VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Broadwell+AES (306d4); 2015 Intel Core i3-5005U; 2 x 1900MHz; shoe, supercop-20240808

[Page version: 20240828 00:46:12]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Implementation notes

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
0.770.780.81T:aes128gcmv1
1.051.071.09T:aes256gcmv1
2.122.142.16aes256gcmv1
7.127.157.18ascon128av12
10.6310.6710.68ascon128v12
10.5910.6810.72ascon80pqv12
14.3014.3314.36ascon128abi32v12
17.3917.4817.55T:xoodyakround3
20.0620.1520.53T:schwaemm256128v2
21.2021.2421.31ascon128bi32v12
24.6724.6924.72T:schwaemm256256v2
25.8025.8426.02T:grain128aeadv2
26.2326.3226.38T:schwaemm192192v2
28.7228.7428.80T:schwaemm128128v2
38.9338.9538.96romulusn
41.6241.6641.69T:giftcofb128v1
41.5341.6941.88T:isapa128v20
41.9141.9642.04T:isapa128av20
61.0561.0961.11T:tinyjambu128v2
62.9863.0263.07romulusm
70.5070.6571.03T:isapk128av20
72.8572.8773.06T:tinyjambu192v2
82.0582.0682.37T:tinyjambu256v2
92.5092.9393.46T:isapk128v20
124.47124.56124.63romulust
152.90153.10153.35T:elephant200v2
174.30183.85193.29T:isapxv20
7301.717310.417310.93T:elephant176v2
8508.928535.998550.67T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
0.720.740.75T:aes128gcmv1
1.011.051.06T:aes256gcmv1
2.192.212.23aes256gcmv1
7.147.157.31ascon128av12
10.5010.5710.69ascon80pqv12
10.6110.6510.68ascon128v12
14.0014.1014.11ascon128abi32v12
17.1817.2117.26T:xoodyakround3
20.0520.1320.52T:schwaemm256128v2
21.3621.4021.43ascon128bi32v12
24.6724.6924.71T:schwaemm256256v2
26.1926.2926.39T:grain128aeadv2
26.2826.3726.44T:schwaemm192192v2
28.7228.7528.81T:schwaemm128128v2
38.9038.9338.95romulusn
41.3641.6441.81T:isapa128v20
41.8041.8841.97T:giftcofb128v1
41.9942.0342.11T:isapa128av20
61.1461.2061.24T:tinyjambu128v2
63.0663.1263.19romulusm
70.5070.6570.94T:isapk128av20
73.0573.0673.08T:tinyjambu192v2
82.3282.3482.36T:tinyjambu256v2
92.6692.9293.18T:isapk128v20
124.50124.55124.61romulust
152.98153.28153.61T:elephant200v2
183.88183.92184.40T:isapxv20
7301.827310.557310.89T:elephant176v2
8512.648541.038548.91T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
0.680.720.74T:aes128gcmv1
1.001.051.06T:aes256gcmv1
2.182.212.23aes256gcmv1
7.127.167.19ascon128av12
10.4610.4810.53ascon80pqv12
10.6110.6410.66ascon128v12
14.0314.0914.12ascon128abi32v12
17.2117.2517.28T:xoodyakround3
20.0520.1420.53T:schwaemm256128v2
20.8020.9221.02T:isapa128v20
21.3321.3821.41ascon128bi32v12
24.6624.6824.71T:schwaemm256256v2
26.2226.3526.41T:grain128aeadv2
26.3226.3826.43T:schwaemm192192v2
27.8527.8828.04T:isapa128av20
28.7028.7528.79T:schwaemm128128v2
38.8938.9238.97romulusn
41.8041.8841.91T:giftcofb128v1
42.4142.4842.54romulust
46.6546.8447.03T:isapk128av20
57.7557.8958.16T:isapk128v20
61.1161.1761.23T:tinyjambu128v2
63.0663.0963.15romulusm
73.0673.0773.08T:tinyjambu192v2
82.3382.3482.35T:tinyjambu256v2
108.51108.71109.37T:isapxv20
153.01153.16153.45T:elephant200v2
7302.087310.877311.15T:elephant176v2
8512.568536.808544.83T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.530.530.54T:aes128gcmv1
0.660.680.69T:aes256gcmv1
1.251.261.27aes256gcmv1
7.177.197.21ascon128av12
10.5410.5710.59ascon80pqv12
10.5810.6010.62ascon128v12
13.3113.3413.37T:xoodyakround3
14.0614.1014.22ascon128abi32v12
20.2420.2820.69T:schwaemm256128v2
21.3321.3521.37ascon128bi32v12
24.5424.5624.57T:schwaemm256256v2
25.8725.9126.11T:grain128aeadv2
26.1426.1726.22T:schwaemm192192v2
28.6228.6428.68T:schwaemm128128v2
31.1331.1931.27T:isapa128v20
31.5231.5531.56romulusn
34.8634.8934.93T:isapa128av20
41.8341.8541.91T:giftcofb128v1
43.5543.5743.58romulusm
50.1450.1750.19T:tinyjambu128v2
57.0957.1157.23T:tinyjambu192v2
58.5758.7258.78T:isapk128av20
61.9161.9161.92T:tinyjambu256v2
75.4775.7075.82T:isapk128v20
83.4783.5583.62romulust
115.10115.19115.25T:elephant200v2
141.69146.50150.92T:isapxv20
5452.665458.625459.29T:elephant176v2
6379.926399.806401.67T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.490.510.52T:aes128gcmv1
0.640.660.67T:aes256gcmv1
1.311.311.33aes256gcmv1
7.157.177.25ascon128av12
10.4910.5310.56ascon80pqv12
10.5910.6110.62ascon128v12
13.2113.2313.25T:xoodyakround3
14.1514.1914.26ascon128abi32v12
20.2420.2920.68T:schwaemm256128v2
21.3521.3721.40ascon128bi32v12
24.5424.5624.57T:schwaemm256256v2
26.0226.1426.19T:grain128aeadv2
26.1526.1926.24T:schwaemm192192v2
28.6028.6328.67T:schwaemm128128v2
31.0931.1531.21T:isapa128v20
31.5231.5431.56romulusn
34.8734.9034.92T:isapa128av20
41.9441.9842.04T:giftcofb128v1
43.6043.6343.65romulusm
50.2050.2550.28T:tinyjambu128v2
57.2057.2257.24T:tinyjambu192v2
58.6458.7158.96T:isapk128av20
62.0562.0762.08T:tinyjambu256v2
75.5475.7376.08T:isapk128v20
83.4983.5383.58romulust
115.02115.10115.28T:elephant200v2
146.26146.51146.82T:isapxv20
5452.825458.725459.34T:elephant176v2
6379.886399.376401.93T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.500.510.51T:aes128gcmv1
0.620.660.67T:aes256gcmv1
1.301.311.32aes256gcmv1
7.167.197.28ascon128av12
10.5110.5310.56ascon80pqv12
10.5810.6010.62ascon128v12
13.2413.2613.28T:xoodyakround3
14.1614.2014.24ascon128abi32v12
20.2220.2720.68T:schwaemm256128v2
20.5620.6420.73T:isapa128v20
21.3721.3821.39ascon128bi32v12
24.5524.5624.57T:schwaemm256256v2
26.0426.1526.18T:grain128aeadv2
26.1726.2126.25T:schwaemm192192v2
27.8227.8727.95T:isapa128av20
28.6128.6328.67T:schwaemm128128v2
31.5131.5231.56romulusn
41.9441.9641.97T:giftcofb128v1
42.5042.5342.56romulust
43.5843.6043.64romulusm
46.7046.7946.94T:isapk128av20
50.1950.2150.26T:tinyjambu128v2
57.2157.2357.24T:tinyjambu192v2
58.0858.2458.39T:isapk128v20
62.0662.0762.09T:tinyjambu256v2
108.74108.78109.33T:isapxv20
114.94115.09115.25T:elephant200v2
5452.575458.685459.24T:elephant176v2
6380.366398.746401.77T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.270.280.30T:aes128gcmv1
0.26?0.29?0.30?T:aes256gcmv1
0.390.400.41aes256gcmv1
7.157.197.21ascon128av12
9.159.199.22T:xoodyakround3
10.5010.5210.56ascon128v12
10.4710.5610.59ascon80pqv12
13.8113.8414.23ascon128abi32v12
20.3020.3720.76T:schwaemm256128v2
20.4920.7320.78T:isapa128v20
21.3821.4221.45ascon128bi32v12
24.0724.0924.11romulusn
24.1124.1224.15romulusm
24.4124.4324.46T:schwaemm256256v2
25.8825.9326.12T:grain128aeadv2
25.9626.0226.06T:schwaemm192192v2
27.8328.0028.04T:isapa128av20
28.4728.5228.57T:schwaemm128128v2
39.2439.2839.30T:tinyjambu128v2
41.3941.4141.42T:tinyjambu192v2
41.7941.8041.81T:tinyjambu256v2
42.0042.0642.13T:giftcofb128v1
42.5342.5742.63romulust
46.4846.6846.92T:isapk128av20
58.0258.3558.58T:isapk128v20
78.1078.2978.61T:elephant200v2
98.80?109.03?119.21?T:isapxv20
3605.613609.763610.06T:elephant176v2
4250.124252.764260.37T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.270.280.30T:aes256gcmv1
0.25?0.29?0.30?T:aes128gcmv1
0.410.430.44aes256gcmv1
7.167.197.21ascon128av12
9.169.199.21T:xoodyakround3
10.4410.4510.49ascon80pqv12
10.5110.5510.57ascon128v12
14.2714.3114.36ascon128abi32v12
20.3020.4020.79T:schwaemm256128v2
20.4920.6220.77T:isapa128v20
21.3021.3421.36ascon128bi32v12
24.0624.1024.12romulusn
24.1024.1324.16romulusm
24.4224.4324.46T:schwaemm256256v2
25.8325.9026.04T:grain128aeadv2
26.0226.0526.12T:schwaemm192192v2
27.8127.9928.01T:isapa128av20
28.4728.5128.58T:schwaemm128128v2
39.2639.3139.34T:tinyjambu128v2
41.3841.4241.46T:tinyjambu192v2
41.8241.8341.83T:tinyjambu256v2
42.0342.0842.11T:giftcofb128v1
42.5142.5542.63romulust
46.4646.7246.87T:isapk128av20
58.0458.3358.63T:isapk128v20
78.0278.1278.28T:elephant200v2
108.69109.24109.59T:isapxv20
3605.483609.773610.33T:elephant176v2
4248.434254.444260.92T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.24?0.27?0.29?T:aes256gcmv1
0.23?0.28?0.30?T:aes128gcmv1
0.420.420.43aes256gcmv1
7.167.187.20ascon128av12
9.149.199.22T:xoodyakround3
10.4610.4910.51ascon80pqv12
10.5210.5410.56ascon128v12
14.2614.3014.38ascon128abi32v12
20.3020.3820.79T:schwaemm256128v2
20.4520.6120.69T:isapa128v20
21.3221.3421.35ascon128bi32v12
24.0424.0924.11romulusn
24.0924.1224.14romulusm
24.4024.4224.45T:schwaemm256256v2
25.8425.9026.05T:grain128aeadv2
25.9626.0526.11T:schwaemm192192v2
27.8127.9528.05T:isapa128av20
28.4828.5328.57T:schwaemm128128v2
39.2539.3139.37T:tinyjambu128v2
41.4141.4341.48T:tinyjambu192v2
41.8341.8441.85T:tinyjambu256v2
42.0242.0942.12T:giftcofb128v1
42.5042.5442.58romulust
46.4046.6846.90T:isapk128av20
58.1958.3858.77T:isapk128v20
77.9578.1878.33T:elephant200v2
108.86109.21109.60T:isapxv20
3605.503609.723610.27T:elephant176v2
4248.834255.024262.08T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
1.051.051.06T:aes128gcmv1
1.221.231.24T:aes256gcmv1
1.451.451.46aes256gcmv1
7.367.387.40ascon128av12
10.6810.7010.80ascon80pqv12
10.7510.7810.80ascon128v12
13.4613.4913.51T:xoodyakround3
14.4214.4314.58ascon128abi32v12
20.8320.8621.25T:schwaemm256128v2
21.6221.6521.67ascon128bi32v12
25.2225.2325.26T:schwaemm256256v2
26.3026.3426.52T:grain128aeadv2
26.7326.7526.78T:schwaemm192192v2
29.0229.0429.09T:schwaemm128128v2
31.8531.8631.90romulusn
38.5538.5638.58T:isapa128av20
42.2842.3142.33T:giftcofb128v1
43.8943.9043.96romulusm
45.5245.5945.65T:isapa128v20
50.5850.5950.61T:tinyjambu128v2
57.5657.5957.69T:tinyjambu192v2
62.4062.4062.42T:tinyjambu256v2
66.0866.1966.32T:isapk128av20
84.8084.8484.87romulust
117.45117.52117.67T:elephant200v2
131.36131.47131.79T:isapk128v20
240.37240.39246.32T:isapxv20
5493.985501.065501.47T:elephant176v2
6453.376470.016472.00T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
1.041.051.06T:aes128gcmv1
1.201.211.21T:aes256gcmv1
1.501.511.52aes256gcmv1
7.357.367.37ascon128av12
10.6810.7310.82ascon80pqv12
10.7610.7710.80ascon128v12
13.3513.3613.38T:xoodyakround3
14.4314.5214.54ascon128abi32v12
20.8620.8721.28T:schwaemm256128v2
21.6921.7021.73ascon128bi32v12
25.2225.2225.23T:schwaemm256256v2
26.4926.6126.63T:grain128aeadv2
26.7926.8226.84T:schwaemm192192v2
29.0229.0529.10T:schwaemm128128v2
31.8431.8531.87romulusn
38.5638.5938.62T:isapa128av20
42.4442.4542.47T:giftcofb128v1
44.0544.0944.12romulusm
45.5045.5445.58T:isapa128v20
50.6050.6450.68T:tinyjambu128v2
57.6757.6857.70T:tinyjambu192v2
62.5462.5562.56T:tinyjambu256v2
66.1166.2666.31T:isapk128av20
84.7984.8284.85romulust
117.55117.66117.84T:elephant200v2
131.38131.47131.64T:isapk128v20
240.13240.35240.37T:isapxv20
5493.935501.095501.36T:elephant176v2
6453.366470.296473.11T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
1.041.051.05T:aes128gcmv1
1.201.211.21T:aes256gcmv1
1.491.501.51aes256gcmv1
7.357.377.42ascon128av12
10.7010.7110.79ascon80pqv12
10.7710.7810.80ascon128v12
13.3513.4013.41T:xoodyakround3
14.4814.5014.56ascon128abi32v12
20.8320.8721.24T:schwaemm256128v2
21.7121.7221.73ascon128bi32v12
25.2125.2225.23T:schwaemm256256v2
26.4926.6026.64T:grain128aeadv2
26.7826.8126.85T:schwaemm192192v2
27.8827.9528.01T:isapa128v20
28.9729.0229.09T:schwaemm128128v2
29.8429.9329.99T:isapa128av20
31.8431.8631.87romulusn
42.4142.4242.45T:giftcofb128v1
43.7343.7543.84romulust
44.0444.0644.09romulusm
50.6050.6650.69T:tinyjambu128v2
51.2051.3251.37T:isapk128av20
57.6757.6757.69T:tinyjambu192v2
62.5562.5562.56T:tinyjambu256v2
86.9587.0687.25T:isapk128v20
117.58117.73117.83T:elephant200v2
156.59156.80157.28T:isapxv20
5493.995501.155501.49T:elephant176v2
6453.006469.896472.38T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
8.098.128.17aes256gcmv1
11.5911.8011.83ascon128av12
13.5913.6313.84T:aes128gcmv1
14.3214.4414.55ascon80pqv12
14.4114.4514.79ascon128v12
14.5014.5914.79T:aes256gcmv1
19.6219.8820.34T:xoodyakround3
22.0322.1222.84ascon128abi32v12
29.1829.3829.62ascon128bi32v12
33.8234.1034.57T:schwaemm256128v2
36.4136.5036.61T:grain128aeadv2
37.0537.4537.70T:schwaemm128128v2
39.2739.3639.62romulusn
40.3940.5140.64T:schwaemm256256v2
43.1243.4243.62T:schwaemm192192v2
51.7751.8652.10romulusm
52.0652.2452.38T:giftcofb128v1
59.4759.7860.05T:tinyjambu128v2
67.7667.9768.09T:tinyjambu192v2
73.1873.4173.48T:tinyjambu256v2
113.23113.44114.05romulust
122.01122.36122.57T:isapa128av20
168.52169.30170.04T:elephant200v2
221.45223.59226.38T:isapk128av20
375.04375.48378.05T:isapa128v20
1391.931393.121396.50T:isapk128v20
2377.882378.172520.98T:isapxv20
6845.346852.006852.88T:elephant176v2
8647.308663.348670.07T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
7.757.817.91aes256gcmv1
11.4111.6411.88ascon128av12
13.5913.7013.86T:aes128gcmv1
14.4714.5614.74T:aes256gcmv1
14.4314.6014.80ascon80pqv12
14.5514.6714.84ascon128v12
19.4119.8820.48T:xoodyakround3
22.1022.1722.36ascon128abi32v12
29.4629.6329.86ascon128bi32v12
33.5633.8534.30T:schwaemm256128v2
36.4736.5336.66T:grain128aeadv2
37.4037.4537.74T:schwaemm128128v2
39.3739.4639.61romulusn
40.3940.4540.54T:schwaemm256256v2
43.0543.1043.35T:schwaemm192192v2
52.3752.5452.79T:giftcofb128v1
53.9254.0054.36romulusm
59.5659.6559.77T:tinyjambu128v2
67.8367.9468.02T:tinyjambu192v2
73.2273.3873.52T:tinyjambu256v2
113.12113.36113.60romulust
122.44122.57122.97T:isapa128av20
167.26168.61169.21T:elephant200v2
220.84221.68223.77T:isapk128av20
374.65375.12375.70T:isapa128v20
1390.841393.051394.15T:isapk128v20
2366.602369.052369.35T:isapxv20
6844.886851.966852.59T:elephant176v2
8643.588666.088672.80T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
7.657.697.75aes256gcmv1
11.2411.2711.78ascon128av12
13.5513.6913.84T:aes128gcmv1
14.5014.5414.61T:aes256gcmv1
14.3814.5814.70ascon128v12
14.5214.6014.71ascon80pqv12
19.3819.4519.79T:xoodyakround3
22.1622.2122.34ascon128abi32v12
29.3129.4729.49ascon128bi32v12
33.5833.6634.22T:schwaemm256128v2
36.4536.5936.72T:grain128aeadv2
37.0037.5237.69T:schwaemm128128v2
39.3339.4539.61romulusn
40.3340.3840.50T:schwaemm256256v2
43.1243.2043.29T:schwaemm192192v2
52.4352.6252.91T:giftcofb128v1
53.9554.0754.15romulusm
59.5259.7059.80T:tinyjambu128v2
67.8067.8967.97T:tinyjambu192v2
71.2571.6071.71romulust
73.1973.2073.24T:tinyjambu256v2
76.0676.2376.45T:isapa128av20
141.77143.80145.21T:isapk128av20
167.55168.06169.35T:elephant200v2
194.55194.97195.16T:isapa128v20
733.74734.34740.12T:isapk128v20
1239.051241.321242.13T:isapxv20
6845.766851.916852.54T:elephant176v2
8644.408662.988676.97T:elephant160v2