VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: armeabi; Cortex-A7 (410fc075); 2016 Broadcom BCM2836; 4 x 900MHz; berry2, supercop-20251222

[Page version: 20260405 18:05:21]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
30.18?31.77?42.66?ascon128abi32v12
39.77?40.96?59.98?ascon128av12
45.88?46.91?58.13?ascon128bi32v12
51.15?52.06?76.30?T:schwaemm256128v2
50.5952.5454.78T:aes128gcmv1
55.45?56.26?81.21?ascon128v12
55.57?57.46?81.31?ascon80pqv12
61.40?64.33?68.35?T:aes256gcmv1
66.1267.1871.63T:schwaemm192192v2
71.0971.7874.72T:schwaemm128128v2
72.6172.8273.77T:schwaemm256256v2
75.7276.7277.34T:giftcofb128v1
134.05137.10138.72T:tinyjambu128v2
135.59140.63146.48T:isapa128av20
148.93149.74151.24T:xoodyakround3
164.02164.78167.58T:tinyjambu192v2
169.46169.81171.02T:tinyjambu256v2
177.93178.72179.62T:romulusn
184.70189.80191.10T:isapa128v20
264.38268.27270.44romulusn
307.13?330.31?343.83?T:isapk128av20
407.12425.57443.88T:isapk128v20
463.42468.30470.24romulusm
452.71470.20472.69T:elephant200v2
856.53858.22860.05T:isapxv20
1046.881051.591053.68T!!!romulust
24189.7124191.6824193.84T:elephant176v2
25036.6225038.4325040.70T:elephant160v2
103464.08103469.05103473.05aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
29.98?31.18?34.59?ascon128abi32v12
39.92?41.16?59.53?ascon128av12
45.73?46.67?64.07?ascon128bi32v12
51.30?51.98?76.05?T:schwaemm256128v2
45.95?53.23?59.49?T:aes128gcmv1
54.49?55.94?87.70?ascon80pqv12
54.99?56.15?81.08?ascon128v12
66.2366.9969.09T:schwaemm192192v2
62.60?68.05?73.06?T:aes256gcmv1
71.2471.7173.37T:schwaemm128128v2
69.3172.7674.48T:schwaemm256256v2
75.1877.1380.91T:giftcofb128v1
138.41139.14140.44T:tinyjambu128v2
137.07142.77149.55T:isapa128av20
146.88148.11150.93T:xoodyakround3
164.75165.55167.48T:tinyjambu192v2
170.93171.47173.29T:tinyjambu256v2
177.36178.04180.37T:romulusn
185.78189.55192.78T:isapa128v20
267.47268.48270.83romulusn
309.21?328.75?348.63?T:isapk128av20
397.28?419.71?448.54?T:isapk128v20
462.66467.92471.20romulusm
452.26471.74474.22T:elephant200v2
856.54858.15859.99T:isapxv20
1046.281051.041055.66T!!!romulust
24189.9824191.8124194.11T:elephant176v2
25036.7625038.4525041.09T:elephant160v2
103447.74103452.81103458.67aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
30.21?31.28?41.83?ascon128abi32v12
38.89?40.35?50.57?ascon128av12
45.76?46.24?56.60?ascon128bi32v12
51.27?51.96?76.21?T:schwaemm256128v2
54.60?55.77?80.60?ascon128v12
55.20?55.83?80.50?ascon80pqv12
51.89?56.28?59.33?T:aes128gcmv1
62.81?67.33?72.04?T:aes256gcmv1
66.9067.3468.72T:schwaemm192192v2
70.8271.6173.29T:schwaemm128128v2
72.1572.8074.63T:schwaemm256256v2
75.3476.6281.00T:giftcofb128v1
86.05?92.54?100.58?T:isapa128av20
91.0893.7797.26T:isapa128v20
138.28138.93140.21T:tinyjambu128v2
144.55147.79151.34T:xoodyakround3
165.07165.57166.82T:tinyjambu192v2
170.96171.44172.72T:tinyjambu256v2
174.77178.23180.45T:romulusn
200.85?211.82?230.43?T:isapk128av20
234.01?256.50?279.37?T:isapk128v20
264.76268.29270.13romulusn
343.47345.48348.84T!!!romulust
418.34420.60422.35T:isapxv20
466.03468.02470.78romulusm
459.84471.99474.51T:elephant200v2
2352.942354.722356.84aes256gcmv1
24189.7124191.2624193.77T:elephant176v2
25036.0625038.1425040.32T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
29.5829.8630.75ascon128abi32v12
32.9934.6635.73T:aes128gcmv1
35.7836.3036.79ascon128av12
38.6040.6742.25T:aes256gcmv1
44.6844.9345.20ascon128bi32v12
49.6250.1050.53T:schwaemm256128v2
51.0551.4751.75ascon80pqv12
51.2051.9553.83ascon128v12
65.6566.0366.51T:schwaemm192192v2
69.3471.0871.63T:schwaemm128128v2
71.6472.0272.55T:schwaemm256256v2
75.4176.0776.69T:giftcofb128v1
112.24112.39112.65T:tinyjambu128v2
113.82114.53115.13T:xoodyakround3
113.73117.29119.23T:isapa128av20
128.21128.53128.76T:tinyjambu192v2
128.68128.91129.19T:tinyjambu256v2
138.97141.99142.81T:isapa128v20
149.19151.11151.74T:romulusn
233.15234.36235.11romulusn
258.55274.23279.76T:isapk128av20
333.27334.55335.84romulusm
330.11340.79353.15T:isapk128v20
353.00354.85355.68T:elephant200v2
637.40638.18638.64T:isapxv20
696.59698.73699.38T!!!romulust
18073.7518075.3518076.39T:elephant176v2
18778.1018779.1418780.24T:elephant160v2
52910.0352912.2052914.06aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
29.3230.1431.91ascon128abi32v12
34.19?36.15?38.49?T:aes128gcmv1
35.9336.8439.26ascon128av12
40.24?41.91?45.70?T:aes256gcmv1
44.5944.9746.40ascon128bi32v12
49.8150.1451.46T:schwaemm256128v2
51.0651.8854.13ascon80pqv12
50.8852.1054.92ascon128v12
65.8066.2667.72T:schwaemm192192v2
70.7571.1072.26T:schwaemm128128v2
71.7172.1873.72T:schwaemm256256v2
75.2176.1678.48T:giftcofb128v1
112.87113.18113.95T:tinyjambu128v2
113.17113.73115.09T:xoodyakround3
111.12117.19119.77T:isapa128av20
128.81129.07129.92T:tinyjambu192v2
129.42129.62130.57T:tinyjambu256v2
139.08141.39143.60T:isapa128v20
148.87151.01152.34T:romulusn
233.51234.43235.41romulusn
259.38271.76281.54T:isapk128av20
333.30334.45335.98romulusm
323.61337.12352.42T:isapk128v20
354.40355.58357.40T:elephant200v2
637.22638.13639.23T:isapxv20
696.84698.66699.80T!!!romulust
18073.8218075.2418076.68T:elephant176v2
18778.1318779.1218780.58T:elephant160v2
52902.2952904.3852906.77aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
29.6230.2331.75ascon128abi32v12
33.78?36.09?38.14?T:aes128gcmv1
35.6436.7838.45ascon128av12
40.14?41.88?45.15?T:aes256gcmv1
44.5345.0146.18ascon128bi32v12
49.7450.2451.17T:schwaemm256128v2
51.3651.7653.49ascon80pqv12
51.4852.0353.26ascon128v12
65.6266.2367.54T:schwaemm192192v2
69.4070.9972.12T:schwaemm128128v2
71.7272.1873.53T:schwaemm256256v2
75.3176.1278.29T:giftcofb128v1
90.3592.3795.86T:isapa128av20
91.8593.2795.69T:isapa128v20
112.98113.14113.97T:tinyjambu128v2
113.21114.55120.37T:xoodyakround3
128.94129.14129.90T:tinyjambu192v2
129.40129.61130.45T:tinyjambu256v2
149.27150.98152.31T:romulusn
203.89214.73224.46T:isapk128av20
228.23234.18235.46romulusn
241.41257.72267.31T:isapk128v20
333.27334.38336.03romulusm
344.33346.10347.88T!!!romulust
354.53355.77357.13T:elephant200v2
418.42419.28420.21T:isapxv20
2353.562354.642355.93aes256gcmv1
18073.8118075.5218076.85T:elephant176v2
18777.9018779.1718780.41T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
16.55?19.76?25.42?T:aes128gcmv1
17.75?20.14?33.24?T:aes256gcmv1
29.68?31.22?42.63?ascon128abi32v12
34.03?35.61?47.41?ascon128av12
45.14?45.97?70.10?ascon128bi32v12
49.77?50.58?74.56?T:schwaemm256128v2
50.39?51.50?76.30?ascon128v12
50.07?51.63?70.28?ascon80pqv12
66.54?67.42?98.81?T:schwaemm192192v2
71.0671.9273.44T:schwaemm256256v2
75.12?77.84?84.53?T:giftcofb128v1
78.5879.8084.84T:xoodyakround3
71.22?79.83?110.17?T:schwaemm128128v2
87.2687.7689.56T:tinyjambu128v2
87.5888.1189.56T:tinyjambu256v2
86.09?91.75?97.91?T:isapa128av20
90.4592.6195.66T:isapa128v20
92.3592.7794.54T:tinyjambu192v2
123.23123.98125.73T:romulusn
195.26199.62202.00romulusm
198.13199.91202.14romulusn
193.17?211.47?229.83?T:isapk128av20
235.35238.99241.06T:elephant200v2
235.16?258.73?273.95?T:isapk128v20
341.58345.06347.55T!!!romulust
414.31418.26420.14T:isapxv20
2353.642355.392357.42aes256gcmv1
11955.8511958.1811959.72T:elephant176v2
12519.1812520.7012522.28T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
17.50?19.83?23.94?T:aes128gcmv1
18.14?20.23?24.28?T:aes256gcmv1
30.03?31.31?34.78?ascon128abi32v12
34.39?35.41?39.16?ascon128av12
44.68?45.92?69.47?ascon128bi32v12
49.70?50.50?74.78?T:schwaemm256128v2
50.59?52.07?76.84?ascon80pqv12
50.96?52.10?69.67?ascon128v12
66.46?66.99?99.10?T:schwaemm192192v2
70.79?71.93?97.66?T:schwaemm128128v2
71.1272.2073.91T:schwaemm256256v2
75.30?77.95?84.50?T:giftcofb128v1
79.0480.5582.63T:xoodyakround3
87.4088.0689.37T:tinyjambu128v2
87.6188.4789.82T:tinyjambu256v2
90.9092.9998.42T:isapa128v20
92.3593.1294.56T:tinyjambu192v2
89.38?93.52?101.05?T:isapa128av20
123.27124.22127.41T:romulusn
198.29199.78204.07romulusn
194.85199.94202.54romulusm
197.31?210.60?229.47?T:isapk128av20
236.15239.84241.93T:elephant200v2
231.85?256.06?275.23?T:isapk128v20
342.16344.26347.41T!!!romulust
416.48418.41420.19T:isapxv20
2353.072355.022356.99aes256gcmv1
11956.4311958.1611959.49T:elephant176v2
12519.0312520.9412523.22T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
16.47?18.66?20.37?T:aes128gcmv1
18.83?20.22?23.96?T:aes256gcmv1
29.85?31.37?41.66?ascon128abi32v12
33.93?34.95?52.98?ascon128av12
45.21?46.08?69.18?ascon128bi32v12
49.67?50.41?67.91?T:schwaemm256128v2
47.89?52.11?83.14?ascon128v12
50.83?52.15?76.36?ascon80pqv12
66.34?68.01?105.64?T:schwaemm192192v2
70.86?71.67?90.73?T:schwaemm128128v2
71.1772.1473.84T:schwaemm256256v2
74.66?78.51?92.36?T:giftcofb128v1
78.9380.1382.39T:xoodyakround3
87.4988.0289.22T:tinyjambu128v2
87.8188.5089.61T:tinyjambu256v2
90.9592.7798.38T:isapa128v20
89.65?92.84?100.94?T:isapa128av20
92.5093.0794.57T:tinyjambu192v2
123.26124.24127.32T:romulusn
188.10199.41202.21romulusm
198.23199.96202.31romulusn
202.17?211.51?230.50?T:isapk128av20
236.72239.93242.39T:elephant200v2
234.53?258.00?273.24?T:isapk128v20
342.49344.35347.37T!!!romulust
416.45418.25420.00T:isapxv20
2351.812355.012357.70aes256gcmv1
11956.3811958.4411960.77T:elephant176v2
12519.2112520.9712522.64T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
30.6230.6431.42ascon128abi32v12
37.0637.1238.05ascon128av12
38.1938.3139.40T:aes128gcmv1
44.7745.0646.29T:aes256gcmv1
45.6145.6946.66ascon128bi32v12
51.6451.8452.05T:schwaemm256128v2
52.3652.3652.55ascon128v12
52.3852.4352.88ascon80pqv12
67.7767.8368.25T:schwaemm192192v2
72.1672.3072.73T:schwaemm128128v2
74.1874.3974.61T:schwaemm256256v2
77.2477.3678.23T:giftcofb128v1
113.50113.55113.89T:tinyjambu128v2
116.17116.19117.16T:xoodyakround3
127.60127.69129.43T:isapa128av20
129.74129.88130.13T:tinyjambu192v2
130.10130.19130.37T:tinyjambu256v2
153.38153.40153.87T:romulusn
201.82202.12203.32T:isapa128v20
237.33237.54238.29romulusn
328.91331.44338.25T:isapk128av20
337.61337.83338.36romulusm
362.80363.15364.10T:elephant200v2
622.52625.77633.92T:isapk128v20
709.19709.47710.09T!!!romulust
998.56998.72999.60T:isapxv20
18212.8318213.3718214.81T:elephant176v2
18991.6218992.0418992.98T:elephant160v2
53977.2353977.8153980.72aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
30.9531.6232.78ascon128abi32v12
37.3638.0640.38ascon128av12
38.7040.5742.98T:aes128gcmv1
45.6846.3448.38ascon128bi32v12
45.5747.2449.82T:aes256gcmv1
51.6151.8853.11T:schwaemm256128v2
52.5453.0555.39ascon80pqv12
52.8153.2555.52ascon128v12
67.7567.9069.24T:schwaemm192192v2
72.0972.3373.44T:schwaemm128128v2
74.0874.1174.98T:schwaemm256256v2
77.1177.4179.39T:giftcofb128v1
114.27114.36114.70T:tinyjambu128v2
115.16115.31117.11T:xoodyakround3
127.63128.44131.69T:isapa128av20
130.42130.57131.52T:tinyjambu192v2
130.91131.01131.95T:tinyjambu256v2
153.29153.57154.69T:romulusn
201.83202.30204.11T:isapa128v20
237.40237.80238.89romulusn
329.09331.86342.96T:isapk128av20
338.34338.54339.81romulusm
363.81364.19365.29T:elephant200v2
624.63627.77642.14T:isapk128v20
709.36709.57712.00T!!!romulust
997.63997.83998.77T:isapxv20
18212.6618213.6918215.48T:elephant176v2
18991.5418992.1318993.53T:elephant160v2
53969.6253971.3453976.76aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
30.9031.5532.51ascon128abi32v12
37.3538.1539.47ascon128av12
38.5439.8341.91T:aes128gcmv1
45.5846.2747.70ascon128bi32v12
45.4247.1149.23T:aes256gcmv1
51.7051.9752.93T:schwaemm256128v2
52.6752.9954.91ascon80pqv12
52.6552.9955.29ascon128v12
67.7968.0169.02T:schwaemm192192v2
72.0872.2573.30T:schwaemm128128v2
74.0974.1474.76T:schwaemm256256v2
77.1077.5279.35T:giftcofb128v1
98.2998.66102.73T:isapa128av20
114.26114.28114.53T:tinyjambu128v2
115.33115.59117.65T:xoodyakround3
124.82125.12127.62T:isapa128v20
130.35130.52131.49T:tinyjambu192v2
130.87131.02131.90T:tinyjambu256v2
153.26153.46154.57T:romulusn
237.37237.66239.09romulusn
253.49255.83266.13T:isapk128av20
338.26338.54339.71romulusm
356.17356.50357.75T!!!romulust
363.83364.21365.33T:elephant200v2
408.67410.74420.54T:isapk128v20
604.68604.99605.94T:isapxv20
3420.573420.883422.55aes256gcmv1
18212.7518213.4318215.21T:elephant176v2
18991.4718991.8918993.39T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
48.3248.5950.88ascon128abi32v12
56.23?56.52?63.16?ascon128av12
62.41?63.52?70.58?ascon128bi32v12
71.08?72.01?83.43?ascon80pqv12
70.78?72.16?83.00?ascon128v12
87.2687.8591.60T:schwaemm256128v2
96.1797.24105.01T:schwaemm128128v2
100.59?100.97?117.17?T:giftcofb128v1
103.49?108.63?131.75?T:aes128gcmv1
112.96113.26120.58T:schwaemm192192v2
120.68121.08132.04T:schwaemm256256v2
119.68?132.73?164.41?T:aes256gcmv1
136.46137.26143.00T:tinyjambu128v2
155.23157.21163.18T:tinyjambu192v2
155.48159.06166.36T:tinyjambu256v2
175.38179.60192.16T:xoodyakround3
196.98201.94215.38T:romulusn
296.39?310.80?368.95?romulusn
338.94?371.76?445.73?T:isapa128av20
407.75?417.50?472.27?romulusm
519.51530.04545.37T:elephant200v2
951.68960.531012.14T!!!romulust
1527.26?1550.82?1982.81?T:isapk128av20
1578.571591.621670.45T:isapa128v20
7048.737116.017381.24T:isapk128v20
9210.069218.619240.10T:isapxv20
22691.6022694.6322715.60T:elephant176v2
25447.0425448.9125470.48T:elephant160v2
78493.8078497.1578525.85aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
48.5848.6553.07ascon128abi32v12
56.70?56.96?64.28?ascon128av12
62.4462.6868.46ascon128bi32v12
71.6071.6373.38ascon80pqv12
71.23?71.82?84.45?ascon128v12
87.3088.5095.00T:schwaemm256128v2
95.9496.53102.18T:schwaemm128128v2
101.01?104.46?115.79?T:giftcofb128v1
102.98?113.42?135.43?T:aes128gcmv1
114.01115.31125.40T:schwaemm192192v2
113.45?118.79?151.39?T:aes256gcmv1
121.66124.26132.79T:schwaemm256256v2
137.54138.87144.27T:tinyjambu128v2
155.98158.32163.68T:tinyjambu192v2
156.37158.33163.90T:tinyjambu256v2
174.08180.15189.57T:xoodyakround3
197.30205.14215.90T:romulusn
295.18?306.51?368.92?romulusn
333.78?369.13?391.55?T:isapa128av20
418.62?433.60?598.13?romulusm
520.79531.26544.18T:elephant200v2
952.70967.741018.49T!!!romulust
1579.311593.251660.79T:isapa128v20
1538.57?1604.48?1955.45?T:isapk128av20
7054.017124.357569.33T:isapk128v20
9190.679197.019231.61T:isapxv20
22692.3222695.6722717.51T:elephant176v2
25446.5525450.1225467.77T:elephant160v2
78488.1978493.8978520.75aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
48.67?49.92?64.86?ascon128abi32v12
56.6456.8959.09ascon128av12
62.4762.5163.69ascon128bi32v12
71.6271.6474.58ascon80pqv12
71.2771.6976.58ascon128v12
87.49?88.50?136.69?T:schwaemm256128v2
95.9797.10102.78T:schwaemm128128v2
100.78?102.09?112.92?T:giftcofb128v1
101.24?104.32?119.86?T:aes128gcmv1
113.62114.17119.73T:schwaemm192192v2
113.93?117.34?141.76?T:aes256gcmv1
120.76121.34128.39T:schwaemm256256v2
137.33137.74141.71T:tinyjambu128v2
155.81157.73164.71T:tinyjambu192v2
156.68158.74162.94T:tinyjambu256v2
173.01175.35183.35T:xoodyakround3
197.06200.73211.50T:romulusn
206.01?226.06?269.35?T:isapa128av20
293.47303.85313.31romulusn
416.69?431.61?485.67?romulusm
519.93530.87543.37T:elephant200v2
589.09604.90634.28T!!!romulust
837.61862.72893.62T:isapa128v20
1057.93?1127.24?1485.96?T:isapk128av20
3838.243892.604227.52T:isapk128v20
4791.884798.264818.66T:isapxv20
22690.2722693.5622716.39T:elephant176v2
25447.5725449.8525472.17T:elephant160v2
27933.8227941.8227968.73aes256gcmv1