VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Kaby Lake (906e9); 2017 Intel Xeon E3-1220 v6; 4 x 3000MHz; kizomba, supercop-20260217

[Page version: 20260319 20:29:39]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.18 1.19 1.19 T:aes128gcmv1 1.43 1.44 1.45 aes256gcmv1 7.55 7.58 7.62 ascon128av12 10.92 10.94 10.97 ascon128v12 10.91 10.95 10.97 ascon80pqv12 13.93 14.06 14.09 ascon128abi32v12 15.50 15.55 15.58 T:xoodyakround3 17.64 17.67 17.71 T:schwaemm256128v2 21.03 21.05 21.08 ascon128bi32v12 23.24 23.29 23.33 T:schwaemm192192v2 24.09 24.10 24.12 T:grain128aeadv2 24.09 24.14 24.24 T:schwaemm256256v2 25.75 25.79 25.85 T:schwaemm128128v2 33.48 33.53 33.58 T:giftcofb128v1 37.47 37.52 37.57 romulusn 40.48 40.57 40.64 T:isapa128av20 43.07 43.15 43.22 T:isapa128v20 60.68 60.75 60.81 romulusm 67.84 67.85 67.86 T:tinyjambu128v2 68.01 68.15 68.32 T:isapk128av20 82.94 83.54 83.55 T:tinyjambu192v2 89.26 89.27 89.28 T:tinyjambu256v2 90.22 90.46 90.92 T:isapk128v20 131.87 132.16 132.28 romulust 169.06 169.53 171.29 T:isapxv20 179.54 179.64 179.82 T:elephant200v2 6827.07 6832.34 6833.73 T:elephant176v2 8003.16 8009.31 8011.92 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.04 1.05 1.06 T:aes128gcmv1 1.42 1.43 1.44 aes256gcmv1 7.39 7.42 7.44 ascon128av12 10.91 10.94 10.97 ascon80pqv12 10.92 10.94 10.97 ascon128v12 13.81 13.87 13.94 ascon128abi32v12 15.29 15.35 15.39 T:xoodyakround3 17.69 17.71 17.75 T:schwaemm256128v2 20.82 20.85 20.87 ascon128bi32v12 23.23 23.30 23.37 T:schwaemm192192v2 24.08 24.14 24.23 T:schwaemm256256v2 24.73 24.75 24.82 T:grain128aeadv2 25.75 25.79 25.84 T:schwaemm128128v2 33.72 33.78 33.83 T:giftcofb128v1 37.44 37.48 37.53 romulusn 40.50 40.58 40.66 T:isapa128av20 43.07 43.16 43.24 T:isapa128v20 60.69 60.74 60.84 romulusm 68.00 68.00 68.01 T:tinyjambu128v2 68.04 68.14 68.26 T:isapk128av20 83.50 83.50 83.50 T:tinyjambu192v2 89.27 89.31 89.33 T:tinyjambu256v2 90.15 90.37 90.74 T:isapk128v20 131.80 131.92 132.17 romulust 168.75 169.63 171.66 T:isapxv20 179.56 179.65 179.77 T:elephant200v2 6826.50 6832.35 6833.19 T:elephant176v2 8003.19 8008.72 8011.81 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.05 1.05 1.06 T:aes128gcmv1 1.42 1.43 1.43 aes256gcmv1 7.40 7.42 7.45 ascon128av12 10.91 10.94 10.96 ascon80pqv12 10.91 10.94 10.97 ascon128v12 13.83 13.88 13.93 ascon128abi32v12 15.31 15.37 15.42 T:xoodyakround3 17.72 17.95 17.99 T:schwaemm256128v2 20.82 20.84 20.86 ascon128bi32v12 21.53 21.59 21.65 T:isapa128v20 23.27 23.30 23.35 T:schwaemm192192v2 24.09 24.13 24.23 T:schwaemm256256v2 24.72 24.76 24.84 T:grain128aeadv2 25.75 25.79 25.84 T:schwaemm128128v2 27.30 27.34 27.39 T:isapa128av20 33.72 33.77 33.82 T:giftcofb128v1 37.43 37.48 37.52 romulusn 45.03 45.11 45.36 romulust 45.08 45.17 45.28 T:isapk128av20 56.16 56.36 56.61 T:isapk128v20 60.69 60.76 60.83 romulusm 68.00 68.00 68.01 T:tinyjambu128v2 83.50 83.50 83.50 T:tinyjambu192v2 89.25 89.27 89.28 T:tinyjambu256v2 97.17 97.56 97.89 T:isapxv20 179.55 179.64 179.79 T:elephant200v2 6827.00 6832.22 6833.41 T:elephant176v2 8003.13 8008.88 8011.50 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.80 0.80 0.80 T:aes128gcmv1 0.93 0.93 0.94 aes256gcmv1 7.47 7.49 7.51 ascon128av12 10.93 10.95 10.97 ascon128v12 10.93 10.96 10.97 ascon80pqv12 11.72 11.74 11.76 T:xoodyakround3 13.94 13.96 13.97 ascon128abi32v12 17.55 17.59 17.75 T:schwaemm256128v2 20.44 20.65 20.78 ascon128bi32v12 23.16 23.20 23.45 T:schwaemm192192v2 23.99 24.02 24.13 T:schwaemm256256v2 24.11 24.12 24.13 T:grain128aeadv2 25.60 25.63 25.66 T:schwaemm128128v2 30.39 30.43 30.46 romulusn 32.35 32.39 32.44 T:isapa128v20 33.75 33.81 33.90 T:giftcofb128v1 33.95 33.99 34.03 T:isapa128av20 42.02 42.06 42.11 romulusm 55.49 55.50 55.51 T:tinyjambu128v2 56.59 56.69 56.84 T:isapk128av20 63.18 63.40 63.41 T:tinyjambu192v2 67.38 67.39 67.44 T:tinyjambu256v2 73.26 73.39 73.91 T:isapk128v20 88.43 88.58 88.71 romulust 133.30 133.52 134.75 T:isapxv20 134.20 134.27 134.81 T:elephant200v2 5100.05 5101.55 5103.50 T:elephant176v2 6001.98 6003.07 6006.57 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.72 0.73 0.73 T:aes128gcmv1 0.91 0.92 0.93 aes256gcmv1 7.38 7.40 7.43 ascon128av12 10.90 10.92 10.94 ascon128v12 10.93 10.96 10.98 ascon80pqv12 11.63 11.65 11.68 T:xoodyakround3 13.81 13.85 13.88 ascon128abi32v12 17.56 17.72 17.85 T:schwaemm256128v2 20.59 20.61 20.72 ascon128bi32v12 23.17 23.21 23.26 T:schwaemm192192v2 23.99 24.04 24.13 T:schwaemm256256v2 24.58 24.60 24.62 T:grain128aeadv2 25.60 25.63 25.66 T:schwaemm128128v2 30.38 30.41 30.44 romulusn 32.34 32.38 32.44 T:isapa128v20 33.86 33.91 34.00 T:giftcofb128v1 33.95 34.00 34.04 T:isapa128av20 42.05 42.09 42.13 romulusm 55.57 55.60 55.63 T:tinyjambu128v2 56.65 56.73 56.82 T:isapk128av20 63.29 63.43 63.44 T:tinyjambu192v2 67.42 67.42 67.43 T:tinyjambu256v2 73.28 73.40 73.98 T:isapk128v20 88.36 88.50 88.72 romulust 133.13 133.55 135.13 T:isapxv20 134.22 134.26 134.80 T:elephant200v2 5099.95 5101.75 5103.38 T:elephant176v2 6001.78 6003.25 6006.34 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.73 0.73 0.73 T:aes128gcmv1 0.91 0.92 0.92 aes256gcmv1 7.38 7.40 7.43 ascon128av12 10.91 10.93 10.95 ascon128v12 10.91 10.95 10.96 ascon80pqv12 11.61 11.64 11.66 T:xoodyakround3 13.83 13.86 13.89 ascon128abi32v12 17.54 17.57 17.61 T:schwaemm256128v2 20.59 20.63 20.84 ascon128bi32v12 21.59 21.63 21.66 T:isapa128v20 23.15 23.20 23.24 T:schwaemm192192v2 23.99 24.03 24.15 T:schwaemm256256v2 24.58 24.60 24.62 T:grain128aeadv2 25.61 25.63 25.66 T:schwaemm128128v2 27.33 27.35 27.39 T:isapa128av20 30.38 30.41 30.44 romulusn 33.85 33.92 34.00 T:giftcofb128v1 42.04 42.08 42.12 romulusm 44.98 45.05 45.30 romulust 45.09 45.16 45.26 T:isapk128av20 55.56 55.57 55.59 T:tinyjambu128v2 56.26 56.36 56.55 T:isapk128v20 63.31 63.43 63.44 T:tinyjambu192v2 67.38 67.38 67.39 T:tinyjambu256v2 97.28 97.50 98.15 T:isapxv20 134.22 134.27 134.77 T:elephant200v2 5100.03 5101.63 5103.47 T:elephant176v2 6002.08 6003.31 6006.33 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.41 0.42 0.42 aes256gcmv1 0.41 0.42 0.42 T:aes128gcmv1 7.38 7.40 7.42 ascon128av12 7.97 8.00 8.02 T:xoodyakround3 10.87 10.93 10.96 ascon128v12 10.93 10.95 10.98 ascon80pqv12 13.80 13.82 13.84 ascon128abi32v12 17.43 17.48 17.51 T:schwaemm256128v2 20.35 20.48 20.89 ascon128bi32v12 21.60 21.65 21.70 T:isapa128v20 22.97 23.03 23.10 T:schwaemm192192v2 23.29 23.33 23.37 romulusn 23.30 23.34 23.39 romulusm 23.86 23.91 24.01 T:schwaemm256256v2 24.10 24.12 24.13 T:grain128aeadv2 25.40 25.44 25.49 T:schwaemm128128v2 27.29 27.33 27.36 T:isapa128av20 34.06 34.16 34.40 T:giftcofb128v1 43.13 43.13 43.14 T:tinyjambu128v2 43.30 43.30 43.31 T:tinyjambu192v2 44.89 44.96 45.15 romulust 44.99 45.10 45.21 T:isapk128av20 45.50 45.50 45.51 T:tinyjambu256v2 56.06 56.26 56.42 T:isapk128v20 89.22 89.26 89.30 T:elephant200v2 97.19 97.40 97.73 T:isapxv20 3371.23 3373.51 3376.28 T:elephant176v2 3998.70 4002.58 4003.29 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.40 0.41 0.42 T:aes128gcmv1 0.40 0.41 0.41 aes256gcmv1 7.32 7.35 7.39 ascon128av12 7.98 8.00 8.03 T:xoodyakround3 10.87 10.89 10.92 ascon128v12 10.92 10.96 10.99 ascon80pqv12 13.79 13.82 13.84 ascon128abi32v12 17.42 17.46 17.51 T:schwaemm256128v2 20.35 20.42 20.82 ascon128bi32v12 21.57 21.64 21.72 T:isapa128v20 23.00 23.04 23.08 T:schwaemm192192v2 23.27 23.31 23.35 romulusn 23.29 23.34 23.37 romulusm 23.86 23.92 24.00 T:schwaemm256256v2 24.38 24.41 24.43 T:grain128aeadv2 25.39 25.44 25.49 T:schwaemm128128v2 27.28 27.34 27.39 T:isapa128av20 34.00 34.13 34.29 T:giftcofb128v1 43.13 43.14 43.14 T:tinyjambu128v2 43.36 43.37 43.37 T:tinyjambu192v2 44.82 44.93 45.18 romulust 45.01 45.12 45.25 T:isapk128av20 45.50 45.50 45.51 T:tinyjambu256v2 56.11 56.26 56.41 T:isapk128v20 89.22 89.24 89.28 T:elephant200v2 97.12 97.54 97.85 T:isapxv20 3371.22 3373.66 3376.68 T:elephant176v2 3998.53 4002.27 4003.04 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.41 0.41 0.42 aes256gcmv1 0.41 0.41 0.42 T:aes128gcmv1 7.32 7.36 7.41 ascon128av12 7.98 8.01 8.05 T:xoodyakround3 10.87 10.89 10.93 ascon128v12 10.93 10.96 10.99 ascon80pqv12 13.80 13.82 13.85 ascon128abi32v12 17.37 17.41 17.49 T:schwaemm256128v2 20.35 20.39 20.58 ascon128bi32v12 21.58 21.63 21.68 T:isapa128v20 22.99 23.05 23.21 T:schwaemm192192v2 23.28 23.32 23.36 romulusn 23.29 23.33 23.37 romulusm 23.85 23.91 24.00 T:schwaemm256256v2 24.39 24.41 24.45 T:grain128aeadv2 25.40 25.44 25.48 T:schwaemm128128v2 27.30 27.35 27.39 T:isapa128av20 33.98 34.11 34.26 T:giftcofb128v1 43.13 43.14 43.14 T:tinyjambu128v2 43.36 43.37 43.37 T:tinyjambu192v2 44.87 44.94 45.20 romulust 45.04 45.14 45.24 T:isapk128av20 45.50 45.50 45.51 T:tinyjambu256v2 56.11 56.24 56.42 T:isapk128v20 89.21 89.25 89.30 T:elephant200v2 97.15 97.55 97.84 T:isapxv20 3370.83 3372.99 3376.36 T:elephant176v2 3998.27 4002.02 4002.96 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.95 0.96 0.96 T:aes128gcmv1 1.11 1.11 1.12 aes256gcmv1 7.66 7.68 7.70 ascon128av12 11.10 11.11 11.13 ascon128v12 11.11 11.13 11.14 ascon80pqv12 11.83 11.85 11.87 T:xoodyakround3 14.25 14.27 14.28 ascon128abi32v12 18.09 18.12 18.14 T:schwaemm256128v2 20.97 21.04 21.21 ascon128bi32v12 23.68 23.72 23.76 T:schwaemm192192v2 24.52 24.53 24.54 T:grain128aeadv2 24.64 24.67 24.76 T:schwaemm256256v2 25.97 25.99 26.02 T:schwaemm128128v2 30.82 30.85 30.88 romulusn 34.08 34.16 34.25 T:giftcofb128v1 36.10 36.14 36.18 T:isapa128av20 42.46 42.48 42.52 romulusm 47.46 47.49 47.53 T:isapa128v20 55.91 55.91 55.92 T:tinyjambu128v2 63.49 63.59 63.85 T:tinyjambu192v2 64.16 64.24 64.32 T:isapk128av20 67.87 67.87 67.88 T:tinyjambu256v2 89.86 90.00 90.09 romulust 128.18 128.28 128.52 T:isapk128v20 137.01 137.06 137.38 T:elephant200v2 215.76 216.00 216.83 T:isapxv20 5138.83 5139.46 5141.04 T:elephant176v2 6070.69 6071.20 6072.41 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.88 0.88 0.89 T:aes128gcmv1 1.10 1.10 1.11 aes256gcmv1 7.56 7.58 7.61 ascon128av12 11.08 11.09 11.11 ascon128v12 11.11 11.13 11.14 ascon80pqv12 11.76 11.79 11.82 T:xoodyakround3 14.13 14.16 14.18 ascon128abi32v12 18.10 18.13 18.16 T:schwaemm256128v2 20.91 20.93 21.07 ascon128bi32v12 23.69 23.71 23.74 T:schwaemm192192v2 24.64 24.68 24.75 T:schwaemm256256v2 25.00 25.01 25.02 T:grain128aeadv2 25.97 25.99 26.03 T:schwaemm128128v2 30.82 30.84 30.86 romulusn 34.21 34.28 34.34 T:giftcofb128v1 36.11 36.14 36.18 T:isapa128av20 42.55 42.58 42.64 romulusm 47.46 47.49 47.52 T:isapa128v20 55.99 55.99 56.02 T:tinyjambu128v2 63.83 63.89 63.89 T:tinyjambu192v2 64.21 64.28 64.34 T:isapk128av20 67.90 67.92 67.93 T:tinyjambu256v2 89.78 89.87 90.07 romulust 128.22 128.27 128.83 T:isapk128v20 137.01 137.05 137.32 T:elephant200v2 215.54 215.80 216.73 T:isapxv20 5138.80 5139.48 5141.01 T:elephant176v2 6070.68 6071.41 6072.65 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.88 0.88 0.88 T:aes128gcmv1 1.10 1.10 1.10 aes256gcmv1 7.56 7.57 7.61 ascon128av12 11.08 11.10 11.11 ascon128v12 11.09 11.12 11.13 ascon80pqv12 11.76 11.78 11.80 T:xoodyakround3 14.14 14.16 14.19 ascon128abi32v12 18.12 18.14 18.18 T:schwaemm256128v2 20.93 21.13 21.18 ascon128bi32v12 23.72 23.78 24.02 T:schwaemm192192v2 24.64 24.66 24.74 T:schwaemm256256v2 25.00 25.01 25.03 T:grain128aeadv2 25.98 26.00 26.02 T:schwaemm128128v2 28.58 28.61 28.63 T:isapa128av20 29.28 29.30 29.33 T:isapa128v20 30.82 30.84 30.86 romulusn 34.21 34.27 34.35 T:giftcofb128v1 42.55 42.57 42.62 romulusm 46.30 46.37 46.56 romulust 49.46 49.51 49.58 T:isapk128av20 55.98 55.99 55.99 T:tinyjambu128v2 63.72 63.89 63.90 T:tinyjambu192v2 67.87 67.87 67.89 T:tinyjambu256v2 84.50 84.60 84.70 T:isapk128v20 137.00 137.05 137.34 T:elephant200v2 139.46 139.58 140.14 T:isapxv20 5138.75 5139.61 5141.27 T:elephant176v2 6070.83 6071.82 6073.41 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 5.87 5.91 5.97 T:aes128gcmv1 7.84 7.87 7.90 aes256gcmv1 11.66 11.72 12.03 ascon128av12 14.78 14.87 15.01 ascon128v12 14.81 14.93 15.21 ascon80pqv12 17.12 17.20 17.30 T:xoodyakround3 21.24 21.37 21.50 ascon128abi32v12 27.87 28.11 28.28 ascon128bi32v12 29.44 29.52 29.70 T:schwaemm256128v2 33.41 33.59 33.77 T:schwaemm128128v2 34.14 34.19 34.26 T:grain128aeadv2 38.04 38.19 38.49 T:schwaemm192192v2 38.83 38.95 39.20 T:schwaemm256256v2 40.31 40.47 40.69 romulusn 41.49 41.65 41.79 T:giftcofb128v1 52.48 52.66 53.05 romulusm 65.51 65.54 65.64 T:tinyjambu128v2 74.14 74.16 74.17 T:tinyjambu192v2 79.03 79.05 79.08 T:tinyjambu256v2 85.61 85.81 86.09 T:isapa128av20 121.30 121.49 121.97 romulust 193.57 193.69 193.85 T:elephant200v2 223.57 224.47 225.34 T:isapk128av20 393.60 394.07 394.58 T:isapa128v20 1369.93 1371.10 1372.34 T:isapk128v20 2083.37 2089.68 2091.24 T:isapxv20 6385.15 6386.31 6427.44 T:elephant176v2 8111.05 8113.65 8161.98 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 5.94 5.98 6.05 T:aes128gcmv1 8.10 8.12 8.16 aes256gcmv1 11.58 11.67 11.98 ascon128av12 14.78 14.85 14.98 ascon128v12 14.79 14.86 15.02 ascon80pqv12 17.02 17.10 17.28 T:xoodyakround3 21.11 21.22 21.47 ascon128abi32v12 27.82 27.95 28.13 ascon128bi32v12 29.39 29.51 29.68 T:schwaemm256128v2 33.29 33.51 33.72 T:schwaemm128128v2 34.60 34.66 34.73 T:grain128aeadv2 38.06 38.20 38.44 T:schwaemm192192v2 38.85 39.09 39.33 T:schwaemm256256v2 40.48 40.72 40.96 romulusn 41.51 41.68 41.85 T:giftcofb128v1 54.31 54.48 54.82 romulusm 65.63 65.64 65.73 T:tinyjambu128v2 74.27 74.29 74.31 T:tinyjambu192v2 79.10 79.12 79.15 T:tinyjambu256v2 85.66 85.82 86.06 T:isapa128av20 121.17 121.48 121.75 romulust 193.57 193.65 193.80 T:elephant200v2 223.65 224.28 225.49 T:isapk128av20 393.47 393.89 394.50 T:isapa128v20 1370.29 1372.71 1374.26 T:isapk128v20 2080.36 2082.80 2089.56 T:isapxv20 6385.34 6386.72 6432.59 T:elephant176v2 8110.90 8113.62 8166.75 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 5.94 5.97 6.01 T:aes128gcmv1 8.07 8.09 8.11 aes256gcmv1 11.56 11.67 11.80 ascon128av12 14.77 14.86 15.02 ascon128v12 14.80 14.86 15.00 ascon80pqv12 17.11 17.19 17.32 T:xoodyakround3 21.13 21.20 21.36 ascon128abi32v12 27.77 27.89 28.07 ascon128bi32v12 29.86 29.96 30.11 T:schwaemm256128v2 33.28 33.40 33.57 T:schwaemm128128v2 34.64 34.68 34.72 T:grain128aeadv2 38.01 38.17 38.32 T:schwaemm192192v2 38.82 38.94 39.19 T:schwaemm256256v2 40.48 40.60 40.80 romulusn 41.54 41.69 41.89 T:giftcofb128v1 54.31 54.44 54.67 romulusm 57.07 57.16 57.33 T:isapa128av20 65.64 65.65 65.66 T:tinyjambu128v2 74.28 74.28 74.29 T:tinyjambu192v2 75.81 76.03 76.32 romulust 79.10 79.11 79.12 T:tinyjambu256v2 138.32 139.00 139.64 T:isapk128av20 193.49 193.62 193.82 T:elephant200v2 204.77 205.21 205.56 T:isapa128v20 717.95 718.78 720.62 T:isapk128v20 1087.87 1089.02 1092.68 T:isapxv20 6385.43 6386.45 6422.69 T:elephant176v2 8111.56 8114.03 8165.15 T:elephant160v2