VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Xeon E3-1275 V2; 4 x 3500MHz; hydra8, supercop-20251222

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 2.53 2.57 2.58 T:aes128gcmv1 3.42 3.44 3.45 aes256gcmv1 8.62 8.63 8.66 ascon128av12 12.78 12.81 12.85 ascon128v12 12.85 12.87 12.89 ascon80pqv12 17.01 17.06 17.16 ascon128abi32v12 17.39 17.44 17.49 T:xoodyakround3 23.39 23.46 23.54 T:schwaemm256128v2 24.37 24.39 24.44 ascon128bi32v12 28.16 28.20 28.24 T:grain128aeadv2 30.89 30.92 30.98 T:schwaemm192192v2 33.29 33.35 33.39 T:schwaemm128128v2 34.05 34.08 34.11 T:schwaemm256256v2 36.21 36.24 36.47 romulusn 44.72 44.74 44.80 T:giftcofb128v1 47.94 48.28 48.34 T:isapa128v20 50.69 50.74 50.79 T:isapa128av20 50.83 50.88 50.90 T:tinyjambu128v2 57.16 57.22 57.29 T:tinyjambu192v2 59.28 59.31 59.35 T:tinyjambu256v2 59.32 59.45 59.54 romulusm 90.86 91.09 91.26 T:isapk128av20 120.76 121.17 121.96 T:isapk128v20 132.38 132.45 132.79 romulust 183.04 183.11 183.17 T:elephant200v2 190.44 190.81 191.65 T:isapxv20 9216.68 9222.29 9254.34 T:elephant176v2 10530.58 10531.40 10532.85 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 3.10 3.13 3.15 T:aes128gcmv1 3.43 3.45 3.48 aes256gcmv1 8.53 8.55 8.63 ascon128av12 12.82 12.83 12.86 ascon128v12 12.81 12.86 12.86 ascon80pqv12 17.27 17.29 17.33 ascon128abi32v12 17.32 17.37 17.55 T:xoodyakround3 23.34 23.40 23.43 T:schwaemm256128v2 24.12 24.14 24.17 ascon128bi32v12 29.13 29.17 29.20 T:grain128aeadv2 30.82 30.88 30.92 T:schwaemm192192v2 33.32 33.35 33.40 T:schwaemm128128v2 34.23 34.26 34.29 T:schwaemm256256v2 36.27 36.32 36.46 romulusn 44.75 44.80 44.83 T:giftcofb128v1 47.93 48.29 48.40 T:isapa128v20 50.68 50.75 50.82 T:isapa128av20 51.00 51.04 51.06 T:tinyjambu128v2 57.86 57.90 57.93 T:tinyjambu192v2 59.10 59.70 59.98 romulusm 59.93 59.96 60.02 T:tinyjambu256v2 91.04 91.17 91.30 T:isapk128av20 121.13 121.49 122.17 T:isapk128v20 131.66 132.40 132.53 romulust 182.93 183.04 183.11 T:elephant200v2 189.54 190.71 191.75 T:isapxv20 9214.58 9222.18 9257.24 T:elephant176v2 10530.96 10531.97 10532.96 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 3.12 3.13 3.14 T:aes128gcmv1 3.44 3.45 3.47 aes256gcmv1 8.50 8.54 8.55 ascon128av12 12.81 12.83 12.85 ascon128v12 12.80 12.84 12.85 ascon80pqv12 17.24 17.28 17.31 ascon128abi32v12 17.26 17.31 17.58 T:xoodyakround3 23.33 23.39 23.44 T:schwaemm256128v2 23.92 24.01 24.15 T:isapa128v20 24.12 24.15 24.17 ascon128bi32v12 29.15 29.18 29.22 T:grain128aeadv2 30.80 30.87 30.93 T:schwaemm192192v2 33.31 33.36 33.45 T:schwaemm128128v2 34.24 34.26 34.29 T:schwaemm256256v2 34.31 34.36 34.42 T:isapa128av20 36.20 36.26 36.46 romulusn 44.74 44.79 44.83 T:giftcofb128v1 44.88 45.22 45.27 romulust 50.98 51.05 51.09 T:tinyjambu128v2 57.85 57.93 58.02 T:tinyjambu192v2 59.62 59.72 59.93 romulusm 59.88 59.93 59.97 T:tinyjambu256v2 61.02 61.09 61.16 T:isapk128av20 75.47 75.59 75.70 T:isapk128v20 112.04 112.34 112.62 T:isapxv20 183.00 183.05 183.16 T:elephant200v2 9215.59 9220.90 9256.57 T:elephant176v2 10530.62 10531.94 10533.46 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 2.15 2.19 2.21 T:aes128gcmv1 2.61 2.63 2.64 aes256gcmv1 8.54 8.57 8.59 ascon128av12 12.68 12.72 12.75 ascon80pqv12 12.69 12.72 12.75 ascon128v12 13.21 13.24 13.32 T:xoodyakround3 16.68 16.71 16.73 ascon128abi32v12 23.22 23.25 23.31 T:schwaemm256128v2 24.17 24.22 24.23 ascon128bi32v12 28.05 28.07 28.09 T:grain128aeadv2 29.74 29.79 29.92 romulusn 30.69 30.75 30.78 T:schwaemm192192v2 33.23 33.25 33.30 T:schwaemm128128v2 33.85 33.86 33.87 T:schwaemm256256v2 35.84 35.96 36.27 T:isapa128v20 40.87 40.93 40.94 T:tinyjambu128v2 41.39 41.43 41.54 romulusm 42.53 42.57 42.59 T:isapa128av20 44.43 44.46 44.50 T:tinyjambu192v2 44.53 44.57 44.59 T:tinyjambu256v2 44.69 44.73 44.78 T:giftcofb128v1 75.90 75.98 76.04 T:isapk128av20 88.69 88.81 89.01 romulust 98.21 98.48 98.67 T:isapk128v20 136.64 136.68 136.76 T:elephant200v2 151.43 151.66 152.36 T:isapxv20 6885.92 6889.55 6916.31 T:elephant176v2 7891.97 7892.87 7894.15 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 2.43 2.47 2.48 T:aes128gcmv1 2.61 2.65 2.66 aes256gcmv1 8.52 8.55 8.59 ascon128av12 12.72 12.74 12.76 ascon128v12 12.76 12.82 12.86 ascon80pqv12 13.03 13.06 13.08 T:xoodyakround3 16.83 16.85 16.87 ascon128abi32v12 23.23 23.25 23.29 T:schwaemm256128v2 24.11 24.15 24.33 ascon128bi32v12 28.41 28.67 28.70 T:grain128aeadv2 29.77 29.80 29.88 romulusn 30.64 30.70 30.74 T:schwaemm192192v2 33.20 33.24 33.29 T:schwaemm128128v2 33.93 33.96 33.97 T:schwaemm256256v2 35.61 35.86 36.14 T:isapa128v20 40.97 40.98 41.01 T:tinyjambu128v2 41.45 41.52 41.61 romulusm 42.52 42.55 42.60 T:isapa128av20 44.70 44.73 44.75 T:giftcofb128v1 44.85 44.88 44.91 T:tinyjambu256v2 44.89 44.92 44.95 T:tinyjambu192v2 75.96 76.04 76.12 T:isapk128av20 88.67 88.73 88.82 romulust 98.42 98.52 98.61 T:isapk128v20 136.66 136.70 136.73 T:elephant200v2 150.95 151.56 152.03 T:isapxv20 6885.92 6889.56 6917.27 T:elephant176v2 7891.78 7892.90 7893.84 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 2.46 2.47 2.47 T:aes128gcmv1 2.64 2.64 2.65 aes256gcmv1 8.49 8.51 8.57 ascon128av12 12.72 12.75 12.77 ascon128v12 12.75 12.80 12.83 ascon80pqv12 13.07 13.11 13.21 T:xoodyakround3 16.84 16.85 16.87 ascon128abi32v12 23.21 23.27 23.30 T:schwaemm256128v2 23.50 23.62 23.69 T:isapa128v20 24.09 24.11 24.31 ascon128bi32v12 28.43 28.70 28.73 T:grain128aeadv2 29.77 29.84 29.90 romulusn 30.65 30.70 30.74 T:schwaemm192192v2 33.20 33.26 33.30 T:schwaemm128128v2 33.94 33.96 33.99 T:schwaemm256256v2 34.34 34.36 34.39 T:isapa128av20 40.97 40.99 41.01 T:tinyjambu128v2 41.47 41.52 41.62 romulusm 44.72 44.74 44.76 T:giftcofb128v1 44.84 44.87 44.89 T:tinyjambu256v2 44.86 44.90 44.94 T:tinyjambu192v2 45.07 45.12 45.14 romulust 60.91 60.96 61.03 T:isapk128av20 75.36 75.62 75.68 T:isapk128v20 112.18 112.38 112.52 T:isapxv20 136.64 136.68 136.71 T:elephant200v2 6885.45 6889.82 6917.56 T:elephant176v2 7891.85 7892.63 7893.45 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 1.79 1.82 1.83 T:aes128gcmv1 1.79 1.82 1.83 aes256gcmv1 8.48 8.51 8.54 ascon128av12 8.87 8.92 8.99 T:xoodyakround3 12.47 12.48 12.51 ascon80pqv12 12.61 12.66 12.68 ascon128v12 16.18 16.19 16.39 ascon128abi32v12 23.03 23.10 23.13 T:schwaemm256128v2 23.27 23.34 23.38 romulusn 23.31 23.34 23.38 romulusm 23.71 23.76 23.77 T:isapa128v20 23.98 24.00 24.02 ascon128bi32v12 27.91 27.95 27.97 T:grain128aeadv2 29.78 29.82 29.85 T:tinyjambu256v2 30.51 30.55 30.60 T:schwaemm192192v2 30.96 30.97 30.98 T:tinyjambu128v2 31.70 31.76 31.79 T:tinyjambu192v2 33.13 33.21 33.26 T:schwaemm128128v2 33.61 33.63 33.66 T:schwaemm256256v2 34.28 34.33 34.37 T:isapa128av20 44.61 44.68 44.72 T:giftcofb128v1 44.96 45.03 45.49 romulust 60.74 60.93 61.03 T:isapk128av20 75.54 75.61 75.69 T:isapk128v20 92.30 92.33 92.36 T:elephant200v2 112.43 112.82 113.46 T:isapxv20 4553.25 4556.30 4571.67 T:elephant176v2 5259.12 5260.18 5260.94 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 1.80 1.82 1.83 T:aes128gcmv1 1.80 1.84 1.86 aes256gcmv1 8.46 8.48 8.55 ascon128av12 8.91 8.94 8.97 T:xoodyakround3 12.60 12.63 12.68 ascon128v12 12.77 12.80 12.86 ascon80pqv12 16.43 16.46 16.53 ascon128abi32v12 23.09 23.14 23.17 T:schwaemm256128v2 23.27 23.31 23.34 romulusm 23.29 23.32 23.35 romulusn 23.56 23.62 23.77 T:isapa128v20 24.11 24.15 24.50 ascon128bi32v12 27.73 28.17 28.21 T:grain128aeadv2 29.78 29.80 29.84 T:tinyjambu256v2 30.48 30.55 30.59 T:schwaemm192192v2 30.94 30.96 30.99 T:tinyjambu128v2 31.90 31.95 31.98 T:tinyjambu192v2 33.00 33.09 33.15 T:schwaemm128128v2 33.62 33.64 33.66 T:schwaemm256256v2 34.31 34.34 34.43 T:isapa128av20 44.64 44.68 44.75 T:giftcofb128v1 44.94 45.01 45.04 romulust 60.73 60.90 60.98 T:isapk128av20 75.51 75.67 75.74 T:isapk128v20 92.28 92.32 92.36 T:elephant200v2 111.89 112.41 112.87 T:isapxv20 4552.87 4556.23 4572.52 T:elephant176v2 5257.90 5259.01 5260.08 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 1.81 1.81 1.82 T:aes128gcmv1 1.82 1.83 1.85 aes256gcmv1 8.46 8.47 8.48 ascon128av12 8.90 8.94 8.97 T:xoodyakround3 12.62 12.64 12.66 ascon128v12 12.54 12.79 12.86 ascon80pqv12 16.43 16.45 16.49 ascon128abi32v12 23.10 23.13 23.15 T:schwaemm256128v2 23.28 23.30 23.34 romulusn 23.30 23.32 23.35 romulusm 23.65 23.73 23.78 T:isapa128v20 24.11 24.14 24.53 ascon128bi32v12 27.70 28.17 28.22 T:grain128aeadv2 29.77 29.81 29.85 T:tinyjambu256v2 30.50 30.54 30.59 T:schwaemm192192v2 30.92 30.95 30.98 T:tinyjambu128v2 31.93 31.95 32.00 T:tinyjambu192v2 33.04 33.09 33.23 T:schwaemm128128v2 33.62 33.65 33.66 T:schwaemm256256v2 34.29 34.36 34.41 T:isapa128av20 44.65 44.70 44.75 T:giftcofb128v1 44.90 44.96 45.03 romulust 60.82 60.91 61.05 T:isapk128av20 75.49 75.61 75.66 T:isapk128v20 92.30 92.34 92.37 T:elephant200v2 111.90 112.39 112.95 T:isapxv20 4553.18 4555.91 4572.27 T:elephant176v2 5258.36 5259.58 5261.03 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 2.40 2.41 2.43 T:aes128gcmv1 2.86 2.86 2.87 aes256gcmv1 8.77 8.79 8.81 ascon128av12 12.82 12.88 12.94 ascon80pqv12 12.92 12.94 12.96 ascon128v12 13.35 13.37 13.42 T:xoodyakround3 17.16 17.18 17.21 ascon128abi32v12 23.89 23.93 23.96 T:schwaemm256128v2 24.60 24.62 24.64 ascon128bi32v12 28.51 28.52 28.54 T:grain128aeadv2 30.33 30.43 30.50 romulusn 31.38 31.40 31.44 T:schwaemm192192v2 33.69 33.72 33.79 T:schwaemm128128v2 34.77 34.77 34.78 T:schwaemm256256v2 41.21 41.24 41.27 T:tinyjambu128v2 41.94 41.98 42.04 romulusm 44.80 44.82 44.84 T:tinyjambu192v2 44.91 44.92 44.95 T:tinyjambu256v2 45.08 45.10 45.13 T:giftcofb128v1 45.40 45.42 45.50 T:isapa128av20 52.78 52.94 53.09 T:isapa128v20 87.18 87.21 87.25 T:isapk128av20 90.07 90.32 90.44 romulust 139.56 139.58 139.64 T:elephant200v2 173.83 174.13 174.21 T:isapk128v20 246.15 246.36 246.85 T:isapxv20 6939.46 6942.76 6967.70 T:elephant176v2 7980.95 7981.98 7982.58 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 2.68 2.68 2.69 T:aes128gcmv1 2.89 2.90 2.90 aes256gcmv1 8.74 8.76 8.78 ascon128av12 12.93 12.96 12.97 ascon128v12 13.00 13.02 13.03 ascon80pqv12 13.24 13.28 13.31 T:xoodyakround3 17.25 17.27 17.28 ascon128abi32v12 23.92 23.94 24.00 T:schwaemm256128v2 24.54 24.57 24.72 ascon128bi32v12 28.89 29.13 29.15 T:grain128aeadv2 30.34 30.35 30.42 romulusn 31.33 31.38 31.40 T:schwaemm192192v2 33.65 33.68 33.71 T:schwaemm128128v2 34.85 34.85 34.87 T:schwaemm256256v2 41.30 41.31 41.34 T:tinyjambu128v2 42.12 42.18 42.24 romulusm 45.11 45.12 45.15 T:giftcofb128v1 45.19 45.21 45.25 T:tinyjambu256v2 45.22 45.25 45.28 T:tinyjambu192v2 45.46 45.48 45.53 T:isapa128av20 52.72 52.78 52.99 T:isapa128v20 87.14 87.18 87.23 T:isapk128av20 90.04 90.11 90.20 romulust 139.58 139.60 139.62 T:elephant200v2 173.81 173.85 174.06 T:isapk128v20 246.04 246.72 246.77 T:isapxv20 6939.61 6942.32 6966.88 T:elephant176v2 7981.39 7981.87 7982.47 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 2.67 2.68 2.68 T:aes128gcmv1 2.89 2.89 2.90 aes256gcmv1 8.71 8.72 8.75 ascon128av12 12.93 12.95 12.96 ascon128v12 12.98 13.02 13.05 ascon80pqv12 13.28 13.29 13.34 T:xoodyakround3 17.25 17.27 17.28 ascon128abi32v12 23.92 23.93 23.96 T:schwaemm256128v2 24.54 24.55 24.73 ascon128bi32v12 28.92 29.14 29.16 T:grain128aeadv2 30.34 30.36 30.43 romulusn 31.35 31.36 31.39 T:schwaemm192192v2 32.37 32.37 32.43 T:isapa128v20 33.65 33.69 33.73 T:schwaemm128128v2 34.85 34.86 34.87 T:schwaemm256256v2 36.00 36.03 36.09 T:isapa128av20 41.28 41.30 41.35 T:tinyjambu128v2 42.12 42.14 42.28 romulusm 45.10 45.12 45.15 T:giftcofb128v1 45.20 45.22 45.24 T:tinyjambu256v2 45.21 45.24 45.27 T:tinyjambu192v2 46.40 46.44 46.46 romulust 68.04 68.07 68.11 T:isapk128av20 114.94 114.96 115.08 T:isapk128v20 139.57 139.59 139.62 T:elephant200v2 160.82 161.02 161.09 T:isapxv20 6939.41 6942.45 6967.33 T:elephant176v2 7981.11 7982.08 7983.33 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 9.75 9.82 10.04 T:aes128gcmv1 10.41 10.47 10.77 aes256gcmv1 13.40 13.42 13.83 ascon128av12 17.15 17.24 17.59 ascon80pqv12 17.50 17.69 17.76 ascon128v12 19.45 19.66 20.32 T:xoodyakround3 26.67 26.86 27.26 ascon128abi32v12 34.00 34.16 34.24 ascon128bi32v12 38.82 38.91 39.11 T:grain128aeadv2 39.05 39.11 39.26 T:schwaemm256128v2 42.34 42.54 42.79 romulusn 43.22 43.44 43.73 T:schwaemm128128v2 48.54 48.79 48.90 T:tinyjambu128v2 50.61 50.80 50.99 T:schwaemm192192v2 52.64 52.74 52.92 T:tinyjambu192v2 52.83 52.98 53.32 T:tinyjambu256v2 53.66 53.85 54.06 T:giftcofb128v1 54.80 55.00 55.26 romulusm 55.16 55.27 55.48 T:schwaemm256256v2 111.16 111.55 111.88 T:isapa128av20 120.79 121.14 121.50 romulust 197.88 198.38 198.83 T:elephant200v2 326.29 326.69 327.20 T:isapk128av20 441.05 441.55 442.81 T:isapa128v20 1883.51 1891.00 1892.91 T:isapk128v20 2393.28 2397.03 2400.36 T:isapxv20 8641.05 8646.71 8658.65 T:elephant176v2 10687.88 10692.81 10695.14 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 9.95 10.08 10.27 T:aes128gcmv1 10.78 10.89 11.13 aes256gcmv1 13.41 13.48 13.79 ascon128av12 17.34 17.34 17.59 ascon80pqv12 17.52 17.72 18.06 ascon128v12 19.45 19.69 20.00 T:xoodyakround3 26.37 26.50 26.65 ascon128abi32v12 34.13 34.29 34.62 ascon128bi32v12 39.02 39.11 39.39 T:schwaemm256128v2 39.23 39.39 39.65 T:grain128aeadv2 42.57 42.73 42.95 romulusn 43.03 43.15 43.69 T:schwaemm128128v2 48.84 48.95 49.13 T:tinyjambu128v2 50.86 50.91 51.12 T:schwaemm192192v2 53.20 53.25 53.55 T:tinyjambu256v2 53.05 53.33 53.52 T:tinyjambu192v2 53.71 53.84 53.93 T:giftcofb128v1 55.10 55.26 55.59 T:schwaemm256256v2 56.84 57.20 57.92 romulusm 111.38 111.58 111.96 T:isapa128av20 120.53 120.71 121.33 romulust 197.89 198.23 198.53 T:elephant200v2 323.85 324.48 325.11 T:isapk128av20 441.26 441.66 447.61 T:isapa128v20 1882.12 1883.87 1885.11 T:isapk128v20 2401.78 2409.23 2409.67 T:isapxv20 8645.09 8649.66 8663.29 T:elephant176v2 10685.43 10690.88 10694.20 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 9.80 9.87 9.99 T:aes128gcmv1 10.76 10.90 11.05 aes256gcmv1 13.34 13.53 13.63 ascon128av12 17.28 17.34 17.52 ascon80pqv12 17.44 17.48 17.53 ascon128v12 19.60 19.89 20.14 T:xoodyakround3 26.31 26.41 26.62 ascon128abi32v12 34.04 34.14 34.39 ascon128bi32v12 38.96 39.09 39.12 T:schwaemm256128v2 39.23 39.31 39.52 T:grain128aeadv2 42.52 42.69 42.75 romulusn 43.05 43.13 43.32 T:schwaemm128128v2 48.70 48.74 48.84 T:tinyjambu128v2 50.77 50.85 51.28 T:schwaemm192192v2 53.05 53.17 53.35 T:tinyjambu256v2 53.12 53.21 53.36 T:tinyjambu192v2 53.61 53.82 53.99 T:giftcofb128v1 55.22 55.28 55.44 T:schwaemm256256v2 56.95 57.05 57.17 romulusm 73.79 74.15 74.32 T:isapa128av20 75.96 76.22 76.45 romulust 197.84 197.99 198.39 T:elephant200v2 217.23 217.66 218.08 T:isapk128av20 234.05 234.44 234.80 T:isapa128v20 1002.28 1002.62 1003.29 T:isapk128v20 1255.66 1259.50 1260.84 T:isapxv20 8642.90 8645.74 8666.91 T:elephant176v2 10686.78 10689.08 10692.48 T:elephant160v2