VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: armeabi; Cortex-A8 (413fc082); 2012 TI Sitara XAM3359AZCZ100; 1 x 1000MHz; bblack, supercop-20241022

[Page version: 20250111 18:46:17]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
19.4219.4519.49ascon128abi32v12
23.2323.3523.40ascon128av12
27.2327.6928.56T:aes128gcmv1
29.2029.2729.27ascon128bi32v12
34.1434.9635.73T:aes256gcmv1
37.3337.3937.50ascon128v12
37.3537.3937.50ascon80pqv12
44.5044.5745.64T:schwaemm256128v2
49.4349.5049.56T:giftcofb128v1
58.9358.9559.02T:schwaemm192192v2
59.7059.7459.77T:xoodyakround3
62.8762.9163.02T:schwaemm256256v2
63.4963.6964.30T:schwaemm128128v2
85.4785.6385.76T:isapa128av20
88.2588.2888.54T:tinyjambu128v2
105.92106.00106.05T:tinyjambu192v2
107.40107.63108.58T:isapa128v20
108.65108.92109.32T:romulusn
110.74110.78110.85T:tinyjambu256v2
182.85183.32184.32T:romulusm
217.03217.27218.44romulusn
269.35?300.29?431.97?T:isapk128av20
336.27?407.21?602.99?T:isapk128v20
423.90426.16441.80romulusm
440.41440.93458.83T:elephant200v2
607.48624.35630.38T:isapxv20
924.12939.31942.21T!!!romulust
20230.0920258.0420326.34T:elephant160v2
22191.1922203.1622254.42T:elephant176v2
Cycles/byte for long+0 decrypt
25%50%75%aead
19.4619.4919.57ascon128abi32v12
23.2623.3923.46ascon128av12
27.2427.7728.56T:aes128gcmv1
29.3529.4030.21ascon128bi32v12
34.4434.8135.53T:aes256gcmv1
35.6735.7335.83ascon80pqv12
36.6036.6336.76ascon128v12
44.6545.2045.25T:schwaemm256128v2
48.9849.0049.09T:giftcofb128v1
57.4957.5557.67T:xoodyakround3
59.0059.0259.05T:schwaemm192192v2
62.9162.9363.09T:schwaemm256256v2
63.5263.9165.60T:schwaemm128128v2
85.6185.6585.85T:isapa128av20
89.7589.7589.80T:tinyjambu128v2
107.22107.27107.57T:tinyjambu192v2
107.46107.65108.05T:isapa128v20
112.00112.04112.10T:tinyjambu256v2
162.38162.47162.76T:romulusn
216.79217.16218.15romulusn
235.25235.71236.69T:romulusm
251.05?297.27?344.71?T:isapk128av20
423.97426.13440.32romulusm
367.48?430.08?521.49?T:isapk128v20
440.42440.76443.08T:elephant200v2
608.55612.91623.60T:isapxv20
923.90938.85940.56T!!!romulust
20225.5420247.7120264.32T:elephant160v2
22175.0222190.9922204.20T:elephant176v2
Cycles/byte for long+0 forgery
25%50%75%aead
19.4619.5319.64ascon128abi32v12
23.2623.3923.44ascon128av12
27.4127.6928.39T:aes128gcmv1
29.3229.3829.43ascon128bi32v12
34.4435.0236.70T:aes256gcmv1
35.6735.7935.85ascon80pqv12
36.6036.6336.70ascon128v12
44.6844.7245.24T:schwaemm256128v2
49.0049.0249.11T:giftcofb128v1
51.9952.1252.24T:isapa128v20
52.0652.1252.23T:isapa128av20
57.7957.8858.35T:xoodyakround3
58.9859.0059.07T:schwaemm192192v2
62.9162.9362.93T:schwaemm256256v2
63.5463.9365.42T:schwaemm128128v2
89.7589.7890.12T:tinyjambu128v2
107.22107.26107.29T:tinyjambu192v2
112.01112.04112.78T:tinyjambu256v2
162.36162.47162.82T:romulusn
164.25?191.10?219.18?T:isapk128av20
216.79217.20217.98romulusn
235.30235.55236.84T:romulusm
195.07?262.67?308.36?T:isapk128v20
296.21297.57304.26T!!!romulust
303.02303.45305.76T:isapxv20
423.66425.57432.30romulusm
440.39440.85442.60T:elephant200v2
20225.3220237.3820263.06T:elephant160v2
22176.8022204.2222221.54T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
17.8618.0518.44T:aes128gcmv1
19.8219.8620.02ascon128abi32v12
21.4021.6021.77T:aes256gcmv1
22.9723.0223.05ascon128av12
29.3229.3329.69ascon128bi32v12
34.4234.4434.49ascon80pqv12
35.0635.0635.14ascon128v12
44.1444.2744.67T:schwaemm256128v2
45.1945.2045.43T:xoodyakround3
48.7748.8248.89T:giftcofb128v1
58.5858.6158.67T:schwaemm192192v2
62.7162.7362.81T:schwaemm256256v2
63.2663.3663.64T:schwaemm128128v2
68.2268.2968.45T:isapa128av20
69.1169.1469.32T:tinyjambu128v2
79.2179.4282.45T:isapa128v20
83.7483.7684.88T:tinyjambu192v2
84.8684.9084.95T:tinyjambu256v2
92.1392.2492.67T:romulusn
129.05129.32130.11T:romulusm
211.60217.24220.92romulusn
212.50?241.22?289.08?T:isapk128av20
315.71317.61324.01romulusm
330.87331.13338.43T:elephant200v2
305.11?339.01?424.63?T:isapk128v20
451.18457.48464.02T:isapxv20
610.13618.15619.47T!!!romulust
15175.1215185.4015255.80T:elephant160v2
16565.4016585.6516612.70T:elephant176v2
Cycles/byte for long+long decrypt
25%50%75%aead
17.9018.0418.48T:aes128gcmv1
19.8119.8919.98ascon128abi32v12
21.4021.5921.83T:aes256gcmv1
22.9923.0924.52ascon128av12
28.9028.9528.99ascon128bi32v12
33.1333.1933.29ascon80pqv12
33.9434.0034.60ascon128v12
44.0244.1344.21T:xoodyakround3
44.2344.2544.58T:schwaemm256128v2
48.5348.5748.63T:giftcofb128v1
58.6158.6358.73T:schwaemm192192v2
62.6462.7563.05T:schwaemm256256v2
63.2963.5464.21T:schwaemm128128v2
68.2068.2968.47T:isapa128av20
69.8569.8770.07T:tinyjambu128v2
79.0679.4081.53T:isapa128v20
84.3684.3884.54T:tinyjambu192v2
85.4985.5385.61T:tinyjambu256v2
118.92119.06124.95T:romulusn
155.31155.76160.81T:romulusm
211.62217.99220.44romulusn
237.05?251.19?280.50?T:isapk128av20
315.72317.62324.08romulusm
330.78331.03338.02T:elephant200v2
298.66?346.72?388.49?T:isapk128v20
450.91456.76459.14T:isapxv20
610.62617.80618.51T!!!romulust
15173.2815185.3815194.42T:elephant160v2
16563.9416590.6116630.08T:elephant176v2
Cycles/byte for long+long forgery
25%50%75%aead
17.9018.0718.39T:aes128gcmv1
19.8619.8919.93ascon128abi32v12
21.4321.6822.07T:aes256gcmv1
22.9823.0523.07ascon128av12
28.9328.9529.08ascon128bi32v12
33.1533.2033.24ascon80pqv12
33.9834.0034.21ascon128v12
44.2344.2744.52T:schwaemm256128v2
44.2544.2844.58T:xoodyakround3
48.5548.5748.62T:giftcofb128v1
51.3951.5352.06T:isapa128v20
51.4751.5551.64T:isapa128av20
58.6258.6458.68T:schwaemm192192v2
62.6262.7362.80T:schwaemm256256v2
63.2863.4164.18T:schwaemm128128v2
69.8869.8869.95T:tinyjambu128v2
84.3684.3884.40T:tinyjambu192v2
85.4685.5285.53T:tinyjambu256v2
118.96119.03119.60T:romulusn
155.20155.41158.79T:romulusm
180.19?194.75?224.96?T:isapk128av20
211.47215.93220.47romulusn
227.97?268.43?313.52?T:isapk128v20
297.15297.47305.78T!!!romulust
298.51298.84303.56T:isapxv20
315.75317.54324.42romulusm
330.88331.10337.87T:elephant200v2
15169.6715184.2615199.77T:elephant160v2
16567.7716579.3216591.87T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
8.258.388.57T:aes256gcmv1
8.07?8.44?9.38?T:aes128gcmv1
20.2020.2520.30ascon128abi32v12
22.6122.7222.78ascon128av12
29.3129.3829.43ascon128bi32v12
30.6630.6830.71T:xoodyakround3
31.4531.5031.53ascon80pqv12
32.6832.7532.83ascon128v12
43.7743.7943.82T:schwaemm256128v2
48.0948.1548.26T:giftcofb128v1
50.0050.0250.10T:tinyjambu128v2
50.8950.9351.06T:isapa128av20
50.8550.9351.25T:isapa128v20
58.2058.2658.29T:schwaemm192192v2
58.9859.0259.05T:tinyjambu256v2
61.5061.5061.57T:tinyjambu192v2
62.5462.6763.15T:schwaemm256256v2
62.9763.0263.08T:schwaemm128128v2
75.1175.2875.60T:romulusm
75.1275.5275.59T:romulusn
163.01?195.87?213.38?T:isapk128av20
205.92207.65224.28romulusn
207.20209.06214.17romulusm
223.86224.00224.71T:elephant200v2
207.53?265.48?416.65?T:isapk128v20
293.35294.30308.47T:isapxv20
296.81297.10305.17T!!!romulust
10110.8310130.7710147.76T:elephant160v2
10952.1510965.3811031.01T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
8.098.418.70T:aes256gcmv1
8.058.428.64T:aes128gcmv1
20.1420.2520.36ascon128abi32v12
22.6322.7422.80ascon128av12
28.4728.5228.60ascon128bi32v12
30.5230.6430.86ascon80pqv12
30.6630.7930.82T:xoodyakround3
31.3631.3831.46ascon128v12
43.7743.7943.83T:schwaemm256128v2
48.1148.1348.17T:giftcofb128v1
49.9850.0050.02T:tinyjambu128v2
50.8950.9551.30T:isapa128av20
50.8250.9551.06T:isapa128v20
58.2558.2758.29T:schwaemm192192v2
58.9859.0059.03T:tinyjambu256v2
61.4861.5061.54T:tinyjambu192v2
62.5462.6762.72T:schwaemm256256v2
62.9863.0263.08T:schwaemm128128v2
75.1775.2875.76T:romulusm
75.4575.6177.52T:romulusn
170.83?196.68?249.12?T:isapk128av20
207.22207.87209.95romulusm
206.00208.02223.65romulusn
223.93224.05226.36T:elephant200v2
163.17?260.35?320.15?T:isapk128v20
293.47294.24307.97T:isapxv20
296.84297.03303.55T!!!romulust
10109.7410123.7310158.59T:elephant160v2
10956.2510960.7310996.34T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
8.038.338.53T:aes256gcmv1
8.168.388.55T:aes128gcmv1
20.1820.2520.31ascon128abi32v12
22.6122.7222.78ascon128av12
28.4728.5228.71ascon128bi32v12
30.5130.6630.76ascon80pqv12
30.6630.6830.86T:xoodyakround3
31.3331.3831.42ascon128v12
43.7943.7943.85T:schwaemm256128v2
48.0948.1348.21T:giftcofb128v1
50.0050.0050.08T:tinyjambu128v2
50.8850.9151.04T:isapa128av20
50.8550.9551.32T:isapa128v20
58.2558.2858.59T:schwaemm192192v2
58.9959.0259.29T:tinyjambu256v2
61.5061.5262.17T:tinyjambu192v2
62.5662.5662.61T:schwaemm256256v2
62.9863.0263.08T:schwaemm128128v2
75.1775.2875.69T:romulusm
75.4375.5675.91T:romulusn
169.87?194.22?218.52?T:isapk128av20
205.98207.93223.61romulusn
207.30208.85209.72romulusm
223.90224.10225.95T:elephant200v2
192.64?265.57?315.70?T:isapk128v20
293.15294.22296.37T:isapxv20
296.80297.04302.98T!!!romulust
10107.8610118.4010145.87T:elephant160v2
10953.7710960.5510986.29T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
20.7620.7720.82ascon128abi32v12
21.5221.6322.01T:aes128gcmv1
24.0224.0524.11ascon128av12
25.2725.3125.71T:aes256gcmv1
30.2130.2130.37ascon128bi32v12
35.3935.4035.48ascon80pqv12
35.9835.9936.07ascon128v12
45.8746.1146.52T:schwaemm256128v2
46.1146.1146.13T:xoodyakround3
49.8349.8550.12T:giftcofb128v1
60.3260.3360.34T:schwaemm192192v2
64.6064.6464.97T:schwaemm128128v2
64.8764.8964.95T:schwaemm256256v2
70.1770.1771.19T:tinyjambu128v2
73.7473.7774.04T:isapa128av20
84.8684.9085.66T:tinyjambu192v2
85.9985.9986.01T:tinyjambu256v2
93.7493.8794.45T:romulusn
114.78114.81115.04T:isapa128v20
130.90130.95131.80T:romulusm
215.09221.88223.39romulusn
318.81320.77329.44romulusm
313.14?331.33?391.97?T:isapk128av20
338.23338.49347.99T:elephant200v2
620.72629.05631.41T!!!romulust
672.06686.94724.53T:isapk128v20
700.00703.12710.61T:isapxv20
15346.6015359.9115383.79T:elephant160v2
16705.7616717.4516763.56T:elephant176v2
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
20.8220.8320.91ascon128abi32v12
21.47?21.92?25.08?T:aes128gcmv1
24.0924.1024.13ascon128av12
25.2025.2625.59T:aes256gcmv1
29.8629.8830.11ascon128bi32v12
34.1934.2534.64ascon80pqv12
34.9935.0135.12ascon128v12
45.0545.1145.18T:xoodyakround3
45.9646.1346.59T:schwaemm256128v2
49.6149.6449.71T:giftcofb128v1
60.3360.3460.40T:schwaemm192192v2
64.9064.9565.10T:schwaemm256256v2
64.7265.2765.63T:schwaemm128128v2
70.9270.9270.96T:tinyjambu128v2
73.7773.7873.96T:isapa128av20
85.4985.5185.84T:tinyjambu192v2
86.6186.6186.63T:tinyjambu256v2
114.80114.85115.12T:isapa128v20
120.57120.61121.21T:romulusn
157.02157.07157.80T:romulusm
215.13221.07223.17romulusn
319.76321.37330.54romulusm
313.78329.41348.09T:isapk128av20
338.19338.42340.28T:elephant200v2
620.85626.70630.66T!!!romulust
670.59?692.86?770.50?T:isapk128v20
699.96702.07708.15T:isapxv20
15346.5515360.1615364.20T:elephant160v2
16698.3616712.2816728.77T:elephant176v2
Cycles/byte for 1536+1536 forgery
25%50%75%aead
20.8220.8621.28ascon128abi32v12
21.4021.5221.95T:aes128gcmv1
24.0924.1024.13ascon128av12
25.2425.3426.65T:aes256gcmv1
29.8629.8829.92ascon128bi32v12
34.1934.2334.30ascon80pqv12
34.9834.9935.04ascon128v12
45.1945.2545.33T:xoodyakround3
45.9546.0946.30T:schwaemm256128v2
49.6149.6149.65T:giftcofb128v1
54.9754.9755.05T:isapa128av20
60.3360.3460.46T:schwaemm192192v2
64.7164.7365.63T:schwaemm128128v2
64.9064.9765.03T:schwaemm256256v2
69.9870.0270.17T:isapa128v20
70.9170.9270.92T:tinyjambu128v2
85.5085.5185.52T:tinyjambu192v2
86.6186.6187.21T:tinyjambu256v2
120.53120.61121.44T:romulusn
156.99157.03157.42T:romulusm
215.13220.65222.97romulusn
235.07?242.93?270.97?T:isapk128av20
306.21306.45311.04T!!!romulust
319.73321.41325.71romulusm
338.22338.41347.00T:elephant200v2
426.70427.03429.39T:isapxv20
432.23?453.23?483.09?T:isapk128v20
15346.2615351.1715369.06T:elephant160v2
16698.9316705.5116719.19T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
41.3841.6242.56ascon128abi32v12
46.8846.8848.19ascon128av12
50.1250.1951.12ascon128bi32v12
56.6256.9457.88ascon80pqv12
56.9457.0058.25ascon128v12
72.9473.2574.19T:giftcofb128v1
77.1277.1977.50T:xoodyakround3
84.9484.9485.00T:schwaemm256128v2
93.7594.0694.81T:tinyjambu128v2
93.0694.1295.06T:schwaemm128128v2
95.6996.6999.94T:aes128gcmv1
101.56102.19105.44T:aes256gcmv1
107.75107.75108.06T:schwaemm192192v2
110.38110.38110.75T:tinyjambu192v2
111.00111.31111.38T:tinyjambu256v2
113.94114.00114.25T:schwaemm256256v2
129.19129.56132.50T:romulusn
167.62168.00171.88T:romulusm
198.88199.19201.50T:isapa128av20
280.31284.81293.62romulusn
387.69388.56390.62romulusm
489.56489.88491.75T:elephant200v2
854.38855.44858.69T!!!romulust
931.00931.88934.88T:isapa128v20
1708.56?1945.25?2294.50?T:isapk128av20
6354.886355.256387.44T:isapxv20
8094.69?8777.94?9923.06?T:isapk128v20
20457.8120638.7520666.75T:elephant160v2
20695.3820879.9420892.00T:elephant176v2
Cycles/byte for 64+64 decrypt
25%50%75%aead
42.3142.9443.62ascon128abi32v12
48.1948.5049.50ascon128av12
50.7551.0651.75ascon128bi32v12
57.3857.6259.25ascon128v12
56.6957.9459.25ascon80pqv12
73.2573.5674.19T:giftcofb128v1
76.5076.5677.19T:xoodyakround3
85.0085.2585.31T:schwaemm256128v2
93.1293.7596.00T:schwaemm128128v2
94.7595.0695.06T:tinyjambu128v2
95.0695.6999.62T:aes128gcmv1
100.19100.94103.50T:aes256gcmv1
107.75108.06108.50T:schwaemm192192v2
111.25111.38111.69T:tinyjambu192v2
111.94112.00112.31T:tinyjambu256v2
113.94114.19114.25T:schwaemm256256v2
156.25156.88159.12T:romulusn
194.00194.62197.94T:romulusm
199.56199.94203.19T:isapa128av20
280.88286.12293.56romulusn
412.12413.69417.31romulusm
489.88489.88491.50T:elephant200v2
854.50855.50857.69T!!!romulust
931.88932.62936.50T:isapa128v20
1549.75?1963.75?2281.81?T:isapk128av20
6355.816358.446392.94T:isapxv20
8159.81?8475.50?9093.69?T:isapk128v20
20448.6220636.8820683.31T:elephant160v2
20689.9420892.3820948.31T:elephant176v2
Cycles/byte for 64+64 forgery
25%50%75%aead
42.3142.6243.25ascon128abi32v12
48.1948.8149.44ascon128av12
50.7551.0651.12ascon128bi32v12
56.6957.6258.25ascon80pqv12
57.3157.6257.94ascon128v12
73.3173.5073.88T:giftcofb128v1
76.8176.8877.12T:xoodyakround3
85.0085.2585.31T:schwaemm256128v2
93.1293.8196.00T:schwaemm128128v2
94.6994.7594.75T:tinyjambu128v2
94.7595.4498.56T:aes128gcmv1
100.94101.56103.50T:aes256gcmv1
107.75108.06108.06T:schwaemm192192v2
111.25111.38111.69T:tinyjambu192v2
111.94112.00112.25T:tinyjambu256v2
113.94114.00114.25T:schwaemm256256v2
134.12134.44135.75T:isapa128av20
155.88155.94158.19T:romulusn
193.31193.62195.31T:romulusm
280.94282.88293.62romulusn
412.44413.38415.00romulusm
489.88490.50499.31T:elephant200v2
494.44494.81496.69T:isapa128v20
513.00514.06515.62T!!!romulust
1205.38?1377.19?1878.44?T:isapk128av20
3317.193318.563323.75T:isapxv20
4615.75?4862.06?5323.06?T:isapk128v20
20452.5020641.3120690.50T:elephant160v2
20695.7520881.9420898.19T:elephant176v2