VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Bulldozer (600f20); 2012 AMD FX-8350; 4 x 4000MHz; saber214, supercop-20250922

[Page version: 20251103 11:56:58]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 3.14 3.15 3.18 T:aes128gcmv1 3.42 3.46 3.48 aes256gcmv1 9.43 9.45 9.47 ascon128av12 14.12 14.12 14.12 ascon80pqv12 14.13 14.13 14.13 ascon128v12 20.77 20.77 20.77 ascon128abi32v12 22.11 22.18 22.28 T:xoodyakround3 28.35 28.36 28.36 ascon128bi32v12 29.16 29.20 29.20 T:schwaemm256128v2 32.26 32.37 32.40 T:schwaemm256256v2 39.09 39.09 39.15 T:schwaemm192192v2 42.46 42.50 42.53 T:grain128aeadv2 47.82 47.92 47.94 T:giftcofb128v1 48.23 48.36 48.51 T:schwaemm128128v2 56.34 56.34 56.35 T:isapa128v20 56.42 56.49 56.57 T:isapa128av20 71.97 71.98 72.00 romulusn 79.55 79.56 79.58 T:tinyjambu128v2 102.91 102.92 102.96 T:tinyjambu192v2 105.98 106.09 106.16 T:isapk128av20 113.86 113.86 113.95 T:tinyjambu256v2 114.87 115.15 116.18 romulusm 140.02 140.43 141.00 T:isapk128v20 233.28 233.30 233.41 romulust 255.16 256.39 261.75 T:elephant200v2 282.52 282.68 283.94 T:isapxv20 14477.20 14478.41 14486.47 T:elephant160v2 14732.85 14735.67 14738.63 T:elephant176v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 3.14 3.15 3.15 T:aes128gcmv1 3.40 3.41 3.45 aes256gcmv1 9.42 9.42 9.42 ascon128av12 14.09 14.09 14.10 ascon128v12 14.11 14.12 14.13 ascon80pqv12 20.72 20.73 20.75 ascon128abi32v12 21.49 21.54 21.56 T:xoodyakround3 28.58 28.60 28.61 ascon128bi32v12 29.44 29.46 29.47 T:schwaemm256128v2 32.47 32.53 32.58 T:schwaemm256256v2 38.94 38.99 39.02 T:schwaemm192192v2 44.44 44.49 44.75 T:grain128aeadv2 48.14 48.20 48.26 T:schwaemm128128v2 48.21 48.22 48.25 T:giftcofb128v1 56.34 56.36 56.38 T:isapa128v20 56.40 56.51 56.54 T:isapa128av20 72.31 72.32 72.33 romulusn 80.65 80.68 80.79 T:tinyjambu128v2 102.83 102.86 102.88 T:tinyjambu192v2 105.93 106.14 106.30 T:isapk128av20 114.50 114.52 114.54 T:tinyjambu256v2 115.36 115.55 116.70 romulusm 140.38 140.53 140.65 T:isapk128v20 233.30 233.31 233.33 romulust 254.74 256.34 261.22 T:elephant200v2 282.53 283.87 283.96 T:isapxv20 14480.43 14487.67 14492.46 T:elephant160v2 14730.23 14734.18 14739.84 T:elephant176v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 3.13 3.14 3.15 T:aes128gcmv1 3.42 3.43 3.44 aes256gcmv1 9.42 9.42 9.42 ascon128av12 14.09 14.09 14.10 ascon128v12 14.13 14.13 14.15 ascon80pqv12 20.73 20.75 20.75 ascon128abi32v12 21.58 21.62 21.63 T:xoodyakround3 28.17 28.17 28.18 T:isapa128v20 28.59 28.60 28.60 ascon128bi32v12 29.43 29.44 29.46 T:schwaemm256128v2 32.47 32.54 32.56 T:schwaemm256256v2 37.23 37.28 37.32 T:isapa128av20 38.95 38.98 39.01 T:schwaemm192192v2 44.41 44.47 44.71 T:grain128aeadv2 48.14 48.16 48.25 T:schwaemm128128v2 48.22 48.25 48.26 T:giftcofb128v1 70.21 70.23 70.28 T:isapk128av20 72.30 72.30 72.32 romulusn 78.06 78.14 78.19 romulust 80.65 80.70 80.78 T:tinyjambu128v2 86.74 86.90 86.99 T:isapk128v20 102.84 102.86 102.89 T:tinyjambu192v2 114.49 114.52 114.54 T:tinyjambu256v2 115.11 115.65 116.73 romulusm 167.79 167.81 167.85 T:isapxv20 255.23 256.17 261.44 T:elephant200v2 14473.79 14482.38 14488.67 T:elephant160v2 14732.16 14734.51 14739.88 T:elephant176v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 2.29 2.31 2.33 T:aes128gcmv1 2.41 2.44 2.46 aes256gcmv1 9.35 9.36 9.37 ascon128av12 14.00 14.01 14.02 ascon128v12 14.00 14.02 14.02 ascon80pqv12 16.58 16.61 16.70 T:xoodyakround3 19.80 19.82 19.83 ascon128abi32v12 28.22 28.24 28.25 ascon128bi32v12 29.12 29.16 29.16 T:schwaemm256128v2 32.06 32.09 32.13 T:schwaemm256256v2 39.12 39.13 39.13 T:schwaemm192192v2 42.24 42.26 42.27 T:isapa128v20 42.69 42.70 42.72 T:grain128aeadv2 46.87 46.95 47.15 T:isapa128av20 47.28 47.84 48.03 T:giftcofb128v1 48.03 48.10 48.22 T:schwaemm128128v2 57.56 57.64 58.25 romulusn 64.05 64.07 64.09 T:tinyjambu128v2 78.88 79.13 80.26 romulusm 80.25 80.26 80.28 T:tinyjambu192v2 85.41 85.44 85.46 T:tinyjambu256v2 87.98 88.11 88.14 T:isapk128av20 113.89 114.00 114.11 T:isapk128v20 155.63 155.69 155.73 romulust 192.84 192.88 195.94 T:elephant200v2 224.82 225.28 225.80 T:isapxv20 10855.87 10858.11 10864.56 T:elephant160v2 11006.63 11008.04 11010.80 T:elephant176v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 2.28 2.30 2.32 T:aes128gcmv1 2.42 2.45 2.46 aes256gcmv1 9.34 9.34 9.35 ascon128av12 14.00 14.00 14.00 ascon128v12 14.01 14.01 14.02 ascon80pqv12 16.29 16.33 16.49 T:xoodyakround3 19.81 19.81 19.81 ascon128abi32v12 28.26 28.26 28.26 ascon128bi32v12 29.26 29.27 29.28 T:schwaemm256128v2 32.19 32.20 32.22 T:schwaemm256256v2 39.06 39.06 39.13 T:schwaemm192192v2 42.27 42.27 42.28 T:isapa128v20 43.80 43.83 43.84 T:grain128aeadv2 46.93 46.95 47.25 T:isapa128av20 48.06 48.09 48.15 T:schwaemm128128v2 47.72 48.12 48.17 T:giftcofb128v1 57.72 57.87 58.41 romulusn 64.56 64.61 64.65 T:tinyjambu128v2 78.99 79.39 80.59 romulusm 79.98 80.00 80.02 T:tinyjambu192v2 85.61 85.73 85.75 T:tinyjambu256v2 87.83 88.04 88.11 T:isapk128av20 113.52 114.01 114.10 T:isapk128v20 155.67 155.70 155.74 romulust 192.60 192.68 193.30 T:elephant200v2 225.11 225.73 225.95 T:isapxv20 10853.33 10857.87 10862.65 T:elephant160v2 11005.79 11008.70 11013.80 T:elephant176v2

Cycles/byte for long+long forgery 25% 50% 75% aead 2.29 2.30 2.31 T:aes128gcmv1 2.44 2.44 2.45 aes256gcmv1 9.34 9.34 9.35 ascon128av12 13.99 14.00 14.01 ascon128v12 14.02 14.02 14.03 ascon80pqv12 16.35 16.38 16.49 T:xoodyakround3 19.82 19.82 19.82 ascon128abi32v12 28.16 28.18 28.18 T:isapa128v20 28.26 28.26 28.26 ascon128bi32v12 29.27 29.27 29.28 T:schwaemm256128v2 32.18 32.20 32.22 T:schwaemm256256v2 37.29 37.35 37.63 T:isapa128av20 39.06 39.06 39.13 T:schwaemm192192v2 43.82 43.82 43.84 T:grain128aeadv2 47.71 47.99 48.12 T:giftcofb128v1 48.06 48.09 48.18 T:schwaemm128128v2 57.70 57.86 58.43 romulusn 64.57 64.61 64.66 T:tinyjambu128v2 70.04 70.10 70.13 T:isapk128av20 78.08 78.11 78.15 romulust 79.25 79.42 80.58 romulusm 79.99 80.02 80.12 T:tinyjambu192v2 85.66 85.73 85.76 T:tinyjambu256v2 87.07 87.19 87.23 T:isapk128v20 167.66 167.69 167.83 T:isapxv20 192.80 192.95 194.07 T:elephant200v2 10855.10 10860.64 10863.20 T:elephant160v2 11004.45 11007.99 11010.29 T:elephant176v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 1.50 1.50 1.50 aes256gcmv1 1.49 1.51 1.51 T:aes128gcmv1 9.25 9.26 9.28 ascon128av12 11.09 11.15 11.20 T:xoodyakround3 13.90 13.90 13.90 ascon128v12 13.90 13.90 13.90 ascon80pqv12 18.87 18.87 18.87 ascon128abi32v12 28.06 28.14 28.20 ascon128bi32v12 28.14 28.17 28.17 T:isapa128v20 29.07 29.11 29.11 T:schwaemm256128v2 31.81 31.85 31.92 T:schwaemm256256v2 37.38 37.39 37.90 T:isapa128av20 39.08 39.11 39.17 T:schwaemm192192v2 42.89 42.92 42.93 T:grain128aeadv2 42.78 42.94 44.04 romulusm 43.07 43.25 44.47 romulusn 47.90 47.98 48.09 T:schwaemm128128v2 46.56 48.05 48.13 T:giftcofb128v1 48.53 48.57 48.57 T:tinyjambu128v2 56.92 56.92 56.99 T:tinyjambu256v2 57.55 57.57 57.79 T:tinyjambu192v2 69.65 69.95 70.05 T:isapk128av20 78.04 78.05 78.07 romulust 87.15 87.32 87.44 T:isapk128v20 129.75 130.25 132.68 T:elephant200v2 167.53 167.56 167.59 T:isapxv20 7235.37 7237.49 7240.86 T:elephant160v2 7278.28 7279.23 7283.77 T:elephant176v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 1.45 1.48 1.49 T:aes128gcmv1 1.45 1.48 1.49 aes256gcmv1 9.26 9.27 9.27 ascon128av12 11.09 11.10 11.12 T:xoodyakround3 13.89 13.90 13.91 ascon128v12 13.90 13.90 13.91 ascon80pqv12 18.88 18.88 18.89 ascon128abi32v12 27.98 28.05 28.14 ascon128bi32v12 28.16 28.17 28.17 T:isapa128v20 29.07 29.10 29.11 T:schwaemm256128v2 31.78 31.86 31.94 T:schwaemm256256v2 37.21 37.30 38.00 T:isapa128av20 39.11 39.11 39.29 T:schwaemm192192v2 42.70 42.94 44.11 romulusm 42.91 42.94 42.96 T:grain128aeadv2 42.99 43.36 44.49 romulusn 47.85 47.92 48.07 T:schwaemm128128v2 48.04 48.04 48.05 T:giftcofb128v1 48.53 48.54 48.55 T:tinyjambu128v2 56.96 56.97 56.98 T:tinyjambu256v2 57.13 57.14 57.15 T:tinyjambu192v2 69.85 70.07 70.37 T:isapk128av20 78.02 78.06 78.06 romulust 86.92 87.33 87.37 T:isapk128v20 129.54 130.26 133.21 T:elephant200v2 167.54 167.55 167.61 T:isapxv20 7233.42 7236.77 7238.31 T:elephant160v2 7278.73 7280.64 7285.08 T:elephant176v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 1.46 1.48 1.48 T:aes128gcmv1 1.48 1.48 1.48 aes256gcmv1 9.26 9.26 9.27 ascon128av12 11.09 11.12 11.19 T:xoodyakround3 13.90 13.90 13.90 ascon128v12 13.90 13.90 13.92 ascon80pqv12 18.88 18.89 18.90 ascon128abi32v12 27.99 28.05 28.11 ascon128bi32v12 28.13 28.17 28.20 T:isapa128v20 29.07 29.11 29.11 T:schwaemm256128v2 31.78 31.87 31.94 T:schwaemm256256v2 37.29 37.34 37.94 T:isapa128av20 39.11 39.12 39.30 T:schwaemm192192v2 42.95 42.97 42.98 T:grain128aeadv2 42.65 42.98 44.18 romulusm 43.08 43.21 44.48 romulusn 47.87 47.96 48.07 T:schwaemm128128v2 48.04 48.04 48.05 T:giftcofb128v1 48.53 48.54 48.55 T:tinyjambu128v2 56.96 56.97 57.00 T:tinyjambu256v2 57.11 57.13 57.15 T:tinyjambu192v2 69.85 69.93 70.03 T:isapk128av20 78.00 78.06 78.11 romulust 87.07 87.28 87.50 T:isapk128v20 129.70 130.41 132.90 T:elephant200v2 167.54 167.56 167.62 T:isapxv20 7234.06 7238.81 7240.85 T:elephant160v2 7279.10 7280.32 7282.45 T:elephant176v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 2.55 2.55 2.55 T:aes128gcmv1 2.71 2.72 2.74 aes256gcmv1 9.61 9.61 9.62 ascon128av12 14.24 14.24 14.25 ascon128v12 14.24 14.24 14.24 ascon80pqv12 16.92 16.94 16.99 T:xoodyakround3 20.28 20.28 20.29 ascon128abi32v12 28.75 28.75 28.76 ascon128bi32v12 29.99 30.01 30.01 T:schwaemm256128v2 32.94 33.00 33.01 T:schwaemm256256v2 39.94 39.96 39.98 T:schwaemm192192v2 43.35 43.36 43.37 T:grain128aeadv2 47.92 48.04 48.33 T:giftcofb128v1 48.75 48.80 48.89 T:schwaemm128128v2 52.54 52.56 53.26 T:isapa128av20 58.02 58.12 58.70 romulusn 61.74 61.74 61.76 T:isapa128v20 64.60 64.61 64.68 T:tinyjambu128v2 79.43 79.78 80.65 romulusm 80.91 80.91 80.93 T:tinyjambu192v2 85.90 86.08 86.13 T:tinyjambu256v2 101.18 101.23 101.53 T:isapk128av20 158.08 158.09 158.12 romulust 196.68 197.26 200.90 T:elephant200v2 200.92 201.00 201.28 T:isapk128v20 368.16 368.37 368.72 T:isapxv20 10976.98 10981.58 10987.58 T:elephant160v2 11087.51 11088.64 11091.58 T:elephant176v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 2.53 2.54 2.56 T:aes128gcmv1 2.69 2.71 2.73 aes256gcmv1 9.60 9.60 9.60 ascon128av12 14.23 14.23 14.24 ascon128v12 14.24 14.24 14.25 ascon80pqv12 16.55 16.60 16.64 T:xoodyakround3 20.29 20.29 20.30 ascon128abi32v12 28.77 28.77 28.78 ascon128bi32v12 30.12 30.12 30.12 T:schwaemm256128v2 33.08 33.09 33.09 T:schwaemm256256v2 39.90 39.90 39.94 T:schwaemm192192v2 44.48 44.49 44.50 T:grain128aeadv2 48.50 48.65 48.67 T:giftcofb128v1 48.64 48.73 48.81 T:schwaemm128128v2 52.53 52.58 52.94 T:isapa128av20 58.23 58.30 58.87 romulusn 61.74 61.74 61.75 T:isapa128v20 65.21 65.24 65.28 T:tinyjambu128v2 79.70 80.01 81.04 romulusm 80.64 80.66 80.76 T:tinyjambu192v2 86.29 86.36 86.43 T:tinyjambu256v2 101.12 101.21 101.25 T:isapk128av20 158.08 158.08 158.10 romulust 197.07 197.26 200.83 T:elephant200v2 200.86 201.07 201.09 T:isapk128v20 367.92 367.93 368.05 T:isapxv20 10976.58 10981.79 10985.13 T:elephant160v2 11088.14 11090.20 11093.08 T:elephant176v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 2.52 2.53 2.54 T:aes128gcmv1 2.69 2.70 2.70 aes256gcmv1 9.60 9.60 9.60 ascon128av12 14.23 14.23 14.23 ascon128v12 14.24 14.24 14.25 ascon80pqv12 16.57 16.59 16.60 T:xoodyakround3 20.29 20.29 20.29 ascon128abi32v12 28.77 28.78 28.78 ascon128bi32v12 30.12 30.12 30.12 T:schwaemm256128v2 33.07 33.09 33.09 T:schwaemm256256v2 38.06 38.07 38.08 T:isapa128v20 39.89 39.90 39.95 T:schwaemm192192v2 40.34 40.51 40.88 T:isapa128av20 44.49 44.50 44.51 T:grain128aeadv2 48.50 48.65 48.67 T:giftcofb128v1 48.68 48.75 48.82 T:schwaemm128128v2 58.24 58.29 58.87 romulusn 65.14 65.15 65.19 T:tinyjambu128v2 78.21 78.24 78.31 T:isapk128av20 79.78 79.99 81.03 romulusm 80.38 80.39 80.43 romulust 80.62 80.63 80.66 T:tinyjambu192v2 86.45 86.45 86.46 T:tinyjambu256v2 133.25 133.32 133.35 T:isapk128v20 196.55 197.14 200.83 T:elephant200v2 240.43 240.45 240.66 T:isapxv20 10977.23 10981.00 10984.96 T:elephant160v2 11087.94 11089.54 11093.42 T:elephant176v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 10.20 10.38 11.23 T:aes128gcmv1 11.08 11.52 12.14 aes256gcmv1 15.34 15.64 15.79 ascon128av12 19.39 19.39 19.39 ascon128v12 19.31 19.45 19.48 ascon80pqv12 26.70 26.82 27.76 T:xoodyakround3 30.94 31.15 31.48 ascon128abi32v12 40.36 40.44 40.83 ascon128bi32v12 49.34 49.42 49.69 T:schwaemm256128v2 52.50 52.56 53.19 T:schwaemm256256v2 58.41 58.84 59.08 T:grain128aeadv2 60.53 61.33 61.89 T:giftcofb128v1 62.52 62.84 63.33 T:schwaemm128128v2 64.18 64.27 64.60 T:schwaemm192192v2 70.56 71.26 71.57 romulusn 77.27 77.34 77.98 T:tinyjambu128v2 92.79 93.95 94.54 romulusm 95.43 95.81 96.16 T:tinyjambu192v2 101.29 101.39 101.67 T:tinyjambu256v2 180.77 180.91 181.18 T:isapa128av20 213.03 213.16 213.45 romulust 281.66 286.35 289.09 T:elephant200v2 384.84 385.47 386.20 T:isapk128av20 508.98 509.34 509.77 T:isapa128v20 2179.33 2179.89 2187.30 T:isapk128v20 3598.27 3598.52 3599.02 T:isapxv20 13786.66 13789.68 13791.50 T:elephant176v2 14676.63 14684.56 14741.43 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 10.31? 10.98? 11.62? T:aes128gcmv1 11.18 11.37 12.30 aes256gcmv1 15.10 15.27 15.76 ascon128av12 19.13 19.30 19.61 ascon128v12 19.39 19.56 19.75 ascon80pqv12 25.77 25.91 26.18 T:xoodyakround3 31.17 31.25 31.72 ascon128abi32v12 40.23 40.51 40.59 ascon128bi32v12 49.17 49.20 49.32 T:schwaemm256128v2 52.33 52.34 53.04 T:schwaemm256256v2 58.47 58.59 59.23 T:grain128aeadv2 61.10 61.11 61.29 T:giftcofb128v1 62.81 62.99 63.19 T:schwaemm128128v2 64.13 64.16 64.20 T:schwaemm192192v2 70.77 71.20 71.49 romulusn 77.54 77.72 77.99 T:tinyjambu128v2 95.14 95.27 95.60 T:tinyjambu192v2 96.13 96.41 97.88 romulusm 101.88 102.05 102.39 T:tinyjambu256v2 180.73 181.40 181.54 T:isapa128av20 212.87 212.91 213.29 romulust 280.24 280.83 289.08 T:elephant200v2 384.61 385.44 386.09 T:isapk128av20 509.10 509.30 509.45 T:isapa128v20 2178.99 2179.88 2180.83 T:isapk128v20 3598.77 3598.84 3599.34 T:isapxv20 13785.84 13789.30 13847.87 T:elephant176v2 14676.54 14683.63 14684.45 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 10.31 10.32 10.52 T:aes128gcmv1 11.13 11.16 11.17 aes256gcmv1 15.10 15.10 15.45 ascon128av12 19.12 19.14 19.36 ascon128v12 19.19 19.19 19.24 ascon80pqv12 25.69 25.70 26.14 T:xoodyakround3 31.06 31.07 31.28 ascon128abi32v12 40.37 40.41 40.45 ascon128bi32v12 49.17 49.17 49.24 T:schwaemm256128v2 52.16 52.34 53.01 T:schwaemm256256v2 58.68 58.69 58.74 T:grain128aeadv2 60.91 61.12 61.12 T:giftcofb128v1 62.34 62.86 63.02 T:schwaemm128128v2 64.08 64.09 64.09 T:schwaemm192192v2 70.77 70.80 71.45 romulusn 77.09 77.14 77.47 T:tinyjambu128v2 94.97 95.16 95.23 T:tinyjambu192v2 95.72 95.88 97.42 romulusm 101.90 101.95 101.95 T:tinyjambu256v2 109.56 109.66 109.67 T:isapa128av20 132.45 133.06 133.12 romulust 250.23 251.60 252.45 T:isapk128av20 265.46 265.63 265.99 T:isapa128v20 279.92 285.34 289.18 T:elephant200v2 1173.67 1174.94 1175.70 T:isapk128v20 1883.05 1883.58 1883.84 T:isapxv20 13784.77 13788.72 13789.82 T:elephant176v2 14676.65 14684.73 14693.31 T:elephant160v2