VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Kaby Lake (906e9); 2017 Intel Xeon E3-1220 v6; 4 x 3000MHz; kizomba, supercop-20250922

[Page version: 20251103 11:56:58]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.04 1.05 1.06 T:aes128gcmv1 1.63 1.64 1.64 aes256gcmv1 7.41 7.44 7.48 ascon128av12 10.80 10.85 11.07 ascon128v12 10.92 10.96 11.08 ascon80pqv12 14.07? 15.50? 15.90? ascon128abi32v12 16.11 16.13 16.16 T:xoodyakround3 17.74 17.81 17.85 T:schwaemm256128v2 21.04 21.13 21.16 ascon128bi32v12 22.48 22.49 22.52 T:schwaemm256256v2 23.27 23.53 25.70 T:schwaemm192192v2 24.74 24.82 24.85 T:grain128aeadv2 25.72 25.77 25.83 T:schwaemm128128v2 38.57 38.60 38.65 romulusn 40.46 40.49 40.55 T:isapa128av20 41.43 41.47 41.51 T:giftcofb128v1 41.89 41.96 42.13 T:isapa128v20 60.33 60.38 60.43 T:tinyjambu128v2 61.84 61.94 61.97 romulusm 68.20 68.32 68.45 T:isapk128av20 72.81 72.86 72.90 T:tinyjambu192v2 79.02 79.07 79.11 T:tinyjambu256v2 91.20 91.35 91.50 T:isapk128v20 124.97 125.10 125.57 romulust 146.52 146.68 147.02 T:elephant200v2 184.11 184.55 185.41 T:isapxv20 7528.38 7529.93 7534.55 T:elephant176v2 8157.91 8163.27 8165.32 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.91 0.93 0.95 T:aes128gcmv1 1.56 1.56 1.58 aes256gcmv1 7.42 7.47 7.48 ascon128av12 10.89 10.94 10.97 ascon80pqv12 10.96 11.00 11.03 ascon128v12 13.83 13.87 13.90 ascon128abi32v12 15.66 15.72 15.77 T:xoodyakround3 17.78 17.82 17.89 T:schwaemm256128v2 20.93 20.95 20.97 ascon128bi32v12 22.48 22.50 22.51 T:schwaemm256256v2 23.40 23.52 23.75 T:schwaemm192192v2 25.34 25.39 25.48 T:grain128aeadv2 25.71 25.74 25.80 T:schwaemm128128v2 38.50 38.53 38.55 romulusn 40.43 40.50 40.56 T:isapa128av20 41.43 41.46 41.51 T:giftcofb128v1 41.92 42.04 42.18 T:isapa128v20 60.29 60.33 60.39 T:tinyjambu128v2 61.92 62.01 62.07 romulusm 68.20 68.33 68.53 T:isapk128av20 72.34 72.36 72.38 T:tinyjambu192v2 78.99 79.03 79.14 T:tinyjambu256v2 91.15 91.30 91.46 T:isapk128v20 124.99 125.14 125.56 romulust 146.54 146.73 147.09 T:elephant200v2 184.17 184.29 184.73 T:isapxv20 7527.92 7530.21 7534.72 T:elephant176v2 8158.76 8161.28 8164.82 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.92 0.93 0.94 T:aes128gcmv1 1.56 1.56 1.57 aes256gcmv1 7.38 7.46 7.49 ascon128av12 10.88 10.92 10.97 ascon80pqv12 10.97 10.99 11.02 ascon128v12 13.85 13.88 13.91 ascon128abi32v12 15.75 15.79 15.82 T:xoodyakround3 17.78 17.85 17.89 T:schwaemm256128v2 20.47 20.54 20.70 T:isapa128v20 20.93 20.94 20.96 ascon128bi32v12 22.48 22.50 22.52 T:schwaemm256256v2 23.41 23.51 23.90 T:schwaemm192192v2 25.34 25.39 25.48 T:grain128aeadv2 25.70 25.75 25.79 T:schwaemm128128v2 27.28 27.32 27.36 T:isapa128av20 38.50 38.53 38.56 romulusn 41.45 41.49 41.55 T:giftcofb128v1 42.58 42.67 42.72 romulust 45.18 45.27 45.33 T:isapk128av20 57.04 57.18 57.27 T:isapk128v20 60.26 60.30 60.34 T:tinyjambu128v2 61.95 62.01 62.09 romulusm 72.35 72.38 72.41 T:tinyjambu192v2 79.01 79.04 79.06 T:tinyjambu256v2 110.72 110.86 111.32 T:isapxv20 146.64 146.79 147.09 T:elephant200v2 7528.38 7531.01 7534.75 T:elephant176v2 8157.19 8162.11 8164.48 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.68 0.71 0.72 T:aes128gcmv1 1.00 1.01 1.02 aes256gcmv1 7.43 7.45 7.47 ascon128av12 10.85 10.87 10.90 ascon128v12 10.94 10.96 10.98 ascon80pqv12 11.97 12.01 12.03 T:xoodyakround3 13.77 13.80 13.85 ascon128abi32v12 17.64 17.66 17.70 T:schwaemm256128v2 20.55 20.69 20.83 ascon128bi32v12 22.37 22.39 22.41 T:schwaemm256256v2 23.14 23.32 25.52 T:schwaemm192192v2 24.78 24.88 24.90 T:grain128aeadv2 25.64 25.67 25.72 T:schwaemm128128v2 31.05 31.10 31.18 T:isapa128v20 31.03 31.10 31.42 romulusn 33.76 33.83 33.91 T:isapa128av20 41.40 41.42 41.44 T:giftcofb128v1 42.71 42.75 42.79 romulusm 49.32 49.36 49.41 T:tinyjambu128v2 56.65 56.70 56.75 T:isapk128av20 56.88 57.00 57.15 T:tinyjambu192v2 59.76 59.79 59.81 T:tinyjambu256v2 74.39 74.44 74.53 T:isapk128v20 83.70 83.76 83.93 romulust 110.27 110.43 110.78 T:elephant200v2 147.10 147.20 148.23 T:isapxv20 5624.77 5625.81 5627.18 T:elephant176v2 6120.67 6126.04 6271.20 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.62 0.65 0.66 T:aes128gcmv1 0.96 0.98 1.00 aes256gcmv1 7.24 7.26 7.42 ascon128av12 10.86 10.90 10.96 ascon80pqv12 10.92 10.97 11.07 ascon128v12 11.76 11.78 11.81 T:xoodyakround3 13.80 13.82 13.90 ascon128abi32v12 17.67 17.72 19.40 T:schwaemm256128v2 20.71 20.74 21.01 ascon128bi32v12 22.39 22.41 22.43 T:schwaemm256256v2 23.22 23.26 23.60 T:schwaemm192192v2 25.08 25.15 25.23 T:grain128aeadv2 25.65 25.70 25.75 T:schwaemm128128v2 31.01 31.05 31.19 romulusn 31.03 31.07 31.13 T:isapa128v20 33.79 33.88 33.92 T:isapa128av20 41.39 41.42 41.44 T:giftcofb128v1 42.71 42.76 42.79 romulusm 49.35 49.38 49.40 T:tinyjambu128v2 56.66 56.71 56.79 T:isapk128av20 56.77 56.79 56.89 T:tinyjambu192v2 59.79 59.81 59.84 T:tinyjambu256v2 74.33 74.41 74.57 T:isapk128v20 83.69 83.77 83.99 romulust 110.26 110.34 110.73 T:elephant200v2 147.09 147.22 147.59 T:isapxv20 5624.73 5625.45 5626.12 T:elephant176v2 6118.38 6120.45 6126.19 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.64 0.64 0.65 T:aes128gcmv1 0.98 0.98 0.99 aes256gcmv1 7.24 7.27 7.29 ascon128av12 10.88 10.90 10.92 ascon80pqv12 10.94 10.97 10.98 ascon128v12 11.80 11.82 11.83 T:xoodyakround3 13.81 13.82 13.88 ascon128abi32v12 17.68 17.71 17.78 T:schwaemm256128v2 20.33 20.37 20.46 T:isapa128v20 20.71 20.73 20.84 ascon128bi32v12 22.38 22.40 22.67 T:schwaemm256256v2 23.21 23.29 23.64 T:schwaemm192192v2 25.09 25.15 25.21 T:grain128aeadv2 25.62 25.65 25.74 T:schwaemm128128v2 27.23 27.25 27.27 T:isapa128av20 31.04 31.12 31.20 romulusn 41.39 41.42 41.46 T:giftcofb128v1 42.47 42.51 42.54 romulust 42.71 42.74 42.79 romulusm 45.17 45.21 45.23 T:isapk128av20 49.32 49.34 49.39 T:tinyjambu128v2 56.78 56.79 56.90 T:tinyjambu192v2 57.24 57.30 57.35 T:isapk128v20 59.75 59.78 59.80 T:tinyjambu256v2 110.26 110.33 110.75 T:elephant200v2 110.39 110.49 110.90 T:isapxv20 5625.23 5626.19 5626.76 T:elephant176v2 6119.85 6121.22 6121.57 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.36 0.37 0.38 T:aes128gcmv1 0.39 0.40 0.42 aes256gcmv1 7.42 7.45 7.47 ascon128av12 7.94 7.97 7.99 T:xoodyakround3 10.86 10.89 10.93 ascon128v12 10.90 10.94 10.97 ascon80pqv12 13.79 13.82 13.84 ascon128abi32v12 17.50 17.57 17.62 T:schwaemm256128v2 19.99 20.07 20.18 T:isapa128v20 20.47 20.59 21.00 ascon128bi32v12 22.26 22.27 22.29 T:schwaemm256256v2 22.88 23.13 25.35 T:schwaemm192192v2 23.46 23.52 24.24 romulusn 23.48 23.52 23.55 romulusm 24.76 24.86 24.88 T:grain128aeadv2 25.44 25.52 25.60 T:schwaemm128128v2 27.30 27.33 27.36 T:isapa128av20 38.33 38.35 38.38 T:tinyjambu128v2 40.47 40.50 40.52 T:tinyjambu256v2 41.20 41.22 41.43 T:tinyjambu192v2 41.31 41.35 41.39 T:giftcofb128v1 42.29 42.35 42.39 romulust 45.03 45.15 45.56 T:isapk128av20 57.32 57.44 57.53 T:isapk128v20 74.42 74.53 74.79 T:elephant200v2 110.06 110.52 111.20 T:isapxv20 3722.36 3740.78 3834.79 T:elephant176v2 4075.12 4080.32 4083.53 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.35 0.37 0.38 T:aes128gcmv1 0.37 0.40 0.41 aes256gcmv1 7.03 7.06 7.10 ascon128av12 7.92 7.95 7.98 T:xoodyakround3 10.80 10.82 10.84 ascon80pqv12 10.87 10.89 10.92 ascon128v12 13.79 13.81 13.84 ascon128abi32v12 17.46 17.52 17.59 T:schwaemm256128v2 19.99 20.08 20.16 T:isapa128v20 20.48 20.57 21.05 ascon128bi32v12 22.27 22.28 22.29 T:schwaemm256256v2 23.06 23.17 23.47 T:schwaemm192192v2 23.45 23.50 23.86 romulusn 23.46 23.51 23.56 romulusm 24.75 24.87 24.89 T:grain128aeadv2 25.47 25.54 25.59 T:schwaemm128128v2 27.29 27.31 27.36 T:isapa128av20 38.31 38.35 38.37 T:tinyjambu128v2 40.48 40.49 40.52 T:tinyjambu256v2 41.21 41.22 41.26 T:tinyjambu192v2 41.28 41.33 41.40 T:giftcofb128v1 42.34 42.38 42.42 romulust 45.06 45.13 45.22 T:isapk128av20 57.40 57.57 57.71 T:isapk128v20 74.47 74.56 74.82 T:elephant200v2 110.05 110.16 110.65 T:isapxv20 3718.02 3721.69 3723.50 T:elephant176v2 4077.68 4080.44 4082.57 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.36 0.37 0.38 T:aes128gcmv1 0.40 0.40 0.42 aes256gcmv1 7.04 7.06 7.08 ascon128av12 7.94 7.96 7.99 T:xoodyakround3 10.80 10.83 10.85 ascon80pqv12 10.87 10.90 10.91 ascon128v12 13.78 13.80 13.82 ascon128abi32v12 17.50 17.57 17.60 T:schwaemm256128v2 20.07 20.11 20.17 T:isapa128v20 20.48 20.54 21.01 ascon128bi32v12 22.25 22.27 22.28 T:schwaemm256256v2 23.05 23.16 23.42 T:schwaemm192192v2 23.47 23.52 23.57 romulusm 23.46 23.52 23.88 romulusn 24.75 24.88 24.90 T:grain128aeadv2 25.49 25.55 25.64 T:schwaemm128128v2 27.28 27.32 27.37 T:isapa128av20 38.30 38.37 38.44 T:tinyjambu128v2 40.47 40.49 40.52 T:tinyjambu256v2 41.20 41.21 41.23 T:tinyjambu192v2 41.32 41.36 41.40 T:giftcofb128v1 42.33 42.39 42.42 romulust 45.06 45.15 45.17 T:isapk128av20 57.32 57.45 57.55 T:isapk128v20 74.47 74.55 74.76 T:elephant200v2 110.10 110.23 110.67 T:isapxv20 3715.90 3721.53 3724.13 T:elephant176v2 4079.60 4080.70 4083.31 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.83 0.83 0.84 T:aes128gcmv1 1.17 1.18 1.18 aes256gcmv1 7.62? 7.67? 8.71? ascon128av12 11.03 11.06 11.10 ascon128v12 11.13 11.17 11.22 ascon80pqv12 12.11 12.14 12.14 T:xoodyakround3 14.10 14.12 14.16 ascon128abi32v12 18.18 18.20 18.26 T:schwaemm256128v2 20.86 20.89 21.01 ascon128bi32v12 22.99 23.00 23.01 T:schwaemm256256v2 23.78 23.84 25.81 T:schwaemm192192v2 25.18 25.26 25.29 T:grain128aeadv2 25.97 26.02 26.05 T:schwaemm128128v2 31.36 31.41 31.70 romulusn 36.31 36.33 36.39 T:isapa128av20 41.74 41.76 41.79 T:giftcofb128v1 43.03 43.09 43.11 romulusm 45.75 45.78 45.83 T:isapa128v20 49.75 49.77 49.82 T:tinyjambu128v2 57.41 57.53 59.53 T:tinyjambu192v2 60.24 60.25 60.38 T:tinyjambu256v2 63.37 63.41 63.45 T:isapk128av20 85.06 85.14 85.27 romulust 112.68 112.71 113.11 T:elephant200v2 128.26 128.33 128.35 T:isapk128v20 242.61 243.32 243.47 T:isapxv20 5665.50 5668.43 5670.06 T:elephant176v2 6187.95 6189.98 6191.43 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.76 0.77 0.78 T:aes128gcmv1 1.15 1.15 1.16 aes256gcmv1 7.46 7.55 8.10 ascon128av12 11.05 11.07 11.10 ascon80pqv12 11.13 11.15 11.20 ascon128v12 11.94 11.94 11.96 T:xoodyakround3 14.13 14.14 14.17 ascon128abi32v12 18.23 18.25 18.28 T:schwaemm256128v2 21.01 21.02 21.07 ascon128bi32v12 22.99 23.00 23.01 T:schwaemm256256v2 23.70 23.81 24.11 T:schwaemm192192v2 25.47 25.53 25.60 T:grain128aeadv2 25.97 26.03 26.06 T:schwaemm128128v2 31.33 31.37 31.49 romulusn 36.21 36.33 36.38 T:isapa128av20 41.74 41.76 41.79 T:giftcofb128v1 43.13 43.18 43.22 romulusm 45.73 45.79 45.88 T:isapa128v20 49.73 49.77 49.81 T:tinyjambu128v2 57.24 57.36 58.33 T:tinyjambu192v2 60.27 60.29 60.31 T:tinyjambu256v2 63.41 63.44 63.47 T:isapk128av20 85.04 85.11 85.29 romulust 112.73 112.87 113.10 T:elephant200v2 128.32 128.39 128.56 T:isapk128v20 242.47 242.85 243.22 T:isapxv20 5667.25 5668.79 5671.21 T:elephant176v2 6188.58 6190.88 6192.23 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.76 0.77 0.77 T:aes128gcmv1 1.14 1.15 1.15 aes256gcmv1 7.47? 7.78? 9.46? ascon128av12 11.06 11.08 11.12 ascon80pqv12 11.11 11.13 11.14 ascon128v12 11.94 11.96 11.98 T:xoodyakround3 14.11 14.13 14.14 ascon128abi32v12 18.21 18.25 18.30 T:schwaemm256128v2 21.00 21.03 21.24 ascon128bi32v12 22.99 23.00 23.01 T:schwaemm256256v2 23.75 23.84 24.01 T:schwaemm192192v2 25.48 25.54 25.59 T:grain128aeadv2 26.01 26.05 26.09 T:schwaemm128128v2 27.94 27.97 28.03 T:isapa128v20 28.64 28.67 28.69 T:isapa128av20 31.35 31.37 31.50 romulusn 41.74 41.75 41.79 T:giftcofb128v1 43.14 43.17 43.21 romulusm 43.70 43.77 43.81 romulust 49.08 49.11 49.17 T:isapk128av20 49.71 49.74 49.78 T:tinyjambu128v2 57.26 57.36 60.54 T:tinyjambu192v2 60.22 60.23 60.23 T:tinyjambu256v2 84.89 84.91 84.94 T:isapk128v20 112.75 112.83 113.15 T:elephant200v2 159.16 159.19 159.58 T:isapxv20 5666.22 5669.22 5671.32 T:elephant176v2 6188.31 6190.03 6190.87 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 4.88 4.91 5.05 T:aes128gcmv1 6.98 6.99 7.04 aes256gcmv1 11.66 11.84 12.23 ascon128av12 14.94 15.07 15.36 ascon128v12 14.84 15.16 15.38 ascon80pqv12 17.18 17.31 17.82 T:xoodyakround3 20.98 21.14 21.45 ascon128abi32v12 27.39 27.84 28.29 ascon128bi32v12 29.33 29.76 29.93 T:schwaemm256128v2 33.06 33.20 33.77 T:schwaemm128128v2 34.49 34.55 34.65 T:grain128aeadv2 36.55 36.60 36.67 T:schwaemm256256v2 38.42 38.59 38.89 romulusn 38.24 38.77 40.97 T:schwaemm192192v2 49.57 49.66 49.77 T:giftcofb128v1 50.80 50.97 51.24 romulusm 58.41 58.49 59.00 T:tinyjambu128v2 67.13 67.25 67.45 T:tinyjambu192v2 70.45 70.72 70.99 T:tinyjambu256v2 93.73 94.00 94.23 T:isapa128av20 114.61 115.10 115.49 romulust 161.34 161.83 162.38 T:elephant200v2 204.70 205.25 206.27 T:isapk128av20 382.33 383.20 385.41 T:isapa128v20 1349.90 1350.57 1351.01 T:isapk128v20 2406.02 2406.91 2407.72 T:isapxv20 7054.22 7055.99 7058.20 T:elephant176v2 8282.01 8284.95 8287.14 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 4.93 4.96 4.99 T:aes128gcmv1 6.73 6.76 6.82 aes256gcmv1 11.61 11.91 12.48 ascon128av12 15.03 15.16 15.48 ascon80pqv12 14.85 15.20 15.41 ascon128v12 17.33 17.68 17.91 T:xoodyakround3 20.91 21.14 21.77 ascon128abi32v12 27.50 27.62 28.05 ascon128bi32v12 29.50 29.82 30.16 T:schwaemm256128v2 33.12 33.25 33.34 T:schwaemm128128v2 34.61 34.71 34.77 T:grain128aeadv2 36.59 36.70 36.94 T:schwaemm256256v2 38.20 38.55 38.91 T:schwaemm192192v2 38.60 38.70 38.79 romulusn 49.64 49.68 49.84 T:giftcofb128v1 52.66 52.78 52.89 romulusm 58.41 58.47 58.75 T:tinyjambu128v2 67.28 67.43 67.55 T:tinyjambu192v2 70.45 70.55 70.82 T:tinyjambu256v2 92.38 93.92 94.29 T:isapa128av20 114.89 115.42 115.91 romulust 161.89 162.12 162.55 T:elephant200v2 205.47 206.07 207.06 T:isapk128av20 382.09 382.56 383.12 T:isapa128v20 1351.00 1351.50 1352.57 T:isapk128v20 2405.97 2406.15 2406.96 T:isapxv20 7053.98 7055.85 7058.58 T:elephant176v2 8283.63 8285.25 8290.52 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 4.95 4.95 4.99 T:aes128gcmv1 6.74 6.76 6.80 aes256gcmv1 11.58 11.72 11.91 ascon128av12 14.80 14.91 15.03 ascon128v12 14.88 15.01 15.20 ascon80pqv12 17.25 17.67 17.95 T:xoodyakround3 20.89 21.00 21.34 ascon128abi32v12 27.62 27.76 27.94 ascon128bi32v12 29.55 29.75 29.99 T:schwaemm256128v2 32.95 33.22 33.38 T:schwaemm128128v2 34.63 34.70 34.76 T:grain128aeadv2 36.55 36.64 36.92 T:schwaemm256256v2 37.88 38.32 38.62 T:schwaemm192192v2 38.52 38.62 38.71 romulusn 49.53 49.57 49.70 T:giftcofb128v1 52.58 52.61 52.86 romulusm 58.33 58.38 58.61 T:tinyjambu128v2 60.12 60.37 60.47 T:isapa128av20 67.24 67.38 67.49 T:tinyjambu192v2 70.38 70.44 70.52 T:tinyjambu256v2 71.40 71.75 72.17 romulust 128.88 129.41 129.84 T:isapk128av20 162.34 162.70 163.04 T:elephant200v2 201.05 201.38 201.98 T:isapa128v20 706.75 707.14 707.68 T:isapk128v20 1258.10 1258.60 1260.17 T:isapxv20 7054.23 7055.34 7056.77 T:elephant176v2 8282.60 8284.01 8285.36 T:elephant160v2