VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3427U; 2 x 1800MHz; hunsnivy, supercop-20241022

[Page version: 20241120 00:41:35]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 3.12 3.14 3.15 T:aes128gcmv1 3.37 3.39 3.40 aes256gcmv1 9.09 9.11 9.14 ascon128av12 12.74 12.81 12.90 ascon80pqv12 12.82 12.85 12.89 ascon128v12 16.40 16.55 16.70 ascon128abi32v12 18.10 18.27 18.41 T:xoodyakround3 22.76 22.77 22.78 T:schwaemm256128v2 24.75 24.79 24.82 ascon128bi32v12 27.27 27.30 27.31 T:schwaemm256256v2 28.31 28.33 28.38 T:grain128aeadv2 30.02 30.05 30.08 T:schwaemm192192v2 33.05 33.06 33.08 T:schwaemm128128v2 36.78 36.82 36.85 romulusn 44.92 44.97 45.06 T:giftcofb128v1 54.86 54.96 55.02 T:isapa128v20 54.86 54.96 55.04 T:isapa128av20 56.24 56.29 56.35 T:tinyjambu128v2 60.12 60.16 60.24 romulusm 60.99 61.04 61.15 T:tinyjambu192v2 69.74 69.79 69.84 T:tinyjambu256v2 95.30 95.47 95.71 T:isapk128av20 119.48 119.56 119.62 romulust 128.12 128.18 128.47 T:isapk128v20 190.60 190.89 191.26 T:elephant200v2 192.27 193.99 194.45 T:isapxv20 9239.70 9280.27 9286.39 T:elephant176v2 10548.69 10551.83 10556.53 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 3.18 3.20 3.21 T:aes128gcmv1 3.43 3.47 3.49 aes256gcmv1 8.75 8.90 8.95 ascon128av12 12.76 12.81 12.89 ascon128v12 12.84 12.87 12.93 ascon80pqv12 16.60 16.82 16.83 ascon128abi32v12 17.85 17.90 17.93 T:xoodyakround3 22.76 22.77 22.78 T:schwaemm256128v2 24.69 24.72 24.79 ascon128bi32v12 27.25 27.31 27.35 T:schwaemm256256v2 29.14 29.18 29.20 T:grain128aeadv2 30.01 30.03 30.04 T:schwaemm192192v2 33.03 33.07 33.11 T:schwaemm128128v2 36.85 36.88 36.91 romulusn 44.99 45.06 45.12 T:giftcofb128v1 54.78 54.86 54.95 T:tinyjambu128v2 54.80 54.91 55.01 T:isapa128av20 54.89 54.99 55.22 T:isapa128v20 60.33 60.40 60.45 romulusm 60.81 60.84 60.89 T:tinyjambu192v2 69.56 69.64 69.68 T:tinyjambu256v2 95.29 95.38 95.89 T:isapk128av20 119.44 119.60 119.82 romulust 126.27 128.27 128.38 T:isapk128v20 190.50 190.77 191.24 T:elephant200v2 193.18 193.41 195.11 T:isapxv20 9236.59 9277.67 9284.48 T:elephant176v2 10547.30 10550.30 10553.82 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 3.18 3.19 3.20 T:aes128gcmv1 3.45 3.47 3.48 aes256gcmv1 8.74 8.78 8.92 ascon128av12 12.77 12.80 12.88 ascon128v12 12.82 12.84 12.87 ascon80pqv12 16.58 16.81 16.83 ascon128abi32v12 17.91 17.93 17.98 T:xoodyakround3 22.76 22.77 22.78 T:schwaemm256128v2 24.73 24.74 24.77 ascon128bi32v12 27.26 27.32 27.34 T:schwaemm256256v2 27.87 27.94 27.97 T:isapa128v20 29.14 29.17 29.19 T:grain128aeadv2 30.01 30.03 30.04 T:schwaemm192192v2 33.05 33.07 33.11 T:schwaemm128128v2 35.52 35.59 35.67 T:isapa128av20 36.87 36.93 36.98 romulusn 41.13 41.17 41.25 romulust 44.99 45.06 45.12 T:giftcofb128v1 54.73 54.88 54.98 T:tinyjambu128v2 60.27 60.38 60.48 romulusm 60.78 60.84 60.93 T:tinyjambu192v2 63.24 63.39 63.93 T:isapk128av20 69.60 69.64 69.68 T:tinyjambu256v2 79.54 79.95 80.00 T:isapk128v20 113.58 113.66 113.94 T:isapxv20 190.66 191.13 191.48 T:elephant200v2 9232.47 9283.27 9287.35 T:elephant176v2 10545.96 10548.65 10554.20 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 2.46 2.48 2.48 T:aes128gcmv1 2.60 2.61 2.61 aes256gcmv1 8.82 8.84 8.88 ascon128av12 12.64 12.68 12.78 ascon80pqv12 12.72 12.75 12.80 ascon128v12 13.78 13.81 13.84 T:xoodyakround3 16.41 16.44 16.53 ascon128abi32v12 22.63 22.64 22.65 T:schwaemm256128v2 24.80 24.82 24.86 ascon128bi32v12 27.11 27.18 27.19 T:schwaemm256256v2 28.23 28.26 28.27 T:grain128aeadv2 29.88 29.90 29.93 T:schwaemm192192v2 30.14 30.15 30.19 romulusn 32.91 32.92 32.94 T:schwaemm128128v2 41.24 41.41 41.58 T:isapa128v20 41.79 41.82 41.85 romulusm 44.97 45.00 45.08 T:giftcofb128v1 46.15 46.18 46.24 T:tinyjambu128v2 46.14 46.22 46.24 T:isapa128av20 48.47 48.52 48.59 T:tinyjambu192v2 53.37 53.41 53.43 T:tinyjambu256v2 79.11 79.22 79.26 T:isapk128av20 80.02 80.12 80.25 romulust 103.61 103.65 103.96 T:isapk128v20 143.41 143.58 143.84 T:elephant200v2 153.29 153.98 154.24 T:isapxv20 6898.62 6923.51 6933.49 T:elephant176v2 7906.58 7910.03 7912.42 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 2.48 2.50 2.51 T:aes128gcmv1 2.63 2.66 2.67 aes256gcmv1 8.64 8.67 8.74 ascon128av12 12.65 12.69 12.74 ascon128v12 12.69 12.82 12.88 ascon80pqv12 13.63 13.65 13.67 T:xoodyakround3 16.46 16.48 16.50 ascon128abi32v12 22.62 22.64 22.65 T:schwaemm256128v2 24.64 24.67 24.70 ascon128bi32v12 27.12 27.18 27.19 T:schwaemm256256v2 28.63 28.65 28.68 T:grain128aeadv2 29.88 29.89 29.91 T:schwaemm192192v2 30.16 30.19 30.22 romulusn 32.92 32.93 32.94 T:schwaemm128128v2 41.22 41.44 41.65 T:isapa128v20 41.88 41.90 41.92 romulusm 45.01 45.04 45.10 T:giftcofb128v1 45.83 45.90 45.94 T:tinyjambu128v2 46.17 46.24 46.35 T:isapa128av20 48.23 48.28 48.37 T:tinyjambu192v2 53.32 53.36 53.39 T:tinyjambu256v2 79.13 79.17 79.44 T:isapk128av20 80.06 80.14 80.30 romulust 103.64 103.70 104.14 T:isapk128v20 143.44 143.63 143.93 T:elephant200v2 153.32 153.41 154.17 T:isapxv20 6898.11 6927.08 6932.80 T:elephant176v2 7907.45 7910.05 7913.33 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 2.50 2.51 2.51 T:aes128gcmv1 2.64 2.65 2.66 aes256gcmv1 8.65 8.67 8.81 ascon128av12 12.66 12.71 12.73 ascon128v12 12.65 12.76 12.86 ascon80pqv12 13.67 13.69 13.70 T:xoodyakround3 16.47 16.48 16.50 ascon128abi32v12 22.62 22.63 22.65 T:schwaemm256128v2 24.67 24.70 24.71 ascon128bi32v12 27.13 27.18 27.20 T:schwaemm256256v2 27.81 27.91 28.01 T:isapa128v20 28.65 28.66 28.68 T:grain128aeadv2 29.88 29.89 29.91 T:schwaemm192192v2 30.18 30.20 30.23 romulusn 32.92 32.94 32.95 T:schwaemm128128v2 36.48 36.56 38.06 T:isapa128av20 40.89 40.94 41.14 romulust 41.86 41.89 41.92 romulusm 45.03 45.06 45.08 T:giftcofb128v1 45.87 45.90 45.93 T:tinyjambu128v2 48.24 48.31 48.42 T:tinyjambu192v2 53.33 53.35 53.37 T:tinyjambu256v2 63.10 63.15 63.18 T:isapk128av20 78.91 79.27 79.39 T:isapk128v20 113.52 113.64 114.19 T:isapxv20 143.45 143.68 143.98 T:elephant200v2 6897.05 6925.65 6932.45 T:elephant176v2 7907.83 7911.85 7913.08 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 1.80 1.83 1.84 T:aes128gcmv1 1.80 1.84 1.86 aes256gcmv1 8.52 8.55 8.59 ascon128av12 9.38 9.42 9.44 T:xoodyakround3 12.56 12.59 12.63 ascon128v12 12.58 12.60 12.65 ascon80pqv12 16.50 16.51 16.52 ascon128abi32v12 22.48 22.50 22.52 T:schwaemm256128v2 23.45 23.48 23.50 romulusm 23.47 23.48 23.53 romulusn 24.87 24.89 24.95 ascon128bi32v12 27.00 27.05 27.07 T:schwaemm256256v2 27.68 27.84 27.97 T:isapa128v20 28.14 28.18 28.21 T:grain128aeadv2 29.75 29.77 29.80 T:schwaemm192192v2 32.79 32.80 32.83 T:schwaemm128128v2 35.95 35.97 36.02 T:tinyjambu192v2 36.04 36.10 36.14 T:tinyjambu128v2 37.05 37.08 37.12 T:tinyjambu256v2 37.38 37.41 37.49 T:isapa128av20 40.50 40.61 40.67 romulust 45.05 45.09 45.14 T:giftcofb128v1 62.89 62.93 63.03 T:isapk128av20 79.07 79.14 79.19 T:isapk128v20 96.45 96.64 96.90 T:elephant200v2 113.47 114.31 114.53 T:isapxv20 4568.28 4584.78 4589.57 T:elephant176v2 5267.11 5269.11 5271.96 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 1.79 1.83 1.84 T:aes128gcmv1 1.82 1.85 1.86 aes256gcmv1 8.55 8.59 8.62 ascon128av12 9.38 9.41 9.45 T:xoodyakround3 12.45 12.52 12.69 ascon80pqv12 12.55 12.60 12.62 ascon128v12 16.13 16.16 16.18 ascon128abi32v12 22.49 22.51 22.52 T:schwaemm256128v2 23.45 23.48 23.56 romulusm 23.48 23.51 23.54 romulusn 24.60 24.63 24.70 ascon128bi32v12 26.99 27.05 27.07 T:schwaemm256256v2 27.79 28.06 28.10 T:isapa128v20 28.12 28.14 28.17 T:grain128aeadv2 29.75 29.77 29.79 T:schwaemm192192v2 32.78 32.79 32.80 T:schwaemm128128v2 35.72 35.76 35.82 T:tinyjambu192v2 36.86 36.87 36.92 T:tinyjambu128v2 37.06 37.10 37.15 T:tinyjambu256v2 37.38 37.43 37.51 T:isapa128av20 40.54 40.58 40.67 romulust 45.04 45.08 45.18 T:giftcofb128v1 62.82 62.90 62.97 T:isapk128av20 79.04 79.26 80.06 T:isapk128v20 96.35 96.73 96.98 T:elephant200v2 113.35 113.42 114.15 T:isapxv20 4570.90 4582.99 4587.42 T:elephant176v2 5268.09 5269.39 5273.47 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 1.82 1.82 1.84 T:aes128gcmv1 1.85 1.86 1.87 aes256gcmv1 8.55 8.58 8.60 ascon128av12 9.40 9.42 9.45 T:xoodyakround3 12.49 12.53 12.84 ascon80pqv12 12.53 12.57 12.62 ascon128v12 16.14 16.16 16.18 ascon128abi32v12 22.50 22.51 22.52 T:schwaemm256128v2 23.43 23.45 23.50 romulusm 23.46 23.51 23.56 romulusn 24.59 24.63 24.66 ascon128bi32v12 27.00 27.05 27.07 T:schwaemm256256v2 27.06 27.75 27.95 T:isapa128v20 28.13 28.16 28.19 T:grain128aeadv2 29.75 29.77 29.78 T:schwaemm192192v2 32.78 32.79 32.81 T:schwaemm128128v2 35.72 35.75 35.80 T:tinyjambu192v2 36.86 36.89 36.91 T:tinyjambu128v2 37.06 37.09 37.15 T:tinyjambu256v2 37.34 37.41 37.47 T:isapa128av20 40.49 40.58 40.63 romulust 45.01 45.06 45.15 T:giftcofb128v1 62.89 62.94 62.98 T:isapk128av20 79.08 79.12 79.16 T:isapk128v20 96.47 96.63 97.13 T:elephant200v2 113.33 113.46 114.29 T:isapxv20 4564.26 4582.67 4587.95 T:elephant176v2 5267.56 5268.90 5273.81 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 2.69 2.69 2.71 T:aes128gcmv1 2.84 2.85 2.85 aes256gcmv1 9.04 9.06 9.09 ascon128av12 12.86 12.88 12.95 ascon80pqv12 12.93 12.95 12.99 ascon128v12 13.90 13.91 14.05 T:xoodyakround3 16.83 16.94 17.04 ascon128abi32v12 23.28 23.29 23.29 T:schwaemm256128v2 25.19 25.23 25.25 ascon128bi32v12 27.85 27.91 27.94 T:schwaemm256256v2 28.71 28.72 28.75 T:grain128aeadv2 30.45 30.47 30.49 romulusn 30.57 30.58 30.59 T:schwaemm192192v2 33.34 33.36 33.37 T:schwaemm128128v2 42.14 42.17 42.18 romulusm 45.49 45.52 45.53 T:giftcofb128v1 46.51 46.55 46.61 T:tinyjambu128v2 48.89 48.90 48.92 T:tinyjambu192v2 49.99 50.02 50.05 T:isapa128av20 53.81 53.82 53.84 T:tinyjambu256v2 61.08 61.18 61.31 T:isapa128v20 81.24 81.27 81.29 romulust 90.37 90.42 90.50 T:isapk128av20 146.49 146.74 146.96 T:elephant200v2 182.55 182.59 182.85 T:isapk128v20 248.72 248.82 249.37 T:isapxv20 6950.18 6975.66 6982.17 T:elephant176v2 7994.14 7998.37 8002.07 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 2.71 2.72 2.73 T:aes128gcmv1 2.89 2.90 2.91 aes256gcmv1 8.84 8.85 8.88 ascon128av12 12.86 12.91 12.94 ascon128v12 12.90 12.95 13.06 ascon80pqv12 13.80 13.80 13.81 T:xoodyakround3 16.86 16.87 16.88 ascon128abi32v12 23.28 23.29 23.31 T:schwaemm256128v2 25.06 25.08 25.10 ascon128bi32v12 27.86 27.90 27.92 T:schwaemm256256v2 29.09 29.11 29.13 T:grain128aeadv2 30.51 30.52 30.54 romulusn 30.56 30.57 30.58 T:schwaemm192192v2 33.34 33.35 33.35 T:schwaemm128128v2 42.32 42.36 42.37 romulusm 45.49 45.51 45.56 T:giftcofb128v1 46.23 46.26 46.30 T:tinyjambu128v2 48.63 48.68 48.72 T:tinyjambu192v2 49.99 50.03 50.05 T:isapa128av20 53.74 53.76 53.79 T:tinyjambu256v2 61.08 61.14 61.24 T:isapa128v20 81.27 81.29 81.35 romulust 90.36 90.39 90.53 T:isapk128av20 146.60 146.75 147.08 T:elephant200v2 182.54 182.56 182.60 T:isapk128v20 248.85 248.96 249.40 T:isapxv20 6949.55 6977.47 6982.07 T:elephant176v2 7995.36 7998.23 8000.60 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 2.71 2.71 2.71 T:aes128gcmv1 2.89 2.89 2.90 aes256gcmv1 8.82 8.88 8.90 ascon128av12 12.87 12.90 13.05 ascon80pqv12 12.88 12.90 12.93 ascon128v12 13.84 13.85 13.86 T:xoodyakround3 16.86 16.87 16.88 ascon128abi32v12 23.28 23.29 23.30 T:schwaemm256128v2 25.07 25.08 25.09 ascon128bi32v12 27.85 27.90 27.92 T:schwaemm256256v2 29.10 29.11 29.12 T:grain128aeadv2 30.52 30.54 30.54 romulusn 30.55 30.56 30.57 T:schwaemm192192v2 33.34 33.34 33.37 T:schwaemm128128v2 38.03 38.10 38.13 T:isapa128v20 38.64 38.66 38.70 T:isapa128av20 42.05 42.07 42.11 romulust 42.31 42.34 42.37 romulusm 45.50 45.51 45.55 T:giftcofb128v1 46.26 46.28 46.32 T:tinyjambu128v2 48.68 48.69 48.73 T:tinyjambu192v2 53.75 53.77 53.79 T:tinyjambu256v2 70.26 70.27 70.33 T:isapk128av20 120.49 120.55 121.36 T:isapk128v20 146.65 146.84 146.98 T:elephant200v2 162.43 162.51 162.89 T:isapxv20 6947.57 6978.38 6981.15 T:elephant176v2 7993.98 7996.56 8000.00 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 9.49 9.55 9.63 T:aes128gcmv1 10.41 10.53 10.73 aes256gcmv1 13.66? 14.24? 21.26? ascon128av12 17.13 17.21 17.58 ascon128v12 17.30 17.45 17.46 ascon80pqv12 20.13 20.38 20.76 T:xoodyakround3 25.43 25.63 26.11 ascon128abi32v12 33.77 33.90 34.16 ascon128bi32v12 37.88 37.97 38.14 romulusn 38.21 38.23 38.27 T:schwaemm256128v2 38.91 39.03 39.16 T:grain128aeadv2 42.88 42.91 42.95 T:schwaemm128128v2 44.38 44.44 44.57 T:schwaemm256256v2 49.64 49.71 49.81 T:schwaemm192192v2 50.13 50.35 51.62 romulusm 54.74 54.93 55.04 T:tinyjambu128v2 55.73 55.84 56.05 T:giftcofb128v1 57.84 57.98 58.09 T:tinyjambu192v2 63.29 63.50 63.76 T:tinyjambu256v2 109.19 109.51 109.96 romulust 138.00 138.16 139.09 T:isapa128av20 208.02 208.50 209.95 T:elephant200v2 330.74 331.37 332.98 T:isapk128av20 513.07 513.46 515.37 T:isapa128v20 1975.93 1975.99 1976.77 T:isapk128v20 2409.38 2410.94 2420.45 T:isapxv20 8667.09 8688.65 8696.88 T:elephant176v2 10707.54 10711.08 10719.12 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 9.21 9.30 9.54 T:aes128gcmv1 10.27 10.39 10.95 aes256gcmv1 13.71 13.90 14.16 ascon128av12 17.16 17.29 17.59 ascon128v12 17.30 17.47 17.75 ascon80pqv12 19.96 20.04 20.38 T:xoodyakround3 25.59 25.83 26.33 ascon128abi32v12 33.77 33.95 34.38 ascon128bi32v12 37.92 38.08 38.20 romulusn 38.23 38.37 38.80 T:schwaemm256128v2 39.30 39.39 39.60 T:grain128aeadv2 42.90 43.01 43.11 T:schwaemm128128v2 44.38 44.44 44.52 T:schwaemm256256v2 49.59 49.62 49.69 T:schwaemm192192v2 52.40 52.51 52.77 romulusm 54.55 54.67 54.86 T:tinyjambu128v2 56.27 56.34 56.55 T:giftcofb128v1 57.55 57.65 57.93 T:tinyjambu192v2 63.18 63.38 63.80 T:tinyjambu256v2 109.02 109.27 109.36 romulust 138.62 138.87 139.03 T:isapa128av20 208.21 209.01 209.74 T:elephant200v2 330.22 331.51 331.65 T:isapk128av20 513.61 514.18 516.38 T:isapa128v20 1975.78 1975.94 1976.74 T:isapk128v20 2416.99 2420.80 2421.80 T:isapxv20 8660.25 8689.73 8699.40 T:elephant176v2 10702.14 10708.95 10712.77 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 9.23 9.31 9.46 T:aes128gcmv1 10.19 10.27 10.49 aes256gcmv1 13.54 13.65 14.01 ascon128av12 17.23 17.27 17.45 ascon128v12 17.36 17.50 17.73 ascon80pqv12 20.03 20.39 20.52 T:xoodyakround3 25.61 25.71 25.94 ascon128abi32v12 33.86 33.92 34.36 ascon128bi32v12 38.08 38.16 38.27 romulusn 38.22 38.24 38.29 T:schwaemm256128v2 39.15 39.27 39.34 T:grain128aeadv2 42.87 42.91 43.02 T:schwaemm128128v2 44.36 44.38 44.42 T:schwaemm256256v2 49.55 49.59 49.60 T:schwaemm192192v2 52.22 52.42 52.49 romulusm 54.52 54.62 54.73 T:tinyjambu128v2 56.16 56.27 56.36 T:giftcofb128v1 57.42 57.56 57.81 T:tinyjambu192v2 63.04 63.15 63.22 T:tinyjambu256v2 68.77 68.97 69.27 romulust 87.70 87.82 88.20 T:isapa128av20 207.85 208.41 210.02 T:elephant200v2 220.88 221.20 222.00 T:isapk128av20 272.09 272.20 273.13 T:isapa128v20 1050.99 1051.16 1051.48 T:isapk128v20 1262.88 1266.13 1267.03 T:isapxv20 8654.73 8691.14 8695.05 T:elephant176v2 10702.29 10711.42 10722.04 T:elephant160v2