VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Core 2 65nm (6fb); 2007 Intel Core 2 Duo T7300; 2 x 2000MHz; trident, supercop-20260330

[Page version: 20260503 04:13:14]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
10.2010.2010.20ascon128av12
15.2815.2815.28ascon128v12
15.3015.3015.30ascon80pqv12
16.8316.9017.05T:aes128gcmv1
19.1919.2319.25ascon128abi32v12
19.9320.0920.31T:aes256gcmv1
28.71?29.12?32.74?T:xoodyakround3
29.1629.1629.16ascon128bi32v12
32.5932.7132.73T:schwaemm256128v2
42.5942.6742.84T:schwaemm192192v2
45.1245.3745.43T:schwaemm128128v2
45.3445.5346.10T:schwaemm256256v2
54.7554.9655.11T:giftcofb128v1
58.8558.8558.94T:isapa128v20
60.6860.6860.69T:isapa128av20
61.9161.9862.09T:grain128aeadv2
72.5072.7372.83romulusn
77.5077.6177.99T:tinyjambu128v2
93.9193.9694.14T:tinyjambu192v2
100.07100.07100.07T:tinyjambu256v2
118.31118.52118.53romulusm
234.62234.66236.68T:isapk128av20
241.26241.41241.70T!!!romulust
258.90262.14280.41T:elephant200v2
311.49314.42322.43T:isapk128v20
372.56?395.28?418.76?T:isapxv20
13098.4213104.9213122.39T:elephant176v2
14896.9214904.8514920.47T:elephant160v2
36075.9036096.1536141.36aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
10.3110.3110.31ascon128av12
15.0915.1015.13ascon128v12
15.2515.2515.25ascon80pqv12
16.8316.9317.02T:aes128gcmv1
19.2819.2819.29ascon128abi32v12
19.8920.0720.26T:aes256gcmv1
28.3928.3928.39ascon128bi32v12
28.15?28.48?31.87?T:xoodyakround3
32.1932.2632.35T:schwaemm256128v2
42.8642.9943.07T:schwaemm192192v2
45.3245.4745.98T:schwaemm128128v2
45.3245.5946.28T:schwaemm256256v2
54.9154.9554.99T:giftcofb128v1
59.0459.0759.12T:isapa128v20
60.7460.7560.75T:isapa128av20
66.9266.9667.00T:grain128aeadv2
72.5572.7073.06romulusn
78.2478.2578.49T:tinyjambu128v2
94.1094.4294.70T:tinyjambu192v2
96.8296.8299.24T:tinyjambu256v2
117.48117.65117.71romulusm
234.65234.68236.20T:isapk128av20
241.26241.35241.67T!!!romulust
258.89262.08280.85T:elephant200v2
311.63314.58320.65T:isapk128v20
355.99?406.30?684.06?T:isapxv20
13100.6313106.0513119.85T:elephant176v2
14898.7414904.4114918.22T:elephant160v2
35737.7935758.1935853.31aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
10.3110.3110.31ascon128av12
15.2315.2315.24ascon80pqv12
15.3015.3015.30ascon128v12
16.8416.9317.03T:aes128gcmv1
19.2819.2819.29ascon128abi32v12
19.9420.0720.18T:aes256gcmv1
28.3828.3828.39ascon128bi32v12
28.21?28.50?31.68?T:xoodyakround3
29.2429.2429.25T:isapa128v20
32.2232.2932.42T:schwaemm256128v2
41.2641.2741.27T:isapa128av20
42.8242.9843.07T:schwaemm192192v2
45.3745.5045.85T:schwaemm128128v2
45.3245.5546.18T:schwaemm256256v2
54.8954.9454.99T:giftcofb128v1
66.9166.9566.99T:grain128aeadv2
72.5572.7173.06romulusn
78.2478.2578.30T:tinyjambu128v2
81.8681.8881.98T!!!romulust
94.1394.6294.71T:tinyjambu192v2
96.8296.8298.79T:tinyjambu256v2
117.48117.64117.70romulusm
159.02159.06159.27T:isapk128av20
200.29200.62203.58T:isapk128v20
205.77?251.00?510.72?T:isapxv20
258.89262.08281.21T:elephant200v2
990.74996.291001.67aes256gcmv1
13097.9313104.2113115.91T:elephant176v2
14898.5714905.1614916.86T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
10.1110.1210.12ascon128av12
12.4412.4712.54T:aes128gcmv1
14.0514.0914.14T:aes256gcmv1
15.1015.1015.10ascon128v12
15.1715.1715.17ascon80pqv12
19.1219.1419.14ascon128abi32v12
22.15?22.39?25.04?T:xoodyakround3
28.7328.7328.74ascon128bi32v12
32.1832.2732.36T:schwaemm256128v2
42.5042.5542.65T:schwaemm192192v2
44.0344.1344.31T:isapa128v20
44.9244.9645.04T:schwaemm128128v2
45.4845.6345.84T:schwaemm256256v2
50.9750.9850.98T:isapa128av20
54.4854.4954.66T:giftcofb128v1
58.7158.7758.98romulusn
62.0762.1262.22T:grain128aeadv2
62.7662.8662.97T:tinyjambu128v2
73.8573.8873.93T:tinyjambu192v2
74.8074.8074.96T:tinyjambu256v2
81.5981.6481.71romulusm
161.31161.38161.68T!!!romulust
192.35192.42194.74T:isapk128av20
194.77197.96210.06T:elephant200v2
250.05252.74254.60T:isapk128v20
306.50316.62331.25T:isapxv20
9789.489795.779803.68T:elephant176v2
11176.8011181.5011199.02T:elephant160v2
18535.0818542.7818555.29aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
10.1710.1710.18ascon128av12
12.4312.5112.56T:aes128gcmv1
14.0314.0714.15T:aes256gcmv1
15.1115.1115.11ascon80pqv12
15.1415.1415.16ascon128v12
19.1419.1519.19ascon128abi32v12
21.90?22.11?24.75?T:xoodyakround3
28.3128.3128.34ascon128bi32v12
32.1232.1432.21T:schwaemm256128v2
42.6042.6742.71T:schwaemm192192v2
43.9144.0944.38T:isapa128v20
45.0845.1245.18T:schwaemm128128v2
45.4945.6646.16T:schwaemm256256v2
50.9850.9851.02T:isapa128av20
54.5454.5754.66T:giftcofb128v1
58.7658.8758.96romulusn
63.2863.3163.45T:tinyjambu128v2
64.4864.5264.57T:grain128aeadv2
73.8974.1174.22T:tinyjambu192v2
74.8774.9175.28T:tinyjambu256v2
81.2081.3281.37romulusm
161.27161.36161.60T!!!romulust
192.32192.44194.73T:isapk128av20
194.91197.57210.36T:elephant200v2
249.85253.27255.04T:isapk128v20
291.47?329.30?588.17?T:isapxv20
9788.689797.079805.57T:elephant176v2
11175.5211179.1011185.79T:elephant160v2
18369.2718378.5318397.18aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
10.1710.1810.18ascon128av12
12.4212.4812.56T:aes128gcmv1
14.0214.0914.26T:aes256gcmv1
15.0515.0515.06ascon80pqv12
15.1715.1715.17ascon128v12
19.1419.1519.19ascon128abi32v12
21.93?22.15?24.77?T:xoodyakround3
28.3128.3128.32ascon128bi32v12
29.3029.3029.32T:isapa128v20
32.1232.1432.20T:schwaemm256128v2
41.2341.2341.23T:isapa128av20
42.5742.6442.70T:schwaemm192192v2
45.0745.1645.24T:schwaemm128128v2
45.4845.7946.17T:schwaemm256256v2
54.5454.5854.65T:giftcofb128v1
58.7458.8358.95romulusn
63.2963.2963.33T:tinyjambu128v2
64.4964.5364.58T:grain128aeadv2
73.8774.1374.19T:tinyjambu192v2
74.8975.0075.20T:tinyjambu256v2
81.2081.3281.36romulusm
81.5881.6781.82T!!!romulust
154.57154.64157.35T:isapk128av20
194.34194.55197.69T:isapk128v20
194.87198.10210.23T:elephant200v2
217.78?253.04?505.73?T:isapxv20
992.61996.95999.80aes256gcmv1
9792.369800.039842.21T:elephant176v2
11176.8711180.4111185.65T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
8.048.108.13T:aes128gcmv1
7.968.118.27T:aes256gcmv1
10.0610.0610.06ascon128av12
14.9114.9114.91ascon128v12
15.0215.0215.03ascon80pqv12
15.47?15.64?17.31?T:xoodyakround3
19.0519.0519.07ascon128abi32v12
28.3428.3428.36ascon128bi32v12
29.3029.3229.45T:isapa128v20
31.9532.0532.09T:schwaemm256128v2
41.2041.2041.20T:isapa128av20
42.3742.3942.44T:schwaemm192192v2
44.5444.7544.93T:schwaemm128128v2
44.8744.8944.90romulusn
44.9545.1345.14romulusm
45.5945.6745.72T:schwaemm256256v2
48.3648.3648.36T:tinyjambu128v2
50.0550.0550.30T:tinyjambu256v2
53.8053.8753.89T:tinyjambu192v2
54.1654.1854.19T:giftcofb128v1
62.1062.2062.23T:grain128aeadv2
81.2981.3181.41T!!!romulust
131.12132.95142.79T:elephant200v2
150.11150.13150.31T:isapk128av20
188.12188.38192.02T:isapk128v20
227.84240.01247.29T:isapxv20
992.42998.571000.70aes256gcmv1
6466.266477.976484.55T:elephant176v2
7442.987450.027457.26T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
7.918.128.29T:aes256gcmv1
8.068.148.28T:aes128gcmv1
10.0510.0510.05ascon128av12
14.9614.9614.96ascon128v12
15.0515.1315.22ascon80pqv12
15.53?15.76?17.60?T:xoodyakround3
19.0019.0219.09ascon128abi32v12
28.2128.5328.86ascon128bi32v12
29.2529.2729.30T:isapa128v20
32.0032.0332.09T:schwaemm256128v2
41.1941.2041.22T:isapa128av20
42.2942.3142.35T:schwaemm192192v2
44.7544.8144.86T:schwaemm128128v2
44.8744.8844.90romulusn
44.8845.0445.12romulusm
45.6545.7245.74T:schwaemm256256v2
48.3648.3648.36T:tinyjambu128v2
49.8249.8250.17T:tinyjambu256v2
53.6053.6853.75T:tinyjambu192v2
54.1754.2054.41T:giftcofb128v1
61.7462.0062.12T:grain128aeadv2
81.2781.3081.33T!!!romulust
131.01133.02142.15T:elephant200v2
150.10150.11150.36T:isapk128av20
187.93188.37192.23T:isapk128v20
208.07?252.17?511.87?T:isapxv20
993.03998.751004.47aes256gcmv1
6465.536474.686481.63T:elephant176v2
7444.047450.297455.68T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
7.878.108.28T:aes256gcmv1
8.088.158.25T:aes128gcmv1
10.0510.0510.05ascon128av12
14.8914.9014.99ascon80pqv12
14.9514.9614.96ascon128v12
15.54?15.71?17.49?T:xoodyakround3
18.9919.0219.09ascon128abi32v12
28.2328.2428.32ascon128bi32v12
29.2629.2729.27T:isapa128v20
32.0032.0432.08T:schwaemm256128v2
41.2041.2041.21T:isapa128av20
42.2942.3042.35T:schwaemm192192v2
44.7644.8344.87T:schwaemm128128v2
44.8644.8844.89romulusn
44.9145.0945.13romulusm
45.6545.7245.75T:schwaemm256256v2
48.3548.3648.36T:tinyjambu128v2
49.8249.8250.31T:tinyjambu256v2
53.6453.7253.80T:tinyjambu192v2
54.1754.1954.24T:giftcofb128v1
61.7461.9862.12T:grain128aeadv2
81.2781.3081.39T!!!romulust
131.05132.13142.03T:elephant200v2
150.07150.11150.30T:isapk128av20
188.15188.39191.06T:isapk128v20
207.75?251.66?511.06?T:isapxv20
992.71997.781000.14aes256gcmv1
6466.076474.276482.56T:elephant176v2
7443.037450.357456.23T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
10.3610.3610.36ascon128av12
15.2415.2515.33T:aes128gcmv1
15.3115.3115.31ascon128v12
15.3915.3915.39ascon80pqv12
17.0317.0417.21T:aes256gcmv1
19.5719.5819.59ascon128abi32v12
22.61?22.67?25.15?T:xoodyakround3
29.1829.1829.19ascon128bi32v12
33.2333.2833.34T:schwaemm256128v2
43.5043.5343.63T:schwaemm192192v2
45.5845.6545.68T:schwaemm128128v2
46.7046.7546.96T:schwaemm256256v2
54.4254.4254.42T:isapa128av20
55.0555.0655.13T:giftcofb128v1
59.2859.3259.49romulusn
62.4762.5262.62T:grain128aeadv2
63.4163.4663.48T:tinyjambu128v2
64.4064.4464.51T:isapa128v20
74.4674.5074.52T:tinyjambu192v2
75.3875.3875.58T:tinyjambu256v2
82.1682.2682.34romulusm
163.68163.72163.91T!!!romulust
199.88202.32214.73T:elephant200v2
216.70216.73218.43T:isapk128av20
432.06433.00436.67T:isapk128v20
526.61530.57541.76T:isapxv20
9862.029867.039873.63T:elephant176v2
11302.8111305.7611309.47T:elephant160v2
18909.4318915.8218924.55aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
10.4110.4110.41ascon128av12
15.1815.2215.31T:aes128gcmv1
15.3715.3715.37ascon80pqv12
15.3815.3815.38ascon128v12
16.9917.0017.03T:aes256gcmv1
19.5819.6119.63ascon128abi32v12
22.3822.4124.69T:xoodyakround3
28.7928.7928.92ascon128bi32v12
33.1133.1333.16T:schwaemm256128v2
43.5843.6643.67T:schwaemm192192v2
45.6745.7445.87T:schwaemm128128v2
46.8146.8647.35T:schwaemm256256v2
54.4154.4154.41T:isapa128av20
55.0755.1155.14T:giftcofb128v1
59.3459.4259.52romulusn
63.7563.7763.89T:tinyjambu128v2
64.3764.4164.54T:isapa128v20
64.9164.9565.01T:grain128aeadv2
74.4874.7174.76T:tinyjambu192v2
75.4875.4875.81T:tinyjambu256v2
81.8681.9982.03romulusm
163.67163.73163.95T!!!romulust
199.92201.41213.59T:elephant200v2
216.70216.73218.43T:isapk128av20
432.09433.02436.37T:isapk128v20
530.39?542.02?787.30?T:isapxv20
9861.089866.269870.71T:elephant176v2
11301.1411303.4211309.84T:elephant160v2
18744.9918750.7318761.93aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
10.4110.4110.41ascon128av12
15.1615.1915.25T:aes128gcmv1
15.3715.3715.37ascon80pqv12
15.4315.4315.43ascon128v12
16.9216.9717.01T:aes256gcmv1
19.5919.6019.63ascon128abi32v12
22.4322.5224.92T:xoodyakround3
28.7928.7928.86ascon128bi32v12
33.1033.1333.20T:schwaemm256128v2
39.6239.6239.68T:isapa128v20
43.2043.2043.21T:isapa128av20
43.5943.6343.66T:schwaemm192192v2
45.6745.7445.88T:schwaemm128128v2
46.8146.9747.28T:schwaemm256256v2
55.0755.1155.15T:giftcofb128v1
59.3359.4159.52romulusn
63.7563.7563.89T:tinyjambu128v2
64.9164.9364.99T:grain128aeadv2
74.4174.7174.75T:tinyjambu192v2
75.4875.4875.69T:tinyjambu256v2
81.8782.0082.03romulusm
83.8983.9283.97T!!!romulust
169.33169.35170.24T:isapk128av20
199.97201.98214.00T:elephant200v2
288.22288.41291.96T:isapk128v20
349.29?360.88?597.87?T:isapxv20
1362.951363.341366.29aes256gcmv1
9859.949864.969870.17T:elephant176v2
11302.0911305.6811311.56T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
15.8215.8315.96ascon128av12
20.0520.0520.10ascon128v12
20.5020.5020.50ascon80pqv12
29.3229.3529.35ascon128abi32v12
34.5734.9737.99T:xoodyakround3
39.5139.5139.51ascon128bi32v12
55.1255.1955.42T:schwaemm256128v2
59.9860.3060.37T:schwaemm128128v2
67.4367.6767.85T:giftcofb128v1
70.6171.0571.35T:grain128aeadv2
71.4771.5671.65T:schwaemm192192v2
71.3871.6171.92romulusn
74.4574.4574.48T:tinyjambu128v2
74.2974.5075.40T:schwaemm256256v2
80.1780.6181.24T:aes128gcmv1
88.3088.3088.53T:tinyjambu256v2
88.3988.4388.60T:tinyjambu192v2
89.9990.9092.13T:aes256gcmv1
94.3994.6094.75romulusm
133.41133.41133.45T:isapa128av20
218.56218.89219.24T!!!romulust
283.25284.68300.64T:elephant200v2
529.98530.30533.38T:isapa128v20
737.62737.67739.79T:isapk128av20
4545.184545.474566.09T:isapk128v20
5315.395354.285600.63T:isapxv20
12245.1512288.0412346.38T:elephant176v2
15079.9715162.0815172.93T:elephant160v2
27417.9927425.3127477.66aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
15.7015.7015.76ascon128av12
20.5920.5920.60ascon128v12
20.7220.7220.74ascon80pqv12
29.4029.5129.57ascon128abi32v12
34.5734.7937.56T:xoodyakround3
39.3439.5240.21ascon128bi32v12
55.0055.0855.17T:schwaemm256128v2
59.6059.8860.10T:schwaemm128128v2
67.2867.4667.90T:giftcofb128v1
71.3071.4971.74T:schwaemm192192v2
71.8172.1372.42romulusn
73.4373.4973.74T:grain128aeadv2
74.7974.7974.79T:tinyjambu128v2
75.2275.4076.43T:schwaemm256256v2
80.2280.6581.56T:aes128gcmv1
87.9187.9187.98T:tinyjambu192v2
88.6688.6688.89T:tinyjambu256v2
91.0091.8693.19T:aes256gcmv1
97.1697.1997.48romulusm
133.33133.33133.39T:isapa128av20
218.46218.80219.18T!!!romulust
283.72285.05301.87T:elephant200v2
530.05531.07534.14T:isapa128v20
737.73737.80737.92T:isapk128av20
4545.434546.434577.43T:isapk128v20
5324.96?5360.72?5922.60?T:isapxv20
12247.0512303.9212344.05T:elephant176v2
15087.9415165.6415185.68T:elephant160v2
27182.8427188.8027196.45aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
15.7015.7015.71ascon128av12
20.5820.5820.58ascon128v12
20.7220.7220.72ascon80pqv12
29.3629.4529.59ascon128abi32v12
34.9135.1037.63T:xoodyakround3
39.4239.4639.52ascon128bi32v12
54.9955.0855.33T:schwaemm256128v2
59.6059.7460.08T:schwaemm128128v2
67.2867.4167.84T:giftcofb128v1
71.2671.4571.70T:schwaemm192192v2
71.8072.0772.38romulusn
73.4373.5273.71T:grain128aeadv2
74.7774.7774.77T:tinyjambu128v2
75.2375.8376.45T:schwaemm256256v2
80.0880.9782.60T:aes128gcmv1
87.9187.9488.02T:tinyjambu192v2
88.3088.3088.30T:isapa128av20
88.6688.6688.66T:tinyjambu256v2
89.9990.9392.87T:aes256gcmv1
97.1697.1997.48romulusm
136.68136.96137.37T!!!romulust
275.92275.92277.42T:isapa128v20
283.57285.04300.53T:elephant200v2
478.07478.11478.61T:isapk128av20
2405.402405.602409.53T:isapk128v20
2787.81?2813.58?3258.11?T:isapxv20
9776.979792.669869.98aes256gcmv1
12243.7012287.9312343.69T:elephant176v2
15084.9415165.0115181.61T:elephant160v2