VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Core 2 45nm (1067a); 2009 Intel Core 2 Duo E7600; 2 x 3060MHz; wolfdale, supercop-20241022

[Page version: 20241120 00:41:35]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
10.5910.6210.64ascon128av12
15.1815.1815.19ascon128v12
15.3015.3115.31ascon80pqv12
19.9019.9019.93ascon128abi32v12
20.2420.2720.29T:aes128gcmv1
24.8324.8424.85T:xoodyakround3
25.0125.0625.14T:aes256gcmv1
29.0429.0629.06ascon128bi32v12
30.5130.5930.66T:schwaemm256128v2
40.2440.3440.93T:schwaemm192192v2
40.4740.5040.65T:schwaemm256256v2
40.4840.9841.11T:schwaemm128128v2
48.7549.0349.06romulusn
53.6653.7053.79T:giftcofb128v1
62.0362.2464.78T:grain128aeadv2
63.4663.4963.50T:isapa128av20
66.4366.7168.35T:isapa128v20
78.8878.9278.95T:tinyjambu128v2
79.9279.9579.98romulusm
95.0195.5095.74T:tinyjambu192v2
102.56102.69102.90T:tinyjambu256v2
153.02153.25154.57T!!!romulust
237.72237.74237.98T:isapk128av20
252.92266.71267.65T:elephant200v2
318.10336.82341.46T:isapxv20
311.97?337.34?347.33?T:isapk128v20
13009.9313072.6113080.57T:elephant176v2
14740.9914778.6614786.41T:elephant160v2
33985.9133991.1434034.59aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
10.2810.3110.34ascon128av12
15.1215.2115.48ascon80pqv12
15.2715.2815.28ascon128v12
20.3020.3420.37T:aes128gcmv1
20.6520.6520.67ascon128abi32v12
22.2322.5322.67T:xoodyakround3
24.9024.9425.02T:aes256gcmv1
29.3229.3429.34ascon128bi32v12
30.9631.0031.04T:schwaemm256128v2
40.4740.5940.99T:schwaemm192192v2
40.7240.8140.81T:schwaemm256256v2
40.5041.2841.28T:schwaemm128128v2
49.0249.0249.22romulusn
53.4953.5453.58T:giftcofb128v1
61.25?62.40?74.12?T:grain128aeadv2
63.3263.3863.57T:isapa128av20
66.3766.7868.05T:isapa128v20
78.6878.6978.84T:tinyjambu128v2
79.5679.8280.16romulusm
94.5494.5994.90T:tinyjambu192v2
102.77102.88103.04T:tinyjambu256v2
153.12153.23154.46T!!!romulust
237.72237.73238.10T:isapk128av20
252.90266.64267.23T:elephant200v2
318.06336.78341.57T:isapxv20
311.98?337.33?347.62?T:isapk128v20
13010.9413072.3113080.95T:elephant176v2
14739.7714776.0714784.71T:elephant160v2
33992.6733995.0034025.91aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
10.2810.3110.34ascon128av12
15.1215.2115.48ascon80pqv12
15.2815.2815.28ascon128v12
20.3120.3520.40T:aes128gcmv1
20.4620.6220.64ascon128abi32v12
22.3122.6322.93T:xoodyakround3
24.8724.9424.98T:aes256gcmv1
29.3529.3629.36ascon128bi32v12
30.8230.9631.02T:schwaemm256128v2
33.6533.7333.96T:isapa128v20
40.2340.6040.91T:schwaemm192192v2
40.7440.7840.82T:schwaemm256256v2
40.8941.2741.41T:schwaemm128128v2
41.5141.6641.70T:isapa128av20
49.0249.0249.23romulusn
53.4853.5353.61T:giftcofb128v1
53.5053.5453.67T!!!romulust
61.37?62.40?74.13?T:grain128aeadv2
78.6678.7178.84T:tinyjambu128v2
79.7979.9780.46romulusm
94.5894.5994.68T:tinyjambu192v2
102.70102.88102.98T:tinyjambu256v2
162.52162.55162.70T:isapk128av20
182.47?200.60?210.94?T:isapk128v20
191.31207.71210.27T:isapxv20
253.43266.65267.69T:elephant200v2
855.37859.61880.28aes256gcmv1
13010.8213072.4913080.69T:elephant176v2
14738.7614775.9914786.75T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
10.3310.3510.37ascon128av12
14.1814.2114.24T:aes128gcmv1
15.1115.1215.12ascon128v12
15.1815.1915.19ascon80pqv12
16.5416.5916.61T:aes256gcmv1
17.7317.7617.77T:xoodyakround3
19.6919.7019.76ascon128abi32v12
29.1829.1929.20ascon128bi32v12
30.4530.6230.75T:schwaemm256128v2
39.7439.7839.82romulusn
40.5440.7140.78T:schwaemm192192v2
40.5240.7641.01T:schwaemm256256v2
40.5840.9241.02T:schwaemm128128v2
50.1450.1850.41T:isapa128v20
52.5852.6053.01T:isapa128av20
53.1853.2553.27T:giftcofb128v1
55.2155.3255.43romulusm
61.6661.8163.77T:grain128aeadv2
64.6164.6565.03T:tinyjambu128v2
74.5974.7174.90T:tinyjambu192v2
77.9477.9778.14T:tinyjambu256v2
103.48103.80104.01T!!!romulust
190.38200.28200.66T:elephant200v2
201.54201.57201.83T:isapk128av20
252.83264.80279.42T:isapk128v20
255.79272.75275.66T:isapxv20
9716.859763.949770.06T:elephant176v2
11060.3711109.8411113.77T:elephant160v2
17414.5217424.3017425.58aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
10.1910.2110.22ascon128av12
14.2214.2814.31T:aes128gcmv1
15.0615.0615.06ascon80pqv12
15.2415.2415.24ascon128v12
16.4816.5016.53T:aes256gcmv1
16.5616.5916.62T:xoodyakround3
20.0520.0620.08ascon128abi32v12
29.1129.1329.14ascon128bi32v12
30.3830.7430.80T:schwaemm256128v2
39.8239.8340.02romulusn
40.3640.4940.69T:schwaemm192192v2
40.6040.9141.18T:schwaemm256256v2
40.6841.0141.09T:schwaemm128128v2
50.0750.1450.41T:isapa128v20
52.5152.5352.68T:isapa128av20
53.1353.2053.38T:giftcofb128v1
55.2655.2755.43romulusm
60.85?61.84?72.55?T:grain128aeadv2
64.3064.3564.42T:tinyjambu128v2
74.4574.4974.51T:tinyjambu192v2
78.1478.1678.19T:tinyjambu256v2
103.52103.56103.71T!!!romulust
190.40200.23200.91T:elephant200v2
201.56201.58201.94T:isapk128av20
252.69264.82279.52T:isapk128v20
255.79272.75275.41T:isapxv20
9716.909763.989770.35T:elephant176v2
11059.4111107.6611111.63T:elephant160v2
17417.8617422.9117424.33aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
10.1910.2110.22ascon128av12
14.2214.2814.32T:aes128gcmv1
15.0615.0615.06ascon80pqv12
15.2415.2415.24ascon128v12
16.4616.5016.53T:aes256gcmv1
16.5516.6116.66T:xoodyakround3
20.1620.1920.40ascon128abi32v12
29.1129.3329.52ascon128bi32v12
30.5830.7830.85T:schwaemm256128v2
33.7033.7033.80T:isapa128v20
39.8339.8740.02romulusn
40.3740.4940.61T:schwaemm192192v2
40.6140.8341.13T:schwaemm256256v2
40.5341.0341.14T:schwaemm128128v2
41.6341.7141.75T:isapa128av20
53.1353.2253.34T:giftcofb128v1
53.7353.8554.14T!!!romulust
55.1955.2755.70romulusm
60.82?61.75?72.55?T:grain128aeadv2
64.2664.3464.38T:tinyjambu128v2
74.4774.4774.50T:tinyjambu192v2
78.0278.1678.19T:tinyjambu256v2
163.97164.00164.20T:isapk128av20
188.17?196.45?211.48?T:isapk128v20
190.08200.23200.92T:elephant200v2
192.20208.21209.80T:isapxv20
850.10855.16855.58aes256gcmv1
9717.529763.969770.52T:elephant176v2
11057.9711108.8711112.97T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
8.058.088.11T:aes128gcmv1
8.068.098.12T:aes256gcmv1
10.0710.0910.10ascon128av12
10.6410.6710.73T:xoodyakround3
15.0215.0315.03ascon128v12
15.0615.0715.07ascon80pqv12
19.4419.5319.92ascon128abi32v12
29.3129.3329.33ascon128bi32v12
30.3430.4130.74T:schwaemm256128v2
30.5430.5730.75romulusn
30.7930.8130.88romulusm
33.6133.6534.49T:isapa128v20
40.3840.4040.58T:schwaemm256256v2
40.4040.5740.74T:schwaemm192192v2
40.4340.8641.30T:schwaemm128128v2
41.7941.8041.82T:isapa128av20
50.3450.3550.39T:tinyjambu128v2
52.7752.7852.80T:giftcofb128v1
53.4253.4453.44T:tinyjambu256v2
53.7453.7753.83T!!!romulust
53.6754.2754.72T:tinyjambu192v2
61.1461.4762.84T:grain128aeadv2
128.76135.06135.52T:elephant200v2
165.39165.40165.45T:isapk128av20
183.88?201.60?212.26?T:isapk128v20
191.39?208.72?213.12?T:isapxv20
847.25854.33859.61aes256gcmv1
6424.896456.836461.59T:elephant176v2
7366.697390.987413.49T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
8.048.128.16T:aes256gcmv1
8.078.188.22T:aes128gcmv1
10.0810.1010.10ascon128av12
10.6410.6710.68T:xoodyakround3
15.0215.0215.02ascon80pqv12
15.1115.1115.11ascon128v12
19.4019.4219.49ascon128abi32v12
28.9028.9128.91ascon128bi32v12
30.3430.4230.57T:schwaemm256128v2
30.6730.6930.77romulusn
30.7630.8330.89romulusm
33.5033.5033.68T:isapa128v20
39.9940.1440.46T:schwaemm192192v2
40.3940.4040.43T:schwaemm256256v2
40.3741.0441.51T:schwaemm128128v2
41.7741.8141.83T:isapa128av20
49.8149.8949.90T:tinyjambu128v2
52.7152.7753.32T:giftcofb128v1
53.6153.6153.62T:tinyjambu256v2
53.6453.7953.80T!!!romulust
54.3554.3854.40T:tinyjambu192v2
60.03?61.29?71.28?T:grain128aeadv2
128.21135.02135.52T:elephant200v2
165.40165.42165.45T:isapk128av20
183.90?201.60?212.24?T:isapk128v20
191.05?208.72?213.06?T:isapxv20
853.95855.73859.72aes256gcmv1
6425.836456.776461.89T:elephant176v2
7367.047384.157393.64T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
8.038.118.18T:aes256gcmv1
8.058.198.23T:aes128gcmv1
10.0910.1010.10ascon128av12
10.6510.6710.69T:xoodyakround3
15.0215.0215.02ascon80pqv12
15.1115.1115.11ascon128v12
19.4119.4219.44ascon128abi32v12
28.8928.9128.93ascon128bi32v12
30.3130.3730.60T:schwaemm256128v2
30.6630.6930.77romulusn
30.8330.8430.89romulusm
33.4333.6534.68T:isapa128v20
40.3940.4140.45T:schwaemm256256v2
40.2840.5040.63T:schwaemm192192v2
40.0340.9741.34T:schwaemm128128v2
41.7641.8041.83T:isapa128av20
49.8249.8949.90T:tinyjambu128v2
52.7252.7952.97T:giftcofb128v1
53.6153.6153.61T:tinyjambu256v2
53.5953.8153.82T!!!romulust
54.3554.3854.40T:tinyjambu192v2
60.17?61.57?71.28?T:grain128aeadv2
128.21135.01135.51T:elephant200v2
165.39165.45165.48T:isapk128av20
183.88?201.60?211.83?T:isapk128v20
191.72?208.72?213.05?T:isapxv20
853.49855.58860.54aes256gcmv1
6424.856456.686461.80T:elephant176v2
7363.317382.757398.54T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
10.5810.5910.59ascon128av12
15.0715.0915.13T:aes128gcmv1
15.3315.3315.34ascon128v12
15.4115.4115.41ascon80pqv12
17.4917.5017.54T:aes256gcmv1
18.0618.0618.11T:xoodyakround3
20.1420.1420.15ascon128abi32v12
29.6429.6429.64ascon128bi32v12
31.5331.6031.74T:schwaemm256128v2
40.0240.1540.18romulusn
41.3341.4941.63T:schwaemm128128v2
41.5541.6841.72T:schwaemm192192v2
41.7141.7641.82T:schwaemm256256v2
53.7353.7753.80T:giftcofb128v1
55.7255.7455.88romulusm
56.6056.6956.70T:isapa128av20
62.1662.3064.24T:grain128aeadv2
65.1765.1765.21T:tinyjambu128v2
73.3973.4673.54T:isapa128v20
74.9075.2475.38T:tinyjambu192v2
78.6578.6578.71T:tinyjambu256v2
105.19105.34105.75T!!!romulust
195.18204.40204.42T:elephant200v2
227.42227.44227.76T:isapk128av20
434.17440.89450.52T:isapk128v20
444.28461.18462.31T:isapxv20
9794.289838.089841.62T:elephant176v2
11190.7811234.7911237.67T:elephant160v2
17769.1717769.9717774.05aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
10.4310.4410.44ascon128av12
15.1215.1715.19T:aes128gcmv1
15.3215.3215.32ascon80pqv12
15.4415.4415.44ascon128v12
16.7516.7816.80T:xoodyakround3
17.3417.4117.43T:aes256gcmv1
20.4820.4820.48ascon128abi32v12
29.5929.5929.60ascon128bi32v12
31.6831.7031.79T:schwaemm256128v2
40.2340.2540.34romulusn
41.4841.5341.93T:schwaemm192192v2
41.3741.5841.59T:schwaemm128128v2
41.8541.8841.98T:schwaemm256256v2
53.6953.7053.86T:giftcofb128v1
55.7355.9356.14romulusm
56.6657.0157.08T:isapa128av20
62.17?62.42?72.32?T:grain128aeadv2
64.8064.8964.94T:tinyjambu128v2
73.4573.5074.55T:isapa128v20
75.0675.0775.10T:tinyjambu192v2
78.7978.8478.85T:tinyjambu256v2
105.16105.34105.64T!!!romulust
195.15204.36204.47T:elephant200v2
227.46227.46227.98T:isapk128av20
434.17440.90450.53T:isapk128v20
444.00461.17462.13T:isapxv20
9794.099837.919841.56T:elephant176v2
11194.8511235.7211236.61T:elephant160v2
17772.6217775.1117776.07aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
10.4210.4410.44ascon128av12
15.1615.1815.22T:aes128gcmv1
15.3215.3215.32ascon80pqv12
15.4415.4415.44ascon128v12
16.7816.8116.92T:xoodyakround3
17.3417.4017.44T:aes256gcmv1
20.4820.6120.61ascon128abi32v12
29.5929.6029.60ascon128bi32v12
31.6831.7031.79T:schwaemm256128v2
40.2340.2540.34romulusn
41.2541.4641.58T:schwaemm128128v2
41.4841.6341.81T:schwaemm192192v2
41.8541.8841.92T:schwaemm256256v2
43.9744.0244.28T:isapa128av20
45.5145.5145.51T:isapa128v20
53.6953.7453.88T:giftcofb128v1
55.3055.4355.45T!!!romulust
55.6255.7355.76romulusm
62.04?62.05?72.32?T:grain128aeadv2
64.8064.9165.09T:tinyjambu128v2
75.0475.1075.15T:tinyjambu192v2
78.7978.8478.93T:tinyjambu256v2
180.18180.20180.34T:isapk128av20
195.14204.37204.42T:elephant200v2
281.12288.05298.39T:isapk128v20
288.91304.22305.17T:isapxv20
1202.821206.921207.61aes256gcmv1
9793.509838.379841.61T:elephant176v2
11190.0311235.5911237.30T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
15.7915.7916.17ascon128av12
20.2320.2720.55ascon128v12
20.4220.4220.42ascon80pqv12
26.6926.7327.09T:xoodyakround3
30.0830.2330.56ascon128abi32v12
35.6035.7436.06T:aes128gcmv1
39.1539.3740.04T:aes256gcmv1
39.8739.8740.13ascon128bi32v12
48.8649.1649.43romulusn
54.2655.0257.14T:schwaemm128128v2
55.1055.2555.50T:schwaemm256128v2
64.7265.0065.64romulusm
65.7465.8966.18T:giftcofb128v1
69.5969.8069.99T:schwaemm256256v2
70.6871.4574.34T:grain128aeadv2
71.2771.8672.28T:schwaemm192192v2
77.1377.2377.64T:tinyjambu128v2
87.6887.6888.05T:tinyjambu192v2
92.4292.4593.07T:tinyjambu256v2
144.23144.55145.36T!!!romulust
149.29149.80149.88T:isapa128av20
277.59288.37288.45T:elephant200v2
605.75609.55611.64T:isapa128v20
780.73780.78780.95T:isapk128av20
4343.084358.884628.92T:isapk128v20
4672.484741.754741.95T:isapxv20
12250.2912255.9112258.35T:elephant176v2
15010.9815050.5915055.03T:elephant160v2
25811.7725821.0725847.91aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
15.8815.8816.09ascon128av12
20.3420.3420.68ascon128v12
20.3520.3520.69ascon80pqv12
25.7325.7925.88T:xoodyakround3
30.4830.5730.78ascon128abi32v12
35.2035.3436.23T:aes128gcmv1
38.6638.9440.20T:aes256gcmv1
40.2240.2240.30ascon128bi32v12
48.8848.9549.08romulusn
54.2054.9855.41T:schwaemm128128v2
54.9455.2155.41T:schwaemm256128v2
65.9066.0266.34T:giftcofb128v1
66.8166.9467.16romulusm
69.7169.7169.81T:schwaemm256256v2
70.47?70.81?85.06?T:grain128aeadv2
71.2771.7772.17T:schwaemm192192v2
77.3477.3477.89T:tinyjambu128v2
88.6188.6188.82T:tinyjambu192v2
92.5792.8593.58T:tinyjambu256v2
144.17144.17144.62T!!!romulust
149.90149.90150.68T:isapa128av20
277.49288.50288.57T:elephant200v2
608.63609.93613.67T:isapa128v20
780.98781.02781.21T:isapk128av20
4343.004359.164629.26T:isapk128v20
4672.544742.034742.46T:isapxv20
12250.3112256.1912257.89T:elephant176v2
15018.9715050.1615055.82T:elephant160v2
25811.0525824.9825842.33aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
15.8815.8815.88ascon128av12
20.3420.3420.34ascon128v12
20.3520.3520.35ascon80pqv12
25.7325.7425.90T:xoodyakround3
30.5330.5330.57ascon128abi32v12
35.4035.8136.00T:aes128gcmv1
38.6638.9639.20T:aes256gcmv1
39.9640.1340.13ascon128bi32v12
48.9148.9649.18romulusn
54.3055.0557.17T:schwaemm128128v2
55.0255.1355.30T:schwaemm256128v2
65.8465.9166.08T:giftcofb128v1
66.8466.9467.10romulusm
69.7169.7469.75T:schwaemm256256v2
70.47?70.47?85.06?T:grain128aeadv2
71.2771.8672.00T:schwaemm192192v2
77.1277.3477.34T:tinyjambu128v2
88.1688.6188.61T:tinyjambu192v2
91.4291.5091.98T!!!romulust
92.5392.5792.85T:tinyjambu256v2
96.2396.2696.26T:isapa128av20
277.49288.51288.58T:elephant200v2
316.77316.77316.77T:isapa128v20
518.64518.69519.16T:isapk128av20
2265.062289.582414.29T:isapk128v20
2425.652471.442471.45T:isapxv20
9245.359251.109290.07aes256gcmv1
12250.1412251.1912258.41T:elephant176v2
15004.4115038.1215050.74T:elephant160v2