VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Sandy Bridge+AES (206a7); 2011 Intel Xeon E3-1225; 4 x 3100MHz; hydra7, supercop-20251222

[Page version: 20260112 15:28:56]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 3.32 3.34 3.34 T:aes128gcmv1 3.58 3.60 3.61 aes256gcmv1 10.12 10.14 10.16 ascon128av12 14.95 14.98 15.01 ascon80pqv12 15.04 15.09 15.13 ascon128v12 18.22 18.34 18.46 T:xoodyakround3 18.86 18.89 18.91 ascon128abi32v12 27.19 27.25 27.30 T:schwaemm256128v2 27.89 27.93 28.01 ascon128bi32v12 28.52 28.55 28.58 T:grain128aeadv2 34.85 34.90 34.98 T:schwaemm256256v2 35.86 35.96 36.10 T:schwaemm192192v2 36.28 36.60 36.65 romulusn 38.66 38.71 38.75 T:schwaemm128128v2 48.39 48.41 48.48 T:giftcofb128v1 56.88 56.95 57.02 T:isapa128v20 59.52 59.56 59.59 T:tinyjambu128v2 59.97 60.05 60.10 romulusm 61.17 61.23 61.31 T:isapa128av20 71.96 72.02 72.10 T:tinyjambu192v2 73.53 73.58 73.63 T:tinyjambu256v2 107.82 108.15 108.59 T:isapk128av20 126.50 126.65 127.30 romulust 143.55 143.80 144.15 T:isapk128v20 195.26 195.45 196.15 T:elephant200v2 208.17 210.96 214.25 T:isapxv20 10866.74 10869.34 10903.37 T:elephant176v2 12737.86 12738.64 12739.39 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 3.30 3.33 3.35 T:aes128gcmv1 3.57 3.59 3.60 aes256gcmv1 10.00 10.05 10.07 ascon128av12 14.96 14.99 15.02 ascon80pqv12 14.98 15.02 15.03 ascon128v12 18.17 18.25 18.31 T:xoodyakround3 18.24 18.26 18.28 ascon128abi32v12 27.17 27.24 27.30 T:schwaemm256128v2 27.44 27.46 27.50 ascon128bi32v12 29.91 30.09 30.99 T:grain128aeadv2 35.01 35.02 35.06 T:schwaemm256256v2 35.83 35.90 36.00 T:schwaemm192192v2 36.40 36.65 36.68 romulusn 38.72 38.79 38.85 T:schwaemm128128v2 48.46 48.54 48.63 T:giftcofb128v1 56.82 57.01 57.42 T:isapa128v20 59.70 59.74 59.80 T:tinyjambu128v2 60.07 60.11 60.20 romulusm 61.19 61.30 61.37 T:isapa128av20 72.15 72.21 72.34 T:tinyjambu192v2 74.16 74.20 74.25 T:tinyjambu256v2 107.96 108.17 108.48 T:isapk128av20 126.62 126.73 126.93 romulust 143.56 143.87 144.35 T:isapk128v20 195.34 195.46 196.08 T:elephant200v2 206.48? 210.88? 229.90? T:isapxv20 10866.12 10868.69 10905.64 T:elephant176v2 12738.04 12739.00 12739.67 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 3.30 3.33 3.34 T:aes128gcmv1 3.58 3.59 3.61 aes256gcmv1 10.02 10.05 10.07 ascon128av12 14.97 14.99 15.00 ascon80pqv12 14.99 15.01 15.04 ascon128v12 18.24 18.27 18.30 ascon128abi32v12 18.19 18.28 18.32 T:xoodyakround3 27.20 27.27 27.33 T:schwaemm256128v2 27.45 27.47 27.53 ascon128bi32v12 28.01 28.07 28.14 T:isapa128v20 29.96 30.13 30.99 T:grain128aeadv2 34.99 35.02 35.06 T:schwaemm256256v2 35.84 35.89 35.97 T:schwaemm192192v2 36.43 36.62 36.69 romulusn 38.73 38.78 38.85 T:schwaemm128128v2 41.66 41.73 41.81 T:isapa128av20 43.42 43.47 43.53 romulust 48.49 48.54 48.60 T:giftcofb128v1 59.72 59.77 59.83 T:tinyjambu128v2 60.05 60.16 60.56 romulusm 71.73 71.90 72.00 T:isapk128av20 72.19 72.25 72.35 T:tinyjambu192v2 74.12 74.18 74.27 T:tinyjambu256v2 89.51 89.62 89.72 T:isapk128v20 121.48? 124.57? 141.84? T:isapxv20 195.27 195.36 196.04 T:elephant200v2 10866.06 10869.11 10903.60 T:elephant176v2 12737.61 12738.42 12739.38 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 2.56 2.58 2.59 T:aes128gcmv1 2.69 2.71 2.72 aes256gcmv1 10.04 10.05 10.08 ascon128av12 13.72 13.74 13.94 T:xoodyakround3 14.85 14.88 14.89 ascon80pqv12 14.89 14.92 14.95 ascon128v12 18.55 18.56 18.61 ascon128abi32v12 27.01 27.04 27.09 T:schwaemm256128v2 27.62 27.65 27.68 ascon128bi32v12 28.52 28.54 28.57 T:grain128aeadv2 30.02 30.11 30.19 romulusn 34.66 34.69 34.71 T:schwaemm256256v2 35.76 35.83 35.88 T:schwaemm192192v2 38.56 38.61 38.68 T:schwaemm128128v2 41.71 41.75 41.79 romulusm 42.49 42.58 42.70 T:isapa128v20 48.00 48.03 48.08 T:tinyjambu128v2 48.36 48.39 48.43 T:giftcofb128v1 51.49 51.52 51.69 T:isapa128av20 55.30 55.33 55.39 T:tinyjambu256v2 55.92 55.95 55.98 T:tinyjambu192v2 84.81 84.94 85.24 romulust 90.02 90.11 90.24 T:isapk128av20 116.57 116.80 117.16 T:isapk128v20 146.22 146.37 146.78 T:elephant200v2 166.35 167.70 169.13 T:isapxv20 8117.69 8119.67 8145.28 T:elephant176v2 9551.78 9552.16 9552.45 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 2.55 2.59 2.60 T:aes128gcmv1 2.69 2.72 2.73 aes256gcmv1 9.97 10.00 10.03 ascon128av12 13.68 13.73 13.81 T:xoodyakround3 14.89 14.91 14.93 ascon80pqv12 14.89 14.92 14.94 ascon128v12 18.24 18.25 18.27 ascon128abi32v12 27.06 27.11 27.15 T:schwaemm256128v2 27.39 27.41 27.44 ascon128bi32v12 29.34 29.45 30.34 T:grain128aeadv2 29.99 30.04 30.09 romulusn 34.73 34.77 34.78 T:schwaemm256256v2 35.76 35.80 35.86 T:schwaemm192192v2 38.56 38.61 38.68 T:schwaemm128128v2 41.69 41.72 41.75 romulusm 42.22 42.51 42.79 T:isapa128v20 48.11 48.14 48.18 T:tinyjambu128v2 48.39 48.43 48.53 T:giftcofb128v1 51.53 51.62 51.67 T:isapa128av20 55.63 55.67 55.70 T:tinyjambu256v2 56.09 56.13 56.20 T:tinyjambu192v2 84.81 84.90 85.14 romulust 90.03 90.15 90.28 T:isapk128av20 116.59 116.94 117.32 T:isapk128v20 146.21 146.44 146.74 T:elephant200v2 164.99? 167.70? 184.89? T:isapxv20 8117.28 8119.56 8145.25 T:elephant176v2 9551.87 9552.38 9552.66 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 2.58 2.58 2.59 T:aes128gcmv1 2.71 2.71 2.73 aes256gcmv1 9.97 10.00 10.02 ascon128av12 13.68 13.78 13.87 T:xoodyakround3 14.90 14.91 14.93 ascon80pqv12 14.89 14.92 14.93 ascon128v12 18.24 18.26 18.27 ascon128abi32v12 27.04 27.08 27.11 T:schwaemm256128v2 27.40 27.40 27.43 ascon128bi32v12 27.97 28.08 28.19 T:isapa128v20 29.33 29.49 30.30 T:grain128aeadv2 29.99 30.03 30.07 romulusn 34.73 34.75 34.78 T:schwaemm256256v2 35.76 35.78 35.83 T:schwaemm192192v2 38.52 38.55 38.60 T:schwaemm128128v2 41.71 41.75 41.80 romulusm 41.76 41.78 41.86 T:isapa128av20 43.22 43.28 43.29 romulust 48.10 48.12 48.17 T:tinyjambu128v2 48.40 48.43 48.50 T:giftcofb128v1 55.63 55.68 55.73 T:tinyjambu256v2 56.09 56.12 56.17 T:tinyjambu192v2 71.82 71.90 71.98 T:isapk128av20 89.63 89.68 89.77 T:isapk128v20 122.27? 124.72? 140.71? T:isapxv20 146.20 146.27 146.74 T:elephant200v2 8117.26 8119.47 8145.20 T:elephant176v2 9551.98 9552.41 9552.68 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 1.80 1.83 1.84 T:aes128gcmv1 1.81 1.83 1.85 aes256gcmv1 9.18 9.24 9.27 T:xoodyakround3 9.90 9.92 9.95 ascon128av12 14.69 14.71 14.75 ascon128v12 14.73 14.76 14.78 ascon80pqv12 18.22 18.24 18.26 ascon128abi32v12 23.43 23.49 23.53 romulusm 23.58 23.67 23.72 romulusn 26.80 26.87 26.88 T:schwaemm256128v2 27.32 27.35 27.36 ascon128bi32v12 28.00 28.06 28.10 T:isapa128v20 28.51 28.56 28.58 T:grain128aeadv2 34.40 34.41 34.42 T:schwaemm256256v2 35.58 35.66 35.81 T:schwaemm192192v2 36.48 36.52 36.54 T:tinyjambu128v2 37.08 37.15 37.17 T:tinyjambu256v2 38.51 38.54 38.63 T:schwaemm128128v2 39.88 39.94 40.03 T:tinyjambu192v2 41.85 41.90 42.00 T:isapa128av20 42.99 43.08 43.13 romulust 48.26 48.32 48.39 T:giftcofb128v1 71.76 71.88 72.07 T:isapk128av20 89.57 89.68 89.84 T:isapk128v20 97.76 97.84 98.10 T:elephant200v2 123.02 124.48 125.60 T:isapxv20 5368.08 5369.59 5386.13 T:elephant176v2 6366.16 6366.67 6367.00 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 1.82 1.84 1.85 T:aes128gcmv1 1.82 1.85 1.86 aes256gcmv1 9.23 9.26 9.29 T:xoodyakround3 9.92 9.94 9.97 ascon128av12 14.78 14.81 14.83 ascon80pqv12 14.78 14.82 14.85 ascon128v12 18.20 18.23 18.25 ascon128abi32v12 23.39 23.43 23.47 romulusm 23.42 23.47 23.54 romulusn 26.86 26.91 27.00 T:schwaemm256128v2 27.30 27.34 27.36 ascon128bi32v12 28.08 28.12 28.44 T:isapa128v20 28.67 28.93 29.73 T:grain128aeadv2 34.46 34.48 34.51 T:schwaemm256256v2 35.57 35.62 35.71 T:schwaemm192192v2 36.48 36.50 36.52 T:tinyjambu128v2 37.09 37.13 37.19 T:tinyjambu256v2 38.35 38.40 38.44 T:schwaemm128128v2 40.01 40.08 40.12 T:tinyjambu192v2 41.83 41.89 41.96 T:isapa128av20 42.99 43.04 43.13 romulust 48.27 48.34 48.40 T:giftcofb128v1 71.81 71.89 72.00 T:isapk128av20 89.59 89.71 89.84 T:isapk128v20 97.78 97.87 98.05 T:elephant200v2 121.11? 124.49? 141.83? T:isapxv20 5367.93 5369.77 5386.40 T:elephant176v2 6365.95 6366.32 6366.63 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 1.83 1.84 1.85 aes256gcmv1 1.84 1.85 1.85 T:aes128gcmv1 9.20 9.24 9.30 T:xoodyakround3 9.93 9.94 9.97 ascon128av12 14.78 14.81 14.83 ascon80pqv12 14.80 14.82 14.84 ascon128v12 18.20 18.22 18.26 ascon128abi32v12 23.38 23.43 23.47 romulusm 23.43 23.46 23.51 romulusn 26.94 27.04 27.14 T:schwaemm256128v2 27.31 27.34 27.36 ascon128bi32v12 28.05 28.09 28.16 T:isapa128v20 28.67 28.95 29.73 T:grain128aeadv2 34.45 34.48 34.50 T:schwaemm256256v2 35.57 35.65 35.70 T:schwaemm192192v2 36.51 36.53 36.57 T:tinyjambu128v2 37.06 37.12 37.20 T:tinyjambu256v2 38.34 38.38 38.43 T:schwaemm128128v2 40.02 40.07 40.12 T:tinyjambu192v2 41.85 41.92 41.97 T:isapa128av20 42.98 43.03 43.06 romulust 48.24 48.33 48.37 T:giftcofb128v1 71.88 71.94 71.99 T:isapk128av20 89.60 89.75 89.88 T:isapk128v20 97.79 97.85 98.08 T:elephant200v2 121.10? 124.52? 141.82? T:isapxv20 5367.83 5370.00 5386.83 T:elephant176v2 6366.01 6366.35 6366.77 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 2.80 2.80 2.81 T:aes128gcmv1 2.95 2.95 2.95 aes256gcmv1 10.27 10.29 10.31 ascon128av12 13.89 13.90 13.91 T:xoodyakround3 15.08 15.10 15.12 ascon80pqv12 15.13 15.13 15.14 ascon128v12 18.97 18.99 19.02 ascon128abi32v12 27.83 27.86 27.89 T:schwaemm256128v2 28.04 28.06 28.06 ascon128bi32v12 29.02 29.04 29.06 T:grain128aeadv2 30.49 30.54 30.62 romulusn 35.59 35.62 35.65 T:schwaemm256256v2 36.57 36.61 36.65 T:schwaemm192192v2 39.08 39.12 39.15 T:schwaemm128128v2 42.22 42.24 42.26 romulusm 48.41 48.45 48.47 T:tinyjambu128v2 48.86 48.91 48.94 T:giftcofb128v1 54.83 54.88 54.96 T:isapa128av20 55.72 55.76 55.79 T:tinyjambu256v2 56.36 56.40 56.44 T:tinyjambu192v2 62.23 62.29 62.45 T:isapa128v20 86.17 86.21 86.48 romulust 103.90 103.99 104.11 T:isapk128av20 149.33 149.38 149.81 T:elephant200v2 206.58 206.68 206.83 T:isapk128v20 271.35 271.49 273.00 T:isapxv20 8181.08 8181.70 8205.08 T:elephant176v2 9659.74 9660.10 9660.31 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 2.81 2.81 2.83 T:aes128gcmv1 2.97 2.97 3.00 aes256gcmv1 10.24 10.26 10.27 ascon128av12 13.87 13.89 13.98 T:xoodyakround3 15.12 15.13 15.14 ascon80pqv12 15.12 15.14 15.16 ascon128v12 18.67 18.69 18.71 ascon128abi32v12 27.80 27.81 27.84 ascon128bi32v12 27.86 27.89 27.94 T:schwaemm256128v2 29.91 29.95 30.76 T:grain128aeadv2 30.46 30.48 30.51 romulusn 35.66 35.70 35.78 T:schwaemm256256v2 36.54 36.58 36.65 T:schwaemm192192v2 39.07 39.09 39.16 T:schwaemm128128v2 42.32 42.35 42.37 romulusm 48.50 48.53 48.55 T:tinyjambu128v2 48.90 48.92 48.96 T:giftcofb128v1 54.86 54.92 54.97 T:isapa128av20 56.06 56.09 56.14 T:tinyjambu256v2 56.53 56.56 56.67 T:tinyjambu192v2 62.22 62.24 62.56 T:isapa128v20 86.15 86.19 86.29 romulust 103.86 103.99 104.01 T:isapk128av20 149.37 149.75 149.82 T:elephant200v2 206.66 206.71 206.85 T:isapk128v20 271.33 271.44 287.95 T:isapxv20 8181.17 8182.13 8205.12 T:elephant176v2 9659.54 9660.17 9660.68 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 2.81 2.81 2.82 T:aes128gcmv1 2.97 2.97 2.98 aes256gcmv1 10.23 10.24 10.24 ascon128av12 13.91 13.93 14.01 T:xoodyakround3 15.11 15.13 15.13 ascon80pqv12 15.13 15.13 15.15 ascon128v12 18.67 18.69 18.71 ascon128abi32v12 27.81 27.83 27.84 ascon128bi32v12 27.84 27.88 27.91 T:schwaemm256128v2 29.92 29.99 30.76 T:grain128aeadv2 30.43 30.46 30.49 romulusn 35.65 35.67 35.72 T:schwaemm256256v2 36.55 36.58 36.63 T:schwaemm192192v2 38.09 38.09 38.28 T:isapa128v20 39.04 39.07 39.10 T:schwaemm128128v2 42.30 42.31 42.33 romulusm 43.67 43.70 43.77 T:isapa128av20 44.50 44.55 44.59 romulust 48.49 48.53 48.56 T:tinyjambu128v2 48.90 48.93 48.99 T:giftcofb128v1 56.04 56.08 56.11 T:tinyjambu256v2 56.52 56.55 56.59 T:tinyjambu192v2 80.71 80.74 80.77 T:isapk128av20 136.68 136.73 136.79 T:isapk128v20 149.38 149.60 149.80 T:elephant200v2 177.20 177.78 193.05 T:isapxv20 8181.01 8181.59 8205.34 T:elephant176v2 9659.84 9660.04 9660.47 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 10.09 10.12 10.30 T:aes128gcmv1 10.70 10.80 11.09 aes256gcmv1 15.62 15.72 16.06 ascon128av12 20.08 20.16 20.63 ascon80pqv12 20.15 20.25 20.39 ascon128v12 20.26 20.55 21.04 T:xoodyakround3 28.35 28.51 28.77 ascon128abi32v12 37.16 37.29 37.47 ascon128bi32v12 39.93 40.02 40.34 T:grain128aeadv2 40.36 40.50 40.96 romulusn 45.47 45.63 46.12 T:schwaemm256128v2 50.18 50.55 50.78 T:schwaemm128128v2 52.78 53.00 53.58 romulusm 56.41 56.66 56.85 T:schwaemm256256v2 57.02 57.08 57.21 T:tinyjambu128v2 59.05 59.38 59.62 T:schwaemm192192v2 59.72 59.91 60.09 T:giftcofb128v1 65.23 65.40 65.56 T:tinyjambu256v2 65.68 66.10 66.43 T:tinyjambu192v2 116.17 116.57 116.67 romulust 130.66 130.88 131.11 T:isapa128av20 211.45 212.09 212.57 T:elephant200v2 401.95 402.16 402.80 T:isapk128av20 515.20 515.39 519.01 T:isapa128v20 2241.80 2246.20 2249.30 T:isapk128v20 2624.66 2629.58 2668.34 T:isapxv20 10185.51 10189.80 10216.77 T:elephant176v2 12935.16 12937.44 12942.65 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 9.94 10.01 10.45 T:aes128gcmv1 11.10 11.25 11.55 aes256gcmv1 15.59 15.67 16.21 ascon128av12 20.10 20.26 20.53 ascon128v12 20.15 20.30 20.52 ascon80pqv12 20.14 20.64 20.80 T:xoodyakround3 28.19 28.48 28.59 ascon128abi32v12 37.17 37.26 37.63 ascon128bi32v12 40.35 40.49 40.65 romulusn 40.75 40.95 42.59 T:grain128aeadv2 45.41 45.50 45.73 T:schwaemm256128v2 49.98 50.27 50.65 T:schwaemm128128v2 55.25 55.39 55.63 romulusm 56.40 56.50 56.65 T:schwaemm256256v2 57.19 57.34 57.48 T:tinyjambu128v2 59.41 59.60 59.86 T:schwaemm192192v2 59.82 59.98 60.09 T:giftcofb128v1 65.88 66.02 66.20 T:tinyjambu256v2 66.22 66.47 66.70 T:tinyjambu192v2 115.86 116.17 116.40 romulust 130.88 130.98 131.12 T:isapa128av20 211.28 211.59 211.98 T:elephant200v2 400.32 401.02 401.78 T:isapk128av20 515.16 515.77 522.62 T:isapa128v20 2243.45 2245.95 2251.03 T:isapk128v20 2621.34 2630.97 2692.57 T:isapxv20 10187.20 10192.29 10216.78 T:elephant176v2 12933.55 12938.90 12941.20 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 9.98 10.05 10.23 T:aes128gcmv1 11.09 11.21 11.30 aes256gcmv1 15.57 15.62 15.77 ascon128av12 20.05 20.21 20.34 ascon128v12 20.18 20.30 20.53 ascon80pqv12 20.32 20.58 20.92 T:xoodyakround3 28.03 28.16 28.21 ascon128abi32v12 37.03 37.10 37.20 ascon128bi32v12 40.33 40.51 40.67 romulusn 40.83 40.92 42.79 T:grain128aeadv2 45.41 45.49 45.82 T:schwaemm256128v2 50.02 50.13 50.38 T:schwaemm128128v2 55.27 55.44 55.50 romulusm 56.52 56.57 56.65 T:schwaemm256256v2 57.02 57.21 57.43 T:tinyjambu128v2 59.16 59.23 59.31 T:schwaemm192192v2 59.86 60.05 60.26 T:giftcofb128v1 65.56 65.78 65.88 T:tinyjambu256v2 66.18 66.27 66.45 T:tinyjambu192v2 73.00 73.33 73.54 romulust 86.87 87.41 87.56 T:isapa128av20 211.30 211.48 211.73 T:elephant200v2 268.30 268.58 271.77 T:isapa128v20 268.57 269.27 269.93 T:isapk128av20 1198.56 1199.10 1199.83 T:isapk128v20 1373.88 1376.80 1418.19 T:isapxv20 10188.16 10194.05 10212.73 T:elephant176v2 12934.77 12936.55 12940.64 T:elephant160v2