VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Sandy Bridge+AES (206a7); 2011 Intel Xeon E3-1225; 4 x 3100MHz; hydra7, supercop-20251222

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 3.32 3.34 3.34 T:aes128gcmv1 3.58 3.60 3.61 aes256gcmv1 10.12 10.14 10.16 ascon128av12 14.95 14.98 15.01 ascon80pqv12 15.04 15.09 15.13 ascon128v12 18.22 18.34 18.46 T:xoodyakround3 18.86 18.89 18.91 ascon128abi32v12 27.19 27.25 27.30 T:schwaemm256128v2 27.89 27.93 28.01 ascon128bi32v12 28.52 28.55 28.58 T:grain128aeadv2 34.85 34.90 34.98 T:schwaemm256256v2 35.86 35.96 36.10 T:schwaemm192192v2 36.28 36.60 36.65 romulusn 38.66 38.71 38.75 T:schwaemm128128v2 48.39 48.41 48.48 T:giftcofb128v1 56.88 56.95 57.02 T:isapa128v20 59.52 59.56 59.59 T:tinyjambu128v2 59.97 60.05 60.10 romulusm 61.17 61.23 61.31 T:isapa128av20 71.96 72.02 72.10 T:tinyjambu192v2 73.53 73.58 73.63 T:tinyjambu256v2 107.82 108.15 108.59 T:isapk128av20 126.50 126.65 127.30 romulust 143.55 143.80 144.15 T:isapk128v20 195.26 195.45 196.15 T:elephant200v2 208.17 210.96 214.25 T:isapxv20 10866.74 10869.34 10903.37 T:elephant176v2 12737.86 12738.64 12739.39 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 3.30 3.33 3.35 T:aes128gcmv1 3.57 3.59 3.60 aes256gcmv1 10.00 10.05 10.07 ascon128av12 14.96 14.99 15.02 ascon80pqv12 14.98 15.02 15.03 ascon128v12 18.17 18.25 18.31 T:xoodyakround3 18.24 18.26 18.28 ascon128abi32v12 27.17 27.24 27.30 T:schwaemm256128v2 27.44 27.46 27.50 ascon128bi32v12 29.91 30.09 30.99 T:grain128aeadv2 35.01 35.02 35.06 T:schwaemm256256v2 35.83 35.90 36.00 T:schwaemm192192v2 36.40 36.65 36.68 romulusn 38.72 38.79 38.85 T:schwaemm128128v2 48.46 48.54 48.63 T:giftcofb128v1 56.82 57.01 57.42 T:isapa128v20 59.70 59.74 59.80 T:tinyjambu128v2 60.07 60.11 60.20 romulusm 61.19 61.30 61.37 T:isapa128av20 72.15 72.21 72.34 T:tinyjambu192v2 74.16 74.20 74.25 T:tinyjambu256v2 107.96 108.17 108.48 T:isapk128av20 126.62 126.73 126.93 romulust 143.56 143.87 144.35 T:isapk128v20 195.34 195.46 196.08 T:elephant200v2 206.48? 210.88? 229.90? T:isapxv20 10866.12 10868.69 10905.64 T:elephant176v2 12738.04 12739.00 12739.67 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 3.30 3.33 3.34 T:aes128gcmv1 3.58 3.59 3.61 aes256gcmv1 10.02 10.05 10.07 ascon128av12 14.97 14.99 15.00 ascon80pqv12 14.99 15.01 15.04 ascon128v12 18.24 18.27 18.30 ascon128abi32v12 18.19 18.28 18.32 T:xoodyakround3 27.20 27.27 27.33 T:schwaemm256128v2 27.45 27.47 27.53 ascon128bi32v12 28.01 28.07 28.14 T:isapa128v20 29.96 30.13 30.99 T:grain128aeadv2 34.99 35.02 35.06 T:schwaemm256256v2 35.84 35.89 35.97 T:schwaemm192192v2 36.43 36.62 36.69 romulusn 38.73 38.78 38.85 T:schwaemm128128v2 41.66 41.73 41.81 T:isapa128av20 43.42 43.47 43.53 romulust 48.49 48.54 48.60 T:giftcofb128v1 59.72 59.77 59.83 T:tinyjambu128v2 60.05 60.16 60.56 romulusm 71.73 71.90 72.00 T:isapk128av20 72.19 72.25 72.35 T:tinyjambu192v2 74.12 74.18 74.27 T:tinyjambu256v2 89.51 89.62 89.72 T:isapk128v20 121.48? 124.57? 141.84? T:isapxv20 195.27 195.36 196.04 T:elephant200v2 10866.06 10869.11 10903.60 T:elephant176v2 12737.61 12738.42 12739.38 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 2.56 2.58 2.59 T:aes128gcmv1 2.69 2.71 2.72 aes256gcmv1 10.04 10.05 10.08 ascon128av12 13.72 13.74 13.94 T:xoodyakround3 14.85 14.88 14.89 ascon80pqv12 14.89 14.92 14.95 ascon128v12 18.55 18.56 18.61 ascon128abi32v12 27.01 27.04 27.09 T:schwaemm256128v2 27.62 27.65 27.68 ascon128bi32v12 28.52 28.54 28.57 T:grain128aeadv2 30.02 30.11 30.19 romulusn 34.66 34.69 34.71 T:schwaemm256256v2 35.76 35.83 35.88 T:schwaemm192192v2 38.56 38.61 38.68 T:schwaemm128128v2 41.71 41.75 41.79 romulusm 42.49 42.58 42.70 T:isapa128v20 48.00 48.03 48.08 T:tinyjambu128v2 48.36 48.39 48.43 T:giftcofb128v1 51.49 51.52 51.69 T:isapa128av20 55.30 55.33 55.39 T:tinyjambu256v2 55.92 55.95 55.98 T:tinyjambu192v2 84.81 84.94 85.24 romulust 90.02 90.11 90.24 T:isapk128av20 116.57 116.80 117.16 T:isapk128v20 146.22 146.37 146.78 T:elephant200v2 166.35 167.70 169.13 T:isapxv20 8117.69 8119.67 8145.28 T:elephant176v2 9551.78 9552.16 9552.45 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 2.55 2.59 2.60 T:aes128gcmv1 2.69 2.72 2.73 aes256gcmv1 9.97 10.00 10.03 ascon128av12 13.68 13.73 13.81 T:xoodyakround3 14.89 14.91 14.93 ascon80pqv12 14.89 14.92 14.94 ascon128v12 18.24 18.25 18.27 ascon128abi32v12 27.06 27.11 27.15 T:schwaemm256128v2 27.39 27.41 27.44 ascon128bi32v12 29.34 29.45 30.34 T:grain128aeadv2 29.99 30.04 30.09 romulusn 34.73 34.77 34.78 T:schwaemm256256v2 35.76 35.80 35.86 T:schwaemm192192v2 38.56 38.61 38.68 T:schwaemm128128v2 41.69 41.72 41.75 romulusm 42.22 42.51 42.79 T:isapa128v20 48.11 48.14 48.18 T:tinyjambu128v2 48.39 48.43 48.53 T:giftcofb128v1 51.53 51.62 51.67 T:isapa128av20 55.63 55.67 55.70 T:tinyjambu256v2 56.09 56.13 56.20 T:tinyjambu192v2 84.81 84.90 85.14 romulust 90.03 90.15 90.28 T:isapk128av20 116.59 116.94 117.32 T:isapk128v20 146.21 146.44 146.74 T:elephant200v2 164.99? 167.70? 184.89? T:isapxv20 8117.28 8119.56 8145.25 T:elephant176v2 9551.87 9552.38 9552.66 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 2.58 2.58 2.59 T:aes128gcmv1 2.71 2.71 2.73 aes256gcmv1 9.97 10.00 10.02 ascon128av12 13.68 13.78 13.87 T:xoodyakround3 14.90 14.91 14.93 ascon80pqv12 14.89 14.92 14.93 ascon128v12 18.24 18.26 18.27 ascon128abi32v12 27.04 27.08 27.11 T:schwaemm256128v2 27.40 27.40 27.43 ascon128bi32v12 27.97 28.08 28.19 T:isapa128v20 29.33 29.49 30.30 T:grain128aeadv2 29.99 30.03 30.07 romulusn 34.73 34.75 34.78 T:schwaemm256256v2 35.76 35.78 35.83 T:schwaemm192192v2 38.52 38.55 38.60 T:schwaemm128128v2 41.71 41.75 41.80 romulusm 41.76 41.78 41.86 T:isapa128av20 43.22 43.28 43.29 romulust 48.10 48.12 48.17 T:tinyjambu128v2 48.40 48.43 48.50 T:giftcofb128v1 55.63 55.68 55.73 T:tinyjambu256v2 56.09 56.12 56.17 T:tinyjambu192v2 71.82 71.90 71.98 T:isapk128av20 89.63 89.68 89.77 T:isapk128v20 122.27? 124.72? 140.71? T:isapxv20 146.20 146.27 146.74 T:elephant200v2 8117.26 8119.47 8145.20 T:elephant176v2 9551.98 9552.41 9552.68 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 1.80 1.83 1.84 T:aes128gcmv1 1.81 1.83 1.85 aes256gcmv1 9.18 9.24 9.27 T:xoodyakround3 9.90 9.92 9.95 ascon128av12 14.69 14.71 14.75 ascon128v12 14.73 14.76 14.78 ascon80pqv12 18.22 18.24 18.26 ascon128abi32v12 23.43 23.49 23.53 romulusm 23.58 23.67 23.72 romulusn 26.80 26.87 26.88 T:schwaemm256128v2 27.32 27.35 27.36 ascon128bi32v12 28.00 28.06 28.10 T:isapa128v20 28.51 28.56 28.58 T:grain128aeadv2 34.40 34.41 34.42 T:schwaemm256256v2 35.58 35.66 35.81 T:schwaemm192192v2 36.48 36.52 36.54 T:tinyjambu128v2 37.08 37.15 37.17 T:tinyjambu256v2 38.51 38.54 38.63 T:schwaemm128128v2 39.88 39.94 40.03 T:tinyjambu192v2 41.85 41.90 42.00 T:isapa128av20 42.99 43.08 43.13 romulust 48.26 48.32 48.39 T:giftcofb128v1 71.76 71.88 72.07 T:isapk128av20 89.57 89.68 89.84 T:isapk128v20 97.76 97.84 98.10 T:elephant200v2 123.02 124.48 125.60 T:isapxv20 5368.08 5369.59 5386.13 T:elephant176v2 6366.16 6366.67 6367.00 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 1.82 1.84 1.85 T:aes128gcmv1 1.82 1.85 1.86 aes256gcmv1 9.23 9.26 9.29 T:xoodyakround3 9.92 9.94 9.97 ascon128av12 14.78 14.81 14.83 ascon80pqv12 14.78 14.82 14.85 ascon128v12 18.20 18.23 18.25 ascon128abi32v12 23.39 23.43 23.47 romulusm 23.42 23.47 23.54 romulusn 26.86 26.91 27.00 T:schwaemm256128v2 27.30 27.34 27.36 ascon128bi32v12 28.08 28.12 28.44 T:isapa128v20 28.67 28.93 29.73 T:grain128aeadv2 34.46 34.48 34.51 T:schwaemm256256v2 35.57 35.62 35.71 T:schwaemm192192v2 36.48 36.50 36.52 T:tinyjambu128v2 37.09 37.13 37.19 T:tinyjambu256v2 38.35 38.40 38.44 T:schwaemm128128v2 40.01 40.08 40.12 T:tinyjambu192v2 41.83 41.89 41.96 T:isapa128av20 42.99 43.04 43.13 romulust 48.27 48.34 48.40 T:giftcofb128v1 71.81 71.89 72.00 T:isapk128av20 89.59 89.71 89.84 T:isapk128v20 97.78 97.87 98.05 T:elephant200v2 121.11? 124.49? 141.83? T:isapxv20 5367.93 5369.77 5386.40 T:elephant176v2 6365.95 6366.32 6366.63 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 1.83 1.84 1.85 aes256gcmv1 1.84 1.85 1.85 T:aes128gcmv1 9.20 9.24 9.30 T:xoodyakround3 9.93 9.94 9.97 ascon128av12 14.78 14.81 14.83 ascon80pqv12 14.80 14.82 14.84 ascon128v12 18.20 18.22 18.26 ascon128abi32v12 23.38 23.43 23.47 romulusm 23.43 23.46 23.51 romulusn 26.94 27.04 27.14 T:schwaemm256128v2 27.31 27.34 27.36 ascon128bi32v12 28.05 28.09 28.16 T:isapa128v20 28.67 28.95 29.73 T:grain128aeadv2 34.45 34.48 34.50 T:schwaemm256256v2 35.57 35.65 35.70 T:schwaemm192192v2 36.51 36.53 36.57 T:tinyjambu128v2 37.06 37.12 37.20 T:tinyjambu256v2 38.34 38.38 38.43 T:schwaemm128128v2 40.02 40.07 40.12 T:tinyjambu192v2 41.85 41.92 41.97 T:isapa128av20 42.98 43.03 43.06 romulust 48.24 48.33 48.37 T:giftcofb128v1 71.88 71.94 71.99 T:isapk128av20 89.60 89.75 89.88 T:isapk128v20 97.79 97.85 98.08 T:elephant200v2 121.10? 124.52? 141.82? T:isapxv20 5367.83 5370.00 5386.83 T:elephant176v2 6366.01 6366.35 6366.77 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 2.80 2.80 2.81 T:aes128gcmv1 2.95 2.95 2.95 aes256gcmv1 10.27 10.29 10.31 ascon128av12 13.89 13.90 13.91 T:xoodyakround3 15.08 15.10 15.12 ascon80pqv12 15.13 15.13 15.14 ascon128v12 18.97 18.99 19.02 ascon128abi32v12 27.83 27.86 27.89 T:schwaemm256128v2 28.04 28.06 28.06 ascon128bi32v12 29.02 29.04 29.06 T:grain128aeadv2 30.49 30.54 30.62 romulusn 35.59 35.62 35.65 T:schwaemm256256v2 36.57 36.61 36.65 T:schwaemm192192v2 39.08 39.12 39.15 T:schwaemm128128v2 42.22 42.24 42.26 romulusm 48.41 48.45 48.47 T:tinyjambu128v2 48.86 48.91 48.94 T:giftcofb128v1 54.83 54.88 54.96 T:isapa128av20 55.72 55.76 55.79 T:tinyjambu256v2 56.36 56.40 56.44 T:tinyjambu192v2 62.23 62.29 62.45 T:isapa128v20 86.17 86.21 86.48 romulust 103.90 103.99 104.11 T:isapk128av20 149.33 149.38 149.81 T:elephant200v2 206.58 206.68 206.83 T:isapk128v20 271.35 271.49 273.00 T:isapxv20 8181.08 8181.70 8205.08 T:elephant176v2 9659.74 9660.10 9660.31 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 2.81 2.81 2.83 T:aes128gcmv1 2.97 2.97 3.00 aes256gcmv1 10.24 10.26 10.27 ascon128av12 13.87 13.89 13.98 T:xoodyakround3 15.12 15.13 15.14 ascon80pqv12 15.12 15.14 15.16 ascon128v12 18.67 18.69 18.71 ascon128abi32v12 27.80 27.81 27.84 ascon128bi32v12 27.86 27.89 27.94 T:schwaemm256128v2 29.91 29.95 30.76 T:grain128aeadv2 30.46 30.48 30.51 romulusn 35.66 35.70 35.78 T:schwaemm256256v2 36.54 36.58 36.65 T:schwaemm192192v2 39.07 39.09 39.16 T:schwaemm128128v2 42.32 42.35 42.37 romulusm 48.50 48.53 48.55 T:tinyjambu128v2 48.90 48.92 48.96 T:giftcofb128v1 54.86 54.92 54.97 T:isapa128av20 56.06 56.09 56.14 T:tinyjambu256v2 56.53 56.56 56.67 T:tinyjambu192v2 62.22 62.24 62.56 T:isapa128v20 86.15 86.19 86.29 romulust 103.86 103.99 104.01 T:isapk128av20 149.37 149.75 149.82 T:elephant200v2 206.66 206.71 206.85 T:isapk128v20 271.33 271.44 287.95 T:isapxv20 8181.17 8182.13 8205.12 T:elephant176v2 9659.54 9660.17 9660.68 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 2.81 2.81 2.82 T:aes128gcmv1 2.97 2.97 2.98 aes256gcmv1 10.23 10.24 10.24 ascon128av12 13.91 13.93 14.01 T:xoodyakround3 15.11 15.13 15.13 ascon80pqv12 15.13 15.13 15.15 ascon128v12 18.67 18.69 18.71 ascon128abi32v12 27.81 27.83 27.84 ascon128bi32v12 27.84 27.88 27.91 T:schwaemm256128v2 29.92 29.99 30.76 T:grain128aeadv2 30.43 30.46 30.49 romulusn 35.65 35.67 35.72 T:schwaemm256256v2 36.55 36.58 36.63 T:schwaemm192192v2 38.09 38.09 38.28 T:isapa128v20 39.04 39.07 39.10 T:schwaemm128128v2 42.30 42.31 42.33 romulusm 43.67 43.70 43.77 T:isapa128av20 44.50 44.55 44.59 romulust 48.49 48.53 48.56 T:tinyjambu128v2 48.90 48.93 48.99 T:giftcofb128v1 56.04 56.08 56.11 T:tinyjambu256v2 56.52 56.55 56.59 T:tinyjambu192v2 80.71 80.74 80.77 T:isapk128av20 136.68 136.73 136.79 T:isapk128v20 149.38 149.60 149.80 T:elephant200v2 177.20 177.78 193.05 T:isapxv20 8181.01 8181.59 8205.34 T:elephant176v2 9659.84 9660.04 9660.47 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 10.09 10.12 10.30 T:aes128gcmv1 10.70 10.80 11.09 aes256gcmv1 15.62 15.72 16.06 ascon128av12 20.08 20.16 20.63 ascon80pqv12 20.15 20.25 20.39 ascon128v12 20.26 20.55 21.04 T:xoodyakround3 28.35 28.51 28.77 ascon128abi32v12 37.16 37.29 37.47 ascon128bi32v12 39.93 40.02 40.34 T:grain128aeadv2 40.36 40.50 40.96 romulusn 45.47 45.63 46.12 T:schwaemm256128v2 50.18 50.55 50.78 T:schwaemm128128v2 52.78 53.00 53.58 romulusm 56.41 56.66 56.85 T:schwaemm256256v2 57.02 57.08 57.21 T:tinyjambu128v2 59.05 59.38 59.62 T:schwaemm192192v2 59.72 59.91 60.09 T:giftcofb128v1 65.23 65.40 65.56 T:tinyjambu256v2 65.68 66.10 66.43 T:tinyjambu192v2 116.17 116.57 116.67 romulust 130.66 130.88 131.11 T:isapa128av20 211.45 212.09 212.57 T:elephant200v2 401.95 402.16 402.80 T:isapk128av20 515.20 515.39 519.01 T:isapa128v20 2241.80 2246.20 2249.30 T:isapk128v20 2624.66 2629.58 2668.34 T:isapxv20 10185.51 10189.80 10216.77 T:elephant176v2 12935.16 12937.44 12942.65 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 9.94 10.01 10.45 T:aes128gcmv1 11.10 11.25 11.55 aes256gcmv1 15.59 15.67 16.21 ascon128av12 20.10 20.26 20.53 ascon128v12 20.15 20.30 20.52 ascon80pqv12 20.14 20.64 20.80 T:xoodyakround3 28.19 28.48 28.59 ascon128abi32v12 37.17 37.26 37.63 ascon128bi32v12 40.35 40.49 40.65 romulusn 40.75 40.95 42.59 T:grain128aeadv2 45.41 45.50 45.73 T:schwaemm256128v2 49.98 50.27 50.65 T:schwaemm128128v2 55.25 55.39 55.63 romulusm 56.40 56.50 56.65 T:schwaemm256256v2 57.19 57.34 57.48 T:tinyjambu128v2 59.41 59.60 59.86 T:schwaemm192192v2 59.82 59.98 60.09 T:giftcofb128v1 65.88 66.02 66.20 T:tinyjambu256v2 66.22 66.47 66.70 T:tinyjambu192v2 115.86 116.17 116.40 romulust 130.88 130.98 131.12 T:isapa128av20 211.28 211.59 211.98 T:elephant200v2 400.32 401.02 401.78 T:isapk128av20 515.16 515.77 522.62 T:isapa128v20 2243.45 2245.95 2251.03 T:isapk128v20 2621.34 2630.97 2692.57 T:isapxv20 10187.20 10192.29 10216.78 T:elephant176v2 12933.55 12938.90 12941.20 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 9.98 10.05 10.23 T:aes128gcmv1 11.09 11.21 11.30 aes256gcmv1 15.57 15.62 15.77 ascon128av12 20.05 20.21 20.34 ascon128v12 20.18 20.30 20.53 ascon80pqv12 20.32 20.58 20.92 T:xoodyakround3 28.03 28.16 28.21 ascon128abi32v12 37.03 37.10 37.20 ascon128bi32v12 40.33 40.51 40.67 romulusn 40.83 40.92 42.79 T:grain128aeadv2 45.41 45.49 45.82 T:schwaemm256128v2 50.02 50.13 50.38 T:schwaemm128128v2 55.27 55.44 55.50 romulusm 56.52 56.57 56.65 T:schwaemm256256v2 57.02 57.21 57.43 T:tinyjambu128v2 59.16 59.23 59.31 T:schwaemm192192v2 59.86 60.05 60.26 T:giftcofb128v1 65.56 65.78 65.88 T:tinyjambu256v2 66.18 66.27 66.45 T:tinyjambu192v2 73.00 73.33 73.54 romulust 86.87 87.41 87.56 T:isapa128av20 211.30 211.48 211.73 T:elephant200v2 268.30 268.58 271.77 T:isapa128v20 268.57 269.27 269.93 T:isapk128av20 1198.56 1199.10 1199.83 T:isapk128v20 1373.88 1376.80 1418.19 T:isapxv20 10188.16 10194.05 10212.73 T:elephant176v2 12934.77 12936.55 12940.64 T:elephant160v2