VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Coffee Lake (906ea); 2018 Intel Xeon E-2124; 4 x 3300MHz; r24000, supercop-20260330

[Page version: 20260413 04:20:10]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.18 1.19 1.19 T:aes128gcmv1 1.43 1.45 1.45 aes256gcmv1 7.55 7.57 7.59 ascon128av12 10.92 10.95 10.97 ascon128v12 10.91 10.95 10.98 ascon80pqv12 13.85 14.05 14.07 ascon128abi32v12 15.46 15.51 15.57 T:xoodyakround3 17.63 17.68 17.72 T:schwaemm256128v2 21.01 21.06 21.08 ascon128bi32v12 23.26 23.29 23.32 T:schwaemm192192v2 24.01 24.12 24.23 T:schwaemm256256v2 24.17 24.21 24.33 T:grain128aeadv2 25.74 25.78 25.84 T:schwaemm128128v2 33.52 33.57 33.64 T:giftcofb128v1 37.44 37.47 37.50 romulusn 40.50 40.59 40.66 T:isapa128av20 43.06 43.14 43.21 T:isapa128v20 60.67 60.72 60.77 romulusm 67.77 67.78 67.78 T:tinyjambu128v2 67.97 68.12 68.28 T:isapk128av20 82.87 83.55 83.55 T:tinyjambu192v2 89.28 89.29 89.33 T:tinyjambu256v2 90.19 90.40 90.61 T:isapk128v20 133.29 133.37 133.43 romulust 168.95 169.55 170.14 T:isapxv20 179.59 179.68 179.75 T:elephant200v2 6817.83 6821.07 6822.24 T:elephant176v2 7990.99 7993.43 7995.73 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.04 1.05 1.06 T:aes128gcmv1 1.41 1.42 1.43 aes256gcmv1 7.39 7.42 7.45 ascon128av12 10.92 10.94 10.96 ascon128v12 10.92 10.94 10.97 ascon80pqv12 13.82 13.88 13.92 ascon128abi32v12 15.24 15.29 15.33 T:xoodyakround3 17.69 17.75 17.96 T:schwaemm256128v2 20.82 20.84 20.86 ascon128bi32v12 23.27 23.32 23.38 T:schwaemm192192v2 24.01 24.11 24.25 T:schwaemm256256v2 24.70 24.72 24.76 T:grain128aeadv2 25.75 25.80 25.84 T:schwaemm128128v2 33.75 33.82 33.91 T:giftcofb128v1 37.49 37.57 37.61 romulusn 40.51 40.60 40.67 T:isapa128av20 43.07 43.15 43.20 T:isapa128v20 60.66 60.71 60.76 romulusm 68.00 68.00 68.00 T:tinyjambu128v2 68.00 68.14 68.24 T:isapk128av20 83.50 83.50 83.52 T:tinyjambu192v2 89.26 89.26 89.28 T:tinyjambu256v2 90.13 90.38 90.58 T:isapk128v20 133.28 133.36 133.43 romulust 169.00 169.48 170.06 T:isapxv20 179.58 179.64 179.71 T:elephant200v2 6817.84 6820.41 6821.08 T:elephant176v2 7991.33 7993.22 7995.47 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.04 1.05 1.06 T:aes128gcmv1 1.41 1.42 1.43 aes256gcmv1 7.39 7.42 7.44 ascon128av12 10.91 10.94 10.96 ascon128v12 10.92 10.95 10.97 ascon80pqv12 13.81 13.87 13.92 ascon128abi32v12 15.26 15.30 15.33 T:xoodyakround3 17.68 17.72 17.76 T:schwaemm256128v2 20.82 20.84 20.86 ascon128bi32v12 21.50 21.56 21.62 T:isapa128v20 23.25 23.31 23.36 T:schwaemm192192v2 23.99 24.11 24.22 T:schwaemm256256v2 24.71 24.72 24.78 T:grain128aeadv2 25.75 25.80 25.84 T:schwaemm128128v2 27.30 27.34 27.38 T:isapa128av20 33.71 33.78 33.84 T:giftcofb128v1 37.48 37.56 37.60 romulusn 45.04 45.15 45.26 T:isapk128av20 46.51 46.56 46.60 romulust 56.20 56.35 56.54 T:isapk128v20 60.67 60.72 60.76 romulusm 68.00 68.00 68.00 T:tinyjambu128v2 83.50 83.50 83.51 T:tinyjambu192v2 89.26 89.27 89.28 T:tinyjambu256v2 97.24 97.46 97.76 T:isapxv20 179.58 179.64 179.74 T:elephant200v2 6817.68 6820.15 6820.81 T:elephant176v2 7991.24 7993.15 7995.26 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.80 0.80 0.81 T:aes128gcmv1 0.92 0.93 0.94 aes256gcmv1 7.47 7.49 7.50 ascon128av12 10.93 10.95 10.96 ascon128v12 10.94 10.96 10.98 ascon80pqv12 11.71 11.73 11.75 T:xoodyakround3 13.94 13.96 13.98 ascon128abi32v12 17.56 17.59 17.62 T:schwaemm256128v2 20.70 20.72 20.92 ascon128bi32v12 23.16 23.18 23.22 T:schwaemm192192v2 23.90 24.02 24.13 T:schwaemm256256v2 24.13 24.17 24.25 T:grain128aeadv2 25.59 25.63 25.66 T:schwaemm128128v2 30.38 30.40 30.42 romulusn 32.33 32.38 32.43 T:isapa128v20 33.75 33.80 33.87 T:giftcofb128v1 33.93 33.97 34.01 T:isapa128av20 42.02 42.05 42.09 romulusm 55.45 55.46 55.47 T:tinyjambu128v2 56.57 56.68 56.78 T:isapk128av20 63.45 63.45 63.45 T:tinyjambu192v2 67.39 67.40 67.43 T:tinyjambu256v2 73.21 73.34 73.47 T:isapk128v20 89.76 89.81 89.85 romulust 133.16 133.43 133.82 T:isapxv20 134.19 134.27 135.08 T:elephant200v2 5092.12 5093.30 5095.11 T:elephant176v2 5991.99 5992.69 5993.01 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.72 0.73 0.74 T:aes128gcmv1 0.91 0.92 0.92 aes256gcmv1 7.37 7.39 7.43 ascon128av12 10.90 10.92 10.94 ascon128v12 10.94 10.96 10.98 ascon80pqv12 11.61 11.63 11.66 T:xoodyakround3 13.81 13.84 13.87 ascon128abi32v12 17.56 17.60 17.82 T:schwaemm256128v2 20.59 20.62 20.80 ascon128bi32v12 23.19 23.22 23.26 T:schwaemm192192v2 23.92 24.02 24.13 T:schwaemm256256v2 24.48 24.51 24.56 T:grain128aeadv2 25.59 25.62 25.66 T:schwaemm128128v2 30.41 30.45 30.47 romulusn 32.36 32.40 32.45 T:isapa128v20 33.88 33.94 34.02 T:giftcofb128v1 33.94 33.99 34.04 T:isapa128av20 42.04 42.06 42.10 romulusm 55.57 55.57 55.58 T:tinyjambu128v2 56.60 56.67 56.77 T:isapk128av20 63.38 63.38 63.38 T:tinyjambu192v2 67.38 67.38 67.39 T:tinyjambu256v2 73.29 73.40 73.54 T:isapk128v20 89.76 89.80 89.83 romulust 133.31 133.49 133.78 T:isapxv20 134.18 134.26 135.05 T:elephant200v2 5092.15 5093.16 5095.13 T:elephant176v2 5992.18 5993.08 5993.61 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.72 0.73 0.73 T:aes128gcmv1 0.91 0.92 0.92 aes256gcmv1 7.37 7.38 7.41 ascon128av12 10.91 10.93 10.94 ascon128v12 10.91 10.95 10.97 ascon80pqv12 11.64 11.66 11.69 T:xoodyakround3 13.81 13.85 13.89 ascon128abi32v12 17.55 17.60 17.62 T:schwaemm256128v2 20.59 20.62 20.81 ascon128bi32v12 21.59 21.62 21.65 T:isapa128v20 23.17 23.20 23.23 T:schwaemm192192v2 23.91 24.02 24.13 T:schwaemm256256v2 24.50 24.52 24.57 T:grain128aeadv2 25.60 25.62 25.66 T:schwaemm128128v2 27.33 27.35 27.38 T:isapa128av20 30.40 30.44 30.48 romulusn 33.86 33.93 34.04 T:giftcofb128v1 42.04 42.06 42.09 romulusm 45.07 45.14 45.24 T:isapk128av20 46.37 46.40 46.44 romulust 55.57 55.57 55.57 T:tinyjambu128v2 56.25 56.35 56.45 T:isapk128v20 63.38 63.38 63.38 T:tinyjambu192v2 67.38 67.38 67.39 T:tinyjambu256v2 97.40 97.46 97.63 T:isapxv20 134.18 134.22 134.28 T:elephant200v2 5092.29 5093.30 5095.11 T:elephant176v2 5992.42 5993.00 5993.50 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.41 0.42 0.42 T:aes128gcmv1 0.41 0.42 0.42 aes256gcmv1 7.37 7.39 7.42 ascon128av12 8.00 8.03 8.05 T:xoodyakround3 10.90 10.93 10.95 ascon128v12 10.92 10.95 10.98 ascon80pqv12 13.80 13.83 13.85 ascon128abi32v12 17.46 17.50 17.54 T:schwaemm256128v2 20.35 20.45 20.88 ascon128bi32v12 21.58 21.63 21.69 T:isapa128v20 23.01 23.10 23.39 T:schwaemm192192v2 23.30 23.34 23.37 romulusm 23.30 23.34 23.38 romulusn 23.78 23.90 24.01 T:schwaemm256256v2 24.07 24.13 24.21 T:grain128aeadv2 25.42 25.46 25.51 T:schwaemm128128v2 27.31 27.34 27.38 T:isapa128av20 33.96 34.10 34.19 T:giftcofb128v1 43.13 43.13 43.14 T:tinyjambu128v2 43.39 43.39 43.40 T:tinyjambu192v2 44.95 45.08 45.18 T:isapk128av20 45.50 45.50 45.51 T:tinyjambu256v2 46.23 46.30 46.33 romulust 56.12 56.27 56.42 T:isapk128v20 89.21 89.25 89.27 T:elephant200v2 97.28 97.47 97.76 T:isapxv20 3365.35 3367.63 3369.98 T:elephant176v2 3990.74 3993.95 3994.89 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.40 0.41 0.42 T:aes128gcmv1 0.40 0.41 0.41 aes256gcmv1 7.33 7.37 7.44 ascon128av12 8.00 8.02 8.04 T:xoodyakround3 10.87 10.90 10.93 ascon128v12 10.92 10.96 10.99 ascon80pqv12 13.79 13.82 13.83 ascon128abi32v12 17.41 17.45 17.48 T:schwaemm256128v2 20.35 20.39 20.62 ascon128bi32v12 21.59 21.66 21.73 T:isapa128v20 23.02 23.07 23.23 T:schwaemm192192v2 23.29 23.34 23.38 romulusn 23.31 23.34 23.38 romulusm 23.78 23.90 23.99 T:schwaemm256256v2 24.25 24.33 24.37 T:grain128aeadv2 25.42 25.45 25.49 T:schwaemm128128v2 27.29 27.34 27.37 T:isapa128av20 33.95 34.11 34.27 T:giftcofb128v1 43.13 43.14 43.14 T:tinyjambu128v2 43.25 43.25 43.26 T:tinyjambu192v2 44.99 45.11 45.25 T:isapk128av20 45.50 45.50 45.51 T:tinyjambu256v2 46.23 46.29 46.36 romulust 56.15 56.29 56.44 T:isapk128v20 89.20 89.23 89.27 T:elephant200v2 97.20 97.47 97.71 T:isapxv20 3365.38 3367.78 3370.06 T:elephant176v2 3990.80 3994.15 3995.07 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.40 0.41 0.41 T:aes128gcmv1 0.41 0.41 0.42 aes256gcmv1 7.33 7.36 7.41 ascon128av12 8.00 8.02 8.04 T:xoodyakround3 10.86 10.89 10.92 ascon128v12 10.87 10.95 10.98 ascon80pqv12 13.80 13.82 13.84 ascon128abi32v12 17.43 17.47 17.51 T:schwaemm256128v2 20.34 20.39 20.62 ascon128bi32v12 21.57 21.63 21.68 T:isapa128v20 22.95 23.01 23.13 T:schwaemm192192v2 23.29 23.34 23.39 romulusn 23.30 23.34 23.36 romulusm 23.77 23.88 24.00 T:schwaemm256256v2 24.25 24.33 24.36 T:grain128aeadv2 25.41 25.46 25.51 T:schwaemm128128v2 27.28 27.32 27.38 T:isapa128av20 33.96 34.10 34.26 T:giftcofb128v1 43.13 43.13 43.14 T:tinyjambu128v2 43.25 43.25 43.26 T:tinyjambu192v2 45.00 45.11 45.22 T:isapk128av20 45.50 45.50 45.51 T:tinyjambu256v2 46.21 46.26 46.32 romulust 56.15 56.29 56.41 T:isapk128v20 89.21 89.23 89.26 T:elephant200v2 97.19 97.39 97.67 T:isapxv20 3365.46 3367.64 3369.96 T:elephant176v2 3990.81 3993.82 3994.92 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.95 0.95 0.96 T:aes128gcmv1 1.11 1.11 1.11 aes256gcmv1 7.66 7.68 7.69 ascon128av12 11.10 11.12 11.13 ascon128v12 11.11 11.12 11.15 ascon80pqv12 11.83 11.86 11.89 T:xoodyakround3 14.26 14.27 14.28 ascon128abi32v12 18.12 18.15 18.30 T:schwaemm256128v2 21.03 21.18 21.27 ascon128bi32v12 23.69 23.72 23.76 T:schwaemm192192v2 24.52 24.60 24.69 T:grain128aeadv2 24.56 24.64 24.75 T:schwaemm256256v2 25.96 25.98 26.01 T:schwaemm128128v2 30.81 30.83 30.85 romulusn 34.11 34.15 34.22 T:giftcofb128v1 36.12 36.15 36.18 T:isapa128av20 42.45 42.47 42.49 romulusm 47.45 47.48 47.50 T:isapa128v20 55.88 55.89 55.92 T:tinyjambu128v2 63.90 63.90 63.90 T:tinyjambu192v2 64.17 64.23 64.28 T:isapk128av20 67.88 67.89 67.89 T:tinyjambu256v2 91.27 91.30 91.34 romulust 128.17 128.24 128.33 T:isapk128v20 137.02 137.04 137.10 T:elephant200v2 215.53 215.84 216.05 T:isapxv20 5130.62 5132.01 5132.37 T:elephant176v2 6058.46 6060.91 6065.16 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.88 0.88 0.89 T:aes128gcmv1 1.10 1.10 1.10 aes256gcmv1 7.56 7.58 7.60 ascon128av12 11.08 11.10 11.11 ascon128v12 11.09 11.12 11.14 ascon80pqv12 11.75 11.77 11.80 T:xoodyakround3 14.13 14.16 14.18 ascon128abi32v12 18.12 18.13 18.16 T:schwaemm256128v2 20.91 21.05 21.17 ascon128bi32v12 23.70 23.72 23.76 T:schwaemm192192v2 24.56 24.66 24.75 T:schwaemm256256v2 24.86 24.90 24.92 T:grain128aeadv2 25.96 25.98 26.00 T:schwaemm128128v2 30.84 30.87 30.90 romulusn 34.22 34.28 34.45 T:giftcofb128v1 36.11 36.15 36.19 T:isapa128av20 42.53 42.55 42.58 romulusm 47.45 47.48 47.50 T:isapa128v20 55.99 55.99 56.00 T:tinyjambu128v2 63.83 63.83 63.83 T:tinyjambu192v2 64.19 64.24 64.30 T:isapk128av20 67.87 67.87 67.88 T:tinyjambu256v2 91.27 91.31 91.33 romulust 128.22 128.28 128.32 T:isapk128v20 137.02 137.06 137.10 T:elephant200v2 215.72 215.93 216.04 T:isapxv20 5130.59 5132.12 5132.69 T:elephant176v2 6058.39 6060.69 6065.68 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.88 0.88 0.89 T:aes128gcmv1 1.10 1.10 1.10 aes256gcmv1 7.56 7.57 7.59 ascon128av12 11.08 11.10 11.11 ascon128v12 11.08 11.12 11.14 ascon80pqv12 11.78 11.80 11.82 T:xoodyakround3 14.13 14.16 14.19 ascon128abi32v12 18.12 18.17 18.36 T:schwaemm256128v2 20.92 20.93 21.13 ascon128bi32v12 23.72 23.75 23.79 T:schwaemm192192v2 24.56 24.64 24.74 T:schwaemm256256v2 24.86 24.90 24.93 T:grain128aeadv2 25.96 25.98 26.01 T:schwaemm128128v2 28.57 28.60 28.62 T:isapa128av20 29.27 29.30 29.33 T:isapa128v20 30.84 30.86 30.89 romulusn 34.22 34.29 34.38 T:giftcofb128v1 42.52 42.55 42.57 romulusm 47.72 47.76 47.79 romulust 49.46 49.50 49.55 T:isapk128av20 55.99 55.99 55.99 T:tinyjambu128v2 63.83 63.83 63.84 T:tinyjambu192v2 67.87 67.88 67.92 T:tinyjambu256v2 84.45 84.51 84.62 T:isapk128v20 137.01 137.04 137.08 T:elephant200v2 139.58 139.65 139.78 T:isapxv20 5130.38 5132.04 5133.14 T:elephant176v2 6058.59 6060.97 6065.62 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 5.86 5.91 5.99 T:aes128gcmv1 7.84 7.86 7.93 aes256gcmv1 11.64 11.73 12.01 ascon128av12 14.78 14.84 15.02 ascon128v12 14.85 14.95 15.15 ascon80pqv12 17.14 17.23 17.37 T:xoodyakround3 21.30 21.41 21.67 ascon128abi32v12 27.70 28.04 28.26 ascon128bi32v12 29.40 29.49 29.71 T:schwaemm256128v2 33.41 33.46 33.55 T:grain128aeadv2 33.29 33.52 33.74 T:schwaemm128128v2 38.09 38.19 38.51 T:schwaemm192192v2 38.77 38.94 39.15 T:schwaemm256256v2 40.21 40.35 40.65 romulusn 41.47 41.64 41.78 T:giftcofb128v1 52.46 52.69 53.11 romulusm 65.48 65.51 65.66 T:tinyjambu128v2 74.04 74.27 74.31 T:tinyjambu192v2 79.07 79.09 79.14 T:tinyjambu256v2 85.73 85.96 86.26 T:isapa128av20 124.65 124.96 125.38 romulust 193.65 193.78 193.99 T:elephant200v2 224.04 224.89 225.61 T:isapk128av20 393.69 394.10 394.56 T:isapa128v20 1369.85 1370.92 1372.31 T:isapk128v20 2082.56 2089.50 2090.79 T:isapxv20 6386.65 6388.17 6389.48 T:elephant176v2 8110.39 8112.04 8114.45 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 5.93 5.96 6.01 T:aes128gcmv1 8.10 8.13 8.17 aes256gcmv1 11.60 11.69 12.02 ascon128av12 14.83 14.93 15.06 ascon80pqv12 14.80 14.94 15.15 ascon128v12 16.95 17.09 17.22 T:xoodyakround3 21.10 21.21 21.46 ascon128abi32v12 27.86 28.05 28.28 ascon128bi32v12 29.47 29.68 29.92 T:schwaemm256128v2 33.27 33.48 33.69 T:schwaemm128128v2 33.77 33.84 33.93 T:grain128aeadv2 38.06 38.18 38.39 T:schwaemm192192v2 38.79 39.01 39.22 T:schwaemm256256v2 40.37 40.58 40.87 romulusn 41.55 41.69 41.84 T:giftcofb128v1 54.27 54.45 54.66 romulusm 65.68 65.70 65.80 T:tinyjambu128v2 74.24 74.27 74.28 T:tinyjambu192v2 79.11 79.12 79.18 T:tinyjambu256v2 85.68 85.87 86.16 T:isapa128av20 124.58 124.83 125.22 romulust 193.55 193.66 193.80 T:elephant200v2 224.22 224.93 225.84 T:isapk128av20 393.54 393.97 394.33 T:isapa128v20 1369.92 1371.74 1373.58 T:isapk128v20 2082.92 2088.79 2090.06 T:isapxv20 6386.53 6388.28 6389.14 T:elephant176v2 8110.28 8111.75 8114.20 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 5.93 5.95 6.00 T:aes128gcmv1 8.07 8.10 8.13 aes256gcmv1 11.60 11.69 11.85 ascon128av12 14.79 14.87 15.05 ascon80pqv12 14.79 14.91 15.03 ascon128v12 17.01 17.13 17.24 T:xoodyakround3 21.09 21.20 21.35 ascon128abi32v12 27.78 27.95 28.20 ascon128bi32v12 29.49 29.66 29.86 T:schwaemm256128v2 33.26 33.42 33.60 T:schwaemm128128v2 33.74 33.80 33.86 T:grain128aeadv2 38.10 38.18 38.35 T:schwaemm192192v2 38.75 38.96 39.11 T:schwaemm256256v2 40.42 40.63 40.91 romulusn 41.51 41.68 41.79 T:giftcofb128v1 54.24 54.40 54.62 romulusm 57.08 57.22 57.43 T:isapa128av20 65.66 65.66 65.68 T:tinyjambu128v2 74.23 74.26 74.29 T:tinyjambu192v2 78.75 78.86 79.10 romulust 79.10 79.11 79.13 T:tinyjambu256v2 138.37 138.97 139.70 T:isapk128av20 193.52 193.65 193.78 T:elephant200v2 204.84 205.20 205.49 T:isapa128v20 717.19 718.04 719.24 T:isapk128v20 1089.03 1092.12 1092.80 T:isapxv20 6386.38 6388.39 6389.35 T:elephant176v2 8110.92 8112.43 8114.10 T:elephant160v2