VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Coffee Lake (806ea); 2018 Intel Core i3-8109U; 2 x 3000MHz; like, supercop-20251222

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.20 1.21 1.22 T:aes128gcmv1 1.64 1.65 1.65 aes256gcmv1 7.52 7.59 7.63 ascon128av12 10.86 10.88 10.91 ascon128v12 10.86 10.91 10.94 ascon80pqv12 13.94 14.06 14.19 ascon128abi32v12 16.70 16.75 16.80 T:xoodyakround3 19.15 19.22 19.26 T:schwaemm256128v2 21.22 21.25 21.27 ascon128bi32v12 21.37 21.50 22.39 T:schwaemm256256v2 25.07 25.13 25.18 T:grain128aeadv2 24.99 25.28 25.37 T:schwaemm192192v2 27.39 27.44 27.48 T:schwaemm128128v2 37.57 38.13 38.19 romulusn 41.16 41.18 41.23 T:giftcofb128v1 41.30 41.36 41.40 T:isapa128av20 45.80 46.15 46.26 T:isapa128v20 60.16 60.23 60.29 T:tinyjambu128v2 60.85 60.89 61.12 romulusm 68.80 68.87 68.97 T:isapk128av20 72.94 73.05 73.08 T:tinyjambu192v2 78.36 78.51 78.84 T:tinyjambu256v2 91.76 91.85 91.91 T:isapk128v20 128.32 128.49 129.05 romulust 142.04 142.13 142.23 T:elephant200v2 184.96 185.02 185.12 T:isapxv20 7508.41 7508.86 7513.04 T:elephant176v2 8252.07 8255.06 8256.02 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.04 1.07 1.09 T:aes128gcmv1 1.57 1.59 1.60 aes256gcmv1 7.36 7.38 7.41 ascon128av12 10.86 10.89 10.91 ascon128v12 10.88 10.90 10.94 ascon80pqv12 13.85 13.93 14.02 ascon128abi32v12 16.33 16.41 16.43 T:xoodyakround3 19.15 19.21 19.27 T:schwaemm256128v2 21.03 21.05 21.09 ascon128bi32v12 21.29 21.57 22.33 T:schwaemm256256v2 25.12 25.16 25.32 T:schwaemm192192v2 25.59 25.67 25.69 T:grain128aeadv2 27.35 27.38 27.47 T:schwaemm128128v2 37.84 37.88 37.91 romulusn 41.18 41.23 41.29 T:giftcofb128v1 41.26 41.35 41.41 T:isapa128av20 45.71 46.11 46.34 T:isapa128v20 60.20 60.27 60.35 T:tinyjambu128v2 60.95 61.06 61.26 romulusm 68.80 68.92 69.11 T:isapk128av20 73.53 73.55 73.81 T:tinyjambu192v2 78.58 78.60 78.63 T:tinyjambu256v2 91.82 91.88 91.97 T:isapk128v20 128.45 128.60 128.97 romulust 142.08 142.14 142.29 T:elephant200v2 173.44? 184.99? 196.57? T:isapxv20 7508.48 7508.84 7513.50 T:elephant176v2 8252.09 8255.06 8256.19 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.05 1.06 1.08 T:aes128gcmv1 1.58 1.59 1.59 aes256gcmv1 7.37 7.38 7.42 ascon128av12 10.84 10.87 10.89 ascon128v12 10.86 10.88 10.93 ascon80pqv12 13.85 13.93 14.08 ascon128abi32v12 16.41 16.46 16.50 T:xoodyakround3 19.16 19.20 19.33 T:schwaemm256128v2 21.03 21.05 21.07 ascon128bi32v12 21.34 21.56 22.34 T:schwaemm256256v2 22.67 22.91 23.16 T:isapa128v20 25.12 25.24 25.33 T:schwaemm192192v2 25.59 25.67 25.69 T:grain128aeadv2 27.15 27.23 27.30 T:isapa128av20 27.35 27.40 27.44 T:schwaemm128128v2 37.86 37.89 37.91 romulusn 41.22 41.30 41.33 T:giftcofb128v1 43.83 43.95 44.08 romulust 46.05 46.13 46.19 T:isapk128av20 57.59 57.69 57.74 T:isapk128v20 60.25 60.32 60.37 T:tinyjambu128v2 60.78 61.15 61.38 romulusm 73.52 73.55 73.56 T:tinyjambu192v2 78.58 78.60 78.62 T:tinyjambu256v2 108.63 108.71 108.79 T:isapxv20 142.12 142.21 142.30 T:elephant200v2 7508.32 7508.84 7513.11 T:elephant176v2 8252.40 8255.63 8256.36 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.80 0.82 0.82 T:aes128gcmv1 1.02 1.03 1.04 aes256gcmv1 7.45 7.48 7.50 ascon128av12 10.87 10.89 10.92 ascon128v12 10.87 10.91 10.93 ascon80pqv12 12.69 12.72 12.76 T:xoodyakround3 14.04 14.08 14.09 ascon128abi32v12 19.00 19.02 19.11 T:schwaemm256128v2 20.87 20.95 21.15 ascon128bi32v12 21.27 21.41 22.28 T:schwaemm256256v2 25.10 25.17 25.21 T:schwaemm192192v2 25.13 25.20 25.23 T:grain128aeadv2 27.21 27.24 27.28 T:schwaemm128128v2 30.26 30.44 30.55 romulusn 34.24 34.28 34.33 T:isapa128av20 34.54 34.68 34.81 T:isapa128v20 41.38 41.40 41.43 T:giftcofb128v1 41.70 41.81 41.84 romulusm 49.29 49.33 49.37 T:tinyjambu128v2 57.35 57.41 57.45 T:isapk128av20 57.44 57.52 57.57 T:tinyjambu192v2 59.48 59.54 59.73 T:tinyjambu256v2 74.53 74.58 74.64 T:isapk128v20 86.07 86.24 86.67 romulust 107.08 107.13 107.21 T:elephant200v2 147.35 147.39 147.42 T:isapxv20 5604.58 5606.60 5607.93 T:elephant176v2 6189.27 6190.14 6190.37 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.72 0.74 0.75 T:aes128gcmv1 0.98 1.00 1.00 aes256gcmv1 7.36 7.38 7.41 ascon128av12 10.84 10.88 10.92 ascon128v12 10.86 10.89 10.92 ascon80pqv12 12.54 12.58 12.62 T:xoodyakround3 13.91 13.94 13.96 ascon128abi32v12 19.09 19.13 19.18 T:schwaemm256128v2 20.79 20.85 20.93 ascon128bi32v12 21.27 21.47 22.20 T:schwaemm256256v2 25.08 25.11 25.20 T:schwaemm192192v2 25.40 25.44 25.48 T:grain128aeadv2 27.21 27.25 27.28 T:schwaemm128128v2 30.31 30.41 30.50 romulusn 34.24 34.27 34.35 T:isapa128av20 34.51 34.67 34.77 T:isapa128v20 41.43 41.45 41.48 T:giftcofb128v1 41.77 41.87 41.96 romulusm 49.34 49.37 49.41 T:tinyjambu128v2 57.34 57.40 57.45 T:isapk128av20 57.90 57.91 57.92 T:tinyjambu192v2 59.59 59.61 59.63 T:tinyjambu256v2 74.52 74.58 74.69 T:isapk128v20 86.18 86.28 86.50 romulust 107.10 107.14 107.27 T:elephant200v2 141.63 147.47 153.29 T:isapxv20 5605.10 5606.72 5607.83 T:elephant176v2 6189.34 6189.96 6190.63 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.73 0.74 0.75 T:aes128gcmv1 1.00 1.00 1.00 aes256gcmv1 7.37 7.39 7.42 ascon128av12 10.85 10.87 10.90 ascon128v12 10.89 10.91 10.92 ascon80pqv12 12.57 12.59 12.61 T:xoodyakround3 13.92 13.95 13.98 ascon128abi32v12 19.02 19.06 19.11 T:schwaemm256128v2 20.80 20.85 20.96 ascon128bi32v12 21.41 21.49 22.21 T:schwaemm256256v2 22.89 22.93 23.05 T:isapa128v20 25.08 25.13 25.20 T:schwaemm192192v2 25.40 25.43 25.49 T:grain128aeadv2 27.17 27.21 27.25 T:isapa128av20 27.22 27.24 27.27 T:schwaemm128128v2 30.36 30.40 30.49 romulusn 41.44 41.45 41.47 T:giftcofb128v1 41.76 41.82 41.93 romulusm 43.80 43.92 44.20 romulust 45.89 45.97 46.01 T:isapk128av20 49.36 49.40 49.43 T:tinyjambu128v2 57.38 57.42 57.51 T:isapk128v20 57.77 57.90 57.92 T:tinyjambu192v2 59.57 59.61 59.62 T:tinyjambu256v2 107.05 107.12 107.18 T:elephant200v2 109.17 109.22 109.29 T:isapxv20 5605.48 5606.48 5608.53 T:elephant176v2 6189.41 6189.89 6190.48 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.41 0.42 0.43 aes256gcmv1 0.42 0.43 0.44 T:aes128gcmv1 7.35 7.36 7.38 ascon128av12 8.75 8.77 8.81 T:xoodyakround3 10.87 10.88 10.91 ascon128v12 10.88 10.91 10.95 ascon80pqv12 13.92 13.95 13.97 ascon128abi32v12 18.90 18.96 19.03 T:schwaemm256128v2 20.52 20.56 21.02 ascon128bi32v12 21.09 21.33 22.15 T:schwaemm256256v2 22.73 22.82 22.87 romulusn 22.89 22.97 23.12 T:isapa128v20 23.03 23.08 23.21 romulusm 24.95 25.00 25.12 T:schwaemm192192v2 25.12 25.15 25.20 T:grain128aeadv2 26.98 27.04 27.09 T:schwaemm128128v2 27.07 27.12 27.21 T:isapa128av20 38.42 38.46 38.49 T:tinyjambu128v2 40.58 40.62 40.67 T:tinyjambu256v2 41.62 41.64 41.68 T:giftcofb128v1 42.04 42.05 42.06 T:tinyjambu192v2 43.58 43.62 43.86 romulust 45.68 45.83 45.95 T:isapk128av20 57.18 57.29 57.40 T:isapk128v20 72.22 72.28 72.32 T:elephant200v2 109.70 109.76 109.86 T:isapxv20 3705.20 3705.39 3706.42 T:elephant176v2 4124.59 4125.16 4125.57 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.41 0.42 0.43 aes256gcmv1 0.40 0.43 0.44 T:aes128gcmv1 7.30 7.34 7.38 ascon128av12 8.74 8.78 8.85 T:xoodyakround3 10.81 10.83 10.86 ascon128v12 10.87 10.90 10.91 ascon80pqv12 13.91 13.92 13.94 ascon128abi32v12 18.86 18.94 18.99 T:schwaemm256128v2 20.51 20.56 20.60 ascon128bi32v12 21.10 21.36 22.07 T:schwaemm256256v2 22.70 22.77 22.90 romulusn 22.84 22.91 23.12 romulusm 22.80 22.96 23.13 T:isapa128v20 24.99 25.04 25.12 T:schwaemm192192v2 25.03 25.09 25.19 T:grain128aeadv2 26.99 27.04 27.10 T:schwaemm128128v2 27.07 27.10 27.20 T:isapa128av20 38.41 38.45 38.49 T:tinyjambu128v2 40.58 40.61 40.66 T:tinyjambu256v2 41.63 41.67 41.72 T:giftcofb128v1 42.03 42.06 42.06 T:tinyjambu192v2 43.54 43.67 43.87 romulust 45.75 45.83 45.89 T:isapk128av20 57.19 57.34 57.47 T:isapk128v20 72.20 72.24 72.30 T:elephant200v2 109.71 109.79 109.87 T:isapxv20 3705.22 3705.81 3706.47 T:elephant176v2 4124.16 4124.57 4125.36 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.42 0.42 0.43 aes256gcmv1 0.42 0.43 0.44 T:aes128gcmv1 7.33 7.36 7.39 ascon128av12 8.77 8.80 8.81 T:xoodyakround3 10.81 10.83 10.85 ascon128v12 10.86 10.88 10.91 ascon80pqv12 13.90 13.91 13.94 ascon128abi32v12 18.84 18.91 19.03 T:schwaemm256128v2 20.52 20.57 20.68 ascon128bi32v12 21.04 21.35 22.07 T:schwaemm256256v2 22.73 22.79 22.86 romulusn 22.84 22.91 23.02 T:isapa128v20 22.89 23.11 23.19 romulusm 25.00 25.03 25.13 T:schwaemm192192v2 25.06 25.10 25.21 T:grain128aeadv2 27.00 27.03 27.06 T:schwaemm128128v2 27.09 27.13 27.18 T:isapa128av20 38.41 38.44 38.49 T:tinyjambu128v2 40.59 40.63 40.67 T:tinyjambu256v2 41.63 41.67 41.69 T:giftcofb128v1 42.03 42.05 42.05 T:tinyjambu192v2 43.57 43.75 43.95 romulust 45.76 45.85 45.96 T:isapk128av20 57.17 57.32 57.41 T:isapk128v20 72.17 72.23 72.28 T:elephant200v2 109.63 109.73 109.82 T:isapxv20 3705.24 3705.63 3706.54 T:elephant176v2 4124.63 4124.90 4125.25 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.97 0.98 0.98 T:aes128gcmv1 1.21 1.22 1.22 aes256gcmv1 7.67 7.68 7.70 ascon128av12 11.07 11.09 11.10 ascon128v12 11.09 11.11 11.13 ascon80pqv12 12.87 12.87 12.88 T:xoodyakround3 14.38 14.39 14.40 ascon128abi32v12 19.66 19.67 19.70 T:schwaemm256128v2 21.19 21.21 21.34 ascon128bi32v12 21.89 22.00 22.83 T:schwaemm256256v2 25.57 25.62 25.65 T:grain128aeadv2 25.65 25.75 25.79 T:schwaemm192192v2 27.60 27.63 27.67 T:schwaemm128128v2 30.64 30.77 30.82 romulusn 37.78 37.82 37.86 T:isapa128av20 41.80 41.82 41.85 T:giftcofb128v1 42.13 42.21 42.31 romulusm 49.72 49.74 49.80 T:tinyjambu128v2 50.51 50.60 50.67 T:isapa128v20 57.98 58.00 58.01 T:tinyjambu192v2 59.98 60.16 60.23 T:tinyjambu256v2 64.19 64.22 64.29 T:isapk128av20 87.42 87.57 87.75 romulust 109.40 109.47 109.52 T:elephant200v2 128.71 128.75 128.82 T:isapk128v20 238.28 239.53 239.57 T:isapxv20 5648.86 5649.44 5650.03 T:elephant176v2 6234.92 6259.04 6259.43 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.90 0.91 0.92 T:aes128gcmv1 1.18 1.18 1.19 aes256gcmv1 7.58 7.60 7.60 ascon128av12 11.03 11.06 11.07 ascon128v12 11.04 11.08 11.08 ascon80pqv12 12.72 12.73 12.74 T:xoodyakround3 14.25 14.26 14.30 ascon128abi32v12 19.64 19.67 19.73 T:schwaemm256128v2 21.12 21.14 21.34 ascon128bi32v12 21.86 22.11 22.76 T:schwaemm256256v2 25.66 25.71 25.77 T:schwaemm192192v2 25.82 25.83 25.87 T:grain128aeadv2 27.57 27.61 27.65 T:schwaemm128128v2 30.60 30.64 30.67 romulusn 37.74 37.79 37.82 T:isapa128av20 41.87 41.89 41.91 T:giftcofb128v1 42.17 42.23 42.35 romulusm 49.75 49.77 49.81 T:tinyjambu128v2 50.51 50.60 50.72 T:isapa128v20 58.23 58.24 58.25 T:tinyjambu192v2 60.05 60.06 60.07 T:tinyjambu256v2 64.19 64.20 64.25 T:isapk128av20 87.50 87.57 87.85 romulust 109.39 109.46 109.53 T:elephant200v2 128.80 128.81 129.08 T:isapk128v20 239.50 239.63 246.81 T:isapxv20 5648.46 5649.39 5650.22 T:elephant176v2 6234.91 6259.26 6259.69 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.89 0.90 0.91 T:aes128gcmv1 1.18 1.18 1.18 aes256gcmv1 7.57 7.57 7.59 ascon128av12 11.03 11.04 11.06 ascon128v12 11.07 11.07 11.10 ascon80pqv12 12.73 12.75 12.76 T:xoodyakround3 14.25 14.27 14.29 ascon128abi32v12 19.62 19.66 19.69 T:schwaemm256128v2 21.14 21.27 21.41 ascon128bi32v12 21.84 22.08 22.76 T:schwaemm256256v2 25.67 25.70 25.73 T:schwaemm192192v2 25.82 25.84 25.87 T:grain128aeadv2 27.58 27.60 27.65 T:schwaemm128128v2 29.11 29.11 29.13 T:isapa128av20 30.59 30.62 30.66 romulusn 31.04 31.08 31.16 T:isapa128v20 41.87 41.87 41.93 T:giftcofb128v1 42.16 42.25 42.36 romulusm 45.04 45.16 45.32 romulust 49.74 49.76 49.80 T:tinyjambu128v2 49.90 49.93 49.97 T:isapk128av20 58.23 58.23 58.25 T:tinyjambu192v2 60.05 60.06 60.08 T:tinyjambu256v2 85.22 85.26 85.29 T:isapk128v20 109.45 109.53 109.57 T:elephant200v2 156.36 156.39 156.45 T:isapxv20 5648.25 5648.57 5649.69 T:elephant176v2 6235.05 6259.27 6259.88 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 6.04 6.12 6.20 T:aes128gcmv1 7.44 7.47 7.50 aes256gcmv1 12.05 12.37 12.64 ascon128av12 14.89 15.21 15.75 ascon128v12 15.03 15.45 15.84 ascon80pqv12 18.65 19.12 19.27 T:xoodyakround3 21.45 21.49 22.05 ascon128abi32v12 27.83 27.92 28.56 ascon128bi32v12 32.02 32.30 32.59 T:schwaemm256128v2 34.95 35.08 35.27 T:grain128aeadv2 35.06 35.29 35.54 T:schwaemm256256v2 35.58 35.91 36.14 T:schwaemm128128v2 36.77 36.90 37.18 romulusn 41.46 41.71 41.88 T:schwaemm192192v2 49.53 49.67 49.91 romulusm 51.18 51.49 51.75 T:giftcofb128v1 58.59 58.74 59.00 T:tinyjambu128v2 68.27 68.58 68.70 T:tinyjambu192v2 70.33 70.51 70.64 T:tinyjambu256v2 117.83 117.99 118.44 romulust 118.76 118.87 119.23 T:isapa128av20 156.95 157.34 157.43 T:elephant200v2 206.05 206.81 208.48 T:isapk128av20 416.18 418.23 419.24 T:isapa128v20 1357.59 1358.04 1358.70 T:isapk128v20 2331.11 2331.31 2331.89 T:isapxv20 7036.65 7038.13 7038.91 T:elephant176v2 8385.54 8386.86 8388.68 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 6.01 6.04 6.16 T:aes128gcmv1 7.13 7.16 7.20 aes256gcmv1 12.14 12.28 12.71 ascon128av12 15.02 15.18 15.33 ascon128v12 14.96 15.24 15.70 ascon80pqv12 18.43 19.33 19.46 T:xoodyakround3 21.41 21.51 21.82 ascon128abi32v12 28.05 28.16 28.50 ascon128bi32v12 31.61 32.21 32.38 T:schwaemm256128v2 35.12 35.16 35.26 T:grain128aeadv2 35.23 35.46 35.61 T:schwaemm128128v2 35.20 35.62 36.02 T:schwaemm256256v2 36.65 36.78 36.91 romulusn 42.14 42.67 42.96 T:schwaemm192192v2 50.87 50.94 51.25 romulusm 51.62 51.74 51.82 T:giftcofb128v1 58.72 58.89 59.20 T:tinyjambu128v2 68.57 68.68 68.76 T:tinyjambu192v2 70.55 70.70 71.31 T:tinyjambu256v2 117.86 118.40 120.35 romulust 118.64 119.18 119.63 T:isapa128av20 156.90 157.19 157.68 T:elephant200v2 206.66 207.33 208.27 T:isapk128av20 416.73 418.77 419.38 T:isapa128v20 1358.27 1358.82 1359.37 T:isapk128v20 2332.34 2333.60 2505.85 T:isapxv20 7036.83 7037.29 7037.74 T:elephant176v2 8384.34 8386.34 8387.30 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 5.98 6.02 6.04 T:aes128gcmv1 7.10 7.12 7.15 aes256gcmv1 11.98 12.11 12.21 ascon128av12 14.98 15.04 15.20 ascon128v12 14.95 15.06 15.23 ascon80pqv12 18.48 18.77 18.83 T:xoodyakround3 21.34 21.44 21.56 ascon128abi32v12 28.01 28.15 28.40 ascon128bi32v12 31.66 31.88 32.06 T:schwaemm256128v2 35.08 35.21 35.29 T:grain128aeadv2 35.17 35.29 36.04 T:schwaemm256256v2 35.14 35.50 35.63 T:schwaemm128128v2 36.72 36.83 36.91 romulusn 42.27 42.57 42.99 T:schwaemm192192v2 50.80 50.95 51.17 romulusm 51.55 51.62 51.81 T:giftcofb128v1 58.61 58.75 58.88 T:tinyjambu128v2 68.55 68.58 68.59 T:tinyjambu192v2 70.52 70.60 70.63 T:tinyjambu256v2 73.35 73.68 74.12 T:isapa128av20 73.50 73.79 73.95 romulust 130.05 130.45 131.19 T:isapk128av20 156.84 157.23 157.45 T:elephant200v2 217.34 218.41 219.20 T:isapa128v20 711.31 711.94 712.53 T:isapk128v20 1220.27 1220.75 1220.97 T:isapxv20 7036.52 7037.35 7037.99 T:elephant176v2 8385.41 8387.24 8389.10 T:elephant160v2