VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Haswell+AES (306c3); 2013 Intel Core i7-4770; 4 x 3400MHz; speed2supercop, supercop-20260330

[Page version: 20260413 04:20:10]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.41 1.42 1.42 T:aes128gcmv1 1.67 1.68 1.69 aes256gcmv1 7.22 7.24 7.26 ascon128av12 10.63 10.69 10.71 ascon80pqv12 10.59 10.70 10.73 ascon128v12 14.45 14.57 14.60 ascon128abi32v12 16.49 16.51 16.53 T:xoodyakround3 19.04 19.08 19.13 T:schwaemm256128v2 21.65 21.80 21.84 ascon128bi32v12 25.23 25.25 25.28 T:grain128aeadv2 25.25 25.36 25.67 T:schwaemm192192v2 25.32 25.41 25.90 T:schwaemm256256v2 28.12 28.16 28.20 T:schwaemm128128v2 33.72 33.76 33.80 T:giftcofb128v1 37.44 37.49 37.85 romulusn 40.97 41.02 41.08 T:isapa128av20 42.03 42.11 42.19 T:isapa128v20 61.04 61.30 61.53 romulusm 69.26 69.26 69.28 T:tinyjambu128v2 71.02 71.24 71.42 T:isapk128av20 83.49 83.52 83.52 T:tinyjambu192v2 92.71 92.72 92.72 T:tinyjambu256v2 94.14 94.38 94.62 T:isapk128v20 126.58 126.69 126.99 romulust 161.74 166.38 173.30 T:isapxv20 169.93 169.98 170.09 T:elephant200v2 6958.71 6967.53 6974.23 T:elephant176v2 8233.98 8243.47 8249.34 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.75 1.76 1.77 T:aes128gcmv1 2.39 2.41 2.42 aes256gcmv1 7.26 7.28 7.32 ascon128av12 10.64 10.67 10.70 ascon128v12 10.68 10.71 10.73 ascon80pqv12 14.17 14.19 14.26 ascon128abi32v12 16.31 16.35 16.39 T:xoodyakround3 19.04 19.08 19.12 T:schwaemm256128v2 21.38 21.42 21.45 ascon128bi32v12 24.81 24.89 25.37 T:schwaemm256256v2 25.27 25.32 25.37 T:schwaemm192192v2 25.92 25.99 26.03 T:grain128aeadv2 28.13 28.18 28.23 T:schwaemm128128v2 33.75 33.80 33.90 T:giftcofb128v1 37.79 37.82 37.85 romulusn 40.99 41.04 41.08 T:isapa128av20 42.08 42.15 42.23 T:isapa128v20 61.34 61.62 61.80 romulusm 69.03 69.04 69.06 T:tinyjambu128v2 70.97 71.15 71.36 T:isapk128av20 83.56 83.57 83.57 T:tinyjambu192v2 92.69 92.77 92.78 T:tinyjambu256v2 94.01 94.32 94.78 T:isapk128v20 126.54 126.64 126.98 romulust 163.39 167.04 174.26 T:isapxv20 169.91 169.97 170.07 T:elephant200v2 6958.86 6966.65 6972.71 T:elephant176v2 8233.42 8245.63 8250.04 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.75 1.76 1.77 T:aes128gcmv1 2.39 2.41 2.42 aes256gcmv1 7.27 7.29 7.32 ascon128av12 10.65 10.67 10.70 ascon128v12 10.68 10.70 10.73 ascon80pqv12 14.17 14.20 14.26 ascon128abi32v12 16.34 16.38 16.41 T:xoodyakround3 19.04 19.08 19.12 T:schwaemm256128v2 21.06 21.13 21.17 T:isapa128v20 21.40 21.43 21.45 ascon128bi32v12 24.81 24.91 25.40 T:schwaemm256256v2 25.29 25.35 25.38 T:schwaemm192192v2 25.92 26.01 26.03 T:grain128aeadv2 27.99 28.04 28.10 T:isapa128av20 28.15 28.19 28.22 T:schwaemm128128v2 33.75 33.79 33.88 T:giftcofb128v1 37.78 37.81 37.85 romulusn 43.28 43.34 43.40 romulust 47.11 47.28 47.48 T:isapk128av20 58.85 59.03 59.38 T:isapk128v20 61.55 61.61 61.75 romulusm 69.03 69.04 69.06 T:tinyjambu128v2 83.56 83.57 83.57 T:tinyjambu192v2 92.66 92.74 92.78 T:tinyjambu256v2 97.56 98.13 102.57 T:isapxv20 169.89 169.99 170.10 T:elephant200v2 6957.32 6962.56 6972.65 T:elephant176v2 8233.78 8244.52 8248.93 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 1.04 1.05 1.06 T:aes128gcmv1 1.16 1.17 1.19 aes256gcmv1 7.19 7.20 7.24 ascon128av12 10.61 10.63 10.66 ascon80pqv12 10.65 10.67 10.68 ascon128v12 12.45 12.48 12.50 T:xoodyakround3 14.48 14.50 14.52 ascon128abi32v12 18.91 18.94 18.97 T:schwaemm256128v2 21.51 21.59 21.62 ascon128bi32v12 24.98 25.06 25.60 T:schwaemm256256v2 25.11 25.15 25.18 T:schwaemm192192v2 25.22 25.24 25.25 T:grain128aeadv2 27.93 27.96 28.03 T:schwaemm128128v2 30.32 30.43 30.48 romulusn 31.48 31.52 31.56 T:isapa128v20 33.88 33.91 33.93 T:giftcofb128v1 34.50 34.53 34.56 T:isapa128av20 42.31 42.37 42.48 romulusm 56.89 56.89 56.90 T:tinyjambu128v2 59.04 59.19 59.50 T:isapk128av20 63.39 63.40 63.41 T:tinyjambu192v2 67.99 67.99 67.99 T:tinyjambu256v2 76.47 76.65 76.95 T:isapk128v20 84.84 84.93 85.12 romulust 126.86 126.91 126.96 T:elephant200v2 129.01 131.64 136.84 T:isapxv20 5190.23 5194.03 5211.24 T:elephant176v2 6171.90 6182.28 6185.29 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 1.20 1.22 1.24 T:aes128gcmv1 1.53 1.55 1.56 aes256gcmv1 7.18 7.23 7.27 ascon128av12 10.61 10.63 10.65 ascon128v12 10.60 10.63 10.67 ascon80pqv12 12.38 12.40 12.44 T:xoodyakround3 14.30 14.32 14.34 ascon128abi32v12 18.91 18.93 18.96 T:schwaemm256128v2 21.44 21.54 21.62 ascon128bi32v12 24.73 24.79 25.31 T:schwaemm256256v2 25.08 25.16 25.19 T:schwaemm192192v2 25.60 25.62 25.64 T:grain128aeadv2 27.94 27.98 28.03 T:schwaemm128128v2 30.48 30.52 30.61 romulusn 31.46 31.50 31.53 T:isapa128v20 33.92 33.96 34.01 T:giftcofb128v1 34.51 34.54 34.57 T:isapa128av20 42.32 42.49 42.59 romulusm 56.77 56.78 56.79 T:tinyjambu128v2 59.02 59.14 59.35 T:isapk128av20 63.42 63.43 63.44 T:tinyjambu192v2 68.07 68.12 68.15 T:tinyjambu256v2 76.55 76.71 76.86 T:isapk128v20 84.84 84.90 85.09 romulust 126.86 126.91 126.97 T:elephant200v2 131.58 132.42 136.86 T:isapxv20 5194.53 5203.36 5211.38 T:elephant176v2 6173.32 6181.49 6184.45 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 1.21 1.23 1.24 T:aes128gcmv1 1.53 1.54 1.56 aes256gcmv1 7.17 7.23 7.26 ascon128av12 10.60 10.62 10.65 ascon80pqv12 10.61 10.63 10.65 ascon128v12 12.40 12.43 12.46 T:xoodyakround3 14.30 14.31 14.33 ascon128abi32v12 18.92 18.95 18.98 T:schwaemm256128v2 21.01 21.05 21.07 T:isapa128v20 21.44 21.47 21.60 ascon128bi32v12 24.73 24.78 25.28 T:schwaemm256256v2 25.09 25.16 25.20 T:schwaemm192192v2 25.61 25.63 25.64 T:grain128aeadv2 27.96 28.00 28.06 T:schwaemm128128v2 28.01 28.05 28.07 T:isapa128av20 30.48 30.51 30.61 romulusn 33.92 33.97 34.01 T:giftcofb128v1 42.32 42.40 42.51 romulusm 43.21 43.25 43.28 romulust 47.16 47.25 47.35 T:isapk128av20 56.77 56.77 56.78 T:tinyjambu128v2 58.96 59.09 59.32 T:isapk128v20 63.43 63.43 63.44 T:tinyjambu192v2 68.05 68.08 68.10 T:tinyjambu256v2 97.78 99.69 101.46 T:isapxv20 126.87 126.92 126.98 T:elephant200v2 5194.20 5202.98 5213.01 T:elephant176v2 6172.54 6181.84 6184.93 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.65 0.67 0.69 T:aes128gcmv1 0.65 0.68 0.71 aes256gcmv1 7.14 7.16 7.17 ascon128av12 8.42 8.45 8.49 T:xoodyakround3 10.58 10.60 10.63 ascon80pqv12 10.59 10.62 10.65 ascon128v12 14.37 14.41 14.44 ascon128abi32v12 18.75 18.79 18.82 T:schwaemm256128v2 20.91 20.95 20.98 T:isapa128v20 21.41 21.46 21.59 ascon128bi32v12 23.13 23.15 23.28 romulusn 23.19 23.26 23.44 romulusm 24.59 24.68 25.22 T:schwaemm256256v2 24.89 24.99 25.06 T:schwaemm192192v2 25.16 25.19 25.22 T:grain128aeadv2 27.82 27.85 27.89 T:schwaemm128128v2 28.00 28.04 28.08 T:isapa128av20 33.91 34.01 34.07 T:giftcofb128v1 43.03 43.08 43.12 romulust 43.25 43.26 43.26 T:tinyjambu256v2 43.27 43.28 43.30 T:tinyjambu192v2 44.51 44.52 44.53 T:tinyjambu128v2 47.15 47.31 47.52 T:isapk128av20 58.94 59.14 59.35 T:isapk128v20 84.21 84.25 84.30 T:elephant200v2 94.08 96.92 102.00 T:isapxv20 3437.94 3440.61 3444.45 T:elephant176v2 4113.41 4118.34 4121.49 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.65 0.69 0.71 T:aes128gcmv1 0.68 0.69 0.70 aes256gcmv1 7.10 7.21 7.25 ascon128av12 8.44 8.46 8.49 T:xoodyakround3 10.59 10.62 10.65 ascon80pqv12 10.61 10.63 10.65 ascon128v12 14.39 14.42 14.44 ascon128abi32v12 18.74 18.78 18.82 T:schwaemm256128v2 20.94 21.00 21.05 T:isapa128v20 21.40 21.46 21.71 ascon128bi32v12 23.20 23.37 23.49 romulusm 23.38 23.41 23.43 romulusn 24.59 24.67 25.17 T:schwaemm256256v2 24.92 24.99 25.04 T:schwaemm192192v2 25.21 25.24 25.27 T:grain128aeadv2 27.81 27.85 27.91 T:schwaemm128128v2 27.99 28.05 28.12 T:isapa128av20 33.95 34.02 34.07 T:giftcofb128v1 43.05 43.10 43.15 romulust 43.27 43.29 43.29 T:tinyjambu192v2 43.37 43.38 43.38 T:tinyjambu256v2 44.51 44.51 44.52 T:tinyjambu128v2 47.10 47.33 47.52 T:isapk128av20 58.88 59.06 59.28 T:isapk128v20 84.19 84.22 84.26 T:elephant200v2 96.17 97.91 101.65 T:isapxv20 3437.92 3440.73 3444.87 T:elephant176v2 4113.47 4119.51 4124.01 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.64 0.69 0.71 T:aes128gcmv1 0.67 0.69 0.70 aes256gcmv1 7.12 7.21 7.24 ascon128av12 8.43 8.45 8.48 T:xoodyakround3 10.59 10.62 10.64 ascon128v12 10.59 10.63 10.65 ascon80pqv12 14.40 14.41 14.43 ascon128abi32v12 18.74 18.79 18.83 T:schwaemm256128v2 20.91 20.96 21.02 T:isapa128v20 21.43 21.59 21.77 ascon128bi32v12 23.19 23.33 23.52 romulusm 23.39 23.42 23.45 romulusn 24.60 24.66 25.16 T:schwaemm256256v2 24.89 24.98 25.03 T:schwaemm192192v2 25.22 25.23 25.26 T:grain128aeadv2 27.82 27.86 27.90 T:schwaemm128128v2 27.97 28.03 28.09 T:isapa128av20 33.93 34.02 34.08 T:giftcofb128v1 43.05 43.09 43.14 romulust 43.27 43.29 43.29 T:tinyjambu192v2 43.37 43.38 43.45 T:tinyjambu256v2 44.51 44.51 44.52 T:tinyjambu128v2 47.15 47.30 47.54 T:isapk128av20 58.87 59.09 59.34 T:isapk128v20 84.20 84.25 84.30 T:elephant200v2 96.38 98.38 101.59 T:isapxv20 3437.97 3441.49 3444.82 T:elephant176v2 4113.40 4118.93 4121.77 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.18 1.19 1.20 T:aes128gcmv1 1.33 1.34 1.35 aes256gcmv1 7.37 7.38 7.40 ascon128av12 10.77 10.79 10.80 ascon80pqv12 10.81 10.83 10.84 ascon128v12 12.59 12.61 12.62 T:xoodyakround3 14.79 14.80 14.83 ascon128abi32v12 19.45 19.48 19.50 T:schwaemm256128v2 21.75 21.87 21.89 ascon128bi32v12 25.65 25.66 25.67 T:grain128aeadv2 25.65 25.68 26.15 T:schwaemm256256v2 25.77 26.04 26.13 T:schwaemm192192v2 28.34 28.36 28.38 T:schwaemm128128v2 30.61 30.68 30.72 romulusn 34.20 34.22 34.24 T:giftcofb128v1 36.72 36.74 36.77 T:isapa128av20 42.57 42.62 42.68 romulusm 46.36 46.38 46.40 T:isapa128v20 57.30 57.30 57.31 T:tinyjambu128v2 63.83 63.84 63.84 T:tinyjambu192v2 66.99 67.12 67.26 T:isapk128av20 68.45 68.46 68.46 T:tinyjambu256v2 86.12 86.17 86.33 romulust 129.55 129.59 129.64 T:elephant200v2 132.98 133.07 133.22 T:isapk128v20 213.71 216.86 220.00 T:isapxv20 5230.63 5233.36 5249.25 T:elephant176v2 6244.19 6251.89 6253.71 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.34 1.37 1.38 T:aes128gcmv1 1.71 1.72 1.72 aes256gcmv1 7.36 7.42 7.44 ascon128av12 10.78 10.79 10.82 ascon128v12 10.78 10.80 10.84 ascon80pqv12 12.52 12.54 12.56 T:xoodyakround3 14.60 14.61 14.63 ascon128abi32v12 19.45 19.47 19.50 T:schwaemm256128v2 21.74 21.76 21.88 ascon128bi32v12 25.40 25.45 25.93 T:schwaemm256256v2 26.03 26.04 26.05 T:grain128aeadv2 25.80 26.12 26.20 T:schwaemm192192v2 28.38 28.40 28.43 T:schwaemm128128v2 30.83 30.89 30.91 romulusn 34.20 34.22 34.25 T:giftcofb128v1 36.74 36.76 36.77 T:isapa128av20 42.70 42.75 42.87 romulusm 46.39 46.42 46.46 T:isapa128v20 57.19 57.19 57.20 T:tinyjambu128v2 63.86 63.87 63.88 T:tinyjambu192v2 67.00 67.08 67.17 T:isapk128av20 68.56 68.61 68.61 T:tinyjambu256v2 86.17 86.23 86.35 romulust 129.54 129.57 129.64 T:elephant200v2 132.96 133.06 133.21 T:isapk128v20 216.56 217.11 219.99 T:isapxv20 5230.58 5233.37 5248.64 T:elephant176v2 6242.35 6249.97 6253.77 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.34 1.37 1.38 T:aes128gcmv1 1.71 1.72 1.72 aes256gcmv1 7.34 7.41 7.43 ascon128av12 10.77 10.78 10.80 ascon128v12 10.77 10.79 10.82 ascon80pqv12 12.54 12.56 12.58 T:xoodyakround3 14.60 14.61 14.63 ascon128abi32v12 19.46 19.47 19.50 T:schwaemm256128v2 21.73 21.78 21.90 ascon128bi32v12 25.40 25.42 25.89 T:schwaemm256256v2 26.03 26.04 26.06 T:grain128aeadv2 25.78 26.15 26.23 T:schwaemm192192v2 28.37 28.39 28.42 T:schwaemm128128v2 28.73 28.75 28.76 T:isapa128v20 29.28 29.30 29.33 T:isapa128av20 30.85 30.89 30.90 romulusn 34.23 34.25 34.27 T:giftcofb128v1 42.67 42.73 42.84 romulusm 44.43 44.46 44.50 romulust 51.76 51.84 51.94 T:isapk128av20 57.18 57.19 57.20 T:tinyjambu128v2 63.87 63.87 63.88 T:tinyjambu192v2 68.53 68.55 68.57 T:tinyjambu256v2 87.88 87.98 88.07 T:isapk128v20 129.54 129.58 129.63 T:elephant200v2 141.05 142.82 144.12 T:isapxv20 5230.45 5233.26 5248.37 T:elephant176v2 6243.55 6251.13 6255.21 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 6.46 6.52 6.57 T:aes128gcmv1 7.47 7.52 7.59 aes256gcmv1 11.14 11.23 11.39 ascon128av12 14.26 14.35 14.52 ascon128v12 14.28 14.38 14.49 ascon80pqv12 17.95 18.05 18.35 T:xoodyakround3 21.76 21.82 21.94 ascon128abi32v12 28.42 28.58 28.82 ascon128bi32v12 31.19 31.29 31.52 T:schwaemm256128v2 34.95 35.01 35.10 T:grain128aeadv2 36.76 36.87 37.00 romulusn 36.52 37.62 38.17 T:schwaemm128128v2 39.58 39.91 40.39 T:schwaemm256256v2 40.89 41.00 41.18 T:giftcofb128v1 40.95 41.16 42.51 T:schwaemm192192v2 48.33 48.52 48.86 romulusm 66.72 66.73 66.81 T:tinyjambu128v2 73.88 73.90 73.94 T:tinyjambu192v2 79.09 79.12 79.15 T:tinyjambu256v2 87.12 87.24 87.46 T:isapa128av20 114.82 115.06 115.35 romulust 182.89 183.07 183.31 T:elephant200v2 234.71 235.36 236.39 T:isapk128av20 386.56 386.89 387.32 T:isapa128v20 1411.64 1412.99 1414.67 T:isapk128v20 2091.22 2140.62 2148.49 T:isapxv20 6509.64 6514.59 6527.05 T:elephant176v2 8353.88 8364.69 8369.53 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 6.61 6.67 6.74 T:aes128gcmv1 7.66 7.70 7.75 aes256gcmv1 11.23 11.31 11.51 ascon128av12 14.21 14.33 14.48 ascon128v12 14.31 14.40 14.52 ascon80pqv12 17.86 18.00 18.29 T:xoodyakround3 21.60 21.68 21.79 ascon128abi32v12 28.45 28.56 28.74 ascon128bi32v12 31.10 31.26 31.49 T:schwaemm256128v2 35.35 35.45 35.56 T:grain128aeadv2 36.91 37.00 37.13 romulusn 36.52 37.72 38.19 T:schwaemm128128v2 39.54 39.74 40.40 T:schwaemm256256v2 40.94 41.05 41.17 T:giftcofb128v1 41.02 41.29 42.83 T:schwaemm192192v2 50.00 50.13 50.30 romulusm 66.66 66.69 66.77 T:tinyjambu128v2 73.98 74.01 74.05 T:tinyjambu192v2 79.25 79.28 79.33 T:tinyjambu256v2 87.16 87.28 87.55 T:isapa128av20 114.89 115.15 115.34 romulust 182.75 182.90 183.03 T:elephant200v2 235.08 235.97 236.58 T:isapk128av20 387.07 387.55 388.14 T:isapa128v20 1411.39 1412.41 1414.22 T:isapk128v20 2098.71 2144.90 2148.57 T:isapxv20 6510.76 6516.39 6529.72 T:elephant176v2 8352.88 8363.49 8373.87 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 6.61 6.67 6.75 T:aes128gcmv1 7.63 7.68 7.75 aes256gcmv1 11.24 11.35 11.45 ascon128av12 14.26 14.35 14.47 ascon128v12 14.35 14.41 14.48 ascon80pqv12 17.96 18.05 18.29 T:xoodyakround3 21.55 21.62 21.71 ascon128abi32v12 28.43 28.54 28.68 ascon128bi32v12 31.15 31.27 31.41 T:schwaemm256128v2 35.33 35.42 35.48 T:grain128aeadv2 36.92 37.01 37.12 romulusn 36.40 37.60 38.21 T:schwaemm128128v2 39.52 39.65 40.35 T:schwaemm256256v2 40.93 41.07 41.19 T:giftcofb128v1 40.99 41.28 42.85 T:schwaemm192192v2 49.90 50.03 50.26 romulusm 58.00 58.17 58.38 T:isapa128av20 66.66 66.68 66.71 T:tinyjambu128v2 72.18 72.32 72.53 romulust 73.98 74.01 74.03 T:tinyjambu192v2 79.26 79.28 79.32 T:tinyjambu256v2 145.42 146.17 146.92 T:isapk128av20 182.74 182.85 182.98 T:elephant200v2 204.33 204.55 204.95 T:isapa128v20 738.94 739.90 741.06 T:isapk128v20 1101.58 1122.26 1124.65 T:isapxv20 6509.86 6516.26 6526.95 T:elephant176v2 8355.88 8364.32 8368.27 T:elephant160v2