VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: armeabi; ARM1176 (410fb767); 2011 Broadcom BCM2835; 1 x 1000MHz; berry0, supercop-20240107

[Page version: 20241120 00:41:35]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
30.5730.8831.29ascon128abi32v12
40.4241.2142.00ascon128av12
45.6246.1548.07ascon128bi32v12
55.0855.9956.60ascon80pqv12
55.2756.2758.80ascon128v12
65.3665.4665.86T:schwaemm256128v2
80.3581.5884.79T:aes128gcmv1
85.9186.0586.44T:schwaemm192192v2
86.2987.2988.70T:giftcofb128v1
88.9289.1689.61T:schwaemm128128v2
90.7691.2991.58T:xoodyakround3
93.4593.5194.09T:schwaemm256256v2
89.5094.4698.16T:aes256gcmv1
144.53146.34150.43T:isapa128av20
147.98148.00148.04T:tinyjambu128v2
186.11188.24191.68T:isapa128v20
188.22188.35189.40T:tinyjambu192v2
205.18205.25206.43T:tinyjambu256v2
215.96216.68218.76T:romulusn
507.46510.38513.00romulusn
563.17564.07566.18T:elephant200v2
608.72609.40613.27T:isapk128av20
919.82927.59940.64T:isapk128v20
923.45929.99943.45T:isapxv20
990.98994.221022.45romulusm
2156.212184.262199.53romulust
32347.4532370.5732424.64T:elephant160v2
36307.4036347.7136377.06T:elephant176v2
77267.5177291.4577374.13aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
30.9231.2631.62ascon128abi32v12
40.7241.3742.08ascon128av12
45.8146.0646.36ascon128bi32v12
55.4956.0456.64ascon80pqv12
55.7556.1756.70ascon128v12
65.0365.2665.38T:schwaemm256128v2
79.9181.3983.71T:aes128gcmv1
86.0886.1986.76T:schwaemm192192v2
85.6486.4587.58T:giftcofb128v1
87.7388.1389.22T:xoodyakround3
89.2589.4189.72T:schwaemm128128v2
93.6893.9194.20T:schwaemm256256v2
93.6695.1799.07T:aes256gcmv1
144.41146.00148.54T:isapa128av20
150.21150.29154.98T:tinyjambu128v2
185.84190.64194.92T:isapa128v20
193.16193.25193.48T:tinyjambu192v2
207.33207.50207.90T:tinyjambu256v2
215.54215.78217.18T:romulusn
502.28504.67506.58romulusn
563.14563.82565.07T:elephant200v2
608.97609.91618.05T:isapk128av20
924.28928.34941.07T:isapk128v20
922.18929.76943.43T:isapxv20
990.92994.521020.49romulusm
2157.212183.602189.61romulust
32345.0032396.7732421.52T:elephant160v2
36300.5136321.4636371.61T:elephant176v2
77234.3677283.4077347.15aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
31.0231.2831.58ascon128abi32v12
40.7241.3041.62ascon128av12
45.6746.1246.35ascon128bi32v12
55.5156.0256.59ascon80pqv12
55.8756.1256.41ascon128v12
65.1465.2565.37T:schwaemm256128v2
80.1581.1484.27T:aes128gcmv1
86.0686.1786.43T:schwaemm192192v2
86.0386.6787.70T:giftcofb128v1
87.7988.2089.34T:xoodyakround3
89.2289.3689.59T:schwaemm128128v2
90.5793.9295.87T:isapa128v20
93.5893.9294.33T:schwaemm256256v2
93.2994.8696.60T:isapa128av20
93.4595.0198.13T:aes256gcmv1
150.21150.25150.42T:tinyjambu128v2
193.17193.27193.60T:tinyjambu192v2
207.44207.50207.68T:tinyjambu256v2
215.88216.88228.53T:romulusn
403.80404.29412.07T:isapk128av20
441.18442.66452.18T:isapk128v20
437.18443.65451.58T:isapxv20
502.38504.69507.10romulusn
563.18563.94564.57T:elephant200v2
755.27757.19794.44romulust
991.75994.221023.20romulusm
2713.542728.142736.34aes256gcmv1
32337.4632368.2832424.74T:elephant160v2
36296.0636327.4636410.22T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
30.4730.6530.99ascon128abi32v12
37.8638.2539.18ascon128av12
45.5845.8647.81ascon128bi32v12
53.1353.4853.97ascon128v12
53.4153.7354.35ascon80pqv12
59.0560.1162.16T:aes128gcmv1
64.6864.7965.06T:schwaemm256128v2
65.8567.0969.26T:aes256gcmv1
69.0669.4271.47T:xoodyakround3
84.8585.4785.74T:schwaemm192192v2
85.9886.5387.22T:giftcofb128v1
88.3688.6588.94T:schwaemm128128v2
92.8192.8993.09T:schwaemm256256v2
118.49118.60119.62T:tinyjambu128v2
118.57120.11121.68T:isapa128av20
140.51141.69143.14T:isapa128v20
148.62148.73149.74T:tinyjambu192v2
156.21156.30156.81T:tinyjambu256v2
183.73183.99185.62T:romulusn
422.95423.69431.42T:elephant200v2
490.58492.23509.12romulusn
506.09507.38513.49T:isapk128av20
683.45692.22693.71T:isapk128v20
688.50695.53699.12T:isapxv20
737.06738.68752.91romulusm
1453.931467.221470.13romulust
24287.5124297.6224315.28T:elephant160v2
27133.9527146.6327186.89T:elephant176v2
39992.3640007.3640031.55aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
30.5630.8231.29ascon128abi32v12
37.9038.3738.94ascon128av12
45.6045.7146.07ascon128bi32v12
53.1953.4354.13ascon80pqv12
53.3853.7254.14ascon128v12
59.0859.9161.59T:aes128gcmv1
64.5464.6465.06T:schwaemm256128v2
65.6566.4868.15T:aes256gcmv1
67.3267.5068.10T:xoodyakround3
85.4985.5385.91T:schwaemm192192v2
85.8786.4487.45T:giftcofb128v1
88.7288.7889.52T:schwaemm128128v2
92.9893.1793.66T:schwaemm256256v2
119.59119.68120.33T:tinyjambu128v2
118.48120.52122.06T:isapa128av20
140.52142.06143.71T:isapa128v20
151.11151.14151.45T:tinyjambu192v2
157.34157.60158.15T:tinyjambu256v2
183.70183.98184.95T:romulusn
422.77423.69430.06T:elephant200v2
487.78489.73508.82romulusn
506.77507.31512.53T:isapk128av20
682.77686.83693.64T:isapk128v20
685.18694.44695.98T:isapxv20
735.47738.97755.33romulusm
1453.401466.511469.33romulust
24268.2724288.0324293.66T:elephant160v2
27141.6727154.0827172.69T:elephant176v2
39978.4040008.5740053.26aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
30.7230.9031.73ascon128abi32v12
38.0138.3539.09ascon128av12
45.5245.7746.10ascon128bi32v12
53.2153.4453.92ascon80pqv12
53.4353.6654.10ascon128v12
59.2460.1362.47T:aes128gcmv1
64.5464.6564.98T:schwaemm256128v2
66.0766.6168.15T:aes256gcmv1
67.4767.6068.12T:xoodyakround3
85.4785.6285.84T:schwaemm192192v2
85.8286.1586.97T:giftcofb128v1
88.6588.7388.95T:schwaemm128128v2
93.0593.2295.04T:schwaemm256256v2
92.2093.8795.46T:isapa128av20
92.6794.1495.84T:isapa128v20
119.62119.72120.37T:tinyjambu128v2
151.12151.16151.30T:tinyjambu192v2
157.33157.38157.59T:tinyjambu256v2
183.64183.84184.72T:romulusn
404.09404.54409.72T:isapk128av20
422.61423.40431.19T:elephant200v2
442.98444.42450.62T:isapk128v20
444.90446.26451.94T:isapxv20
487.84489.57505.26romulusn
736.22739.40755.36romulusm
750.10753.44768.00romulust
2716.362727.672736.32aes256gcmv1
24274.0624289.0024309.80T:elephant160v2
27138.0827157.6427177.47T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
29.9330.3330.67ascon128abi32v12
34.5635.2936.16ascon128av12
36.2038.0839.95T:aes128gcmv1
36.0538.1439.68T:aes256gcmv1
45.3445.5445.94ascon128bi32v12
46.8247.0447.40T:xoodyakround3
50.2650.8951.81ascon128v12
50.8151.2152.12ascon80pqv12
63.8864.1164.96T:schwaemm256128v2
84.7784.9685.72T:schwaemm192192v2
84.6285.6187.39T:giftcofb128v1
87.2688.0388.50T:schwaemm128128v2
88.9589.0889.38T:tinyjambu128v2
92.0792.3492.60T:schwaemm256256v2
90.7993.5496.13T:isapa128v20
92.2194.0796.48T:isapa128av20
107.14107.26107.60T:tinyjambu256v2
108.95109.02109.31T:tinyjambu192v2
151.03151.42152.57T:romulusn
286.14286.56287.47T:elephant200v2
404.15405.09410.52T:isapk128av20
445.39446.25454.09T:isapk128v20
446.54448.28452.87T:isapxv20
470.86473.03475.04romulusn
480.02482.02482.98romulusm
745.16747.17777.16romulust
2714.422728.022731.52aes256gcmv1
16172.4616188.4916209.66T:elephant160v2
17937.1817970.3518001.05T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
29.9730.3230.77ascon128abi32v12
34.6735.5136.33ascon128av12
35.7538.0639.52T:aes256gcmv1
36.7538.0939.41T:aes128gcmv1
45.0845.5346.93ascon128bi32v12
46.8247.0947.37T:xoodyakround3
50.4250.9951.99ascon80pqv12
50.8351.2651.68ascon128v12
63.8063.9464.20T:schwaemm256128v2
84.9285.0185.45T:schwaemm192192v2
84.9385.5987.29T:giftcofb128v1
87.9088.0588.56T:schwaemm128128v2
88.9389.0289.36T:tinyjambu128v2
92.0492.2893.01T:schwaemm256256v2
91.5393.9897.02T:isapa128v20
92.5494.3396.44T:isapa128av20
107.10107.25107.62T:tinyjambu256v2
108.92109.02109.69T:tinyjambu192v2
149.95151.74152.83T:romulusn
286.15286.64289.69T:elephant200v2
403.81404.48406.26T:isapk128av20
444.39446.63454.34T:isapk128v20
447.80449.02456.99T:isapxv20
472.35473.73475.93romulusn
479.40482.10484.22romulusm
744.37746.54773.42romulust
2715.142730.402742.08aes256gcmv1
16170.7916200.0616246.98T:elephant160v2
17937.0217955.6317970.02T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
30.0530.3130.66ascon128abi32v12
34.9335.3335.92ascon128av12
36.6338.1240.43T:aes256gcmv1
36.4638.1939.62T:aes128gcmv1
45.1245.4045.79ascon128bi32v12
46.8347.1147.49T:xoodyakround3
50.7050.9251.42ascon80pqv12
50.6651.6453.21ascon128v12
63.8563.9864.08T:schwaemm256128v2
84.9085.0185.33T:schwaemm192192v2
84.9885.5787.00T:giftcofb128v1
87.9688.0388.62T:schwaemm128128v2
88.9989.0289.43T:tinyjambu128v2
92.0192.1992.74T:schwaemm256256v2
92.6093.8896.59T:isapa128av20
91.9594.9597.26T:isapa128v20
107.14107.29107.59T:tinyjambu256v2
108.92109.04109.34T:tinyjambu192v2
151.46151.82153.12T:romulusn
286.18286.45287.30T:elephant200v2
403.85404.56406.52T:isapk128av20
443.77445.86455.08T:isapk128v20
446.05448.33456.93T:isapxv20
472.11474.65497.55romulusn
480.10482.19483.93romulusm
743.94745.62751.59romulust
2714.952731.322742.73aes256gcmv1
16175.5416194.4616228.78T:elephant160v2
17937.1217959.1218011.89T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
31.6431.6632.25ascon128abi32v12
39.4739.6740.57ascon128av12
46.7646.8447.11ascon128bi32v12
54.4054.5655.73ascon128v12
54.7654.9155.73ascon80pqv12
65.5266.1668.26T:aes128gcmv1
66.8566.8767.11T:schwaemm256128v2
70.2670.3170.55T:xoodyakround3
72.1172.5574.77T:aes256gcmv1
87.6487.6788.06T:schwaemm192192v2
87.6088.0589.74T:giftcofb128v1
89.9990.0690.73T:schwaemm128128v2
95.7295.8596.42T:schwaemm256256v2
119.64119.65119.82T:tinyjambu128v2
131.99132.29134.32T:isapa128av20
150.03150.11150.79T:tinyjambu192v2
157.69157.81160.66T:tinyjambu256v2
186.26186.32186.95T:romulusn
207.64208.30215.09T:isapa128v20
432.40432.45433.14T:elephant200v2
501.14502.68517.63romulusn
568.43568.94577.08T:isapk128av20
747.20748.70767.32romulusm
1069.821071.761083.64T:isapk128v20
1073.511074.851082.47T:isapxv20
1482.601495.441504.04romulust
24544.3424572.1624597.28T:elephant160v2
27338.7927363.7727401.92T:elephant176v2
40769.8340805.9440830.32aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
31.7531.8232.31ascon128abi32v12
39.4439.6140.29ascon128av12
46.7346.7947.30ascon128bi32v12
54.4754.5255.19ascon80pqv12
54.7254.7755.44ascon128v12
65.2566.2467.40T:aes128gcmv1
66.7866.8367.31T:schwaemm256128v2
68.6668.7069.11T:xoodyakround3
72.1072.7874.81T:aes256gcmv1
87.4687.5088.18T:giftcofb128v1
87.6787.7288.05T:schwaemm192192v2
90.1090.1590.49T:schwaemm128128v2
95.8695.9096.20T:schwaemm256256v2
120.81120.89122.10T:tinyjambu128v2
131.88132.27133.77T:isapa128av20
152.51152.54153.62T:tinyjambu192v2
158.83158.86158.93T:tinyjambu256v2
186.20186.29187.19T:romulusn
207.36207.76209.62T:isapa128v20
432.47432.68433.39T:elephant200v2
498.71499.34519.92romulusn
568.31568.86575.51T:isapk128av20
750.00751.04771.33romulusm
1068.521069.391078.60T:isapk128v20
1073.851075.231085.07T:isapxv20
1480.931482.361502.01romulust
24549.2224569.3724596.91T:elephant160v2
27338.2427359.5027395.00T:elephant176v2
40779.0040796.7040808.47aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
31.8331.9232.37ascon128abi32v12
39.5039.5540.28ascon128av12
46.7146.8147.26ascon128bi32v12
54.4354.5355.16ascon80pqv12
54.7454.7855.41ascon128v12
65.3265.4767.13T:aes128gcmv1
66.8066.8467.16T:schwaemm256128v2
68.7869.0070.68T:xoodyakround3
72.3472.8475.13T:aes256gcmv1
87.4687.5288.51T:giftcofb128v1
87.7087.7388.13T:schwaemm192192v2
90.1190.1790.60T:schwaemm128128v2
95.8895.9796.69T:schwaemm256256v2
100.99101.22103.21T:isapa128av20
120.80120.82121.70T:tinyjambu128v2
127.90128.16131.36T:isapa128v20
152.48152.52152.83T:tinyjambu192v2
158.81158.91160.20T:tinyjambu256v2
186.13186.28187.41T:romulusn
432.47433.11440.59T:elephant200v2
439.67439.84446.09T:isapk128av20
498.47498.83518.31romulusn
642.56643.53650.65T:isapk128v20
644.97645.84651.55T:isapxv20
749.11750.42768.73romulusm
776.16777.80795.02romulust
3513.783515.363519.98aes256gcmv1
24541.2224568.7124583.61T:elephant160v2
27335.7127352.8927385.01T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
53.30?54.64?59.27?ascon128abi32v12
67.40?69.66?77.23?ascon128av12
68.7971.8473.66ascon128bi32v12
76.66?79.55?88.59?ascon128v12
78.55?80.66?89.67?ascon80pqv12
108.97109.61112.93T:xoodyakround3
114.91116.17117.72T:schwaemm256128v2
118.23119.01130.79T:giftcofb128v1
121.30122.80124.88T:schwaemm128128v2
145.90145.90146.29T:tinyjambu128v2
149.41150.21152.05T:schwaemm192192v2
158.94159.95163.06T:schwaemm256256v2
181.18181.51183.67T:tinyjambu192v2
190.27190.90192.12T:tinyjambu256v2
190.25195.87208.77T:aes128gcmv1
201.13?206.33?228.07?T:aes256gcmv1
240.45241.45244.93T:romulusn
402.45411.20438.56T:isapa128av20
625.14627.89638.87T:elephant200v2
723.05728.34747.60romulusn
965.86978.03988.95romulusm
1726.601736.841753.74T:isapa128v20
1877.481877.971884.69T:isapk128av20
2124.062138.402150.06romulust
9846.309849.469858.56T:isapk128v20
9880.019888.889980.59T:isapxv20
32823.6132943.6433024.30T:elephant160v2
33991.2734011.0934209.54T:elephant176v2
59003.8459030.1659113.77aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
54.6054.9859.66ascon128abi32v12
64.74?67.59?74.38?ascon128av12
67.7170.3971.07ascon128bi32v12
77.2779.1483.34ascon128v12
77.7379.7185.55ascon80pqv12
107.73109.23112.35T:xoodyakround3
115.82116.45118.16T:schwaemm256128v2
118.02119.29130.16T:giftcofb128v1
121.48122.19123.97T:schwaemm128128v2
147.30147.30148.76T:tinyjambu128v2
149.48149.75150.65T:schwaemm192192v2
159.59160.41164.32T:schwaemm256256v2
183.65184.88185.25T:tinyjambu192v2
192.36192.38192.77T:tinyjambu256v2
195.83200.21216.74T:aes128gcmv1
204.98210.80222.99T:aes256gcmv1
241.54242.16246.30T:romulusn
407.86410.94427.64T:isapa128av20
622.89625.36636.22T:elephant200v2
720.18728.33745.16romulusn
1030.881035.861058.96romulusm
1730.781738.731781.98T:isapa128v20
1878.501880.511887.48T:isapk128av20
2129.022143.592178.91romulust
9822.849824.559838.59T:isapk128v20
9882.809888.309988.39T:isapxv20
32829.0832846.1133057.57T:elephant160v2
33992.1134129.4834228.16T:elephant176v2
59029.2659131.0559385.81aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
54.6855.0857.84ascon128abi32v12
64.26?66.78?74.25?ascon128av12
69.0070.9773.60ascon128bi32v12
78.5579.1683.80ascon128v12
77.23?79.37?86.41?ascon80pqv12
109.84111.01113.88T:xoodyakround3
115.21116.16116.81T:schwaemm256128v2
117.77120.13125.76T:giftcofb128v1
121.34122.48123.67T:schwaemm128128v2
147.42147.42149.33T:tinyjambu128v2
148.20150.39150.63T:schwaemm192192v2
159.49160.05160.67T:schwaemm256256v2
183.71184.62184.69T:tinyjambu192v2
191.45192.38193.51T:tinyjambu256v2
195.55?201.50?219.62?T:aes128gcmv1
201.66?211.21?237.46?T:aes256gcmv1
240.91241.74242.37T:romulusn
261.82267.81281.99T:isapa128av20
622.81625.27639.38T:elephant200v2
720.61734.37743.11romulusn
900.21912.77940.73T:isapa128v20
1038.611041.641060.84romulusm
1172.671173.481177.88T:isapk128av20
1343.591354.021367.15romulust
5117.295119.425123.84T:isapk128v20
5146.125152.025178.31T:isapxv20
21648.9521664.7821863.09aes256gcmv1
32832.8332963.9933150.20T:elephant160v2
33993.7534135.8534196.31T:elephant176v2