VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: armeabi; Cortex-A8 (413fc082); 2012 TI Sitara XAM3359AZCZ100; 1 x 1000MHz; bblack, supercop-20251114

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
19.4019.4419.50ascon128abi32v12
23.2823.3123.32ascon128av12
27.0327.6727.93T:aes128gcmv1
29.2429.6029.86ascon128bi32v12
34.4235.0235.95T:aes256gcmv1
37.3437.3737.42ascon80pqv12
37.3237.3937.42ascon128v12
44.4844.5044.56T:schwaemm256128v2
49.4549.5149.56T:giftcofb128v1
58.9458.9859.13T:schwaemm192192v2
59.7359.7659.88T:xoodyakround3
62.8662.9163.04T:schwaemm256256v2
63.4663.7064.15T:schwaemm128128v2
85.5385.6285.77T:isapa128av20
88.2188.2588.28T:tinyjambu128v2
105.98106.01106.09T:tinyjambu192v2
107.45107.66108.08T:isapa128v20
108.67108.88110.02T:romulusn
110.73110.75110.91T:tinyjambu256v2
183.02183.56185.98T:romulusm
216.92217.26218.11romulusn
277.13?309.38?418.14?T:isapk128av20
423.77432.12443.28romulusm
440.39440.75443.19T:elephant200v2
360.15?441.67?619.57?T:isapk128v20
608.22613.65626.73T:isapxv20
923.35940.64957.78T!!!romulust
20227.4920245.3220280.88T:elephant160v2
22171.7122193.1522226.70T:elephant176v2
109629.53109736.63109877.55aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
19.4719.5219.57ascon128abi32v12
23.3223.3623.38ascon128av12
27.3327.9028.64T:aes128gcmv1
29.3629.4529.80ascon128bi32v12
34.5234.9735.68T:aes256gcmv1
35.6735.7635.84ascon80pqv12
36.5736.6437.23ascon128v12
44.6844.7044.75T:schwaemm256128v2
48.8349.0049.41T:giftcofb128v1
57.5057.6358.15T:xoodyakround3
58.9859.0659.14T:schwaemm192192v2
62.9362.9863.20T:schwaemm256256v2
63.5464.2065.28T:schwaemm128128v2
85.5785.6785.80T:isapa128av20
89.7289.7589.78T:tinyjambu128v2
107.23107.26107.29T:tinyjambu192v2
107.29107.70108.79T:isapa128v20
111.98112.00112.05T:tinyjambu256v2
162.27162.51163.88T:romulusn
217.05217.20217.93romulusn
235.45235.93242.86T:romulusm
263.45?309.94?379.30?T:isapk128av20
423.62432.12441.28romulusm
440.39440.59442.40T:elephant200v2
375.79?448.47?514.55?T:isapk128v20
607.87612.60623.69T:isapxv20
923.95933.40940.87T!!!romulust
20227.9020246.6120266.78T:elephant160v2
22171.6922184.4922204.97T:elephant176v2
109636.38109670.24109788.32aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
19.4719.5219.53ascon128abi32v12
23.3323.3723.43ascon128av12
27.4527.7828.55T:aes128gcmv1
29.3629.6229.80ascon128bi32v12
34.6734.9735.57T:aes256gcmv1
35.7235.7435.78ascon80pqv12
36.5836.6636.77ascon128v12
44.6844.7044.73T:schwaemm256128v2
48.9849.0449.12T:giftcofb128v1
51.9552.1252.34T:isapa128v20
52.0252.1852.25T:isapa128av20
57.7757.8957.95T:xoodyakround3
58.9959.0659.14T:schwaemm192192v2
62.9162.9462.96T:schwaemm256256v2
63.5263.8865.26T:schwaemm128128v2
89.7389.7589.80T:tinyjambu128v2
107.24107.28107.81T:tinyjambu192v2
111.99112.02112.04T:tinyjambu256v2
162.36162.53163.60T:romulusn
166.87?195.31?237.97?T:isapk128av20
217.05217.19218.05romulusn
235.45236.16241.45T:romulusm
211.78?274.99?338.18?T:isapk128v20
297.27297.40305.23T!!!romulust
303.14304.00306.25T:isapxv20
423.33432.14441.35romulusm
440.40440.58442.36T:elephant200v2
1393.481407.621412.72aes256gcmv1
20230.4920244.4520277.65T:elephant160v2
22168.7422185.8122203.65T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
17.7718.0018.37T:aes128gcmv1
19.8119.8519.90ascon128abi32v12
21.4421.6522.00T:aes256gcmv1
23.0023.0123.24ascon128av12
29.3029.3729.61ascon128bi32v12
34.4234.4534.50ascon80pqv12
35.0235.0735.14ascon128v12
44.1344.1544.15T:schwaemm256128v2
45.2045.2746.31T:xoodyakround3
48.7948.8449.02T:giftcofb128v1
58.5958.6858.72T:schwaemm192192v2
62.7262.7662.80T:schwaemm256256v2
63.2463.5463.60T:schwaemm128128v2
68.2168.2968.81T:isapa128av20
69.1169.1369.16T:tinyjambu128v2
78.8379.3482.51T:isapa128v20
83.7483.7583.79T:tinyjambu192v2
84.8684.8884.91T:tinyjambu256v2
92.0992.2793.09T:romulusn
129.15129.32129.72T:romulusm
212.14212.57227.33romulusn
229.51?254.46?298.45?T:isapk128av20
314.41321.11325.73romulusm
330.85331.11341.39T:elephant200v2
310.36?346.09?432.15?T:isapk128v20
451.61458.10459.36T:isapxv20
610.55618.42627.15T!!!romulust
15182.0315190.7915239.25T:elephant160v2
16565.8216585.0016590.20T:elephant176v2
55516.4255537.3055579.91aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
17.9018.1018.39T:aes128gcmv1
19.8119.8920.02ascon128abi32v12
21.5021.8022.72T:aes256gcmv1
23.0023.0323.06ascon128av12
28.9129.1329.30ascon128bi32v12
33.1533.2033.37ascon80pqv12
33.9234.0134.06ascon128v12
44.0144.1744.43T:xoodyakround3
44.2344.2444.29T:schwaemm256128v2
48.5348.5648.61T:giftcofb128v1
58.6458.6960.35T:schwaemm192192v2
62.7262.8262.85T:schwaemm256256v2
63.2663.5664.13T:schwaemm128128v2
68.2068.2868.42T:isapa128av20
69.8569.8869.93T:tinyjambu128v2
79.1579.3679.85T:isapa128v20
84.3684.3884.40T:tinyjambu192v2
85.4985.5085.52T:tinyjambu256v2
118.89119.07119.86T:romulusn
155.30155.59160.23T:romulusm
212.16212.57221.95romulusn
223.55?245.72?267.92?T:isapk128av20
315.39321.27324.39romulusm
330.75331.07338.16T:elephant200v2
301.50?336.24?369.83?T:isapk128v20
445.60453.04459.05T:isapxv20
610.39617.44618.56T!!!romulust
15172.1015187.0315201.90T:elephant160v2
16566.5416582.8516602.27T:elephant176v2
55522.4555540.7555588.70aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
17.9718.2419.01T:aes128gcmv1
19.8619.8919.98ascon128abi32v12
21.5121.7122.12T:aes256gcmv1
23.0023.0223.05ascon128av12
28.9128.9929.15ascon128bi32v12
33.1733.1933.27ascon80pqv12
33.9934.0234.26ascon128v12
44.2344.2444.25T:schwaemm256128v2
44.1844.2544.38T:xoodyakround3
48.5548.5848.64T:giftcofb128v1
51.4351.5351.83T:isapa128v20
51.4651.5451.67T:isapa128av20
58.6258.6558.69T:schwaemm192192v2
62.7362.7963.17T:schwaemm256256v2
63.2763.5764.13T:schwaemm128128v2
69.8669.8869.91T:tinyjambu128v2
84.3784.3884.40T:tinyjambu192v2
85.4985.5185.69T:tinyjambu256v2
118.82119.03119.58T:romulusn
155.24155.52159.80T:romulusm
182.26?202.53?232.56?T:isapk128av20
212.36212.62220.46romulusn
228.60?260.65?322.28?T:isapk128v20
297.05297.47305.66T!!!romulust
297.79298.99305.21T:isapxv20
315.46321.16324.51romulusm
330.73331.03339.59T:elephant200v2
1400.471401.951407.28aes256gcmv1
15172.8415196.1115230.98T:elephant160v2
16574.5016590.6016614.00T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
8.078.408.63T:aes128gcmv1
8.098.428.59T:aes256gcmv1
20.2320.2720.36ascon128abi32v12
22.6822.6822.73ascon128av12
29.2729.4229.48ascon128bi32v12
30.6430.6730.70T:xoodyakround3
31.4431.5131.53ascon80pqv12
32.6832.7432.80ascon128v12
43.7943.8043.84T:schwaemm256128v2
48.1048.1548.50T:giftcofb128v1
49.9850.0150.05T:tinyjambu128v2
50.8550.9351.08T:isapa128v20
50.7850.9451.06T:isapa128av20
58.2358.2658.33T:schwaemm192192v2
59.0059.0159.05T:tinyjambu256v2
61.5061.5061.67T:tinyjambu192v2
62.5462.6262.79T:schwaemm256256v2
62.9963.0063.02T:schwaemm128128v2
74.9975.2875.85T:romulusm
75.3475.5676.45T:romulusn
172.56?196.23?295.91?T:isapk128av20
207.11207.33210.38romulusm
207.21208.08215.84romulusn
223.92224.05224.45T:elephant200v2
212.88?291.98?345.82?T:isapk128v20
293.26294.35313.72T:isapxv20
296.75297.36307.76T!!!romulust
1399.841411.721417.53aes256gcmv1
10107.8010129.9210156.70T:elephant160v2
10949.2310960.9810997.18T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
8.108.368.53T:aes256gcmv1
8.228.428.72T:aes128gcmv1
20.2020.2720.33ascon128abi32v12
22.6622.6822.73ascon128av12
28.4528.4928.56ascon128bi32v12
30.5730.6230.73ascon80pqv12
30.6430.6830.90T:xoodyakround3
31.3131.3631.43ascon128v12
43.7943.8143.84T:schwaemm256128v2
48.1048.1348.24T:giftcofb128v1
50.0050.0250.07T:tinyjambu128v2
50.8550.9351.24T:isapa128v20
50.8450.9951.22T:isapa128av20
58.2458.2658.35T:schwaemm192192v2
58.9859.0059.02T:tinyjambu256v2
61.3961.5061.55T:tinyjambu192v2
62.5762.6262.81T:schwaemm256256v2
62.9763.0263.08T:schwaemm128128v2
75.1575.2875.58T:romulusm
75.4175.5875.85T:romulusn
154.70?192.90?257.59?T:isapk128av20
207.13207.56210.45romulusm
207.15208.04215.90romulusn
223.93224.00224.13T:elephant200v2
191.98?250.25?313.87?T:isapk128v20
291.60294.00296.58T:isapxv20
296.48297.16306.54T!!!romulust
1393.581408.321415.37aes256gcmv1
10102.3910117.7310146.34T:elephant160v2
10957.9810965.3911014.50T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
8.118.368.64T:aes128gcmv1
8.038.388.60T:aes256gcmv1
20.2320.2720.29ascon128abi32v12
22.6822.7022.71ascon128av12
28.4628.5028.54ascon128bi32v12
30.5730.6330.66ascon80pqv12
30.6630.7030.82T:xoodyakround3
31.3331.3531.43ascon128v12
43.7743.8143.86T:schwaemm256128v2
48.1148.1448.20T:giftcofb128v1
49.9950.0050.06T:tinyjambu128v2
50.8550.9551.21T:isapa128v20
50.8350.9851.08T:isapa128av20
58.2458.2758.27T:schwaemm192192v2
58.9859.0259.05T:tinyjambu256v2
61.4861.5061.52T:tinyjambu192v2
62.5562.5962.63T:schwaemm256256v2
62.9863.0263.06T:schwaemm128128v2
75.2075.3075.80T:romulusm
75.4275.6175.93T:romulusn
159.82?185.89?220.21?T:isapk128av20
207.20207.59210.41romulusm
207.22208.00214.25romulusn
223.95223.98224.10T:elephant200v2
204.13?251.99?302.95?T:isapk128v20
292.02294.15296.48T:isapxv20
296.75297.04304.63T!!!romulust
1395.151405.991411.24aes256gcmv1
10105.8810115.8910135.43T:elephant160v2
10959.3310963.1110987.22T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
20.7720.7820.83ascon128abi32v12
21.5721.7622.15T:aes128gcmv1
24.0024.0124.02ascon128av12
25.3325.4025.84T:aes256gcmv1
30.2630.2930.58ascon128bi32v12
35.3735.3935.46ascon80pqv12
35.9836.0236.32ascon128v12
45.8745.8745.91T:schwaemm256128v2
46.1146.1246.17T:xoodyakround3
49.8349.8549.98T:giftcofb128v1
60.3360.3460.44T:schwaemm192192v2
64.5964.6464.97T:schwaemm128128v2
64.8964.9064.98T:schwaemm256256v2
70.1670.1670.19T:tinyjambu128v2
73.7273.7773.88T:isapa128av20
84.8684.8885.14T:tinyjambu192v2
85.9986.0086.11T:tinyjambu256v2
93.6993.7494.01T:romulusn
114.80114.85118.72T:isapa128v20
130.91130.99131.88T:romulusm
215.16215.43222.64romulusn
310.89?322.67?378.65?T:isapk128av20
318.82323.91330.55romulusm
338.20338.39349.72T:elephant200v2
621.08630.02633.68T!!!romulust
674.96?694.61?801.56?T:isapk128v20
699.92701.98708.30T:isapxv20
15352.6415368.0815421.35T:elephant160v2
16700.1116711.4416747.41T:elephant176v2
56662.6556692.9656735.74aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
20.8220.8320.92ascon128abi32v12
21.4821.7322.33T:aes128gcmv1
24.0624.0724.12ascon128av12
25.3525.4025.79T:aes256gcmv1
29.8529.9430.12ascon128bi32v12
34.1834.1934.28ascon80pqv12
34.9935.0135.09ascon128v12
45.0745.1745.22T:xoodyakround3
45.9645.9745.98T:schwaemm256128v2
49.6149.6349.72T:giftcofb128v1
60.3460.4060.59T:schwaemm192192v2
64.6864.9565.54T:schwaemm128128v2
64.9464.9765.03T:schwaemm256256v2
70.9270.9270.93T:tinyjambu128v2
73.7673.8474.61T:isapa128av20
85.5085.5185.80T:tinyjambu192v2
86.6086.6186.64T:tinyjambu256v2
114.82114.91117.98T:isapa128v20
120.57120.62121.13T:romulusn
157.03157.14158.31T:romulusm
215.11215.46221.25romulusn
319.67324.90330.40romulusm
312.91330.28343.24T:isapk128av20
338.20338.61347.33T:elephant200v2
620.78629.40630.66T!!!romulust
666.21681.27729.72T:isapk128v20
700.07708.11708.75T:isapxv20
15347.0615362.1115371.84T:elephant160v2
16699.1716711.8516720.55T:elephant176v2
56639.0556653.0256690.48aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
20.8220.8420.92ascon128abi32v12
21.4821.5122.07T:aes128gcmv1
24.0624.0624.10ascon128av12
25.3425.3625.82T:aes256gcmv1
29.8630.0930.17ascon128bi32v12
34.1834.2134.79ascon80pqv12
34.9835.0135.17ascon128v12
45.2545.3045.33T:xoodyakround3
45.9645.9746.30T:schwaemm256128v2
49.6049.6149.66T:giftcofb128v1
54.9655.0155.04T:isapa128av20
60.3360.3560.41T:schwaemm192192v2
64.6864.8065.64T:schwaemm128128v2
64.9364.9664.98T:schwaemm256256v2
70.0170.0470.15T:isapa128v20
70.9170.9270.96T:tinyjambu128v2
85.5085.5085.51T:tinyjambu192v2
86.6186.6186.63T:tinyjambu256v2
120.56120.65121.85T:romulusn
157.03157.30161.83T:romulusm
215.17215.46220.29romulusn
238.92?245.34?271.42?T:isapk128av20
306.30306.49312.99T!!!romulust
319.72324.89330.58romulusm
338.20338.50347.20T:elephant200v2
426.74427.03429.44T:isapxv20
430.23451.02467.75T:isapk128v20
2539.242540.562553.40aes256gcmv1
15348.3615360.7415368.17T:elephant160v2
16697.2416701.4316712.74T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
41.2541.6242.75ascon128abi32v12
46.8846.8847.12ascon128av12
50.1251.6251.88ascon128bi32v12
56.6256.8858.00ascon80pqv12
57.0057.2557.62ascon128v12
73.0073.2574.50T:giftcofb128v1
77.1977.4477.88T:xoodyakround3
85.0085.2585.69T:schwaemm256128v2
93.0093.3895.12T:schwaemm128128v2
93.6993.7594.38T:tinyjambu128v2
97.0098.06100.94T:aes128gcmv1
101.88102.12105.75T:aes256gcmv1
107.50107.75107.81T:schwaemm192192v2
110.38110.38110.75T:tinyjambu192v2
111.31111.44111.69T:tinyjambu256v2
114.19114.31114.56T:schwaemm256256v2
128.88129.56131.19T:romulusn
167.62168.56174.12T:romulusm
198.62199.81200.81T:isapa128av20
280.19280.94283.50romulusn
386.38390.00391.94romulusm
489.62490.12492.19T:elephant200v2
855.06856.12857.75T!!!romulust
931.50931.69934.56T:isapa128v20
1796.88?2137.50?2313.06?T:isapk128av20
6354.756357.446556.75T:isapxv20
7975.62?8537.31?9295.75?T:isapk128v20
20451.3120640.8120683.00T:elephant160v2
20695.6220882.6220898.56T:elephant176v2
82625.7582801.2582847.62aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
42.3842.6243.50ascon128abi32v12
47.8848.2548.50ascon128av12
50.7550.7551.12ascon128bi32v12
56.6257.0058.25ascon80pqv12
57.6258.0059.62ascon128v12
73.5673.5673.94T:giftcofb128v1
76.5076.8877.19T:xoodyakround3
85.2585.3885.56T:schwaemm256128v2
93.0093.4496.06T:schwaemm128128v2
94.7594.8195.12T:tinyjambu128v2
95.3897.31101.12T:aes128gcmv1
102.00102.62107.25T:aes256gcmv1
107.81108.06108.19T:schwaemm192192v2
111.06111.25111.31T:tinyjambu192v2
112.00112.00112.38T:tinyjambu256v2
114.19114.31114.56T:schwaemm256256v2
156.62157.25159.44T:romulusn
193.75195.31203.75T:romulusm
199.88200.81203.88T:isapa128av20
280.88281.25283.81romulusn
411.06414.00416.88romulusm
489.88489.88491.50T:elephant200v2
855.06856.12862.31T!!!romulust
932.06932.56936.19T:isapa128v20
1746.69?1977.19?2486.12?T:isapk128av20
6355.566359.816402.00T:isapxv20
8147.698458.818937.81T:isapk128v20
20451.0020649.1920750.81T:elephant160v2
20690.8820882.6220892.94T:elephant176v2
82781.5082792.3882975.88aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
42.6242.7543.00ascon128abi32v12
48.1248.2548.50ascon128av12
50.7550.7551.12ascon128bi32v12
56.6257.0057.38ascon80pqv12
57.5058.0058.88ascon128v12
73.2573.5673.81T:giftcofb128v1
77.0677.8181.38T:xoodyakround3
85.1985.3185.38T:schwaemm256128v2
93.0693.1295.75T:schwaemm128128v2
94.6294.7594.81T:tinyjambu128v2
95.0096.0699.19T:aes128gcmv1
101.50102.50105.12T:aes256gcmv1
107.81108.06108.12T:schwaemm192192v2
111.06111.25111.31T:tinyjambu192v2
112.00112.00112.38T:tinyjambu256v2
113.94114.19114.31T:schwaemm256256v2
133.75134.69135.19T:isapa128av20
156.00156.94160.06T:romulusn
193.69194.06195.56T:romulusm
281.25282.31286.75romulusn
411.44413.75416.69romulusm
489.88489.88491.50T:elephant200v2
494.88495.12498.38T:isapa128v20
513.38514.31517.56T!!!romulust
1115.12?1355.44?1575.69?T:isapk128av20
3317.253318.563325.31T:isapxv20
4350.75?4710.19?5485.81?T:isapk128v20
20445.4420638.1220653.38T:elephant160v2
20694.6920887.8120934.38T:elephant176v2
28657.6228663.1228684.62aes256gcmv1