VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Skylake (506e3); 2015 Intel Core i5-6500T; 4 x 2500MHz; thinksky, supercop-20261018

[Page version: 20261107 07:59:40]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
1.181.191.20T:aes128gcmv1
1.431.441.45aes256gcmv1
4.324.354.36aes128gcmv1
7.557.587.60ascon128av12
10.9210.9510.98ascon128v12
10.9210.9610.98ascon80pqv12
13.7213.9814.09ascon128abi32v12
15.8715.9415.99T:xoodyakround3
17.5217.5617.61T:schwaemm256128v2
20.9921.0521.08ascon128bi32v12
23.0923.1623.23T:schwaemm192192v2
23.2823.8823.96T:schwaemm256256v2
24.0824.1124.21T:grain128aeadv2
25.4125.4625.50T:schwaemm128128v2
33.6733.7233.76T:giftcofb128v1
38.1438.1938.24romulusn
40.5340.5940.66T:isapa128av20
43.0343.1143.18T:isapa128v20
61.3261.3661.43romulusm
67.8867.8967.91T:tinyjambu128v2
67.8167.9568.06T:isapk128av20
82.9283.5083.50T:tinyjambu192v2
89.2889.2989.29T:tinyjambu256v2
90.3190.5190.79T:isapk128v20
127.83127.91128.08romulust
165.91166.65167.46T:isapxv20
172.03172.08172.18T:elephant200v2
6812.836813.306815.41T:elephant176v2
7972.997974.087974.65T:elephant160v2
Cycles/byte for long+0 decrypt
25%50%75%aead
1.051.051.06T:aes128gcmv1
1.421.431.44aes256gcmv1
4.304.314.34aes128gcmv1
7.397.427.44ascon128av12
10.9210.9510.97ascon80pqv12
10.9110.9510.97ascon128v12
13.6913.7313.78ascon128abi32v12
15.8015.8515.90T:xoodyakround3
17.5217.5617.63T:schwaemm256128v2
20.8220.8520.87ascon128bi32v12
23.1023.1523.19T:schwaemm192192v2
23.2723.8823.96T:schwaemm256256v2
24.6824.7024.71T:grain128aeadv2
25.4125.4525.50T:schwaemm128128v2
33.7633.8033.86T:giftcofb128v1
38.2138.2538.28romulusn
40.4740.5440.62T:isapa128av20
43.0543.1243.20T:isapa128v20
60.9861.0361.07romulusm
67.8967.8967.90T:tinyjambu128v2
67.8367.9668.07T:isapk128av20
83.3883.3983.40T:tinyjambu192v2
89.2589.2689.27T:tinyjambu256v2
90.2790.4990.70T:isapk128v20
127.80127.96128.14romulust
166.30166.82167.44T:isapxv20
172.03172.10172.18T:elephant200v2
6812.926813.436815.42T:elephant176v2
7972.687973.617974.25T:elephant160v2
Cycles/byte for long+0 forgery
25%50%75%aead
1.051.051.06T:aes128gcmv1
1.421.431.43aes256gcmv1
1.741.761.82aes128gcmv1
7.407.427.44ascon128av12
10.9110.9310.95ascon80pqv12
10.9110.9510.97ascon128v12
13.6913.7313.79ascon128abi32v12
15.8115.8615.88T:xoodyakround3
17.5117.5717.60T:schwaemm256128v2
20.8320.8520.86ascon128bi32v12
21.5321.5821.64T:isapa128v20
23.0623.1423.20T:schwaemm192192v2
23.2723.8823.96T:schwaemm256256v2
24.6824.7024.72T:grain128aeadv2
25.4225.4625.50T:schwaemm128128v2
27.3127.3527.39T:isapa128av20
33.7533.8033.85T:giftcofb128v1
38.2038.2438.28romulusn
43.7543.8844.04romulust
45.0945.1845.30T:isapk128av20
56.3156.4856.64T:isapk128v20
60.9861.0461.08romulusm
67.8967.9067.91T:tinyjambu128v2
83.3883.3983.39T:tinyjambu192v2
89.2589.2689.27T:tinyjambu256v2
98.2898.3798.48T:isapxv20
172.06172.12172.19T:elephant200v2
6812.716813.276815.57T:elephant176v2
7972.687973.347974.13T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
0.800.800.81T:aes128gcmv1
0.920.930.93aes256gcmv1
3.033.043.06aes128gcmv1
7.477.497.52ascon128av12
10.9310.9610.98ascon128v12
10.9410.9710.99ascon80pqv12
12.0112.0412.06T:xoodyakround3
13.9313.9513.97ascon128abi32v12
17.4117.4417.48T:schwaemm256128v2
20.6320.7420.82ascon128bi32v12
22.9122.9522.99T:schwaemm192192v2
23.2123.7923.85T:schwaemm256256v2
24.1124.1324.25T:grain128aeadv2
25.3425.3725.41T:schwaemm128128v2
30.4830.5530.62romulusn
32.3432.3832.42T:isapa128v20
33.9433.9834.01T:isapa128av20
34.2134.2434.28T:giftcofb128v1
42.0542.0942.19romulusm
55.5155.5155.52T:tinyjambu128v2
56.4356.5056.62T:isapk128av20
63.4063.4063.40T:tinyjambu192v2
67.3967.4067.40T:tinyjambu256v2
73.3673.4573.57T:isapk128v20
85.6985.7685.95romulust
128.51128.54128.58T:elephant200v2
132.37132.79132.95T:isapxv20
5089.025089.585091.48T:elephant176v2
5977.535977.935978.50T:elephant160v2
Cycles/byte for long+long decrypt
25%50%75%aead
0.730.730.74T:aes128gcmv1
0.910.920.92aes256gcmv1
3.023.033.06aes128gcmv1
7.377.407.44ascon128av12
10.9010.9210.94ascon128v12
10.9310.9610.98ascon80pqv12
11.9511.9812.01T:xoodyakround3
13.7713.7913.83ascon128abi32v12
17.4217.4517.48T:schwaemm256128v2
20.5920.6220.72ascon128bi32v12
22.9322.9823.03T:schwaemm192192v2
23.2023.7923.86T:schwaemm256256v2
24.4124.4424.48T:grain128aeadv2
25.3525.3825.41T:schwaemm128128v2
30.5630.6330.67romulusn
32.3432.3832.43T:isapa128v20
33.9633.9934.02T:isapa128av20
34.2634.2934.32T:giftcofb128v1
41.9442.0042.07romulusm
55.5155.5255.53T:tinyjambu128v2
56.4356.5256.61T:isapk128av20
63.3663.3763.39T:tinyjambu192v2
67.3867.3867.39T:tinyjambu256v2
73.3673.4673.56T:isapk128v20
85.7385.8386.00romulust
128.52128.55128.60T:elephant200v2
132.31132.40132.53T:isapxv20
5089.045089.405091.32T:elephant176v2
5977.605978.105978.47T:elephant160v2
Cycles/byte for long+long forgery
25%50%75%aead
0.730.730.74T:aes128gcmv1
0.910.920.92aes256gcmv1
1.741.751.79aes128gcmv1
7.387.397.42ascon128av12
10.9010.9210.94ascon128v12
10.9210.9510.97ascon80pqv12
11.9812.0012.02T:xoodyakround3
13.7613.7813.81ascon128abi32v12
17.4117.4517.48T:schwaemm256128v2
20.6020.6220.83ascon128bi32v12
21.5921.6221.66T:isapa128v20
22.9322.9723.01T:schwaemm192192v2
23.2023.7923.85T:schwaemm256256v2
24.4124.4424.48T:grain128aeadv2
25.3225.3525.39T:schwaemm128128v2
27.3427.3627.39T:isapa128av20
30.5530.6230.67romulusn
34.2634.2934.33T:giftcofb128v1
41.9342.0042.07romulusm
43.7043.7843.97romulust
45.0545.1645.23T:isapk128av20
55.5155.5255.54T:tinyjambu128v2
56.2856.3756.46T:isapk128v20
63.3563.3663.37T:tinyjambu192v2
67.3867.3867.39T:tinyjambu256v2
98.2398.3298.42T:isapxv20
128.52128.55128.60T:elephant200v2
5089.035089.365091.28T:elephant176v2
5977.705978.115978.53T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
0.400.410.42T:aes128gcmv1
0.410.410.43aes256gcmv1
1.661.691.80aes128gcmv1
7.377.407.43ascon128av12
8.128.148.17T:xoodyakround3
10.8910.9410.97ascon128v12
10.9410.9610.99ascon80pqv12
13.8013.8313.85ascon128abi32v12
17.2517.3017.38T:schwaemm256128v2
20.3520.4920.89ascon128bi32v12
21.5821.6421.70T:isapa128v20
22.6922.7422.80T:schwaemm192192v2
22.8322.9023.07romulusm
22.8223.0323.16romulusn
23.0923.6823.76T:schwaemm256256v2
24.1124.1424.23T:grain128aeadv2
25.1725.2225.32T:schwaemm128128v2
27.3127.3427.38T:isapa128av20
34.7334.7634.80T:giftcofb128v1
43.1343.1443.18T:tinyjambu128v2
43.3143.3243.32T:tinyjambu192v2
43.5243.5943.79romulust
44.7944.9145.04T:isapk128av20
45.5045.5045.50T:tinyjambu256v2
56.0656.2956.49T:isapk128v20
85.3285.3485.38T:elephant200v2
98.0098.3398.65T:isapxv20
3364.033364.393365.50T:elephant176v2
3982.833984.083984.71T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
0.400.410.41aes256gcmv1
0.410.410.42T:aes128gcmv1
1.661.691.77aes128gcmv1
7.337.377.45ascon128av12
8.158.178.20T:xoodyakround3
10.8710.9010.92ascon128v12
10.8910.9510.98ascon80pqv12
13.7913.8113.83ascon128abi32v12
17.2717.3217.37T:schwaemm256128v2
20.3520.3820.46ascon128bi32v12
21.5921.6321.69T:isapa128v20
22.7122.7622.82T:schwaemm192192v2
22.8823.0123.16romulusm
22.9123.1223.16romulusn
23.0723.6823.75T:schwaemm256256v2
24.1024.1224.21T:grain128aeadv2
25.1825.2425.28T:schwaemm128128v2
27.3127.3427.39T:isapa128av20
34.7334.7934.84T:giftcofb128v1
43.1343.1443.15T:tinyjambu128v2
43.3143.3543.35T:tinyjambu192v2
43.5443.6743.84romulust
44.8144.9345.05T:isapk128av20
45.5045.5045.51T:tinyjambu256v2
56.0956.3056.54T:isapk128v20
85.3485.3685.38T:elephant200v2
98.1698.3198.43T:isapxv20
3364.023364.433365.62T:elephant176v2
3982.953984.133984.58T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
0.410.410.42aes256gcmv1
0.410.410.42T:aes128gcmv1
1.671.691.78aes128gcmv1
7.337.377.45ascon128av12
8.148.178.19T:xoodyakround3
10.8710.9010.93ascon128v12
10.9110.9510.98ascon80pqv12
13.7913.8113.82ascon128abi32v12
17.2617.3217.37T:schwaemm256128v2
20.3520.4120.81ascon128bi32v12
21.6021.6721.72T:isapa128v20
22.7222.7822.86T:schwaemm192192v2
22.8222.9823.14romulusn
22.8923.0323.17romulusm
23.0823.6823.75T:schwaemm256256v2
24.1024.1224.22T:grain128aeadv2
25.1925.2525.31T:schwaemm128128v2
27.2927.3427.38T:isapa128av20
34.7334.7834.82T:giftcofb128v1
43.1343.1343.14T:tinyjambu128v2
43.3243.3443.35T:tinyjambu192v2
43.5543.6643.83romulust
44.8344.9445.06T:isapk128av20
45.5045.5045.51T:tinyjambu256v2
56.0856.2856.49T:isapk128v20
85.3385.3685.39T:elephant200v2
98.2198.3598.46T:isapxv20
3364.063364.433365.50T:elephant176v2
3983.133984.363985.14T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
0.950.950.96T:aes128gcmv1
1.111.111.11aes256gcmv1
3.193.223.23aes128gcmv1
7.667.677.69ascon128av12
11.1011.1211.14ascon128v12
11.1211.1411.15ascon80pqv12
12.1712.1812.20T:xoodyakround3
14.2514.2714.28ascon128abi32v12
17.9617.9918.03T:schwaemm256128v2
20.9521.0321.07ascon128bi32v12
23.4523.4823.53T:schwaemm192192v2
23.8824.4324.45T:schwaemm256256v2
24.5224.5424.64T:grain128aeadv2
25.6825.7125.74T:schwaemm128128v2
30.8030.8430.92romulusn
34.5534.5834.61T:giftcofb128v1
36.1336.1736.19T:isapa128av20
42.3942.4242.49romulusm
47.4547.4747.50T:isapa128v20
55.9355.9455.95T:tinyjambu128v2
63.6563.8563.86T:tinyjambu192v2
63.9964.0664.17T:isapk128av20
67.8867.8867.89T:tinyjambu256v2
87.0687.1287.29romulust
128.14128.20128.28T:isapk128v20
131.24131.27131.31T:elephant200v2
214.82214.95215.05T:isapxv20
5127.835128.085129.70T:elephant176v2
6045.056045.476046.05T:elephant160v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
0.880.880.89T:aes128gcmv1
1.101.101.11aes256gcmv1
3.203.213.24aes128gcmv1
7.577.597.61ascon128av12
11.0811.1011.11ascon128v12
11.1111.1311.16ascon80pqv12
12.0912.1112.13T:xoodyakround3
14.0814.1014.13ascon128abi32v12
17.9718.0018.03T:schwaemm256128v2
20.9120.9321.02ascon128bi32v12
23.4323.4723.51T:schwaemm192192v2
23.8724.4224.44T:schwaemm256256v2
24.8324.8424.87T:grain128aeadv2
25.6925.7225.75T:schwaemm128128v2
30.8930.9430.97romulusn
34.6234.6434.67T:giftcofb128v1
36.1036.1536.19T:isapa128av20
42.3042.3542.42romulusm
47.4347.4747.50T:isapa128v20
55.9355.9455.96T:tinyjambu128v2
63.8163.8263.85T:tinyjambu192v2
63.9964.0764.16T:isapk128av20
67.8767.8867.90T:tinyjambu256v2
87.0687.1687.33romulust
128.16128.21128.28T:isapk128v20
131.23131.26131.29T:elephant200v2
214.92215.09215.36T:isapxv20
5128.415129.715130.20T:elephant176v2
6045.236045.676046.07T:elephant160v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
0.880.880.89T:aes128gcmv1
1.101.101.10aes256gcmv1
1.951.972.01aes128gcmv1
7.567.597.62ascon128av12
11.0811.1011.11ascon128v12
11.1111.1311.15ascon80pqv12
12.0712.0812.10T:xoodyakround3
14.0814.1014.12ascon128abi32v12
17.9517.9818.02T:schwaemm256128v2
20.9220.9421.09ascon128bi32v12
23.4523.4723.51T:schwaemm192192v2
23.8824.4224.44T:schwaemm256256v2
24.8224.8324.87T:grain128aeadv2
25.6825.7125.74T:schwaemm128128v2
28.5728.6128.63T:isapa128av20
29.2729.3029.32T:isapa128v20
30.8830.9430.97romulusn
34.6134.6434.66T:giftcofb128v1
42.3042.3542.42romulusm
44.9545.0445.20romulust
49.4449.5149.59T:isapk128av20
55.9355.9455.97T:tinyjambu128v2
63.8063.8163.82T:tinyjambu192v2
67.8767.8767.87T:tinyjambu256v2
84.4584.5084.57T:isapk128v20
131.23131.26131.30T:elephant200v2
140.55140.58140.65T:isapxv20
5128.445128.735129.96T:elephant176v2
6045.316045.566045.87T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
5.875.915.97T:aes128gcmv1
7.227.267.34aes128gcmv1
7.827.847.90aes256gcmv1
11.6311.7012.01ascon128av12
14.7914.8615.07ascon128v12
14.8815.0115.25ascon80pqv12
17.5717.6817.81T:xoodyakround3
21.3121.3821.54ascon128abi32v12
27.5927.8228.11ascon128bi32v12
29.1229.3029.54T:schwaemm256128v2
32.9333.0933.39T:schwaemm128128v2
34.0034.0734.14T:grain128aeadv2
36.9437.0237.17romulusn
37.7738.0138.25T:schwaemm192192v2
37.7138.5038.69T:schwaemm256256v2
42.1342.3142.56T:giftcofb128v1
49.2249.4749.67romulusm
65.5165.5465.67T:tinyjambu128v2
74.2174.2474.26T:tinyjambu192v2
79.0479.0679.12T:tinyjambu256v2
85.6685.8086.04T:isapa128av20
117.46117.68117.91romulust
185.58185.83186.05T:elephant200v2
221.77222.51223.52T:isapk128av20
393.31393.85394.42T:isapa128v20
1367.871368.621369.62T:isapk128v20
2078.552080.022087.41T:isapxv20
6385.656386.986388.22T:elephant176v2
8096.078097.398099.13T:elephant160v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
5.946.006.07T:aes128gcmv1
7.737.797.89aes128gcmv1
8.008.038.07aes256gcmv1
11.6211.7412.10ascon128av12
14.8214.9015.12ascon80pqv12
14.8514.9415.10ascon128v12
17.5617.6717.79T:xoodyakround3
21.0721.1721.40ascon128abi32v12
27.8027.8828.19ascon128bi32v12
29.1129.3529.61T:schwaemm256128v2
32.9133.1033.35T:schwaemm128128v2
34.2934.3634.43T:grain128aeadv2
36.8536.9737.10romulusn
37.7338.0138.28T:schwaemm192192v2
37.7038.5538.66T:schwaemm256256v2
42.2342.4142.53T:giftcofb128v1
50.6950.8550.94romulusm
65.6065.6265.66T:tinyjambu128v2
74.2674.2874.30T:tinyjambu192v2
79.1179.1379.19T:tinyjambu256v2
85.6785.8386.07T:isapa128av20
117.45117.72117.91romulust
185.57185.71185.89T:elephant200v2
221.68222.34223.68T:isapk128av20
393.62394.04394.44T:isapa128v20
1368.951369.711370.45T:isapk128v20
2088.242089.092090.35T:isapxv20
6385.686386.626388.55T:elephant176v2
8095.408097.258099.40T:elephant160v2
Cycles/byte for 64+64 forgery
25%50%75%aead
5.925.976.03T:aes128gcmv1
6.276.336.37aes128gcmv1
8.108.148.19aes256gcmv1
11.6011.6811.80ascon128av12
14.8014.8715.02ascon80pqv12
14.8314.9415.04ascon128v12
17.6117.6817.76T:xoodyakround3
21.0821.1421.25ascon128abi32v12
27.8527.9228.22ascon128bi32v12
29.0229.1929.43T:schwaemm256128v2
32.9333.1333.28T:schwaemm128128v2
34.2734.3334.39T:grain128aeadv2
36.8336.9737.08romulusn
37.6137.9838.26T:schwaemm192192v2
37.6838.4938.63T:schwaemm256256v2
42.2242.3242.47T:giftcofb128v1
50.7250.8050.97romulusm
57.0057.1857.35T:isapa128av20
65.6065.6165.62T:tinyjambu128v2
73.5773.8274.03romulust
74.2674.2874.29T:tinyjambu192v2
79.1179.1379.16T:tinyjambu256v2
137.73138.36138.90T:isapk128av20
185.53185.77185.92T:elephant200v2
205.12205.43205.71T:isapa128v20
716.27716.96717.85T:isapk128v20
1093.041093.481094.10T:isapxv20
6386.466387.576388.62T:elephant176v2
8096.918098.798100.32T:elephant160v2