VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3210M; 2 x 2500MHz; h9ivy, supercop-20250922

[Page version: 20251103 11:56:58]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 2.56 2.59 2.61 T:aes128gcmv1 2.79 2.83 2.84 aes256gcmv1 8.77 8.82 8.84 ascon128av12 12.84 12.86 12.88 ascon80pqv12 12.84 12.86 12.91 ascon128v12 16.49 16.57 16.61 T:xoodyakround3 16.80 16.82 16.83 ascon128abi32v12 22.79 22.84 22.87 T:schwaemm256128v2 24.11 24.14 24.38 ascon128bi32v12 27.29 27.38 27.58 T:grain128aeadv2 30.22 30.24 30.30 T:schwaemm192192v2 32.55 32.59 32.65 T:schwaemm128128v2 33.20 33.21 33.23 T:schwaemm256256v2 36.01 36.05 36.11 T:giftcofb128v1 36.11 36.14 36.19 romulusn 49.24 49.65 49.74 T:isapa128v20 51.45 51.50 51.57 T:tinyjambu128v2 55.04 55.14 55.24 T:isapa128av20 59.42 59.45 59.51 romulusm 61.60 61.64 61.68 T:tinyjambu192v2 66.98 67.00 67.05 T:tinyjambu256v2 88.55 88.74 88.97 T:isapk128av20 117.92 118.39 119.04 T:isapk128v20 127.74 127.88 128.23 romulust 169.69 169.86 170.10 T:elephant200v2 179.43 179.73 181.05 T:isapxv20 8952.04 8958.75 9028.09 T:elephant176v2 9718.28 9719.51 9720.04 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 3.05 3.08 3.10 T:aes128gcmv1 3.75 3.78 3.79 aes256gcmv1 8.68 8.72 8.73 ascon128av12 12.80 12.83 12.84 ascon128v12 12.78 12.86 12.90 ascon80pqv12 16.37 16.43 16.50 T:xoodyakround3 16.75 16.79 16.81 ascon128abi32v12 22.80 22.84 22.86 T:schwaemm256128v2 24.18 24.20 24.24 ascon128bi32v12 28.40 28.44 28.57 T:grain128aeadv2 30.11 30.19 30.23 T:schwaemm192192v2 32.57 32.61 32.65 T:schwaemm128128v2 33.16 33.18 33.23 T:schwaemm256256v2 35.91 35.98 36.05 T:giftcofb128v1 36.18 36.22 36.27 romulusn 49.59 49.71 50.11 T:isapa128v20 51.57 51.73 51.79 T:tinyjambu128v2 55.07 55.12 55.20 T:isapa128av20 59.41 59.45 59.50 romulusm 62.10 62.15 62.20 T:tinyjambu192v2 67.09 67.14 67.20 T:tinyjambu256v2 88.25 88.56 88.84 T:isapk128av20 118.23 118.44 119.05 T:isapk128v20 128.10 128.32 128.41 romulust 169.71 169.86 170.10 T:elephant200v2 179.27 179.79 181.00 T:isapxv20 8953.94 8959.58 9029.53 T:elephant176v2 9718.54 9718.98 9719.79 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 3.07 3.08 3.09 T:aes128gcmv1 3.76 3.77 3.78 aes256gcmv1 8.69 8.69 8.71 ascon128av12 12.79 12.81 12.90 ascon80pqv12 12.81 12.82 12.84 ascon128v12 16.35 16.37 16.41 T:xoodyakround3 16.73 16.77 16.79 ascon128abi32v12 22.81 22.83 22.86 T:schwaemm256128v2 24.18 24.20 24.23 ascon128bi32v12 25.02 25.08 25.10 T:isapa128v20 28.40 28.43 28.61 T:grain128aeadv2 30.14 30.18 30.22 T:schwaemm192192v2 32.59 32.62 32.66 T:schwaemm128128v2 33.17 33.18 33.24 T:schwaemm256256v2 35.96 35.98 36.03 T:giftcofb128v1 36.18 36.26 36.30 romulusn 37.16 37.25 37.33 T:isapa128av20 43.87 43.96 44.42 romulust 51.58 51.70 51.73 T:tinyjambu128v2 58.29 58.39 58.63 T:isapk128av20 59.40 59.45 59.53 romulusm 62.11 62.15 62.23 T:tinyjambu192v2 67.09 67.15 67.20 T:tinyjambu256v2 73.03 73.39 73.56 T:isapk128v20 105.44 105.58 106.39 T:isapxv20 169.75 170.01 170.09 T:elephant200v2 8952.37 8958.95 9029.99 T:elephant176v2 9718.68 9719.20 9720.28 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 2.17 2.19 2.21 T:aes128gcmv1 2.28 2.31 2.33 aes256gcmv1 8.70 8.73 8.74 ascon128av12 12.42 12.51 12.55 T:xoodyakround3 12.71 12.74 12.77 ascon128v12 12.71 12.74 12.78 ascon80pqv12 16.70 16.74 16.78 ascon128abi32v12 22.67 22.70 22.71 T:schwaemm256128v2 24.31 24.33 24.43 ascon128bi32v12 27.40 27.43 27.67 T:grain128aeadv2 29.65 29.69 29.71 romulusn 30.05 30.09 30.11 T:schwaemm192192v2 32.42 32.44 32.46 T:schwaemm128128v2 33.03 33.05 33.07 T:schwaemm256256v2 36.12 36.16 36.20 T:giftcofb128v1 37.40 37.52 37.77 T:isapa128v20 41.29 41.34 41.38 romulusm 42.61 42.63 42.67 T:tinyjambu128v2 46.17 46.21 46.25 T:isapa128av20 47.29 47.32 47.37 T:tinyjambu192v2 49.84 49.92 50.28 T:tinyjambu256v2 73.54 73.63 73.83 T:isapk128av20 85.66 85.70 85.99 romulust 96.08 96.34 96.62 T:isapk128v20 126.75 126.81 126.97 T:elephant200v2 142.45 142.68 143.63 T:isapxv20 6687.54 6692.72 6744.12 T:elephant176v2 7287.12 7287.56 7287.94 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 2.41 2.43 2.47 T:aes128gcmv1 2.76 2.79 2.80 aes256gcmv1 8.63 8.68 8.71 ascon128av12 12.44 12.46 12.48 T:xoodyakround3 12.71 12.73 12.74 ascon128v12 12.72 12.76 12.82 ascon80pqv12 16.93 16.96 16.97 ascon128abi32v12 22.68 22.69 22.71 T:schwaemm256128v2 24.12 24.14 24.16 ascon128bi32v12 27.92 27.97 28.15 T:grain128aeadv2 29.72 29.74 29.79 romulusn 30.02 30.04 30.07 T:schwaemm192192v2 32.51 32.53 32.57 T:schwaemm128128v2 33.00 33.02 33.03 T:schwaemm256256v2 36.06 36.08 36.13 T:giftcofb128v1 37.24 37.60 37.80 T:isapa128v20 41.31 41.36 41.41 romulusm 42.65 42.69 42.76 T:tinyjambu128v2 46.16 46.20 46.26 T:isapa128av20 47.52 47.54 47.58 T:tinyjambu192v2 50.29 50.32 50.41 T:tinyjambu256v2 73.73 73.82 74.15 T:isapk128av20 85.65 86.02 86.21 romulust 96.04 96.27 96.75 T:isapk128v20 126.72 126.86 126.97 T:elephant200v2 142.47 142.63 143.59 T:isapxv20 6687.60 6692.37 6744.71 T:elephant176v2 7287.38 7287.70 7287.98 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 2.43 2.43 2.44 T:aes128gcmv1 2.78 2.79 2.80 aes256gcmv1 8.62 8.67 8.73 ascon128av12 12.48 12.49 12.53 T:xoodyakround3 12.72 12.73 12.75 ascon128v12 12.73 12.76 12.79 ascon80pqv12 16.93 16.95 16.96 ascon128abi32v12 22.68 22.70 22.72 T:schwaemm256128v2 24.13 24.15 24.16 ascon128bi32v12 25.07 25.09 25.15 T:isapa128v20 27.96 28.12 28.18 T:grain128aeadv2 29.72 29.74 29.77 romulusn 30.02 30.03 30.08 T:schwaemm192192v2 32.48 32.52 32.62 T:schwaemm128128v2 32.99 33.01 33.06 T:schwaemm256256v2 36.06 36.11 36.14 T:giftcofb128v1 37.20 37.24 37.30 T:isapa128av20 41.31 41.33 41.36 romulusm 42.62 42.65 42.74 T:tinyjambu128v2 43.73 43.80 44.22 romulust 47.52 47.55 47.58 T:tinyjambu192v2 50.30 50.32 50.35 T:tinyjambu256v2 58.31 58.38 58.45 T:isapk128av20 73.61 73.83 73.95 T:isapk128v20 105.49 105.72 106.46 T:isapxv20 126.75 126.88 127.00 T:elephant200v2 6687.54 6692.16 6744.07 T:elephant176v2 7287.30 7287.65 7288.02 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 1.78 1.80 1.82 T:aes128gcmv1 1.78 1.80 1.82 aes256gcmv1 8.47 8.53 8.57 T:xoodyakround3 8.60 8.62 8.64 ascon128av12 12.58 12.60 12.62 ascon80pqv12 12.57 12.60 12.62 ascon128v12 16.65 16.70 16.72 ascon128abi32v12 22.55 22.56 22.58 T:schwaemm256128v2 23.18 23.21 23.23 romulusn 23.20 23.24 23.29 romulusm 24.15 24.19 24.54 ascon128bi32v12 25.05 25.10 25.54 T:isapa128v20 27.49 27.53 27.77 T:grain128aeadv2 29.82 29.88 29.95 T:schwaemm192192v2 32.26 32.30 32.34 T:schwaemm128128v2 32.68 32.77 33.58 T:tinyjambu256v2 32.89 32.91 32.93 T:schwaemm256256v2 32.99 33.01 33.05 T:tinyjambu192v2 33.76 33.79 33.82 T:tinyjambu128v2 36.21 36.26 36.33 T:giftcofb128v1 37.22 37.25 37.32 T:isapa128av20 43.59 43.66 43.79 romulust 58.20 58.39 58.74 T:isapk128av20 73.46 73.62 73.74 T:isapk128v20 84.10 84.20 84.27 T:elephant200v2 105.09 105.68 106.47 T:isapxv20 4421.51 4425.89 4459.75 T:elephant176v2 4855.61 4856.29 4856.91 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 1.77 1.79 1.82 T:aes128gcmv1 1.77 1.81 1.83 aes256gcmv1 8.52 8.60 8.63 T:xoodyakround3 8.52 8.65 8.72 ascon128av12 12.62 12.65 12.67 ascon128v12 12.63 12.71 12.77 ascon80pqv12 17.09 17.12 17.15 ascon128abi32v12 22.53 22.56 22.58 T:schwaemm256128v2 23.17 23.20 23.22 romulusn 23.18 23.23 23.27 romulusm 24.00 24.04 24.05 ascon128bi32v12 25.03 25.11 25.18 T:isapa128v20 27.47 27.51 27.77 T:grain128aeadv2 29.88 29.91 29.95 T:schwaemm192192v2 32.40 32.43 32.48 T:schwaemm128128v2 32.89 32.91 32.93 T:schwaemm256256v2 32.91 32.93 32.97 T:tinyjambu192v2 33.48 33.51 33.54 T:tinyjambu256v2 33.74 33.78 33.81 T:tinyjambu128v2 36.21 36.24 36.30 T:giftcofb128v1 37.19 37.26 37.35 T:isapa128av20 43.57 43.66 44.08 romulust 58.19 58.29 58.42 T:isapk128av20 73.49 73.57 73.66 T:isapk128v20 84.11 84.17 84.23 T:elephant200v2 105.35 105.60 106.66 T:isapxv20 4421.65 4425.67 4461.11 T:elephant176v2 4855.78 4856.33 4857.04 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 1.79 1.80 1.81 T:aes128gcmv1 1.80 1.81 1.83 aes256gcmv1 8.53 8.57 8.62 T:xoodyakround3 8.56 8.64 8.69 ascon128av12 12.63 12.66 12.68 ascon128v12 12.63 12.67 12.69 ascon80pqv12 17.09 17.12 17.15 ascon128abi32v12 22.54 22.56 22.57 T:schwaemm256128v2 23.19 23.22 23.27 romulusm 23.18 23.22 23.28 romulusn 23.99 24.00 24.05 ascon128bi32v12 25.04 25.11 25.18 T:isapa128v20 27.46 27.52 27.75 T:grain128aeadv2 29.87 29.89 29.96 T:schwaemm192192v2 32.39 32.44 32.48 T:schwaemm128128v2 32.89 32.91 32.93 T:schwaemm256256v2 32.91 32.96 32.99 T:tinyjambu192v2 33.48 33.50 33.55 T:tinyjambu256v2 33.73 33.77 33.81 T:tinyjambu128v2 36.20 36.25 36.29 T:giftcofb128v1 37.22 37.27 37.31 T:isapa128av20 43.58 43.64 44.06 romulust 57.90 58.38 58.86 T:isapk128av20 73.52 73.63 74.31 T:isapk128v20 84.12 84.18 84.22 T:elephant200v2 105.42 105.53 106.63 T:isapxv20 4421.67 4425.64 4459.66 T:elephant176v2 4855.44 4856.30 4856.82 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 2.41 2.42 2.43 T:aes128gcmv1 2.56 2.57 2.58 aes256gcmv1 8.92 8.93 8.96 ascon128av12 12.58 12.69 12.72 T:xoodyakround3 12.93 12.94 12.95 ascon128v12 12.93 12.94 12.96 ascon80pqv12 17.12 17.14 17.15 ascon128abi32v12 23.34 23.35 23.36 T:schwaemm256128v2 24.71 24.73 24.78 ascon128bi32v12 27.88 27.90 28.11 T:grain128aeadv2 30.20 30.23 30.25 romulusn 30.72 30.74 30.76 T:schwaemm192192v2 32.85 32.87 32.90 T:schwaemm128128v2 33.99 34.01 34.03 T:schwaemm256256v2 36.47 36.50 36.51 T:giftcofb128v1 41.87 41.88 41.91 romulusm 42.97 42.98 43.01 T:tinyjambu128v2 47.67 47.70 47.72 T:tinyjambu192v2 49.26 49.28 49.32 T:isapa128av20 50.25 50.30 50.66 T:tinyjambu256v2 55.04 55.05 55.20 T:isapa128v20 85.56 85.66 85.73 T:isapk128av20 87.02 87.08 87.30 romulust 129.43 129.55 129.63 T:elephant200v2 171.28 171.46 172.09 T:isapk128v20 228.05 228.46 229.20 T:isapxv20 6741.75 6743.31 6791.25 T:elephant176v2 7369.46 7369.76 7370.14 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 2.66 2.66 2.69 T:aes128gcmv1 3.04 3.05 3.09 aes256gcmv1 8.83 8.87 8.94 ascon128av12 12.58 12.60 12.64 T:xoodyakround3 12.91 12.92 12.94 ascon128v12 12.95 12.97 13.00 ascon80pqv12 17.33 17.34 17.36 ascon128abi32v12 23.33 23.35 23.37 T:schwaemm256128v2 24.53 24.55 24.55 ascon128bi32v12 28.42 28.45 28.63 T:grain128aeadv2 30.26 30.28 30.29 romulusn 30.70 30.72 30.75 T:schwaemm192192v2 32.91 32.95 33.03 T:schwaemm128128v2 33.97 33.98 33.99 T:schwaemm256256v2 36.41 36.45 36.49 T:giftcofb128v1 41.96 41.99 42.02 romulusm 42.98 42.99 43.05 T:tinyjambu128v2 47.91 47.95 48.10 T:tinyjambu192v2 49.28 49.33 49.36 T:isapa128av20 50.68 50.70 50.72 T:tinyjambu256v2 54.94 55.08 55.24 T:isapa128v20 85.64 85.77 85.85 T:isapk128av20 87.29 87.37 87.48 romulust 129.43 129.46 129.60 T:elephant200v2 171.16 171.33 171.78 T:isapk128v20 228.30 228.52 229.39 T:isapxv20 6742.24 6742.94 6791.01 T:elephant176v2 7369.51 7369.98 7370.22 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 2.65 2.66 2.67 T:aes128gcmv1 3.04 3.05 3.06 aes256gcmv1 8.84 8.85 8.91 ascon128av12 12.65 12.67 12.69 T:xoodyakround3 12.92 12.92 12.93 ascon128v12 12.93 12.96 12.98 ascon80pqv12 17.33 17.34 17.35 ascon128abi32v12 23.34 23.36 23.37 T:schwaemm256128v2 24.52 24.53 24.55 ascon128bi32v12 28.41 28.41 28.60 T:grain128aeadv2 30.25 30.29 30.33 romulusn 30.72 30.73 30.76 T:schwaemm192192v2 32.90 32.91 32.93 T:schwaemm128128v2 33.96 33.98 33.99 T:schwaemm256256v2 33.98 34.00 34.06 T:isapa128v20 36.41 36.45 36.49 T:giftcofb128v1 39.02 39.04 39.08 T:isapa128av20 41.97 42.00 42.03 romulusm 42.98 43.01 43.03 T:tinyjambu128v2 45.04 45.05 45.45 romulust 47.91 47.93 47.95 T:tinyjambu192v2 50.69 50.71 50.74 T:tinyjambu256v2 65.94 65.96 66.15 T:isapk128av20 112.95 113.00 113.09 T:isapk128v20 129.43 129.49 129.60 T:elephant200v2 149.44 149.51 150.22 T:isapxv20 6742.02 6743.10 6792.65 T:elephant176v2 7369.55 7369.97 7370.25 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 10.47 10.55 10.68 T:aes128gcmv1 11.59 11.73 12.55 aes256gcmv1 13.55 13.62 13.88 ascon128av12 17.26 17.34 17.67 ascon128v12 17.35 17.45 17.84 ascon80pqv12 18.54 18.62 19.04 T:xoodyakround3 25.83 26.03 26.32 ascon128abi32v12 33.98 34.12 34.27 ascon128bi32v12 37.95 37.98 38.11 T:schwaemm256128v2 38.53 38.64 38.84 T:grain128aeadv2 42.42 42.48 42.74 T:schwaemm128128v2 42.40 42.56 42.66 romulusn 44.14 44.20 44.39 T:giftcofb128v1 49.60 49.88 50.03 T:schwaemm192192v2 50.73 50.92 51.11 T:tinyjambu128v2 54.24 54.38 54.55 T:schwaemm256256v2 55.06 55.16 55.48 romulusm 55.97 56.18 56.41 T:tinyjambu192v2 58.77 59.02 59.13 T:tinyjambu256v2 117.47 117.71 118.09 romulust 120.16 120.51 120.75 T:isapa128av20 183.27 183.63 184.16 T:elephant200v2 346.17 346.41 347.03 T:isapk128av20 457.06 457.67 458.92 T:isapa128v20 1873.44 1874.52 1878.46 T:isapk128v20 2167.80 2176.41 2178.32 T:isapxv20 8397.10 8403.24 8453.70 T:elephant176v2 9867.60 9870.83 9874.13 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 10.44 10.69 11.13 T:aes128gcmv1 11.65 11.74 12.52 aes256gcmv1 13.58 13.80 14.27 ascon128av12 17.22 17.22 17.84 ascon128v12 17.44 17.45 17.90 ascon80pqv12 18.39 18.53 19.16 T:xoodyakround3 25.96 26.08 26.44 ascon128abi32v12 33.60 33.69 33.77 ascon128bi32v12 37.84 37.93 38.13 T:schwaemm256128v2 38.92 39.09 39.36 T:grain128aeadv2 42.22 42.49 42.76 T:schwaemm128128v2 42.41 42.55 42.64 romulusn 44.38 44.46 44.68 T:giftcofb128v1 49.74 50.02 50.16 T:schwaemm192192v2 50.72 50.83 51.04 T:tinyjambu128v2 54.45 54.56 54.72 T:schwaemm256256v2 56.44 56.57 56.77 T:tinyjambu192v2 57.25 57.33 57.59 romulusm 59.38 59.63 59.81 T:tinyjambu256v2 117.58 117.95 118.66 romulust 120.16 120.34 120.74 T:isapa128av20 183.26 183.38 183.65 T:elephant200v2 346.25 346.53 347.11 T:isapk128av20 457.39 457.73 464.99 T:isapa128v20 1873.59 1876.08 1882.10 T:isapk128v20 2174.30 2177.37 2179.21 T:isapxv20 8396.02 8398.99 8457.12 T:elephant176v2 9868.73 9870.84 9872.56 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 10.40 10.46 10.80 T:aes128gcmv1 11.69 11.88 11.95 aes256gcmv1 13.61 13.66 13.82 ascon128av12 17.22 17.27 17.45 ascon128v12 17.44 17.52 17.59 ascon80pqv12 18.45 18.52 18.90 T:xoodyakround3 26.05 26.11 26.32 ascon128abi32v12 33.54 33.59 33.62 ascon128bi32v12 37.88 37.98 38.02 T:schwaemm256128v2 38.81 38.89 38.92 T:grain128aeadv2 42.12 42.25 42.37 T:schwaemm128128v2 42.39 42.48 42.59 romulusn 44.14 44.30 44.45 T:giftcofb128v1 49.63 49.72 49.84 T:schwaemm192192v2 50.62 50.70 50.93 T:tinyjambu128v2 54.45 54.53 54.62 T:schwaemm256256v2 56.44 56.49 56.55 T:tinyjambu192v2 57.23 57.34 57.51 romulusm 59.32 59.42 59.52 T:tinyjambu256v2 74.00 74.48 74.55 romulust 79.18 79.23 79.62 T:isapa128av20 182.95 183.23 183.69 T:elephant200v2 226.84 227.21 228.09 T:isapk128av20 238.34 238.59 241.93 T:isapa128v20 997.54 999.02 999.60 T:isapk128v20 1137.30 1140.73 1141.29 T:isapxv20 8394.65 8400.13 8453.34 T:elephant176v2 9868.05 9870.56 9875.50 T:elephant160v2