VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Kaby Lake (906e9); 2017 Intel Xeon E3-1220 v6; 4 x 3000MHz; kizomba, supercop-20251222

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.18 1.19 1.20 T:aes128gcmv1 1.42 1.45 1.46 aes256gcmv1 7.53 7.56 7.59 ascon128av12 10.92 10.94 10.96 ascon80pqv12 10.90 10.94 10.95 ascon128v12 13.79 13.97 14.07 ascon128abi32v12 15.50 15.58 15.62 T:xoodyakround3 17.57 17.61 17.63 T:schwaemm256128v2 21.03 21.06 21.08 ascon128bi32v12 23.12 23.18 23.22 T:schwaemm192192v2 24.08 24.10 24.23 T:grain128aeadv2 24.01 24.13 24.16 T:schwaemm256256v2 25.70 25.73 25.80 T:schwaemm128128v2 33.48 33.55 33.59 T:giftcofb128v1 37.32 37.49 39.97 romulusn 40.41 40.50 40.60 T:isapa128av20 43.03 43.14 43.25 T:isapa128v20 60.69 60.76 60.80 romulusm 67.77 67.86 67.87 T:tinyjambu128v2 67.93 68.10 68.17 T:isapk128av20 82.71 83.50 83.55 T:tinyjambu192v2 89.32 89.33 89.34 T:tinyjambu256v2 90.48 90.78 91.36 T:isapk128v20 131.86 131.93 132.09 romulust 169.27 169.55 169.98 T:isapxv20 179.28 179.37 179.43 T:elephant200v2 6810.01 6815.28 6900.68 T:elephant176v2 8160.65 8161.18 8161.75 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.04 1.06 1.06 T:aes128gcmv1 1.39 1.43 1.44 aes256gcmv1 7.38 7.40 7.44 ascon128av12 10.90 10.93 10.97 ascon128v12 10.92 10.94 10.96 ascon80pqv12 13.77 13.87 13.95 ascon128abi32v12 15.26 15.33 15.40 T:xoodyakround3 17.58 17.63 17.67 T:schwaemm256128v2 20.82 20.85 20.87 ascon128bi32v12 23.16 23.22 23.27 T:schwaemm192192v2 24.01 24.13 24.18 T:schwaemm256256v2 24.67 24.70 24.74 T:grain128aeadv2 25.64 25.68 25.72 T:schwaemm128128v2 33.67 33.71 33.73 T:giftcofb128v1 37.47 37.51 37.70 romulusn 40.44 40.51 40.67 T:isapa128av20 43.03 43.12 43.25 T:isapa128v20 60.72 60.77 60.85 romulusm 68.01 68.01 68.02 T:tinyjambu128v2 68.01 68.13 68.21 T:isapk128av20 83.50 83.50 83.50 T:tinyjambu192v2 89.25 89.26 89.26 T:tinyjambu256v2 90.47 90.80 91.03 T:isapk128v20 131.88 132.00 132.31 romulust 168.90 169.56 170.11 T:isapxv20 179.29 179.37 179.45 T:elephant200v2 6809.75 6815.45 6899.79 T:elephant176v2 8160.70 8161.09 8161.70 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.05 1.06 1.07 T:aes128gcmv1 1.42 1.43 1.44 aes256gcmv1 7.39 7.41 7.43 ascon128av12 10.91 10.94 10.97 ascon80pqv12 10.91 10.95 10.97 ascon128v12 13.80 13.88 13.92 ascon128abi32v12 15.33 15.42 15.45 T:xoodyakround3 17.58 17.60 17.65 T:schwaemm256128v2 20.83 20.85 20.88 ascon128bi32v12 21.50 21.55 21.61 T:isapa128v20 23.16 23.22 23.27 T:schwaemm192192v2 24.00 24.12 24.14 T:schwaemm256256v2 24.67 24.69 24.70 T:grain128aeadv2 25.65 25.68 25.75 T:schwaemm128128v2 27.27 27.31 27.34 T:isapa128av20 33.67 33.71 33.76 T:giftcofb128v1 37.47 37.50 37.68 romulusn 45.04 45.12 45.18 romulust 45.11 45.20 45.25 T:isapk128av20 56.12 56.31 56.58 T:isapk128v20 60.73 60.79 60.85 romulusm 68.01 68.01 68.02 T:tinyjambu128v2 83.50 83.50 83.50 T:tinyjambu192v2 89.25 89.26 89.31 T:tinyjambu256v2 97.15 97.65 97.93 T:isapxv20 179.30 179.37 179.58 T:elephant200v2 6809.93 6815.40 6899.83 T:elephant176v2 8160.55 8160.98 8161.77 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.79 0.80 0.81 T:aes128gcmv1 0.90 0.93 0.94 aes256gcmv1 7.46 7.49 7.51 ascon128av12 10.91 10.94 10.97 ascon128v12 10.93 10.95 10.97 ascon80pqv12 11.69 11.76 11.81 T:xoodyakround3 13.85 13.97 14.01 ascon128abi32v12 17.50 17.54 17.57 T:schwaemm256128v2 20.44 20.70 20.96 ascon128bi32v12 23.11 23.54 23.60 T:schwaemm192192v2 23.91 24.02 24.06 T:schwaemm256256v2 24.09 24.11 24.21 T:grain128aeadv2 25.52 25.56 25.58 T:schwaemm128128v2 30.33 30.42 31.70 romulusn 32.35 32.38 32.44 T:isapa128v20 33.71 33.73 33.76 T:giftcofb128v1 33.92 33.95 33.99 T:isapa128av20 42.03 42.07 42.10 romulusm 55.45 55.49 55.51 T:tinyjambu128v2 56.66 56.79 56.86 T:isapk128av20 63.45 63.45 63.51 T:tinyjambu192v2 67.38 67.41 67.42 T:tinyjambu256v2 73.33 73.47 73.59 T:isapk128v20 88.38 88.45 88.57 romulust 133.22 133.53 133.86 T:isapxv20 134.02 134.08 134.14 T:elephant200v2 5085.80 5090.27 5153.25 T:elephant176v2 6119.59 6119.81 6120.36 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.72 0.73 0.75 T:aes128gcmv1 0.89 0.92 0.95 aes256gcmv1 7.35 7.38 7.41 ascon128av12 10.90 10.93 10.94 ascon128v12 10.94 10.96 10.99 ascon80pqv12 11.55 11.61 11.63 T:xoodyakround3 13.80 13.84 13.87 ascon128abi32v12 17.47 17.52 17.56 T:schwaemm256128v2 20.60 20.64 20.86 ascon128bi32v12 23.06 23.51 23.59 T:schwaemm192192v2 23.90 24.03 24.06 T:schwaemm256256v2 24.38 24.40 24.42 T:grain128aeadv2 25.48 25.51 25.56 T:schwaemm128128v2 30.39 30.42 30.51 romulusn 32.33 32.36 32.44 T:isapa128v20 33.78 33.82 33.83 T:giftcofb128v1 33.93 33.96 34.02 T:isapa128av20 42.07 42.11 42.13 romulusm 55.57 55.57 55.58 T:tinyjambu128v2 56.69 56.77 56.85 T:isapk128av20 63.38 63.38 63.39 T:tinyjambu192v2 67.37 67.38 67.39 T:tinyjambu256v2 73.39 73.50 73.58 T:isapk128v20 88.41 88.52 88.66 romulust 133.12 133.49 133.78 T:isapxv20 134.04 134.10 134.18 T:elephant200v2 5085.82 5090.20 5153.25 T:elephant176v2 6119.70 6119.97 6120.22 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.72 0.73 0.74 T:aes128gcmv1 0.91 0.92 0.93 aes256gcmv1 7.37 7.39 7.41 ascon128av12 10.90 10.91 10.94 ascon128v12 10.93 10.96 10.97 ascon80pqv12 11.60 11.64 11.67 T:xoodyakround3 13.80 13.84 13.89 ascon128abi32v12 17.51 17.56 17.59 T:schwaemm256128v2 20.59 20.62 20.64 ascon128bi32v12 21.58 21.61 21.65 T:isapa128v20 23.03 23.53 23.61 T:schwaemm192192v2 23.89 24.02 24.06 T:schwaemm256256v2 24.36 24.39 24.44 T:grain128aeadv2 25.50 25.55 25.58 T:schwaemm128128v2 27.32 27.35 27.38 T:isapa128av20 30.40 30.44 30.50 romulusn 33.78 33.81 33.84 T:giftcofb128v1 42.05 42.09 42.12 romulusm 45.02 45.05 45.12 romulust 45.13 45.22 45.32 T:isapk128av20 55.57 55.58 55.59 T:tinyjambu128v2 56.17 56.26 56.34 T:isapk128v20 63.38 63.38 63.39 T:tinyjambu192v2 67.38 67.38 67.39 T:tinyjambu256v2 97.39 97.58 97.71 T:isapxv20 134.05 134.07 134.15 T:elephant200v2 5085.84 5090.20 5153.33 T:elephant176v2 6119.67 6119.92 6120.25 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.40 0.41 0.42 T:aes128gcmv1 0.40 0.41 0.42 aes256gcmv1 7.37 7.39 7.40 ascon128av12 7.87 7.91 7.93 T:xoodyakround3 10.89 10.93 10.96 ascon128v12 10.88 10.94 10.96 ascon80pqv12 13.79 13.82 13.84 ascon128abi32v12 17.34 17.40 17.45 T:schwaemm256128v2 20.34 20.38 20.90 ascon128bi32v12 21.57 21.62 21.67 T:isapa128v20 23.27 23.31 23.37 romulusn 23.33 23.38 23.44 romulusm 22.81 23.87 23.98 T:schwaemm192192v2 23.75 23.89 23.95 T:schwaemm256256v2 24.06 24.08 24.18 T:grain128aeadv2 25.27 25.30 25.37 T:schwaemm128128v2 27.26 27.33 27.35 T:isapa128av20 33.88 33.93 33.99 T:giftcofb128v1 43.13 43.14 43.15 T:tinyjambu128v2 43.39 43.40 43.41 T:tinyjambu192v2 44.86 44.90 44.94 romulust 45.16 45.22 45.32 T:isapk128av20 45.50 45.52 45.57 T:tinyjambu256v2 56.19 56.31 56.65 T:isapk128v20 89.04 89.06 89.08 T:elephant200v2 97.21 97.31 97.67 T:isapxv20 3362.09 3364.96 3407.23 T:elephant176v2 4078.96 4079.45 4079.74 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.38 0.41 0.42 aes256gcmv1 0.39 0.41 0.43 T:aes128gcmv1 7.33 7.34 7.37 ascon128av12 7.89 7.91 7.93 T:xoodyakround3 10.86 10.89 10.92 ascon128v12 10.91 10.94 11.00 ascon80pqv12 13.78 13.81 13.82 ascon128abi32v12 17.37 17.41 17.45 T:schwaemm256128v2 20.35 20.40 20.91 ascon128bi32v12 21.59 21.65 21.72 T:isapa128v20 23.27 23.32 23.36 romulusn 23.32 23.36 23.40 romulusm 22.84 23.81 23.96 T:schwaemm192192v2 23.77 23.89 23.94 T:schwaemm256256v2 24.02 24.04 24.15 T:grain128aeadv2 25.25 25.31 25.36 T:schwaemm128128v2 27.28 27.33 27.37 T:isapa128av20 33.82 33.87 33.92 T:giftcofb128v1 43.13 43.13 43.14 T:tinyjambu128v2 43.25 43.25 43.26 T:tinyjambu192v2 44.88 44.93 44.98 romulust 45.08 45.18 45.30 T:isapk128av20 45.50 45.50 45.52 T:tinyjambu256v2 56.08 56.22 56.38 T:isapk128v20 89.00 89.05 89.11 T:elephant200v2 97.17 97.49 97.89 T:isapxv20 3362.23 3365.70 3407.36 T:elephant176v2 4078.93 4079.48 4079.66 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.41 0.41 0.42 aes256gcmv1 0.40 0.41 0.42 T:aes128gcmv1 7.32 7.34 7.37 ascon128av12 7.89 7.92 7.96 T:xoodyakround3 10.85 10.88 10.90 ascon128v12 10.89 10.93 10.96 ascon80pqv12 13.79 13.82 13.84 ascon128abi32v12 17.35 17.40 17.45 T:schwaemm256128v2 20.36 20.39 20.41 ascon128bi32v12 21.57 21.62 21.69 T:isapa128v20 23.27 23.31 23.34 romulusn 23.33 23.36 23.39 romulusm 22.80 23.84 24.09 T:schwaemm192192v2 23.78 23.90 23.95 T:schwaemm256256v2 24.03 24.04 24.15 T:grain128aeadv2 25.23 25.27 25.32 T:schwaemm128128v2 27.26 27.33 27.36 T:isapa128av20 33.85 33.90 33.94 T:giftcofb128v1 43.13 43.14 43.15 T:tinyjambu128v2 43.25 43.25 43.26 T:tinyjambu192v2 44.91 44.94 44.99 romulust 45.21 45.26 45.31 T:isapk128av20 45.50 45.51 45.51 T:tinyjambu256v2 56.09 56.22 56.38 T:isapk128v20 89.01 89.04 89.11 T:elephant200v2 97.19 97.61 97.87 T:isapxv20 3362.30 3365.63 3407.31 T:elephant176v2 4079.06 4079.40 4079.63 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.95 0.95 0.96 T:aes128gcmv1 1.11 1.12 1.14 aes256gcmv1 7.67 7.68 7.71 ascon128av12 11.12 11.13 11.15 ascon128v12 11.12 11.13 11.16 ascon80pqv12 11.86 11.87 11.90 T:xoodyakround3 14.13 14.25 14.28 ascon128abi32v12 18.03 18.07 18.11 T:schwaemm256128v2 21.02 21.25 21.28 ascon128bi32v12 23.57 24.07 24.14 T:schwaemm192192v2 24.51 24.53 24.62 T:grain128aeadv2 24.57 24.66 24.70 T:schwaemm256256v2 25.89 25.91 25.94 T:schwaemm128128v2 30.81 30.86 32.04 romulusn 34.17 34.18 34.20 T:giftcofb128v1 36.13 36.15 36.18 T:isapa128av20 42.50 42.53 42.57 romulusm 47.46 47.49 47.53 T:isapa128v20 55.88 55.88 55.89 T:tinyjambu128v2 63.90 63.90 63.90 T:tinyjambu192v2 64.25 64.33 64.44 T:isapk128av20 67.91 67.92 67.93 T:tinyjambu256v2 89.79 89.88 89.92 romulust 128.13 128.21 128.32 T:isapk128v20 136.87 136.90 136.97 T:elephant200v2 215.77 215.99 216.14 T:isapxv20 5128.59 5128.93 5187.75 T:elephant176v2 6188.91 6189.18 6189.36 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.88 0.89 0.89 T:aes128gcmv1 1.10 1.11 1.12 aes256gcmv1 7.57 7.58 7.60 ascon128av12 11.09 11.10 11.12 ascon128v12 11.12 11.13 11.15 ascon80pqv12 11.76 11.78 11.80 T:xoodyakround3 14.14 14.17 14.20 ascon128abi32v12 18.03 18.04 18.08 T:schwaemm256128v2 20.91 20.93 20.94 ascon128bi32v12 23.66 24.03 24.13 T:schwaemm192192v2 24.55 24.66 24.69 T:schwaemm256256v2 24.80 24.83 24.85 T:grain128aeadv2 25.85 25.89 25.92 T:schwaemm128128v2 30.82 30.85 30.92 romulusn 34.28 34.32 34.33 T:giftcofb128v1 36.09 36.12 36.16 T:isapa128av20 42.59 42.61 42.65 romulusm 47.44 47.49 47.51 T:isapa128v20 55.99 56.00 56.00 T:tinyjambu128v2 63.83 63.83 63.84 T:tinyjambu192v2 64.22 64.25 64.31 T:isapk128av20 67.87 67.87 67.89 T:tinyjambu256v2 89.82 89.88 90.03 romulust 128.13 128.24 128.49 T:isapk128v20 136.86 136.89 136.94 T:elephant200v2 215.60 215.75 216.07 T:isapxv20 5128.52 5128.94 5187.26 T:elephant176v2 6189.10 6189.24 6189.53 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.88 0.89 0.89 T:aes128gcmv1 1.10 1.10 1.11 aes256gcmv1 7.56 7.58 7.61 ascon128av12 11.08 11.09 11.11 ascon128v12 11.11 11.13 11.14 ascon80pqv12 11.73 11.77 11.78 T:xoodyakround3 14.10 14.16 14.19 ascon128abi32v12 18.03 18.05 18.10 T:schwaemm256128v2 20.91 20.93 20.93 ascon128bi32v12 23.63 24.01 24.06 T:schwaemm192192v2 24.56 24.66 24.69 T:schwaemm256256v2 24.77 24.79 24.85 T:grain128aeadv2 25.85 25.88 25.91 T:schwaemm128128v2 28.60 28.62 28.64 T:isapa128av20 29.31 29.32 29.34 T:isapa128v20 30.82 30.87 30.94 romulusn 34.28 34.31 34.33 T:giftcofb128v1 42.60 42.62 42.64 romulusm 46.32 46.33 46.39 romulust 49.56 49.58 49.66 T:isapk128av20 55.99 56.00 56.01 T:tinyjambu128v2 63.83 63.83 63.83 T:tinyjambu192v2 67.87 67.87 67.88 T:tinyjambu256v2 84.31 84.39 84.50 T:isapk128v20 136.85 136.89 137.00 T:elephant200v2 139.51 139.61 139.78 T:isapxv20 5128.56 5128.93 5187.21 T:elephant176v2 6189.01 6189.29 6189.66 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 5.91 5.95 6.01 T:aes128gcmv1 7.93 7.96 8.08 aes256gcmv1 12.16 12.33 12.75 ascon128av12 15.07 15.24 15.59 ascon128v12 15.24 15.41 15.70 ascon80pqv12 17.12 17.29 17.48 T:xoodyakround3 21.39 21.45 22.02 ascon128abi32v12 27.74 28.10 28.35 ascon128bi32v12 29.36 29.42 29.60 T:schwaemm256128v2 33.30 33.60 33.91 T:schwaemm128128v2 34.12 34.23 34.31 T:grain128aeadv2 38.33 38.45 38.80 T:schwaemm192192v2 38.82 39.01 39.37 T:schwaemm256256v2 40.41 40.81 41.62 romulusn 44.54 44.63 44.81 T:giftcofb128v1 52.58 52.93 53.28 romulusm 65.55 65.65 65.78 T:tinyjambu128v2 74.23 74.25 74.28 T:tinyjambu192v2 79.05 79.11 79.23 T:tinyjambu256v2 85.85 86.14 86.39 T:isapa128av20 121.02 121.20 121.77 romulust 193.53 193.86 194.24 T:elephant200v2 224.09 224.67 225.59 T:isapk128av20 393.16 394.02 394.75 T:isapa128v20 1366.35 1367.23 1368.62 T:isapk128v20 2081.05 2089.52 2090.88 T:isapxv20 6387.00 6389.81 6446.52 T:elephant176v2 8290.02 8293.87 8296.56 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 6.02 6.08 6.12 T:aes128gcmv1 8.08 8.11 8.18 aes256gcmv1 12.00 12.20 12.61 ascon128av12 15.08 15.12 15.27 ascon80pqv12 15.13 15.31 15.63 ascon128v12 17.12 17.37 17.65 T:xoodyakround3 21.12 21.31 21.72 ascon128abi32v12 27.75 27.85 28.45 ascon128bi32v12 29.23 29.48 29.62 T:schwaemm256128v2 33.29 33.45 33.63 T:schwaemm128128v2 34.38 34.44 34.47 T:grain128aeadv2 38.29 38.43 38.88 T:schwaemm192192v2 38.84 39.02 39.41 T:schwaemm256256v2 40.60 40.78 41.03 romulusn 45.55 45.66 45.82 T:giftcofb128v1 54.50 54.82 55.37 romulusm 65.75 65.80 65.86 T:tinyjambu128v2 74.24 74.32 74.37 T:tinyjambu192v2 79.15 79.16 79.28 T:tinyjambu256v2 85.69 86.14 86.38 T:isapa128av20 120.97 121.43 121.82 romulust 193.36 193.50 193.64 T:elephant200v2 223.94 224.27 224.99 T:isapk128av20 394.05 394.33 394.91 T:isapa128v20 1366.68 1368.48 1369.14 T:isapk128v20 2081.09 2083.23 2089.80 T:isapxv20 6386.18 6389.80 6446.64 T:elephant176v2 8290.95 8294.71 8295.62 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 5.98 6.04 6.10 T:aes128gcmv1 8.06 8.09 8.12 aes256gcmv1 11.80 11.90 12.18 ascon128av12 14.93 15.02 15.38 ascon80pqv12 15.03 15.09 15.21 ascon128v12 17.03 17.20 17.50 T:xoodyakround3 21.16 21.24 21.52 ascon128abi32v12 27.78 27.98 28.31 ascon128bi32v12 29.23 29.31 29.51 T:schwaemm256128v2 32.98 33.33 33.48 T:schwaemm128128v2 34.35 34.41 34.48 T:grain128aeadv2 38.05 38.22 38.34 T:schwaemm192192v2 38.92 39.09 39.27 T:schwaemm256256v2 40.65 40.83 41.06 romulusn 45.56 45.74 45.86 T:giftcofb128v1 54.56 54.74 54.88 romulusm 57.30 57.38 57.51 T:isapa128av20 65.70 65.71 65.73 T:tinyjambu128v2 74.23 74.24 74.25 T:tinyjambu192v2 75.55 75.77 76.06 romulust 79.13 79.15 79.16 T:tinyjambu256v2 138.84 139.47 139.98 T:isapk128av20 193.35 193.46 193.63 T:elephant200v2 205.24 205.46 205.73 T:isapa128v20 715.16 716.18 716.39 T:isapk128v20 1088.01 1089.30 1092.88 T:isapxv20 6385.60 6390.36 6446.31 T:elephant176v2 8291.06 8291.55 8296.11 T:elephant160v2