VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3427U; 2 x 1800MHz; hunsnivy, supercop-20251222

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 3.12 3.14 3.15 T:aes128gcmv1 3.37 3.38 3.39 aes256gcmv1 9.12 9.15 9.18 ascon128av12 12.74 12.89 12.92 ascon80pqv12 12.86 12.91 12.93 ascon128v12 16.46 16.57 16.72 ascon128abi32v12 18.03 18.09 18.26 T:xoodyakround3 22.75 22.76 22.78 T:schwaemm256128v2 24.76 24.80 24.86 ascon128bi32v12 27.23 27.25 27.26 T:schwaemm256256v2 28.22 28.66 29.26 T:grain128aeadv2 30.00 30.02 30.04 T:schwaemm192192v2 33.04 33.06 33.07 T:schwaemm128128v2 36.18 36.23 36.33 romulusn 44.92 44.99 45.05 T:giftcofb128v1 54.90 54.95 54.98 T:isapa128av20 54.87 54.99 55.27 T:isapa128v20 56.08 56.20 56.29 T:tinyjambu128v2 59.40 59.49 59.59 romulusm 59.32 61.07 61.09 T:tinyjambu192v2 69.73 69.80 69.86 T:tinyjambu256v2 94.68 94.93 95.72 T:isapk128av20 125.65 126.33 127.01 T:isapk128v20 126.46 126.62 126.74 romulust 190.58 190.95 191.13 T:elephant200v2 194.27 194.82 195.32 T:isapxv20 9235.91 9243.44 9247.69 T:elephant176v2 10547.93 10556.33 10562.76 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 3.16 3.18 3.19 T:aes128gcmv1 3.43 3.47 3.48 aes256gcmv1 8.73 8.78 8.91 ascon128av12 12.78 12.84 12.88 ascon80pqv12 12.87 12.91 12.96 ascon128v12 16.61 16.82 17.21 ascon128abi32v12 17.83 17.87 17.91 T:xoodyakround3 22.74 22.75 22.77 T:schwaemm256128v2 24.71 24.76 24.86 ascon128bi32v12 27.24 27.26 27.27 T:schwaemm256256v2 29.09 29.54 29.94 T:grain128aeadv2 30.00 30.02 30.05 T:schwaemm192192v2 33.04 33.06 33.08 T:schwaemm128128v2 36.30 36.34 36.38 romulusn 45.00 45.05 45.13 T:giftcofb128v1 54.73 54.82 54.96 T:tinyjambu128v2 54.89 54.96 55.02 T:isapa128av20 54.86 54.98 55.07 T:isapa128v20 59.58 59.65 59.72 romulusm 59.03 60.85 60.96 T:tinyjambu192v2 69.57 69.62 69.78 T:tinyjambu256v2 94.63 94.82 94.93 T:isapk128av20 125.53 126.36 127.55 T:isapk128v20 126.44 126.54 126.71 romulust 190.51 190.93 191.55 T:elephant200v2 192.61 192.78 192.90 T:isapxv20 9235.45 9240.81 9244.62 T:elephant176v2 10548.24 10555.48 10561.03 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 3.16 3.18 3.19 T:aes128gcmv1 3.45 3.47 3.48 aes256gcmv1 8.71 8.74 8.78 ascon128av12 12.82 12.85 12.89 ascon80pqv12 12.82 12.86 12.91 ascon128v12 16.62 16.82 16.83 ascon128abi32v12 17.89 17.92 17.97 T:xoodyakround3 22.76 22.77 22.79 T:schwaemm256128v2 24.69 24.79 24.91 ascon128bi32v12 27.24 27.25 27.27 T:schwaemm256256v2 27.90 27.96 28.03 T:isapa128v20 29.11 29.56 29.96 T:grain128aeadv2 30.01 30.03 30.04 T:schwaemm192192v2 33.05 33.06 33.08 T:schwaemm128128v2 35.55 35.62 35.65 T:isapa128av20 36.27 36.32 36.38 romulusn 43.30 43.41 43.76 romulust 44.97 45.01 45.10 T:giftcofb128v1 54.76 54.91 54.95 T:tinyjambu128v2 59.58 59.66 59.85 romulusm 59.19 60.81 60.92 T:tinyjambu192v2 62.78 62.83 62.99 T:isapk128av20 69.56 69.59 69.63 T:tinyjambu256v2 78.01 78.77 78.87 T:isapk128v20 113.53 113.62 113.73 T:isapxv20 190.57 191.00 191.22 T:elephant200v2 9237.89 9241.32 9245.61 T:elephant176v2 10550.72 10554.89 10557.15 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 2.50 2.52 2.52 T:aes128gcmv1 2.59 2.61 2.62 aes256gcmv1 8.83 8.88 8.94 ascon128av12 12.65 12.71 12.77 ascon80pqv12 12.72 12.76 12.91 ascon128v12 13.72 13.75 13.84 T:xoodyakround3 16.51 16.57 16.59 ascon128abi32v12 22.63 22.64 22.65 T:schwaemm256128v2 24.77 24.79 24.82 ascon128bi32v12 27.09 27.11 27.12 T:schwaemm256256v2 28.10 28.47 29.07 T:grain128aeadv2 29.71 29.74 29.81 romulusn 29.87 29.89 29.92 T:schwaemm192192v2 32.92 32.92 32.94 T:schwaemm128128v2 41.32 41.39 41.42 romulusm 41.15 41.49 41.58 T:isapa128v20 44.95 45.01 45.07 T:giftcofb128v1 46.17 46.20 46.25 T:isapa128av20 46.19 46.23 46.30 T:tinyjambu128v2 48.49 48.53 48.56 T:tinyjambu192v2 53.41 53.43 53.45 T:tinyjambu256v2 78.90 78.91 79.38 T:isapk128av20 84.73 84.83 84.94 romulust 101.95 102.33 102.74 T:isapk128v20 143.53 143.76 143.90 T:elephant200v2 154.07 154.18 154.45 T:isapxv20 6893.13 6902.23 6917.70 T:elephant176v2 7909.65 7913.57 7918.00 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 2.48 2.52 2.54 T:aes128gcmv1 2.63 2.66 2.67 aes256gcmv1 8.61 8.69 8.78 ascon128av12 12.70 12.74 12.78 ascon128v12 12.71 12.79 12.85 ascon80pqv12 13.62 13.64 13.66 T:xoodyakround3 16.45 16.48 16.49 ascon128abi32v12 22.62 22.63 22.65 T:schwaemm256128v2 24.65 24.68 24.70 ascon128bi32v12 27.11 27.12 27.13 T:schwaemm256256v2 28.56 28.95 29.43 T:grain128aeadv2 29.79 29.82 29.86 romulusn 29.88 29.89 29.91 T:schwaemm192192v2 32.91 32.93 32.94 T:schwaemm128128v2 41.03 41.39 41.75 T:isapa128v20 41.39 41.44 41.47 romulusm 45.02 45.04 45.10 T:giftcofb128v1 45.87 45.95 45.99 T:tinyjambu128v2 46.14 46.19 46.27 T:isapa128av20 48.25 48.39 48.48 T:tinyjambu192v2 53.34 53.37 53.39 T:tinyjambu256v2 78.89 79.19 79.45 T:isapk128av20 84.74 84.84 84.96 romulust 101.97 102.49 102.83 T:isapk128v20 143.58 143.70 143.82 T:elephant200v2 152.99 153.14 153.57 T:isapxv20 6893.12 6900.80 6902.74 T:elephant176v2 7908.70 7914.61 7916.01 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 2.50 2.51 2.51 T:aes128gcmv1 2.65 2.65 2.66 aes256gcmv1 8.59 8.71 8.74 ascon128av12 12.69 12.73 12.78 ascon128v12 12.67 12.75 12.86 ascon80pqv12 13.67 13.68 13.70 T:xoodyakround3 16.47 16.49 16.50 ascon128abi32v12 22.63 22.64 22.65 T:schwaemm256128v2 24.67 24.68 24.71 ascon128bi32v12 27.11 27.12 27.13 T:schwaemm256256v2 27.84 27.90 28.09 T:isapa128v20 28.57 28.97 29.46 T:grain128aeadv2 29.78 29.84 29.90 romulusn 29.89 29.90 29.91 T:schwaemm192192v2 32.91 32.92 32.93 T:schwaemm128128v2 36.49 36.52 36.60 T:isapa128av20 41.39 41.43 41.45 romulusm 43.17 43.24 43.38 romulust 45.00 45.01 45.06 T:giftcofb128v1 45.88 45.92 45.98 T:tinyjambu128v2 48.28 48.33 48.42 T:tinyjambu192v2 53.33 53.36 53.41 T:tinyjambu256v2 62.89 62.93 62.95 T:isapk128av20 78.48 78.59 79.12 T:isapk128v20 113.39 113.51 113.55 T:isapxv20 143.49 143.60 143.91 T:elephant200v2 6895.02 6899.70 6901.65 T:elephant176v2 7912.13 7915.46 7918.61 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 1.81 1.84 1.86 aes256gcmv1 1.86 1.90 1.91 T:aes128gcmv1 8.58 8.60 8.64 ascon128av12 9.35 9.42 9.44 T:xoodyakround3 12.57 12.60 12.72 ascon80pqv12 12.60 12.63 12.64 ascon128v12 16.50 16.52 16.77 ascon128abi32v12 22.49 22.51 22.52 T:schwaemm256128v2 23.23 23.28 23.36 romulusm 23.25 23.29 23.36 romulusn 24.88 24.91 24.95 ascon128bi32v12 26.96 26.99 27.00 T:schwaemm256256v2 27.68 27.80 27.88 T:isapa128v20 27.91 28.35 28.99 T:grain128aeadv2 29.75 29.77 29.79 T:schwaemm192192v2 32.77 32.79 32.82 T:schwaemm128128v2 35.95 35.99 36.02 T:tinyjambu192v2 36.04 36.04 36.12 T:tinyjambu128v2 37.08 37.12 37.14 T:tinyjambu256v2 37.43 37.47 37.55 T:isapa128av20 42.87 42.99 43.12 romulust 45.06 45.12 45.18 T:giftcofb128v1 63.02 63.08 63.17 T:isapk128av20 78.29 78.32 79.07 T:isapk128v20 96.51 96.66 96.91 T:elephant200v2 113.66 114.04 114.59 T:isapxv20 4563.87 4567.90 4570.26 T:elephant176v2 5272.10 5274.97 5276.38 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 1.82 1.85 1.87 aes256gcmv1 1.82 1.85 1.87 T:aes128gcmv1 8.55 8.58 8.62 ascon128av12 9.39 9.42 9.45 T:xoodyakround3 12.47 12.61 12.78 ascon80pqv12 12.56 12.61 12.66 ascon128v12 16.12 16.15 16.21 ascon128abi32v12 22.49 22.50 22.51 T:schwaemm256128v2 23.24 23.26 23.31 romulusn 23.22 23.28 23.32 romulusm 24.59 24.64 24.67 ascon128bi32v12 26.97 26.98 27.00 T:schwaemm256256v2 27.79 27.95 28.10 T:isapa128v20 27.95 28.36 28.96 T:grain128aeadv2 29.75 29.77 29.79 T:schwaemm192192v2 32.77 32.78 32.80 T:schwaemm128128v2 35.71 35.77 35.86 T:tinyjambu192v2 36.87 36.92 36.96 T:tinyjambu128v2 37.06 37.08 37.11 T:tinyjambu256v2 37.36 37.43 37.48 T:isapa128av20 43.03 43.14 43.31 romulust 44.99 45.04 45.10 T:giftcofb128v1 62.98 63.05 63.18 T:isapk128av20 78.22 78.31 78.36 T:isapk128v20 96.48 96.69 97.02 T:elephant200v2 113.23 113.43 113.51 T:isapxv20 4566.48 4568.70 4571.38 T:elephant176v2 5269.97 5273.84 5275.99 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 1.83 1.84 1.86 aes256gcmv1 1.84 1.85 1.86 T:aes128gcmv1 8.56 8.58 8.60 ascon128av12 9.39 9.42 9.46 T:xoodyakround3 12.54 12.58 12.62 ascon128v12 12.63 12.81 12.89 ascon80pqv12 16.15 16.17 16.27 ascon128abi32v12 22.49 22.50 22.52 T:schwaemm256128v2 23.24 23.26 23.34 romulusm 23.21 23.26 23.29 romulusn 24.58 24.63 24.69 ascon128bi32v12 26.97 26.98 27.00 T:schwaemm256256v2 27.11 27.77 27.89 T:isapa128v20 27.98 28.40 29.00 T:grain128aeadv2 29.76 29.77 29.79 T:schwaemm192192v2 32.78 32.79 32.81 T:schwaemm128128v2 35.73 35.79 35.84 T:tinyjambu192v2 36.85 36.87 36.92 T:tinyjambu128v2 37.07 37.11 37.13 T:tinyjambu256v2 37.36 37.45 37.54 T:isapa128av20 43.06 43.14 43.24 romulust 45.06 45.08 45.15 T:giftcofb128v1 62.96 63.01 63.78 T:isapk128av20 78.24 78.32 78.38 T:isapk128v20 96.47 96.72 96.99 T:elephant200v2 113.25 113.39 113.48 T:isapxv20 4564.65 4568.62 4570.40 T:elephant176v2 5270.42 5273.29 5275.43 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 2.72 2.73 2.73 T:aes128gcmv1 2.84 2.85 2.85 aes256gcmv1 9.07 9.09 9.10 ascon128av12 12.87 12.88 12.95 ascon80pqv12 12.92 12.93 12.94 ascon128v12 13.87 13.90 13.92 T:xoodyakround3 16.86 16.94 16.98 ascon128abi32v12 23.29 23.30 23.31 T:schwaemm256128v2 25.18 25.22 25.23 ascon128bi32v12 27.84 27.84 27.85 T:schwaemm256256v2 28.79 28.95 29.53 T:grain128aeadv2 30.06 30.08 30.12 romulusn 30.57 30.58 30.61 T:schwaemm192192v2 33.34 33.36 33.37 T:schwaemm128128v2 41.72 41.73 41.75 romulusm 45.45 45.49 45.54 T:giftcofb128v1 46.54 46.57 46.69 T:tinyjambu128v2 48.90 48.92 48.95 T:tinyjambu192v2 49.96 50.02 50.04 T:isapa128av20 53.82 53.84 53.89 T:tinyjambu256v2 61.10 61.13 61.25 T:isapa128v20 86.17 86.26 86.54 romulust 90.11 90.15 90.22 T:isapk128av20 146.61 146.74 147.01 T:elephant200v2 181.45 182.01 182.45 T:isapk128v20 249.91 249.98 250.16 T:isapxv20 6950.00 6952.72 6954.02 T:elephant176v2 7999.00 8002.00 8006.53 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 2.73 2.73 2.75 T:aes128gcmv1 2.89 2.90 2.90 aes256gcmv1 8.82 8.87 8.93 ascon128av12 12.90 12.94 12.99 ascon128v12 12.89 12.97 13.05 ascon80pqv12 13.80 13.81 13.82 T:xoodyakround3 16.86 16.87 16.89 ascon128abi32v12 23.29 23.30 23.32 T:schwaemm256128v2 25.05 25.07 25.09 ascon128bi32v12 27.84 27.85 27.86 T:schwaemm256256v2 29.11 29.48 29.87 T:grain128aeadv2 30.09 30.12 30.13 romulusn 30.56 30.57 30.63 T:schwaemm192192v2 33.34 33.35 33.36 T:schwaemm128128v2 41.85 41.89 41.92 romulusm 45.48 45.51 45.52 T:giftcofb128v1 46.27 46.29 46.32 T:tinyjambu128v2 48.63 48.67 48.70 T:tinyjambu192v2 50.02 50.04 50.09 T:isapa128av20 53.74 53.78 53.80 T:tinyjambu256v2 61.06 61.09 61.25 T:isapa128v20 86.07 86.15 86.28 romulust 90.20 90.23 90.69 T:isapk128av20 146.62 146.81 147.01 T:elephant200v2 181.54 181.69 182.03 T:isapk128v20 248.10 248.53 248.64 T:isapxv20 6946.90 6952.23 6953.69 T:elephant176v2 7998.87 8003.31 8006.16 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 2.72 2.73 2.74 T:aes128gcmv1 2.89 2.89 2.90 aes256gcmv1 8.83 8.90 8.94 ascon128av12 12.88 12.93 12.96 ascon128v12 12.87 12.94 13.06 ascon80pqv12 13.83 13.84 13.85 T:xoodyakround3 16.86 16.86 16.87 ascon128abi32v12 23.29 23.29 23.34 T:schwaemm256128v2 25.06 25.07 25.10 ascon128bi32v12 27.85 27.85 27.86 T:schwaemm256256v2 29.11 29.43 29.85 T:grain128aeadv2 30.14 30.17 30.28 romulusn 30.56 30.58 30.58 T:schwaemm192192v2 33.33 33.35 33.36 T:schwaemm128128v2 38.06 38.12 38.29 T:isapa128v20 38.64 38.66 38.70 T:isapa128av20 41.87 41.89 41.92 romulusm 44.48 44.50 44.53 romulust 45.46 45.50 45.56 T:giftcofb128v1 46.22 46.29 46.31 T:tinyjambu128v2 48.63 48.66 48.72 T:tinyjambu192v2 53.72 53.76 53.80 T:tinyjambu256v2 70.01 70.06 70.20 T:isapk128av20 119.81 119.86 120.63 T:isapk128v20 146.60 146.67 146.88 T:elephant200v2 162.14 162.17 162.22 T:isapxv20 6943.10 6949.85 6952.99 T:elephant176v2 8000.92 8003.08 8005.27 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 9.70 9.80 9.87 T:aes128gcmv1 10.44 10.48 10.66 aes256gcmv1 13.68 13.86 14.07 ascon128av12 17.08 17.21 17.50 ascon128v12 17.27 17.35 17.58 ascon80pqv12 20.21 20.40 21.01 T:xoodyakround3 25.44 25.54 26.27 ascon128abi32v12 33.77 33.88 34.17 ascon128bi32v12 37.37 37.60 37.77 romulusn 38.21 38.25 38.27 T:schwaemm256128v2 39.24 39.55 40.41 T:grain128aeadv2 42.91 42.95 43.01 T:schwaemm128128v2 44.35 44.40 44.55 T:schwaemm256256v2 49.60 49.70 49.84 T:schwaemm192192v2 49.78 49.90 50.12 romulusm 54.81 54.98 55.09 T:tinyjambu128v2 55.80 55.84 56.14 T:giftcofb128v1 57.87 57.95 58.09 T:tinyjambu192v2 63.27 63.36 63.52 T:tinyjambu256v2 115.41 115.66 115.77 romulust 137.80 138.05 138.33 T:isapa128av20 208.18 208.37 208.86 T:elephant200v2 329.13 329.99 331.04 T:isapk128av20 513.55 513.88 517.36 T:isapa128v20 1987.69 1988.20 1988.95 T:isapk128v20 2425.91 2426.79 2427.66 T:isapxv20 8647.50 8651.43 8655.15 T:elephant176v2 10705.69 10711.18 10720.72 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 9.66 9.70 10.01 T:aes128gcmv1 10.23 10.40 11.02 aes256gcmv1 13.62 13.99 14.13 ascon128av12 17.23 17.27 17.49 ascon128v12 17.33 17.43 17.51 ascon80pqv12 20.05 20.20 20.41 T:xoodyakround3 25.64 25.78 26.53 ascon128abi32v12 33.77 33.88 34.17 ascon128bi32v12 37.64 37.75 38.05 romulusn 38.25 38.28 38.59 T:schwaemm256128v2 39.48 39.89 40.65 T:grain128aeadv2 42.96 42.99 43.08 T:schwaemm128128v2 44.32 44.34 44.45 T:schwaemm256256v2 49.62 49.70 49.81 T:schwaemm192192v2 52.02 52.09 52.21 romulusm 54.52 54.62 54.78 T:tinyjambu128v2 56.07 56.30 56.57 T:giftcofb128v1 57.45 57.59 57.91 T:tinyjambu192v2 63.16 63.30 63.38 T:tinyjambu256v2 115.27 115.49 115.81 romulust 137.90 138.27 138.79 T:isapa128av20 207.91 208.16 209.63 T:elephant200v2 329.85 330.32 330.80 T:isapk128av20 512.75 513.70 515.24 T:isapa128v20 1975.92 1977.63 1988.84 T:isapk128v20 2403.76 2407.07 2408.96 T:isapxv20 8651.27 8653.59 8659.54 T:elephant176v2 10706.76 10709.28 10722.84 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 9.67 9.75 9.85 T:aes128gcmv1 10.24 10.41 10.54 aes256gcmv1 13.55 13.71 14.03 ascon128av12 17.25 17.35 17.45 ascon128v12 17.28 17.45 17.67 ascon80pqv12 20.05 20.41 20.59 T:xoodyakround3 25.64 25.75 25.92 ascon128abi32v12 33.78 33.85 34.02 ascon128bi32v12 37.62 37.66 37.78 romulusn 38.21 38.25 38.27 T:schwaemm256128v2 39.48 39.76 40.58 T:grain128aeadv2 42.85 42.91 42.98 T:schwaemm128128v2 44.28 44.29 44.37 T:schwaemm256256v2 49.55 49.59 49.73 T:schwaemm192192v2 51.99 52.19 52.29 romulusm 54.51 54.61 54.67 T:tinyjambu128v2 56.19 56.26 56.41 T:giftcofb128v1 57.30 57.59 57.68 T:tinyjambu192v2 63.09 63.15 63.38 T:tinyjambu256v2 72.79 72.91 73.27 romulust 87.25 87.45 87.79 T:isapa128av20 207.68 207.95 208.61 T:elephant200v2 219.88 220.07 220.66 T:isapk128av20 271.94 272.09 272.84 T:isapa128v20 1050.16 1050.92 1052.20 T:isapk128v20 1259.02 1259.76 1260.38 T:isapxv20 8645.09 8650.24 8657.47 T:elephant176v2 10707.41 10711.34 10717.07 T:elephant160v2