VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Core 2 65nm (6fb); 2007 Intel Core 2 Duo T7300; 2 x 2000MHz; trident, supercop-20240425

[Page version: 20240726 23:46:23]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Implementation notes

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
10.5510.5910.60ascon128av12
15.3215.3215.34ascon80pqv12
15.3515.3615.36ascon128v12
19.9219.9319.93ascon128abi32v12
29.0429.0529.05ascon128bi32v12
30.7530.8531.56T:aes128gcmv1
31.3331.4731.71T:xoodyakround3
34.1134.1834.31T:schwaemm256128v2
39.9040.0740.16T:aes256gcmv1
44.4044.7744.90T:schwaemm256256v2
45.3145.4145.49T:schwaemm192192v2
47.5847.7248.05T:schwaemm128128v2
53.6953.7053.76T:giftcofb128v1
62.4562.9464.91T:grain128aeadv2
63.3963.4563.49T:isapa128av20
66.5166.8168.03T:isapa128v20
74.1474.3174.37romulusn
78.9278.9579.03T:tinyjambu128v2
94.2994.5594.60T:tinyjambu192v2
102.49102.60102.64T:tinyjambu256v2
119.49119.80120.03romulusm
229.92230.38230.70romulust
237.49237.67238.32T:isapk128av20
253.25253.95254.29T:elephant200v2
326.26327.34327.85T:isapk128v20
340.66341.42341.84T:isapxv20
12973.5512979.6013076.83T:elephant176v2
14713.4214751.1214759.56T:elephant160v2
28946.2928948.1228949.06aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
10.2710.2810.30ascon128av12
15.2415.2515.25ascon80pqv12
15.2715.2815.30ascon128v12
20.6220.6320.64ascon128abi32v12
29.3429.3429.34ascon128bi32v12
30.9831.1131.17T:xoodyakround3
31.0331.1131.35T:aes128gcmv1
34.1134.1734.20T:schwaemm256128v2
39.8339.9540.10T:aes256gcmv1
44.4444.6945.22T:schwaemm256256v2
44.9145.1245.45T:schwaemm192192v2
47.4247.7247.83T:schwaemm128128v2
53.5253.5553.86T:giftcofb128v1
60.99?62.39?73.89?T:grain128aeadv2
63.4263.5563.58T:isapa128av20
66.7166.9468.27T:isapa128v20
73.7574.1274.42romulusn
78.8378.9178.95T:tinyjambu128v2
94.4394.9795.17T:tinyjambu192v2
102.50102.75102.92T:tinyjambu256v2
119.57119.89120.22romulusm
229.93230.24230.55romulust
237.57237.63238.43T:isapk128av20
253.28253.93254.32T:elephant200v2
326.61327.65328.13T:isapk128v20
340.66341.37341.73T:isapxv20
12973.2112979.2113077.22T:elephant176v2
14715.8814755.6314764.38T:elephant160v2
28948.0828948.9028949.59aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
10.2810.2910.31ascon128av12
15.2515.2515.25ascon80pqv12
15.2715.2715.30ascon128v12
20.6420.6420.64ascon128abi32v12
29.3429.3429.34ascon128bi32v12
31.0831.1831.35T:xoodyakround3
31.0531.3131.44T:aes128gcmv1
33.6933.7133.74T:isapa128v20
34.1134.1534.19T:schwaemm256128v2
39.8340.0440.20T:aes256gcmv1
41.5741.6941.75T:isapa128av20
44.4744.6545.13T:schwaemm256256v2
44.9545.2345.65T:schwaemm192192v2
47.3947.6047.72T:schwaemm128128v2
53.5253.5553.86T:giftcofb128v1
60.86?62.03?73.88?T:grain128aeadv2
73.6073.8574.19romulusn
78.8378.8578.94T:tinyjambu128v2
78.7979.2679.73romulust
94.3094.8095.16T:tinyjambu192v2
102.49102.63102.93T:tinyjambu256v2
119.45119.88120.05romulusm
162.14162.22162.59T:isapk128av20
201.60202.30202.67T:isapk128v20
205.69205.75206.21T:isapxv20
253.28253.95254.32T:elephant200v2
862.11862.66863.27aes256gcmv1
12973.4012980.0013077.27T:elephant176v2
14714.5414745.6814759.12T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
10.3210.3310.35ascon128av12
15.1115.1315.13ascon128v12
15.1415.1615.16ascon80pqv12
19.4219.4719.81T:aes128gcmv1
19.6619.6919.71ascon128abi32v12
23.4223.4523.57T:xoodyakround3
23.9724.1124.48T:aes256gcmv1
29.1329.1429.15ascon128bi32v12
34.0734.1234.16T:schwaemm256128v2
44.3144.4744.56T:schwaemm256256v2
45.2045.2645.52T:schwaemm192192v2
47.2447.4248.03T:schwaemm128128v2
50.1050.2050.25T:isapa128v20
52.5552.5952.63T:isapa128av20
53.2453.2953.43T:giftcofb128v1
59.6259.7359.81romulusn
61.9762.1764.39T:grain128aeadv2
64.7064.7765.06T:tinyjambu128v2
74.2274.5074.54T:tinyjambu192v2
78.0178.0278.06T:tinyjambu256v2
82.4382.7182.84romulusm
154.28154.70154.95romulust
184.19185.59191.19T:elephant200v2
202.77202.86203.30T:isapk128av20
267.20267.81267.92T:isapk128v20
273.86274.15274.41T:isapxv20
9698.239705.569773.46T:elephant176v2
11045.8011097.8711108.54T:elephant160v2
14904.7414905.1414907.36aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
10.1910.2010.21ascon128av12
15.0715.0715.13ascon80pqv12
15.2215.2515.25ascon128v12
19.5719.6019.71T:aes128gcmv1
20.0620.0620.06ascon128abi32v12
23.2623.3023.37T:xoodyakround3
23.9523.9924.10T:aes256gcmv1
29.0229.0229.19ascon128bi32v12
34.0834.1234.16T:schwaemm256128v2
44.3844.6044.79T:schwaemm256256v2
45.0145.1945.29T:schwaemm192192v2
47.2847.4347.81T:schwaemm128128v2
50.0850.1850.31T:isapa128v20
52.6252.6652.88T:isapa128av20
53.1053.1853.52T:giftcofb128v1
59.3159.4259.58romulusn
61.32?62.16?73.25?T:grain128aeadv2
64.4664.6764.78T:tinyjambu128v2
74.2174.4474.60T:tinyjambu192v2
77.9278.0378.15T:tinyjambu256v2
82.5082.6482.86romulusm
154.35154.64154.90romulust
184.24185.77190.95T:elephant200v2
202.81202.89203.12T:isapk128av20
267.16267.76268.08T:isapk128v20
273.84274.17274.33T:isapxv20
9698.069704.809774.19T:elephant176v2
11045.0711094.7011101.19T:elephant160v2
14905.0814905.6914906.31aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
10.1910.2010.21ascon128av12
15.0715.0715.13ascon80pqv12
15.2215.2515.25ascon128v12
19.5719.6019.72T:aes128gcmv1
19.9919.9919.99ascon128abi32v12
23.2523.3323.34T:xoodyakround3
23.9424.0124.08T:aes256gcmv1
29.0229.0229.03ascon128bi32v12
33.7133.7134.14T:isapa128v20
34.1034.1234.16T:schwaemm256128v2
41.7041.7241.74T:isapa128av20
44.4444.6545.04T:schwaemm256256v2
45.0345.2045.34T:schwaemm192192v2
47.2847.5047.83T:schwaemm128128v2
53.1153.3253.39T:giftcofb128v1
59.3259.3959.45romulusn
61.32?62.16?73.21?T:grain128aeadv2
64.3464.6164.74T:tinyjambu128v2
74.3174.4974.56T:tinyjambu192v2
77.9378.0778.15T:tinyjambu256v2
78.9579.0879.46romulust
82.4982.6982.92romulusm
165.12165.15165.38T:isapk128av20
184.24185.59190.99T:elephant200v2
204.52205.08205.46T:isapk128v20
206.27206.30206.55T:isapxv20
861.94862.26862.93aes256gcmv1
9695.869701.689773.89T:elephant176v2
11047.3811091.8511100.69T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
8.018.068.11T:aes128gcmv1
7.948.108.20T:aes256gcmv1
10.0510.0810.10ascon128av12
15.0115.0215.06ascon80pqv12
15.0115.0215.02ascon128v12
15.5115.5115.57T:xoodyakround3
19.4219.4519.45ascon128abi32v12
29.2329.2629.26ascon128bi32v12
33.4433.7133.85T:isapa128v20
33.9433.9834.05T:schwaemm256128v2
41.7841.7941.82T:isapa128av20
44.5944.7144.76T:schwaemm256256v2
44.9645.0645.11T:schwaemm192192v2
45.2345.2845.32romulusm
45.2445.4445.53romulusn
47.1247.4547.91T:schwaemm128128v2
51.0152.6953.17T:tinyjambu128v2
52.7752.7953.14T:giftcofb128v1
53.3353.3553.40T:tinyjambu256v2
53.6954.0354.36T:tinyjambu192v2
61.1761.5463.88T:grain128aeadv2
78.4478.5579.39romulust
128.33128.40128.92T:elephant200v2
168.00168.10168.12T:isapk128av20
206.83206.85207.09T:isapxv20
207.26208.05208.69T:isapk128v20
861.51861.86870.31aes256gcmv1
6408.756413.706458.77T:elephant176v2
7372.857396.707404.38T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
8.058.108.14T:aes128gcmv1
7.988.158.72T:aes256gcmv1
10.1010.1210.14ascon128av12
15.0315.0315.03ascon80pqv12
15.0615.1115.11ascon128v12
15.4215.4615.51T:xoodyakround3
19.4619.4819.48ascon128abi32v12
28.8928.9028.90ascon128bi32v12
33.4933.4933.88T:isapa128v20
34.0134.0434.12T:schwaemm256128v2
41.8041.8441.85T:isapa128av20
44.1744.3144.81T:schwaemm256256v2
44.9545.0245.18T:schwaemm192192v2
45.2745.3345.39romulusm
45.3045.4845.53romulusn
46.8747.3047.93T:schwaemm128128v2
49.9050.1250.35T:tinyjambu128v2
52.7352.8453.17T:giftcofb128v1
53.3353.3753.37T:tinyjambu256v2
53.8153.9154.03T:tinyjambu192v2
61.47?62.77?72.71?T:grain128aeadv2
78.4778.5779.47romulust
128.33128.45128.91T:elephant200v2
167.60168.08168.19T:isapk128av20
206.79206.86207.29T:isapxv20
207.59207.74208.45T:isapk128v20
862.15862.93863.60aes256gcmv1
6408.936413.646458.36T:elephant176v2
7370.897389.287398.20T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
8.058.098.12T:aes128gcmv1
7.998.118.23T:aes256gcmv1
10.1110.1210.14ascon128av12
15.0315.0315.03ascon80pqv12
15.0615.1115.11ascon128v12
15.4515.4715.48T:xoodyakround3
19.3219.3219.32ascon128abi32v12
28.8728.8728.92ascon128bi32v12
33.4933.4933.78T:isapa128v20
33.9734.0534.13T:schwaemm256128v2
41.8141.8241.88T:isapa128av20
44.2844.6544.99T:schwaemm256256v2
44.9645.0145.04T:schwaemm192192v2
45.3045.3445.38romulusm
45.1545.4545.50romulusn
47.1247.3047.87T:schwaemm128128v2
49.8649.9450.18T:tinyjambu128v2
52.7652.8053.17T:giftcofb128v1
53.3353.3553.37T:tinyjambu256v2
53.8753.9654.01T:tinyjambu192v2
61.46?62.51?72.71?T:grain128aeadv2
78.4778.5679.43romulust
128.32128.91128.92T:elephant200v2
168.04168.08168.11T:isapk128av20
206.81206.85207.17T:isapxv20
207.15207.65208.24T:isapk128v20
861.88862.92863.54aes256gcmv1
6408.966413.746458.35T:elephant176v2
7370.177394.727404.56T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
10.5810.5910.63ascon128av12
15.3415.3415.34ascon128v12
15.3915.3915.40ascon80pqv12
20.1320.1320.15ascon128abi32v12
20.5720.7320.87T:aes128gcmv1
23.6823.7023.70T:xoodyakround3
25.2525.3125.37T:aes256gcmv1
29.6129.6129.62ascon128bi32v12
35.2135.2735.30T:schwaemm256128v2
45.8346.1946.33T:schwaemm256256v2
46.3346.3946.43T:schwaemm192192v2
48.1448.2748.64T:schwaemm128128v2
53.7953.8153.96T:giftcofb128v1
56.6456.7256.74T:isapa128av20
60.1660.2760.34romulusn
62.6662.6764.63T:grain128aeadv2
65.1965.2065.25T:tinyjambu128v2
73.6473.6773.69T:isapa128v20
74.7374.9275.10T:tinyjambu192v2
78.6278.6278.64T:tinyjambu256v2
83.0183.2683.40romulusm
156.79157.07157.26romulust
188.62190.53194.92T:elephant200v2
227.89228.02228.29T:isapk128av20
449.90450.09450.57T:isapk128v20
475.53475.62475.84T:isapxv20
9768.979770.289836.83T:elephant176v2
11176.5711223.8911229.63T:elephant160v2
15202.0815202.2815204.22aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
10.4410.4410.47ascon128av12
15.2915.2915.35ascon80pqv12
15.4615.4715.48ascon128v12
20.5120.5120.51ascon128abi32v12
20.6320.6420.74T:aes128gcmv1
23.5123.5423.55T:xoodyakround3
25.2125.2325.48T:aes256gcmv1
29.8429.8429.84ascon128bi32v12
35.2235.2735.31T:schwaemm256128v2
46.0546.1846.44T:schwaemm256256v2
46.1846.3146.40T:schwaemm192192v2
48.1348.2248.63T:schwaemm128128v2
53.6553.7054.05T:giftcofb128v1
56.7056.7456.80T:isapa128av20
59.9760.0460.34romulusn
62.55?62.77?72.92?T:grain128aeadv2
64.9064.9264.96T:tinyjambu128v2
73.4073.5673.76T:isapa128v20
74.8174.8875.04T:tinyjambu192v2
78.5578.6378.70T:tinyjambu256v2
83.2483.4583.56romulusm
156.75157.04157.42romulust
188.64190.35194.96T:elephant200v2
227.99228.03228.45T:isapk128av20
449.99450.37450.61T:isapk128v20
475.53475.66475.82T:isapxv20
9768.289770.129836.79T:elephant176v2
11176.3011224.8211228.21T:elephant160v2
15202.4015202.7115203.19aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
10.4410.4410.46ascon128av12
15.2915.2915.35ascon80pqv12
15.4415.4715.47ascon128v12
20.4420.4420.44ascon128abi32v12
20.6520.6820.77T:aes128gcmv1
23.5523.5723.61T:xoodyakround3
25.2225.2425.31T:aes256gcmv1
29.5229.5229.52ascon128bi32v12
35.2135.2635.34T:schwaemm256128v2
44.0044.0244.08T:isapa128av20
45.5245.5445.54T:isapa128v20
45.7945.9946.08T:schwaemm256256v2
46.1146.3046.44T:schwaemm192192v2
48.0648.1448.58T:schwaemm128128v2
53.6753.7153.87T:giftcofb128v1
59.9659.9960.03romulusn
62.56?62.58?72.96?T:grain128aeadv2
64.9064.9265.00T:tinyjambu128v2
74.7174.8975.16T:tinyjambu192v2
78.6278.6378.76T:tinyjambu256v2
81.3081.5881.78romulust
83.1483.3183.47romulusm
180.64180.72180.96T:isapk128av20
188.64190.01194.96T:elephant200v2
299.74299.89300.37T:isapk128v20
309.21309.22309.49T:isapxv20
1159.331159.621160.01aes256gcmv1
9768.799769.879836.72T:elephant176v2
11174.9211220.2411226.09T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
16.1416.2716.36ascon128av12
20.4320.4320.59ascon128v12
20.5820.5820.81ascon80pqv12
30.2830.2830.69ascon128abi32v12
36.8036.9137.32T:xoodyakround3
39.8839.8840.39ascon128bi32v12
45.5545.7046.23T:aes128gcmv1
53.1054.0755.05T:aes256gcmv1
59.6959.8060.09T:schwaemm256128v2
64.1864.3164.41T:schwaemm128128v2
65.8565.9166.32T:giftcofb128v1
71.1571.7674.32T:grain128aeadv2
72.4572.5973.27romulusn
73.5273.8474.10T:schwaemm256256v2
76.9477.0578.73T:schwaemm192192v2
77.3577.5077.92T:tinyjambu128v2
88.4588.4888.84T:tinyjambu192v2
92.3592.3592.71T:tinyjambu256v2
96.9496.9897.70romulusm
149.67150.20150.38T:isapa128av20
210.88211.48212.79romulust
275.31276.48276.88T:elephant200v2
608.76612.71612.92T:isapa128v20
766.97767.01767.51T:isapk128av20
4591.604593.034602.17T:isapk128v20
5054.525058.915061.26T:isapxv20
12172.6312179.7012223.30T:elephant176v2
14973.3815026.9815039.68T:elephant160v2
22035.6122036.5322037.20aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
15.8915.9516.33ascon128av12
20.3420.3420.67ascon80pqv12
20.6120.6120.95ascon128v12
30.6930.6931.15ascon128abi32v12
35.7835.9736.56T:xoodyakround3
40.3140.3140.70ascon128bi32v12
44.8245.2545.55T:aes128gcmv1
52.6953.6154.54T:aes256gcmv1
59.3059.3959.90T:schwaemm256128v2
63.7263.9964.53T:schwaemm128128v2
66.1966.2166.21T:giftcofb128v1
70.68?71.00?84.34?T:grain128aeadv2
72.8372.9673.27romulusn
73.9774.1674.80T:schwaemm256256v2
77.4177.4177.84T:tinyjambu128v2
77.5577.9579.34T:schwaemm192192v2
88.2788.2989.02T:tinyjambu192v2
92.9892.9893.10T:tinyjambu256v2
99.2099.5599.97romulusm
150.45150.45150.63T:isapa128av20
210.93211.30211.81romulust
275.52275.77277.09T:elephant200v2
606.18609.13610.12T:isapa128v20
767.32767.34767.78T:isapk128av20
4591.404593.344601.44T:isapk128v20
5054.735058.095060.55T:isapxv20
12172.7412182.6112223.17T:elephant176v2
14983.2815025.5715032.99T:elephant160v2
22036.1622036.9622038.76aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
15.8915.9215.95ascon128av12
20.3420.3420.34ascon80pqv12
20.6420.6420.66ascon128v12
30.8130.8130.81ascon128abi32v12
36.2936.4136.50T:xoodyakround3
40.4040.4540.51ascon128bi32v12
45.0845.6545.72T:aes128gcmv1
52.9453.3055.27T:aes256gcmv1
59.2459.3359.58T:schwaemm256128v2
63.7164.0564.44T:schwaemm128128v2
65.7166.2166.21T:giftcofb128v1
70.68?70.68?84.47?T:grain128aeadv2
72.8372.9973.29romulusn
74.0974.2675.19T:schwaemm256256v2
77.4177.4177.41T:tinyjambu128v2
78.0579.3479.48T:schwaemm192192v2
88.2788.2988.29T:tinyjambu192v2
92.9892.9892.98T:tinyjambu256v2
96.4796.4896.50T:isapa128av20
99.2099.4399.77romulusm
132.57133.09133.70romulust
275.52275.95277.09T:elephant200v2
314.40314.40317.42T:isapa128v20
506.56506.59506.62T:isapk128av20
2439.592440.232447.11T:isapk128v20
2636.192636.262637.24T:isapxv20
7991.107991.377997.66aes256gcmv1
12170.0612178.5612227.38T:elephant176v2
14983.8215032.4315039.43T:elephant160v2