VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3427U; 2 x 1800MHz; hunsnivy, supercop-20251222

[Page version: 20260113 16:30:49]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 3.12 3.14 3.15 T:aes128gcmv1 3.37 3.38 3.39 aes256gcmv1 9.12 9.15 9.18 ascon128av12 12.74 12.89 12.92 ascon80pqv12 12.86 12.91 12.93 ascon128v12 16.46 16.57 16.72 ascon128abi32v12 18.03 18.09 18.26 T:xoodyakround3 22.75 22.76 22.78 T:schwaemm256128v2 24.76 24.80 24.86 ascon128bi32v12 27.23 27.25 27.26 T:schwaemm256256v2 28.22 28.66 29.26 T:grain128aeadv2 30.00 30.02 30.04 T:schwaemm192192v2 33.04 33.06 33.07 T:schwaemm128128v2 36.18 36.23 36.33 romulusn 44.92 44.99 45.05 T:giftcofb128v1 54.90 54.95 54.98 T:isapa128av20 54.87 54.99 55.27 T:isapa128v20 56.08 56.20 56.29 T:tinyjambu128v2 59.40 59.49 59.59 romulusm 59.32 61.07 61.09 T:tinyjambu192v2 69.73 69.80 69.86 T:tinyjambu256v2 94.68 94.93 95.72 T:isapk128av20 125.65 126.33 127.01 T:isapk128v20 126.46 126.62 126.74 romulust 190.58 190.95 191.13 T:elephant200v2 194.27 194.82 195.32 T:isapxv20 9235.91 9243.44 9247.69 T:elephant176v2 10547.93 10556.33 10562.76 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 3.16 3.18 3.19 T:aes128gcmv1 3.43 3.47 3.48 aes256gcmv1 8.73 8.78 8.91 ascon128av12 12.78 12.84 12.88 ascon80pqv12 12.87 12.91 12.96 ascon128v12 16.61 16.82 17.21 ascon128abi32v12 17.83 17.87 17.91 T:xoodyakround3 22.74 22.75 22.77 T:schwaemm256128v2 24.71 24.76 24.86 ascon128bi32v12 27.24 27.26 27.27 T:schwaemm256256v2 29.09 29.54 29.94 T:grain128aeadv2 30.00 30.02 30.05 T:schwaemm192192v2 33.04 33.06 33.08 T:schwaemm128128v2 36.30 36.34 36.38 romulusn 45.00 45.05 45.13 T:giftcofb128v1 54.73 54.82 54.96 T:tinyjambu128v2 54.89 54.96 55.02 T:isapa128av20 54.86 54.98 55.07 T:isapa128v20 59.58 59.65 59.72 romulusm 59.03 60.85 60.96 T:tinyjambu192v2 69.57 69.62 69.78 T:tinyjambu256v2 94.63 94.82 94.93 T:isapk128av20 125.53 126.36 127.55 T:isapk128v20 126.44 126.54 126.71 romulust 190.51 190.93 191.55 T:elephant200v2 192.61 192.78 192.90 T:isapxv20 9235.45 9240.81 9244.62 T:elephant176v2 10548.24 10555.48 10561.03 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 3.16 3.18 3.19 T:aes128gcmv1 3.45 3.47 3.48 aes256gcmv1 8.71 8.74 8.78 ascon128av12 12.82 12.85 12.89 ascon80pqv12 12.82 12.86 12.91 ascon128v12 16.62 16.82 16.83 ascon128abi32v12 17.89 17.92 17.97 T:xoodyakround3 22.76 22.77 22.79 T:schwaemm256128v2 24.69 24.79 24.91 ascon128bi32v12 27.24 27.25 27.27 T:schwaemm256256v2 27.90 27.96 28.03 T:isapa128v20 29.11 29.56 29.96 T:grain128aeadv2 30.01 30.03 30.04 T:schwaemm192192v2 33.05 33.06 33.08 T:schwaemm128128v2 35.55 35.62 35.65 T:isapa128av20 36.27 36.32 36.38 romulusn 43.30 43.41 43.76 romulust 44.97 45.01 45.10 T:giftcofb128v1 54.76 54.91 54.95 T:tinyjambu128v2 59.58 59.66 59.85 romulusm 59.19 60.81 60.92 T:tinyjambu192v2 62.78 62.83 62.99 T:isapk128av20 69.56 69.59 69.63 T:tinyjambu256v2 78.01 78.77 78.87 T:isapk128v20 113.53 113.62 113.73 T:isapxv20 190.57 191.00 191.22 T:elephant200v2 9237.89 9241.32 9245.61 T:elephant176v2 10550.72 10554.89 10557.15 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 2.50 2.52 2.52 T:aes128gcmv1 2.59 2.61 2.62 aes256gcmv1 8.83 8.88 8.94 ascon128av12 12.65 12.71 12.77 ascon80pqv12 12.72 12.76 12.91 ascon128v12 13.72 13.75 13.84 T:xoodyakround3 16.51 16.57 16.59 ascon128abi32v12 22.63 22.64 22.65 T:schwaemm256128v2 24.77 24.79 24.82 ascon128bi32v12 27.09 27.11 27.12 T:schwaemm256256v2 28.10 28.47 29.07 T:grain128aeadv2 29.71 29.74 29.81 romulusn 29.87 29.89 29.92 T:schwaemm192192v2 32.92 32.92 32.94 T:schwaemm128128v2 41.32 41.39 41.42 romulusm 41.15 41.49 41.58 T:isapa128v20 44.95 45.01 45.07 T:giftcofb128v1 46.17 46.20 46.25 T:isapa128av20 46.19 46.23 46.30 T:tinyjambu128v2 48.49 48.53 48.56 T:tinyjambu192v2 53.41 53.43 53.45 T:tinyjambu256v2 78.90 78.91 79.38 T:isapk128av20 84.73 84.83 84.94 romulust 101.95 102.33 102.74 T:isapk128v20 143.53 143.76 143.90 T:elephant200v2 154.07 154.18 154.45 T:isapxv20 6893.13 6902.23 6917.70 T:elephant176v2 7909.65 7913.57 7918.00 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 2.48 2.52 2.54 T:aes128gcmv1 2.63 2.66 2.67 aes256gcmv1 8.61 8.69 8.78 ascon128av12 12.70 12.74 12.78 ascon128v12 12.71 12.79 12.85 ascon80pqv12 13.62 13.64 13.66 T:xoodyakround3 16.45 16.48 16.49 ascon128abi32v12 22.62 22.63 22.65 T:schwaemm256128v2 24.65 24.68 24.70 ascon128bi32v12 27.11 27.12 27.13 T:schwaemm256256v2 28.56 28.95 29.43 T:grain128aeadv2 29.79 29.82 29.86 romulusn 29.88 29.89 29.91 T:schwaemm192192v2 32.91 32.93 32.94 T:schwaemm128128v2 41.03 41.39 41.75 T:isapa128v20 41.39 41.44 41.47 romulusm 45.02 45.04 45.10 T:giftcofb128v1 45.87 45.95 45.99 T:tinyjambu128v2 46.14 46.19 46.27 T:isapa128av20 48.25 48.39 48.48 T:tinyjambu192v2 53.34 53.37 53.39 T:tinyjambu256v2 78.89 79.19 79.45 T:isapk128av20 84.74 84.84 84.96 romulust 101.97 102.49 102.83 T:isapk128v20 143.58 143.70 143.82 T:elephant200v2 152.99 153.14 153.57 T:isapxv20 6893.12 6900.80 6902.74 T:elephant176v2 7908.70 7914.61 7916.01 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 2.50 2.51 2.51 T:aes128gcmv1 2.65 2.65 2.66 aes256gcmv1 8.59 8.71 8.74 ascon128av12 12.69 12.73 12.78 ascon128v12 12.67 12.75 12.86 ascon80pqv12 13.67 13.68 13.70 T:xoodyakround3 16.47 16.49 16.50 ascon128abi32v12 22.63 22.64 22.65 T:schwaemm256128v2 24.67 24.68 24.71 ascon128bi32v12 27.11 27.12 27.13 T:schwaemm256256v2 27.84 27.90 28.09 T:isapa128v20 28.57 28.97 29.46 T:grain128aeadv2 29.78 29.84 29.90 romulusn 29.89 29.90 29.91 T:schwaemm192192v2 32.91 32.92 32.93 T:schwaemm128128v2 36.49 36.52 36.60 T:isapa128av20 41.39 41.43 41.45 romulusm 43.17 43.24 43.38 romulust 45.00 45.01 45.06 T:giftcofb128v1 45.88 45.92 45.98 T:tinyjambu128v2 48.28 48.33 48.42 T:tinyjambu192v2 53.33 53.36 53.41 T:tinyjambu256v2 62.89 62.93 62.95 T:isapk128av20 78.48 78.59 79.12 T:isapk128v20 113.39 113.51 113.55 T:isapxv20 143.49 143.60 143.91 T:elephant200v2 6895.02 6899.70 6901.65 T:elephant176v2 7912.13 7915.46 7918.61 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 1.81 1.84 1.86 aes256gcmv1 1.86 1.90 1.91 T:aes128gcmv1 8.58 8.60 8.64 ascon128av12 9.35 9.42 9.44 T:xoodyakround3 12.57 12.60 12.72 ascon80pqv12 12.60 12.63 12.64 ascon128v12 16.50 16.52 16.77 ascon128abi32v12 22.49 22.51 22.52 T:schwaemm256128v2 23.23 23.28 23.36 romulusm 23.25 23.29 23.36 romulusn 24.88 24.91 24.95 ascon128bi32v12 26.96 26.99 27.00 T:schwaemm256256v2 27.68 27.80 27.88 T:isapa128v20 27.91 28.35 28.99 T:grain128aeadv2 29.75 29.77 29.79 T:schwaemm192192v2 32.77 32.79 32.82 T:schwaemm128128v2 35.95 35.99 36.02 T:tinyjambu192v2 36.04 36.04 36.12 T:tinyjambu128v2 37.08 37.12 37.14 T:tinyjambu256v2 37.43 37.47 37.55 T:isapa128av20 42.87 42.99 43.12 romulust 45.06 45.12 45.18 T:giftcofb128v1 63.02 63.08 63.17 T:isapk128av20 78.29 78.32 79.07 T:isapk128v20 96.51 96.66 96.91 T:elephant200v2 113.66 114.04 114.59 T:isapxv20 4563.87 4567.90 4570.26 T:elephant176v2 5272.10 5274.97 5276.38 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 1.82 1.85 1.87 aes256gcmv1 1.82 1.85 1.87 T:aes128gcmv1 8.55 8.58 8.62 ascon128av12 9.39 9.42 9.45 T:xoodyakround3 12.47 12.61 12.78 ascon80pqv12 12.56 12.61 12.66 ascon128v12 16.12 16.15 16.21 ascon128abi32v12 22.49 22.50 22.51 T:schwaemm256128v2 23.24 23.26 23.31 romulusn 23.22 23.28 23.32 romulusm 24.59 24.64 24.67 ascon128bi32v12 26.97 26.98 27.00 T:schwaemm256256v2 27.79 27.95 28.10 T:isapa128v20 27.95 28.36 28.96 T:grain128aeadv2 29.75 29.77 29.79 T:schwaemm192192v2 32.77 32.78 32.80 T:schwaemm128128v2 35.71 35.77 35.86 T:tinyjambu192v2 36.87 36.92 36.96 T:tinyjambu128v2 37.06 37.08 37.11 T:tinyjambu256v2 37.36 37.43 37.48 T:isapa128av20 43.03 43.14 43.31 romulust 44.99 45.04 45.10 T:giftcofb128v1 62.98 63.05 63.18 T:isapk128av20 78.22 78.31 78.36 T:isapk128v20 96.48 96.69 97.02 T:elephant200v2 113.23 113.43 113.51 T:isapxv20 4566.48 4568.70 4571.38 T:elephant176v2 5269.97 5273.84 5275.99 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 1.83 1.84 1.86 aes256gcmv1 1.84 1.85 1.86 T:aes128gcmv1 8.56 8.58 8.60 ascon128av12 9.39 9.42 9.46 T:xoodyakround3 12.54 12.58 12.62 ascon128v12 12.63 12.81 12.89 ascon80pqv12 16.15 16.17 16.27 ascon128abi32v12 22.49 22.50 22.52 T:schwaemm256128v2 23.24 23.26 23.34 romulusm 23.21 23.26 23.29 romulusn 24.58 24.63 24.69 ascon128bi32v12 26.97 26.98 27.00 T:schwaemm256256v2 27.11 27.77 27.89 T:isapa128v20 27.98 28.40 29.00 T:grain128aeadv2 29.76 29.77 29.79 T:schwaemm192192v2 32.78 32.79 32.81 T:schwaemm128128v2 35.73 35.79 35.84 T:tinyjambu192v2 36.85 36.87 36.92 T:tinyjambu128v2 37.07 37.11 37.13 T:tinyjambu256v2 37.36 37.45 37.54 T:isapa128av20 43.06 43.14 43.24 romulust 45.06 45.08 45.15 T:giftcofb128v1 62.96 63.01 63.78 T:isapk128av20 78.24 78.32 78.38 T:isapk128v20 96.47 96.72 96.99 T:elephant200v2 113.25 113.39 113.48 T:isapxv20 4564.65 4568.62 4570.40 T:elephant176v2 5270.42 5273.29 5275.43 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 2.72 2.73 2.73 T:aes128gcmv1 2.84 2.85 2.85 aes256gcmv1 9.07 9.09 9.10 ascon128av12 12.87 12.88 12.95 ascon80pqv12 12.92 12.93 12.94 ascon128v12 13.87 13.90 13.92 T:xoodyakround3 16.86 16.94 16.98 ascon128abi32v12 23.29 23.30 23.31 T:schwaemm256128v2 25.18 25.22 25.23 ascon128bi32v12 27.84 27.84 27.85 T:schwaemm256256v2 28.79 28.95 29.53 T:grain128aeadv2 30.06 30.08 30.12 romulusn 30.57 30.58 30.61 T:schwaemm192192v2 33.34 33.36 33.37 T:schwaemm128128v2 41.72 41.73 41.75 romulusm 45.45 45.49 45.54 T:giftcofb128v1 46.54 46.57 46.69 T:tinyjambu128v2 48.90 48.92 48.95 T:tinyjambu192v2 49.96 50.02 50.04 T:isapa128av20 53.82 53.84 53.89 T:tinyjambu256v2 61.10 61.13 61.25 T:isapa128v20 86.17 86.26 86.54 romulust 90.11 90.15 90.22 T:isapk128av20 146.61 146.74 147.01 T:elephant200v2 181.45 182.01 182.45 T:isapk128v20 249.91 249.98 250.16 T:isapxv20 6950.00 6952.72 6954.02 T:elephant176v2 7999.00 8002.00 8006.53 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 2.73 2.73 2.75 T:aes128gcmv1 2.89 2.90 2.90 aes256gcmv1 8.82 8.87 8.93 ascon128av12 12.90 12.94 12.99 ascon128v12 12.89 12.97 13.05 ascon80pqv12 13.80 13.81 13.82 T:xoodyakround3 16.86 16.87 16.89 ascon128abi32v12 23.29 23.30 23.32 T:schwaemm256128v2 25.05 25.07 25.09 ascon128bi32v12 27.84 27.85 27.86 T:schwaemm256256v2 29.11 29.48 29.87 T:grain128aeadv2 30.09 30.12 30.13 romulusn 30.56 30.57 30.63 T:schwaemm192192v2 33.34 33.35 33.36 T:schwaemm128128v2 41.85 41.89 41.92 romulusm 45.48 45.51 45.52 T:giftcofb128v1 46.27 46.29 46.32 T:tinyjambu128v2 48.63 48.67 48.70 T:tinyjambu192v2 50.02 50.04 50.09 T:isapa128av20 53.74 53.78 53.80 T:tinyjambu256v2 61.06 61.09 61.25 T:isapa128v20 86.07 86.15 86.28 romulust 90.20 90.23 90.69 T:isapk128av20 146.62 146.81 147.01 T:elephant200v2 181.54 181.69 182.03 T:isapk128v20 248.10 248.53 248.64 T:isapxv20 6946.90 6952.23 6953.69 T:elephant176v2 7998.87 8003.31 8006.16 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 2.72 2.73 2.74 T:aes128gcmv1 2.89 2.89 2.90 aes256gcmv1 8.83 8.90 8.94 ascon128av12 12.88 12.93 12.96 ascon128v12 12.87 12.94 13.06 ascon80pqv12 13.83 13.84 13.85 T:xoodyakround3 16.86 16.86 16.87 ascon128abi32v12 23.29 23.29 23.34 T:schwaemm256128v2 25.06 25.07 25.10 ascon128bi32v12 27.85 27.85 27.86 T:schwaemm256256v2 29.11 29.43 29.85 T:grain128aeadv2 30.14 30.17 30.28 romulusn 30.56 30.58 30.58 T:schwaemm192192v2 33.33 33.35 33.36 T:schwaemm128128v2 38.06 38.12 38.29 T:isapa128v20 38.64 38.66 38.70 T:isapa128av20 41.87 41.89 41.92 romulusm 44.48 44.50 44.53 romulust 45.46 45.50 45.56 T:giftcofb128v1 46.22 46.29 46.31 T:tinyjambu128v2 48.63 48.66 48.72 T:tinyjambu192v2 53.72 53.76 53.80 T:tinyjambu256v2 70.01 70.06 70.20 T:isapk128av20 119.81 119.86 120.63 T:isapk128v20 146.60 146.67 146.88 T:elephant200v2 162.14 162.17 162.22 T:isapxv20 6943.10 6949.85 6952.99 T:elephant176v2 8000.92 8003.08 8005.27 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 9.70 9.80 9.87 T:aes128gcmv1 10.44 10.48 10.66 aes256gcmv1 13.68 13.86 14.07 ascon128av12 17.08 17.21 17.50 ascon128v12 17.27 17.35 17.58 ascon80pqv12 20.21 20.40 21.01 T:xoodyakround3 25.44 25.54 26.27 ascon128abi32v12 33.77 33.88 34.17 ascon128bi32v12 37.37 37.60 37.77 romulusn 38.21 38.25 38.27 T:schwaemm256128v2 39.24 39.55 40.41 T:grain128aeadv2 42.91 42.95 43.01 T:schwaemm128128v2 44.35 44.40 44.55 T:schwaemm256256v2 49.60 49.70 49.84 T:schwaemm192192v2 49.78 49.90 50.12 romulusm 54.81 54.98 55.09 T:tinyjambu128v2 55.80 55.84 56.14 T:giftcofb128v1 57.87 57.95 58.09 T:tinyjambu192v2 63.27 63.36 63.52 T:tinyjambu256v2 115.41 115.66 115.77 romulust 137.80 138.05 138.33 T:isapa128av20 208.18 208.37 208.86 T:elephant200v2 329.13 329.99 331.04 T:isapk128av20 513.55 513.88 517.36 T:isapa128v20 1987.69 1988.20 1988.95 T:isapk128v20 2425.91 2426.79 2427.66 T:isapxv20 8647.50 8651.43 8655.15 T:elephant176v2 10705.69 10711.18 10720.72 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 9.66 9.70 10.01 T:aes128gcmv1 10.23 10.40 11.02 aes256gcmv1 13.62 13.99 14.13 ascon128av12 17.23 17.27 17.49 ascon128v12 17.33 17.43 17.51 ascon80pqv12 20.05 20.20 20.41 T:xoodyakround3 25.64 25.78 26.53 ascon128abi32v12 33.77 33.88 34.17 ascon128bi32v12 37.64 37.75 38.05 romulusn 38.25 38.28 38.59 T:schwaemm256128v2 39.48 39.89 40.65 T:grain128aeadv2 42.96 42.99 43.08 T:schwaemm128128v2 44.32 44.34 44.45 T:schwaemm256256v2 49.62 49.70 49.81 T:schwaemm192192v2 52.02 52.09 52.21 romulusm 54.52 54.62 54.78 T:tinyjambu128v2 56.07 56.30 56.57 T:giftcofb128v1 57.45 57.59 57.91 T:tinyjambu192v2 63.16 63.30 63.38 T:tinyjambu256v2 115.27 115.49 115.81 romulust 137.90 138.27 138.79 T:isapa128av20 207.91 208.16 209.63 T:elephant200v2 329.85 330.32 330.80 T:isapk128av20 512.75 513.70 515.24 T:isapa128v20 1975.92 1977.63 1988.84 T:isapk128v20 2403.76 2407.07 2408.96 T:isapxv20 8651.27 8653.59 8659.54 T:elephant176v2 10706.76 10709.28 10722.84 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 9.67 9.75 9.85 T:aes128gcmv1 10.24 10.41 10.54 aes256gcmv1 13.55 13.71 14.03 ascon128av12 17.25 17.35 17.45 ascon128v12 17.28 17.45 17.67 ascon80pqv12 20.05 20.41 20.59 T:xoodyakround3 25.64 25.75 25.92 ascon128abi32v12 33.78 33.85 34.02 ascon128bi32v12 37.62 37.66 37.78 romulusn 38.21 38.25 38.27 T:schwaemm256128v2 39.48 39.76 40.58 T:grain128aeadv2 42.85 42.91 42.98 T:schwaemm128128v2 44.28 44.29 44.37 T:schwaemm256256v2 49.55 49.59 49.73 T:schwaemm192192v2 51.99 52.19 52.29 romulusm 54.51 54.61 54.67 T:tinyjambu128v2 56.19 56.26 56.41 T:giftcofb128v1 57.30 57.59 57.68 T:tinyjambu192v2 63.09 63.15 63.38 T:tinyjambu256v2 72.79 72.91 73.27 romulust 87.25 87.45 87.79 T:isapa128av20 207.68 207.95 208.61 T:elephant200v2 219.88 220.07 220.66 T:isapk128av20 271.94 272.09 272.84 T:isapa128v20 1050.16 1050.92 1052.20 T:isapk128v20 1259.02 1259.76 1260.38 T:isapxv20 8645.09 8650.24 8657.47 T:elephant176v2 10707.41 10711.34 10717.07 T:elephant160v2