VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Bulldozer (600f20); 2012 AMD FX-8350; 4 x 4000MHz; saber214, supercop-20251222

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 3.14 3.15 3.18 T:aes128gcmv1 3.42 3.46 3.48 aes256gcmv1 9.43 9.45 9.47 ascon128av12 14.12 14.12 14.12 ascon80pqv12 14.13 14.13 14.13 ascon128v12 20.77 20.77 20.77 ascon128abi32v12 22.11 22.18 22.28 T:xoodyakround3 28.35 28.36 28.36 ascon128bi32v12 29.16 29.20 29.20 T:schwaemm256128v2 32.26 32.37 32.40 T:schwaemm256256v2 39.09 39.09 39.15 T:schwaemm192192v2 42.46 42.50 42.53 T:grain128aeadv2 47.82 47.92 47.94 T:giftcofb128v1 48.23 48.36 48.51 T:schwaemm128128v2 56.34 56.34 56.35 T:isapa128v20 56.42 56.49 56.57 T:isapa128av20 72.01 72.03 72.05 romulusn 79.55 79.56 79.58 T:tinyjambu128v2 102.91 102.92 102.96 T:tinyjambu192v2 105.98 106.09 106.16 T:isapk128av20 113.86 113.86 113.95 T:tinyjambu256v2 116.31 116.41 117.31 romulusm 140.02 140.43 141.00 T:isapk128v20 233.47 233.50 233.54 romulust 255.16 256.39 261.75 T:elephant200v2 282.52 282.68 283.94 T:isapxv20 14477.20 14478.41 14486.47 T:elephant160v2 14732.85 14735.67 14738.63 T:elephant176v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 3.14 3.15 3.15 T:aes128gcmv1 3.40 3.41 3.45 aes256gcmv1 9.42 9.42 9.42 ascon128av12 14.09 14.09 14.10 ascon128v12 14.11 14.12 14.13 ascon80pqv12 20.72 20.73 20.75 ascon128abi32v12 21.49 21.54 21.56 T:xoodyakround3 28.58 28.60 28.61 ascon128bi32v12 29.44 29.46 29.47 T:schwaemm256128v2 32.47 32.53 32.58 T:schwaemm256256v2 38.94 38.99 39.02 T:schwaemm192192v2 44.44 44.49 44.75 T:grain128aeadv2 48.14 48.20 48.26 T:schwaemm128128v2 48.21 48.22 48.25 T:giftcofb128v1 56.34 56.36 56.38 T:isapa128v20 56.40 56.51 56.54 T:isapa128av20 72.29 72.30 72.33 romulusn 80.65 80.68 80.79 T:tinyjambu128v2 102.83 102.86 102.88 T:tinyjambu192v2 105.93 106.14 106.30 T:isapk128av20 114.50 114.52 114.54 T:tinyjambu256v2 116.26 116.36 117.26 romulusm 140.38 140.53 140.65 T:isapk128v20 233.52 233.54 233.60 romulust 254.74 256.34 261.22 T:elephant200v2 282.53 283.87 283.96 T:isapxv20 14480.43 14487.67 14492.46 T:elephant160v2 14730.23 14734.18 14739.84 T:elephant176v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 3.13 3.14 3.15 T:aes128gcmv1 3.42 3.43 3.44 aes256gcmv1 9.42 9.42 9.42 ascon128av12 14.09 14.09 14.10 ascon128v12 14.13 14.13 14.15 ascon80pqv12 20.73 20.75 20.75 ascon128abi32v12 21.58 21.62 21.63 T:xoodyakround3 28.17 28.17 28.18 T:isapa128v20 28.59 28.60 28.60 ascon128bi32v12 29.43 29.44 29.46 T:schwaemm256128v2 32.47 32.54 32.56 T:schwaemm256256v2 37.23 37.28 37.32 T:isapa128av20 38.95 38.98 39.01 T:schwaemm192192v2 44.41 44.47 44.71 T:grain128aeadv2 48.14 48.16 48.25 T:schwaemm128128v2 48.22 48.25 48.26 T:giftcofb128v1 70.21 70.23 70.28 T:isapk128av20 72.29 72.29 72.30 romulusn 78.31 78.37 78.42 romulust 80.65 80.70 80.78 T:tinyjambu128v2 86.74 86.90 86.99 T:isapk128v20 102.84 102.86 102.89 T:tinyjambu192v2 114.49 114.52 114.54 T:tinyjambu256v2 116.25 116.40 117.26 romulusm 167.79 167.81 167.85 T:isapxv20 255.23 256.17 261.44 T:elephant200v2 14473.79 14482.38 14488.67 T:elephant160v2 14732.16 14734.51 14739.88 T:elephant176v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 2.29 2.31 2.33 T:aes128gcmv1 2.41 2.44 2.46 aes256gcmv1 9.35 9.36 9.37 ascon128av12 14.00 14.01 14.02 ascon128v12 14.00 14.02 14.02 ascon80pqv12 16.58 16.61 16.70 T:xoodyakround3 19.80 19.82 19.83 ascon128abi32v12 28.22 28.24 28.25 ascon128bi32v12 29.12 29.16 29.16 T:schwaemm256128v2 32.06 32.09 32.13 T:schwaemm256256v2 39.12 39.13 39.13 T:schwaemm192192v2 42.24 42.26 42.27 T:isapa128v20 42.69 42.70 42.72 T:grain128aeadv2 46.87 46.95 47.15 T:isapa128av20 47.28 47.84 48.03 T:giftcofb128v1 48.03 48.10 48.22 T:schwaemm128128v2 57.54 57.58 57.65 romulusn 64.05 64.07 64.09 T:tinyjambu128v2 78.96 79.04 79.92 romulusm 80.25 80.26 80.28 T:tinyjambu192v2 85.41 85.44 85.46 T:tinyjambu256v2 87.98 88.11 88.14 T:isapk128av20 113.89 114.00 114.11 T:isapk128v20 155.78 155.79 155.82 romulust 192.84 192.88 195.94 T:elephant200v2 224.82 225.28 225.80 T:isapxv20 10855.87 10858.11 10864.56 T:elephant160v2 11006.63 11008.04 11010.80 T:elephant176v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 2.28 2.30 2.32 T:aes128gcmv1 2.42 2.45 2.46 aes256gcmv1 9.34 9.34 9.35 ascon128av12 14.00 14.00 14.00 ascon128v12 14.01 14.01 14.02 ascon80pqv12 16.29 16.33 16.49 T:xoodyakround3 19.81 19.81 19.81 ascon128abi32v12 28.26 28.26 28.26 ascon128bi32v12 29.26 29.27 29.28 T:schwaemm256128v2 32.19 32.20 32.22 T:schwaemm256256v2 39.06 39.06 39.13 T:schwaemm192192v2 42.27 42.27 42.28 T:isapa128v20 43.80 43.83 43.84 T:grain128aeadv2 46.93 46.95 47.25 T:isapa128av20 48.06 48.09 48.15 T:schwaemm128128v2 47.72 48.12 48.17 T:giftcofb128v1 57.68 57.71 57.78 romulusn 64.56 64.61 64.65 T:tinyjambu128v2 78.94 78.99 79.92 romulusm 79.98 80.00 80.02 T:tinyjambu192v2 85.61 85.73 85.75 T:tinyjambu256v2 87.83 88.04 88.11 T:isapk128av20 113.52 114.01 114.10 T:isapk128v20 155.77 155.79 155.82 romulust 192.60 192.68 193.30 T:elephant200v2 225.11 225.73 225.95 T:isapxv20 10853.33 10857.87 10862.65 T:elephant160v2 11005.79 11008.70 11013.80 T:elephant176v2

Cycles/byte for long+long forgery 25% 50% 75% aead 2.29 2.30 2.31 T:aes128gcmv1 2.44 2.44 2.45 aes256gcmv1 9.34 9.34 9.35 ascon128av12 13.99 14.00 14.01 ascon128v12 14.02 14.02 14.03 ascon80pqv12 16.35 16.38 16.49 T:xoodyakround3 19.82 19.82 19.82 ascon128abi32v12 28.16 28.18 28.18 T:isapa128v20 28.26 28.26 28.26 ascon128bi32v12 29.27 29.27 29.28 T:schwaemm256128v2 32.18 32.20 32.22 T:schwaemm256256v2 37.29 37.35 37.63 T:isapa128av20 39.06 39.06 39.13 T:schwaemm192192v2 43.82 43.82 43.84 T:grain128aeadv2 47.71 47.99 48.12 T:giftcofb128v1 48.06 48.09 48.18 T:schwaemm128128v2 57.72 57.73 57.77 romulusn 64.57 64.61 64.66 T:tinyjambu128v2 70.04 70.10 70.13 T:isapk128av20 78.19 78.21 78.26 romulust 78.98 79.04 79.91 romulusm 79.99 80.02 80.12 T:tinyjambu192v2 85.66 85.73 85.76 T:tinyjambu256v2 87.07 87.19 87.23 T:isapk128v20 167.66 167.69 167.83 T:isapxv20 192.80 192.95 194.07 T:elephant200v2 10855.10 10860.64 10863.20 T:elephant160v2 11004.45 11007.99 11010.29 T:elephant176v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 1.50 1.50 1.50 aes256gcmv1 1.49 1.51 1.51 T:aes128gcmv1 9.25 9.26 9.28 ascon128av12 11.09 11.15 11.20 T:xoodyakround3 13.90 13.90 13.90 ascon128v12 13.90 13.90 13.90 ascon80pqv12 18.87 18.87 18.87 ascon128abi32v12 28.06 28.14 28.20 ascon128bi32v12 28.14 28.17 28.17 T:isapa128v20 29.07 29.11 29.11 T:schwaemm256128v2 31.81 31.85 31.92 T:schwaemm256256v2 37.38 37.39 37.90 T:isapa128av20 39.08 39.11 39.17 T:schwaemm192192v2 41.62 41.68 42.56 romulusm 42.89 42.92 42.93 T:grain128aeadv2 43.02 43.21 43.27 romulusn 47.90 47.98 48.09 T:schwaemm128128v2 46.56 48.05 48.13 T:giftcofb128v1 48.53 48.57 48.57 T:tinyjambu128v2 56.92 56.92 56.99 T:tinyjambu256v2 57.55 57.57 57.79 T:tinyjambu192v2 69.65 69.95 70.05 T:isapk128av20 78.06 78.06 78.06 romulust 87.15 87.32 87.44 T:isapk128v20 129.75 130.25 132.68 T:elephant200v2 167.53 167.56 167.59 T:isapxv20 7235.37 7237.49 7240.86 T:elephant160v2 7278.28 7279.23 7283.77 T:elephant176v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 1.45 1.48 1.49 T:aes128gcmv1 1.45 1.48 1.49 aes256gcmv1 9.26 9.27 9.27 ascon128av12 11.09 11.10 11.12 T:xoodyakround3 13.89 13.90 13.91 ascon128v12 13.90 13.90 13.91 ascon80pqv12 18.88 18.88 18.89 ascon128abi32v12 27.98 28.05 28.14 ascon128bi32v12 28.16 28.17 28.17 T:isapa128v20 29.07 29.10 29.11 T:schwaemm256128v2 31.78 31.86 31.94 T:schwaemm256256v2 37.21 37.30 38.00 T:isapa128av20 39.11 39.11 39.29 T:schwaemm192192v2 41.61 41.64 42.55 romulusm 42.91 42.94 42.96 T:grain128aeadv2 43.12 43.18 43.24 romulusn 47.85 47.92 48.07 T:schwaemm128128v2 48.04 48.04 48.05 T:giftcofb128v1 48.53 48.54 48.55 T:tinyjambu128v2 56.96 56.97 56.98 T:tinyjambu256v2 57.13 57.14 57.15 T:tinyjambu192v2 69.85 70.07 70.37 T:isapk128av20 78.01 78.05 78.08 romulust 86.92 87.33 87.37 T:isapk128v20 129.54 130.26 133.21 T:elephant200v2 167.54 167.55 167.61 T:isapxv20 7233.42 7236.77 7238.31 T:elephant160v2 7278.73 7280.64 7285.08 T:elephant176v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 1.46 1.48 1.48 T:aes128gcmv1 1.48 1.48 1.48 aes256gcmv1 9.26 9.26 9.27 ascon128av12 11.09 11.12 11.19 T:xoodyakround3 13.90 13.90 13.90 ascon128v12 13.90 13.90 13.92 ascon80pqv12 18.88 18.89 18.90 ascon128abi32v12 27.99 28.05 28.11 ascon128bi32v12 28.13 28.17 28.20 T:isapa128v20 29.07 29.11 29.11 T:schwaemm256128v2 31.78 31.87 31.94 T:schwaemm256256v2 37.29 37.34 37.94 T:isapa128av20 39.11 39.12 39.30 T:schwaemm192192v2 41.64 41.70 42.57 romulusm 42.95 42.97 42.98 T:grain128aeadv2 43.18 43.20 43.26 romulusn 47.87 47.96 48.07 T:schwaemm128128v2 48.04 48.04 48.05 T:giftcofb128v1 48.53 48.54 48.55 T:tinyjambu128v2 56.96 56.97 57.00 T:tinyjambu256v2 57.11 57.13 57.15 T:tinyjambu192v2 69.85 69.93 70.03 T:isapk128av20 78.00 78.05 78.09 romulust 87.07 87.28 87.50 T:isapk128v20 129.70 130.41 132.90 T:elephant200v2 167.54 167.56 167.62 T:isapxv20 7234.06 7238.81 7240.85 T:elephant160v2 7279.10 7280.32 7282.45 T:elephant176v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 2.55 2.55 2.55 T:aes128gcmv1 2.71 2.72 2.74 aes256gcmv1 9.61 9.61 9.62 ascon128av12 14.24 14.24 14.25 ascon128v12 14.24 14.24 14.24 ascon80pqv12 16.92 16.94 16.99 T:xoodyakround3 20.28 20.28 20.29 ascon128abi32v12 28.75 28.75 28.76 ascon128bi32v12 29.99 30.01 30.01 T:schwaemm256128v2 32.94 33.00 33.01 T:schwaemm256256v2 39.94 39.96 39.98 T:schwaemm192192v2 43.35 43.36 43.37 T:grain128aeadv2 47.92 48.04 48.33 T:giftcofb128v1 48.75 48.80 48.89 T:schwaemm128128v2 52.54 52.56 53.26 T:isapa128av20 58.05 58.06 58.09 romulusn 61.74 61.74 61.76 T:isapa128v20 64.60 64.61 64.68 T:tinyjambu128v2 79.62 79.67 80.43 romulusm 80.91 80.91 80.93 T:tinyjambu192v2 85.90 86.08 86.13 T:tinyjambu256v2 101.18 101.23 101.53 T:isapk128av20 158.20 158.21 158.22 romulust 196.68 197.26 200.90 T:elephant200v2 200.92 201.00 201.28 T:isapk128v20 368.16 368.37 368.72 T:isapxv20 10976.98 10981.58 10987.58 T:elephant160v2 11087.51 11088.64 11091.58 T:elephant176v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 2.53 2.54 2.56 T:aes128gcmv1 2.69 2.71 2.73 aes256gcmv1 9.60 9.60 9.60 ascon128av12 14.23 14.23 14.24 ascon128v12 14.24 14.24 14.25 ascon80pqv12 16.55 16.60 16.64 T:xoodyakround3 20.29 20.29 20.30 ascon128abi32v12 28.77 28.77 28.78 ascon128bi32v12 30.12 30.12 30.12 T:schwaemm256128v2 33.08 33.09 33.09 T:schwaemm256256v2 39.90 39.90 39.94 T:schwaemm192192v2 44.48 44.49 44.50 T:grain128aeadv2 48.50 48.65 48.67 T:giftcofb128v1 48.64 48.73 48.81 T:schwaemm128128v2 52.53 52.58 52.94 T:isapa128av20 58.20 58.21 58.24 romulusn 61.74 61.74 61.75 T:isapa128v20 65.21 65.24 65.28 T:tinyjambu128v2 79.68 79.72 80.50 romulusm 80.64 80.66 80.76 T:tinyjambu192v2 86.29 86.36 86.43 T:tinyjambu256v2 101.12 101.21 101.25 T:isapk128av20 158.19 158.20 158.25 romulust 197.07 197.26 200.83 T:elephant200v2 200.86 201.07 201.09 T:isapk128v20 367.92 367.93 368.05 T:isapxv20 10976.58 10981.79 10985.13 T:elephant160v2 11088.14 11090.20 11093.08 T:elephant176v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 2.52 2.53 2.54 T:aes128gcmv1 2.69 2.70 2.70 aes256gcmv1 9.60 9.60 9.60 ascon128av12 14.23 14.23 14.23 ascon128v12 14.24 14.24 14.25 ascon80pqv12 16.57 16.59 16.60 T:xoodyakround3 20.29 20.29 20.29 ascon128abi32v12 28.77 28.78 28.78 ascon128bi32v12 30.12 30.12 30.12 T:schwaemm256128v2 33.07 33.09 33.09 T:schwaemm256256v2 38.06 38.07 38.08 T:isapa128v20 39.89 39.90 39.95 T:schwaemm192192v2 40.34 40.51 40.88 T:isapa128av20 44.49 44.50 44.51 T:grain128aeadv2 48.50 48.65 48.67 T:giftcofb128v1 48.68 48.75 48.82 T:schwaemm128128v2 58.19 58.19 58.22 romulusn 65.14 65.15 65.19 T:tinyjambu128v2 78.21 78.24 78.31 T:isapk128av20 79.68 79.69 80.49 romulusm 80.49 80.50 80.57 romulust 80.62 80.63 80.66 T:tinyjambu192v2 86.45 86.45 86.46 T:tinyjambu256v2 133.25 133.32 133.35 T:isapk128v20 196.55 197.14 200.83 T:elephant200v2 240.43 240.45 240.66 T:isapxv20 10977.23 10981.00 10984.96 T:elephant160v2 11087.94 11089.54 11093.42 T:elephant176v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 10.20 10.38 11.23 T:aes128gcmv1 11.08 11.52 12.14 aes256gcmv1 15.34 15.64 15.79 ascon128av12 19.39 19.39 19.39 ascon128v12 19.31 19.45 19.48 ascon80pqv12 26.70 26.82 27.76 T:xoodyakround3 30.94 31.15 31.48 ascon128abi32v12 40.36 40.44 40.83 ascon128bi32v12 49.34 49.42 49.69 T:schwaemm256128v2 52.50 52.56 53.19 T:schwaemm256256v2 58.41 58.84 59.08 T:grain128aeadv2 60.53 61.33 61.89 T:giftcofb128v1 62.52 62.84 63.33 T:schwaemm128128v2 64.18 64.27 64.60 T:schwaemm192192v2 70.12 70.32 70.70 romulusn 77.27 77.34 77.98 T:tinyjambu128v2 92.52 93.20 93.85 romulusm 95.43 95.81 96.16 T:tinyjambu192v2 101.29 101.39 101.67 T:tinyjambu256v2 180.77 180.91 181.18 T:isapa128av20 213.38 213.60 215.12 romulust 281.66 286.35 289.09 T:elephant200v2 384.84 385.47 386.20 T:isapk128av20 508.98 509.34 509.77 T:isapa128v20 2179.33 2179.89 2187.30 T:isapk128v20 3598.27 3598.52 3599.02 T:isapxv20 13786.66 13789.68 13791.50 T:elephant176v2 14676.63 14684.56 14741.43 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 10.31? 10.98? 11.62? T:aes128gcmv1 11.18 11.37 12.30 aes256gcmv1 15.10 15.27 15.76 ascon128av12 19.13 19.30 19.61 ascon128v12 19.39 19.56 19.75 ascon80pqv12 25.77 25.91 26.18 T:xoodyakround3 31.17 31.25 31.72 ascon128abi32v12 40.23 40.51 40.59 ascon128bi32v12 49.17 49.20 49.32 T:schwaemm256128v2 52.33 52.34 53.04 T:schwaemm256256v2 58.47 58.59 59.23 T:grain128aeadv2 61.10 61.11 61.29 T:giftcofb128v1 62.81 62.99 63.19 T:schwaemm128128v2 64.13 64.16 64.20 T:schwaemm192192v2 70.79 70.99 71.05 romulusn 77.54 77.72 77.99 T:tinyjambu128v2 95.14 95.27 95.60 T:tinyjambu192v2 94.80 95.36 95.68 romulusm 101.88 102.05 102.39 T:tinyjambu256v2 180.73 181.40 181.54 T:isapa128av20 213.29 213.34 213.60 romulust 280.24 280.83 289.08 T:elephant200v2 384.61 385.44 386.09 T:isapk128av20 509.10 509.30 509.45 T:isapa128v20 2178.99 2179.88 2180.83 T:isapk128v20 3598.77 3598.84 3599.34 T:isapxv20 13785.84 13789.30 13847.87 T:elephant176v2 14676.54 14683.63 14684.45 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 10.31 10.32 10.52 T:aes128gcmv1 11.13 11.16 11.17 aes256gcmv1 15.10 15.10 15.45 ascon128av12 19.12 19.14 19.36 ascon128v12 19.19 19.19 19.24 ascon80pqv12 25.69 25.70 26.14 T:xoodyakround3 31.06 31.07 31.28 ascon128abi32v12 40.37 40.41 40.45 ascon128bi32v12 49.17 49.17 49.24 T:schwaemm256128v2 52.16 52.34 53.01 T:schwaemm256256v2 58.68 58.69 58.74 T:grain128aeadv2 60.91 61.12 61.12 T:giftcofb128v1 62.34 62.86 63.02 T:schwaemm128128v2 64.08 64.09 64.09 T:schwaemm192192v2 70.44 70.49 70.52 romulusn 77.09 77.14 77.47 T:tinyjambu128v2 94.41 94.73 95.38 romulusm 94.97 95.16 95.23 T:tinyjambu192v2 101.90 101.95 101.95 T:tinyjambu256v2 109.56 109.66 109.67 T:isapa128av20 132.80 132.95 133.60 romulust 250.23 251.60 252.45 T:isapk128av20 265.46 265.63 265.99 T:isapa128v20 279.92 285.34 289.18 T:elephant200v2 1173.67 1174.94 1175.70 T:isapk128v20 1883.05 1883.58 1883.84 T:isapxv20 13784.77 13788.72 13789.82 T:elephant176v2 14676.65 14684.73 14693.31 T:elephant160v2