VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: armeabi; Cortex-A8 (413fc082); 2012 TI Sitara XAM3359AZCZ100; 1 x 1000MHz; bblack, supercop-20250415

[Page version: 20251005 01:32:03]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
19.4019.4419.50ascon128abi32v12
23.2823.3123.32ascon128av12
27.0327.6727.93T:aes128gcmv1
29.2429.6029.86ascon128bi32v12
34.4235.0235.95T:aes256gcmv1
37.3437.3737.42ascon80pqv12
37.3237.3937.42ascon128v12
44.4844.5044.56T:schwaemm256128v2
49.4549.5149.56T:giftcofb128v1
58.9458.9859.13T:schwaemm192192v2
59.7359.7659.88T:xoodyakround3
62.8662.9163.04T:schwaemm256256v2
63.4663.7064.15T:schwaemm128128v2
85.5385.6285.77T:isapa128av20
88.2188.2588.28T:tinyjambu128v2
105.98106.01106.09T:tinyjambu192v2
107.45107.66108.08T:isapa128v20
108.67108.88110.02T:romulusn
110.73110.75110.91T:tinyjambu256v2
183.02183.56185.98T:romulusm
216.92217.26218.11romulusn
277.13?309.38?418.14?T:isapk128av20
423.77432.12443.28romulusm
440.39440.75443.19T:elephant200v2
360.15?441.67?619.57?T:isapk128v20
608.22613.65626.73T:isapxv20
923.35940.64957.78T!!!romulust
20227.4920245.3220280.88T:elephant160v2
22171.7122193.1522226.70T:elephant176v2
109629.53109736.63109877.55aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
19.4719.5219.57ascon128abi32v12
23.3223.3623.38ascon128av12
27.3327.9028.64T:aes128gcmv1
29.3629.4529.80ascon128bi32v12
34.5234.9735.68T:aes256gcmv1
35.6735.7635.84ascon80pqv12
36.5736.6437.23ascon128v12
44.6844.7044.75T:schwaemm256128v2
48.8349.0049.41T:giftcofb128v1
57.5057.6358.15T:xoodyakround3
58.9859.0659.14T:schwaemm192192v2
62.9362.9863.20T:schwaemm256256v2
63.5464.2065.28T:schwaemm128128v2
85.5785.6785.80T:isapa128av20
89.7289.7589.78T:tinyjambu128v2
107.23107.26107.29T:tinyjambu192v2
107.29107.70108.79T:isapa128v20
111.98112.00112.05T:tinyjambu256v2
162.27162.51163.88T:romulusn
217.05217.20217.93romulusn
235.45235.93242.86T:romulusm
263.45?309.94?379.30?T:isapk128av20
423.62432.12441.28romulusm
440.39440.59442.40T:elephant200v2
375.79?448.47?514.55?T:isapk128v20
607.87612.60623.69T:isapxv20
923.95933.40940.87T!!!romulust
20227.9020246.6120266.78T:elephant160v2
22171.6922184.4922204.97T:elephant176v2
109636.38109670.24109788.32aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
19.4719.5219.53ascon128abi32v12
23.3323.3723.43ascon128av12
27.4527.7828.55T:aes128gcmv1
29.3629.6229.80ascon128bi32v12
34.6734.9735.57T:aes256gcmv1
35.7235.7435.78ascon80pqv12
36.5836.6636.77ascon128v12
44.6844.7044.73T:schwaemm256128v2
48.9849.0449.12T:giftcofb128v1
51.9552.1252.34T:isapa128v20
52.0252.1852.25T:isapa128av20
57.7757.8957.95T:xoodyakround3
58.9959.0659.14T:schwaemm192192v2
62.9162.9462.96T:schwaemm256256v2
63.5263.8865.26T:schwaemm128128v2
89.7389.7589.80T:tinyjambu128v2
107.24107.28107.81T:tinyjambu192v2
111.99112.02112.04T:tinyjambu256v2
162.36162.53163.60T:romulusn
166.87?195.31?237.97?T:isapk128av20
217.05217.19218.05romulusn
235.45236.16241.45T:romulusm
211.78?274.99?338.18?T:isapk128v20
297.27297.40305.23T!!!romulust
303.14304.00306.25T:isapxv20
423.33432.14441.35romulusm
440.40440.58442.36T:elephant200v2
1393.481407.621412.72aes256gcmv1
20230.4920244.4520277.65T:elephant160v2
22168.7422185.8122203.65T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
17.7718.0018.37T:aes128gcmv1
19.8119.8519.90ascon128abi32v12
21.4421.6522.00T:aes256gcmv1
23.0023.0123.24ascon128av12
29.3029.3729.61ascon128bi32v12
34.4234.4534.50ascon80pqv12
35.0235.0735.14ascon128v12
44.1344.1544.15T:schwaemm256128v2
45.2045.2746.31T:xoodyakround3
48.7948.8449.02T:giftcofb128v1
58.5958.6858.72T:schwaemm192192v2
62.7262.7662.80T:schwaemm256256v2
63.2463.5463.60T:schwaemm128128v2
68.2168.2968.81T:isapa128av20
69.1169.1369.16T:tinyjambu128v2
78.8379.3482.51T:isapa128v20
83.7483.7583.79T:tinyjambu192v2
84.8684.8884.91T:tinyjambu256v2
92.0992.2793.09T:romulusn
129.15129.32129.72T:romulusm
212.14212.57227.33romulusn
229.51?254.46?298.45?T:isapk128av20
314.41321.11325.73romulusm
330.85331.11341.39T:elephant200v2
310.36?346.09?432.15?T:isapk128v20
451.61458.10459.36T:isapxv20
610.55618.42627.15T!!!romulust
15182.0315190.7915239.25T:elephant160v2
16565.8216585.0016590.20T:elephant176v2
55516.4255537.3055579.91aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
17.9018.1018.39T:aes128gcmv1
19.8119.8920.02ascon128abi32v12
21.5021.8022.72T:aes256gcmv1
23.0023.0323.06ascon128av12
28.9129.1329.30ascon128bi32v12
33.1533.2033.37ascon80pqv12
33.9234.0134.06ascon128v12
44.0144.1744.43T:xoodyakround3
44.2344.2444.29T:schwaemm256128v2
48.5348.5648.61T:giftcofb128v1
58.6458.6960.35T:schwaemm192192v2
62.7262.8262.85T:schwaemm256256v2
63.2663.5664.13T:schwaemm128128v2
68.2068.2868.42T:isapa128av20
69.8569.8869.93T:tinyjambu128v2
79.1579.3679.85T:isapa128v20
84.3684.3884.40T:tinyjambu192v2
85.4985.5085.52T:tinyjambu256v2
118.89119.07119.86T:romulusn
155.30155.59160.23T:romulusm
212.16212.57221.95romulusn
223.55?245.72?267.92?T:isapk128av20
315.39321.27324.39romulusm
330.75331.07338.16T:elephant200v2
301.50?336.24?369.83?T:isapk128v20
445.60453.04459.05T:isapxv20
610.39617.44618.56T!!!romulust
15172.1015187.0315201.90T:elephant160v2
16566.5416582.8516602.27T:elephant176v2
55522.4555540.7555588.70aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
17.9718.2419.01T:aes128gcmv1
19.8619.8919.98ascon128abi32v12
21.5121.7122.12T:aes256gcmv1
23.0023.0223.05ascon128av12
28.9128.9929.15ascon128bi32v12
33.1733.1933.27ascon80pqv12
33.9934.0234.26ascon128v12
44.2344.2444.25T:schwaemm256128v2
44.1844.2544.38T:xoodyakround3
48.5548.5848.64T:giftcofb128v1
51.4351.5351.83T:isapa128v20
51.4651.5451.67T:isapa128av20
58.6258.6558.69T:schwaemm192192v2
62.7362.7963.17T:schwaemm256256v2
63.2763.5764.13T:schwaemm128128v2
69.8669.8869.91T:tinyjambu128v2
84.3784.3884.40T:tinyjambu192v2
85.4985.5185.69T:tinyjambu256v2
118.82119.03119.58T:romulusn
155.24155.52159.80T:romulusm
182.26?202.53?232.56?T:isapk128av20
212.36212.62220.46romulusn
228.60?260.65?322.28?T:isapk128v20
297.05297.47305.66T!!!romulust
297.79298.99305.21T:isapxv20
315.46321.16324.51romulusm
330.73331.03339.59T:elephant200v2
1400.471401.951407.28aes256gcmv1
15172.8415196.1115230.98T:elephant160v2
16574.5016590.6016614.00T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
8.078.408.63T:aes128gcmv1
8.098.428.59T:aes256gcmv1
20.2320.2720.36ascon128abi32v12
22.6822.6822.73ascon128av12
29.2729.4229.48ascon128bi32v12
30.6430.6730.70T:xoodyakround3
31.4431.5131.53ascon80pqv12
32.6832.7432.80ascon128v12
43.7943.8043.84T:schwaemm256128v2
48.1048.1548.50T:giftcofb128v1
49.9850.0150.05T:tinyjambu128v2
50.8550.9351.08T:isapa128v20
50.7850.9451.06T:isapa128av20
58.2358.2658.33T:schwaemm192192v2
59.0059.0159.05T:tinyjambu256v2
61.5061.5061.67T:tinyjambu192v2
62.5462.6262.79T:schwaemm256256v2
62.9963.0063.02T:schwaemm128128v2
74.9975.2875.85T:romulusm
75.3475.5676.45T:romulusn
172.56?196.23?295.91?T:isapk128av20
207.11207.33210.38romulusm
207.21208.08215.84romulusn
223.92224.05224.45T:elephant200v2
212.88?291.98?345.82?T:isapk128v20
293.26294.35313.72T:isapxv20
296.75297.36307.76T!!!romulust
1399.841411.721417.53aes256gcmv1
10107.8010129.9210156.70T:elephant160v2
10949.2310960.9810997.18T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
8.108.368.53T:aes256gcmv1
8.228.428.72T:aes128gcmv1
20.2020.2720.33ascon128abi32v12
22.6622.6822.73ascon128av12
28.4528.4928.56ascon128bi32v12
30.5730.6230.73ascon80pqv12
30.6430.6830.90T:xoodyakround3
31.3131.3631.43ascon128v12
43.7943.8143.84T:schwaemm256128v2
48.1048.1348.24T:giftcofb128v1
50.0050.0250.07T:tinyjambu128v2
50.8550.9351.24T:isapa128v20
50.8450.9951.22T:isapa128av20
58.2458.2658.35T:schwaemm192192v2
58.9859.0059.02T:tinyjambu256v2
61.3961.5061.55T:tinyjambu192v2
62.5762.6262.81T:schwaemm256256v2
62.9763.0263.08T:schwaemm128128v2
75.1575.2875.58T:romulusm
75.4175.5875.85T:romulusn
154.70?192.90?257.59?T:isapk128av20
207.13207.56210.45romulusm
207.15208.04215.90romulusn
223.93224.00224.13T:elephant200v2
191.98?250.25?313.87?T:isapk128v20
291.60294.00296.58T:isapxv20
296.48297.16306.54T!!!romulust
1393.581408.321415.37aes256gcmv1
10102.3910117.7310146.34T:elephant160v2
10957.9810965.3911014.50T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
8.118.368.64T:aes128gcmv1
8.038.388.60T:aes256gcmv1
20.2320.2720.29ascon128abi32v12
22.6822.7022.71ascon128av12
28.4628.5028.54ascon128bi32v12
30.5730.6330.66ascon80pqv12
30.6630.7030.82T:xoodyakround3
31.3331.3531.43ascon128v12
43.7743.8143.86T:schwaemm256128v2
48.1148.1448.20T:giftcofb128v1
49.9950.0050.06T:tinyjambu128v2
50.8550.9551.21T:isapa128v20
50.8350.9851.08T:isapa128av20
58.2458.2758.27T:schwaemm192192v2
58.9859.0259.05T:tinyjambu256v2
61.4861.5061.52T:tinyjambu192v2
62.5562.5962.63T:schwaemm256256v2
62.9863.0263.06T:schwaemm128128v2
75.2075.3075.80T:romulusm
75.4275.6175.93T:romulusn
159.82?185.89?220.21?T:isapk128av20
207.20207.59210.41romulusm
207.22208.00214.25romulusn
223.95223.98224.10T:elephant200v2
204.13?251.99?302.95?T:isapk128v20
292.02294.15296.48T:isapxv20
296.75297.04304.63T!!!romulust
1395.151405.991411.24aes256gcmv1
10105.8810115.8910135.43T:elephant160v2
10959.3310963.1110987.22T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
20.7720.7820.83ascon128abi32v12
21.5721.7622.15T:aes128gcmv1
24.0024.0124.02ascon128av12
25.3325.4025.84T:aes256gcmv1
30.2630.2930.58ascon128bi32v12
35.3735.3935.46ascon80pqv12
35.9836.0236.32ascon128v12
45.8745.8745.91T:schwaemm256128v2
46.1146.1246.17T:xoodyakround3
49.8349.8549.98T:giftcofb128v1
60.3360.3460.44T:schwaemm192192v2
64.5964.6464.97T:schwaemm128128v2
64.8964.9064.98T:schwaemm256256v2
70.1670.1670.19T:tinyjambu128v2
73.7273.7773.88T:isapa128av20
84.8684.8885.14T:tinyjambu192v2
85.9986.0086.11T:tinyjambu256v2
93.6993.7494.01T:romulusn
114.80114.85118.72T:isapa128v20
130.91130.99131.88T:romulusm
215.16215.43222.64romulusn
310.89?322.67?378.65?T:isapk128av20
318.82323.91330.55romulusm
338.20338.39349.72T:elephant200v2
621.08630.02633.68T!!!romulust
674.96?694.61?801.56?T:isapk128v20
699.92701.98708.30T:isapxv20
15352.6415368.0815421.35T:elephant160v2
16700.1116711.4416747.41T:elephant176v2
56662.6556692.9656735.74aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
20.8220.8320.92ascon128abi32v12
21.4821.7322.33T:aes128gcmv1
24.0624.0724.12ascon128av12
25.3525.4025.79T:aes256gcmv1
29.8529.9430.12ascon128bi32v12
34.1834.1934.28ascon80pqv12
34.9935.0135.09ascon128v12
45.0745.1745.22T:xoodyakround3
45.9645.9745.98T:schwaemm256128v2
49.6149.6349.72T:giftcofb128v1
60.3460.4060.59T:schwaemm192192v2
64.6864.9565.54T:schwaemm128128v2
64.9464.9765.03T:schwaemm256256v2
70.9270.9270.93T:tinyjambu128v2
73.7673.8474.61T:isapa128av20
85.5085.5185.80T:tinyjambu192v2
86.6086.6186.64T:tinyjambu256v2
114.82114.91117.98T:isapa128v20
120.57120.62121.13T:romulusn
157.03157.14158.31T:romulusm
215.11215.46221.25romulusn
319.67324.90330.40romulusm
312.91330.28343.24T:isapk128av20
338.20338.61347.33T:elephant200v2
620.78629.40630.66T!!!romulust
666.21681.27729.72T:isapk128v20
700.07708.11708.75T:isapxv20
15347.0615362.1115371.84T:elephant160v2
16699.1716711.8516720.55T:elephant176v2
56639.0556653.0256690.48aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
20.8220.8420.92ascon128abi32v12
21.4821.5122.07T:aes128gcmv1
24.0624.0624.10ascon128av12
25.3425.3625.82T:aes256gcmv1
29.8630.0930.17ascon128bi32v12
34.1834.2134.79ascon80pqv12
34.9835.0135.17ascon128v12
45.2545.3045.33T:xoodyakround3
45.9645.9746.30T:schwaemm256128v2
49.6049.6149.66T:giftcofb128v1
54.9655.0155.04T:isapa128av20
60.3360.3560.41T:schwaemm192192v2
64.6864.8065.64T:schwaemm128128v2
64.9364.9664.98T:schwaemm256256v2
70.0170.0470.15T:isapa128v20
70.9170.9270.96T:tinyjambu128v2
85.5085.5085.51T:tinyjambu192v2
86.6186.6186.63T:tinyjambu256v2
120.56120.65121.85T:romulusn
157.03157.30161.83T:romulusm
215.17215.46220.29romulusn
238.92?245.34?271.42?T:isapk128av20
306.30306.49312.99T!!!romulust
319.72324.89330.58romulusm
338.20338.50347.20T:elephant200v2
426.74427.03429.44T:isapxv20
430.23451.02467.75T:isapk128v20
2539.242540.562553.40aes256gcmv1
15348.3615360.7415368.17T:elephant160v2
16697.2416701.4316712.74T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
41.2541.6242.75ascon128abi32v12
46.8846.8847.12ascon128av12
50.1251.6251.88ascon128bi32v12
56.6256.8858.00ascon80pqv12
57.0057.2557.62ascon128v12
73.0073.2574.50T:giftcofb128v1
77.1977.4477.88T:xoodyakround3
85.0085.2585.69T:schwaemm256128v2
93.0093.3895.12T:schwaemm128128v2
93.6993.7594.38T:tinyjambu128v2
97.0098.06100.94T:aes128gcmv1
101.88102.12105.75T:aes256gcmv1
107.50107.75107.81T:schwaemm192192v2
110.38110.38110.75T:tinyjambu192v2
111.31111.44111.69T:tinyjambu256v2
114.19114.31114.56T:schwaemm256256v2
128.88129.56131.19T:romulusn
167.62168.56174.12T:romulusm
198.62199.81200.81T:isapa128av20
280.19280.94283.50romulusn
386.38390.00391.94romulusm
489.62490.12492.19T:elephant200v2
855.06856.12857.75T!!!romulust
931.50931.69934.56T:isapa128v20
1796.88?2137.50?2313.06?T:isapk128av20
6354.756357.446556.75T:isapxv20
7975.62?8537.31?9295.75?T:isapk128v20
20451.3120640.8120683.00T:elephant160v2
20695.6220882.6220898.56T:elephant176v2
82625.7582801.2582847.62aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
42.3842.6243.50ascon128abi32v12
47.8848.2548.50ascon128av12
50.7550.7551.12ascon128bi32v12
56.6257.0058.25ascon80pqv12
57.6258.0059.62ascon128v12
73.5673.5673.94T:giftcofb128v1
76.5076.8877.19T:xoodyakround3
85.2585.3885.56T:schwaemm256128v2
93.0093.4496.06T:schwaemm128128v2
94.7594.8195.12T:tinyjambu128v2
95.3897.31101.12T:aes128gcmv1
102.00102.62107.25T:aes256gcmv1
107.81108.06108.19T:schwaemm192192v2
111.06111.25111.31T:tinyjambu192v2
112.00112.00112.38T:tinyjambu256v2
114.19114.31114.56T:schwaemm256256v2
156.62157.25159.44T:romulusn
193.75195.31203.75T:romulusm
199.88200.81203.88T:isapa128av20
280.88281.25283.81romulusn
411.06414.00416.88romulusm
489.88489.88491.50T:elephant200v2
855.06856.12862.31T!!!romulust
932.06932.56936.19T:isapa128v20
1746.69?1977.19?2486.12?T:isapk128av20
6355.566359.816402.00T:isapxv20
8147.698458.818937.81T:isapk128v20
20451.0020649.1920750.81T:elephant160v2
20690.8820882.6220892.94T:elephant176v2
82781.5082792.3882975.88aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
42.6242.7543.00ascon128abi32v12
48.1248.2548.50ascon128av12
50.7550.7551.12ascon128bi32v12
56.6257.0057.38ascon80pqv12
57.5058.0058.88ascon128v12
73.2573.5673.81T:giftcofb128v1
77.0677.8181.38T:xoodyakround3
85.1985.3185.38T:schwaemm256128v2
93.0693.1295.75T:schwaemm128128v2
94.6294.7594.81T:tinyjambu128v2
95.0096.0699.19T:aes128gcmv1
101.50102.50105.12T:aes256gcmv1
107.81108.06108.12T:schwaemm192192v2
111.06111.25111.31T:tinyjambu192v2
112.00112.00112.38T:tinyjambu256v2
113.94114.19114.31T:schwaemm256256v2
133.75134.69135.19T:isapa128av20
156.00156.94160.06T:romulusn
193.69194.06195.56T:romulusm
281.25282.31286.75romulusn
411.44413.75416.69romulusm
489.88489.88491.50T:elephant200v2
494.88495.12498.38T:isapa128v20
513.38514.31517.56T!!!romulust
1115.12?1355.44?1575.69?T:isapk128av20
3317.253318.563325.31T:isapxv20
4350.75?4710.19?5485.81?T:isapk128v20
20445.4420638.1220653.38T:elephant160v2
20694.6920887.8120934.38T:elephant176v2
28657.6228663.1228684.62aes256gcmv1