VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Skylake (506e3); 2015 Intel Xeon E3-1220 v5; 4 x 3000MHz; samba, supercop-20251222

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.17 1.19 1.20 T:aes128gcmv1 1.63 1.64 1.64 aes256gcmv1 7.41 7.44 7.46 ascon128av12 10.85 11.05 11.08 ascon128v12 11.00 11.07 11.11 ascon80pqv12 13.86 14.04 14.08 ascon128abi32v12 16.30 16.34 16.37 T:xoodyakround3 17.84 17.89 17.93 T:schwaemm256128v2 21.04 21.06 21.09 ascon128bi32v12 22.45 22.73 23.16 T:schwaemm256256v2 23.44 23.60 23.70 T:schwaemm192192v2 24.74 24.77 24.87 T:grain128aeadv2 25.72 25.75 25.80 T:schwaemm128128v2 37.47 37.51 37.55 romulusn 40.07 40.43 40.50 T:isapa128av20 41.29 41.35 41.38 T:giftcofb128v1 41.89 41.98 42.13 T:isapa128v20 60.67 60.73 60.84 romulusm 60.77 60.82 60.84 T:tinyjambu128v2 68.27 68.37 68.52 T:isapk128av20 72.75 72.80 72.83 T:tinyjambu192v2 79.03 79.06 79.08 T:tinyjambu256v2 90.35 90.42 90.58 T:isapk128v20 131.82 131.87 131.92 romulust 146.44 146.52 146.59 T:elephant200v2 188.92 189.41 189.80 T:isapxv20 7524.61 7525.67 7526.49 T:elephant176v2 8154.09 8154.48 8155.03 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.03 1.06 1.06 T:aes128gcmv1 1.56 1.57 1.58 aes256gcmv1 7.42 7.45 7.48 ascon128av12 10.91 10.95 10.97 ascon80pqv12 10.96 10.99 11.02 ascon128v12 13.77 13.87 13.90 ascon128abi32v12 15.90 15.96 15.98 T:xoodyakround3 17.87 17.96 18.11 T:schwaemm256128v2 20.82 20.84 20.87 ascon128bi32v12 22.47 22.73 23.14 T:schwaemm256256v2 23.36 23.46 23.51 T:schwaemm192192v2 25.36 25.38 25.49 T:grain128aeadv2 25.73 25.79 25.84 T:schwaemm128128v2 37.48 37.53 37.56 romulusn 40.06 40.12 40.27 T:isapa128av20 41.38 41.46 41.49 T:giftcofb128v1 41.79 41.87 42.03 T:isapa128v20 60.62 60.67 60.71 T:tinyjambu128v2 60.68 60.75 60.82 romulusm 68.23 68.28 68.33 T:isapk128av20 72.36 72.80 72.87 T:tinyjambu192v2 78.99 79.01 79.02 T:tinyjambu256v2 90.38 90.45 90.50 T:isapk128v20 131.82 131.88 132.01 romulust 146.49 146.56 146.67 T:elephant200v2 189.06 189.60 189.75 T:isapxv20 7525.20 7525.93 7526.34 T:elephant176v2 8154.10 8154.65 8155.00 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.05 1.06 1.06 T:aes128gcmv1 1.56 1.56 1.57 aes256gcmv1 7.43 7.46 7.48 ascon128av12 10.89 10.93 10.95 ascon80pqv12 10.96 11.00 11.02 ascon128v12 13.75 13.84 13.92 ascon128abi32v12 15.96 15.99 16.01 T:xoodyakround3 17.86 17.95 18.11 T:schwaemm256128v2 20.49 20.57 20.62 T:isapa128v20 20.83 20.84 20.86 ascon128bi32v12 22.44 22.72 23.15 T:schwaemm256256v2 23.45 23.50 23.56 T:schwaemm192192v2 25.34 25.37 25.49 T:grain128aeadv2 25.74 25.80 25.88 T:schwaemm128128v2 27.28 27.32 27.36 T:isapa128av20 37.47 37.51 37.58 romulusn 41.42 41.47 41.51 T:giftcofb128v1 45.05 45.08 45.12 romulust 45.24 45.26 45.32 T:isapk128av20 56.56 56.64 56.77 T:isapk128v20 60.59 60.67 60.72 T:tinyjambu128v2 60.68 60.72 60.80 romulusm 72.38 72.41 72.95 T:tinyjambu192v2 78.97 79.00 79.04 T:tinyjambu256v2 111.04 111.08 111.15 T:isapxv20 146.52 146.58 146.73 T:elephant200v2 7524.89 7525.37 7525.73 T:elephant176v2 8154.13 8154.69 8155.02 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.79 0.80 0.81 T:aes128gcmv1 1.01 1.01 1.02 aes256gcmv1 7.42 7.44 7.47 ascon128av12 10.84 10.86 10.88 ascon128v12 10.91 10.94 10.97 ascon80pqv12 12.29 12.32 12.34 T:xoodyakround3 13.93 13.97 13.99 ascon128abi32v12 17.70 17.74 17.82 T:schwaemm256128v2 20.68 20.79 20.92 ascon128bi32v12 22.37 22.64 23.05 T:schwaemm256256v2 23.30 23.37 23.43 T:schwaemm192192v2 24.74 24.77 24.88 T:grain128aeadv2 25.60 25.66 25.71 T:schwaemm128128v2 30.42 30.44 30.49 romulusn 31.00 31.04 31.08 T:isapa128v20 33.70 33.75 33.88 T:isapa128av20 41.39 41.45 41.47 T:giftcofb128v1 42.03 42.07 42.12 romulusm 49.62 49.72 49.77 T:tinyjambu128v2 56.67 56.72 56.76 T:isapk128av20 57.04 57.06 57.09 T:tinyjambu192v2 59.77 59.79 59.82 T:tinyjambu256v2 73.42 73.47 73.55 T:isapk128v20 88.56 88.65 88.81 romulust 110.23 110.29 110.32 T:elephant200v2 150.58 150.82 150.91 T:isapxv20 5620.54 5620.92 5621.27 T:elephant176v2 6114.75 6115.22 6115.42 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.70 0.73 0.75 T:aes128gcmv1 0.96 0.98 0.99 aes256gcmv1 7.25 7.27 7.52 ascon128av12 10.86 10.89 10.91 ascon80pqv12 10.92 10.96 10.99 ascon128v12 12.11 12.13 12.14 T:xoodyakround3 13.81 13.87 13.92 ascon128abi32v12 17.69 17.75 17.89 T:schwaemm256128v2 20.61 20.71 20.86 ascon128bi32v12 22.38 22.63 23.02 T:schwaemm256256v2 23.25 23.29 23.35 T:schwaemm192192v2 25.14 25.17 25.21 T:grain128aeadv2 25.64 25.69 25.71 T:schwaemm128128v2 30.40 30.43 30.54 romulusn 30.99 31.03 31.13 T:isapa128v20 33.69 33.76 33.80 T:isapa128av20 41.46 41.52 41.54 T:giftcofb128v1 42.00 42.06 42.10 romulusm 49.50 49.54 49.66 T:tinyjambu128v2 56.65 56.72 56.77 T:isapk128av20 56.85 57.05 57.17 T:tinyjambu192v2 59.75 59.77 59.78 T:tinyjambu256v2 73.41 73.46 73.52 T:isapk128v20 88.50 88.65 89.18 romulust 110.25 110.36 110.46 T:elephant200v2 150.64 150.77 150.93 T:isapxv20 5620.56 5620.95 5621.20 T:elephant176v2 6114.34 6115.04 6115.19 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.73 0.73 0.75 T:aes128gcmv1 0.98 0.98 0.98 aes256gcmv1 7.24 7.26 7.46 ascon128av12 10.87 10.90 10.93 ascon80pqv12 10.94 10.96 11.00 ascon128v12 12.11 12.13 12.15 T:xoodyakround3 13.82 13.85 13.88 ascon128abi32v12 17.70 17.84 17.93 T:schwaemm256128v2 20.32 20.35 20.39 T:isapa128v20 20.59 20.70 20.91 ascon128bi32v12 22.38 22.63 23.05 T:schwaemm256256v2 23.23 23.31 23.40 T:schwaemm192192v2 25.12 25.17 25.20 T:grain128aeadv2 25.65 25.67 25.73 T:schwaemm128128v2 27.23 27.26 27.28 T:isapa128av20 30.40 30.44 30.56 romulusn 41.47 41.49 41.54 T:giftcofb128v1 42.04 42.07 42.14 romulusm 45.05 45.10 45.24 romulust 45.16 45.19 45.22 T:isapk128av20 49.52 49.64 49.71 T:tinyjambu128v2 56.53 56.57 56.63 T:isapk128v20 56.85 57.03 57.16 T:tinyjambu192v2 59.75 59.77 59.78 T:tinyjambu256v2 110.23 110.29 110.33 T:elephant200v2 111.55 111.66 111.70 T:isapxv20 5620.21 5621.12 5621.36 T:elephant176v2 6114.53 6115.25 6115.71 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.39 0.39 0.40 aes256gcmv1 0.40 0.42 0.44 T:aes128gcmv1 7.41 7.44 7.48 ascon128av12 8.29 8.35 8.41 T:xoodyakround3 10.86 10.90 10.92 ascon128v12 10.90 10.94 10.96 ascon80pqv12 13.80 13.82 13.85 ascon128abi32v12 17.52 17.58 17.64 T:schwaemm256128v2 20.04 20.12 20.19 T:isapa128v20 20.33 20.69 20.90 ascon128bi32v12 22.26 22.52 22.93 T:schwaemm256256v2 23.15 23.24 23.41 T:schwaemm192192v2 23.27 23.33 23.46 romulusn 23.33 23.37 23.44 romulusm 24.75 24.78 24.87 T:grain128aeadv2 25.49 25.52 25.59 T:schwaemm128128v2 27.26 27.30 27.34 T:isapa128av20 38.50 38.59 38.75 T:tinyjambu128v2 40.47 40.48 40.51 T:tinyjambu256v2 41.30 41.31 41.32 T:tinyjambu192v2 41.48 41.52 41.59 T:giftcofb128v1 44.88 44.92 44.98 romulust 45.08 45.21 45.34 T:isapk128av20 56.41 56.48 56.58 T:isapk128v20 74.47 74.50 74.56 T:elephant200v2 111.92 112.21 112.25 T:isapxv20 3715.80 3717.04 3717.66 T:elephant176v2 4074.68 4075.10 4076.35 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.39 0.40 0.41 aes256gcmv1 0.39 0.41 0.42 T:aes128gcmv1 7.02 7.05 7.11 ascon128av12 8.31 8.34 8.36 T:xoodyakround3 10.81 10.84 10.86 ascon80pqv12 10.88 10.90 10.93 ascon128v12 13.78 13.82 13.83 ascon128abi32v12 17.52 17.55 17.67 T:schwaemm256128v2 20.10 20.17 20.20 T:isapa128v20 20.32 20.34 20.41 ascon128bi32v12 22.25 22.53 22.92 T:schwaemm256256v2 23.09 23.16 23.23 T:schwaemm192192v2 23.29 23.34 23.37 romulusm 23.25 23.34 23.47 romulusn 24.83 24.90 24.92 T:grain128aeadv2 25.45 25.53 25.57 T:schwaemm128128v2 27.25 27.32 27.35 T:isapa128av20 38.41 38.56 38.71 T:tinyjambu128v2 40.49 40.50 40.51 T:tinyjambu256v2 41.30 41.32 41.33 T:tinyjambu192v2 41.49 41.53 41.57 T:giftcofb128v1 44.86 44.94 44.98 romulust 45.11 45.16 45.25 T:isapk128av20 56.43 56.56 56.66 T:isapk128v20 74.47 74.51 74.56 T:elephant200v2 112.16 112.25 112.31 T:isapxv20 3715.44 3717.06 3717.37 T:elephant176v2 4074.59 4075.12 4076.18 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.39 0.40 0.40 aes256gcmv1 0.40 0.41 0.42 T:aes128gcmv1 7.04 7.06 7.50 ascon128av12 8.33 8.37 8.39 T:xoodyakround3 10.81 10.83 10.86 ascon80pqv12 10.88 10.91 10.94 ascon128v12 13.79 13.82 13.84 ascon128abi32v12 17.56 17.62 17.67 T:schwaemm256128v2 20.05 20.11 20.16 T:isapa128v20 20.35 20.40 20.44 ascon128bi32v12 22.25 22.53 22.94 T:schwaemm256256v2 23.06 23.13 23.22 T:schwaemm192192v2 23.29 23.34 23.47 romulusn 23.33 23.36 23.39 romulusm 24.90 24.92 24.94 T:grain128aeadv2 25.49 25.58 25.61 T:schwaemm128128v2 27.28 27.32 27.35 T:isapa128av20 38.35 38.51 38.67 T:tinyjambu128v2 40.46 40.48 40.50 T:tinyjambu256v2 41.30 41.31 41.32 T:tinyjambu192v2 41.47 41.53 41.61 T:giftcofb128v1 44.87 44.90 44.93 romulust 45.10 45.13 45.23 T:isapk128av20 56.44 56.54 56.59 T:isapk128v20 74.45 74.50 74.55 T:elephant200v2 112.20 112.25 112.33 T:isapxv20 3715.30 3716.96 3717.59 T:elephant176v2 4074.84 4075.09 4076.22 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.95 0.96 0.97 T:aes128gcmv1 1.19 1.19 1.20 aes256gcmv1 7.62 7.64 7.65 ascon128av12 11.05 11.06 11.08 ascon128v12 11.13 11.14 11.19 ascon80pqv12 12.43 12.45 12.47 T:xoodyakround3 14.26 14.29 14.30 ascon128abi32v12 18.29 18.32 18.36 T:schwaemm256128v2 21.01 21.05 21.17 ascon128bi32v12 23.02 23.26 23.62 T:schwaemm256256v2 23.79 23.87 23.95 T:schwaemm192192v2 25.18 25.19 25.27 T:grain128aeadv2 26.00 26.01 26.06 T:schwaemm128128v2 30.83 30.85 30.92 romulusn 36.22 36.23 36.29 T:isapa128av20 41.81 41.85 41.90 T:giftcofb128v1 42.48 42.50 42.55 romulusm 45.76 45.78 45.81 T:isapa128v20 50.03 50.15 50.19 T:tinyjambu128v2 57.49 57.50 57.52 T:tinyjambu192v2 60.24 60.26 60.27 T:tinyjambu256v2 63.40 63.43 63.47 T:isapk128av20 89.83 89.94 90.03 romulust 112.68 112.72 112.77 T:elephant200v2 127.31 127.35 127.42 T:isapk128v20 246.14 246.20 246.45 T:isapxv20 5663.33 5663.58 5664.02 T:elephant176v2 6183.72 6184.22 6184.37 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.88 0.89 0.90 T:aes128gcmv1 1.16 1.16 1.17 aes256gcmv1 7.45 7.46 7.48 ascon128av12 11.05 11.07 11.11 ascon80pqv12 11.12 11.14 11.16 ascon128v12 12.25 12.27 12.29 T:xoodyakround3 14.15 14.17 14.21 ascon128abi32v12 18.25 18.29 18.44 T:schwaemm256128v2 20.91 20.91 20.93 ascon128bi32v12 23.06 23.27 23.62 T:schwaemm256256v2 23.81 23.84 23.88 T:schwaemm192192v2 25.55 25.56 25.63 T:grain128aeadv2 26.00 26.02 26.07 T:schwaemm128128v2 30.81 30.86 30.94 romulusn 36.20 36.26 36.41 T:isapa128av20 41.88 41.92 41.97 T:giftcofb128v1 42.55 42.59 42.61 romulusm 45.73 45.78 45.88 T:isapa128v20 49.93 50.00 50.10 T:tinyjambu128v2 57.33 57.52 57.63 T:tinyjambu192v2 60.20 60.21 60.22 T:tinyjambu256v2 63.45 63.47 63.53 T:isapk128av20 89.90 89.96 90.29 romulust 112.67 112.69 112.72 T:elephant200v2 127.38 127.41 127.44 T:isapk128v20 246.32 246.38 246.41 T:isapxv20 5663.33 5663.77 5664.11 T:elephant176v2 6183.85 6184.13 6184.33 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.88 0.89 0.89 T:aes128gcmv1 1.16 1.16 1.16 aes256gcmv1 7.45 7.47 7.64 ascon128av12 11.05 11.06 11.09 ascon80pqv12 11.12 11.13 11.15 ascon128v12 12.28 12.29 12.30 T:xoodyakround3 14.15 14.18 14.21 ascon128abi32v12 18.29 18.37 18.42 T:schwaemm256128v2 20.91 20.92 21.09 ascon128bi32v12 23.02 23.26 23.63 T:schwaemm256256v2 23.81 23.85 23.89 T:schwaemm192192v2 25.53 25.57 25.62 T:grain128aeadv2 26.05 26.06 26.08 T:schwaemm128128v2 27.94 27.96 28.00 T:isapa128v20 28.68 28.69 28.74 T:isapa128av20 30.84 30.87 30.93 romulusn 41.90 41.92 41.94 T:giftcofb128v1 42.54 42.58 42.62 romulusm 46.36 46.43 46.59 romulust 49.12 49.15 49.18 T:isapk128av20 49.96 49.99 50.07 T:tinyjambu128v2 57.33 57.35 57.51 T:tinyjambu192v2 60.20 60.22 60.24 T:tinyjambu256v2 84.18 84.22 84.29 T:isapk128v20 112.64 112.70 112.72 T:elephant200v2 160.35 160.38 160.51 T:isapxv20 5663.30 5663.48 5663.90 T:elephant176v2 6184.06 6184.25 6184.48 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 5.94 5.98 6.05 T:aes128gcmv1 7.40 7.48 7.50 aes256gcmv1 11.99 12.09 12.49 ascon128av12 15.16 15.31 15.47 ascon80pqv12 15.22 15.47 15.82 ascon128v12 17.93 18.09 18.52 T:xoodyakround3 21.23 21.53 22.02 ascon128abi32v12 27.62 28.19 28.38 ascon128bi32v12 29.68 30.02 30.55 T:schwaemm256128v2 33.49 33.71 34.10 T:schwaemm128128v2 34.77 34.84 34.95 T:grain128aeadv2 37.11 37.25 37.47 T:schwaemm256256v2 38.65 38.91 39.11 T:schwaemm192192v2 40.36 40.66 40.92 romulusn 51.07 51.20 51.35 T:giftcofb128v1 52.71 53.08 53.35 romulusm 59.06 59.19 59.39 T:tinyjambu128v2 67.71 67.84 68.06 T:tinyjambu192v2 70.67 70.91 71.12 T:tinyjambu256v2 91.84 94.23 94.29 T:isapa128av20 121.27 121.45 121.80 romulust 161.12 161.57 161.89 T:elephant200v2 204.77 205.00 205.43 T:isapk128av20 382.40 382.84 383.70 T:isapa128v20 1349.12 1349.44 1350.16 T:isapk128v20 2414.87 2416.31 2422.24 T:isapxv20 7052.78 7055.34 7056.84 T:elephant176v2 8284.09 8285.09 8286.62 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 6.03 6.06 6.14 T:aes128gcmv1 7.16 7.20 7.28 aes256gcmv1 12.02 12.25 12.70 ascon128av12 15.09 15.29 15.48 ascon80pqv12 15.16 15.45 15.84 ascon128v12 17.95 18.06 18.43 T:xoodyakround3 21.16 21.30 21.80 ascon128abi32v12 27.84 27.92 28.49 ascon128bi32v12 29.82 30.07 30.34 T:schwaemm256128v2 33.33 33.54 33.81 T:schwaemm128128v2 34.99 35.09 35.15 T:grain128aeadv2 37.06 37.32 37.52 T:schwaemm256256v2 38.51 38.86 39.31 T:schwaemm192192v2 40.55 40.91 41.12 romulusn 50.88 51.29 51.70 T:giftcofb128v1 54.51 54.76 55.08 romulusm 58.86 58.96 59.08 T:tinyjambu128v2 67.86 67.91 68.09 T:tinyjambu192v2 70.64 70.80 70.90 T:tinyjambu256v2 93.90 94.09 94.25 T:isapa128av20 121.16 121.30 121.55 romulust 161.24 161.49 162.27 T:elephant200v2 205.70 206.05 206.45 T:isapk128av20 382.86 383.45 384.35 T:isapa128v20 1350.88 1351.34 1352.16 T:isapk128v20 2415.45 2416.28 2420.42 T:isapxv20 7053.16 7053.79 7057.69 T:elephant176v2 8284.80 8285.82 8287.73 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 6.02 6.05 6.14 T:aes128gcmv1 7.15 7.18 7.20 aes256gcmv1 11.88 11.98 12.14 ascon128av12 15.03 15.16 15.29 ascon128v12 15.13 15.19 15.48 ascon80pqv12 17.94 18.17 18.44 T:xoodyakround3 21.16 21.38 21.51 ascon128abi32v12 27.73 27.86 28.25 ascon128bi32v12 29.73 29.97 30.16 T:schwaemm256128v2 33.30 33.48 33.78 T:schwaemm128128v2 35.07 35.12 35.22 T:grain128aeadv2 36.96 37.34 37.44 T:schwaemm256256v2 38.42 38.55 38.96 T:schwaemm192192v2 40.51 40.70 40.98 romulusn 51.13 51.21 51.37 T:giftcofb128v1 54.45 54.52 54.91 romulusm 58.80 59.00 59.12 T:tinyjambu128v2 60.44 60.69 60.96 T:isapa128av20 67.68 67.77 67.88 T:tinyjambu192v2 70.59 70.64 70.73 T:tinyjambu256v2 75.67 75.84 76.13 romulust 128.66 129.20 129.52 T:isapk128av20 161.19 162.12 162.37 T:elephant200v2 201.24 201.55 201.93 T:isapa128v20 706.98 707.40 707.91 T:isapk128v20 1262.55 1262.89 1263.60 T:isapxv20 7053.37 7055.27 7058.71 T:elephant176v2 8283.56 8284.82 8287.66 T:elephant160v2