VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: armeabi; Cortex-A7 (410fc075); 2016 Broadcom BCM2836; 4 x 900MHz; berry2, supercop-20240425

[Page version: 20240726 23:46:23]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Implementation notes

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
30.1830.2030.21ascon128abi32v12
38.3638.8739.55ascon128av12
44.7444.8147.15ascon128bi32v12
50.9050.9451.04T:schwaemm256128v2
55.7855.8155.87ascon128v12
53.5055.8255.86ascon80pqv12
67.3667.4367.58T:schwaemm192192v2
71.7671.8672.41T:schwaemm128128v2
73.5373.5973.65T:schwaemm256256v2
73.9274.1375.17T:aes128gcmv1
77.0177.1577.71T:giftcofb128v1
78.9179.1779.36T:xoodyakround3
86.5987.5188.06T:aes256gcmv1
136.87137.03139.38T:tinyjambu128v2
144.78146.74148.21T:isapa128av20
161.24161.64163.89T:tinyjambu192v2
170.75170.98173.37T:tinyjambu256v2
173.42173.54173.88T:romulusn
188.87189.29189.97T:isapa128v20
288.06288.74290.83romulusn
315.09316.83319.03T:isapk128av20
412.58420.93427.30T:isapk128v20
544.24545.12546.07T:elephant200v2
547.99550.07551.16romulusm
773.45773.99774.39T:isapxv20
1188.661189.681205.07romulust
20204.6720205.1720205.64T:elephant160v2
21047.1021048.0621049.00T:elephant176v2
61532.4161533.2461534.74aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
29.9129.9630.00ascon128abi32v12
38.1638.2038.44ascon128av12
44.8744.8944.93ascon128bi32v12
50.8750.9051.02T:schwaemm256128v2
53.4953.5053.60ascon80pqv12
53.5853.7155.74ascon128v12
67.3667.4667.57T:schwaemm192192v2
71.9572.0372.58T:schwaemm128128v2
73.2973.3373.39T:schwaemm256256v2
73.7273.9674.39T:aes128gcmv1
75.7075.7875.93T:xoodyakround3
76.7476.8276.93T:giftcofb128v1
86.5086.9487.72T:aes256gcmv1
138.74138.83138.89T:tinyjambu128v2
144.54145.69146.10T:isapa128av20
163.08164.40165.73T:tinyjambu192v2
172.50172.54172.70T:tinyjambu256v2
174.16174.28174.52T:romulusn
188.78189.15189.75T:isapa128v20
288.56289.43291.42romulusn
313.50315.41318.84T:isapk128av20
412.20420.74426.39T:isapk128v20
545.08545.60545.89T:elephant200v2
548.50549.70551.30romulusm
773.42774.18774.81T:isapxv20
1188.831191.841193.85romulust
20204.8720205.3820206.02T:elephant160v2
21047.1421048.0821049.03T:elephant176v2
61531.3961532.9261534.14aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
29.9229.9630.10ascon128abi32v12
38.1738.2038.32ascon128av12
44.8844.9347.33ascon128bi32v12
50.8750.9051.08T:schwaemm256128v2
53.4953.5753.95ascon80pqv12
53.6253.6553.82ascon128v12
67.3967.4267.49T:schwaemm192192v2
71.9872.0372.57T:schwaemm128128v2
73.2373.3373.42T:schwaemm256256v2
73.5174.3275.09T:aes128gcmv1
75.9576.0176.14T:xoodyakround3
76.7676.8276.96T:giftcofb128v1
86.5087.2087.51T:aes256gcmv1
93.5293.6094.09T:isapa128v20
92.5994.6395.78T:isapa128av20
138.74138.76138.84T:tinyjambu128v2
162.98163.03163.20T:tinyjambu192v2
172.42172.55172.82T:tinyjambu256v2
174.18174.22174.56T:romulusn
203.85205.36207.38T:isapk128av20
250.21256.24260.46T:isapk128v20
288.98289.66291.63romulusn
380.07380.34384.29romulust
386.21386.64387.24T:isapxv20
544.64545.03546.03T:elephant200v2
548.57551.00551.66romulusm
1292.241292.471292.80aes256gcmv1
20204.7420205.3020205.92T:elephant160v2
21047.4221048.0021049.20T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
29.8729.8930.90ascon128abi32v12
36.3737.2337.49ascon128av12
44.3944.7246.89ascon128bi32v12
50.3750.6950.74T:schwaemm256128v2
53.2053.3753.96T:aes128gcmv1
51.2453.5553.57ascon128v12
51.2553.5553.58ascon80pqv12
59.3459.3859.50T:xoodyakround3
59.4959.7760.16T:aes256gcmv1
66.7366.7966.99T:schwaemm192192v2
71.4672.0972.11T:schwaemm128128v2
72.6372.6872.96T:schwaemm256256v2
76.6776.7176.95T:giftcofb128v1
109.31110.41110.43T:tinyjambu128v2
119.46119.88121.06T:isapa128av20
127.09127.47129.48T:tinyjambu192v2
129.87129.90129.99T:tinyjambu256v2
140.94141.05141.33T:isapa128v20
147.60147.74147.93T:romulusn
259.06260.85262.35T:isapk128av20
273.63274.86275.81romulusn
330.13334.97339.79T:isapk128v20
404.56405.93408.24romulusm
409.79410.22410.64T:elephant200v2
581.32581.72582.05T:isapxv20
784.31789.40797.11romulust
15153.9415154.2315154.84T:elephant160v2
15725.8115726.2215727.23T:elephant176v2
31412.4131412.7131413.76aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
29.7429.7629.85ascon128abi32v12
36.2636.3336.50ascon128av12
44.5544.6145.32ascon128bi32v12
50.3450.3850.50T:schwaemm256128v2
51.2451.2651.31ascon80pqv12
51.3651.3851.55ascon128v12
53.5753.6553.93T:aes128gcmv1
57.8257.9458.16T:xoodyakround3
59.6260.0460.51T:aes256gcmv1
66.6966.7466.81T:schwaemm192192v2
71.5271.5971.86T:schwaemm128128v2
72.6772.6972.82T:schwaemm256256v2
76.5476.6476.86T:giftcofb128v1
110.11110.13110.20T:tinyjambu128v2
118.81119.61120.73T:isapa128av20
127.82127.92128.04T:tinyjambu192v2
130.74130.80130.88T:tinyjambu256v2
140.70141.09141.35T:isapa128v20
148.00148.14148.30T:romulusn
260.11261.07262.39T:isapk128av20
274.58275.48275.99romulusn
335.33344.91371.29T:isapk128v20
405.30405.86407.04romulusm
409.57410.19410.42T:elephant200v2
581.56582.03582.25T:isapxv20
784.90787.21790.14romulust
15154.0415154.2315154.69T:elephant160v2
15725.8915726.7615727.11T:elephant176v2
31411.5131411.8831413.05aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
29.7329.7529.78ascon128abi32v12
36.2736.2836.33ascon128av12
44.5544.5744.59ascon128bi32v12
50.3450.3650.52T:schwaemm256128v2
51.2451.2751.40ascon80pqv12
51.3751.4051.53ascon128v12
53.2253.5953.87T:aes128gcmv1
57.8857.9258.00T:xoodyakround3
59.6559.7660.04T:aes256gcmv1
66.7566.8066.85T:schwaemm192192v2
71.5671.6071.88T:schwaemm128128v2
72.6772.7272.92T:schwaemm256256v2
76.5676.6476.89T:giftcofb128v1
93.2493.3093.70T:isapa128v20
92.8394.1594.73T:isapa128av20
110.11110.13110.17T:tinyjambu128v2
127.87127.92128.00T:tinyjambu192v2
130.76130.84130.96T:tinyjambu256v2
147.98148.19148.29T:romulusn
204.52205.13206.19T:isapk128av20
252.03?267.67?316.88?T:isapk128v20
274.69275.51275.95romulusn
381.22382.43386.04romulust
387.89388.16388.32T:isapxv20
405.46405.85406.15romulusm
409.75410.23410.61T:elephant200v2
1292.261292.551292.86aes256gcmv1
15154.1515154.4115154.93T:elephant160v2
15726.0315726.4915727.34T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
29.9630.5530.56ascon128abi32v12
32.4332.8233.22T:aes128gcmv1
32.5833.0133.73T:aes256gcmv1
34.3535.4235.43ascon128av12
39.5439.6139.68T:xoodyakround3
44.2344.4646.69ascon128bi32v12
49.7950.1150.16T:schwaemm256128v2
51.2951.3151.36ascon80pqv12
51.2851.3251.36ascon128v12
66.0366.4566.53T:schwaemm192192v2
70.6670.8471.38T:schwaemm128128v2
72.4072.4272.65T:schwaemm256256v2
76.2976.3376.53T:giftcofb128v1
81.4881.5481.70T:tinyjambu128v2
88.9089.2690.90T:tinyjambu256v2
92.9693.1893.82T:isapa128v20
92.0894.3795.35T:isapa128av20
92.9995.1795.19T:tinyjambu192v2
121.76121.78121.80T:romulusn
204.16204.97206.49T:isapk128av20
258.56259.91262.34romulusn
259.59259.92262.59romulusm
276.38276.74277.18T:elephant200v2
254.87?308.27?318.18?T:isapk128v20
379.29381.56387.81romulust
389.07389.73389.94T:isapxv20
1292.121292.421292.76aes256gcmv1
10103.6110104.0610104.41T:elephant160v2
10403.9410404.4210404.91T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
29.5329.5729.61ascon128abi32v12
32.4832.6333.23T:aes128gcmv1
32.5732.9533.30T:aes256gcmv1
34.3434.3934.45ascon128av12
39.8539.9340.01T:xoodyakround3
44.2444.2644.29ascon128bi32v12
48.9849.0751.31ascon80pqv12
49.1049.1749.42ascon128v12
49.8049.8249.86T:schwaemm256128v2
66.0366.0966.23T:schwaemm192192v2
70.6770.8671.37T:schwaemm128128v2
72.0872.1072.14T:schwaemm256256v2
76.3076.3476.39T:giftcofb128v1
81.4981.5181.59T:tinyjambu128v2
88.9888.9989.10T:tinyjambu256v2
92.7392.7893.08T:tinyjambu192v2
92.9192.9693.06T:isapa128v20
92.7693.8494.75T:isapa128av20
121.75121.79122.03T:romulusn
204.86205.90208.98T:isapk128av20
259.24260.03262.31romulusn
259.89260.48262.52romulusm
255.49?268.34?412.05?T:isapk128v20
276.34276.82277.11T:elephant200v2
378.93379.48382.57romulust
389.25389.63390.33T:isapxv20
1292.141292.441292.72aes256gcmv1
10103.7110104.0210104.74T:elephant160v2
10403.8310404.4610404.87T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
29.5429.5729.59ascon128abi32v12
32.4532.8633.30T:aes128gcmv1
32.8032.9233.48T:aes256gcmv1
34.3634.3734.40ascon128av12
39.8439.8940.02T:xoodyakround3
44.2444.2644.29ascon128bi32v12
48.9849.0049.06ascon80pqv12
49.1649.3149.50ascon128v12
49.8049.8249.89T:schwaemm256128v2
66.0366.4066.53T:schwaemm192192v2
70.6670.6970.74T:schwaemm128128v2
72.0872.0972.14T:schwaemm256256v2
76.3076.3376.38T:giftcofb128v1
81.4781.5081.58T:tinyjambu128v2
88.9889.0189.08T:tinyjambu256v2
92.7292.7592.83T:tinyjambu192v2
92.9493.0293.53T:isapa128v20
93.3494.1994.74T:isapa128av20
121.67121.78121.88T:romulusn
204.59205.69207.69T:isapk128av20
259.77260.09261.70romulusn
259.91260.52262.85romulusm
276.35276.85277.37T:elephant200v2
259.60?307.93?315.63?T:isapk128v20
379.64384.89391.27romulust
389.22389.73390.24T:isapxv20
1292.221292.441292.94aes256gcmv1
10103.7810104.1510105.04T:elephant160v2
10403.8410404.4310405.06T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
30.6130.6130.63ascon128abi32v12
37.2138.1938.20ascon128av12
45.2045.2347.45ascon128bi32v12
51.9352.2152.25T:schwaemm256128v2
52.0252.3654.17ascon128v12
54.1854.1954.23ascon80pqv12
56.4756.7956.95T:aes128gcmv1
60.0660.0660.24T:xoodyakround3
63.4463.4763.53T:aes256gcmv1
68.3068.3468.53T:schwaemm192192v2
72.4972.7973.06T:schwaemm128128v2
74.7274.9574.97T:schwaemm256256v2
77.6477.6578.00T:giftcofb128v1
111.28111.33111.33T:tinyjambu128v2
128.08128.13128.22T:tinyjambu192v2
127.82128.73129.07T:isapa128av20
130.96131.07131.10T:tinyjambu256v2
149.46149.60149.80T:romulusn
200.82201.05201.48T:isapa128v20
277.16277.38278.40romulusn
321.57322.24323.15T:isapk128av20
407.77409.00409.48romulusm
418.60419.02419.32T:elephant200v2
630.14632.43636.07T:isapk128v20
798.17799.01800.39romulust
916.71916.84916.96T:isapxv20
15325.7015325.9115326.39T:elephant160v2
15846.0715846.3415847.15T:elephant176v2
32046.9732047.3532048.00aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
30.4930.5030.54ascon128abi32v12
37.1037.1037.15ascon128av12
45.2745.2745.30ascon128bi32v12
51.8751.9152.05T:schwaemm256128v2
52.0552.0552.10ascon80pqv12
52.1652.1652.24ascon128v12
56.2856.4556.74T:aes128gcmv1
58.6058.6158.66T:xoodyakround3
63.0463.3763.79T:aes256gcmv1
68.2968.2968.35T:schwaemm192192v2
72.5772.5772.85T:schwaemm128128v2
74.7174.7374.89T:schwaemm256256v2
77.5377.5677.81T:giftcofb128v1
111.10111.13111.21T:tinyjambu128v2
127.78128.16129.15T:isapa128av20
128.97129.08129.10T:tinyjambu192v2
131.83131.84131.88T:tinyjambu256v2
149.85149.90150.07T:romulusn
200.85201.05201.53T:isapa128v20
277.74277.97279.21romulusn
321.74322.18324.55T:isapk128av20
408.86409.96412.15romulusm
418.64419.12419.52T:elephant200v2
631.02636.60656.42T:isapk128v20
798.04799.79802.56romulust
915.77915.84915.99T:isapxv20
15325.7515325.8915326.06T:elephant160v2
15846.1715846.6415847.16T:elephant176v2
32046.5532046.6932047.59aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
30.4930.4930.52ascon128abi32v12
37.1037.1037.16ascon128av12
45.2745.2845.44ascon128bi32v12
51.8751.8952.13T:schwaemm256128v2
52.0552.0752.55ascon80pqv12
52.1552.1552.21ascon128v12
56.3056.4456.77T:aes128gcmv1
58.6558.6658.75T:xoodyakround3
62.9763.3463.44T:aes256gcmv1
68.2968.3068.36T:schwaemm192192v2
72.5772.5772.69T:schwaemm128128v2
74.7174.7174.77T:schwaemm256256v2
77.5377.5477.76T:giftcofb128v1
98.0598.4099.32T:isapa128av20
111.09111.14111.23T:tinyjambu128v2
123.93123.95124.31T:isapa128v20
128.95128.95129.01T:tinyjambu192v2
131.83131.83131.88T:tinyjambu256v2
149.82149.83150.08T:romulusn
243.75244.38246.09T:isapk128av20
277.78278.01279.11romulusn
392.10393.49395.44romulust
409.06410.10410.82romulusm
418.61418.95419.21T:elephant200v2
417.23422.90442.69T:isapk128v20
560.55560.78560.94T:isapxv20
1926.971927.061927.40aes256gcmv1
15325.8415325.9215326.18T:elephant160v2
15846.0115846.7215847.44T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
47.2547.3048.02ascon128abi32v12
55.5355.5356.63ascon128av12
61.1061.1261.61ascon128bi32v12
69.5869.5870.55ascon128v12
69.9270.0670.88ascon80pqv12
86.6787.0887.66T:schwaemm256128v2
89.1389.1590.19T:xoodyakround3
95.5395.5396.16T:schwaemm128128v2
99.2099.20100.00T:giftcofb128v1
113.52113.52114.02T:schwaemm192192v2
120.72120.72122.04T:schwaemm256256v2
127.53129.31134.05T:aes128gcmv1
132.28132.30132.88T:tinyjambu128v2
137.98139.59141.86T:aes256gcmv1
152.73152.73153.31T:tinyjambu192v2
155.67155.67156.05T:tinyjambu256v2
190.97191.01192.12T:romulusn
315.27318.99333.31T:isapa128av20
346.58349.64351.30romulusn
482.32492.60497.42romulusm
595.16595.35597.99T:elephant200v2
1081.611086.151109.88romulust
1576.681576.751577.73T:isapa128v20
1674.381676.081697.31T:isapk128av20
7282.887306.697416.99T:isapk128v20
8550.458557.488561.78T:isapxv20
19737.3419745.3219751.38T:elephant176v2
20530.5920533.6820536.38T:elephant160v2
46639.3046640.6846643.64aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
47.3747.4948.20ascon128abi32v12
55.7055.7056.68ascon128av12
61.2861.4061.65ascon128bi32v12
70.0270.0670.73ascon128v12
70.3470.3470.81ascon80pqv12
86.7286.7286.93T:schwaemm256128v2
89.4789.6193.48T:xoodyakround3
95.6995.6996.16T:schwaemm128128v2
99.2599.34100.68T:giftcofb128v1
114.06114.07114.63T:schwaemm192192v2
121.00121.00121.28T:schwaemm256256v2
124.63127.74130.70T:aes128gcmv1
133.39133.45133.70T:tinyjambu128v2
136.75137.42139.46T:aes256gcmv1
153.72153.80153.98T:tinyjambu192v2
156.59156.67156.80T:tinyjambu256v2
192.00192.00192.56T:romulusn
316.50319.38341.90T:isapa128av20
355.98356.56361.32romulusn
509.30509.46512.08romulusm
595.52595.82599.26T:elephant200v2
1081.451096.551111.62romulust
1577.531578.571587.99T:isapa128v20
1666.381674.801696.32T:isapk128av20
7280.447319.717413.55T:isapk128v20
8526.868532.288547.75T:isapxv20
19741.0919744.4519746.82T:elephant176v2
20532.4620534.5220537.37T:elephant160v2
46643.4746645.3446648.70aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
47.3347.4547.79ascon128abi32v12
55.7355.7356.02ascon128av12
61.2761.3761.48ascon128bi32v12
69.9869.9870.09ascon128v12
70.3370.3370.62ascon80pqv12
86.6686.6787.04T:schwaemm256128v2
88.7688.7789.60T:xoodyakround3
95.6695.6695.80T:schwaemm128128v2
99.2799.32100.27T:giftcofb128v1
114.02114.02114.16T:schwaemm192192v2
120.89120.95121.25T:schwaemm256256v2
125.05126.01127.27T:aes128gcmv1
133.42133.57135.66T:tinyjambu128v2
136.45137.02139.81T:aes256gcmv1
153.67153.70153.99T:tinyjambu192v2
156.62156.65156.79T:tinyjambu256v2
191.38191.38191.94T:romulusn
200.78204.66214.63T:isapa128av20
347.30349.52349.98romulusn
509.44509.97513.75romulusm
595.50595.56599.29T:elephant200v2
649.32662.18663.13romulust
828.09828.50829.55T:isapa128v20
1095.881095.941105.38T:isapk128av20
3977.664003.624053.68T:isapk128v20
4454.804455.644463.57T:isapxv20
16517.9116520.0916525.32aes256gcmv1
19741.5319744.8019746.22T:elephant176v2
20531.3520536.2020538.70T:elephant160v2