VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: riscv64; U54 (sifive,u54-mc); 2017 SiFive Freedom U540; 4 x 1000MHz; riscvunleashed000, supercop-20240107

[Page version: 20240726 23:46:23]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Implementation notes

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
36.7636.8136.92ascon128av12
52.4952.5052.59ascon128v12
52.4852.5052.53ascon80pqv12
72.9372.9573.19ascon128abi32v12
97.2197.2397.27T:schwaemm256128v2
107.23107.27107.44T:giftcofb128v1
108.37108.38108.46ascon128bi32v12
110.12111.56112.79T:aes128gcmv1
115.13115.22115.84T:xoodyakround3
129.15129.19129.22T:schwaemm128128v2
129.89129.93129.96T:schwaemm192192v2
135.18136.79138.97T:aes256gcmv1
145.35145.39145.69T:schwaemm256256v2
151.60151.63151.76T:isapa128av20
176.73176.75177.04T:tinyjambu128v2
190.92192.77195.23T:isapa128v20
241.45241.71242.28T:tinyjambu256v2
249.12249.16250.23T:romulusn
257.00257.01257.41T:tinyjambu192v2
455.42455.97460.72romulusn
594.77595.78606.92T:isapk128av20
779.89780.10787.70T:elephant200v2
772.72784.94788.63T:isapk128v20
891.57896.57902.46romulusm
891.55899.55900.50T:isapxv20
1945.511951.361952.27romulust
26258.6726275.6626284.21T:elephant160v2
29689.0629701.8229717.23T:elephant176v2
62122.6062135.9062159.36aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
36.7736.8137.00ascon128av12
52.4952.5152.70ascon128v12
52.6252.6352.89ascon80pqv12
72.9372.9472.98ascon128abi32v12
97.1197.1997.36T:schwaemm256128v2
107.11107.13107.23T:giftcofb128v1
108.36108.38108.42ascon128bi32v12
110.19111.71113.69T:aes128gcmv1
111.90111.93112.04T:xoodyakround3
129.23129.26129.30T:schwaemm128128v2
129.89129.92130.00T:schwaemm192192v2
135.14136.57137.88T:aes256gcmv1
145.36145.39145.47T:schwaemm256256v2
151.57151.63151.67T:isapa128av20
176.98177.51178.43T:tinyjambu128v2
191.00193.64197.95T:isapa128v20
243.00243.01243.11T:tinyjambu256v2
248.74248.78249.17T:romulusn
257.49257.52257.80T:tinyjambu192v2
455.32455.90461.38romulusn
593.84595.46606.05T:isapk128av20
779.87780.03787.81T:elephant200v2
765.15784.54786.75T:isapk128v20
891.46897.29902.55romulusm
892.35900.01900.95T:isapxv20
1951.181951.711952.54romulust
26258.2226269.1126279.87T:elephant160v2
29692.7229699.3129702.29T:elephant176v2
62112.2362122.2962147.61aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
36.8136.8236.98ascon128av12
52.4952.5052.65ascon128v12
52.6152.6252.71ascon80pqv12
72.9472.9573.13ascon128abi32v12
94.3896.2997.65T:isapa128v20
97.1097.1897.36T:schwaemm256128v2
99.1199.1399.23T:isapa128av20
107.12107.14107.39T:giftcofb128v1
108.37108.38108.50ascon128bi32v12
110.20111.60112.81T:aes128gcmv1
112.02112.09112.33T:xoodyakround3
129.24129.28129.42T:schwaemm128128v2
129.91129.93130.08T:schwaemm192192v2
135.14136.25137.66T:aes256gcmv1
145.36145.39145.48T:schwaemm256256v2
177.49177.61178.28T:tinyjambu128v2
242.99243.01243.14T:tinyjambu256v2
248.75248.78249.25T:romulusn
257.48257.75257.80T:tinyjambu192v2
375.77376.55377.20T:isapk128av20
455.31455.89461.22romulusn
455.31456.43468.14T:isapk128v20
520.00521.13527.94T:isapxv20
616.48616.84628.25romulust
779.92781.70787.92T:elephant200v2
891.57897.53902.69romulusm
9600.909607.619616.05aes256gcmv1
26254.4926260.1226269.93T:elephant160v2
29688.4229701.4029717.36T:elephant176v2
Cycles/byte for long+long encrypt
25%50%75%aead
35.3735.4235.73ascon128av12
51.0551.0851.22ascon128v12
51.2451.2551.44ascon80pqv12
71.5371.5471.80ascon128abi32v12
74.8775.7076.83T:aes128gcmv1
87.1087.1387.16T:xoodyakround3
87.0887.7588.36T:aes256gcmv1
96.7096.7496.89T:schwaemm256128v2
106.55106.57106.64T:giftcofb128v1
106.93106.95107.11ascon128bi32v12
125.01125.50126.04T:isapa128av20
128.75128.77129.04T:schwaemm128128v2
129.39129.41129.72T:schwaemm192192v2
143.52143.73143.90T:tinyjambu128v2
144.85144.85144.99T:schwaemm256256v2
143.94145.12146.88T:isapa128v20
182.35182.54182.78T:tinyjambu256v2
200.52201.00201.12T:tinyjambu192v2
213.45213.55214.07T:romulusn
445.68450.93451.66romulusn
494.34496.09500.64T:isapk128av20
574.24577.80578.58T:elephant200v2
628.33633.22634.21T:isapk128v20
664.24669.18669.44romulusm
706.70710.90711.33T:isapxv20
1281.141285.031289.53romulust
19690.8619696.2519704.99T:elephant160v2
22180.6822184.7322197.06T:elephant176v2
35863.9035868.7635886.86aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
35.2535.4135.69ascon128av12
50.9751.0651.18ascon128v12
51.0651.1351.29ascon80pqv12
71.5271.5471.62ascon128abi32v12
74.8275.5276.28T:aes128gcmv1
85.4985.5385.75T:xoodyakround3
87.0987.9488.68T:aes256gcmv1
96.7696.7897.31T:schwaemm256128v2
106.49106.51106.60T:giftcofb128v1
106.93106.95107.13ascon128bi32v12
125.48125.54126.53T:isapa128av20
128.78128.79129.54T:schwaemm128128v2
129.39129.43130.17T:schwaemm192192v2
143.99144.16144.43T:tinyjambu128v2
143.30144.78146.79T:isapa128v20
144.84144.86145.09T:schwaemm256256v2
183.12183.15183.70T:tinyjambu256v2
201.09201.29201.47T:tinyjambu192v2
213.22213.30214.21T:romulusn
445.92446.23451.46romulusn
495.68500.27501.87T:isapk128av20
574.39577.72578.24T:elephant200v2
628.06633.56634.29T:isapk128v20
664.18669.30670.69romulusm
707.55711.46713.85T:isapxv20
1284.051285.511289.09romulust
19691.8019695.1519706.65T:elephant160v2
22180.1622187.0022194.10T:elephant176v2
35857.2935865.3735870.85aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
35.3735.4235.55ascon128av12
51.0551.0751.23ascon128v12
51.1151.1451.28ascon80pqv12
71.5171.5471.66ascon128abi32v12
74.7675.4376.58T:aes128gcmv1
85.5285.5785.91T:xoodyakround3
87.2188.0589.10T:aes256gcmv1
95.3196.3297.15T:isapa128v20
96.7796.7796.89T:schwaemm256128v2
99.2499.2599.40T:isapa128av20
106.50106.51106.57T:giftcofb128v1
106.94106.95107.14ascon128bi32v12
128.78128.80128.88T:schwaemm128128v2
129.39129.42130.10T:schwaemm192192v2
144.01144.28144.55T:tinyjambu128v2
144.83144.88145.61T:schwaemm256256v2
183.11183.15183.71T:tinyjambu256v2
201.09201.39201.94T:tinyjambu192v2
213.23213.30214.19T:romulusn
385.81386.38391.61T:isapk128av20
445.58448.66451.55romulusn
468.74474.52475.35T:isapk128v20
521.56524.84525.75T:isapxv20
574.34577.81578.35T:elephant200v2
616.34622.00622.46romulust
663.89669.15669.60romulusm
9605.959608.589612.93aes256gcmv1
19690.9419694.1719703.85T:elephant160v2
22181.8222184.5222197.86T:elephant176v2
Cycles/byte for 0+long encrypt
25%50%75%aead
33.9334.0034.11ascon128av12
38.9639.4740.63T:aes256gcmv1
39.1739.8240.81T:aes128gcmv1
49.5449.6249.74ascon128v12
49.9650.0350.27ascon80pqv12
59.0259.1259.19T:xoodyakround3
70.1170.1370.20ascon128abi32v12
96.1796.2096.24T:schwaemm256128v2
94.3896.2898.33T:isapa128v20
99.3699.3999.44T:isapa128av20
105.49105.50105.55ascon128bi32v12
105.86105.89106.12T:giftcofb128v1
110.43110.51110.87T:tinyjambu128v2
123.24123.25123.26T:tinyjambu256v2
128.29128.31128.33T:schwaemm128128v2
128.86128.90129.10T:schwaemm192192v2
144.33144.36144.41T:schwaemm256256v2
144.98145.00145.04T:tinyjambu192v2
177.59177.64177.73T:romulusn
373.04373.13374.05T:elephant200v2
395.76396.25397.36T:isapk128av20
435.57435.94440.78romulusn
435.57436.23440.81romulusm
240.49?481.61?492.82?T:isapk128v20
521.67522.77529.82T:isapxv20
615.89616.33627.59romulust
9602.819608.469610.26aes256gcmv1
13124.7913128.7913139.38T:elephant160v2
14669.5214676.2414690.44T:elephant176v2
Cycles/byte for 0+long decrypt
25%50%75%aead
33.9734.0034.07ascon128av12
38.3039.3740.62T:aes128gcmv1
39.2539.8240.99T:aes256gcmv1
49.5749.6349.84ascon80pqv12
49.5949.6449.94ascon128v12
59.0659.1559.52T:xoodyakround3
70.1170.1370.26ascon128abi32v12
95.9896.1996.25T:schwaemm256128v2
94.8397.44100.84T:isapa128v20
99.3799.4099.49T:isapa128av20
105.49105.50105.59ascon128bi32v12
105.86105.88105.91T:giftcofb128v1
110.98111.00111.10T:tinyjambu128v2
123.24123.27123.43T:tinyjambu256v2
128.31128.32128.46T:schwaemm128128v2
128.86128.90128.93T:schwaemm192192v2
144.34144.37144.50T:schwaemm256256v2
144.98145.00145.21T:tinyjambu192v2
177.68177.71177.74T:romulusn
373.06373.16374.42T:elephant200v2
395.30395.96396.97T:isapk128av20
435.73436.06441.42romulusn
435.68436.25441.82romulusm
468.57481.38493.61T:isapk128v20
522.08523.56529.94T:isapxv20
615.98616.24627.79romulust
9602.929609.369611.33aes256gcmv1
13124.4913127.7113139.62T:elephant160v2
14672.4114676.5114685.03T:elephant176v2
Cycles/byte for 0+long forgery
25%50%75%aead
33.9534.0034.05ascon128av12
38.9239.4440.60T:aes128gcmv1
39.2539.6140.78T:aes256gcmv1
49.6049.6349.79ascon128v12
49.5949.6349.80ascon80pqv12
59.0659.1159.21T:xoodyakround3
70.1270.1370.21ascon128abi32v12
93.5995.3797.36T:isapa128v20
96.1896.1996.21T:schwaemm256128v2
99.3499.3899.42T:isapa128av20
105.49105.50105.64ascon128bi32v12
105.87105.89106.21T:giftcofb128v1
110.89111.00111.05T:tinyjambu128v2
123.24123.25123.29T:tinyjambu256v2
128.30128.31128.35T:schwaemm128128v2
128.86128.89128.92T:schwaemm192192v2
143.92144.25145.24T:tinyjambu192v2
144.33144.34144.38T:schwaemm256256v2
177.70177.74177.79T:romulusn
373.04373.16374.44T:elephant200v2
395.74396.16407.05T:isapk128av20
435.67436.08441.96romulusn
435.55436.25441.76romulusm
481.00481.55493.27T:isapk128v20
521.69528.66529.78T:isapxv20
615.89616.41627.30romulust
9601.669607.769610.33aes256gcmv1
13124.3513129.8513142.80T:elephant160v2
14670.2414676.3714690.07T:elephant176v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
36.1636.1936.40ascon128av12
51.7651.7751.92ascon128v12
51.9952.0052.19ascon80pqv12
73.0273.0273.13ascon128abi32v12
80.3480.5881.27T:aes128gcmv1
88.0288.0388.14T:xoodyakround3
93.0293.1793.87T:aes256gcmv1
99.5699.5699.73T:schwaemm256128v2
107.76107.81108.16T:giftcofb128v1
108.34108.34108.44ascon128bi32v12
130.43130.43130.45T:schwaemm128128v2
132.25132.26132.27T:schwaemm192192v2
135.19135.20135.41T:isapa128av20
144.75144.87144.93T:tinyjambu128v2
148.80148.81148.97T:schwaemm256256v2
183.74184.06184.22T:tinyjambu256v2
202.48202.49202.56T:tinyjambu192v2
210.98211.58213.76T:isapa128v20
216.00216.21222.51T:romulusn
450.60450.88457.35romulusn
552.30553.12559.55T:isapk128av20
586.02586.22592.28T:elephant200v2
669.07675.27675.82romulusm
1004.891005.891006.77T:isapk128v20
1172.501173.001173.51T:isapxv20
1305.561305.851306.50romulust
19915.1919917.8719923.18T:elephant160v2
22352.2822355.8822369.43T:elephant176v2
36467.3336471.8536483.31aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
36.1836.1836.32ascon128av12
51.7751.7851.89ascon128v12
51.8751.8852.05ascon80pqv12
73.0473.0573.27ascon128abi32v12
80.3780.5582.06T:aes128gcmv1
86.4286.4686.65T:xoodyakround3
93.1093.3994.47T:aes256gcmv1
99.6199.6199.65T:schwaemm256128v2
107.72107.73107.83T:giftcofb128v1
108.36108.36108.48ascon128bi32v12
130.45130.45130.48T:schwaemm128128v2
132.25132.25132.27T:schwaemm192192v2
135.23135.24135.47T:isapa128av20
145.26145.39145.44T:tinyjambu128v2
148.81148.81149.04T:schwaemm256256v2
184.45184.49185.09T:tinyjambu256v2
202.74202.86203.39T:tinyjambu192v2
210.88211.73213.78T:isapa128v20
215.79215.80216.87T:romulusn
450.61450.85457.40romulusn
552.28552.69559.11T:isapk128av20
586.03587.25590.99T:elephant200v2
671.05677.49678.06romulusm
1005.711006.571007.58T:isapk128v20
1172.391172.681173.00T:isapxv20
1305.701306.011306.55romulust
19916.1519919.4419924.28T:elephant160v2
22352.8822357.1422367.30T:elephant176v2
36460.1736464.8736473.23aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
36.1836.2336.68ascon128av12
51.7751.7951.93ascon128v12
51.8751.8852.09ascon80pqv12
73.0473.0473.11ascon128abi32v12
80.3880.4781.33T:aes128gcmv1
86.4586.4986.59T:xoodyakround3
93.2193.5394.63T:aes256gcmv1
99.6199.6199.62T:schwaemm256128v2
104.66104.67104.75T:isapa128av20
107.73107.74107.86T:giftcofb128v1
108.35108.39108.49ascon128bi32v12
129.66130.09130.98T:isapa128v20
130.45130.45130.48T:schwaemm128128v2
132.25132.25132.28T:schwaemm192192v2
145.31145.39145.51T:tinyjambu128v2
148.80148.81149.15T:schwaemm256256v2
184.44184.44184.64T:tinyjambu256v2
202.42202.86203.40T:tinyjambu192v2
215.77215.84216.82T:romulusn
422.84423.05429.61T:isapk128av20
450.67451.08458.89romulusn
586.02587.22591.01T:elephant200v2
634.37638.12641.42romulust
664.45670.81671.91T:isapk128v20
671.10677.49678.35romulusm
757.69761.31761.93T:isapxv20
10203.4010204.4710208.68aes256gcmv1
19915.9519918.5919921.42T:elephant160v2
22355.1022357.5522362.91T:elephant176v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
53.4653.5856.73ascon128av12
67.8967.9868.99ascon128v12
68.9969.0270.09ascon80pqv12
107.07107.17107.28ascon128abi32v12
125.47125.70126.06T:xoodyakround3
134.94135.02135.39T:giftcofb128v1
140.41140.41140.69ascon128bi32v12
165.00165.01165.29T:schwaemm256128v2
168.86168.95169.27T:schwaemm128128v2
170.43170.64170.98T:tinyjambu128v2
195.14196.13212.45T:aes128gcmv1
214.29214.30214.48T:tinyjambu256v2
214.67214.69214.75T:schwaemm192192v2
214.10216.69232.02T:aes256gcmv1
236.52236.76237.06T:tinyjambu192v2
239.56239.62239.90T:schwaemm256256v2
273.97274.11274.24T:romulusn
358.08358.16358.56T:isapa128av20
560.97561.44565.20romulusn
781.28781.59784.55romulusm
817.95818.09818.59T:elephant200v2
1737.411742.121759.07T:isapa128v20
1760.161761.071769.37romulust
1762.251763.841769.16T:isapk128av20
9402.779407.109567.52T:isapk128v20
11642.1611648.2711748.01T:isapxv20
26683.3226690.6126708.34T:elephant160v2
27849.8127860.7927901.72T:elephant176v2
50213.7150243.6850267.83aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
53.9054.0256.21ascon128av12
68.1068.1269.48ascon128v12
69.0669.0770.39ascon80pqv12
107.44107.54107.64ascon128abi32v12
123.99124.25124.34T:xoodyakround3
135.65135.76136.21T:giftcofb128v1
140.84140.84141.03ascon128bi32v12
164.82164.85164.94T:schwaemm256128v2
168.55168.66168.73T:schwaemm128128v2
171.31171.48171.74T:tinyjambu128v2
194.91198.93214.94T:aes128gcmv1
214.70214.72214.79T:tinyjambu256v2
215.21215.31215.53T:schwaemm192192v2
213.95216.96233.33T:aes256gcmv1
236.29236.87237.18T:tinyjambu192v2
239.38239.66239.89T:schwaemm256256v2
274.45274.66274.84T:romulusn
358.88358.99359.60T:isapa128av20
560.91561.53564.45romulusn
817.95818.09818.80T:elephant200v2
835.14835.55838.69romulusm
1744.011754.141785.58T:isapa128v20
1761.131761.811765.87romulust
1762.661763.441768.24T:isapk128av20
9410.169413.109563.39T:isapk128v20
11642.2611645.2611748.42T:isapxv20
26687.6626694.9926718.12T:elephant160v2
27843.9827850.3727862.10T:elephant176v2
50200.9950236.6050254.02aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
53.8553.9254.53ascon128av12
68.1068.1268.34ascon128v12
69.0369.0369.55ascon80pqv12
107.44107.49107.57ascon128abi32v12
124.45124.59124.95T:xoodyakround3
135.65135.65135.95T:giftcofb128v1
140.83140.83140.95ascon128bi32v12
164.59164.64164.94T:schwaemm256128v2
168.59168.69168.93T:schwaemm128128v2
171.42171.59172.13T:tinyjambu128v2
195.67198.62213.38T:aes128gcmv1
214.55214.58214.71T:tinyjambu256v2
215.12215.17215.32T:schwaemm192192v2
213.75216.10230.49T:aes256gcmv1
229.19229.21229.70T:isapa128av20
236.82237.09237.34T:tinyjambu192v2
239.52239.69239.91T:schwaemm256256v2
273.78273.80274.01T:romulusn
560.95561.26566.38romulusn
817.75817.87818.34T:elephant200v2
835.15835.97839.27romulusm
902.85908.66926.80T:isapa128v20
1042.181042.901046.62romulust
1177.411180.051183.73T:isapk128av20
5059.345065.025069.09T:isapk128v20
6083.576083.916090.84T:isapxv20
23887.6223975.2124003.74aes256gcmv1
26684.4826689.8826705.21T:elephant160v2
27848.7027857.3827874.48T:elephant176v2