VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC cipher candidates on one machine: amd64; Skylake (506e3); 2015 Intel Core i5-6500T; 4 x 2500MHz; thinksky, supercop-20251222

[Page version: 20260221 06:45:32]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 1.18 1.19 1.20 T:aes128gcmv1 1.43 1.44 1.45 aes256gcmv1 7.53 7.55 7.60 ascon128av12 10.93 10.94 10.97 ascon80pqv12 10.92 10.95 10.98 ascon128v12 13.84 14.06 14.07 ascon128abi32v12 15.62 15.67 15.72 T:xoodyakround3 17.48 17.52 17.55 T:schwaemm256128v2 21.03 21.05 21.08 ascon128bi32v12 23.01 23.08 23.14 T:schwaemm192192v2 23.21 23.23 23.25 T:schwaemm256256v2 24.14 24.16 24.21 T:grain128aeadv2 25.54 25.57 25.62 T:schwaemm128128v2 33.57 33.61 33.64 T:giftcofb128v1 38.33 38.38 38.47 romulusn 40.49 40.55 40.63 T:isapa128av20 43.05 43.10 43.22 T:isapa128v20 60.91 61.25 61.44 romulusm 67.89 67.89 67.90 T:tinyjambu128v2 67.81 67.93 68.05 T:isapk128av20 82.72 83.50 83.50 T:tinyjambu192v2 89.29 89.31 89.36 T:tinyjambu256v2 90.37 90.53 90.84 T:isapk128v20 127.76 127.88 127.97 romulust 142.57? 167.59? 192.45? T:isapxv20 171.99 172.04 172.11 T:elephant200v2 6812.99 6813.32 6813.63 T:elephant176v2 7972.94 7973.57 7974.54 T:elephant160v2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 1.03 1.06 1.07 T:aes128gcmv1 1.40 1.43 1.44 aes256gcmv1 7.37 7.39 7.44 ascon128av12 10.90 10.92 10.97 ascon128v12 10.91 10.94 10.97 ascon80pqv12 13.80 13.88 13.91 ascon128abi32v12 15.42 15.46 15.56 T:xoodyakround3 17.49 17.54 17.57 T:schwaemm256128v2 20.82 20.85 20.87 ascon128bi32v12 23.05 23.09 23.16 T:schwaemm192192v2 23.19 23.22 23.24 T:schwaemm256256v2 24.65 24.72 24.73 T:grain128aeadv2 25.54 25.59 25.62 T:schwaemm128128v2 33.66 33.68 33.73 T:giftcofb128v1 38.06 38.08 38.12 romulusn 40.48 40.58 40.64 T:isapa128av20 43.00 43.09 43.20 T:isapa128v20 61.18 61.38 61.50 romulusm 67.89 67.89 67.90 T:tinyjambu128v2 67.90 68.02 68.11 T:isapk128av20 83.38 83.39 83.40 T:tinyjambu192v2 89.28 89.29 89.30 T:tinyjambu256v2 90.33 90.57 90.75 T:isapk128v20 127.80 127.96 128.09 romulust 142.64? 167.67? 192.53? T:isapxv20 172.01 172.05 172.12 T:elephant200v2 6812.96 6813.23 6813.58 T:elephant176v2 7972.49 7973.19 7974.14 T:elephant160v2

Cycles/byte for long+0 forgery 25% 50% 75% aead 1.05 1.06 1.06 T:aes128gcmv1 1.42 1.43 1.44 aes256gcmv1 7.39 7.41 7.43 ascon128av12 10.89 10.94 10.97 ascon128v12 10.92 10.94 10.97 ascon80pqv12 13.82 13.86 13.91 ascon128abi32v12 15.49 15.54 15.60 T:xoodyakround3 17.51 17.54 17.59 T:schwaemm256128v2 20.83 20.84 20.86 ascon128bi32v12 21.52 21.57 21.65 T:isapa128v20 23.05 23.11 23.14 T:schwaemm192192v2 23.21 23.23 23.24 T:schwaemm256256v2 24.65 24.70 24.72 T:grain128aeadv2 25.54 25.58 25.61 T:schwaemm128128v2 27.31 27.36 27.38 T:isapa128av20 33.64 33.69 33.72 T:giftcofb128v1 38.06 38.07 38.11 romulusn 43.74 43.78 44.01 romulust 45.13 45.25 45.41 T:isapk128av20 56.29 56.43 56.82 T:isapk128v20 61.03 61.39 61.61 romulusm 67.89 67.89 67.91 T:tinyjambu128v2 83.38 83.39 83.39 T:tinyjambu192v2 89.35 89.35 89.37 T:tinyjambu256v2 73.51? 98.69? 123.33? T:isapxv20 172.00 172.04 172.10 T:elephant200v2 6813.04 6813.19 6813.65 T:elephant176v2 7972.93 7973.27 7974.02 T:elephant160v2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.80 0.82 0.83 T:aes128gcmv1 0.91 0.93 0.93 aes256gcmv1 7.45 7.49 7.51 ascon128av12 10.93 10.94 10.96 ascon128v12 10.92 10.95 10.98 ascon80pqv12 11.81 11.85 11.87 T:xoodyakround3 13.93 13.97 13.99 ascon128abi32v12 17.37 17.39 17.41 T:schwaemm256128v2 20.70 20.89 21.00 ascon128bi32v12 22.91 22.93 22.99 T:schwaemm192192v2 23.10 23.12 23.15 T:schwaemm256256v2 24.15 24.20 24.24 T:grain128aeadv2 25.44 25.46 25.49 T:schwaemm128128v2 30.45 30.62 30.69 romulusn 32.36 32.38 32.43 T:isapa128v20 33.70 33.74 33.76 T:giftcofb128v1 33.92 33.95 34.01 T:isapa128av20 41.83 42.04 42.15 romulusm 55.51 55.51 55.56 T:tinyjambu128v2 56.44 56.54 56.64 T:isapk128av20 63.40 63.40 63.43 T:tinyjambu192v2 67.39 67.40 67.41 T:tinyjambu256v2 73.38 73.50 73.71 T:isapk128v20 85.76 85.85 86.03 romulust 128.49 128.51 128.54 T:elephant200v2 120.43? 132.90? 145.36? T:isapxv20 5087.71 5087.91 5088.10 T:elephant176v2 5978.21 5978.55 5979.74 T:elephant160v2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.71 0.73 0.74 T:aes128gcmv1 0.89 0.92 0.93 aes256gcmv1 7.36 7.38 7.42 ascon128av12 10.89 10.91 10.93 ascon128v12 10.93 10.96 10.98 ascon80pqv12 11.75 11.78 11.81 T:xoodyakround3 13.83 13.87 13.89 ascon128abi32v12 17.41 17.42 17.48 T:schwaemm256128v2 20.59 20.63 20.89 ascon128bi32v12 22.97 23.00 23.02 T:schwaemm192192v2 23.11 23.13 23.15 T:schwaemm256256v2 24.40 24.46 24.48 T:grain128aeadv2 25.45 25.48 25.50 T:schwaemm128128v2 30.50 30.54 30.64 romulusn 32.32 32.36 32.41 T:isapa128v20 33.78 33.81 33.84 T:giftcofb128v1 33.95 33.97 34.02 T:isapa128av20 41.94 42.12 42.17 romulusm 55.51 55.52 55.52 T:tinyjambu128v2 56.43 56.49 56.65 T:isapk128av20 63.35 63.36 63.37 T:tinyjambu192v2 67.39 67.39 67.40 T:tinyjambu256v2 73.26 73.36 73.56 T:isapk128v20 85.79 85.88 85.94 romulust 128.48 128.51 128.55 T:elephant200v2 120.29? 132.93? 145.57? T:isapxv20 5087.83 5087.95 5088.11 T:elephant176v2 5977.77 5978.15 5979.03 T:elephant160v2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.73 0.74 0.75 T:aes128gcmv1 0.91 0.92 0.92 aes256gcmv1 7.37 7.40 7.43 ascon128av12 10.90 10.93 10.93 ascon128v12 10.91 10.95 10.97 ascon80pqv12 11.76 11.80 11.82 T:xoodyakround3 13.85 13.87 13.92 ascon128abi32v12 17.41 17.44 17.48 T:schwaemm256128v2 20.61 20.71 20.88 ascon128bi32v12 21.57 21.59 21.65 T:isapa128v20 22.96 22.99 23.03 T:schwaemm192192v2 23.11 23.13 23.15 T:schwaemm256256v2 24.39 24.45 24.46 T:grain128aeadv2 25.43 25.46 25.50 T:schwaemm128128v2 27.32 27.34 27.38 T:isapa128av20 30.51 30.54 30.60 romulusn 33.80 33.81 33.85 T:giftcofb128v1 42.04 42.14 42.18 romulusm 43.74 43.88 44.03 romulust 45.13 45.18 45.23 T:isapk128av20 55.51 55.52 55.53 T:tinyjambu128v2 56.27 56.39 56.57 T:isapk128v20 63.36 63.37 63.37 T:tinyjambu192v2 67.40 67.43 67.43 T:tinyjambu256v2 85.96? 98.36? 110.79? T:isapxv20 128.49 128.52 128.55 T:elephant200v2 5087.82 5088.04 5088.21 T:elephant176v2 5978.16 5978.75 5979.28 T:elephant160v2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.41 0.41 0.43 aes256gcmv1 0.41 0.42 0.43 T:aes128gcmv1 7.36 7.38 7.43 ascon128av12 8.07 8.10 8.12 T:xoodyakround3 10.89 10.93 10.95 ascon128v12 10.92 10.96 10.98 ascon80pqv12 13.80 13.83 13.86 ascon128abi32v12 17.24 17.31 17.35 T:schwaemm256128v2 20.35 20.40 20.86 ascon128bi32v12 21.58 21.64 21.68 T:isapa128v20 22.76 22.81 22.89 T:schwaemm192192v2 22.90 22.96 23.00 romulusm 23.00 23.02 23.05 T:schwaemm256256v2 23.04 23.08 23.18 romulusn 24.16 24.19 24.23 T:grain128aeadv2 25.29 25.34 25.38 T:schwaemm128128v2 27.30 27.34 27.37 T:isapa128av20 33.87 33.91 33.97 T:giftcofb128v1 43.13 43.13 43.14 T:tinyjambu128v2 43.29 43.30 43.30 T:tinyjambu192v2 43.52 43.55 43.59 romulust 44.76 44.94 45.08 T:isapk128av20 45.50 45.50 45.50 T:tinyjambu256v2 56.03 56.28 56.53 T:isapk128v20 85.31 85.34 85.39 T:elephant200v2 73.68? 98.45? 123.22? T:isapxv20 3364.07 3364.25 3364.47 T:elephant176v2 3983.52 3984.75 3985.00 T:elephant160v2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.40 0.42 0.43 aes256gcmv1 0.40 0.42 0.43 T:aes128gcmv1 7.31 7.33 7.37 ascon128av12 8.06 8.10 8.12 T:xoodyakround3 10.87 10.89 10.96 ascon128v12 10.93 10.95 10.97 ascon80pqv12 13.77 13.81 13.82 ascon128abi32v12 17.27 17.30 17.34 T:schwaemm256128v2 20.35 20.38 20.44 ascon128bi32v12 21.59 21.65 21.71 T:isapa128v20 22.80 22.83 22.89 T:schwaemm192192v2 22.87 22.91 22.95 romulusm 23.00 23.02 23.03 T:schwaemm256256v2 22.96 23.07 23.14 romulusn 24.09 24.12 24.22 T:grain128aeadv2 25.30 25.34 25.38 T:schwaemm128128v2 27.26 27.31 27.35 T:isapa128av20 33.82 33.88 33.93 T:giftcofb128v1 43.13 43.13 43.14 T:tinyjambu128v2 43.29 43.33 43.35 T:tinyjambu192v2 43.52 43.57 43.71 romulust 44.77 44.87 44.96 T:isapk128av20 45.50 45.50 45.51 T:tinyjambu256v2 56.11 56.22 56.38 T:isapk128v20 85.33 85.35 85.38 T:elephant200v2 73.49? 98.28? 123.13? T:isapxv20 3364.13 3364.39 3364.61 T:elephant176v2 3983.71 3984.52 3985.13 T:elephant160v2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.41 0.42 0.42 aes256gcmv1 0.41 0.42 0.42 T:aes128gcmv1 7.33 7.36 7.42 ascon128av12 8.09 8.12 8.14 T:xoodyakround3 10.84 10.87 10.91 ascon128v12 10.90 10.94 10.95 ascon80pqv12 13.79 13.83 13.84 ascon128abi32v12 17.28 17.31 17.33 T:schwaemm256128v2 20.34 20.38 20.43 ascon128bi32v12 21.57 21.63 21.68 T:isapa128v20 22.80 22.84 22.90 T:schwaemm192192v2 22.89 22.93 22.98 romulusm 23.01 23.02 23.04 T:schwaemm256256v2 22.98 23.08 23.21 romulusn 24.09 24.11 24.23 T:grain128aeadv2 25.31 25.35 25.38 T:schwaemm128128v2 27.29 27.32 27.37 T:isapa128av20 33.85 33.89 33.92 T:giftcofb128v1 43.13 43.13 43.14 T:tinyjambu128v2 43.29 43.33 43.34 T:tinyjambu192v2 43.53 43.58 43.66 romulust 44.81 44.92 45.10 T:isapk128av20 45.50 45.50 45.57 T:tinyjambu256v2 56.08 56.26 56.47 T:isapk128v20 85.32 85.36 85.38 T:elephant200v2 73.47? 98.35? 123.18? T:isapxv20 3364.12 3364.42 3364.62 T:elephant176v2 3983.83 3984.48 3985.14 T:elephant160v2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.96 0.97 0.97 T:aes128gcmv1 1.11 1.11 1.12 aes256gcmv1 7.67 7.69 7.71 ascon128av12 11.11 11.13 11.16 ascon128v12 11.12 11.13 11.15 ascon80pqv12 11.97 11.98 11.99 T:xoodyakround3 14.26 14.27 14.29 ascon128abi32v12 17.95 17.96 17.99 T:schwaemm256128v2 20.78 21.03 21.07 ascon128bi32v12 23.46 23.50 23.55 T:schwaemm192192v2 23.74 23.76 23.78 T:schwaemm256256v2 24.58 24.62 24.65 T:grain128aeadv2 25.80 25.82 25.86 T:schwaemm128128v2 30.89 30.94 31.08 romulusn 34.04 34.06 34.09 T:giftcofb128v1 36.11 36.14 36.17 T:isapa128av20 42.28 42.42 42.48 romulusm 47.46 47.51 47.54 T:isapa128v20 55.93 55.93 55.94 T:tinyjambu128v2 63.85 63.85 63.86 T:tinyjambu192v2 63.99 64.02 64.10 T:isapk128av20 67.88 67.89 67.89 T:tinyjambu256v2 87.09 87.14 87.17 romulust 128.11 128.17 128.24 T:isapk128v20 131.21 131.23 131.25 T:elephant200v2 215.30 215.61 230.74 T:isapxv20 5126.56 5126.75 5126.88 T:elephant176v2 6046.11 6046.50 6046.62 T:elephant160v2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.89 0.89 0.90 T:aes128gcmv1 1.10 1.11 1.11 aes256gcmv1 7.57 7.59 7.62 ascon128av12 11.08 11.10 11.12 ascon128v12 11.11 11.12 11.15 ascon80pqv12 11.86 11.89 11.91 T:xoodyakround3 14.16 14.18 14.20 ascon128abi32v12 17.95 17.98 18.01 T:schwaemm256128v2 20.92 20.94 21.13 ascon128bi32v12 23.49 23.51 23.54 T:schwaemm192192v2 23.72 23.74 23.76 T:schwaemm256256v2 24.82 24.83 24.87 T:grain128aeadv2 25.80 25.83 25.89 T:schwaemm128128v2 30.81 30.85 30.92 romulusn 34.16 34.18 34.19 T:giftcofb128v1 36.12 36.15 36.17 T:isapa128av20 42.25 42.35 42.45 romulusm 47.46 47.50 47.51 T:isapa128v20 55.94 55.94 55.94 T:tinyjambu128v2 63.81 63.82 63.82 T:tinyjambu192v2 63.95 64.00 64.07 T:isapk128av20 67.88 67.89 67.89 T:tinyjambu256v2 87.10 87.18 87.32 romulust 128.14 128.23 128.32 T:isapk128v20 131.21 131.23 131.27 T:elephant200v2 215.15 215.62 230.99 T:isapxv20 5126.57 5126.76 5127.09 T:elephant176v2 6045.88 6046.53 6046.88 T:elephant160v2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.88 0.89 0.89 T:aes128gcmv1 1.10 1.10 1.11 aes256gcmv1 7.57 7.58 7.62 ascon128av12 11.09 11.10 11.11 ascon128v12 11.11 11.12 11.14 ascon80pqv12 11.91 11.93 11.94 T:xoodyakround3 14.15 14.16 14.18 ascon128abi32v12 17.97 17.98 18.00 T:schwaemm256128v2 20.91 20.92 20.94 ascon128bi32v12 23.50 23.53 23.56 T:schwaemm192192v2 23.73 23.74 23.76 T:schwaemm256256v2 24.81 24.85 24.88 T:grain128aeadv2 25.82 25.84 25.87 T:schwaemm128128v2 28.59 28.61 28.62 T:isapa128av20 29.28 29.31 29.34 T:isapa128v20 30.80 30.86 30.91 romulusn 34.13 34.17 34.21 T:giftcofb128v1 42.28 42.48 42.51 romulusm 44.96 45.02 45.16 romulust 49.43 49.46 49.51 T:isapk128av20 55.93 55.94 55.95 T:tinyjambu128v2 63.81 63.82 63.83 T:tinyjambu192v2 67.89 67.92 67.93 T:tinyjambu256v2 84.37 84.52 84.65 T:isapk128v20 131.21 131.22 131.24 T:elephant200v2 140.46? 140.69? 156.09? T:isapxv20 5126.52 5126.83 5127.10 T:elephant176v2 6046.07 6046.24 6046.65 T:elephant160v2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 5.91 5.95 6.00 T:aes128gcmv1 7.95 7.99 8.22 aes256gcmv1 12.14 12.30 12.70 ascon128av12 14.96 15.26 15.66 ascon128v12 15.20 15.45 15.61 ascon80pqv12 17.41 17.48 17.66 T:xoodyakround3 21.33 21.48 21.99 ascon128abi32v12 27.99 28.25 28.50 ascon128bi32v12 29.19 29.30 29.52 T:schwaemm256128v2 33.34 33.46 33.80 T:schwaemm128128v2 34.20 34.23 34.28 T:grain128aeadv2 37.08 37.20 37.34 romulusn 37.38 37.55 37.78 T:schwaemm256256v2 38.03 38.24 38.66 T:schwaemm192192v2 41.45 41.66 41.96 T:giftcofb128v1 50.13 50.21 50.62 romulusm 65.60 65.70 65.73 T:tinyjambu128v2 74.23 74.26 74.29 T:tinyjambu192v2 79.06 79.17 79.26 T:tinyjambu256v2 85.73 86.01 86.39 T:isapa128av20 117.35 117.73 118.02 romulust 185.65 186.14 186.50 T:elephant200v2 221.05 222.64 223.23 T:isapk128av20 393.86 394.18 394.87 T:isapa128v20 1367.55 1368.88 1370.26 T:isapk128v20 2084.27? 2090.67? 2457.91? T:isapxv20 6384.55 6386.14 6387.55 T:elephant176v2 8097.23 8098.84 8099.56 T:elephant160v2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 5.99 6.04 6.15 T:aes128gcmv1 8.15 8.19 8.24 aes256gcmv1 12.01 12.30 12.83 ascon128av12 15.05 15.27 15.40 ascon80pqv12 15.09 15.33 15.59 ascon128v12 17.37 17.49 17.66 T:xoodyakround3 21.22 21.49 21.70 ascon128abi32v12 27.83 28.09 28.29 ascon128bi32v12 29.09 29.20 29.42 T:schwaemm256128v2 33.20 33.41 33.54 T:schwaemm128128v2 34.33 34.38 34.45 T:grain128aeadv2 37.08 37.14 37.32 romulusn 37.43 37.56 37.73 T:schwaemm256256v2 37.86 38.17 38.43 T:schwaemm192192v2 42.33 42.40 42.63 T:giftcofb128v1 51.48 51.71 52.12 romulusm 65.66 65.70 65.73 T:tinyjambu128v2 74.31 74.33 74.35 T:tinyjambu192v2 79.17 79.27 79.29 T:tinyjambu256v2 85.91 86.02 86.35 T:isapa128av20 117.39 117.52 117.63 romulust 185.46 185.54 185.88 T:elephant200v2 222.17 222.47 223.62 T:isapk128av20 394.11 394.57 395.01 T:isapa128v20 1368.40 1369.31 1372.04 T:isapk128v20 2082.34? 2089.38? 2459.36? T:isapxv20 6384.27 6385.18 6385.61 T:elephant176v2 8097.30 8098.62 8101.80 T:elephant160v2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 5.97 6.00 6.07 T:aes128gcmv1 8.14 8.16 8.20 aes256gcmv1 11.91 12.00 12.20 ascon128av12 14.86 15.09 15.36 ascon80pqv12 15.02 15.11 15.25 ascon128v12 17.30 17.41 17.48 T:xoodyakround3 21.26 21.34 21.50 ascon128abi32v12 27.77 27.87 28.36 ascon128bi32v12 29.05 29.17 29.26 T:schwaemm256128v2 33.09 33.41 33.52 T:schwaemm128128v2 34.34 34.38 34.41 T:grain128aeadv2 36.89 37.02 37.15 romulusn 37.45 37.52 37.57 T:schwaemm256256v2 37.84 38.05 38.22 T:schwaemm192192v2 42.29 42.48 42.58 T:giftcofb128v1 51.48 51.67 51.95 romulusm 57.23 57.33 57.59 T:isapa128av20 65.65 65.69 65.71 T:tinyjambu128v2 73.56 73.65 73.96 romulust 74.27 74.30 74.32 T:tinyjambu192v2 79.14 79.16 79.17 T:tinyjambu256v2 137.74 137.99 138.80 T:isapk128av20 185.53 185.61 185.84 T:elephant200v2 205.23 205.66 206.21 T:isapa128v20 715.78 716.99 718.40 T:isapk128v20 1089.91? 1095.17? 1463.72? T:isapxv20 6384.52 6385.49 6386.38 T:elephant176v2 8097.65 8099.64 8100.98 T:elephant160v2