VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Skylake (506e3); 2015 Intel Xeon E3-1220 v5; 4 x 3000MHz; samba, supercop-20260217

[Page version: 20260319 20:29:39]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.18 1.19 1.19 T:aes128gcmv1 1.43 1.44 1.45 aes256gcmv1 7.55 7.58 7.60 ascon128av12 10.91 10.95 10.97 ascon80pqv12 10.92 10.95 10.98 ascon128v12 13.94 14.05 14.08 ascon128abi32v12 15.51 15.58 15.62 T:xoodyakround3 17.54 17.59 17.63 T:schwaemm256128v2 20.51 20.84 21.09 ascon128bi32v12 23.18 23.28 23.35 T:schwaemm192192v2 23.80 23.95 23.99 T:schwaemm256256v2 24.09 24.11 24.12 T:grain128aeadv2 25.72 25.78 25.83 T:schwaemm128128v2 33.51 33.56 33.61 T:giftcofb128v1 37.47 37.50 37.53 romulusn 40.51 40.57 40.68 T:isapa128av20 43.08 43.17 43.27 T:isapa128v20 60.67 60.75 61.04 romulusm 67.77 67.78 67.78 T:tinyjambu128v2 67.96 68.09 68.25 T:isapk128av20 82.76 83.55 83.55 T:tinyjambu192v2 89.26 89.27 89.31 T:tinyjambu256v2 90.10 90.37 90.69 T:isapk128v20 131.88 131.95 132.05 romulust 166.16 166.65 168.61 T:isapxv20 179.55 179.64 179.76 T:elephant200v2 6830.52 6836.36 6838.52 T:elephant176v2 8004.45 8010.83 8013.81 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.04 1.05 1.06 T:aes128gcmv1 1.41 1.43 1.43 aes256gcmv1 7.38 7.41 7.44 ascon128av12 10.92 10.94 10.97 ascon128v12 10.93 10.95 10.97 ascon80pqv12 13.83 13.87 13.92 ascon128abi32v12 15.42 15.47 15.52 T:xoodyakround3 17.62 17.67 17.72 T:schwaemm256128v2 20.82 20.85 20.87 ascon128bi32v12 23.28 23.32 23.37 T:schwaemm192192v2 23.81 23.97 24.00 T:schwaemm256256v2 24.72 24.75 24.89 T:grain128aeadv2 25.76 25.79 25.82 T:schwaemm128128v2 33.65 33.70 33.73 T:giftcofb128v1 37.45 37.49 37.52 romulusn 40.49 40.59 40.65 T:isapa128av20 43.06 43.14 43.25 T:isapa128v20 60.66 60.75 61.22 romulusm 68.00 68.00 68.00 T:tinyjambu128v2 68.04 68.19 68.32 T:isapk128av20 83.50 83.50 83.53 T:tinyjambu192v2 89.26 89.31 89.34 T:tinyjambu256v2 90.19 90.41 90.74 T:isapk128v20 131.80 131.88 131.98 romulust 165.84 166.76 168.51 T:isapxv20 179.56 179.67 179.86 T:elephant200v2 6830.58 6835.58 6837.80 T:elephant176v2 8004.87 8011.00 8013.60 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.05 1.05 1.06 T:aes128gcmv1 1.42 1.43 1.43 aes256gcmv1 7.38 7.41 7.43 ascon128av12 10.92 10.94 10.97 ascon80pqv12 10.91 10.95 10.97 ascon128v12 13.82 13.86 13.92 ascon128abi32v12 15.43 15.47 15.51 T:xoodyakround3 17.58 17.64 17.73 T:schwaemm256128v2 20.82 20.84 20.87 ascon128bi32v12 21.53 21.58 21.63 T:isapa128v20 23.17 23.24 23.35 T:schwaemm192192v2 23.82 23.97 24.01 T:schwaemm256256v2 24.73 24.75 24.82 T:grain128aeadv2 25.75 25.79 25.82 T:schwaemm128128v2 27.31 27.35 27.40 T:isapa128av20 33.65 33.69 33.73 T:giftcofb128v1 37.46 37.49 37.53 romulusn 45.01 45.07 45.13 romulust 45.01 45.12 45.23 T:isapk128av20 56.20 56.38 56.59 T:isapk128v20 60.66 60.75 61.24 romulusm 68.00 68.00 68.00 T:tinyjambu128v2 83.50 83.51 83.53 T:tinyjambu192v2 89.26 89.26 89.28 T:tinyjambu256v2 97.17 97.56 97.82 T:isapxv20 179.61 179.68 179.80 T:elephant200v2 6830.28 6835.82 6837.72 T:elephant176v2 8004.89 8010.68 8013.72 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.80 0.80 0.81 T:aes128gcmv1 0.92 0.93 0.94 aes256gcmv1 7.47 7.49 7.51 ascon128av12 10.93 10.95 10.97 ascon128v12 10.94 10.96 10.98 ascon80pqv12 11.76 11.78 11.81 T:xoodyakround3 13.95 13.97 13.99 ascon128abi32v12 17.50 17.54 17.58 T:schwaemm256128v2 20.65 20.72 20.91 ascon128bi32v12 23.08 23.17 23.45 T:schwaemm192192v2 23.71 23.86 23.90 T:schwaemm256256v2 24.12 24.13 24.14 T:grain128aeadv2 25.61 25.63 25.66 T:schwaemm128128v2 30.39 30.42 30.44 romulusn 32.36 32.42 32.46 T:isapa128v20 33.70 33.73 33.75 T:giftcofb128v1 33.95 33.99 34.02 T:isapa128av20 42.02 42.06 42.34 romulusm 55.45 55.46 55.46 T:tinyjambu128v2 56.56 56.69 56.87 T:isapk128av20 63.45 63.45 63.45 T:tinyjambu192v2 67.38 67.39 67.43 T:tinyjambu256v2 73.23 73.36 73.93 T:isapk128v20 88.38 88.43 88.49 romulust 131.85 132.08 133.43 T:isapxv20 134.22 134.28 134.88 T:elephant200v2 5101.21 5103.32 5110.13 T:elephant176v2 6003.51 6004.19 6007.28 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.72 0.73 0.74 T:aes128gcmv1 0.91 0.91 0.92 aes256gcmv1 7.37 7.40 7.44 ascon128av12 10.91 10.93 10.95 ascon128v12 10.92 10.95 10.97 ascon80pqv12 11.70 11.72 11.75 T:xoodyakround3 13.82 13.84 13.87 ascon128abi32v12 17.52 17.57 17.61 T:schwaemm256128v2 20.60 20.74 20.89 ascon128bi32v12 23.07 23.12 23.20 T:schwaemm192192v2 23.72 23.87 23.90 T:schwaemm256256v2 24.60 24.62 24.65 T:grain128aeadv2 25.60 25.63 25.67 T:schwaemm128128v2 30.38 30.41 30.44 romulusn 32.35 32.39 32.45 T:isapa128v20 33.78 33.81 33.84 T:giftcofb128v1 33.94 33.98 34.01 T:isapa128av20 42.01 42.09 42.54 romulusm 55.57 55.57 55.58 T:tinyjambu128v2 56.60 56.70 56.80 T:isapk128av20 63.38 63.38 63.38 T:tinyjambu192v2 67.42 67.42 67.46 T:tinyjambu256v2 73.26 73.41 73.81 T:isapk128v20 88.37 88.42 88.52 romulust 131.63 132.19 133.50 T:isapxv20 134.23 134.28 134.92 T:elephant200v2 5101.13 5102.90 5106.95 T:elephant176v2 6003.49 6004.34 6007.73 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.73 0.73 0.73 T:aes128gcmv1 0.91 0.91 0.92 aes256gcmv1 7.37 7.41 7.44 ascon128av12 10.90 10.93 10.94 ascon128v12 10.94 10.96 10.98 ascon80pqv12 11.70 11.72 11.75 T:xoodyakround3 13.82 13.86 13.88 ascon128abi32v12 17.55 17.58 17.61 T:schwaemm256128v2 20.60 20.71 20.89 ascon128bi32v12 21.59 21.62 21.67 T:isapa128v20 23.08 23.17 23.24 T:schwaemm192192v2 23.74 23.87 23.91 T:schwaemm256256v2 24.59 24.61 24.64 T:grain128aeadv2 25.61 25.64 25.68 T:schwaemm128128v2 27.34 27.37 27.39 T:isapa128av20 30.38 30.40 30.43 romulusn 33.78 33.81 33.84 T:giftcofb128v1 42.03 42.10 42.52 romulusm 44.99 45.02 45.08 romulust 45.08 45.17 45.23 T:isapk128av20 55.57 55.60 55.61 T:tinyjambu128v2 56.29 56.40 56.53 T:isapk128v20 63.38 63.38 63.38 T:tinyjambu192v2 67.38 67.39 67.39 T:tinyjambu256v2 97.24 97.53 98.20 T:isapxv20 134.24 134.30 134.94 T:elephant200v2 5101.07 5102.77 5106.15 T:elephant176v2 6003.46 6004.30 6007.83 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.41 0.41 0.42 aes256gcmv1 0.41 0.42 0.43 T:aes128gcmv1 7.37 7.40 7.42 ascon128av12 8.01 8.05 8.07 T:xoodyakround3 10.87 10.93 10.96 ascon128v12 10.93 10.96 10.98 ascon80pqv12 13.80 13.83 13.84 ascon128abi32v12 17.40 17.46 17.50 T:schwaemm256128v2 20.42 20.79 20.92 ascon128bi32v12 21.56 21.62 21.69 T:isapa128v20 22.90 22.99 23.05 T:schwaemm192192v2 23.29 23.33 23.36 romulusn 23.30 23.36 23.57 romulusm 23.59 23.74 23.79 T:schwaemm256256v2 24.11 24.12 24.14 T:grain128aeadv2 25.40 25.45 25.50 T:schwaemm128128v2 27.31 27.35 27.42 T:isapa128av20 33.87 33.93 33.97 T:giftcofb128v1 43.13 43.13 43.14 T:tinyjambu128v2 43.39 43.40 43.40 T:tinyjambu192v2 44.86 44.90 44.96 romulust 44.98 45.09 45.19 T:isapk128av20 45.50 45.50 45.51 T:tinyjambu256v2 56.12 56.28 56.40 T:isapk128v20 89.23 89.26 89.32 T:elephant200v2 97.37 97.58 99.00 T:isapxv20 3371.14 3375.03 3377.99 T:elephant176v2 3998.36 4002.70 4003.39 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.40 0.41 0.41 aes256gcmv1 0.40 0.41 0.41 T:aes128gcmv1 7.33 7.39 7.45 ascon128av12 8.01 8.04 8.05 T:xoodyakround3 10.87 10.89 10.92 ascon128v12 10.91 10.95 10.98 ascon80pqv12 13.79 13.82 13.84 ascon128abi32v12 17.42 17.47 17.52 T:schwaemm256128v2 20.35 20.48 20.92 ascon128bi32v12 21.56 21.63 21.70 T:isapa128v20 22.89 22.97 23.04 T:schwaemm192192v2 23.27 23.31 23.35 romulusn 23.28 23.33 23.71 romulusm 23.60 23.76 23.79 T:schwaemm256256v2 24.39 24.41 24.43 T:grain128aeadv2 25.40 25.45 25.48 T:schwaemm128128v2 27.28 27.32 27.37 T:isapa128av20 33.84 33.88 33.93 T:giftcofb128v1 43.13 43.13 43.14 T:tinyjambu128v2 43.25 43.25 43.26 T:tinyjambu192v2 44.84 44.88 44.93 romulust 45.04 45.16 45.28 T:isapk128av20 45.50 45.50 45.50 T:tinyjambu256v2 56.17 56.29 56.46 T:isapk128v20 89.22 89.25 89.30 T:elephant200v2 97.14 97.59 97.90 T:isapxv20 3371.60 3375.03 3377.97 T:elephant176v2 3999.23 4003.01 4003.55 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.40 0.41 0.42 aes256gcmv1 0.41 0.41 0.41 T:aes128gcmv1 7.33 7.36 7.42 ascon128av12 8.01 8.05 8.07 T:xoodyakround3 10.87 10.89 10.91 ascon128v12 10.92 10.95 10.98 ascon80pqv12 13.79 13.82 13.84 ascon128abi32v12 17.37 17.43 17.48 T:schwaemm256128v2 20.35 20.41 20.79 ascon128bi32v12 21.58 21.63 21.68 T:isapa128v20 22.85 22.92 22.98 T:schwaemm192192v2 23.28 23.32 23.36 romulusn 23.29 23.35 23.80 romulusm 23.59 23.75 23.79 T:schwaemm256256v2 24.40 24.42 24.44 T:grain128aeadv2 25.41 25.44 25.48 T:schwaemm128128v2 27.28 27.33 27.37 T:isapa128av20 33.84 33.88 33.92 T:giftcofb128v1 43.13 43.13 43.14 T:tinyjambu128v2 43.25 43.25 43.26 T:tinyjambu192v2 44.85 44.89 44.94 romulust 45.02 45.13 45.21 T:isapk128av20 45.50 45.50 45.51 T:tinyjambu256v2 56.19 56.32 56.53 T:isapk128v20 89.21 89.25 89.31 T:elephant200v2 97.24 97.66 97.93 T:isapxv20 3371.41 3375.01 3378.42 T:elephant176v2 3999.82 4002.98 4003.47 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.95 0.95 0.96 T:aes128gcmv1 1.11 1.11 1.12 aes256gcmv1 7.66 7.67 7.69 ascon128av12 11.08 11.11 11.13 ascon128v12 11.11 11.12 11.14 ascon80pqv12 11.84 11.86 11.89 T:xoodyakround3 14.26 14.28 14.31 ascon128abi32v12 18.01 18.03 18.07 T:schwaemm256128v2 20.99 21.02 21.06 ascon128bi32v12 23.57 23.63 23.70 T:schwaemm192192v2 24.36 24.49 24.51 T:schwaemm256256v2 24.54 24.55 24.56 T:grain128aeadv2 25.97 26.00 26.02 T:schwaemm128128v2 30.81 30.83 30.86 romulusn 34.03 34.06 34.09 T:giftcofb128v1 36.10 36.14 36.19 T:isapa128av20 42.46 42.51 42.76 romulusm 47.44 47.48 47.51 T:isapa128v20 55.88 55.88 55.89 T:tinyjambu128v2 63.90 63.90 63.90 T:tinyjambu192v2 64.15 64.22 64.31 T:isapk128av20 67.87 67.87 67.88 T:tinyjambu256v2 89.80 89.83 89.89 romulust 128.22 128.30 128.48 T:isapk128v20 137.03 137.07 137.13 T:elephant200v2 214.32 214.51 215.56 T:isapxv20 5140.39 5142.38 5143.91 T:elephant176v2 6071.68 6072.07 6073.27 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.88 0.88 0.89 T:aes128gcmv1 1.10 1.10 1.11 aes256gcmv1 7.57 7.58 7.61 ascon128av12 11.08 11.09 11.11 ascon128v12 11.11 11.13 11.14 ascon80pqv12 11.82 11.84 11.88 T:xoodyakround3 14.14 14.17 14.19 ascon128abi32v12 18.05 18.10 18.12 T:schwaemm256128v2 20.93 20.98 21.18 ascon128bi32v12 23.61 23.66 23.72 T:schwaemm192192v2 24.38 24.50 24.52 T:schwaemm256256v2 25.01 25.03 25.04 T:grain128aeadv2 25.96 25.99 26.02 T:schwaemm128128v2 30.81 30.83 30.86 romulusn 34.16 34.18 34.21 T:giftcofb128v1 36.11 36.13 36.18 T:isapa128av20 42.54 42.60 43.00 romulusm 47.45 47.49 47.52 T:isapa128v20 55.99 55.99 56.00 T:tinyjambu128v2 63.83 63.83 63.83 T:tinyjambu192v2 64.24 64.31 64.41 T:isapk128av20 67.89 67.92 67.93 T:tinyjambu256v2 89.76 89.81 89.86 romulust 128.24 128.31 128.99 T:isapk128v20 137.05 137.09 137.65 T:elephant200v2 214.09 214.32 215.51 T:isapxv20 5140.49 5142.27 5143.88 T:elephant176v2 6071.87 6072.28 6073.27 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.88 0.88 0.89 T:aes128gcmv1 1.10 1.10 1.10 aes256gcmv1 7.57 7.58 7.61 ascon128av12 11.08 11.09 11.11 ascon128v12 11.09 11.11 11.13 ascon80pqv12 11.82 11.84 11.86 T:xoodyakround3 14.14 14.17 14.20 ascon128abi32v12 18.04 18.07 18.11 T:schwaemm256128v2 20.91 20.97 21.15 ascon128bi32v12 23.60 23.64 23.68 T:schwaemm192192v2 24.36 24.49 24.52 T:schwaemm256256v2 25.01 25.02 25.03 T:grain128aeadv2 25.96 25.98 25.99 T:schwaemm128128v2 28.59 28.62 28.64 T:isapa128av20 29.27 29.30 29.33 T:isapa128v20 30.82 30.84 30.87 romulusn 34.15 34.17 34.21 T:giftcofb128v1 42.56 42.59 42.99 romulusm 46.28 46.30 46.33 romulust 49.46 49.50 49.57 T:isapk128av20 55.99 55.99 56.00 T:tinyjambu128v2 63.83 63.83 63.83 T:tinyjambu192v2 67.87 67.88 67.89 T:tinyjambu256v2 84.49 84.57 84.70 T:isapk128v20 137.02 137.08 137.21 T:elephant200v2 139.47 139.61 139.79 T:isapxv20 5140.66 5142.59 5144.68 T:elephant176v2 6071.92 6072.35 6073.46 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 5.86 5.91 5.94 T:aes128gcmv1 7.84 7.89 7.96 aes256gcmv1 11.64 11.72 12.07 ascon128av12 14.74 14.83 15.02 ascon128v12 14.83 14.95 15.29 ascon80pqv12 17.05 17.15 17.25 T:xoodyakround3 21.25 21.40 21.53 ascon128abi32v12 27.72 27.88 28.20 ascon128bi32v12 29.40 29.59 29.78 T:schwaemm256128v2 33.30 33.53 33.75 T:schwaemm128128v2 34.15 34.20 34.26 T:grain128aeadv2 38.14 38.30 38.59 T:schwaemm192192v2 38.38 38.61 38.73 T:schwaemm256256v2 40.25 40.41 40.65 romulusn 41.44 41.54 41.68 T:giftcofb128v1 52.52 52.80 53.09 romulusm 65.49 65.51 65.57 T:tinyjambu128v2 74.22 74.23 74.26 T:tinyjambu192v2 79.02 79.04 79.12 T:tinyjambu256v2 85.66 85.80 86.07 T:isapa128av20 121.12 121.31 121.57 romulust 193.63 193.76 193.99 T:elephant200v2 223.83 224.86 225.97 T:isapk128av20 393.42 393.86 394.45 T:isapa128v20 1370.58 1371.52 1372.37 T:isapk128v20 2082.45 2088.01 2089.16 T:isapxv20 6385.48 6387.69 6433.99 T:elephant176v2 8111.69 8115.88 8177.68 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 5.94 5.98 6.02 T:aes128gcmv1 8.09 8.15 8.27 aes256gcmv1 11.61 11.75 12.08 ascon128av12 14.78 14.89 15.09 ascon128v12 14.81 14.91 15.04 ascon80pqv12 16.99 17.10 17.16 T:xoodyakround3 21.13 21.21 21.52 ascon128abi32v12 27.85 27.97 28.15 ascon128bi32v12 29.34 29.54 29.72 T:schwaemm256128v2 33.27 33.47 33.70 T:schwaemm128128v2 34.54 34.60 34.68 T:grain128aeadv2 38.10 38.24 38.56 T:schwaemm192192v2 38.48 38.70 38.80 T:schwaemm256256v2 40.43 40.59 40.92 romulusn 42.42 42.56 42.73 T:giftcofb128v1 54.32 54.61 54.93 romulusm 65.65 65.67 65.74 T:tinyjambu128v2 74.22 74.24 74.25 T:tinyjambu192v2 79.11 79.13 79.18 T:tinyjambu256v2 85.67 85.82 86.08 T:isapa128av20 121.05 121.18 121.37 romulust 193.49 193.61 193.81 T:elephant200v2 224.45 225.14 225.91 T:isapk128av20 393.46 394.04 394.71 T:isapa128v20 1371.13 1371.90 1373.02 T:isapk128v20 2078.61 2080.90 2088.78 T:isapxv20 6385.77 6388.09 6434.11 T:elephant176v2 8112.26 8115.12 8175.98 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 5.92 5.96 5.99 T:aes128gcmv1 8.09 8.14 8.25 aes256gcmv1 11.59 11.65 11.85 ascon128av12 14.75 14.83 14.99 ascon128v12 14.77 14.86 14.99 ascon80pqv12 17.08 17.15 17.26 T:xoodyakround3 21.16 21.24 21.39 ascon128abi32v12 27.84 27.94 28.13 ascon128bi32v12 29.22 29.33 29.48 T:schwaemm256128v2 33.23 33.43 33.65 T:schwaemm128128v2 34.58 34.62 34.69 T:grain128aeadv2 38.14 38.24 38.34 T:schwaemm192192v2 38.37 38.68 38.76 T:schwaemm256256v2 40.51 40.67 40.86 romulusn 42.40 42.54 42.69 T:giftcofb128v1 54.40 54.63 54.94 romulusm 57.06 57.20 57.41 T:isapa128av20 65.65 65.66 65.67 T:tinyjambu128v2 74.20 74.22 74.23 T:tinyjambu192v2 75.70 75.83 75.99 romulust 79.10 79.11 79.13 T:tinyjambu256v2 138.53 139.02 139.59 T:isapk128av20 193.50 193.60 193.75 T:elephant200v2 204.81 205.13 205.54 T:isapa128v20 717.96 718.54 719.42 T:isapk128v20 1087.76 1088.91 1092.26 T:isapxv20 6385.89 6388.09 6430.33 T:elephant176v2 8112.47 8115.64 8175.48 T:elephant160v2