VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Haswell+AES (306c3); 2013 Intel Core i7-4765T; 4 x 2000MHz; prodesk, supercop-20260330

[Page version: 20260503 04:13:14]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.42 1.42 1.43 T:aes128gcmv1 1.67 1.68 1.68 aes256gcmv1 7.30 7.32 7.34 ascon128av12 10.62 10.68 10.72 ascon80pqv12 10.61 10.71 10.73 ascon128v12 14.39 14.54 14.56 ascon128abi32v12 16.45 16.47 16.50 T:xoodyakround3 19.09 19.15 19.19 T:schwaemm256128v2 21.38 21.67 21.83 ascon128bi32v12 25.05 25.08 25.10 T:grain128aeadv2 25.19 25.24 25.32 T:schwaemm192192v2 24.93 25.39 25.44 T:schwaemm256256v2 28.13 28.17 28.19 T:schwaemm128128v2 33.69 33.74 33.78 T:giftcofb128v1 37.46 37.80 37.94 romulusn 40.97 41.01 41.05 T:isapa128av20 42.39 42.47 42.56 T:isapa128v20 61.13 61.17 61.21 romulusm 69.26 69.27 69.28 T:tinyjambu128v2 70.97 71.21 71.53 T:isapk128av20 83.48 83.49 83.52 T:tinyjambu192v2 92.76 92.76 92.76 T:tinyjambu256v2 94.09 94.39 94.65 T:isapk128v20 126.58 126.68 126.77 romulust 159.25 166.63 175.98 T:isapxv20 169.82 169.86 169.93 T:elephant200v2 6956.40 6957.80 6958.88 T:elephant176v2 8220.42 8223.54 8233.98 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.75 1.76 1.77 T:aes128gcmv1 2.39 2.42 2.49 aes256gcmv1 7.28 7.30 7.33 ascon128av12 10.64 10.68 10.70 ascon128v12 10.68 10.70 10.73 ascon80pqv12 14.15 14.19 14.23 ascon128abi32v12 16.29 16.32 16.36 T:xoodyakround3 19.12 19.16 19.20 T:schwaemm256128v2 21.38 21.41 21.45 ascon128bi32v12 24.82 24.85 24.88 T:schwaemm256256v2 25.18 25.22 25.30 T:schwaemm192192v2 26.16 26.18 26.21 T:grain128aeadv2 28.14 28.19 28.23 T:schwaemm128128v2 33.56 33.62 33.67 T:giftcofb128v1 37.78 37.81 37.84 romulusn 40.96 41.02 41.08 T:isapa128av20 42.43 42.53 42.62 T:isapa128v20 61.41 61.46 61.49 romulusm 69.03 69.04 69.06 T:tinyjambu128v2 70.88 71.10 71.31 T:isapk128av20 83.56 83.57 83.57 T:tinyjambu192v2 92.75 92.75 92.75 T:tinyjambu256v2 94.05 94.37 94.66 T:isapk128v20 126.55 126.67 126.76 romulust 164.26 167.65 173.20 T:isapxv20 169.85 169.88 169.93 T:elephant200v2 6954.35 6956.41 6957.88 T:elephant176v2 8219.80 8223.64 8233.52 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.75 1.76 1.77 T:aes128gcmv1 2.39 2.41 2.49 aes256gcmv1 7.27 7.30 7.32 ascon128av12 10.65 10.67 10.70 ascon128v12 10.68 10.70 10.73 ascon80pqv12 14.16 14.20 14.34 ascon128abi32v12 16.33 16.37 16.41 T:xoodyakround3 19.13 19.15 19.19 T:schwaemm256128v2 21.06 21.14 21.22 T:isapa128v20 21.39 21.41 21.45 ascon128bi32v12 24.81 24.83 24.86 T:schwaemm256256v2 25.21 25.25 25.32 T:schwaemm192192v2 26.16 26.18 26.20 T:grain128aeadv2 28.01 28.04 28.09 T:isapa128av20 28.16 28.20 28.23 T:schwaemm128128v2 33.55 33.60 33.66 T:giftcofb128v1 37.79 37.81 37.84 romulusn 43.29 43.32 43.39 romulust 47.09 47.26 47.40 T:isapk128av20 58.93 59.11 59.41 T:isapk128v20 61.42 61.46 61.49 romulusm 69.03 69.04 69.05 T:tinyjambu128v2 83.56 83.57 83.57 T:tinyjambu192v2 92.77 92.77 92.77 T:tinyjambu256v2 97.93 98.96 102.76 T:isapxv20 169.83 169.88 169.92 T:elephant200v2 6955.96 6957.50 6958.73 T:elephant176v2 8220.18 8223.25 8233.77 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 1.04 1.05 1.06 T:aes128gcmv1 1.16 1.17 1.18 aes256gcmv1 7.27 7.29 7.31 ascon128av12 10.61 10.63 10.66 ascon80pqv12 10.64 10.67 10.70 ascon128v12 12.46 12.48 12.52 T:xoodyakround3 14.49 14.51 14.52 ascon128abi32v12 18.97 19.00 19.04 T:schwaemm256128v2 21.57 21.60 21.66 ascon128bi32v12 24.80 25.03 25.06 T:schwaemm256256v2 25.07 25.09 25.13 T:schwaemm192192v2 25.17 25.19 25.21 T:grain128aeadv2 27.99 28.01 28.04 T:schwaemm128128v2 30.30 30.43 30.54 romulusn 31.87 31.93 31.98 T:isapa128v20 33.91 33.97 34.25 T:giftcofb128v1 34.50 34.53 34.56 T:isapa128av20 42.16 42.20 42.29 romulusm 56.89 56.89 56.90 T:tinyjambu128v2 59.01 59.14 59.31 T:isapk128av20 63.38 63.39 63.40 T:tinyjambu192v2 68.01 68.01 68.02 T:tinyjambu256v2 76.51 76.68 76.91 T:isapk128v20 84.84 84.89 84.94 romulust 126.82 126.85 126.88 T:elephant200v2 127.95 131.62 137.73 T:isapxv20 5193.28 5194.36 5195.18 T:elephant176v2 6162.24 6164.27 6172.66 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 1.21 1.23 1.24 T:aes128gcmv1 1.54 1.55 1.59 aes256gcmv1 7.25 7.26 7.28 ascon128av12 10.61 10.63 10.64 ascon128v12 10.61 10.66 10.70 ascon80pqv12 12.41 12.44 12.46 T:xoodyakround3 14.29 14.31 14.32 ascon128abi32v12 18.99 19.01 19.04 T:schwaemm256128v2 21.44 21.53 21.61 ascon128bi32v12 24.76 24.78 24.80 T:schwaemm256256v2 25.05 25.08 25.12 T:schwaemm192192v2 25.71 25.73 25.75 T:grain128aeadv2 28.00 28.02 28.06 T:schwaemm128128v2 30.49 30.52 30.64 romulusn 31.84 31.90 31.94 T:isapa128v20 33.91 33.95 34.14 T:giftcofb128v1 34.51 34.54 34.57 T:isapa128av20 42.08 42.20 42.34 romulusm 56.78 56.78 56.79 T:tinyjambu128v2 59.03 59.14 59.27 T:isapk128av20 63.42 63.43 63.44 T:tinyjambu192v2 68.22 68.22 68.23 T:tinyjambu256v2 76.54 76.70 76.91 T:isapk128v20 84.84 84.88 84.93 romulust 126.84 126.86 126.89 T:elephant200v2 131.48 132.16 136.42 T:isapxv20 5193.21 5194.66 5195.29 T:elephant176v2 6162.25 6164.42 6172.46 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 1.21 1.23 1.24 T:aes128gcmv1 1.54 1.55 1.59 aes256gcmv1 7.24 7.27 7.30 ascon128av12 10.61 10.63 10.65 ascon128v12 10.61 10.64 10.68 ascon80pqv12 12.43 12.45 12.47 T:xoodyakround3 14.30 14.31 14.33 ascon128abi32v12 18.99 19.01 19.04 T:schwaemm256128v2 21.22 21.25 21.30 T:isapa128v20 21.45 21.57 21.62 ascon128bi32v12 24.76 24.77 24.79 T:schwaemm256256v2 25.06 25.08 25.12 T:schwaemm192192v2 25.71 25.72 25.74 T:grain128aeadv2 28.01 28.03 28.05 T:schwaemm128128v2 28.01 28.04 28.08 T:isapa128av20 30.50 30.60 30.64 romulusn 33.83 33.87 33.92 T:giftcofb128v1 42.13 42.27 42.34 romulusm 43.20 43.24 43.28 romulust 47.12 47.23 47.34 T:isapk128av20 56.78 56.79 56.79 T:tinyjambu128v2 58.90 59.06 59.23 T:isapk128v20 63.42 63.43 63.43 T:tinyjambu192v2 68.23 68.24 68.24 T:tinyjambu256v2 97.55 99.57 101.23 T:isapxv20 126.83 126.86 126.90 T:elephant200v2 5193.43 5194.86 5195.40 T:elephant176v2 6163.39 6165.60 6171.89 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.65 0.67 0.69 aes256gcmv1 0.66 0.69 0.71 T:aes128gcmv1 7.22 7.24 7.27 ascon128av12 8.45 8.49 8.51 T:xoodyakround3 10.58 10.60 10.63 ascon80pqv12 10.59 10.63 10.65 ascon128v12 14.38 14.41 14.44 ascon128abi32v12 18.83 18.85 18.90 T:schwaemm256128v2 21.25 21.37 21.45 T:isapa128v20 21.42 21.46 21.61 ascon128bi32v12 23.12 23.17 23.27 romulusn 23.43 23.46 23.49 romulusm 24.64 24.66 24.70 T:schwaemm256256v2 24.87 24.92 24.99 T:schwaemm192192v2 25.22 25.27 25.30 T:grain128aeadv2 27.80 27.84 27.88 T:schwaemm128128v2 27.98 28.04 28.08 T:isapa128av20 34.08 34.15 34.22 T:giftcofb128v1 43.03 43.07 43.11 romulust 43.26 43.27 43.27 T:tinyjambu256v2 43.28 43.29 43.30 T:tinyjambu192v2 44.51 44.51 44.52 T:tinyjambu128v2 47.13 47.28 47.44 T:isapk128av20 58.83 59.05 59.26 T:isapk128v20 84.22 84.26 84.29 T:elephant200v2 93.57 97.03 103.55 T:isapxv20 3436.56 3437.53 3438.12 T:elephant176v2 4108.79 4113.35 4115.85 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.67 0.69 0.71 aes256gcmv1 0.68 0.71 0.72 T:aes128gcmv1 7.22 7.23 7.25 ascon128av12 8.47 8.49 8.50 T:xoodyakround3 10.59 10.62 10.64 ascon80pqv12 10.60 10.63 10.65 ascon128v12 14.40 14.43 14.45 ascon128abi32v12 18.83 18.86 18.91 T:schwaemm256128v2 21.20 21.31 21.41 T:isapa128v20 21.44 21.48 21.67 ascon128bi32v12 23.19 23.36 23.45 romulusm 23.40 23.43 23.45 romulusn 24.63 24.66 24.70 T:schwaemm256256v2 24.88 24.93 24.98 T:schwaemm192192v2 25.20 25.24 25.26 T:grain128aeadv2 27.84 27.87 27.91 T:schwaemm128128v2 27.98 28.03 28.07 T:isapa128av20 34.08 34.16 34.42 T:giftcofb128v1 43.03 43.08 43.13 romulust 43.25 43.28 43.29 T:tinyjambu192v2 43.70 43.71 43.71 T:tinyjambu256v2 44.51 44.51 44.52 T:tinyjambu128v2 47.10 47.26 47.47 T:isapk128av20 58.87 59.01 59.23 T:isapk128v20 84.24 84.28 84.31 T:elephant200v2 96.75 97.86 102.24 T:isapxv20 3436.39 3437.16 3437.92 T:elephant176v2 4109.48 4113.43 4116.51 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.67 0.69 0.71 aes256gcmv1 0.65 0.70 0.72 T:aes128gcmv1 7.20 7.23 7.26 ascon128av12 8.45 8.48 8.50 T:xoodyakround3 10.59 10.61 10.64 ascon80pqv12 10.60 10.63 10.65 ascon128v12 14.40 14.42 14.44 ascon128abi32v12 18.83 18.86 18.90 T:schwaemm256128v2 21.19 21.27 21.37 T:isapa128v20 21.44 21.50 21.77 ascon128bi32v12 23.37 23.41 23.45 romulusn 23.20 23.41 23.46 romulusm 24.64 24.66 24.69 T:schwaemm256256v2 24.90 24.94 24.99 T:schwaemm192192v2 25.21 25.23 25.26 T:grain128aeadv2 27.81 27.86 27.91 T:schwaemm128128v2 27.95 28.02 28.07 T:isapa128av20 34.10 34.16 34.40 T:giftcofb128v1 43.03 43.07 43.12 romulust 43.26 43.29 43.29 T:tinyjambu192v2 43.70 43.70 43.71 T:tinyjambu256v2 44.51 44.51 44.52 T:tinyjambu128v2 47.15 47.33 47.53 T:isapk128av20 58.89 59.12 59.39 T:isapk128v20 84.19 84.23 84.27 T:elephant200v2 96.99 97.73 102.50 T:isapxv20 3436.24 3436.96 3437.84 T:elephant176v2 4108.36 4113.70 4116.63 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.18 1.19 1.20 T:aes128gcmv1 1.33 1.33 1.34 aes256gcmv1 7.44 7.45 7.47 ascon128av12 10.76 10.77 10.79 ascon80pqv12 10.77 10.81 10.83 ascon128v12 12.59 12.61 12.64 T:xoodyakround3 14.80 14.81 14.82 ascon128abi32v12 19.53 19.55 19.57 T:schwaemm256128v2 21.75 21.86 21.91 ascon128bi32v12 25.61 25.62 25.64 T:grain128aeadv2 25.45 25.64 25.67 T:schwaemm256256v2 25.63 25.65 25.68 T:schwaemm192192v2 28.34 28.36 28.38 T:schwaemm128128v2 30.61 30.68 30.74 romulusn 34.24 34.27 34.46 T:giftcofb128v1 36.70 36.72 36.75 T:isapa128av20 42.46 42.48 42.56 romulusm 46.41 46.45 46.47 T:isapa128v20 57.31 57.31 57.32 T:tinyjambu128v2 63.83 63.84 63.84 T:tinyjambu192v2 67.02 67.09 67.23 T:isapk128av20 68.48 68.48 68.48 T:tinyjambu256v2 86.15 86.19 86.22 romulust 129.49 129.52 129.54 T:elephant200v2 132.94 133.08 133.21 T:isapk128v20 213.91 216.42 220.90 T:isapxv20 5233.11 5233.86 5234.27 T:elephant176v2 6233.57 6235.14 6239.67 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.35 1.37 1.38 T:aes128gcmv1 1.71 1.73 1.76 aes256gcmv1 7.43 7.43 7.44 ascon128av12 10.78 10.79 10.81 ascon128v12 10.78 10.81 10.84 ascon80pqv12 12.50 12.53 12.55 T:xoodyakround3 14.60 14.61 14.63 ascon128abi32v12 19.55 19.56 19.58 T:schwaemm256128v2 21.74 21.77 21.87 ascon128bi32v12 25.40 25.41 25.42 T:schwaemm256256v2 25.62 25.65 25.68 T:schwaemm192192v2 26.13 26.14 26.16 T:grain128aeadv2 28.36 28.39 28.41 T:schwaemm128128v2 30.80 30.88 30.91 romulusn 34.24 34.33 34.58 T:giftcofb128v1 36.72 36.75 36.78 T:isapa128av20 42.68 42.75 42.79 romulusm 46.41 46.43 46.46 T:isapa128v20 57.20 57.20 57.21 T:tinyjambu128v2 63.87 63.88 63.88 T:tinyjambu192v2 67.01 67.13 67.23 T:isapk128av20 68.69 68.70 68.70 T:tinyjambu256v2 86.13 86.17 86.21 romulust 129.49 129.52 129.55 T:elephant200v2 132.95 133.06 133.20 T:isapk128v20 216.12 216.54 219.57 T:isapxv20 5233.20 5234.02 5234.47 T:elephant176v2 6233.85 6235.50 6240.86 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.36 1.37 1.38 T:aes128gcmv1 1.71 1.73 1.76 aes256gcmv1 7.42 7.44 7.46 ascon128av12 10.77 10.79 10.80 ascon128v12 10.79 10.81 10.84 ascon80pqv12 12.55 12.57 12.58 T:xoodyakround3 14.60 14.61 14.63 ascon128abi32v12 19.55 19.56 19.58 T:schwaemm256128v2 21.74 21.77 21.87 ascon128bi32v12 25.38 25.40 25.41 T:schwaemm256256v2 25.63 25.66 25.68 T:schwaemm192192v2 26.14 26.14 26.16 T:grain128aeadv2 28.37 28.38 28.41 T:schwaemm128128v2 28.69 28.69 28.70 T:isapa128v20 29.26 29.27 29.30 T:isapa128av20 30.85 30.90 30.91 romulusn 34.18 34.22 34.29 T:giftcofb128v1 42.66 42.71 42.77 romulusm 44.47 44.50 44.53 romulust 51.73 51.82 51.92 T:isapk128av20 57.20 57.20 57.21 T:tinyjambu128v2 63.87 63.87 63.88 T:tinyjambu192v2 68.71 68.71 68.71 T:tinyjambu256v2 87.84 87.97 88.08 T:isapk128v20 129.50 129.52 129.55 T:elephant200v2 141.01 142.43 143.97 T:isapxv20 5233.31 5233.88 5234.27 T:elephant176v2 6232.73 6234.46 6240.13 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 6.47 6.52 6.58 T:aes128gcmv1 7.48 7.52 7.57 aes256gcmv1 11.12 11.24 11.38 ascon128av12 14.23 14.30 14.44 ascon128v12 14.23 14.34 14.48 ascon80pqv12 17.94 18.02 18.09 T:xoodyakround3 21.75 21.83 21.90 ascon128abi32v12 28.37 28.52 28.80 ascon128bi32v12 31.58 31.67 31.86 T:schwaemm256128v2 35.05 35.10 35.29 T:grain128aeadv2 35.91 36.15 36.41 T:schwaemm128128v2 36.77 36.84 36.93 romulusn 39.58 39.70 40.14 T:schwaemm256256v2 40.96 41.50 41.62 T:schwaemm192192v2 41.38 41.54 41.68 T:giftcofb128v1 48.56 48.70 48.92 romulusm 66.75 66.80 66.85 T:tinyjambu128v2 73.86 73.89 73.92 T:tinyjambu192v2 79.06 79.10 79.14 T:tinyjambu256v2 87.12 87.36 87.69 T:isapa128av20 114.72 114.98 115.28 romulust 182.87 183.04 183.28 T:elephant200v2 235.11 235.99 236.89 T:isapk128av20 379.47 380.14 380.59 T:isapa128v20 1411.99 1413.18 1414.85 T:isapk128v20 2091.92 2129.89 2173.49 T:isapxv20 6510.84 6512.74 6515.14 T:elephant176v2 8346.80 8353.24 8360.01 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 6.64 6.72 6.78 T:aes128gcmv1 7.65 7.71 7.81 aes256gcmv1 11.20 11.31 11.43 ascon128av12 14.26 14.36 14.50 ascon128v12 14.32 14.46 14.58 ascon80pqv12 17.83 17.89 18.05 T:xoodyakround3 21.59 21.65 21.72 ascon128abi32v12 28.44 28.54 28.72 ascon128bi32v12 31.60 31.74 31.93 T:schwaemm256128v2 35.24 35.28 35.46 T:grain128aeadv2 35.91 36.17 36.44 T:schwaemm128128v2 36.94 37.04 37.18 romulusn 39.53 39.61 39.78 T:schwaemm256256v2 41.46 41.56 41.77 T:giftcofb128v1 41.15 41.65 41.94 T:schwaemm192192v2 50.09 50.17 50.32 romulusm 66.73 66.79 66.86 T:tinyjambu128v2 73.98 74.00 74.02 T:tinyjambu192v2 79.41 79.43 79.45 T:tinyjambu256v2 87.12 87.33 87.51 T:isapa128av20 114.93 115.15 115.41 romulust 182.66 182.76 182.87 T:elephant200v2 235.48 236.44 237.19 T:isapk128av20 379.40 379.88 380.26 T:isapa128v20 1410.97 1412.22 1413.61 T:isapk128v20 2086.23 2129.83 2143.27 T:isapxv20 6512.64 6513.17 6514.39 T:elephant176v2 8346.76 8351.04 8359.41 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 6.65 6.68 6.73 T:aes128gcmv1 7.64 7.68 7.73 aes256gcmv1 11.18 11.23 11.34 ascon128av12 14.26 14.35 14.46 ascon80pqv12 14.26 14.35 14.45 ascon128v12 17.90 17.95 18.02 T:xoodyakround3 21.55 21.61 21.68 ascon128abi32v12 28.51 28.61 28.82 ascon128bi32v12 31.63 31.72 31.82 T:schwaemm256128v2 35.22 35.28 35.36 T:grain128aeadv2 35.89 36.05 36.30 T:schwaemm128128v2 36.94 37.02 37.10 romulusn 39.54 39.62 39.73 T:schwaemm256256v2 41.03 41.40 41.76 T:schwaemm192192v2 41.46 41.58 41.76 T:giftcofb128v1 50.04 50.13 50.24 romulusm 58.03 58.20 58.46 T:isapa128av20 66.73 66.76 66.81 T:tinyjambu128v2 72.30 72.45 72.72 romulust 73.97 74.00 74.01 T:tinyjambu192v2 79.41 79.41 79.44 T:tinyjambu256v2 145.68 146.55 147.27 T:isapk128av20 182.71 182.83 182.98 T:elephant200v2 198.02 198.50 198.81 T:isapa128v20 739.28 740.27 741.46 T:isapk128v20 1094.69 1115.24 1119.84 T:isapxv20 6512.56 6513.55 6514.73 T:elephant176v2 8347.32 8352.32 8357.44 T:elephant160v2