VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3210M; 2 x 2500MHz; h9ivy, supercop-20251222

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 2.56 2.59 2.61 T:aes128gcmv1 2.79 2.83 2.84 aes256gcmv1 8.77 8.82 8.84 ascon128av12 12.84 12.86 12.88 ascon80pqv12 12.84 12.86 12.91 ascon128v12 16.49 16.57 16.61 T:xoodyakround3 16.78 16.81 16.83 ascon128abi32v12 22.79 22.84 22.87 T:schwaemm256128v2 24.11 24.14 24.38 ascon128bi32v12 27.29 27.38 27.58 T:grain128aeadv2 30.22 30.24 30.30 T:schwaemm192192v2 32.55 32.59 32.65 T:schwaemm128128v2 33.20 33.21 33.23 T:schwaemm256256v2 36.01 36.05 36.11 T:giftcofb128v1 36.22 36.27 36.29 romulusn 49.24 49.65 49.74 T:isapa128v20 51.45 51.50 51.57 T:tinyjambu128v2 55.04 55.14 55.24 T:isapa128av20 59.48 59.57 59.64 romulusm 61.60 61.64 61.68 T:tinyjambu192v2 66.98 67.00 67.05 T:tinyjambu256v2 88.55 88.74 88.97 T:isapk128av20 117.92 118.39 119.04 T:isapk128v20 127.91 127.98 128.12 romulust 169.69 169.86 170.10 T:elephant200v2 179.43 179.73 181.05 T:isapxv20 8952.04 8958.75 9028.09 T:elephant176v2 9718.28 9719.51 9720.04 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 3.05 3.08 3.10 T:aes128gcmv1 3.75 3.78 3.79 aes256gcmv1 8.68 8.72 8.73 ascon128av12 12.80 12.83 12.84 ascon128v12 12.78 12.86 12.90 ascon80pqv12 16.37 16.43 16.50 T:xoodyakround3 16.73 16.76 16.78 ascon128abi32v12 22.80 22.84 22.86 T:schwaemm256128v2 24.18 24.20 24.24 ascon128bi32v12 28.40 28.44 28.57 T:grain128aeadv2 30.11 30.19 30.23 T:schwaemm192192v2 32.57 32.61 32.65 T:schwaemm128128v2 33.16 33.18 33.23 T:schwaemm256256v2 35.91 35.98 36.05 T:giftcofb128v1 36.29 36.35 36.39 romulusn 49.59 49.71 50.11 T:isapa128v20 51.57 51.73 51.79 T:tinyjambu128v2 55.07 55.12 55.20 T:isapa128av20 59.53 59.60 59.65 romulusm 62.10 62.15 62.20 T:tinyjambu192v2 67.09 67.14 67.20 T:tinyjambu256v2 88.25 88.56 88.84 T:isapk128av20 118.23 118.44 119.05 T:isapk128v20 128.03 128.08 128.18 romulust 169.71 169.86 170.10 T:elephant200v2 179.27 179.79 181.00 T:isapxv20 8953.94 8959.58 9029.53 T:elephant176v2 9718.54 9718.98 9719.79 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 3.07 3.08 3.09 T:aes128gcmv1 3.76 3.77 3.78 aes256gcmv1 8.69 8.69 8.71 ascon128av12 12.79 12.81 12.90 ascon80pqv12 12.81 12.82 12.84 ascon128v12 16.35 16.37 16.41 T:xoodyakround3 16.73 16.75 16.78 ascon128abi32v12 22.81 22.83 22.86 T:schwaemm256128v2 24.18 24.20 24.23 ascon128bi32v12 25.02 25.08 25.10 T:isapa128v20 28.40 28.43 28.61 T:grain128aeadv2 30.14 30.18 30.22 T:schwaemm192192v2 32.59 32.62 32.66 T:schwaemm128128v2 33.17 33.18 33.24 T:schwaemm256256v2 35.96 35.98 36.03 T:giftcofb128v1 36.32 36.34 36.38 romulusn 37.16 37.25 37.33 T:isapa128av20 43.97 44.03 44.06 romulust 51.58 51.70 51.73 T:tinyjambu128v2 58.29 58.39 58.63 T:isapk128av20 59.55 59.58 59.62 romulusm 62.11 62.15 62.23 T:tinyjambu192v2 67.09 67.15 67.20 T:tinyjambu256v2 73.03 73.39 73.56 T:isapk128v20 105.44 105.58 106.39 T:isapxv20 169.75 170.01 170.09 T:elephant200v2 8952.37 8958.95 9029.99 T:elephant176v2 9718.68 9719.20 9720.28 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 2.17 2.19 2.21 T:aes128gcmv1 2.28 2.31 2.33 aes256gcmv1 8.70 8.73 8.74 ascon128av12 12.42 12.51 12.55 T:xoodyakround3 12.71 12.74 12.77 ascon128v12 12.71 12.74 12.78 ascon80pqv12 16.71 16.74 16.77 ascon128abi32v12 22.67 22.70 22.71 T:schwaemm256128v2 24.31 24.33 24.43 ascon128bi32v12 27.40 27.43 27.67 T:grain128aeadv2 29.75 29.77 29.80 romulusn 30.05 30.09 30.11 T:schwaemm192192v2 32.42 32.44 32.46 T:schwaemm128128v2 33.03 33.05 33.07 T:schwaemm256256v2 36.12 36.16 36.20 T:giftcofb128v1 37.40 37.52 37.77 T:isapa128v20 41.38 41.42 41.46 romulusm 42.61 42.63 42.67 T:tinyjambu128v2 46.17 46.21 46.25 T:isapa128av20 47.29 47.32 47.37 T:tinyjambu192v2 49.84 49.92 50.28 T:tinyjambu256v2 73.54 73.63 73.83 T:isapk128av20 85.76 85.80 85.85 romulust 96.08 96.34 96.62 T:isapk128v20 126.75 126.81 126.97 T:elephant200v2 142.45 142.68 143.63 T:isapxv20 6687.54 6692.72 6744.12 T:elephant176v2 7287.12 7287.56 7287.94 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 2.41 2.43 2.47 T:aes128gcmv1 2.76 2.79 2.80 aes256gcmv1 8.63 8.68 8.71 ascon128av12 12.44 12.46 12.48 T:xoodyakround3 12.71 12.73 12.74 ascon128v12 12.72 12.76 12.82 ascon80pqv12 16.92 16.94 16.96 ascon128abi32v12 22.68 22.69 22.71 T:schwaemm256128v2 24.12 24.14 24.16 ascon128bi32v12 27.92 27.97 28.15 T:grain128aeadv2 29.78 29.82 29.88 romulusn 30.02 30.04 30.07 T:schwaemm192192v2 32.51 32.53 32.57 T:schwaemm128128v2 33.00 33.02 33.03 T:schwaemm256256v2 36.06 36.08 36.13 T:giftcofb128v1 37.24 37.60 37.80 T:isapa128v20 41.42 41.45 41.48 romulusm 42.65 42.69 42.76 T:tinyjambu128v2 46.16 46.20 46.26 T:isapa128av20 47.52 47.54 47.58 T:tinyjambu192v2 50.29 50.32 50.41 T:tinyjambu256v2 73.73 73.82 74.15 T:isapk128av20 85.73 85.77 85.83 romulust 96.04 96.27 96.75 T:isapk128v20 126.72 126.86 126.97 T:elephant200v2 142.47 142.63 143.59 T:isapxv20 6687.60 6692.37 6744.71 T:elephant176v2 7287.38 7287.70 7287.98 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 2.43 2.43 2.44 T:aes128gcmv1 2.78 2.79 2.80 aes256gcmv1 8.62 8.67 8.73 ascon128av12 12.48 12.49 12.53 T:xoodyakround3 12.72 12.73 12.75 ascon128v12 12.73 12.76 12.79 ascon80pqv12 16.93 16.95 16.97 ascon128abi32v12 22.68 22.70 22.72 T:schwaemm256128v2 24.13 24.15 24.16 ascon128bi32v12 25.07 25.09 25.15 T:isapa128v20 27.96 28.12 28.18 T:grain128aeadv2 29.81 29.82 29.85 romulusn 30.02 30.03 30.08 T:schwaemm192192v2 32.48 32.52 32.62 T:schwaemm128128v2 32.99 33.01 33.06 T:schwaemm256256v2 36.06 36.11 36.14 T:giftcofb128v1 37.20 37.24 37.30 T:isapa128av20 41.41 41.44 41.47 romulusm 42.62 42.65 42.74 T:tinyjambu128v2 43.78 43.81 43.89 romulust 47.52 47.55 47.58 T:tinyjambu192v2 50.30 50.32 50.35 T:tinyjambu256v2 58.31 58.38 58.45 T:isapk128av20 73.61 73.83 73.95 T:isapk128v20 105.49 105.72 106.46 T:isapxv20 126.75 126.88 127.00 T:elephant200v2 6687.54 6692.16 6744.07 T:elephant176v2 7287.30 7287.65 7288.02 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 1.78 1.80 1.82 T:aes128gcmv1 1.78 1.80 1.82 aes256gcmv1 8.47 8.53 8.57 T:xoodyakround3 8.60 8.62 8.64 ascon128av12 12.58 12.60 12.62 ascon80pqv12 12.57 12.60 12.62 ascon128v12 16.65 16.68 16.72 ascon128abi32v12 22.55 22.56 22.58 T:schwaemm256128v2 23.23 23.27 23.31 romulusm 23.27 23.30 23.33 romulusn 24.15 24.19 24.54 ascon128bi32v12 25.05 25.10 25.54 T:isapa128v20 27.49 27.53 27.77 T:grain128aeadv2 29.82 29.88 29.95 T:schwaemm192192v2 32.26 32.30 32.34 T:schwaemm128128v2 32.68 32.77 33.58 T:tinyjambu256v2 32.89 32.91 32.93 T:schwaemm256256v2 32.99 33.01 33.05 T:tinyjambu192v2 33.76 33.79 33.82 T:tinyjambu128v2 36.21 36.26 36.33 T:giftcofb128v1 37.22 37.25 37.32 T:isapa128av20 43.54 43.61 43.65 romulust 58.20 58.39 58.74 T:isapk128av20 73.46 73.62 73.74 T:isapk128v20 84.10 84.20 84.27 T:elephant200v2 105.09 105.68 106.47 T:isapxv20 4421.51 4425.89 4459.75 T:elephant176v2 4855.61 4856.29 4856.91 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 1.77 1.79 1.82 T:aes128gcmv1 1.77 1.81 1.83 aes256gcmv1 8.52 8.60 8.63 T:xoodyakround3 8.52 8.65 8.72 ascon128av12 12.62 12.65 12.67 ascon128v12 12.63 12.71 12.77 ascon80pqv12 17.09 17.13 17.15 ascon128abi32v12 22.53 22.56 22.58 T:schwaemm256128v2 23.23 23.29 23.34 romulusn 23.24 23.32 23.34 romulusm 24.00 24.04 24.05 ascon128bi32v12 25.03 25.11 25.18 T:isapa128v20 27.47 27.51 27.77 T:grain128aeadv2 29.88 29.91 29.95 T:schwaemm192192v2 32.40 32.43 32.48 T:schwaemm128128v2 32.89 32.91 32.93 T:schwaemm256256v2 32.91 32.93 32.97 T:tinyjambu192v2 33.48 33.51 33.54 T:tinyjambu256v2 33.74 33.78 33.81 T:tinyjambu128v2 36.21 36.24 36.30 T:giftcofb128v1 37.19 37.26 37.35 T:isapa128av20 43.59 43.63 43.67 romulust 58.19 58.29 58.42 T:isapk128av20 73.49 73.57 73.66 T:isapk128v20 84.11 84.17 84.23 T:elephant200v2 105.35 105.60 106.66 T:isapxv20 4421.65 4425.67 4461.11 T:elephant176v2 4855.78 4856.33 4857.04 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 1.79 1.80 1.81 T:aes128gcmv1 1.80 1.81 1.83 aes256gcmv1 8.53 8.57 8.62 T:xoodyakround3 8.56 8.64 8.69 ascon128av12 12.63 12.66 12.68 ascon128v12 12.63 12.67 12.69 ascon80pqv12 17.09 17.11 17.13 ascon128abi32v12 22.54 22.56 22.57 T:schwaemm256128v2 23.25 23.30 23.36 romulusm 23.24 23.30 23.33 romulusn 23.99 24.00 24.05 ascon128bi32v12 25.04 25.11 25.18 T:isapa128v20 27.46 27.52 27.75 T:grain128aeadv2 29.87 29.89 29.96 T:schwaemm192192v2 32.39 32.44 32.48 T:schwaemm128128v2 32.89 32.91 32.93 T:schwaemm256256v2 32.91 32.96 32.99 T:tinyjambu192v2 33.48 33.50 33.55 T:tinyjambu256v2 33.73 33.77 33.81 T:tinyjambu128v2 36.20 36.25 36.29 T:giftcofb128v1 37.22 37.27 37.31 T:isapa128av20 43.58 43.65 43.68 romulust 57.90 58.38 58.86 T:isapk128av20 73.52 73.63 74.31 T:isapk128v20 84.12 84.18 84.22 T:elephant200v2 105.42 105.53 106.63 T:isapxv20 4421.67 4425.64 4459.66 T:elephant176v2 4855.44 4856.30 4856.82 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 2.41 2.42 2.43 T:aes128gcmv1 2.56 2.57 2.58 aes256gcmv1 8.92 8.93 8.96 ascon128av12 12.58 12.69 12.72 T:xoodyakround3 12.93 12.94 12.95 ascon128v12 12.93 12.94 12.96 ascon80pqv12 17.11 17.15 17.18 ascon128abi32v12 23.34 23.35 23.36 T:schwaemm256128v2 24.71 24.73 24.78 ascon128bi32v12 27.88 27.90 28.11 T:grain128aeadv2 30.29 30.31 30.35 romulusn 30.72 30.74 30.76 T:schwaemm192192v2 32.85 32.87 32.90 T:schwaemm128128v2 33.99 34.01 34.03 T:schwaemm256256v2 36.47 36.50 36.51 T:giftcofb128v1 41.97 42.02 42.05 romulusm 42.97 42.98 43.01 T:tinyjambu128v2 47.67 47.70 47.72 T:tinyjambu192v2 49.26 49.28 49.32 T:isapa128av20 50.25 50.30 50.66 T:tinyjambu256v2 55.04 55.05 55.20 T:isapa128v20 85.56 85.66 85.73 T:isapk128av20 87.08 87.10 87.19 romulust 129.43 129.55 129.63 T:elephant200v2 171.28 171.46 172.09 T:isapk128v20 228.05 228.46 229.20 T:isapxv20 6741.75 6743.31 6791.25 T:elephant176v2 7369.46 7369.76 7370.14 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 2.66 2.66 2.69 T:aes128gcmv1 3.04 3.05 3.09 aes256gcmv1 8.83 8.87 8.94 ascon128av12 12.58 12.60 12.64 T:xoodyakround3 12.91 12.92 12.94 ascon128v12 12.95 12.97 13.00 ascon80pqv12 17.32 17.33 17.35 ascon128abi32v12 23.33 23.35 23.37 T:schwaemm256128v2 24.53 24.55 24.55 ascon128bi32v12 28.42 28.45 28.63 T:grain128aeadv2 30.33 30.35 30.37 romulusn 30.70 30.72 30.75 T:schwaemm192192v2 32.91 32.95 33.03 T:schwaemm128128v2 33.97 33.98 33.99 T:schwaemm256256v2 36.41 36.45 36.49 T:giftcofb128v1 42.06 42.10 42.12 romulusm 42.98 42.99 43.05 T:tinyjambu128v2 47.91 47.95 48.10 T:tinyjambu192v2 49.28 49.33 49.36 T:isapa128av20 50.68 50.70 50.72 T:tinyjambu256v2 54.94 55.08 55.24 T:isapa128v20 85.64 85.77 85.85 T:isapk128av20 87.10 87.12 87.15 romulust 129.43 129.46 129.60 T:elephant200v2 171.16 171.33 171.78 T:isapk128v20 228.30 228.52 229.39 T:isapxv20 6742.24 6742.94 6791.01 T:elephant176v2 7369.51 7369.98 7370.22 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 2.65 2.66 2.67 T:aes128gcmv1 3.04 3.05 3.06 aes256gcmv1 8.84 8.85 8.91 ascon128av12 12.65 12.67 12.69 T:xoodyakround3 12.92 12.92 12.93 ascon128v12 12.93 12.96 12.98 ascon80pqv12 17.32 17.33 17.34 ascon128abi32v12 23.34 23.36 23.37 T:schwaemm256128v2 24.52 24.53 24.55 ascon128bi32v12 28.41 28.41 28.60 T:grain128aeadv2 30.33 30.34 30.38 romulusn 30.72 30.73 30.76 T:schwaemm192192v2 32.90 32.91 32.93 T:schwaemm128128v2 33.96 33.98 33.99 T:schwaemm256256v2 33.98 34.00 34.06 T:isapa128v20 36.41 36.45 36.49 T:giftcofb128v1 39.02 39.04 39.08 T:isapa128av20 42.08 42.10 42.12 romulusm 42.98 43.01 43.03 T:tinyjambu128v2 45.03 45.06 45.08 romulust 47.91 47.93 47.95 T:tinyjambu192v2 50.69 50.71 50.74 T:tinyjambu256v2 65.94 65.96 66.15 T:isapk128av20 112.95 113.00 113.09 T:isapk128v20 129.43 129.49 129.60 T:elephant200v2 149.44 149.51 150.22 T:isapxv20 6742.02 6743.10 6792.65 T:elephant176v2 7369.55 7369.97 7370.25 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 10.47 10.55 10.68 T:aes128gcmv1 11.59 11.73 12.55 aes256gcmv1 13.55 13.62 13.88 ascon128av12 17.26 17.34 17.67 ascon128v12 17.35 17.45 17.84 ascon80pqv12 18.54 18.62 19.04 T:xoodyakround3 25.76 25.85 26.18 ascon128abi32v12 33.98 34.12 34.27 ascon128bi32v12 37.95 37.98 38.11 T:schwaemm256128v2 38.53 38.64 38.84 T:grain128aeadv2 42.42 42.48 42.74 T:schwaemm128128v2 42.45 42.62 42.66 romulusn 44.14 44.20 44.39 T:giftcofb128v1 49.60 49.88 50.03 T:schwaemm192192v2 50.73 50.92 51.11 T:tinyjambu128v2 54.24 54.38 54.55 T:schwaemm256256v2 55.04 55.15 55.59 romulusm 55.97 56.18 56.41 T:tinyjambu192v2 58.77 59.02 59.13 T:tinyjambu256v2 117.25 117.41 117.81 romulust 120.16 120.51 120.75 T:isapa128av20 183.27 183.63 184.16 T:elephant200v2 346.17 346.41 347.03 T:isapk128av20 457.06 457.67 458.92 T:isapa128v20 1873.44 1874.52 1878.46 T:isapk128v20 2167.80 2176.41 2178.32 T:isapxv20 8397.10 8403.24 8453.70 T:elephant176v2 9867.60 9870.83 9874.13 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 10.44 10.69 11.13 T:aes128gcmv1 11.65 11.74 12.52 aes256gcmv1 13.58 13.80 14.27 ascon128av12 17.22 17.22 17.84 ascon128v12 17.44 17.45 17.90 ascon80pqv12 18.39 18.53 19.16 T:xoodyakround3 26.02 26.20 26.37 ascon128abi32v12 33.60 33.69 33.77 ascon128bi32v12 37.84 37.93 38.13 T:schwaemm256128v2 38.92 39.09 39.36 T:grain128aeadv2 42.22 42.49 42.76 T:schwaemm128128v2 42.47 42.55 42.70 romulusn 44.38 44.46 44.68 T:giftcofb128v1 49.74 50.02 50.16 T:schwaemm192192v2 50.72 50.83 51.04 T:tinyjambu128v2 54.45 54.56 54.72 T:schwaemm256256v2 56.44 56.57 56.77 T:tinyjambu192v2 57.39 57.52 57.83 romulusm 59.38 59.63 59.81 T:tinyjambu256v2 117.59 117.89 118.18 romulust 120.16 120.34 120.74 T:isapa128av20 183.26 183.38 183.65 T:elephant200v2 346.25 346.53 347.11 T:isapk128av20 457.39 457.73 464.99 T:isapa128v20 1873.59 1876.08 1882.10 T:isapk128v20 2174.30 2177.37 2179.21 T:isapxv20 8396.02 8398.99 8457.12 T:elephant176v2 9868.73 9870.84 9872.56 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 10.40 10.46 10.80 T:aes128gcmv1 11.69 11.88 11.95 aes256gcmv1 13.61 13.66 13.82 ascon128av12 17.22 17.27 17.45 ascon128v12 17.44 17.52 17.59 ascon80pqv12 18.45 18.52 18.90 T:xoodyakround3 26.05 26.10 26.25 ascon128abi32v12 33.54 33.59 33.62 ascon128bi32v12 37.88 37.98 38.02 T:schwaemm256128v2 38.81 38.89 38.92 T:grain128aeadv2 42.12 42.25 42.37 T:schwaemm128128v2 42.33 42.44 42.59 romulusn 44.14 44.30 44.45 T:giftcofb128v1 49.63 49.72 49.84 T:schwaemm192192v2 50.62 50.70 50.93 T:tinyjambu128v2 54.45 54.53 54.62 T:schwaemm256256v2 56.44 56.49 56.55 T:tinyjambu192v2 57.31 57.45 57.56 romulusm 59.32 59.42 59.52 T:tinyjambu256v2 73.86 74.14 74.43 romulust 79.18 79.23 79.62 T:isapa128av20 182.95 183.23 183.69 T:elephant200v2 226.84 227.21 228.09 T:isapk128av20 238.34 238.59 241.93 T:isapa128v20 997.54 999.02 999.60 T:isapk128v20 1137.30 1140.73 1141.29 T:isapxv20 8394.65 8400.13 8453.34 T:elephant176v2 9868.05 9870.56 9875.50 T:elephant160v2