VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: armeabi; Cortex-A8 (413fc082); 2012 TI Sitara XAM3359AZCZ100; 1 x 1000MHz; bblack, supercop-20240425

[Page version: 20240726 23:46:23]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Implementation notes

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
19.3619.4219.48ascon128abi32v12
23.2823.3223.33ascon128av12
27.2727.7128.10T:aes128gcmv1
29.2329.2729.38ascon128bi32v12
34.4835.1135.90T:aes256gcmv1
37.0437.3237.43ascon80pqv12
37.3337.3937.39ascon128v12
44.4944.5244.77T:schwaemm256128v2
49.4849.5650.17T:giftcofb128v1
55.0055.0755.14T:xoodyakround3
58.9258.9458.98T:schwaemm192192v2
63.6763.7363.76T:schwaemm128128v2
64.1764.1964.40T:schwaemm256256v2
81.7981.9282.14T:isapa128av20
88.2388.2888.35T:tinyjambu128v2
104.51104.75105.29T:isapa128v20
105.98105.99106.08T:tinyjambu192v2
108.63108.85109.46T:romulusn
110.72110.75110.76T:tinyjambu256v2
183.15183.60185.37T:romulusm
216.92220.80224.12romulusn
305.32?319.04?353.57?T:isapk128av20
280.09?392.60?528.82?T:isapk128v20
423.51424.30440.08romulusm
440.35440.74443.23T:elephant200v2
567.03581.44585.63T:isapxv20
923.40932.86940.98romulust
20226.7820245.0520290.52T:elephant160v2
22174.3422193.0322221.67T:elephant176v2
48068.8848086.8448143.38aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
20.5120.5720.68ascon128abi32v12
23.3223.3523.36ascon128av12
27.3827.6528.02T:aes128gcmv1
30.3630.3830.40ascon128bi32v12
34.6335.0735.74T:aes256gcmv1
39.7139.7339.78ascon80pqv12
39.6739.7839.97ascon128v12
44.6844.6844.70T:schwaemm256128v2
48.9849.0249.06T:giftcofb128v1
53.3453.4253.58T:xoodyakround3
58.9859.0059.05T:schwaemm192192v2
63.8763.9163.93T:schwaemm128128v2
64.2164.3264.40T:schwaemm256256v2
81.8182.0383.74T:isapa128av20
89.7389.7890.15T:tinyjambu128v2
104.32104.68104.96T:isapa128v20
107.25107.26107.31T:tinyjambu192v2
112.00112.00112.47T:tinyjambu256v2
162.34162.54163.73T:romulusn
216.93222.80223.36romulusn
235.47236.14242.41T:romulusm
307.76?329.65?359.49?T:isapk128av20
343.39?403.85?477.91?T:isapk128v20
423.73424.71440.80romulusm
440.41440.55442.86T:elephant200v2
566.95581.51582.92T:isapxv20
923.58934.00940.41romulust
20223.9720244.1920283.36T:elephant160v2
22188.0522205.0022238.30T:elephant176v2
48197.1248232.7148298.68aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
20.5320.5720.61ascon128abi32v12
23.3223.3523.35ascon128av12
27.3927.6527.93T:aes128gcmv1
30.3630.3830.40ascon128bi32v12
34.5535.0035.83T:aes256gcmv1
39.7139.7540.00ascon80pqv12
39.6739.8039.86ascon128v12
44.6844.7244.77T:schwaemm256128v2
48.9949.0249.07T:giftcofb128v1
51.7551.8652.19T:isapa128av20
52.0852.3454.19T:isapa128v20
53.6553.7053.80T:xoodyakround3
58.9859.0259.70T:schwaemm192192v2
63.8763.9163.93T:schwaemm128128v2
64.2864.3264.39T:schwaemm256256v2
89.7389.8089.90T:tinyjambu128v2
107.24107.26107.29T:tinyjambu192v2
111.99112.00112.05T:tinyjambu256v2
162.40162.55163.53T:romulusn
189.05?200.86?228.16?T:isapk128av20
216.70222.02223.42romulusn
235.45236.17241.03T:romulusm
184.33?253.14?314.57?T:isapk128v20
273.51274.14276.10T:isapxv20
297.34297.65304.28romulust
423.70424.57439.86romulusm
440.32440.71441.90T:elephant200v2
1481.641496.161509.70aes256gcmv1
20221.4920251.2420256.37T:elephant160v2
22173.0822187.3122216.14T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
17.8218.1219.21T:aes128gcmv1
19.8319.8519.89ascon128abi32v12
21.3121.6922.17T:aes256gcmv1
22.9822.9923.04ascon128av12
29.3029.3229.38ascon128bi32v12
34.4134.4434.55ascon80pqv12
35.0535.1335.21ascon128v12
41.4541.4741.55T:xoodyakround3
44.1344.1444.16T:schwaemm256128v2
48.7948.8248.87T:giftcofb128v1
58.5958.6058.65T:schwaemm192192v2
63.3363.3463.38T:schwaemm128128v2
63.7463.7663.86T:schwaemm256256v2
66.8366.9567.12T:isapa128av20
69.1269.1369.16T:tinyjambu128v2
78.0978.3380.62T:isapa128v20
83.7383.7583.76T:tinyjambu192v2
84.8784.8885.01T:tinyjambu256v2
92.1192.1892.59T:romulusn
129.24129.60132.10T:romulusm
212.01214.78216.91romulusn
250.14?266.63?285.56?T:isapk128av20
315.65315.96323.93romulusm
282.24?323.93?376.77?T:isapk128v20
330.78331.02337.99T:elephant200v2
421.84428.87430.22T:isapxv20
610.38617.66619.93romulust
15166.1415184.9015194.94T:elephant160v2
16564.6816584.8016596.11T:elephant176v2
24701.8924723.8824741.68aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
17.8618.0818.51T:aes128gcmv1
20.3520.4220.46ascon128abi32v12
21.3921.7122.22T:aes256gcmv1
22.9923.0123.06ascon128av12
29.5929.6329.98ascon128bi32v12
35.0135.0735.09ascon80pqv12
35.5535.6135.74ascon128v12
40.9741.0741.20T:xoodyakround3
44.2344.2444.44T:schwaemm256128v2
48.5448.5748.63T:giftcofb128v1
58.6058.6258.73T:schwaemm192192v2
63.4363.4563.46T:schwaemm128128v2
63.8063.8265.16T:schwaemm256256v2
66.7566.9267.26T:isapa128av20
69.8669.8970.08T:tinyjambu128v2
77.9478.2179.46T:isapa128v20
84.3684.3784.38T:tinyjambu192v2
85.5085.5085.65T:tinyjambu256v2
118.89119.04119.72T:romulusn
155.32155.58156.94T:romulusm
211.62216.42218.69romulusn
250.30?270.82?280.82?T:isapk128av20
315.38315.82324.16romulusm
330.91331.02338.13T:elephant200v2
277.38?344.12?385.01?T:isapk128v20
415.46428.78429.41T:isapxv20
610.42617.49618.78romulust
15171.2915182.7315207.66T:elephant160v2
16566.2116582.6216617.24T:elephant176v2
24850.2824858.0124891.14aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
17.9318.1018.53T:aes128gcmv1
20.4020.4320.45ascon128abi32v12
21.5121.7322.16T:aes256gcmv1
23.0023.0223.06ascon128av12
29.6229.6329.70ascon128bi32v12
35.0535.0735.13ascon80pqv12
35.5635.6035.67ascon128v12
41.1241.1741.26T:xoodyakround3
44.2344.2544.27T:schwaemm256128v2
48.5548.5748.59T:giftcofb128v1
51.7851.8451.99T:isapa128av20
51.7651.9052.13T:isapa128v20
58.6258.6258.69T:schwaemm192192v2
63.4463.4863.96T:schwaemm128128v2
63.8063.8263.84T:schwaemm256256v2
69.8769.8970.05T:tinyjambu128v2
84.3784.3884.56T:tinyjambu192v2
85.5085.5085.72T:tinyjambu256v2
118.86119.07119.74T:romulusn
155.35155.56158.54T:romulusm
190.86?202.68?224.32?T:isapk128av20
211.98216.67221.06romulusn
200.39?246.12?262.98?T:isapk128v20
274.17275.40282.06T:isapxv20
297.19297.57305.80romulust
315.58315.90323.96romulusm
330.76331.02337.78T:elephant200v2
1487.761488.821496.61aes256gcmv1
15168.9315183.1415213.18T:elephant160v2
16567.6516583.0416602.01T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
8.148.348.68T:aes128gcmv1
8.078.478.74T:aes256gcmv1
20.1720.2520.31ascon128abi32v12
22.6522.6822.72ascon128av12
27.8227.8427.87T:xoodyakround3
29.3229.3729.40ascon128bi32v12
31.4031.4931.57ascon80pqv12
32.7432.7932.92ascon128v12
43.7743.7943.81T:schwaemm256128v2
48.1148.1548.26T:giftcofb128v1
49.9850.0250.07T:tinyjambu128v2
51.2751.4551.74T:isapa128v20
51.8451.9352.15T:isapa128av20
58.2258.2858.52T:schwaemm192192v2
58.9859.0059.02T:tinyjambu256v2
61.5061.5061.56T:tinyjambu192v2
63.0063.0063.04T:schwaemm128128v2
63.2863.3263.39T:schwaemm256256v2
75.1775.2876.21T:romulusm
75.3975.5475.80T:romulusn
190.14?204.61?235.93?T:isapk128av20
207.25207.54209.08romulusm
207.09207.78210.91romulusn
223.71224.01224.32T:elephant200v2
174.49?259.36?342.98?T:isapk128v20
275.25276.20278.42T:isapxv20
296.58297.05303.42romulust
1329.411340.971350.67aes256gcmv1
10104.7510118.6710142.74T:elephant160v2
10956.3610961.1910992.61T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
8.118.408.60T:aes256gcmv1
8.148.428.57T:aes128gcmv1
20.2020.2520.31ascon128abi32v12
22.6322.6622.70ascon128av12
28.6028.6728.77T:xoodyakround3
28.8628.8828.90ascon128bi32v12
30.3330.3830.44ascon80pqv12
31.3331.4531.77ascon128v12
43.7743.7743.84T:schwaemm256128v2
48.1148.1348.15T:giftcofb128v1
49.9850.0450.41T:tinyjambu128v2
51.3451.5451.72T:isapa128v20
51.8251.9352.08T:isapa128av20
58.2258.2758.36T:schwaemm192192v2
59.0059.0259.38T:tinyjambu256v2
61.5061.5061.52T:tinyjambu192v2
62.9963.0263.06T:schwaemm128128v2
63.3063.3463.39T:schwaemm256256v2
75.1775.3976.75T:romulusm
75.5475.6576.89T:romulusn
193.56?201.28?227.29?T:isapk128av20
207.09207.55210.73romulusn
207.28207.58209.10romulusm
223.86223.99224.57T:elephant200v2
171.09?263.90?351.78?T:isapk128v20
275.40276.15278.39T:isapxv20
296.82297.27303.68romulust
1481.601496.031504.84aes256gcmv1
10105.7310116.5010138.45T:elephant160v2
10956.4210959.1810987.61T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
8.148.408.59T:aes128gcmv1
8.228.408.70T:aes256gcmv1
20.2320.2520.27ascon128abi32v12
22.6522.6822.70ascon128av12
28.6128.6328.67T:xoodyakround3
28.8628.8828.89ascon128bi32v12
30.3330.4130.66ascon80pqv12
31.3331.4031.53ascon128v12
43.7743.7943.81T:schwaemm256128v2
48.1148.1348.18T:giftcofb128v1
49.9850.0250.04T:tinyjambu128v2
51.3351.5251.71T:isapa128v20
51.7851.9852.71T:isapa128av20
58.2358.2658.29T:schwaemm192192v2
59.0059.0059.01T:tinyjambu256v2
61.5061.5261.65T:tinyjambu192v2
63.0063.0263.09T:schwaemm128128v2
63.2963.3063.41T:schwaemm256256v2
75.1775.2875.47T:romulusm
75.4775.6176.04T:romulusn
192.85202.30212.01T:isapk128av20
207.24207.52209.05romulusm
207.02207.72210.82romulusn
223.95224.01224.38T:elephant200v2
193.57?247.97?315.94?T:isapk128v20
275.79276.18278.44T:isapxv20
296.76296.99303.59romulust
1481.511494.991505.77aes256gcmv1
10104.1910120.6710139.67T:elephant160v2
10955.9210959.5510976.75T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
20.7520.7520.86ascon128abi32v12
21.5321.5922.01T:aes128gcmv1
24.0124.0124.03ascon128av12
25.3425.4626.00T:aes256gcmv1
30.1830.1930.23ascon128bi32v12
35.3935.4135.45ascon80pqv12
35.9936.0636.09ascon128v12
42.3342.3342.35T:xoodyakround3
45.8745.8846.13T:schwaemm256128v2
49.8449.8449.87T:giftcofb128v1
60.3360.3460.35T:schwaemm192192v2
64.5964.5964.61T:schwaemm128128v2
65.8965.9065.92T:schwaemm256256v2
70.1770.1970.43T:tinyjambu128v2
72.7272.8173.09T:isapa128av20
84.8684.8885.16T:tinyjambu192v2
85.9785.9886.08T:tinyjambu256v2
93.7193.7694.57T:romulusn
111.16111.33114.38T:isapa128v20
130.88131.02131.72T:romulusm
215.16218.98219.83romulusn
308.05316.99331.27T:isapk128av20
318.59318.99323.27romulusm
338.20338.38340.33T:elephant200v2
620.65629.71631.82romulust
633.68663.84689.46T:isapk128v20
659.88667.97668.62T:isapxv20
15345.9515356.2615371.78T:elephant160v2
16697.1716707.7316718.77T:elephant176v2
25201.2025214.7225245.62aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
21.3121.3121.37ascon128abi32v12
21.4621.5221.93T:aes128gcmv1
24.0124.0224.05ascon128av12
25.2825.3225.89T:aes256gcmv1
30.4930.4930.57ascon128bi32v12
36.0236.0436.24ascon80pqv12
36.5436.5936.70ascon128v12
41.9842.0342.06T:xoodyakround3
45.9545.9545.98T:schwaemm256128v2
49.6149.6349.67T:giftcofb128v1
60.3360.3360.38T:schwaemm192192v2
64.6764.6864.72T:schwaemm128128v2
65.9465.9666.27T:schwaemm256256v2
70.9270.9370.95T:tinyjambu128v2
72.7372.8073.06T:isapa128av20
85.5085.5185.78T:tinyjambu192v2
86.6086.6186.64T:tinyjambu256v2
111.24111.32112.53T:isapa128v20
120.57120.75121.40T:romulusn
157.02157.08157.87T:romulusm
215.24219.34220.87romulusn
308.39315.86325.68T:isapk128av20
319.64319.95329.84romulusm
338.19338.39339.80T:elephant200v2
620.78629.53631.66romulust
645.51665.85702.81T:isapk128v20
660.03668.03669.48T:isapxv20
15345.9815352.8415361.31T:elephant160v2
16696.1216709.1916721.51T:elephant176v2
25345.2525356.6225391.22aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
21.3121.3221.41ascon128abi32v12
21.4421.5121.95T:aes128gcmv1
24.0224.0224.03ascon128av12
25.2825.3925.76T:aes256gcmv1
30.4930.5030.56ascon128bi32v12
36.0236.0436.29ascon80pqv12
36.5536.5836.69ascon128v12
42.1042.1242.18T:xoodyakround3
45.9545.9645.99T:schwaemm256128v2
49.6149.6149.67T:giftcofb128v1
55.4755.5755.70T:isapa128av20
60.3360.3460.40T:schwaemm192192v2
64.6764.6864.72T:schwaemm128128v2
65.9465.9665.98T:schwaemm256256v2
69.0669.0869.21T:isapa128v20
70.9370.9371.26T:tinyjambu128v2
85.5085.5085.53T:tinyjambu192v2
86.6086.6286.90T:tinyjambu256v2
120.57120.64121.46T:romulusn
157.02157.20158.08T:romulusm
215.14219.34219.83romulusn
225.98?228.34?255.70?T:isapk128av20
306.22306.46311.28romulust
319.62319.92329.85romulusm
338.19338.36339.90T:elephant200v2
397.92398.12406.88T:isapxv20
415.02?442.99?481.30?T:isapk128v20
1983.451990.691998.45aes256gcmv1
15349.1515363.9915389.69T:elephant160v2
16697.2416708.7016713.90T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
41.0641.3142.31ascon128abi32v12
46.8846.9447.19ascon128av12
49.7549.8151.12ascon128bi32v12
56.9457.0058.56ascon128v12
56.9457.6258.25ascon80pqv12
71.6271.9472.56T:xoodyakround3
72.9472.9473.88T:giftcofb128v1
84.9485.0085.31T:schwaemm256128v2
92.7593.0693.12T:schwaemm128128v2
93.7594.0694.44T:tinyjambu128v2
95.0696.0699.56T:aes128gcmv1
101.56101.94105.75T:aes256gcmv1
107.69107.75108.06T:schwaemm192192v2
110.38110.38110.69T:tinyjambu192v2
111.00111.31111.62T:tinyjambu256v2
114.62114.94115.25T:schwaemm256256v2
129.19130.19131.88T:romulusn
167.62168.62171.56T:romulusm
206.06206.38208.00T:isapa128av20
281.56284.44287.06romulusn
386.12386.75389.38romulusm
489.62489.88491.88T:elephant200v2
854.81855.50859.38romulust
869.75870.44873.31T:isapa128v20
1282.12?1335.25?1538.06?T:isapk128av20
6086.626088.946117.19T:isapxv20
7292.31?8262.31?8857.38?T:isapk128v20
20447.0020635.1220665.69T:elephant160v2
20687.8820879.3820898.56T:elephant176v2
36535.5636548.1936799.56aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
41.6942.0042.62ascon128abi32v12
47.1947.2547.50ascon128av12
49.8150.1250.50ascon128bi32v12
57.6258.0058.25ascon80pqv12
57.6258.8859.50ascon128v12
72.9473.2573.56T:xoodyakround3
73.3173.5673.94T:giftcofb128v1
85.2585.3185.62T:schwaemm256128v2
92.8193.0693.12T:schwaemm128128v2
94.6995.0095.38T:tinyjambu128v2
94.4495.6999.88T:aes128gcmv1
99.94100.19104.50T:aes256gcmv1
107.75108.06108.38T:schwaemm192192v2
111.25111.31111.38T:tinyjambu192v2
111.94112.00112.00T:tinyjambu256v2
114.88115.19115.50T:schwaemm256256v2
156.88157.88159.12T:romulusn
193.75194.06196.94T:romulusm
207.00207.06208.94T:isapa128av20
281.56283.19285.75romulusn
411.38411.75413.75romulusm
489.62489.88491.81T:elephant200v2
854.81855.75859.31romulust
870.00870.38874.69T:isapa128v20
1274.06?1346.94?1468.38?T:isapk128av20
6088.316096.696133.50T:isapxv20
7440.44?8326.75?9222.50?T:isapk128v20
20450.0020635.8120666.00T:elephant160v2
20692.1220879.6920900.44T:elephant176v2
36704.1236710.0036885.44aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
41.6242.0042.38ascon128abi32v12
47.1947.2547.50ascon128av12
50.1250.1950.44ascon128bi32v12
57.6258.0058.62ascon80pqv12
57.6258.8859.25ascon128v12
72.9473.1973.25T:xoodyakround3
73.2573.5673.88T:giftcofb128v1
85.2585.2585.56T:schwaemm256128v2
92.8193.0693.12T:schwaemm128128v2
94.3895.0099.88T:aes128gcmv1
94.4495.0095.06T:tinyjambu128v2
99.00100.00104.12T:aes256gcmv1
107.75108.06108.12T:schwaemm192192v2
111.25111.31111.38T:tinyjambu192v2
111.94112.00112.00T:tinyjambu256v2
114.88114.94115.25T:schwaemm256256v2
138.00138.31139.62T:isapa128av20
156.62157.81161.44T:romulusn
193.38193.75195.69T:romulusm
281.56282.94285.75romulusn
411.12411.50413.44romulusm
464.12464.50467.75T:isapa128v20
489.62489.88491.50T:elephant200v2
513.00513.62515.94romulust
790.00?820.94?991.19?T:isapk128av20
3172.063172.753180.25T:isapxv20
4084.12?4842.31?5315.81?T:isapk128v20
13291.0613297.9413505.94aes256gcmv1
20628.6920643.6220771.56T:elephant160v2
20692.1220879.2520934.94T:elephant176v2