VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Xeon E3-1275 V2; 4 x 3500MHz; hydra8, supercop-20260217

[Page version: 20260319 20:29:39]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 2.54 2.56 2.58 T:aes128gcmv1 2.80 2.83 2.85 aes256gcmv1 8.78 8.80 8.84 ascon128av12 12.82 12.85 12.88 ascon80pqv12 12.85 12.87 12.89 ascon128v12 16.32 16.34 16.37 T:xoodyakround3 16.74 16.81 16.83 ascon128abi32v12 22.82 22.85 22.88 T:schwaemm256128v2 24.30 24.32 24.34 ascon128bi32v12 27.34 27.38 27.57 T:grain128aeadv2 30.21 30.26 30.31 T:schwaemm192192v2 32.66 32.72 32.78 T:schwaemm128128v2 33.17 33.21 33.25 T:schwaemm256256v2 35.75 35.80 35.86 T:giftcofb128v1 36.31 36.35 36.38 romulusn 49.61 49.68 49.72 T:isapa128v20 52.68 52.97 53.05 T:tinyjambu128v2 55.07 55.14 55.25 T:isapa128av20 59.48 59.62 59.70 romulusm 61.56 61.64 61.75 T:tinyjambu192v2 67.41 67.45 67.51 T:tinyjambu256v2 87.58 87.75 87.85 T:isapk128av20 117.44 118.14 119.47 T:isapk128v20 132.25 132.35 132.51 romulust 165.66? 180.17? 193.13? T:isapxv20 182.79 182.99 183.08 T:elephant200v2 8846.67 8852.48 8855.34 T:elephant176v2 9709.38 9713.37 9715.58 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 3.10 3.12 3.13 T:aes128gcmv1 3.76 3.79 3.81 aes256gcmv1 8.69 8.71 8.74 ascon128av12 12.80 12.82 12.84 ascon128v12 12.87 12.90 12.92 ascon80pqv12 16.12 16.18 16.22 T:xoodyakround3 16.74 16.75 16.79 ascon128abi32v12 22.82 22.86 22.92 T:schwaemm256128v2 24.35 24.37 24.39 ascon128bi32v12 28.32 28.35 28.38 T:grain128aeadv2 30.16 30.20 30.23 T:schwaemm192192v2 32.69 32.75 32.83 T:schwaemm128128v2 33.15 33.19 33.22 T:schwaemm256256v2 35.92 35.96 36.01 T:giftcofb128v1 36.44 36.46 36.48 romulusn 49.55 49.66 49.83 T:isapa128v20 52.60 52.65 52.71 T:tinyjambu128v2 55.10 55.16 55.26 T:isapa128av20 59.69 59.86 59.94 romulusm 61.85 61.87 61.93 T:tinyjambu192v2 68.94 69.00 69.05 T:tinyjambu256v2 87.58 87.67 87.86 T:isapk128av20 117.75 117.99 119.04 T:isapk128v20 132.25 132.36 132.47 romulust 178.68 179.07 180.18 T:isapxv20 182.81 183.02 183.16 T:elephant200v2 8847.45 8852.77 8856.40 T:elephant176v2 9709.93 9713.55 9715.98 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 3.10 3.11 3.12 T:aes128gcmv1 3.77 3.79 3.80 aes256gcmv1 8.69 8.71 8.73 ascon128av12 12.79 12.80 12.81 ascon128v12 12.86 12.89 12.91 ascon80pqv12 16.15 16.18 16.23 T:xoodyakround3 16.75 16.78 16.81 ascon128abi32v12 22.83 22.87 22.93 T:schwaemm256128v2 24.37 24.39 24.41 ascon128bi32v12 24.99 25.08 25.14 T:isapa128v20 28.32 28.35 28.37 T:grain128aeadv2 30.14 30.18 30.21 T:schwaemm192192v2 32.64 32.70 32.78 T:schwaemm128128v2 33.15 33.18 33.21 T:schwaemm256256v2 35.93 35.96 36.00 T:giftcofb128v1 36.44 36.47 36.49 romulusn 37.19 37.23 37.33 T:isapa128av20 45.21 45.26 45.33 romulust 52.61 52.66 52.70 T:tinyjambu128v2 57.49 57.60 57.76 T:isapk128av20 59.70 59.85 59.93 romulusm 61.86 61.90 61.93 T:tinyjambu192v2 68.97 69.01 69.05 T:tinyjambu256v2 72.53 72.64 72.78 T:isapk128v20 104.06 104.16 104.27 T:isapxv20 182.82 183.02 183.13 T:elephant200v2 8847.54 8852.76 8855.21 T:elephant176v2 9709.52 9713.93 9716.73 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 2.17 2.18 2.18 T:aes128gcmv1 2.30 2.32 2.33 aes256gcmv1 8.70 8.73 8.75 ascon128av12 12.34 12.38 12.40 T:xoodyakround3 12.70 12.72 12.74 ascon80pqv12 12.73 12.76 12.77 ascon128v12 16.73 16.74 16.76 ascon128abi32v12 22.70 22.72 22.75 T:schwaemm256128v2 24.27 24.29 24.31 ascon128bi32v12 27.27 27.29 27.54 T:grain128aeadv2 29.82 29.85 29.89 romulusn 30.05 30.07 30.10 T:schwaemm192192v2 32.52 32.56 32.60 T:schwaemm128128v2 33.03 33.05 33.07 T:schwaemm256256v2 36.01 36.05 36.08 T:giftcofb128v1 37.13 37.26 37.47 T:isapa128v20 41.38 41.47 41.55 romulusm 42.67 42.90 43.15 T:tinyjambu128v2 46.14 46.20 46.26 T:isapa128av20 47.29 47.32 47.36 T:tinyjambu192v2 49.67 49.87 50.31 T:tinyjambu256v2 73.07 73.13 73.48 T:isapk128av20 88.62 88.67 88.79 romulust 94.84 95.13 96.04 T:isapk128v20 136.65 136.76 137.23 T:elephant200v2 134.81 142.11 148.06 T:isapxv20 6608.83 6610.09 6612.36 T:elephant176v2 7280.52 7281.88 7284.63 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 2.45 2.45 2.46 T:aes128gcmv1 2.78 2.80 2.81 aes256gcmv1 8.63 8.66 8.69 ascon128av12 12.22 12.28 12.31 T:xoodyakround3 12.73 12.74 12.75 ascon128v12 12.73 12.77 12.80 ascon80pqv12 16.93 16.95 16.97 ascon128abi32v12 22.70 22.72 22.77 T:schwaemm256128v2 24.28 24.30 24.32 ascon128bi32v12 27.67 27.68 27.70 T:grain128aeadv2 29.90 29.92 29.95 romulusn 30.03 30.05 30.08 T:schwaemm192192v2 32.52 32.57 32.63 T:schwaemm128128v2 32.99 33.02 33.04 T:schwaemm256256v2 36.12 36.15 36.20 T:giftcofb128v1 37.20 37.30 37.43 T:isapa128v20 41.49 41.61 41.66 romulusm 43.02 43.05 43.14 T:tinyjambu128v2 46.13 46.18 46.27 T:isapa128av20 47.45 47.47 47.52 T:tinyjambu192v2 50.98 51.00 51.04 T:tinyjambu256v2 73.05 73.10 73.25 T:isapk128av20 88.63 88.70 88.76 romulust 94.83 95.03 96.30 T:isapk128v20 136.65 136.77 137.24 T:elephant200v2 141.36 141.65 142.47 T:isapxv20 6609.05 6610.65 6612.65 T:elephant176v2 7280.91 7282.14 7284.71 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 2.45 2.45 2.46 T:aes128gcmv1 2.79 2.80 2.80 aes256gcmv1 8.64 8.66 8.69 ascon128av12 12.29 12.31 12.32 T:xoodyakround3 12.73 12.74 12.76 ascon128v12 12.74 12.78 12.81 ascon80pqv12 16.93 16.95 16.97 ascon128abi32v12 22.69 22.71 22.75 T:schwaemm256128v2 24.28 24.29 24.30 ascon128bi32v12 24.85 24.89 24.91 T:isapa128v20 27.68 27.70 27.72 T:grain128aeadv2 29.89 29.92 29.94 romulusn 30.04 30.06 30.08 T:schwaemm192192v2 32.54 32.59 32.62 T:schwaemm128128v2 33.00 33.03 33.05 T:schwaemm256256v2 36.13 36.17 36.19 T:giftcofb128v1 37.20 37.27 37.31 T:isapa128av20 41.50 41.62 41.65 romulusm 43.03 43.07 43.16 T:tinyjambu128v2 45.07 45.12 45.17 romulust 47.45 47.47 47.51 T:tinyjambu192v2 50.98 51.02 51.06 T:tinyjambu256v2 57.92 58.01 58.33 T:isapk128av20 72.24 72.45 72.97 T:isapk128v20 103.98 104.11 104.44 T:isapxv20 136.64 136.74 136.99 T:elephant200v2 6608.81 6610.38 6613.01 T:elephant176v2 7280.84 7282.32 7285.94 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 1.79 1.80 1.82 T:aes128gcmv1 1.79 1.80 1.82 aes256gcmv1 8.38 8.42 8.44 T:xoodyakround3 8.61 8.63 8.66 ascon128av12 12.57 12.60 12.63 ascon80pqv12 12.61 12.64 12.66 ascon128v12 16.67 16.70 16.73 ascon128abi32v12 22.53 22.56 22.59 T:schwaemm256128v2 23.26 23.34 23.39 romulusm 23.32 23.37 23.41 romulusn 24.22 24.25 24.30 ascon128bi32v12 24.92 24.97 25.01 T:isapa128v20 27.21 27.25 27.49 T:grain128aeadv2 29.86 29.89 29.92 T:schwaemm192192v2 32.33 32.37 32.45 T:schwaemm128128v2 31.96 32.63 33.23 T:tinyjambu256v2 32.90 32.92 32.94 T:schwaemm256256v2 32.97 33.01 33.07 T:tinyjambu192v2 33.39 33.45 33.68 T:tinyjambu128v2 36.26 36.30 36.34 T:giftcofb128v1 37.21 37.27 37.33 T:isapa128av20 44.91 44.97 45.03 romulust 58.20 58.34 58.46 T:isapk128av20 71.69 71.78 72.64 T:isapk128v20 90.79 90.83 90.87 T:elephant200v2 103.80 103.87 104.04 T:isapxv20 4371.41 4375.71 4380.87 T:elephant176v2 4850.98 4854.12 4855.08 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 1.79 1.80 1.81 T:aes128gcmv1 1.79 1.81 1.82 aes256gcmv1 8.35 8.40 8.45 T:xoodyakround3 8.57 8.62 8.69 ascon128av12 12.65 12.66 12.70 ascon128v12 12.66 12.69 12.73 ascon80pqv12 17.09 17.12 17.14 ascon128abi32v12 22.54 22.57 22.63 T:schwaemm256128v2 23.28 23.33 23.37 romulusm 23.33 23.37 23.42 romulusn 24.17 24.19 24.21 ascon128bi32v12 24.90 24.94 25.00 T:isapa128v20 27.00 27.02 27.04 T:grain128aeadv2 29.89 29.92 29.94 T:schwaemm192192v2 32.35 32.42 32.48 T:schwaemm128128v2 32.88 32.91 32.93 T:schwaemm256256v2 32.99 33.03 33.07 T:tinyjambu256v2 33.03 33.08 33.14 T:tinyjambu192v2 33.39 33.43 33.60 T:tinyjambu128v2 36.26 36.31 36.36 T:giftcofb128v1 37.22 37.24 37.28 T:isapa128av20 44.91 44.99 45.07 romulust 58.21 58.47 58.67 T:isapk128av20 72.04 72.47 73.03 T:isapk128v20 90.79 90.83 90.87 T:elephant200v2 104.04 104.14 104.35 T:isapxv20 4372.29 4376.43 4384.36 T:elephant176v2 4851.57 4854.01 4854.98 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 1.79 1.80 1.80 T:aes128gcmv1 1.80 1.81 1.81 aes256gcmv1 8.35 8.40 8.43 T:xoodyakround3 8.56 8.60 8.69 ascon128av12 12.64 12.66 12.68 ascon128v12 12.63 12.67 12.70 ascon80pqv12 17.10 17.13 17.15 ascon128abi32v12 22.54 22.58 22.63 T:schwaemm256128v2 23.27 23.34 23.38 romulusm 23.33 23.36 23.40 romulusn 24.16 24.19 24.22 ascon128bi32v12 24.91 24.94 25.00 T:isapa128v20 27.01 27.03 27.05 T:grain128aeadv2 29.89 29.92 29.94 T:schwaemm192192v2 32.35 32.38 32.44 T:schwaemm128128v2 32.89 32.91 32.94 T:schwaemm256256v2 32.97 33.01 33.04 T:tinyjambu256v2 33.05 33.08 33.14 T:tinyjambu192v2 33.43 33.46 33.57 T:tinyjambu128v2 36.27 36.33 36.40 T:giftcofb128v1 37.19 37.24 37.28 T:isapa128av20 44.93 44.99 45.04 romulust 58.27 58.46 58.57 T:isapk128av20 71.77 72.00 72.12 T:isapk128v20 90.78 90.82 90.86 T:elephant200v2 104.04 104.18 104.30 T:isapxv20 4371.99 4376.56 4380.49 T:elephant176v2 4852.04 4854.29 4855.54 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 2.39 2.39 2.40 T:aes128gcmv1 2.56 2.56 2.58 aes256gcmv1 8.92 8.93 8.95 ascon128av12 12.53 12.54 12.54 T:xoodyakround3 12.90 12.92 12.93 ascon80pqv12 12.93 12.94 12.95 ascon128v12 17.11 17.12 17.13 ascon128abi32v12 23.36 23.38 23.40 T:schwaemm256128v2 24.75 24.75 24.79 ascon128bi32v12 27.73 27.76 27.98 T:grain128aeadv2 30.35 30.37 30.41 romulusn 30.71 30.74 30.77 T:schwaemm192192v2 32.96 33.00 33.03 T:schwaemm128128v2 33.98 34.00 34.03 T:schwaemm256256v2 36.37 36.40 36.43 T:giftcofb128v1 41.94 42.00 42.06 romulusm 43.01 43.18 43.32 T:tinyjambu128v2 47.65 47.67 47.70 T:tinyjambu192v2 49.27 49.31 49.32 T:isapa128av20 50.10 50.23 50.65 T:tinyjambu256v2 54.67 54.72 54.86 T:isapa128v20 85.17 85.23 85.38 T:isapk128av20 90.00 90.04 90.11 romulust 139.54 139.61 139.69 T:elephant200v2 170.13 170.23 171.14 T:isapk128v20 227.27 228.19 235.57 T:isapxv20 6662.07 6664.41 6668.74 T:elephant176v2 7363.83 7365.05 7367.29 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 2.66 2.67 2.67 T:aes128gcmv1 3.04 3.05 3.06 aes256gcmv1 8.84 8.88 8.91 ascon128av12 12.39 12.41 12.43 T:xoodyakround3 12.93 12.94 12.95 ascon128v12 12.93 12.95 12.97 ascon80pqv12 17.32 17.33 17.35 ascon128abi32v12 23.35 23.37 23.40 T:schwaemm256128v2 24.76 24.78 24.79 ascon128bi32v12 28.13 28.14 28.16 T:grain128aeadv2 30.43 30.46 30.47 romulusn 30.71 30.73 30.75 T:schwaemm192192v2 32.97 33.00 33.04 T:schwaemm128128v2 33.95 33.97 33.99 T:schwaemm256256v2 36.46 36.50 36.52 T:giftcofb128v1 42.14 42.24 42.28 romulusm 43.35 43.37 43.50 T:tinyjambu128v2 47.80 47.83 47.86 T:tinyjambu192v2 49.23 49.26 49.31 T:isapa128av20 51.37 51.40 51.42 T:tinyjambu256v2 54.71 54.81 54.98 T:isapa128v20 85.18 85.23 85.33 T:isapk128av20 89.99 90.04 90.15 romulust 139.53 139.62 139.71 T:elephant200v2 170.17 170.30 171.33 T:isapk128v20 226.86 227.02 227.59 T:isapxv20 6662.15 6664.09 6666.74 T:elephant176v2 7363.36 7364.78 7366.21 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 2.66 2.67 2.67 T:aes128gcmv1 3.04 3.05 3.05 aes256gcmv1 8.85 8.87 8.89 ascon128av12 12.42 12.47 12.48 T:xoodyakround3 12.93 12.94 12.95 ascon128v12 12.95 12.98 12.99 ascon80pqv12 17.32 17.33 17.34 ascon128abi32v12 23.35 23.37 23.40 T:schwaemm256128v2 24.76 24.77 24.78 ascon128bi32v12 28.12 28.14 28.15 T:grain128aeadv2 30.44 30.47 30.48 romulusn 30.72 30.73 30.75 T:schwaemm192192v2 32.96 32.99 33.03 T:schwaemm128128v2 33.76 33.78 33.83 T:isapa128v20 33.97 33.98 33.99 T:schwaemm256256v2 36.49 36.52 36.53 T:giftcofb128v1 39.01 39.04 39.06 T:isapa128av20 42.13 42.22 42.27 romulusm 43.36 43.39 43.46 T:tinyjambu128v2 46.38 46.42 46.46 romulust 47.80 47.83 47.86 T:tinyjambu192v2 51.37 51.39 51.42 T:tinyjambu256v2 65.56 65.60 65.78 T:isapk128av20 111.58 111.60 111.97 T:isapk128v20 139.53 139.63 139.70 T:elephant200v2 147.75 147.80 147.85 T:isapxv20 6661.58 6662.84 6665.53 T:elephant176v2 7363.55 7364.45 7366.16 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 9.54 9.60 9.72 T:aes128gcmv1 11.34 11.43 11.79 aes256gcmv1 13.40 13.58 13.80 ascon128av12 17.17 17.27 17.34 ascon128v12 17.25 17.30 17.44 ascon80pqv12 18.53 18.63 18.87 T:xoodyakround3 25.69 25.76 25.86 ascon128abi32v12 35.37 35.46 35.58 ascon128bi32v12 38.03 38.09 38.22 T:schwaemm256128v2 38.10 38.20 38.36 T:grain128aeadv2 42.08 42.19 42.32 T:schwaemm128128v2 42.52 42.64 42.87 romulusn 43.87 43.98 44.28 T:giftcofb128v1 49.38 49.56 49.73 T:schwaemm192192v2 50.72 50.77 50.92 T:tinyjambu128v2 54.14 54.31 54.44 T:schwaemm256256v2 54.68 54.81 55.01 romulusm 55.79 55.92 56.06 T:tinyjambu192v2 58.61 59.00 59.32 T:tinyjambu256v2 119.46 119.79 120.14 T:isapa128av20 120.60 120.80 121.12 romulust 197.43 197.68 197.92 T:elephant200v2 347.21 347.84 349.86 T:isapk128av20 456.74 457.29 459.59 T:isapa128v20 1875.21 1875.68 1879.61 T:isapk128v20 2176.87 2182.52 2377.50 T:isapxv20 8280.80 8284.11 8327.68 T:elephant176v2 9843.98 9847.20 9896.10 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 9.59 9.64 9.76 T:aes128gcmv1 11.42 11.46 11.71 aes256gcmv1 13.44 13.54 13.75 ascon128av12 17.23 17.28 17.43 ascon128v12 17.34 17.42 17.47 ascon80pqv12 18.03 18.10 18.24 T:xoodyakround3 25.87 25.95 26.06 ascon128abi32v12 35.64 35.73 35.82 ascon128bi32v12 37.75 37.91 38.08 T:schwaemm256128v2 38.32 38.41 38.56 T:grain128aeadv2 42.24 42.36 42.48 T:schwaemm128128v2 42.52 42.63 42.75 romulusn 44.16 44.42 44.57 T:giftcofb128v1 49.56 49.64 49.78 T:schwaemm192192v2 50.88 50.93 51.09 T:tinyjambu128v2 54.41 54.57 54.70 T:schwaemm256256v2 55.97 56.15 56.32 T:tinyjambu192v2 56.92 57.03 57.15 romulusm 59.91 60.03 60.17 T:tinyjambu256v2 119.73 119.98 120.28 T:isapa128av20 120.49 120.66 120.96 romulust 197.35 197.59 197.84 T:elephant200v2 347.12 347.35 347.55 T:isapk128av20 457.01 457.54 459.10 T:isapa128v20 1876.70 1877.15 1883.50 T:isapk128v20 2165.06 2167.40 2168.58 T:isapxv20 8282.10 8285.92 8326.36 T:elephant176v2 9844.47 9847.88 9895.13 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 9.50 9.56 9.64 T:aes128gcmv1 11.40 11.46 11.58 aes256gcmv1 13.38 13.47 13.64 ascon128av12 17.24 17.30 17.41 ascon128v12 17.25 17.38 17.51 ascon80pqv12 18.04 18.14 18.22 T:xoodyakround3 25.88 25.95 26.07 ascon128abi32v12 35.59 35.71 35.81 ascon128bi32v12 37.87 37.90 37.96 T:schwaemm256128v2 38.34 38.45 38.58 T:grain128aeadv2 42.08 42.30 42.48 T:schwaemm128128v2 42.58 42.66 42.79 romulusn 44.14 44.23 44.41 T:giftcofb128v1 49.64 49.73 49.83 T:schwaemm192192v2 50.83 50.92 51.02 T:tinyjambu128v2 54.32 54.43 54.56 T:schwaemm256256v2 55.83 56.12 56.29 T:tinyjambu192v2 57.01 57.17 57.37 romulusm 59.91 60.03 60.14 T:tinyjambu256v2 75.93 76.10 76.26 romulust 79.16 79.28 79.49 T:isapa128av20 197.34 197.49 197.66 T:elephant200v2 227.32 227.80 229.36 T:isapk128av20 238.46 238.73 238.88 T:isapa128v20 998.08 998.30 999.78 T:isapk128v20 1133.47 1134.47 1134.99 T:isapxv20 8278.46 8282.49 8321.41 T:elephant176v2 9844.48 9848.31 9896.98 T:elephant160v2