VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Core 2 45nm (1067a); 2009 Intel Core 2 Duo E7600; 2 x 3060MHz; wolfdale, supercop-20240808

[Page version: 20240828 00:46:12]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Implementation notes

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
10.5610.6110.64ascon128av12
15.1815.1915.30ascon128v12
15.2815.3115.33ascon80pqv12
19.9019.9019.91ascon128abi32v12
20.2420.2720.29T:aes128gcmv1
24.8324.8424.85T:xoodyakround3
25.0525.0825.13T:aes256gcmv1
29.0429.0629.06ascon128bi32v12
30.5130.5930.66T:schwaemm256128v2
40.2440.3440.93T:schwaemm192192v2
40.4740.5040.65T:schwaemm256256v2
40.4840.9841.11T:schwaemm128128v2
48.7549.0349.06romulusn
53.6653.7053.79T:giftcofb128v1
62.0362.2464.78T:grain128aeadv2
63.4663.4963.50T:isapa128av20
66.4366.7168.35T:isapa128v20
78.8878.9278.95T:tinyjambu128v2
79.9279.9579.98romulusm
95.0195.5095.74T:tinyjambu192v2
102.56102.69102.90T:tinyjambu256v2
153.02153.25154.57T!!!romulust
237.72237.74237.98T:isapk128av20
252.92266.71267.65T:elephant200v2
318.10336.82341.46T:isapxv20
311.97?337.34?347.33?T:isapk128v20
13009.9313072.6113080.57T:elephant176v2
14740.9914778.6614786.41T:elephant160v2
33887.4933987.0535358.93aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
10.2810.2810.32ascon128av12
15.1215.2515.38ascon80pqv12
15.2715.2815.28ascon128v12
20.3020.3420.37T:aes128gcmv1
20.6220.6520.68ascon128abi32v12
22.2322.5322.67T:xoodyakround3
24.7824.8724.95T:aes256gcmv1
29.3329.3429.34ascon128bi32v12
30.9631.0031.04T:schwaemm256128v2
40.4740.5940.99T:schwaemm192192v2
40.7240.8140.81T:schwaemm256256v2
40.5041.2841.28T:schwaemm128128v2
49.0249.0249.22romulusn
53.4953.5453.58T:giftcofb128v1
61.25?62.40?74.12?T:grain128aeadv2
63.3263.3863.57T:isapa128av20
66.3766.7868.05T:isapa128v20
78.6878.6978.84T:tinyjambu128v2
79.5679.8280.16romulusm
94.5494.5994.90T:tinyjambu192v2
102.77102.88103.04T:tinyjambu256v2
153.12153.23154.46T!!!romulust
237.72237.73238.10T:isapk128av20
252.90266.64267.23T:elephant200v2
318.06336.78341.57T:isapxv20
311.98?337.33?347.62?T:isapk128v20
13010.9413072.3113080.95T:elephant176v2
14739.7714776.0714784.71T:elephant160v2
33862.3933993.2535785.88aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
10.2810.2910.32ascon128av12
15.1215.2515.27ascon80pqv12
15.2815.2815.28ascon128v12
20.3120.3520.40T:aes128gcmv1
20.4620.6220.64ascon128abi32v12
22.3122.6322.93T:xoodyakround3
24.7324.8624.94T:aes256gcmv1
29.3329.3529.37ascon128bi32v12
30.8230.9631.02T:schwaemm256128v2
33.6533.7333.96T:isapa128v20
40.2340.6040.91T:schwaemm192192v2
40.7440.7840.82T:schwaemm256256v2
40.8941.2741.41T:schwaemm128128v2
41.5141.6641.70T:isapa128av20
49.0249.0249.23romulusn
53.4853.5353.61T:giftcofb128v1
53.5053.5453.67T!!!romulust
61.37?62.40?74.13?T:grain128aeadv2
78.6678.7178.84T:tinyjambu128v2
79.7979.9780.46romulusm
94.5894.5994.68T:tinyjambu192v2
102.70102.88102.98T:tinyjambu256v2
162.52162.55162.70T:isapk128av20
182.47?200.60?210.94?T:isapk128v20
191.31207.71210.27T:isapxv20
253.43266.65267.69T:elephant200v2
723.50?855.42?2648.32?aes256gcmv1
13010.8213072.4913080.69T:elephant176v2
14738.7614775.9914786.75T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
10.3310.3710.39ascon128av12
14.1814.2114.24T:aes128gcmv1
15.1115.1215.12ascon128v12
15.1715.1915.19ascon80pqv12
16.5816.6016.64T:aes256gcmv1
17.7317.7617.77T:xoodyakround3
19.6919.7019.73ascon128abi32v12
29.1829.1929.19ascon128bi32v12
30.4530.6230.75T:schwaemm256128v2
39.7439.7839.82romulusn
40.5440.7140.78T:schwaemm192192v2
40.5240.7641.01T:schwaemm256256v2
40.5840.9241.02T:schwaemm128128v2
50.1450.1850.41T:isapa128v20
52.5852.6053.01T:isapa128av20
53.1853.2553.27T:giftcofb128v1
55.2155.3255.43romulusm
61.6661.8163.77T:grain128aeadv2
64.6164.6565.03T:tinyjambu128v2
74.5974.7174.90T:tinyjambu192v2
77.9477.9778.14T:tinyjambu256v2
103.48103.80104.01T!!!romulust
190.38200.28200.66T:elephant200v2
201.54201.57201.83T:isapk128av20
252.83264.80279.42T:isapk128v20
255.79272.75275.66T:isapxv20
9716.859763.949770.06T:elephant176v2
11060.3711109.8411113.77T:elephant160v2
17326.1617428.9018785.67aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
10.1910.2110.22ascon128av12
14.2214.2814.31T:aes128gcmv1
15.0615.0615.10ascon80pqv12
15.2415.2415.24ascon128v12
16.3916.4516.51T:aes256gcmv1
16.5616.5916.62T:xoodyakround3
20.0420.0520.05ascon128abi32v12
29.1129.1329.15ascon128bi32v12
30.3830.7430.80T:schwaemm256128v2
39.8239.8340.02romulusn
40.3640.4940.69T:schwaemm192192v2
40.6040.9141.18T:schwaemm256256v2
40.6841.0141.09T:schwaemm128128v2
50.0750.1450.41T:isapa128v20
52.5152.5352.68T:isapa128av20
53.1353.2053.38T:giftcofb128v1
55.2655.2755.43romulusm
60.85?61.84?72.55?T:grain128aeadv2
64.3064.3564.42T:tinyjambu128v2
74.4574.4974.51T:tinyjambu192v2
78.1478.1678.19T:tinyjambu256v2
103.52103.56103.71T!!!romulust
190.40200.23200.91T:elephant200v2
201.56201.58201.94T:isapk128av20
252.69264.82279.52T:isapk128v20
255.79272.75275.41T:isapxv20
9716.909763.989770.35T:elephant176v2
11059.4111107.6611111.63T:elephant160v2
17305.3117427.1919209.86aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
10.2010.2010.22ascon128av12
14.2214.2814.32T:aes128gcmv1
15.0615.0715.10ascon80pqv12
15.2415.2415.24ascon128v12
16.3816.4316.49T:aes256gcmv1
16.5516.6116.66T:xoodyakround3
20.0320.1920.19ascon128abi32v12
29.1329.3929.46ascon128bi32v12
30.5830.7830.85T:schwaemm256128v2
33.7033.7033.80T:isapa128v20
39.8339.8740.02romulusn
40.3740.4940.61T:schwaemm192192v2
40.6140.8341.13T:schwaemm256256v2
40.5341.0341.14T:schwaemm128128v2
41.6341.7141.75T:isapa128av20
53.1353.2253.34T:giftcofb128v1
53.7353.8554.14T!!!romulust
55.1955.2755.70romulusm
60.82?61.75?72.55?T:grain128aeadv2
64.2664.3464.38T:tinyjambu128v2
74.4774.4774.50T:tinyjambu192v2
78.0278.1678.19T:tinyjambu256v2
163.97164.00164.20T:isapk128av20
188.17?196.45?211.48?T:isapk128v20
190.08200.23200.92T:elephant200v2
192.20208.21209.80T:isapxv20
737.97?859.85?2641.30?aes256gcmv1
9717.529763.969770.52T:elephant176v2
11057.9711108.8711112.97T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
8.058.088.11T:aes128gcmv1
8.088.118.15T:aes256gcmv1
10.0710.1310.24ascon128av12
10.6410.6710.73T:xoodyakround3
15.0215.0315.03ascon128v12
15.0515.0715.07ascon80pqv12
19.4419.5319.63ascon128abi32v12
29.3129.3229.33ascon128bi32v12
30.3430.4130.74T:schwaemm256128v2
30.5430.5730.75romulusn
30.7930.8130.88romulusm
33.6133.6534.49T:isapa128v20
40.3840.4040.58T:schwaemm256256v2
40.4040.5740.74T:schwaemm192192v2
40.4340.8641.30T:schwaemm128128v2
41.7941.8041.82T:isapa128av20
50.3450.3550.39T:tinyjambu128v2
52.7752.7852.80T:giftcofb128v1
53.4253.4453.44T:tinyjambu256v2
53.7453.7753.83T!!!romulust
53.6754.2754.72T:tinyjambu192v2
61.1461.4762.84T:grain128aeadv2
128.76135.06135.52T:elephant200v2
165.39165.40165.45T:isapk128av20
183.88?201.60?212.26?T:isapk128v20
191.39?208.72?213.12?T:isapxv20
750.38?851.99?2221.58?aes256gcmv1
6424.896456.836461.59T:elephant176v2
7366.697390.987413.49T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
8.068.108.15T:aes256gcmv1
8.078.188.22T:aes128gcmv1
10.1010.1310.16ascon128av12
10.6410.6710.68T:xoodyakround3
15.0115.0215.09ascon80pqv12
15.1115.1115.11ascon128v12
19.4019.4819.48ascon128abi32v12
28.9028.9128.91ascon128bi32v12
30.3430.4230.57T:schwaemm256128v2
30.6730.6930.77romulusn
30.7630.8330.89romulusm
33.5033.5033.68T:isapa128v20
39.9940.1440.46T:schwaemm192192v2
40.3940.4040.43T:schwaemm256256v2
40.3741.0441.51T:schwaemm128128v2
41.7741.8141.83T:isapa128av20
49.8149.8949.90T:tinyjambu128v2
52.7152.7753.32T:giftcofb128v1
53.6153.6153.62T:tinyjambu256v2
53.6453.7953.80T!!!romulust
54.3554.3854.40T:tinyjambu192v2
60.03?61.29?71.28?T:grain128aeadv2
128.21135.02135.52T:elephant200v2
165.40165.42165.45T:isapk128av20
183.90?201.60?212.24?T:isapk128v20
191.05?208.72?213.06?T:isapxv20
723.52?859.18?2648.39?aes256gcmv1
6425.836456.776461.89T:elephant176v2
7367.047384.157393.64T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
8.068.088.12T:aes256gcmv1
8.058.198.23T:aes128gcmv1
10.1210.1310.16ascon128av12
10.6510.6710.69T:xoodyakround3
15.0115.0215.09ascon80pqv12
15.1115.1115.11ascon128v12
19.4119.4219.44ascon128abi32v12
28.8928.9128.93ascon128bi32v12
30.3130.3730.60T:schwaemm256128v2
30.6630.6930.77romulusn
30.8330.8430.89romulusm
33.4333.6534.68T:isapa128v20
40.3940.4140.45T:schwaemm256256v2
40.2840.5040.63T:schwaemm192192v2
40.0340.9741.34T:schwaemm128128v2
41.7641.8041.83T:isapa128av20
49.8249.8949.90T:tinyjambu128v2
52.7252.7952.97T:giftcofb128v1
53.6153.6153.61T:tinyjambu256v2
53.5953.8153.82T!!!romulust
54.3554.3854.40T:tinyjambu192v2
60.17?61.57?71.28?T:grain128aeadv2
128.21135.01135.51T:elephant200v2
165.39165.45165.48T:isapk128av20
183.88?201.60?211.83?T:isapk128v20
191.72?208.72?213.05?T:isapxv20
723.75?857.22?2648.29?aes256gcmv1
6424.856456.686461.80T:elephant176v2
7363.317382.757398.54T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
10.5710.5810.70ascon128av12
15.0715.0915.13T:aes128gcmv1
15.3315.3315.33ascon128v12
15.3915.4115.41ascon80pqv12
17.5417.5617.62T:aes256gcmv1
18.0618.0618.11T:xoodyakround3
20.1420.1420.20ascon128abi32v12
29.6429.6429.64ascon128bi32v12
31.5331.6031.74T:schwaemm256128v2
40.0240.1540.18romulusn
41.3341.4941.63T:schwaemm128128v2
41.5541.6841.72T:schwaemm192192v2
41.7141.7641.82T:schwaemm256256v2
53.7353.7753.80T:giftcofb128v1
55.7255.7455.88romulusm
56.6056.6956.70T:isapa128av20
62.1662.3064.24T:grain128aeadv2
65.1765.1765.21T:tinyjambu128v2
73.3973.4673.54T:isapa128v20
74.9075.2475.38T:tinyjambu192v2
78.6578.6578.71T:tinyjambu256v2
105.19105.34105.75T!!!romulust
195.18204.40204.42T:elephant200v2
227.42227.44227.76T:isapk128av20
434.17440.89450.52T:isapk128v20
444.28461.18462.31T:isapxv20
9794.289838.089841.62T:elephant176v2
11190.7811234.7911237.67T:elephant160v2
17765.2217765.9019054.66aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
10.4310.4310.46ascon128av12
15.1215.1715.19T:aes128gcmv1
15.3215.3315.34ascon80pqv12
15.4415.4415.44ascon128v12
16.7516.7816.80T:xoodyakround3
17.3517.4017.45T:aes256gcmv1
20.4820.4820.48ascon128abi32v12
29.5929.5929.83ascon128bi32v12
31.6831.7031.79T:schwaemm256128v2
40.2340.2540.34romulusn
41.4841.5341.93T:schwaemm192192v2
41.3741.5841.59T:schwaemm128128v2
41.8541.8841.98T:schwaemm256256v2
53.6953.7053.86T:giftcofb128v1
55.7355.9356.14romulusm
56.6657.0157.08T:isapa128av20
62.17?62.42?72.32?T:grain128aeadv2
64.8064.8964.94T:tinyjambu128v2
73.4573.5074.55T:isapa128v20
75.0675.0775.10T:tinyjambu192v2
78.7978.8478.85T:tinyjambu256v2
105.16105.34105.64T!!!romulust
195.15204.36204.47T:elephant200v2
227.46227.46227.98T:isapk128av20
434.17440.90450.53T:isapk128v20
444.00461.17462.13T:isapxv20
9794.099837.919841.56T:elephant176v2
11194.8511235.7211236.61T:elephant160v2
17767.4917772.4019452.86aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
10.4310.4310.43ascon128av12
15.1615.1815.22T:aes128gcmv1
15.3215.3215.34ascon80pqv12
15.4415.4415.55ascon128v12
16.7816.8116.92T:xoodyakround3
17.3717.4217.46T:aes256gcmv1
20.4820.6120.61ascon128abi32v12
29.5929.5929.60ascon128bi32v12
31.6831.7031.79T:schwaemm256128v2
40.2340.2540.34romulusn
41.2541.4641.58T:schwaemm128128v2
41.4841.6341.81T:schwaemm192192v2
41.8541.8841.92T:schwaemm256256v2
43.9744.0244.28T:isapa128av20
45.5145.5145.51T:isapa128v20
53.6953.7453.88T:giftcofb128v1
55.3055.4355.45T!!!romulust
55.6255.7355.76romulusm
62.04?62.05?72.32?T:grain128aeadv2
64.8064.9165.09T:tinyjambu128v2
75.0475.1075.15T:tinyjambu192v2
78.7978.8478.93T:tinyjambu256v2
180.18180.20180.34T:isapk128av20
195.14204.37204.42T:elephant200v2
281.12288.05298.39T:isapk128v20
288.91304.22305.17T:isapxv20
1199.14?1205.13?2884.00?aes256gcmv1
9793.509838.379841.61T:elephant176v2
11190.0311235.5911237.30T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
15.7916.1616.29ascon128av12
20.2320.2720.32ascon128v12
20.4220.4220.53ascon80pqv12
26.6926.7327.09T:xoodyakround3
30.0230.1330.59ascon128abi32v12
35.6035.7436.06T:aes128gcmv1
39.4539.7439.94T:aes256gcmv1
39.8739.8740.13ascon128bi32v12
48.8649.1649.43romulusn
54.2655.0257.14T:schwaemm128128v2
55.1055.2555.50T:schwaemm256128v2
64.7265.0065.64romulusm
65.7465.8966.18T:giftcofb128v1
69.5969.8069.99T:schwaemm256256v2
70.6871.4574.34T:grain128aeadv2
71.2771.8672.28T:schwaemm192192v2
77.1377.2377.64T:tinyjambu128v2
87.6887.6888.05T:tinyjambu192v2
92.4292.4593.07T:tinyjambu256v2
144.23144.55145.36T!!!romulust
149.29149.80149.88T:isapa128av20
277.59288.37288.45T:elephant200v2
605.75609.55611.64T:isapa128v20
780.73780.78780.95T:isapk128av20
4343.084358.884628.92T:isapk128v20
4672.484741.754741.95T:isapxv20
12250.2912255.9112258.35T:elephant176v2
15010.9815050.5915055.03T:elephant160v2
25807.1225813.9027240.63aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
15.8815.8816.09ascon128av12
20.3420.3420.68ascon128v12
20.3520.4020.69ascon80pqv12
25.7325.7925.88T:xoodyakround3
30.4830.5730.93ascon128abi32v12
35.2035.3436.23T:aes128gcmv1
38.6438.8040.22T:aes256gcmv1
40.2240.2240.33ascon128bi32v12
48.8848.9549.08romulusn
54.2054.9855.41T:schwaemm128128v2
54.9455.2155.41T:schwaemm256128v2
65.9066.0266.34T:giftcofb128v1
66.8166.9467.16romulusm
69.7169.7169.81T:schwaemm256256v2
70.47?70.81?85.06?T:grain128aeadv2
71.2771.7772.17T:schwaemm192192v2
77.3477.3477.89T:tinyjambu128v2
88.6188.6188.82T:tinyjambu192v2
92.5792.8593.58T:tinyjambu256v2
144.17144.17144.62T!!!romulust
149.90149.90150.68T:isapa128av20
277.49288.50288.57T:elephant200v2
608.63609.93613.67T:isapa128v20
780.98781.02781.21T:isapk128av20
4343.004359.164629.26T:isapk128v20
4672.544742.034742.46T:isapxv20
12250.3112256.1912257.89T:elephant176v2
15018.9715050.1615055.82T:elephant160v2
25808.1625820.6227685.93aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
15.8815.8815.88ascon128av12
20.3420.3420.34ascon128v12
20.3520.3520.40ascon80pqv12
25.7325.7425.90T:xoodyakround3
30.5330.5330.66ascon128abi32v12
35.4035.8136.00T:aes128gcmv1
38.9139.1739.88T:aes256gcmv1
39.9640.1340.19ascon128bi32v12
48.9148.9649.18romulusn
54.3055.0557.17T:schwaemm128128v2
55.0255.1355.30T:schwaemm256128v2
65.8465.9166.08T:giftcofb128v1
66.8466.9467.10romulusm
69.7169.7469.75T:schwaemm256256v2
70.47?70.47?85.06?T:grain128aeadv2
71.2771.8672.00T:schwaemm192192v2
77.1277.3477.34T:tinyjambu128v2
88.1688.6188.61T:tinyjambu192v2
91.4291.5091.98T!!!romulust
92.5392.5792.85T:tinyjambu256v2
96.2396.2696.26T:isapa128av20
277.49288.51288.58T:elephant200v2
316.77316.77316.77T:isapa128v20
518.64518.69519.16T:isapk128av20
2265.062289.582414.29T:isapk128v20
2425.652471.442471.45T:isapxv20
9243.95?9247.23?11121.03?aes256gcmv1
12250.1412251.1912258.41T:elephant176v2
15004.4115038.1215050.74T:elephant160v2