VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Haswell+AES (306c3); 2013 Intel Core i7-4770; 4 x 3400MHz; speed2supercop, supercop-20250307

[Page version: 20250328 20:58:22]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.40 1.42 1.43 T:aes128gcmv1 1.67 1.68 1.69 aes256gcmv1 7.22 7.23 7.25 ascon128av12 10.55 10.59 10.61 ascon128v12 10.60 10.64 10.66 ascon80pqv12 14.33 14.57 14.59 ascon128abi32v12 16.50 16.52 16.58 T:xoodyakround3 19.05 19.08 19.15 T:schwaemm256128v2 21.41 21.82 21.86 ascon128bi32v12 24.73 24.77 24.79 T:schwaemm256256v2 25.08 25.12 25.15 T:grain128aeadv2 25.29 25.34 25.38 T:schwaemm192192v2 28.11 28.16 28.19 T:schwaemm128128v2 33.74 33.78 33.82 T:giftcofb128v1 37.48 37.93 37.98 romulusn 41.01 41.07 41.11 T:isapa128av20 42.09 42.17 42.22 T:isapa128v20 61.21 61.45 61.61 romulusm 69.27 69.28 69.29 T:tinyjambu128v2 71.06 71.27 71.44 T:isapk128av20 83.48 83.50 83.51 T:tinyjambu192v2 92.71 92.71 92.71 T:tinyjambu256v2 93.81 94.35 94.56 T:isapk128v20 126.49 126.55 126.66 romulust 160.97 167.70 175.49 T:isapxv20 169.86 169.90 169.95 T:elephant200v2 6956.85 6958.85 6960.53 T:elephant176v2 8218.55 8225.74 8252.54 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.73 1.75 1.77 T:aes128gcmv1 2.39 2.40 2.42 aes256gcmv1 7.26 7.28 7.31 ascon128av12 10.61 10.64 10.66 ascon128v12 10.61 10.72 10.75 ascon80pqv12 14.16 14.20 14.33 ascon128abi32v12 16.26 16.32 16.40 T:xoodyakround3 19.05 19.10 19.13 T:schwaemm256128v2 21.19 21.26 21.58 ascon128bi32v12 24.70 24.74 24.80 T:schwaemm256256v2 25.29 25.32 25.36 T:schwaemm192192v2 26.17 26.19 26.21 T:grain128aeadv2 28.13 28.17 28.21 T:schwaemm128128v2 33.75 33.80 33.92 T:giftcofb128v1 37.85 37.88 37.90 romulusn 40.99 41.02 41.06 T:isapa128av20 42.16 42.20 42.26 T:isapa128v20 60.99 61.18 61.27 romulusm 69.03 69.03 69.04 T:tinyjambu128v2 71.04 71.30 71.49 T:isapk128av20 83.55 83.56 83.56 T:tinyjambu192v2 92.65 92.66 92.76 T:tinyjambu256v2 93.87 94.50 95.04 T:isapk128v20 126.44 126.58 126.72 romulust 165.04 167.78 175.14 T:isapxv20 169.86 169.90 169.93 T:elephant200v2 6957.26 6959.77 6960.90 T:elephant176v2 8217.86 8223.65 8248.88 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.75 1.75 1.77 T:aes128gcmv1 2.40 2.41 2.42 aes256gcmv1 7.26 7.29 7.31 ascon128av12 10.61 10.64 10.70 ascon128v12 10.68 10.70 10.72 ascon80pqv12 14.17 14.21 14.34 ascon128abi32v12 16.27 16.34 16.41 T:xoodyakround3 19.04 19.06 19.09 T:schwaemm256128v2 21.04 21.10 21.14 T:isapa128v20 21.20 21.24 21.56 ascon128bi32v12 24.72 24.76 24.80 T:schwaemm256256v2 25.28 25.34 25.37 T:schwaemm192192v2 26.18 26.21 26.22 T:grain128aeadv2 28.00 28.05 28.09 T:isapa128av20 28.11 28.15 28.19 T:schwaemm128128v2 33.78 33.81 33.90 T:giftcofb128v1 37.84 37.87 37.91 romulusn 43.22 43.29 43.34 romulust 47.16 47.35 47.48 T:isapk128av20 58.85 59.07 59.36 T:isapk128v20 60.86 61.02 61.33 romulusm 69.02 69.02 69.03 T:tinyjambu128v2 83.55 83.55 83.56 T:tinyjambu192v2 92.64 92.66 92.76 T:tinyjambu256v2 98.53 100.34 103.87 T:isapxv20 169.88 169.92 169.94 T:elephant200v2 6955.91 6958.92 6960.29 T:elephant176v2 8218.75 8224.77 8247.80 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 1.03 1.05 1.06 T:aes128gcmv1 1.15 1.18 1.19 aes256gcmv1 7.18 7.20 7.22 ascon128av12 10.59 10.61 10.68 ascon128v12 10.58 10.61 10.64 ascon80pqv12 12.46 12.48 12.54 T:xoodyakround3 14.47 14.50 14.52 ascon128abi32v12 18.93 18.95 18.98 T:schwaemm256128v2 21.61 21.64 21.68 ascon128bi32v12 24.69 24.73 24.79 T:schwaemm256256v2 25.16 25.18 25.22 T:schwaemm192192v2 25.18 25.19 25.21 T:grain128aeadv2 27.99 28.02 28.06 T:schwaemm128128v2 30.52 30.55 30.62 romulusn 31.50 31.54 31.57 T:isapa128v20 33.85 33.89 33.94 T:giftcofb128v1 34.35 34.38 34.40 T:isapa128av20 42.09 42.22 42.68 romulusm 56.89 56.89 56.89 T:tinyjambu128v2 59.11 59.17 59.23 T:isapk128av20 63.40 63.40 63.41 T:tinyjambu192v2 67.98 67.98 67.99 T:tinyjambu256v2 76.12 76.63 77.11 T:isapk128v20 84.77 84.83 84.91 romulust 126.88 126.88 126.91 T:elephant200v2 129.40 132.77 138.48 T:isapxv20 5194.03 5195.15 5197.46 T:elephant176v2 6160.08 6164.87 6186.09 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 1.18 1.22 1.23 T:aes128gcmv1 1.52 1.55 1.56 aes256gcmv1 7.20 7.22 7.24 ascon128av12 10.58 10.61 10.65 ascon80pqv12 10.63 10.65 10.67 ascon128v12 12.36 12.39 12.43 T:xoodyakround3 14.28 14.31 14.33 ascon128abi32v12 18.94 18.96 18.99 T:schwaemm256128v2 21.50 21.52 21.55 ascon128bi32v12 24.69 24.72 24.76 T:schwaemm256256v2 25.16 25.20 25.21 T:schwaemm192192v2 25.70 25.73 25.74 T:grain128aeadv2 28.01 28.03 28.06 T:schwaemm128128v2 30.44 30.48 30.51 romulusn 31.49 31.55 31.59 T:isapa128v20 33.91 33.97 34.02 T:giftcofb128v1 34.36 34.40 34.43 T:isapa128av20 42.03 42.15 42.50 romulusm 56.77 56.77 56.78 T:tinyjambu128v2 59.05 59.17 59.40 T:isapk128av20 63.41 63.42 63.43 T:tinyjambu192v2 68.07 68.13 68.14 T:tinyjambu256v2 76.24 76.75 77.15 T:isapk128v20 84.79 84.89 84.96 romulust 126.88 126.90 127.22 T:elephant200v2 132.77 133.28 138.09 T:isapxv20 5194.10 5196.37 5197.62 T:elephant176v2 6161.68 6163.74 6185.41 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 1.20 1.22 1.23 T:aes128gcmv1 1.53 1.54 1.56 aes256gcmv1 7.20 7.22 7.23 ascon128av12 10.60 10.62 10.64 ascon80pqv12 10.63 10.65 10.67 ascon128v12 12.37 12.40 12.47 T:xoodyakround3 14.30 14.31 14.34 ascon128abi32v12 18.94 18.96 19.00 T:schwaemm256128v2 21.04 21.06 21.10 T:isapa128v20 21.49 21.50 21.53 ascon128bi32v12 24.69 24.72 24.74 T:schwaemm256256v2 25.16 25.20 25.22 T:schwaemm192192v2 25.70 25.72 25.74 T:grain128aeadv2 27.88 27.90 27.94 T:isapa128av20 28.00 28.04 28.06 T:schwaemm128128v2 30.46 30.48 30.58 romulusn 33.93 33.98 34.02 T:giftcofb128v1 42.04 42.08 42.53 romulusm 43.16 43.21 43.35 romulust 47.15 47.27 47.42 T:isapk128av20 56.76 56.77 56.78 T:tinyjambu128v2 58.58 59.18 59.53 T:isapk128v20 63.41 63.42 63.43 T:tinyjambu192v2 68.08 68.14 68.14 T:tinyjambu256v2 98.12 100.66 102.66 T:isapxv20 126.86 126.88 126.92 T:elephant200v2 5193.93 5195.77 5197.12 T:elephant176v2 6160.25 6163.54 6182.93 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.64 0.68 0.70 aes256gcmv1 0.64 0.68 0.70 T:aes128gcmv1 7.14 7.15 7.21 ascon128av12 8.44 8.48 8.51 T:xoodyakround3 10.57 10.60 10.62 ascon80pqv12 10.58 10.62 10.65 ascon128v12 14.38 14.40 14.42 ascon128abi32v12 18.75 18.79 18.82 T:schwaemm256128v2 20.90 20.98 21.01 T:isapa128v20 21.41 21.71 21.77 ascon128bi32v12 23.05 23.25 23.31 romulusn 23.14 23.38 23.72 romulusm 24.64 24.68 24.73 T:schwaemm256256v2 25.02 25.05 25.10 T:schwaemm192192v2 25.21 25.27 25.29 T:grain128aeadv2 27.76 27.80 27.83 T:isapa128av20 27.81 27.86 27.89 T:schwaemm128128v2 33.92 34.00 34.03 T:giftcofb128v1 43.04 43.10 43.15 romulust 43.26 43.26 43.26 T:tinyjambu256v2 43.27 43.27 43.29 T:tinyjambu192v2 44.52 44.53 44.53 T:tinyjambu128v2 47.11 47.27 47.48 T:isapk128av20 58.91 59.12 59.38 T:isapk128v20 84.22 84.26 84.30 T:elephant200v2 95.92 97.92 103.51 T:isapxv20 3434.37 3438.33 3441.32 T:elephant176v2 4105.92 4109.65 4118.34 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.61? 0.68? 0.71? T:aes128gcmv1 0.66 0.69 0.71 aes256gcmv1 7.12 7.15 7.17 ascon128av12 8.43 8.46 8.50 T:xoodyakround3 10.61 10.63 10.65 ascon80pqv12 10.58 10.63 10.65 ascon128v12 14.39 14.42 14.43 ascon128abi32v12 18.77 18.80 18.81 T:schwaemm256128v2 20.91 20.96 20.99 T:isapa128v20 21.39 21.44 21.47 ascon128bi32v12 23.09 23.24 23.29 romulusn 23.16 23.39 23.45 romulusm 24.64 24.68 24.72 T:schwaemm256256v2 24.99 25.04 25.08 T:schwaemm192192v2 25.19 25.20 25.21 T:grain128aeadv2 27.75 27.79 27.86 T:isapa128av20 27.82 27.85 27.92 T:schwaemm128128v2 33.92 34.00 34.06 T:giftcofb128v1 43.05 43.11 43.17 romulust 43.28 43.29 43.29 T:tinyjambu192v2 43.37 43.37 43.39 T:tinyjambu256v2 44.52 44.53 44.53 T:tinyjambu128v2 47.14 47.34 47.53 T:isapk128av20 58.81 59.09 59.33 T:isapk128v20 84.22 84.26 84.30 T:elephant200v2 97.62 99.26 103.08 T:isapxv20 3435.31 3439.21 3441.69 T:elephant176v2 4105.57 4110.86 4118.97 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.67 0.69 0.70 aes256gcmv1 0.60? 0.69? 0.71? T:aes128gcmv1 7.12 7.15 7.16 ascon128av12 8.43 8.45 8.51 T:xoodyakround3 10.59 10.62 10.65 ascon128v12 10.62 10.63 10.64 ascon80pqv12 14.39 14.41 14.43 ascon128abi32v12 18.77 18.81 18.84 T:schwaemm256128v2 20.94 20.97 21.00 T:isapa128v20 21.41 21.70 21.76 ascon128bi32v12 23.16 23.21 23.48 romulusm 23.06 23.29 23.30 romulusn 24.64 24.67 24.69 T:schwaemm256256v2 25.00 25.04 25.08 T:schwaemm192192v2 25.17 25.21 25.23 T:grain128aeadv2 27.75 27.80 27.84 T:isapa128av20 27.80 27.86 27.94 T:schwaemm128128v2 33.91 34.01 34.06 T:giftcofb128v1 43.05 43.09 43.13 romulust 43.28 43.29 43.30 T:tinyjambu192v2 43.37 43.38 43.38 T:tinyjambu256v2 44.51 44.52 44.52 T:tinyjambu128v2 47.06 47.24 47.47 T:isapk128av20 58.86 59.15 59.39 T:isapk128v20 84.20 84.24 84.28 T:elephant200v2 97.74 99.26 103.03 T:isapxv20 3434.29 3437.54 3439.61 T:elephant176v2 4104.32 4112.24 4121.77 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.18 1.19 1.20 T:aes128gcmv1 1.33 1.33 1.35 aes256gcmv1 7.36 7.37 7.38 ascon128av12 10.76 10.78 10.80 ascon80pqv12 10.76 10.80 10.82 ascon128v12 12.60 12.61 12.64 T:xoodyakround3 14.80 14.81 14.82 ascon128abi32v12 19.47 19.49 19.50 T:schwaemm256128v2 21.90 21.93 22.07 ascon128bi32v12 25.33 25.36 25.38 T:schwaemm256256v2 25.61 25.63 25.65 T:grain128aeadv2 25.72 25.75 25.79 T:schwaemm192192v2 28.36 28.38 28.40 T:schwaemm128128v2 30.75 30.79 30.88 romulusn 34.17 34.20 34.23 T:giftcofb128v1 36.60 36.64 36.65 T:isapa128av20 42.54 42.57 42.90 romulusm 46.38 46.40 46.41 T:isapa128v20 57.30 57.30 57.31 T:tinyjambu128v2 63.83 63.84 63.85 T:tinyjambu192v2 67.12 67.16 67.29 T:isapk128av20 68.45 68.45 68.46 T:tinyjambu256v2 86.10 86.14 86.20 romulust 129.54 129.56 129.58 T:elephant200v2 133.01 133.30 133.59 T:isapk128v20 213.06 216.76 219.90 T:isapxv20 5235.40 5237.91 5239.73 T:elephant176v2 6232.02 6235.11 6256.53 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.35 1.36 1.38 T:aes128gcmv1 1.71 1.72 1.73 aes256gcmv1 7.38 7.39 7.40 ascon128av12 10.75 10.77 10.82 ascon80pqv12 10.79 10.82 10.84 ascon128v12 12.50 12.52 12.57 T:xoodyakround3 14.61 14.62 14.64 ascon128abi32v12 19.49 19.51 19.52 T:schwaemm256128v2 21.79 21.82 21.84 ascon128bi32v12 25.33 25.35 25.37 T:schwaemm256256v2 25.74 25.76 25.77 T:schwaemm192192v2 26.13 26.13 26.16 T:grain128aeadv2 28.39 28.41 28.42 T:schwaemm128128v2 30.72 30.74 30.83 romulusn 34.25 34.30 34.31 T:giftcofb128v1 36.62 36.64 36.66 T:isapa128av20 42.52 42.62 42.82 romulusm 46.42 46.47 46.50 T:isapa128v20 57.18 57.19 57.19 T:tinyjambu128v2 63.85 63.87 63.87 T:tinyjambu192v2 67.12 67.16 67.25 T:isapk128av20 68.55 68.60 68.61 T:tinyjambu256v2 86.12 86.17 86.22 romulust 129.53 129.55 129.57 T:elephant200v2 133.11 133.26 133.71 T:isapk128v20 216.49 216.70 219.97 T:isapxv20 5235.12 5236.97 5238.65 T:elephant176v2 6230.87 6233.15 6253.16 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.34 1.35 1.36 T:aes128gcmv1 1.71 1.71 1.73 aes256gcmv1 7.38 7.39 7.40 ascon128av12 10.75 10.77 10.79 ascon80pqv12 10.79 10.81 10.83 ascon128v12 12.50 12.54 12.57 T:xoodyakround3 14.61 14.61 14.62 ascon128abi32v12 19.47 19.48 19.50 T:schwaemm256128v2 21.79 21.81 21.82 ascon128bi32v12 25.33 25.35 25.36 T:schwaemm256256v2 25.73 25.74 25.77 T:schwaemm192192v2 26.12 26.13 26.15 T:grain128aeadv2 28.38 28.39 28.41 T:schwaemm128128v2 28.75 28.77 28.78 T:isapa128v20 29.19 29.19 29.22 T:isapa128av20 30.72 30.75 30.86 romulusn 34.26 34.30 34.32 T:giftcofb128v1 42.45 42.55 42.84 romulusm 44.43 44.45 44.53 romulust 51.81 51.88 51.96 T:isapk128av20 57.18 57.18 57.19 T:tinyjambu128v2 63.86 63.87 63.87 T:tinyjambu192v2 68.55 68.60 68.60 T:tinyjambu256v2 87.92 88.03 88.50 T:isapk128v20 129.53 129.55 129.59 T:elephant200v2 141.25 143.08 144.48 T:isapxv20 5234.97 5235.79 5238.88 T:elephant176v2 6231.29 6233.38 6251.10 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 6.50 6.53 6.62 T:aes128gcmv1 7.47 7.53 7.62 aes256gcmv1 11.19 11.31 11.53 ascon128av12 14.28 14.34 14.69 ascon80pqv12 14.38 14.44 14.56 ascon128v12 17.94 18.00 18.38 T:xoodyakround3 21.81 21.91 22.19 ascon128abi32v12 28.62 28.69 28.91 ascon128bi32v12 31.25 31.34 31.66 T:schwaemm256128v2 35.03 35.09 35.34 T:grain128aeadv2 36.19 36.38 36.69 T:schwaemm128128v2 36.72 36.81 36.94 romulusn 39.41 39.69 40.12 T:schwaemm256256v2 40.84 41.09 41.22 T:giftcofb128v1 41.84 42.06 42.34 T:schwaemm192192v2 49.12 49.31 49.72 romulusm 66.75 66.78 66.84 T:tinyjambu128v2 73.88 73.94 73.97 T:tinyjambu192v2 79.09 79.12 79.16 T:tinyjambu256v2 87.25 87.34 88.12 T:isapa128av20 114.81 115.06 115.62 romulust 182.88 183.09 183.44 T:elephant200v2 235.19 235.84 236.94 T:isapk128av20 386.50 386.69 387.56 T:isapa128v20 1413.25 1415.00 1428.97 T:isapk128v20 2056.03 2121.75 2122.81 T:isapxv20 6511.75 6513.53 6514.59 T:elephant176v2 8337.91 8344.25 8369.72 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 6.59 6.69 6.78 T:aes128gcmv1 7.69 7.75 7.84 aes256gcmv1 11.28 11.44 11.53 ascon128av12 14.28 14.47 14.69 ascon80pqv12 14.34 14.53 14.66 ascon128v12 17.84 18.03 18.47 T:xoodyakround3 21.72 21.81 22.03 ascon128abi32v12 28.53 28.59 28.81 ascon128bi32v12 31.16 31.34 31.53 T:schwaemm256128v2 35.22 35.28 35.56 T:grain128aeadv2 35.91 36.19 36.38 T:schwaemm128128v2 36.66 36.72 36.75 romulusn 39.41 39.66 39.91 T:schwaemm256256v2 40.84 41.03 41.34 T:giftcofb128v1 41.88 42.25 42.47 T:schwaemm192192v2 50.69 50.97 51.09 romulusm 66.75 66.75 66.81 T:tinyjambu128v2 74.00 74.03 74.06 T:tinyjambu192v2 79.34 79.38 79.44 T:tinyjambu256v2 87.16 87.50 87.72 T:isapa128av20 115.06 115.41 115.84 romulust 182.59 182.75 182.94 T:elephant200v2 235.69 236.47 237.12 T:isapk128av20 386.72 387.38 387.75 T:isapa128v20 1411.84 1414.47 1428.56 T:isapk128v20 2065.12 2122.25 2123.38 T:isapxv20 6511.75 6513.41 6514.41 T:elephant176v2 8338.25 8342.94 8370.66 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 6.66 6.75 6.81 T:aes128gcmv1 7.69 7.72 7.75 aes256gcmv1 11.38 11.44 11.56 ascon128av12 14.22 14.28 14.44 ascon80pqv12 14.34 14.41 14.44 ascon128v12 17.91 17.94 18.44 T:xoodyakround3 21.72 21.75 21.91 ascon128abi32v12 28.56 28.66 28.84 ascon128bi32v12 31.16 31.28 31.44 T:schwaemm256128v2 35.25 35.28 35.66 T:grain128aeadv2 35.94 36.12 36.38 T:schwaemm128128v2 36.62 36.66 36.69 romulusn 39.53 39.62 39.69 T:schwaemm256256v2 41.00 41.09 41.22 T:giftcofb128v1 41.69 41.88 41.97 T:schwaemm192192v2 50.66 50.91 51.12 romulusm 58.19 58.38 58.56 T:isapa128av20 66.66 66.69 66.72 T:tinyjambu128v2 72.34 72.62 73.09 romulust 74.00 74.00 74.03 T:tinyjambu192v2 79.31 79.34 79.34 T:tinyjambu256v2 145.03 146.50 147.06 T:isapk128av20 182.59 182.81 182.94 T:elephant200v2 204.22 204.69 204.94 T:isapa128v20 739.78 742.25 752.94 T:isapk128v20 1081.75 1108.41 1112.06 T:isapxv20 6511.81 6513.09 6515.00 T:elephant176v2 8340.75 8348.31 8368.78 T:elephant160v2