VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Broadwell+AES (406f1); 2016 Intel Xeon E5-2609 v4; 8 x 1700MHz; bolero, supercop-20260217

[Page version: 20260319 20:29:39]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.28 1.29 1.30 T:aes128gcmv1 1.38? 1.48? 1.61? aes256gcmv1 6.96 7.23 7.27 ascon128av12 10.56? 10.65? 13.45? ascon80pqv12 10.64 10.70 10.75 ascon128v12 14.01 14.51 14.54 ascon128abi32v12 15.69 15.73 15.79 T:xoodyakround3 18.54 18.58 18.82 T:schwaemm256128v2 21.27 21.43 21.75 ascon128bi32v12 24.62 24.69 24.73 T:schwaemm192192v2 24.73 24.81 25.03 T:schwaemm256256v2 24.79 24.82 24.84 T:grain128aeadv2 27.29 27.33 27.38 T:schwaemm128128v2 33.39 33.44 33.50 T:giftcofb128v1 37.20 38.39 38.46 romulusn 41.56 41.61 41.66 T:isapa128av20 42.12 42.18 42.31 T:isapa128v20 62.50 62.55 62.60 romulusm 68.94 68.97 72.51 T:tinyjambu128v2 69.40 69.62 70.48 T:isapk128av20 82.84 83.53 83.87 T:tinyjambu192v2 92.68 92.69 93.50 T:tinyjambu256v2 91.42 92.86 98.57 T:isapk128v20 132.71 132.97 134.87 romulust 159.23 168.61 173.95 T:isapxv20 174.20 174.29 176.55 T:elephant200v2 6851.23 6989.37 7014.10 T:elephant176v2 8209.71 8272.63 8397.08 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.49 1.50 1.52 T:aes128gcmv1 1.94? 2.07? 2.23? aes256gcmv1 6.89 7.14 7.20 ascon128av12 10.58 10.60 10.68 ascon80pqv12 10.56 10.61 10.66 ascon128v12 13.68 14.27 14.32 ascon128abi32v12 15.58 15.62 15.65 T:xoodyakround3 18.55 18.59 20.09 T:schwaemm256128v2 21.33 21.36 21.38 ascon128bi32v12 24.62 24.67 24.72 T:schwaemm192192v2 24.72 24.79 25.04 T:schwaemm256256v2 25.03 25.09 25.24 T:grain128aeadv2 27.32 27.37 27.43 T:schwaemm128128v2 33.28 33.51 33.77 T:giftcofb128v1 37.22 38.36 38.41 romulusn 41.53 41.58 41.64 T:isapa128av20 42.17 42.25 42.39 T:isapa128v20 62.59 62.65 62.74 romulusm 69.03 69.05 72.01 T:tinyjambu128v2 69.50 69.64 70.35 T:isapk128av20 82.71 83.48 83.54 T:tinyjambu192v2 92.67 92.67 94.55 T:tinyjambu256v2 91.17 92.70 96.01 T:isapk128v20 132.71 132.95 134.69 romulust 159.03 166.33 172.38 T:isapxv20 174.17 174.25 176.95 T:elephant200v2 6974.38 6985.65 7005.73 T:elephant176v2 8131.45 8267.09 8293.82 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.50 1.51 1.51 T:aes128gcmv1 1.96? 2.06? 2.23? aes256gcmv1 6.89 7.15 7.24 ascon128av12 10.54 10.57 10.60 ascon80pqv12 10.54 10.60 10.66 ascon128v12 13.65 14.14 14.32 ascon128abi32v12 15.60 15.64 15.67 T:xoodyakround3 18.54 18.59 20.36 T:schwaemm256128v2 21.18 21.25 21.33 T:isapa128v20 21.34? 21.53? 30.00? ascon128bi32v12 24.64 24.67 24.71 T:schwaemm192192v2 24.72 24.79 25.01 T:schwaemm256256v2 25.06 25.19 25.27 T:grain128aeadv2 27.30 27.36 27.42 T:schwaemm128128v2 28.32 28.37 28.42 T:isapa128av20 33.28 33.32 33.58 T:giftcofb128v1 37.22 38.35 38.40 romulusn 45.39 45.43 45.46 romulust 45.81 45.92 46.13 T:isapk128av20 57.34 57.66 58.70 T:isapk128v20 62.60 62.67 62.74 romulusm 68.75? 69.32? 77.00? T:tinyjambu128v2 82.72 83.51 83.54 T:tinyjambu192v2 92.68 92.69 96.10 T:tinyjambu256v2 94.36 98.47 100.78 T:isapxv20 174.21 174.30 177.62 T:elephant200v2 6979.76 6988.59 7019.61 T:elephant176v2 8245.67 8258.09 8268.29 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.79 0.85 0.86 T:aes128gcmv1 0.96 0.97 0.97 aes256gcmv1 7.16 7.19 7.20 ascon128av12 10.37 10.48 10.52 ascon128v12 10.55 10.58 10.60 ascon80pqv12 11.89 11.93 11.96 T:xoodyakround3 14.44 14.47 14.50 ascon128abi32v12 18.43 18.46 18.48 T:schwaemm256128v2 21.44 21.49 23.19 ascon128bi32v12 24.65 24.72 24.95 T:schwaemm256256v2 24.83 24.85 24.87 T:grain128aeadv2 24.52? 26.54? 34.96? T:schwaemm192192v2 27.14 27.17 28.24 T:schwaemm128128v2 31.29 31.35 31.40 romulusn 31.65 31.72 32.08 T:isapa128v20 33.47 33.57 33.64 T:giftcofb128v1 34.93 34.97 35.01 T:isapa128av20 43.38 43.41 44.22 romulusm 56.56 56.79 60.27 T:tinyjambu128v2 53.95 57.79 58.78 T:isapk128av20 63.46 63.46 64.86 T:tinyjambu192v2 67.97 67.99 68.77 T:tinyjambu256v2 55.51? 76.43? 82.91? T:isapk128v20 88.96 89.10 90.23 romulust 130.38 130.46 132.89 T:elephant200v2 128.11 133.54 137.01 T:isapxv20 5191.03 5222.78 5233.79 T:elephant176v2 6187.22 6230.65 6495.75 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.89 0.96 0.98 T:aes128gcmv1 1.25 1.26 1.27 aes256gcmv1 7.14 7.15 7.18 ascon128av12 10.48 10.59 10.64 ascon128v12 10.57 10.59 10.64 ascon80pqv12 11.84 11.86 11.87 T:xoodyakround3 14.27 14.29 14.35 ascon128abi32v12 18.43 18.46 18.48 T:schwaemm256128v2 21.45 21.49 21.53 ascon128bi32v12 24.60 24.76 24.97 T:schwaemm256256v2 24.93 24.97 25.06 T:grain128aeadv2 24.53? 25.18? 35.20? T:schwaemm192192v2 27.12 27.16 27.32 T:schwaemm128128v2 31.30 31.34 31.37 romulusn 31.67 31.74 32.08 T:isapa128v20 33.52 33.67 33.80 T:giftcofb128v1 34.92 34.96 35.02 T:isapa128av20 43.44 43.47 44.61 romulusm 56.61 56.62 58.43 T:tinyjambu128v2 53.71 57.72 59.06 T:isapk128av20 63.38 63.40 65.15 T:tinyjambu192v2 68.10 68.12 69.28 T:tinyjambu256v2 56.53? 75.23? 82.85? T:isapk128v20 88.97 89.08 90.11 romulust 130.39 130.49 133.68 T:elephant200v2 128.37 131.52 134.94 T:isapxv20 5218.01 5224.05 5244.43 T:elephant176v2 6185.10 6201.70 6415.43 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.90 0.97 0.98 T:aes128gcmv1 1.26 1.26 1.27 aes256gcmv1 7.12 7.15 7.20 ascon128av12 10.56? 10.58? 12.29? ascon80pqv12 10.49 10.60 10.66 ascon128v12 11.85 11.88 11.90 T:xoodyakround3 14.26 14.28 14.30 ascon128abi32v12 18.44 18.46 18.48 T:schwaemm256128v2 21.13 21.17 21.25 T:isapa128v20 21.34 21.49 21.67 ascon128bi32v12 24.61 24.75 24.98 T:schwaemm256256v2 24.93 24.98 25.07 T:grain128aeadv2 27.14 27.17 27.71 T:schwaemm128128v2 24.52? 27.39? 34.81? T:schwaemm192192v2 28.34 28.37 28.39 T:isapa128av20 31.29 31.33 31.37 romulusn 33.48 33.59 33.73 T:giftcofb128v1 43.41 43.44 43.94 romulusm 45.29 45.32 45.36 romulust 43.70 46.08 46.46 T:isapk128av20 56.61 56.62 59.26 T:tinyjambu128v2 47.67? 58.57? 62.72? T:isapk128v20 63.39 63.39 65.38 T:tinyjambu192v2 67.70 68.12 68.66 T:tinyjambu256v2 94.45 97.61 99.42 T:isapxv20 130.41 130.59 133.37 T:elephant200v2 5190.44 5219.38 5229.13 T:elephant176v2 6192.48 6199.81 6211.40 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.41 0.42 0.43 aes256gcmv1 0.42 0.43 0.44 T:aes128gcmv1 6.84 7.11 7.13 ascon128av12 8.06 8.09 8.12 T:xoodyakround3 10.30 10.42 10.45 ascon128v12 10.53 10.57 10.58 ascon80pqv12 14.34 14.37 14.40 ascon128abi32v12 18.29 18.32 18.38 T:schwaemm256128v2 21.17 21.22 22.45 T:isapa128v20 21.27 21.40 21.62 ascon128bi32v12 24.15 24.18 24.23 romulusn 24.16 24.19 24.38 romulusm 24.33 24.38 24.45 T:schwaemm192192v2 23.62 24.56 24.74 T:schwaemm256256v2 24.72 24.78 24.81 T:grain128aeadv2 26.91 26.96 27.02 T:schwaemm128128v2 28.33 28.36 28.43 T:isapa128av20 33.51 33.67 33.79 T:giftcofb128v1 43.26 43.27 45.10 T:tinyjambu256v2 43.40 43.41 43.43 T:tinyjambu192v2 44.20 44.21 44.24 T:tinyjambu128v2 45.14 45.18 45.26 romulust 46.00 46.13 46.34 T:isapk128av20 57.27 57.49 61.21 T:isapk128v20 86.60 86.64 86.70 T:elephant200v2 93.27 98.77 102.14 T:isapxv20 3444.67 3455.21 3474.86 T:elephant176v2 4119.90 4127.36 4150.29 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.40 0.41 0.43 aes256gcmv1 0.41 0.43 0.45 T:aes128gcmv1 6.85 7.11 7.13 ascon128av12 8.04 8.06 8.09 T:xoodyakround3 10.36 10.47 10.58 ascon128v12 10.55 10.58 10.61 ascon80pqv12 14.37 14.39 14.42 ascon128abi32v12 18.28 18.34 18.38 T:schwaemm256128v2 21.15 21.21 21.27 T:isapa128v20 21.39 21.59 21.65 ascon128bi32v12 24.16 24.20 24.24 romulusn 24.18 24.23 24.39 romulusm 24.32 24.37 24.41 T:schwaemm192192v2 23.59 24.63 24.85 T:schwaemm256256v2 24.76 24.80 24.84 T:grain128aeadv2 26.92 26.96 27.00 T:schwaemm128128v2 28.31 28.36 28.42 T:isapa128av20 33.55 33.73 33.81 T:giftcofb128v1 43.26 43.26 43.27 T:tinyjambu192v2 43.52 43.55 46.96 T:tinyjambu256v2 44.19 44.20 44.23 T:tinyjambu128v2 45.14 45.17 45.24 romulust 46.00 46.14 46.29 T:isapk128av20 57.26 57.59 61.04 T:isapk128v20 86.62 86.68 86.78 T:elephant200v2 92.76 96.77 99.25 T:isapxv20 3333.29 3447.60 3457.00 T:elephant176v2 4119.19 4128.58 4140.31 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.41 0.42 0.43 aes256gcmv1 0.41 0.43 0.45 T:aes128gcmv1 6.84 7.10 7.12 ascon128av12 8.06 8.08 8.11 T:xoodyakround3 10.34 10.49 10.68 ascon128v12 10.54 10.57 10.61 ascon80pqv12 14.36 14.39 14.41 ascon128abi32v12 18.29 18.32 18.52 T:schwaemm256128v2 20.67 21.18 21.35 T:isapa128v20 21.32 21.58 21.64 ascon128bi32v12 24.15 24.19 24.25 romulusn 24.15 24.21 24.39 romulusm 24.34 24.39 24.44 T:schwaemm192192v2 23.60 24.61 24.79 T:schwaemm256256v2 24.77 24.80 24.84 T:grain128aeadv2 26.92 26.96 27.01 T:schwaemm128128v2 28.31 28.36 28.40 T:isapa128av20 33.52 33.72 33.79 T:giftcofb128v1 43.26 43.27 43.28 T:tinyjambu192v2 43.50 43.53 44.09 T:tinyjambu256v2 44.19 44.20 44.22 T:tinyjambu128v2 45.13 45.18 45.25 romulust 45.99 46.12 46.28 T:isapk128av20 57.00 57.55 60.11 T:isapk128v20 86.60 86.65 86.77 T:elephant200v2 92.83 96.78 99.24 T:isapxv20 3441.23 3450.84 3457.98 T:elephant176v2 4119.34 4126.69 4134.22 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.00 1.00 1.01 T:aes128gcmv1 1.13 1.14 1.14 aes256gcmv1 7.33 7.34 7.36 ascon128av12 10.66 10.68 11.84 ascon128v12 10.72 10.74 10.87 ascon80pqv12 12.02 12.03 12.05 T:xoodyakround3 14.75 14.77 14.78 ascon128abi32v12 18.96 18.98 19.00 T:schwaemm256128v2 21.64 21.76 21.79 ascon128bi32v12 25.03 25.05 25.08 T:schwaemm192192v2 25.22 25.24 25.26 T:grain128aeadv2 25.31 25.36 26.08 T:schwaemm256256v2 27.49 27.52 28.38 T:schwaemm128128v2 31.73 31.77 31.82 romulusn 33.78 33.82 33.93 T:giftcofb128v1 37.20 37.23 37.28 T:isapa128av20 43.81 43.84 44.46 romulusm 46.43 46.46 46.73 T:isapa128v20 56.97 56.99 58.27 T:tinyjambu128v2 63.89 63.90 67.07 T:tinyjambu192v2 65.69 65.75 67.92 T:isapk128av20 68.44 69.15 72.71 T:tinyjambu256v2 90.35 90.52 92.24 romulust 133.15 133.20 135.57 T:elephant200v2 130.61? 133.71? 156.94? T:isapk128v20 214.12? 226.89? 260.54? T:isapxv20 5251.36 5257.60 5264.68 T:elephant176v2 6260.50 6281.35 6434.00 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.10 1.11 1.12 T:aes128gcmv1 1.42 1.42 1.43 aes256gcmv1 7.31 7.32 7.34 ascon128av12 10.73 10.75 10.78 ascon80pqv12 10.73? 10.78? 11.95? ascon128v12 11.95 11.96 11.97 T:xoodyakround3 14.58 14.61 14.66 ascon128abi32v12 18.96 18.98 19.00 T:schwaemm256128v2 21.74 21.79 21.81 ascon128bi32v12 25.05 25.07 25.12 T:schwaemm192192v2 25.33 25.35 25.42 T:grain128aeadv2 25.26 25.40 26.12 T:schwaemm256256v2 27.48 27.51 28.97 T:schwaemm128128v2 31.71 31.75 31.83 romulusn 33.79 33.89 34.04 T:giftcofb128v1 37.22 37.24 37.29 T:isapa128av20 43.97 44.00 44.23 romulusm 46.40 46.45 46.51 T:isapa128v20 57.00 57.03 59.01 T:tinyjambu128v2 63.82 63.84 65.38 T:tinyjambu192v2 65.71 65.85 68.31 T:isapk128av20 68.57 69.57 72.87 T:tinyjambu256v2 90.36 90.47 92.84 romulust 130.48 130.76 133.08 T:isapk128v20 133.13 133.17 135.29 T:elephant200v2 210.54? 216.01? 254.02? T:isapxv20 5252.03 5258.45 5266.23 T:elephant176v2 6259.58 6269.74 6610.25 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.10 1.11 1.12 T:aes128gcmv1 1.42 1.42 1.43 aes256gcmv1 7.29 7.31 7.32 ascon128av12 10.71 10.73 10.76 ascon80pqv12 10.73? 10.80? 12.11? ascon128v12 11.98 11.99 12.00 T:xoodyakround3 14.57 14.58 14.59 ascon128abi32v12 18.97 18.99 19.01 T:schwaemm256128v2 21.77 21.79 21.81 ascon128bi32v12 25.05 25.06 25.10 T:schwaemm192192v2 25.34 25.37 25.45 T:grain128aeadv2 25.26 25.37 26.20 T:schwaemm256256v2 27.49 27.52 28.57 T:schwaemm128128v2 28.63 28.64 28.66 T:isapa128v20 29.64 29.66 29.70 T:isapa128av20 31.69 31.73 31.78 romulusn 33.79 33.87 33.97 T:giftcofb128v1 43.96 43.99 44.93 romulusm 46.61 46.65 47.75 romulust 50.62 50.70 52.23 T:isapk128av20 57.01 57.03 58.27 T:tinyjambu128v2 63.83 63.94 67.42 T:tinyjambu192v2 68.58 68.59 69.46 T:tinyjambu256v2 86.05 86.21 87.12 T:isapk128v20 133.12 133.17 134.97 T:elephant200v2 136.62 138.66 140.49 T:isapxv20 5252.54 5260.46 5740.99 T:elephant176v2 6268.14 6287.73 6765.98 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 6.18? 6.28? 8.41? T:aes128gcmv1 7.14 7.20 7.27 aes256gcmv1 10.96 11.05 11.21 ascon128av12 14.11 14.17 14.26 ascon128v12 14.09 14.18 14.36 ascon80pqv12 17.12 17.20 17.30 T:xoodyakround3 21.65 21.77 21.96 ascon128abi32v12 28.23 28.34 28.53 ascon128bi32v12 30.46 30.59 31.34 T:schwaemm256128v2 33.93 34.02 34.28 T:grain128aeadv2 35.01? 35.47? 47.46? T:schwaemm128128v2 39.57 39.66 39.93 T:schwaemm256256v2 39.85 39.99 40.20 T:schwaemm192192v2 40.53 40.68 40.83 T:giftcofb128v1 41.17 41.29 41.52 romulusn 54.10 54.30 56.95 romulusm 66.37 66.39 66.50 T:tinyjambu128v2 73.83 73.86 73.89 T:tinyjambu192v2 78.95 78.98 79.01 T:tinyjambu256v2 88.03 88.23 88.65 T:isapa128av20 120.46 120.64 120.97 romulust 187.72 187.97 188.27 T:elephant200v2 230.10? 231.34? 312.64? T:isapk128av20 383.46 384.04 384.75 T:isapa128v20 1388.14 1389.35 1416.61 T:isapk128v20 2018.13 2037.77 2099.14 T:isapxv20 6499.73 6558.11 6604.29 T:elephant176v2 8337.80 8417.90 8454.90 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 6.48? 6.67? 8.75? T:aes128gcmv1 7.34 7.39 7.47 aes256gcmv1 11.01 11.09 11.26 ascon128av12 14.11 14.20 14.36 ascon128v12 14.18 14.29 14.43 ascon80pqv12 17.04 17.10 17.28 T:xoodyakround3 21.59 21.67 21.96 ascon128abi32v12 28.31 28.39 28.58 ascon128bi32v12 30.43 30.55 30.86 T:schwaemm256128v2 34.15 34.24 34.39 T:grain128aeadv2 34.80? 35.19? 47.15? T:schwaemm128128v2 39.62 39.71 39.95 T:schwaemm256256v2 39.92 40.02 40.16 T:schwaemm192192v2 40.45 40.58 40.77 T:giftcofb128v1 41.10 41.17 41.34 romulusn 56.21 56.52 58.91 romulusm 66.45 66.48 66.56 T:tinyjambu128v2 73.91 73.93 73.96 T:tinyjambu192v2 79.18 79.23 81.40 T:tinyjambu256v2 88.01 88.17 88.34 T:isapa128av20 120.49 120.69 120.93 romulust 187.57 187.74 187.84 T:elephant200v2 230.49? 231.70? 327.87? T:isapk128av20 383.25 383.87 384.50 T:isapa128v20 1388.98 1390.07 1406.44 T:isapk128v20 2018.29 2045.58 2098.12 T:isapxv20 6498.57 6545.67 6606.07 T:elephant176v2 8339.86 8417.18 8437.83 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 6.46? 6.59? 8.63? T:aes128gcmv1 7.31 7.38 7.46 aes256gcmv1 11.01 11.13 11.23 ascon128av12 14.07 14.22 14.31 ascon128v12 14.20 14.30 14.42 ascon80pqv12 17.16 17.23 17.30 T:xoodyakround3 21.60 21.64 21.77 ascon128abi32v12 28.34 28.43 28.63 ascon128bi32v12 30.42 30.52 30.62 T:schwaemm256128v2 34.13 34.22 34.32 T:grain128aeadv2 34.77? 35.08? 47.07? T:schwaemm128128v2 39.61 39.69 39.93 T:schwaemm256256v2 39.89 40.02 40.18 T:schwaemm192192v2 40.48 40.59 40.73 T:giftcofb128v1 41.14 41.24 41.34 romulusn 56.15 56.36 58.81 romulusm 58.61 58.73 58.91 T:isapa128av20 66.42 66.46 66.49 T:tinyjambu128v2 73.90 73.93 73.94 T:tinyjambu192v2 75.60 75.82 76.12 romulust 79.18 79.22 79.25 T:tinyjambu256v2 143.08? 144.03? 192.79? T:isapk128av20 187.46 187.64 187.99 T:elephant200v2 199.54 199.87 200.18 T:isapa128v20 728.11 729.06 731.32 T:isapk128v20 1058.49 1071.42 1098.01 T:isapxv20 6499.17 6554.93 6599.64 T:elephant176v2 8335.62 8418.05 8441.74 T:elephant160v2