VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Bulldozer (600f20); 2012 AMD FX-8350; 4 x 4000MHz; saber214, supercop-20260217

[Page version: 20260319 20:29:39]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 3.16 3.17 3.20 T:aes128gcmv1 3.46 3.49 3.54 aes256gcmv1 9.48 9.49 9.51 ascon128av12 14.12 14.12 14.13 ascon80pqv12 14.13 14.13 14.14 ascon128v12 20.60 20.61 20.65 ascon128abi32v12 22.04 22.13 22.45 T:xoodyakround3 28.34 28.34 28.36 ascon128bi32v12 29.16 29.20 29.20 T:schwaemm256128v2 32.43 32.48 32.51 T:schwaemm256256v2 39.09 39.10 39.15 T:schwaemm192192v2 42.93 42.94 42.96 T:grain128aeadv2 47.24 47.30 47.40 T:giftcofb128v1 48.13 48.25 48.32 T:schwaemm128128v2 56.34 56.35 56.36 T:isapa128v20 56.39 56.48 56.54 T:isapa128av20 72.16 72.17 72.18 romulusn 79.52 79.55 79.57 T:tinyjambu128v2 102.90 102.92 102.97 T:tinyjambu192v2 104.72 106.18 106.28 T:isapk128av20 113.38 113.72 113.88 T:tinyjambu256v2 116.26 116.36 117.49 romulusm 140.26 140.47 140.61 T:isapk128v20 232.83 233.17 237.66 romulust 254.96 255.14 255.27 T:elephant200v2 282.47 282.71 283.10 T:isapxv20 14472.84 14479.80 14487.16 T:elephant160v2 14729.17 14738.91 14756.08 T:elephant176v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 3.14 3.16 3.19 T:aes128gcmv1 3.42 3.43 3.43 aes256gcmv1 9.41 9.42 9.43 ascon128av12 14.09 14.10 14.11 ascon128v12 14.12 14.12 14.13 ascon80pqv12 20.73 20.75 20.75 ascon128abi32v12 21.58 21.67 22.01 T:xoodyakround3 28.59 28.59 28.60 ascon128bi32v12 29.43 29.45 29.46 T:schwaemm256128v2 32.28 32.30 32.35 T:schwaemm256256v2 38.96 38.99 39.01 T:schwaemm192192v2 44.30 44.33 44.36 T:grain128aeadv2 48.03 48.08 48.14 T:giftcofb128v1 47.98 48.17 48.25 T:schwaemm128128v2 56.32 56.35 56.36 T:isapa128v20 56.45 56.50 56.58 T:isapa128av20 72.24 72.24 72.26 romulusn 80.05 80.10 80.66 T:tinyjambu128v2 102.81 102.83 102.90 T:tinyjambu192v2 106.09 106.19 106.39 T:isapk128av20 114.50 114.55 114.76 T:tinyjambu256v2 116.21 116.39 117.55 romulusm 140.00 140.61 141.08 T:isapk128v20 232.79 233.58 238.80 romulust 254.92 255.14 255.53 T:elephant200v2 282.24 282.42 282.87 T:isapxv20 14474.89 14481.34 14489.32 T:elephant160v2 14729.65 14737.84 14750.29 T:elephant176v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 3.13 3.14 3.17 T:aes128gcmv1 3.41 3.41 3.42 aes256gcmv1 9.41 9.42 9.43 ascon128av12 14.11 14.11 14.11 ascon128v12 14.12 14.13 14.13 ascon80pqv12 20.74 20.75 20.75 ascon128abi32v12 21.62 21.71 21.89 T:xoodyakround3 28.16 28.17 28.19 T:isapa128v20 28.51 28.51 28.51 ascon128bi32v12 29.43 29.45 29.46 T:schwaemm256128v2 32.28 32.32 32.36 T:schwaemm256256v2 37.24 37.26 37.32 T:isapa128av20 38.96 38.99 39.01 T:schwaemm192192v2 44.32 44.34 44.36 T:grain128aeadv2 47.99 48.02 48.11 T:giftcofb128v1 47.86 48.16 48.30 T:schwaemm128128v2 70.20 70.24 70.28 T:isapk128av20 72.23 72.24 72.26 romulusn 78.27 78.39 79.46 romulust 80.16 80.18 80.64 T:tinyjambu128v2 86.83 86.98 87.22 T:isapk128v20 102.81 102.84 102.90 T:tinyjambu192v2 114.49 114.53 114.74 T:tinyjambu256v2 116.21 116.39 117.55 romulusm 167.78 167.86 168.30 T:isapxv20 254.93 255.28 255.46 T:elephant200v2 14475.74 14481.21 14489.67 T:elephant160v2 14731.69 14739.81 14753.82 T:elephant176v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 2.30 2.32 2.34 T:aes128gcmv1 2.48 2.49 2.67 aes256gcmv1 9.35 9.36 9.37 ascon128av12 14.01 14.01 14.02 ascon128v12 14.01 14.01 14.02 ascon80pqv12 16.52 16.65 16.78 T:xoodyakround3 19.82 19.83 19.84 ascon128abi32v12 28.23 28.23 28.24 ascon128bi32v12 29.12 29.16 29.16 T:schwaemm256128v2 32.10 32.21 32.23 T:schwaemm256256v2 39.11 39.11 39.14 T:schwaemm192192v2 42.27 42.27 42.28 T:isapa128v20 42.67 42.68 42.70 T:grain128aeadv2 46.89 46.95 47.00 T:isapa128av20 47.23 47.29 47.34 T:giftcofb128v1 48.09 48.17 48.26 T:schwaemm128128v2 57.66 57.67 57.68 romulusn 64.01 64.03 64.23 T:tinyjambu128v2 78.95 79.05 80.27 romulusm 80.39 80.40 80.43 T:tinyjambu192v2 85.23 85.42 85.45 T:tinyjambu256v2 88.05 88.09 88.18 T:isapk128av20 113.83 113.92 114.01 T:isapk128v20 155.37 155.74 158.81 romulust 192.86 192.93 193.12 T:elephant200v2 224.81 224.95 225.00 T:isapxv20 10854.03 10857.55 10861.37 T:elephant160v2 11003.61 11011.63 11017.33 T:elephant176v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 2.30 2.32 2.33 T:aes128gcmv1 2.44 2.45 2.46 aes256gcmv1 9.34 9.34 9.35 ascon128av12 14.00 14.00 14.01 ascon128v12 14.01 14.02 14.02 ascon80pqv12 16.33 16.54 16.60 T:xoodyakround3 19.81 19.82 19.82 ascon128abi32v12 28.25 28.26 28.27 ascon128bi32v12 29.26 29.27 29.29 T:schwaemm256128v2 32.06 32.11 32.13 T:schwaemm256256v2 39.05 39.06 39.08 T:schwaemm192192v2 42.25 42.26 42.27 T:isapa128v20 43.36 43.39 43.57 T:grain128aeadv2 46.88 46.94 46.97 T:isapa128av20 47.57 47.63 47.66 T:giftcofb128v1 47.98 48.04 48.11 T:schwaemm128128v2 57.70 57.71 57.71 romulusn 64.24 64.26 64.30 T:tinyjambu128v2 78.92 79.02 80.19 romulusm 79.97 80.00 80.03 T:tinyjambu192v2 85.90 85.94 86.05 T:tinyjambu256v2 87.92 88.10 88.16 T:isapk128av20 113.64 113.91 114.10 T:isapk128v20 155.36 155.84 159.08 romulust 192.87 193.08 193.29 T:elephant200v2 224.90 224.95 225.53 T:isapxv20 10852.50 10857.27 10861.96 T:elephant160v2 11002.99 11010.81 11016.85 T:elephant176v2

Cycles/byte for long+long forgery 25% 50% 75% aead 2.30 2.31 2.32 T:aes128gcmv1 2.45 2.45 2.45 aes256gcmv1 9.34 9.35 9.35 ascon128av12 14.01 14.01 14.01 ascon128v12 14.03 14.03 14.03 ascon80pqv12 16.38 16.74 16.85 T:xoodyakround3 19.82 19.83 19.83 ascon128abi32v12 28.17 28.17 28.18 T:isapa128v20 28.26 28.26 28.27 ascon128bi32v12 29.26 29.27 29.29 T:schwaemm256128v2 32.06 32.11 32.13 T:schwaemm256256v2 37.29 37.30 37.32 T:isapa128av20 39.04 39.06 39.07 T:schwaemm192192v2 43.40 43.42 43.63 T:grain128aeadv2 47.59 47.91 48.16 T:giftcofb128v1 47.98 48.03 48.11 T:schwaemm128128v2 57.70 57.70 57.71 romulusn 64.47 64.61 64.63 T:tinyjambu128v2 70.02 70.06 70.10 T:isapk128av20 78.12 78.22 79.23 romulust 78.93 79.05 80.27 romulusm 79.97 79.99 80.02 T:tinyjambu192v2 85.71 85.79 86.00 T:tinyjambu256v2 87.09 87.17 87.26 T:isapk128v20 167.64 167.68 167.72 T:isapxv20 192.94 193.12 193.26 T:elephant200v2 10853.55 10858.37 10862.24 T:elephant160v2 11005.14 11010.64 11017.80 T:elephant176v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 1.46 1.47 1.48 T:aes128gcmv1 1.48 1.49 1.49 aes256gcmv1 9.25 9.25 9.26 ascon128av12 11.10 11.12 11.15 T:xoodyakround3 13.90 13.90 13.91 ascon128v12 13.90 13.90 13.91 ascon80pqv12 18.86 18.87 18.88 ascon128abi32v12 28.11 28.11 28.12 ascon128bi32v12 28.16 28.17 28.19 T:isapa128v20 29.08 29.11 29.13 T:schwaemm256128v2 31.77 31.97 31.97 T:schwaemm256256v2 37.30 37.33 37.37 T:isapa128av20 39.13 39.14 39.15 T:schwaemm192192v2 41.60 41.68 42.79 romulusm 42.67 42.69 42.71 T:grain128aeadv2 43.18 43.26 43.32 romulusn 47.07 47.15 47.41 T:giftcofb128v1 47.89 48.02 48.15 T:schwaemm128128v2 48.45 48.47 48.48 T:tinyjambu128v2 57.00 57.12 57.16 T:tinyjambu256v2 57.88 57.90 57.92 T:tinyjambu192v2 69.81 70.01 70.08 T:isapk128av20 77.84 78.03 79.13 romulust 87.22 87.35 87.51 T:isapk128v20 130.07 130.18 130.29 T:elephant200v2 167.55 167.58 167.66 T:isapxv20 7232.75 7236.83 7240.46 T:elephant160v2 7278.44 7283.75 7288.16 T:elephant176v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 1.48 1.48 1.48 aes256gcmv1 1.46 1.48 1.48 T:aes128gcmv1 9.26 9.26 9.27 ascon128av12 11.10 11.12 11.15 T:xoodyakround3 13.90 13.90 13.91 ascon128v12 13.90 13.91 13.91 ascon80pqv12 18.88 18.88 18.89 ascon128abi32v12 28.04 28.05 28.05 ascon128bi32v12 28.17 28.18 28.18 T:isapa128v20 29.08 29.11 29.14 T:schwaemm256128v2 31.77 31.97 31.97 T:schwaemm256256v2 37.30 37.32 37.36 T:isapa128av20 39.12 39.14 39.14 T:schwaemm192192v2 41.59 41.69 42.79 romulusm 42.42 42.46 42.50 T:grain128aeadv2 43.28 43.30 43.32 romulusn 47.11 47.17 47.36 T:giftcofb128v1 47.93 47.97 48.05 T:schwaemm128128v2 48.45 48.47 48.49 T:tinyjambu128v2 57.14 57.16 57.17 T:tinyjambu192v2 57.25 57.37 57.42 T:tinyjambu256v2 69.89 69.92 70.03 T:isapk128av20 77.83 78.04 79.23 romulust 87.27 87.37 87.47 T:isapk128v20 129.83 130.03 130.10 T:elephant200v2 167.57 167.61 167.76 T:isapxv20 7233.43 7236.09 7239.23 T:elephant160v2 7278.35 7282.98 7287.96 T:elephant176v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 1.46 1.46 1.46 aes256gcmv1 1.46 1.46 1.46 T:aes128gcmv1 9.26 9.26 9.26 ascon128av12 11.10 11.12 11.15 T:xoodyakround3 13.91 13.91 13.91 ascon128v12 13.91 13.91 13.91 ascon80pqv12 18.88 18.89 18.90 ascon128abi32v12 28.04 28.04 28.04 ascon128bi32v12 28.17 28.18 28.19 T:isapa128v20 29.08 29.11 29.14 T:schwaemm256128v2 31.78 31.97 31.97 T:schwaemm256256v2 37.30 37.36 37.39 T:isapa128av20 39.12 39.14 39.14 T:schwaemm192192v2 41.60 41.72 42.80 romulusm 42.41 42.44 42.82 T:grain128aeadv2 43.22 43.30 43.33 romulusn 47.08 47.11 47.29 T:giftcofb128v1 47.94 47.99 48.08 T:schwaemm128128v2 48.45 48.48 48.49 T:tinyjambu128v2 57.14 57.17 57.18 T:tinyjambu192v2 57.23 57.27 57.39 T:tinyjambu256v2 69.81 70.00 70.16 T:isapk128av20 77.91 78.02 79.05 romulust 87.08 87.25 87.48 T:isapk128v20 130.10 130.25 130.49 T:elephant200v2 167.55 167.58 167.73 T:isapxv20 7233.45 7236.43 7242.05 T:elephant160v2 7278.19 7282.83 7289.13 T:elephant176v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 2.53 2.56 2.57 T:aes128gcmv1 2.72 2.73 2.75 aes256gcmv1 9.61 9.61 9.61 ascon128av12 14.24 14.24 14.24 ascon128v12 14.24 14.24 14.24 ascon80pqv12 16.88 16.89 16.91 T:xoodyakround3 20.29 20.29 20.29 ascon128abi32v12 28.76 28.77 28.78 ascon128bi32v12 29.98 30.01 30.02 T:schwaemm256128v2 33.04 33.12 33.12 T:schwaemm256256v2 39.95 39.96 39.97 T:schwaemm192192v2 43.33 43.34 43.34 T:grain128aeadv2 47.82 47.92 47.93 T:giftcofb128v1 48.70 48.74 48.85 T:schwaemm128128v2 52.51 52.52 52.53 T:isapa128av20 58.16 58.17 58.17 romulusn 61.74 61.74 61.75 T:isapa128v20 64.57 64.61 64.66 T:tinyjambu128v2 79.59 79.60 80.69 romulusm 81.02 81.03 81.04 T:tinyjambu192v2 85.89 85.92 86.30 T:tinyjambu256v2 101.09 101.16 101.22 T:isapk128av20 157.98 158.01 160.62 romulust 196.81 196.99 197.05 T:elephant200v2 201.00 201.05 201.18 T:isapk128v20 367.21 367.25 367.30 T:isapxv20 10974.92 10977.55 10982.95 T:elephant160v2 11087.22 11093.08 11100.43 T:elephant176v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 2.53 2.55 2.55 T:aes128gcmv1 2.69 2.70 2.70 aes256gcmv1 9.60 9.60 9.60 ascon128av12 14.22 14.22 14.22 ascon128v12 14.24 14.24 14.24 ascon80pqv12 16.64 16.67 16.74 T:xoodyakround3 20.29 20.29 20.29 ascon128abi32v12 28.75 28.76 28.77 ascon128bi32v12 30.12 30.13 30.14 T:schwaemm256128v2 32.97 33.01 33.01 T:schwaemm256256v2 39.87 39.88 39.88 T:schwaemm192192v2 44.04 44.06 44.24 T:grain128aeadv2 48.17 48.22 48.29 T:giftcofb128v1 48.63 48.71 48.79 T:schwaemm128128v2 52.50 52.51 52.54 T:isapa128av20 58.20 58.20 58.20 romulusn 61.74 61.74 61.75 T:isapa128v20 64.79 64.81 64.83 T:tinyjambu128v2 79.68 79.72 80.79 romulusm 80.62 80.63 80.70 T:tinyjambu192v2 86.61 86.64 86.73 T:tinyjambu256v2 101.26 101.28 101.32 T:isapk128av20 157.99 158.28 161.24 romulust 196.73 196.80 196.88 T:elephant200v2 200.94 201.04 201.21 T:isapk128v20 367.18 367.22 367.41 T:isapxv20 10975.11 10979.78 10985.16 T:elephant160v2 11087.33 11095.55 11103.18 T:elephant176v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 2.54 2.54 2.55 T:aes128gcmv1 2.69 2.70 2.71 aes256gcmv1 9.60 9.60 9.60 ascon128av12 14.22 14.22 14.22 ascon128v12 14.24 14.24 14.24 ascon80pqv12 16.57 16.72 16.74 T:xoodyakround3 20.30 20.30 20.30 ascon128abi32v12 28.77 28.77 28.77 ascon128bi32v12 30.12 30.13 30.14 T:schwaemm256128v2 32.98 33.01 33.01 T:schwaemm256256v2 38.07 38.07 38.08 T:isapa128v20 39.87 39.88 39.88 T:schwaemm192192v2 40.30 40.31 40.31 T:isapa128av20 44.03 44.04 44.05 T:grain128aeadv2 48.65 48.75 48.80 T:schwaemm128128v2 48.42 49.04 49.39 T:giftcofb128v1 58.19 58.20 58.20 romulusn 64.79 64.81 65.09 T:tinyjambu128v2 78.29 78.32 78.36 T:isapk128av20 79.68 79.71 80.79 romulusm 80.47 80.49 81.43 romulust 80.62 80.63 80.65 T:tinyjambu192v2 86.58 86.63 86.73 T:tinyjambu256v2 133.16 133.19 133.22 T:isapk128v20 196.46 196.69 196.80 T:elephant200v2 240.46 240.49 240.51 T:isapxv20 10975.17 10976.93 10982.10 T:elephant160v2 11086.82 11094.65 11101.08 T:elephant176v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 10.21 10.21 10.43 T:aes128gcmv1 11.02 11.04 11.53 aes256gcmv1 15.36 15.36 15.64 ascon128av12 19.05 19.05 19.18 ascon128v12 19.13 19.13 19.30 ascon80pqv12 26.38 26.49 26.83 T:xoodyakround3 30.71 30.72 30.84 ascon128abi32v12 40.12 40.16 40.70 ascon128bi32v12 49.33 49.35 49.50 T:schwaemm256128v2 53.62 53.76 53.85 T:schwaemm256256v2 57.74 58.26 58.65 T:grain128aeadv2 60.53 60.53 60.68 T:giftcofb128v1 62.72 62.97 63.27 T:schwaemm128128v2 64.16 64.21 64.28 T:schwaemm192192v2 69.82 69.88 70.01 romulusn 77.10 77.17 77.36 T:tinyjambu128v2 92.11 92.51 93.63 romulusm 95.51 95.65 95.71 T:tinyjambu192v2 101.19 101.36 101.73 T:tinyjambu256v2 180.06 180.44 180.96 T:isapa128av20 213.11 213.63 217.04 romulust 279.78 280.46 281.43 T:elephant200v2 383.28 383.95 384.79 T:isapk128av20 508.98 509.08 509.31 T:isapa128v20 2178.76 2179.87 2180.37 T:isapk128v20 3599.32 3600.29 3601.24 T:isapxv20 13783.41 13791.71 13813.06 T:elephant176v2 14675.52 14676.47 14685.91 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 10.31 10.31 10.55 T:aes128gcmv1 11.21 11.23 11.48 aes256gcmv1 15.05 15.08 15.24 ascon128av12 19.13 19.14 19.39 ascon128v12 19.21 19.22 19.26 ascon80pqv12 25.35 25.46 25.70 T:xoodyakround3 31.01 31.11 31.30 ascon128abi32v12 40.21 40.38 40.58 ascon128bi32v12 49.42 49.45 49.50 T:schwaemm256128v2 53.27 53.29 53.33 T:schwaemm256256v2 58.43 58.65 59.31 T:grain128aeadv2 61.53 61.71 61.92 T:giftcofb128v1 62.46 62.79 63.28 T:schwaemm128128v2 64.01 64.21 64.33 T:schwaemm192192v2 69.85 69.88 69.94 romulusn 77.41 77.53 77.82 T:tinyjambu128v2 94.65 94.96 96.29 romulusm 95.34 95.41 95.44 T:tinyjambu192v2 101.91 101.98 102.13 T:tinyjambu256v2 180.91 181.16 181.44 T:isapa128av20 212.84 213.42 217.20 romulust 279.11 280.09 280.84 T:elephant200v2 385.87 386.09 386.64 T:isapk128av20 509.30 509.40 509.46 T:isapa128v20 2181.52 2186.10 2186.57 T:isapk128v20 3599.79 3600.18 3600.53 T:isapxv20 13781.95 13787.56 13805.63 T:elephant176v2 14675.39 14676.75 14695.33 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 10.30 10.30 10.30 T:aes128gcmv1 11.18 11.21 11.21 aes256gcmv1 15.05 15.06 15.10 ascon128av12 19.12 19.12 19.13 ascon128v12 19.21 19.22 19.22 ascon80pqv12 25.52 25.62 25.86 T:xoodyakround3 31.03 31.05 31.08 ascon128abi32v12 40.43 40.48 40.48 ascon128bi32v12 49.42 49.43 49.50 T:schwaemm256128v2 53.27 53.27 53.27 T:schwaemm256256v2 58.42 58.56 58.83 T:grain128aeadv2 60.72 61.03 61.88 T:giftcofb128v1 62.45 62.68 62.86 T:schwaemm128128v2 64.02 64.16 64.33 T:schwaemm192192v2 69.77 69.84 69.85 romulusn 77.28 77.53 77.55 T:tinyjambu128v2 94.64 94.82 96.19 romulusm 95.31 95.42 95.49 T:tinyjambu192v2 101.87 101.98 102.01 T:tinyjambu256v2 109.38 109.46 109.94 T:isapa128av20 132.96 133.36 134.42 romulust 251.97 252.38 252.86 T:isapk128av20 265.36 265.40 265.48 T:isapa128v20 279.60 279.78 280.19 T:elephant200v2 1174.44 1174.79 1175.75 T:isapk128v20 1883.69 1883.95 1884.13 T:isapxv20 13783.23 13791.41 13810.43 T:elephant176v2 14676.41 14677.00 14690.53 T:elephant160v2