VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Skylake (506e3); 2015 Intel Core i5-6500T; 4 x 2500MHz; thinksky, supercop-20260217

[Page version: 20260319 20:29:39]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.18 1.19 1.20 T:aes128gcmv1 1.43 1.44 1.44 aes256gcmv1 7.54 7.58 7.61 ascon128av12 10.92 10.94 10.97 ascon128v12 10.93 10.96 10.99 ascon80pqv12 13.84 14.02 14.07 ascon128abi32v12 15.72 15.76 15.79 T:xoodyakround3 17.53 17.59 17.64 T:schwaemm256128v2 20.52 20.92 21.09 ascon128bi32v12 23.07 23.13 23.18 T:schwaemm192192v2 23.32 23.87 23.95 T:schwaemm256256v2 24.17 24.20 24.29 T:grain128aeadv2 25.40 25.44 25.48 T:schwaemm128128v2 33.68 33.72 33.76 T:giftcofb128v1 38.00 38.03 38.06 romulusn 40.52 40.60 40.66 T:isapa128av20 43.01 43.13 43.21 T:isapa128v20 61.20 61.36 61.41 romulusm 67.89 67.90 67.94 T:tinyjambu128v2 67.85 67.98 68.11 T:isapk128av20 83.06 83.50 83.50 T:tinyjambu192v2 89.29 89.30 89.33 T:tinyjambu256v2 90.34 90.56 90.80 T:isapk128v20 127.80 127.87 127.94 romulust 166.31 166.48 166.91 T:isapxv20 172.04 172.11 172.19 T:elephant200v2 6817.42 6819.43 6822.38 T:elephant176v2 7977.63 7980.36 7982.11 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.04 1.06 1.07 T:aes128gcmv1 1.41 1.43 1.44 aes256gcmv1 7.39 7.42 7.44 ascon128av12 10.92 10.95 10.98 ascon128v12 10.92 10.95 10.98 ascon80pqv12 13.68 13.72 13.78 ascon128abi32v12 15.53 15.57 15.60 T:xoodyakround3 17.53 17.58 17.64 T:schwaemm256128v2 20.82 20.84 20.86 ascon128bi32v12 23.08 23.13 23.18 T:schwaemm192192v2 23.31 23.88 23.96 T:schwaemm256256v2 24.75 24.78 24.80 T:grain128aeadv2 25.42 25.46 25.49 T:schwaemm128128v2 33.76 33.80 33.85 T:giftcofb128v1 37.83 38.30 38.37 romulusn 40.48 40.59 40.66 T:isapa128av20 43.02 43.11 43.19 T:isapa128v20 60.97 61.02 61.06 romulusm 67.86 67.98 68.12 T:isapk128av20 68.00 68.01 68.04 T:tinyjambu128v2 83.38 83.39 83.39 T:tinyjambu192v2 89.28 89.29 89.30 T:tinyjambu256v2 90.21 90.47 90.76 T:isapk128v20 127.78 127.85 127.91 romulust 165.98 166.43 166.99 T:isapxv20 172.04 172.10 172.17 T:elephant200v2 6817.49 6819.44 6822.47 T:elephant176v2 7978.00 7980.82 7982.30 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.05 1.06 1.06 T:aes128gcmv1 1.42 1.43 1.44 aes256gcmv1 7.40 7.42 7.44 ascon128av12 10.91 10.94 10.96 ascon128v12 10.92 10.95 10.98 ascon80pqv12 13.69 13.73 13.81 ascon128abi32v12 15.55 15.60 15.64 T:xoodyakround3 17.53 17.57 17.62 T:schwaemm256128v2 20.83 20.85 20.87 ascon128bi32v12 21.53 21.59 21.64 T:isapa128v20 23.08 23.14 23.18 T:schwaemm192192v2 23.29 23.88 23.93 T:schwaemm256256v2 24.70 24.74 24.79 T:grain128aeadv2 25.42 25.47 25.51 T:schwaemm128128v2 27.32 27.35 27.39 T:isapa128av20 33.75 33.80 33.84 T:giftcofb128v1 37.68 37.98 38.35 romulusn 43.71 43.75 43.80 romulust 45.05 45.16 45.32 T:isapk128av20 56.29 56.44 56.59 T:isapk128v20 60.96 61.02 61.07 romulusm 68.00 68.01 68.02 T:tinyjambu128v2 83.38 83.39 83.39 T:tinyjambu192v2 89.32 89.35 89.39 T:tinyjambu256v2 98.07 98.33 98.62 T:isapxv20 172.06 172.12 172.20 T:elephant200v2 6817.45 6819.65 6822.54 T:elephant176v2 7978.31 7980.57 7982.07 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.79 0.80 0.81 T:aes128gcmv1 0.92 0.92 0.93 aes256gcmv1 7.46 7.49 7.51 ascon128av12 10.93 10.95 10.98 ascon128v12 10.93 10.96 10.99 ascon80pqv12 11.89 11.90 11.92 T:xoodyakround3 13.93 13.96 13.98 ascon128abi32v12 17.40 17.44 17.46 T:schwaemm256128v2 20.65 20.71 20.78 ascon128bi32v12 22.91 22.96 23.00 T:schwaemm192192v2 23.21 23.78 23.84 T:schwaemm256256v2 24.19 24.21 24.29 T:grain128aeadv2 25.30 25.34 25.37 T:schwaemm128128v2 30.39 30.48 30.55 romulusn 32.33 32.38 32.43 T:isapa128v20 33.95 33.98 34.02 T:isapa128av20 34.22 34.25 34.27 T:giftcofb128v1 42.07 42.12 42.21 romulusm 55.52 55.53 55.55 T:tinyjambu128v2 56.43 56.51 56.59 T:isapk128av20 63.40 63.40 63.40 T:tinyjambu192v2 67.39 67.40 67.40 T:tinyjambu256v2 73.35 73.45 73.54 T:isapk128v20 85.69 85.75 85.80 romulust 128.54 128.58 128.61 T:elephant200v2 132.26 132.39 132.66 T:isapxv20 5093.73 5094.12 5094.56 T:elephant176v2 5981.05 5982.85 5984.09 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.73 0.73 0.74 T:aes128gcmv1 0.91 0.92 0.93 aes256gcmv1 7.37 7.39 7.41 ascon128av12 10.91 10.93 10.95 ascon128v12 10.93 10.96 10.97 ascon80pqv12 11.80 11.82 11.85 T:xoodyakround3 13.76 13.78 13.82 ascon128abi32v12 17.41 17.45 17.49 T:schwaemm256128v2 20.60 20.65 20.86 ascon128bi32v12 22.92 22.96 23.00 T:schwaemm192192v2 23.23 23.79 23.85 T:schwaemm256256v2 24.47 24.50 24.54 T:grain128aeadv2 25.33 25.36 25.40 T:schwaemm128128v2 30.41 30.58 30.67 romulusn 32.33 32.37 32.40 T:isapa128v20 33.94 33.98 34.03 T:isapa128av20 34.24 34.28 34.32 T:giftcofb128v1 41.91 41.96 42.07 romulusm 55.57 55.57 55.57 T:tinyjambu128v2 56.45 56.54 56.63 T:isapk128av20 63.36 63.36 63.37 T:tinyjambu192v2 67.39 67.40 67.40 T:tinyjambu256v2 73.35 73.48 73.61 T:isapk128v20 85.69 85.74 85.81 romulust 128.55 128.59 128.64 T:elephant200v2 132.09 132.38 132.66 T:isapxv20 5093.64 5094.03 5094.70 T:elephant176v2 5981.01 5982.80 5984.08 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.73 0.73 0.74 T:aes128gcmv1 0.91 0.92 0.92 aes256gcmv1 7.37 7.39 7.43 ascon128av12 10.91 10.93 10.95 ascon128v12 10.92 10.95 10.97 ascon80pqv12 11.81 11.84 11.86 T:xoodyakround3 13.76 13.78 13.80 ascon128abi32v12 17.41 17.44 17.50 T:schwaemm256128v2 20.60 20.72 20.87 ascon128bi32v12 21.59 21.63 21.67 T:isapa128v20 22.92 22.97 23.02 T:schwaemm192192v2 23.27 23.79 23.85 T:schwaemm256256v2 24.46 24.50 24.53 T:grain128aeadv2 25.32 25.35 25.38 T:schwaemm128128v2 27.32 27.35 27.38 T:isapa128av20 30.43 30.64 30.73 romulusn 34.25 34.28 34.31 T:giftcofb128v1 41.93 41.98 42.09 romulusm 43.67 43.70 43.73 romulust 45.07 45.15 45.22 T:isapk128av20 55.56 55.57 55.57 T:tinyjambu128v2 56.32 56.39 56.48 T:isapk128v20 63.36 63.36 63.37 T:tinyjambu192v2 67.39 67.40 67.42 T:tinyjambu256v2 98.19 98.31 98.45 T:isapxv20 128.52 128.55 128.60 T:elephant200v2 5093.05 5094.39 5097.95 T:elephant176v2 5981.25 5983.03 5983.89 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.40 0.41 0.42 T:aes128gcmv1 0.41 0.42 0.42 aes256gcmv1 7.36 7.39 7.41 ascon128av12 8.08 8.12 8.15 T:xoodyakround3 10.87 10.93 10.96 ascon128v12 10.93 10.97 11.00 ascon80pqv12 13.81 13.83 13.85 ascon128abi32v12 17.26 17.30 17.35 T:schwaemm256128v2 20.36 20.75 20.90 ascon128bi32v12 21.57 21.64 21.70 T:isapa128v20 22.68 22.74 22.80 T:schwaemm192192v2 22.84 22.98 23.17 romulusn 22.87 23.00 23.13 romulusm 23.11 23.68 23.75 T:schwaemm256256v2 24.20 24.22 24.30 T:grain128aeadv2 25.17 25.21 25.26 T:schwaemm128128v2 27.31 27.35 27.40 T:isapa128av20 34.73 34.77 34.81 T:giftcofb128v1 43.13 43.13 43.14 T:tinyjambu128v2 43.29 43.30 43.32 T:tinyjambu192v2 43.52 43.56 43.61 romulust 44.77 44.89 45.02 T:isapk128av20 45.50 45.50 45.51 T:tinyjambu256v2 55.94 56.19 56.36 T:isapk128v20 85.33 85.37 85.42 T:elephant200v2 98.25 98.36 98.48 T:isapxv20 3365.53 3368.72 3369.01 T:elephant176v2 3986.56 3988.18 3989.02 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.40 0.41 0.42 T:aes128gcmv1 0.40 0.41 0.42 aes256gcmv1 7.33 7.37 7.44 ascon128av12 8.09 8.12 8.15 T:xoodyakround3 10.87 10.90 10.92 ascon128v12 10.91 10.96 10.98 ascon80pqv12 13.80 13.82 13.83 ascon128abi32v12 17.25 17.32 17.37 T:schwaemm256128v2 20.36 20.62 20.89 ascon128bi32v12 21.58 21.63 21.69 T:isapa128v20 22.72 22.77 22.81 T:schwaemm192192v2 22.84 22.89 23.09 romulusn 22.87 23.03 23.17 romulusm 23.10 23.67 23.74 T:schwaemm256256v2 24.20 24.22 24.30 T:grain128aeadv2 25.17 25.21 25.26 T:schwaemm128128v2 27.28 27.34 27.39 T:isapa128av20 34.73 34.79 34.83 T:giftcofb128v1 43.13 43.13 43.14 T:tinyjambu128v2 43.33 43.35 43.35 T:tinyjambu192v2 43.51 43.57 43.63 romulust 44.80 44.93 45.05 T:isapk128av20 45.50 45.50 45.51 T:tinyjambu256v2 56.06 56.24 56.38 T:isapk128v20 85.34 85.38 85.41 T:elephant200v2 98.07 98.32 98.61 T:isapxv20 3365.93 3368.67 3369.04 T:elephant176v2 3986.10 3988.13 3989.03 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.40 0.41 0.42 aes256gcmv1 0.40 0.41 0.42 T:aes128gcmv1 7.33 7.38 7.44 ascon128av12 8.12 8.15 8.17 T:xoodyakround3 10.87 10.90 10.92 ascon128v12 10.94 10.97 10.99 ascon80pqv12 13.79 13.81 13.83 ascon128abi32v12 17.27 17.32 17.37 T:schwaemm256128v2 20.35 20.43 20.89 ascon128bi32v12 21.58 21.65 21.70 T:isapa128v20 22.70 22.75 22.81 T:schwaemm192192v2 22.85 22.89 23.09 romulusn 22.88 22.99 23.12 romulusm 23.11 23.68 23.76 T:schwaemm256256v2 24.20 24.22 24.30 T:grain128aeadv2 25.16 25.20 25.24 T:schwaemm128128v2 27.30 27.34 27.38 T:isapa128av20 34.75 34.79 34.83 T:giftcofb128v1 43.13 43.14 43.14 T:tinyjambu128v2 43.30 43.35 43.35 T:tinyjambu192v2 43.52 43.57 43.59 romulust 44.83 44.96 45.06 T:isapk128av20 45.50 45.50 45.51 T:tinyjambu256v2 56.06 56.21 56.38 T:isapk128v20 85.34 85.37 85.41 T:elephant200v2 98.12 98.34 98.62 T:isapxv20 3365.96 3368.60 3369.09 T:elephant176v2 3986.51 3988.28 3989.19 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.95 0.95 0.96 T:aes128gcmv1 1.11 1.11 1.11 aes256gcmv1 7.66 7.68 7.70 ascon128av12 11.09 11.11 11.13 ascon128v12 11.12 11.13 11.15 ascon80pqv12 12.01 12.03 12.06 T:xoodyakround3 14.26 14.28 14.31 ascon128abi32v12 17.96 17.98 18.01 T:schwaemm256128v2 21.00 21.02 21.12 ascon128bi32v12 23.46 23.49 23.51 T:schwaemm192192v2 23.90 24.42 24.44 T:schwaemm256256v2 24.57 24.60 24.67 T:grain128aeadv2 25.65 25.68 25.71 T:schwaemm128128v2 30.72 30.77 30.83 romulusn 34.55 34.57 34.59 T:giftcofb128v1 36.13 36.16 36.19 T:isapa128av20 42.40 42.46 42.52 romulusm 47.44 47.46 47.50 T:isapa128v20 55.93 55.95 55.97 T:tinyjambu128v2 63.58 63.85 63.86 T:tinyjambu192v2 63.97 64.02 64.09 T:isapk128av20 67.88 67.89 67.89 T:tinyjambu256v2 87.05 87.08 87.13 romulust 128.09 128.16 128.24 T:isapk128v20 131.25 131.28 131.31 T:elephant200v2 214.41 214.49 214.63 T:isapxv20 5131.08 5132.90 5134.02 T:elephant176v2 6050.24 6050.84 6051.29 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.88 0.89 0.89 T:aes128gcmv1 1.10 1.10 1.10 aes256gcmv1 7.56 7.58 7.60 ascon128av12 11.07 11.10 11.12 ascon128v12 11.11 11.13 11.15 ascon80pqv12 11.90 11.92 11.96 T:xoodyakround3 14.09 14.10 14.12 ascon128abi32v12 17.96 17.98 18.01 T:schwaemm256128v2 20.91 21.04 21.17 ascon128bi32v12 23.45 23.48 23.52 T:schwaemm192192v2 23.94 24.41 24.43 T:schwaemm256256v2 24.86 24.89 24.93 T:grain128aeadv2 25.68 25.71 25.75 T:schwaemm128128v2 30.85 30.96 31.01 romulusn 34.59 34.62 34.65 T:giftcofb128v1 36.11 36.16 36.19 T:isapa128av20 42.30 42.36 42.44 romulusm 47.43 47.46 47.50 T:isapa128v20 55.98 55.99 55.99 T:tinyjambu128v2 63.81 63.82 63.82 T:tinyjambu192v2 63.97 64.02 64.09 T:isapk128av20 67.89 67.89 67.92 T:tinyjambu256v2 87.04 87.08 87.14 romulust 128.10 128.20 128.31 T:isapk128v20 131.25 131.28 131.30 T:elephant200v2 214.62 214.89 215.01 T:isapxv20 5131.01 5132.97 5134.01 T:elephant176v2 6050.50 6050.88 6051.41 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.88 0.89 0.89 T:aes128gcmv1 1.10 1.10 1.10 aes256gcmv1 7.56 7.59 7.61 ascon128av12 11.08 11.10 11.11 ascon128v12 11.11 11.13 11.15 ascon80pqv12 11.95 11.97 11.99 T:xoodyakround3 14.08 14.10 14.13 ascon128abi32v12 17.96 17.99 18.03 T:schwaemm256128v2 20.92 21.01 21.16 ascon128bi32v12 23.45 23.48 23.51 T:schwaemm192192v2 23.90 24.40 24.42 T:schwaemm256256v2 24.85 24.88 24.92 T:grain128aeadv2 25.67 25.70 25.73 T:schwaemm128128v2 28.59 28.61 28.64 T:isapa128av20 29.27 29.30 29.32 T:isapa128v20 30.86 30.98 31.02 romulusn 34.59 34.62 34.65 T:giftcofb128v1 42.31 42.37 42.43 romulusm 44.92 44.96 45.00 romulust 49.43 49.48 49.53 T:isapk128av20 55.99 55.99 56.00 T:tinyjambu128v2 63.80 63.82 63.82 T:tinyjambu192v2 67.88 67.91 67.93 T:tinyjambu256v2 84.43 84.47 84.53 T:isapk128v20 131.25 131.29 131.32 T:elephant200v2 140.41 140.54 140.61 T:isapxv20 5131.02 5132.98 5134.06 T:elephant176v2 6050.37 6050.92 6051.40 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 5.91 5.94 6.00 T:aes128gcmv1 7.82 7.86 7.92 aes256gcmv1 11.63 11.70 12.05 ascon128av12 14.76 14.85 15.18 ascon128v12 14.85 14.93 15.14 ascon80pqv12 17.40 17.48 17.58 T:xoodyakround3 21.30 21.42 21.58 ascon128abi32v12 27.59 27.68 27.99 ascon128bi32v12 29.10 29.31 29.59 T:schwaemm256128v2 32.92 33.15 33.36 T:schwaemm128128v2 33.47 33.53 33.62 T:grain128aeadv2 36.88 37.02 37.15 romulusn 37.64 37.92 38.41 T:schwaemm192192v2 37.81 38.55 38.65 T:schwaemm256256v2 42.08 42.22 42.44 T:giftcofb128v1 49.32 49.48 49.69 romulusm 65.50 65.52 65.56 T:tinyjambu128v2 74.21 74.23 74.25 T:tinyjambu192v2 79.04 79.06 79.16 T:tinyjambu256v2 85.75 85.96 86.14 T:isapa128av20 117.32 117.50 117.76 romulust 185.56 185.71 186.03 T:elephant200v2 221.42 222.22 223.32 T:isapk128av20 393.54 393.95 394.64 T:isapa128v20 1367.33 1368.07 1369.10 T:isapk128v20 2078.97 2079.97 2081.13 T:isapxv20 6384.85 6385.21 6386.14 T:elephant176v2 8095.86 8097.57 8100.12 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 5.94 5.98 6.04 T:aes128gcmv1 8.00 8.04 8.08 aes256gcmv1 11.61 11.71 12.00 ascon128av12 14.79 14.88 15.11 ascon80pqv12 14.81 14.93 15.15 ascon128v12 17.30 17.35 17.47 T:xoodyakround3 21.05 21.17 21.41 ascon128abi32v12 27.84 27.94 28.15 ascon128bi32v12 29.15 29.34 29.53 T:schwaemm256128v2 32.95 33.16 33.34 T:schwaemm128128v2 33.77 33.86 33.97 T:grain128aeadv2 36.90 37.00 37.20 romulusn 37.67 37.96 38.22 T:schwaemm192192v2 37.88 38.56 38.72 T:schwaemm256256v2 42.22 42.38 42.49 T:giftcofb128v1 50.65 50.79 50.93 romulusm 65.60 65.62 65.66 T:tinyjambu128v2 74.25 74.27 74.29 T:tinyjambu192v2 79.10 79.12 79.19 T:tinyjambu256v2 85.61 85.79 86.07 T:isapa128av20 117.13 117.35 117.51 romulust 185.51 185.65 185.86 T:elephant200v2 221.86 222.95 223.74 T:isapk128av20 393.74 394.04 394.45 T:isapa128v20 1368.06 1368.93 1370.02 T:isapk128v20 2082.21 2087.58 2089.00 T:isapxv20 6384.54 6385.02 6386.12 T:elephant176v2 8096.42 8097.92 8099.15 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 5.95 5.99 6.04 T:aes128gcmv1 8.10 8.14 8.23 aes256gcmv1 11.59 11.68 11.83 ascon128av12 14.80 14.88 15.03 ascon80pqv12 14.80 14.89 15.09 ascon128v12 17.31 17.41 17.52 T:xoodyakround3 21.09 21.20 21.34 ascon128abi32v12 27.82 27.91 28.09 ascon128bi32v12 29.05 29.21 29.41 T:schwaemm256128v2 32.87 33.10 33.35 T:schwaemm128128v2 33.79 33.86 33.93 T:grain128aeadv2 36.82 36.92 37.02 romulusn 37.51 37.78 38.07 T:schwaemm192192v2 37.70 38.55 38.67 T:schwaemm256256v2 42.23 42.34 42.49 T:giftcofb128v1 50.73 50.82 50.98 romulusm 57.04 57.19 57.42 T:isapa128av20 65.61 65.62 65.64 T:tinyjambu128v2 73.33 73.46 73.65 romulust 74.25 74.27 74.29 T:tinyjambu192v2 79.09 79.11 79.13 T:tinyjambu256v2 137.12 137.81 138.73 T:isapk128av20 185.48 185.65 185.83 T:elephant200v2 205.09 205.42 205.73 T:isapa128v20 716.23 717.00 717.87 T:isapk128v20 1090.26 1093.20 1094.42 T:isapxv20 6385.68 6386.20 6386.75 T:elephant176v2 8096.81 8098.05 8099.93 T:elephant160v2