VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Haswell+AES (306c3); 2013 Intel Core i7-4770; 4 x 3400MHz; speed2supercop, supercop-20251222

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.41 1.43 1.44 T:aes128gcmv1 1.67 1.69 1.70 aes256gcmv1 7.21 7.23 7.25 ascon128av12 10.55 10.60 10.67 ascon128v12 10.60 10.66 10.71 ascon80pqv12 14.34 14.55 14.57 ascon128abi32v12 16.47 16.51 16.56 T:xoodyakround3 19.04 19.07 19.11 T:schwaemm256128v2 21.39 21.44 21.82 ascon128bi32v12 24.71 24.76 24.82 T:schwaemm256256v2 25.24 25.30 25.34 T:schwaemm192192v2 25.28 25.36 25.38 T:grain128aeadv2 28.17 28.20 28.25 T:schwaemm128128v2 33.73 33.76 33.80 T:giftcofb128v1 37.43 37.49 37.93 romulusn 40.99 41.04 41.07 T:isapa128av20 42.07 42.13 42.21 T:isapa128v20 60.97 61.02 61.23 romulusm 69.26 69.26 69.27 T:tinyjambu128v2 71.01 71.31 71.58 T:isapk128av20 83.48 83.51 83.51 T:tinyjambu192v2 92.71 92.71 92.72 T:tinyjambu256v2 94.07 94.44 94.74 T:isapk128v20 126.59 126.66 126.78 romulust 161.53 166.03 171.93 T:isapxv20 169.83 169.96 170.14 T:elephant200v2 6957.46 6959.29 6960.69 T:elephant176v2 8243.44 8248.05 8252.38 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.74 1.76 1.77 T:aes128gcmv1 2.39 2.41 2.42 aes256gcmv1 7.27 7.28 7.30 ascon128av12 10.60 10.63 10.70 ascon128v12 10.66 10.70 10.71 ascon80pqv12 14.16 14.19 14.30 ascon128abi32v12 16.26 16.31 16.40 T:xoodyakround3 19.05 19.08 19.11 T:schwaemm256128v2 21.19 21.23 21.55 ascon128bi32v12 24.70 24.76 24.83 T:schwaemm256256v2 25.29 25.31 25.41 T:schwaemm192192v2 25.97 25.98 26.00 T:grain128aeadv2 28.20 28.21 28.25 T:schwaemm128128v2 33.76 33.80 33.96 T:giftcofb128v1 37.80 37.83 37.86 romulusn 40.98 41.03 41.10 T:isapa128av20 42.05 42.12 42.21 T:isapa128v20 61.06 61.30 61.33 romulusm 69.02 69.03 69.05 T:tinyjambu128v2 71.18 71.41 71.56 T:isapk128av20 83.55 83.56 83.57 T:tinyjambu192v2 92.66 92.76 92.76 T:tinyjambu256v2 94.13 94.44 94.82 T:isapk128v20 126.61 126.68 126.80 romulust 167.44 167.84 170.96 T:isapxv20 169.82 169.93 170.09 T:elephant200v2 6956.78 6957.95 6959.43 T:elephant176v2 8245.50 8250.10 8251.71 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.75 1.76 1.76 T:aes128gcmv1 2.40 2.41 2.42 aes256gcmv1 7.27 7.29 7.31 ascon128av12 10.60 10.65 10.68 ascon128v12 10.65 10.69 10.73 ascon80pqv12 14.14 14.18 14.21 ascon128abi32v12 16.30 16.33 16.43 T:xoodyakround3 19.04 19.09 19.12 T:schwaemm256128v2 21.06 21.10 21.16 T:isapa128v20 21.22 21.54 21.58 ascon128bi32v12 24.70 24.76 24.85 T:schwaemm256256v2 25.30 25.33 25.41 T:schwaemm192192v2 25.96 25.99 26.02 T:grain128aeadv2 27.99 28.04 28.07 T:isapa128av20 28.18 28.22 28.27 T:schwaemm128128v2 33.74 33.79 33.82 T:giftcofb128v1 37.80 37.82 37.85 romulusn 43.29 43.32 43.42 romulust 47.16 47.34 47.55 T:isapk128av20 58.98 59.19 59.37 T:isapk128v20 60.88 61.07 61.34 romulusm 69.02 69.03 69.05 T:tinyjambu128v2 83.55 83.56 83.56 T:tinyjambu192v2 92.64 92.66 92.76 T:tinyjambu256v2 98.38 98.99 102.41 T:isapxv20 169.81 169.94 170.07 T:elephant200v2 6957.29 6958.91 6960.67 T:elephant176v2 8243.64 8246.98 8250.06 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 1.03 1.06 1.06 T:aes128gcmv1 1.14 1.17 1.19 aes256gcmv1 7.19 7.22 7.23 ascon128av12 10.60 10.62 10.67 ascon128v12 10.61 10.63 10.65 ascon80pqv12 12.47 12.49 12.54 T:xoodyakround3 14.48 14.51 14.52 ascon128abi32v12 18.91 18.94 18.97 T:schwaemm256128v2 21.62 21.64 21.71 ascon128bi32v12 24.67 24.71 24.78 T:schwaemm256256v2 25.17 25.19 25.21 T:schwaemm192192v2 25.22 25.34 25.35 T:grain128aeadv2 27.99 28.01 28.04 T:schwaemm128128v2 30.28 30.30 30.42 romulusn 31.54 31.58 31.62 T:isapa128v20 33.88 33.92 33.95 T:giftcofb128v1 34.37 34.39 34.41 T:isapa128av20 42.18 42.23 42.32 romulusm 56.88 56.89 56.89 T:tinyjambu128v2 59.01 59.21 59.32 T:isapk128av20 63.39 63.40 63.41 T:tinyjambu192v2 67.98 67.99 67.99 T:tinyjambu256v2 76.48 76.75 77.11 T:isapk128v20 84.83 84.86 84.94 romulust 126.85 126.90 127.01 T:elephant200v2 129.79 132.08 135.06 T:isapxv20 5195.30 5196.76 5197.62 T:elephant176v2 6181.02 6183.02 6183.87 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 1.20 1.22 1.24 T:aes128gcmv1 1.52 1.55 1.55 aes256gcmv1 7.20 7.22 7.24 ascon128av12 10.58 10.61 10.65 ascon80pqv12 10.62 10.65 10.66 ascon128v12 12.35 12.41 12.43 T:xoodyakround3 14.28 14.31 14.34 ascon128abi32v12 18.93 18.96 18.98 T:schwaemm256128v2 21.48 21.51 21.56 ascon128bi32v12 24.69 24.72 24.78 T:schwaemm256256v2 25.15 25.19 25.22 T:schwaemm192192v2 25.62 25.68 25.69 T:grain128aeadv2 28.01 28.03 28.04 T:schwaemm128128v2 30.48 30.60 30.63 romulusn 31.51 31.56 31.61 T:isapa128v20 33.97 33.98 34.02 T:giftcofb128v1 34.36 34.39 34.45 T:isapa128av20 42.12 42.28 42.43 romulusm 56.76 56.77 56.77 T:tinyjambu128v2 59.00 59.12 59.31 T:isapk128av20 63.40 63.43 63.43 T:tinyjambu192v2 68.07 68.13 68.14 T:tinyjambu256v2 76.30 76.78 77.36 T:isapk128v20 84.82 84.89 84.95 romulust 126.81 126.92 126.99 T:elephant200v2 132.51 132.80 136.37 T:isapxv20 5193.91 5196.32 5198.13 T:elephant176v2 6182.13 6183.74 6186.42 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 1.19 1.22 1.23 T:aes128gcmv1 1.54 1.54 1.55 aes256gcmv1 7.20 7.21 7.23 ascon128av12 10.60 10.61 10.62 ascon80pqv12 10.63 10.66 10.67 ascon128v12 12.38 12.41 12.44 T:xoodyakround3 14.29 14.31 14.32 ascon128abi32v12 18.92 18.95 18.98 T:schwaemm256128v2 21.06 21.08 21.11 T:isapa128v20 21.49 21.51 21.63 ascon128bi32v12 24.69 24.73 24.78 T:schwaemm256256v2 25.15 25.18 25.22 T:schwaemm192192v2 25.65 25.67 25.70 T:grain128aeadv2 27.89 27.92 27.94 T:isapa128av20 28.01 28.03 28.06 T:schwaemm128128v2 30.48 30.61 30.62 romulusn 33.95 33.98 34.03 T:giftcofb128v1 42.16 42.22 42.30 romulusm 43.19 43.22 43.26 romulust 47.10 47.33 47.38 T:isapk128av20 56.76 56.77 56.77 T:tinyjambu128v2 58.95 59.10 59.29 T:isapk128v20 63.40 63.41 63.43 T:tinyjambu192v2 68.07 68.08 68.14 T:tinyjambu256v2 97.97 98.35 101.90 T:isapxv20 126.84 126.87 126.99 T:elephant200v2 5196.28 5198.62 5200.48 T:elephant176v2 6179.89 6182.81 6183.93 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.64 0.67 0.70 aes256gcmv1 0.65 0.70 0.72 T:aes128gcmv1 7.13 7.16 7.19 ascon128av12 8.41 8.46 8.51 T:xoodyakround3 10.59 10.60 10.63 ascon80pqv12 10.59 10.62 10.66 ascon128v12 14.39 14.41 14.42 ascon128abi32v12 18.77 18.79 18.82 T:schwaemm256128v2 20.90 20.96 21.01 T:isapa128v20 21.42 21.49 21.74 ascon128bi32v12 23.36 23.41 23.45 romulusn 23.22 23.43 23.50 romulusm 24.64 24.68 24.72 T:schwaemm256256v2 24.97 25.02 25.08 T:schwaemm192192v2 25.20 25.26 25.30 T:grain128aeadv2 27.75 27.82 27.86 T:isapa128av20 27.79 27.82 27.85 T:schwaemm128128v2 33.96 34.03 34.08 T:giftcofb128v1 43.03 43.06 43.13 romulust 43.26 43.26 43.27 T:tinyjambu256v2 43.27 43.29 43.30 T:tinyjambu192v2 44.51 44.51 44.54 T:tinyjambu128v2 47.14 47.27 47.42 T:isapk128av20 58.85 59.08 59.41 T:isapk128v20 84.20 84.29 84.33 T:elephant200v2 95.65 97.85 100.05 T:isapxv20 3433.86 3437.80 3439.84 T:elephant176v2 4120.24 4122.84 4126.24 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.65 0.71 0.72 T:aes128gcmv1 0.66 0.71 0.72 aes256gcmv1 7.13 7.15 7.17 ascon128av12 8.42 8.44 8.52 T:xoodyakround3 10.60 10.63 10.66 ascon128v12 10.62 10.63 10.65 ascon80pqv12 14.40 14.42 14.45 ascon128abi32v12 18.74 18.78 18.81 T:schwaemm256128v2 20.93 20.96 21.00 T:isapa128v20 21.41 21.44 21.72 ascon128bi32v12 23.39 23.41 23.44 romulusn 23.43 23.46 23.49 romulusm 24.62 24.67 24.70 T:schwaemm256256v2 24.97 25.03 25.11 T:schwaemm192192v2 25.26 25.32 25.36 T:grain128aeadv2 27.78 27.81 27.84 T:isapa128av20 27.77 27.82 27.85 T:schwaemm128128v2 33.93 34.02 34.09 T:giftcofb128v1 43.05 43.10 43.12 romulust 43.28 43.29 43.30 T:tinyjambu192v2 43.37 43.42 43.51 T:tinyjambu256v2 44.52 44.52 44.52 T:tinyjambu128v2 47.13 47.32 47.67 T:isapk128av20 58.81 58.98 59.34 T:isapk128v20 84.24 84.26 84.29 T:elephant200v2 97.48 97.76 101.27 T:isapxv20 3433.93 3438.00 3439.28 T:elephant176v2 4121.45 4124.23 4126.31 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.66 0.68 0.71 T:aes128gcmv1 0.68 0.70 0.72 aes256gcmv1 7.13 7.15 7.16 ascon128av12 8.42 8.48 8.54 T:xoodyakround3 10.60 10.63 10.67 ascon80pqv12 10.61 10.63 10.65 ascon128v12 14.40 14.43 14.46 ascon128abi32v12 18.76 18.80 18.80 T:schwaemm256128v2 20.92 20.96 21.02 T:isapa128v20 21.41 21.44 21.74 ascon128bi32v12 23.38 23.40 23.43 romulusn 23.28 23.45 23.50 romulusm 24.64 24.71 24.77 T:schwaemm256256v2 25.00 25.02 25.11 T:schwaemm192192v2 25.25 25.32 25.35 T:grain128aeadv2 27.75 27.79 27.85 T:isapa128av20 27.78 27.83 27.87 T:schwaemm128128v2 33.95 34.04 34.09 T:giftcofb128v1 43.03 43.06 43.12 romulust 43.26 43.29 43.30 T:tinyjambu192v2 43.38 43.42 43.51 T:tinyjambu256v2 44.52 44.52 44.52 T:tinyjambu128v2 47.18 47.41 47.56 T:isapk128av20 58.84 59.00 59.33 T:isapk128v20 84.23 84.26 84.34 T:elephant200v2 97.54 98.09 101.26 T:isapxv20 3433.71 3438.25 3439.98 T:elephant176v2 4121.10 4123.80 4127.18 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 1.18 1.19 1.20 T:aes128gcmv1 1.33 1.34 1.35 aes256gcmv1 7.37 7.38 7.38 ascon128av12 10.77 10.78 10.79 ascon80pqv12 10.77 10.81 10.83 ascon128v12 12.59 12.61 12.65 T:xoodyakround3 14.79 14.81 14.82 ascon128abi32v12 19.46 19.49 19.51 T:schwaemm256128v2 21.91 21.93 21.96 ascon128bi32v12 25.34 25.37 25.43 T:schwaemm256256v2 25.65 25.75 25.77 T:grain128aeadv2 25.74 25.76 25.80 T:schwaemm192192v2 28.37 28.38 28.39 T:schwaemm128128v2 30.61 30.68 30.72 romulusn 34.20 34.21 34.22 T:giftcofb128v1 36.61 36.63 36.68 T:isapa128av20 42.55 42.60 42.66 romulusm 46.40 46.42 46.44 T:isapa128v20 57.30 57.30 57.30 T:tinyjambu128v2 63.83 63.84 63.84 T:tinyjambu192v2 67.13 67.22 67.33 T:isapk128av20 68.45 68.45 68.46 T:tinyjambu256v2 86.14 86.16 86.19 romulust 129.52 129.58 129.64 T:elephant200v2 133.27 133.43 133.55 T:isapk128v20 213.10 213.15 216.46 T:isapxv20 5234.20 5235.42 5236.31 T:elephant176v2 6249.50 6253.18 6255.82 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 1.34 1.36 1.37 T:aes128gcmv1 1.72 1.72 1.73 aes256gcmv1 7.38 7.39 7.40 ascon128av12 10.77 10.79 10.81 ascon80pqv12 10.78 10.80 10.82 ascon128v12 12.49 12.52 12.54 T:xoodyakround3 14.61 14.62 14.62 ascon128abi32v12 19.47 19.49 19.50 T:schwaemm256128v2 21.80 21.82 21.85 ascon128bi32v12 25.33 25.34 25.41 T:schwaemm256256v2 25.71 25.75 25.81 T:schwaemm192192v2 26.05 26.08 26.11 T:grain128aeadv2 28.37 28.38 28.42 T:schwaemm128128v2 30.86 30.88 30.89 romulusn 34.21 34.29 34.31 T:giftcofb128v1 36.60 36.63 36.68 T:isapa128av20 42.54 42.60 42.70 romulusm 46.42 46.45 46.47 T:isapa128v20 57.18 57.18 57.19 T:tinyjambu128v2 63.85 63.85 63.87 T:tinyjambu192v2 67.05 67.15 67.31 T:isapk128av20 68.54 68.60 68.61 T:tinyjambu256v2 86.13 86.18 86.23 romulust 129.48 129.54 129.63 T:elephant200v2 133.12 133.36 133.65 T:isapk128v20 216.52 216.71 219.94 T:isapxv20 5234.15 5235.72 5238.58 T:elephant176v2 6250.76 6253.02 6254.91 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 1.34 1.36 1.37 T:aes128gcmv1 1.71 1.72 1.73 aes256gcmv1 7.38 7.40 7.41 ascon128av12 10.77 10.77 10.80 ascon80pqv12 10.80 10.82 10.83 ascon128v12 12.50 12.56 12.59 T:xoodyakround3 14.61 14.62 14.63 ascon128abi32v12 19.45 19.48 19.49 T:schwaemm256128v2 21.76 21.80 21.82 ascon128bi32v12 25.35 25.39 25.41 T:schwaemm256256v2 25.73 25.74 25.77 T:schwaemm192192v2 26.06 26.08 26.10 T:grain128aeadv2 28.37 28.38 28.40 T:schwaemm128128v2 28.76 28.78 28.79 T:isapa128v20 29.18 29.20 29.23 T:isapa128av20 30.85 30.87 30.88 romulusn 34.24 34.28 34.32 T:giftcofb128v1 42.54 42.57 42.65 romulusm 44.43 44.46 44.49 romulust 51.82 51.87 52.02 T:isapk128av20 57.18 57.18 57.19 T:tinyjambu128v2 63.85 63.86 63.87 T:tinyjambu192v2 68.54 68.59 68.60 T:tinyjambu256v2 87.88 87.99 88.08 T:isapk128v20 129.47 129.56 129.63 T:elephant200v2 141.12 141.19 144.46 T:isapxv20 5234.13 5235.21 5236.37 T:elephant176v2 6249.78 6252.47 6254.27 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 6.56 6.72 6.94 T:aes128gcmv1 7.53 7.59 7.66 aes256gcmv1 11.16 11.28 11.50 ascon128av12 14.19 14.38 14.66 ascon80pqv12 14.38 14.53 14.75 ascon128v12 17.97 18.16 18.47 T:xoodyakround3 21.81 22.03 22.09 ascon128abi32v12 28.62 28.78 29.06 ascon128bi32v12 31.25 31.41 31.66 T:schwaemm256128v2 35.03 35.06 35.12 T:grain128aeadv2 36.00 36.22 36.56 T:schwaemm128128v2 36.75 36.88 36.97 romulusn 39.47 39.69 40.09 T:schwaemm256256v2 40.97 41.12 41.25 T:giftcofb128v1 41.44 41.97 42.44 T:schwaemm192192v2 48.97 49.16 49.47 romulusm 66.75 66.78 66.84 T:tinyjambu128v2 73.88 73.91 73.94 T:tinyjambu192v2 79.06 79.09 79.12 T:tinyjambu256v2 87.09 87.28 87.88 T:isapa128av20 114.88 115.00 115.25 romulust 182.88 183.16 183.66 T:elephant200v2 235.00 235.31 235.81 T:isapk128av20 386.41 386.50 387.38 T:isapa128v20 1414.28 1416.88 1424.69 T:isapk128v20 2050.84 2054.19 2119.81 T:isapxv20 6512.50 6513.28 6515.91 T:elephant176v2 8360.75 8367.62 8371.03 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 6.59 6.69 6.91 T:aes128gcmv1 7.69 7.75 7.81 aes256gcmv1 11.22 11.34 11.53 ascon128av12 14.25 14.34 14.66 ascon80pqv12 14.44 14.53 14.72 ascon128v12 18.06 18.19 18.69 T:xoodyakround3 21.59 21.72 22.19 ascon128abi32v12 28.56 28.66 29.00 ascon128bi32v12 31.19 31.34 31.56 T:schwaemm256128v2 35.31 35.38 35.47 T:grain128aeadv2 35.94 36.03 36.41 T:schwaemm128128v2 36.94 37.06 37.22 romulusn 39.31 39.62 39.94 T:schwaemm256256v2 40.97 41.09 41.25 T:giftcofb128v1 41.22 42.00 42.41 T:schwaemm192192v2 50.66 50.72 50.97 romulusm 66.69 66.75 66.81 T:tinyjambu128v2 74.03 74.06 74.09 T:tinyjambu192v2 79.31 79.34 79.38 T:tinyjambu256v2 87.19 87.34 87.50 T:isapa128av20 114.91 115.38 115.75 romulust 182.69 182.84 183.00 T:elephant200v2 235.47 236.16 236.88 T:isapk128av20 387.16 387.47 388.06 T:isapa128v20 1414.38 1419.31 1422.28 T:isapk128v20 2120.31 2123.03 2124.53 T:isapxv20 6512.09 6512.94 6514.50 T:elephant176v2 8363.72 8366.88 8367.84 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 6.62 6.69 6.72 T:aes128gcmv1 7.66 7.69 7.78 aes256gcmv1 11.34 11.41 11.53 ascon128av12 14.25 14.41 14.56 ascon80pqv12 14.31 14.41 14.47 ascon128v12 17.88 17.97 18.25 T:xoodyakround3 21.62 21.69 21.88 ascon128abi32v12 28.56 28.75 28.97 ascon128bi32v12 31.12 31.28 31.44 T:schwaemm256128v2 35.38 35.38 35.41 T:grain128aeadv2 35.88 36.12 36.34 T:schwaemm128128v2 36.94 37.03 37.16 romulusn 39.41 39.56 39.75 T:schwaemm256256v2 40.94 41.06 41.19 T:giftcofb128v1 41.22 41.81 41.97 T:schwaemm192192v2 50.75 50.81 50.91 romulusm 58.03 58.28 58.50 T:isapa128av20 66.66 66.69 66.72 T:tinyjambu128v2 72.31 72.47 72.88 romulust 74.00 74.00 74.03 T:tinyjambu192v2 79.31 79.34 79.38 T:tinyjambu256v2 145.41 146.34 147.03 T:isapk128av20 182.69 182.88 182.97 T:elephant200v2 204.22 204.56 204.81 T:isapa128v20 739.34 740.03 742.53 T:isapk128v20 1108.38 1109.09 1113.91 T:isapxv20 6512.47 6513.19 6515.72 T:elephant176v2 8362.12 8368.47 8371.09 T:elephant160v2