VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Haswell+AES (306c3); 2013 Intel Core i7-4765T; 4 x 2000MHz; prodesk, supercop-20251222

[Page version: 20260112 15:28:56]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.40 1.42 1.43 T:aes128gcmv1 2.12 2.13 2.15 aes256gcmv1 7.21 7.23 7.24 ascon128av12 10.63 10.64 10.67 ascon128v12 10.65 10.69 10.71 ascon80pqv12 14.31 14.35 14.56 ascon128abi32v12 17.25 17.30 17.37 T:xoodyakround3 19.15 19.19 19.23 T:schwaemm256128v2 21.39 21.41 21.82 ascon128bi32v12 23.69 23.70 23.73 T:schwaemm256256v2 25.27 25.34 25.38 T:schwaemm192192v2 25.77 25.80 25.83 T:grain128aeadv2 28.04 28.07 28.12 T:schwaemm128128v2 37.73 37.76 37.78 romulusn 39.91 40.29 40.81 T:isapa128v20 40.94 40.98 41.05 T:isapa128av20 41.59 41.64 41.68 T:giftcofb128v1 60.96 61.08 61.23 romulusm 61.21 61.25 61.28 T:tinyjambu128v2 73.20 73.36 73.59 T:isapk128av20 74.92 74.96 74.99 T:tinyjambu192v2 83.39 83.41 83.43 T:tinyjambu256v2 97.64 97.88 98.06 T:isapk128v20 126.55 126.67 127.04 romulust 159.79 159.96 160.11 T:elephant200v2 189.94 190.56 191.05 T:isapxv20 7189.41 7192.70 7195.06 T:elephant176v2 8732.73 8737.58 8740.01 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.74 1.76 1.77 T:aes128gcmv1 2.15 2.17 2.20 aes256gcmv1 7.30 7.32 7.34 ascon128av12 10.61 10.61 10.63 ascon128v12 10.62 10.65 10.70 ascon80pqv12 14.16 14.18 14.32 ascon128abi32v12 17.16 17.26 17.32 T:xoodyakround3 19.16 19.20 19.24 T:schwaemm256128v2 21.17 21.21 21.55 ascon128bi32v12 23.69 23.70 23.72 T:schwaemm256256v2 25.25 25.32 25.38 T:schwaemm192192v2 26.06 26.10 26.16 T:grain128aeadv2 28.03 28.08 28.12 T:schwaemm128128v2 37.62 37.77 38.18 romulusn 40.18 40.61 41.34 T:isapa128v20 40.71 40.95 41.04 T:isapa128av20 41.62 41.65 41.70 T:giftcofb128v1 60.98 61.25 61.36 romulusm 61.72 61.80 61.82 T:tinyjambu128v2 73.17 73.34 73.53 T:isapk128av20 75.03 75.10 75.16 T:tinyjambu192v2 83.38 83.39 83.40 T:tinyjambu256v2 97.67 97.89 98.38 T:isapk128v20 126.54 126.71 127.39 romulust 159.94 160.05 160.31 T:elephant200v2 190.18 190.64 190.89 T:isapxv20 7189.61 7192.30 7194.16 T:elephant176v2 8736.50 8737.86 8739.20 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.76 1.76 1.77 T:aes128gcmv1 2.16 2.19 2.20 aes256gcmv1 7.28 7.32 7.35 ascon128av12 10.60 10.63 10.65 ascon128v12 10.61 10.65 10.68 ascon80pqv12 14.15 14.17 14.21 ascon128abi32v12 17.24 17.29 17.33 T:xoodyakround3 19.16 19.19 19.23 T:schwaemm256128v2 19.66 19.73 20.12 T:isapa128v20 21.20 21.53 21.59 ascon128bi32v12 23.69 23.70 23.72 T:schwaemm256256v2 25.23 25.32 25.40 T:schwaemm192192v2 26.09 26.13 26.15 T:grain128aeadv2 28.00 28.04 28.10 T:isapa128av20 28.03 28.07 28.11 T:schwaemm128128v2 37.62 38.14 38.19 romulusn 41.64 41.67 41.70 T:giftcofb128v1 43.30 43.39 43.60 romulust 48.40 48.55 48.66 T:isapk128av20 60.85 61.01 61.23 T:isapk128v20 60.89 61.12 61.24 romulusm 61.60 61.80 61.84 T:tinyjambu128v2 75.03 75.08 75.18 T:tinyjambu192v2 83.37 83.39 83.40 T:tinyjambu256v2 113.26 113.33 113.42 T:isapxv20 159.87 159.94 160.24 T:elephant200v2 7189.42 7193.48 7194.50 T:elephant176v2 8735.59 8737.59 8739.41 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 1.02 1.04 1.06 T:aes128gcmv1 1.36 1.37 1.38 aes256gcmv1 7.16 7.18 7.18 ascon128av12 10.63 10.65 10.67 ascon80pqv12 10.63 10.65 10.67 ascon128v12 13.16 13.19 13.22 T:xoodyakround3 14.48 14.50 14.52 ascon128abi32v12 19.02 19.04 19.07 T:schwaemm256128v2 21.61 21.62 21.66 ascon128bi32v12 23.63 23.65 23.66 T:schwaemm256256v2 25.12 25.16 25.19 T:schwaemm192192v2 25.81 25.84 25.86 T:grain128aeadv2 27.85 27.86 27.89 T:schwaemm128128v2 30.08 30.36 30.46 T:isapa128v20 30.43 30.45 30.48 romulusn 34.46 34.50 34.54 T:isapa128av20 41.54 41.57 41.59 T:giftcofb128v1 42.10 42.21 42.33 romulusm 50.38 50.40 50.43 T:tinyjambu128v2 58.90 58.98 59.03 T:tinyjambu192v2 61.10 61.24 61.36 T:isapk128av20 62.59 62.61 62.62 T:tinyjambu256v2 79.13 79.27 79.39 T:isapk128v20 84.84 85.10 85.16 romulust 119.84 119.90 119.98 T:elephant200v2 151.19 151.51 151.66 T:isapxv20 5368.85 5369.44 5371.92 T:elephant176v2 6552.32 6554.19 6554.93 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 1.17 1.21 1.24 T:aes128gcmv1 1.38 1.40 1.42 aes256gcmv1 7.19 7.22 7.23 ascon128av12 10.60 10.63 10.66 ascon128v12 10.60 10.63 10.66 ascon80pqv12 13.15 13.16 13.19 T:xoodyakround3 14.28 14.31 14.33 ascon128abi32v12 19.02 19.05 19.08 T:schwaemm256128v2 21.50 21.52 21.54 ascon128bi32v12 23.64 23.65 23.67 T:schwaemm256256v2 25.12 25.17 25.22 T:schwaemm192192v2 26.00 26.03 26.05 T:grain128aeadv2 27.86 27.88 27.90 T:schwaemm128128v2 30.19 30.29 30.39 T:isapa128v20 30.62 30.64 30.67 romulusn 34.50 34.52 34.54 T:isapa128av20 41.56 41.58 41.60 T:giftcofb128v1 42.24 42.31 42.37 romulusm 50.47 50.61 50.69 T:tinyjambu128v2 58.98 59.06 59.11 T:tinyjambu192v2 60.96 61.09 61.26 T:isapk128av20 62.59 62.61 62.62 T:tinyjambu256v2 79.17 79.24 79.40 T:isapk128v20 84.86 84.99 85.41 romulust 119.85 120.00 120.08 T:elephant200v2 151.09 151.47 151.70 T:isapxv20 5368.47 5369.20 5370.91 T:elephant176v2 6552.30 6553.46 6554.71 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 1.18 1.21 1.23 T:aes128gcmv1 1.38 1.40 1.42 aes256gcmv1 7.18 7.19 7.22 ascon128av12 10.60 10.62 10.67 ascon80pqv12 10.61 10.63 10.65 ascon128v12 13.12 13.17 13.20 T:xoodyakround3 14.30 14.32 14.34 ascon128abi32v12 19.02 19.05 19.08 T:schwaemm256128v2 19.86 19.98 20.07 T:isapa128v20 21.48 21.51 21.66 ascon128bi32v12 23.64 23.65 23.66 T:schwaemm256256v2 25.15 25.17 25.21 T:schwaemm192192v2 26.01 26.02 26.04 T:grain128aeadv2 27.86 27.88 27.92 T:schwaemm128128v2 28.02 28.05 28.08 T:isapa128av20 30.51 30.66 30.76 romulusn 41.55 41.57 41.59 T:giftcofb128v1 42.13 42.24 42.29 romulusm 43.16 43.26 43.48 romulust 48.74 48.81 48.92 T:isapk128av20 50.57 50.65 50.68 T:tinyjambu128v2 59.00 59.09 59.12 T:tinyjambu192v2 60.84 60.94 61.08 T:isapk128v20 62.61 62.61 62.62 T:tinyjambu256v2 112.81 112.87 112.93 T:isapxv20 119.88 119.91 120.05 T:elephant200v2 5368.62 5369.44 5371.25 T:elephant176v2 6552.13 6553.67 6554.66 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.58 0.60 0.61 aes256gcmv1 0.65 0.68 0.70 T:aes128gcmv1 7.09 7.11 7.14 ascon128av12 9.03 9.05 9.07 T:xoodyakround3 10.60 10.62 10.64 ascon80pqv12 10.61 10.65 10.66 ascon128v12 14.38 14.41 14.44 ascon128abi32v12 18.83 18.87 18.91 T:schwaemm256128v2 19.97 20.02 20.10 T:isapa128v20 21.41 21.75 21.78 ascon128bi32v12 23.12 23.17 23.39 romulusn 23.41 23.45 23.49 romulusm 23.55 23.57 23.59 T:schwaemm256256v2 24.99 25.04 25.08 T:schwaemm192192v2 25.75 25.79 25.81 T:grain128aeadv2 27.63 27.67 27.73 T:schwaemm128128v2 27.99 28.04 28.09 T:isapa128av20 39.60 39.64 39.67 T:tinyjambu128v2 41.42 41.45 41.47 T:giftcofb128v1 41.83 41.84 41.85 T:tinyjambu256v2 42.92 43.01 43.11 T:tinyjambu192v2 43.06 43.09 43.14 romulust 48.92 49.01 49.17 T:isapk128av20 60.64 60.75 60.89 T:isapk128v20 79.97 80.09 80.20 T:elephant200v2 112.37 112.43 112.50 T:isapxv20 3550.16 3550.76 3552.78 T:elephant176v2 4372.01 4372.68 4373.17 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.61 0.62 0.64 aes256gcmv1 0.66 0.69 0.70 T:aes128gcmv1 7.06 7.07 7.09 ascon128av12 9.00 9.04 9.07 T:xoodyakround3 10.59 10.60 10.63 ascon80pqv12 10.58 10.61 10.64 ascon128v12 14.40 14.43 14.45 ascon128abi32v12 18.83 18.85 18.88 T:schwaemm256128v2 20.02 20.09 20.12 T:isapa128v20 21.39 21.71 21.76 ascon128bi32v12 23.14 23.38 23.42 romulusn 23.41 23.47 23.49 romulusm 23.54 23.57 23.58 T:schwaemm256256v2 24.94 24.99 25.05 T:schwaemm192192v2 25.77 25.83 25.85 T:grain128aeadv2 27.63 27.70 27.73 T:schwaemm128128v2 28.01 28.07 28.10 T:isapa128av20 39.59 39.62 39.66 T:tinyjambu128v2 41.41 41.46 41.52 T:giftcofb128v1 41.82 41.83 41.86 T:tinyjambu256v2 42.94 42.98 43.04 T:tinyjambu192v2 43.04 43.14 43.36 romulust 48.80 48.98 49.13 T:isapk128av20 60.54 60.78 60.95 T:isapk128v20 80.09 80.17 80.27 T:elephant200v2 112.34 112.42 112.51 T:isapxv20 3549.82 3550.51 3553.00 T:elephant176v2 4371.61 4372.47 4373.52 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.60 0.62 0.65 aes256gcmv1 0.62? 0.66? 0.70? T:aes128gcmv1 7.06 7.08 7.10 ascon128av12 9.00 9.03 9.07 T:xoodyakround3 10.57 10.59 10.61 ascon80pqv12 10.62 10.63 10.66 ascon128v12 14.41 14.42 14.44 ascon128abi32v12 18.81 18.86 18.88 T:schwaemm256128v2 20.04 20.10 20.12 T:isapa128v20 21.41 21.47 21.73 ascon128bi32v12 23.14 23.39 23.42 romulusn 23.42 23.45 23.48 romulusm 23.55 23.56 23.59 T:schwaemm256256v2 24.94 25.00 25.10 T:schwaemm192192v2 25.79 25.82 25.87 T:grain128aeadv2 27.64 27.68 27.71 T:schwaemm128128v2 27.99 28.03 28.09 T:isapa128av20 39.60 39.63 39.66 T:tinyjambu128v2 41.44 41.46 41.52 T:giftcofb128v1 41.80 41.83 41.84 T:tinyjambu256v2 42.89 42.96 43.15 T:tinyjambu192v2 43.06 43.13 43.33 romulust 48.93 49.03 49.21 T:isapk128av20 60.69 60.84 61.06 T:isapk128v20 80.03 80.14 80.22 T:elephant200v2 112.25 112.39 112.46 T:isapxv20 3550.15 3550.73 3552.63 T:elephant176v2 4372.39 4373.09 4376.07 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.18 1.19 1.20 T:aes128gcmv1 1.53 1.54 1.55 aes256gcmv1 7.34 7.35 7.36 ascon128av12 10.79 10.81 10.84 ascon80pqv12 10.81 10.82 10.83 ascon128v12 13.30 13.32 13.33 T:xoodyakround3 14.80 14.82 14.84 ascon128abi32v12 19.59 19.61 19.62 T:schwaemm256128v2 21.91 21.93 21.95 ascon128bi32v12 24.26 24.27 24.29 T:schwaemm256256v2 25.69 25.73 25.75 T:schwaemm192192v2 26.22 26.24 26.27 T:grain128aeadv2 28.22 28.25 28.27 T:schwaemm128128v2 30.72 30.74 30.82 romulusn 37.01 37.03 37.07 T:isapa128av20 41.89 41.91 41.92 T:giftcofb128v1 42.49 42.53 42.62 romulusm 44.27 44.35 44.49 T:isapa128v20 50.77 50.80 50.81 T:tinyjambu128v2 59.38 59.44 59.49 T:tinyjambu192v2 63.06 63.07 63.08 T:tinyjambu256v2 69.28 69.32 69.46 T:isapk128av20 86.16 86.19 86.45 romulust 122.34 122.42 122.51 T:elephant200v2 137.97 138.09 138.37 T:isapk128v20 248.12 248.14 248.54 T:isapxv20 5408.41 5410.11 5411.00 T:elephant176v2 6626.32 6627.56 6627.99 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.33 1.37 1.38 T:aes128gcmv1 1.58 1.59 1.60 aes256gcmv1 7.36 7.38 7.39 ascon128av12 10.76 10.77 10.82 ascon80pqv12 10.78 10.79 10.80 ascon128v12 13.23 13.29 13.31 T:xoodyakround3 14.62 14.62 14.64 ascon128abi32v12 19.59 19.61 19.63 T:schwaemm256128v2 21.64 21.80 21.82 ascon128bi32v12 24.26 24.27 24.29 T:schwaemm256256v2 25.72 25.73 25.76 T:schwaemm192192v2 26.42 26.44 26.46 T:grain128aeadv2 28.23 28.24 28.26 T:schwaemm128128v2 30.90 30.98 31.03 romulusn 36.98 37.06 37.08 T:isapa128av20 41.93 41.95 41.98 T:giftcofb128v1 42.58 42.71 42.79 romulusm 44.29 44.33 44.58 T:isapa128v20 50.94 51.03 51.11 T:tinyjambu128v2 59.42 59.53 59.57 T:tinyjambu192v2 63.05 63.06 63.07 T:tinyjambu256v2 69.33 69.35 69.44 T:isapk128av20 86.14 86.19 86.61 romulust 122.36 122.46 122.51 T:elephant200v2 137.92 138.02 138.20 T:isapk128v20 247.90 248.18 248.27 T:isapxv20 5409.77 5411.00 5411.98 T:elephant176v2 6625.85 6627.74 6628.17 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.35 1.36 1.38 T:aes128gcmv1 1.56 1.57 1.58 aes256gcmv1 7.36 7.37 7.39 ascon128av12 10.76 10.78 10.79 ascon80pqv12 10.77 10.79 10.80 ascon128v12 13.28 13.32 13.33 T:xoodyakround3 14.61 14.63 14.64 ascon128abi32v12 19.57 19.59 19.61 T:schwaemm256128v2 21.77 21.80 21.84 ascon128bi32v12 24.26 24.27 24.29 T:schwaemm256256v2 25.69 25.71 25.73 T:schwaemm192192v2 26.40 26.42 26.43 T:grain128aeadv2 27.05 27.06 27.09 T:isapa128v20 28.23 28.24 28.26 T:schwaemm128128v2 29.46 29.48 29.51 T:isapa128av20 30.77 30.91 30.94 romulusn 41.91 41.94 41.96 T:giftcofb128v1 42.48 42.61 42.68 romulusm 44.41 44.47 44.71 romulust 51.01 51.05 51.07 T:tinyjambu128v2 53.47 53.50 53.65 T:isapk128av20 59.44 59.50 59.58 T:tinyjambu192v2 63.06 63.07 63.08 T:tinyjambu256v2 91.01 91.11 91.28 T:isapk128v20 122.38 122.43 122.58 T:elephant200v2 162.30 162.33 162.39 T:isapxv20 5409.76 5410.72 5411.09 T:elephant176v2 6626.77 6627.58 6628.00 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 6.50 6.53 6.62 T:aes128gcmv1 7.62 7.66 7.69 aes256gcmv1 11.06 11.22 11.59 ascon128av12 14.28 14.34 14.44 ascon80pqv12 14.31 14.44 14.59 ascon128v12 19.25 19.44 19.81 T:xoodyakround3 21.78 21.94 22.22 ascon128abi32v12 28.66 28.75 29.00 ascon128bi32v12 31.66 31.72 31.97 T:schwaemm256128v2 35.03 35.12 35.22 T:grain128aeadv2 35.66 35.84 36.22 T:schwaemm128128v2 36.78 36.88 37.03 romulusn 38.38 38.47 38.56 T:schwaemm256256v2 40.88 41.44 41.66 T:schwaemm192192v2 49.19 49.31 49.50 romulusm 49.84 49.97 50.09 T:giftcofb128v1 59.47 59.78 60.09 T:tinyjambu128v2 69.47 69.78 69.91 T:tinyjambu192v2 73.28 73.34 73.38 T:tinyjambu256v2 94.03 94.47 95.16 T:isapa128av20 114.91 115.12 115.62 romulust 173.56 173.75 174.62 T:elephant200v2 240.09 241.41 242.53 T:isapk128av20 360.81 366.28 368.25 T:isapa128v20 1468.19 1469.72 1470.56 T:isapk128v20 2442.59 2443.16 2448.56 T:isapxv20 6731.66 6733.62 6736.06 T:elephant176v2 8870.78 8872.53 8875.44 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 6.62 6.69 6.78 T:aes128gcmv1 7.34 7.41 7.41 aes256gcmv1 11.28 11.31 11.53 ascon128av12 14.31 14.44 14.62 ascon80pqv12 14.31 14.47 14.72 ascon128v12 19.09 19.28 19.56 T:xoodyakround3 21.66 21.75 22.34 ascon128abi32v12 28.59 28.78 28.94 ascon128bi32v12 31.50 31.59 31.84 T:schwaemm256128v2 35.38 35.50 35.59 T:grain128aeadv2 35.78 35.94 36.31 T:schwaemm128128v2 36.62 36.72 36.78 romulusn 38.47 38.56 38.62 T:schwaemm256256v2 41.06 41.59 41.88 T:schwaemm192192v2 49.72 49.84 50.00 T:giftcofb128v1 50.66 50.78 51.00 romulusm 59.69 59.84 60.00 T:tinyjambu128v2 69.56 69.75 70.00 T:tinyjambu192v2 73.38 73.41 73.47 T:tinyjambu256v2 94.19 94.47 94.62 T:isapa128av20 114.97 115.50 116.34 romulust 173.28 173.78 174.25 T:elephant200v2 241.09 242.28 243.06 T:isapk128av20 366.25 367.09 371.78 T:isapa128v20 1468.12 1470.38 1471.69 T:isapk128v20 2440.97 2446.00 2447.88 T:isapxv20 6731.59 6732.28 6734.41 T:elephant176v2 8869.34 8871.91 8873.09 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 6.62 6.72 6.75 T:aes128gcmv1 7.31 7.38 7.38 aes256gcmv1 11.28 11.31 11.62 ascon128av12 14.28 14.41 14.53 ascon128v12 14.31 14.41 14.53 ascon80pqv12 19.19 19.28 19.59 T:xoodyakround3 21.56 21.72 22.03 ascon128abi32v12 28.47 28.72 28.84 ascon128bi32v12 31.41 31.53 31.72 T:schwaemm256128v2 35.34 35.38 35.44 T:grain128aeadv2 35.66 35.84 36.16 T:schwaemm128128v2 36.62 36.66 36.75 romulusn 38.44 38.50 38.62 T:schwaemm256256v2 40.97 41.38 41.66 T:schwaemm192192v2 49.84 49.94 50.03 T:giftcofb128v1 50.72 50.75 50.91 romulusm 59.53 59.72 59.97 T:tinyjambu128v2 61.75 61.88 62.09 T:isapa128av20 69.53 69.59 69.84 T:tinyjambu192v2 72.47 72.91 73.12 romulust 73.34 73.38 73.41 T:tinyjambu256v2 149.28 149.78 150.91 T:isapk128av20 173.19 173.44 174.06 T:elephant200v2 188.31 190.47 193.69 T:isapa128v20 767.47 768.94 770.62 T:isapk128v20 1278.00 1278.53 1280.16 T:isapxv20 6730.75 6732.41 6735.19 T:elephant176v2 8870.34 8872.69 8874.72 T:elephant160v2