VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Core 2 65nm (6fb); 2007 Intel Core 2 Duo T7300; 2 x 2000MHz; trident, supercop-20260627

[Page version: 20260915 16:00:40]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
10.2010.2010.21ascon128av12
15.2815.2815.28ascon128v12
15.3015.3015.30ascon80pqv12
16.8616.9317.11T:aes128gcmv1
19.2219.2419.28ascon128abi32v12
19.9820.0220.09T:aes256gcmv1
29.0829.1129.14T:xoodyakround3
29.1629.1629.16ascon128bi32v12
32.5532.6232.71T:schwaemm256128v2
42.5342.7443.72T:schwaemm192192v2
45.1145.3845.44T:schwaemm128128v2
45.4045.7146.04T:schwaemm256256v2
54.6454.7854.96T:giftcofb128v1
58.5658.6158.69T:isapa128v20
60.6660.6860.69T:isapa128av20
61.9561.9962.02T:grain128aeadv2
73.0973.3173.54romulusn
77.6077.8177.87T:tinyjambu128v2
93.9294.0094.05T:tinyjambu192v2
100.06100.07100.07T:tinyjambu256v2
118.35118.48118.55romulusm
234.55234.66235.02T:isapk128av20
243.24243.31243.52T!!!romulust
260.20260.70260.91T:elephant200v2
313.01313.92314.55T:isapk128v20
377.11406.19418.27T:isapxv20
13052.0413053.3713062.71T:elephant176v2
14847.0814850.2814860.52T:elephant160v2
35553.9535556.2135559.09aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
10.3110.3110.31ascon128av12
15.0915.1015.10ascon128v12
15.2515.2515.25ascon80pqv12
16.7816.9517.13T:aes128gcmv1
19.2819.2919.31ascon128abi32v12
19.8520.0020.10T:aes256gcmv1
28.3828.3928.39ascon128bi32v12
28.4028.4328.44T:xoodyakround3
32.2332.2932.33T:schwaemm256128v2
42.44?43.04?48.05?T:schwaemm192192v2
45.5345.5745.91T:schwaemm128128v2
45.3245.6346.24T:schwaemm256256v2
54.6654.9555.00T:giftcofb128v1
58.6158.6358.91T:isapa128v20
60.7560.7560.75T:isapa128av20
66.8666.9566.96T:grain128aeadv2
73.4473.4673.49romulusn
78.2478.2878.37T:tinyjambu128v2
93.8394.1094.52T:tinyjambu192v2
96.8296.8299.01T:tinyjambu256v2
117.63117.65117.72romulusm
234.64234.67235.04T:isapk128av20
243.15243.34243.48T!!!romulust
260.29260.72260.96T:elephant200v2
313.10313.91314.35T:isapk128v20
221.55?406.19?567.20?T:isapxv20
13051.9513052.9313061.30T:elephant176v2
14845.3614848.4714860.84T:elephant160v2
35553.8935556.8335561.22aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
10.3110.3110.31ascon128av12
15.2315.2315.23ascon80pqv12
15.3015.3015.30ascon128v12
16.7816.8516.98T:aes128gcmv1
19.2819.2919.31ascon128abi32v12
19.9720.0320.07T:aes256gcmv1
28.3828.3828.38ascon128bi32v12
28.4728.4928.51T:xoodyakround3
29.2429.2529.25T:isapa128v20
32.2532.2932.35T:schwaemm256128v2
41.2741.2741.28T:isapa128av20
42.40?43.05?47.97?T:schwaemm192192v2
45.4545.5845.90T:schwaemm128128v2
45.3445.7446.21T:schwaemm256256v2
54.5854.9255.00T:giftcofb128v1
66.8766.9566.99T:grain128aeadv2
73.4473.4673.49romulusn
78.2478.2778.38T:tinyjambu128v2
83.7383.8783.98T!!!romulust
93.8694.1594.49T:tinyjambu192v2
96.8296.8298.65T:tinyjambu256v2
117.62117.64117.68romulusm
159.03159.04159.28T:isapk128av20
200.25200.61201.14T:isapk128v20
236.09237.53250.55T:isapxv20
260.25260.72260.91T:elephant200v2
915.79916.45916.96aes256gcmv1
13051.9613053.1613062.19T:elephant176v2
14845.2314848.8914861.16T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
10.1110.1210.12ascon128av12
12.4812.5212.59T:aes128gcmv1
14.0514.0914.13T:aes256gcmv1
15.1015.1015.10ascon128v12
15.1715.1715.17ascon80pqv12
19.1419.1419.15ascon128abi32v12
22.3222.3422.35T:xoodyakround3
28.7328.7328.74ascon128bi32v12
32.2232.2932.34T:schwaemm256128v2
42.5142.7043.59T:schwaemm192192v2
43.8643.9444.24T:isapa128v20
44.9445.0245.19T:schwaemm128128v2
45.4645.5546.02T:schwaemm256256v2
50.9750.9850.98T:isapa128av20
54.3354.4754.60T:giftcofb128v1
59.0359.1259.27romulusn
62.0962.1162.16T:grain128aeadv2
62.9763.0963.12T:tinyjambu128v2
73.8273.9073.95T:tinyjambu192v2
74.8074.8074.97T:tinyjambu256v2
81.5681.6681.80romulusm
163.15163.20163.36T!!!romulust
192.36192.44192.74T:isapk128av20
195.78195.88196.07T:elephant200v2
250.83251.25251.41T:isapk128v20
308.54327.93329.63T:isapxv20
9749.479751.199757.13T:elephant176v2
11133.4211135.4011144.99T:elephant160v2
18236.4218237.4418238.42aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
10.1710.1710.18ascon128av12
12.4612.5112.61T:aes128gcmv1
14.0514.0914.25T:aes256gcmv1
15.1115.1115.11ascon80pqv12
15.1415.1415.15ascon128v12
19.1319.1419.16ascon128abi32v12
21.9922.0022.02T:xoodyakround3
28.3128.3128.36ascon128bi32v12
32.1732.2032.24T:schwaemm256128v2
42.11?42.69?47.73?T:schwaemm192192v2
43.9444.0244.12T:isapa128v20
45.1145.1645.26T:schwaemm128128v2
45.4745.7146.55T:schwaemm256256v2
50.9850.9851.00T:isapa128av20
54.4254.5854.62T:giftcofb128v1
58.9759.0459.23romulusn
63.2763.2963.44T:tinyjambu128v2
64.4464.4564.53T:grain128aeadv2
73.7174.0074.11T:tinyjambu192v2
74.8774.9075.20T:tinyjambu256v2
81.2381.3281.44romulusm
163.16163.22163.33T!!!romulust
192.36192.43192.71T:isapk128av20
195.76195.87196.03T:elephant200v2
250.88251.21251.35T:isapk128v20
230.73?329.13?403.55?T:isapxv20
9749.589751.959757.01T:elephant176v2
11133.5911135.7311146.19T:elephant160v2
18235.1418236.4618243.38aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
10.1710.1710.18ascon128av12
12.4212.5312.61T:aes128gcmv1
14.0314.0614.09T:aes256gcmv1
15.0515.0515.07ascon80pqv12
15.1715.1715.18ascon128v12
19.1419.1519.16ascon128abi32v12
22.0322.0422.05T:xoodyakround3
28.3128.3128.37ascon128bi32v12
29.2529.3029.31T:isapa128v20
32.1732.2032.24T:schwaemm256128v2
41.2341.2341.24T:isapa128av20
42.11?42.70?47.73?T:schwaemm192192v2
45.1145.1745.26T:schwaemm128128v2
45.4645.7646.58T:schwaemm256256v2
54.4454.5654.62T:giftcofb128v1
59.0059.0559.18romulusn
63.2863.3063.45T:tinyjambu128v2
64.4464.4764.56T:grain128aeadv2
73.6773.8874.02T:tinyjambu192v2
74.8975.0475.21T:tinyjambu256v2
81.2681.4081.44romulusm
83.4683.4983.56T!!!romulust
154.56154.57154.81T:isapk128av20
194.36194.59194.93T:isapk128v20
195.73195.87196.01T:elephant200v2
236.33237.53250.39T:isapxv20
916.31916.80918.37aes256gcmv1
9749.449750.179755.87T:elephant176v2
11133.4311135.4911145.22T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
7.998.078.13T:aes128gcmv1
8.108.158.20T:aes256gcmv1
10.0610.0610.06ascon128av12
14.9114.9114.91ascon128v12
15.0215.0215.03ascon80pqv12
15.5715.5915.60T:xoodyakround3
19.0319.0419.05ascon128abi32v12
28.3428.3428.35ascon128bi32v12
29.2129.2129.27T:isapa128v20
31.9332.0332.09T:schwaemm256128v2
41.2041.2041.21T:isapa128av20
42.2942.4943.50T:schwaemm192192v2
44.6344.7544.83T:schwaemm128128v2
44.8644.9845.13romulusn
45.0745.1645.19romulusm
45.5345.6545.81T:schwaemm256256v2
48.3648.3648.36T:tinyjambu128v2
50.0550.0550.26T:tinyjambu256v2
53.8253.8553.91T:tinyjambu192v2
54.0254.1854.21T:giftcofb128v1
62.2162.2362.24T:grain128aeadv2
83.0083.0383.10T!!!romulust
131.71132.06132.16T:elephant200v2
150.11150.13150.32T:isapk128av20
188.09188.38188.90T:isapk128v20
230.54246.07251.43T:isapxv20
916.36917.11921.42aes256gcmv1
6446.426447.196450.57T:elephant176v2
7423.247425.417432.44T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
7.968.058.22T:aes128gcmv1
8.008.108.17T:aes256gcmv1
10.0510.0510.05ascon128av12
14.9614.9614.96ascon128v12
15.0515.1315.22ascon80pqv12
15.5815.5915.60T:xoodyakround3
18.9919.0119.03ascon128abi32v12
28.2128.5128.84ascon128bi32v12
29.3129.3429.34T:isapa128v20
32.0132.0332.06T:schwaemm256128v2
41.2041.2041.21T:isapa128av20
41.88?42.43?47.55?T:schwaemm192192v2
44.8144.8544.87T:schwaemm128128v2
44.9144.9645.13romulusn
45.0945.1545.17romulusm
45.6245.7045.83T:schwaemm256256v2
48.3648.3648.36T:tinyjambu128v2
49.8249.8250.12T:tinyjambu256v2
53.6153.6853.73T:tinyjambu192v2
54.0654.1754.23T:giftcofb128v1
61.6661.6961.75T:grain128aeadv2
83.0083.0383.08T!!!romulust
131.76132.07132.17T:elephant200v2
150.07150.11150.33T:isapk128av20
188.20188.37188.86T:isapk128v20
235.92237.66250.67T:isapxv20
916.17917.01920.83aes256gcmv1
6446.376447.216450.93T:elephant176v2
7422.557424.147431.63T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
7.978.028.13T:aes128gcmv1
8.058.158.25T:aes256gcmv1
10.0510.0510.05ascon128av12
14.8914.9014.94ascon80pqv12
14.9514.9614.96ascon128v12
15.5815.6015.60T:xoodyakround3
18.9919.0119.04ascon128abi32v12
28.2028.2428.25ascon128bi32v12
29.3429.3429.34T:isapa128v20
32.0232.0332.05T:schwaemm256128v2
41.2041.2041.23T:isapa128av20
41.89?42.47?47.66?T:schwaemm192192v2
44.8144.8544.98T:schwaemm128128v2
44.9044.9945.13romulusn
45.0545.1545.17romulusm
45.6345.7245.81T:schwaemm256256v2
48.3548.3648.36T:tinyjambu128v2
49.7849.8450.38T:tinyjambu256v2
53.6253.6953.80T:tinyjambu192v2
54.0254.1754.22T:giftcofb128v1
61.6761.6861.70T:grain128aeadv2
83.0083.0383.07T!!!romulust
131.71132.06132.17T:elephant200v2
150.11150.11150.32T:isapk128av20
188.14188.38188.91T:isapk128v20
235.95237.53250.62T:isapxv20
916.08916.98920.81aes256gcmv1
6446.426447.326450.91T:elephant176v2
7422.467424.247431.56T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
10.3610.3610.37ascon128av12
15.2615.3115.49T:aes128gcmv1
15.3115.3115.31ascon128v12
15.3915.3915.39ascon80pqv12
16.9917.0017.04T:aes256gcmv1
19.5719.5719.59ascon128abi32v12
22.6122.6222.62T:xoodyakround3
29.1829.1829.19ascon128bi32v12
33.2533.2933.34T:schwaemm256128v2
43.5643.6644.49T:schwaemm192192v2
45.5645.6245.80T:schwaemm128128v2
46.7146.8146.96T:schwaemm256256v2
54.4254.4254.42T:isapa128av20
54.8954.9755.05T:giftcofb128v1
59.5859.6359.74romulusn
62.6862.7162.73T:grain128aeadv2
63.4763.5963.65T:tinyjambu128v2
64.3964.4764.58T:isapa128v20
74.4874.5174.55T:tinyjambu192v2
75.3875.3875.56T:tinyjambu256v2
82.1482.2182.31romulusm
165.53165.56165.75T!!!romulust
199.97200.04200.17T:elephant200v2
216.71216.74217.05T:isapk128av20
432.05432.39432.66T:isapk128v20
528.15540.10541.88T:isapxv20
9824.359825.609831.15T:elephant176v2
11260.8111261.8211271.06T:elephant160v2
18601.4518602.2518603.24aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
10.4110.4110.41ascon128av12
15.2715.2915.35T:aes128gcmv1
15.3715.3715.37ascon80pqv12
15.3815.3815.39ascon128v12
16.9016.9216.95T:aes256gcmv1
19.5819.5819.59ascon128abi32v12
22.2822.2822.29T:xoodyakround3
28.7928.7928.88ascon128bi32v12
33.1233.1533.19T:schwaemm256128v2
43.54?43.70?48.39?T:schwaemm192192v2
45.7245.8445.90T:schwaemm128128v2
46.9147.1947.38T:schwaemm256256v2
54.4154.4154.42T:isapa128av20
54.9955.1055.14T:giftcofb128v1
59.5959.6559.79romulusn
63.7663.8163.91T:tinyjambu128v2
64.4664.5364.65T:isapa128v20
64.8764.8864.94T:grain128aeadv2
74.2774.5274.64T:tinyjambu192v2
75.4875.5075.81T:tinyjambu256v2
81.9582.0582.10romulusm
165.52165.56165.67T!!!romulust
199.95200.05200.18T:elephant200v2
216.70216.71217.00T:isapk128av20
432.16432.35432.56T:isapk128v20
528.13?540.08?636.11?T:isapxv20
9824.219825.539830.54T:elephant176v2
11260.8711262.0911271.37T:elephant160v2
18601.6818602.4518603.97aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
10.4110.4110.41ascon128av12
15.2315.2515.28T:aes128gcmv1
15.3715.3715.37ascon80pqv12
15.4315.4315.43ascon128v12
16.8916.9116.97T:aes256gcmv1
19.5819.5819.58ascon128abi32v12
22.3322.3322.33T:xoodyakround3
28.7928.7928.81ascon128bi32v12
33.1233.1433.22T:schwaemm256128v2
39.6039.6039.63T:isapa128v20
43.2043.2043.21T:isapa128av20
43.5743.7648.41T:schwaemm192192v2
45.7045.8345.89T:schwaemm128128v2
46.8247.0347.28T:schwaemm256256v2
54.9355.0855.12T:giftcofb128v1
59.6159.6459.78romulusn
63.7663.8163.90T:tinyjambu128v2
64.8764.8964.94T:grain128aeadv2
74.2474.5274.63T:tinyjambu192v2
75.4875.4875.64T:tinyjambu256v2
82.0382.0682.10romulusm
85.7485.7685.80T!!!romulust
169.33169.34169.51T:isapk128av20
199.98200.06200.21T:elephant200v2
288.21288.34288.72T:isapk128v20
345.22345.55357.45T:isapxv20
1281.961282.161282.47aes256gcmv1
9823.989825.599830.20T:elephant176v2
11260.8211261.8211270.63T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
15.8215.8315.96ascon128av12
20.0520.0520.05ascon128v12
20.5020.5020.50ascon80pqv12
29.3529.3529.35ascon128abi32v12
34.2134.3134.50T:xoodyakround3
39.5139.5139.51ascon128bi32v12
55.2155.2455.45T:schwaemm256128v2
59.9860.2160.30T:schwaemm128128v2
67.3467.5967.76T:giftcofb128v1
70.4370.4370.55T:grain128aeadv2
71.5271.6872.01romulusn
71.4471.7573.10T:schwaemm192192v2
74.4574.4574.62T:tinyjambu128v2
74.4274.9875.58T:schwaemm256256v2
80.2880.6081.32T:aes128gcmv1
88.3088.3088.30T:tinyjambu256v2
88.2588.4388.48T:tinyjambu192v2
89.7190.2290.82T:aes256gcmv1
94.2294.3294.67romulusm
133.41133.41133.44T:isapa128av20
219.47219.69220.30T!!!romulust
283.22284.57284.73T:elephant200v2
531.84533.62534.79T:isapa128v20
737.60737.63737.72T:isapk128av20
4545.494545.834554.25T:isapk128v20
5321.955335.015575.58T:isapxv20
12238.3612244.1712249.33T:elephant176v2
15079.8915086.4315095.31T:elephant160v2
27011.9627032.0127172.10aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
15.7015.7015.80ascon128av12
20.5920.5920.61ascon128v12
20.6020.7220.72ascon80pqv12
29.5029.5129.61ascon128abi32v12
34.0034.0234.12T:xoodyakround3
39.3139.3939.43ascon128bi32v12
55.0855.1055.27T:schwaemm256128v2
59.5959.6560.11T:schwaemm128128v2
67.3867.5467.62T:giftcofb128v1
71.31?71.56?79.52?T:schwaemm192192v2
71.8271.9872.09romulusn
73.4473.4473.49T:grain128aeadv2
74.7974.7974.80T:tinyjambu128v2
75.3075.7776.44T:schwaemm256256v2
82.1082.4382.96T:aes128gcmv1
87.9187.9187.91T:tinyjambu192v2
88.6688.6688.69T:tinyjambu256v2
90.9391.1291.85T:aes256gcmv1
97.3097.4297.47romulusm
133.33133.33133.33T:isapa128av20
219.40219.62219.91T!!!romulust
283.48284.96285.12T:elephant200v2
536.15536.77537.25T:isapa128v20
737.77737.77738.98T:isapk128av20
4545.624546.554554.71T:isapk128v20
5319.15?5334.68?7655.23?T:isapxv20
12238.6112244.6512248.94T:elephant176v2
15082.8715088.2315096.05T:elephant160v2
27019.4427028.1527158.43aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
15.7015.7015.71ascon128av12
20.5820.5820.58ascon128v12
20.5520.7220.72ascon80pqv12
29.4129.5029.65ascon128abi32v12
34.1634.1834.29T:xoodyakround3
39.4239.4539.48ascon128bi32v12
55.0855.1155.31T:schwaemm256128v2
59.5959.6460.02T:schwaemm128128v2
67.4067.5467.62T:giftcofb128v1
71.8571.9972.10romulusn
71.33?72.02?79.76?T:schwaemm192192v2
73.4373.4373.54T:grain128aeadv2
74.7774.7774.79T:tinyjambu128v2
75.2675.6576.63T:schwaemm256256v2
81.2981.7982.22T:aes128gcmv1
87.9187.9187.91T:tinyjambu192v2
88.3088.3088.54T:isapa128av20
88.6688.6688.68T:tinyjambu256v2
90.1690.3890.75T:aes256gcmv1
97.3097.4297.47romulusm
137.57137.79138.05T!!!romulust
277.35277.35277.35T:isapa128v20
283.47284.98285.16T:elephant200v2
478.06478.07478.10T:isapk128av20
2405.602405.782409.69T:isapk128v20
2779.122781.562797.09T:isapxv20
9692.559700.279740.51aes256gcmv1
12238.5312245.0712250.30T:elephant176v2
15076.2815083.5815093.66T:elephant160v2