VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Haswell+AES (306c3); 2013 Intel Core i7-4765T; 4 x 2000MHz; prodesk, supercop-20251222

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.40 1.42 1.43 T:aes128gcmv1 2.12 2.13 2.15 aes256gcmv1 7.21 7.23 7.24 ascon128av12 10.63 10.64 10.67 ascon128v12 10.65 10.69 10.71 ascon80pqv12 14.31 14.35 14.56 ascon128abi32v12 17.25 17.30 17.37 T:xoodyakround3 19.15 19.19 19.23 T:schwaemm256128v2 21.39 21.41 21.82 ascon128bi32v12 23.69 23.70 23.73 T:schwaemm256256v2 25.27 25.34 25.38 T:schwaemm192192v2 25.77 25.80 25.83 T:grain128aeadv2 28.04 28.07 28.12 T:schwaemm128128v2 37.73 37.76 37.78 romulusn 39.91 40.29 40.81 T:isapa128v20 40.94 40.98 41.05 T:isapa128av20 41.59 41.64 41.68 T:giftcofb128v1 60.96 61.08 61.23 romulusm 61.21 61.25 61.28 T:tinyjambu128v2 73.20 73.36 73.59 T:isapk128av20 74.92 74.96 74.99 T:tinyjambu192v2 83.39 83.41 83.43 T:tinyjambu256v2 97.64 97.88 98.06 T:isapk128v20 126.55 126.67 127.04 romulust 159.79 159.96 160.11 T:elephant200v2 189.94 190.56 191.05 T:isapxv20 7189.41 7192.70 7195.06 T:elephant176v2 8732.73 8737.58 8740.01 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.74 1.76 1.77 T:aes128gcmv1 2.15 2.17 2.20 aes256gcmv1 7.30 7.32 7.34 ascon128av12 10.61 10.61 10.63 ascon128v12 10.62 10.65 10.70 ascon80pqv12 14.16 14.18 14.32 ascon128abi32v12 17.16 17.26 17.32 T:xoodyakround3 19.16 19.20 19.24 T:schwaemm256128v2 21.17 21.21 21.55 ascon128bi32v12 23.69 23.70 23.72 T:schwaemm256256v2 25.25 25.32 25.38 T:schwaemm192192v2 26.06 26.10 26.16 T:grain128aeadv2 28.03 28.08 28.12 T:schwaemm128128v2 37.62 37.77 38.18 romulusn 40.18 40.61 41.34 T:isapa128v20 40.71 40.95 41.04 T:isapa128av20 41.62 41.65 41.70 T:giftcofb128v1 60.98 61.25 61.36 romulusm 61.72 61.80 61.82 T:tinyjambu128v2 73.17 73.34 73.53 T:isapk128av20 75.03 75.10 75.16 T:tinyjambu192v2 83.38 83.39 83.40 T:tinyjambu256v2 97.67 97.89 98.38 T:isapk128v20 126.54 126.71 127.39 romulust 159.94 160.05 160.31 T:elephant200v2 190.18 190.64 190.89 T:isapxv20 7189.61 7192.30 7194.16 T:elephant176v2 8736.50 8737.86 8739.20 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.76 1.76 1.77 T:aes128gcmv1 2.16 2.19 2.20 aes256gcmv1 7.28 7.32 7.35 ascon128av12 10.60 10.63 10.65 ascon128v12 10.61 10.65 10.68 ascon80pqv12 14.15 14.17 14.21 ascon128abi32v12 17.24 17.29 17.33 T:xoodyakround3 19.16 19.19 19.23 T:schwaemm256128v2 19.66 19.73 20.12 T:isapa128v20 21.20 21.53 21.59 ascon128bi32v12 23.69 23.70 23.72 T:schwaemm256256v2 25.23 25.32 25.40 T:schwaemm192192v2 26.09 26.13 26.15 T:grain128aeadv2 28.00 28.04 28.10 T:isapa128av20 28.03 28.07 28.11 T:schwaemm128128v2 37.62 38.14 38.19 romulusn 41.64 41.67 41.70 T:giftcofb128v1 43.30 43.39 43.60 romulust 48.40 48.55 48.66 T:isapk128av20 60.85 61.01 61.23 T:isapk128v20 60.89 61.12 61.24 romulusm 61.60 61.80 61.84 T:tinyjambu128v2 75.03 75.08 75.18 T:tinyjambu192v2 83.37 83.39 83.40 T:tinyjambu256v2 113.26 113.33 113.42 T:isapxv20 159.87 159.94 160.24 T:elephant200v2 7189.42 7193.48 7194.50 T:elephant176v2 8735.59 8737.59 8739.41 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 1.02 1.04 1.06 T:aes128gcmv1 1.36 1.37 1.38 aes256gcmv1 7.16 7.18 7.18 ascon128av12 10.63 10.65 10.67 ascon80pqv12 10.63 10.65 10.67 ascon128v12 13.16 13.19 13.22 T:xoodyakround3 14.48 14.50 14.52 ascon128abi32v12 19.02 19.04 19.07 T:schwaemm256128v2 21.61 21.62 21.66 ascon128bi32v12 23.63 23.65 23.66 T:schwaemm256256v2 25.12 25.16 25.19 T:schwaemm192192v2 25.81 25.84 25.86 T:grain128aeadv2 27.85 27.86 27.89 T:schwaemm128128v2 30.08 30.36 30.46 T:isapa128v20 30.43 30.45 30.48 romulusn 34.46 34.50 34.54 T:isapa128av20 41.54 41.57 41.59 T:giftcofb128v1 42.10 42.21 42.33 romulusm 50.38 50.40 50.43 T:tinyjambu128v2 58.90 58.98 59.03 T:tinyjambu192v2 61.10 61.24 61.36 T:isapk128av20 62.59 62.61 62.62 T:tinyjambu256v2 79.13 79.27 79.39 T:isapk128v20 84.84 85.10 85.16 romulust 119.84 119.90 119.98 T:elephant200v2 151.19 151.51 151.66 T:isapxv20 5368.85 5369.44 5371.92 T:elephant176v2 6552.32 6554.19 6554.93 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 1.17 1.21 1.24 T:aes128gcmv1 1.38 1.40 1.42 aes256gcmv1 7.19 7.22 7.23 ascon128av12 10.60 10.63 10.66 ascon128v12 10.60 10.63 10.66 ascon80pqv12 13.15 13.16 13.19 T:xoodyakround3 14.28 14.31 14.33 ascon128abi32v12 19.02 19.05 19.08 T:schwaemm256128v2 21.50 21.52 21.54 ascon128bi32v12 23.64 23.65 23.67 T:schwaemm256256v2 25.12 25.17 25.22 T:schwaemm192192v2 26.00 26.03 26.05 T:grain128aeadv2 27.86 27.88 27.90 T:schwaemm128128v2 30.19 30.29 30.39 T:isapa128v20 30.62 30.64 30.67 romulusn 34.50 34.52 34.54 T:isapa128av20 41.56 41.58 41.60 T:giftcofb128v1 42.24 42.31 42.37 romulusm 50.47 50.61 50.69 T:tinyjambu128v2 58.98 59.06 59.11 T:tinyjambu192v2 60.96 61.09 61.26 T:isapk128av20 62.59 62.61 62.62 T:tinyjambu256v2 79.17 79.24 79.40 T:isapk128v20 84.86 84.99 85.41 romulust 119.85 120.00 120.08 T:elephant200v2 151.09 151.47 151.70 T:isapxv20 5368.47 5369.20 5370.91 T:elephant176v2 6552.30 6553.46 6554.71 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 1.18 1.21 1.23 T:aes128gcmv1 1.38 1.40 1.42 aes256gcmv1 7.18 7.19 7.22 ascon128av12 10.60 10.62 10.67 ascon80pqv12 10.61 10.63 10.65 ascon128v12 13.12 13.17 13.20 T:xoodyakround3 14.30 14.32 14.34 ascon128abi32v12 19.02 19.05 19.08 T:schwaemm256128v2 19.86 19.98 20.07 T:isapa128v20 21.48 21.51 21.66 ascon128bi32v12 23.64 23.65 23.66 T:schwaemm256256v2 25.15 25.17 25.21 T:schwaemm192192v2 26.01 26.02 26.04 T:grain128aeadv2 27.86 27.88 27.92 T:schwaemm128128v2 28.02 28.05 28.08 T:isapa128av20 30.51 30.66 30.76 romulusn 41.55 41.57 41.59 T:giftcofb128v1 42.13 42.24 42.29 romulusm 43.16 43.26 43.48 romulust 48.74 48.81 48.92 T:isapk128av20 50.57 50.65 50.68 T:tinyjambu128v2 59.00 59.09 59.12 T:tinyjambu192v2 60.84 60.94 61.08 T:isapk128v20 62.61 62.61 62.62 T:tinyjambu256v2 112.81 112.87 112.93 T:isapxv20 119.88 119.91 120.05 T:elephant200v2 5368.62 5369.44 5371.25 T:elephant176v2 6552.13 6553.67 6554.66 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.58 0.60 0.61 aes256gcmv1 0.65 0.68 0.70 T:aes128gcmv1 7.09 7.11 7.14 ascon128av12 9.03 9.05 9.07 T:xoodyakround3 10.60 10.62 10.64 ascon80pqv12 10.61 10.65 10.66 ascon128v12 14.38 14.41 14.44 ascon128abi32v12 18.83 18.87 18.91 T:schwaemm256128v2 19.97 20.02 20.10 T:isapa128v20 21.41 21.75 21.78 ascon128bi32v12 23.12 23.17 23.39 romulusn 23.41 23.45 23.49 romulusm 23.55 23.57 23.59 T:schwaemm256256v2 24.99 25.04 25.08 T:schwaemm192192v2 25.75 25.79 25.81 T:grain128aeadv2 27.63 27.67 27.73 T:schwaemm128128v2 27.99 28.04 28.09 T:isapa128av20 39.60 39.64 39.67 T:tinyjambu128v2 41.42 41.45 41.47 T:giftcofb128v1 41.83 41.84 41.85 T:tinyjambu256v2 42.92 43.01 43.11 T:tinyjambu192v2 43.06 43.09 43.14 romulust 48.92 49.01 49.17 T:isapk128av20 60.64 60.75 60.89 T:isapk128v20 79.97 80.09 80.20 T:elephant200v2 112.37 112.43 112.50 T:isapxv20 3550.16 3550.76 3552.78 T:elephant176v2 4372.01 4372.68 4373.17 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.61 0.62 0.64 aes256gcmv1 0.66 0.69 0.70 T:aes128gcmv1 7.06 7.07 7.09 ascon128av12 9.00 9.04 9.07 T:xoodyakround3 10.59 10.60 10.63 ascon80pqv12 10.58 10.61 10.64 ascon128v12 14.40 14.43 14.45 ascon128abi32v12 18.83 18.85 18.88 T:schwaemm256128v2 20.02 20.09 20.12 T:isapa128v20 21.39 21.71 21.76 ascon128bi32v12 23.14 23.38 23.42 romulusn 23.41 23.47 23.49 romulusm 23.54 23.57 23.58 T:schwaemm256256v2 24.94 24.99 25.05 T:schwaemm192192v2 25.77 25.83 25.85 T:grain128aeadv2 27.63 27.70 27.73 T:schwaemm128128v2 28.01 28.07 28.10 T:isapa128av20 39.59 39.62 39.66 T:tinyjambu128v2 41.41 41.46 41.52 T:giftcofb128v1 41.82 41.83 41.86 T:tinyjambu256v2 42.94 42.98 43.04 T:tinyjambu192v2 43.04 43.14 43.36 romulust 48.80 48.98 49.13 T:isapk128av20 60.54 60.78 60.95 T:isapk128v20 80.09 80.17 80.27 T:elephant200v2 112.34 112.42 112.51 T:isapxv20 3549.82 3550.51 3553.00 T:elephant176v2 4371.61 4372.47 4373.52 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.60 0.62 0.65 aes256gcmv1 0.62? 0.66? 0.70? T:aes128gcmv1 7.06 7.08 7.10 ascon128av12 9.00 9.03 9.07 T:xoodyakround3 10.57 10.59 10.61 ascon80pqv12 10.62 10.63 10.66 ascon128v12 14.41 14.42 14.44 ascon128abi32v12 18.81 18.86 18.88 T:schwaemm256128v2 20.04 20.10 20.12 T:isapa128v20 21.41 21.47 21.73 ascon128bi32v12 23.14 23.39 23.42 romulusn 23.42 23.45 23.48 romulusm 23.55 23.56 23.59 T:schwaemm256256v2 24.94 25.00 25.10 T:schwaemm192192v2 25.79 25.82 25.87 T:grain128aeadv2 27.64 27.68 27.71 T:schwaemm128128v2 27.99 28.03 28.09 T:isapa128av20 39.60 39.63 39.66 T:tinyjambu128v2 41.44 41.46 41.52 T:giftcofb128v1 41.80 41.83 41.84 T:tinyjambu256v2 42.89 42.96 43.15 T:tinyjambu192v2 43.06 43.13 43.33 romulust 48.93 49.03 49.21 T:isapk128av20 60.69 60.84 61.06 T:isapk128v20 80.03 80.14 80.22 T:elephant200v2 112.25 112.39 112.46 T:isapxv20 3550.15 3550.73 3552.63 T:elephant176v2 4372.39 4373.09 4376.07 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.18 1.19 1.20 T:aes128gcmv1 1.53 1.54 1.55 aes256gcmv1 7.34 7.35 7.36 ascon128av12 10.79 10.81 10.84 ascon80pqv12 10.81 10.82 10.83 ascon128v12 13.30 13.32 13.33 T:xoodyakround3 14.80 14.82 14.84 ascon128abi32v12 19.59 19.61 19.62 T:schwaemm256128v2 21.91 21.93 21.95 ascon128bi32v12 24.26 24.27 24.29 T:schwaemm256256v2 25.69 25.73 25.75 T:schwaemm192192v2 26.22 26.24 26.27 T:grain128aeadv2 28.22 28.25 28.27 T:schwaemm128128v2 30.72 30.74 30.82 romulusn 37.01 37.03 37.07 T:isapa128av20 41.89 41.91 41.92 T:giftcofb128v1 42.49 42.53 42.62 romulusm 44.27 44.35 44.49 T:isapa128v20 50.77 50.80 50.81 T:tinyjambu128v2 59.38 59.44 59.49 T:tinyjambu192v2 63.06 63.07 63.08 T:tinyjambu256v2 69.28 69.32 69.46 T:isapk128av20 86.16 86.19 86.45 romulust 122.34 122.42 122.51 T:elephant200v2 137.97 138.09 138.37 T:isapk128v20 248.12 248.14 248.54 T:isapxv20 5408.41 5410.11 5411.00 T:elephant176v2 6626.32 6627.56 6627.99 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.33 1.37 1.38 T:aes128gcmv1 1.58 1.59 1.60 aes256gcmv1 7.36 7.38 7.39 ascon128av12 10.76 10.77 10.82 ascon80pqv12 10.78 10.79 10.80 ascon128v12 13.23 13.29 13.31 T:xoodyakround3 14.62 14.62 14.64 ascon128abi32v12 19.59 19.61 19.63 T:schwaemm256128v2 21.64 21.80 21.82 ascon128bi32v12 24.26 24.27 24.29 T:schwaemm256256v2 25.72 25.73 25.76 T:schwaemm192192v2 26.42 26.44 26.46 T:grain128aeadv2 28.23 28.24 28.26 T:schwaemm128128v2 30.90 30.98 31.03 romulusn 36.98 37.06 37.08 T:isapa128av20 41.93 41.95 41.98 T:giftcofb128v1 42.58 42.71 42.79 romulusm 44.29 44.33 44.58 T:isapa128v20 50.94 51.03 51.11 T:tinyjambu128v2 59.42 59.53 59.57 T:tinyjambu192v2 63.05 63.06 63.07 T:tinyjambu256v2 69.33 69.35 69.44 T:isapk128av20 86.14 86.19 86.61 romulust 122.36 122.46 122.51 T:elephant200v2 137.92 138.02 138.20 T:isapk128v20 247.90 248.18 248.27 T:isapxv20 5409.77 5411.00 5411.98 T:elephant176v2 6625.85 6627.74 6628.17 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.35 1.36 1.38 T:aes128gcmv1 1.56 1.57 1.58 aes256gcmv1 7.36 7.37 7.39 ascon128av12 10.76 10.78 10.79 ascon80pqv12 10.77 10.79 10.80 ascon128v12 13.28 13.32 13.33 T:xoodyakround3 14.61 14.63 14.64 ascon128abi32v12 19.57 19.59 19.61 T:schwaemm256128v2 21.77 21.80 21.84 ascon128bi32v12 24.26 24.27 24.29 T:schwaemm256256v2 25.69 25.71 25.73 T:schwaemm192192v2 26.40 26.42 26.43 T:grain128aeadv2 27.05 27.06 27.09 T:isapa128v20 28.23 28.24 28.26 T:schwaemm128128v2 29.46 29.48 29.51 T:isapa128av20 30.77 30.91 30.94 romulusn 41.91 41.94 41.96 T:giftcofb128v1 42.48 42.61 42.68 romulusm 44.41 44.47 44.71 romulust 51.01 51.05 51.07 T:tinyjambu128v2 53.47 53.50 53.65 T:isapk128av20 59.44 59.50 59.58 T:tinyjambu192v2 63.06 63.07 63.08 T:tinyjambu256v2 91.01 91.11 91.28 T:isapk128v20 122.38 122.43 122.58 T:elephant200v2 162.30 162.33 162.39 T:isapxv20 5409.76 5410.72 5411.09 T:elephant176v2 6626.77 6627.58 6628.00 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 6.50 6.53 6.62 T:aes128gcmv1 7.62 7.66 7.69 aes256gcmv1 11.06 11.22 11.59 ascon128av12 14.28 14.34 14.44 ascon80pqv12 14.31 14.44 14.59 ascon128v12 19.25 19.44 19.81 T:xoodyakround3 21.78 21.94 22.22 ascon128abi32v12 28.66 28.75 29.00 ascon128bi32v12 31.66 31.72 31.97 T:schwaemm256128v2 35.03 35.12 35.22 T:grain128aeadv2 35.66 35.84 36.22 T:schwaemm128128v2 36.78 36.88 37.03 romulusn 38.38 38.47 38.56 T:schwaemm256256v2 40.88 41.44 41.66 T:schwaemm192192v2 49.19 49.31 49.50 romulusm 49.84 49.97 50.09 T:giftcofb128v1 59.47 59.78 60.09 T:tinyjambu128v2 69.47 69.78 69.91 T:tinyjambu192v2 73.28 73.34 73.38 T:tinyjambu256v2 94.03 94.47 95.16 T:isapa128av20 114.91 115.12 115.62 romulust 173.56 173.75 174.62 T:elephant200v2 240.09 241.41 242.53 T:isapk128av20 360.81 366.28 368.25 T:isapa128v20 1468.19 1469.72 1470.56 T:isapk128v20 2442.59 2443.16 2448.56 T:isapxv20 6731.66 6733.62 6736.06 T:elephant176v2 8870.78 8872.53 8875.44 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 6.62 6.69 6.78 T:aes128gcmv1 7.34 7.41 7.41 aes256gcmv1 11.28 11.31 11.53 ascon128av12 14.31 14.44 14.62 ascon80pqv12 14.31 14.47 14.72 ascon128v12 19.09 19.28 19.56 T:xoodyakround3 21.66 21.75 22.34 ascon128abi32v12 28.59 28.78 28.94 ascon128bi32v12 31.50 31.59 31.84 T:schwaemm256128v2 35.38 35.50 35.59 T:grain128aeadv2 35.78 35.94 36.31 T:schwaemm128128v2 36.62 36.72 36.78 romulusn 38.47 38.56 38.62 T:schwaemm256256v2 41.06 41.59 41.88 T:schwaemm192192v2 49.72 49.84 50.00 T:giftcofb128v1 50.66 50.78 51.00 romulusm 59.69 59.84 60.00 T:tinyjambu128v2 69.56 69.75 70.00 T:tinyjambu192v2 73.38 73.41 73.47 T:tinyjambu256v2 94.19 94.47 94.62 T:isapa128av20 114.97 115.50 116.34 romulust 173.28 173.78 174.25 T:elephant200v2 241.09 242.28 243.06 T:isapk128av20 366.25 367.09 371.78 T:isapa128v20 1468.12 1470.38 1471.69 T:isapk128v20 2440.97 2446.00 2447.88 T:isapxv20 6731.59 6732.28 6734.41 T:elephant176v2 8869.34 8871.91 8873.09 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 6.62 6.72 6.75 T:aes128gcmv1 7.31 7.38 7.38 aes256gcmv1 11.28 11.31 11.62 ascon128av12 14.28 14.41 14.53 ascon128v12 14.31 14.41 14.53 ascon80pqv12 19.19 19.28 19.59 T:xoodyakround3 21.56 21.72 22.03 ascon128abi32v12 28.47 28.72 28.84 ascon128bi32v12 31.41 31.53 31.72 T:schwaemm256128v2 35.34 35.38 35.44 T:grain128aeadv2 35.66 35.84 36.16 T:schwaemm128128v2 36.62 36.66 36.75 romulusn 38.44 38.50 38.62 T:schwaemm256256v2 40.97 41.38 41.66 T:schwaemm192192v2 49.84 49.94 50.03 T:giftcofb128v1 50.72 50.75 50.91 romulusm 59.53 59.72 59.97 T:tinyjambu128v2 61.75 61.88 62.09 T:isapa128av20 69.53 69.59 69.84 T:tinyjambu192v2 72.47 72.91 73.12 romulust 73.34 73.38 73.41 T:tinyjambu256v2 149.28 149.78 150.91 T:isapk128av20 173.19 173.44 174.06 T:elephant200v2 188.31 190.47 193.69 T:isapa128v20 767.47 768.94 770.62 T:isapk128v20 1278.00 1278.53 1280.16 T:isapxv20 6730.75 6732.41 6735.19 T:elephant176v2 8870.34 8872.69 8874.72 T:elephant160v2