VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: armeabi; Cortex-A8 (413fc082); 2012 TI Sitara XAM3359AZCZ100; 1 x 1000MHz; bblack, supercop-20240716

[Page version: 20241120 00:41:35]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
19.4019.4519.55ascon128abi32v12
23.2823.3323.50ascon128av12
27.2327.6928.56T:aes128gcmv1
29.2329.2529.36ascon128bi32v12
33.9234.9336.21T:aes256gcmv1
37.3337.3737.48ascon128v12
37.2237.7637.85ascon80pqv12
44.5044.5745.64T:schwaemm256128v2
49.4349.5049.56T:giftcofb128v1
58.9358.9559.02T:schwaemm192192v2
59.7059.7459.77T:xoodyakround3
62.8762.9163.02T:schwaemm256256v2
63.4963.6964.30T:schwaemm128128v2
85.4785.6385.76T:isapa128av20
88.2588.2888.54T:tinyjambu128v2
105.92106.00106.05T:tinyjambu192v2
107.40107.63108.58T:isapa128v20
108.65108.92109.32T:romulusn
110.74110.78110.85T:tinyjambu256v2
182.85183.32184.32T:romulusm
217.03217.27218.44romulusn
269.35?300.29?431.97?T:isapk128av20
336.27?407.21?602.99?T:isapk128v20
423.90426.16441.80romulusm
440.41440.93458.83T:elephant200v2
607.48624.35630.38T:isapxv20
924.12939.31942.21T!!!romulust
20230.0920258.0420326.34T:elephant160v2
22191.1922203.1622254.42T:elephant176v2
48093.9648123.6848197.62aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
20.5320.5720.63ascon128abi32v12
23.3023.3523.39ascon128av12
27.2427.7728.56T:aes128gcmv1
30.3130.3830.64ascon128bi32v12
34.4034.8535.91T:aes256gcmv1
39.6939.7439.86ascon128v12
39.0539.9340.69ascon80pqv12
44.6545.2045.25T:schwaemm256128v2
48.9849.0049.09T:giftcofb128v1
57.4957.5557.67T:xoodyakround3
59.0059.0259.05T:schwaemm192192v2
62.9162.9363.09T:schwaemm256256v2
63.5263.9165.60T:schwaemm128128v2
85.6185.6585.85T:isapa128av20
89.7589.7589.80T:tinyjambu128v2
107.22107.27107.57T:tinyjambu192v2
107.46107.65108.05T:isapa128v20
112.00112.04112.10T:tinyjambu256v2
162.38162.47162.76T:romulusn
216.79217.16218.15romulusn
235.25235.71236.69T:romulusm
251.05?297.27?344.71?T:isapk128av20
423.97426.13440.32romulusm
367.48?430.08?521.49?T:isapk128v20
440.42440.76443.08T:elephant200v2
608.55612.91623.60T:isapxv20
923.90938.85940.56T!!!romulust
20225.5420247.7120264.32T:elephant160v2
22175.0222190.9922204.20T:elephant176v2
47954.3947980.0048020.67aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
20.5320.5720.60ascon128abi32v12
23.3223.3523.38ascon128av12
27.4127.6928.39T:aes128gcmv1
30.3130.3830.42ascon128bi32v12
34.4834.8535.63T:aes256gcmv1
39.7139.7739.87ascon128v12
39.0839.8540.69ascon80pqv12
44.6844.7245.24T:schwaemm256128v2
49.0049.0249.11T:giftcofb128v1
51.9952.1252.24T:isapa128v20
52.0652.1252.23T:isapa128av20
57.7957.8858.35T:xoodyakround3
58.9859.0059.07T:schwaemm192192v2
62.9162.9362.93T:schwaemm256256v2
63.5463.9365.42T:schwaemm128128v2
89.7589.7890.12T:tinyjambu128v2
107.22107.26107.29T:tinyjambu192v2
112.01112.04112.78T:tinyjambu256v2
162.36162.47162.82T:romulusn
164.25?191.10?219.18?T:isapk128av20
216.79217.20217.98romulusn
235.30235.55236.84T:romulusm
195.07?262.67?308.36?T:isapk128v20
296.21297.57304.26T!!!romulust
303.02303.45305.76T:isapxv20
423.66425.57432.30romulusm
440.39440.85442.60T:elephant200v2
1217.751229.501251.94aes256gcmv1
20225.3220237.3820263.06T:elephant160v2
22176.8022204.2222221.54T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
17.8618.0518.44T:aes128gcmv1
19.8219.8619.92ascon128abi32v12
21.3921.6021.97T:aes256gcmv1
22.9723.0023.13ascon128av12
29.3129.3229.35ascon128bi32v12
34.3534.4834.65ascon80pqv12
34.9935.0635.13ascon128v12
44.1444.2744.67T:schwaemm256128v2
45.1945.2045.43T:xoodyakround3
48.7748.8248.89T:giftcofb128v1
58.5858.6158.67T:schwaemm192192v2
62.7162.7362.81T:schwaemm256256v2
63.2663.3663.64T:schwaemm128128v2
68.2268.2968.45T:isapa128av20
69.1169.1469.32T:tinyjambu128v2
79.2179.4282.45T:isapa128v20
83.7483.7684.88T:tinyjambu192v2
84.8684.9084.95T:tinyjambu256v2
92.1392.2492.67T:romulusn
129.05129.32130.11T:romulusm
211.60217.24220.92romulusn
212.50?241.22?289.08?T:isapk128av20
315.71317.61324.01romulusm
330.87331.13338.43T:elephant200v2
305.11?339.01?424.63?T:isapk128v20
451.18457.48464.02T:isapxv20
610.13618.15619.47T!!!romulust
15175.1215185.4015255.80T:elephant160v2
16565.4016585.6516612.70T:elephant176v2
24714.7024721.1324746.86aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
17.9018.0418.48T:aes128gcmv1
20.3420.4320.69ascon128abi32v12
21.4521.6622.06T:aes256gcmv1
23.0023.0223.06ascon128av12
29.6029.6430.45ascon128bi32v12
34.7435.3635.62ascon80pqv12
35.5235.5835.72ascon128v12
44.0244.1344.21T:xoodyakround3
44.2344.2544.58T:schwaemm256128v2
48.5348.5748.63T:giftcofb128v1
58.6158.6358.73T:schwaemm192192v2
62.6462.7563.05T:schwaemm256256v2
63.2963.5464.21T:schwaemm128128v2
68.2068.2968.47T:isapa128av20
69.8569.8770.07T:tinyjambu128v2
79.0679.4081.53T:isapa128v20
84.3684.3884.54T:tinyjambu192v2
85.4985.5385.61T:tinyjambu256v2
118.92119.06124.95T:romulusn
155.31155.76160.81T:romulusm
211.62217.99220.44romulusn
237.05?251.19?280.50?T:isapk128av20
315.72317.62324.08romulusm
330.78331.03338.02T:elephant200v2
298.66?346.72?388.49?T:isapk128v20
450.91456.76459.14T:isapxv20
610.62617.80618.51T!!!romulust
15173.2815185.3815194.42T:elephant160v2
16563.9416590.6116630.08T:elephant176v2
24581.6724610.2724645.69aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
17.9018.0718.39T:aes128gcmv1
20.4120.4320.48ascon128abi32v12
21.4421.6923.03T:aes256gcmv1
23.0023.0123.06ascon128av12
29.6129.6329.68ascon128bi32v12
34.7335.0935.53ascon80pqv12
35.5535.5735.65ascon128v12
44.2344.2744.52T:schwaemm256128v2
44.2544.2844.58T:xoodyakround3
48.5548.5748.62T:giftcofb128v1
51.3951.5352.06T:isapa128v20
51.4751.5551.64T:isapa128av20
58.6258.6458.68T:schwaemm192192v2
62.6262.7362.80T:schwaemm256256v2
63.2863.4164.18T:schwaemm128128v2
69.8869.8869.95T:tinyjambu128v2
84.3684.3884.40T:tinyjambu192v2
85.4685.5285.53T:tinyjambu256v2
118.96119.03119.60T:romulusn
155.20155.41158.79T:romulusm
180.19?194.75?224.96?T:isapk128av20
211.47215.93220.47romulusn
227.97?268.43?313.52?T:isapk128v20
297.15297.47305.78T!!!romulust
298.51298.84303.56T:isapxv20
315.75317.54324.42romulusm
330.88331.10337.87T:elephant200v2
1218.991229.461233.34aes256gcmv1
15169.6715184.2615199.77T:elephant160v2
16567.7716579.3216591.87T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
8.038.408.66T:aes256gcmv1
8.07?8.44?9.38?T:aes128gcmv1
20.2220.2620.33ascon128abi32v12
22.6622.6822.70ascon128av12
29.2829.3629.68ascon128bi32v12
30.6630.6830.71T:xoodyakround3
31.4631.5131.55ascon80pqv12
32.6832.7532.90ascon128v12
43.7743.7943.82T:schwaemm256128v2
48.0948.1548.26T:giftcofb128v1
50.0050.0250.10T:tinyjambu128v2
50.8950.9351.06T:isapa128av20
50.8550.9351.25T:isapa128v20
58.2058.2658.29T:schwaemm192192v2
58.9859.0259.05T:tinyjambu256v2
61.5061.5061.57T:tinyjambu192v2
62.5462.6763.15T:schwaemm256256v2
62.9763.0263.08T:schwaemm128128v2
75.1175.2875.60T:romulusm
75.1275.5275.59T:romulusn
163.01?195.87?213.38?T:isapk128av20
205.92207.65224.28romulusn
207.20209.06214.17romulusm
223.86224.00224.71T:elephant200v2
207.53?265.48?416.65?T:isapk128v20
293.35294.30308.47T:isapxv20
296.81297.10305.17T!!!romulust
1343.911358.051365.58aes256gcmv1
10110.8310130.7710147.76T:elephant160v2
10952.1510965.3811031.01T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
7.928.228.38T:aes256gcmv1
8.058.428.64T:aes128gcmv1
20.1820.2720.31ascon128abi32v12
22.6822.6822.70ascon128av12
28.8228.8828.93ascon128bi32v12
30.3130.4030.45ascon80pqv12
30.6630.7930.82T:xoodyakround3
31.3231.3831.46ascon128v12
43.7743.7943.83T:schwaemm256128v2
48.1148.1348.17T:giftcofb128v1
49.9850.0050.02T:tinyjambu128v2
50.8950.9551.30T:isapa128av20
50.8250.9551.06T:isapa128v20
58.2558.2758.29T:schwaemm192192v2
58.9859.0059.03T:tinyjambu256v2
61.4861.5061.54T:tinyjambu192v2
62.5462.6762.72T:schwaemm256256v2
62.9863.0263.08T:schwaemm128128v2
75.1775.2875.76T:romulusm
75.4575.6177.52T:romulusn
170.83?196.68?249.12?T:isapk128av20
207.22207.87209.95romulusm
206.00208.02223.65romulusn
223.93224.05226.36T:elephant200v2
163.17?260.35?320.15?T:isapk128v20
293.47294.24307.97T:isapxv20
296.84297.03303.55T!!!romulust
1217.661228.681242.94aes256gcmv1
10109.7410123.7310158.59T:elephant160v2
10956.2510960.7310996.34T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
8.148.388.69T:aes256gcmv1
8.168.388.55T:aes128gcmv1
20.2220.2720.33ascon128abi32v12
22.6822.6822.70ascon128av12
28.8328.8629.06ascon128bi32v12
30.3130.4030.84ascon80pqv12
30.6630.6830.86T:xoodyakround3
31.3531.3831.44ascon128v12
43.7943.7943.85T:schwaemm256128v2
48.0948.1348.21T:giftcofb128v1
50.0050.0050.08T:tinyjambu128v2
50.8850.9151.04T:isapa128av20
50.8550.9551.32T:isapa128v20
58.2558.2858.59T:schwaemm192192v2
58.9959.0259.29T:tinyjambu256v2
61.5061.5262.17T:tinyjambu192v2
62.5662.5662.61T:schwaemm256256v2
62.9863.0263.08T:schwaemm128128v2
75.1775.2875.69T:romulusm
75.4375.5675.91T:romulusn
169.87?194.22?218.52?T:isapk128av20
205.98207.93223.61romulusn
207.30208.85209.72romulusm
223.90224.10225.95T:elephant200v2
192.64?265.57?315.70?T:isapk128v20
293.15294.22296.37T:isapxv20
296.80297.04302.98T!!!romulust
1217.011231.911233.70aes256gcmv1
10107.8610118.4010145.87T:elephant160v2
10953.7710960.5510986.29T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
20.7520.7720.85ascon128abi32v12
21.5221.6322.01T:aes128gcmv1
23.9924.0124.08ascon128av12
25.3225.3525.77T:aes256gcmv1
30.1830.1930.27ascon128bi32v12
35.4035.6436.04ascon80pqv12
35.9836.0036.10ascon128v12
45.8746.1146.52T:schwaemm256128v2
46.1146.1146.13T:xoodyakround3
49.8349.8550.12T:giftcofb128v1
60.3260.3360.34T:schwaemm192192v2
64.6064.6464.97T:schwaemm128128v2
64.8764.8964.95T:schwaemm256256v2
70.1770.1771.19T:tinyjambu128v2
73.7473.7774.04T:isapa128av20
84.8684.9085.66T:tinyjambu192v2
85.9985.9986.01T:tinyjambu256v2
93.7493.8794.45T:romulusn
114.78114.81115.04T:isapa128v20
130.90130.95131.80T:romulusm
215.09221.88223.39romulusn
318.81320.77329.44romulusm
313.14?331.33?391.97?T:isapk128av20
338.23338.49347.99T:elephant200v2
620.72629.05631.41T!!!romulust
672.06686.94724.53T:isapk128v20
700.00703.12710.61T:isapxv20
15346.6015359.9115383.79T:elephant160v2
16705.7616717.4516763.56T:elephant176v2
25214.9025223.1025277.00aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
21.3121.3221.42ascon128abi32v12
21.47?21.92?25.08?T:aes128gcmv1
24.0224.0224.07ascon128av12
25.2425.3126.04T:aes256gcmv1
30.4930.5030.54ascon128bi32v12
36.0136.0836.58ascon80pqv12
36.4836.5036.62ascon128v12
45.0545.1145.18T:xoodyakround3
45.9646.1346.59T:schwaemm256128v2
49.6149.6449.71T:giftcofb128v1
60.3360.3460.40T:schwaemm192192v2
64.9064.9565.10T:schwaemm256256v2
64.7265.2765.63T:schwaemm128128v2
70.9270.9270.96T:tinyjambu128v2
73.7773.7873.96T:isapa128av20
85.4985.5185.84T:tinyjambu192v2
86.6186.6186.63T:tinyjambu256v2
114.80114.85115.12T:isapa128v20
120.57120.61121.21T:romulusn
157.02157.07157.80T:romulusm
215.13221.07223.17romulusn
319.76321.37330.54romulusm
313.78329.41348.09T:isapk128av20
338.19338.42340.28T:elephant200v2
620.85626.70630.66T!!!romulust
670.59?692.86?770.50?T:isapk128v20
699.96702.07708.15T:isapxv20
15346.5515360.1615364.20T:elephant160v2
16698.3616712.2816728.77T:elephant176v2
25077.0125083.7225115.67aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
21.3121.3221.41ascon128abi32v12
21.4021.5221.95T:aes128gcmv1
24.0124.0224.05ascon128av12
25.2125.2725.64T:aes256gcmv1
30.4930.5030.56ascon128bi32v12
36.0136.0936.63ascon80pqv12
36.4936.5136.61ascon128v12
45.1945.2545.33T:xoodyakround3
45.9546.0946.30T:schwaemm256128v2
49.6149.6149.65T:giftcofb128v1
54.9754.9755.05T:isapa128av20
60.3360.3460.46T:schwaemm192192v2
64.7164.7365.63T:schwaemm128128v2
64.9064.9765.03T:schwaemm256256v2
69.9870.0270.17T:isapa128v20
70.9170.9270.92T:tinyjambu128v2
85.5085.5185.52T:tinyjambu192v2
86.6186.6187.21T:tinyjambu256v2
120.53120.61121.44T:romulusn
156.99157.03157.42T:romulusm
215.13220.65222.97romulusn
235.07?242.93?270.97?T:isapk128av20
306.21306.45311.04T!!!romulust
319.73321.41325.71romulusm
338.22338.41347.00T:elephant200v2
426.70427.03429.39T:isapxv20
432.23?453.23?483.09?T:isapk128v20
1717.901718.971726.19aes256gcmv1
15346.2615351.1715369.06T:elephant160v2
16698.9316705.5116719.19T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
41.3141.3142.62ascon128abi32v12
46.8846.8847.25ascon128av12
49.8149.8150.81ascon128bi32v12
56.9457.0058.56ascon128v12
56.6957.2557.94ascon80pqv12
72.9473.2574.19T:giftcofb128v1
77.1277.1977.50T:xoodyakround3
84.9484.9485.00T:schwaemm256128v2
93.7594.0694.81T:tinyjambu128v2
93.0694.1295.06T:schwaemm128128v2
95.6996.6999.94T:aes128gcmv1
102.25103.50110.69T:aes256gcmv1
107.75107.75108.06T:schwaemm192192v2
110.38110.38110.75T:tinyjambu192v2
111.00111.31111.38T:tinyjambu256v2
113.94114.00114.25T:schwaemm256256v2
129.19129.56132.50T:romulusn
167.62168.00171.88T:romulusm
198.88199.19201.50T:isapa128av20
280.31284.81293.62romulusn
387.69388.56390.62romulusm
489.56489.88491.75T:elephant200v2
854.38855.44858.69T!!!romulust
931.00931.88934.88T:isapa128v20
1708.56?1945.25?2294.50?T:isapk128av20
6354.886355.256387.44T:isapxv20
8094.69?8777.94?9923.06?T:isapk128v20
20457.8120638.7520666.75T:elephant160v2
20695.3820879.9420892.00T:elephant176v2
36547.9436562.5036758.19aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
41.6941.6943.62ascon128abi32v12
46.8847.1947.50ascon128av12
50.1250.4450.81ascon128bi32v12
57.6257.6259.88ascon128v12
57.6259.5061.56ascon80pqv12
73.2573.5674.19T:giftcofb128v1
76.5076.5677.19T:xoodyakround3
85.0085.2585.31T:schwaemm256128v2
93.1293.7596.00T:schwaemm128128v2
94.7595.0695.06T:tinyjambu128v2
95.0695.6999.62T:aes128gcmv1
100.56101.94106.19T:aes256gcmv1
107.75108.06108.50T:schwaemm192192v2
111.25111.38111.69T:tinyjambu192v2
111.94112.00112.31T:tinyjambu256v2
113.94114.19114.25T:schwaemm256256v2
156.25156.88159.12T:romulusn
194.00194.62197.94T:romulusm
199.56199.94203.19T:isapa128av20
280.88286.12293.56romulusn
412.12413.69417.31romulusm
489.88489.88491.50T:elephant200v2
854.50855.50857.69T!!!romulust
931.88932.62936.50T:isapa128v20
1549.75?1963.75?2281.81?T:isapk128av20
6355.816358.446392.94T:isapxv20
8159.81?8475.50?9093.69?T:isapk128v20
20448.6220636.8820683.31T:elephant160v2
20689.9420892.3820948.31T:elephant176v2
36407.6236425.8136608.81aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
41.6941.9442.62ascon128abi32v12
46.8847.1247.19ascon128av12
50.1250.4450.81ascon128bi32v12
57.6257.6258.00ascon128v12
57.6258.5661.56ascon80pqv12
73.3173.5073.88T:giftcofb128v1
76.8176.8877.12T:xoodyakround3
85.0085.2585.31T:schwaemm256128v2
93.1293.8196.00T:schwaemm128128v2
94.6994.7594.75T:tinyjambu128v2
94.7595.4498.56T:aes128gcmv1
100.56101.56105.12T:aes256gcmv1
107.75108.06108.06T:schwaemm192192v2
111.25111.38111.69T:tinyjambu192v2
111.94112.00112.25T:tinyjambu256v2
113.94114.00114.25T:schwaemm256256v2
134.12134.44135.75T:isapa128av20
155.88155.94158.19T:romulusn
193.31193.62195.31T:romulusm
280.94282.88293.62romulusn
412.44413.38415.00romulusm
489.88490.50499.31T:elephant200v2
494.44494.81496.69T:isapa128v20
513.00514.06515.62T!!!romulust
1205.38?1377.19?1878.44?T:isapk128av20
3317.193318.563323.75T:isapxv20
4615.75?4862.06?5323.06?T:isapk128v20
12993.9412997.4413205.81aes256gcmv1
20452.5020641.3120690.50T:elephant160v2
20695.7520881.9420898.19T:elephant176v2