VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: armeabi; Cortex-A8 (413fc082); 2012 TI Sitara XAM3359AZCZ100; 1 x 1000MHz; bblack, supercop-20260330

[Page version: 20260915 16:00:40]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
19.2719.3619.79ascon128abi32v12
22.9223.1823.83ascon128av12
27.1727.8628.12T:aes128gcmv1
28.9529.2129.69ascon128bi32v12
34.6834.9035.29T:aes256gcmv1
36.4637.0237.50ascon128v12
36.9837.2037.85ascon80pqv12
44.0544.7944.79T:schwaemm256128v2
49.9650.4350.52T:giftcofb128v1
58.8558.8559.38T:schwaemm192192v2
59.6859.9059.90T:xoodyakround3
62.5062.5463.54T:schwaemm256256v2
63.5063.6364.06T:schwaemm128128v2
84.3884.3885.07T:isapa128av20
88.0288.3288.54T:tinyjambu128v2
104.64105.21105.69T:isapa128v20
105.77106.25106.25T:tinyjambu192v2
108.53108.85109.51T:romulusn
110.42110.50111.41T:tinyjambu256v2
182.81183.46185.55T:romulusm
244.62244.79245.83romulusn
257.29257.47262.07T:isapk128av20
339.84341.62352.78T:isapk128v20
426.48427.17433.90romulusm
440.10440.54445.92T:elephant200v2
602.95618.32626.09T:isapxv20
922.14927.91936.94T!!!romulust
20229.6420241.5420272.70T:elephant160v2
22175.1322185.1622206.47T:elephant176v2
109617.97109693.27109847.31aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
19.1819.7019.79ascon128abi32v12
22.9623.4423.48ascon128av12
27.5227.6028.17T:aes128gcmv1
28.9529.6929.69ascon128bi32v12
34.3834.8135.50T:aes256gcmv1
35.4235.8136.02ascon80pqv12
35.9436.2036.98ascon128v12
44.5744.7944.79T:schwaemm256128v2
49.4849.9150.00T:giftcofb128v1
57.2957.2957.86T:xoodyakround3
58.8558.9859.38T:schwaemm192192v2
62.5062.5963.50T:schwaemm256256v2
63.5463.6364.41T:schwaemm128128v2
84.3884.4285.07T:isapa128av20
89.5889.5890.06T:tinyjambu128v2
104.82105.21105.30T:isapa128v20
107.16107.81107.81T:tinyjambu192v2
111.85111.98112.28T:tinyjambu256v2
162.11162.50163.15T:romulusn
235.29235.81238.09T:romulusm
244.79244.79245.57romulusn
257.29257.60262.15T:isapk128av20
340.89341.75351.69T:isapk128v20
428.12428.60436.11romulusm
440.10440.62444.84T:elephant200v2
604.43619.27626.09T:isapxv20
922.31930.56937.33T!!!romulust
20227.3920239.4120264.24T:elephant160v2
22171.8822191.3622229.30T:elephant176v2
109610.33109689.32109836.81aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
19.1819.7519.79ascon128abi32v12
23.0523.4423.44ascon128av12
27.4727.6028.12T:aes128gcmv1
28.9129.6929.69ascon128bi32v12
34.3834.7735.29T:aes256gcmv1
35.4235.8535.98ascon80pqv12
35.9436.2836.89ascon128v12
44.5744.7944.79T:schwaemm256128v2
49.4849.9150.00T:giftcofb128v1
51.5252.0052.60T:isapa128v20
52.0852.5252.86T:isapa128av20
57.3857.8158.25T:xoodyakround3
58.8559.0359.38T:schwaemm192192v2
62.5062.5963.54T:schwaemm256256v2
63.5463.6764.41T:schwaemm128128v2
89.5889.5890.06T:tinyjambu128v2
107.29107.81107.81T:tinyjambu192v2
111.85111.98112.24T:tinyjambu256v2
161.98162.50164.26T:romulusn
169.36169.79170.05T:isapk128av20
210.59211.07214.97T:isapk128v20
235.29235.68237.83T:romulusm
244.70244.79246.05romulusn
302.60303.65307.81T:isapxv20
309.11309.38313.50T!!!romulust
428.12428.39436.28romulusm
440.10440.41444.88T:elephant200v2
1383.981406.731410.50aes256gcmv1
20228.1720238.5020274.61T:elephant160v2
22174.7022188.7222218.58T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
17.8818.0818.32T:aes128gcmv1
19.7919.7919.97ascon128abi32v12
21.5921.6121.74T:aes256gcmv1
22.9222.9623.18ascon128av12
29.2129.4329.43ascon128bi32v12
34.3834.3834.57ascon80pqv12
34.8334.9034.96ascon128v12
44.0144.0144.37T:schwaemm256128v2
45.0545.1245.42T:xoodyakround3
49.4849.5249.78T:giftcofb128v1
58.3658.7958.85T:schwaemm192192v2
62.5062.7362.92T:schwaemm256256v2
63.2863.3163.54T:schwaemm128128v2
67.7168.1268.32T:isapa128av20
69.0169.1169.27T:tinyjambu128v2
79.9380.2180.66T:isapa128v20
83.8583.8584.08T:tinyjambu192v2
84.6284.9084.99T:tinyjambu256v2
91.9392.2593.03T:romulusn
129.30129.43131.09T:romulusm
212.76213.02216.15romulusn
213.50213.76217.19T:isapk128av20
274.91278.60282.88T:isapk128v20
304.23304.52310.12romulusm
330.77331.18337.63T:elephant200v2
450.28457.42459.85T:isapxv20
614.39620.23620.83T!!!romulust
15174.6715186.5015200.95T:elephant160v2
16570.2316584.3116606.32T:elephant176v2
55518.7955565.0255628.32aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
17.8618.2318.38T:aes128gcmv1
19.7919.9220.05ascon128abi32v12
21.3521.6121.94T:aes256gcmv1
22.8523.0723.18ascon128av12
28.7529.0429.21ascon128bi32v12
33.0733.1233.44ascon80pqv12
33.5933.7034.03ascon128v12
44.0144.1044.30T:xoodyakround3
44.0144.2144.49T:schwaemm256128v2
49.2249.3549.50T:giftcofb128v1
58.3858.8558.85T:schwaemm192192v2
62.5062.7362.96T:schwaemm256256v2
63.4163.5463.57T:schwaemm128128v2
67.7568.1668.47T:isapa128av20
69.7369.9970.15T:tinyjambu128v2
79.9080.2180.82T:isapa128v20
84.5584.6484.90T:tinyjambu192v2
85.2285.4285.51T:tinyjambu256v2
118.75119.08119.79T:romulusn
155.44155.47158.20T:romulusm
212.73213.08216.63romulusn
213.45213.78216.30T:isapk128av20
273.78278.80283.57T:isapk128v20
305.08305.24311.04romulusm
330.71331.32337.67T:elephant200v2
450.37456.03458.90T:isapxv20
614.36620.16621.52T!!!romulust
15171.8115183.5715196.03T:elephant160v2
16569.5516585.0316633.64T:elephant176v2
55502.2455535.8355600.24aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
17.8218.2318.29T:aes128gcmv1
19.7919.9420.07ascon128abi32v12
21.3521.5721.90T:aes256gcmv1
22.8323.1623.18ascon128av12
28.7528.9529.17ascon128bi32v12
33.0733.0933.33ascon80pqv12
33.5933.6434.03ascon128v12
44.0144.2144.51T:schwaemm256128v2
44.0144.2444.53T:xoodyakround3
49.2249.3749.48T:giftcofb128v1
51.8052.0052.15T:isapa128av20
53.3953.5253.88T:isapa128v20
58.4058.8558.85T:schwaemm192192v2
62.5062.7363.01T:schwaemm256256v2
63.4163.5463.54T:schwaemm128128v2
69.7769.9270.05T:tinyjambu128v2
84.5584.6484.90T:tinyjambu192v2
85.2085.4285.68T:tinyjambu256v2
118.82119.17120.41T:romulusn
155.27155.47157.68T:romulusm
169.53169.55171.72T:isapk128av20
210.72211.18216.12T:isapk128v20
212.83213.02216.54romulusn
298.33298.98304.06T:isapxv20
305.01305.27311.10romulusm
306.80307.13313.80T!!!romulust
330.75331.10337.07T:elephant200v2
1400.391403.321410.20aes256gcmv1
15175.7815187.9615209.68T:elephant160v2
16567.8816582.2016602.47T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
8.258.338.85T:aes256gcmv1
7.81?8.46?8.85?T:aes128gcmv1
19.7920.1820.79ascon128abi32v12
22.4022.7422.92ascon128av12
29.0429.5629.69ascon128bi32v12
30.2130.6031.25T:xoodyakround3
31.2531.4231.77ascon80pqv12
32.8132.8132.81ascon128v12
43.7543.7543.97T:schwaemm256128v2
48.4449.0049.48T:giftcofb128v1
49.4850.0950.52T:tinyjambu128v2
51.3051.5651.56T:isapa128av20
55.0355.2155.21T:isapa128v20
58.1258.3358.33T:schwaemm192192v2
58.5958.8558.85T:tinyjambu256v2
61.4661.9461.98T:tinyjambu192v2
62.0762.7263.02T:schwaemm256256v2
62.5063.0263.54T:schwaemm128128v2
75.0075.4675.65T:romulusm
75.5275.5275.78T:romulusn
169.57169.79169.92T:isapk128av20
180.73181.21182.64romulusn
181.77181.77183.07romulusm
210.46211.20216.88T:isapk128v20
223.96223.96224.52T:elephant200v2
290.93294.10301.35T:isapxv20
304.17304.60307.60T!!!romulust
1400.131411.631413.45aes256gcmv1
10107.0710122.4810144.66T:elephant160v2
10957.5510966.7111006.73T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
7.90?8.38?8.85?T:aes256gcmv1
7.81?8.51?8.85?T:aes128gcmv1
19.7920.1020.83ascon128abi32v12
22.4422.9222.92ascon128av12
28.1228.4728.91ascon128bi32v12
30.2130.6931.25T:xoodyakround3
30.4730.7330.73ascon80pqv12
31.1631.2531.25ascon128v12
43.7543.7544.01T:schwaemm256128v2
48.4448.9149.48T:giftcofb128v1
49.4850.0950.52T:tinyjambu128v2
51.3051.5651.56T:isapa128av20
55.1255.2155.21T:isapa128v20
58.1258.3358.38T:schwaemm192192v2
58.5958.8558.85T:tinyjambu256v2
61.5561.9861.98T:tinyjambu192v2
62.0262.6363.02T:schwaemm256256v2
62.5063.1163.54T:schwaemm128128v2
75.0075.2675.65T:romulusm
75.5275.5275.85T:romulusn
169.53169.79170.14T:isapk128av20
180.73181.21182.60romulusn
181.77181.77182.75romulusm
210.59211.02217.27T:isapk128v20
223.96223.96224.70T:elephant200v2
293.14294.10301.43T:isapxv20
304.08304.47307.60T!!!romulust
1399.351408.941412.28aes256gcmv1
10107.0310122.7010144.53T:elephant160v2
10958.0310962.5410983.68T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
7.94?8.42?8.85?T:aes256gcmv1
7.81?8.46?8.85?T:aes128gcmv1
19.7920.1820.83ascon128abi32v12
22.4422.9222.92ascon128av12
28.1228.4729.04ascon128bi32v12
30.2130.5631.25T:xoodyakround3
30.4730.7330.73ascon80pqv12
31.2531.2531.25ascon128v12
43.7543.7543.88T:schwaemm256128v2
48.4449.0949.48T:giftcofb128v1
49.4850.0050.52T:tinyjambu128v2
51.2251.5651.56T:isapa128av20
55.1655.2155.25T:isapa128v20
58.1658.3358.33T:schwaemm192192v2
58.5558.8558.85T:tinyjambu256v2
61.5061.9861.98T:tinyjambu192v2
62.1162.7263.02T:schwaemm256256v2
62.5063.1163.54T:schwaemm128128v2
75.0075.3975.72T:romulusm
75.5275.5275.78T:romulusn
169.57169.79170.10T:isapk128av20
180.73181.03181.55romulusn
181.77181.77182.29romulusm
210.72211.07215.32T:isapk128v20
223.96223.96224.61T:elephant200v2
293.14294.14301.30T:isapxv20
303.99304.64308.07T!!!romulust
1397.091407.421411.85aes256gcmv1
10104.7710119.3610143.32T:elephant160v2
10956.9010965.4510996.83T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
20.7820.8320.83ascon128abi32v12
21.4821.4821.81T:aes128gcmv1
23.9324.0924.09ascon128av12
25.3925.3925.53T:aes256gcmv1
30.1430.2730.30ascon128bi32v12
35.3535.4835.51ascon80pqv12
35.8135.8136.02ascon128v12
45.9045.9045.90T:schwaemm256128v2
46.1046.2246.22T:xoodyakround3
50.4850.7850.78T:giftcofb128v1
60.2260.4760.59T:schwaemm192192v2
64.4564.6664.78T:schwaemm128128v2
64.7864.8265.10T:schwaemm256256v2
69.9970.3170.31T:tinyjambu128v2
73.5773.5773.68T:isapa128av20
84.9685.0085.29T:tinyjambu192v2
85.8685.9486.02T:tinyjambu256v2
93.7593.7593.95T:romulusn
113.80113.93114.23T:isapa128v20
130.86130.86131.23T:romulusm
215.37215.49217.81romulusn
242.00242.19244.44T:isapk128av20
306.80306.97311.69romulusm
338.22338.35343.51T:elephant200v2
478.05478.49486.17T:isapk128v20
623.29627.16631.80T!!!romulust
700.52703.72708.74T:isapxv20
15347.4715355.6015375.57T:elephant160v2
16695.8816701.8216715.20T:elephant176v2
56658.2856681.9756741.43aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
20.8320.8320.94ascon128abi32v12
21.4821.4821.89T:aes128gcmv1
24.0924.0924.09ascon128av12
25.0725.2825.61T:aes256gcmv1
29.7929.9529.95ascon128bi32v12
34.1834.1834.26ascon80pqv12
34.7034.8334.83ascon128v12
44.9245.0445.25T:xoodyakround3
45.9045.9046.10T:schwaemm256128v2
50.4350.4650.46T:giftcofb128v1
60.2260.4760.55T:schwaemm192192v2
64.6664.7864.82T:schwaemm128128v2
64.7864.7865.06T:schwaemm256256v2
70.9670.9670.96T:tinyjambu128v2
73.5773.5773.68T:isapa128av20
85.6585.9485.98T:tinyjambu192v2
86.4786.5986.63T:tinyjambu256v2
113.77113.93114.56T:isapa128v20
120.44120.77120.93T:romulusn
156.90157.15158.08T:romulusm
215.45215.54218.42romulusn
242.05242.19244.74T:isapk128av20
308.27308.27312.74romulusm
338.22338.43343.34T:elephant200v2
478.14478.27486.41T:isapk128v20
623.17627.60632.32T!!!romulust
700.47703.56708.63T:isapxv20
15347.4915355.3615370.06T:elephant160v2
16696.8016707.5716725.88T:elephant176v2
56636.2656651.9956699.35aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
20.8320.8320.86ascon128abi32v12
21.4821.4821.62T:aes128gcmv1
24.0924.0924.09ascon128av12
25.0725.2525.42T:aes256gcmv1
29.7929.9529.95ascon128bi32v12
34.1834.1834.29ascon80pqv12
34.7234.8334.88ascon128v12
45.2545.2545.25T:xoodyakround3
45.9045.9046.14T:schwaemm256128v2
50.4650.4650.46T:giftcofb128v1
55.3455.3755.66T:isapa128av20
60.2260.4760.55T:schwaemm192192v2
64.6264.7864.82T:schwaemm128128v2
64.7864.7865.06T:schwaemm256256v2
70.9670.9670.96T:tinyjambu128v2
70.9971.2971.29T:isapa128v20
85.6585.9485.94T:tinyjambu192v2
86.3986.5986.63T:tinyjambu256v2
120.44120.61120.89T:romulusn
156.90157.15158.77T:romulusm
185.82185.87186.88T:isapk128av20
215.41215.49218.18romulusn
308.27308.35313.72romulusm
315.51315.76319.20T:isapk128v20
315.76316.00321.00T!!!romulust
338.22338.27342.91T:elephant200v2
426.76426.84429.17T:isapxv20
2539.172539.662546.52aes256gcmv1
15348.6115359.3215380.86T:elephant160v2
16696.9416707.0916729.33T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
39.06?39.06?46.88?ascon128abi32v12
46.8846.8846.88ascon128av12
46.88?48.83?54.69?ascon128bi32v12
54.69?54.69?61.85?ascon128v12
54.69?54.69?61.85?ascon80pqv12
70.3174.2278.12T:giftcofb128v1
78.1278.1278.12T:xoodyakround3
85.9485.9485.94T:schwaemm256128v2
93.7593.7593.75T:schwaemm128128v2
93.7593.7593.75T:tinyjambu128v2
93.7599.61101.56T:aes128gcmv1
101.56101.56103.52T:aes256gcmv1
109.38109.38109.38T:schwaemm192192v2
109.38109.38113.28T:tinyjambu192v2
109.38109.38113.93T:tinyjambu256v2
110.03117.19117.19T:schwaemm256256v2
125.00132.81132.81T:romulusn
164.06169.92171.88T:romulusm
195.96203.12203.12T:isapa128av20
273.44273.44273.44romulusn
359.38365.23367.19romulusm
489.58492.19492.19T:elephant200v2
843.75843.75844.40T!!!romulust
851.56851.56852.21T:isapk128av20
890.62890.62891.93T:isapa128v20
5062.505062.505102.21T:isapk128v20
6358.726359.386419.92T:isapxv20
20480.4720638.6720663.41T:elephant160v2
20712.2420875.0020886.07T:elephant176v2
82730.4782817.0682966.15aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
39.06?45.57?46.88?ascon128abi32v12
46.8846.8850.78ascon128av12
46.88?54.04?54.69?ascon128bi32v12
54.69?54.69?61.20?ascon80pqv12
54.69?55.34?62.50?ascon128v12
70.3176.1778.12T:giftcofb128v1
78.1278.1278.12T:xoodyakround3
85.9485.9485.94T:schwaemm256128v2
93.7593.75101.56T:aes128gcmv1
93.7593.7593.75T:schwaemm128128v2
93.7593.7593.75T:tinyjambu128v2
100.26101.56102.21T:aes256gcmv1
108.72109.38109.38T:schwaemm192192v2
109.38109.38115.23T:tinyjambu192v2
109.38109.38117.19T:tinyjambu256v2
109.38117.19117.19T:schwaemm256256v2
156.25156.25160.16T:romulusn
194.34195.31195.31T:romulusm
199.22203.12203.12T:isapa128av20
273.44273.44273.44romulusn
375.00380.86382.81romulusm
491.54492.19492.19T:elephant200v2
843.75843.75847.66T!!!romulust
851.56851.56854.17T:isapk128av20
890.62890.62891.28T:isapa128v20
5062.505062.505089.84T:isapk128v20
6358.076360.036452.47T:isapxv20
20451.8220635.4220641.28T:elephant160v2
20726.5620877.6020901.04T:elephant176v2
82653.6582798.1882837.24aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
39.06?44.92?46.88?ascon128abi32v12
46.8846.8851.43ascon128av12
46.88?51.43?54.69?ascon128bi32v12
54.6954.6960.55ascon80pqv12
54.69?54.69?62.50?ascon128v12
70.3176.1778.12T:giftcofb128v1
78.1278.1278.12T:xoodyakround3
85.9485.9485.94T:schwaemm256128v2
93.7593.75100.26T:aes128gcmv1
93.7593.7593.75T:schwaemm128128v2
93.7593.7595.05T:tinyjambu128v2
101.56101.56102.21T:aes256gcmv1
108.72109.38109.38T:schwaemm192192v2
109.38109.38115.89T:tinyjambu192v2
109.38109.38117.19T:tinyjambu256v2
110.03117.19117.19T:schwaemm256256v2
132.81134.11140.62T:isapa128av20
156.25156.25158.20T:romulusn
192.38195.31197.27T:romulusm
273.44273.44273.44romulusn
375.00379.88382.81romulusm
475.91476.56476.56T:isapa128v20
491.54492.19492.19T:elephant200v2
521.48523.44523.44T!!!romulust
523.44523.44524.09T:isapk128av20
2675.782679.692680.99T:isapk128v20
3319.013320.313329.43T:isapxv20
20500.6520634.7720651.04T:elephant160v2
20723.3120875.6520887.37T:elephant176v2
28658.2028664.0628674.48aes256gcmv1