VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Xeon E3-1275 V2; 4 x 3500MHz; hydra8, supercop-20250922

[Page version: 20251103 11:56:58]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 2.53 2.57 2.58 T:aes128gcmv1 3.42 3.44 3.45 aes256gcmv1 8.62 8.63 8.66 ascon128av12 12.78 12.81 12.85 ascon128v12 12.85 12.87 12.89 ascon80pqv12 16.44 16.48 16.66 ascon128abi32v12 17.39 17.44 17.49 T:xoodyakround3 23.39 23.46 23.54 T:schwaemm256128v2 24.37 24.39 24.44 ascon128bi32v12 28.16 28.20 28.24 T:grain128aeadv2 30.89 30.92 30.98 T:schwaemm192192v2 33.29 33.35 33.39 T:schwaemm128128v2 34.05 34.08 34.11 T:schwaemm256256v2 36.22 36.26 36.51 romulusn 44.72 44.74 44.80 T:giftcofb128v1 47.94 48.28 48.34 T:isapa128v20 50.69 50.74 50.79 T:isapa128av20 50.83 50.88 50.90 T:tinyjambu128v2 57.16 57.22 57.29 T:tinyjambu192v2 59.28 59.31 59.35 T:tinyjambu256v2 59.50 59.74 59.90 romulusm 90.86 91.09 91.26 T:isapk128av20 120.76 121.17 121.96 T:isapk128v20 126.30 126.44 126.56 romulust 183.04 183.11 183.17 T:elephant200v2 190.44 190.81 191.65 T:isapxv20 9216.68 9222.29 9254.34 T:elephant176v2 10530.58 10531.40 10532.85 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 3.10 3.13 3.15 T:aes128gcmv1 3.43 3.45 3.48 aes256gcmv1 8.53 8.55 8.63 ascon128av12 12.82 12.83 12.86 ascon128v12 12.81 12.86 12.86 ascon80pqv12 16.64 16.67 16.69 ascon128abi32v12 17.32 17.37 17.55 T:xoodyakround3 23.34 23.40 23.43 T:schwaemm256128v2 24.12 24.14 24.17 ascon128bi32v12 29.13 29.17 29.20 T:grain128aeadv2 30.82 30.88 30.92 T:schwaemm192192v2 33.32 33.35 33.40 T:schwaemm128128v2 34.23 34.26 34.29 T:schwaemm256256v2 36.39 36.45 36.69 romulusn 44.75 44.80 44.83 T:giftcofb128v1 47.93 48.29 48.40 T:isapa128v20 50.68 50.75 50.82 T:isapa128av20 51.00 51.04 51.06 T:tinyjambu128v2 57.86 57.90 57.93 T:tinyjambu192v2 59.63 59.71 59.88 romulusm 59.93 59.96 60.02 T:tinyjambu256v2 91.04 91.17 91.30 T:isapk128av20 121.13 121.49 122.17 T:isapk128v20 126.29 126.33 126.44 romulust 182.93 183.04 183.11 T:elephant200v2 189.54 190.71 191.75 T:isapxv20 9214.58 9222.18 9257.24 T:elephant176v2 10530.96 10531.97 10532.96 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 3.12 3.13 3.14 T:aes128gcmv1 3.44 3.45 3.47 aes256gcmv1 8.50 8.54 8.55 ascon128av12 12.81 12.83 12.85 ascon128v12 12.80 12.84 12.85 ascon80pqv12 16.65 16.69 16.76 ascon128abi32v12 17.26 17.31 17.58 T:xoodyakround3 23.33 23.39 23.44 T:schwaemm256128v2 23.92 24.01 24.15 T:isapa128v20 24.12 24.15 24.17 ascon128bi32v12 29.15 29.18 29.22 T:grain128aeadv2 30.80 30.87 30.93 T:schwaemm192192v2 33.31 33.36 33.45 T:schwaemm128128v2 34.24 34.26 34.29 T:schwaemm256256v2 34.31 34.36 34.42 T:isapa128av20 36.43 36.54 36.69 romulusn 43.25 43.30 43.38 romulust 44.74 44.79 44.83 T:giftcofb128v1 50.98 51.05 51.09 T:tinyjambu128v2 57.85 57.93 58.02 T:tinyjambu192v2 59.58 59.65 59.94 romulusm 59.88 59.93 59.97 T:tinyjambu256v2 61.02 61.09 61.16 T:isapk128av20 75.47 75.59 75.70 T:isapk128v20 112.04 112.34 112.62 T:isapxv20 183.00 183.05 183.16 T:elephant200v2 9215.59 9220.90 9256.57 T:elephant176v2 10530.62 10531.94 10533.46 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 2.15 2.19 2.21 T:aes128gcmv1 2.61 2.63 2.64 aes256gcmv1 8.54 8.57 8.59 ascon128av12 12.68 12.72 12.75 ascon80pqv12 12.69 12.72 12.75 ascon128v12 13.21 13.24 13.32 T:xoodyakround3 16.54 16.57 16.60 ascon128abi32v12 23.22 23.25 23.31 T:schwaemm256128v2 24.17 24.22 24.23 ascon128bi32v12 28.05 28.07 28.09 T:grain128aeadv2 29.78 29.83 29.98 romulusn 30.69 30.75 30.78 T:schwaemm192192v2 33.23 33.25 33.30 T:schwaemm128128v2 33.85 33.86 33.87 T:schwaemm256256v2 35.84 35.96 36.27 T:isapa128v20 40.87 40.93 40.94 T:tinyjambu128v2 41.37 41.49 41.59 romulusm 42.53 42.57 42.59 T:isapa128av20 44.43 44.46 44.50 T:tinyjambu192v2 44.53 44.57 44.59 T:tinyjambu256v2 44.69 44.73 44.78 T:giftcofb128v1 75.90 75.98 76.04 T:isapk128av20 84.64 84.72 84.84 romulust 98.21 98.48 98.67 T:isapk128v20 136.64 136.68 136.76 T:elephant200v2 151.43 151.66 152.36 T:isapxv20 6885.92 6889.55 6916.31 T:elephant176v2 7891.97 7892.87 7894.15 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 2.43 2.47 2.48 T:aes128gcmv1 2.61 2.65 2.66 aes256gcmv1 8.52 8.55 8.59 ascon128av12 12.72 12.74 12.76 ascon128v12 12.76 12.82 12.86 ascon80pqv12 13.03 13.06 13.08 T:xoodyakround3 16.81 16.84 16.87 ascon128abi32v12 23.23 23.25 23.29 T:schwaemm256128v2 24.11 24.15 24.33 ascon128bi32v12 28.41 28.67 28.70 T:grain128aeadv2 29.87 29.92 29.98 romulusn 30.64 30.70 30.74 T:schwaemm192192v2 33.20 33.24 33.29 T:schwaemm128128v2 33.93 33.96 33.97 T:schwaemm256256v2 35.61 35.86 36.14 T:isapa128v20 40.97 40.98 41.01 T:tinyjambu128v2 41.45 41.50 41.61 romulusm 42.52 42.55 42.60 T:isapa128av20 44.70 44.73 44.75 T:giftcofb128v1 44.85 44.88 44.91 T:tinyjambu256v2 44.89 44.92 44.95 T:tinyjambu192v2 75.96 76.04 76.12 T:isapk128av20 84.59 84.65 84.68 romulust 98.42 98.52 98.61 T:isapk128v20 136.66 136.70 136.73 T:elephant200v2 150.95 151.56 152.03 T:isapxv20 6885.92 6889.56 6917.27 T:elephant176v2 7891.78 7892.90 7893.84 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 2.46 2.47 2.47 T:aes128gcmv1 2.64 2.64 2.65 aes256gcmv1 8.49 8.51 8.57 ascon128av12 12.72 12.75 12.77 ascon128v12 12.75 12.80 12.83 ascon80pqv12 13.07 13.11 13.21 T:xoodyakround3 16.83 16.84 16.88 ascon128abi32v12 23.21 23.27 23.30 T:schwaemm256128v2 23.50 23.62 23.69 T:isapa128v20 24.09 24.11 24.31 ascon128bi32v12 28.43 28.70 28.73 T:grain128aeadv2 29.86 29.88 29.97 romulusn 30.65 30.70 30.74 T:schwaemm192192v2 33.20 33.26 33.30 T:schwaemm128128v2 33.94 33.96 33.99 T:schwaemm256256v2 34.34 34.36 34.39 T:isapa128av20 40.97 40.99 41.01 T:tinyjambu128v2 41.44 41.54 41.66 romulusm 43.07 43.11 43.18 romulust 44.72 44.74 44.76 T:giftcofb128v1 44.84 44.87 44.89 T:tinyjambu256v2 44.86 44.90 44.94 T:tinyjambu192v2 60.91 60.96 61.03 T:isapk128av20 75.36 75.62 75.68 T:isapk128v20 112.18 112.38 112.52 T:isapxv20 136.64 136.68 136.71 T:elephant200v2 6885.45 6889.82 6917.56 T:elephant176v2 7891.85 7892.63 7893.45 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 1.79 1.82 1.83 T:aes128gcmv1 1.79 1.82 1.83 aes256gcmv1 8.48 8.51 8.54 ascon128av12 8.87 8.92 8.99 T:xoodyakround3 12.47 12.48 12.51 ascon80pqv12 12.61 12.66 12.68 ascon128v12 16.48 16.51 16.56 ascon128abi32v12 23.03 23.10 23.13 T:schwaemm256128v2 23.25 23.32 23.44 romulusm 23.30 23.33 23.41 romulusn 23.71 23.76 23.77 T:isapa128v20 23.98 24.00 24.02 ascon128bi32v12 27.91 27.95 27.97 T:grain128aeadv2 29.78 29.82 29.85 T:tinyjambu256v2 30.51 30.55 30.60 T:schwaemm192192v2 30.96 30.97 30.98 T:tinyjambu128v2 31.70 31.76 31.79 T:tinyjambu192v2 33.13 33.21 33.26 T:schwaemm128128v2 33.61 33.63 33.66 T:schwaemm256256v2 34.28 34.33 34.37 T:isapa128av20 42.89 42.98 43.09 romulust 44.61 44.68 44.72 T:giftcofb128v1 60.74 60.93 61.03 T:isapk128av20 75.54 75.61 75.69 T:isapk128v20 92.30 92.33 92.36 T:elephant200v2 112.43 112.82 113.46 T:isapxv20 4553.25 4556.30 4571.67 T:elephant176v2 5259.12 5260.18 5260.94 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 1.80 1.82 1.83 T:aes128gcmv1 1.80 1.84 1.86 aes256gcmv1 8.46 8.48 8.55 ascon128av12 8.91 8.94 8.97 T:xoodyakround3 12.60 12.63 12.68 ascon128v12 12.77 12.80 12.86 ascon80pqv12 17.00 17.02 17.05 ascon128abi32v12 23.09 23.14 23.17 T:schwaemm256128v2 23.26 23.29 23.32 romulusn 23.24 23.32 23.41 romulusm 23.56 23.62 23.77 T:isapa128v20 24.11 24.15 24.50 ascon128bi32v12 27.73 28.17 28.21 T:grain128aeadv2 29.78 29.80 29.84 T:tinyjambu256v2 30.48 30.55 30.59 T:schwaemm192192v2 30.94 30.96 30.99 T:tinyjambu128v2 31.90 31.95 31.98 T:tinyjambu192v2 33.00 33.09 33.15 T:schwaemm128128v2 33.62 33.64 33.66 T:schwaemm256256v2 34.31 34.34 34.43 T:isapa128av20 42.94 42.99 43.05 romulust 44.64 44.68 44.75 T:giftcofb128v1 60.73 60.90 60.98 T:isapk128av20 75.51 75.67 75.74 T:isapk128v20 92.28 92.32 92.36 T:elephant200v2 111.89 112.41 112.87 T:isapxv20 4552.87 4556.23 4572.52 T:elephant176v2 5257.90 5259.01 5260.08 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 1.81 1.81 1.82 T:aes128gcmv1 1.82 1.83 1.85 aes256gcmv1 8.46 8.47 8.48 ascon128av12 8.90 8.94 8.97 T:xoodyakround3 12.62 12.64 12.66 ascon128v12 12.54 12.79 12.86 ascon80pqv12 16.99 17.01 17.03 ascon128abi32v12 23.10 23.13 23.15 T:schwaemm256128v2 23.29 23.31 23.34 romulusn 23.30 23.38 23.43 romulusm 23.65 23.73 23.78 T:isapa128v20 24.11 24.14 24.53 ascon128bi32v12 27.70 28.17 28.22 T:grain128aeadv2 29.77 29.81 29.85 T:tinyjambu256v2 30.50 30.54 30.59 T:schwaemm192192v2 30.92 30.95 30.98 T:tinyjambu128v2 31.93 31.95 32.00 T:tinyjambu192v2 33.04 33.09 33.23 T:schwaemm128128v2 33.62 33.65 33.66 T:schwaemm256256v2 34.29 34.36 34.41 T:isapa128av20 42.88 42.96 43.09 romulust 44.65 44.70 44.75 T:giftcofb128v1 60.82 60.91 61.05 T:isapk128av20 75.49 75.61 75.66 T:isapk128v20 92.30 92.34 92.37 T:elephant200v2 111.90 112.39 112.95 T:isapxv20 4553.18 4555.91 4572.27 T:elephant176v2 5258.36 5259.58 5261.03 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 2.40 2.41 2.43 T:aes128gcmv1 2.86 2.86 2.87 aes256gcmv1 8.77 8.79 8.81 ascon128av12 12.82 12.88 12.94 ascon80pqv12 12.92 12.94 12.96 ascon128v12 13.35 13.37 13.42 T:xoodyakround3 16.94 16.97 16.99 ascon128abi32v12 23.89 23.93 23.96 T:schwaemm256128v2 24.60 24.62 24.64 ascon128bi32v12 28.51 28.52 28.54 T:grain128aeadv2 30.12 30.17 30.28 romulusn 31.38 31.40 31.44 T:schwaemm192192v2 33.69 33.72 33.79 T:schwaemm128128v2 34.77 34.77 34.78 T:schwaemm256256v2 41.21 41.24 41.27 T:tinyjambu128v2 41.76 41.82 41.95 romulusm 44.80 44.82 44.84 T:tinyjambu192v2 44.91 44.92 44.95 T:tinyjambu256v2 45.08 45.10 45.13 T:giftcofb128v1 45.40 45.42 45.50 T:isapa128av20 52.78 52.94 53.09 T:isapa128v20 85.96 86.01 86.12 romulust 87.18 87.21 87.25 T:isapk128av20 139.56 139.58 139.64 T:elephant200v2 173.83 174.13 174.21 T:isapk128v20 246.15 246.36 246.85 T:isapxv20 6939.46 6942.76 6967.70 T:elephant176v2 7980.95 7981.98 7982.58 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 2.68 2.68 2.69 T:aes128gcmv1 2.89 2.90 2.90 aes256gcmv1 8.74 8.76 8.78 ascon128av12 12.93 12.96 12.97 ascon128v12 13.00 13.02 13.03 ascon80pqv12 13.24 13.28 13.31 T:xoodyakround3 17.23 17.25 17.26 ascon128abi32v12 23.92 23.94 24.00 T:schwaemm256128v2 24.54 24.57 24.72 ascon128bi32v12 28.89 29.13 29.15 T:grain128aeadv2 30.20 30.26 30.33 romulusn 31.33 31.38 31.40 T:schwaemm192192v2 33.65 33.68 33.71 T:schwaemm128128v2 34.85 34.85 34.87 T:schwaemm256256v2 41.30 41.31 41.34 T:tinyjambu128v2 41.90 41.96 42.05 romulusm 45.11 45.12 45.15 T:giftcofb128v1 45.19 45.21 45.25 T:tinyjambu256v2 45.22 45.25 45.28 T:tinyjambu192v2 45.46 45.48 45.53 T:isapa128av20 52.72 52.78 52.99 T:isapa128v20 85.93 85.96 86.01 romulust 87.14 87.18 87.23 T:isapk128av20 139.58 139.60 139.62 T:elephant200v2 173.81 173.85 174.06 T:isapk128v20 246.04 246.72 246.77 T:isapxv20 6939.61 6942.32 6966.88 T:elephant176v2 7981.39 7981.87 7982.47 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 2.67 2.68 2.68 T:aes128gcmv1 2.89 2.89 2.90 aes256gcmv1 8.71 8.72 8.75 ascon128av12 12.93 12.95 12.96 ascon128v12 12.98 13.02 13.05 ascon80pqv12 13.28 13.29 13.34 T:xoodyakround3 17.22 17.25 17.26 ascon128abi32v12 23.92 23.93 23.96 T:schwaemm256128v2 24.54 24.55 24.73 ascon128bi32v12 28.92 29.14 29.16 T:grain128aeadv2 30.20 30.23 30.32 romulusn 31.35 31.36 31.39 T:schwaemm192192v2 32.37 32.37 32.43 T:isapa128v20 33.65 33.69 33.73 T:schwaemm128128v2 34.85 34.86 34.87 T:schwaemm256256v2 36.00 36.03 36.09 T:isapa128av20 41.28 41.30 41.35 T:tinyjambu128v2 41.90 41.97 42.03 romulusm 44.32 44.35 44.42 romulust 45.10 45.12 45.15 T:giftcofb128v1 45.20 45.22 45.24 T:tinyjambu256v2 45.21 45.24 45.27 T:tinyjambu192v2 68.04 68.07 68.11 T:isapk128av20 114.94 114.96 115.08 T:isapk128v20 139.57 139.59 139.62 T:elephant200v2 160.82 161.02 161.09 T:isapxv20 6939.41 6942.45 6967.33 T:elephant176v2 7981.11 7982.08 7983.33 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 9.75 9.82 10.04 T:aes128gcmv1 10.41 10.47 10.77 aes256gcmv1 13.40 13.42 13.83 ascon128av12 17.15 17.24 17.59 ascon80pqv12 17.50 17.69 17.76 ascon128v12 19.45 19.66 20.32 T:xoodyakround3 25.27 25.37 25.62 ascon128abi32v12 34.00 34.16 34.24 ascon128bi32v12 37.45 37.57 37.76 romulusn 38.82 38.91 39.11 T:grain128aeadv2 39.05 39.11 39.26 T:schwaemm256128v2 43.22 43.44 43.73 T:schwaemm128128v2 48.54 48.79 48.90 T:tinyjambu128v2 49.84 50.04 50.28 romulusm 50.61 50.80 50.99 T:schwaemm192192v2 52.64 52.74 52.92 T:tinyjambu192v2 52.83 52.98 53.32 T:tinyjambu256v2 53.66 53.85 54.06 T:giftcofb128v1 55.16 55.27 55.48 T:schwaemm256256v2 111.16 111.55 111.88 T:isapa128av20 115.37 115.59 116.53 romulust 197.88 198.38 198.83 T:elephant200v2 326.29 326.69 327.20 T:isapk128av20 441.05 441.55 442.81 T:isapa128v20 1883.51 1891.00 1892.91 T:isapk128v20 2393.28 2397.03 2400.36 T:isapxv20 8641.05 8646.71 8658.65 T:elephant176v2 10687.88 10692.81 10695.14 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 9.95 10.08 10.27 T:aes128gcmv1 10.78 10.89 11.13 aes256gcmv1 13.41 13.48 13.79 ascon128av12 17.34 17.34 17.59 ascon80pqv12 17.52 17.72 18.06 ascon128v12 19.45 19.69 20.00 T:xoodyakround3 25.94 25.98 26.37 ascon128abi32v12 34.13 34.29 34.62 ascon128bi32v12 37.77 37.82 38.06 romulusn 39.02 39.11 39.39 T:schwaemm256128v2 39.23 39.39 39.65 T:grain128aeadv2 43.03 43.15 43.69 T:schwaemm128128v2 48.84 48.95 49.13 T:tinyjambu128v2 50.86 50.91 51.12 T:schwaemm192192v2 51.96 52.17 52.34 romulusm 53.20 53.25 53.55 T:tinyjambu256v2 53.05 53.33 53.52 T:tinyjambu192v2 53.71 53.84 53.93 T:giftcofb128v1 55.10 55.26 55.59 T:schwaemm256256v2 111.38 111.58 111.96 T:isapa128av20 115.72 115.91 116.08 romulust 197.89 198.23 198.53 T:elephant200v2 323.85 324.48 325.11 T:isapk128av20 441.26 441.66 447.61 T:isapa128v20 1882.12 1883.87 1885.11 T:isapk128v20 2401.78 2409.23 2409.67 T:isapxv20 8645.09 8649.66 8663.29 T:elephant176v2 10685.43 10690.88 10694.20 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 9.80 9.87 9.99 T:aes128gcmv1 10.76 10.90 11.05 aes256gcmv1 13.34 13.53 13.63 ascon128av12 17.28 17.34 17.52 ascon80pqv12 17.44 17.48 17.53 ascon128v12 19.60 19.89 20.14 T:xoodyakround3 25.92 26.03 26.09 ascon128abi32v12 34.04 34.14 34.39 ascon128bi32v12 37.73 37.80 37.95 romulusn 38.96 39.09 39.12 T:schwaemm256128v2 39.23 39.31 39.52 T:grain128aeadv2 43.05 43.13 43.32 T:schwaemm128128v2 48.70 48.74 48.84 T:tinyjambu128v2 50.77 50.85 51.28 T:schwaemm192192v2 51.84 51.98 52.19 romulusm 53.05 53.17 53.35 T:tinyjambu256v2 53.12 53.21 53.36 T:tinyjambu192v2 53.61 53.82 53.99 T:giftcofb128v1 55.22 55.28 55.44 T:schwaemm256256v2 72.80 73.04 73.30 romulust 73.79 74.15 74.32 T:isapa128av20 197.84 197.99 198.39 T:elephant200v2 217.23 217.66 218.08 T:isapk128av20 234.05 234.44 234.80 T:isapa128v20 1002.28 1002.62 1003.29 T:isapk128v20 1255.66 1259.50 1260.84 T:isapxv20 8642.90 8645.74 8666.91 T:elephant176v2 10686.78 10689.08 10692.48 T:elephant160v2