VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Skylake (506e3); 2015 Intel Core i5-6500T; 4 x 2500MHz; thinksky, supercop-20251222

[Page version: 20260112 15:28:56]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.18 1.19 1.20 T:aes128gcmv1 1.43 1.44 1.45 aes256gcmv1 7.53 7.55 7.60 ascon128av12 10.93 10.94 10.97 ascon80pqv12 10.92 10.95 10.98 ascon128v12 13.84 14.06 14.07 ascon128abi32v12 15.62 15.67 15.72 T:xoodyakround3 17.48 17.52 17.55 T:schwaemm256128v2 21.03 21.05 21.08 ascon128bi32v12 23.01 23.08 23.14 T:schwaemm192192v2 23.21 23.23 23.25 T:schwaemm256256v2 24.14 24.16 24.21 T:grain128aeadv2 25.54 25.57 25.62 T:schwaemm128128v2 33.57 33.61 33.64 T:giftcofb128v1 38.33 38.38 38.47 romulusn 40.49 40.55 40.63 T:isapa128av20 43.05 43.10 43.22 T:isapa128v20 60.91 61.25 61.44 romulusm 67.89 67.89 67.90 T:tinyjambu128v2 67.81 67.93 68.05 T:isapk128av20 82.72 83.50 83.50 T:tinyjambu192v2 89.29 89.31 89.36 T:tinyjambu256v2 90.37 90.53 90.84 T:isapk128v20 127.76 127.88 127.97 romulust 142.57? 167.59? 192.45? T:isapxv20 171.99 172.04 172.11 T:elephant200v2 6812.99 6813.32 6813.63 T:elephant176v2 7972.94 7973.57 7974.54 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.03 1.06 1.07 T:aes128gcmv1 1.40 1.43 1.44 aes256gcmv1 7.37 7.39 7.44 ascon128av12 10.90 10.92 10.97 ascon128v12 10.91 10.94 10.97 ascon80pqv12 13.80 13.88 13.91 ascon128abi32v12 15.42 15.46 15.56 T:xoodyakround3 17.49 17.54 17.57 T:schwaemm256128v2 20.82 20.85 20.87 ascon128bi32v12 23.05 23.09 23.16 T:schwaemm192192v2 23.19 23.22 23.24 T:schwaemm256256v2 24.65 24.72 24.73 T:grain128aeadv2 25.54 25.59 25.62 T:schwaemm128128v2 33.66 33.68 33.73 T:giftcofb128v1 38.06 38.08 38.12 romulusn 40.48 40.58 40.64 T:isapa128av20 43.00 43.09 43.20 T:isapa128v20 61.18 61.38 61.50 romulusm 67.89 67.89 67.90 T:tinyjambu128v2 67.90 68.02 68.11 T:isapk128av20 83.38 83.39 83.40 T:tinyjambu192v2 89.28 89.29 89.30 T:tinyjambu256v2 90.33 90.57 90.75 T:isapk128v20 127.80 127.96 128.09 romulust 142.64? 167.67? 192.53? T:isapxv20 172.01 172.05 172.12 T:elephant200v2 6812.96 6813.23 6813.58 T:elephant176v2 7972.49 7973.19 7974.14 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.05 1.06 1.06 T:aes128gcmv1 1.42 1.43 1.44 aes256gcmv1 7.39 7.41 7.43 ascon128av12 10.89 10.94 10.97 ascon128v12 10.92 10.94 10.97 ascon80pqv12 13.82 13.86 13.91 ascon128abi32v12 15.49 15.54 15.60 T:xoodyakround3 17.51 17.54 17.59 T:schwaemm256128v2 20.83 20.84 20.86 ascon128bi32v12 21.52 21.57 21.65 T:isapa128v20 23.05 23.11 23.14 T:schwaemm192192v2 23.21 23.23 23.24 T:schwaemm256256v2 24.65 24.70 24.72 T:grain128aeadv2 25.54 25.58 25.61 T:schwaemm128128v2 27.31 27.36 27.38 T:isapa128av20 33.64 33.69 33.72 T:giftcofb128v1 38.06 38.07 38.11 romulusn 43.74 43.78 44.01 romulust 45.13 45.25 45.41 T:isapk128av20 56.29 56.43 56.82 T:isapk128v20 61.03 61.39 61.61 romulusm 67.89 67.89 67.91 T:tinyjambu128v2 83.38 83.39 83.39 T:tinyjambu192v2 89.35 89.35 89.37 T:tinyjambu256v2 73.51? 98.69? 123.33? T:isapxv20 172.00 172.04 172.10 T:elephant200v2 6813.04 6813.19 6813.65 T:elephant176v2 7972.93 7973.27 7974.02 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.80 0.82 0.83 T:aes128gcmv1 0.91 0.93 0.93 aes256gcmv1 7.45 7.49 7.51 ascon128av12 10.93 10.94 10.96 ascon128v12 10.92 10.95 10.98 ascon80pqv12 11.81 11.85 11.87 T:xoodyakround3 13.93 13.97 13.99 ascon128abi32v12 17.37 17.39 17.41 T:schwaemm256128v2 20.70 20.89 21.00 ascon128bi32v12 22.91 22.93 22.99 T:schwaemm192192v2 23.10 23.12 23.15 T:schwaemm256256v2 24.15 24.20 24.24 T:grain128aeadv2 25.44 25.46 25.49 T:schwaemm128128v2 30.45 30.62 30.69 romulusn 32.36 32.38 32.43 T:isapa128v20 33.70 33.74 33.76 T:giftcofb128v1 33.92 33.95 34.01 T:isapa128av20 41.83 42.04 42.15 romulusm 55.51 55.51 55.56 T:tinyjambu128v2 56.44 56.54 56.64 T:isapk128av20 63.40 63.40 63.43 T:tinyjambu192v2 67.39 67.40 67.41 T:tinyjambu256v2 73.38 73.50 73.71 T:isapk128v20 85.76 85.85 86.03 romulust 128.49 128.51 128.54 T:elephant200v2 120.43? 132.90? 145.36? T:isapxv20 5087.71 5087.91 5088.10 T:elephant176v2 5978.21 5978.55 5979.74 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.71 0.73 0.74 T:aes128gcmv1 0.89 0.92 0.93 aes256gcmv1 7.36 7.38 7.42 ascon128av12 10.89 10.91 10.93 ascon128v12 10.93 10.96 10.98 ascon80pqv12 11.75 11.78 11.81 T:xoodyakround3 13.83 13.87 13.89 ascon128abi32v12 17.41 17.42 17.48 T:schwaemm256128v2 20.59 20.63 20.89 ascon128bi32v12 22.97 23.00 23.02 T:schwaemm192192v2 23.11 23.13 23.15 T:schwaemm256256v2 24.40 24.46 24.48 T:grain128aeadv2 25.45 25.48 25.50 T:schwaemm128128v2 30.50 30.54 30.64 romulusn 32.32 32.36 32.41 T:isapa128v20 33.78 33.81 33.84 T:giftcofb128v1 33.95 33.97 34.02 T:isapa128av20 41.94 42.12 42.17 romulusm 55.51 55.52 55.52 T:tinyjambu128v2 56.43 56.49 56.65 T:isapk128av20 63.35 63.36 63.37 T:tinyjambu192v2 67.39 67.39 67.40 T:tinyjambu256v2 73.26 73.36 73.56 T:isapk128v20 85.79 85.88 85.94 romulust 128.48 128.51 128.55 T:elephant200v2 120.29? 132.93? 145.57? T:isapxv20 5087.83 5087.95 5088.11 T:elephant176v2 5977.77 5978.15 5979.03 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.73 0.74 0.75 T:aes128gcmv1 0.91 0.92 0.92 aes256gcmv1 7.37 7.40 7.43 ascon128av12 10.90 10.93 10.93 ascon128v12 10.91 10.95 10.97 ascon80pqv12 11.76 11.80 11.82 T:xoodyakround3 13.85 13.87 13.92 ascon128abi32v12 17.41 17.44 17.48 T:schwaemm256128v2 20.61 20.71 20.88 ascon128bi32v12 21.57 21.59 21.65 T:isapa128v20 22.96 22.99 23.03 T:schwaemm192192v2 23.11 23.13 23.15 T:schwaemm256256v2 24.39 24.45 24.46 T:grain128aeadv2 25.43 25.46 25.50 T:schwaemm128128v2 27.32 27.34 27.38 T:isapa128av20 30.51 30.54 30.60 romulusn 33.80 33.81 33.85 T:giftcofb128v1 42.04 42.14 42.18 romulusm 43.74 43.88 44.03 romulust 45.13 45.18 45.23 T:isapk128av20 55.51 55.52 55.53 T:tinyjambu128v2 56.27 56.39 56.57 T:isapk128v20 63.36 63.37 63.37 T:tinyjambu192v2 67.40 67.43 67.43 T:tinyjambu256v2 85.96? 98.36? 110.79? T:isapxv20 128.49 128.52 128.55 T:elephant200v2 5087.82 5088.04 5088.21 T:elephant176v2 5978.16 5978.75 5979.28 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.41 0.41 0.43 aes256gcmv1 0.41 0.42 0.43 T:aes128gcmv1 7.36 7.38 7.43 ascon128av12 8.07 8.10 8.12 T:xoodyakround3 10.89 10.93 10.95 ascon128v12 10.92 10.96 10.98 ascon80pqv12 13.80 13.83 13.86 ascon128abi32v12 17.24 17.31 17.35 T:schwaemm256128v2 20.35 20.40 20.86 ascon128bi32v12 21.58 21.64 21.68 T:isapa128v20 22.76 22.81 22.89 T:schwaemm192192v2 22.90 22.96 23.00 romulusm 23.00 23.02 23.05 T:schwaemm256256v2 23.04 23.08 23.18 romulusn 24.16 24.19 24.23 T:grain128aeadv2 25.29 25.34 25.38 T:schwaemm128128v2 27.30 27.34 27.37 T:isapa128av20 33.87 33.91 33.97 T:giftcofb128v1 43.13 43.13 43.14 T:tinyjambu128v2 43.29 43.30 43.30 T:tinyjambu192v2 43.52 43.55 43.59 romulust 44.76 44.94 45.08 T:isapk128av20 45.50 45.50 45.50 T:tinyjambu256v2 56.03 56.28 56.53 T:isapk128v20 85.31 85.34 85.39 T:elephant200v2 73.68? 98.45? 123.22? T:isapxv20 3364.07 3364.25 3364.47 T:elephant176v2 3983.52 3984.75 3985.00 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.40 0.42 0.43 aes256gcmv1 0.40 0.42 0.43 T:aes128gcmv1 7.31 7.33 7.37 ascon128av12 8.06 8.10 8.12 T:xoodyakround3 10.87 10.89 10.96 ascon128v12 10.93 10.95 10.97 ascon80pqv12 13.77 13.81 13.82 ascon128abi32v12 17.27 17.30 17.34 T:schwaemm256128v2 20.35 20.38 20.44 ascon128bi32v12 21.59 21.65 21.71 T:isapa128v20 22.80 22.83 22.89 T:schwaemm192192v2 22.87 22.91 22.95 romulusm 23.00 23.02 23.03 T:schwaemm256256v2 22.96 23.07 23.14 romulusn 24.09 24.12 24.22 T:grain128aeadv2 25.30 25.34 25.38 T:schwaemm128128v2 27.26 27.31 27.35 T:isapa128av20 33.82 33.88 33.93 T:giftcofb128v1 43.13 43.13 43.14 T:tinyjambu128v2 43.29 43.33 43.35 T:tinyjambu192v2 43.52 43.57 43.71 romulust 44.77 44.87 44.96 T:isapk128av20 45.50 45.50 45.51 T:tinyjambu256v2 56.11 56.22 56.38 T:isapk128v20 85.33 85.35 85.38 T:elephant200v2 73.49? 98.28? 123.13? T:isapxv20 3364.13 3364.39 3364.61 T:elephant176v2 3983.71 3984.52 3985.13 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.41 0.42 0.42 aes256gcmv1 0.41 0.42 0.42 T:aes128gcmv1 7.33 7.36 7.42 ascon128av12 8.09 8.12 8.14 T:xoodyakround3 10.84 10.87 10.91 ascon128v12 10.90 10.94 10.95 ascon80pqv12 13.79 13.83 13.84 ascon128abi32v12 17.28 17.31 17.33 T:schwaemm256128v2 20.34 20.38 20.43 ascon128bi32v12 21.57 21.63 21.68 T:isapa128v20 22.80 22.84 22.90 T:schwaemm192192v2 22.89 22.93 22.98 romulusm 23.01 23.02 23.04 T:schwaemm256256v2 22.98 23.08 23.21 romulusn 24.09 24.11 24.23 T:grain128aeadv2 25.31 25.35 25.38 T:schwaemm128128v2 27.29 27.32 27.37 T:isapa128av20 33.85 33.89 33.92 T:giftcofb128v1 43.13 43.13 43.14 T:tinyjambu128v2 43.29 43.33 43.34 T:tinyjambu192v2 43.53 43.58 43.66 romulust 44.81 44.92 45.10 T:isapk128av20 45.50 45.50 45.57 T:tinyjambu256v2 56.08 56.26 56.47 T:isapk128v20 85.32 85.36 85.38 T:elephant200v2 73.47? 98.35? 123.18? T:isapxv20 3364.12 3364.42 3364.62 T:elephant176v2 3983.83 3984.48 3985.14 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.96 0.97 0.97 T:aes128gcmv1 1.11 1.11 1.12 aes256gcmv1 7.67 7.69 7.71 ascon128av12 11.11 11.13 11.16 ascon128v12 11.12 11.13 11.15 ascon80pqv12 11.97 11.98 11.99 T:xoodyakround3 14.26 14.27 14.29 ascon128abi32v12 17.95 17.96 17.99 T:schwaemm256128v2 20.78 21.03 21.07 ascon128bi32v12 23.46 23.50 23.55 T:schwaemm192192v2 23.74 23.76 23.78 T:schwaemm256256v2 24.58 24.62 24.65 T:grain128aeadv2 25.80 25.82 25.86 T:schwaemm128128v2 30.89 30.94 31.08 romulusn 34.04 34.06 34.09 T:giftcofb128v1 36.11 36.14 36.17 T:isapa128av20 42.28 42.42 42.48 romulusm 47.46 47.51 47.54 T:isapa128v20 55.93 55.93 55.94 T:tinyjambu128v2 63.85 63.85 63.86 T:tinyjambu192v2 63.99 64.02 64.10 T:isapk128av20 67.88 67.89 67.89 T:tinyjambu256v2 87.09 87.14 87.17 romulust 128.11 128.17 128.24 T:isapk128v20 131.21 131.23 131.25 T:elephant200v2 215.30 215.61 230.74 T:isapxv20 5126.56 5126.75 5126.88 T:elephant176v2 6046.11 6046.50 6046.62 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.89 0.89 0.90 T:aes128gcmv1 1.10 1.11 1.11 aes256gcmv1 7.57 7.59 7.62 ascon128av12 11.08 11.10 11.12 ascon128v12 11.11 11.12 11.15 ascon80pqv12 11.86 11.89 11.91 T:xoodyakround3 14.16 14.18 14.20 ascon128abi32v12 17.95 17.98 18.01 T:schwaemm256128v2 20.92 20.94 21.13 ascon128bi32v12 23.49 23.51 23.54 T:schwaemm192192v2 23.72 23.74 23.76 T:schwaemm256256v2 24.82 24.83 24.87 T:grain128aeadv2 25.80 25.83 25.89 T:schwaemm128128v2 30.81 30.85 30.92 romulusn 34.16 34.18 34.19 T:giftcofb128v1 36.12 36.15 36.17 T:isapa128av20 42.25 42.35 42.45 romulusm 47.46 47.50 47.51 T:isapa128v20 55.94 55.94 55.94 T:tinyjambu128v2 63.81 63.82 63.82 T:tinyjambu192v2 63.95 64.00 64.07 T:isapk128av20 67.88 67.89 67.89 T:tinyjambu256v2 87.10 87.18 87.32 romulust 128.14 128.23 128.32 T:isapk128v20 131.21 131.23 131.27 T:elephant200v2 215.15 215.62 230.99 T:isapxv20 5126.57 5126.76 5127.09 T:elephant176v2 6045.88 6046.53 6046.88 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.88 0.89 0.89 T:aes128gcmv1 1.10 1.10 1.11 aes256gcmv1 7.57 7.58 7.62 ascon128av12 11.09 11.10 11.11 ascon128v12 11.11 11.12 11.14 ascon80pqv12 11.91 11.93 11.94 T:xoodyakround3 14.15 14.16 14.18 ascon128abi32v12 17.97 17.98 18.00 T:schwaemm256128v2 20.91 20.92 20.94 ascon128bi32v12 23.50 23.53 23.56 T:schwaemm192192v2 23.73 23.74 23.76 T:schwaemm256256v2 24.81 24.85 24.88 T:grain128aeadv2 25.82 25.84 25.87 T:schwaemm128128v2 28.59 28.61 28.62 T:isapa128av20 29.28 29.31 29.34 T:isapa128v20 30.80 30.86 30.91 romulusn 34.13 34.17 34.21 T:giftcofb128v1 42.28 42.48 42.51 romulusm 44.96 45.02 45.16 romulust 49.43 49.46 49.51 T:isapk128av20 55.93 55.94 55.95 T:tinyjambu128v2 63.81 63.82 63.83 T:tinyjambu192v2 67.89 67.92 67.93 T:tinyjambu256v2 84.37 84.52 84.65 T:isapk128v20 131.21 131.22 131.24 T:elephant200v2 140.46? 140.69? 156.09? T:isapxv20 5126.52 5126.83 5127.10 T:elephant176v2 6046.07 6046.24 6046.65 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 5.91 5.95 6.00 T:aes128gcmv1 7.95 7.99 8.22 aes256gcmv1 12.14 12.30 12.70 ascon128av12 14.96 15.26 15.66 ascon128v12 15.20 15.45 15.61 ascon80pqv12 17.41 17.48 17.66 T:xoodyakround3 21.33 21.48 21.99 ascon128abi32v12 27.99 28.25 28.50 ascon128bi32v12 29.19 29.30 29.52 T:schwaemm256128v2 33.34 33.46 33.80 T:schwaemm128128v2 34.20 34.23 34.28 T:grain128aeadv2 37.08 37.20 37.34 romulusn 37.38 37.55 37.78 T:schwaemm256256v2 38.03 38.24 38.66 T:schwaemm192192v2 41.45 41.66 41.96 T:giftcofb128v1 50.13 50.21 50.62 romulusm 65.60 65.70 65.73 T:tinyjambu128v2 74.23 74.26 74.29 T:tinyjambu192v2 79.06 79.17 79.26 T:tinyjambu256v2 85.73 86.01 86.39 T:isapa128av20 117.35 117.73 118.02 romulust 185.65 186.14 186.50 T:elephant200v2 221.05 222.64 223.23 T:isapk128av20 393.86 394.18 394.87 T:isapa128v20 1367.55 1368.88 1370.26 T:isapk128v20 2084.27? 2090.67? 2457.91? T:isapxv20 6384.55 6386.14 6387.55 T:elephant176v2 8097.23 8098.84 8099.56 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 5.99 6.04 6.15 T:aes128gcmv1 8.15 8.19 8.24 aes256gcmv1 12.01 12.30 12.83 ascon128av12 15.05 15.27 15.40 ascon80pqv12 15.09 15.33 15.59 ascon128v12 17.37 17.49 17.66 T:xoodyakround3 21.22 21.49 21.70 ascon128abi32v12 27.83 28.09 28.29 ascon128bi32v12 29.09 29.20 29.42 T:schwaemm256128v2 33.20 33.41 33.54 T:schwaemm128128v2 34.33 34.38 34.45 T:grain128aeadv2 37.08 37.14 37.32 romulusn 37.43 37.56 37.73 T:schwaemm256256v2 37.86 38.17 38.43 T:schwaemm192192v2 42.33 42.40 42.63 T:giftcofb128v1 51.48 51.71 52.12 romulusm 65.66 65.70 65.73 T:tinyjambu128v2 74.31 74.33 74.35 T:tinyjambu192v2 79.17 79.27 79.29 T:tinyjambu256v2 85.91 86.02 86.35 T:isapa128av20 117.39 117.52 117.63 romulust 185.46 185.54 185.88 T:elephant200v2 222.17 222.47 223.62 T:isapk128av20 394.11 394.57 395.01 T:isapa128v20 1368.40 1369.31 1372.04 T:isapk128v20 2082.34? 2089.38? 2459.36? T:isapxv20 6384.27 6385.18 6385.61 T:elephant176v2 8097.30 8098.62 8101.80 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 5.97 6.00 6.07 T:aes128gcmv1 8.14 8.16 8.20 aes256gcmv1 11.91 12.00 12.20 ascon128av12 14.86 15.09 15.36 ascon80pqv12 15.02 15.11 15.25 ascon128v12 17.30 17.41 17.48 T:xoodyakround3 21.26 21.34 21.50 ascon128abi32v12 27.77 27.87 28.36 ascon128bi32v12 29.05 29.17 29.26 T:schwaemm256128v2 33.09 33.41 33.52 T:schwaemm128128v2 34.34 34.38 34.41 T:grain128aeadv2 36.89 37.02 37.15 romulusn 37.45 37.52 37.57 T:schwaemm256256v2 37.84 38.05 38.22 T:schwaemm192192v2 42.29 42.48 42.58 T:giftcofb128v1 51.48 51.67 51.95 romulusm 57.23 57.33 57.59 T:isapa128av20 65.65 65.69 65.71 T:tinyjambu128v2 73.56 73.65 73.96 romulust 74.27 74.30 74.32 T:tinyjambu192v2 79.14 79.16 79.17 T:tinyjambu256v2 137.74 137.99 138.80 T:isapk128av20 185.53 185.61 185.84 T:elephant200v2 205.23 205.66 206.21 T:isapa128v20 715.78 716.99 718.40 T:isapk128v20 1089.91? 1095.17? 1463.72? T:isapxv20 6384.52 6385.49 6386.38 T:elephant176v2 8097.65 8099.64 8100.98 T:elephant160v2