VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3427U; 2 x 1800MHz; hunsnivy, supercop-20260831

[Page version: 20260922 09:01:03]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 2.54 2.56 2.57 T:aes128gcmv1 2.83 2.85 2.86 aes256gcmv1 8.79 8.80 8.83 ascon128av12 12.82 12.84 12.86 ascon80pqv12 12.84 12.86 12.87 ascon128v12 16.60 16.63 16.66 T:xoodyakround3 16.77 16.80 16.82 ascon128abi32v12 22.84 22.87 22.90 T:schwaemm256128v2 24.14 24.25 24.42 ascon128bi32v12 27.21 27.30 28.20 T:grain128aeadv2 30.24 30.27 30.30 T:schwaemm192192v2 32.56 32.60 32.64 T:schwaemm128128v2 33.33 33.37 33.40 T:schwaemm256256v2 36.01 36.06 36.12 T:giftcofb128v1 36.21 36.26 36.29 romulusn 49.99 50.10 50.24 T:isapa128v20 51.46 51.52 51.57 T:tinyjambu128v2 55.02 55.10 55.25 T:isapa128av20 59.50 59.54 59.59 romulusm 61.59 61.64 61.67 T:tinyjambu192v2 66.98 67.00 67.04 T:tinyjambu256v2 88.57 88.73 89.01 T:isapk128av20 118.33 118.70 119.00 T:isapk128v20 128.10 128.37 128.62 romulust 170.00 170.12 170.34 T:elephant200v2 176.78 178.22 178.81 T:isapxv20 8953.98 8963.96 9009.93 T:elephant176v2 9707.37 9709.75 9713.32 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 3.09 3.10 3.11 T:aes128gcmv1 3.81 3.82 3.83 aes256gcmv1 8.65 8.72 8.78 ascon128av12 12.78 12.80 12.82 ascon128v12 12.83 12.89 12.92 ascon80pqv12 16.27 16.34 16.40 T:xoodyakround3 16.74 16.76 16.79 ascon128abi32v12 22.84 22.87 22.91 T:schwaemm256128v2 24.13 24.16 24.20 ascon128bi32v12 28.39 28.60 29.43 T:grain128aeadv2 30.14 30.19 30.24 T:schwaemm192192v2 32.57 32.61 32.65 T:schwaemm128128v2 33.33 33.37 33.41 T:schwaemm256256v2 35.91 35.97 36.01 T:giftcofb128v1 36.29 36.33 36.38 romulusn 49.93 50.16 50.23 T:isapa128v20 51.59 51.69 51.74 T:tinyjambu128v2 55.01 55.11 55.19 T:isapa128av20 59.53 59.58 59.64 romulusm 62.14 62.18 62.23 T:tinyjambu192v2 67.11 67.16 67.22 T:tinyjambu256v2 88.56 88.70 88.91 T:isapk128av20 118.05 118.55 119.10 T:isapk128v20 127.93 128.05 128.56 romulust 169.99 170.12 170.35 T:elephant200v2 176.06 177.79 191.16 T:isapxv20 8953.17 8961.04 9009.36 T:elephant176v2 9707.77 9710.81 9713.57 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 3.10 3.10 3.12 T:aes128gcmv1 3.81 3.82 3.83 aes256gcmv1 8.70 8.72 8.74 ascon128av12 12.79 12.79 12.81 ascon128v12 12.86 12.89 12.93 ascon80pqv12 16.37 16.40 16.44 T:xoodyakround3 16.75 16.77 16.80 ascon128abi32v12 22.87 22.88 22.92 T:schwaemm256128v2 24.14 24.17 24.20 ascon128bi32v12 24.92 24.98 25.08 T:isapa128v20 28.40 28.58 29.42 T:grain128aeadv2 30.16 30.19 30.23 T:schwaemm192192v2 32.58 32.61 32.63 T:schwaemm128128v2 33.33 33.37 33.40 T:schwaemm256256v2 35.93 35.97 36.01 T:giftcofb128v1 36.30 36.35 36.39 romulusn 37.20 37.29 37.35 T:isapa128av20 43.96 44.01 44.06 romulust 51.61 51.69 51.75 T:tinyjambu128v2 58.31 58.39 58.76 T:isapk128av20 59.53 59.58 59.63 romulusm 62.12 62.16 62.22 T:tinyjambu192v2 67.09 67.15 67.21 T:tinyjambu256v2 73.31 73.41 73.53 T:isapk128v20 104.40 104.73 104.89 T:isapxv20 169.98 170.10 170.35 T:elephant200v2 8955.61 8963.29 9010.21 T:elephant176v2 9707.96 9711.28 9714.11 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 2.17 2.18 2.19 T:aes128gcmv1 2.32 2.33 2.34 aes256gcmv1 8.69 8.72 8.74 ascon128av12 12.56 12.59 12.61 T:xoodyakround3 12.70 12.72 12.74 ascon80pqv12 12.73 12.75 12.77 ascon128v12 16.71 16.73 16.74 ascon128abi32v12 22.70 22.72 22.75 T:schwaemm256128v2 24.19 24.31 24.45 ascon128bi32v12 27.32 27.41 28.26 T:grain128aeadv2 29.75 29.77 29.81 romulusn 30.04 30.10 30.13 T:schwaemm192192v2 32.39 32.40 32.44 T:schwaemm128128v2 33.18 33.20 33.23 T:schwaemm256256v2 36.12 36.14 36.18 T:giftcofb128v1 37.51 37.59 37.76 T:isapa128v20 41.35 41.40 41.44 romulusm 42.60 42.63 42.66 T:tinyjambu128v2 46.15 46.22 46.28 T:isapa128av20 47.29 47.33 47.36 T:tinyjambu192v2 49.73 49.75 49.82 T:tinyjambu256v2 73.53 73.62 73.85 T:isapk128av20 85.82 85.98 86.10 romulust 95.88 96.08 96.34 T:isapk128v20 126.94 127.04 127.16 T:elephant200v2 140.69 141.65 142.31 T:isapxv20 6690.58 6694.63 6728.27 T:elephant176v2 7280.42 7282.05 7283.79 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 2.45 2.46 2.46 T:aes128gcmv1 2.81 2.82 2.83 aes256gcmv1 8.65 8.67 8.69 ascon128av12 12.46 12.48 12.50 T:xoodyakround3 12.73 12.74 12.76 ascon128v12 12.73 12.76 12.81 ascon80pqv12 16.93 16.96 16.97 ascon128abi32v12 22.72 22.73 22.75 T:schwaemm256128v2 24.10 24.13 24.24 ascon128bi32v12 27.97 28.21 28.78 T:grain128aeadv2 29.77 29.80 29.83 romulusn 29.99 30.04 30.10 T:schwaemm192192v2 32.47 32.50 32.52 T:schwaemm128128v2 33.14 33.16 33.21 T:schwaemm256256v2 36.02 36.08 36.13 T:giftcofb128v1 37.51 37.59 37.64 T:isapa128v20 41.43 41.47 41.49 romulusm 42.64 42.67 42.71 T:tinyjambu128v2 46.15 46.19 46.22 T:isapa128av20 47.52 47.55 47.59 T:tinyjambu192v2 50.30 50.32 50.34 T:tinyjambu256v2 73.51 73.56 73.72 T:isapk128av20 85.78 85.88 86.11 romulust 95.90 96.02 96.27 T:isapk128v20 126.94 127.02 127.12 T:elephant200v2 140.81 142.39 148.64 T:isapxv20 6690.53 6694.62 6733.76 T:elephant176v2 7280.67 7282.19 7283.61 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 2.45 2.45 2.46 T:aes128gcmv1 2.81 2.82 2.82 aes256gcmv1 8.68 8.69 8.70 ascon128av12 12.47 12.51 12.54 T:xoodyakround3 12.73 12.74 12.75 ascon128v12 12.73 12.75 12.78 ascon80pqv12 16.94 16.96 16.98 ascon128abi32v12 22.70 22.72 22.74 T:schwaemm256128v2 24.10 24.13 24.20 ascon128bi32v12 24.96 25.01 25.06 T:isapa128v20 27.97 28.17 28.74 T:grain128aeadv2 29.78 29.81 29.84 romulusn 30.00 30.05 30.10 T:schwaemm192192v2 32.49 32.53 32.55 T:schwaemm128128v2 33.16 33.18 33.21 T:schwaemm256256v2 36.07 36.12 36.15 T:giftcofb128v1 37.23 37.26 37.30 T:isapa128av20 41.41 41.44 41.48 romulusm 42.63 42.65 42.68 T:tinyjambu128v2 43.78 43.81 43.83 romulust 47.53 47.56 47.59 T:tinyjambu192v2 50.30 50.32 50.36 T:tinyjambu256v2 58.35 58.39 58.43 T:isapk128av20 73.49 73.55 73.62 T:isapk128v20 104.51 104.92 105.21 T:isapxv20 126.92 127.01 127.11 T:elephant200v2 6690.24 6693.90 6729.78 T:elephant176v2 7280.12 7281.71 7283.02 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 1.79 1.80 1.82 aes256gcmv1 1.80 1.81 1.82 T:aes128gcmv1 8.52 8.54 8.57 T:xoodyakround3 8.58 8.60 8.63 ascon128av12 12.55 12.57 12.60 ascon80pqv12 12.58 12.62 12.65 ascon128v12 16.67 16.70 16.72 ascon128abi32v12 22.57 22.61 22.63 T:schwaemm256128v2 23.22 23.26 23.30 romulusm 23.26 23.30 23.34 romulusn 24.12 24.29 24.54 ascon128bi32v12 24.97 25.04 25.16 T:isapa128v20 27.42 27.52 28.38 T:grain128aeadv2 29.82 29.91 29.97 T:schwaemm192192v2 32.21 32.25 32.29 T:schwaemm128128v2 32.46 32.50 32.56 T:tinyjambu256v2 32.95 32.98 33.00 T:tinyjambu192v2 33.01 33.04 33.07 T:schwaemm256256v2 33.74 33.78 33.80 T:tinyjambu128v2 36.18 36.25 36.29 T:giftcofb128v1 37.19 37.24 37.31 T:isapa128av20 43.56 43.61 43.67 romulust 57.95 58.01 58.36 T:isapk128av20 73.55 73.62 73.72 T:isapk128v20 84.21 84.27 84.32 T:elephant200v2 104.20 104.92 105.29 T:isapxv20 4423.60 4428.44 4450.70 T:elephant176v2 4850.00 4852.60 4854.38 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 1.80 1.80 1.82 T:aes128gcmv1 1.80 1.81 1.82 aes256gcmv1 8.53 8.55 8.58 T:xoodyakround3 8.61 8.64 8.66 ascon128av12 12.64 12.66 12.68 ascon128v12 12.66 12.69 12.73 ascon80pqv12 17.11 17.12 17.14 ascon128abi32v12 22.53 22.55 22.59 T:schwaemm256128v2 23.23 23.27 23.32 romulusn 23.27 23.30 23.33 romulusm 24.00 24.03 24.15 ascon128bi32v12 24.92 24.95 25.03 T:isapa128v20 27.56 27.79 28.06 T:grain128aeadv2 29.86 29.93 29.97 T:schwaemm192192v2 32.38 32.42 32.46 T:schwaemm128128v2 32.91 32.95 32.99 T:tinyjambu192v2 33.01 33.05 33.08 T:schwaemm256256v2 33.47 33.51 33.52 T:tinyjambu256v2 33.69 33.69 33.77 T:tinyjambu128v2 36.18 36.22 36.29 T:giftcofb128v1 37.26 37.29 37.34 T:isapa128av20 43.55 43.60 43.66 romulust 58.04 58.36 58.75 T:isapk128av20 73.97 74.20 74.27 T:isapk128v20 84.23 84.27 84.35 T:elephant200v2 104.57 104.90 105.03 T:isapxv20 4423.96 4428.25 4450.20 T:elephant176v2 4850.45 4852.56 4854.14 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 1.80 1.81 1.82 T:aes128gcmv1 1.81 1.82 1.83 aes256gcmv1 8.50 8.54 8.58 T:xoodyakround3 8.61 8.63 8.65 ascon128av12 12.64 12.66 12.69 ascon128v12 12.63 12.69 12.72 ascon80pqv12 17.11 17.13 17.15 ascon128abi32v12 22.55 22.57 22.59 T:schwaemm256128v2 23.25 23.28 23.33 romulusn 23.26 23.29 23.32 romulusm 23.98 24.00 24.03 ascon128bi32v12 24.89 24.96 25.04 T:isapa128v20 27.55 27.80 28.07 T:grain128aeadv2 29.85 29.93 30.00 T:schwaemm192192v2 32.39 32.44 32.48 T:schwaemm128128v2 32.93 32.96 32.99 T:tinyjambu192v2 33.02 33.05 33.11 T:schwaemm256256v2 33.46 33.49 33.53 T:tinyjambu256v2 33.75 33.77 33.80 T:tinyjambu128v2 36.18 36.23 36.27 T:giftcofb128v1 37.23 37.29 37.33 T:isapa128av20 43.55 43.61 43.66 romulust 58.03 58.33 58.73 T:isapk128av20 73.78 74.15 74.24 T:isapk128v20 84.22 84.27 84.36 T:elephant200v2 104.61 104.97 105.13 T:isapxv20 4423.70 4428.20 4450.43 T:elephant176v2 4851.08 4852.92 4854.68 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 2.39 2.39 2.40 T:aes128gcmv1 2.57 2.58 2.59 aes256gcmv1 8.91 8.92 8.94 ascon128av12 12.67 12.69 12.71 T:xoodyakround3 12.89 12.90 12.92 ascon80pqv12 12.93 12.94 12.96 ascon128v12 17.09 17.10 17.13 ascon128abi32v12 23.33 23.35 23.37 T:schwaemm256128v2 24.62 24.72 24.83 ascon128bi32v12 27.85 27.88 28.68 T:grain128aeadv2 30.28 30.32 30.34 romulusn 30.73 30.74 30.76 T:schwaemm192192v2 32.83 32.86 32.88 T:schwaemm128128v2 34.14 34.16 34.18 T:schwaemm256256v2 36.45 36.47 36.51 T:giftcofb128v1 41.92 41.95 41.97 romulusm 42.97 42.99 43.01 T:tinyjambu128v2 47.66 47.69 47.72 T:tinyjambu192v2 49.24 49.26 49.31 T:isapa128av20 50.11 50.13 50.17 T:tinyjambu256v2 55.04 55.10 55.27 T:isapa128v20 85.55 85.62 85.87 T:isapk128av20 87.17 87.27 87.38 romulust 129.64 129.71 129.82 T:elephant200v2 170.97 171.01 171.14 T:isapk128v20 226.60 227.36 227.42 T:isapxv20 6742.72 6745.03 6778.06 T:elephant176v2 7362.55 7363.83 7364.79 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 2.67 2.67 2.68 T:aes128gcmv1 3.06 3.06 3.07 aes256gcmv1 8.86 8.88 8.90 ascon128av12 12.57 12.60 12.64 T:xoodyakround3 12.92 12.94 12.96 ascon128v12 12.93 12.95 12.98 ascon80pqv12 17.32 17.33 17.34 ascon128abi32v12 23.35 23.38 23.39 T:schwaemm256128v2 24.50 24.56 24.65 ascon128bi32v12 28.47 28.63 29.17 T:grain128aeadv2 30.30 30.35 30.38 romulusn 30.73 30.74 30.76 T:schwaemm192192v2 32.91 32.93 32.96 T:schwaemm128128v2 34.13 34.16 34.19 T:schwaemm256256v2 36.36 36.39 36.45 T:giftcofb128v1 42.05 42.08 42.11 romulusm 42.98 43.02 43.06 T:tinyjambu128v2 47.91 47.93 47.96 T:tinyjambu192v2 49.23 49.24 49.28 T:isapa128av20 50.68 50.70 50.73 T:tinyjambu256v2 54.93 54.97 55.08 T:isapa128v20 85.56 85.62 85.80 T:isapk128av20 87.12 87.20 87.38 romulust 129.63 129.70 129.83 T:elephant200v2 170.95 171.04 171.38 T:isapk128v20 226.79 226.95 233.62 T:isapxv20 6742.84 6744.97 6778.61 T:elephant176v2 7362.34 7363.77 7364.48 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 2.66 2.67 2.67 T:aes128gcmv1 3.06 3.06 3.07 aes256gcmv1 8.87 8.90 8.91 ascon128av12 12.61 12.64 12.65 T:xoodyakround3 12.93 12.94 12.96 ascon128v12 12.93 12.95 12.97 ascon80pqv12 17.33 17.34 17.36 ascon128abi32v12 23.36 23.37 23.39 T:schwaemm256128v2 24.50 24.54 24.63 ascon128bi32v12 28.47 28.64 29.16 T:grain128aeadv2 30.31 30.33 30.35 romulusn 30.72 30.74 30.77 T:schwaemm192192v2 32.91 32.94 32.96 T:schwaemm128128v2 33.82 33.83 33.89 T:isapa128v20 34.13 34.16 34.18 T:schwaemm256256v2 36.39 36.42 36.46 T:giftcofb128v1 38.99 39.02 39.07 T:isapa128av20 42.05 42.08 42.12 romulusm 42.97 43.00 43.05 T:tinyjambu128v2 45.04 45.07 45.10 romulust 47.90 47.93 47.98 T:tinyjambu192v2 50.69 50.71 50.74 T:tinyjambu256v2 65.87 65.90 66.01 T:isapk128av20 112.67 112.72 112.82 T:isapk128v20 129.64 129.69 129.82 T:elephant200v2 148.34 148.58 148.64 T:isapxv20 6742.87 6744.94 6778.91 T:elephant176v2 7362.16 7364.16 7365.45 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 9.54 9.61 9.78 T:aes128gcmv1 11.36 11.42 11.46 aes256gcmv1 13.57 13.64 14.02 ascon128av12 17.18 17.24 17.41 ascon80pqv12 17.27 17.35 17.45 ascon128v12 18.30 18.38 18.50 T:xoodyakround3 25.66 25.69 25.80 ascon128abi32v12 33.89 34.00 34.17 ascon128bi32v12 37.70 37.89 38.10 T:schwaemm256128v2 38.16 38.48 39.42 T:grain128aeadv2 42.12 42.13 42.25 T:schwaemm128128v2 42.49 42.59 42.70 romulusn 44.06 44.20 44.36 T:giftcofb128v1 49.70 49.94 50.86 T:schwaemm192192v2 50.63 50.79 50.97 T:tinyjambu128v2 54.53 54.64 54.85 romulusm 54.87 54.97 55.25 T:schwaemm256256v2 55.91 56.04 56.16 T:tinyjambu192v2 58.63 58.70 58.84 T:tinyjambu256v2 117.11 117.32 117.67 romulust 119.81 120.17 120.59 T:isapa128av20 183.44 183.68 183.96 T:elephant200v2 345.10 345.58 346.35 T:isapk128av20 455.24 456.24 457.89 T:isapa128v20 1869.94 1872.28 1874.81 T:isapk128v20 2167.66 2174.56 2176.14 T:isapxv20 8392.53 8400.49 8447.82 T:elephant176v2 9852.34 9854.29 9858.03 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 9.57 9.63 9.76 T:aes128gcmv1 11.26 11.37 11.58 aes256gcmv1 13.64 13.75 13.89 ascon128av12 17.26 17.33 17.54 ascon80pqv12 17.34 17.38 17.53 ascon128v12 18.33 18.36 18.44 T:xoodyakround3 25.92 25.99 26.11 ascon128abi32v12 33.53 33.63 33.77 ascon128bi32v12 37.90 37.96 38.03 T:schwaemm256128v2 38.71 38.94 39.53 T:grain128aeadv2 42.11 42.22 42.42 T:schwaemm128128v2 42.68 42.80 42.96 romulusn 44.07 44.21 44.38 T:giftcofb128v1 49.89 50.22 50.76 T:schwaemm192192v2 50.58 50.63 50.83 T:tinyjambu128v2 55.18 55.25 55.39 T:schwaemm256256v2 56.16 56.34 56.54 T:tinyjambu192v2 56.80 56.93 57.12 romulusm 59.41 59.50 59.64 T:tinyjambu256v2 117.21 117.46 117.85 romulust 119.63 119.91 120.36 T:isapa128av20 183.29 183.56 183.95 T:elephant200v2 345.57 345.97 346.40 T:isapk128av20 454.35 454.75 456.21 T:isapa128v20 1871.49 1874.07 1876.52 T:isapk128v20 2165.41 2168.62 2181.74 T:isapxv20 8392.44 8397.73 8445.13 T:elephant176v2 9851.70 9854.17 9858.35 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 9.52 9.56 9.61 T:aes128gcmv1 11.25 11.32 11.43 aes256gcmv1 13.59 13.67 13.83 ascon128av12 17.27 17.33 17.53 ascon80pqv12 17.28 17.38 17.48 ascon128v12 18.35 18.47 18.97 T:xoodyakround3 26.03 26.07 26.16 ascon128abi32v12 33.47 33.56 33.65 ascon128bi32v12 37.85 37.91 37.96 T:schwaemm256128v2 38.67 38.85 39.45 T:grain128aeadv2 42.11 42.17 42.21 T:schwaemm128128v2 42.66 42.75 42.85 romulusn 44.12 44.24 44.35 T:giftcofb128v1 49.80 49.95 50.82 T:schwaemm192192v2 50.58 50.69 50.75 T:tinyjambu128v2 55.17 55.28 55.48 T:schwaemm256256v2 56.22 56.36 56.52 T:tinyjambu192v2 56.77 56.89 57.03 romulusm 59.38 59.44 59.57 T:tinyjambu256v2 73.71 73.83 74.02 romulust 79.24 79.30 79.70 T:isapa128av20 183.33 183.50 183.77 T:elephant200v2 226.30 226.55 227.07 T:isapk128av20 236.48 236.77 237.19 T:isapa128v20 997.28 997.63 998.21 T:isapk128v20 1134.10 1135.17 1137.83 T:isapxv20 8392.57 8397.58 8444.43 T:elephant176v2 9851.70 9853.48 9856.85 T:elephant160v2