VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Skylake (506e3); 2015 Intel Core i3-6100; 2 x 3700MHz; skydell, supercop-20260330

[Page version: 20260522 07:41:11]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.19 1.20 1.21 T:aes128gcmv1 1.44 1.45 1.46 aes256gcmv1 7.55 7.58 7.62 ascon128av12 10.87 10.90 10.92 ascon128v12 10.87 10.90 10.95 ascon80pqv12 13.97 14.17 14.20 ascon128abi32v12 15.70 15.75 15.80 T:xoodyakround3 17.75 17.80 17.85 T:schwaemm256128v2 20.76 20.94 21.27 ascon128bi32v12 23.15 23.23 23.80 T:schwaemm256256v2 23.33 23.39 23.44 T:schwaemm192192v2 24.18 24.24 24.29 T:grain128aeadv2 25.47 25.74 25.79 T:schwaemm128128v2 33.66 33.70 33.75 T:giftcofb128v1 37.80 37.83 37.86 romulusn 40.64 40.70 40.75 T:isapa128av20 42.79 42.86 42.94 T:isapa128v20 60.65 60.78 60.90 romulusm 67.88 67.89 67.91 T:tinyjambu128v2 67.88 68.01 68.14 T:isapk128av20 82.84 83.50 83.50 T:tinyjambu192v2 89.33 89.33 89.35 T:tinyjambu256v2 90.37 90.55 90.79 T:isapk128v20 128.28 128.36 128.43 romulust 167.76 168.07 168.31 T:isapxv20 171.19 171.27 171.35 T:elephant200v2 6813.81 6814.74 6817.29 T:elephant176v2 7972.97 7973.50 7974.12 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.04 1.05 1.06 T:aes128gcmv1 1.45 1.46 1.48 aes256gcmv1 7.38 7.40 7.43 ascon128av12 10.86 10.88 10.91 ascon128v12 10.87 10.90 10.94 ascon80pqv12 13.85 13.88 13.94 ascon128abi32v12 15.47 15.52 15.57 T:xoodyakround3 17.76 17.81 17.87 T:schwaemm256128v2 21.04 21.06 21.08 ascon128bi32v12 23.14 23.21 23.80 T:schwaemm256256v2 23.33 23.38 23.44 T:schwaemm192192v2 24.62 24.65 24.68 T:grain128aeadv2 25.49 25.78 25.84 T:schwaemm128128v2 33.79 33.83 33.88 T:giftcofb128v1 37.89 38.10 38.16 romulusn 40.60 40.66 40.73 T:isapa128av20 42.80 42.87 42.94 T:isapa128v20 60.61 60.73 60.90 romulusm 67.89 67.90 67.94 T:tinyjambu128v2 67.90 68.05 68.21 T:isapk128av20 83.38 83.39 83.40 T:tinyjambu192v2 89.25 89.25 89.26 T:tinyjambu256v2 90.37 90.57 90.76 T:isapk128v20 128.28 128.35 128.43 romulust 167.00 167.81 168.93 T:isapxv20 171.23 171.30 171.36 T:elephant200v2 6814.05 6814.79 6817.30 T:elephant176v2 7972.93 7973.53 7973.97 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.04 1.05 1.06 T:aes128gcmv1 1.45 1.46 1.48 aes256gcmv1 7.38 7.41 7.43 ascon128av12 10.86 10.89 10.91 ascon128v12 10.86 10.90 10.94 ascon80pqv12 13.83 13.86 13.91 ascon128abi32v12 15.51 15.56 15.60 T:xoodyakround3 17.73 17.78 17.84 T:schwaemm256128v2 21.03 21.06 21.08 ascon128bi32v12 21.41 21.45 21.50 T:isapa128v20 23.14 23.21 23.80 T:schwaemm256256v2 23.34 23.39 23.45 T:schwaemm192192v2 24.63 24.65 24.68 T:grain128aeadv2 25.50 25.78 25.83 T:schwaemm128128v2 27.41 27.46 27.50 T:isapa128av20 33.78 33.82 33.86 T:giftcofb128v1 37.49 37.88 38.15 romulusn 43.83 43.88 43.93 romulust 45.11 45.21 45.32 T:isapk128av20 56.30 56.44 56.64 T:isapk128v20 60.62 60.73 60.88 romulusm 67.89 67.90 67.94 T:tinyjambu128v2 83.39 83.39 83.40 T:tinyjambu192v2 89.25 89.25 89.28 T:tinyjambu256v2 98.21 98.69 99.14 T:isapxv20 171.21 171.31 171.35 T:elephant200v2 6814.08 6814.85 6817.32 T:elephant176v2 7973.20 7973.73 7974.31 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.80 0.81 0.82 T:aes128gcmv1 0.93 0.93 0.94 aes256gcmv1 7.46 7.48 7.50 ascon128av12 10.88 10.90 10.93 ascon128v12 10.90 10.93 10.97 ascon80pqv12 11.85 11.88 11.90 T:xoodyakround3 14.02 14.07 14.09 ascon128abi32v12 17.62 17.66 17.69 T:schwaemm256128v2 20.85 20.92 21.09 ascon128bi32v12 23.04 23.11 23.72 T:schwaemm256256v2 23.18 23.21 23.24 T:schwaemm192192v2 24.19 24.24 24.25 T:grain128aeadv2 25.38 25.63 25.66 T:schwaemm128128v2 30.29 30.40 30.48 romulusn 32.17 32.21 32.24 T:isapa128v20 34.08 34.12 34.15 T:isapa128av20 34.24 34.28 34.31 T:giftcofb128v1 41.71 41.82 41.90 romulusm 55.51 55.51 55.52 T:tinyjambu128v2 56.46 56.54 56.64 T:isapk128av20 63.39 63.40 63.40 T:tinyjambu192v2 67.41 67.41 67.42 T:tinyjambu256v2 73.36 73.45 73.55 T:isapk128v20 85.99 86.03 86.08 romulust 127.79 127.84 127.87 T:elephant200v2 133.02 133.28 133.49 T:isapxv20 5089.35 5089.73 5091.01 T:elephant176v2 5978.37 5978.85 5979.29 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.73 0.74 0.74 T:aes128gcmv1 0.93 0.94 0.95 aes256gcmv1 7.37 7.39 7.42 ascon128av12 10.84 10.87 10.89 ascon128v12 10.88 10.91 10.96 ascon80pqv12 11.75 11.78 11.80 T:xoodyakround3 13.89 13.91 13.94 ascon128abi32v12 17.62 17.67 17.70 T:schwaemm256128v2 20.80 20.85 21.01 ascon128bi32v12 23.05 23.12 23.73 T:schwaemm256256v2 23.20 23.24 23.28 T:schwaemm192192v2 24.40 24.44 24.46 T:grain128aeadv2 25.42 25.64 25.67 T:schwaemm128128v2 30.34 30.52 30.65 romulusn 32.16 32.20 32.24 T:isapa128v20 34.06 34.11 34.15 T:isapa128av20 34.31 34.36 34.39 T:giftcofb128v1 41.69 41.83 41.94 romulusm 55.52 55.52 55.53 T:tinyjambu128v2 56.46 56.57 56.66 T:isapk128av20 63.35 63.35 63.36 T:tinyjambu192v2 67.37 67.38 67.38 T:tinyjambu256v2 73.33 73.47 73.58 T:isapk128v20 85.97 86.01 86.06 romulust 127.80 127.85 127.87 T:elephant200v2 132.78 132.99 133.65 T:isapxv20 5089.27 5089.66 5090.94 T:elephant176v2 5978.32 5978.84 5979.25 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.73 0.74 0.74 T:aes128gcmv1 0.93 0.93 0.95 aes256gcmv1 7.37 7.39 7.40 ascon128av12 10.85 10.87 10.89 ascon128v12 10.88 10.90 10.94 ascon80pqv12 11.78 11.80 11.82 T:xoodyakround3 13.90 13.91 13.96 ascon128abi32v12 17.63 17.66 17.70 T:schwaemm256128v2 20.82 20.91 21.05 ascon128bi32v12 21.46 21.50 21.54 T:isapa128v20 23.05 23.11 23.72 T:schwaemm256256v2 23.20 23.22 23.26 T:schwaemm192192v2 24.41 24.44 24.47 T:grain128aeadv2 25.40 25.64 25.69 T:schwaemm128128v2 27.44 27.47 27.50 T:isapa128av20 30.38 30.52 30.63 romulusn 34.30 34.34 34.38 T:giftcofb128v1 41.74 41.82 41.89 romulusm 43.75 43.78 43.81 romulust 45.08 45.16 45.24 T:isapk128av20 55.52 55.52 55.53 T:tinyjambu128v2 56.29 56.40 56.47 T:isapk128v20 63.35 63.35 63.35 T:tinyjambu192v2 67.38 67.38 67.38 T:tinyjambu256v2 98.32 98.62 98.87 T:isapxv20 127.81 127.87 127.90 T:elephant200v2 5089.34 5089.72 5090.88 T:elephant176v2 5978.33 5978.77 5979.18 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.41 0.42 0.43 T:aes128gcmv1 0.42 0.42 0.43 aes256gcmv1 7.35 7.37 7.39 ascon128av12 8.09 8.11 8.14 T:xoodyakround3 10.78 10.88 10.91 ascon128v12 10.90 10.94 10.97 ascon80pqv12 13.92 13.93 13.95 ascon128abi32v12 17.47 17.52 17.57 T:schwaemm256128v2 20.52 20.66 21.01 ascon128bi32v12 21.48 21.52 21.56 T:isapa128v20 22.93 22.99 23.05 T:schwaemm192192v2 22.77 23.00 23.13 romulusm 22.95 23.01 23.60 T:schwaemm256256v2 22.85 23.07 23.29 romulusn 24.20 24.24 24.27 T:grain128aeadv2 25.25 25.47 25.54 T:schwaemm128128v2 27.43 27.47 27.54 T:isapa128av20 34.79 34.89 34.95 T:giftcofb128v1 43.13 43.14 43.14 T:tinyjambu128v2 43.29 43.30 43.31 T:tinyjambu192v2 43.56 43.59 43.64 romulust 44.83 44.92 45.03 T:isapk128av20 45.50 45.50 45.51 T:tinyjambu256v2 56.05 56.24 56.42 T:isapk128v20 84.86 84.88 84.91 T:elephant200v2 98.56 98.80 98.94 T:isapxv20 3364.76 3365.20 3366.23 T:elephant176v2 3984.76 3985.23 3985.68 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.41 0.42 0.43 T:aes128gcmv1 0.41 0.42 0.43 aes256gcmv1 7.34 7.37 7.42 ascon128av12 8.09 8.11 8.14 T:xoodyakround3 10.81 10.83 10.86 ascon128v12 10.86 10.92 10.97 ascon80pqv12 13.91 13.93 13.95 ascon128abi32v12 17.47 17.51 17.57 T:schwaemm256128v2 20.55 20.80 21.03 ascon128bi32v12 21.47 21.52 21.57 T:isapa128v20 22.76 22.93 23.12 romulusm 22.93 23.00 23.58 T:schwaemm256256v2 22.95 23.01 23.07 T:schwaemm192192v2 22.79 23.02 23.16 romulusn 24.13 24.21 24.24 T:grain128aeadv2 25.24 25.47 25.53 T:schwaemm128128v2 27.43 27.46 27.50 T:isapa128av20 34.80 34.91 34.95 T:giftcofb128v1 43.13 43.14 43.14 T:tinyjambu128v2 43.32 43.35 43.35 T:tinyjambu192v2 43.56 43.62 43.68 romulust 44.84 44.94 45.03 T:isapk128av20 45.50 45.50 45.51 T:tinyjambu256v2 56.11 56.24 56.38 T:isapk128v20 84.86 84.88 84.90 T:elephant200v2 98.15 98.62 99.12 T:isapxv20 3364.76 3365.12 3366.33 T:elephant176v2 3984.86 3985.24 3985.56 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.41 0.42 0.43 aes256gcmv1 0.42 0.42 0.43 T:aes128gcmv1 7.33 7.38 7.43 ascon128av12 8.10 8.12 8.14 T:xoodyakround3 10.81 10.85 10.87 ascon128v12 10.85 10.91 10.95 ascon80pqv12 13.91 13.93 13.95 ascon128abi32v12 17.47 17.52 17.56 T:schwaemm256128v2 20.56 20.74 21.04 ascon128bi32v12 21.48 21.53 21.58 T:isapa128v20 22.76 22.92 23.14 romulusm 22.94 23.00 23.59 T:schwaemm256256v2 22.96 23.01 23.05 T:schwaemm192192v2 22.79 23.03 23.24 romulusn 24.13 24.22 24.24 T:grain128aeadv2 25.22 25.48 25.54 T:schwaemm128128v2 27.42 27.46 27.50 T:isapa128av20 34.81 34.92 34.97 T:giftcofb128v1 43.13 43.14 43.14 T:tinyjambu128v2 43.32 43.34 43.35 T:tinyjambu192v2 43.55 43.59 43.63 romulust 44.83 44.92 45.06 T:isapk128av20 45.50 45.50 45.51 T:tinyjambu256v2 56.12 56.26 56.45 T:isapk128v20 84.87 84.91 84.96 T:elephant200v2 98.10 98.70 99.14 T:isapxv20 3364.83 3365.20 3366.40 T:elephant176v2 3984.71 3985.24 3985.58 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.96 0.96 0.97 T:aes128gcmv1 1.11 1.12 1.12 aes256gcmv1 7.65 7.67 7.68 ascon128av12 11.06 11.08 11.09 ascon128v12 11.08 11.10 11.13 ascon80pqv12 12.01 12.02 12.03 T:xoodyakround3 14.36 14.39 14.41 ascon128abi32v12 18.18 18.22 18.24 T:schwaemm256128v2 21.18 21.22 21.40 ascon128bi32v12 23.73 23.75 24.31 T:schwaemm256256v2 23.72 23.75 23.77 T:schwaemm192192v2 24.62 24.65 24.67 T:grain128aeadv2 25.75 25.97 26.01 T:schwaemm128128v2 30.63 30.73 30.78 romulusn 34.58 34.60 34.64 T:giftcofb128v1 36.25 36.28 36.31 T:isapa128av20 42.00 42.10 42.17 romulusm 47.23 47.26 47.29 T:isapa128v20 55.93 55.93 55.94 T:tinyjambu128v2 63.66 63.85 63.86 T:tinyjambu192v2 64.01 64.06 64.14 T:isapk128av20 67.90 67.91 67.92 T:tinyjambu256v2 87.36 87.39 87.42 romulust 128.19 128.26 128.32 T:isapk128v20 130.49 130.53 130.55 T:elephant200v2 215.75 215.87 215.98 T:isapxv20 5128.20 5128.50 5129.48 T:elephant176v2 6045.77 6046.05 6046.42 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.89 0.89 0.89 T:aes128gcmv1 1.11 1.12 1.13 aes256gcmv1 7.56 7.57 7.59 ascon128av12 11.02 11.04 11.05 ascon128v12 11.06 11.08 11.12 ascon80pqv12 11.89 11.91 11.93 T:xoodyakround3 14.22 14.23 14.27 ascon128abi32v12 18.19 18.21 18.25 T:schwaemm256128v2 21.12 21.17 21.30 ascon128bi32v12 23.73 23.76 24.33 T:schwaemm256256v2 23.74 23.76 23.79 T:schwaemm192192v2 24.82 24.84 24.86 T:grain128aeadv2 25.78 26.00 26.04 T:schwaemm128128v2 30.69 30.84 30.94 romulusn 34.63 34.67 34.72 T:giftcofb128v1 36.25 36.28 36.32 T:isapa128av20 42.06 42.12 42.23 romulusm 47.24 47.26 47.30 T:isapa128v20 55.94 55.95 55.99 T:tinyjambu128v2 63.80 63.81 63.82 T:tinyjambu192v2 64.06 64.12 64.17 T:isapk128av20 67.87 67.87 67.87 T:tinyjambu256v2 87.33 87.37 87.41 romulust 128.19 128.25 128.31 T:isapk128v20 130.51 130.54 130.56 T:elephant200v2 215.80 216.30 216.40 T:isapxv20 5128.21 5128.47 5129.54 T:elephant176v2 6045.75 6046.01 6046.42 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.88 0.89 0.89 T:aes128gcmv1 1.11 1.12 1.13 aes256gcmv1 7.56 7.58 7.59 ascon128av12 11.02 11.04 11.05 ascon128v12 11.06 11.08 11.12 ascon80pqv12 11.93 11.95 11.97 T:xoodyakround3 14.22 14.25 14.29 ascon128abi32v12 18.20 18.23 18.25 T:schwaemm256128v2 21.12 21.15 21.31 ascon128bi32v12 23.73 23.76 24.32 T:schwaemm256256v2 23.73 23.76 23.79 T:schwaemm192192v2 24.82 24.84 24.86 T:grain128aeadv2 25.76 25.98 26.02 T:schwaemm128128v2 28.71 28.73 28.75 T:isapa128av20 29.16 29.18 29.20 T:isapa128v20 30.68 30.86 30.96 romulusn 34.64 34.68 34.71 T:giftcofb128v1 42.06 42.13 42.20 romulusm 45.02 45.05 45.08 romulust 49.46 49.50 49.56 T:isapk128av20 55.94 55.96 55.99 T:tinyjambu128v2 63.80 63.81 63.82 T:tinyjambu192v2 67.87 67.87 67.87 T:tinyjambu256v2 84.49 84.52 84.60 T:isapk128v20 130.52 130.55 130.57 T:elephant200v2 140.88 141.10 141.18 T:isapxv20 5128.18 5128.44 5129.60 T:elephant176v2 6045.82 6046.22 6046.55 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 5.93 5.96 6.02 T:aes128gcmv1 6.80 6.85 6.91 aes256gcmv1 11.62 11.71 12.04 ascon128av12 14.71 14.79 15.00 ascon128v12 14.83 14.91 15.22 ascon80pqv12 17.36 17.45 17.56 T:xoodyakround3 21.52 21.62 21.82 ascon128abi32v12 27.82 27.91 28.14 ascon128bi32v12 29.48 29.63 29.91 T:schwaemm256128v2 33.15 33.48 33.72 T:schwaemm128128v2 34.11 34.16 34.23 T:grain128aeadv2 36.90 37.00 37.14 romulusn 37.55 37.73 38.66 T:schwaemm256256v2 38.13 38.48 38.79 T:schwaemm192192v2 42.11 42.27 42.43 T:giftcofb128v1 49.55 49.70 49.88 romulusm 65.52 65.55 65.69 T:tinyjambu128v2 74.21 74.23 74.26 T:tinyjambu192v2 79.12 79.15 79.26 T:tinyjambu256v2 85.90 86.18 86.44 T:isapa128av20 118.04 118.21 118.47 romulust 184.56 184.65 184.84 T:elephant200v2 222.39 223.17 224.26 T:isapk128av20 392.44 392.86 393.40 T:isapa128v20 1369.18 1369.79 1371.15 T:isapk128v20 2086.41 2088.35 2090.42 T:isapxv20 6386.46 6387.53 6390.29 T:elephant176v2 8098.53 8099.89 8101.10 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 5.88 5.96 6.02 T:aes128gcmv1 6.96 7.01 7.09 aes256gcmv1 11.57 11.66 11.94 ascon128av12 14.78 14.87 15.19 ascon128v12 14.83 14.93 15.15 ascon80pqv12 17.17 17.29 17.48 T:xoodyakround3 21.33 21.42 21.66 ascon128abi32v12 28.07 28.16 28.39 ascon128bi32v12 29.50 29.63 29.86 T:schwaemm256128v2 33.14 33.32 33.56 T:schwaemm128128v2 34.29 34.35 34.45 T:grain128aeadv2 36.69 36.88 37.06 romulusn 37.55 37.79 38.54 T:schwaemm256256v2 38.13 38.39 38.65 T:schwaemm192192v2 42.25 42.39 42.54 T:giftcofb128v1 50.92 51.04 51.22 romulusm 65.61 65.62 65.66 T:tinyjambu128v2 74.27 74.29 74.33 T:tinyjambu192v2 79.13 79.15 79.22 T:tinyjambu256v2 85.85 86.00 86.37 T:isapa128av20 117.90 118.09 118.29 romulust 184.49 184.60 184.71 T:elephant200v2 222.63 223.41 224.26 T:isapk128av20 392.76 393.06 393.46 T:isapa128v20 1369.42 1370.63 1371.74 T:isapk128v20 2089.38 2099.90 2102.21 T:isapxv20 6386.34 6387.42 6390.44 T:elephant176v2 8097.45 8099.20 8101.80 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 5.93 5.96 5.99 T:aes128gcmv1 6.97 7.00 7.05 aes256gcmv1 11.60 11.68 11.78 ascon128av12 14.73 14.81 14.94 ascon128v12 14.78 14.90 15.02 ascon80pqv12 17.24 17.35 17.47 T:xoodyakround3 21.28 21.36 21.49 ascon128abi32v12 28.05 28.12 28.23 ascon128bi32v12 29.48 29.69 29.84 T:schwaemm256128v2 33.12 33.32 33.51 T:schwaemm128128v2 34.30 34.34 34.39 T:grain128aeadv2 36.83 36.95 37.10 romulusn 37.55 37.82 38.47 T:schwaemm256256v2 38.14 38.39 38.66 T:schwaemm192192v2 42.23 42.37 42.51 T:giftcofb128v1 50.85 51.02 51.18 romulusm 57.20 57.33 57.56 T:isapa128av20 65.60 65.60 65.62 T:tinyjambu128v2 73.53 73.61 73.75 romulust 74.27 74.29 74.31 T:tinyjambu192v2 79.13 79.15 79.18 T:tinyjambu256v2 138.06 138.47 139.08 T:isapk128av20 184.52 184.61 184.69 T:elephant200v2 204.56 204.86 205.20 T:isapa128v20 716.73 717.43 718.08 T:isapk128v20 1094.03 1098.85 1100.97 T:isapxv20 6387.21 6388.20 6391.23 T:elephant176v2 8098.84 8100.10 8102.29 T:elephant160v2