VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: armeabi; Cortex-A17 (410fc0d1); 2014 Rockchip RK3288; 4 x 1800MHz; tinker, supercop-20240909

[Page version: 20241120 00:41:35]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
15.8315.8415.87ascon128abi32v12
20.3920.4120.43ascon128av12
24.1224.1224.16ascon128bi32v12
24.8025.4126.24T:aes128gcmv1
30.2330.2530.27ascon80pqv12
30.3430.3830.42ascon128v12
30.8231.4032.40T:aes256gcmv1
33.7533.7633.78T:schwaemm256128v2
43.8343.8543.94T:schwaemm192192v2
45.5245.5946.09T:xoodyakround3
47.5047.5448.27T:schwaemm128128v2
47.8947.9147.93T:schwaemm256256v2
50.0550.3750.40T:giftcofb128v1
80.2480.2680.32T:tinyjambu128v2
80.7281.0281.45T:isapa128av20
90.6690.6890.73T:romulusn
96.7596.7897.17T:tinyjambu192v2
102.48102.52103.32T:tinyjambu256v2
103.81104.23104.51T:isapa128v20
152.81152.98153.49T:romulusm
209.96210.12210.39romulusn
213.30213.55213.76T:isapk128av20
283.12283.66284.43T:isapk128v20
319.24319.29319.51T:elephant200v2
387.83388.86389.16romulusm
433.91436.09437.00T:isapxv20
831.95832.86833.85T!!!romulust
18191.5618192.6218212.39T:elephant176v2
19888.7719904.9719956.72T:elephant160v2
240618.63241157.33241866.29aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
15.7315.7415.78ascon128abi32v12
20.1820.1920.21ascon128av12
24.3624.3824.38ascon128bi32v12
25.0725.4625.88T:aes128gcmv1
30.3530.3830.42ascon80pqv12
30.4530.5130.54ascon128v12
30.7731.2231.87T:aes256gcmv1
33.9333.9534.02T:schwaemm256128v2
43.4343.5244.00T:xoodyakround3
43.8243.8343.90T:schwaemm192192v2
46.8547.6147.65T:schwaemm128128v2
48.0648.0748.11T:schwaemm256256v2
50.4950.5150.58T:giftcofb128v1
77.0077.0177.08T:tinyjambu128v2
80.7981.0281.43T:isapa128av20
90.6690.6890.78T:romulusn
97.7597.7598.07T:tinyjambu192v2
104.07104.43105.02T:isapa128v20
109.00109.00109.07T:tinyjambu256v2
208.17208.28208.58T:romulusm
209.70209.84209.95romulusn
213.47213.56213.63T:isapk128av20
282.89283.47284.18T:isapk128v20
319.39319.42319.53T:elephant200v2
389.30389.77391.66romulusm
435.11436.28437.08T:isapxv20
831.99833.41833.92T!!!romulust
18191.2418192.7318193.52T:elephant176v2
19873.6519927.3419969.09T:elephant160v2
240602.05240981.15241743.63aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
15.7315.7515.76ascon128abi32v12
20.1820.1920.26ascon128av12
24.3624.3824.39ascon128bi32v12
25.1825.4525.73T:aes128gcmv1
30.3630.3730.39ascon80pqv12
30.4930.5130.62ascon128v12
30.8731.2932.00T:aes256gcmv1
33.9433.9534.02T:schwaemm256128v2
43.8243.8343.84T:schwaemm192192v2
43.6844.2544.28T:xoodyakround3
46.8446.8846.95T:schwaemm128128v2
48.0748.0948.28T:schwaemm256256v2
50.5150.5250.63T:giftcofb128v1
51.6251.9252.37T:isapa128v20
51.7852.1552.51T:isapa128av20
77.0077.0177.03T:tinyjambu128v2
90.6690.6990.79T:romulusn
97.7597.7798.06T:tinyjambu192v2
109.00109.01109.03T:tinyjambu256v2
143.63143.78143.90T:isapk128av20
176.71176.91177.06T:isapk128v20
207.87208.01208.12T:isapxv20
208.23208.58209.01T:romulusm
209.76209.86210.13romulusn
265.47265.73265.90T!!!romulust
319.39319.41319.52T:elephant200v2
389.36389.61390.42romulusm
1251.291255.981256.78aes256gcmv1
18192.0618192.7418193.98T:elephant176v2
19873.3319955.9419977.82T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
15.7415.7715.79ascon128abi32v12
16.9017.1717.41T:aes128gcmv1
19.7720.0420.61T:aes256gcmv1
20.2620.2720.29ascon128av12
23.8123.8223.86ascon128bi32v12
28.1228.1428.21ascon80pqv12
28.2428.2528.29ascon128v12
33.5833.5933.61T:schwaemm256128v2
34.2434.4934.50T:xoodyakround3
43.6643.6743.71T:schwaemm192192v2
47.4147.4247.44T:schwaemm128128v2
47.7547.7647.80T:schwaemm256256v2
50.5650.6050.78T:giftcofb128v1
65.7565.8865.89T:tinyjambu128v2
66.3566.5366.73T:isapa128av20
75.5075.5175.55T:tinyjambu192v2
77.1877.2077.71T:tinyjambu256v2
78.0078.1678.36T:isapa128v20
80.5680.5780.60T:romulusn
108.48108.56108.69T:romulusm
177.16177.23177.32T:isapk128av20
194.11194.29194.90romulusn
229.39229.77230.25T:isapk128v20
240.42240.47240.58T:elephant200v2
283.05283.44283.77romulusm
322.29322.76322.98T:isapxv20
549.02549.82550.13T!!!romulust
13590.7413591.3313609.11T:elephant176v2
14904.1414909.5814913.72T:elephant160v2
120993.66121170.64121440.69aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
15.6515.7215.78ascon128abi32v12
16.7517.1117.52T:aes128gcmv1
19.6020.0920.82T:aes256gcmv1
20.1520.1620.17ascon128av12
23.8923.9123.96ascon128bi32v12
28.1628.2228.34ascon80pqv12
28.2828.3728.45ascon128v12
33.4433.4633.47T:xoodyakround3
33.6833.6833.71T:schwaemm256128v2
43.6643.6643.72T:schwaemm192192v2
46.7046.7847.43T:schwaemm128128v2
47.8347.8447.87T:schwaemm256256v2
50.6150.6450.85T:giftcofb128v1
64.2464.2564.26T:tinyjambu128v2
66.4266.6566.88T:isapa128av20
76.6776.6976.84T:tinyjambu192v2
77.8578.1178.43T:isapa128v20
79.5479.6379.76T:tinyjambu256v2
80.2880.3080.35T:romulusn
136.15136.23136.51T:romulusm
177.15177.25177.52T:isapk128av20
194.78195.09195.24romulusn
229.65229.77230.19T:isapk128v20
240.49240.53240.65T:elephant200v2
284.45284.55285.21romulusm
321.28321.84322.42T:isapxv20
549.02549.59549.87T!!!romulust
13590.6513591.0013592.31T:elephant176v2
14903.9314907.6214912.74T:elephant160v2
121028.93121187.54121453.13aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
15.7015.7015.72ascon128abi32v12
16.9217.2117.38T:aes128gcmv1
19.7920.1420.42T:aes256gcmv1
20.1620.1620.20ascon128av12
23.9023.9123.93ascon128bi32v12
28.1728.1928.26ascon80pqv12
28.3228.3728.38ascon128v12
33.5733.5833.61T:xoodyakround3
33.6833.6933.71T:schwaemm256128v2
43.6643.6643.67T:schwaemm192192v2
46.7146.7747.43T:schwaemm128128v2
47.8347.8447.88T:schwaemm256256v2
50.6250.6350.67T:giftcofb128v1
51.6851.9452.10T:isapa128v20
51.8551.9752.20T:isapa128av20
64.2464.2564.26T:tinyjambu128v2
76.6976.7076.84T:tinyjambu192v2
79.6279.6479.69T:tinyjambu256v2
80.2880.2980.32T:romulusn
136.18136.28136.58T:romulusm
142.27142.34142.56T:isapk128av20
176.30176.48176.93T:isapk128v20
194.85195.12195.26romulusn
208.08208.13208.21T:isapxv20
240.53240.55240.61T:elephant200v2
265.25265.45266.19T!!!romulust
284.42285.87286.72romulusm
1251.311256.651256.88aes256gcmv1
13590.8913592.2113593.51T:elephant176v2
14904.9914908.1114912.84T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
8.468.909.14T:aes128gcmv1
8.689.069.27T:aes256gcmv1
15.6815.6915.73ascon128abi32v12
20.0920.1220.14ascon128av12
22.8822.9222.96T:xoodyakround3
23.5023.5023.51ascon128bi32v12
25.9626.0026.05ascon80pqv12
26.0926.1226.13ascon128v12
33.4433.4533.46T:schwaemm256128v2
43.4943.5043.51T:schwaemm192192v2
47.6347.6447.68T:schwaemm256256v2
47.2648.0148.11T:schwaemm128128v2
50.7451.1651.20T:giftcofb128v1
51.5051.5151.52T:tinyjambu128v2
51.8651.8951.96T:tinyjambu256v2
51.6752.0252.54T:isapa128v20
51.8252.0652.24T:isapa128av20
54.2554.2654.31T:tinyjambu192v2
64.0964.1864.41T:romulusm
69.9669.9970.02T:romulusn
140.77140.87141.01T:isapk128av20
162.53162.54162.59T:elephant200v2
175.73175.93176.09T:isapk128v20
177.86178.24178.40romulusn
178.15178.29178.47romulusm
208.19208.30208.41T:isapxv20
265.80266.12266.63T!!!romulust
1254.231256.571259.62aes256gcmv1
8992.898993.658994.47T:elephant176v2
9935.909936.849941.62T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
8.448.819.16T:aes128gcmv1
8.769.079.25T:aes256gcmv1
15.6215.6615.69ascon128abi32v12
20.1220.1320.13ascon128av12
22.9122.9222.93T:xoodyakround3
23.4223.4423.46ascon128bi32v12
25.9426.0026.06ascon80pqv12
26.1526.2426.25ascon128v12
33.4333.4433.45T:schwaemm256128v2
43.4943.5043.51T:schwaemm192192v2
46.4846.5346.61T:schwaemm128128v2
47.6347.6447.66T:schwaemm256256v2
50.7350.7751.21T:giftcofb128v1
51.5051.5051.51T:tinyjambu128v2
51.5551.9052.51T:isapa128v20
51.7552.0052.28T:isapa128av20
52.7552.7552.79T:tinyjambu256v2
55.6255.6355.66T:tinyjambu192v2
64.0264.1464.40T:romulusm
69.9569.9870.06T:romulusn
140.80140.91140.97T:isapk128av20
162.62162.64162.79T:elephant200v2
175.59175.96176.46T:isapk128v20
179.49179.78180.78romulusm
179.79179.92180.13romulusn
208.08208.18208.29T:isapxv20
265.29265.34265.62T!!!romulust
1250.151251.421256.87aes256gcmv1
8993.438994.278994.45T:elephant176v2
9935.199937.359939.97T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
8.578.889.09T:aes128gcmv1
8.709.099.31T:aes256gcmv1
15.6515.6615.67ascon128abi32v12
20.1120.1220.13ascon128av12
22.9222.9422.97T:xoodyakround3
23.4323.4423.45ascon128bi32v12
25.9726.0026.04ascon80pqv12
26.1426.2526.25ascon128v12
33.4333.4433.47T:schwaemm256128v2
43.5043.5043.50T:schwaemm192192v2
46.4846.5346.58T:schwaemm128128v2
47.6347.6447.66T:schwaemm256256v2
50.7750.7851.21T:giftcofb128v1
51.4951.5051.51T:tinyjambu128v2
51.8252.1352.45T:isapa128av20
51.5752.1752.62T:isapa128v20
52.7552.7652.79T:tinyjambu256v2
55.6355.6355.65T:tinyjambu192v2
64.0864.2164.47T:romulusm
69.9569.9870.04T:romulusn
140.87140.94141.01T:isapk128av20
162.61162.62162.70T:elephant200v2
175.90176.07176.38T:isapk128v20
179.48179.73180.59romulusm
179.70179.96180.06romulusn
208.00208.18208.40T:isapxv20
265.29265.53265.91T!!!romulust
1251.181256.601256.97aes256gcmv1
8992.718993.268994.12T:elephant176v2
9935.449937.749941.57T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
16.2116.2116.23ascon128abi32v12
20.5620.7320.88T:aes128gcmv1
20.7920.8020.81ascon128av12
23.6823.7423.95T:aes256gcmv1
24.2324.2424.31ascon128bi32v12
28.6028.6028.75ascon80pqv12
28.7028.7028.72ascon128v12
34.6034.6034.66T:schwaemm256128v2
34.6534.6534.66T:xoodyakround3
44.6844.6844.71T:schwaemm192192v2
48.0448.1248.71T:schwaemm128128v2
49.0949.1049.11T:schwaemm256256v2
51.2351.2351.32T:giftcofb128v1
66.3566.3666.37T:tinyjambu128v2
71.0171.0571.27T:isapa128av20
76.2376.2476.30T:tinyjambu192v2
77.8577.8678.24T:tinyjambu256v2
81.6581.6681.70T:romulusn
109.60109.64109.71T:romulusm
110.44110.53110.89T:isapa128v20
196.24196.31196.62romulusn
202.28202.37202.44T:isapk128av20
245.60245.62245.85T:elephant200v2
285.21285.28286.04romulusm
403.47403.55403.90T:isapk128v20
503.30504.03504.54T:isapxv20
557.68558.24558.87T!!!romulust
13696.1913696.7413704.77T:elephant176v2
15073.2415074.0815077.52T:elephant160v2
123627.34123800.45124179.37aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
16.1716.1816.24ascon128abi32v12
20.6920.6920.71ascon128av12
20.5520.7321.09T:aes128gcmv1
23.6223.8623.99T:aes256gcmv1
24.3624.3624.40ascon128bi32v12
28.7028.7128.79ascon80pqv12
28.8228.8728.88ascon128v12
33.6333.6433.68T:xoodyakround3
34.6834.6934.76T:schwaemm256128v2
44.6844.6844.73T:schwaemm192192v2
47.3647.5048.05T:schwaemm128128v2
49.1649.1749.29T:schwaemm256256v2
51.2951.3051.52T:giftcofb128v1
64.8564.8564.87T:tinyjambu128v2
71.0171.0671.30T:isapa128av20
77.4477.4577.61T:tinyjambu192v2
80.3080.3080.33T:tinyjambu256v2
81.4681.4781.54T:romulusn
110.43110.52110.74T:isapa128v20
137.28137.53137.99T:romulusm
196.89196.99197.09romulusn
202.29202.38202.53T:isapk128av20
245.67245.69245.78T:elephant200v2
287.41287.45287.59romulusm
403.47403.61404.00T:isapk128v20
503.91504.37504.71T:isapxv20
557.72557.96558.15T!!!romulust
13695.3313696.0513696.62T:elephant176v2
15072.0515075.6415078.81T:elephant160v2
123495.00123829.67124149.66aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
16.1716.1716.21ascon128abi32v12
20.6920.7020.73ascon128av12
20.5520.7520.91T:aes128gcmv1
23.6023.7924.01T:aes256gcmv1
24.3624.3624.42ascon128bi32v12
28.7028.7028.79ascon80pqv12
28.8628.8628.90ascon128v12
33.7633.7633.79T:xoodyakround3
34.6834.6934.72T:schwaemm256128v2
44.6844.6844.71T:schwaemm192192v2
47.3647.3747.39T:schwaemm128128v2
49.1649.1749.18T:schwaemm256256v2
51.2951.3051.51T:giftcofb128v1
54.6454.6754.91T:isapa128av20
64.8664.8664.90T:tinyjambu128v2
68.4868.5468.82T:isapa128v20
77.4577.4777.59T:tinyjambu192v2
80.3080.3180.38T:tinyjambu256v2
81.4581.4681.50T:romulusn
137.29137.35138.01T:romulusm
158.26158.28158.39T:isapk128av20
196.91196.94197.04romulusn
245.68245.70245.77T:elephant200v2
267.31267.37267.52T:isapk128v20
272.99273.14273.72T!!!romulust
287.42287.48288.89romulusm
301.60302.19302.29T:isapxv20
3769.773771.453775.05aes256gcmv1
13695.2513696.2513706.75T:elephant176v2
15074.3715079.3315086.76T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
26.1526.3927.16ascon128abi32v12
32.5332.7233.09ascon128av12
33.7533.7734.36ascon128bi32v12
38.7738.8740.15ascon128v12
39.2239.2740.07ascon80pqv12
51.9151.9952.22T:xoodyakround3
57.3057.3557.42T:schwaemm256128v2
62.6662.6662.77T:schwaemm128128v2
65.9366.0466.57T:giftcofb128v1
74.2474.3074.32T:schwaemm192192v2
79.1279.2779.48T:schwaemm256256v2
80.1780.2380.45T:tinyjambu128v2
92.9092.9693.09T:tinyjambu192v2
92.9893.1694.35T:tinyjambu256v2
99.54102.66108.91T:aes128gcmv1
106.89107.17107.23T:romulusn
106.58107.38110.82T:aes256gcmv1
134.76135.30137.91T:romulusm
173.70174.23179.54T:isapa128av20
243.26244.15245.48romulusn
333.12334.08335.33romulusm
350.74350.94351.26T:elephant200v2
741.97743.35744.35T:isapk128av20
751.38751.98754.53T!!!romulust
852.91855.45861.53T:isapa128v20
4351.974354.414360.05T:isapk128v20
4661.814663.474665.62T:isapxv20
17057.5517058.5517060.86T:elephant176v2
20184.9220201.4120235.94T:elephant160v2
180598.80182007.00182064.92aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
26.8526.9428.27ascon128abi32v12
32.8132.8933.23ascon128av12
34.7234.7335.53ascon128bi32v12
39.9340.0741.24ascon128v12
40.3340.3841.77ascon80pqv12
51.2151.4451.78T:xoodyakround3
57.3657.3757.52T:schwaemm256128v2
62.4862.6262.74T:schwaemm128128v2
66.1966.2266.41T:giftcofb128v1
74.6274.6974.79T:schwaemm192192v2
78.7378.7678.81T:tinyjambu128v2
79.2079.3779.38T:schwaemm256256v2
94.7094.8094.85T:tinyjambu192v2
95.6195.6695.86T:tinyjambu256v2
98.9599.84104.12T:aes128gcmv1
105.79106.98110.60T:aes256gcmv1
107.34108.23108.59T:romulusn
161.85162.48164.36T:romulusm
174.51175.41177.20T:isapa128av20
245.40246.33246.93romulusn
351.05351.23351.24T:elephant200v2
354.58354.88355.60romulusm
742.31742.80743.75T:isapk128av20
750.98751.93752.98T!!!romulust
852.70853.49858.59T:isapa128v20
4350.844351.704352.84T:isapk128v20
4663.904665.454667.21T:isapxv20
17057.7017058.2717060.91T:elephant176v2
20185.0920187.4720197.85T:elephant160v2
182247.96182268.88182276.92aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
26.6826.8427.13ascon128abi32v12
32.8232.8932.93ascon128av12
34.7234.7334.80ascon128bi32v12
39.9539.9640.32ascon128v12
40.3140.3841.52ascon80pqv12
51.6251.7651.89T:xoodyakround3
57.3657.3757.41T:schwaemm256128v2
62.4862.5162.64T:schwaemm128128v2
66.1666.2066.41T:giftcofb128v1
74.6274.6774.77T:schwaemm192192v2
78.7078.7678.78T:tinyjambu128v2
79.2179.3879.55T:schwaemm256256v2
94.6694.8094.93T:tinyjambu192v2
95.6195.6695.69T:tinyjambu256v2
98.17100.02102.38T:aes128gcmv1
105.53106.91108.35T:aes256gcmv1
106.93107.11107.91T:romulusn
116.41117.05119.88T:isapa128av20
161.71161.91163.34T:romulusm
246.20247.06250.57romulusn
351.10351.30351.33T:elephant200v2
354.91355.77356.86romulusm
447.20448.16449.12T!!!romulust
448.76449.87455.02T:isapa128v20
493.78494.34495.02T:isapk128av20
2321.932322.912324.13T:isapk128v20
2426.022426.162427.22T:isapxv20
17058.4817059.8717081.05T:elephant176v2
20185.2020193.9320235.59T:elephant160v2
61211.2761701.1961703.38aes256gcmv1