028.09T:isapa128v20
29.0129.0329.07T:schwaemm128128v2
29.9129.9530.00T:isapa128av20
31.9131.9431.96romulusn
42.3742.4142.45T:giftcofb128v1
43.9443.9744.00romulust
44.2044.2344.26romulusm
50.6150.6650.76T:tinyjambu128v2
51.1251.2651.39T:isapk128av20
57.6557.6657.69T:tinyjambu192v2
61.0161.0361.06T:tinyjambu256v2
87.4487.5587.65T:isapk128v20
117.57117.64117.75T:elephant200v2
156.83157.11158.73T:isapxv20
5498.725501.725504.17T:elephant176v2
6461.876472.906474.54T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
8.008.068.11aes256gcmv1
11.2511.2911.39ascon128av12
13.7013.8914.34T:aes128gcmv1
14.3314.4114.55ascon128v12
14.4214.5314.60ascon80pqv12
14.4614.5414.69T:aes256gcmv1
19.5619.6619.86T:xoodyakround3
21.8821.9422.04ascon128abi32v12
29.1229.2029.31ascon128bi32v12
33.5733.6833.85T:schwaemm256128v2
35.8736.1137.45T:grain128aeadv2
36.8937.1337.44T:schwaemm128128v2
39.1939.3039.46romulusn
40.3840.4840.75T:schwaemm256256v2
43.1043.4144.53T:schwaemm192192v2
51.8451.9852.14romulusm
52.1052.2352.40T:giftcofb128v1
59.2959.5559.84T:tinyjambu128v2
67.5767.6467.82T:tinyjambu192v2
71.2371.3671.66T:tinyjambu256v2
113.61113.76113.99romulust
121.98122.19122.49T:isapa128av20
167.02167.52168.14T:elephant200v2
219.99221.64222.81T:isapk128av20
374.30375.37376.83T:isapa128v20
1392.181393.921395.78T:isapk128v20
2361.482362.342368.69T:isapxv20
6846.766850.316852.92T:elephant176v2
8650.588666.398673.89T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
7.667.697.72aes256gcmv1
11.1311.2311.34ascon128av12
13.6113.7914.07T:aes128gcmv1
14.3514.4514.60ascon128v12
14.3814.5114.65ascon80pqv12
14.4314.5214.63T:aes256gcmv1
19.2519.3319.62T:xoodyakround3
22.0822.1622.31ascon128abi32v12
29.3529.4429.56ascon128bi32v12
33.4933.6633.81T:schwaemm256128v2
35.8436.1137.83T:grain128aeadv2
36.9537.2337.47T:schwaemm128128v2
39.3539.4339.57romulusn
40.3340.3940.80T:schwaemm256256v2
43.1843.4244.76T:schwaemm192192v2
52.4152.5152.64T:giftcofb128v1
53.9754.1054.32romulusm
59.5859.7860.04T:tinyjambu128v2
67.6467.8267.91T:tinyjambu192v2
71.4171.5071.59T:tinyjambu256v2
113.11113.36113.60romulust
122.23122.32122.60T:isapa128av20
167.32167.89168.38T:elephant200v2
219.07221.31224.07T:isapk128av20
374.74375.37376.35T:isapa128v20
1392.931394.621397.83T:isapk128v20
2362.842367.552377.78T:isapxv20
6846.916850.556853.22T:elephant176v2
8650.598666.178673.95T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
7.697.757.80aes256gcmv1
11.1211.2211.35ascon128av12
13.6813.8114.24T:aes128gcmv1
14.4114.5114.66ascon128v12
14.4314.5214.64T:aes256gcmv1
14.3714.5314.62ascon80pqv12
19.2619.3519.56T:xoodyakround3
22.0822.1622.25ascon128abi32v12
29.3429.4329.53ascon128bi32v12
33.3733.4833.74T:schwaemm256128v2
35.8435.9337.67T:grain128aeadv2
36.9437.1137.43T:schwaemm128128v2
39.3639.4439.54romulusn
40.3340.4540.78T:schwaemm256256v2
43.0643.2744.77T:schwaemm192192v2
52.4352.5452.72T:giftcofb128v1
54.0054.1054.28romulusm
59.2959.6059.91T:tinyjambu128v2
67.7967.8867.89T:tinyjambu192v2
71.2571.4371.70romulust
71.4671.6071.67T:tinyjambu256v2
76.0676.1976.26T:isapa128av20
140.50141.04142.23T:isapk128av20
167.28167.68168.35T:elephant200v2
194.49195.11195.53T:isapa128v20
745.49746.51748.59T:isapk128v20
1236.211236.361243.05T:isapxv20
6846.966850.096852.96T:elephant176v2
8649.058663.268673.60T:elephant160v2