VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Sandy Bridge+AES (206a7); 2011 Intel Xeon E3-1225; 4 x 3100MHz; hydra7, supercop-20260217

[Page version: 20260319 20:29:39]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 3.33 3.34 3.35 T:aes128gcmv1 3.58 3.59 3.60 aes256gcmv1 10.12 10.14 10.16 ascon128av12 14.95 14.97 15.00 ascon80pqv12 15.04 15.07 15.09 ascon128v12 18.57 18.63 18.71 T:xoodyakround3 18.91 18.92 18.94 ascon128abi32v12 27.20 27.24 27.32 T:schwaemm256128v2 27.92 27.97 28.52 ascon128bi32v12 28.58 28.60 28.63 T:grain128aeadv2 34.58 34.97 35.02 T:schwaemm256256v2 35.91 35.98 36.05 T:schwaemm192192v2 36.51 36.67 36.73 romulusn 38.67 38.74 38.80 T:schwaemm128128v2 48.39 48.45 48.51 T:giftcofb128v1 56.89 56.94 57.01 T:isapa128v20 59.50 59.53 59.59 T:tinyjambu128v2 60.18 60.27 60.34 romulusm 61.12 61.19 61.32 T:isapa128av20 71.89 71.98 72.04 T:tinyjambu192v2 73.49 73.55 73.62 T:tinyjambu256v2 107.74 107.97 108.16 T:isapk128av20 126.55 126.61 126.72 romulust 143.70 144.01 144.80 T:isapk128v20 195.47 195.69 195.99 T:elephant200v2 210.15 211.03 212.04 T:isapxv20 11014.98 11019.62 11022.86 T:elephant176v2 12727.15 12729.96 12732.43 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 3.31 3.32 3.34 T:aes128gcmv1 3.57 3.58 3.59 aes256gcmv1 10.05 10.07 10.10 ascon128av12 14.96 14.99 15.02 ascon80pqv12 14.98 15.01 15.04 ascon128v12 18.26 18.30 18.41 T:xoodyakround3 18.29 18.32 18.34 ascon128abi32v12 27.14 27.21 27.28 T:schwaemm256128v2 27.46 27.49 27.53 ascon128bi32v12 30.34 30.38 30.41 T:grain128aeadv2 34.64 34.95 34.98 T:schwaemm256256v2 35.85 35.93 35.97 T:schwaemm192192v2 36.62 36.77 36.85 romulusn 38.66 38.74 38.86 T:schwaemm128128v2 48.46 48.52 48.58 T:giftcofb128v1 56.87 56.94 57.05 T:isapa128v20 59.73 59.78 59.83 T:tinyjambu128v2 60.29 60.34 60.41 romulusm 61.13 61.22 61.37 T:isapa128av20 72.16 72.24 72.34 T:tinyjambu192v2 74.11 74.16 74.25 T:tinyjambu256v2 107.61 107.96 108.23 T:isapk128av20 126.55 126.63 126.76 romulust 143.56 143.87 144.21 T:isapk128v20 195.45 195.69 196.03 T:elephant200v2 210.08 210.47 211.02 T:isapxv20 11015.80 11020.65 11023.83 T:elephant176v2 12726.60 12729.69 12731.14 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 3.31 3.32 3.33 T:aes128gcmv1 3.57 3.58 3.59 aes256gcmv1 10.05 10.07 10.10 ascon128av12 14.97 15.00 15.02 ascon80pqv12 14.99 15.01 15.04 ascon128v12 18.28 18.30 18.34 ascon128abi32v12 18.37 18.48 18.53 T:xoodyakround3 27.15 27.21 27.28 T:schwaemm256128v2 27.45 27.49 27.53 ascon128bi32v12 27.98 28.07 28.12 T:isapa128v20 30.35 30.38 30.42 T:grain128aeadv2 34.64 34.95 34.99 T:schwaemm256256v2 35.86 35.91 35.98 T:schwaemm192192v2 36.64 36.77 36.82 romulusn 38.69 38.76 38.84 T:schwaemm128128v2 41.64 41.72 41.80 T:isapa128av20 43.42 43.48 43.53 romulust 48.46 48.53 48.58 T:giftcofb128v1 59.75 59.79 59.82 T:tinyjambu128v2 60.28 60.35 60.43 romulusm 71.25 71.36 71.50 T:isapk128av20 72.13 72.24 72.29 T:tinyjambu192v2 74.13 74.20 74.26 T:tinyjambu256v2 89.51 89.61 89.72 T:isapk128v20 123.29 123.36 123.60 T:isapxv20 195.47 195.66 196.02 T:elephant200v2 11014.70 11019.77 11022.73 T:elephant176v2 12727.00 12729.62 12731.27 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 2.57 2.58 2.59 T:aes128gcmv1 2.70 2.71 2.71 aes256gcmv1 10.01 10.03 10.05 ascon128av12 13.92 13.97 14.07 T:xoodyakround3 14.85 14.87 14.89 ascon80pqv12 14.89 14.91 14.92 ascon128v12 18.56 18.58 18.61 ascon128abi32v12 27.03 27.06 27.10 T:schwaemm256128v2 27.64 27.69 27.97 ascon128bi32v12 28.59 28.61 28.63 T:grain128aeadv2 30.04 30.12 30.26 romulusn 34.42 34.67 34.71 T:schwaemm256256v2 35.77 35.81 35.86 T:schwaemm192192v2 38.57 38.63 38.67 T:schwaemm128128v2 41.87 41.92 41.98 romulusm 42.42 42.55 42.64 T:isapa128v20 47.98 48.04 48.10 T:tinyjambu128v2 48.33 48.39 48.45 T:giftcofb128v1 51.50 51.56 51.65 T:isapa128av20 55.30 55.34 55.38 T:tinyjambu256v2 55.89 55.93 55.99 T:tinyjambu192v2 84.78 84.82 84.88 romulust 89.67 89.80 89.93 T:isapk128av20 116.62 116.83 117.34 T:isapk128v20 146.32 146.47 146.68 T:elephant200v2 167.05 167.55 168.23 T:isapxv20 8230.26 8232.71 8234.55 T:elephant176v2 9544.17 9546.17 9550.86 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 2.57 2.58 2.59 T:aes128gcmv1 2.70 2.71 2.72 aes256gcmv1 10.00 10.02 10.03 ascon128av12 13.85 13.88 13.90 T:xoodyakround3 14.89 14.91 14.92 ascon80pqv12 14.90 14.92 14.94 ascon128v12 18.25 18.26 18.28 ascon128abi32v12 27.03 27.08 27.14 T:schwaemm256128v2 27.41 27.43 27.44 ascon128bi32v12 29.69 29.73 29.81 T:grain128aeadv2 30.03 30.18 30.27 romulusn 34.41 34.69 34.72 T:schwaemm256256v2 35.70 35.76 35.82 T:schwaemm192192v2 38.49 38.54 38.58 T:schwaemm128128v2 41.86 41.90 41.93 romulusm 42.49 42.57 42.72 T:isapa128v20 48.09 48.13 48.16 T:tinyjambu128v2 48.40 48.44 48.48 T:giftcofb128v1 51.55 51.61 51.64 T:isapa128av20 55.63 55.65 55.71 T:tinyjambu256v2 56.13 56.17 56.24 T:tinyjambu192v2 84.79 84.84 84.91 romulust 89.70 89.82 89.96 T:isapk128av20 116.66 116.91 117.37 T:isapk128v20 146.34 146.47 146.71 T:elephant200v2 166.81 166.93 167.30 T:isapxv20 8230.14 8232.33 8233.58 T:elephant176v2 9543.88 9545.51 9547.11 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 2.57 2.58 2.58 T:aes128gcmv1 2.70 2.71 2.72 aes256gcmv1 10.00 10.02 10.03 ascon128av12 13.86 13.92 13.94 T:xoodyakround3 14.88 14.91 15.20 ascon80pqv12 14.90 14.91 14.93 ascon128v12 18.26 18.28 18.30 ascon128abi32v12 27.03 27.06 27.11 T:schwaemm256128v2 27.42 27.43 27.45 ascon128bi32v12 28.06 28.08 28.10 T:isapa128v20 29.70 29.73 29.79 T:grain128aeadv2 30.05 30.19 30.27 romulusn 34.37 34.69 34.76 T:schwaemm256256v2 35.70 35.76 35.82 T:schwaemm192192v2 38.50 38.55 38.60 T:schwaemm128128v2 41.79 41.82 41.86 T:isapa128av20 41.86 41.89 41.93 romulusm 43.22 43.25 43.30 romulust 48.08 48.12 48.16 T:tinyjambu128v2 48.40 48.43 48.46 T:giftcofb128v1 55.60 55.64 55.69 T:tinyjambu256v2 56.13 56.19 56.25 T:tinyjambu192v2 71.53 71.58 71.69 T:isapk128av20 89.62 89.70 89.87 T:isapk128v20 123.35 123.41 123.64 T:isapxv20 146.34 146.51 146.69 T:elephant200v2 8230.14 8232.46 8234.53 T:elephant176v2 9543.95 9545.43 9547.03 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 1.81 1.82 1.83 T:aes128gcmv1 1.82 1.83 1.84 aes256gcmv1 9.35 9.38 9.40 T:xoodyakround3 9.90 9.92 9.94 ascon128av12 14.70 14.73 14.76 ascon128v12 14.74 14.76 14.78 ascon80pqv12 18.22 18.25 18.27 ascon128abi32v12 23.53 23.61 23.81 romulusn 23.52 23.61 23.71 romulusm 26.83 26.90 26.97 T:schwaemm256128v2 27.33 27.36 27.40 ascon128bi32v12 28.04 28.08 28.12 T:isapa128v20 28.57 28.60 28.63 T:grain128aeadv2 34.51 35.11 35.20 T:schwaemm256256v2 35.60 35.69 35.74 T:schwaemm192192v2 36.44 36.52 36.56 T:tinyjambu128v2 37.08 37.14 37.20 T:tinyjambu256v2 38.44 38.51 38.57 T:schwaemm128128v2 39.89 39.94 40.00 T:tinyjambu192v2 41.84 41.90 41.96 T:isapa128av20 42.98 43.03 43.08 romulust 48.29 48.34 48.39 T:giftcofb128v1 71.46 71.60 71.77 T:isapk128av20 89.71 89.87 90.01 T:isapk128v20 97.80 97.90 97.99 T:elephant200v2 123.58 124.04 124.33 T:isapxv20 5443.22 5444.41 5445.78 T:elephant176v2 6360.98 6362.30 6363.30 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 1.83 1.84 1.85 T:aes128gcmv1 1.82 1.84 1.85 aes256gcmv1 9.33 9.36 9.39 T:xoodyakround3 9.91 9.94 9.97 ascon128av12 14.78 14.80 14.83 ascon80pqv12 14.80 14.83 14.86 ascon128v12 18.22 18.24 18.26 ascon128abi32v12 23.41 23.44 23.48 romulusm 23.47 23.53 23.71 romulusn 26.88 26.92 26.99 T:schwaemm256128v2 27.35 27.38 27.40 ascon128bi32v12 28.01 28.07 28.11 T:isapa128v20 29.03 29.08 29.25 T:grain128aeadv2 34.08 34.44 34.98 T:schwaemm256256v2 35.55 35.61 35.67 T:schwaemm192192v2 36.49 36.52 36.55 T:tinyjambu128v2 37.06 37.13 37.20 T:tinyjambu256v2 38.33 38.39 38.46 T:schwaemm128128v2 40.04 40.12 40.17 T:tinyjambu192v2 41.84 41.90 41.98 T:isapa128av20 43.00 43.04 43.08 romulust 48.26 48.33 48.39 T:giftcofb128v1 71.47 71.60 71.75 T:isapk128av20 89.64 89.79 89.97 T:isapk128v20 97.81 97.90 98.01 T:elephant200v2 123.32 123.40 123.62 T:isapxv20 5443.55 5444.91 5447.34 T:elephant176v2 6360.75 6362.14 6363.09 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 1.83 1.84 1.85 T:aes128gcmv1 1.83 1.84 1.85 aes256gcmv1 9.34 9.37 9.39 T:xoodyakround3 9.93 9.95 9.97 ascon128av12 14.79 14.81 14.83 ascon80pqv12 14.81 14.83 14.86 ascon128v12 18.22 18.24 18.27 ascon128abi32v12 23.41 23.45 23.49 romulusm 23.49 23.57 23.75 romulusn 26.87 26.92 26.99 T:schwaemm256128v2 27.36 27.38 27.40 ascon128bi32v12 28.03 28.08 28.12 T:isapa128v20 29.03 29.08 29.24 T:grain128aeadv2 34.08 34.43 34.47 T:schwaemm256256v2 35.55 35.62 35.68 T:schwaemm192192v2 36.47 36.50 36.53 T:tinyjambu128v2 37.06 37.13 37.19 T:tinyjambu256v2 38.29 38.35 38.42 T:schwaemm128128v2 40.03 40.07 40.13 T:tinyjambu192v2 41.82 41.92 41.99 T:isapa128av20 42.99 43.04 43.09 romulust 48.29 48.35 48.41 T:giftcofb128v1 71.47 71.63 71.77 T:isapk128av20 89.67 89.80 89.95 T:isapk128v20 97.79 97.90 98.00 T:elephant200v2 123.32 123.39 123.64 T:isapxv20 5443.36 5444.72 5445.40 T:elephant176v2 6361.00 6362.35 6363.60 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 2.80 2.80 2.81 T:aes128gcmv1 2.94 2.95 2.95 aes256gcmv1 10.25 10.26 10.27 ascon128av12 14.13 14.16 14.19 T:xoodyakround3 15.08 15.10 15.11 ascon80pqv12 15.11 15.12 15.13 ascon128v12 18.97 18.99 19.01 ascon128abi32v12 27.82 27.86 27.90 T:schwaemm256128v2 28.02 28.04 28.33 ascon128bi32v12 29.08 29.09 29.11 T:grain128aeadv2 30.49 30.55 30.70 romulusn 35.32 35.60 35.62 T:schwaemm256256v2 36.58 36.61 36.65 T:schwaemm192192v2 39.08 39.11 39.15 T:schwaemm128128v2 42.36 42.39 42.46 romulusm 48.36 48.42 48.45 T:tinyjambu128v2 48.83 48.88 48.93 T:giftcofb128v1 54.81 54.85 54.94 T:isapa128av20 55.69 55.74 55.77 T:tinyjambu256v2 56.31 56.36 56.40 T:tinyjambu192v2 62.24 62.30 62.41 T:isapa128v20 86.10 86.14 86.21 romulust 103.57 103.65 103.77 T:isapk128av20 149.41 149.56 149.75 T:elephant200v2 206.67 206.73 207.04 T:isapk128v20 270.12 270.30 270.84 T:isapxv20 8294.08 8294.69 8295.73 T:elephant176v2 9652.86 9653.73 9654.70 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 2.80 2.81 2.81 T:aes128gcmv1 2.96 2.97 2.98 aes256gcmv1 10.24 10.26 10.26 ascon128av12 13.96 14.01 14.05 T:xoodyakround3 15.11 15.13 15.14 ascon80pqv12 15.12 15.13 15.15 ascon128v12 18.68 18.69 18.70 ascon128abi32v12 27.82 27.83 27.84 ascon128bi32v12 27.84 27.86 27.90 T:schwaemm256128v2 30.18 30.21 30.25 T:grain128aeadv2 30.52 30.63 30.71 romulusn 35.31 35.61 35.61 T:schwaemm256256v2 36.51 36.55 36.59 T:schwaemm192192v2 39.00 39.05 39.09 T:schwaemm128128v2 42.44 42.46 42.48 romulusm 48.47 48.49 48.53 T:tinyjambu128v2 48.89 48.91 48.95 T:giftcofb128v1 54.84 54.90 54.95 T:isapa128av20 56.01 56.06 56.11 T:tinyjambu256v2 56.55 56.58 56.63 T:tinyjambu192v2 62.22 62.25 62.30 T:isapa128v20 86.11 86.16 86.19 romulust 103.61 103.67 103.78 T:isapk128av20 149.44 149.57 149.76 T:elephant200v2 206.59 206.69 206.89 T:isapk128v20 269.91 270.03 270.10 T:isapxv20 8293.85 8294.74 8295.82 T:elephant176v2 9652.78 9653.60 9654.48 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 2.80 2.80 2.81 T:aes128gcmv1 2.96 2.97 2.97 aes256gcmv1 10.24 10.25 10.26 ascon128av12 14.01 14.06 14.10 T:xoodyakround3 15.10 15.11 15.14 ascon80pqv12 15.12 15.13 15.14 ascon128v12 18.68 18.70 18.71 ascon128abi32v12 27.81 27.82 27.83 ascon128bi32v12 27.82 27.87 27.90 T:schwaemm256128v2 30.19 30.24 30.32 T:grain128aeadv2 30.49 30.62 30.70 romulusn 35.32 35.61 35.62 T:schwaemm256256v2 36.52 36.56 36.60 T:schwaemm192192v2 38.09 38.09 38.15 T:isapa128v20 39.03 39.08 39.12 T:schwaemm128128v2 42.43 42.46 42.49 romulusm 43.69 43.73 43.77 T:isapa128av20 44.47 44.51 44.54 romulust 48.47 48.49 48.53 T:tinyjambu128v2 48.87 48.91 48.94 T:giftcofb128v1 56.02 56.07 56.10 T:tinyjambu256v2 56.55 56.60 56.65 T:tinyjambu192v2 80.42 80.48 80.54 T:isapk128av20 136.76 136.81 136.91 T:isapk128v20 149.44 149.56 149.74 T:elephant200v2 176.10 176.15 176.24 T:isapxv20 8293.47 8294.31 8295.68 T:elephant176v2 9652.58 9653.55 9654.12 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 9.96 10.00 10.08 T:aes128gcmv1 10.59 10.66 10.77 aes256gcmv1 15.44 15.54 15.67 ascon128av12 19.98 20.06 20.19 ascon80pqv12 20.01 20.09 20.18 ascon128v12 20.40 20.46 20.58 T:xoodyakround3 28.07 28.16 28.41 ascon128abi32v12 36.66 36.80 37.06 ascon128bi32v12 39.88 39.95 40.13 T:grain128aeadv2 40.42 40.64 40.89 romulusn 45.41 45.50 45.82 T:schwaemm256128v2 50.04 50.20 50.59 T:schwaemm128128v2 52.70 53.00 53.53 romulusm 56.27 56.65 56.79 T:schwaemm256256v2 56.64 56.88 57.27 T:tinyjambu128v2 58.91 59.09 59.62 T:schwaemm192192v2 59.59 59.73 59.93 T:giftcofb128v1 65.14 65.31 65.45 T:tinyjambu256v2 65.91 66.10 66.27 T:tinyjambu192v2 115.56 115.85 116.30 romulust 130.41 130.70 131.08 T:isapa128av20 211.23 211.51 211.83 T:elephant200v2 399.41 400.09 401.83 T:isapk128av20 515.01 515.51 517.51 T:isapa128v20 2242.49 2243.44 2246.01 T:isapk128v20 2603.07 2605.11 2614.69 T:isapxv20 10318.79 10321.93 10344.25 T:elephant176v2 12915.78 12918.35 12939.74 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 9.87 9.93 9.99 T:aes128gcmv1 11.02 11.10 11.20 aes256gcmv1 15.50 15.56 15.67 ascon128av12 20.03 20.11 20.23 ascon128v12 20.10 20.17 20.31 ascon80pqv12 20.43 20.51 20.74 T:xoodyakround3 27.97 28.05 28.16 ascon128abi32v12 36.62 36.68 36.87 ascon128bi32v12 40.46 40.61 40.79 romulusn 40.92 41.06 41.18 T:grain128aeadv2 45.29 45.41 45.71 T:schwaemm256128v2 49.81 49.90 50.26 T:schwaemm128128v2 55.26 55.37 55.56 romulusm 55.92 56.33 56.45 T:schwaemm256256v2 57.25 57.51 57.83 T:tinyjambu128v2 59.03 59.20 59.65 T:schwaemm192192v2 59.82 60.14 60.41 T:giftcofb128v1 65.61 65.69 65.78 T:tinyjambu256v2 65.87 66.20 66.39 T:tinyjambu192v2 115.60 115.94 116.31 romulust 130.37 130.70 131.00 T:isapa128av20 211.33 211.51 211.78 T:elephant200v2 398.79 399.81 401.12 T:isapk128av20 515.28 515.93 518.56 T:isapa128v20 2243.94 2245.31 2248.90 T:isapk128v20 2606.59 2612.58 2613.54 T:isapxv20 10320.48 10322.98 10335.15 T:elephant176v2 12915.02 12918.10 12942.57 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 9.85 9.90 10.03 T:aes128gcmv1 11.00 11.10 11.20 aes256gcmv1 15.52 15.59 15.66 ascon128av12 20.04 20.12 20.23 ascon80pqv12 20.05 20.12 20.19 ascon128v12 20.49 20.55 20.65 T:xoodyakround3 28.00 28.08 28.14 ascon128abi32v12 36.59 36.69 36.85 ascon128bi32v12 40.55 40.71 40.83 romulusn 40.93 41.03 41.16 T:grain128aeadv2 45.28 45.40 45.60 T:schwaemm256128v2 49.86 50.03 50.24 T:schwaemm128128v2 55.13 55.32 55.58 romulusm 56.06 56.41 56.52 T:schwaemm256256v2 57.00 57.26 57.38 T:tinyjambu128v2 59.00 59.19 59.48 T:schwaemm192192v2 59.82 59.95 60.11 T:giftcofb128v1 65.44 65.55 65.71 T:tinyjambu256v2 66.11 66.25 66.55 T:tinyjambu192v2 73.05 73.22 73.46 romulust 86.70 87.00 87.34 T:isapa128av20 211.32 211.51 211.67 T:elephant200v2 267.97 268.23 268.55 T:isapa128v20 267.97 268.59 269.20 T:isapk128av20 1200.62 1201.37 1202.38 T:isapk128v20 1363.84 1366.91 1367.59 T:isapxv20 10319.46 10321.98 10337.71 T:elephant176v2 12916.14 12918.24 12942.57 T:elephant160v2