VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Core 2 65nm (6fb); 2007 Intel Core 2 Duo T7300; 2 x 2000MHz; trident, supercop-20241022

[Page version: 20241120 00:41:35]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
10.5810.5910.60ascon128av12
15.3115.3215.32ascon80pqv12
15.3515.3615.36ascon128v12
19.9219.9319.93ascon128abi32v12
29.0429.0529.05ascon128bi32v12
30.8331.3431.71T:aes128gcmv1
31.5331.5531.60T:xoodyakround3
34.0534.1734.23T:schwaemm256128v2
39.9840.0340.12T:aes256gcmv1
44.4044.4944.88T:schwaemm256256v2
45.3545.4645.57T:schwaemm192192v2
47.5647.6747.84T:schwaemm128128v2
53.6853.7653.82T:giftcofb128v1
62.6662.7664.64T:grain128aeadv2
63.3663.4063.60T:isapa128av20
66.3766.7267.91T:isapa128v20
74.2174.3874.68romulusn
78.9979.0279.15T:tinyjambu128v2
94.4294.6294.69T:tinyjambu192v2
102.57102.85102.87T:tinyjambu256v2
119.52119.72120.23romulusm
229.66229.98230.07T!!!romulust
237.52237.68238.39T:isapk128av20
253.37253.99254.25T:elephant200v2
326.56327.69327.85T:isapk128v20
333.26?372.04?643.55?T:isapxv20
12971.8112998.6713087.98T:elephant176v2
14772.4614778.1914785.13T:elephant160v2
33394.3233404.7033417.47aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
10.2610.2710.29ascon128av12
15.2615.2715.29ascon128v12
15.2415.2715.30ascon80pqv12
20.6220.6320.67ascon128abi32v12
29.3429.3529.35ascon128bi32v12
31.0831.1231.16T:aes128gcmv1
31.1031.3431.61T:xoodyakround3
34.0534.0934.20T:schwaemm256128v2
39.8839.9539.97T:aes256gcmv1
44.4244.9045.79T:schwaemm256256v2
44.8745.2545.42T:schwaemm192192v2
47.5047.6047.69T:schwaemm128128v2
53.1853.4953.50T:giftcofb128v1
63.3863.4763.59T:isapa128av20
66.3666.8068.04T:isapa128v20
61.13?68.95?74.05?T:grain128aeadv2
73.5573.6873.74romulusn
78.7278.7878.88T:tinyjambu128v2
94.3094.3894.73T:tinyjambu192v2
102.65102.89103.01T:tinyjambu256v2
119.49120.03120.37romulusm
229.90230.29231.42T!!!romulust
237.46237.63238.05T:isapk128av20
253.70254.08254.26T:elephant200v2
326.54327.59327.77T:isapk128v20
333.26?372.43?643.55?T:isapxv20
12973.0812999.1213087.10T:elephant176v2
14781.8714784.6114789.65T:elephant160v2
33391.2133394.3933407.08aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
10.2710.2810.31ascon128av12
15.2115.2315.23ascon80pqv12
15.2715.2715.29ascon128v12
20.6420.6420.64ascon128abi32v12
29.3429.3429.35ascon128bi32v12
31.0631.1431.17T:aes128gcmv1
31.1731.4031.70T:xoodyakround3
33.7033.7133.72T:isapa128v20
34.0934.1234.22T:schwaemm256128v2
39.8939.9540.00T:aes256gcmv1
41.5341.5541.77T:isapa128av20
44.4044.6445.12T:schwaemm256256v2
45.2345.3845.47T:schwaemm192192v2
47.5047.6047.71T:schwaemm128128v2
53.4753.5153.60T:giftcofb128v1
61.23?68.91?74.08?T:grain128aeadv2
73.5673.6773.74romulusn
78.7678.8178.87T:tinyjambu128v2
78.7678.9479.74T!!!romulust
94.3094.7194.80T:tinyjambu192v2
102.78102.92103.06T:tinyjambu256v2
119.91120.01120.13romulusm
162.11162.18162.20T:isapk128av20
201.40202.12202.88T:isapk128v20
203.71?206.07?227.07?T:isapxv20
253.37253.99254.25T:elephant200v2
859.67861.80869.92aes256gcmv1
12971.3512997.9913086.87T:elephant176v2
14773.6114778.4314785.99T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
10.3510.3710.38ascon128av12
15.1115.1315.13ascon128v12
15.1415.1615.23ascon80pqv12
19.4419.4619.90T:aes128gcmv1
19.6619.6819.72ascon128abi32v12
23.5723.6023.62T:xoodyakround3
24.0024.0424.06T:aes256gcmv1
29.1329.1429.15ascon128bi32v12
34.0634.1134.15T:schwaemm256128v2
44.3744.4844.66T:schwaemm256256v2
45.2245.2745.32T:schwaemm192192v2
47.2547.3447.54T:schwaemm128128v2
49.9950.1750.48T:isapa128v20
52.5152.5852.66T:isapa128av20
53.1853.2253.27T:giftcofb128v1
59.6459.7059.95romulusn
62.1462.3164.19T:grain128aeadv2
64.7264.7964.80T:tinyjambu128v2
74.1874.3274.51T:tinyjambu192v2
78.0078.0478.14T:tinyjambu256v2
82.4982.7182.94romulusm
154.26154.69154.91T!!!romulust
184.39185.20190.91T:elephant200v2
202.80202.94203.42T:isapk128av20
266.82267.69267.81T:isapk128v20
270.35?299.69?425.30?T:isapxv20
9689.289708.589781.86T:elephant176v2
11083.2111092.4511097.92T:elephant160v2
17127.4417128.1717136.71aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
10.2010.2110.27ascon128av12
15.0815.0915.09ascon80pqv12
15.2215.2315.27ascon128v12
19.5819.6019.61T:aes128gcmv1
20.0420.0520.05ascon128abi32v12
23.3123.3723.61T:xoodyakround3
24.0024.0324.24T:aes256gcmv1
29.0229.0329.29ascon128bi32v12
34.0634.1134.47T:schwaemm256128v2
44.4044.5944.90T:schwaemm256256v2
45.0145.2045.38T:schwaemm192192v2
47.4347.4547.66T:schwaemm128128v2
50.1650.3050.42T:isapa128v20
52.5452.6652.86T:isapa128av20
53.1253.2153.38T:giftcofb128v1
59.3159.4059.59romulusn
64.5864.6364.65T:tinyjambu128v2
61.21?67.05?72.97?T:grain128aeadv2
74.0774.1874.41T:tinyjambu192v2
77.9578.0778.15T:tinyjambu256v2
82.6382.6982.94romulusm
154.27154.37155.27T!!!romulust
184.37185.36190.95T:elephant200v2
202.78202.93203.31T:isapk128av20
267.11267.51268.10T:isapk128v20
270.30?299.70?425.62?T:isapxv20
9689.409708.679780.92T:elephant176v2
11088.1011091.8911097.26T:elephant160v2
17126.7317128.2517136.68aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
10.2110.2210.22ascon128av12
15.0915.0915.09ascon80pqv12
15.2315.2315.23ascon128v12
19.5619.6019.62T:aes128gcmv1
20.0320.0320.03ascon128abi32v12
23.3523.4023.65T:xoodyakround3
23.9824.0124.03T:aes256gcmv1
29.0329.0429.04ascon128bi32v12
33.7133.7133.71T:isapa128v20
34.0734.0934.13T:schwaemm256128v2
41.6341.9442.18T:isapa128av20
44.3944.5144.62T:schwaemm256256v2
45.0245.1645.26T:schwaemm192192v2
47.3447.4647.75T:schwaemm128128v2
53.2753.3853.40T:giftcofb128v1
59.3159.4159.72romulusn
64.6164.6464.69T:tinyjambu128v2
61.11?67.05?72.96?T:grain128aeadv2
74.1074.1774.44T:tinyjambu192v2
77.9378.0178.11T:tinyjambu256v2
78.8879.1479.68T!!!romulust
82.6282.8782.92romulusm
165.10165.12165.49T:isapk128av20
184.36185.49190.93T:elephant200v2
204.64205.07205.46T:isapk128v20
204.63?206.64?227.65?T:isapxv20
860.92862.01870.54aes256gcmv1
9689.969708.339780.05T:elephant176v2
11089.5911093.4511097.61T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
7.998.088.12T:aes256gcmv1
8.068.088.11T:aes128gcmv1
10.0710.1010.15ascon128av12
15.0115.0215.02ascon80pqv12
15.0115.0215.02ascon128v12
15.5415.5815.61T:xoodyakround3
19.4219.4519.45ascon128abi32v12
29.2329.2529.26ascon128bi32v12
33.4433.6533.85T:isapa128v20
33.9634.0334.10T:schwaemm256128v2
41.7941.8141.85T:isapa128av20
44.2044.3844.63T:schwaemm256256v2
45.0645.1245.22T:schwaemm192192v2
45.2045.2445.39romulusm
45.1045.4245.51romulusn
46.9047.2547.38T:schwaemm128128v2
50.4550.4750.49T:tinyjambu128v2
52.7752.7852.79T:giftcofb128v1
53.3053.3853.45T:tinyjambu256v2
53.6654.1554.29T:tinyjambu192v2
61.9062.0763.72T:grain128aeadv2
78.4578.5979.22T!!!romulust
128.32128.54128.93T:elephant200v2
168.07168.13168.77T:isapk128av20
204.84?207.34?228.62?T:isapxv20
207.60207.75208.52T:isapk128v20
860.16863.01878.72aes256gcmv1
6407.866420.376464.21T:elephant176v2
7394.947396.757399.24T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
8.078.098.12T:aes256gcmv1
8.078.098.12T:aes128gcmv1
10.1010.1310.15ascon128av12
15.0415.0515.05ascon80pqv12
15.0715.0815.08ascon128v12
15.5115.5815.60T:xoodyakround3
19.4719.4819.48ascon128abi32v12
28.8928.9029.20ascon128bi32v12
33.4933.4933.72T:isapa128v20
34.0034.0734.13T:schwaemm256128v2
41.8141.8342.25T:isapa128av20
44.3744.4644.62T:schwaemm256256v2
44.9445.0645.26T:schwaemm192192v2
45.2445.3445.46romulusm
45.2145.4945.51romulusn
47.0847.2547.49T:schwaemm128128v2
50.4350.4550.49T:tinyjambu128v2
52.7452.7953.37T:giftcofb128v1
53.3353.3753.38T:tinyjambu256v2
53.8853.9654.01T:tinyjambu192v2
61.07?66.38?72.20?T:grain128aeadv2
78.4178.7079.66T!!!romulust
128.32128.56128.93T:elephant200v2
168.04168.11168.92T:isapk128av20
204.83?207.16?228.58?T:isapxv20
207.60207.73208.84T:isapk128v20
861.34871.22888.83aes256gcmv1
6407.876420.616464.44T:elephant176v2
7392.837397.427398.42T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
8.018.088.15T:aes128gcmv1
8.058.098.11T:aes256gcmv1
10.1210.1410.15ascon128av12
15.0515.0515.05ascon80pqv12
15.0815.0815.08ascon128v12
15.5015.5515.61T:xoodyakround3
19.4519.4519.45ascon128abi32v12
28.9028.9228.92ascon128bi32v12
33.4933.4933.70T:isapa128v20
34.0134.0334.10T:schwaemm256128v2
41.8041.8342.21T:isapa128av20
44.3844.7445.25T:schwaemm256256v2
44.9945.0945.18T:schwaemm192192v2
45.2445.3245.35romulusm
45.4245.5145.51romulusn
46.7347.2247.32T:schwaemm128128v2
50.4550.4550.49T:tinyjambu128v2
52.7952.8252.83T:giftcofb128v1
53.3153.3853.39T:tinyjambu256v2
53.8854.0054.04T:tinyjambu192v2
61.23?66.39?72.26?T:grain128aeadv2
78.4378.5479.64T!!!romulust
128.37128.87128.92T:elephant200v2
168.04168.09168.56T:isapk128av20
204.83?206.85?228.59?T:isapxv20
207.27207.72208.32T:isapk128v20
861.35872.98885.03aes256gcmv1
6408.086420.106464.34T:elephant176v2
7395.667397.527399.06T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
10.5910.6010.62ascon128av12
15.3415.3415.34ascon128v12
15.3915.3915.40ascon80pqv12
20.1320.1320.15ascon128abi32v12
20.5720.6220.94T:aes128gcmv1
23.8123.8223.84T:xoodyakround3
25.2425.2625.27T:aes256gcmv1
29.6129.6129.61ascon128bi32v12
35.1935.2135.25T:schwaemm256128v2
45.7846.1846.42T:schwaemm256256v2
46.2746.2946.32T:schwaemm192192v2
47.9448.0248.19T:schwaemm128128v2
53.7453.7653.79T:giftcofb128v1
56.6456.6856.73T:isapa128av20
60.2260.3260.60romulusn
62.7262.8664.51T:grain128aeadv2
65.2765.3165.36T:tinyjambu128v2
73.4473.6874.28T:isapa128v20
74.9275.0475.12T:tinyjambu192v2
78.6278.6678.69T:tinyjambu256v2
83.1683.4183.57romulusm
156.76157.16157.43T!!!romulust
188.72190.52194.90T:elephant200v2
228.01228.07228.65T:isapk128av20
449.87450.25450.46T:isapk128v20
464.13?483.91?600.91?T:isapxv20
9769.249783.309844.16T:elephant176v2
11215.8511220.3511223.47T:elephant160v2
17473.4817475.1417480.74aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
10.4410.4610.49ascon128av12
15.3215.3215.32ascon80pqv12
15.4515.4515.46ascon128v12
20.4820.4820.48ascon128abi32v12
20.6320.6420.65T:aes128gcmv1
23.6323.6923.82T:xoodyakround3
25.1925.1925.20T:aes256gcmv1
29.8429.8429.84ascon128bi32v12
35.1835.2035.25T:schwaemm256128v2
45.8445.9346.21T:schwaemm256256v2
46.0346.1046.25T:schwaemm192192v2
48.0548.1148.27T:schwaemm128128v2
53.5553.7053.88T:giftcofb128v1
56.6656.7256.80T:isapa128av20
59.9660.0160.05romulusn
65.1365.1665.32T:tinyjambu128v2
62.31?67.71?72.66?T:grain128aeadv2
73.5373.6073.69T:isapa128v20
74.7274.7874.83T:tinyjambu192v2
78.5678.5878.70T:tinyjambu256v2
83.3683.4283.61romulusm
156.73157.06157.79T!!!romulust
188.73190.28194.92T:elephant200v2
228.00228.20228.65T:isapk128av20
449.93450.19450.50T:isapk128v20
464.12?483.80?600.94?T:isapxv20
9768.929783.509843.94T:elephant176v2
11214.0411219.9111223.69T:elephant160v2
17471.2517472.1117479.95aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
10.4510.4610.49ascon128av12
15.3215.3215.32ascon80pqv12
15.4515.4515.45ascon128v12
20.4720.4720.47ascon128abi32v12
20.6520.6620.68T:aes128gcmv1
23.6823.7523.88T:xoodyakround3
25.2025.2225.23T:aes256gcmv1
29.5229.5329.86ascon128bi32v12
35.2035.2135.30T:schwaemm256128v2
43.9344.0844.08T:isapa128av20
45.5445.5445.55T:isapa128v20
45.7946.0046.24T:schwaemm256256v2
46.0646.0846.12T:schwaemm192192v2
48.0148.0548.26T:schwaemm128128v2
53.8253.8653.91T:giftcofb128v1
59.9360.1760.41romulusn
65.1465.1565.17T:tinyjambu128v2
62.26?67.61?72.70?T:grain128aeadv2
74.7274.7574.78T:tinyjambu192v2
78.5678.5878.81T:tinyjambu256v2
81.3181.3882.06T!!!romulust
83.3683.4083.59romulusm
180.68180.70181.19T:isapk128av20
188.71190.33194.88T:elephant200v2
299.73300.00300.09T:isapk128v20
300.29300.53320.17T:isapxv20
1205.801206.101240.96aes256gcmv1
9769.209782.899843.62T:elephant176v2
11216.1811220.4811223.65T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
15.9616.0716.27ascon128av12
20.4320.4320.59ascon128v12
20.5820.5820.62ascon80pqv12
30.2830.2830.68ascon128abi32v12
36.8336.8737.10T:xoodyakround3
39.8839.8840.45ascon128bi32v12
45.3545.6645.95T:aes128gcmv1
52.7352.8753.84T:aes256gcmv1
59.5459.6459.94T:schwaemm256128v2
64.0064.3764.70T:schwaemm128128v2
66.3666.3666.36T:giftcofb128v1
71.2771.3774.77T:grain128aeadv2
72.3272.6672.92romulusn
73.4473.7774.95T:schwaemm256256v2
77.1377.3479.02T:schwaemm192192v2
77.3977.3977.91T:tinyjambu128v2
88.5188.7288.85T:tinyjambu192v2
92.3592.5792.88T:tinyjambu256v2
96.8097.3497.85romulusm
149.77149.77150.23T:isapa128av20
210.66211.83212.77T!!!romulust
275.46276.85277.79T:elephant200v2
612.95612.95613.20T:isapa128v20
767.02767.02767.45T:isapk128av20
4592.924593.034601.59T:isapk128v20
4644.364664.724792.17T:isapxv20
12174.8912188.1312252.13T:elephant176v2
15029.6215034.5015039.91T:elephant160v2
25373.0325406.7025414.66aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
15.9815.9816.43ascon128av12
20.4520.4521.01ascon128v12
20.5320.5320.95ascon80pqv12
30.7130.7131.23ascon128abi32v12
35.9235.9836.36T:xoodyakround3
40.3340.3340.70ascon128bi32v12
44.5244.5644.95T:aes128gcmv1
52.1452.1653.09T:aes256gcmv1
59.2759.4659.70T:schwaemm256128v2
63.6363.7264.49T:schwaemm128128v2
65.9466.0866.47T:giftcofb128v1
72.5572.8072.98romulusn
73.8474.2874.86T:schwaemm256256v2
77.1777.2077.58T:tinyjambu128v2
71.20?77.36?84.59?T:grain128aeadv2
77.6579.1879.55T:schwaemm192192v2
88.2988.3389.11T:tinyjambu192v2
92.8992.9892.98T:tinyjambu256v2
100.09100.55101.52romulusm
150.03150.04150.31T:isapa128av20
211.15211.18211.62T!!!romulust
275.55276.75277.09T:elephant200v2
606.26607.21609.69T:isapa128v20
767.30767.45774.40T:isapk128av20
4593.384593.664603.79T:isapk128v20
4643.704664.444792.26T:isapxv20
12175.7012185.9112255.49T:elephant176v2
15030.2015037.7615041.56T:elephant160v2
25374.1625410.7325426.45aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
15.9815.9816.04ascon128av12
20.4520.4520.45ascon128v12
20.5320.5320.53ascon80pqv12
30.7330.7330.73ascon128abi32v12
36.2336.2736.66T:xoodyakround3
40.4140.4140.41ascon128bi32v12
44.7044.8845.02T:aes128gcmv1
52.4552.6154.09T:aes256gcmv1
59.2459.4159.80T:schwaemm256128v2
63.5963.7364.38T:schwaemm128128v2
65.9465.9465.94T:giftcofb128v1
72.6772.8273.02romulusn
73.9274.2574.62T:schwaemm256256v2
77.1777.1777.48T:tinyjambu128v2
70.91?77.36?84.51?T:grain128aeadv2
77.5477.9379.22T:schwaemm192192v2
88.2788.2988.34T:tinyjambu192v2
92.7992.9892.98T:tinyjambu256v2
95.9695.9696.18T:isapa128av20
99.55100.09100.53romulusm
132.95133.22134.04T!!!romulust
275.68276.95277.09T:elephant200v2
314.40314.40317.73T:isapa128v20
506.54506.57506.74T:isapk128av20
2421.942422.652449.62T:isapxv20
2440.252440.812441.09T:isapk128v20
9108.299135.349142.30aes256gcmv1
12175.0912185.2012254.92T:elephant176v2
15021.7415030.2815034.84T:elephant160v2